Hewlett-packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Christopher L Dalton

David Plaquin

Yolanta Beresnevichiene

Liqun Chen

Nigel John Edwards

Pratyusa Kumar Manadhata

Siani Lynne Pearson

Jonathan Griffin

Geoffrey Ndu

Stuart Haber

Michael John Wray

Andrew Patrick Norman

Richard Brown

Adrian Shaw

Matthew Williamson

Michael Child

Examples relate to Input/Output (I/O) data encryption and decryption. In an example, an encryption/decryption engine on an Integrated Circuit (IC) of a computing device obtains at least one plaintext data. Some examples determine, by the encryption/decryption engine, whether the at least one plaintext data is to be sent to a memory in the computing device or to an I/O device. Some examples apply, when the at least one plaintext data is to be sent to the I/O device and by the encryption/decryption engine, an encryption primitive of a block cipher encryption algorithm to the at least one plaintext data to create output encrypted data, wherein an initialization vector that comprises a random number is applied to the encryption primitive.

Input/output data encryption

A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Virtual infrastructures of different users share physical resources but are isolated and have their own management entities. An interface between infrastructures allows controlled relaxation of the isolation, using a gateway between virtual nets, or shared virtual storage devices. This can allow businesses to share data or applications, while maintaining control of security.

Virtual computing infrastructure

Access to a data processor is controlled by determining if a requested function command conforms to a set of parameters, the set of parameters being derived from previously executed function commands. If the requested function command does not conform to the set of parameters the data processor is controlled to temporarily hold the execution of the requested function commands.

Resumption of execution of a requested function command

A virtual network has network interfaces coupled by a multipoint tunnel () through a forwarding network (), each interface having a forwarding address in an address space of the forwarding network, each network interface having a reconfigurable address mapper () for determining a forwarding address for a packet, and encapsulating the packet with its forwarding address so that the forwarding network can forward the data packet transparent to its destination address. This makes the virtual network more agile since changes to the virtual network can be achieved by reconfiguring the corresponding forwarding addresses without needing to set up new tunnels new routing to these different tunnels. The forwarding network need not be aware of the virtual network and so no adaptation of the forwarding network or specialised hardware is needed.

Virtual network interface

A method of computer operating system data management comprising the steps of: (a) associating data management information with data input to a process (); and (b) regulating operating system operations involving the data according to the data management information is provided (). A computing platform () for operating system data management is also provided. Furthermore, a computer program including instructions configured to enable operating system data management, an operating system, and an operating system data management method and apparatus arranged to identify data having data management information associated therewith when that data is read into a memory space are provided.

Computer operating system data management

A data handling apparatus () for a computer platform () using an operating system executing a process, the apparatus comprising a system call monitor () for detecting predetermined system calls, and means () for applying a data handling policy to the system call upon a predetermined system call being detected, whereby the data handling policy is applied for all system calls involving the writing of data outside the process. A corresponding method is disclosed.

Data handling apparatus and methods

A computing platformprovides multiple computing environmentseach containing a guest operating systemprovided by a virtual machine applicationOptionally, each computing environmentis formed in a compartmentof a compartmented host operating system. A trusted deviceverifies that the host operating systemand each guest operating systemoperates in a secure and trusted manner by forming integrity metrics which can be interrogated by a user. Each computing environment is isolated and secure, and can be verified as trustworthy independent of any other computing environment.

Multiple trusted computing environments

A trusted computing environment, wherein each computing devicetoholds a policy specifying the degree to which it can trust the other devices in the environment. The policies are updated by an assessorwhich receives reports from trusted componentsin the computing devicestowhich identify the trustworthiness of the computing devicesto

Growing community of inventors

Bristol, United Kingdom

Christopher L Dalton