International Business Machines Corporation

Intel Corporation

John Adam Shriver

Joseph H Allen

David J Hoeweler

Cary A Jardin

Suresh S Kalkunte

James J Finucane

An approach is provided in which a security module, such as a TPM, identifies a change to a boot configuration used in a secure boot operation. This identification results in a non-release of a secret value that is stored in a memory controlled by the security module. The non-release of the secret value is detected by a boot process when the boot process is initiating a session of the information handling system. In response to the detection by the boot process, the boot process retrieves an update encryption key and then decrypts an update copy of a disk encryption key stored on a nonvolatile storage area of the information handling system using the retrieved update encryption key. The nonvolatile storage area also includes a primary copy of the disk encryption key that has been encrypted with the secret value.

Secure encrypted boot with simplified firmware update

A computer implemented method for writing to a software bound ring buffer. A network adapter may determine that data is available to write to the software bound ring buffer. The network adapter determines that a read index is not equal to a write index, responsive to a determination that data is available to write to the software bound ring buffer. The network adapter writes the data to memory referenced by the hardware write index, wherein memory referenced by the write index is offset according to an offset, and the memory contents comprise a data portion and a valid bit. The network adapter writes an epoch value of the write index to the valid bit. The network adapter increments the write index, responsive to writing the data to memory referenced by the write index. Further disclosed is method to access a hardware bound ring buffer.

Control flow in a ring buffer

Ring buffer

Connecting to a network server includes determining, at a first server, to which one of N mirrored servers a request from a client should be routed based at least in part on an address indicating the client and a route to the client and on the quality of service between at least some of the N mirrored servers to the client and determining to route requests from other clients associated with the address to the one of the N mirrored servers.

System for isolating other clients that experience different connection performance than the client and directing the other clients to another different mirrored server

Growing community of inventors

Arlington, MA, United States of America

John Adam Shriver