Intel Corporation

Nicholas J Yoke

Vincent J Zimmer

Michael A Rothman

H Peter Anvin

Karunakara Kotary

Gopinatth Selvaraje

Brett P Wang

David C Estrada

Timothy E Labatte

Genliu Xing

Technologies for securely booting a computing device includes a security engine of the computing device that consecutively determines a hash value for each block of initial boot firmware and generates an aggregated hash value from the hash value determined for each of the blocks. A processor of the computing device determines whether the aggregated hash value matches a reference checksum value. Initialization of the processor is completed in response to a determination that the aggregated hash value matches the reference checksum value. In some embodiments, the security engine consecutively retrieves each block of the initial boot firmware from a memory of the computing device, stores each retrieved block in a secure memory of the security engine, and determines the hash value for each stored block. Each block stored in the secure memory is copied to a portion of a cache memory of the processor initialized as Cache as RAM.

Securely booting a computing device

The present disclosure is directed to flexible bootstrap code architecture. A device may comprise equipment for operating the device and an operating system (OS) for operating the equipment. A boot module may also be included in the device to execute boot operations. At least one flexible boot (FB) module in the boot module may interact with the equipment and/or OS during the boot operations to cause the boot operations to become device-specific. An example boot module may comprise a plurality of FB modules. An example FB module may verify a device/chipset identification and may control the boot operations based on the identification. Other example FB modules may select resources to load based on an OS type, may provide a boot configuration table location for use in OS runtime boot configuration or may load variables from a preload variable directory for use in configuring boot operations.

Flexible bootstrap code architecture

The present invention is a method and apparatus for providing storage of a significant number of events in a runtime event log without block erases of flash memory, through compression of multiple events within a single event entry. The compression of multiple events within a single log entry allows a significantly higher number of events to be stored within an event log than has heretofore been available, and thus provides more accurate information to a user performing diagnostic work on a computer system.

Method and apparatus for high speed event log data compression within a

Growing community of inventors

Tigard, OR, United States of America

Nicholas J Yoke