Intel Corporation

Tektronix, Inc.

Other

Nikhil M Deshpande

Robert Conrad Knauerhase

Ravindra V Velhal

Jeetendra G Deshmukh

Uttam K Sengupta

Kyle L Bernard

David M Durham

Ravi L Sahita

Carlos V Rozas

Barry E Huntley

Vincent R Scarlata

Simon P Johnson

Anand Rajan

Vinay Phegade

Thomas L Kuntz

Man-Kit Yau

Tonia G Morris

Kathryn A Engholm

Xiaofen Chen

Thomas C Hill

Abhay A Dharmadhikari

Du V Nguyen

Stephen H Dohrmann

Jose' Ramirez, Ii

R Harold Crawford

John D Fowler

Greg F Eastman

R Eben Jenkins

Ben H Lee, Iii

In a method to utilize a secure public cloud, a computer receives a domain manager image and memory position-dependent address information in response to requesting a service from a cloud services provider. The computer also verifies the domain manager image and identifies a key domain key to be used to encrypt data stored in a key domain of a key domain-capable server. The computer also uses the key domain key and the memory-position dependent address information to encrypt a domain launch image such that the encrypted domain launch image is cryptographically bound to at least one memory location of the key domain. The computer also encrypts the key domain key and sends the encrypted domain launch image and the encrypted key domain key to the key domain-capable server, to cause a processor of the key domain-capable server to create the key domain. Other embodiments are described and claimed.

Secure public cloud

A method, system, computer-readable media, and apparatus for ensuring a secure cloud environment is provided, where public cloud services providers can remove their code from the Trusted Computing Base (TCB) of their cloud services consumers. The method for ensuring a secure cloud environment keeps the Virtual Machine Monitor (VMM), devices, firmware and the physical adversary (where a bad administrator/technician attempts to directly access the cloud host hardware) outside of a consumer's Virtual Machine (VM) TCB. Only the consumer that owns this secure VM can modify the VM or access contents of the VM (as determined by the consumer).

An apparatus for sharing information between entities includes a processor and a trusted execution module executing on the processor. The trusted execution module is configured to receive first confidential information from a first client device associated with a first entity, seal the first confidential information within a trusted execution environment, receive second confidential information from a second client device associated with a second entity, seal the second confidential information within the trusted execution environment, and execute code within the trusted execution environment. The code is configured to compute a confidential result based upon the first confidential information and the second confidential information.

Mutually assured data sharing between distrusting parties in a network environment

An embodiment of the present invention provides an apparatus, comprising a wireless device capable of integrating a cellular phone stack in an extended firmware interface (EFI) layer, wherein the cellular phone stack within the EFI layer may include TDMA or CDMA0-based technology. An embodiment of the present invention may further provide at least one agent running under an OS/EFI continuously monitoring said wireless device status, OS availability and remaining power and wherein anytime events occur where said OS is unavailable, missing, infected, corrupted or when the remaining power is less than threshold, the wireless device may switch itself to the low power secure EFI mode where it may continue to use basic cell phone services and applications seamlessly.

Apparatus, system and method capable of integrating a cellular phone stack in an extended firmware interface (EFI) layer

Briefly, an access point may include one or more software defined radios that may be arranged to implement one or more radio transmission protocols or standards. New radio transmission protocol or standards may be downloaded into the access point so that the access point may communicate according to new radio transmission protocols or standards as they are developed.

Access point having at least one or more configurable radios

An embodiment of the present invention provides an apparatus, comprising a wireless device capable of integrating a cellular phone stack in an extended firmware interface (EFI) layer, wherein the cellular phone stack within the EFI layer may include TDMA or CDMA-based technology. An embodiment of the present invention may further provide at least one agent running under an OS/EFI continuously monitoring said wireless device status, OS availability and remaining power and wherein anytime events occur where said OS is unavailable, missing, infected, corrupted or when the remaining power is less than threshold, the wireless device may switch itself to the low power secure EFI mode where it may continue to use basic cell phone services and applications seamlessly.

Apparatus and systems, as well as methods and articles, may operate to receive status from an operating system (OS)-independent module capable of providing OS-independent geolocation information associated with a device to a network at some time before executing an operating system.

Computing platform security apparatus, systems, and methods

Methods and apparatuses for providing service availability information to a waiting customer using the customer's wireless device are generally introduced herein.

Transmission of service availability information

Methods and apparatuses for maintaining customization information for an electronic device in an operating system independent component that may be accessed prior to completion of a boot up process to be used to provide customized functionality of the electronic device.

Customization of electronic devices via pre-boot space

Techniques and structures are disclosed for providing proximity based authentication, security, and/or user notification in a wireless system.

Method and apparatus for providing proximity based authentication, security, and notification in a wireless system

A method, apparatus, and signal-bearing media for determining a presence rule for a mobile device and updating presence information for the mobile device when the presence rule is met. The presence rule may have a condition and a corresponding state. When the condition is met, the corresponding state is saved in the presence information. The presence information may also contain reachability information for the mobile device.

Method of automatically updating presence information

A mobile device includes network interfaces for communicating wirelessly with two different networks. The mobile device may operate as a gateway between the two networks by switching between the two network interfaces in order to pass information from one network intended for the other network.

Method and apparatus for enabling connectivity between arbitrary networks using a mobile device

Techniques and structures are disclosed for allowing context-based searches to be performed from a wireless device. In at least one embodiment, a wireless device may append context-specific information, collected by at least one local sensor to a network search query to be delivered to a remote search engine when a network search is being performed. The wireless device may then receive search results from the remote search engine in response to the network search query that identify the elements of appended context-specific information that were used to perform the network search. The wireless device may then display these search results to a user.

Growing community of inventors

Beaverton, OR, United States of America

Nikhil M Deshpande