System and Method for Securely Updating Remaining Time or Subscription Data for a Rental Computer
    1.
    发明申请
    System and Method for Securely Updating Remaining Time or Subscription Data for a Rental Computer 审中-公开
    用于安全地更新租用计算机的剩余时间或订阅数据的系统和方法

    公开(公告)号:US20080077420A1

    公开(公告)日:2008-03-27

    申请号:US11612300

    申请日:2006-12-18

    IPC分类号: G06Q10/00

    摘要: A system, method, and program product is provided that manages a rental computer system by verifying installation of a secure time-day module in a computer system. The computer system is rendered inoperable if the secure time-day module is not installed. A current time-day value is retrieved from the secure time-day module and an end time-day value is retrieved from a secure storage area. The current time-day value is compared to the end time-day value in order to determine whether a rental period has expired. If the rental period has expired, then the user is prevented from using the rental computer system.

    摘要翻译: 提供了一种系统,方法和程序产品,其通过在计算机系统中验证安全时间日模块的安装来管理租赁计算机系统。 如果未安装安全的时间日模块,计算机系统将无法运行。 从安全时间日模块检索当前时间日期值,并且从安全存储区域检索结束时间日值。 将当前时间日值与结束时间日值进行比较,以确定租期是否已过期。 如果出租期已经过期,则不允许用户使用租赁计算机系统。

    System and Method for Securely Updating Firmware Devices by Using a Hypervisor
    2.
    发明申请
    System and Method for Securely Updating Firmware Devices by Using a Hypervisor 审中-公开
    使用管理程序安全更新固件设备的系统和方法

    公开(公告)号:US20080244553A1

    公开(公告)日:2008-10-02

    申请号:US11692283

    申请日:2007-03-28

    IPC分类号: G06F9/44

    CPC分类号: G06F21/572

    摘要: A system, method, and program product is provided that receives and processes a firmware update at a computer system. The computer system is executing a hypervisor and one or more guest operating systems, and the firmware update corresponds to a hardware device accessible by the computer system. The hardware device is a type that is programmed using an updateable firmware. The hypervisor operating in the computer system processes the received firmware update by first inhibiting use of the device by each of the guest operating systems. After the guest operating systems have been inhibited from using the device, the firmware in the device is upgraded by the hypervisor using the received firmware update. After the firmware has been upgraded, each of the guest operating systems is allowed use of the device.

    摘要翻译: 提供了一种在计算机系统接收和处理固件更新的系统,方法和程序产品。 计算机系统正在执行管理程序和一个或多个客户操作系统,并且固件更新对应于计算机系统可访问的硬件设备。 硬件设备是使用可更新固件编程的类型。 在计算机系统中操作的管理程序通过首先禁止每个客户操作系统使用该设备来处理所接收的固件更新。 在客户机操作系统被禁止使用设备之后,设备中的固件由管理程序使用接收到的固件更新进行升级。 在升级固件之后,允许每个客户机操作系统使用该设备。

    Apparatus and method for assuring secure disposal of a hard disk drive unit
    5.
    发明申请
    Apparatus and method for assuring secure disposal of a hard disk drive unit 有权
    用于确保硬盘驱动单元的安全处理的装置和方法

    公开(公告)号:US20080046998A1

    公开(公告)日:2008-02-21

    申请号:US11493952

    申请日:2006-07-27

    IPC分类号: G06F12/14

    CPC分类号: G06F21/805 G06F2221/2143

    摘要: A hard disk drive unit includes a microprocessor programmed to erase data stored within the drive unit if it is determined that a process potentially leading to a misuse of the data stored within the drive unit, and if secure disposal configuration data stored in nonvolatile storage within the drive indicates that the data is to be erased. Such a process includes initializing the drive unit for operation without providing a password matching a password stored in the drive unit, initializing the drive unit in a system not having CMOS configuration data matching the drive unit, and determining that a failure rate within the drive unit exceeds a threshold level.

    摘要翻译: 如果确定可能导致误用存储在驱动单元内的数据的过程,以及如果存储在驱动单元内的非易失性存储器中的安全处理配置数据,则硬盘驱动器单元包括被编程为擦除存储在驱动单元内的数据的微处理器 驱动器指示要擦除的数据。 这样的处理包括初始化用于操作的驱动单元,而不提供与存储在驱动单元中的密码匹配的密码,在不具有与驱动单元匹配的CMOS配置数据的系统中初始化驱动单元,以及确定驱动单元内的故障率 超过阈值水平。

    Apparatus and method for assuring secure disposal of a hard disk drive unit
    6.
    发明授权
    Apparatus and method for assuring secure disposal of a hard disk drive unit 有权
    用于确保硬盘驱动单元的安全处理的装置和方法

    公开(公告)号:US08381304B2

    公开(公告)日:2013-02-19

    申请号:US11493952

    申请日:2006-07-27

    IPC分类号: G06F21/00

    CPC分类号: G06F21/805 G06F2221/2143

    摘要: A hard disk drive unit includes a microprocessor programmed to erase data stored within the drive unit if it is determined that a process potentially leading to a misuse of the data stored within the drive unit, and if secure disposal configuration data stored in nonvolatile storage within the drive indicates that the data is to be erased. Such a process includes initializing the drive unit for operation without providing a password matching a password stored in the drive unit, initializing the drive unit in a system not having CMOS configuration data matching the drive unit, and determining that a failure rate within the drive unit exceeds a threshold level.

    摘要翻译: 如果确定可能导致误用存储在驱动单元内的数据的过程,以及如果存储在驱动单元内的非易失性存储器中的安全处理配置数据,则硬盘驱动器单元包括被编程为擦除存储在驱动单元内的数据的微处理器 驱动器指示要擦除的数据。 这样的处理包括初始化用于操作的驱动单元,而不提供与存储在驱动单元中的密码匹配的密码,在不具有与驱动单元匹配的CMOS配置数据的系统中初始化驱动单元,以及确定驱动单元内的故障率 超过阈值水平。

    Apparatus, system, and method for authentication of a core root of trust measurement chain
    8.
    发明授权
    Apparatus, system, and method for authentication of a core root of trust measurement chain 有权
    用于认证信任测度链核心根的装置,系统和方法

    公开(公告)号:US08433924B2

    公开(公告)日:2013-04-30

    申请号:US11612367

    申请日:2006-12-18

    IPC分类号: G06F21/00

    CPC分类号: G06F21/57 G06F2221/2153

    摘要: An apparatus, system, and method are disclosed for authentication of a core root of trust measurement chain. The apparatus for authentication of a CRTM chain is provided with a plurality of modules configured to carry out the steps of retrieving a decryption key from a predetermined location on the device selected for authentication, decrypting an authentication signal using the decryption key, and communicating the decrypted authentication signal to a user. In the described embodiments, these modules include a retrieval module, a decryption module, and a communication module. Beneficially, such an apparatus, system, and method would reliably verify that a link in the CRTM chain has not been corrupted, modified, or infected with a computer virus. Specifically, such an apparatus, system, and method would enable verification that the hypervisor has not been corrupted, modified, or infected with a computer virus.

    摘要翻译: 公开了用于认证信任度量链核心根的装置,系统和方法。 用于认证CRTM链的装置设置有多个模块,其被配置为执行从所选择的用于认证的设备上的预定位置检索解密密钥的步骤,使用解密密钥解密认证信号,以及传送解密密钥 认证信号给用户。 在所描述的实施例中,这些模块包括检索模块,解密模块和通信模块。 有利的是,这样的装置,系统和方法可以可靠地验证CRTM链中的链路没有被破坏,修改或感染计算机病毒。 具体来说,这样的装置,系统和方法将能够验证管理程序没有被计算机病毒破坏,修改或感染。