International Business Machines Corporation

Miriam Zohar

Dimitrios Pendarakis

David R Safford

Kenneth Alan Goldman

George Conerly Wilson

Patrick Joseph Callaghan

Elaine Rivette Palmer

Brian D Valentine

Guerney D H Hunt

Douglas Lee Schales

Arthur Appel

Srinivasan Seshan

Guerney Dh Hunt

A service processor is provided that includes a processor, a memory coupled to the processor and having instructions for executing an operating system kernel having an integrity management subsystem, secure boot firmware, and a tamper-resistant secure trusted dedicated microprocessor. The secure boot firmware performs a secure boot operation to boot the operating system kernel of the service processor. The secure boot firmware records first measurements of code executed by the secure boot firmware when performing the boot operation, in one or more registers of the tamper-resistant secure trusted dedicated microprocessor. The operating system kernel enables the integrity management subsystem. The integrity management subsystem records second measurements of software executed by the operating system kernel, in the one or more registers of the tamper-resistant secure trusted dedicated microprocessor.

Service processor and system with secure booting and monitoring of service processor integrity

Mechanisms for booting a service processor are provided. With these mechanisms, the service processor executes a secure boot operation of secure boot firmware to boot an operating system kernel of the service processor. The secure boot firmware records first measurements of code executed by the secure boot firmware when performing the boot operation, in one or more registers of a tamper-resistant secure trusted dedicated microprocessor of the service processor. The operating system kernel executing in the service processor enables an integrity management subsystem of the operating system kernel which records second measurements of software executed by the operating system kernel, in the one or more registers of the tamper-resistant secure trusted dedicated microprocessor.

Securely booting a service processor and monitoring service processor integrity

The present invention provides methods and apparatus for classifying and demultiplexing packets in a network protocol stack. It provides extendibility for packet processing in the network protocol stack by defining a standard method for adding new functionality. It provides a method to obtain external information, from an application scheduled outside of the forwarding or interrupt context of the kernel, in order to augment packet classification and/or augment packet disposition. In some embodiments, external information augments a criteria of a node in a classification tree with additional information. It presents a way of augmenting which suspends the classification process until an application, scheduled outside of the forwarding or interrupt context of the kernel, completes. The resulting external information is used to augment the packet classification. In some embodiments of the method, the external information includes authentication of an originator of the packet by correlating a tunnel id with a userid, and/or using s/ident for out of band authentication. The classification process enables enforcement of a site policy.

Network data packet classification and demultiplexing

A system for full motion videoconferencing. The total video image space is broken down into regions of such position and size relative to the space that the image data in predetermined sections of the regions is overlapped during the cyclic transmission thereof. The reception and display of the superimposed regions provides a significant increase in the perceived transmission rate in the overlapped sections, rendering those sections suitable for full motion effects.

Cyclic video region transmission for videoconferencing systems

Growing community of inventors

New Hempsted, NY, United States of America

Miriam Zohar