Lenovo (singapore) Pte. Ltd.

International Business Machines Corporation

The Johns Hopkins University

Lenvo (singapore) Pte. Ltd.

Lenoro (singapore) Pte. Ltd.

David Carroll Challener

Randall Scott Springfield

Howard J Locker

Daryl Carvis Cromer

Rod D Waltermann

Mark Charles Davis

James Peter Ward

James Patrick Hoff

Richard Alan Dayan

Steven Dale Goodman

David R Safford

Hernando Ovies

John Peter Karidis

Justin Tyler Dubs

Joseph Michael Pennisi

Ryan Charles Catherman

James Joseph Thrasher

Richard Wayne Cheston

Michael Terrell Vanover

James Stephen Rutledge

David Rivera

Palmer E Newman

Barry Douglas Atkins

Seiichi Kawano

Jennifer Greenwood Zawacki

Dhruv Manmohandas Desai

Leendert Peter Van Doorn

Richard Allen Kelley

Philip Lee Childs

Julie Anne Morris

Sean Michael Ulrich

Jinping Yang

Andy Lloyd Trotter

Frank P Novak

Joseph P McGovern

Peter Geoffrey Gaucher

Norman Arthur Dion, Ii

Nathan J Peterson

Arnold S Weksler

David Frederick Bantz

Steven James Mastrianni

Todd Weston Arnold

Joseph Wayne Freeman

Steven A Bade

Mikio Hagiwara

Carlos Munoz-Bustamante

Ratan Ray

Russell Alan Resnick

Jeffrey Mark Estroff

Daniel Edward McConnell

Joseph Robert Parker

Kenneth Dean Timmons

Scott Thomas Elliott

Peter S Kruus

John Hancock Nicholson, Iii

John Mason Elmore

Peter Hortensius

John Carl Mese

David Clifford Long

Eric Richard Kern

Philip John Jakes

Scott Edwards Kelso

Charles W Kaufman

Mohammad Peyravian

Prasenjit Sarkar

Krishna Seshan

Pankaj Rohatgi

James Marc Leas

James Anthony Hunt

Michael Alan Schappert

Brandon Jon Ellison

Tadanobu Inoue

Francis Edward Noel, Jr

James Lewis Levine

Takashi Sugawara

Andrew Boyce McNeill, Jr

Arunava Gupta

Jeffrey R Hobbet

Kevin Michael Reinberg

Calvin Bruce Swart

Yuji Sugiyama

Charles Edward Kuhlmann

William Fred Keown, Jr

Ernest Nelson Mandese

Russell Andrew Fink

Qian Ying Wang

Stephen E Fischer

Joseph M Harvilchuck

Jeffrey Vernon Ford

Joseph Gary Rusnak

James R Lloyd

Horatio Quinones

William Walter Vetter

Binqiang Ma

Vikram Harakere Krishnamurthy

Philip Anthony Richardson

Chad Lee Gettelfinger

Peter Alexander Manson

Shah Mohammed Rezaul Islam

Keith F Beckham

A method for providing malware protection in connection with processing circuitry including hardware resources and software resources managed by a primary operating system may include providing a trusted operating system to control access to a portion of a local storage area of the hardware resources. In this context, only the trusted operating system is configured to enable writing to the portion of the local storage area. The method may further include storing backup files for the primary operating system in the portion of the local storage area responsive to the trusted operating system granting access to write to the portion of the local storage area.

Apparatus and method for preventing access by malware to locally backed up data

A method and system are disclosed for placing a computer in a safe and secure lock down state from a remote location using a remote command device such as a cellular telephone. The method and system includes optional security provisions before restarting the computer.

Remote computer lockdown

A system for preventing redirection loops during collaborative web browsing is provided including: a CPU; a memory in communication with the CPU; instructions stored in the memory and executable by the CPU to prevent redirects encountered during a collaborative web browsing session, the instructions further comprising: instructions enabling a device to join a collaborative web browsing session; instructions enabling detection of a redirection loop based upon a query to a uniform resource locator (URL) history stored in a memory; and instructions enabling termination of the redirect loop; wherein, upon the detection of a redirection loop, the device ignores URL updates of the collaborative web browsing session for a predetermined amount of time.

Preventing redirection loops during collaborative web browsing

Methods and arrangements for managing a flash drive, hard disk, or connection between the two, in a manner to ensure that sensitive data is not decrypted at any time when it would be vulnerable. Accordingly, in a first implementation, the data may preferably be encrypted as it first goes into a flash drive and decrypted when it comes out of the flash drive. In another implementation, the flash drive may be logically bound to the hard disk, so that they would both use the same encryption key. In yet another implementation, if a hard disk is moved to another system, then the flash drive may also preferably be simultaneously moved.

Merging external NVRAM with full disk encryption

An exemplary method includes transmitting, via a network interface, at least a currency amount in an attempt to confirm a financial transaction; responsive to the transmitting, receiving a confirmation indicator for the financial transaction; storing at least the currency amount in non-volatile memory; hashing at least the currency amount to generate a hash and storing the hash in a secure non-volatile memory; hashing at least the currency amount stored in the non-volatile memory to generate a verification hash; and in an attempt to verify at least the financial transaction, comparing the verification hash to the hash stored in the secure non-volatile memory. Various other apparatuses, systems, methods, etc., are also disclosed.

Audit trails for electronic financial transactions

A method and apparatus are disclosed for sharing an integrity security module in a dual-environment computing device. The apparatus include an integrity security module, one or more processors, a detection module and a regeneration module. The one or more processors may have access to the integrity security module and may operate in two distinct operating environments of a dual-environment computing device. The detection module may detect, during an initialization sequence, a power state transition of an operating environment of the dual-environment computing device. The regeneration module may regenerate one or more integrity values from a stored integrity metric log in response to detecting the power state transition of the operating environment of the dual-environment computing device.

Method and apparatus for sharing an integrity security module in a dual-environment computing device

A system for collaborative web browsing is provided comprising: a CPU; a system memory in communication with said CPU; a display medium; and instructions stored in the system memory and executable by the CPU, the instructions comprising: enabling a device to join a collaborative web browsing session; enabling a data navigation module to provide, upon an object appearing upon the display medium being selected by a user, outgoing navigation data that enables a rendering of the object to be distinguished from other objects rendered upon at least one other display medium of at least one other device.

Collaborative web navigation using document object model (DOM) based document references

Embodiments provide for using two encryption keys to encrypt data instead of only one as is customarily used in the industry. According to various embodiments, a default encryption key is generated and is initially used to encrypt data, while a second encryption key is available for generation by an end user. Embodiments provide that data is encrypted with the default key until the user generates their own key, after this event, all data is encrypted with key generated by the user.

Systems and methods for disk encryption with two keys

The invention includes a method, apparatus, and program storage device for providing a combined tap sequence and camera based user interface. The invention provides, among other features, an apparatus comprising: an accelerometer; a laser light generating module; wherein the laser light generating module provides a plane of laser light over a surface coupled to the accelerometer; at least one camera; at least one processor; and a memory; wherein the memory stores instructions, executable by the at least one processor, enabling the apparatus to ascertain an occurrence of an input event utilizing inputs from the accelerometer and a location of the input event utilizing inputs from the at least one camera.

Combined tap sequence and camera based user interface

In the context of computer systems, the generation of preboot passwords at a server instead of at a client. Preferably, preboot passwords generated at the server are distributed to the client, and a process is offered whereby a user can establish his/her own proxy, not known to the server, that can be used to release the stored passwords to the client hardware. Since the passwords are generated at the server, management of the passwords is greatly facilitated since they are generated at the site where they are stored. This also makes it easy to implement management features such as a group policy, since the password generation software will be able to make logical connections between users and hardware.

Management of hardware passwords

A technique for cataloging documents based on user activity includes assigning documents to a relevant document list based on activity of a user of a device. In this case, at least two of the documents are associated with different applications. The technique then provides the relevant document list to the user.

Techniques for updating a relevant document list associated with a software application within a computer system

An apparatus, system, and method are disclosed for securely authorizing changes to a transaction restriction. A security module securely stores encryption keys for a payment instrument. The payment instrument electronically transacts payments and includes a transaction restriction. An authentication module receives an authentication from a user of the payment instrument. The security module validates the authentication with a first encryption key. In addition, the security module authorizes a change to the transaction restriction using a second encryption key if the authentication is valid. The security module resides on a computer that the user designates as authorized to validate the authentication.

Apparatus, system, and method for securely authorizing changes to a transaction restriction

Arrangements for permitting incoming mail to be transferred from a WAN Drive to a notebook computer hard drive under conditions that are not stressful to the hard drive. Preferably, a WAN card is configured to wake a notebook when mail capacity is full or close to full. Mail is then preferably moved from the flash drive to the hard drive, subject to verification that this will not overly stress the hard drive. In a variant embodiment, the WAN card may preferably be configured to wake a notebook when mail is received at all. Again, mail is then preferably moved from the flash drive to the hard drive, subject to verification that this will not overly stress the hard drive. Once mail is moved to the hard drive, the system preferably runs an embedded email program that allows the user to employ an existing VPN infrastructure.

Methods and arrangements for effecting supplementary mail transfer or management

A system for preventing redirection loops during collaborative web browsing is provided comprising: a CPU; a memory in communication with the CPU; instructions stored in the memory and executable by the CPU to prevent redirects encountered during a collaborative web browsing session, the instructions further comprising: instructions enabling a device to join a collaborative web browsing session; instructions enabling detection of a redirection loop; and instructions enabling termination of the redirect loop.

Methods and arrangements for ensuring that, when a computer system is stolen or otherwise misplaced, the system is rendered unusable (i.e., locked down). Conventional solutions have required software running on the system to perform the lockdown action, but in accordance with at least one preferred embodiment of the present invention is the linkage of TPM (Trusted Platform Module) and AMT (Active Management Technology) solutions whereby an AMT arrangement can remove secure data or identifiers so that any encrypted data present on the system will become unusable.

Remote disablement of a computer system

Growing community of inventors

Raleigh, NC, United States of America

David Carroll Challener