Intel Corporation

Mcafee, Inc.

Paritosh Saxena

Nicholas D Triantafillou

Paul J Thadikaran

David M Durham

Debra Cablao

Balaji Vembu

Prashant Dewan

John Douglas Teddy

Michael S Hughes

Jason M Surprise

Thomas R Bowen

Adrian M M T Dunbar

Richard Paul Mangold

Adam Greer Wright

Hormuzd M Khosravi

Daniel Nemiroff

Andrew H Gafken

Akshay Ramesh Kadam

Janet Yabeny Sholar

Reginald David Nepomuceno

Gyan Prakash

David I Poisner

Sanjeev N Trika

Selim Aissi

Saurabh Dadu

Eliezer Tamir

Ernie F Brickell

Men Long

Robert W Strong

Anand S Ramalingam

Lokpraveen B Mosur

James T Doyle

Nimrod Diamant

Ramesh Pendakur

Purushottam Goel

Simoni Ben-Michael

Karthikeyan Vaidyanathan

Casey Baron

Mark E Scott-Nash

Thomas J Barnes

David Novick

Darren Lasko

Paul S Schmitz

Terry Ryun Bradfield

Edward J Pullin

David Gordon

Azam Barkatullah

Richard J Heiler

Manish Gilani

Unnikrishnan Jayakumar

William B Lindquist

John A List

Brad W Stewart

Carol L Barrett

Benny Getz

Jonathan Trostle

Paul Thadikaran

Computing platform security methods and apparatus are disclosed. An example apparatus includes a graphics processor; and a graphics driver to facilitate access to the graphics processor, the graphics driver including: an authenticator to establish a trusted channel between the graphics driver and an application driver via mutual authentication of the graphics driver and the application driver; an offloader to offload a computing task to the graphics processor via the trusted channel, the computing task associated with the application driver; and a hypervisor to monitor memory associated with the offloaded computing task for an unauthorized access attempt.

Computing platform security methods and apparatus

Computing platform security methods and apparatus are disclosed. An example apparatus includes a security application to configure a security task, the security task to detect a malicious element on a computing platform, the computing platform including a central processing unit and a graphics processing unit; and an offloader to determine whether the central processing unit or the graphics processing unit is to execute the security task; and when the graphics processing unit is to execute the security task, offload the security task to the graphics processing unit for execution.

A method, apparatus, and computer-readable medium are provided to determine whether to enroll a computing device as a provider of a secure application enclave for an application. The following information is obtained from a second computing device: a device identifier for a first computing device, application information, and data for a shared secret. The first computing device is configured to provide a secure application enclave to support execution of the application associated with the application information, and the shared secret is shared between the secure application enclave and a user of the first computing device. A determination is made whether to enroll the first computing device as a provider of the secure application enclave for the application using the device identifier, the application information, and the data for the shared secret. The secure application enclave may be notified whether the enrollment of the first computing device is successful.

Using a second device to enroll a secure application enclave

Various systems and methods for a personal safety system are described herein. A personal safety system includes an alert detection module to receive, at a device, input indicating an alert event; and a communication module to: transmit information regarding the alert event to a cloud service; and broadcast wireless network information of a wireless environment around the device, obtained by the device, to a plurality of devices in the wireless environment.

Personal safety system

Systems and method to provide secure storage are disclosed. An example method includes establishing a secure tunnel between a storage device and an agent, provide a command from the agent to the storage device via the secure tunnel, access first data at the storage device in response to the command, and identify a modification to data stored on the storage device by comparing the first data to second data, wherein the comparison is done using the storage device.

Systems and methods to provide secure storage

Systems and methods for providing awareness of a host file system on a storage device are described. In one embodiment, a storage device includes a host interface and a file awareness block. The host interface provides an interface between a host and the storage device. The file awareness block provides an awareness of the host file system to the storage device.

Systems and methods for providing dynamic file system awareness on storage devices

Embodiments of systems, apparatuses, and methods to protect data stored in a storage system of a device from malware alternation are described. In some embodiments, a system receives an indication that the data is to be protected. In addition, the system further triggers an interrupt of the device and secures the data from the malware alternation.

User controllable platform-level trigger to set policy for protecting platform from malware

Embodiments of systems, apparatuses, and methods to securely download digital rights managed content with a client are described. In some embodiments, a system establishes a secure root of trust for the client. In addition, the system establishes a secure tunnel between an agent of the client and a storage system of the client. Furthermore, the system securely downloads the digital rights managed content to the storage system via the secure tunnel and securely provides the digital rights managed content from the storage system to a display.

Method and apparatus to using storage devices to implement digital rights management protection

Embodiments of techniques and systems for out-of-band verification of host OS components are described. In embodiments, a out-of-band host OS boot sequence verification system ('BSVS') may access system memory without detection by a host OS process, or 'out of band.' The BSVS may access host OS components in the system memory and may generate signatures from memory footprints of the host OS components. These signatures may then be compared to trusted signatures to verify integrity of the host OS components. In embodiments, this verification may be performed during a boot of a host OS or on demand. In embodiments, the trusted signatures may be pre-stored by the BSVS before a boot; in some embodiments, the trusted signatures may be previously-computed and then stored by the BSVS. Other embodiments may be described and claimed.

Out-of-band host OS boot sequence verification

Growing community of inventors

Portland, OR, United States of America

Paritosh Saxena