公开(公告)号：US07702894B2

公开(公告)日：2010-04-20

申请号：US11954664

申请日：2007-12-12

Applicant: Rod David Waltermann ,  Nathan J. Peterson ,  Joseph Wayne Freeman ,  Randall Scott Springfield ,  Mark Charles Davis ,  Steven Dale Goodman ,  Isaac Kareel ,  Scott Edwards Kelso

Inventor： Rod David Waltermann ,  Nathan J. Peterson ,  Joseph Wayne Freeman ,  Randall Scott Springfield ,  Mark Charles Davis ,  Steven Dale Goodman ,  Isaac Kareel ,  Scott Edwards Kelso

IPC: G06F7/00

CPC classification number: G06F9/4406

Abstract: A method for booting into computer memory a non-operating system (O.S.) program from a hard disk drive (HDD) prior to booting into memory an O.S. from the HDD. The method includes establishing a table of contents (TOC) on the HDD that contains entries for special O.S. programs. A pointer to the TOC is placed in non-volatile memory of the computer that is associated with the HDD, and when BIOS of the computer is prompted to load into memory one of the special O.S. programs, the pointer is accessed and used to locate the TOC, which in turn is accessed to load the special O.S. program.

Abstract translation: 在引导到存储器之前从硬盘驱动器（HDD）引导到计算机存储器的非操作系统（O.S.）程序的方法。 从硬盘。 该方法包括在HDD上建立内容表（TOC），其中包含特殊O.S.的条目。 程式。 指向TOC的指针被放置在与HDD相关联的计算机的非易失性存储器中，并且当计算机的BIOS被提示加载到存储器中时，特别的O.S. 程序中，指针被访问并用于定位TOC，而TOC又被访问以加载特殊的O.S. 程序。

公开(公告)号：US07490250B2

公开(公告)日：2009-02-10

申请号：US10012170

申请日：2001-10-26

Applicant: Daryl Carvis Cromer ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Randall Scott Springfield

Inventor： Daryl Carvis Cromer ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Randall Scott Springfield

IPC: H04L9/32

CPC classification number: G06F21/554 ,  G06F21/575

Abstract: A method, system and computer readable medium containing programming instructions for detecting a tamper event in a computer system having an embedded security system (ESS), a trusted operating system, and a plurality of devices is disclosed. The method, system and computer readable medium of the present invention provide for receiving a tamper signal in the ESS, and locking the tamper signal in the ESS. According to the method, system and computer readable medium of the present invention, the trusted operating system is capable of detecting the tamper signal in the ESS.

Abstract translation: 公开了一种包含用于检测具有嵌入式安全系统（ESS），可信操作系统和多个设备的计算机系统中的篡改事件的编程指令的方法，系统和计算机可读介质。 本发明的方法，系统和计算机可读介质提供在ESS中接收篡改信号，并将篡改信号锁定在ESS中。 根据本发明的方法，系统和计算机可读介质，可信操作系统能够检测ESS中的篡改信号。

公开(公告)号：US07401361B2

公开(公告)日：2008-07-15

申请号：US10963888

申请日：2004-10-13

Applicant: Joseph Wayne Freeman ,  Steven Dale Goodman ,  Randall Scott Springfield

Inventor： Joseph Wayne Freeman ,  Steven Dale Goodman ,  Randall Scott Springfield

IPC: G06F12/14 ,  G06F11/30 ,  G06F17/30

CPC classification number: G06F21/562 ,  G06F21/564 ,  Y10S707/99953 ,  Y10S707/99955

Abstract: A system and method that marks whenever a sector on a hard drive is altered. A protected archive bit is maintained for each sector on the hard drive in a secured fashion. Authenticated requests are able to reset the protected archive bit. When a file is changed, the hard drive marks the sectors of the program that have been altered. When the virus protection application executes, it retrieves the sectors that have been altered, identifies the files that correspond to such sectors, and scans the identified files. If a virus has attacked the computer and attached itself to one of the files, the file is identified and scanned and the virus is discovered with appropriate eradication actions performed. An authentication scheme is assigned to a hard drive with a secret that is shared between the drive and the virus protection program and stored in a secure location.

Abstract translation: 每当硬盘驱动器上的扇区被更改时都会标记的系统和方法。 以安全的方式为硬盘驱动器上的每个扇区维护受保护的归档位。 经认证的请求能够重置受保护的归档位。 当文件更改时，硬盘驱动器会标记已更改的程序扇区。 当病毒保护应用程序执行时，它检索已更改的扇区，识别与这些扇区相对应的文件，并扫描已识别的文件。 如果病毒攻击了计算机并将其自身附加到其中一个文件中，则会识别并扫描文件，并发现病毒被发现，并执行适当的根除操作。 将认证方案分配给具有在驱动器和病毒保护程序之间共享并存储在安全位置的秘密的硬盘驱动器。

公开(公告)号：US07069431B2

公开(公告)日：2006-06-27

申请号：US09919081

申请日：2001-07-31

Applicant: Richard Alan Dayan ,  Joseph Wayne Freeman ,  William Fred Keown ,  Randall Scott Springfield

Inventor： Richard Alan Dayan ,  Joseph Wayne Freeman ,  William Fred Keown ,  Randall Scott Springfield

IPC: H04L9/32

CPC classification number: G06F11/1433

Abstract: A hard drive having a protected partition is used in the recovery of a BIOS image for a computer system. An EEPROM is used to store a first BIOS image that is used to boot-up the system and recovery code is used to recover a new BIOS image if the first BIOS image has been corrupted. The new BIOS image is stored in the protected partition of the drive. A recover BIOS command is issued whenever the first BIOS image has been corrupted or a remote or local recover BIOS request is received. When the first BIOS is corrupted, the EEPROM is rewritten with the second BIOS image and the system boots with the rewritten first BIOS image. When a recover BIOS request is received in a data packet sent over a communication link, the data packet is authenticated before the first BIOS image is rewritten.

公开(公告)号：US07065627B2

公开(公告)日：2006-06-20

申请号：US10105688

申请日：2002-03-25

Applicant: Richard Alan Dayan ,  Joseph Wayne Freeman ,  Randall Scott Springfield

Inventor： Richard Alan Dayan ,  Joseph Wayne Freeman ,  Randall Scott Springfield

IPC: G06F12/00

CPC classification number: G06F3/0601 ,  G06F9/4406 ,  G06F2003/0697

Abstract: A method and system for providing an event driven hardfile image in a computer system is disclosed. The computer system includes a hardfile, a hardfile adapter, a master boot record and an operating system. The method and system include providing an extended physical partition table describing a plurality of partitions on the hardfile and defining at least one image using a utility. Each image corresponds to at least a portion of the plurality of partitions and to a corresponding event. An image is to be mapped to the master boot record in response to an occurrence of the corresponding event. The method and system also include providing an event driven table including each of the at least one image.

公开(公告)号：US20050108564A1

公开(公告)日：2005-05-19

申请号：US10712237

申请日：2003-11-13

Applicant: Joseph Wayne Freeman ,  Steven Dale Goodman ,  Randall Scott Springfield

Inventor： Joseph Wayne Freeman ,  Steven Dale Goodman ,  Randall Scott Springfield

IPC: G06F12/14 ,  G06F21/00 ,  H04L9/00

CPC classification number: G06F21/572 ,  G06F21/575

Abstract: A method, computer program product and system for reducing the boot time of a TCPA based computing system. A flash memory in the TCPA based computing system may include a register comprising bits configured to indicate whether the segments of the flash memory have been updated. The flash memory may further include a table configured to store measurements of the segments of the flash memory. The flash memory may further include a boot block code that includes a Core Root of Trust for Measurement (CRTM). The CRTM may read the bits in the register to determine if any of the segments of the flash memory have been updated. The CRTM may further obtain the measurement values in the table for those segments that store the POST BIOS code that have not been updated thereby saving time from measuring the POST BIOS code and consequently reducing the boot time.

Abstract translation: 一种用于减少基于TCPA的计算系统的启动时间的方法，计算机程序产品和系统。 基于TCPA的计算系统中的闪速存储器可以包括寄存器，其包括被配置为指示闪速存储器的段是否已被更新的位。 闪存可以进一步包括被配置为存储闪存的片段的测量的表。 闪速存储器还可以包括引导块代码，其包括用于测量的信任核心根（CRTM）。 CRTM可以读取寄存器中的位，以确定闪存中的任何段是否已更新。 CRTM可以进一步获得存储POST BIOS代码的那些片段的表中的测量值，从而节省了测量POST BIOS代码的时间，从而减少了引导时间。

公开(公告)号：US06832262B2

公开(公告)日：2004-12-14

申请号：US09759936

申请日：2001-01-12

Applicant: Daryl Carvis Cromer ,  Richard Alan Dayan ,  Eric Richard Kern ,  Randall Scott Springfield ,  Joseph Wayne Freeman ,  Robert Duane Johnson ,  Brandon Jon Ellison

Inventor： Daryl Carvis Cromer ,  Richard Alan Dayan ,  Eric Richard Kern ,  Randall Scott Springfield ,  Joseph Wayne Freeman ,  Robert Duane Johnson ,  Brandon Jon Ellison

IPC: G06F1516

CPC classification number: H04L63/0421 ,  H04L29/12 ,  H04L29/12009 ,  H04L29/12018 ,  H04L29/12811 ,  H04L61/00 ,  H04L61/10 ,  H04L61/6009 ,  H04L69/22

Abstract: A method and system are disclosed for substituting an anonymous media access controller (MAC) address for a client computer system's real MAC address in order to disguise an identity of the client computer system when the client computer system is utilizing a network. The client computer system is coupled to a server computer system via the network. A primary storage device is established for storing a MAC address. A MAC address which is stored in the primary storage device is utilized as a network address for the client computer system when the client computer system is utilizing the network. An anonymous MAC address is generated. The anonymous MAC address is not associated with any particular client computer system. The anonymous MAC address is then stored in the primary storage device. The client computer system utilizes the anonymous MAC address as the network address for the client computer system when the client computer system is utilizing the network.

Abstract translation: 公开了一种用于将匿名媒体访问控制器（MAC）地址替换为客户端计算机系统的真实MAC地址的方法和系统，以便在客户端计算机系统利用网络时伪装客户端计算机系统的标识。 客户端计算机系统经由网络耦合到服务器计算机系统。 建立主存储设备用于存储MAC地址。 当客户计算机系统正在利用网络时，存储在主存储设备中的MAC地址被用作客户端计算机系统的网络地址。 生成匿名MAC地址。 匿名MAC地址不与任何特定的客户端计算机系统相关联。 然后将匿名MAC地址存储在主存储设备中。 当客户端计算机系统正在利用网络时，客户端计算机系统利用匿名MAC地址作为客户端计算机系统的网络地址。

公开(公告)号：US6098171A

公开(公告)日：2000-08-01

申请号：US52733

申请日：1998-03-31

Applicant: Robert Duane Johnson ,  Randall Scott Springfield ,  Joseph Wayne Freeman ,  Ralph Bonomo

Inventor： Robert Duane Johnson ,  Randall Scott Springfield ,  Joseph Wayne Freeman ,  Ralph Bonomo

IPC: G06F1/00 ,  G06F21/57 ,  G06F21/83 ,  G06F11/00

CPC classification number: G06F21/575 ,  G06F21/83 ,  G06F2211/1097

Abstract: Provides management tools for a System Owner to assure that a personal computer system is secured against access by an unauthorized user by foreclosing the possibility of circumventing a system's security protection during an adapter ROM scan. If security function, such as that for C2 functionality, is enabled, prior to the adapter ROM Scan for the system, the POST code detects whether or not disabling of the keyboard during adapter ROM Scan is enabled. If enabled, the keyboard is disabled or locked prior to adapter ROM Scan. On some systems, the security function may not be used and, the system does not consider password protection for the adapter utilities. If however, the security functionality of the system is enabled, the POST code will continue to enable the password protection for the adapter ROM Scan. Once the input device, e.g., keyboard, is disabled the adapter ROM scan will begin. Upon completion of the adapter ROM scan, the input device will be enabled and progress will continue through POST.

Abstract translation: 为系统所有者提供管理工具，以确保个人计算机系统受到未经授权的用户的访问，以防止在适配器ROM扫描过程中避免系统的安全保护。 如果启用安全功能（例如C2功能），则在系统的适配器ROM扫描之前，POST代码将检测是否启用了适配器ROM扫描期间禁用键盘。 如果启用，键盘在适配器ROM扫描之前被禁用或锁定。 在某些系统上，可能不使用安全功能，并且系统不会考虑为适配器实用程序提供密码保护。 然而，如果启用了系统的安全功能，POST代码将继续为适配器ROM扫描启用密码保护。 一旦输入设备（例如键盘）被禁用，则适配器ROM扫描将开始。 完成适配器ROM扫描后，将启用输入设备，并通过POST继续进行。

公开(公告)号：US08862709B2

公开(公告)日：2014-10-14

申请号：US11955886

申请日：2007-12-13

Applicant: Daryl Carvis Cromer ,  Richard Alan Dayan ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Howard Jeffrey Locker ,  Randall Scott Springfield

Inventor： Daryl Carvis Cromer ,  Richard Alan Dayan ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Howard Jeffrey Locker ,  Randall Scott Springfield

IPC: G06F9/44 ,  H04L29/08 ,  H04L29/12 ,  G06F15/177 ,  H04N21/443

CPC classification number: G06F9/4416 ,  G06F9/4401 ,  G06F9/4406 ,  G06F9/4408 ,  G06F15/177 ,  H04L29/12235 ,  H04L67/34 ,  H04N21/443

Abstract: Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.

Abstract translation: 可以考虑通过用于具有LAN唤醒（WOL）功能的计算机的WOL分组来远程选择可启动图像的系统和布置。 服务器端实施例包括用于确定要管理的客户机的硬件和/或软件，确定客户端是否在网络上是活动的，以及发送具有向量的WOL分组或操作系统分区标识（OSPID）来描述可引导的 WOL功能的计算机可访问的图像。 一些实施例可以包括指向安全可启动图像的OSPID，例如硬盘驱动器上的可引导映像，连接到计算机的光盘（CD）或其他本地资源。 客户端实施例可以在例如网络接口卡（NIC）处接收WOL分组，识别WOL分组包括描述可启动图像引导的OSPID，并且实现替代的引导顺序以从该可启动图像引导 。

公开(公告)号：US08677117B2

公开(公告)日：2014-03-18

申请号：US10749583

申请日：2003-12-31

Applicant: Daryl Carvis Cromer ,  Richard Alan Dayan ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Howard Jeffrey Locker ,  Randall Scott Springfield

Inventor： Daryl Carvis Cromer ,  Richard Alan Dayan ,  Joseph Wayne Freeman ,  Steven Dale Goodman ,  Eric Richard Kern ,  Howard Jeffrey Locker ,  Randall Scott Springfield

IPC: H04L29/06

CPC classification number: G06F9/4416 ,  G06F9/4401 ,  G06F9/4406 ,  G06F9/4408 ,  G06F15/177 ,  H04L29/12235 ,  H04L67/34 ,  H04N21/443

Abstract: Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.