Seagate Technology Incorporated

Esw Holdings, Inc.

Television Computer, Inc.

Antique Books, Inc.

Wave Systems, Inc.

Robert Thibadeau

Michael Sprague

Steven K Sprague

Joseph M Newcomer

William Preston Goodwill

John R Nestor

Thomas Scwartzkopf

David Touretzky

James Large

Device identification scoring systems and methods may be provided that can increase the reliability and security of communications between devices and service providers. Users may select and configure additional identification factors that are unique and convenient for them. These factors, along with additional environmental variables, feed into a trust score computation that weights the trustworthiness of the device context requesting communication with a service provider. Service providers rely on the trust score rather than enforce a specific identification routine themselves. A combination of identification factors selected by the user can be aggregated together to produce a trust score high enough to gain access to a given online service provider. A threshold of identification risk may be required to access a service or account provided by the online service provider.

Device identification scoring

A storage device with hardened security features has a storage medium, an interface, and a controller. The interface is adapted to communicatively couple the storage device to a host system. The controller is within the storage device and is adapted to read and to write information to and from the storage medium. The controller is adapted to require a security partition authorization from a manufacturer of the storage device before executing a security partition creation command received over the interface.

Method and apparatus for securing data storage while insuring control by logical roles

A storage device has a storage medium and a processor. The processor is disposed within the storage device and is adapted to receive multiple commands as a command block over an interface. The processor is adapted to extract each of the multiple commands from the single block for execution on the storage device.

Single command payload transfers block of security functions to a storage device

A storage device with hardened security features for safe execution of scripts has a storage medium, an interface, a set of safe commands, and a script interpreter. The interface is adapted to communicatively couple the storage device to a host system and to transport interface commands and information between the host system and the storage device. The set of safe commands is stored on the storage medium. The script interpreter is disposed within the storage device for processing scripts based on one or more received interface commands. The script interpreter is adapted to enforce a strict ordering of script execution and to terminate script execution and roll back any changes associated with the script execution if an interface command invokes a script in violation of the strict ordering.

Protocol scripting language for safe execution in embedded system

A storage device has a storage medium, a controller, and a session manager. The storage medium is partitioned into one or more security partitions. The controller is adapted to read and write data to and from the storage medium and to enable security sessions over an interface between one or more host systems and one or more security partitions. The session manager within the storage device is adapted to monitor parameters associated with the one or more security sessions.

Drive security session manager

The present methods and systems use specially isolated techniques for promoting security in a computer system. In one embodiment of these methods and systems, a simple file system is concealed in the storage of the computer system and is managed with a processor and simple non-writeable code operating on the storage device. Strong cryptographic design permits the present computer security methods and systems to secure data on the storage device. In one method embodiment, a computer system is provided with an operating system in operative association with at least one storage device, wherein the storage device includes firmware and a processor for processing data and instructions stored on the storage device. The method includes creating at least one security partition in, and restricting access to, at least a portion of the storage device by the operating system. The method also includes creating at least one security partition in the storage device. The method also includes providing at least one authority record and data associated with the authority record in the storage device. System and computer-readable medium embodiments structured in accordance with the method embodiments discussed herein are also provided.

Methods and systems for promoting security in a computer system employing attached storage devices

A data processor is connected to a digital communication system such that information packets broadcast on the system are examined to determine if the contents of each packet meet selection criteria, whereupon the packet is coupled to the processor. A state machine or interface processor is connected between the processor and the network, and compares packets to the selection criteria, passing accepted packets and blocking rejected ones. The selection criteria are programmed into the state machine as a decision tree of any length, configuration or data requirements, preferably by the attached data processor, and can include examination of arbitrary sections of the packet for equality/inequality, greater-than/less than, signed and unsigned comparisons and bit mask comparisons. Thus content is variably examined, as opposed to checking for an address or key code at a given byte position. The state machine operates on recognition instructions including byte offset and content specifics. The recognition instructions can include plural distinct criteria, determined by the data processor to serve applications programs running in a multitasking environment. Thus, the data processor compiles a series of recognition instructions that are passed to the state machine as tasks in the multitasking environment are added or deleted, or when a task decides to change selection requirements. Preferably, signaling lines allow the data processor to determine the reason for selection of a packet, for example by the state machine reporting to the data processor its program count upon acceptance.

Packet filter engine

Location specific messages or programming are generally broadcast and selectively filtered by user terminals which have encoded one or more arbitrary locations of interest. The area surrounding a user, a remote location, a route to be travelled, or the like may be selected for receipt of local warnings, local commercial messages, and the like. A set-top receiver being a preferably tunable apparatus capable of receiving digital information transmitted by a variety of means. Transmitted messages contain information targeted to geographical groups of users, with location designation coding accompanying location-specific messages. A geographic location selection code is entered into a data processor coupled to the user's receiver to define the user's selected location(s) of interest. The processor receives the information segment and its designation code and compares the designated location to the selected one. Segments where the designated and selected points or areas overlap are processed. e.g., being displayed, stored or used to trigger a warning. The user's selection code is variable and plural locations can be used and prioritized. Preferably, regions are encoded by their boundaries, e.g., in longitude, latitude, altitude or the like, and in absolute or relative coordinates, and shorthand designations can refer to stored definitions of areas. Filtering segments based on message content, prioritizing the messages and additional features can be included. The system is especially useful for distributing local commercial messages, hazard warnings, or the like.

Method of identifying set-top receivers

Location specific messages or programming are generally broadcast and selectively filtered by user terminals which have encoded one or more arbitrary locations of interest. The area surrounding a user, a remote location, a route to be travelled or the like may be selected for receipt of local warnings, local commercial messages and the like. Transmitted messages contain information targeted to geographical groups of users, with location designation coding accompanying location-specific messages. A geographic location selection code is entered into a data processor coupled to the user's receiver to define the user's selected location(s) of interest. The processor receives the information segment and its designation code and compares the designated location to the selected one. Segments where the designated and selected points or areas overlap are processed, e.g., being displayed, stored or used to trigger a warning. The user's selection code is variable and plural locations can be used and prioritized. Preferably, regions are encoded by their boundaries, e.g., in longitude, latitude, altitude or the like, and in absolute or relative coordinates, and shorthand designations can refer to stored definitions of areas. Filtering segments based on message content, prioritizing the messages and additional features can be included. The system is especially useful for distributing local commercial messages, hazard warnings or the like.

Growing community of inventors

Pittsburgh, PA, United States of America

Robert Thibadeau