International Business Machines Corporation

Matthew T Mittelstedt

Richard Alan Dayan

Richard Bealkowski

John W Blackledge, Jr

Palmer E Newman

Robert Sachsenmaier

Kevin M Zyvoloski

Douglas R Geisler

Matthew S Palka, Jr

Doyle S Cronk

Kenneth D Smeltzer

Lisa R Arnold

John D Paul

JoAnna B Yoder

Kimthanh D Le

Peter A Woytovech

Dennis L Moeller

David Lee Randall

Bharat B Khatri

Grant L Clarke, Jr

George Mathew

Gerald Howard

Richard A Sudasassi

Lynda M Salvetti

Carolyn J Zemanek

Lisa A Ruotolo

Dave L Randall

Patrick E McCourt

This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system. In particular, a personal computer system in accordance with this invention has a normally closed enclosure, at least one erasable memory element for selective activation to active and inactive states and for receiving and storing a privileged access password when in the active state, an option switch operatively connected with the erasable memory element for setting the erasable memory element to the active and inactive states, a tamper detection switch operatively connected with the erasable memory element for detecting opening of the enclosure and for invalidating any privileged access password stored in the erasable memory element in response to any switching of the tamper switch, and a system processor operatively connected with the erasable memory element for controlling access to at least certain levels of data stored within the system by distinguishing between the active and inactive states of the memory element and between entry and non-entry of any stored privileged access password. In the presently preferred form of the invention, two non-volatile erasable memory elements are provided, one an EEPROM and the other battery backed CMOS RAM.

Personal computer system with security features and method

A method and medialess personal computer system workstation (or LAN station as herein defined) adaptable for securing the system against attack on a secured network with which the LAN station is associated. A flag bit is set in system memory during a power on self test to indicate whether access may be had to certain security features of the system, and a procedure is described by which access to a network stored configuration setting program may be gained in order to install, change or remove a password used for securing the LAN station while avoiding passing the critical password data through the network.

LAN station personal computer system with controlled data access for

A personal computer system according to the present invention comprises a system processor, a random access memory, a read only memory, and at least one direct access storage device. A direct access storage device controller coupled between the system processor and direct access storage device includes a protection mechanism for protecting a region of the storage device. The protected region of the storage device includes a master boot record, a BIOS image and a system reference diskette image. The BIOS image includes a section known as Power on Self Test (POST). POST is used to test and initialize a system. Upon detecting any configuration error, system utilities from the system reference diskette image, such as set configuration programs, diagnostic programs and utility programs can be automatically activated from the direct access storage device.

Apparatus and method for loading a system reference diskette image from

An apparatus and method for configuring a personal computer system for operation with a plurality of optional system consoles. A first non-volatile memory means stores present system configuration data. The present system configuration data is representative of the type of system console connected to the system. A diagnostic module accesses this configuration data for determining the operational validity of the system based upon a predetermined system configuration. The diagnostic module compares the present configuration data to the predetermined configuration. Based upon the comparison the diagnostic module modifies the operation of the system to communicate with the type of system console connected to the system.

System for automatically redirecting information to alternate system

Growing community of inventors

Delray Beach, FL, United States of America

Matthew T Mittelstedt