Lenovo (singapore) Pte. Ltd.

Lenovo (united States) Inc.

Lenovo Global Technology (united States) Inc.

Lenovo Limited

Scott Wentao Li

Russell Speight VanBlon

Robert James Kapinos

Robert James Norton, Jr

Timothy Winthrop Kingsbury

Igor Stolbikov

Joaquin F Luna

Grigori Zaitsev

Rod D Waltermann

Zhenglong Bai

Marco Alberto Gonzalez

Joshua Neil Novak

Axel Ramirez Flores

Alfredo Zugasti

Nathan J Peterson

John Weldon Nicholson

Scott Edwards Kelso

Jonathan Jen-Wei Yu

Jonathan Co Lee

Jixin Feng

Rafael Rodrigues Machado

Christian De Hoyos

Chunling Han

John Carl Mese

Arnold S Weksler

Song Wang

Ming Qian

Jennifer Greenwood Zawacki

Kenneth Scott Seethaler

James Anthony Hunt

Joseph Michael Pennisi

Justin Michael Ringuette

Jonathan Gaither Knox

David Rivera

David Alexander Schwarz

Larry Glenn Estes

Ratan Ray

Alan Ladd Painter

Liang Chen

Alfredo Zugasti Hays

Denis Leite Gomes

Sergei Rodionov

Jennifer Jyi Shue

Joseph Bryan Morris

Kelly Rikard

Matthew Carl Etter

Stephen Paul Floyd

Timothy Robert Kingsbury

Navneet Keshav

Russell S Vanblon

Brian Keith Hardbarger

Robert Norton

Russell Speight Vanblon

One embodiment provides a method, the method including: receiving, from a device and utilizing a variable modification system, a request to make a modification to content of a protected unified extensible firmware interface (UEFI) variable; verifying, using the variable modification system, an entity utilizing the device and requesting the modification is authorized to make modifications to the content of the protected UEFI variable; and authorizing, responsive to verifying the entity is an authorized entity and using an encryption scheme associated with the protected UEFI variable, the modification, wherein the authorization results in the modification to the content of the protected UEFI. Other aspects are claimed and described.

Authorizing modifications of protected UEFI variables

One embodiment provides a method, the method including: receiving, at a digital assistant, a command from a user, wherein the command includes a high confidence portion and a low confidence portion; determining, at the digital assistant, that at least a part of the output corresponding to the command can be performed by the digital assistant based upon the high confidence portion; and performing, using the digital assistant and responsive to determining the at least a part of the output of the command can be performed by the digital assistant, the at least a part of the output of the command.

Partial completion of command by digital assistant

A display diagnostic system and method include a sensor configured to monitor a parameter of a light emitter of a display device. The light emitter is configured to emit light to illuminate a display screen of the display device. The light emitter is powered by an inverter of the display device. The system and method include one or more processors that receive a sensor signal generated by the sensor. The sensor signal is indicative of the parameter of the light emitter monitored by the sensor at a first time. The one or more processors are configured to determine that the light emitter is inactive at the first time based on the sensor signal, and, responsive to determining that the light emitter is expected to be active at the first time, generate a control signal indicating a fault state of the inverter.

Display diagnostic system and method

The system and method provide a technique for providing an information handling device with increased access to secure data by detecting the location of an information handling device on a surface in relation to at least one sensor located within the physical surface, and determining that the information handling device is an authenticated device based upon a communication between the at least one sensor and the information handling device. An orientation of the at least one sensor(s) present in the physical surface, or a sensor trigger area of the physical surface, may align with previously associated sensors coupled to the information handling device. Subsequent to determining the position of the sensors coupled to the device aligns with the at least one sensor trigger area, the information handling device may be authenticated which results in increased access to the device.

Device authentication utilizing sensor trigger areas

In one aspect, an apparatus may include at least one processor and storage accessible to the at least one processor. The storage may include instructions executable by the at least one processor to identify a live physical attribute of a device, where the live physical attribute may be related to the device's orientation or another aspect of the device. The instructions may also be executable to visually present, in virtual space, a representation of the device. The representation may be presented according to the live physical attribute of the device.

Presentation of representation of device in virtual space based on live physical attribute(s)

Apparatus, methods, and computer program products that recommend connecting on a platform based on participant interaction are disclosed. One apparatus includes a processor and a memory. The memory includes instructions executable by the processor to cause the apparatus to track interaction between a pair of participants of a digital environment conducted on a first platform and recommend that the pair of participants connect on a second platform in response to the interaction between the pair of participants exceeding a predetermined threshold of interactions. Methods and computer program products that include and/or perform the operations and/or functions of the apparatus are also disclosed.

Recommending connecting on a platform based on participant interaction

In one aspect, an apparatus includes a processor assembly and storage accessible to the processor assembly. The storage includes instructions executable by the processor assembly to receive input from at least one sensor on a first device and to determine, based on the input, that a user is asleep. The instructions are also executable to, based on the determination, disable at least a first type of authentication usable to unlock a second device.

Disablement of device authentication based on user sleep state

The management of web page content includes maintaining an auditable log of trust verification relating to the web page content. The management further includes an attestation of a source of the web page content. The attestation relates to a security practice of the source, computer code provided by the source, a reputation of the source, and a history of the source. A modified version of a Verkle Tree is then applied to the auditable log and the attestation of the source.

Transparent web content validation tree

Methods, systems, and program products are disclosed for blocking input/output (I/O) access to a computing system. A method includes establishing a portion of the machine-readable instructions as sole controller of the system responsive to the machine-readable instructions and preventing unauthorized replacement of the machine-readable instructions. The method also includes blocking user access to internal resources of the computing system and preventing predefined input/output (I/O) of the computing system.

Methods, systems, and program products for securely blocking access to system operations and data

A computer implemented method, device and computer program device are provided including a processor; a storage medium to store a user defined password (UDP) factor and program instructions accessible by the processor; wherein, responsive to execution of the program instructions, the processor to: generate a first machine generated indicia (MGI) code indicative of the UDP factor; and generate a second MGI code indicative of a time-based one-time password (TOTP) factor; and a display to display the first and second MGI codes during an authentication operation.

Devices and methods to validating multiple different factor categories

Methods, apparatus, and program products that can predict misconfigurations in a computing system using machine learning are disclosed herein. One method includes labeling one or more graph nodes or link nodes of a data graph of a computing system that includes one or more security vulnerabilities with a node label or link label, respectively, in which each node label represents the first security vulnerabilities associated with a particular graph node and each link label represents the second security vulnerabilities associated with a particular link node. The method further includes utilizing the graph node(s) or the link node(s) to train a machine learning algorithm to predict one or more misconfigurations in the computing system based on the security vulnerabilities and determining one or more modifications to the computing system for mitigating the one or more misconfigurations. Apparatus and program products that include and/or perform the methods are also disclosed herein.

Predicting system misconfigurations using machine learning

A process for transmitting a file from a sender device to a receiver device includes generating a random symmetric session key for the sender device, and randomly selecting a private ephemeral key for the sender device. The private ephemeral key is associated with a corresponding first public key. A public ephemeral key is randomly selected for the receiving device. The public ephemeral key is associated with a corresponding first private key. A random value is generated, an encrypted session key is calculated, and the file is encrypted using symmetric encryption. The sender device includes a first public X509 certificate comprising a second public key and a corresponding second private key that is signed by a service provider, and the receiver device includes a second public X509 certificate comprising a third public key and a corresponding third private key.

End to end file-sharing schema using signed Merkle tree randomly originated keys

One embodiment provides a method, the method including: receiving, at a shock analysis system, image data corresponding to at least one image capture device and associated with transportation of a package; determining, at the shock analysis system and by analyzing the image data, the package has undergone a shock of a magnitude exceeding a predetermined threshold; and performing, at the shock analysis system and responsive to determining the package has undergone the shock exceeding the predetermined threshold, at least one predetermined action, wherein the at least one predetermined action comprises notifying a user of the shock.

Image analysis to identify package shock

In one aspect, at least one device may include at least one processor and storage accessible to the at least one processor. The storage may include instructions executable by the at least one processor to access an image and to execute object recognition using the image to identify at least a first object from the image. The instructions may also be executable to access a database indicating whether use permissions are grantable for various objects and to determine, based on accessing the database, that use permissions are grantable for the first object. The instructions may then be executable to control a display to present a graphical user interface (GUI) on the display, where the GUI may indicate the use permissions for the first object and include a selector that is selectable to initiate secure communication to authenticate an entity as being granted the use permissions for the first object.

Graphical user interfaces for authentication to use digital content

Methods, apparatus, and computer program products for computing device digital certificates that include a geographic extension are disclosed herein. One method includes a processor managing a digital certificate for a first computing device, in which the digital certificate includes a geographic extension, and populating the geographic extension with a distance value that enables the digital certificate to be validated via the populated geographic extension. Apparatus and computer program products that include hardware and/or software that can perform the methods for computing device digital certificates that include a geographic extension are also disclosed herein.

Computing device digital certificates that include a geographic extension

Growing community of inventors

Cary, NC, United States of America

Scott Wentao Li