International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Hernando Ovies

David Carroll Challener

James Peter Ward

Daryl Carvis Cromer

Randall Scott Springfield

Joseph P McGovern

Howard J Locker

Mark Charles Davis

Neil A Katz

Charles W Kaufman

Steven Dale Goodman

Dhruv Manmohandas Desai

Ernest Nelson Mandese

Ernest D Baker

Frank P Novak

Chad Lee Gettelfinger

Robert H Farrell

When an authenticated wireless computer loses connectivity to a wireless access point of a network and roams to another access point, the wireless computer (e.g., a hypervisor in the computer) determines whether the new access point is authorized for secure communication and if so, releases access to secure data on the network through the new access point.

System and method for controlling network access in wireless environment

Access to secure data through a portable computing system is provided only when a timer within the system is running. The timer is reset with the portable system connected to a base system, either directly, as by a cable, or indirectly, as through a telephone network. In an initialization process, the portable and base systems exchange data, such as public cryptographic keys, which are later used to confirm that the portable system is connected to the same base system. In one embodiment, the initialization process also includes storing a password transmitted from the portable system within the base system, with this password later being required within the reset process.

System and apparatus for limiting access to secure data through a portable computer to a time set with the portable computer connected to a base computer

A method for migrating a base chip key from a first computer system to a second computer system is disclosed. A first computer system includes a base chip key, and a second computer system includes a base chip key. Using a first certificate for the base chip key, a manufacturer of the second computer system generates a second certificate for the base chip key. Similarly, using a first certificate for the base chip key, a manufacturer of the first computer system generates a second certificate for the base chip key. A first data packet is then sent from the first computer system to the second computer system. The first data packet includes a first random number and all the data required to reproduce the base chip keyin the first computer system. The first data packet is also encrypted with the base chip key's public key. In return, a second data packet is sent from the second computer system to the first computer system, and the second data packet includes the first random number and a second random number, signed by the base chip key. The base chip keyis then erased from the first computer system. Finally, the base chip keyin the second computer system is replaced by the base chip key

Method for migrating a base chip key from one computer system to another

A method and system for updating a root of trust measurement (RTM) function in a personal computer is disclosed. The RTM function is located in a boot block of the personal computer. The method and system comprise initializing a request to update the RTM function and unlocking the boot block based on an authentication process. The method and system further includes updating the RTM function. Through the use of the method and system in accordance with the present invention, the RTM function in a personal computer is updated in a manner that ensures that the update is authentic.

Method and system for updating a root of trust measurement function in a personal computer

A data processing system and method are disclosed for protecting data within a hard disk drive included within a data processing system. Data is generated. A signature value is provided which is stored in a signature device. The signature device is capable of being inserted into and removed from a computer system. A textual description of the data is created. The data is encrypted utilizing both the signature value stored on the device and the textual description. The encrypted data is then stored on the hard disk drive. The data processing system does not permanently store encryption keys.

Data processing system and method for protecting data in a hard drive utilizing a signature device

A system and method for isolating a computer system from entry of a personal identification number (PIN) to a smart card. The system and method includes a computer system that is in communication with an unsecure network to allow a user to engage in a purchase transaction. The system and method also includes a smart card reader in which a smart card is inserted and read. A secure personal-identification-number (PIN) entry device is coupled between the computer system and the smart card reader. The secure PIN entry device is used for entering a correct code for the PIN. Communication between computer system and secure PIN entry device is disconnected until the correct code for the PIN is entered at secure PIN entry device and sent to the smart card in order to authorize use of the smart card for the purchase transaction. In response to the correct code for the PIN being entered and sent to the smart card, communication between computer system and secure PIN entry device is established. The secure PIN entry device has a processor for controlling the disconnection and connection of communication between the computer system and the secure PIN entry device. The secure PIN entry device also has a display for displaying a message request relating to the purchase transaction. The message request prompts a user to provide the PIN to authorize use of the smart card for a purchase transaction.

Systems and method for hiding from a computer system entry of a personal identification number (pin) to a smart card

A data processing system and method are described for providing a networked printer's physical location. The printer, a server computer system, and client computer systems are coupled together utilizing a network. The server computer system first transmits a command to the printer to disable the print function of the printer. Entry of a physical location of the printer is then permitted. The print function of the printer is reenabled by the server computer system only in response to an entry of the physical location of the printer into the printer.

Data processing system and method for providing a networked printer's physical location

An I/O controller for a computer system having a plurality of memory devices of different types such as floppy and hard disks, whereinn a single cache memory is employed for all of the memory devices. Each of the memory devices is provided with its own interface device which directs data outputted from the associated memory device onto a common device bus. From the device bus data is transferred to a cache memory via a separate cache bus, and then to a system processor via the same cache bus. Memory space within the cache memory may be allocated among the various memory devices.

Growing community of inventors

Cary, NC, United States of America

Hernando Ovies