Abstract: An information processing method includes, by an information processing device, acquiring a snapshot of data stored in a main storage device of the information processing device in a state where an external device is not authenticated yet, after the information processing device is powered ON; performing first authentication in which the information processing device authenticates the external device after the snapshot is stored in an auxiliary storage device of the information processing device; and performing second authentication in which the information processing device is started up using the snapshot and authenticates the external device after the information processing device is powered ON again.

Abstract: Operations include restoring a trusted system firmware state. A system stores a set of self-contained secure code in a secure code store. The system stores a set of operational code in an operational code store. The system executes the secure code or the operational code upon system start up, depending whether the system is configured in a secure mode, or in a normal operational mode. When the system is configured in secure mode, the system executes the secure code. In secure mode, the system also overwrites a current version of the operational code stored in the operational code store with a replacement version of the operational code referenced by the secure code. When the system is configured in normal operational mode, the system executes the operational code. During normal operation, the secure code store is electrically isolated.

Abstract: A bot network system may be provided. A system may include a plurality of bot agents, wherein at least one bot agent of the plurality of bot agents is configured to receive a request from a user in natural language. The system may further include a plurality of digital resources including one or more of a software program, a service, a web service and a dataset. Each digital resource of the plurality of digital resources may be configured to communicate with a dedicated bot agent of the plurality of bot agents. Also, each bot agent may be configured to interact with its associated digital resource via an application programming interface (API) of the associated digital resource and translate between the natural language and a language of the associated digital resource.

Abstract: The present invention provides a flash memory controller, wherein the flash memory controller is arranged to access a flash memory module, the flash memory module includes a plurality of flash memory chips, the flash memory controller includes a buffer memory and a microcontroller, and the buffer memory is arranged to store an in-system programming (ISP) code. When the flash memory controller enters a power saving mode, the microcontroller disables a portion of the buffer memory to make at least one portion of the ISP code disappear; and when the flash memory controller enters a normal mode from the power saving mode, the microcontroller reads said at least one portion of the ISP code from N flash memory chips within the plurality of flash memory chips, wherein N is a positive integer greater than one.

Abstract: Embodiments of the present disclosure disclose a method for obtaining a virus library performed at a computing system. The computing system obtains a sample set, each sample being a malicious installation package. The computing system extracts a group of sample features from each sample as a sample feature set. The computing system performs feature selection on the sample feature set, to obtain at least one group of target features, each target feature meeting a first preset condition. The computing system then updates the at least one group of target features to a virus library. An antivirus platform determines whether the feature of a to-be-detected installation package comprises any group of target features in the virus library and determines that the to-be-detected installation package is a malicious installation package when the feature of the to-be-detected installation package comprises any group of target features in the virus library.

Abstract: A change procedure generating device 10 includes: a storage means 11 which stores, for each relation among constituent elements of a system, a plurality of instances of inter-state information which indicates relations among states of the constituent elements wherein a follow-up state limitation is included which represents a relation between a state transition of the constituent elements of the system and prescribed states to which the constituent elements transition after the state transition has been executed, and an appending means 12 which appends the relations among the states of the constituent elements to an inputted system configuration definition, using the inter-state information which corresponds to the relations among the constituent elements which are included in the configuration definition.

Abstract: A data storage device includes a nonvolatile memory device, a storage controller and a mapping controller. The nonvolatile memory device stores an execution code that controls operations of the data storage device. The storage controller uploads and stores the execution code from the nonvolatile memory device to a host memory buffer included in an external host device, and downloads the execution code in realtime from the host memory buffer to execute the execution code that is downloaded from the host memory buffer. The mapping controller manages a mapping table including mapping relations between the execution code and host addresses of the host memory buffer at which the execution code is stored. A speed of accessing the execution code is increased and performance of the data storage device is enhanced by using the host memory buffer as storage of the execution code to control the operation of the data storage device.

Abstract: A technique versions a configuration of data storage equipment. The technique involves receiving, while the data storage equipment operates in accordance with a first version of the configuration of the data storage equipment, a configuration change command to change the configuration of the data storage equipment. The technique further involves changing the first version of the configuration of the data storage equipment to a second version of the configuration of the data storage equipment in response to the configuration change command. The technique further involves, while the data storage equipment operates in accordance with the second version of the configuration of the data storage equipment, concurrently maintaining access to the first version of the configuration of the data storage equipment and the second version of the configuration of the data storage equipment.

Abstract: Technologies for bootstrapping virtual network functions in a network functions virtualization (NFV) network architecture include a virtual network function (VNF) bootstrap service (VBS) in secure network communication with a VBS agent of a VNF instance. The VBS agent is configured to execute a secure VNF bootstrap capture protocol in the NFV network architecture. Accordingly, the VBS agent can be configured to register with the VBS via secure communications transmitted between the VBS and the VBS agent. The secure communications include transmitting a security quote from a TEE of a platform on which the VNF instance is instantiated and a security credential request to the VBS, as well as receiving a security credential in response to validating the security quote and the security credential request. Other embodiments are described and claimed.

Abstract: A system, computer-readable media and computer-implemented method for automated network adapter activation in connection with fibre channel uplink mapping. The system includes a non-virtualized storage area network switch having a plurality of fibre channel ports. Each of the fibre channel ports is coupled to a corresponding cable to at least partly define a fibre channel uplink. The system also includes a plurality of client devices. Each client device has a network adapter.

Abstract: A method is described. The method includes determining that a first of a plurality of processor cores in a multi-processor computing system has entered an idle state, triggering a SMI for the first processor core, the first processor core entering a system management mode (SMM) and performing one or more platform management operations.

Abstract: In one example in accordance with the present disclosure, a system for handling memory errors includes a memory module having volatile components and non-volatile components. The system includes a BIOS chip having BIOS code and a BIOS non-volatile (NV) memory. The BIOS NV memory stores error data associated with the memory module that was stored prior to a power-on or reset of the system. The system includes a processor to execute the BIOS code to, after the power-on or reset of the system end before an operating system is loaded; (1) read, from the BIOS NV memory, the error data; and (2) determine, based on the error data, whether to take a corrective action with respect to the memory module.

Abstract: A data transport service of a provider network provide isolated and flexible network data transmission between different computing infrastructure collections of the provider network (e.g., between different geographical regions) for different users. The data transport service may receive a request from a user for assignment of a channel. The request specifies a desired capacity of the channel to transmit data from a computing infrastructure collection to another a computing infrastructure collection. Based on the requested capacity for the channel, the data transport service may reserve, for the channel, network resource capacity to transmit the data between the infrastructures and reserve, for the channel, compute instance capacity to ingest the data and to send the data between the infrastructures using the reserved network resource capacity. The reserved network resource capacity and reserved compute instance capacity are dedicated to the channel and are unavailable for use by other channels.

Abstract: The present invention is directed to a method for booting a system-on-chip (SoC) including the steps of directly executing a boot software from an on-chip magnetic random access memory (MRAM) residing on a same semiconductor as the SoC; directly executing an operating system software from an external MRAM by the SoC without loading the operating system into a volatile memory; and directly executing an application software from the external MRAM by the SoC, wherein the external MRAM is coupled to the SoC and is configured for storing the operating system software and the application software.

Abstract: An information processing apparatus includes a control unit, a storage unit configured to store a program to be executed by the control unit, a verification unit configured to read the program from the storage unit and to verify the read program, and a light-emitting unit configured to be changed to a predetermined light-emitting state or to be changed from the predetermined light-emitting state based on a result of the verification of the program by the verification unit.

Abstract: A computing environment includes multiple client devices that may each be configured to serve a particular function within the computing environment. The client devices are each coupled to a client management server that communicates with and manages functions of the client devices. When a client device first boots, the client management server communicates with the client device over a network in order to provision the client device with an enrollment image. Using the enrollment image, a client device can become enrolled with the client management server. Once enrolled, the client management server can provision the client device with a functional operating system image. The functional operating system image can support device applications that require a restricted number of runtime states within the client device. A new functional operating system image is downloaded from the client management server and installed on the client device each time the device is rebooted.

Abstract: An information processing device includes: a medium connection unit that reads first key information from a detachable first recording medium; and a second recording medium storing firmware. The firmware is a program to be executed at a time of start-up of the information processing device and contains second key information. The information processing device includes: a third recording medium storing encrypted data; and a control unit that reads the encrypted data from the third recording medium and decrypts the encrypted data. At the time of start-up of the information processing device, the control unit operates in accordance with the firmware to generate a decryption key for decrypting the encrypted data, from the first key information and the second key information.

Abstract: An embodiment of a semiconductor package apparatus may include technology to determine respective priority levels for one or more boot time events, determine an amount of execution time for the one or more boot time events, and automatically adjust a timer based on the amount of execution time and the priority levels for the one or more boot time events. Other embodiments are disclosed and claimed.

Abstract: According to certain aspects, a method of creating customized bootable images for client computing devices in an information management system can include: creating a backup copy of each of a plurality of client computing devices, including a first client computing device; subsequent to receiving a request to restore the first client computing device to the state at a first time, creating a customized bootable image that is configured to directly restore the first client computing device to the state at the first time, wherein the customized bootable image includes system state specific to the first client computing device at the first time and one or more drivers associated with hardware existing at time of restore on a computing device to be rebooted; and rebooting the computing device to the state of the first client computing device at the first time from the customized bootable image.

Abstract: According to one or more embodiments of the present invention, an example computer-implemented method for measuring concurrent updates in a security coprocessor includes using a first set of platform configuration registers of the security coprocessor to store and extend measurement of a code-load used during a boot sequence of a computing device. The method further includes using a second set of platform configuration registers of the security coprocessor to store and extend measurement of configuration parameters of the code-load used during the boot sequence. The method further includes using a third set of platform configuration registers of the security coprocessor to store and extend measurements of a concurrent update that changes the code-load that was used during the boot sequence.

Abstract: Various aspects include methods for implementing a reduced size firmware storage format on a computing device. Various aspects may include storing a first firmware description table to a first sector of a flash memory, in which the first firmware description table may define a first instance of a firmware including describing a first plurality of firmware images, storing the first plurality of firmware images to a first plurality of consecutive sectors, storing a second firmware description table to a second sector, in which the second firmware description table may define a second instance of the firmware including describing a second plurality of firmware images having a third plurality of firmware images, storing the third plurality of firmware images to a second plurality of consecutive sectors, and booting the computing device using the second firmware description table.

Abstract: A computing device may comprise a first processor and a secondary processor. The first processor may initiate a power management process transitioning the first processor from a first state to a second state and, upon reaching a predetermined step in the power management process, notify the secondary processor of the power management process. The secondary processor may initiate, in response to the notifying, a parallel power management process transitioning the secondary processor from an equivalent first state to an equivalent second state.

Abstract: A primary system is established at a first site. The primary system hosts an application and a primary database for remote users that use the application to manage data of the primary database. A unified data layer is established at a remote site. The unified data layer provides access to data of the primary database without providing access to the primary database. A triggering event that impairs the ability of the primary system to host the application is detected. A recovery system is instantiated in response to detecting the triggering event. The recovery system includes both a recovery instance of the application and a recovery database for the data of the application. The recovery database is populated using the unified data layer. The recovery system is activated such that remote users can access the recovery instance of the application to manage data of the recovery database.

Abstract: Methods and systems for recovering a host image of a client machine to a recovery machine comprise comparing a profile of a client machine of a first type to be recovered to a profile of a recovery machine of a second type different from the first type, to which the client machine is to be recovered, by a first processing device. The first and second profiles each comprise at least one property of the first type of client machine and the second type of recovery machine, respectively. At least one property of a host image of the client machine is conformed to at least one corresponding property of the recovery machine. The conformed host image is provided to the recovery machine, via a network. The recovery machine is configured with at least one conformed property of the host image by a second processing device of the recovery machine.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is an embedded-system device. The embedded-system device loads a first boot loader from a read only section of a storage device in an initialization process of the embedded-system device. The embedded-system device also loads, by the first boot loader, a public key from the read only section. The embedded-system device further generates a first verification code for static code and data stored in a first section of the storage device. The embedded-system device then decrypts, by the first boot loader, an encrypted signature stored in the first section by using the public key to obtain a second verification code. The embedded-system device determines integrity of the static code and data based on the first verification code and the second verification code.

Abstract: Techniques are disclosed for performing dump collection on a computing system. One technique includes detecting an error event on the computing system. After detecting the error event, a subset of hardware registers associated with the error event are determined. One or more hardware units within the computing system to capture data from are determined from a set of rules that specify an association between the one or more hardware units and the subset of hardware registers associated with the error event. Data is captured from each of the one or more hardware units.

Abstract: A method includes modifying a basic input/output system (BIOS) to load a virtual general purpose input/output (GPIO) driver in an operating system, the virtual GPIO driver comprising at least one control method to monitor a system control interrupt (SCI) (202). The method can also include detecting the system control interrupt invoking the virtual GPIO driver (204) and executing the control method corresponding to the system control interrupt, the control method to be identified in the modified BIOS (206). Furthermore, the method can include detecting an error from the execution of the control method (208) and modifying an operating system to prevent the error (208), the modification comprising a modification to the control method.

Abstract: A computer-implemented method includes: randomly generating, by a process running on a computer device, a reset time for the process; broadcasting a message to other processes in a cluster, the message including the reset time; entering a running state; receiving another message from one of the processes, the other message including another reset time; comparing the other reset time to the reset time; and in response to the comparing, the process performs one of: continuing in the running state based on the other reset time being different than the reset time; and randomly generating a new reset time for the process based on the other reset time coinciding with the reset time.

Abstract: A process for loading a secure memory image for a startup procedure of a microcontroller from an external non-volatile memory has the microcontroller configured to assume a locked state in which execution of any program is prevented pending a restart of the microcontroller when a data section of a secure memory image is faulty. The process includes the following steps: detection of the locked state of the microcontroller by a controller located outside of the microcontroller, institution of precautionary measures that lead to modified read data values of the memory image in a subsequent attempt by the microcontroller to read the memory image; and initiation of a restart of the microcontroller to cancel the locked state, and thus initiation of a renewed attempt to load the memory image. An assembly including a microcontroller, an external non-volatile memory and a controller implements such a process.

Abstract: A BIOS (Basic Input/Output System) flashing method and a BIOS image file processing method, belonging to the field of computers, are provided. The methods include: obtaining a BIOS image file, the BIOS image file carrying a first verification parameter and a first file parameter, verifying that the first verification parameter has validity, verifying that the BIOS image file has completeness based on the first file parameter; and performing BIOS flashing employing the BIOS image file verified as having completeness. The present disclosure may improve security and reliability of data servers.

Abstract: A computer implemented method includes executing an image recovery app on a mobile device, initiating a recovery partition transfer between the mobile device and a terminal via the image recovery app and a communication connection between the mobile device and the terminal, and transferring the recovery partition between mobile device memory and the terminal to selectively restore the recover partition to the terminal or save the recovery partition to the mobile device memory.

Abstract: A disclosed program verification method includes: reading out, from a first storage unit, a first value that was calculated before shutdown of the computer for each part of a first program at start of the computer; and determining whether the first program is valid based on the read out first value for each part of the first program and a second value that was calculated for each part of a second program that is valid and is stored in a second storage unit.

Abstract: Technologies are disclosed herein for utilizing near field communication (“NFC”) to improve the security, performance, and configuration of computing systems. In particular, NFC can be utilized to power an NFC-equipped server computer on or off, to log directly into an operating system executing on the NFC-equipped server computer, to stream firmware debugging data from an NFC-equipped server computer to an NFC-equipped mobile device, to initiate the update or recovery of firmware, to provide hardware inventory data, or to pair hardware devices. Firmware debugging data can also be streamed from a firmware to an NFC-equipped mobile device. NFC can also be utilized to disable functionality provided by a mobile device while the device is in motion, such as when a user of the mobile device is operating a motor vehicle.

Abstract: A method of error correction in a nonvolatile flash memory of NAND type, the memory including a first and a second, identical, copies of software to be loaded, a page of a block occupied by data of the first copy of the software being corrupted, and a page of a block occupied by data of the second copy of the software being corrupted, the method including: the replacement of the block occupied by the second copy of the software and including a corrupted page with the identical block occupied by the first copy of the software, making it possible to correct the second copy of the software; the re-execution of the boot loading program; the loading of the second copy of the software.

Abstract: A method for recovering a basic input/output system (BIOS) image file of a computer system is provided. The method includes steps of: controlling a switch unit of the computer system to switch from a first state to a second state when the BIOS image file is to be updated; reading a current BIOS image file so as to store the same as a backup; controlling the switch unit to switch back to the first state; determining whether a command is received within a first predetermined time period when the BIOS image file is successfully updated to a new version of the BIOS image file; and when negative, controlling the switch unit to switch to the second state and writing the backup of the current version of the BIOS image file.

Abstract: A system on chip is integrated in a first semiconductor chip, and includes a secure element and at least one central processing unit that is coupled to the secure element. Security isolation exists between the secure element and the at least one central processing unit. The at least one central processing unit is configured to communicate with the secure element. The secure element includes a secure processor and a first memory that is coupled to the secure processor. The secure processor can suspend running first secure operating system software and further start second secure operating system software, to implement switching between multiple pieces of secure operating system software. Running data of running secure operating system software is stored in the first memory, and running data of secure operating system software that is not run is stored in a second memory outside the system on chip.

Abstract: A display device includes a signal receiver connecting with one among a plurality of source devices, and configured to receive a content signal from the connected source device. A display is configured to display an image based on a content signal received through the signal receiver. A processor is configured to acquire time information corresponding to a time from a point of connecting with the source device to a point of displaying an image when the source device is connected to the signal receiver, and to control the display to display a user interface (UI) to indicate a connected state based on the acquired time information.

Abstract: A Universally Extensible Firmware Interface (UEFI) boot mode operating system (OS) provisioning system includes a pre-boot execution environment system coupled to a server device through a network. The server device boots in a UEFI boot mode. While in the UEFI boot mode, the server loads a portion of a legacy Basic Input/Output System (BIOS) compatibility support module. The loading of the portion of the legacy BIOS compatibility support module provides for the configuration of a communication subsystem in the server device to communicate with the pre-boot execution environment system via legacy BIOS communications. The server device then communicates with the pre-boot execution environment system, via the legacy BIOS communications using the communication subsystem and while in the UEFI boot mode, to retrieve UEFI boot information via a remote legacy BIOS boot mode operation, and uses the UEFI boot information to install an OS on the server device.

Abstract: Methods, systems, and computer programs encoded on computer storage medium, for identifying a virtual desktop infrastructure (VDI) that includes a plurality of components; identifying a secure boot state of each of the components; aggregating the secure boot state of each of the components to define an aggregated secure boot state of the VDI; comparing the aggregated secure boot state of the VDI with a secure boot lookup table to identify a measure of trust of the VDI; identifying access control policies for the VDI for the identified measure of trust of the VDI; and enabling access to one or more resources based on the identified access control policies for the VDI.

Abstract: A method for extending data lifetime for reference in deduplication is provided. The method includes determining that a quantity of user data has at least a threshold amount of data that is re-created in a storage system. The method includes protecting at least portions of the quantity of user data from erasure by garbage collection in the storage system during a predetermined time interval, wherein the protected at least portions are available for data deduplication of further user data in the storage system during the predetermined time interval.

Abstract: A barcode reader may include barcode reading hardware, which may include an image sensor. The image sensor may capture an image of a barcode within a field of view. The barcode reading hardware may also include a communication interface for output of decoded data to a remote computing system. The barcode reader may also include volatile memory and non-volatile memory. The non-volatile memory may include start-up instructions. The barcode reader may also include a processor. The processor may be configured to, upon power-up of the barcode reader, execute the start-up instructions to obtain firmware for operating the barcode reader from a remote configuration server, load the firmware to the volatile memory, and commence execution of the firmware to commence barcode reading functions of the barcode reader without performing a re-boot operation.

Abstract: Systems and methods for providing a tamper-proof, dual-boot Information Handling System (IHS) having Operating System (OS)-specific hardware and/or firmware components. In some embodiments, a method may include: producing, by an Embedded Controller (EC) of an IHS, a Real-Time Clock (RTC) battery-powered General-Purpose Input/Output (GPIO) control or external latch; applying the RTC battery-powered GPIO control to a chip select circuit; and selecting, via the chip select circuit: (i) a first flash memory configured to boot the IHS into a diagnostic mode or first OS, or (ii) a second flash memory configured to boot the IHS into a native OS.

Abstract: A packaged semiconductor device includes a substrate and first, second, and third integrated circuit (IC) chips. The first integrated circuit (IC) chip is mounted on the substrate to receive first data and includes a first transfer interface to transmit the first data via first conductors formed in the substrate. The second IC chip mounts on the substrate and has a second transfer interface to receive the first data. The second IC includes on-chip conductors to route the first data on-chip to an output interface. The output interface transmits the first data via second conductors formed on the substrate. A third IC chip mounts on the substrate and has a third transfer interface to receive the first data via the second conductors.

Abstract: One embodiment described herein provides a system and method for ensuring data and computation security. During operation, a server receives a key-negotiation request from a client and authenticates the client. In response to the client authenticating the server, the server negotiates, via a quantum-key-distribution process, a secret key shared between the client and the server; and stores the secret key in a trusted-computing module.

Abstract: Systems and methods to automatically upgrade, or update a synchronization client to a cloud-based platform are provided. The automatic upgrading can be provided to a personal or an enterprise-level synchronization client. The synchronization client is implemented in a manner that is silent, secure and fault tolerant. In one embodiment, the disclosed technology includes an executable process to download the update, verify the contents, and apply the update. The contents can be verified by checking the certificate on any binary. The systems and methods further include identification and handling of items to be ignored by the synchronization client for synchronization with a cloud-based platform. In some embodiments, files and folders which typically should not be synchronized are identified and removed from the synchronization process in an effective manner.

Abstract: An industrial controller within an industrial automation environment is provided. The industrial controller includes a plurality of control devices, and an update controller which is configured to identify control devices that are on a linear topology, identify control devices on the linear topology that require a reset after updating, and identify a hierarchy of the control devices. The update controller is also configured to update control devices within a first level of the hierarchy, and reset the control devices within the first level of the hierarchy after all of the control devices within the first level of the hierarchy have completed updating. The update controller is further configured to concurrently update control devices within a second level of the hierarchy, and concurrently reset the control devices within the second level of the hierarchy after all of the control devices within the second level of the hierarchy have completed updating.

Abstract: Improved management of feature based user input routing in a multi-processor architecture is provided. A portable communication device comprises a primary processor controlling a primary operating system, a secondary processor controlling a secondary operating system, and a user interface input control operatively coupled to the primary processor. The user interface input control is configured to enable a radio function and a secondary user input extension associated therewith. The primary processor selectively determines processing of a radio function by one of the primary and secondary processors based on activation of the user interface input control in conjunction with the user input interface extension.

Abstract: Disclosed herein are an apparatus and method for interfacing with common memory. The apparatus for interfacing with common memory includes a computer-input/output (I/O)-interface-protocol-processing unit for receiving a packet for accessing common memory from a computer; a direct memory access unit for transforming the packet into an instruction for performing any one of reading from and writing to the common memory; and a common memory interface unit for transmitting the instruction to the common memory and receiving information about whether execution of the instruction is completed from the common memory.

Abstract: A first driver may register with a shim application that is disposed between a kernel block subsystem and the first driver. The first driver may suspend its IO requests upon being unloaded. The first driver may pass internal objects to the shim as one or more pointers. The first driver may deregister from the shim. A second driver may register with the shim. The IO requests may resume using the second driver.

Abstract: The present disclosure relates generally to a system that includes a storage component that stores data and a processor. The processor may install an application using a portion of the storage component, partition the portion of the storage component from a remaining portion of the storage component, and execute the application via the portion of the storage component.