Abstract: Examples construct a bootloader address space using a page fault exception. A bootloader executing in machine address (MA) space determines the MA at which the bootloader has been loaded into memory. The bootloader calculates a difference between an expected virtual address (VA) and the loaded MA. The bootloader defines a page table mapping the bootloader MA to an expected VA, and sets an exception handling vector to point to the expected VA. When a memory management unit (MMU) utilizing the defined page table for address translation is enabled, a page fault exception occurs. The page fault exception handling resumes execution of the bootloader at the expected VA via an exception handling vector pointing thereto.

Abstract: An example electronic device includes a volatile memory to store a virtual memory device. A processor is to generate an operating system boot sequence in the virtual memory device. The processor uses a firmware interface system driver to create a device path comprising a location in the volatile memory containing the virtual memory device. The processor saves computer operating system files in the virtual memory device. The processor loads the operating system boot sequence by processing the computer operating system files from the virtual memory device.

Abstract: A pop-up blocker application detects and remediates malicious pop-up loops. The pop-up blocker application intercepts a call from a web page for initiating a pop-up browser window in a web browser. The pop-up blocker application updates a count of pop-up initiating calls associated with the web page occurring within a pre-defined time window. The updated count is compared to a threshold to determine whether the count meets a threshold indicative of a malicious pop-up loop. Responsive to the count meeting the threshold, the pop-up blocker applications takes a remedial action, such as navigating away from the web page.

Abstract: A memory system includes: a memory device suitable for storing an encrypted first boot image including first firmware, an encrypted second boot image including second firmware, and a second authentication key for decrypting the encrypted second boot image, and a controller suitable for controlling the memory device and including a boot memory provided with a boot loader and a first authentication key for decrypting the encrypted first boot image, one or more first processing blocks each of which includes a first core, one or more second processing blocks each of which includes a second core, and a buffer memory.

Abstract: An electronic device according to various embodiments includes: a connector configured to be connected with an external electronic device; a memory configured to store instructions; and a processor configured to execute the stored instructions to control the electronic device to identify a control signal received through a channel initially activated based on the external electronic device being connected to the connector from among a plurality of channels, and to perform control based on a message included in the identified control signal.

Abstract: Disclosed here is a data storage device comprising a non-transitory storage medium configured to store user content data, a data port configured to transfer the user content data between the storage medium and a host computer system over a data channel, and a controller. The controller is configured to select one of multiple file system formats, format the storage medium by creating a file system in accordance with the selected file system format on the storage medium, and register with the host computer system as a block data storage device.

Abstract: An information handling system may include a processor and a basic input/output system comprising a program of instructions executable by the processor and configured to cause the processor to determine if a captured stop error code captured in connection with an operating system stop error occurring during a previous boot session of the information exists on a memory accessible to the basic input/output system and responsive to the captured stop error code existing on the memory, read the captured stop error code and perform a remedial action based on the captured stop error code.

Abstract: A system for securely and reliably transferring startup script files over a network may include a unified extensible firmware interface (UEFI) network stack on a client server wherein the client server requests startup script over the network upon startup of the client server using a secure transfer network protocol and receives over the network the startup script. A computing device may comprise a unified extensible firmware interface (UEFI) shell to request a download of startup script, over a network, upon startup of the client server wherein the startup script is staged in a provisioned storage device within the client server to be mounted as local file systems in the client server. The UEFI shell.

Abstract: Systems and methods for operating a cloud based computing system. The methods comprise: receiving, by a cloud server, a request for accessing Virtual Hard Disk (“VHD”) data associated with a first location in the VHD of a Virtual Machine (“VM”) hosted by a remote computing device; extracting, by the cloud server, at least a first address specifying the first location from the request; translating, by the cloud server, the first address into a second address specifying a second location in a cloud storage where the VHD data is stored; and communicating from the cloud server the second address to the remote computing device for facilitating access to the VHD data stored in the cloud storage.

Abstract: A method, operable by a service registry in a service orientated architecture system, for providing a service within the system. A service request is received from a service requester in the system. The status of the service is checked as registered in the service registry. In response to the service not having a registered service endpoint or a property of the service falling below a defined threshold, a request is sent to service providers or subsequent service registries to provide a new service and according to the defined threshold. In response to a service provider providing the new service according to the defined standard, the service registry is updated with the new service and responding to the service requester that the service is available. The embodiments allow both direct interaction between the requester and provider or indirect interaction via a service management layer.

Abstract: An apparatus includes a plurality of root ports serving as roots of bus connection of a plurality of devices including boot devices from which legacy boot is executed to boot an operating system (OS). A processor included in the apparatus identifies a single boot device among the boot devices and a single root port connected to the single boot device, and allocates, as memory addresses to be used for memory mapped input and output, memory addresses with a bit width available during the legacy boot to devices connected to the identified single root port. The processor determines whether the memory addresses have been allocated to all devices connected to the single root port, and executes the legacy boot to boot the OS from the single boot device when the memory addresses have been allocated to all the devices connected to the single root port.

Abstract: A flash memory initialization method executed by a flash memory initialization device to initialize a flash memory device having a flash memory and a flash memory controller includes: determining an acceptable maximum number N of candidate addresses; determining a number M of different capacity sizes; classifying the candidate addresses into M portions; determining a difference value between two address values of any two adjacent addresses among the m-th portion of candidate addresses; determining multiple address values of the m-th portion of candidate addresses according to the difference value; and determining actual addresses of the m-th portion of candidate addresses according to the multiple address values; and controlling the flash memory controller to write the boot up information into at least one storage location corresponding to at least one of the m-th portion of candidate addresses according to the actual addresses.

Abstract: Dynamically managing control information in a storage device, including: querying, by an array management module executing on a storage array controller, the storage device for a location of control information for the storage device, the control information describing the state of one or more memory blocks in the storage device; and issuing, by the array management module in dependence upon the location of the control information for the storage device, a request to retrieve the control information for the storage device.

Abstract: An information processing apparatus includes a processor configured to acquire an additional processing program for performing additional processing in response to a connection of an additional processing apparatus configured to perform the additional processing for a function of the information processing apparatus, and store the acquired additional processing program in the information processing apparatus.

Abstract: One embodiment provides an apparatus. The apparatus may include memory circuitry to store tensor data representing a tensor. The apparatus may include memory controller circuitry to access the memory circuitry. The apparatus may include processor circuitry to: receive a request for a tensor operation; generate a plurality of sub-commands for the tensor operation; and provide the sub-commands to memory controller circuitry to perform the tensor operation based on instructions contained in one or more of the sub-commands. The instructions contained in one or more of the sub-commands may include identify addresses in memory to access; activate one or more rows in the memory circuitry that correspond to the addresses; and transfer tensor data to and/or from the memory circuitry.

Abstract: Systems and methods are provide that may be implemented to modify boot operation for an information handling system using commands of a script that is detected and authenticated by boot code of the information handling system. The script may include at least one command that modifies a boot operation of the information handling system when performed by the processor. The boot code may be executed by the processor during startup, to detect and authenticate the script, and to process the at least one command after the script is authenticated. Multiple commands may be defined including triggerless actions or trigger actions which are performed in response to a trigger event. A trigger event may be a hardware interaction, such as the pressing of a button.

Abstract: Various techniques are provided to implement fast boot for programmable logic devices (PLDs). In one example, a method includes receiving configuration data associated with a PLD. The PLD includes an array of configuration memory cells including logic block memory cells and input/output (I/O) block memory cells associated with the PLD's logic fabric and I/O fabric, respectively. The method further includes programming a subset of the I/O block memory cells with the configuration data, and providing a wakeup signal to activate functionality associated with a portion of the I/O fabric. The method further includes programming remaining configuration memory cells of the array with the configuration data, where the remaining configuration memory cells include at least a subset of the logic block memory cells. The method further includes providing a wakeup signal to activate functionality associated with at least a portion of the logic fabric. Related systems and devices are provided.

Abstract: A system and method for providing multiple options for booting-up a remote computing device is disclosed. The system has a remote management station, in network communication with a computing device. The computing device has hardware components and a Unified Extensible Firmware Interface (UEFI) basic input output system (BIOS), including multiple power-on self-test (POST) routines. A controller is in communication with the UEFI BIOS and in network communication with the remote management station. The controller receives a selection of one of the plurality of POST routines from the management station. The controller boots up the computing device with the selected POST routine. The POST routines include a normal POST and other specialized routines such as a fast boot option, a safety boot option, a diagnostic boot option and a factory boot option.

Abstract: The disclosed embodiments include a method performed by a cloud system for changing a registration of a network access device. The method includes initiating a change of a registration of a network access device. The registration is stored at a cloud system and indicates ownership of the network access device by a first user. The method further includes receiving an authorization from the first user to dissociate the ownership of the network access device by the first user, and receiving an indication of a physical reset occurring locally at the network access device. The physical reset allows the first user to dissociate the ownership of the network access device. The method further includes, upon receiving both the authorization by the first user and the indication of the physical reset, releasing the ownership by the first user of the network access device at the cloud system.

Abstract: Methods, apparatus, and systems to replace values in a device are disclosed. An example apparatus includes a processor and a replacement generator coupled to the processor and configured to detect an access, by the processor, of a first instruction at a first address in a first memory, in response to the detected access, compare the first address to a set of trigger instruction address records in a second memory, wherein the set of trigger instruction address records includes a first trigger instruction address record that is associated with a first replacement address record and a first replacement value record, and based on the first address corresponding to the first trigger instruction address record, replace a first value at a second address in a third memory specified by the first replacement address record with a second value specified by the first replacement value record.

Abstract: A controller of a data storage system reconfigures a target storage node within the data storage system including by assigning the target storage node a new target node name in place of a former target node name. The controller provides a reconfiguration notification, the former target node name, and the new target node name to a host platform having an ongoing first communication session with the target storage node. Following the reconfiguration notification, the controller responds to a login request of the host platform and establishes a new second communication session between the host platform and the target storage node. The host platform can logout of the now-stale first communication session after the second communication session is established.

Abstract: Various embodiments of methods and systems for a modem-directed application processor boot flow in a portable computing device (“PCD”) are disclosed. An exemplary method includes an application processor that transitions into an idle state, such as a WFI state, for durations of time during a boot sequence that coincide with processing by a DMA engine and/or crypto engine. That is, the application processor may “sleep” while the DMA engine and/or crypto engine process workloads in response to instructions they received from the application processor.

Abstract: Various embodiments seek to reduce a risk of abnormal control of a device externally connected to a system due to abnormal software that is altered or the like, or to suppress unnecessary power consumption due to a device that does not operate normally. To this end, verification of software is performed at the time of activation of an image forming apparatus, and when the software is determined to be abnormal as a result of the verification, the image forming apparatus is operated with a restricted use of a device corresponding to the software.

Abstract: Systems, apparatuses and methods may provide for technology that detects a successful boot of a first firmware component in a computing system, receives a signal from a second firmware component in the computing system, and detects an incompatibility of the first firmware component with respect to the second firmware component based on the signal. In one example, only the first firmware component is repaired in response to the incompatibility.

Abstract: A method for booting a computer system includes: loading a first stage bootloader of a plurality of first stage bootloaders from a boot image based on a known configuration of the computer system; executing the first stage bootloader to identify a selected bootbank of a plurality of bootbanks in the boot image based on the known configuration of the computer system; executing, by the first stage bootloader, a second stage bootloader from the boot image with an instruction to boot from the selected bootbank; and executing, by the second stage bootloader, a binary file in the selected bootbank.

Abstract: Secure communications are established in a non-secure environment between virtual machines configured as nodes of a virtual machine cluster having a virtual scale-out architecture without user intervention. When a new virtual cluster node is automatically and dynamically created and deployed by a virtual cluster master node, the master node embeds in a common image from which the new node is created an initial secret key for establishing initial trusted communications between the new node and the master node. The master node then passes a permanent secret key to the new node, opens an OpenSSL connection for creating a public key infrastructure, and signs the new node's CSR with its own public and private keys and sends the signed certificate to the new node.

Abstract: Power management may be performed in a basic input/output system (BIOS) of an information handling system to provide flexibility in system operation. The BIOS may include a user setting specifying a power level, and that power level used to control a central processing unit (CPU) or other hardware components. For example, the BIOS power level may specify a sustained power setting for the CPU. One example sustained power setting is the PL1 value, which is a fixed value that specifies a thermal design power (TDP) for the CPU. As another example, the power level may specify whether to enable and/or disable a discrete graphics processing unit (GPU) or other hardware component operating from the same battery as the CPU.

Abstract: A technique includes, in a first phase of a secure boot of a computer system, executing boot code of the computer system to access a first version of a secure boot key database to authenticate driver code. The first version of the secure boot key database stores a key corresponding to a plurality of drivers. The technique includes executing the boot code to automatically prepare the secure boot key database for a second phase of the secure boot in which operating system bootloader code is executed. Preparing for the second phase includes executing the boot code to automatically replace the first version of the secure boot key database with a second version of the secure boot key database, and the second version of the secure boot key database stores a key, which corresponds to the operating system bootloader code. The technique includes in the second phase of the secure boot, executing the boot code to access the secure boot key database to authenticate the operating system bootloader code.

Abstract: Disclosed are devices and methods for improving the initialization of devices housing memories. In one embodiment, a method is disclosed comprising writing a test program to a first region of a memory device during production of the memory device; executing a self-test program in response to detecting a first power up of the memory device, the self-test program stored within the test program; and retrieving and installing an image from a remote data source in response to detecting a subsequent power up of the memory device, the retrieving performed by the test program.

Abstract: A system and method for inferring device operating systems. A method includes applying a sequence-based model to an option-types sequence in order to output a plurality of first features, wherein each of the first features is a value representing a probability that the options-type sequence is associated with a respective operating system; applying a distribution dissimilarity model to metadata field distribution data extracted from the headers of the packets sent by the device in order to output a plurality of second features, wherein the plurality of second features includes a plurality of distances, wherein each distance is based on a difference between a distribution of values of each metadata field indicated in the metadata field distribution data; and applying an operating system inference model to the plurality of first features and the plurality of second features in order to output an inferred operating system for the device.

Abstract: Embodiments of the disclosure relate to a method, a device, and a computer-readable storage medium for testing a basic input output system (BIOS). The method comprises: acquiring a target attribute of a target menu of a BIOS of a test machine; determining a path to the target menu based on a menu map of the BIOS, wherein the menu map is obtained by performing image identification on a BIOS interface of the test machine; and causing the BIOS of the test machine to enter the target menu based on the path so as to modify the attribute of the target menu into the target attribute.

Abstract: The invention relates to a firmware over-the-air (FOTA) method for updating building services, in particular lighting technology installations, comprising multiple devices which are connected to a server as a mesh network, wherein the method comprises the following steps: storing a firmware update image sent by the server in a respective memory of each device, and triggering the copying of the firmware update from the memory to an internal memory of a microcontroller of each of the devices by means of a trigger command issued by the server, wherein, within a predefined time period (timeout) after the trigger command is issued, the server uses feedback from the devices to check whether each device has received the firmware update image and the trigger command, and wherein the copying does not take place until after the predefined time period has elapsed.

Abstract: A method and system for improving virtual machine allocation and migration is provided. The method includes initiating a migration process for migrating database files of a virtual machine from a first hardware device to a second hardware device. A checkpoint and restart command is transmitted to a first hypervisor of the first hardware device and a request for a cryptographic key from a memory encryption engine is received. The cryptographic key is transmitted to a first enclave and the first enclave is encrypted resulting in an encrypted enclave. A resulting a data file comprising the database files is generated and the encrypted enclave is disconnected from the first hardware device. The encrypted enclave is destroyed and checkpoint and restart code is executed for restarting the first hardware device.

Abstract: A computer device includes a network interface to connect to a computer network, memory, and a processor connected to the network interface and the memory. The processor is to execute instructions stored in the memory. The instructions are to establish a connection with an auxiliary computer device and start a proxy to forward network communications between the auxiliary computer device and the computer network. The instructions are further to start the proxy in response to the computer device receiving a captive portal from the computer network.

Abstract: Cloning of virtual-machine images can be managed. For example, a computing device can copy a segment of a virtual-machine image stored in a second storage device to a first storage device in response to receiving a first read request for the segment from a virtual machine. The first storage device may be capable of responding to read requests from the virtual machine with less latency than the second storage device. The computing device can also update a log to indicate that the segment is stored on the first storage device. Thereafter, the computing device can receive a second read request for the segment. In response, the computing device can determine that the segment is stored in the first storage device using the log, and provide the segment by obtaining the segment from the first storage device.

Abstract: Methods and apparatus for boot time reduction in a processor and programmable logic device environment are disclosed. An example apparatus includes a multicore processor including a first core and a second core. A bootstrap processor is to initialize the first core into a standby mode and initialize the second core into a non-standby mode. A programmable logic device is to be programmed with instructions to be executed by the programmable logic device by the second core via a first connection initialized by the second core. The bootstrap processor is to, upon completion of the programming of the programmable logic device, initialize a data connection between the programmable logic device and the second core.

Abstract: During the user-mode startup of an operating system of a computing system and prior to the execution of a service control manager process, an early retrieval process is launched so as to retrieve (i) decryption keys corresponding to one or more encrypted files, folders or data partitions and/or (ii) an access control policy from a key management server external to the computing system. The retrieved information may be provided to a disk filter driver and/or file system filter driver of the operating system. In order to communicate with the external key management server, the early retrieval process may initialize the network stack of the computing system, since network services is not yet available prior to the execution of the services.exe process.

Abstract: A device comprises a first processor and a second processor, the first processor being able to execute a boot loader. The device implements a phase of boot-securing in the event of an electrical anomaly occurring while the boot loader is being updated, the phase of boot-securing being implemented by way of an emergency power supply source acting as a relay for a main power supply, the phase of boot-securing comprising the following steps: stopping (203) the current updating of the boot loader; and invalidating (205) the boot loader. The device implements a phase of delayed booting of the second processor, enabling to boot the device in a boot loader update mode if said stored boot loader is invalid.

Abstract: A user terminal includes a memory device configured to store a connection setting value and a manager service, the connection setting value being used to connect to a service in an external network by an extended application of the electronic apparatus, the manager service causing the user terminal to send the connection setting value to the electronic apparatus, and a controller circuitry configured to control the communication device to send second communication to the electronic apparatus when the communication device receives the first communication, the second communication indicating that the manager service is ready to send the connection setting value to the electronic apparatus, and control the communication device to send fourth communication to the electronic apparatus when the communication device receives third communication from the electronic apparatus, the third communication requesting to send the connection setting value, the fourth communication sending the connection setting value.

Abstract: An apparatus includes a memory and a processor that executes a load process. In the load process, the processor sets, in a storage area of the memory, a first storage area and a second storage area that are smaller than the storage area, creates first notification information that informs that the second storage area is unavailable and the first storage area is available, and allocates an area in the first storage area, based on the first notification information. The processor boots an operating system, and responds to a memory information notification request issued by the booted operating system with second notification information that informs that the second storage area is available.

Abstract: A synchronization method, which is capable of data synchronization in both directions between a storage medium and a storage unit, includes steps of: determining whether first parameter data of the storage medium is identical to default parameter data stored in the storage medium; determining whether a value of a flag stored in the storage unit is equal to a first logical value; and performing data synchronization between the storage unit and the storage medium based on at least one of the two determinations.

Abstract: A process for using a boot loader to load a set of boot commands to a device such as an embedded system before loading a system application. The process may use a combination of a read-only boot source and a pair of upgradable boot sources. Process also includes a power cycle to put system into a known state. An alternative process may simply use a pair of upgradable boot sources. The processes are resilient to failed updates of an upgradable boot source. After a successful update of an upgradable boot source, a request for a power cycle causes the device to immediately enter a known state and use the updated upgradable boot source.

Abstract: A technology is described for one-time access to a protected resource. In one example, a resource security API (Application Programming Interface) may receive a request for a protected resource. The request may be associated with a launch of a software container in a service provider environment to host a process associated with a customer account. The resource security API may identify a single-use token linked to the software container that allows the resource security API to provide the protected resource. The resource security API may send the protected resource to the software container in response to the request when the single-use token is identified, and the resource security API may disable the single-use token linked to the software container to prevent additional requests associated with the software container from accessing the protected resource.

Abstract: Apparatuses and methods for trusted module execution are proposed, which provide secure boot and trusted execution of system software by using the China commercial cryptography algorithms to establish the SRTM/DRTM. Conventionally, the Intel TXT which uses RSA or SHA-256 cryptography algorithms only authenticates the trusted modules. By contrast, the present application uses the China commercial cryptography algorithms and is able to authenticate the trusted modules and their digital certificates or certificate chains (which has a higher security level than just authenticating the digital certificates).

Abstract: A communication apparatus includes a first communication unit that communicates with a terminal apparatus using a first communication method, a second communication unit that communicates with a server apparatus using a second communication method different from the first communication method, a reception unit that controls receiving update information from the server apparatus in a case where the communication apparatus can communicate with the server apparatus via the second communication unit, an update unit that performs an update process for updating the communication apparatus using the update information, and a progress management unit that controls transmitting a progress status of a process regarding the update information to the terminal apparatus.

Abstract: An electronic system such as an imaging system may include processing circuitry and memory circuitry. The memory circuitry may include one-time-programmable memory having error correction code functionalities (e.g., SECDED functionalities). The one-time-programmable memory may have a first set of previously programmed bits and a second set of unprogrammed and unused bits. The processing circuitry may process instructions to update a bit in the second set of bits. To preserve the ECC functionalities (e.g., the ECC check bits associated with the first and second sets of bits, the processing circuitry may also update additional bits in the second set of bits.

Abstract: A system includes at least a secure-boot file, a hypervisor, and a host. The secure-boot file is configured to securely boot a VM, where the secure-boot file is signed with a boot private key. The hypervisor is configured to run the VM. The hypervisor includes a boot public key corresponding to the boot private key, such that the hypervisor is configured to validate the secure-boot file, and the hypervisor is signed with a hypervisor private key. A kernel of the host is configured to run the VM, where the kernel includes a hypervisor public key corresponding to the hypervisor private key, such that the host is configured to validate the hypervisor.

Abstract: Examples disclosed herein relate to protecting a computing device by using hashes. A baseboard management controller is to facilitate taking an inventory of components of the computing device. The baseboard management controller is also to determine a number of times the computing device has been powered on. The baseboard management controller generates a hash using a function of the number of times the computing device has been powered on and the inventory.

Abstract: A method of transmitting a broadcast signal includes encoding mobile data for FEC (Forward Error Correction); encoding signaling information for signaling the mobile data; allocating the encoded mobile data and signaling data into a transmission frame; and transmitting the broadcast signal including the transmission frame, wherein the transmission frame includes a service signaling table having service type information identifying a type of a service of the mobile data and hidden information indicating whether the service of the mobile data is hidden or not.

Abstract: A method of securely resetting a first device comprising a UICC, the method comprising providing a secure reset control application to a secure element of the UICC of the first device wherein the secure reset control application is capable of commanding the UICC to provide notification indicative of a secure reset of the first device being requested if a corresponding signal is received from a remote management server; and/or communication between the secure reset control application and a remote management server cannot be established for a predetermined period of time and upon the next first device reset, determine whether a secure reset has been requested.