Abstract: An apparatus and a method for outputting contents where an Output Protection Level (OPL) has been set to an extension device in an electronic device are provided. The apparatus includes a secure processor for decrypting and decoding contents where a right to use the contents has been set using a secure Operating System (OS). When receiving an external output request for contents whose external output is not allowed, the secure processor stops generating of decoded data transmitted to an extension device.

Abstract: Methods and systems for controlling and managing identity and access management risks are presented. A computing device may generate a maturity model that maps a plurality of access management controls to a plurality of information technology (IT) resources associated with an IT environment. Subsequently, the computing device may determine, for each IT resource of the plurality of IT resources, a plurality of access management maturity scores. Each access management maturity score of the plurality of access management scores may correspond to an access management control of the plurality of access management controls that are associated with the corresponding IT resource. The computing device then may determine an aggregate maturity score for the IT environment based on the plurality of access management maturity scores for the plurality of IT resources. Thereafter, the computing device may provide the maturity model and the aggregate maturity score to at least one governance system.

Abstract: During the startup of an operating system of a computing system, a monitoring process of the operating system is used to detect an entry point of a daemon manager process. In response to detecting the entry point, the startup process is paused, and an early attach process is launched so as to attach one or more encrypted data partitions to the operating system. As part of the early attach process, the network stack of the computing system may be initialized, which allows the early attach process to retrieve one or more decryption keys corresponding to the one or more encrypted data partitions from an external key management server. The one or more decryption keys may be transmitted to a disk filter driver of the operating system, which provides the operating system with access to the one or more encrypted data partitions. Upon the conclusion of the early attach process, the operating system startup process resumes with the one or more encrypted data partitions now accessible to the operating system.

Abstract: A data storage device for reducing a firmware update time includes a non-volatile memory configured to store a firmware update image which will replace a current firmware image, a first volatile memory, and a processor configured to control an operation of the non-volatile memory and an operation of the first volatile memory. When a first code included in the current firmware image is executed by the processor, the first code generates data necessary for an operation of the data storage device and stores the data in the first volatile memory. When a second code included in the firmware update image is executed by the first code, the second code accesses and uses the data that has been stored in the first volatile memory.

Abstract: A nonvolatile memory that stores boot data from a host learns which data is boot data by monitoring read commands received from a host during a powering up operation. Boot data is then arranged in a manner that makes subsequent reading of the boot data faster when it is accessed during a subsequent powering up operation.

Abstract: Embodiments of a method and apparatus are described for operating a mobile computing device in different modes using different operating systems. An apparatus may comprise, for example, a memory operative to store multiple operating systems, a processor operative to execute the multiple operating systems, an operating system management module operative to select a first operating system when the mobile computing device is in a first mode or a second operating system when the mobile computing device is in a second mode and the mobile computing device is coupled to one or more external devices. Other embodiments are described and claimed.

Abstract: Methods and instrumentalities are disclosed that enable one or more domains on one or more devices to be owned or controlled by one or more different local or remote owners, while providing a level of system-wide management of those domains. Each domain may have a different owner, and each owner may specify policies for operation of its domain and for operation of its domain in relation to the platform on which the domain resides, and other domains. A system-wide domain manager may be resident on one of the domains. The system-wide domain manager may enforce the policies of the domain on which it is resident, and it may coordinate the enforcement of the other domains by their respective policies in relation to the domain in which the system-wide domain manager resides. Additionally, the system-wide domain manager may coordinate interaction among the other domains in accordance with their respective policies.

Abstract: An embodiment includes an apparatus comprising: an out-of-band cryptoprocessor coupled to secure non-volatile storage; and at least one storage medium having firmware instructions stored thereon for causing, during runtime and after an operating system for the apparatus has booted, the cryptoprocessor to (a) store a key within the secure non-volatile storage, (b) sign an object with the key, while the key is within the cryptoprocessor, to produce a signature, and (c) verify the signature. Other embodiments are described herein.

Abstract: Methods and systems described herein relate to enhancing security on a device by enforcing security and access control policies on privileged code execution.

Abstract: On an imaging apparatus according to the present invention, a first operating system (OS) is initially activated, and thereafter a second operating system (OS) is activated. When the second OS is activated, in an event that a first camera function of the first OS is performing imaging preparation, the imaging apparatus according to the present invention executes imaging processing using the first camera function. In an event that the first camera function is not performing imaging preparation, the imaging apparatus activates a second camera function of the second OS.

Abstract: Techniques for surfacing host-side flash storage capacity to a plurality of VMs running on a host system are provided. In one embodiment, the host system creates, for each VM in the plurality of VMs, a flash storage space allocation in a flash storage device that is locally attached to the host system. The host system then causes the flash storage space allocation to be readable and writable by the VM as a virtual flash memory device.

Abstract: Techniques are provided for actively managing secure boot variables. Such techniques include receiving a request from an entity to modify a portion of a basic input/output system (BIOS), the request including a data segment, and verifying that the requesting entity is authorized to modify a portion of the BIOS. In response to verifying that the requesting entity is authorized, the portion of the BIOS is modified based on the received request and the data segment, and a copy of the data segment is stored in a file on a physical memory that is communicatively coupled to the BIOS. If the BIOS is updated, thereby erasing part or all of the secure boot variables that are stored in the BIOS, the record of changes of the secure boot variables along with default authenticated variables may be used to restore the secure boot variables to a state prior to the BIOS update.

Abstract: Automated provisioning of hosts on a network with reasonable levels of security is described in this application. A certificate management service (CMS) on a host, one or more trusted agents, and a public key infrastructure are utilized in a secure framework to establish host identity. Once host identity is established, signed encryption certificates may be exchanged and secure communication may take place.

Abstract: A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.

Abstract: The boot process of a content/service receiver is dynamically monitored to provide error and/or status information in a step-by-step and/or in a single-snapshot manner. This can be accomplished by, for example, utilizing an application thread running within, and/or, outside the context of the boot code. Status information from, for example, software drivers and/or any other software/hardware/middleware components, is acquired by the application thread utilizing any mechanism, for example, event-driven and/or polling, and then relayed to an external entity, which can be locally and/or remotely located. The external entity can be reached by any means of standard and/or proprietary medium and protocols available, if necessary. The relayed information can then be used, for example, for displaying to a user via a graphical user interface, and/or can be recorded and the like.

Abstract: An image processing system includes, a reconfigurable circuit, a storage unit storing first configuration data for a first logical circuit in a predetermined area on the reconfigurable circuit, and second configuration data for a second logical circuit in the predetermined area, and a configuration unit configured to perform first configuration processing for configuring the first logical circuit in the predetermined area, by using the stored first configuration data and predetermined configuration data, on the predetermined area and a different area, and to perform second configuration processing for configuring the second logical circuit in the predetermined area, by using the stored second configuration data and predetermined configuration data, on the predetermined area and the different area. The predetermined configuration data used for the first configuration processing and the predetermined configuration data used for the second configuration processing are not stored in a duplicated way.

Abstract: There is provided a method and system to automatically provide software and/or firmware updates to the electronic devices, particularly mobile devices used by consumers such as portable health-care data interchange devices. There is also provided a method and system of updating software in electronic devices without requiring a wired data interface to affect changes. There is also provided a method and system for tracking the configuration of electronic devices that are sold to and configured by particular consumers, especially consumers/patients using electronic devices related to health care. Further, there are also provided a methods and systems for integrating the purchase, and ordering, and software configuration of electronic devices.

Abstract: A memory system includes a memory controller, a first memory module and second through k-th memory modules. The first memory module is directly coupled to the memory controller without any other memory modules communicatively coupled therebetween, through a first memory bus, and the first memory module exchanges first data with the memory controller. The second through k-th memory modules are coupled to the first memory module with a multi-drop connection through a second memory bus and the second through k-th memory modules exchange second data with the memory controller via the first memory module.

Abstract: In some examples, an electronic device receives, while an operating system is running in the electronic device, a request to access a function of a Basic Input/Output System (BIOS), the request containing a web address of the function of the BIOS, and routes, based on the web address of the function of the BIOS, the request through a web-based interface to a domain that includes the function of the BIOS.

Abstract: Technologies are provided herein for automated operating system installation on multiple drives. A device switch connects a mass storage device to a test control system (“TCS”) or a system under test (“SUT”). When connected to the TCS, the mass storage device is mounted with a disk image containing an installer program for an operating system. When the mass storage device is connected to the SUT, the installer program is executed to install the operating system onto an activated drive connected to the SUT. Multiple operating systems can be installed in a similar fashion by mounting a corresponding disk image for an operating system onto the mass storage device and by installing from the mass storage device the operating system onto a corresponding drive connected to the SUT. Errors generated during the automated installation process can be analyzed and utilized to identify and correct errors in a computing system firmware.

Abstract: An apparatus includes a first interface configured to be coupled to a storage device via a first bus. The apparatus includes a second interface configured to be coupled to a system processor (e.g., a central processing unit (CPU), a graphics processing unit (GPU), a digital signal processor (DSP), etc.) via a second bus. The apparatus further includes a processor configured to, during a boot process of the system processor, receive boot code from the storage device via the first interface. The processor is configured to generate a first value based on the boot code. The processor is further configured to provide the boot code to the system processor via the second interface.

Abstract: Systems and methods for providing pre-boot providing pre-boot self-healing and adaptive fault isolation. In some embodiments, an Information Handling System (IHS) includes a processor and a Basic I/O System (BIOS) coupled to the processor, the BIOS firmware having program instructions that, upon execution by the processor, cause the IHS to: initiate the booting of devices within the IHS following a predetermined boot order, wherein the predetermined boot order includes a first device followed by a second device; determine that the first device has been marked for bypass; bypass the booting of the first device; and boot the second device.

Abstract: A database may provide a visualization of restoration operation granularity. Information may be obtained describing possible restoration points within a given period of time for a database. The information may include a respective state of the database associated with a point in time and a respective restoration operation type for the possible restoration points. A graphical representation may be generated illustrating the possible restoration points ordered within the given time period according to the points in time associated with the respective states of the database. The graphical representation may be provided via network-based interface to a client of the database. The graphical representation of the possible restoration points may be updated in response to changes to the given time period or database volume events that modify the possible restoration points.

Abstract: A multi-boot device capable of booting from a plurality of boot devices, each storing a boot image. The multi-boot device determines which boot device to load based on sequence numbers assigned to each of the boot devices. Some embodiments will make this determination using only hardware operations. The multi-boot device compares the sequence numbers of the available boot devices in order to determine the boot image to be loaded. The address of the selected boot image is then mapped to the device's default boot vector. The remaining images are likewise mapped to a secondary boot memory. The device then boots from the default boot vector. The user can change the boot device to be loaded by modifying one or more of the boot sequence numbers. The boot images can be updated without resetting the device by switching execution to and from boot images in the secondary boot memory.

Abstract: A computing system firmware is provided that includes functionality for securely authenticating a user of the computing system prior to allowing the user, through an application running on an operating system, to invoke firmware functions and to access and modify firmware variables. The authentication may use the same authentication credentials used to access firmware utilities during the computing system's power-on self-test (POST) phase. Upon receiving requests to access firmware assets, an authentication service determines whether the access has been authenticated for the user. If so, access to the firmware assets is granted. If access has not been authenticated for the user, the authentication service attempts to authenticate the user by verifying the authentication credentials passed along with the request.

Abstract: To properly execute load shedding in an aircraft to maintain power supply to more devices. A method of load shedding includes a failure detection step of detecting a failure in a generator, and a load-shedding step. The load-shedding step includes determination step, and execution step, respectively, the determination step in which the load shedding is determined to be needed if the state where a power consumption exceeds a power-generation capacity continues for a monitoring time, and the execution step in which the load shedding is executed step-by-step while advancing a priority given to a target device until the power consumption falls below the power-generation capacity.

Abstract: A power savings mode for data updates is provided. The power savings mode prevents data updates to occur while a screen of a portable electronic device is turned off and the device is in a sleep state. The power savings mode waits until the screen is turned on and the portable electronic device is in a wake state before allowing applications and widgets to update data from network repositories. By preventing applications and widgets from updating data while the portable electronic device is in a sleep state, the power savings mode conserves battery life and network bandwidth by limiting possibly unnecessary data transmissions.

Abstract: An information processing apparatus which updates a basic software package is disclosed. The information processing apparatus includes an encryption and decryption unit which stores values calculated uniquely from software and encrypts information based on the calculated values and decrypts encrypted information based on the calculated values. The basic software package includes a firmware authenticating module for authenticating a firmware updating file which includes new software for updating the basic software package, a value uniquely calculated from the new software, and a public key signature. The information processing apparatus further includes a software updating module which updates the basic software package by using the authenticated firmware updating file, and an encryption key managing module for encrypting again the information encrypted by the values based on a value changed by updating the basic software package.

Abstract: According to one embodiment, a setting method, includes storing, in a first partition of a storage which stores a first file causing a processor to execute a first program to booting an operating system, a second file having a same path as a path of the first file and causing the processor to execute a second program. The second program is executed by the processor at activation of an information processing apparatus and causing the processor to execute the first program.

Abstract: A code reuse user interface executed by a processor allows a code developer to specify unused data variables of a coded object definition to be reused, from pre-existing code within a new application, as a partial object without instantiation of the unused data variables. An indication from the code developer that at least one data variable of the reused coded object definition is specified as unused in the new application is detected within the code reuse user interface. The specified at least one unused data variable of the reused coded object definition is externalized from the code reuse user interface to a runtime environment, where as part of execution of the new application in the runtime environment, the runtime environment instantiates the reused coded object definition as the partial object without instantiation of the specified at least one unused data variable.

Abstract: A method for providing an abuse sentry service for responding to domain name abuse is described. The method comprises the following steps. A plurality of disparate abuse feeds is received, each comprising data relating to a subset of potential domain name abuse. Filters are applied to the data to create a custom abuse feed. Data from the custom abuse feed is grouped based on priority levels. For each of the groups, one or more corresponding workflows are executed as a response to the potential domain name abuse. A computer readable medium including instructions for implementing the method is also described.

Abstract: The present disclosure relates to allowing the utilization of a virus scanner and cleaner that operates primarily in the pre-boot phase of computer operation and, more particularly, to allowing the utilization of a virus scanner and cleaner that operates primarily during the loading of an operating system.

Abstract: An embedded system includes an interface to an external peripheral device storing secure boot code and a secure boot controller. The secure boot controller includes a secure central processing unit (CPU) having a processor core, a random access memory (RAM) coupled to the processor core, and a read only memory (ROM) coupled to the processor core. The ROM stores initialization firmware configured to manipulate the processor core to initiate transfer of a copy of the secure boot code from the external peripheral device to the RAM and to authenticate the secure boot code. The processor core further is to execute the secure boot code from the RAM to initialize the embedded system. After initialization of the embedded system is completed, the secure CPU can be repurposed to execute application code that has been stored to the RAM after initialization, the application code representing an independent software function.

Abstract: A user-provided keystore may be utilized in a boot process to verify a boot image as disclosed herein. A device may be determined to be in a locked or verified state. A selected keystore may be determined to not verify against a first key such as a root key. A user may provide a keystore to a device. The system may display a prompt to the user which asks whether the user would like to continue to boot or not, if the system determines that the keystore does not verify against the first key. The user may respond to the prompt by indicating a desire to continue booting. The system may determine that the boot image verifies against the keystore and finish booting the device. Thus, the prompt may alert the user to a threat to the integrity of the boot process or device.

Abstract: A mobile terminal including a memory including at least first and second OSs (Operating Systems) and applications dedicated to each of the first and second OSs; a display unit configured to display a first OS (Operating System) dedicated screen including the applications dedicated to the first OS among the first and second OSs; and a controller configured to control the display unit to switch the displaying of the first OS dedicated screen to a displaying of a second OS dedicated screen if a switching command for switching the first OS dedicated screen to the second OS dedicated screen is input.

Abstract: There is provided a method and system to automatically provide software and/or firmware updates to the electronic devices, particularly mobile devices used by consumers such as portable health-care data interchange devices. There is also provided a method and system of updating software in electronic devices without requiring a wired data interface to affect changes. There is also provided a method and system for tracking the configuration of electronic devices that are sold to and configured by particular consumers, especially consumers/patients using electronic devices related to health care. Further, there are also provided a methods and systems for integrating the purchase, and ordering, and software configuration of electronic devices.

Abstract: A display apparatus and method for bending a display panel automatically during booting are provided. According to an exemplary embodiment, the display apparatus may include a display module; an input unit configured to receive a command from a user; a storage configured to store a booting sequence; a driver configured to change a curvature of the display module; and a processor configured to, in response to a power-on command being received through the input unit, control the driver to bend the display module, while performing booting according to the booting sequence.

Abstract: Systems and methods for using a semantic search to address business entities that fulfill certain criteria are provided. A free search term may be determined by a user for the semantic search. The free search term may include any object type, element or parameter the user would like to search for. An ontology which relates to a specific business or industry may be used for the semantic search. The ontology may include various business classes, roles, and individuals. In some implementations, the ontology may be generated from metadata of business objects. The semantic search may be conducted across the entire ontology to obtain search results that match the free search term. As a result, business entities that fulfill the free search term may be retrieved and provided to the user.

Abstract: An electronic device with a plurality of booting modes comprises at least a button unit, a control module, a control chip unit, a super I/O unit and a Basic Input/Output System (BIOS). One of the button units outputs a first signal according to a trigger event. The control module includes a buffer unit connected to the button units. The control module sets the buffer unit according to the first signal. The control module outputs a status signal and copies the first signal and outputs the first signal after a delay time. The control chip unit receives the status signal. The super I/O unit receives the first signal outputted from the control module and transmits the first signal to the control chip unit. When the control chip unit receives the status signal and the first signal, the BIOS executes the corresponding booting procedure according to the status signal.

Abstract: A method of booting a multisystem including a first core and a second core, the method includes: executing a boot loader of the first core; setting a network interface of the first core to be in an enable state; detecting the second core that is connected to the network interface of the first core; mapping a first memory of the first core to a second memory of the second core; loading a booting image of the first core and a booting image of the second core on the first memory; and transferring the booting image of the second core loaded on the first memory to the second core via a network.

Abstract: An information processing apparatus includes a storage unit and a processor. The storage unit stores a relationship between a device connected to the information processing apparatus and address information assigned to the device.

Abstract: A method is disclosed for automatically configuring network devices of a data network having at least two configurable network devices, whose configuration parameters are deployable over the data network to the configurable network devices from an initial configuration state to a desired configuration state. At least one of the configurable network devices is from a first type of network devices, whose configuration requires a pre-defined series of at least one intermediate configuration state. A central deployment network device determines the actual state of each configurable network device for comparing with desired states of the configurable network devices, and in case of a difference, determines a subsequent intermediate and or respective subsequent desired configuration state wherein actual states of the configurable network devices are considered.

Abstract: In accordance with these and other embodiments of the present disclosure, an information handling system may include a processor and a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system. The BIOS may be further configured to authenticate a signature of a BIOS driver associated with an information handling resource of the information handling system, and, in response to authenticating the signature of the BIOS driver, extracting a vendor public key from the BIOS driver and storing the vendor public key to a key database of the BIOS, wherein the vendor public key may be used by an operating system to authenticate one or more signed operating system drivers signed with a private key corresponding to the vendor public key.

Abstract: Embodiments of the present invention provide a method and an apparatus for inputting data. The present invention relates to the communications field and aims to improve security of input information. The method includes: acquiring, by a virtual machine manager, input data; performing, by the virtual machine manager, encryption processing on the input data according to an encryption rule of a security connection to obtain encrypted data; and sending, by the virtual machine manager, the encrypted data to the server. The present invention is applicable to a data input scenario.

Abstract: Exemplary embodiments of the present invention disclosed herein relate to a method of booting a computer system using preboot data. A method in accordance with an exemplary embodiment of the present invention comprises transmitting a boot request and receiving, in response to the boot request, a boot loader that is adapted to read preboot data. The exemplary method may additionally comprise transmitting a request for boot data corresponding to the preboot data, receiving boot data corresponding to the preboot data, and booting the computer system using the boot data.

Abstract: This disclosure describes techniques and/or apparatuses for reducing the total time used to boot up a computer and load applications onto the computer.

Abstract: A storage device performs in-storage computing operation, and includes a non-volatile memory configured to store data and a controller. The controller may include an on-chip memory and may control an operation of the non-volatile memory. The controller receives a data processing code generated by a host, overlays the data processing code on the on-chip memory, processes first data corresponding to the data processing code among the data stored in the non-volatile memory, and transmits the processed first data to the host.

Abstract: Circuits and methods for power dependent selection of boot images are disclosed. In an example implementation, an apparatus includes a memory circuit and a processor disposed on an integrated circuit die. The processor is configured to retrieve and execute instructions from the memory circuit. The apparatus also includes a power management circuit configured to determine a value indicative of an amount of power available to power the IC die. A boot loader circuit is coupled to the power management circuit and is configured to select one of a plurality of boot images based on the determined value indicative of the amount of power available. The boot loader circuit loads a set of instructions included in the selected one of the boot images into the memory circuit and enables the processor to execute the set of instructions.

Abstract: A start-up method for USB disk with synchronous flash memory includes steps of: (a) writing test data into a data cache zone of a flash memory according to an initiate read write clock of a flash memory controller; (b) reading the test data to a memory zone of a USB controller; (c) comparing the test data in two memory zones, and recording a comparison result and a phase parameter of read write clock; (d) delaying the initiate read write clock for one-unit delay, and repeating steps (a)˜(d); (e) if the comparison result changes from success to failure, stopping repeat the step (d); (f) selecting the phase parameter of the read write clock that corresponds to one of the comparison results in an interval with multiple continuous successful comparison results to determine a clock phase for accessing the flash memory, and then starting up the USB flash disk. The method is quick and stable.

Abstract: An information processing apparatus, method, and recording medium. The information processing apparatus includes processing circuitry that starts second software stored in a second medium to execute a second maintenance program when a type of a first medium is a maintenance type, and starts a first software stored in the first medium to execute a first maintenance program when the type of the first medium is not the maintenance type, the processing circuitry does not start the second software when the type of the first medium is not the maintenance type.