公开(公告)号：US06421792B1

公开(公告)日：2002-07-16

申请号：US09204983

申请日：1998-12-03

申请人： Daryl Carvis Cromer ,  Isaac Karpel ,  Howard J. Locker ,  James Peter Ward

发明人： Daryl Carvis Cromer ,  Isaac Karpel ,  Howard J. Locker ,  James Peter Ward

IPC分类号： G06F9445

CPC分类号： G06F11/1417

摘要： A data processing system and method are disclosed for automatically recovering from an unsuccessful boot of the system. A boot of the system is initiated utilizing a first boot code stored in a first storage location. A determination is made regarding whether the boot was successful. If a determination is made that the boot was unsuccessful, a boot is reattempted utilizing a second boot code stored in a second storage device.

摘要翻译： 公开了一种用于从系统的不成功启动自动恢复的数据处理系统和方法。 使用存储在第一存储位置中的第一引导代码来启动系统的引导。 确定启动是否成功。 如果确定引导不成功，则使用存储在第二存储设备中的第二引导代码来重新启动引导。

公开(公告)号：US06256732B1

公开(公告)日：2001-07-03

申请号：US09103684

申请日：1998-06-25

申请人： Daryl Carvis Cromer ,  Brandon J. Ellison ,  Christopher Brit Gould ,  Gregory William Kilmer ,  David Rhoades ,  James Peter Ward

发明人： Daryl Carvis Cromer ,  Brandon J. Ellison ,  Christopher Brit Gould ,  Gregory William Kilmer ,  David Rhoades ,  James Peter Ward

IPC分类号： G06F900

CPC分类号： H04L41/0886 ,  G06F1/181 ,  H04L41/0889

摘要： Described is a computer system which can automatically provide its capabilities to a main computer without powering on to facilitate configuring the system in its shipping package. The computer system is coupled to a remote computer via a data communication link. The system includes a communication subsystem which is supplied with auxiliary power and is operative to detect when a valid communication link is established between the computer system and the main computer. After the detection the communication subsystem sends a first packet to the main computer via the communication subsystem. The first packet includes data which specifically identifies the computer system. When the communication link is coupled to the communication subsystem through the packaging and a power source is coupled to a power connector of the system through the packaging, the system is operative to send the first packet without powering on.

摘要翻译： 描述了一种计算机系统，其能够自动地向主计算机提供其能力，而无需加电便于在其运输包装中配置系统。 计算机系统通过数据通信链路耦合到远程计算机。 该系统包括一个提供辅助电源的通信子系统，并且可操作以检测何时在计算机系统和主计算机之间建立有效的通信链路。 检测后，通信子系统通过通信子系统向主计算机发送第一个数据包。 第一包包括专门识别计算机系统的数据。 当通信链路通过封装耦合到通信子系统并且电源通过封装耦合到系统的电力连接器时，系统可操作以在不加电的情况下发送第一分组。

公开(公告)号：US6094720A

公开(公告)日：2000-07-25

申请号：US104835

申请日：1998-06-25

申请人： Daryl Carvis Cromer ,  Brandon J. Ellison ,  Christopher Brit Gould ,  Howard J. Locker ,  David Rhoades ,  James Peter Ward

发明人： Daryl Carvis Cromer ,  Brandon J. Ellison ,  Christopher Brit Gould ,  Howard J. Locker ,  David Rhoades ,  James Peter Ward

IPC分类号： G06F1/18 ,  G06F9/445 ,  G06F15/177

CPC分类号： G06F9/44505 ,  G06F1/181

摘要： Described is a computer system which is operable to allow configuration to occur on the system unit without removing the system unit from its packaging. The computer system is coupled to a remote computer via a data communication link. The system is operative to detect whether it is in a configuration mode when a power source and a network connection are made through the packaging. If the configuration mode is detected by the system, the system powers on and places itself in the configuration mode to allow (1) the remote computer to transfer signals to the system via the communication link to set up data transfers to the memory of the system, and (2) the remote computer to transfer data to the memory of the system for storage therein, whereby the system is configured at least in part in its packaging.

摘要翻译： 描述了一种计算机系统，其可操作以允许在系统单元上发生配置而不从其包装中移除系统单元。 计算机系统通过数据通信链路耦合到远程计算机。 当通过包装进行电源和网络连接时，系统可以检测是否处于配置模式。 如果系统检测到配置模式，则系统开机并将其置于配置模式，以允许（1）远程计算机通过通信链路向系统传输信号，以建立数据传输到系统的存储器 ，和（2）远程计算机将数据传送到系统的存储器以便存储在其中，由此该系统至少部分地被配置在其包装中。

公开(公告)号：US06704868B1

公开(公告)日：2004-03-09

申请号：US09439235

申请日：1999-11-12

申请人： David Carroll Challener ,  Richard Alan Dayan ,  James Peter Ward ,  Michael Vanover

发明人： David Carroll Challener ,  Richard Alan Dayan ,  James Peter Ward ,  Michael Vanover

IPC分类号： H04L900

CPC分类号： H04L9/32 ,  H04L9/0863 ,  H04L9/3226

摘要： A method for associating a pass phrase with a secured public/private key pair is disclosed. A user public/private key pair is first established for a user. The user public/private key pair includes a user public key and a user private key. Then, the user public/private key pair is encrypted along with a random password, utilizing a chip public key. Next, a first symmetric key is generated. The random password is encrypted utilizing the first symmetric key. A first password is generated by hashing a first pass phrase. Finally, the first password is encrypted along with the first symmetric key, also utilizing the chip public key. As a result, a user can access the user private key to perform an authentication function by providing the first pass phrase.

摘要翻译： 公开了一种将密码短语与安全公钥/私钥对相关联的方法。 首先为用户建立用户公钥/私钥对。 用户公钥/私钥对包括用户公钥和用户私钥。 然后，利用芯片公开密钥对用户公共/私人密钥对以及随机密码进行加密。 接下来，生成第一对称密钥。 利用第一个对称密钥加密随机密码。 通过散列第一个密码短语生成第一个密码。 最后，第一个密码与第一个对称密钥一起被加密，也利用芯片公钥。 结果，用户可以通过提供第一密码短语来访问用户专用密钥来执行认证功能。

公开(公告)号：US06718468B1

公开(公告)日：2004-04-06

申请号：US09439236

申请日：1999-11-12

申请人： David Carroll Challener ,  Richard Alan Dayan ,  James Peter Ward ,  Michael Vanover

发明人： David Carroll Challener ,  Richard Alan Dayan ,  James Peter Ward ,  Michael Vanover

IPC分类号： H04L932

CPC分类号： H04L9/3226 ,  H04L9/0863

摘要： A method for associating a password with a secured public/private key pair is disclosed. A user public/private key pair is first established for a user. The user public/private key pair includes a user public key and a user private key. Then, the user public/private key pair is encrypted along with a random password, utilizing a chip public key. Next, a first password is generated by hashing a pass phrase. Finally, the random password is encrypted along with the first password, also utilizing the chip public key. As a result, a user can assess the user private key to perform an authentication function by providing the pass phrase.

摘要翻译： 公开了一种将密码与安全公钥/私钥对相关联的方法。 首先为用户建立用户公钥/私钥对。 用户公钥/私钥对包括用户公钥和用户私钥。 然后，利用芯片公开密钥对用户公共/私人密钥对以及随机密码进行加密。 接下来，通过散列密码短语来生成第一个密码。 最后，随机密码与第一个密码一起加密，也使用芯片公钥。 结果，用户可以通过提供密码来评估用户私钥来执行认证功能。

公开(公告)号：US06892305B1

公开(公告)日：2005-05-10

申请号：US09689460

申请日：2000-10-12

申请人： Richard Alan Dayan ,  Steven Dale Goodman ,  Joseph Michael Pennisi ,  Randall Scott Springfield ,  James Peter Ward ,  Joseph Wayne Freeman

发明人： Richard Alan Dayan ,  Steven Dale Goodman ,  Joseph Michael Pennisi ,  Randall Scott Springfield ,  James Peter Ward ,  Joseph Wayne Freeman

IPC分类号： G06F9/00 ,  G06F12/14 ,  G06F21/00 ,  H04L9/32

CPC分类号： G06F21/575

摘要： A method and system for booting up a computer system in a secure fashion is disclosed. The method and system comprise determining the presence of a security feature element during an initialization of the computer system wherein the security feature element includes a public key and a corresponding private key, storing a portion of the public key in a nonvolatile memory within the computer system if the security feature element is present and utilizing an algorithm to determine the presence of the security feature element prior to a subsequent boot-up of the computer system. Through the use of the present invention, a computer system is capable of being booted up whereby the computer system determines if a security feature element was previously present in the system. If a security feature element was previously present in the computer system, any stored keys, along with the secrets that they protect, are prevented from being compromised. It is also an object of the present invention to preclude the system from compromising any keys and associated secrets if a security feature element in the system was not previously present in the system.

摘要翻译： 公开了一种以安全方式引导计算机系统的方法和系统。 该方法和系统包括在计算机系统的初始化期间确定安全特征元素的存在，其中安全特征元素包括公共密钥和相应的私钥，将公钥的一部分存储在计算机系统内的非易失性存储器中 如果存在安全特征元素并且利用算法来确定在计算机系统的后续引导之前的安全特征元素的存在。 通过使用本发明，计算机系统能够被启动，由此计算机系统确定安全特征元素是否先前存在于系统中。 如果安全特征元素以前存在于计算机系统中，则防止任何存储的密钥以及它们保护的秘密被泄露。 如果系统中的安全特征元素先前不存在于系统中，则本发明的另一个目的是排除系统损害任何密钥和相关联的秘密。

公开(公告)号：US07653819B2

公开(公告)日：2010-01-26

申请号：US10957545

申请日：2004-10-01

申请人： Steven A. Bade ,  Charles Douglas Ball ,  Ryan Charles Catherman ,  James Patrick Hoff ,  James Peter Ward

发明人： Steven A. Bade ,  Charles Douglas Ball ,  Ryan Charles Catherman ,  James Patrick Hoff ,  James Peter Ward

IPC分类号： G06F21/00

CPC分类号： G06F21/57

摘要： A method, computer program, and system for paging platform configuration registers in and out of a trusted platform module. In a trusted computing platform, an unlimited number of platform configuration registers can be obtained through paging. The trust platform module encrypts and decrypts platform configuration registers for storage outside the trusted platform module.

摘要翻译： 用于寻呼平台配置的方法，计算机程序和系统在可信平台模块内进出。 在可信赖的计算平台中，可以通过寻呼获得无限数量的平台配置寄存器。 信任平台模块对平台配置寄存器进行加密和解密，以便在可信平台模块之外进行存储。

公开(公告)号：US06993648B2

公开(公告)日：2006-01-31

申请号：US09931538

申请日：2001-08-16

申请人： Steven Dale Goodman ,  James Patrick Hoff ,  Randall Scott Springfield ,  James Peter Ward

发明人： Steven Dale Goodman ,  James Patrick Hoff ,  Randall Scott Springfield ,  James Peter Ward

IPC分类号： G06F9/24

CPC分类号： G06F9/4401 ,  G06F8/65

摘要： When a flash unlock routine unlocks the flash memory to permit updating of a BIOS image, a message is left in secure non-volatile memory, such as a EEPROM. Upon the next re-boot, the boot block code will detect the special message in the non-volatile memory and perform a signature verification of the next block of code that is to be executed during the POST process. This code block will check the remainder of the BIOS image before POST proceeds.

公开(公告)号：US06477603B1

公开(公告)日：2002-11-05

申请号：US09358106

申请日：1999-07-21

申请人： Howard J. Locker ,  Daryl C. Cromer ,  Ernest N. Mandese ,  James Peter Ward ,  John K. Langgood ,  Joseph Pennisi ,  Jan M. Janick

发明人： Howard J. Locker ,  Daryl C. Cromer ,  Ernest N. Mandese ,  James Peter Ward ,  John K. Langgood ,  Joseph Pennisi ,  Jan M. Janick

IPC分类号： G06F1300

CPC分类号： G06F13/409 ,  H05K1/14

摘要： Multiple PCI adapter cards are supported by a single PCI slot through the aspects of the present invention. A computer system aspect includes an &mgr;ATX planar including at least one PCI slot, and a riser card mounted in the at least one PCI slot, the riser card supporting multiple PCI adapter cards and providing signal generation to allow the multiple PCI adapter cards to utilize the at least one PCI slot. The riser card aspect includes a PCI connector for coupling to a PCI slot on the &mgr;ATX planar, a plurality of PCI slots for attaching a plurality of PCI adapter cards, and a logic device for providing separate bus signal pairs to each of the plurality of PCI adapter cards from a single signal pair of the PCI slot on the &mgr;ATX planar.

摘要翻译： 通过本发明的方面，单个PCI插槽支持多个PCI适配器卡。 计算机系统方面包括包括至少一个PCI插槽的muATX平面和安装在所述至少一个PCI插槽中的转接卡，所述转接卡支持多个PCI适配器卡并提供信号产生以允许所述多个PCI适配器卡利用 至少一个PCI插槽。 提升卡方面包括用于耦合到muATX平面上的PCI插槽的PCI连接器，用于附接多个PCI适配器卡的多个PCI插槽，以及用于向多个PCI中的每一个提供单独的总线信号对的逻辑设备 来自单个信号对的适配器卡在muATX平面上的PCI插槽。

公开(公告)号：US06405259B1

公开(公告)日：2002-06-11

申请号：US09207888

申请日：1998-12-08

申请人： Richard W. Cheston ,  Daryl C. Cromer ,  Dhruv M. Desai ,  Brandon J. Ellison ,  Howard J. Locker ,  James Peter Ward

发明人： Richard W. Cheston ,  Daryl C. Cromer ,  Dhruv M. Desai ,  Brandon J. Ellison ,  Howard J. Locker ,  James Peter Ward

IPC分类号： G06F1516

CPC分类号： H04L29/12009 ,  H04L12/1886 ,  H04L61/00 ,  H04L69/22

摘要： A method and system are disclosed for transmitting a network packet which identifies only selected ones of a plurality of client computer systems. The client computer systems are coupled to a server computer system to form a network. A logical group is specified which includes only a first plurality of the plurality of client computer systems by specifying one of a plurality of group identifiers. A network packet is then transmitted utilizing the network to the logical group. The network packet includes the group identifier which identifies the logical group, wherein only the logical group are the intended recipients of the packet.

摘要翻译： 公开了用于发送仅识别多个客户端计算机系统中的选定的一个的网络分组的方法和系统。 客户端计算机系统耦合到服务器计算机系统以形成网络。 指定逻辑组，其通过指定多个组标识符中的一个来指定仅包括第一多个多个客户端计算机系统。 然后使用网络将网络分组发送到逻辑组。 网络分组包括标识逻辑组的组标识符，其中只有逻辑组是分组的预期接收者。