International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Other

Atmel Corporation

Intermec IP Corporation

James Peter Ward

Daryl Carvis Cromer

Howard J Locker

Randall Scott Springfield

Brandon Jon Ellison

James Patrick Hoff

David Benson Rhoades

Eric Richard Kern

Richard Wayne Cheston

Dhruv Manmohandas Desai

David Carroll Challener

Richard Alan Dayan

Michael Joseph Steinmetz

Andy Lloyd Trotter

Steven Dale Goodman

Gregory William Kilmer

Ryan Charles Catherman

Philip John Jakes

Jan Michael Janick

Hernando Ovies

Scott Thomas Elliott

Gregory Brian Pruett

Michael Terrell Vanover

Joseph Wayne Freeman

Joseph Michael Pennisi

Kerry D Maletsky

Ernest Nelson Mandese

Brandon John Ellison

Alejandro Gabriel Schrott

Robert J Von Gutfeld

Mark Charles Davis

Steven A Bade

David Rivera

Timothy J Louie

Alan F Neel, Ii

Margaret E Claffey-Cohen

Christopher Britton Gould

Charles Douglas Ball

Christopher Brit Gould

Sarbajit Kumar Rakshit

Michael Bender

Arnold S Weksler

Paul William Coteus

Christopher J Hardee

Paul Andrew Moskowitz

Charles W Kaufman

Michael John Brady

Dah-Weih Duan

James Anthony Hunt

Joshua Neil Novak

Kevin Michael Reinberg

John K Langgood

Helmut H Weber

Jeffrey Mark Estroff

Shawn D Hennessy

Venkata S R Kodukula

Mark G Noll

Joseph P McGovern

Michael Sievert

Isaac Karpel

Siegfried Sutter

Kenneth D Smeltzer

Chad Lee Gettelfinger

Jose A Olive

Robert Joseph Evans

Christopher Scott Long

Brian John Walsh

Ralph Bonomo

Frank J Schroeder

Akira Hino

Roberto V Perez

Robert G Hillis

Joshua James Jankowsky

James Andrew McNee

Karan Goenka

Dave Carroll Challener

Norman Dion

Richard Mark Flanagan

Andy Lloyd Trotte

Phat T Le

Robert H-c Lin

Lorie A Goins

Gregory Pruett

Scott Thomas Elliot

Scott Long

Howard Jeffrey Locker

An approach is provided for optimizing a digital display. Classifications of advertisements are determined. A location of a future action in an event is predicted. A sentiment of an audience is determined. The audience includes spectators at the venue, viewers who are viewing the event via devices receiving a live broadcast of the event, or a combination of the spectators and the viewers. Based on the location of the future action, a digital display is selected from digital displays in the venue and content on the digital display is predicted to be captured as an image by a camera and broadcast to devices of the viewers. Based on the classifications, the sentiment, the location of the future action, and the content being predicted to be captured and broadcast, an advertisement is selected. The selected advertisement is sent to the selected digital display.

Optimizing a digital display

Systems, methods, and computer-readable media for performing context-based delayed notification of messages are disclosed. Context-based delayed notification of messages can include delaying notification of incoming messages received or generated by a user device to a user of the device until a determination is made that the messages satisfy message delivery criteria. Contextual data such as location data, time data, device usage data, or the like can be used to determine whether the message delivery criteria are satisfied. Messages received by a user device from one or more senders can be categorized into one or more message categories based on message categorization criteria. Individual messages or groups of messages within a message category can be evaluated against the message delivery criteria using the contextual data to determine whether notification of the messages to a user should be delayed or allowed to proceed.

Context-based message notification

A method and apparatus are disclosed in a data processing system for establishing virtual endorsement credentials. The data processing system includes a hardware trusted platform module (TPM). Logical partitions are generated in the system. A different virtual TPM is generated for each one of the logical partitions. For each one of the logical partitions, the virtual TPM that was generated for the logical partition then dynamically generates a virtual endorsement key, which is stored only within a corresponding virtual TPM. Using the virtual endorsement key, each virtual TPM also generates a virtual endorsement credential for use by the logical partition that includes the virtual TPM. The virtual endorsement credential is generated within the data processing system without the data processing system or its devices accessing a trusted third party that is external to the data processing system.

Establishing virtual endorsement credentials for dynamically generated endorsement keys in a trusted computing platform

A method and system for binding a device to a planar is disclosed. According to the preferred embodiment of the method and system of the present invention, a programmable memory chip is provided on the planar and the device is detachably attached to the planar. The method and system further includes using the programmable memory chip to bind the device to the planar. Through the aspects of the present invention, the programmable memory chip transmits a message associated with the planar to the device, which is programmed to receive the message associated with the planar. If the message received by the device is not the message associated with the planar, the device is disabled.

Method and system for binding a device to a planar

A method, computer program, and system for paging platform configuration registers in and out of a trusted platform module. In a trusted computing platform, an unlimited number of platform configuration registers can be obtained through paging. The trust platform module encrypts and decrypts platform configuration registers for storage outside the trusted platform module.

Scalable paging of platform configuration registers

A method for a plurality of key cache managers for a plurality of localities to share cryptographic key storage resources of a security chip, includes: loading an application key into the key storage; and saving a restoration data for the application key by a key cache manager, where the restoration data can be used by the key cache manager to re-load the application key into the key storage if the application key is evicted from the key storage by another key cache manager. The method allows each of a plurality of key cache managers to recognize that its key had been removed from the security chip and to restore its key. The method also allows each key cache manager to evict or destroy any key currently loaded on the security chip without affecting the functionality of other localities.

Key cache management through multiple localities

A computer system is presented which provides a trusted platform by which operations can be performed with an increased level trust and confidence. The basis of trust for the computer system is established by an encryption coprocessor and by code which interfaces with the encryption coprocessor and establishes root of trust metrics for the platform. The encryption coprocessor is built such that certain critical operations are allowed only if physical presence of an operator has been detected. Physical presence is determined by inference based upon the status of registers in the core chipset.

Physical presence determination in a trusted platform

An apparatus, system and method of secure communications from a human interface device are provided. The apparatus, system, and method receive input data and calculate encrypted data from the input data using a secure credential. In one embodiment the apparatus, system, and method request and receive a single instance credential and calculate the encrypted data using the secure credential and the single instance credential. The encrypted data may be a secure authorization that may be valid for one use. Communication of the encrypted data through networks and communicating devices is secure. The encrypted data may not be decrypted even if intercepted without the secure credential. The apparatus, system, and method enable secure communications from the human interface device.

Apparatus, system, and method for secure communications from a human interface device

An update utility requests a signature verification of the utility's signature along with a request to unlock the flash memory stored in the utility. A trusted platform module ('TPM') performs a signature verification of the utility using a previously stored public key. Upon verification of the signature, the TPM unlocks the flash memory to permit update of the utility. Upon completion of the update, the flash utility issues a lock request to the TPM to relock the flash memory.

Flash update using a trusted platform module

A method and system for enabling security attestation for a computing device during a return from an S4 sleep state. When the computing device enters into the S4 state following a successful boot up, the attestation log is appended to the TPM tick count and the log is signed (with a security signature). When the device is awaken from S4 state, the BIOS obtains and verifies the log created during the previous boot. The CRTM maintains a set of virtual PCRs and references these virtual PCRs against the log. If the values do not match, the return from S4 state fails and the device is rebooted.

Method for preventing system wake up from a sleep state if a boot log returned during the system wake up cannot be authenticated

Access to secure data through a portable computing system is provided only when a timer within the system is running. The timer is reset with the portable system connected to a base system, either directly, as by a cable, or indirectly, as through a telephone network. In an initialization process, the portable and base systems exchange data, such as public cryptographic keys, which are later used to confirm that the portable system is connected to the same base system. In one embodiment, the initialization process also includes storing a password transmitted from the portable system within the base system, with this password later being required within the reset process.

System and apparatus for limiting access to secure data through a portable computer to a time set with the portable computer connected to a base computer

A Trusted Computing Platform Alliance (TCPA) endorsement certificate is provided by comparing a trusted platform module (TPM) public key transmitted by an owner of the computing device to which the TPM belongs to a copy of the key as originally stored in a remote database prior to vending the device. If a match is found the certificate is created using the public key, and then sent to the owner of the computing device.

System and method for providing endorsement certificate

A network includes a plurality of wall plates, each of the wall plates couples a network resource such as a computer or a network attached device to the network and includes an RFID circuit to detect proximate devices having an RFID tag. The proximate devices can be network attached devices or non network attached devices such as desks, phones, and artwork. Logic is included within each wall plate which includes wall plate physical location information. The logic is designed to respond to a broadcast signal. In so doing, the physical location of any resource can be determined. The physical location of all known resources are provided to an inventory application in the network, thereby allowing network administrators and users to remotely determine the physical location (room, floor, building, etc.) of any and all known resources attached to the network. Likewise, local computer users are able to identify the network resources located in their vicinity.

Determining the physical location of resources on and proximate to a network

A method and system for configuring an operating system in a computer system including language selection during bootup rather than at manufacture. A first aspect of the method and system comprises providing a plurality of operating system images in the computer system, each of the plurality of operating system images being based upon a particular language, selecting one of the plurality of operating system images based on the language supported by the computer system and loading the selected operating system image into the computer system. A second aspect of the method and system comprises providing a language-independent operating system image in the computer system, determining a language supported by the computer system, loading the language-independent operating system image into the computer system, and associating the language supported by the computer system with the language-independent operating system image.

Method and system for configuring an operating system in a computer system

Growing community of inventors

Raleigh, NC, United States of America

James Peter Ward