International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Barry Douglas Atkins

David Carroll Challener

Ajamu Akinwunmi Wesley

Anthony Joseph Nadalin

David O Melgar

Richard Wayne Cheston

Frank P Novak

John Peter Karidis

Todd Weston Arnold

Joseph Gary Rusnak

William Walter Vetter

Joseph P McGovern

Kenneth Dean Timmons

A system, method, and program for managing a user key used to sign a message for a data processing system having an encryption chip are disclosed. A user is assigned a user key. In order to encrypt and send messages to a recipient(s), the messages are encrypted with the user key. The user key, in turn, is encrypted with an associated key. The associated key is further encrypted using an encryption chip key stored on the encryption chip. The encrypted messages are communicated to a recipient to validate an association of the user with the encrypted messages. The associated key is decrypted with the encryption chip key. The user key is decrypted with the associated key, and the messages are decrypted with the user key. Thereafter, validation of the association of messages with the user is removed by revoking the associated key. In a preferred embodiment, encryption resources are centralized in a server system having the encryption chip. The server system is coupled to and provides encryption services to a plurality of client systems. Messages to be encrypted are sent from a user's client system to the server system, which encrypts the messages using the encryption chip. The encrypted messages are sent from the server system to the client system, which then transmits the encrypted messages to their intended recipient(s). All data relating to the encrypted messages are erased from the server system after the encrypted messages are sent from the server system to the client system.

System, method, and program for managing a user key used to sign a message for a data processing system

A method, system and apparatus for federated identity brokering. In accordance with the present invention, a credential processing gateway can be disposed between one or more logical services and one or more service requesting clients in a computer communications network. Acting as a proxy and a trusted authority to the logical services, the credential processing gateway can map the credentials of the service requesting clients to the certification requirements of the logical services. In this way, the credential processing gateway can act as a federated identity broker in providing identity certification services for a multitude of different service requesting clients without requiring the logical services to include a pre-configuration for specifically processing the credentials of particular service requesting clients.

Federated identity brokering

Techniques are disclosed for federating identity management within a distributed portal server, leveraging Web services techniques and a number of industry standards. Identities are managed across autonomous security domains which may be comprised of independent trust models, authentication services, and user enrollment services. The disclosed techniques enable integrating third-party Web services-based portlets, which rely on various potentially-different security mechanisms, within a common portal page.

Federated identity management within a distributed portal server

The present invention is a method and system for providing a tamper alarm for a computer system. The method includes detecting tampering of the computer system, and transmitting electromagnetic field signals from a device concerning the tampering. In the preferred embodiment, the electromagnetic field signals are transmitted through patterns on a monitor or a video card which transmits a computer system identity information. The electromagnetic field signal of the present invention functions as a tamper alarm. When a receiver hears the alarm, the administrator of the computer system may act accordingly. The tamper evidence alarm may be transmitted in a manner which does not require the disabling of the computer system, thus increasing the ease of its use over conventional methods. Because the computer system is not disabled, a password is not required in order to regain access to the computer system. Also, the present invention may be practiced using existing hardware in the computer system, and thus is cost efficient to implement.

Electromagnetic field tamper alarm

A system for mapping a location of an electronic equipment in a defined area. The system comprises of a server which is typically a data processing system. An activation signal is sent to the electronic equipment. In response to the activation signal, the electronic equipment emits a pre-defined signal containing a unique signature of the electronic equipment. The signal is captured by a device connected to the server with a known location in the defined area. The server utilizes the known location of the device along with the unique signature of the electronic equipment to identify/determine the location of the electronic equipment.

Method and system for locating devices during system administration

A method and apparatus is provided for facilitating the generation and use of computer system configuration passwords which can be utilized in an enterprise or organization to allow authorized users having knowledge of the password associated with a particular data processing system to make and change configuration decisions, but which prevents unauthorized users from making and changing such configuration decisions. In the preferred embodiment, a unique identifier (such as a serial number) and an enterprise secret key are supplied to a one-way cryptographic hash function in order to generate the configuration passwords which are unique to each data processing system of the plurality of data processing system of the enterprise or organization.

Method and apparatus for establishing computer configuration protection passwords for protecting computer configurations

A method and system are disclosed for automating migration of user system settings from an existing computer system to a replacement computer system in response to a user input. Selected portions of the registry, or central hierarchial data base within the existing computer system are automatically copied and stored in response a user input. A plurality of application program interface (API) routines are then initiated to retrieve and store selected settings within the existing computer system. Adapter binding information for all adapters within the existing computer system are retrieved and stored. The selected portions of the registry, selected settings and adapter binding information are then transferred to the replacement computer system and copied into appropriate registry keys, directories and files, effectively transferring the system settings from the existing computer system to the replacement computer system.

Growing community of inventors

Raleigh, NC, United States of America

Barry Douglas Atkins