Lenovo (singapore) Pte. Ltd.

International Business Machines Corporation

Joseph Michael Pennisi

Randall Scott Springfield

Rod D Waltermann

Howard J Locker

Igor Stolbikov

David Carroll Challener

Daryl Carvis Cromer

Kenneth Scott Seethaler

Russell Speight VanBlon

James Peter Ward

Timothy Winthrop Kingsbury

Kevin Wayne Beck

Thorsten Peter Stremlau

Richard Alan Dayan

Richard Wayne Cheston

Steven Dale Goodman

Justin Tyler Dubs

Philip Lee Childs

David Rivera

Michael Gerard Demeter

Ralph Bonomo

Veronika Stolbikova

Scott Wentao Li

Makoto Ono

Fred Allison Bower, Iii

Mark Charles Davis

Michael Terrell Vanover

Joseph Wayne Freeman

James Patrick Hoff

Joshua Neil Novak

William Robert Lee

Ryan Charles Catherman

John K Langgood

Carlos Munoz-Bustamante

Yasushi Tsukamoto

William Fred Keown, Jr

Ernest Nelson Mandese

Jan Michael Janick

Adam Jerome Cavenaugh

Zhigang Na

Adam Miles Smith

David W Nuechterlein

Tomoki Maruichi

Jon Wayne Heim

Alfredo Zugasti Hays

Masahiko Shinomura

Ephraim D Starr

Paul S Yosim

Christopher Aaron Whitesock

David Ronny Dwin

John Hancock Nicholson, Iii

Terry A Buschbach

Lisa Louise Carter

Brian Lee

David William Higgins

Thomas Kenneth Tobul, Jr

Qihua Xiao

John H Nicholson

DeHong Meng

Zhang Jianhui

One embodiment provides a method, including: receiving, at a server from a device, a request for device authentication across an unsecure network, the request including a device registration token; generating, at the server, a shared registration key utilizing the device registration token; verifying, at the server, the device registration token by comparing the device registration token to a function of the shared registration key; and producing, at the server and responsive to verifying the device registration token, a one-time activation token and sending the one-time activation token to the device. Other aspects are described and claimed.

Device authentication across unsecure network

Apparatuses, methods, systems, and program products are disclosed for distributed license encryption and distribution. An apparatus includes a processor and a memory that stores code executable by the processor. The code is executable to select a license token from a pool of available license tokens associated with available digital licenses in response to a license request from a first device. The license token includes information identifying second devices where segments of a digital license associated with the license token are stored. The segments are encrypted using encryption keys for one or more participants. The code is executable to re-encrypt the segments of the digital license for the selected license token using an encryption key for the first device and send the license token to the first device where it is used to request the segments from the second devices, decrypt the segments, and reconstruct the digital license.

Distributed license encryption and distribution

In one aspect, an embedded controller (EC) in a device may receive a firmware update for another component in the device and determine whether the firmware update has been previously applied at the component. If the firmware update has not been previously applied, the EC may assign an identifier to the firmware update and digitally sign the identifier. The EC may then provide the firmware update and the digitally-signed identifier to the component so that the component may apply the firmware update.

Embedded controller for updating firmware of another device component

Apparatuses, methods, and program products are disclosed for operating a camera sense mode. One apparatus includes a processor, a camera, and a memory that stores code executable by the processor. The code is executable by the processor to determine, by use of the processor, whether the camera is set to a camera sense mode. The camera sense mode is a mode of the camera configured to use the camera as a sensor. The code is executable by the processor to, in response to the camera being set to the camera sense mode: analyze images captured by the camera, using a sensing application, to determine information related to the images; and inhibit applications separate from the sensing application from accessing images captured by the camera.

Apparatus, method, and program product for operating a camera sense mode

Systems and methods are disclosed for generating a key based on at least one hardware component identifier for hardware of a first device and/or at least one piece of firmware code of the first device. The key may then be stored at a storage area accessible to the first device via hypertext transfer protocol secure (HTTPS) communication and the key may also be used to encrypt storage of the first device. Booting of the first device may then be facilitated based on HTTPS communication with a second device and using an extensible firmware interface (EFI) file and/or an IMG file stored at the second device. Then subsequent to at least partially facilitating the booting of the first device and based on verifying authentication credentials, the key may be transmitted to the first device to decrypt the storage of the first device.

HTTPS boot to provide decryption key

One embodiment a method, including: providing, using a processor, a user challenge over a network, wherein the user challenge is associated with a predetermined gesture to be performed by a user; obtaining, using a processor, user image data; determining, using the user image data, that a user has performed the predetermined gesture; and thereafter providing the user access to information. Other aspects are described and claimed.

Gesture based CAPTCHA test

Apparatuses, methods, and program products are disclosed for proof of work based authentication. One apparatus includes a processor and a memory that stores code executable by the processor. The code is executable by the processor to determine, by use of the processor, a set of computer-based attributes corresponding to a first device. The code is executable by the processor to compute a proof of work based on the set of computer-based attributes. The code is executable by the processor to transmit the proof of work and the set of computer-based attributes to a second device for authentication based on the proof of work and the set of computer-based attributes.

Apparatus, method, and program product for proof of work based authentication

In one aspect, a first device may include at least one processor and storage accessible to the at least one processor. The storage may include instructions executable by the at least one processor to receive, from a second device, a partial hash of a domain name. The instructions may also be executable to use the partial hash and a probabilistic data structure to identify an Internet protocol (IP) address associated with the domain name. Responsive to identifying the IP address, the instructions may be executable to transmit the IP address to the second device.

Use of partial hash of domain name to return IP address associated with the domain name

An approach is provided that receives a password that corresponds to a user identifier. A number of hashing algorithms are retrieved with the specific hashing algorithms that are retrieved being based on the received user identifier. The password is hashed using each of retrieved hashing algorithms resulting in a number of hash results. The hash results are combined with the combining of the hash result eventually resulting in a combined hash result. An expected hash result that corresponds to the user identifier is retrieved and compared to the combined hash result. The password is verified based on the results of the comparison.

Password protection based on Merkle tree proofs

An approach is provided that uses multiple hashing algorithms to verify a password. The approach receives a password that corresponds to a user identifier. A set of hashing algorithms are retrieved with the retrieved set based on the received user identifier so that different user identifiers utilize different sets of hashing algorithms. Hashing the password using each of the hashing algorithms included in the set of algorithms with the hashing resulting in a hash result. An expected hash result that corresponds to the user identifier is retrieved and the approach then verifies the received password by comparing the hash result to the first expected hash result.

Password protection using chain of random hashing functions

One embodiment provides a method, including: receiving, at a remote device and from a user, a request to generate a one-time password for accessing a default account of a device, wherein the remote device comprises a device public key corresponding to the device and an account public/private key pair corresponding to the default account; generating, at the remote device, the one-time password utilizing the account private key and the device public key; and providing, from the remote device, the one-time password to the user. Other aspects are described and claimed.

Default account authentication

One embodiment provides a method, including: receiving, at an information handling device, a touchless command to perform an action; determining, using a processor, whether the action is one of: a protected action and an unprotected action; and requesting, responsive to determining that the action is associated with a protected action, user authentication input prior to performing the action. Other aspects are described and claimed.

User authentication for protected actions

One embodiment provides a method, including: obtaining, using one or more sensors disposed in a seat, user posture data; and identifying, using a processor, a user based on the user posture data. Other aspects are described and claimed.

Sitting posture for biometric identification

In one aspect, a first device includes a processor and storage accessible to the processor. The storage bears instructions executable by the processor to analyze an electrical characteristic associated with an apparatus and perform one or more actions pertaining to authentication of the apparatus based on the analysis of the electrical characteristic.

Systems and methods for authentication based on electrical characteristic information

An approach is provided that, upon receiving a keyboard event, reduces a volume of an audio input channel from a first volume level to a lower volume level. After the volume of the audio input channel is reduced, the approach waits until a system event occurs, with the system event based at least in part on the occurrence of a nondeterministic event. The volume of the audio input channel is then increased from the lower volume level to a higher volume level when the system event occurs

Noise reduction during voice over IP sessions

Growing community of inventors

Apex, NC, United States of America

Joseph Michael Pennisi