Intel Corporation

David Hines

Karthi R Vadivelu

Reshma Lal

Prashant Sethi

Pradeep M Pappachan

Howard C Herbert

Avigdor Dori Eldar

Ajay V Bhatt

John S Howard

Darren L Abramson

Karunakara Kotary

Abdul Rahman Ismail

Chia-Hung Sophia Kuo

Purushottam Goel

Soham Jayesh Desai

Peter S Adamson

Satheesh Chellappan

Nivedita Aggarwal

Alberto J Martinez

Carey W Smith

Uri Blumenthal

Tin-Cheung Kung

Kar Leong Wong

Abhijit Khobare

William Pat Maynard

Adeel A Aslam

Shanthanand R Kutuva

Joannes Van De Groenendaal

Technologies for USB device policy enforcement include a computing device having a USB controller and secure enclave support. On boot, a firmware enclave randomly generates a binding identity and then securely provisions the binding identity to the USB controller. The firmware enclave also seals the binding identity to a policy enforcement enclave. At runtime, the policy enforcement enclave unseals the binding identity and includes the binding identity in a policy enforcement command sent to the USB controller. The USB controller verifies that the binding identity included in the command matches the binding identity that was previously provisioned. If the binding identities are successfully verified, the USB controller enforces the command. The USB controller may block data transfers or device configuration changes for one or more specified devices. Each of the firmware enclave and the policy enforcement enclave are trusted execution environments. Other embodiments are described and claimed.

Technologies for authenticated USB device policy enforcement

Particular embodiments described herein provide for an electronic device that can receive data from an operating system in an electronic device, where the data is related to hardware that is in communication with the electronic device through a multimodal interface and communicate the data and/or related data to a local policy manager, where the local policy manager is in communication with the multimodal interface. The multimodal interface can be configured to support power transfers, directionality, and multiple input/output (I/O) protocols on the same interface.

Multimodal interface

An example apparatus includes: a host controller offload capability detector to determine that a media stream offload capability is available in the peripheral interface host controller; a media stream offload arbiter to send a media stream offload request to a media processor manager based on the media stream offload capability and based on a peripheral device being connected to the peripheral interface host controller; and an endpoint mapper to generate an endpoint table entry corresponding to the peripheral device, the endpoint table entry to assign a first communication interface of the peripheral interface host controller to transfer a media stream corresponding to the peripheral device between the media processor and the peripheral interface host controller without the media stream being routed to an application processor that is in circuit with the peripheral interface host controller and in circuit with the media processor.

Methods and apparatus to offload media streams in host devices

Active management technology (AMT) may be provisioned in a client device automatically, which may provide a secure connection between the provisioning server and the client device. The client device comprising the active management technology may support zero-touch provisioning and one-touch provisioning.

Provisioning active management technology (AMT) in computer systems

Methods, apparatuses, articles, and systems for instantiating a control service to facilitate management of a remotely disposed platform supporting a plurality of redirection protocols of media devices of different types for redirecting the media devices, are described herein. In various embodiments, the control service is adapted to establish a control session with the remotely disposed platform and discover the supported redirection protocols of the media devices. In some embodiments, the control service is further adapted to control the remotely disposed platform based on the redirection protocols, to cause the remotely disposed platform to establish a data session with a media server, remotely disposed from the platform, having one or more of the media devices of different types, the data session including a number of redirection connections redirecting the media devices of the media server to the platform. Additionally, in one embodiment, the control service is adapted to manage the platform.

Mechanism for universal media redirection control

Growing community of inventors

Cameron Park, CA, United States of America

David Hines