International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Robert Duane Johnson

Randall Scott Springfield

Daryl Carvis Cromer

Eric Richard Kern

Richard Alan Dayan

Brandon Jon Ellison

Joseph Wayne Freeman

Ralph Bonomo

Howard J Locker

David Benson Rhoades

Gary A Vaiskauckas

Kofi Kekessie

John D Paul

Herbert Jackson Ice, Jr

Diane Nolterieke

A method and system are disclosed for substituting an anonymous Universal Unique Identifier (UUID) for a computer system's real UUID in order to disguise an identity of the computer system to an application which is requesting a UUID for the client computer system. A storage device is established in the computer system. The storage device includes a primary and a second location. A UUID stored in the primary location is used as a UUID for the computer system. An anonymous UUID is generated. The anonymous UUID does not identify any particular computer system. The anonymous UUID is stored in the primary location within the storage device, and the real UUID is backed up by moving it into the secondary location. Thereafter, the anonymous UUID is provided in response to requests for the computer system's UUID.

Method and system for disguising a computer system's identity on a network

A method and system are disclosed for substituting an anonymous media access controller (MAC) address for a client computer system's real MAC address in order to disguise an identity of the client computer system when the client computer system is utilizing a network. The client computer system is coupled to a server computer system via the network. A primary storage device is established for storing a MAC address. A MAC address which is stored in the primary storage device is utilized as a network address for the client computer system when the client computer system is utilizing the network. An anonymous MAC address is generated. The anonymous MAC address is not associated with any particular client computer system. The anonymous MAC address is then stored in the primary storage device. The client computer system utilizes the anonymous MAC address as the network address for the client computer system when the client computer system is utilizing the network.

Method and system for disguising a computer system's identity on a network by disguising the system's MAC address

A data processing system and method are described for permitting a server computer system to function as a remote keyboard input device for a client computer system prior to the client computer system completing its boot process. The client computer system is coupled to the server computer system utilizing a network. Each keystroke entered into the server computer system is captured by the server. A scan code associated with each captured keystroke is transmitted to the client computer system utilizing the server computer system via the network. The scan code associated with each keystroke is executed utilizing the client computer system. The server computer system functions as a remote keyboard input device for the client computer system.

Data processing system and method for permitting a server computer system to function as a virtual keyboard to a client computer system

A method, system, and program for selecting and implementing a basic input/output system (&ldquo;BIOS&rdquo;) configuration among various BIOS configurations for a data processing system are disclosed. Different BIOS configurations are defined for various types of users, such as a home user, a commercial user, and a network user. Each of the BIOS configurations includes a different set of BIOS characteristics, such as program setup features security features, and network server features, under which the data processing system is able to run. The different BIOS configurations are stored into a memory device for the data processing system. A designation is set within the memory device that directs a processor of the data processing system to select and execute a desired one of the BIOS configurations for a particular type of user.

Method, system, and program for customizing a basic input/output system (&ldquo;BIOS&rdquo;) configuration according to the type of user

A data processing system and method are described for booting a computer system from a virtual floppy diskette. A native operating system is executed by the computer system which utilizes a native file system. A boot able floppy diskette image is stored on the hard drive. The image includes a second operating system which utilizes a second file system. A master boot record stored on the hard drive is modified to include a boot bit. The boot bit is set in response to a storage of the image. The computer system is then booted from the image in response to the boot bit being set. The native operating system and the native file system are unchanged during the booting of the computer system from the image.

Virtual floppy diskette image within a primary partition in a hard disk drive and method for booting system with virtual diskette

A system and method of improving security during power-on-self-test (POST), particularly the ROM scan portion identifying ROM adapters, while selectively allowing user input. While a user input during ROM scan may be normally locked out to prevent the user from making changes to the configuration of the system, when the ROM scan during POST detects a ROM adapter which uses an input from the user, the system can override the lockout and allows for a user input. An optional control, such as a password or other personal identifier, can provide security, allowing the user input only when the user is authorized to provide the input (in response to an appropriate password or personal identifier such as a biometric identifier).

Method and system for improved computer security during ROM Scan

A data processing system and method including a server computer system and a client computer system coupled together utilizing a network are described for permitting the client computer system to temporarily prohibit remote management of the client computer system. The client computer system sets a remote override condition in the client computer system for temporarily prohibiting remote management of the client. The client temporarily prohibits all attempts to manage the client remotely utilizing the network when the remote override condition is set.

Data processing system and method for permitting a client computer system to temporarily prohibit remote management

A data processing system and method are described for permitting a server computer system coupled to a client computer system utilizing a network to remotely modify operation of the client computer system's network hardware. A counter is established within the client computer system for counting a plurality of network events. A counter threshold is established. Upon the counter reaching the counter threshold, the client computer system's network hardware transmits a message to the server computer system including network statistics information. The network statistics information includes an indication of the counter reaching the counter threshold. In response to a receipt of the message, the server computer system determines whether to modify the operation of the client's network hardware. In response to a determination to modify operation of the network hardware, the server remotely modifies operation of the client's network hardware.

Data processing system and method for permitting a server computer system to remotely modify operation of a client system's network hardware

Provides management tools for a System Owner to assure that a personal computer system is secured against access by an unauthorized user by foreclosing the possibility of circumventing a system's security protection during an adapter ROM scan. If security function, such as that for C2 functionality, is enabled, prior to the adapter ROM Scan for the system, the POST code detects whether or not disabling of the keyboard during adapter ROM Scan is enabled. If enabled, the keyboard is disabled or locked prior to adapter ROM Scan. On some systems, the security function may not be used and, the system does not consider password protection for the adapter utilities. If however, the security functionality of the system is enabled, the POST code will continue to enable the password protection for the adapter ROM Scan. Once the input device, e.g., keyboard, is disabled the adapter ROM scan will begin. Upon completion of the adapter ROM scan, the input device will be enabled and progress will continue through POST.

Personal computer ROM scan startup protection

A method and system for supporting discontiguous drive arrangements in a computer system using IDE control parameters having a central processing unit, user interface, short term volatile memory storage, and at least one, to four or more long term static memory storage devices, all of which are connected by a bus to the CPU, is used to provide access to the long term memory storage devices in a manner transparent to both the system and the user.

Growing community of inventors

Raleigh, NC, United States of America

Robert Duane Johnson