Intel Corporation

Paul C Drews

James Paul Held

James A Larson

Dan D Kogan

Paul S Diefenbaugh

Nithyananda Siva Jeganathan

Kyungtae Han

David Wheeler

James A Bish

John M Carbajal

Jinjun Liu

Eric R Dittert

Control of platform control of platform power consumption using selective updating of a display image. An embodiment of an apparatus includes a display controller to transfer pixel data from a frame buffer to a video display and a detection element to track updates to the frame buffer, the detection element to identify a portion of the pixel data that has been changed from a previous image, where the display controller is to provide the video display with the identified portion of the pixel data.

Control of platform power consumption using coordination of platform power management and display power management

Methods and apparatus for finding a shared secret without compromising non-shared secrets are disclosed. The methods and apparatus receive a first group of hashed secrets from a communication device and compare the first group of hashed secrets to a second group of hashed secrets associated with an application server. A shared secret is identified among the first and second groups of hashed secrets. An application associated with the shared secret is sent to the communication device via a communication channel.

Methods and apparatus for finding a shared secret without compromising non-shared secrets

A first storage to store a platform identifier (ID). The platform ID is unique to a platform. A second storage to store an authentication identifier. The authentication identifier is provided by an authentication vendor. The authentication vendor uses the platform ID, a platform private key, and an authentication private key. A signature generator uses the platform ID and the authentication identifier to generate a digital signature.

Protected platform identity for digital signing

The present invention provides a system and method for checking authorization of remote configuration operations. The method comprises generating a request credential manifest to request an update of configurable parameters on a client platform. Furthermore, the method comprises signing the request credential manifest with a manifest digital signature, which was generated using a private key in a cryptographic key pair. In addition, the method further comprises verifying the manifest digital signature using a public key to ascertain that the request credential manifest was generated by an authorized console platform.

System and method for checking authorization of remote configuration operations

A method and apparatus for ensuring system boot image integrity and authenticity is described. In one embodiment, the invention provides security from the end of Basic Input/Output System (BIOS) initialization to the point in time at which control is transferred to a high-level operating system (OS). The OS boot image is obtained via a network connection and is checked for integrity and authority to run on a particular platform. For this purpose, the invention provides a boot image security usage model that is simple and flexible enough to cover a variety of needs. Because receipt of boot images via a network connection can be subject to size constraints, the invention allows software to bootstrap more sophisticated security software if desired. In general, the invention utilizes one or more Remote-Boot Authorization Certificates for each group of platforms to be managed. The authorization certificate for a group of platforms is configured into each of the platforms in a group as the source of authority for allowing boot images to be executed. The authorization certificate is also the source of authority for allowing reconfiguration commands, including reconfiguration commands that transfer the source of authority to another authority. In one embodiment, IT organizations can create different authorization certificates for different groups to allow the different groups to be managed by different authorities. Authority can also be transferred between management groups. The Remote-Boot Authorization Certificates provide protection against remote-boot images that have been damaged and/or tampered with either in transit or on a server, the ability to designate and enforce which boot images are permitted, and a mechanism to limit the scope of management authorities having remote-boot authority.

Interface for ensuring system boot image integrity and authenticity

A computing system having a security module to validate requests to reconfigure a computing system. The computing system includes a persistent store for holding information indicative of the current trusted authority. A security module executing on the computing system determines whether to grant a request to modify configuration data within the computing system as a function of the information within the persistent store. In one particular embodiment, the security module facilitates the secure transfer of trust from one trusted authority to another, such as from a manufacturer to a customer. In another embodiment the security module validates a request to overwrite configuration data such as the computer's boot image or compact verification data for validating the computer's boot image.

Secure transfer of trust in a computing system

A system for checking the integrity and authority of information includes a user platform, a communication channel, and a remote platform. The remote platform transmits the information to the user platform via the communication channel. The user platform, which lacks a public key for the information, verifies the authority and integrity of the information by comparing a transformation value of the information generated on the platform to a transformation value supplied by a user. The platform is also capable of authenticating the information by displaying the transformation value generated from the information and requesting that the user match the transformation value generated from the information with a transformation value known to the user.

Authority and integrity check in systems lacking a public key

A method to verify integrity of information and selectively determine whether the information is authorized to be executed by the platform. The information is downloaded to a platform operating in a pre-boot operational state.

System and method for verifying the integrity and authorization of software before execution in a local platform

The circular queue invention herein provides a mechanism and method for producers of fixed-size data items to deliver those items to consumers even under circumstances in which multiple producers and multiple consumers share the same queue. Any producer or consumer can be permitted to preempt any producer or consumer at any time without interfering with the correctness of the queue.

Multiple-reader multiple-writer queue for a computer system

A method and apparatus pertaining to annotating a document window on a display device of a computer-based system. An annotation window is displayed over a selected portion of the document window where the annotation window is defined by a transparent window area bounded by a border. The annotation window enables the selected portion of the document window to be visible through the annotation window. Annotations are displayed within the annotation window where the annotations have a transparent background enabling the selected portion of the document windows to be visible through the transparent background of the annotations. When the annotation window is closed, the annotations are embedded into a contained document shown in the document window so that the annotations and the document are visible simultaneously in the selected portion of the document window.

Method and apparatus for annotating a computer document incorporating

A method and apparatus for re-drawing a transparent window on at least one display device of a computer based system having a central processor and a memory is disclosed. Having a transparent window and an underlying second window, it is determined whether the underlying second window is active. If the underlying second window is active, the transparent window is hidden. The underlying second window is re-drawn and the transparent window is shown. Otherwise, the transparent window is maintained.

Method and apparatus for redrawing transparent windows

A method and apparatus for relating (called hyperlinking) a region of one document to one or more regions of other documents. This is provided by using a mechanism for linking and embedding objects to establish the endpoints of the hyperlinks (called anchors) together with the creation of intermediate tables which maintain information about relations between regions of documents and attributes of the relationship. When a user selects a region in a document which participates in a relationship, a database program is invoked which displays information about related regions in other documents which may be accessed through the intermediate tables. An auxiliary table maintains information about attributes which may be custom designed by the user, such as author, date of creation, etc. The intermediate tables allow relationships among multiple regions of documents created by different applications. Relationships are bidirectional in that the user can traverse from any region in a document to any other region in the same relationship.

Creating and maintaining hypertext links among heterogeneous documents

A method and apparatus creates and plays objects and sound synchronously after eliminating the silent segments of the sound. The method inserts sequence marks into the object and sound data, deletes silent segments of the sound data including the sequence marks that reside in the silent segments, and re-inserts the last deleted sequence mark back into the sound data. In so doing, the system detects the silent segments of the recorded sound stream data and deletes the silent portions from the recorded data. Upon replay of an object and its associated sound, any drawing done during the silent segments are played at the computer's full graphics drawing speed, only slowing down to real-time again when more sounds are encountered. Thus, the system plays 'fast while silent' and slows to real-time when sounds are played. This saves the space required to stored the recorded sound, and the user does not have to wait through the silent periods.

Growing community of inventors

Gaston, OR, United States of America

Paul C Drews