Hewlett-packard Development Company, L.P.

Qualcomm Incorporated

Palm, Incorporated

Wael M Ibrahim

Manuel Novoa

Liqun Chen

Graeme John Proudler

Valiuddin Y Ali

Lan Wang

Mark E Taylor

Louis B Hobson

Jennifer E Rios

Ligy Kurian

David J Grimme

Valluddin Y Ali

Steven B Williamson

A system comprises a processor which executes an operating system and an application. The system also comprises a keyboard coupled to the processor. The keyboard and application share a shared secret that is used to encode keyboard data provided from the keyboard to the application. The shared secret is not known or accessible to the operating system.

Shared secret used between keyboard and application

In one embodiment a computer system, comprises a processor, a trusted platform module comprising at least one platform configuration register, a basic input/output system, and logic to unseal at least one current key in the trusted platform module, initiate an update to the basic input/output system, obtain, with the update, at least a component of one expected value for a platform configuration register in the trusted platform module, seal at least one key using the at least one expected value for a platform configuration register, and install the basic input/output system update.

Secure computer system update

A computer system is provided, the computer system having a processor and a system memory coupled to the processor. The computer system also includes a Basic Input/Output System (BIOS) in communication with the processor. The BIOS selectively scrubs the system memory during a shutdown process of the computer system.

Methods and systems to selectively scrub a system memory

A system comprises a processing device including a storage device. The system further comprises a wireless mobile device ('WMD') in wireless communication with the processing device. The processing device registers the WMD and stores the registration in the system memory, receives a request for retrieval of data located in the WMD, authenticates the request based on the registration, and retrieves the data wirelessly based on the authentication.

Retrieving data wirelessly from a mobile device

A computer platform is provided that comprises a processor and a cryptographic co-processor coupled to the processor. The computer platform further comprises a platform entity coupled to the processor. The platform entity establishes a secure relationship with the cryptographic co-processor that enables the platform entity to utilize cryptographic functions provided by the cryptographic co-processor.

Methods and systems for utilizing cryptographic functions of a cryptographic co-processor

Systems, methods, and other embodiments associated with updating firmware for a chip are described. One example method may include performing an external verification of updated firmware received and stored external to the chip to determine if the updated firmware is authentic. Upon determining that the updated firmware is authentic, the updated firmware is loaded into the chip. An internal verification of the updated firmware within the chip is performed to determine that the updated firmware is authentic. The internal verification is assured to succeed based on the external verification. Because the internal verification will succeed, the chip avoids reverting to a default firmware.

Verifying firmware

A method comprises receiving a request for data from a client computer. The method further comprises obtaining an identifier of a virtual machine. The virtual machine identifier is associated with the requested data. The method further comprises providing the virtual machine identifier to the client computer.

Virtual machine control

The present disclosure generally pertains to systems and methods for protecting information for use by mobile devices. In one exemplary embodiment, a system comprises a mobile device, a base, and a memory device. The mobile device has a user input interface, and the base is secured to a user. The mobile device is configured to receive data manually input via the user input interface by the user and to wirelessly transmit the data. The mobile device is further configured to wirelessly transmit a retrieval request in response to a user input. The memory device is mounted on the base. The memory device is configured to receive and store the data wirelessly transmitted by the mobile device. The memory device is further configured to retrieve the data and to wirelessly transmit the data to the mobile device in response to the retrieval request.

Systems and methods for protecting information used by mobile devices

In one embodiment a computer system comprises a processor and a memory module coupled to the processor and comprising logic instructions stored in a computer readable medium. The logic instructions, when executed, configure the processor to initiate, in a client computing device, a service request, in response to the service request, initiate a request for a location attestation certificate, and complete the client service request when the location attestation certificate is granted.

Location attestation service

Systems, methodologies, media, and other embodiments associated with cryptographic key maintenance and/or migration are described. One exemplary system embodiment includes a logic for performing cryptographic key maintenance and/or migration and an interface for operably connecting the system to a trusted platform.

Subordinate trusted platform module

A system comprises a first operating environment and a second operating environment. The first and second operating environments exchange information in encrypted form using a shared encryption key (K). The first and second operating environments cooperate to change the encryption key Kusing another shared encryption key (K). The encryption key Kis changed upon the encryption key Kbeing changed.

Changing of shared encryption key

A system for sharing a trusted platform module (TPM) comprises a TPM operable to execute an operating system (OS)-level process, the TPM operable to pause the execution of the OS-level process and execute a non-OS-level process.

System and method for sharing a trusted platform module

A secure content receiver includes a processing unit operable to request a data file from a remote device, to provide a first encryption key to the remote device, and to receive the requested data file and a key object from the remote device. The received data file is encrypted using the first encryption key. The key object imposes restrictions on the decryption of the data file. The receiver further includes a first security module that is coupled to the processing unit and that is operable to decrypt the data file according to the restrictions imposed by the key object.

Devices, systems, and methods for secure download of data

A system and methods provides secure end-to-end printing in networked computing environments, such as a corporate office environment employing a number of shared printers. The described system and methods are applicable in various scenarios to provide an enhanced solution for secure printing.

Growing community of inventors

Cypress, TX, United States of America

Wael M Ibrahim