Abstract: An image forming apparatus includes plural internal devices, a controller, and a communication path. The controller is configured to control the plural internal devices. The communication path is used for communication between the plural internal devices and the controller. Usage priority of the communication path is assigned to plural pieces of communication between the plural internal devices and the controller in a time divisional manner. The controller detects a status change of the image forming apparatus, and upon detecting the status change, interrupts the time divisional manner with a time slot of a specific internal device among the plural internal devices, the specific internal device corresponding to the status change.

Abstract: Some embodiments of the present invention provide virtual configuration systems and methods that overcome some or all of the downfalls of typical approaches by allowing for persistent configuration of an operating system of a host device. A virtual configuration layer may be incorporated into the file system of the host device and executed to modify configuration data stored outside of the file system, without changing the file system. Once the configuration data is modified, it may be used to configure the file system and/or the operating system of the host device when it is loaded by a client device. In some embodiments, the host device may be nonvolatile storage (e.g., a flash drive) embedded into a client device (e.g., a diskless system).

Abstract: Techniques for providing and maintaining protection of firmware routines that form part of a chain of trust through successive processing environments. An apparatus may include a first processor component (550); a volatile storage (562) coupled to the first processor component; an enclave component to, in a pre-OS operating environment, generate a secure enclave within a portion of the volatile storage to restrict access to a secured firmware loaded into the secure enclave; a first firmware driver (646) to, in the pre-OS operating environment, provide a first API to enable unsecured firmware to call a support routine of the secured firmware from outside the secure enclave; and a second firmware driver (647) to, in an OS operating environment that replaces the pre-OS operating environment, provide a second API to enable an OS of the OS operating environment to call the support routine from outside the secure enclave.

Abstract: A reinforcement learning neural network system in which internal representations and policies are grounded in visual entities derived from image pixels comprises a visual entity identifying neural network subsystem configured to process image data to determine a set of spatial maps representing respective discrete visual entities. A reinforcement learning neural network subsystem processes data from the set of spatial maps and environmental reward data to provide action data for selecting actions to perform a task.

Abstract: Disclosed herein is a computing system with the capability to execute instructions in different positional notation values. The definition of a positional notation value is given by the general formula that represent a base 10 numeral in any positional notation in the following manner: . . . d3r3+d2r2+d1r1+d0r0, where d is a coefficient, r is the base of the positional number system (i.e. r=2 for binary, or r=3 for ternary), and the exponent is the position of the digit. The computing may provide a configuration which hybridizes the instructions of multiple positional notation values in variable ratios. The computing system may dynamically switch between the multiple hybridized instructions sets. Embodiments may be applied to provide security benefits.

Abstract: Aspects of the present disclosure relate to systems and methods for virtualizing mass storage using a network storage device operatively coupled to a host system. In various implementations, the network storage device and host system may collectively emulate a mass storage device for another “terminal” computing system. This emulation can be performed while utilizing the minimum possible memory of the host system, as the network storage device contains the operating system data for the host system in addition to game and user data required for the implementation of a computer application.

Abstract: A protection and control system which is capable of surely updating a program without a program update by an operator and without deactivating a power system is provided. A protection and control device 1 includes an update accepting unit 1c that determines whether or not to accept the update of the program from a managing server 3, and an updating processing unit 1d that receives an updating program and that updates the program. The managing server 3 includes an update determining unit 3c that determines whether or not a supplied update program is for updating the program of the predetermined protection and control device 1, a transmitting unit 3b that transmits an update notification to the protection and control device 1 on which the program to be updated is loaded, and a receiving unit 3a that receives a reply to the update notification from the protection and control device.

Abstract: In one or more embodiments, a first operating system may receive, via a first non-volatile memory medium of an information handling system, an executable file from information handling system firmware; the executable file may provide configuration information to the first operating system; the first operating system may configure the information handling system based at least on the configuration information; a second operating system may be received; the second operating system may be installed to a second non-volatile memory medium; the executable file may provide the configuration information to the second operating system; and the second operating system may configure the information handling system based at least on the configuration information.

Abstract: A computing device includes a touch-sensitive user interface configured to present a unified collaborative session for two or more users, and an authentication module configured to simultaneously identify and authenticate multiple users physically co-located within a collaborative environment, allowing each of the multiple users to interact with the touch-sensitive user interface. A content module is configured to simultaneously provide one or more content portals within the unified collaborative session for each authenticated user. Each content portal is configured to enable an authenticated user to access, retrieve, and present user-owned content files within the unified collaborative session. In this way, multiple users may simultaneously access, retrieve, and present their own content files on a single computing device.

Abstract: Described is a computing platform, which comprises: a non-volatile memory having a firmware boot program; and a CPU to execute the firmware boot program when the CPU is reset, the firmware boot program including instructions to create Power and Performance Measurement (PPM) interface data structures including an error injection table structure to provide error injection services to an OS.

Abstract: Examples described relate to container images. An example method may include generating a mapping of respective unique identifiers of container images of a software container and respective metadata of the container images, validating the mapping against a rule to identify a unique identifier of a mapped container image that meets the rule, generating a target mapping that includes the unique identifier of the mapped container image that meets the rule and the action specified in the rule, and performing the action specified in the rule on the mapped container image corresponding to the unique identifier in the target mapping.

Abstract: An information handling system includes a driver and a service. The driver is configured to determine if an operating system is not a restricted operating system, determine if corresponding service is present in response to determining the operating system is not a restricted operating system, and shut down the driver in response to determining the corresponding service is present. The service is configured to determine if a corresponding driver is present, and disable the corresponding driver in response to determining the corresponding driver is present.

Abstract: A memory device may be configured to leverage memory resources of a host computing device to efficiently transition between different power states. In some embodiments, the memory device stores resume data within a host memory buffer (HMB) before transitioning to a low-power state, and uses the resume data stored within the HMB to resume operation from the low-power state. The memory device may be configured to pre-populate the HMB with resume data prior to transitioning to the low-power state. In some embodiments, the disclosed memory device is configured to gradually resume from the low-power state, which may comprise resuming services of the memory device in the order such services are required during the resume process.

Abstract: Examples of systems described herein include a file server virtual machine of a virtualized file server configured to communicate with a user virtual machine over a first virtual network to transfer data and to communicate with a controller virtual machine over a second virtual network to transfer control information.

Abstract: A display control unit displays, in a case where the display control unit is in a startup state or in an abnormal operation state of a general purpose application, a display window of a dedicated middleware even when a startup of the dedicated middleware is completed and a startup of a general purpose middleware is not completed. With this configuration, the user operation is allowed to perform operation to the general purpose application and is not required to wait until the startup of the general purpose middleware is completed. When the startup of the general purpose middleware is completed, a display window of the general purpose application which includes display window data transferred from the general purpose middleware is displayed. Thus, information related to the general purpose application can be promptly provided to a user.

Abstract: A memory device is embedded in (or connected to) a host device. The memory device includes a first boot partition and a second boot partition. The first boot partition stores first boot data. The second boot partition stores second boot data. The memory device includes a pointer that points to either the first boot partition or the second boot partition. The memory device transfers the first boot data from the first boot partition in response to receiving a boot signal from the host and the pointer pointing to the first boot partition. The host attempts to boot using the first boot data. If the host does not boot successfully from the first boot data then the host is booted from second boot data transferred from the memory device without the host requesting that the pointer switch to pointing at the second boot data.

Abstract: An automated boot failure prevention and recovery circuit includes one or more non-transitory computer-readable media having computer-executable instructions embodied thereon, a processor coupled to the one or more non-transitory computer-readable media, and configured to execute the computer-executable instructions to electrically disconnect a memory from a power source, short the memory to ground for a predetermined period of time to adjust memory content from a stochastic state to a machine-tolerable state or an acceptable non-failure state. The processor is further configured to execute the computer-executable instructions to electrically disconnect the memory from the ground, and electrically reconnect the memory to the power source. The processor is further configured to execute the computer-executable instructions to apply a load across the power source, acquire power source information, and notify the user of the battery charge status to preclude loss of memory data.

Abstract: A BIOS startup method is disclosed, the method includes: in a first access mode, allocating, by a current node, a local MMCFG in a space below a local access address of the current node that is a first address, and completing memory initialization; and when performing unified memory addressing of a system, moving positions of addresses of a part or an entirety of the MMCFG space of the current node from the original space below the first address in a global access address of the system to a space that is above the first address and can be accessed in a second access mode.

Abstract: Described herein are features pertaining to generating and presenting a log entry based upon configuration data received from a monitoring service of an electronic health record application (EHR) executing at a server computing device. A monitoring application can receive configuration data from the server computing device that hosts a feature of an EHR that is implemented in a healthcare enterprise, wherein the configuration data comprises an indication of a modification to the server computing device, and further wherein the monitoring application is configured to facilitate presenting the modification to an EHR support engineer. Exemplary modifications to the server computing device can be: a hardware change to the server computing device (e.g., replacement of a processor, addition of RAM, etc.), an upgrade to a feature hosted by the EHR on the server computing device, etc.

Abstract: Computer-aided computer system configuration techniques for adding new computing resources to an existing set of computing resources. A method embodiment commences upon identifying an existing computing system having a first set of configuration parameters. A second computing system having a second set of configuration parameters is deployed. A user interface is provided to accept user input comprising a location and protocol to access the existing computing system. Syntactical and semantic differences between the configuration parameters of the existing computing system and those of the newly added set are identified. The identified differences are analyzed to generate a parameter map that relates the existing set of configuration parameters to the second set of configuration parameters and vice-versa. Relationships that are codified in the parameter map are validated through user interactions.

Abstract: A method and system for continuously authenticating a user working from a remote location is provided. The method includes providing user an interface to login through his login credentials to company domain. The login credentials are authenticated by a company's remote server. Once the user is authenticated the server pushes user's secondary authentication details to user's device and invokes a secondary authentication system. The secondary authentication system may include a webcam that initiates once user is logged in and continuously monitors biometric parameters for continued authentication of the user.

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may receive a digital signature, signed by a signing authority, for a request for utilization of an information handling system firmware application programming interface (API) of the information handling system firmware, signed based at least on information associated with a certificate signed by a certificate authority; may determine that the signing authority is authorized for the request for utilization of the information handling system firmware API; may determine that the signing authority is authorized for the request for utilization of the information handling system firmware API on a platform model of the information handling system; may determine that the certificate is not on a certificate revocation list; and may permit utilization of the information handling system firmware API.

Abstract: In a method for validating software updates, a data processing system contains a current version of a software component. The data processing system saves at least first and second current advance keys (AKs). After saving the current AKs, the data processing system receives an update package for a new version of the software component. The data processing system extracts a digital signature and two or more new AKs from the update package. The data processing system uses at least one current AK to determine whether the digital signature is valid. In response to a determination that the digital signature is valid, the data processing system uses a software image from the update package to update the software component, and the data processing system saves the new AKs, for subsequent utilization as the current AKs.

Abstract: A method and system of securing the firmware of a router. Upon determining that a received digital message does not have integrity or the digital signature of the received digital message is not correct, the digital message is ignored or discarded. Otherwise the digital message is decrypted and a new firmware extracted therefrom. The existing firmware is then flashed with the new extracted firmware.

Abstract: An extended hardware security module (“HSM”) possessing additional security properties relative to conventional HSMs and methods for initializing, deploying, and managing such extended HSMs in a networked environment. In the preferred embodiment, an extended HSM includes additional hardware and software components that configure it to run sensitive client tasks on demand inside a cloud-hosted, anti-tamper HSM housing so as to ensure sensitive data is encrypted when stored or processed outside the housing. Methods for initializing, deploying, and managing provide a framework through which extended HSMs may be secured from their initial assembly through their availing for use and actual use over a network by one or more clients. Such use often entails repeated discrete sequential secure sessions and concurrent discrete secure sessions.

Abstract: A system and method for virtual processor state switching virtual machine functions includes a memory, one or more processors, in communication with the memory, a virtual machine executing on the one or more processors, a virtual machine function executing on the virtual machine, and a hypervisor executing on the one or more processors. The hypervisor receives from the virtual machine function a request to save a state of the virtual machine function in hypervisor memory. Then, the hypervisor saves the state of the virtual machine function in the hypervisor memory.

Abstract: In one embodiment, a router receives a packet from a network device in a software defined architecture (SDA) network, and obtains iOAM data from an outer header of the packet, the iOAM data inserted into the outer header by one or more network devices that previously processed the packet. The router then copies the iOAM data into a locally pertinent header, and after determining local iOAM data of the router, appends the local iOAM data to the iOAM data copied into the locally pertinent header. The router may then process the packet accordingly. In another embodiment, an SDA router may insert an indication of one or more applied policies into an iOAM header of the packet, such that an edge router can determine any unapplied policies and subsequently apply them.

Abstract: A security application manages security and reliability of networked applications executing collection of interacting computing elements within a distributed computing architecture. The security application monitors various classes of resources utilized by the collection of nodes within the distributed computing architecture and determine whether utilization of a class of resources is approaching a pre-determined maximum limit. The security application performs a vulnerability scan of a networked application to determine whether the networked application is prone to a risk of intentional or inadvertent breach by an external application. The security application scans a distributed computing architecture for the existence of access control lists (ACLs), and stores ACL configurations and configuration changes in a database.

Abstract: A computer implemented method of developing computer applications, the method comprising providing to multiple users access, over a network, to information on a data center, with a subgroup of the users having access to a sub-portion of the information that is different from the sub-portion accessible by the remaining tenants of the subgroup; and communicating wide the data center over the network employing a computer system associated with a user of the sub-group to establish application functionality with the sub-portion that may be accessed, over the network, by additional parties authorized by the user. Also disclosed is a machine-readable medium and a data center, both of which facilitate carrying-out the steps of the method.

Abstract: A data storage device including a non-volatile memory and a micro-controller is provided. The non-volatile memory stores a firmware file. The micro-controller is coupled to the non-volatile memory, and performs an encryption procedure on the firmware file. The encryption procedure includes: using a first key and a first algorithm to encrypt the firmware file to generate a signature, using the first key and a second algorithm to scramble the signature to generate a scrambled signature, and attaching the scrambled signature to the firmware file.

Abstract: A data management circuit is provided. The data management circuit includes a volatile memory, a power supply circuit, and a signal receiving circuit. An output terminal of the power supply circuit is coupled to the volatile memory, and an output terminal of the signal receiving circuit is coupled to the output terminal of the power supply circuit and the volatile memory. The power supply circuit is configured to provide power to the volatile memory. The signal receiving circuit is configured to receive a wireless control signal and to output a data clearance signal corresponding to the wireless control signal, such that data recorded in the volatile memory is cleared by the data clearance signal.

Abstract: Systems, computing devices, and methods for performing an image search are presented. A search query including an image is received from a user. A segment associated with the image is identified. A user intent associated with the image and the segment is identified. Search results associated with the identified segment and user intent are generated, and presented to the user.

Abstract: In embodiments, apparatuses, methods and storage media (transitory and non-transitory) are described that are associated with receiving a call from an application at a shared library, accessing a first resource based at least in part on the first call, and storing a prefetch entry in a prefetch engine based at least in part on an address of a second resource in preparation to service a second call to the shared library that requires traversal of a plurality of stages at the shared library. A prefetch request may be performed based at least in part on the second call, and the second resource may be accessed based at least in part on a result of the prefetch request. In embodiments, the shared library may be a Message Passing Interface (MPI) library. Other embodiments may be described and/or claimed.

Abstract: Provided is a method and system for providing a personalized notification in a content service. The notification providing method includes selecting notification target content by analyzing a user utilization record of content with respect to a user that consumes the content; and sending a push notification associated with the notification target content to the user as a personalized notification.

Abstract: Techniques provide for persistently storing state information regarding configuration requirements, such as STIG (Security Technical Implementation Guides) requirements. The state information may indicate whether all or one or more selected categories of requirements are enabled. The state information may be persistently stored and applied or hardened across multiple processor nodes as well as across system upgrades.

Abstract: A computer-implemented method includes generating a new management application based on a first management application, where the first management application operates a first management system. A first set of resources of the first management system are assigned to the new management application, where the first set of resources support a first request server and a first worker server. A new worker server of the new management system is started, where the new worker server utilizes the first set of resources. The first request server is instructed to send a first set of future requests of the first request server to the new worker server. The first request server is further instructed to redirect a remainder of the future requests of the first request server to a new request server of the new management application. The new management application operates a new management system based on the first management system.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for training a neural network used to select actions performed by a reinforcement learning agent interacting with an environment. In one aspect, a method includes maintaining a replay memory, where the replay memory stores pieces of experience data generated as a result of the reinforcement learning agent interacting with the environment. Each piece of experience data is associated with a respective expected learning progress measure that is a measure of an expected amount of progress made in the training of the neural network if the neural network is trained on the piece of experience data. The method further includes selecting a piece of experience data from the replay memory by prioritizing for selection pieces of experience data having relatively higher expected learning progress measures and training the neural network on the selected piece of experience data.

Abstract: Novel tools and techniques are provided for implementing media content delivery. In some embodiments, a globally unique identifier (“GUID”) associated with a particular media content might be embedded in headers of packets of a transport stream of the media content. When the transport stream is received by a user device, the GUID might enable retrieval of the necessary metadata (and/or updates of metadata) for enabling presentation of the media content. Alternatively or additionally, ratings or similar information can likewise be embedded in the headers of packets or I-frames of the transport stream, which enables a user (e.g., parent) to easily block or skip objectionable content from children who may be present. Alternatively or additionally, the transport stream may be combined with auxiliary data streams containing metadata and other associated auxiliary content to create a combined transport stream, to ensure no lost or corrupted media content during transmission.

Abstract: A system and method include creating a bootable virtual machine (VM) image for a container image. The method includes a controller machine creating a single partition within an output VM disk file where the single partition comprises a master boot record and a partition table, forming a valid file system in a main partition of the output VM disk file, arranging an input set of container image definitions as a list where a base image forms a head of the list and subsequent images follow in the list, sequentially processing the list for each image by adding the input set of container image definitions to the output VM file; and applying a final networking configuration over the output VM file.

Abstract: In an information processing apparatus including a plurality of boards, it is possible to appropriately perform initialization of hardware of each board in accordance with a return factor. An information processing apparatus including a first system and a second system, the first system transmitting a boot program of the second system to the second system, and the first system: receives a return factor that causes the information processing apparatus to return from a power-saving state; and is capable of transmitting a first boot program including information indicating a first return factor and a second boot program including information indicating a second return factor to the second system, and the second system: is capable of receiving the first boot program and the second boot program; and performs first boot processing in accordance with the received first boot program and performs second boot processing in accordance with the received second boot program.

Abstract: In one example, a computing device including a mass storage medium. The mass storage medium has a pre-installed operating system but no pre-installed partition table. The mass storage medium has pre-installed boot software to generate and store a partition table on the mass storage medium. The partition table is usable by the operating system to access information on the mass storage medium.

Abstract: A debugger for distributed software running on multiple computer systems analyzes and compares system environments for the multiple computer systems. When a breakpoint occurs, or when a failure in one of the computer systems occurs, the debugger determines when one or more values of interest in the distributed software differ among the different computer systems. The debugger then determines whether the one or differing values correlate to the system environment for the corresponding computer systems. When the one or more differing values correlate to the system environment for the corresponding computer systems, the user of the debugger is notified of the correlation between the differing values and the system environments of the computer systems, to help potentially identify differences in system environments that could be contributing to the differing values.

Abstract: Configuration of availability of debugging messages during the execution of a firmware in a debugging mode of operation is provided. The configuration can be updated without rebuilding the firmware. Thus, a selection of a group of available types of debugging messages can be updated dynamically, at various runtime instances of the firmware. The selection can be accomplished by configuring, at a runtime of the firmware, a level of recordation of debugging messages and one or more data structures associated with the level or recordation. Each of the one or more data structures includes elements indicative of respective types of debugging messages being enabled or disabled for presentation during the execution of the firmware in the debugging mode of operation. A debugging message can be provided based at least partially on at least one of the data structure(s) during the execution of the firmware in the debugging mode of operation.

Abstract: The present disclosure is related to mixed mode management. A machine-readable medium may store instructions executable by a processing resource to determine that a first management node is operating according to a different configuration profile than a second management node and, responsive to the determination, transfer a mixed mode management plug-in from the first management node. The machine-readable medium may further store instructions executable by the processing resource to execute the mixed mode management plug-in on the second management node.

Abstract: Technologies are disclosed herein for configuring a system memory of a computer system by determining which, of a plurality, of serial presence detect (SPD) tables to utilize, based at least in part on settings of one or more GPIO pins. The computer system may be available with variations of the configuration of system memory. The SPD tables corresponding to each of the different configurations of the system memory may be stored on the computer system, such as on an NVRAM of the computer system. After identifying the appropriate SPD table, a processor may load the SPD table to a memory reference code of the computer system. In some cases, the state GPIO pins indicating the system memory configuration is set at the time of manufacture of the computer system.

Abstract: In one example in accordance with the present disclosure, a device comprising a host computing device further comprises a processor, a non-volatile dual inline memory module (NVDIMM) comprising metadata indicating system configuration information associated with the NVDIMM, and a basic input output system (BIOS) comprising system configuration information associated with the host computing device. The BIOS may: determine whether there is a mismatch between the system configuration information of the host computing device and the system configuration information indicated by the metadata.

Abstract: According to one embodiment, a method for remotely controlling peripheral devices in a mobile communication terminal includes acquiring a profile for a controlled peripheral device, configuring a control application for the controlled peripheral device based on the acquired profile, and controlling the controlled peripheral device using the configured control application.

Abstract: An apparatus for selectively applying settings for each of items set in a first processing device to a second processing device is provided. The settings for each of the items are indicated in each file, and the file is dividable into sets of separate data having a predetermined size or smaller. The apparatus includes a user interface configured to allow a user to choose target separate data from among the sets of separate data of each of the files; a selection portion configured to set, at selected data, the sets of separate data of a file having the target separate data among the files; and an application processing portion configured to perform application processing for applying the settings to the second processing device by using, among the sets of separate data of each of the files, the sets of separate data set at the selected data.

Abstract: An information handling system includes product lifecycle management circuitry and a management controller. The product lifecycle management circuitry receives an indication that a first firmware update package is to be demoted, starts a demotion process for the first firmware update package, and removes the first firmware update package from being available on an Internet website. The management controller extracts a first identifier for the first firmware update package, determines a first context in which the first firmware update package is being demoted, and publishes the first identifier and the first context in an exclusion catalog.

Abstract: Example embodiments disclosed herein relate to backing up firmware. An operating system can be initialized. During the initialization process, memory can be set. The firmware can be backed up to storage based on the set memory.