Abstract: A BIOS module provisioning sequence verification system includes a BIOS subsystem coupled to a TPM and a BIOS storage system including a plurality of firmware volumes. The BIOS subsystem provides a plurality of BIOS modules in a BIOS module provisioning sequence using the plurality of firmware volumes and, for each of the plurality of BIOS modules when that BIOS module is provided during the BIOS module provisioning sequence: retrieves a BIOS module identifier associated with that BIOS module, and updates BIOS module provisioning sequence information using that BIOS module identifier. Following the provisioning of the BIOS modules in the BIOS module provisioning sequence, the BIOS subsystem provides the BIOS module provisioning sequence information to the TPM, with the BIOS module provisioning sequence information configured to be compared to BIOS module provisioning sequence verification information to verify the BIOS module provisioning sequence.

Abstract: A UEFI variable storage system includes a UEFI variable services subsystem coupled to UEFI variable sources, a trusted UEFI variable storage subsystem, and an untrusted UEFI variable storage subsystem. If the UEFI variable services subsystem receives a first UEFI variable during a first UEFI initialization process from a first UEFI variable source and determines that the first UEFI initialization process has not reached an untrusted UEFI variable source point, it stores the first UEFI variable in the trusted UEFI variable storage subsystem. If the UEFI variable services subsystem receives a second UEFI variable during the first UEFI initialization process from a second UEFI variable source and determines that the first UEFI initialization process has reached the untrusted UEFI variable source point, it stores the second UEFI variable in the untrusted UEFI variable storage subsystem.

Abstract: A BIOS module provisioning sequence verification system includes a BIOS subsystem coupled to a TPM and a BIOS storage system including a plurality of firmware volumes. The BIOS subsystem provides a plurality of BIOS modules in a BIOS module provisioning sequence using the plurality of firmware volumes and, for each of the plurality of BIOS modules when that BIOS module is provided during the BIOS module provisioning sequence: retrieves a BIOS module identifier associated with that BIOS module, and updates BIOS module provisioning sequence information using that BIOS module identifier. Following the provisioning of the BIOS modules in the BIOS module provisioning sequence, the BIOS subsystem provides the BIOS module provisioning sequence information to the TPM, with the BIOS module provisioning sequence information configured to be compared to BIOS module provisioning sequence verification information to verify the BIOS module provisioning sequence.

Abstract: A semiconductor device includes a semiconductor substrate, a plurality of isolation structures on the semiconductor substrate, and a plurality of blocking structures disposed directly over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures.

Abstract: A semiconductor device includes a semiconductor substrate, a plurality of isolation structures on the semiconductor substrate, and a plurality of blocking structures disposed directly over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures.

Abstract: A network initialization communication storage system includes a host device coupled to a storage system and an initialization issue analysis system via a network. The host device includes an initialization subsystem coupled to each of a plurality of ports. During network initialization of the host device via the storage system, the initialization subsystem identifies network initialization communications transmitted via the port(s) and the network, filters the network initialization communications to remove a subset of network initialization information and provide filtered network initialization communications, and transmits the filtered network initialization communications for storage in a remote access controller subsystem in the host device.

Abstract: A method may include, in an information handling system comprising a basic input/output system (BIOS) embodied in non-transitory computer-readable media and configured to be the first code executed by a processor when the information handling system is booted and configured to initialize components of the information handling system into a known state: receiving an indication of installation of a protocol by a producer driver of a plurality of protocol drivers integral to the BIOS, storing metadata regarding the protocol in a protocol database of the BIOS, receiving a request to consume the protocol by a consumer driver of the plurality of protocol drivers, and obfuscating the metadata stored in the protocol database from the consumer driver to prevent the consumer driver from uninstalling the protocol.

Abstract: A network initialization monitoring system includes a host device coupled to a storage system and a monitoring system via a network, and including an initialization subsystem coupled to ports. During network initialization of the host device via the storage system, the initialization subsystem provides a first instance of a communication protocol for monitored port(s), and provides a second instance of the communication protocol for a monitoring port. During the network initialization of the host device via the storage system, the first instance of the communication protocol provided for each monitored port provides copies of network initialization communications transmitted via that monitored port and the network to the second instance of the communication protocol provided for the monitoring port, and the second instance of the communication protocol provided for the monitoring port provides the copies of the network initialization communications to the monitoring system.

Abstract: A protocol security system includes a protocol producer driver stored in a first memory range on a primary memory system, a protocol consumer driver stored on the primary memory system, and a firmware interface engine provided via the primary memory system. The firmware interface engine receives a protocol pointer from the protocol consumer driver, and identifies that the protocol pointer was provided by the protocol producer driver. If the firmware interface engine determines that the protocol pointer is not stored in the first memory range on the primary memory system, it generates a protocol security violation. If the firmware interface engine determines that the protocol pointer is stored in the first memory range on the primary memory system and points to an architectural protocol, it determines whether the protocol producer driver originated from a secondary memory system and, if not, generates a protocol security violation.

Abstract: A method may include, in an information handling system comprising a basic input/output system (BIOS) embodied in non-transitory computer-readable media and configured to be the first code executed by a processor when the information handling system is booted and configured to initialize components of the information handling system into a known state: receiving an indication of installation of a protocol by a producer driver of a plurality of protocol drivers integral to the BIOS, storing metadata regarding the protocol in a protocol database of the BIOS, receiving a request to consume the protocol by a consumer driver of the plurality of protocol drivers, and obfuscating the metadata stored in the protocol database from the consumer driver to prevent the consumer driver from uninstalling the protocol.

Abstract: A protocol security system includes a protocol producer driver stored in a first memory range on a primary memory system, a protocol consumer driver stored on the primary memory system, and a firmware interface engine provided via the primary memory system. The firmware interface engine receives a protocol pointer from the protocol consumer driver, and identifies that the protocol pointer was provided by the protocol producer driver. If the firmware interface engine determines that the protocol pointer is not stored in the first memory range on the primary memory system, it generates a protocol security violation. If the firmware interface engine determines that the protocol pointer is stored in the first memory range on the primary memory system and points to an architectural protocol, it determines whether the protocol producer driver originated from a secondary memory system and, if not, generates a protocol security violation.

Abstract: A semiconductor device includes a semiconductor substrate, a plurality of isolation structures on the semiconductor substrate, and a plurality of blocking structures disposed directly over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures.

Abstract: A semiconductor device includes a semiconductor substrate, a plurality of isolation structures on the semiconductor substrate, and a plurality of blocking structures disposed directly over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures.

Abstract: A semiconductor device includes a semiconductor substrate, a plurality of isolation structures on the semiconductor substrate, and a plurality of blocking structures disposed directly over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures.

Abstract: A method for fabricating a semiconductor device includes forming a plurality of isolation structures in a semiconductor substrate and forming a plurality of blocking structures over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures. The method further includes forming a photoresist layer on the semiconductor substrate, exposing the photoresist layer to a light source through a mask, and developing the photoresist layer to create a patterned photoresist feature that covers a first region of a portion of the semiconductor substrate between two of the isolation structures. The portion of the semiconductor substrate having a second region that is exposed.

Abstract: A method for fabricating a semiconductor device includes forming a plurality of isolation structures in a semiconductor substrate and forming a plurality of blocking structures over the isolation structures. The blocking structures have a lower reflectivity than the isolation structures. The method further includes forming a photoresist layer on the semiconductor substrate, exposing the photoresist layer to a light source through a mask, and developing the photoresist layer to create a patterned photoresist feature that covers a first region of a portion of the semiconductor substrate between two of the isolation structures. The portion of the semiconductor substrate having a second region that is exposed.

Abstract: A container seal, including a socket, a C-shaped ring, a pin, and a pointer, is provided. The socket has a jack, a slot, and a reservoir which connects to the slot. The C-shaped ring is disposed on the slot's slot wall. The pin has a tapered end and a trench disposed on a position having a first distance from an end surface of the tapered end. The tapered end passes through the C-shaped ring, making the C-shaped ring be snapped in the trench. The pointer has a neck portion and a head portion whose diameter is between the internal diameters of the slot and the reservoir. The head portion passes through the slot and enters into the reservoir, and the neck portion connects to the end surface. When the pin is pulled out, the pointer is separated from the end surface and dropped into the reservoir.