Abstract: A memory device is embedded in (or connected to) a host device. The memory device includes a first boot partition and a second boot partition. The first boot partition stores first boot data. The second boot partition stores second boot data. The memory device includes a pointer that points to either the first boot partition or the second boot partition. The memory device transfers the first boot data from the first boot partition in response to receiving a boot signal from the host and the pointer pointing to the first boot partition. The host attempts to boot using the first boot data. If the host does not boot successfully from the first boot data then the host is booted from second boot data transferred from the memory device without the host requesting that the pointer switch to pointing at the second boot data.

Abstract: An automated boot failure prevention and recovery circuit includes one or more non-transitory computer-readable media having computer-executable instructions embodied thereon, a processor coupled to the one or more non-transitory computer-readable media, and configured to execute the computer-executable instructions to electrically disconnect a memory from a power source, short the memory to ground for a predetermined period of time to adjust memory content from a stochastic state to a machine-tolerable state or an acceptable non-failure state. The processor is further configured to execute the computer-executable instructions to electrically disconnect the memory from the ground, and electrically reconnect the memory to the power source. The processor is further configured to execute the computer-executable instructions to apply a load across the power source, acquire power source information, and notify the user of the battery charge status to preclude loss of memory data.

Abstract: Examples of systems described herein include a file server virtual machine of a virtualized file server configured to communicate with a user virtual machine over a first virtual network to transfer data and to communicate with a controller virtual machine over a second virtual network to transfer control information.

Abstract: A display control unit displays, in a case where the display control unit is in a startup state or in an abnormal operation state of a general purpose application, a display window of a dedicated middleware even when a startup of the dedicated middleware is completed and a startup of a general purpose middleware is not completed. With this configuration, the user operation is allowed to perform operation to the general purpose application and is not required to wait until the startup of the general purpose middleware is completed. When the startup of the general purpose middleware is completed, a display window of the general purpose application which includes display window data transferred from the general purpose middleware is displayed. Thus, information related to the general purpose application can be promptly provided to a user.

Abstract: A BIOS startup method is disclosed, the method includes: in a first access mode, allocating, by a current node, a local MMCFG in a space below a local access address of the current node that is a first address, and completing memory initialization; and when performing unified memory addressing of a system, moving positions of addresses of a part or an entirety of the MMCFG space of the current node from the original space below the first address in a global access address of the system to a space that is above the first address and can be accessed in a second access mode.

Abstract: Described herein are features pertaining to generating and presenting a log entry based upon configuration data received from a monitoring service of an electronic health record application (EHR) executing at a server computing device. A monitoring application can receive configuration data from the server computing device that hosts a feature of an EHR that is implemented in a healthcare enterprise, wherein the configuration data comprises an indication of a modification to the server computing device, and further wherein the monitoring application is configured to facilitate presenting the modification to an EHR support engineer. Exemplary modifications to the server computing device can be: a hardware change to the server computing device (e.g., replacement of a processor, addition of RAM, etc.), an upgrade to a feature hosted by the EHR on the server computing device, etc.

Abstract: Computer-aided computer system configuration techniques for adding new computing resources to an existing set of computing resources. A method embodiment commences upon identifying an existing computing system having a first set of configuration parameters. A second computing system having a second set of configuration parameters is deployed. A user interface is provided to accept user input comprising a location and protocol to access the existing computing system. Syntactical and semantic differences between the configuration parameters of the existing computing system and those of the newly added set are identified. The identified differences are analyzed to generate a parameter map that relates the existing set of configuration parameters to the second set of configuration parameters and vice-versa. Relationships that are codified in the parameter map are validated through user interactions.

Abstract: In a method for validating software updates, a data processing system contains a current version of a software component. The data processing system saves at least first and second current advance keys (AKs). After saving the current AKs, the data processing system receives an update package for a new version of the software component. The data processing system extracts a digital signature and two or more new AKs from the update package. The data processing system uses at least one current AK to determine whether the digital signature is valid. In response to a determination that the digital signature is valid, the data processing system uses a software image from the update package to update the software component, and the data processing system saves the new AKs, for subsequent utilization as the current AKs.

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may receive a digital signature, signed by a signing authority, for a request for utilization of an information handling system firmware application programming interface (API) of the information handling system firmware, signed based at least on information associated with a certificate signed by a certificate authority; may determine that the signing authority is authorized for the request for utilization of the information handling system firmware API; may determine that the signing authority is authorized for the request for utilization of the information handling system firmware API on a platform model of the information handling system; may determine that the certificate is not on a certificate revocation list; and may permit utilization of the information handling system firmware API.

Abstract: A method and system for continuously authenticating a user working from a remote location is provided. The method includes providing user an interface to login through his login credentials to company domain. The login credentials are authenticated by a company's remote server. Once the user is authenticated the server pushes user's secondary authentication details to user's device and invokes a secondary authentication system. The secondary authentication system may include a webcam that initiates once user is logged in and continuously monitors biometric parameters for continued authentication of the user.

Abstract: A method and system of securing the firmware of a router. Upon determining that a received digital message does not have integrity or the digital signature of the received digital message is not correct, the digital message is ignored or discarded. Otherwise the digital message is decrypted and a new firmware extracted therefrom. The existing firmware is then flashed with the new extracted firmware.

Abstract: An extended hardware security module (“HSM”) possessing additional security properties relative to conventional HSMs and methods for initializing, deploying, and managing such extended HSMs in a networked environment. In the preferred embodiment, an extended HSM includes additional hardware and software components that configure it to run sensitive client tasks on demand inside a cloud-hosted, anti-tamper HSM housing so as to ensure sensitive data is encrypted when stored or processed outside the housing. Methods for initializing, deploying, and managing provide a framework through which extended HSMs may be secured from their initial assembly through their availing for use and actual use over a network by one or more clients. Such use often entails repeated discrete sequential secure sessions and concurrent discrete secure sessions.

Abstract: A system and method for virtual processor state switching virtual machine functions includes a memory, one or more processors, in communication with the memory, a virtual machine executing on the one or more processors, a virtual machine function executing on the virtual machine, and a hypervisor executing on the one or more processors. The hypervisor receives from the virtual machine function a request to save a state of the virtual machine function in hypervisor memory. Then, the hypervisor saves the state of the virtual machine function in the hypervisor memory.

Abstract: A security application manages security and reliability of networked applications executing collection of interacting computing elements within a distributed computing architecture. The security application monitors various classes of resources utilized by the collection of nodes within the distributed computing architecture and determine whether utilization of a class of resources is approaching a pre-determined maximum limit. The security application performs a vulnerability scan of a networked application to determine whether the networked application is prone to a risk of intentional or inadvertent breach by an external application. The security application scans a distributed computing architecture for the existence of access control lists (ACLs), and stores ACL configurations and configuration changes in a database.

Abstract: A computer implemented method of developing computer applications, the method comprising providing to multiple users access, over a network, to information on a data center, with a subgroup of the users having access to a sub-portion of the information that is different from the sub-portion accessible by the remaining tenants of the subgroup; and communicating wide the data center over the network employing a computer system associated with a user of the sub-group to establish application functionality with the sub-portion that may be accessed, over the network, by additional parties authorized by the user. Also disclosed is a machine-readable medium and a data center, both of which facilitate carrying-out the steps of the method.

Abstract: In one embodiment, a router receives a packet from a network device in a software defined architecture (SDA) network, and obtains iOAM data from an outer header of the packet, the iOAM data inserted into the outer header by one or more network devices that previously processed the packet. The router then copies the iOAM data into a locally pertinent header, and after determining local iOAM data of the router, appends the local iOAM data to the iOAM data copied into the locally pertinent header. The router may then process the packet accordingly. In another embodiment, an SDA router may insert an indication of one or more applied policies into an iOAM header of the packet, such that an edge router can determine any unapplied policies and subsequently apply them.

Abstract: A data storage device including a non-volatile memory and a micro-controller is provided. The non-volatile memory stores a firmware file. The micro-controller is coupled to the non-volatile memory, and performs an encryption procedure on the firmware file. The encryption procedure includes: using a first key and a first algorithm to encrypt the firmware file to generate a signature, using the first key and a second algorithm to scramble the signature to generate a scrambled signature, and attaching the scrambled signature to the firmware file.

Abstract: A data management circuit is provided. The data management circuit includes a volatile memory, a power supply circuit, and a signal receiving circuit. An output terminal of the power supply circuit is coupled to the volatile memory, and an output terminal of the signal receiving circuit is coupled to the output terminal of the power supply circuit and the volatile memory. The power supply circuit is configured to provide power to the volatile memory. The signal receiving circuit is configured to receive a wireless control signal and to output a data clearance signal corresponding to the wireless control signal, such that data recorded in the volatile memory is cleared by the data clearance signal.

Abstract: Systems, computing devices, and methods for performing an image search are presented. A search query including an image is received from a user. A segment associated with the image is identified. A user intent associated with the image and the segment is identified. Search results associated with the identified segment and user intent are generated, and presented to the user.

Abstract: In embodiments, apparatuses, methods and storage media (transitory and non-transitory) are described that are associated with receiving a call from an application at a shared library, accessing a first resource based at least in part on the first call, and storing a prefetch entry in a prefetch engine based at least in part on an address of a second resource in preparation to service a second call to the shared library that requires traversal of a plurality of stages at the shared library. A prefetch request may be performed based at least in part on the second call, and the second resource may be accessed based at least in part on a result of the prefetch request. In embodiments, the shared library may be a Message Passing Interface (MPI) library. Other embodiments may be described and/or claimed.

Abstract: Techniques provide for persistently storing state information regarding configuration requirements, such as STIG (Security Technical Implementation Guides) requirements. The state information may indicate whether all or one or more selected categories of requirements are enabled. The state information may be persistently stored and applied or hardened across multiple processor nodes as well as across system upgrades.

Abstract: Provided is a method and system for providing a personalized notification in a content service. The notification providing method includes selecting notification target content by analyzing a user utilization record of content with respect to a user that consumes the content; and sending a push notification associated with the notification target content to the user as a personalized notification.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for training a neural network used to select actions performed by a reinforcement learning agent interacting with an environment. In one aspect, a method includes maintaining a replay memory, where the replay memory stores pieces of experience data generated as a result of the reinforcement learning agent interacting with the environment. Each piece of experience data is associated with a respective expected learning progress measure that is a measure of an expected amount of progress made in the training of the neural network if the neural network is trained on the piece of experience data. The method further includes selecting a piece of experience data from the replay memory by prioritizing for selection pieces of experience data having relatively higher expected learning progress measures and training the neural network on the selected piece of experience data.

Abstract: A computer-implemented method includes generating a new management application based on a first management application, where the first management application operates a first management system. A first set of resources of the first management system are assigned to the new management application, where the first set of resources support a first request server and a first worker server. A new worker server of the new management system is started, where the new worker server utilizes the first set of resources. The first request server is instructed to send a first set of future requests of the first request server to the new worker server. The first request server is further instructed to redirect a remainder of the future requests of the first request server to a new request server of the new management application. The new management application operates a new management system based on the first management system.

Abstract: A system and method include creating a bootable virtual machine (VM) image for a container image. The method includes a controller machine creating a single partition within an output VM disk file where the single partition comprises a master boot record and a partition table, forming a valid file system in a main partition of the output VM disk file, arranging an input set of container image definitions as a list where a base image forms a head of the list and subsequent images follow in the list, sequentially processing the list for each image by adding the input set of container image definitions to the output VM file; and applying a final networking configuration over the output VM file.

Abstract: In an information processing apparatus including a plurality of boards, it is possible to appropriately perform initialization of hardware of each board in accordance with a return factor. An information processing apparatus including a first system and a second system, the first system transmitting a boot program of the second system to the second system, and the first system: receives a return factor that causes the information processing apparatus to return from a power-saving state; and is capable of transmitting a first boot program including information indicating a first return factor and a second boot program including information indicating a second return factor to the second system, and the second system: is capable of receiving the first boot program and the second boot program; and performs first boot processing in accordance with the received first boot program and performs second boot processing in accordance with the received second boot program.

Abstract: Novel tools and techniques are provided for implementing media content delivery. In some embodiments, a globally unique identifier (“GUID”) associated with a particular media content might be embedded in headers of packets of a transport stream of the media content. When the transport stream is received by a user device, the GUID might enable retrieval of the necessary metadata (and/or updates of metadata) for enabling presentation of the media content. Alternatively or additionally, ratings or similar information can likewise be embedded in the headers of packets or I-frames of the transport stream, which enables a user (e.g., parent) to easily block or skip objectionable content from children who may be present. Alternatively or additionally, the transport stream may be combined with auxiliary data streams containing metadata and other associated auxiliary content to create a combined transport stream, to ensure no lost or corrupted media content during transmission.

Abstract: In one example, a computing device including a mass storage medium. The mass storage medium has a pre-installed operating system but no pre-installed partition table. The mass storage medium has pre-installed boot software to generate and store a partition table on the mass storage medium. The partition table is usable by the operating system to access information on the mass storage medium.

Abstract: A debugger for distributed software running on multiple computer systems analyzes and compares system environments for the multiple computer systems. When a breakpoint occurs, or when a failure in one of the computer systems occurs, the debugger determines when one or more values of interest in the distributed software differ among the different computer systems. The debugger then determines whether the one or differing values correlate to the system environment for the corresponding computer systems. When the one or more differing values correlate to the system environment for the corresponding computer systems, the user of the debugger is notified of the correlation between the differing values and the system environments of the computer systems, to help potentially identify differences in system environments that could be contributing to the differing values.

Abstract: Technologies are disclosed herein for configuring a system memory of a computer system by determining which, of a plurality, of serial presence detect (SPD) tables to utilize, based at least in part on settings of one or more GPIO pins. The computer system may be available with variations of the configuration of system memory. The SPD tables corresponding to each of the different configurations of the system memory may be stored on the computer system, such as on an NVRAM of the computer system. After identifying the appropriate SPD table, a processor may load the SPD table to a memory reference code of the computer system. In some cases, the state GPIO pins indicating the system memory configuration is set at the time of manufacture of the computer system.

Abstract: The present disclosure is related to mixed mode management. A machine-readable medium may store instructions executable by a processing resource to determine that a first management node is operating according to a different configuration profile than a second management node and, responsive to the determination, transfer a mixed mode management plug-in from the first management node. The machine-readable medium may further store instructions executable by the processing resource to execute the mixed mode management plug-in on the second management node.

Abstract: Configuration of availability of debugging messages during the execution of a firmware in a debugging mode of operation is provided. The configuration can be updated without rebuilding the firmware. Thus, a selection of a group of available types of debugging messages can be updated dynamically, at various runtime instances of the firmware. The selection can be accomplished by configuring, at a runtime of the firmware, a level of recordation of debugging messages and one or more data structures associated with the level or recordation. Each of the one or more data structures includes elements indicative of respective types of debugging messages being enabled or disabled for presentation during the execution of the firmware in the debugging mode of operation. A debugging message can be provided based at least partially on at least one of the data structure(s) during the execution of the firmware in the debugging mode of operation.

Abstract: According to one embodiment, a method for remotely controlling peripheral devices in a mobile communication terminal includes acquiring a profile for a controlled peripheral device, configuring a control application for the controlled peripheral device based on the acquired profile, and controlling the controlled peripheral device using the configured control application.

Abstract: In one example in accordance with the present disclosure, a device comprising a host computing device further comprises a processor, a non-volatile dual inline memory module (NVDIMM) comprising metadata indicating system configuration information associated with the NVDIMM, and a basic input output system (BIOS) comprising system configuration information associated with the host computing device. The BIOS may: determine whether there is a mismatch between the system configuration information of the host computing device and the system configuration information indicated by the metadata.

Abstract: Example embodiments disclosed herein relate to backing up firmware. An operating system can be initialized. During the initialization process, memory can be set. The firmware can be backed up to storage based on the set memory.

Abstract: An apparatus for selectively applying settings for each of items set in a first processing device to a second processing device is provided. The settings for each of the items are indicated in each file, and the file is dividable into sets of separate data having a predetermined size or smaller. The apparatus includes a user interface configured to allow a user to choose target separate data from among the sets of separate data of each of the files; a selection portion configured to set, at selected data, the sets of separate data of a file having the target separate data among the files; and an application processing portion configured to perform application processing for applying the settings to the second processing device by using, among the sets of separate data of each of the files, the sets of separate data set at the selected data.

Abstract: An information handling system includes product lifecycle management circuitry and a management controller. The product lifecycle management circuitry receives an indication that a first firmware update package is to be demoted, starts a demotion process for the first firmware update package, and removes the first firmware update package from being available on an Internet website. The management controller extracts a first identifier for the first firmware update package, determines a first context in which the first firmware update package is being demoted, and publishes the first identifier and the first context in an exclusion catalog.

Abstract: In a control program for one storage control device in a storage device that includes a plurality of storage control devices that control storages and in which configuration information related to configurations of the storages is synchronized among the storage control devices, a process includes; storing, when having received a command to change the configuration information while another storage control device is executing update processing of updating a firmware, specification information specifying a plurality of divided pieces of command processing obtained by dividing processing of the command into executable units in a storage region; and executing each of the divided pieces of the command processing specified by the specification information while the other storage control device is executing any divided piece of the update processing, executable in parallel with the processing of the command.

Abstract: A video camera for use in a security system may include a processor including control circuitry and a removable memory card coupled to the control circuitry. The removable memory card may include a wireless transceiver configured to receive wireless data transmissions from at least one wireless sensor device. The removable memory card may further include security system logic configured to allow the video camera itself to function as a security system, including identifying and then transmitting one or more security system messages to a remote location via the wireless transceiver of the removable memory card.

Abstract: Various additional and alternative aspects are described herein. In some aspects, the present disclosure provides a method of operating a system-on-chip (SoC). The method includes selecting a CPU core of a plurality of CPU cores of the SoC to boot the SoC based on information indicative of the quality of the plurality of CPU cores stored on the SoC. The method includes running boot code on the selected CPU.

Abstract: One or more terminals that are coupled to a packet-based network are installed with a first instance and/or a second instance of a communication client application of a first user. At times, the communication client application can be configured to enable the first user to communicate with other users using a first communication system implemented over the packet-based network. In some cases, a controller coupled to the packet-based network can be used to maintain separate privacy settings for each of the first and second instances, and thereby control the privacy of the first user in relation to the other users within the first communication system in dependence on which of the first and second instances is active.

Abstract: Systems, apparatuses, and methods for converting computer program source code from a first high level language to a functionally equivalent second high level language different from the first high level language. Source code in a first high level language that includes a plurality of name spaces is analyzed by a code conversion tool. A data structure representing the source code in the first language is generated that includes at least an identification of each symbol used within the source code in the first language. An identifier is generated for each of the identified symbols, wherein the identifier is globally unique within an entire codebase of the source code in the first high level language. Source code in the second high level programming language is generated that is functionally equivalent to the source code in the first high level programming language.

Abstract: Disclosed herein are techniques for self-refilling an instruction buffer by an execution engine while the execution engine executes instructions in the instruction buffer. An instruction loader splits instruction code into sections of code and creates a data store (e.g., a DMA ring) for loading the sections of code into the instruction buffer. In some embodiments, an instruction is added to some sections of code. The instruction, when executed by the execution engine, triggers the loading of one or more sections of code into the instruction buffer based on one or more entries in the data store. In some embodiments, a hardware logic in the execution engine is configured to trigger the loading of the sections of code into the instruction buffer. In some embodiments, the one or more sections of code are loaded into the instruction buffer through a refill page that is different from the instruction buffer.

Abstract: An example apparatus comprises a memory resource configured to store a private key associated with a vehicle and store a data matrix comprising data corresponding to operation of the vehicle. The apparatus may further include a processing resource configured to generate a first secure message comprising data corresponding to the vehicle, transmit the first secure message, receive a second secure message comprising an updated data matrix, and update the data matrix based, at least in part, on the updated data matrix.

Abstract: It is possible to update firmware of domain masters during travelling. An in-vehicle communication system includes a plurality of domain masters, and a redundant domain master configured to be able to perform alternative operations of the plurality of domain masters. The domain masters transmits operation information to the redundant domain master prior to update of firmware. The redundant domain master executes the alternative operation of the domain master using the received operation information. The domain master receives, after the update of the firmware, operation information generated in the alternative operation from the redundant domain master and operates in the updated firmware.

Abstract: A new snapshot of a storage volume is created by instructing computing nodes to suppress write requests. Once pending write requests from the computing nodes are completed, storage nodes create a new snapshot for the storage volume by allocating a new segment to the new snapshot and finalizes and performs garbage collection with respect to segments allocated to the previous snapshot. Subsequent write requests to the storage volume are then performed on the segments allocated to the new snapshot. An orchestration layer implements a multi-role application that is provisioned with virtualized storage and computation resources. A snapshot of the application may be created and used to rollback or clone the application. Clones snapshots of storage volumes may be gradually populated with data from prior snapshots to reduce loading on a primary snapshot. Upgrades for bundled applications may be defined and executed for containers and roles of the bundled application.

Abstract: Examples disclosed herein relate to selecting and loading firmware volumes. A computing device is booted to a state where the computing device is capable of accessing a memory available to multiple other computing devices. The memory includes multiple firmware volumes. In one example, at least one firmware volume is selected based on a hardware configuration or hardware components of the computing device. The selected firmware volumes are loaded.

Abstract: An in-vehicle system includes a primary CPU that is mounted in a vehicle and operates on a general-purpose OS, and a peripheral device that is controlled by the primary CPU. The in-vehicle system further includes a secondary CPU that operates on a real-time OS. The secondary CPU performs an initialization process on the peripheral device at startup, and then assigns control of the peripheral device to the primary CPU.

Abstract: A download module accesses a download queue including at least two file download requests from an application running on a client device of a server. The application and each of the file download requests is associated with a context that comprises a set of context components that each indicates a part of the application. The file download request context components indicate parts of the application that use the requested file and the application context components indicate parts of the application that are active. The download module ranks each of the file download requests based on a comparison of the respective file download request context components of each file download request to the application context components of the application. The download module then selects two or more file download requests in the download queue for concurrent execution based on the respective rankings of the file download requests in the download queue.

Abstract: A computing device configured to facilitate on-boarding of an electronic device may comprise a processor and memory. The memory may store instructions that cause the processor to receive, over a public network, a first communication from the electronic device on a private network, comprising an address of the electronic device on the private network. A first identifier associated with the address of the electronic device on the public network and the received address of the electronic device on the private network may be stored in a persistent store. The computing device may then receive a first request from a browser and, based upon a second identifier associated therewith, retrieve the stored address of the electronic device on the private network. The retrieved address of the electronic device on the private network may then be sent, over the public network, in response to the received first request from the browser.