Abstract: A method and apparatus for securely transferring an encrypted-data key and a medium key, from a media storage such as a DVD disk to an output device in a computer system, using a randomly generated first secure transfer key generated by a disk drive of the computer system, the first key having a uniqueness factor derived from a phase locked loop circuitry. The first secure transfer key is combined with an output key stored in the output device forming a second secure transfer key. The second secure transfer key is used to encrypt the data key and the medium key to form a third secure transfer key. The third secure transfer key is passed to the output device where the data key and the medium key are decrypted. The data key and the medium key are then used by the output device to decrypt encrypted program data from the disk.

Abstract: A method for permitting access to secured computer resources based upon a two-piece user verification process. In the disclosed embodiment, the user verification process is carried out during a secure power-up procedure. At some point during the secure power-up procedure, the computer user is required to provide an external token or smart card to the computer system. The token or smart card is used to store an authentication value(s) required to enable secured resources. The computer user is then required to enter a plain text user password. Separate passwords can be used to enable various portions of the computer system. Once entered, a one-way hash function is performed on the user password. The resulting hash value is compared to an authentication value (token value) downloaded from the token. If the two values match, the power-on sequence is completed and access to the computer system and/or secured computer resources is permitted.

Abstract: In a computer system having a receiving computer and a source computer, a method for the remote flashing of the BIOS in the receiving computer including the steps of transferring the flash information from the source computer to the receiving computer, with the flash information including the flash code, the flash code instructions and an encrypted digital signature corresponding to the flash code. The receiving computer is operably placed in a secure mode. A hash value corresponding to the flash information is calculated, and the hash value from the flash information is decrypted. The flash code is validated by comparing the decrypted hash value of the flash information to the calculated hash value, and if validated, the BIOS if flashed with the new flash code.

Abstract: A computer system that automatically and securely executes registered programs immediately prior to a transition to a reduced energy consumption state. A registrar table specifying registered programs and a secure modification detection value for each registered program are maintained in system management mode memory or other secure memory space in the computer system. A system management interrupt is generated following a request to remove power from the computer system or the occurrence of an event that triggers an energy saving mode. The system management interrupt handler routine then generates a current modification detection value for each registered program. The current modification detection values are compared with the secure modification detection values. Execution of a registered program is permitted if the values match. After all registered programs have been executed, the computer system automatically powers down or enters an energy saving mode.

Abstract: An apparatus and method for finding objectionable material contained within electronic files is presented. The apparatus consists of a computer system that is provided with a computer, a video display, a buffer memory, and at least one electronic file storage device capable of storing electronic files. Each of the electronic files is stored according to an operating system which incorporates a file name and a file name suffix. The method includes provisions for a real type property, a claimed type property, and a result type property for each electronic file. All of the electronic files are located on each of said storage devices for checking. During the checking process, for example, each file is checked to determine the file's real type property. If the checked file is determined to be a graphics file, then the file will be identified as a graphics file. If the file is not a graphics file, (i.e., it is a text file) then it is interrogated in order to determine if the text contains objectionable language.

Abstract: A method and apparatus for providing secure and private keyboard communications in a computer system. A request for private keyboard communications causes the computer's processor to enter into system management mode by generating an system management interrupt. A secure system management interrupt handler then directs specialized hardware to intercept and divert keyboard interrupts, such that data entered via the keyboard is only communicated to a non-readable black box security device that controls access to protected system resources. Keyboard data is thereby protected from interception by malicious software.

Abstract: A secure start-up system for a computer enables a flash memory to be reset in a secured way. Various operations are carried out to make sure that the reset is an authorized one, and to avoid unauthorized, e.g. virus, infiltration. These operations include multiple tests to avoid the probability of the reset being unauthorized. Any one or more than one of the following can be used. Flashing is only authorized when a special flash enable bit is set in the non-volatile memory. This flash enable bit is reset during every startup cycle. Flashing is only authorized from a cold boot as opposed from a warm boot. This minimizes the possibility of a computer routine authorizing flashing by a software reset. Flashing is only authorized from a floppy. This prevents a virus from writing the flashing routine to the boot sector of a non-removable disc. The user is warned prior to flashing, and asked to confirm.