公开(公告)号：US20130055377A1

公开(公告)日：2013-02-28

申请号：US13222033

申请日：2011-08-31

Applicant: Liang Chen ,  Joshua N. Novak ,  Rod D. Waltermann ,  David Rivera ,  Jun Li

Inventor： Liang Chen ,  Joshua N. Novak ,  Rod D. Waltermann ,  David Rivera ,  Jun Li

IPC: G06F21/00

CPC classification number: G06F21/54

Abstract: Devices, methods and products are described that provide for selective system or root level access for applications on an information handling device. One aspect provides a method comprising determining whether an application has system privileges on an information handling device; and executing privileged code from the application on said information handling device responsive to determining that the application has system privileges through one or more native services operating on said information handling device. Other aspects and embodiments are also described herein.

Abstract translation: 描述了为信息处理设备上的应用提供选择性系统或根级访问的设备，方法和产品。 一方面提供了一种方法，包括确定应用是否具有对信息处理设备的系统特权; 以及响应于通过在所述信息处理设备上操作的一个或多个本地服务来确定所述应用具有系统特权，在所述信息处理设备上执行来自所述应用的特权代码。 本文还描述了其它方面和实施例。

公开(公告)号：US20110154010A1

公开(公告)日：2011-06-23

申请号：US12641029

申请日：2009-12-17

Applicant: Randall S. Springfield ,  Howard J. Locker ,  David Rivera ,  Joseph M. Pennisi ,  Rod D. Waltermann

Inventor： Randall S. Springfield ,  Howard J. Locker ,  David Rivera ,  Joseph M. Pennisi ,  Rod D. Waltermann

IPC: H04L9/00 ,  G06F1/24

CPC classification number: H04L9/3234 ,  G06F21/57 ,  H04L9/3236 ,  H04L9/3263 ,  H04L2209/127

Abstract: An exemplary apparatus includes one or more processors; memory; circuitry configured to hash a value associated with core root of trust measurement code and system management code; store the hash in a secure register; load an operating system; validate a certificate associated with the core root of trust measurement code and validate a certificate associated with the system management code; based on the validated certificates, provide an expected hash associated with the core root of trust measurement code and the system management code; decide if the expected hash matches the hash stored in the register; and, if the expected hash matches the hash stored in the register, commence a dynamic root of trust measurement session. Various other apparatuses, systems, methods, etc., are also disclosed.

Abstract translation: 示例性装置包括一个或多个处理器; 记忆; 配置为对与信任测度代码的核心根和系统管理代码相关联的值进行散列的电路; 将哈希存储在安全寄存器中; 加载操作系统; 验证与信任测度代码的核心根相关联的证书，并验证与系统管理代码相关联的证书; 基于验证的证书，提供与信任测度代码的核心根和系统管理代码相关联的预期散列; 确定预期哈希是否与存储在寄存器中的哈希匹配; 并且如果期望的哈希与存储在寄存器中的哈希匹配，则启动信任测量会话的动态根。 还公开了各种其它装置，系统，方法等。

公开(公告)号：US07818567B2

公开(公告)日：2010-10-19

申请号：US11535542

申请日：2006-09-27

Applicant: Rod D. Waltermann ,  David C. Challener ,  Philip L. Childs ,  Norman A. Dion, II ,  James Hunt ,  Nathan J. Peterson ,  David Rivera ,  Randall S. Springfield ,  Arnold S. Weksler

Inventor： Rod D. Waltermann ,  David C. Challener ,  Philip L. Childs ,  Norman A. Dion, II ,  James Hunt ,  Nathan J. Peterson ,  David Rivera ,  Randall S. Springfield ,  Arnold S. Weksler

IPC: H04L29/06

CPC classification number: G06F21/575 ,  G06F21/6209 ,  G06F2221/2107 ,  H04L9/0897 ,  H04L2209/127

Abstract: A method for protecting Security Accounts Manager (SAM) files within a Windows® operating system is disclosed. A SAM file encryption key is generated by encrypting a SAM file via a syskey utility provided within the Windows® operating system. The SAM file encryption key is then stored in a virtual floppy disk by selecting an option to store SAM file encryption key to a floppy disk under the syskey utility. A blob is generated by performing a Trusted Platform Module (TPM) Seal command against the SAM file encryption key along with a value stored in a Performance Control Register and a TPM Storage Root Key. The blob is stored in a non-volatile storage area of a computer.

Abstract translation: 披露了一种在Windows®操作系统中保护安全帐户管理器（SAM）文件的方法。 通过在Windows®操作系统中提供的syskey实用程序加密SAM文件来生成SAM文件加密密钥。 然后，SAM文件加密密钥存储在虚拟软盘中，方法是选择将SAM文件加密密钥存储到syskey实用程序下的软盘中。 通过对SAM文件加密密钥执行可信平台模块（TPM）密封命令以及存储在性能控制寄存器和TPM存储根密钥中的值来生成blob。 斑点存储在计算机的非易失性存储区域中。

公开(公告)号：US20090249485A1

公开(公告)日：2009-10-01

申请号：US12054531

申请日：2008-03-25

Applicant: David Rivera ,  David C. Challener ,  Rod D. Waltermann

Inventor： David Rivera ,  David C. Challener ,  Rod D. Waltermann

IPC: G06F21/00

CPC classification number: G06F21/88

Abstract: A technique for identifying a user of a device includes receiving a tracking mechanism trigger and capturing (e.g., periodically) identifying information on the user of the device in response to the trigger.

Abstract translation: 用于识别设备的用户的技术包括响应于触发而接收跟踪机制触发和捕获（例如，周期性地）标识关于设备的用户的信息。

公开(公告)号：US09329766B2

公开(公告)日：2016-05-03

申请号：US13151884

申请日：2011-06-02

Applicant: Karen R. Kluttz ,  James A. Hunt ,  David Rivera ,  Rod D. Waltermann

Inventor： Karen R. Kluttz ,  James A. Hunt ,  David Rivera ,  Rod D. Waltermann

IPC: G06F3/01 ,  G06F3/0488 ,  G06F9/44 ,  G06F3/0485

CPC classification number: G06F3/0488 ,  G06F3/0485 ,  G06F9/451

Abstract: Systems, methods and products are described that provide homepage re-assignment. One aspect includes displaying a default homepage desktop view from among a plurality of scrollable desktop views; receiving user input via a user input device; opening a homepage re-assignment utility responsive to receiving said user input, said homepage re-assignment utility including a display indicating one or more desktop views selectable as a new homepage; and responsive to receiving a user input indicating a selection of a desktop view as a new homepage, changing a default homepage setting to a desktop view selected as a new homepage. Other embodiments are described.

Abstract translation: 描述了提供主页重新分配的系统，方法和产品。 一个方面包括从多个可滚动桌面视图中显示默认主页桌面视图; 经由用户输入设备接收用户输入; 响应于接收到所述用户输入打开主页重新分配实用程序，所述主页重新分配实用程序包括指示可选择为新主页的一个或多个桌面视图的显示器; 并且响应于接收到指示桌面视图的选择的用户输入作为新主页，将默认主页设置改变为被选择为新主页的桌面视图。 描述其他实施例。

公开(公告)号：US08706642B2

公开(公告)日：2014-04-22

申请号：US11609814

申请日：2006-12-12

Applicant: Stacy John Cannady ,  David Carroll Challener ,  Daryl Cromer ,  Mark Charles Davis ,  David Rivera ,  Randall Scott Springfield ,  Rod D. Waltermann

Inventor： Stacy John Cannady ,  David Carroll Challener ,  Daryl Cromer ,  Mark Charles Davis ,  David Rivera ,  Randall Scott Springfield ,  Rod D. Waltermann

IPC: G06Q20/00

CPC classification number: G07F7/08 ,  G06Q20/24 ,  G06Q20/26 ,  G06Q20/3674 ,  G06Q20/3829 ,  G06Q20/40 ,  G06Q20/403 ,  G06Q20/4037 ,  H04L9/3231 ,  H04L9/3234 ,  H04L2209/56 ,  H04L2209/805

Abstract: An apparatus, system, and method are disclosed for securely authorizing changes to a transaction restriction. A security module securely stores encryption keys for a payment instrument. The payment instrument electronically transacts payments and includes a transaction restriction. An authentication module receives an authentication from a user of the payment instrument. The security module validates the authentication with a first encryption key. In addition, the security module authorizes a change to the transaction restriction using a second encryption key if the authentication is valid. The security module resides on a computer that the user designates as authorized to validate the authentication.

Abstract translation: 公开了用于安全地授权对交易限制的改变的装置，系统和方法。 安全模块安全地存储付款工具的加密密钥。 支付工具以电子方式处理付款，并包括交易限制。 验证模块从付款工具的用户接收认证。 安全模块使用第一个加密密钥验证身份验证。 此外，如果认证有效，则安全模块授权使用第二加密密钥更改事务限制。 安全模块驻留在用户指定为授权验证身份验证的计算机上。

公开(公告)号：US20130314330A1

公开(公告)日：2013-11-28

申请号：US13480443

申请日：2012-05-24

Applicant: Nathan J. Peterson ,  David Rivera ,  Rod D. Waltermann

Inventor： Nathan J. Peterson ,  David Rivera ,  Rod D. Waltermann

IPC: G06F3/041

CPC classification number: G06F3/0416 ,  G06F3/03545 ,  G06F2203/04106

Abstract: In one aspect a method includes: detecting an initial input indicating a user selection disabling touch input for a touch input device of an information handling device; providing a dialog box to a user offering an opportunity to provide an appropriate input confirming the initial input; responsive to expiration of a predetermined time, reverting back to a default mode wherein touch input is enabled; and responsive to receiving a confirming input prior to the expiration of the predetermined time, disabling touch input on the touch input device of the information handling device. Other aspects are described and claimed.

Abstract translation: 一方面，一种方法包括：检测指示用户选择禁用触摸输入的信息处理设备的触摸输入设备的初始输入; 向用户提供对话框，提供机会以提供确认初始输入的适当输入; 响应于预定时间的到期，恢复到其中触摸输入被启用的默认模式; 并且响应于在所述预定时间期满之前接收到确认输入，禁止所述信息处理设备的触摸输入设备上的触摸输入。 描述和要求保护其他方面。

公开(公告)号：US20130031631A1

公开(公告)日：2013-01-31

申请号：US13189911

申请日：2011-07-25

Applicant: Rod D. Waltermann ,  David Rivera

Inventor： Rod D. Waltermann ,  David Rivera

IPC: G06F21/00

CPC classification number: G06F21/575 ,  G06F21/554

Abstract: Devices, methods and products are described that provide for recording an unauthorized event, such as rooting, on an information handling device. One aspect provides a method comprising determining whether at least one unauthorized event has occurred on an information handling device; setting at least one unauthorized event flag stored on the information handling device responsive to an unauthorized event; and allowing external access to the at least one unauthorized event flag. Other embodiments and aspects are also described herein.

Abstract translation: 描述了设备，方法和产品，其用于将未经授权的事件（例如生根）记录在信息处理设备上。 一方面提供了一种方法，包括：确定在信息处理设备上是否发生了至少一个未授权事件; 响应于未授权事件，设置存储在所述信息处理设备上的至少一个未授权事件标志; 并且允许对所述至少一个未授权事件标志的外部访问。 本文还描述了其它实施例和方面。

公开(公告)号：US20120311466A1

公开(公告)日：2012-12-06

申请号：US13151884

申请日：2011-06-02

Applicant: Karen R. Kluttz ,  James A. Hunt ,  David Rivera ,  Rod D. Waltermann

Inventor： Karen R. Kluttz ,  James A. Hunt ,  David Rivera ,  Rod D. Waltermann

IPC: G06F3/01

CPC classification number: G06F3/0488 ,  G06F3/0485 ,  G06F9/451

Abstract: Systems, methods and products are described that provide homepage re-assignment. One aspect includes displaying a default homepage desktop view from among a plurality of scrollable desktop views; receiving user input via a user input device; opening a homepage re-assignment utility responsive to receiving said user input, said homepage re-assignment utility including a display indicating one or more desktop views selectable as a new homepage; and responsive to receiving a user input indicating a selection of a desktop view as a new homepage, changing a default homepage setting to a desktop view selected as a new homepage. Other embodiments are described.

Abstract translation: 描述了提供主页重新分配的系统，方法和产品。 一个方面包括从多个可滚动桌面视图中显示默认主页桌面视图; 经由用户输入设备接收用户输入; 响应于接收到所述用户输入打开主页重新分配实用程序，所述主页重新分配实用程序包括指示可选择为新主页的一个或多个桌面视图的显示器; 并且响应于接收到指示桌面视图的选择的用户输入作为新主页，将默认主页设置改变为被选择为新主页的桌面视图。 描述其他实施例。

公开(公告)号：US20080140575A1

公开(公告)日：2008-06-12

申请号：US11609814

申请日：2006-12-12

Applicant: Stacy John Cannady ,  David Carroll Challener ,  Daryl Cromer ,  Mark Charles Davis ,  David Rivera ,  Randall Scott Springfield ,  Rod D. Waltermann

Inventor： Stacy John Cannady ,  David Carroll Challener ,  Daryl Cromer ,  Mark Charles Davis ,  David Rivera ,  Randall Scott Springfield ,  Rod D. Waltermann

IPC: H04L9/14 ,  H04L9/32 ,  G06Q20/00

CPC classification number: G07F7/08 ,  G06Q20/24 ,  G06Q20/26 ,  G06Q20/3674 ,  G06Q20/3829 ,  G06Q20/40 ,  G06Q20/403 ,  G06Q20/4037 ,  H04L9/3231 ,  H04L9/3234 ,  H04L2209/56 ,  H04L2209/805

Abstract: An apparatus, system, and method are disclosed for securely authorizing changes to a transaction restriction. A security module securely stores encryption keys for a payment instrument. The payment instrument electronically transacts payments and includes a transaction restriction. An authentication module receives an authentication from a user of the payment instrument. The security module validates the authentication with a first encryption key. In addition, the security module authorizes a change to the transaction restriction using a second encryption key if the authentication is valid. The security module resides on a computer that the user designates as authorized to validate the authentication.

Abstract translation: 公开了用于安全地授权对交易限制的改变的装置，系统和方法。 安全模块安全地存储付款工具的加密密钥。 支付工具以电子方式处理付款，并包括交易限制。 验证模块从付款工具的用户接收认证。 安全模块使用第一个加密密钥验证身份验证。 此外，如果认证有效，则安全模块授权使用第二加密密钥更改事务限制。 安全模块驻留在用户指定为授权验证身份验证的计算机上。