Intel Corporation

Kumar Narasimhan Dwarakanath

Victoria C Moore

Reshma Lal

Pradeep M Pappachan

Rakesh Avichal Ughreja

Prashant Dewan

Nitin V Sarangdhar

Uttam K Sengupta

Ned M Smith

Kapil Sood

Ioannis T Schoinas

William A Stevens, Jr

Karunakara Kotary

Purushottam Goel

Michael Neve De Mevergnies

Mukesh Kataria

Elad Eyal

Aditya Katragada

Vinod Gomathi Nayagam

Neel Piyush Shah

Vinupama Godavarthi

Moorthy Rajesh

Fred H Bolay

Niraj Bali

Asaf Haskel

Gennadi Iosad

Anoop K Jayasankaran

David Zahavi

Benjamin Niewenhuis

Alex Izbinsky

Systems and methods include establishing a cryptographically secure communication between an application module and an audio module. The application module is configured to execute on an information-handling machine, and the audio module is coupled to the information-handling machine. The establishment of the cryptographically secure communication may be at least partially facilitated by a mutually trusted module.

Securing audio communications

Technologies disclosed herein provide an apparatus comprising a fuse controller coupled to an aggregator. The fuse controller includes a plurality of fuses for storing a unique identifier of a device and a first secured value of a first password associated with the unique identifier. The aggregator is to receive the unique identifier and the first secured value from the fuse controller, send the unique identifier to an unlock host, receive a second password from the unlock host, compute a second secured value of the second password using a security function, and unlock one or more privileged features on the device based on the first secured value corresponding to the second secured value. In a specific embodiment, the first secured value corresponds to the second secured value if the first password is equivalent to the second password.

Secure unlock systems for locked devices

There is disclosed in one example, a system-on-a-chip (SoC), including: a processor core; a fabric; an intellectual property (IP) block communicatively coupled to the processor core via the fabric, the IP block having a microcontroller configured to provide a microcontroller architecture; a firmware load interface configured to provide a standardized hardware interface to the microcontroller architecture, wherein the standardized hardware interface provides an architecture-agnostic mechanism to securely load a firmware to the intellectual property block; and logic to provide a loader to load a firmware to the IP block via the firmware load interface.

Standardized interface for intellectual property blocks

Various configurations and methods for providing a secure transfer of data from computing device sensors to a Trusted Execution Environment (TEE) are disclosed. As disclosed, various data flows, data sequences, and configurations are provided to allow sensor data to maintain integrity and confidentiality while being accessed by trusted agents of a TEE. In an example, a microcontroller-based TEE is operated to communicate with a sensor hub via a secure hardware channel. The microcontroller-based TEE is configured to receive the sensor data via the secure hardware channel, and communicate the sensor data to other trusted agents in the computing system via secure communications. Other variations of secure communications among multiple sensors, trusted agents, TEEs, and third party services are also disclosed.

Securely routing sensor data from sensors to a trusted execution environment (TEE)

Disclosed in some examples are devices, methods, and machine-readable mediums for reliable control of IR LEDs. In some examples, a microcontroller running firmware controls whether the LED is activated or not by use of a disable signal. The microcontroller enables or disables the operation of the LED based upon a user's proximity to the LED, a watchdog timer, and a confirmation that only trusted software is executing.

Infrared light emitting diode control circuit

A system includes one or more biometric sensors, a sensor hub and a trusted application execution environment. The sensor hub has exclusive access to the sensors and also isolates untrusted/unauthenticated portions of the operating system from direct access to unencrypted biometric data acquired by the sensors. During a biometric scan/collection process, only the sensor hub and a security engine can access the sensors and a storage component. The sensor hub reads the sensors to obtain the biometric data associated with the scan/collection process and stores the biometric data in the storage component. The security engine encrypts the biometric data before the sensor hub removes the access restrictions. Various components transfer the encrypted biometric data from the storage component to the trusted environment, which hosts algorithms for processing the biometric data.

Secure biometric data capture, processing and management for selectively prohibiting access to a data storage component from an application execution environment

Mobile devices can be wirelessly linked to an increasing number of wearable devices. Sensors included in both mobile and wearable devices possessed by a first party and a second party can detect physical, biometric, or environmental inputs. A logic circuit in each of the portable electronic devices can autonomously determine whether these inputs are indicative of a trusted contact between the first and the second parties in various social, business, and commercial settings based at least in part on local social, business, and interpersonal practices and norms. A first portable electronic device possessed by a first party and a second portable electronic device possessed by a second party may autonomously exchange public or private information based on detecting a trusted contact between the first party and the second party. Such devices may also track ongoing trusted contact between the first party and the second party in social, business, and commercial settings.

Electronic data transfer between trust contacts

The present disclosure is directed to a system for provision of supporting content (SC). In general, a device may utilize event information to request SC from an SC provider, and may then present the SC concurrently with an occurrence of the event. The event information may comprise at least an event identifier and a SC provider locator. In response to the request, the SC provider may provide SC configuration data to the device. The SC configuration data may include at least a time, date and location data for the occurrence of the event. At least the time, date and location data may be used to identify an occurrence of the event, upon which the device may synchronize with a start time of the occurrence of the event. The SC may be provided to the device prior to the event or may be streamed during the occurrence of the event.

System for provision of supporting content

In one embodiment, a processor has at least one core to execute instructions, a security engine coupled to the at least one core, a first storage to store a first immutable key associated with a vendor of the processor, and a second storage to store a second immutable key associated with an original equipment manufacturer (OEM) of the system. A first portion of firmware is to be verified based at least in part on the first immutable key and a second portion of firmware is to be verified based at least in part on the second immutable key, the first portion of firmware associated with the vendor and the second portion of firmware associated with the OEM. Other embodiments are described and claimed.

Partitioning access to system resources

Growing community of inventors

Folsom, CA, United States of America

Kumar Narasimhan Dwarakanath