Abstract: A system for distributing a basic input output system (BIOS), comprising a BIOS settings system configured to receive BIOS settings data, a BIOS binary system configured to receive BIOS binary code, a processor configured to load BIOS firmware from a memory and a code packager coupled to the memory, the code packager configured to combine the BIOS settings data and the BIOS binary code, to generate the BIOS firmware and to store the BIOS firmware in the memory.

Abstract: Techniques are disclosed for performing secure remote bootstrapping operations of a network device such that sensitive configuration resides in volatile memory or is inaccessible upon power loss. In one example, a network device performs a first request for onboarding information. In response to determining that a first initialization of the network device has not occurred, the network device performs the first initialization by configuring, with the onboarding information, the network device to mount a portion of a file system to a volatile memory and not a non-volatile memory. After rebooting, the network device performs a second request for the onboarding information. In response to determining that the first initialization of the network device has occurred, the network device performs a bootstrapping operation of the network device. The bootstrapping operation may configure the network device for remote management such that any subsequent configuration obtained remotely is not retained on power loss.

Abstract: A preset application or an application determined by an electronic device based on a preset rule is automatically started when it is detected that an electronic device is attached onto a vehicle magnetic suction bracket. Therefore, the electronic device can automatically respond to an operation of attaching the electronic device onto the vehicle magnetic suction bracket by a user.

Abstract: Provided are a method and terminal device for installing an operating system. The method includes: copying an installation boot file in a mirror file of a to-be-installed-operating system into a root directory of a removable storage device attached to the terminal device, the mirror file being stored in the removable storage device; creating an installation script file where a pre-installation script indicates the mirror file is to be mounted to a first folder of the terminal device; designating in the installation script file that a storage address of software installation packages is that of the first folder; adding the installation script file to the mirror file and copying the updated mirror file into a hard disk, where the operating system is to be installed, in the terminal device to obtain a startup disk; and installing the operating system in the hard disk with the startup disk and installation boot file.

Abstract: In one embodiment, a computer-implemented method for server migration includes the step of, with an agent running inside a server, capturing a server image of the server, wherein the server image is independent of a source-compute infrastructure. The method includes the step of transferring the server image to a dedupe store. The method includes the step of transforming the dedupe stream of the server image into a bootable server image on a target compute infrastructure. The method includes the step of generating a recovery set of disks on the target compute infrastructure. The method includes the step of creating a recover-process server on the target compute infrastructure using a recovery set of disks.

Abstract: Aspects extend to methods, systems, and computer program products for allocating acceleration component functionality for supporting services. A service manager uses a finite number of acceleration components to accelerate services. Acceleration components can be allocated in a manner that balances load in a hardware acceleration plane, minimizes role switching, and adapts to demand changes. When role switching is appropriate, less extensive mechanisms (e.g., based on configuration data versus image files) can be used to switch roles to the extent possible.

Abstract: Examples of the present disclosure describe systems and methods for executable memory protection. In an example, calls to a memory API may be monitored to identify protection attributes of the associated memory. If software requests access to memory that is both executable and writeable, different protection attributes may be used to limit the availability of memory that is both executable and writeable. Subsequently, if software attempts to access the memory in a way not permitted by the different protection attributes, a resulting memory exception may be evaluated to determine whether to modify the memory protection attributes. In examples, the memory protection attributes may be updated accordingly (e.g., to be made executable but not writeable, writeable but not executable, etc.) and execution of the set of software instructions may resume. Thus, memory that is both executable and writeable may be reduced or eliminated; decreasing the likelihood of exploitation by malicious software.

Abstract: A method for interface refresh synchronization, a terminal device, and a non-transitory computer-readable storage medium are provided. The method includes: obtaining, in a user space of an operating system, refresh information of a plurality of interface refresh operations, when the plurality of interface refresh operations are initiated by a plurality of foreground applications in the user space; and transmitting the obtained refresh information of the plurality of interface refresh operations to a kernel space of the operating system, the refresh information including a thread number of each interface refresh operation, refresh time and refresh contents corresponding to each thread number.

Abstract: A method for creating image and a device thereof are provided. The method includes the following steps. A first software content list of a plurality of electronic devices is loaded. An operating system (OS), a plurality of first drivers and a plurality of first software are downloaded according to the first software content list. The OS, the plurality of first drivers and the plurality of first software are compressed into first image. The first image is decompressed, the first image is executed on each of the plurality of electronic devices, and the OS, at least one of the plurality of first drivers, and at least one of the plurality of first software are installed.

Abstract: Technologies are disclosed herein for near field communication (“NFC”) enhanced firmware security. Using an implementation of the technologies disclosed herein, an NFC card or an NFC-equipped mobile device can be utilized to access an NFC-equipped server computer. The server computer reads a login key from an NFC card or an NFC-equipped mobile device. Based upon the login key, a firmware executing on the server computer can determine whether a user is to have administrator access rights, non-administrator user access rights, or no access rights at all to a firmware setup menu provided by the server computer. Based upon the login key, the firmware executing in the NFC-equipped server computer can also identify an operating system to be booted by the server computer. In some configurations, an NFC-equipped mobile device contacts an authorization server to obtain the login key based upon a user's access credentials.

Abstract: Examples associated with basic input/output system (BiOS) security are described. One example includes detecting a mismatch between an active BiOS setting and a saved BIOS setting. An update previously applied to the active BiOS setting is validated. The update Is applied to the saved BIOS setting creating an updated BIOS setting. The saved BIOS setting is updated when the updated BIOS setting and the active BIOS setting match. The saved BIOS setting is updated to the active BIOS setting. A security action is taken when the updated BiOS setting and the active BiOS setting differ.

Abstract: An image forming apparatus includes: a sheet tray; a sheet detection sensor that detects that a sheet is placed on the sheet tray; a display unit; and a control unit. In a case where the sheet detection sensor detects the sheet on the sheet tray, the control unit determines whether or not to cause the display unit to display a confirmation screen for sheet setting. In a case where a predetermined inappropriate confirmation condition is satisfied, the control unit causes the display unit not to display the confirmation screen. In a case where the inappropriate confirmation condition is not satisfied, the control unit causes the display unit to display the confirmation screen.

Abstract: A computer device, a server device, and a method for controlling a hybrid memory unit thereof are provided. The control method includes: executing, by a processing unit, an operating system (OS) in a working mode of the computer device; triggering, by a soft off control signal or a soft reset control signal when the processing unit executes the OS, the processing unit to enter an interrupt processing mode; executing, by the processing unit, basic input/output system (BIOS) program code in the interrupt processing mode; and controlling, by the processing unit by using the BIOS program code, to store data from a volatile memory into a non-volatile memory corresponding to the volatile memory.

Abstract: A method includes, responsive to detecting network activity indicative of a threat, selecting a threat mitigation scheme corresponding to a set of response actions. The method also include filtering the set of response actions based on a policy to generate a set of allowed response actions and executing one or more response actions of the set of allowed response actions.

Abstract: A method for processing virtualization of computers that are part of a group into virtual computers is provided. The method includes obtaining relationship data from the computers, where the relationship data identifies parameters used to communicate within the group. Then, the method analyzes utilization parameters for each of the computers of the group. A visual model for proposed virtualization of the group of computers is then generated. The visual model identifies hosting machines designated to define a virtual computer for each of the computers, where the visual model provides a graphical illustration of the group of computers once converted to virtual computers. The method enables adjustment of the proposed virtualization of the group of computers. Then, an execution sequence of virtualization operations to be carried out is generated, if execution of the proposed virtualization is triggered, and the execution sequence is saved to storage and accessed upon execution.

Abstract: A multiple processor system comprising a first processor configured to utilize an inter-processor messaging protocol and a second processor configured to utilize the inter-processor messaging protocol is disclosed. The system includes a non-volatile memory device coupled to the first processor, wherein the second processor is configured to access the non-volatile memory device by utilizing the inter-processor messaging protocol.

Abstract: Apparatuses, methods and storage medium for providing access from outside a multicore processor System on Chip (SoC) are disclosed herein. In embodiments, an SoC may include a memory to store a plurality of embedded values correspondingly associated with a plurality of architecturally identical cores. Each embedded value may indicate a default voltage for a respective one of the plurality of architecturally identical cores. In embodiments, an apparatus may include one or more processors, devices, and/or circuitry to provide access from outside the multicore processor SoC to individually configure voltages of the plurality of architecturally identical cores to values that are different than the values of the default voltages. Other embodiments may be described and/or claimed.

Abstract: In the face of ransomware attacks, which can be increasingly difficult to effectively prevent, a solution can be considered to be the minimization of the cost and time taken to recover data and, hence business activities. Embodiments perform a restore operation that include automatically identifying the most recent healthy backup, from which data should be restored, and the prioritizing of the order in which data should be restored.

Abstract: Examples of the present disclosure provide apparatuses and methods related to generating and executing a control flow. An example apparatus can include a first device configured to generate control flow instructions, and a second device including an array of memory cells, an execution unit to execute the control flow instructions, and a controller configured to control an execution of the control flow instructions on data stored in the array.

Abstract: An information handling system includes a flash memory and a processor. The processor executes boot instructions including a boot log agent configured to collect initialization phase messages. The flash memory device also includes a circular buffer configured to store the collected initialization phase messages.

Abstract: Managing the execution of a computer software application by duplicating a primary instance of a computer software application during its execution in a primary execution context to create multiple duplicate instances of the computer software application in corresponding duplicate execution contexts, and effecting a selection of a different candidate subset of predefined elements for each of the duplicate instances.

Abstract: A computer processing device transitions among a plurality of power management states and at least one power management sub-state. From a first state, it is determined whether an entry condition for a third state is satisfied. If the entry condition for the third state is satisfied, the third state is entered. If the entry condition for the third state is not satisfied, it is determined whether an entry condition for the first sub-state is satisfied. If the entry condition for the first sub-state is determined to be satisfied, the first sub-state is entered, a first sub-state residency timer is started, and after expiry of the first sub-state residency timer, the first sub-state is exited, the first state is re-entered, and it is re-determined whether the entry condition for the third state is satisfied.

Abstract: A computer system is provided for retrospectively processing a data structure that includes a plurality of entries. The computer system determines if certain data transactions requests that have been recorded in the data structure could have been executed differently (e.g., by being processed at an earlier point in time). For a given entry in the data structure, the system determines if data transaction request could have at least partly succeeded against a prior recorded state of at least one of two ordered lists of pending data transaction requests. Another entry is then found that caused the initial entry to fail in execution and a time delta is stored between the timestamp of the another entry and the timestamp of the initial entry.

Abstract: A mobile device may be managed based on information about a geographic movement of the mobile device. The geographic movement may take into account a location, a speed, and an acceleration for the mobile device. A movement profile is determined based on the geographic movement. A settings profile is determined based on the movement profile and a profile mapping. Based on the settings profile, resource consumption for the mobile device may be managed by adjusting settings for the device accordingly.

Abstract: A first server includes a processor and a memory accessible to the processor. The memory bears instructions executable by the processor to determine that a server is present that has not had settings other than at most default settings applied to a basic input output system (BIOS) executable by the server to boot the server. The instructions are also executable by the processor to, based at least in part on a determination that the server is the same model of server as the apparatus, has the same BIOS version as the apparatus, and/or has the same baseboard management controller (BMC) version as the apparatus, facilitate over a peer to peer server network at least some settings in the apparatus to be provisioned to the server to establish the at least some settings in the server.

Abstract: In the face of ransomware attacks, which can be increasingly difficult to effectively prevent, a solution can be considered to be the minimization of the cost and time taken to recover data and, hence business activities. Embodiments perform a restore operation that include automatically identifying the most recent healthy backup, from which data should be restored, and the prioritizing of the order in which data should be restored.

Abstract: A consent receipt management and data processing system may be configured to provide a centralized repository of consent receipt preferences for a plurality of data subjects. In various embodiments, the system is configured to provide an interface to the plurality of data subjects for modifying consent preferences and capture consent preference changes. The system may provide the ability to track the consent status of pending and confirmed consents. In other embodiments, the system may provide a centralized repository of consent receipts that a third-party system may reference when taking one or more actions related to a processing activity.

Abstract: Access is obtained to raw historic information technology migration data, which data is transformed in accordance with a classification scheme to obtain classified key historic information technology migration data. A statistical model with conditional distributions of the key historic information technology migration data is built. Prior to a new information technology migration project, access is obtained to incomplete data characterizing the new information technology migration project. The statistical model is used to derive data missing from the incomplete data characterizing the new information technology migration project, to obtain derived data. At least one of a migration plan and an estimate for the new information technology migration project is created based on the incomplete data and the derived data.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be an embedded-system device. The embedded-system device receives at least one IPMI message from a client device. The embedded-system device extracts message data from the at least one IPMI message. The embedded-system device determines, from the message data, a function call including at least one operation code and for processing a data collection. The embedded-system device processes the data collection based on the at least one operation code. The disclosure describes a common implementation of data transfer and usage that can serve different clients as well as future features with zero or minimum redesign or redevelopment.

Abstract: The present disclosure discloses a method and apparatus for updating server firmware in a server. The server is based on a Purley platform, a South Bridge chip of the server is electrically connected to a BMC through an ESPI bus, and the BMC is electrically connected to a firmware memory storing server firmware and a BMC memory through the ESPI bus. An embodiment of the method includes: performing a read operation on an image file for updating the server firmware stored in the BMC memory by using the BMC, when a preset upgrading condition is satisfied; and updating the server firmware stored in the firmware memory based on information read from the read operation. This embodiment achieves an updating of server firmware without additional hardware.

Abstract: Apparatus, systems, methods, and computer program products are disclosed for providing software updates to client devices. A client device (such as a thermostat) executes software to perform one or more functionalities of the device. Upon receiving an indicating that a software update is available, the device waits to download the software update until pre-download conditions are satisfied. Once the software update is downloaded, the device then waits to install the software update until pre-install conditions are satisfied. If the software update is non-critical and received during an initial installation of the device, the software update may not be installed until after installation of the device is complete. If the device is a thermostat, the device may delay installation of the software update until a controlled HVAC system in inactive. Control of the HVAC system may be disabled during installation of the software update.

Abstract: An image forming apparatus includes plural internal devices, a controller, and a communication path. The controller is configured to control the plural internal devices. The communication path is used for communication between the plural internal devices and the controller. Usage priority of the communication path is assigned to plural pieces of communication between the plural internal devices and the controller in a time divisional manner. The controller detects a status change of the image forming apparatus, and upon detecting the status change, interrupts the time divisional manner with a time slot of a specific internal device among the plural internal devices, the specific internal device corresponding to the status change.

Abstract: A hardware independent peripheral control system and method are disclosed. The system comprises: a virtualised controller (20) executable by a processor (35) of a host system (30). The virtualised controller (20), when executed by the host system (30), has an input interface (21), an output interface (22), a processor (23) and a memory (24). The memory (24) encodes data on one or more peripheral specific instructions to control a peripheral (40) attached or connected to the host system (30). The input interface (21) is configured to receive peripheral agnostic instructions from the host system (30).

Abstract: Some embodiments of the present invention provide virtual configuration systems and methods that overcome some or all of the downfalls of typical approaches by allowing for persistent configuration of an operating system of a host device. A virtual configuration layer may be incorporated into the file system of the host device and executed to modify configuration data stored outside of the file system, without changing the file system. Once the configuration data is modified, it may be used to configure the file system and/or the operating system of the host device when it is loaded by a client device. In some embodiments, the host device may be nonvolatile storage (e.g., a flash drive) embedded into a client device (e.g., a diskless system).

Abstract: A reinforcement learning neural network system in which internal representations and policies are grounded in visual entities derived from image pixels comprises a visual entity identifying neural network subsystem configured to process image data to determine a set of spatial maps representing respective discrete visual entities. A reinforcement learning neural network subsystem processes data from the set of spatial maps and environmental reward data to provide action data for selecting actions to perform a task.

Abstract: Aspects of the present disclosure relate to systems and methods for virtualizing mass storage using a network storage device operatively coupled to a host system. In various implementations, the network storage device and host system may collectively emulate a mass storage device for another “terminal” computing system. This emulation can be performed while utilizing the minimum possible memory of the host system, as the network storage device contains the operating system data for the host system in addition to game and user data required for the implementation of a computer application.

Abstract: Disclosed herein is a computing system with the capability to execute instructions in different positional notation values. The definition of a positional notation value is given by the general formula that represent a base 10 numeral in any positional notation in the following manner: . . . d3r3+d2r2+d1r1+d0r0, where d is a coefficient, r is the base of the positional number system (i.e. r=2 for binary, or r=3 for ternary), and the exponent is the position of the digit. The computing may provide a configuration which hybridizes the instructions of multiple positional notation values in variable ratios. The computing system may dynamically switch between the multiple hybridized instructions sets. Embodiments may be applied to provide security benefits.

Abstract: Techniques for providing and maintaining protection of firmware routines that form part of a chain of trust through successive processing environments. An apparatus may include a first processor component (550); a volatile storage (562) coupled to the first processor component; an enclave component to, in a pre-OS operating environment, generate a secure enclave within a portion of the volatile storage to restrict access to a secured firmware loaded into the secure enclave; a first firmware driver (646) to, in the pre-OS operating environment, provide a first API to enable unsecured firmware to call a support routine of the secured firmware from outside the secure enclave; and a second firmware driver (647) to, in an OS operating environment that replaces the pre-OS operating environment, provide a second API to enable an OS of the OS operating environment to call the support routine from outside the secure enclave.

Abstract: A protection and control system which is capable of surely updating a program without a program update by an operator and without deactivating a power system is provided. A protection and control device 1 includes an update accepting unit 1c that determines whether or not to accept the update of the program from a managing server 3, and an updating processing unit 1d that receives an updating program and that updates the program. The managing server 3 includes an update determining unit 3c that determines whether or not a supplied update program is for updating the program of the predetermined protection and control device 1, a transmitting unit 3b that transmits an update notification to the protection and control device 1 on which the program to be updated is loaded, and a receiving unit 3a that receives a reply to the update notification from the protection and control device.

Abstract: A computing device includes a touch-sensitive user interface configured to present a unified collaborative session for two or more users, and an authentication module configured to simultaneously identify and authenticate multiple users physically co-located within a collaborative environment, allowing each of the multiple users to interact with the touch-sensitive user interface. A content module is configured to simultaneously provide one or more content portals within the unified collaborative session for each authenticated user. Each content portal is configured to enable an authenticated user to access, retrieve, and present user-owned content files within the unified collaborative session. In this way, multiple users may simultaneously access, retrieve, and present their own content files on a single computing device.

Abstract: In one or more embodiments, a first operating system may receive, via a first non-volatile memory medium of an information handling system, an executable file from information handling system firmware; the executable file may provide configuration information to the first operating system; the first operating system may configure the information handling system based at least on the configuration information; a second operating system may be received; the second operating system may be installed to a second non-volatile memory medium; the executable file may provide the configuration information to the second operating system; and the second operating system may configure the information handling system based at least on the configuration information.

Abstract: Examples described relate to container images. An example method may include generating a mapping of respective unique identifiers of container images of a software container and respective metadata of the container images, validating the mapping against a rule to identify a unique identifier of a mapped container image that meets the rule, generating a target mapping that includes the unique identifier of the mapped container image that meets the rule and the action specified in the rule, and performing the action specified in the rule on the mapped container image corresponding to the unique identifier in the target mapping.

Abstract: An information handling system includes a driver and a service. The driver is configured to determine if an operating system is not a restricted operating system, determine if corresponding service is present in response to determining the operating system is not a restricted operating system, and shut down the driver in response to determining the corresponding service is present. The service is configured to determine if a corresponding driver is present, and disable the corresponding driver in response to determining the corresponding driver is present.

Abstract: Described is a computing platform, which comprises: a non-volatile memory having a firmware boot program; and a CPU to execute the firmware boot program when the CPU is reset, the firmware boot program including instructions to create Power and Performance Measurement (PPM) interface data structures including an error injection table structure to provide error injection services to an OS.

Abstract: A memory device may be configured to leverage memory resources of a host computing device to efficiently transition between different power states. In some embodiments, the memory device stores resume data within a host memory buffer (HMB) before transitioning to a low-power state, and uses the resume data stored within the HMB to resume operation from the low-power state. The memory device may be configured to pre-populate the HMB with resume data prior to transitioning to the low-power state. In some embodiments, the disclosed memory device is configured to gradually resume from the low-power state, which may comprise resuming services of the memory device in the order such services are required during the resume process.

Abstract: A memory device is embedded in (or connected to) a host device. The memory device includes a first boot partition and a second boot partition. The first boot partition stores first boot data. The second boot partition stores second boot data. The memory device includes a pointer that points to either the first boot partition or the second boot partition. The memory device transfers the first boot data from the first boot partition in response to receiving a boot signal from the host and the pointer pointing to the first boot partition. The host attempts to boot using the first boot data. If the host does not boot successfully from the first boot data then the host is booted from second boot data transferred from the memory device without the host requesting that the pointer switch to pointing at the second boot data.

Abstract: An automated boot failure prevention and recovery circuit includes one or more non-transitory computer-readable media having computer-executable instructions embodied thereon, a processor coupled to the one or more non-transitory computer-readable media, and configured to execute the computer-executable instructions to electrically disconnect a memory from a power source, short the memory to ground for a predetermined period of time to adjust memory content from a stochastic state to a machine-tolerable state or an acceptable non-failure state. The processor is further configured to execute the computer-executable instructions to electrically disconnect the memory from the ground, and electrically reconnect the memory to the power source. The processor is further configured to execute the computer-executable instructions to apply a load across the power source, acquire power source information, and notify the user of the battery charge status to preclude loss of memory data.

Abstract: Examples of systems described herein include a file server virtual machine of a virtualized file server configured to communicate with a user virtual machine over a first virtual network to transfer data and to communicate with a controller virtual machine over a second virtual network to transfer control information.

Abstract: A display control unit displays, in a case where the display control unit is in a startup state or in an abnormal operation state of a general purpose application, a display window of a dedicated middleware even when a startup of the dedicated middleware is completed and a startup of a general purpose middleware is not completed. With this configuration, the user operation is allowed to perform operation to the general purpose application and is not required to wait until the startup of the general purpose middleware is completed. When the startup of the general purpose middleware is completed, a display window of the general purpose application which includes display window data transferred from the general purpose middleware is displayed. Thus, information related to the general purpose application can be promptly provided to a user.

Abstract: A BIOS startup method is disclosed, the method includes: in a first access mode, allocating, by a current node, a local MMCFG in a space below a local access address of the current node that is a first address, and completing memory initialization; and when performing unified memory addressing of a system, moving positions of addresses of a part or an entirety of the MMCFG space of the current node from the original space below the first address in a global access address of the system to a space that is above the first address and can be accessed in a second access mode.