International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Dennis Sposato

Kenneth Eric Hubacher

Philip Charles Theiller

Herbert Jackson Ice, Jr

A method and apparatus for providing security based on a device identifier prior to booting an operating system on the computing device. Upon power on of a computing device, pre-execution services (PES) are loaded. The PES includes services for retrieving a device identifier from a network interface device and sending the device identifier to a validation server that validates the device identifier based on a database of valid device identifiers. The validation server may perform a lookup of the device identifier in the database and, if the device identifier is present in the database, retrieve rules associated with that device identifier to determine if the device identifier is still valid under current conditions. The rules are applied to data representing current conditions to determine if all requirements for allowing access to the computing system are satisfied. Based on the application of the rules for the device identifier, a determination is made as to whether the device identifier is valid or not. If the device identifier is not valid, a command is sent back to the computing device instructing the computing device to shutdown and not complete the booting sequence. If the device identifier is valid, then a message is sent to the computing device indicating that the boot operation may continue and as a result, the operating system of the computing device is booted.

Providing security based on a device identifier prior to booting an operating system

An apparatus and method for controlling boot programs sent by a server computer system to a plurality of client computer systems in response to a plurality of requests by the client computer systems. Specifically, the invention provides for a priority boot, a paced boot or a combination priority and paced boot enabled by a remotely controlled boot process.

Method and apparatus for sending boot programs to workstation computers over a network in a controlled process

An apparatus and method to control access to operating systems sent by a server computer system to a client computer system in response to a request by the client computer system utilizing a pre-execution logon verification of user identification and password and override of the Universally Administered Address by a Locally Administered Address corresponding to the boot package to be sent to the client workstation.

Pre-execution logon (PEL)

An apparatus and method for the administrator of a computer network to make changes to boot manager configuration from a server without any direct involvement at the local workstation.

Remotely controlled boot manager

A computer program, installed on a computer, allows a user of that computer to be assigned a personal local data partition and the data to be retained in the partition. When a second user logs on, that user is assigned a different personal data partition. When the computer boots after logon by the second user, the operating system does not see the first users partition and will assign the same drive letter to the second user's partition. The process repeats for any number of users. Therefore, at each boot of the system, the operating system will not see the personal data partitions for any other user than the user who just logged on with his or her individual identification.

System for modifying a master partition table of a master boot record to create a personalized local data drive having dedicated allocation for a specified user

A method and apparatus for Dynamic MAC Allocation and Configuration is based on the ability to remotely boot a client machine from a server machine and adds the capability to assign a Locally Administered Address (LAA) to override the Universally Administered Address (UAA). A set of programs at the workstation allows a remote boot and interaction the server. The client machine will send out a DMAC discovery frame. The discovery frame will be intercepted by a DMAC program installed on the server which will be running and listening for the request. Once the DMAC program intercepts the request it analyzes the request and takes one of two actions. If necessary, the server will run an &ldquo;initialization&rdquo; script. For workstations that have already been initialized, the server will send an LAA to the client workstation from a table or pool. The client workstation will then request an operating system with its new LAA. The boot options will be a table or pool corresponding to an LAA or range of LAA's. In order to achieve the override of the UAA, the DMAC will assign an LAA to the workstation. Once the LAA is assigned the boot will proceed based on the package that will be shipped to that address.

Dynamic mac allocation and configuration

A method and apparatus for booting a client computer connected to a network without a boot ROM and without an operating system is provided. Instructions from a BIOS ROM are executed to load a boot code loader from a nonvolatile, read/write memory, such as a diskette or hard disk. The boot code loader executes to load a control program from the diskette, and the control program executes to load a set of programs and/or device drivers from the diskette without loading an operating system. The set of programs and/or device drivers communicate with a network server to retrieve a boot program from the network server, and the boot program executes to complete the boot process of the client, such as downloading an operating system from the server.

Growing community of inventors

Austin, TX, United States of America

Dennis Sposato