Hewlett-packard Development Company, L.p.

Tevin Richards

Robert Stephen Craig

Erich Wolfgang Gestacker McMillan

Valiuddin Y Ali

Mason Andrew Gunyuzlu

Jeffrey Kevin Jeansonne

Adrian John Baldwin

Richard A Bramley, Jr

Baraneedharan Anbazhagan

Richard Bramley

Patrick L Gibbons

Dallas M Barlow

Endrigo Pinheiro

Endrigo Nadin Pinheiro

An example storage medium is described, wherein the storage medium comprises instructions that, when executed cause a processor of an electronic device to store a private key in a first memory of the electronic device. The controller also stores an encrypted version of a password and validity information defining a condition to the password's validity in a second memory of the electronic device. During a boot process of the electronic device, the controller may detect a failure to decrypt data stored in a third memory and, upon this detection, decrypt the encrypted version of the password using the private key, and determine, using the validity information, whether the password is valid. If the password is valid, the controller may input the decrypted password to a decryption service, wherein the decryption service is to decrypt the data stored in the third memory.

Encrypted storage

An example storage medium is described, wherein the storage medium comprises instructions that, when executed, cause a processor of an electronic device to determine whether data private key is stored in a first memory of the electronic device and whether a network connection is available. If the private key is stored and no network is available, emulated responses of a networked service are generated for decryption of data in the electronic device.

Emulated network response

An example storage medium is described, wherein the storage medium comprises instructions that, when executed cause a processor of an electronic device to store authentication data in a first memory of the electronic device. Upon detecting a failure to decrypt information, the processor is to perform an authentication with a webservice, receive a recovery code, and input the recovery code to a recovery service. The recovery code is obscured from the user.

Recovery request

In an example, a system includes a firmware controller to initiate a SM execution mode of the system. The firmware controller scans memory for a process pool tag. The firmware controller compares the process pool tag to a set of operating system process pool tags and detects a coherency discrepancy between the process pool tag and the set of operating system process pool tags. The firmware controller exits the SM execution mode of the system.

System management memory coherency detection

Example computing devices that are enabled to enter secure operating modes are provided. An example computing device includes a main processor to run an operating system enabled to establish communication from an external device to the main processor via a hardware interrupt handler when the external device is connected to the computing device. The computing device further includes a keyboard controller to detect a lock keystroke sequence at a keyboard, and, in response to detecting the lock keystroke sequence, cause the main processor to halt the operating system and to enter a secure operating mode in which communication from the external device to the main processor via the hardware interrupt handler is blocked.

Secure operating modes for computing devices

An example computing device includes a memory accessible at startup of the computing device, a buffer, and a set of instructions. The memory stores a configuration setting that is configurable by the application of a change request. The memory also stores a first public key and a second public key. The buffer stores change requests submitted by a remote entity, including a first change request to make a first setting change and a second change request to make a second setting change. The first change request is signed by a first private key corresponding to the first public key, and the second change request is signed by a second private key corresponding to the second public key. The set of instructions retrieves a change request from the buffer, determines whether the change request is authenticated by a public key, and if authenticated, applies the change request.

Growing community of inventors

Spring, TX, United States of America

Tevin Richards