Hewlett-packard Development Company, L.P.

Compaq Computer Corporation, Inc.

Compaq Information Technologies Group, L.p.

Manuel Novoa

Valiuddin Y Ali

Wael M Ibrahim

Lan Wang

Liqun Chen

Graeme John Proudler

Jennifer E Rios

Adrian Crisan

Matthew J Wagner

Michael F Angelo

Valluddin Y Ali

Boris Balacheff

Binh T Truong

Louis B Hobson

Walter G Fry

Christopher Charles Mohrman

Jeffrey C Parker

Christopher Ian Dalton

Shab H Madina

Ligy Kurian

Paul H McCann

Mark J Altendorf

Paul B Hokanson

Richard Churchill

Robert S Brayton

Slava Gomzin

Valuiddin Ali

Wayne P Sharum

Jeff Parker

Wael Mohamad Ibrahim

Jennifer Rios

An example processor-implemented method for accessing peripheral devices with the present disclosure includes establishing connection between a portable computing device and a dock, determining a pairing status between the portable computing device and the dock, and managing access to at least one peripheral device by the portable computing device based on the pairing status. The dock is associated with the at least one peripheral device.

Managing access to peripheral devices

A computer security system comprises a security module adapted to control access to a secure computer resource by a user via a client based on verification of a security credential provided by the user. The computer security system also comprises verification data disposed on the client and accessible by the security module. The security module is adapted to enable the user to recover the security credential based on a response received from the user associated with the verification data.

Computer security system and method

A system comprises a processor which executes an operating system and an application. The system also comprises a keyboard coupled to the processor. The keyboard and application share a shared secret that is used to encode keyboard data provided from the keyboard to the application. The shared secret is not known or accessible to the operating system.

Shared secret used between keyboard and application

There is provided a method of providing secure access to data stored in a system memory of a computer system, the computer system comprising a memory controller for writing data to and reading data from the system memory. The method comprises generating a random encryption key each time the computer system is booted and storing the random encryption key in a volatile memory region of the memory controller. The method additionally comprises encrypting data using the random encryption key to create encrypted data, and storing the encrypted data in the system memory. Also provided are a memory subsystem and a computer system for performing the method.

System and method for providing secure access to system memory

A system comprises a basic-input-output-system ('BIOS'), a disk drive, and a security system configured to prevent unauthenticated access to the disk drive. For each of at least two users out of a plurality of users, the BIOS authenticates the user based on the user's token. The BIOS also accesses secured data based on the authentication, and provides the secured data to the security system without input from the user.

Systems and methods for data security

In one embodiment a computer system, comprises a processor, a trusted platform module comprising at least one platform configuration register, a basic input/output system, and logic to unseal at least one current key in the trusted platform module, initiate an update to the basic input/output system, obtain, with the update, at least a component of one expected value for a platform configuration register in the trusted platform module, seal at least one key using the at least one expected value for a platform configuration register, and install the basic input/output system update.

Secure computer system update

A computer system is provided, the computer system having a processor and a system memory coupled to the processor. The computer system also includes a Basic Input/Output System (BIOS) in communication with the processor. The BIOS selectively scrubs the system memory during a shutdown process of the computer system.

Methods and systems to selectively scrub a system memory

A computer system includes an authentication service running in a virtual machine. The authentication service uses the hardware components of the computer system in performing a user authentication process and responds to a remote call from another virtual machine by performing the user authentication process and returning a result.

Providing temporary exclusive hardware access to virtual machine while performing user authentication

A computer platform is provided that comprises a processor and a cryptographic co-processor coupled to the processor. The computer platform further comprises a platform entity coupled to the processor. The platform entity establishes a secure relationship with the cryptographic co-processor that enables the platform entity to utilize cryptographic functions provided by the cryptographic co-processor.

Methods and systems for utilizing cryptographic functions of a cryptographic co-processor

In one embodiment a computer system comprises a processor and a memory module coupled to the processor and comprising logic instructions stored in a computer readable medium. The logic instructions, when executed, configure the processor to initiate, in a client computing device, a service request, in response to the service request, initiate a request for a location attestation certificate, and complete the client service request when the location attestation certificate is granted.

Location attestation service

Systems, methodologies, media, and other embodiments associated with cryptographic key maintenance and/or migration are described. One exemplary system embodiment includes a logic for performing cryptographic key maintenance and/or migration and an interface for operably connecting the system to a trusted platform.

Subordinate trusted platform module

A system comprises a first operating environment and a second operating environment. The first and second operating environments exchange information in encrypted form using a shared encryption key (K). The first and second operating environments cooperate to change the encryption key Kusing another shared encryption key (K). The encryption key Kis changed upon the encryption key Kbeing changed.

Changing of shared encryption key

In at least some embodiments, a method comprises obtaining a digital certificate that indicates a parameter of a cryptographic token associated with the digital certificate. The method further comprises associating a level of trust with the digital certificate based on the parameter of the cryptographic token.

Digital certificate that indicates a parameter of an associated cryptographic token

A system for sharing a trusted platform module (TPM) comprises a TPM operable to execute an operating system (OS)-level process, the TPM operable to pause the execution of the OS-level process and execute a non-OS-level process.

Growing community of inventors

Cypress, TX, United States of America

Manuel Novoa