Hewlett-packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Ent. Services Development Corporation LP

Boris Balacheff

Valiuddin Y Ali

James M Mann

Chris I Dalton

Graeme John Proudler

Jose Paulo Xavier Pires

Liqun Chen

Jeffrey Kevin Jeansonne

David Plaquin

Joshua Serratelli Schiffman

David Chan

Lan Wang

Siani Lynne Pearson

Vali Ali

James C Cooper

David Penkler

Gurchetan Grewal

Fraser John Dickin

Sebastien Bouat

Maugan Villatel

Dipankar Gupta

Simon Kai-Ying Shiu

Jose Paulo Pires

Bruno Edgard Van Wilder

Eduardo Moschetta

Steven J Simske

Omer Gila

Henryk Birecki

Napoleon J Leoni

Nigel John Edwards

Chris Deon Hyser

Manuel Novoa

Craig Walrath

Richard A Bramley, Jr

Taciano Perez

Jennifer E Rios

James Robert Waldron

Richard Bramley

Jeffrey C Parker

Martin Sadler

Adrian Shaw

Christopher Ian Dalton

Thalia Laing

Shab H Madina

John S Worley

Wagston Staehler

William S Worley, Jr

Luke T Mather

Taram Sierra Devitt-Carolan

Marco Ricca

Wili Burton

Kate Mallichan

Roelf Du Toit

Shane Steiger

Logan Clay Browne

Taciano Dreckmann Perez

Logan C Browne

According to aspect of the disclosure, there are provided methods and apparatus for connecting a peripheral device to a computer system, including an apparatus for interfacing with a peripheral device, the apparatus comprising a port configured to couple to the peripheral device, a processor, a memory coupled to the processor and comprising a software module comprising instructions that when executed on the processor protect the device from a peripheral device coupled to the port, and a hardware security controller coupled to the port, the hardware security controller configured to monitor execution of the software module by the processor and to disable the port in response to determining that the software module is not executing.

Protected peripheral ports

A controller that is separate from a processor of the system verifies controller code for execution on the controller. In response to verifying the controller code, the controller verifies system boot code.

Verifying controller code

Examples herein disclose monitoring an expected functionality upon execution of a system management mode (SMM) code. The examples detect whether a change has occurred to the SMM code based on the monitoring of the expected functionality. The change indicates that the SMM code is compromised.

Detecting a change to system management mode bios code

A system and method for authentication are described herein. An authentication request is received at a combiner proxy (). The combiner proxy (), is arranged to receive a user authentication request, receive one or more share values from one or more communications devices (A, . . . ,N) where each of the communications devices (A, . . .N) stores at least one share value of a set of share values and determine if one or more share values that have been received from the communications devices (A, . . . ,N) meet a quantitative criteria. The combiner proxy () is arranged to authenticate the user if the received share values meet the quantitative criteria.

Authentication system

User equipment, the user equipment to receive data representing identity information broadcast by a rendering apparatus over a passive non-contact short proximity data transport mechanism when the user equipment is proximate the rendering apparatus, and push the gathered identity information to a workstation, to enable the workstation to connect with the rendering apparatus.

User equipment to capture identity information from rendering apparatuses

In an example, a method includes pairing a first electronic device and a data relay apparatus associated with a second electronic device to establish a secure wireless communication link therebetween. Each of the first electronic device and the data relay apparatus may be associated with an identifier and a verifier, each verifier being to verify the identifier of the other of the first electronic device or data relay apparatus. The pairing may include mutual verification of an identifier using the verifier, establishing shared key data and using the shared key data to establish a shared secret value for use in determining a derived key.

Establishing shared key data for wireless pairing

Examples associated with certificate analysis are disclosed. One example periodically analyzing a secure socket layer certificate chain between a client device and a server device. The client device may perform this periodic analysis. In response to detecting an unexpected certificate in the secure socket layer certificate chain, a responsive action is taken.

Certificate analysis

An example non-transitory computer-readable medium includes instructions that, when executed by a processor, cause the processor to receive a request for data. The instructions also cause the processor to determine a region containing the data based on the metadata. The instructions cause the processor to traverse a tree in the metadata to determine key generation information relating a decryption key for the region to a root key.

Key generation information trees

Examples associated with basic input/output system (BiOS) security are described. One example includes detecting a mismatch between an active BiOS setting and a saved BIOS setting. An update previously applied to the active BiOS setting is validated. The update Is applied to the saved BIOS setting creating an updated BIOS setting. The saved BIOS setting is updated when the updated BIOS setting and the active BIOS setting match. The saved BIOS setting is updated to the active BIOS setting. A security action is taken when the updated BiOS setting and the active BiOS setting differ.

Bios security

Examples associated with distributed authentication are described. One example includes generating a paired public key and private key associated with a user. The private key is split into a set of shares, which are distributed to a set of devices associated with the user. A challenge is generated to authenticate the user to grant the user access to a resource upon receiving an authenticating response to the challenge. The challenge is distributed to members of the set of devices. Partial responses are received from members of the set of devices and combined into a group signature. The group signature serves as an authenticating response to the challenge when generated from partial responses received from a threshold number of members of the set of devices.

Distributed authentication

A computing device includes a processor, a memory coupled to the processor, and a non-transitory computer readable storage medium coupled to the processor that includes instructions, that when executed by the processor, cause the processor to manage a transition between a first operating system and a second operating system. The instructions cause the processor to instantiate a copy-on-write virtual computing system executing a first operating system, delete a second operating system from the non-transitory computer readable storage medium or the memory, copy the first operating system to the non-transitory computer readable storage medium. The instructions can further cause the processor to instantiate the first operating system on the computing device.

Operating system management

A controller that is separate from a processor of the system verifies controller code for execution on the controller. In response to verifying the controller code, the controller verifies a system boot code.

Verifying controller code and system boot code

Example implementations relate to operational verification. In an example, operational verification includes a processor, a shared non-volatile memory storing updated system, and an embedded controller (EC) to operationally verify the updated system instructions based on comparison of a length of time associated with a BIOS boot of the computing system using the updated system instructions to a boot time threshold.

Operational verification

One example includes a display device. The display device includes an electronic paper display imageable by receiving charges on an imaging surface of the electronic paper display. The display device includes an embedded chip to enable writing to the electronic paper display based on a successful authentication.

Display device

Growing community of inventors

Lyons, France

Boris Balacheff