Hewlett-packard Development Company, L.p.

James Robert Waldron

Lan Wang

Valiuddin Y Ali

Syed S Azam

Adrian John Baldwin

Vali Ali

Richard E Hodges

Boris Balacheff

Kent E Biggs

David Plaquin

Taciano Perez

Mike Provencher

Charles Ricardo Staub

Diego Rahn Medaglia

Valentin Popescu

Quoc P Pham

Anellena Santos

Dirceu Ramos

Marcelo Gomes De Oliveira

Diogo Cesa Rosa

Julio Cesar Sa Campao

Wei-Ze Liu

Tiago V De Quadros Weber

Fernando Ferretto

Richard Hodges E

A device platform, in some examples, comprises a security processor that may create a private/public cryptographic key pair, and data representing evidence of creation of the key pair, provide access to the key pair and data from an operating system component of the device platform, where the public key part of the key pair may be used to verify management commands. The device platform may validate the key pair and data in a trusted execution state.

Hardware security

In an example, there is provided a method for attesting to a management state of a device platform configuration, based on a signed data structure that represents a device management status and a time-based value from a secure cryptoprocessor of the device. The signed data structure is sent to a management system for validation based on a comparison to the state of the cryptoprocessor at the time of signing the data structure.

Platform configurations

Examples disclosed herein relate to symmetrically encrypting a master passphrase key. In one implementation, a computing system includes a machine-readable storage medium to store a symmetrically encrypted master passphrase key, an encrypted version of a first passphrase key associated with a second machine-readable storage medium encrypted using the master passphrase key, and an encrypted version of a second passphrase key associated with a third machine-readable storage medium encrypted using the passphrase key. A processing resource may symmetrically encrypt the master passphrase key using an encryption key derived from authentication information and/or decrypt the stored master passphrase key using a decryption key derived from the authentication information.

Symmetrically encrypt a master passphrase key

Examples associated with heartbeat signal verification are disclosed. One example includes verifying a provisioning key using a trusted key. The provisioning key is received from a remote device via an intermediary process. An intermediate key provided by the intermediary process is verified using the provisioning key. A session identifier encrypted using the intermediate key and provided to the intermediary process. A first heartbeat signal is received from intermediary process. The heartbeat signal is generated based on the session identifier.

Heartbeat signal verification

Examples associated with certificate analysis are disclosed. One example periodically analyzing a secure socket layer certificate chain between a client device and a server device. The client device may perform this periodic analysis. In response to detecting an unexpected certificate in the secure socket layer certificate chain, a responsive action is taken.

Certificate analysis

According to an example of the present disclosure, an image collection is loaded. At least one image property of the image collection is randomized, and the image collection is displayed. A registered sequence of images is accessed. At least one eye gaze and at least one eye gaze time interval are captured. A selection sequence of images in the randomized image collection is determined based on the at least one eye gaze and the at least one eye gaze time interval, and a further determination is made as to whether the selection sequence of the images in the randomized image collection matches the registered sequence of images.

Eye gaze authentication

According to an example, at least one user in proximity to a display is detected with a camera. A primary user and eye gaze are determined. The location of a secondary user relative to the display is calculated, and an active screen area and an inactive screen area based on the eye gaze are determined. A first angle and a first brightness for the active screen area and a second angle and a second brightness for the inactive screen area based on the location of the secondary user are calculated, and focus area boundaries for the active screen area based on the location of the secondary user are calculated. The first angle, the first brightness, and the focus area boundaries are applied to the active screen area, and the second angle and the second brightness are applied to the inactive screen area.

Electronic display illumination

An electronic device has a lower power state in which power to a storage device is disabled. Predetermined information stored in a memory is useable to unlock the storage device during a procedure to transition the electronic device from the lower power state to a higher power state. The predetermined information is different from a credential for use in unlocking the storage device.

Unlocking a storage device

Examples herein disclose erasing data from a target device based upon an authentication of an erase command. The examples receive an erase command during execution to boot strap information and authenticate the erase command. Upon the authentication of the erase command, the examples erase data from the target device prior to completion of execution of boot strap information.

Data erasure of a target device

An authentication system in accordance with an example includes an image capture device to scan an object. The authentication system also includes an authentication module to identify imperfections in the object based on the scan, to generate model data based on the identified imperfections, and to authenticate the user based on a comparison of currently identified imperfections to the model data.

Object-based user authentication

A computing machine including a sensor to capture a fingerprint image from a user and generate a password in response to the user accessing the sensor, a component to create a package of the fingerprint image and the password, and a processor to authenticate the fingerprint image from the package before decrypting an encryption of the password if a request for the password has been received before a predefined time has elapsed.

Growing community of inventors

Houston, TX, United States of America

James Robert Waldron