Google Inc.

Foveon, Inc.

Randall Spangler

Ryan Tabone

William Alexander Drewry

William Frank Richardson

Sumit Gwalani

Luigi Semenzato

Gaurav Shah

Linus M Upson

David Hendricks

Christopher Thomas Lyon

Kiavash Faraji

Matthew Nicholas Papakipos

Yevgeniy Alexandrovich Gutnik

Marc Pawliger

Abhijit Kalamkar

Sanjeev Radhakrishnan

Scott L Byer

Anton Valdemar Staaf

Christopher Masone

Mike Jazayeri

Yevgeniy Gutnik

Wai Hong Tam

Andrei Tudor Stratan

Scott Byer

The present disclosure describes various aspects of secure provisioning with hardware verification. In some aspects, sensitive data are provisioned to an integrated circuit (IC) device through a provisioning process. Provisioning data for the IC device are divided into a plurality of fragments, and each fragment is encrypted in one of a plurality of cryptographic keys. Corresponding cryptographic keys are generated at the IC device. The encrypted fragments are transferred to the IC device in respective secure transfer operations, each including sending a seed value to the IC device, validating integrity data configured to characterize integrated circuitry within a portion of the IC device specified by the seed value, and transferring the encrypted fragment to the IC device in response to validating the integrity data. In response to completing the secure transfer operation, the IC device may reconstruct the provisioning data from the encrypted fragments and corresponding cryptographic keys.

Secure provisioning with hardware verification

Methods, systems, apparatus, and computer-readable storage devices for anonymous device authentication. A method includes: accessing, by the electronic device, data stored by the electronic device that identifies authentication keys the electronic device accepts as valid; sending, by the electronic device to a second electronic device, an authentication request that identifies a set of authentication keys including at least some of authentication keys the electronic device accepts as valid; and receiving, by the electronic device, response data that the second electronic device provides in response to the authentication request. The response data (i) identifies a particular authentication key from the set of authentication keys identified by the authentication request, and (ii) includes a signature generated using the particular authentication key. The method includes authenticating, by the electronic device, the second electronic device by determining that the received signature was generated using the particular authentication key.

Anonymous device authentication

Methods and apparatus for verifying a boot process of a computing system are disclosed. An example computer-implemented method includes reading, by a computing system during a boot process, a header section of a read-write portion of firmware of the computing system. The example method further includes generating, using a first cryptographic hash algorithm, a message digest corresponding with the header. The example method also includes decrypting, using a first public-key, an encrypted signature corresponding with the header. The example method still further includes comparing the message digest corresponding with the header and the decrypted signature corresponding with the header. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header match, the example method includes continuing the boot process. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header do not match, the example method includes halting the boot process.

Firmware verified boot

According to an example embodiment, an electrical connector may include a plug connected to a cord. The cord may be connected to a back of the plug. A width of the plug may narrow from the back of the plug to a front of the plug. The cord may be connected to the back of the plug. The cord may include at least one electrical wire.

Electrical connector

Systems and methods for providing access to secure information are disclosed. In one aspect, a computer-implemented method for providing access to secure information comprises receiving a first one-time password (OTP) from a computing device, and verifying whether the first OTP is valid. The method also comprises, if the first OTP is valid, performing the steps of generating a second OTP for accessing the secure information, and transmitting the second OTP to the computing device. In another aspect, a computer-implemented method for providing access to secure information comprises generating a first one-time password (OTP), and transmitting the first OTP to an OTP device. The method also comprises, in response to the first OTP, receiving a second OTP from the OTP device, and sending the second OTP to a system that controls access to the secure information, wherein the first OTP is different from the second OTP.

Systems and methods for device authentication

Methods and apparatus for implementing a recovery mode procedure for a computing device are disclosed. An example method includes determining, by a computing device, that a recovery mode procedure is to be executed on the computing device. The example method further includes, determining whether a trusted recovery image is accessible to the computing device and, in the event the trusted recovery image is accessible to the computing device, executing the recovery mode procedure to repair or replace a current image of the computing device using the trusted recovery image. In the event the trusted recovery image is not accessible to the computing device, the example method includes, providing instructions for obtaining the trusted recovery image, determining the obtained trusted recovery image is accessible to the computing device and executing the recovery mode procedure to repair or replace the current image of the computing device using the obtained trusted recovery image.

Computing device with recovery mode

A system and method is disclosed for recovering a boot image. Hardware instructions initiate a loading of a computer operating system on a computing device. During the loading of the operating system, multiple portions of boot code are verified and a determination is made whether each portion is valid. If a portion of boot code is determined to be invalid, a secure portion of the boot code is loaded to repair the invalid code and the loading of the operating system resumed.

Secure recovery apparatus and method

Electrical connector with recessed contact and socket for receiving electrical connector

Aspects of the subject technology relate to executing a boot sequence from a recovery image. A determination of a validity of one or more keyblocks is made. A determination of a first version identifier and a second version identifier is made. A comparison of the first version identifier and the second version identifier is performed. A boot sequence from a recovery image is executed based on the comparison.

Recovery rollback risk reduction

A method for controlling outer surface temperatures of a computing device enclosure or case includes operating one or more internal thermal management mechanisms to control an internal temperature inside the computing device enclosure or case, obtaining a measure of an external ambient temperature outside the computing device case, and making operation of the one or more internal thermal management mechanisms depend, at least in part, on the measure of the external ambient temperature.

Skin temperature of computing device enclosure

A charging device may include a computer plug, outlet plug, AC-to-DC converter, controller, and memory. The computer plug may provide power to a computing device and receive data from the computing device. The outlet plug may receive alternating current (AC) power from an electrical outlet. The AC-to-DC converter may convert the AC power into direct current (DC) power and provide the DC power to the computing device via the computer plug. The controller may control a voltage and/or current of the DC power based on data received from the computing device and instructions stored in a memory. The memory may include read-only instructions for the controller to modify a read-write portion of the memory based on data received from the computing device via the computer plug, and read-write instructions for the controller to set the voltage of the DC power based on the data received from the computing device.

Growing community of inventors

San Jose, CA, United States of America

Randall Spangler