Lenovo (singapore) Pte. Ltd.

Lenovo (united States) Inc.

Igor Stolbikov

Scott Wentao Li

Rod D Waltermann

Joseph Michael Pennisi

Timothy Winthrop Kingsbury

Alfredo Zugasti

Nathan J Peterson

Joshua Neil Novak

Michael Gerard Demeter

Gary David Cudak

Makoto Ono

John Michael Petersen

Ratan Ray

Rafael Rodrigues Machado

Denis Leite Gomes

Chunling Han

Christian De Hoyos

Sergei Rodionov

Jixin Feng

Veronika Stolbikova

John Weldon Nicholson

Robert James Kapinos

Fred Allison Bower, Iii

Justin Tyler Dubs

Philip Lee Childs

David Rivera

David Alexander Schwarz

Grigori Zaitsev

Alfredo Zugasti Hays

Kelly Rikard

Sudhir Shetty

Douglas Beloskur

Navneet Keshav

A system for activating an electronic device is provided. The system includes an electronic device configured to generate an activation token that is based on a one-time public key and an electronic device private key using a Diffie-Hellman protocol. The system also includes a service server configured to generate a service token using the Diffie-Hellman protocol in response to receiving the activation token. The system also includes a third-party server configured to generate third-party service provider token using the Diffie-Hellman protocol based on the activation token. The one or more processors of the electronic device validate the service token and the third-party service provider token, and in response to validating the service token and third-party service provider token, activate the electronic device.

Method of providing a secure electronic device

One embodiment provides a method, the method including: receiving, from a device and utilizing a variable modification system, a request to make a modification to content of a protected unified extensible firmware interface (UEFI) variable; verifying, using the variable modification system, an entity utilizing the device and requesting the modification is authorized to make modifications to the content of the protected UEFI variable; and authorizing, responsive to verifying the entity is an authorized entity and using an encryption scheme associated with the protected UEFI variable, the modification, wherein the authorization results in the modification to the content of the protected UEFI. Other aspects are claimed and described.

Authorizing modifications of protected UEFI variables

A display diagnostic system and method include a sensor configured to monitor a parameter of a light emitter of a display device. The light emitter is configured to emit light to illuminate a display screen of the display device. The light emitter is powered by an inverter of the display device. The system and method include one or more processors that receive a sensor signal generated by the sensor. The sensor signal is indicative of the parameter of the light emitter monitored by the sensor at a first time. The one or more processors are configured to determine that the light emitter is inactive at the first time based on the sensor signal, and, responsive to determining that the light emitter is expected to be active at the first time, generate a control signal indicating a fault state of the inverter.

Display diagnostic system and method

An apparatus can include an interface for receiving authentication tokens from a user. The apparatus can include processing circuitry coupled to the interface. The processing circuitry can receive, over the interface, a first authentication token of the user and at least a second authentication token of the user. The processing circuitry can determine whether the first authentication token and at least the second authentication token correspond to an identity associated with the user. The processing circuitry can validate a computing session responsive to determining that the first authentication token and at least the second authentication token can be linked to the identity. Other methods and systems are described.

Support for concurrent identities in an identity management solution

In one aspect, an apparatus may include at least one processor and storage accessible to the at least one processor. The storage may include instructions executable by the at least one processor to identify a live physical attribute of a device, where the live physical attribute may be related to the device's orientation or another aspect of the device. The instructions may also be executable to visually present, in virtual space, a representation of the device. The representation may be presented according to the live physical attribute of the device.

Presentation of representation of device in virtual space based on live physical attribute(s)

Apparatus, methods, and computer program products that recommend connecting on a platform based on participant interaction are disclosed. One apparatus includes a processor and a memory. The memory includes instructions executable by the processor to cause the apparatus to track interaction between a pair of participants of a digital environment conducted on a first platform and recommend that the pair of participants connect on a second platform in response to the interaction between the pair of participants exceeding a predetermined threshold of interactions. Methods and computer program products that include and/or perform the operations and/or functions of the apparatus are also disclosed.

Recommending connecting on a platform based on participant interaction

In one aspect, an apparatus includes a processor assembly and storage accessible to the processor assembly. The storage includes instructions executable by the processor assembly to receive input from at least one sensor on a first device and to determine, based on the input, that a user is asleep. The instructions are also executable to, based on the determination, disable at least a first type of authentication usable to unlock a second device.

Disablement of device authentication based on user sleep state

The management of web page content includes maintaining an auditable log of trust verification relating to the web page content. The management further includes an attestation of a source of the web page content. The attestation relates to a security practice of the source, computer code provided by the source, a reputation of the source, and a history of the source. A modified version of a Verkle Tree is then applied to the auditable log and the attestation of the source.

Transparent web content validation tree

A computer implemented method, device and computer program device are provided including a processor; a storage medium to store a user defined password (UDP) factor and program instructions accessible by the processor; wherein, responsive to execution of the program instructions, the processor to: generate a first machine generated indicia (MGI) code indicative of the UDP factor; and generate a second MGI code indicative of a time-based one-time password (TOTP) factor; and a display to display the first and second MGI codes during an authentication operation.

Devices and methods to validating multiple different factor categories

Methods, apparatus, and computer program products for adding devices to a network via a zero-knowledge protocol are disclosed. One method includes implementing, by a processor, a zero-knowledge protocol configured to establish digital trust relationships between the processor and computing devices attempting to join a network and adding each computing device to the network that successfully establishes a respective digital trust relationship with the processor via the zero-knowledge protocol. Apparatus and computer program products that include hardware and/or software that can perform the methods for adding devices to a network via a zero-knowledge protocol are also disclosed herein.

Adding devices to a network via a zero-knowledge protocol

Methods, apparatus, and program products that can predict misconfigurations in a computing system using machine learning are disclosed herein. One method includes labeling one or more graph nodes or link nodes of a data graph of a computing system that includes one or more security vulnerabilities with a node label or link label, respectively, in which each node label represents the first security vulnerabilities associated with a particular graph node and each link label represents the second security vulnerabilities associated with a particular link node. The method further includes utilizing the graph node(s) or the link node(s) to train a machine learning algorithm to predict one or more misconfigurations in the computing system based on the security vulnerabilities and determining one or more modifications to the computing system for mitigating the one or more misconfigurations. Apparatus and program products that include and/or perform the methods are also disclosed herein.

Predicting system misconfigurations using machine learning

One embodiment provides a method, including: receiving, at an information handling device, text associated with a user command; storing, in a data store, an encrypted form of the text associated with the user command; determining, using a processor, whether the encrypted form of the text has been detected in other user commands in exceedance of a predetermined threshold; and storing, responsive to determining that the encrypted form of the text has been detected in the other user commands in exceedance of the predetermined threshold, an unencrypted transcript of the text in a data table. Other aspects are described and claimed.

Anonymization of text transcripts corresponding to user commands

A process for transmitting a file from a sender device to a receiver device includes generating a random symmetric session key for the sender device, and randomly selecting a private ephemeral key for the sender device. The private ephemeral key is associated with a corresponding first public key. A public ephemeral key is randomly selected for the receiving device. The public ephemeral key is associated with a corresponding first private key. A random value is generated, an encrypted session key is calculated, and the file is encrypted using symmetric encryption. The sender device includes a first public X509 certificate comprising a second public key and a corresponding second private key that is signed by a service provider, and the receiver device includes a second public X509 certificate comprising a third public key and a corresponding third private key.

End to end file-sharing schema using signed Merkle tree randomly originated keys

Methods, apparatus, and computer program products for computing device digital certificates that include a geographic extension are disclosed herein. One method includes a processor managing a digital certificate for a first computing device, in which the digital certificate includes a geographic extension, and populating the geographic extension with a distance value that enables the digital certificate to be validated via the populated geographic extension. Apparatus and computer program products that include hardware and/or software that can perform the methods for computing device digital certificates that include a geographic extension are also disclosed herein.

Computing device digital certificates that include a geographic extension

A computer mouse can include a scroll wheel assembly that includes a scroll wheel rotatable about a scroll wheel axis; and a motor assembly that includes a rotor aligned with the scroll wheel axis and operatively coupled to the scroll wheel.

Growing community of inventors

Apex, NC, United States of America

Igor Stolbikov