Hewlett-packard Development Company, L.p.

Digital Equipment Corporation

Compaq Information Technologies Group, L.p.

Steven B Lipner

Morrie Gasser

Mary Ellen Zurko

Andrew Halstead Mason

Clifford Earl Kahn

Judith Shelhorse Hall

Leslie Richard Kendall

Thomas Andrew Casey, Jr

Paul Douglas Sawyer

Butler W Lampson

A method for executing trusted commands, in which a trusted command is first received from a user at a user terminal and parsed by untrusted code; then passed to a trusted computing base for execution. The trusted computing base displays some indication of what is to be done back to the user for confirmation. Confirmation of the commands prevents unauthorized modification of the commands and increases system confidence. A randomly (or pseudo-randomly) generated process identifier is employed to verify the existence of a trusted path.

Verification of trusted-path commands

Processing trusted commands in trusted and untrusted environments

A method for executing trusted commands, in which a trusted command is first received from a user at a user terminal and parsed by untrusted code; then passed to a trusted computing base for execution. The trusted computing base displays to the user for confirmation indication of what is to be done. Confirmation of the commands prevents unauthorized modification of the commands and increases system confidence. A randomly (or pseudo-randomly) generated process identifier is employed to verify the existence of a trusted path.

Method for executing trusted-path commands

A method and apparatus for authenticating a human user on a personal computer without requiring the user to expose his password or authentication secret to the personal computer of a server. Also a method for protecting a floppy disk with login software from unauthorized use.

Secure user authentication from personal computer

Growing community of inventors

Wellesley, MA, United States of America

Steven B Lipner