Firmware verified boot
    1.
    发明授权

    公开(公告)号:US10127384B2

    公开(公告)日:2018-11-13

    申请号:US15335101

    申请日:2016-10-26

    Applicant: GOOGLE INC.

    Abstract: Methods and apparatus for verifying a boot process of a computing system are disclosed. An example computer-implemented method includes reading, by a computing system during a boot process, a header section of a read-write portion of firmware of the computing system. The example method further includes generating, using a first cryptographic hash algorithm, a message digest corresponding with the header. The example method also includes decrypting, using a first public-key, an encrypted signature corresponding with the header. The example method still further includes comparing the message digest corresponding with the header and the decrypted signature corresponding with the header. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header match, the example method includes continuing the boot process. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header do not match, the example method includes halting the boot process.

    Secure recovery apparatus and method
    2.
    发明授权
    Secure recovery apparatus and method 有权
    安全的恢复装置和方法

    公开(公告)号:US09189340B2

    公开(公告)日:2015-11-17

    申请号:US14249330

    申请日:2014-04-09

    Applicant: Google Inc.

    CPC classification number: G06F21/57 G06F9/4403 G06F11/1417 G06F11/1666

    Abstract: A system and method is disclosed for recovering a boot image from a secure location. Hardware instructions initiate a sequence of boot cycles to launch a computer operating system on a computer-enabled device. During the boot cycles, multiple levels of boot code are verified and a determination is made whether each level is usable by the device. If a level of boot code is determined to be unusable, a secure copy of the boot code is loaded from a secure read-only location to repair the unusable code to launch the computer operating system.

    Abstract translation: 公开了用于从安全位置恢复启动图像的系统和方法。 硬件指令启动一系列引导周期,以在启用计算机的设备上启动计算机操作系统。 在引导周期期间,验证多级引导代码,并确定每个级别是否可被该设备使用。 如果确定启动代码级别不可用,则从安全只读位置加载启动代码的安全副本,以修复不可用代码以启动计算机操作系统。

    FIRMWARE VERIFIED BOOT
    3.
    发明申请
    FIRMWARE VERIFIED BOOT 有权
    固件验证引导

    公开(公告)号:US20150012738A1

    公开(公告)日:2015-01-08

    申请号:US14330902

    申请日:2014-07-14

    Applicant: GOOGLE INC.

    Abstract: Methods and apparatus for verifying a boot process of a computing system are disclosed. An example computer-implemented method includes reading, by a computing system during a boot process, a header section of a read-write portion of firmware of the computing system. The example method further includes generating, using a first cryptographic hash algorithm, a message digest corresponding with the header. The example method also includes decrypting, using a first public-key, an encrypted signature corresponding with the header. The example method still further includes comparing the message digest corresponding with the header and the decrypted signature corresponding with the header. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header match, the example method includes continuing the boot process. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header do not match, the example method includes halting the boot process.

    Abstract translation: 公开了用于验证计算系统的引导过程的方法和装置。 计算机实现的示例的示例包括在引导过程期间由计算系统读取计算系统的固件的读写部分的头部。 该示例方法还包括使用第一加密散列算法生成与该报头对应的消息摘要。 示例性方法还包括使用第一公开密钥来解密与该标题相对应的加密签名。 该示例方法还包括比较与该标题相对应的消息摘要和与标题对应的解密签名。 在与标题对应的消息摘要和与标题相对应的解密签名匹配的情况下,示例方法包括继续引导过程。 在与标题对应的消息摘要和与标题相对应的解密签名不匹配的情况下,示例方法包括暂停引导过程。

    Computing device with recovery mode

    公开(公告)号:US09405611B1

    公开(公告)日:2016-08-02

    申请号:US14070922

    申请日:2013-11-04

    Applicant: GOOGLE INC.

    Abstract: Methods and apparatus for implementing a recovery mode procedure for a computing device are disclosed. An example method includes determining, by a computing device, that a recovery mode procedure is to be executed on the computing device. The example method further includes, determining whether a trusted recovery image is accessible to the computing device and, in the event the trusted recovery image is accessible to the computing device, executing the recovery mode procedure to repair or replace a current image of the computing device using the trusted recovery image. In the event the trusted recovery image is not accessible to the computing device, the example method includes, providing instructions for obtaining the trusted recovery image, determining the obtained trusted recovery image is accessible to the computing device and executing the recovery mode procedure to repair or replace the current image of the computing device using the obtained trusted recovery image.

    System and method for operating an electronic device in a limited radio mode
    5.
    发明授权
    System and method for operating an electronic device in a limited radio mode 有权
    用于在有限无线电模式下操作电子设备的系统和方法

    公开(公告)号:US08971931B1

    公开(公告)日:2015-03-03

    申请号:US13651347

    申请日:2012-10-12

    Applicant: Google Inc.

    CPC classification number: H04W48/04

    Abstract: A system and method for operating an electronic device in a limited radio mode are provided. The system determines a location of an electronic device. The system also identifies one or more components of the electronic device enabled to provide radio data communication services. The system, for each of the identified one or more components, determines if a respective radio data communication service provided by the component is an authorized service at a determined location of the electronic device and selectively disables the component if the respective data communication service is not an authorized service.

    Abstract translation: 提供了一种用于以有限无线电模式操作电子设备的系统和方法。 系统确定电子设备的位置。 该系统还识别能够提供无线电数据通信服务的电子设备的一个或多个组件。 对于所识别的一个或多个组件中的每一个,系统确定组件提供的相应无线电数据通信服务是否是电子设备的确定位置处的授权服务,并且如果各个数据通信服务不是,则选择性地禁用该组件 授权服务。

    CLICK DISAMBIGUATION ON A TOUCH-SENSITIVE INPUT DEVICE
    6.
    发明申请
    CLICK DISAMBIGUATION ON A TOUCH-SENSITIVE INPUT DEVICE 有权
    触摸敏感输入设备上的点击功能

    公开(公告)号:US20140320455A1

    公开(公告)日:2014-10-30

    申请号:US14324494

    申请日:2014-07-07

    Applicant: GOOGLE INC.

    Abstract: The surface of an touch-sensitive input device may act as a physical button that the user may push down to perform a click or other operation. For example, the user may push down the surface of the input device with one finger for a left click and push down the surface of the input device with two fingers for a right click. In one aspect, a system for detecting a left click or a right click when the user pushes down the surface of the input device is provided. When the system first detects that the surface of the input device is pushed down, the system may wait for a short period of time before making a determination of whether the user is pushing down the surface with one finger or two fingers. During this time, the system may collect additional information to make a more reliable determination.

    Abstract translation: 触敏输入设备的表面可以用作用户可以向下按压以执行点击或其他操作的物理按钮。 例如,用户可以用一根手指向下按压输入设备的表面以进行左键,并用两根手指按下输入设备的表面以进行右键点击。 一方面,提供了一种用于在用户按下输入装置的表面时检测左击或右击的系统。 当系统首先检测到输入装置的表面被按下时,系统可以在确定用户是用一根手指或两根手指向下按压表面之前等待一段短时间。 在此期间,系统可能会收集更多的信息以做出更可靠的确定。

    Click disambiguation on a touch-sensitive input device
    7.
    发明授权
    Click disambiguation on a touch-sensitive input device 有权
    点击触摸敏感输入设备上的消歧

    公开(公告)号:US08773388B2

    公开(公告)日:2014-07-08

    申请号:US13784172

    申请日:2013-03-04

    Applicant: Google Inc.

    Abstract: The surface of an touch-sensitive input device may act as a physical button that the user may push down to perform a click or other operation. For example, the user may push down the surface of the input device with one finger for a left click and push down the surface of the input device with two fingers for a right click. In one aspect, a system for detecting a left click or a right click when the user pushes down the surface of the input device is provided. When the system first detects that the surface of the input device is pushed down, the system may wait for a short period of time before making a determination of whether the user is pushing down the surface with one finger or two fingers. During this time, the system may collect additional information to make a more reliable determination.

    Abstract translation: 触敏输入设备的表面可以用作用户可以向下按压以执行点击或其他操作的物理按钮。 例如,用户可以用一根手指向下按压输入设备的表面以进行左键,并用两根手指按下输入设备的表面以进行右键点击。 一方面,提供了一种用于在用户按下输入装置的表面时检测左击或右击的系统。 当系统首先检测到输入装置的表面被按下时,系统可以在确定用户是用一根手指或两根手指向下按压表面之前等待一段短时间。 在此期间,系统可能会收集更多的信息以做出更可靠的确定。

    COMBINATORIAL INTERNET BANDWIDTH
    8.
    发明申请

    公开(公告)号:US20180091356A1

    公开(公告)日:2018-03-29

    申请号:US13754423

    申请日:2013-01-30

    Applicant: GOOGLE INC.

    Inventor: Ryan Tabone

    Abstract: According to one general aspect, a method may include aggregating a plurality of network interfaces into a combinatorial network interface group, wherein each network interface provides a respective amount of bandwidth to at least one communications network. The method may also include receiving a request, from an application, to access at least one network resource via a communications network. The method may also include selecting at least one network interface included by the combinatorial network interface group to fulfill the network request based, at least in part, upon the bandwidth provided by the combination of bandwidths provided by the selected network interfaces. The method may further include accessing the network resource via the selected network interface.

    Computing device with recovery mode

    公开(公告)号:US09898368B1

    公开(公告)日:2018-02-20

    申请号:US14847762

    申请日:2015-09-08

    Applicant: GOOGLE INC.

    Abstract: Methods and apparatus for implementing a recovery mode procedure for a computing device are disclosed. An example method includes determining, by a computing device, that a recovery mode procedure is to be executed on the computing device. The example method further includes, determining whether a trusted recovery image is accessible to the computing device and, in the event the trusted recovery image is accessible to the computing device, executing the recovery mode procedure to repair or replace a current image of the computing device using the trusted recovery image. In the event the trusted recovery image is not accessible to the computing device, the example method includes, providing instructions for obtaining the trusted recovery image, determining the obtained trusted recovery image is accessible to the computing device and executing the recovery mode procedure to repair or replace the current image of the computing device using the obtained trusted recovery image.

Patent Agency Ranking