公开(公告)号：US09354857B2

公开(公告)日：2016-05-31

申请号：US12051301

申请日：2008-03-19

Applicant: Joseph Michael Pennisi ,  Randall Scott Springfield ,  Rod David Waltermann

Inventor： Joseph Michael Pennisi ,  Randall Scott Springfield ,  Rod David Waltermann

IPC: G06F21/00 ,  G06F9/445 ,  G06F3/06

CPC classification number: G06F8/65 ,  G06F3/0601 ,  G06F2003/0697 ,  Y02D10/42

Abstract: A system, method, and program product is provided that updates the firmware on a hybrid drive by reserving a memory area within the hybrid disk drive's nonvolatile memory buffer. The firmware update is then stored in the reserved memory area. The next time the platters of the hybrid disk drive spin up, the firmware update that is stored in the reserved memory area is identified. The identified update is then written to a firmware memory of a firmware that controls the operation of the hybrid drive. In one embodiment, the update is written to the firmware memory by flashing the firmware's memory. After the firmware is updated, the hybrid drive is reset. Resetting of the hybrid drive includes executing the updated firmware.

Abstract translation: 提供了一种系统，方法和程序产品，其通过在混合磁盘驱动器的非易失性存储器缓冲器内预留存储器区域来更新混合驱动器上的固件。 然后将固件更新存储在保留的存储器区域中。 混合磁盘驱动器的下一次盘旋时，识别存储在保留存储器区域中的固件更新。 然后将所识别的更新写入控制混合驱动器的操作的固件的固件存储器。 在一个实施例中，通过闪烁固件的存储器将更新写入固件存储器。 固件更新后，混合驱动器将被复位。 混合驱动器的复位包括执行更新的固件。

公开(公告)号：US09063816B2

公开(公告)日：2015-06-23

申请号：US12701148

申请日：2010-02-05

Applicant: Jeffrey R. Hobbet ,  Randall Scott Springfield

Inventor： Jeffrey R. Hobbet ,  Randall Scott Springfield

IPC: G06F9/44 ,  G06F9/445 ,  G06F11/14

CPC classification number: G06F8/65 ,  G06F11/1433

Abstract: A method, apparatus, and system are disclosed for updating firmware on a storage device. The apparatus includes a detection module and an update module. The detection module detects, during a boot sequence, an indicator of an available update of firmware controlling a storage device. The available update is stored on non-volatile storage media of the storage device. The update module updates the storage device with the available update in response to the detection module detecting the indicator of the available update.

Abstract translation: 公开了一种用于更新存储设备上的固件的方法，装置和系统。 该装置包括检测模块和更新模块。 检测模块在引导顺序期间检测控制存储设备的固件的可用更新的指示符。 可用的更新存储在存储设备的非易失性存储介质上。 响应于检测模块检测到可用更新的指示符，更新模块用可用更新来更新存储设备。

公开(公告)号：US08943329B2

公开(公告)日：2015-01-27

申请号：US12748787

申请日：2010-03-29

Applicant: David Carroll Challener ,  Daryl C. Cromer ,  Howard J. Locker ,  Randall Scott Springfield

Inventor： David Carroll Challener ,  Daryl C. Cromer ,  Howard J. Locker ,  Randall Scott Springfield

IPC: G06F21/00 ,  G06F9/52 ,  G06F21/57

CPC classification number: G06F9/52 ,  G06F21/575

Abstract: A method and apparatus are disclosed for sharing an integrity security module in a dual-environment computing device. The apparatus include an integrity security module, one or more processors, a detection module and a regeneration module. The one or more processors may have access to the integrity security module and may operate in two distinct operating environments of a dual-environment computing device. The detection module may detect, during an initialization sequence, a power state transition of an operating environment of the dual-environment computing device. The regeneration module may regenerate one or more integrity values from a stored integrity metric log in response to detecting the power state transition of the operating environment of the dual-environment computing device.

Abstract translation: 公开了用于在双环境计算设备中共享完整性安全模块的方法和装置。 该装置包括完整性安全模块，一个或多个处理器，检测模块和再生模块。 一个或多个处理器可以访问完整性安全模块，并且可以在双环境计算设备的两个不同的操作环境中操作。 检测模块可以在初始化序列期间检测双环境计算设备的操作环境的功率状态转换。 响应于检测双环境计算设备的操作环境的功率状态转换，再生模块可以从存储的完整性度量日志重新生成一个或多个完整性值。

公开(公告)号：US20110197185A1

公开(公告)日：2011-08-11

申请号：US12701148

申请日：2010-02-05

Applicant: Jeffrey R. Hobbet ,  Randall Scott Springfield

Inventor： Jeffrey R. Hobbet ,  Randall Scott Springfield

IPC: G06F9/44 ,  G06F9/445 ,  G06F15/177 ,  G06F12/00

CPC classification number: G06F8/65 ,  G06F11/1433

Abstract: A method, apparatus, and system are disclosed for updating firmware on a storage device. The apparatus includes a detection module and an update module. The detection module detects, during a boot sequence, an indicator of an available update of firmware controlling a storage device. The available update is stored on non-volatile storage media of the storage device. The update module updates the storage device with the available update in response to the detection module detecting the indicator of the available update.

Abstract translation: 公开了一种用于更新存储设备上的固件的方法，装置和系统。 该装置包括检测模块和更新模块。 检测模块在引导顺序期间检测控制存储设备的固件的可用更新的指示符。 可用的更新存储在存储设备的非易失性存储介质上。 响应于检测模块检测到可用更新的指示符，更新模块用可用更新来更新存储设备。

公开(公告)号：US07934214B2

公开(公告)日：2011-04-26

申请号：US11394792

申请日：2006-03-31

Applicant: Scott Edwards Kelso ,  Masahiko Nomura ,  David Andrew Sawin ,  Randall Scott Springfield ,  Rod D. Waltermann

Inventor： Scott Edwards Kelso ,  Masahiko Nomura ,  David Andrew Sawin ,  Randall Scott Springfield ,  Rod D. Waltermann

IPC: G06F9/445 ,  H04L29/06

CPC classification number: G06F8/61

Abstract: Computer implemented method, system and computer program product for controlling software entitlement. A computer implemented method for controlling software entitlement includes receiving a request to install a software item on a designated machine. A determination is made if the designated machine is of a machine type authorized for installation of the software item. If the designated machine is of a machine type authorized for installation of the software item, a determination is made, using stored configuration data, if at least one additional criterion specified for entitlement to install the software item on the designated machine is satisfied using stored configuration data. If the at least one additional criterion specified for entitlement to install the software item on the designated machine is satisfied, installation of the software item on the designated machine is enabled in accordance with the at least one additional criterion.

Abstract translation: 计算机实现方法，系统和计算机程序产品，用于控制软件授权。 用于控制软件授权的计算机实现的方法包括在指定的机器上接收安装软件项目的请求。 如果指定的机器是被授权安装软件项目的机器类型，则确定。 如果指定的机器是被授权安装软件项目的机器类型，则使用存储的配置数据确定如果使用存储的配置满足在指定机器上安装软件项目的权利所指定的至少一个附加标准 数据。 如果满足指定用于在指定机器上安装软件项目的权利的至少一个附加标准，则根据至少一个附加标准启用软件项目在指定机器上的安装。

公开(公告)号：US07853804B2

公开(公告)日：2010-12-14

申请号：US11852418

申请日：2007-09-10

Applicant: Daryl Carvis Cromer ,  Howard Jeffrey Locker ,  Randall Scott Springfield

Inventor： Daryl Carvis Cromer ,  Howard Jeffrey Locker ,  Randall Scott Springfield

IPC: G06F11/30 ,  G06F7/04 ,  H04L29/06

CPC classification number: G06F21/575

Abstract: A system, method, and program product is provided that initializes expected PCRs stored in a TPM by generating and storing a random number, seeding expected PCRs with the random number, inputting a set of startup code processes to a hash algorithm resulting in a set of hash values, updating the expected PCRs using the set of hash values, and saving the expected PCRs in a nonvolatile data area that is secured by the TPM. Upon reboot, the random number is retrieved from the nonvolatile data area, the PCRs are seeded with the retrieved random number, the startup code processes are input to the hash algorithm process resulting in another set of hash values, the PCRs are updated using the resulting set of hash values, and an encrypted data object is decrypted in response to the PCRs being the same as the expected PCRs.

Abstract translation: 提供了一种系统，方法和程序产品，其通过生成和存储随机数来初始化存储在TPM中的预期PCR，将随机数的种子预期PCR输入到一个散列算法中，从而产生一组 散列值，使用该组散列值更新预期PCR，并将预期PCR保存在由TPM保护的非易失性数据区域中。 在重新启动时，从非易失性数据区域检索随机数，用检索的随机数种子PCR，将启动代码处理输入到散列算法处理，得到另一组散列值，使用所得到的更新PCR 响应于与预期PCR相同的PCR来解密加密数据对象。

公开(公告)号：US07814532B2

公开(公告)日：2010-10-12

申请号：US09847085

申请日：2001-05-02

Applicant: Daryl Carvis Cromer ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Randall Scott Springfield

Inventor： Daryl Carvis Cromer ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Randall Scott Springfield

IPC: G06F7/04 ,  G08B29/00 ,  G06F9/00 ,  G06F15/177

CPC classification number: G06F21/575

Abstract: A data processing system and method of password protecting the boot of a data processing system are disclosed. According to the method, in response to an attempt to boot the data processing system utilizing a boot device, the boot device is interrogated for a password. If the boot device supplies password information corresponding to that of a trusted boot device, the data processing system boots utilizing the boot device. If, however, the boot device does not supply password information corresponding to that of a trusted boot device, booting from the boot device is inhibited. In a preferred embodiment, the password information comprises a unique combination of the boot device's manufacturer-supplied model and serial numbers.

Abstract translation: 公开了一种密码保护数据处理系统引导的数据处理系统和方法。 根据该方法，响应于利用引导设备引导数据处理系统的尝试，引导设备被询问密码。 如果引导设备提供与可信引导设备的密码信息相对应的密码信息，则数据处理系统使用引导设备引导。 但是，如果引导设备不提供与受信任引导设备相对应的密码信息，则禁止从引导设备引导。 在优选实施例中，密码信息包括引导设备的制造商提供的模型和序列号的唯一组合。

公开(公告)号：US07814321B2

公开(公告)日：2010-10-12

申请号：US11788654

申请日：2007-04-19

Applicant: David Carroll Challener ,  Howard Jeffrey Locker ,  Randall Scott Springfield

Inventor： David Carroll Challener ,  Howard Jeffrey Locker ,  Randall Scott Springfield

IPC: H04L9/32

CPC classification number: G06F21/80

Abstract: To unlock a HDD when a computer is in the suspend state, at both BIOS and the HDD a secret is combined with a password to render a new one-time password. BIOS sends its new one-time password to the HDD which unlocks itself only if a match is found. The new one-time password is then saved as an “old” password for subsequent combination with the secret when coming out of subsequent suspend states. In this way, if a computer is stolen the thief cannot sniff the bus between BIOS and the HDD to obtain a password that is of any use once the computer ever re-enters the suspend state.

Abstract translation: 要在计算机处于挂起状态时解锁HDD，在BIOS和HDD两者中，将密码与密码相结合以呈现新的一次性密码。 BIOS将其新的一次性密码发送到HDD，只有在找到匹配时才会自动解锁。 然后将新的一次性密码保存为“旧”密码，以便随后从后续挂起状态中与秘密组合。 以这种方式，如果计算机被盗，小偷不能在BIOS和HDD之间嗅探总线，以获得一旦计算机重新进入暂停状态就可以使用的密码。

公开(公告)号：US20100146317A1

公开(公告)日：2010-06-10

申请号：US12330332

申请日：2008-12-08

Applicant: David Carroll Challener ,  Daryl Cromer ,  Howard Locker ,  Randall Scott Springfield

Inventor： David Carroll Challener ,  Daryl Cromer ,  Howard Locker ,  Randall Scott Springfield

IPC: G06F1/32 ,  G06F1/28

CPC classification number: G06F1/263 ,  G06F1/3203 ,  G06F1/3293 ,  Y02D10/122 ,  Y02D50/20

Abstract: An apparatus, system, and method are disclosed for computer system power management. A control module 602 is activated on a computer 200 in response to an event and enters 818 a standby state if the computer 200 is not already 814 in the standby state. A policy module 604 detects 904 a power source of a predetermined type connected to the computer 200 and dictates 908 one or more processors 302 of higher power consumption for a more abundant type of power source such as an AC adapter 314, or one or more processors 304 of lower power consumption for a less abundant type of power source such as a battery 318. A configuration module 606, activated by the control module 602, switches 1004 the computer 200 to one or more processors 302 and 304 of a predetermined power consumption as dictated and exits 1016 the standby state.

Abstract translation: 公开了一种用于计算机系统电源管理的装置，系统和方法。 控制模块602响应于事件而在计算机200上被激活，并且如果计算机200尚未处于待机状态则进入818待机状态。 策略模块604检测904连接到计算机200的预定类型的电源，并指示908个用于更丰富类型的电源（例如AC适配器314）或一个或多个处理器的更高功耗的一个或多个处理器302 304为较不丰富的电源（例如电池318）的较低功耗。由控制模块602激活的配置模块606将计算机200切换到具有预定功率消耗的一个或多个处理器302和304，如 指定并退出1016备用状态。

公开(公告)号：US20100115256A1

公开(公告)日：2010-05-06

申请号：US12265909

申请日：2008-11-06

Applicant: David Carroll Challener ,  Howard Locker ,  Joseph Michael Pennist ,  Randall Scott Springfield

Inventor： David Carroll Challener ,  Howard Locker ,  Joseph Michael Pennist ,  Randall Scott Springfield

IPC: G06F15/177

CPC classification number: G06F8/66

Abstract: An apparatus, system, and method are disclosed for quiescing a boot environment. A reservation module reserves a portion of a first storage device. A store module stores an update boot image to the reserved portion. A detection module detects the update boot image stored on the first storage device when the computer boots and executes the update boot image in place of a standard boot image in response to detecting the update boot image. The update boot image places a computer in a known quiescent state.

Abstract translation: 公开了用于停止引导环境的装置，系统和方法。 预留模块保留第一存储设备的一部分。 存储模块将更新引导映像存储到保留部分。 当计算机启动时，检测模块检测存储在第一存储设备上的更新引导映像，并且响应于检测到更新引导映像而执行替换引导映像代替标准引导映像。 更新引导映像将计算机置于已知的静态状态。