公开(公告)号：US06591297B1

公开(公告)日：2003-07-08

申请号：US09514797

申请日：2000-02-28

申请人： David Carroll Challener ,  Joseph P. McGovern ,  Frank P. Novak ,  Hernando Ovies

发明人： David Carroll Challener ,  Joseph P. McGovern ,  Frank P. Novak ,  Hernando Ovies

IPC分类号： G06F1300

CPC分类号： G06F3/1204 ,  G06F3/1229 ,  G06F3/1232 ,  G06F3/1285

摘要： A data processing system and method are described for providing a networked printer's physical location. The printer, a server computer system, and client computer systems are coupled together utilizing a network. The server computer system first transmits a command to the printer to disable the print function of the printer. Entry of a physical location of the printer is then permitted. The print function of the printer is reenabled by the server computer system only in response to an entry of the physical location of the printer into the printer.

摘要翻译： 描述了一种用于提供联网打印机的物理位置的数据处理系统和方法。 打印机，服务器计算机系统和客户端计算机系统利用网络耦合在一起。 服务器计算机系统首先向打印机发送命令以禁用打印机的打印功能。 然后允许输入打印机的物理位置。 打印机的打印功能仅由服务器计算机系统重新启用，以响应打印机的物理位置进入打印机。

公开(公告)号：US07620997B2

公开(公告)日：2009-11-17

申请号：US10748919

申请日：2003-12-22

申请人： David Carroll Challener ,  Daryl Carvis Cromer ,  Howard Jeffrey Locker ,  Hernando Ovies ,  Randall Scott Springfield

发明人： David Carroll Challener ,  Daryl Carvis Cromer ,  Howard Jeffrey Locker ,  Hernando Ovies ,  Randall Scott Springfield

IPC分类号： G06F7/04 ,  G06F15/16 ,  G06F17/30

CPC分类号： H04L63/08 ,  H04W12/06 ,  H04W88/08

摘要： When an authenticated wireless computer loses connectivity to a wireless access point of a network and roams to another access point, the wireless computer (e.g., a hypervisor in the computer) determines whether the new access point is authorized for secure communication and if so, releases access to secure data on the network through the new access point.

摘要翻译： 当经认证的无线计算机失去与网络的无线接入点的连接并漫游到另一接入点时，无线计算机（例如，计算机中的管理程序）确定新接入点是否被授权用于安全通信，如果是，则释放 通过新的接入点访问网络上的安全数据。

公开(公告)号：US06687825B1

公开(公告)日：2004-02-03

申请号：US09527367

申请日：2000-03-17

申请人： David Carroll Challener ,  Daryl Carvis Cromer ,  Mark Charles Davis ,  Dhruv Manmohandas Desai ,  Charles William Kaufman ,  Hernando Ovies ,  James Peter Ward

发明人： David Carroll Challener ,  Daryl Carvis Cromer ,  Mark Charles Davis ,  Dhruv Manmohandas Desai ,  Charles William Kaufman ,  Hernando Ovies ,  James Peter Ward

IPC分类号： G06F1130

CPC分类号： G06F21/80 ,  G06F21/6209

摘要： A data processing system and method are disclosed for protecting data within a hard disk drive included within a data processing system. Data is generated. A signature value is provided which is stored in a signature device. The signature device is capable of being inserted into and removed from a computer system. A textual description of the data is created. The data is encrypted utilizing both the signature value stored on the device and the textual description. The encrypted data is then stored on the hard disk drive. The data processing system does not permanently store encryption keys.

摘要翻译： 公开了一种用于保护包含在数据处理系统内的硬盘驱动器内的数据的数据处理系统和方法。 生成数据。 提供签名值，其被存储在签名设备中。 签名装置能够插入计算机系统和从计算机系统中移除。 创建数据的文本描述。 使用存储在设备上的签名值和文本描述来加密数据。 然后将加密的数据存储在硬盘驱动器上。 数据处理系统不会永久存储加密密钥。

公开(公告)号：US06598032B1

公开(公告)日：2003-07-22

申请号：US09523490

申请日：2000-03-10

申请人： David Carroll Challener ,  Joseph McGovern ,  Hernando Ovies ,  James Peter Ward

发明人： David Carroll Challener ,  Joseph McGovern ,  Hernando Ovies ,  James Peter Ward

IPC分类号： G06F1760

CPC分类号： G07F7/1008 ,  G06Q20/382 ,  G06Q20/401 ,  G06Q20/4012 ,  G07F7/1025

摘要： A system and method for isolating a computer system from entry of a personal identification number (PIN) to a smart card. The system and method includes a computer system that is in communication with an unsecure network to allow a user to engage in a purchase transaction. The system and method also includes a smart card reader in which a smart card is inserted and read. A secure personal-identification-number (PIN) entry device is coupled between the computer system and the smart card reader. The secure PIN entry device is used for entering a correct code for the PIN. Communication between computer system and secure PIN entry device is disconnected until the correct code for the PIN is entered at secure PIN entry device and sent to the smart card in order to authorize use of the smart card for the purchase transaction. In response to the correct code for the PIN being entered and sent to the smart card, communication between computer system and secure PIN entry device is established. The secure PIN entry device has a processor for controlling the disconnection and connection of communication between the computer system and the secure PIN entry device. The secure PIN entry device also has a display for displaying a message request relating to the purchase transaction. The message request prompts a user to provide the PIN to authorize use of the smart card for a purchase transaction.

摘要翻译： 一种用于将计算机系统与个人识别号码（PIN）输入到智能卡的系统和方法。 该系统和方法包括与不安全网络通信以允许用户参与购买交易的计算机系统。 该系统和方法还包括其中插入和读取智能卡的智能卡读卡器。 安全的个人识别号码（PIN）输入设备耦合在计算机系统和智能卡读卡器之间。 安全PIN输入设备用于输入PIN的正确代码。 计算机系统和安全PIN输入设备之间的通信被断开，直到PIN的正确代码被输入到安全的PIN输入设备并被发送到智能卡以授权使用智能卡进行购买交易。 为了响应正在输入的PIN并将其发送到智能卡的正确代码，建立计算机系统和安全PIN输入设备之间的通信。 安全PIN输入设备具有用于控制计算机系统和安全PIN输入设备之间的通信的断开和连接的处理器。 安全PIN输入设备还具有用于显示与购买交易相关的消息请求的显示。 消息请求提示用户提供PIN以授权使用智能卡进行购买交易。

公开(公告)号：US06944300B2

公开(公告)日：2005-09-13

申请号：US09888176

申请日：2001-06-22

申请人： David Carroll Challener ,  Hernando Ovies

发明人： David Carroll Challener ,  Hernando Ovies

IPC分类号： G06F21/00 ,  H04L9/30 ,  H04L9/32 ,  H04L9/00

CPC分类号： G06F21/606 ,  G06F2221/2107 ,  H04L9/0825 ,  H04L9/0897 ,  H04L9/3263

摘要： A method for migrating a base chip key from a first computer system to a second computer system is disclosed. A first computer system includes a base chip key 1, and a second computer system includes a base chip key 2. Using a first certificate for the base chip key 1, a manufacturer of the second computer system generates a second certificate for the base chip key 1. Similarly, using a first certificate for the base chip key 2, a manufacturer of the first computer system generates a second certificate for the base chip key 2. A first data packet is then sent from the first computer system to the second computer system. The first data packet includes a first random number and all the data required to reproduce the base chip key 1 in the first computer system. The first data packet is also encrypted with the base chip key 1's public key. In return, a second data packet is sent from the second computer system to the first computer system, and the second data packet includes the first random number and a second random number, signed by the base chip key 2. The base chip key 1 is then erased from the first computer system. Finally, the base chip key 2 in the second computer system is replaced by the base chip key 1.

摘要翻译： 公开了一种用于将基本芯片密钥从第一计算机系统迁移到第二计算机系统的方法。 第一计算机系统包括基本芯片密钥1，第二计算机系统包括基本密钥密钥2。 使用基本芯片密钥1的第一证书，第二计算机系统的制造商生成用于基本密钥密钥1的第二证书。 类似地，对于基本芯片键2使用第一证书，第一计算机系统的制造商生成用于基本芯片键2的第二证书。 然后，第一数据分组从第一计算机系统发送到第二计算机系统。 第一数据分组包括第一随机数和在第一计算机系统中再现基本芯片密钥1所需的所有数据。 第一数据包也用基本密钥1的公开密钥加密。 作为回报，第二数据分组从第二计算机系统被发送到第一计算机系统，并且第二数据分组包括由基本芯片键2签名的第一随机数和第二随机数。 然后从第一计算机系统擦除基本密钥1。 最后，第二计算机系统中的基本芯片键2由基本芯片键1代替。

公开(公告)号：US07389536B2

公开(公告)日：2008-06-17

申请号：US09993135

申请日：2001-11-14

申请人： David Carroll Challener ,  Ernest Nelson Mandese ,  Hernando Ovies ,  James Peter Ward

发明人： David Carroll Challener ,  Ernest Nelson Mandese ,  Hernando Ovies ,  James Peter Ward

IPC分类号： H04L9/00 ,  G06F11/00

CPC分类号： G06F21/88 ,  G06F21/606 ,  G06F21/62 ,  G06F2221/2137

摘要： Access to secure data through a portable computing system is provided only when a timer within the system is running. The timer is reset with the portable system connected to a base system, either directly, as by a cable, or indirectly, as through a telephone network. In an initialization process, the portable and base systems exchange data, such as public cryptographic keys, which are later used to confirm that the portable system is connected to the same base system. In one embodiment, the initialization process also includes storing a password transmitted from the portable system within the base system, with this password later being required within the reset process.

摘要翻译： 只有当系统中的计时器正在运行时才能通过便携式计算系统访问安全数据。 定时器被重置，便携式系统通过电缆直接连接到基本系统，或通过电话网络间接连接。 在初始化过程中，便携式和基本系统交换诸如公共密码密钥的数据，这些密钥稍后用于确认便携式系统连接到相同的基本系统。 在一个实施例中，初始化过程还包括将从便携式系统发送的密码存储在基本系统内，随后在复位过程中需要该密码。

公开(公告)号：US06782349B2

公开(公告)日：2004-08-24

申请号：US10063608

申请日：2002-05-03

申请人： David Carroll Challener ,  Chad Lee Gettelfinger ,  Steven Dale Goodman ,  Hernando Ovies ,  Randall Scott Springfield ,  James Peter Ward

发明人： David Carroll Challener ,  Chad Lee Gettelfinger ,  Steven Dale Goodman ,  Hernando Ovies ,  Randall Scott Springfield ,  James Peter Ward

IPC分类号： G06F1900

CPC分类号： G06F21/6218 ,  G06F21/575

摘要： A method and system for updating a root of trust measurement (RTM) function in a personal computer is disclosed. The RTM function is located in a boot block of the personal computer. The method and system comprise initializing a request to update the RTM function and unlocking the boot block based on an authentication process. The method and system further includes updating the RTM function. Through the use of the method and system in accordance with the present invention, the RTM function in a personal computer is updated in a manner that ensures that the update is authentic.

摘要翻译： 公开了一种用于更新个人计算机中的信任测度（RTM）功能根的方法和系统。 RTM功能位于个人计算机的引导块中。 该方法和系统包括：初始化更新RTM功能的请求，并基于认证过程来解锁引导块。 该方法和系统还包括更新RTM功能。 通过使用根据本发明的方法和系统，个人计算机中的RTM功能以确保更新是真实的方式被更新。

公开(公告)号：US08504810B2

公开(公告)日：2013-08-06

申请号：US11861577

申请日：2007-09-26

申请人： David Carroll Challener ,  Daryl Cromer ,  Howard Locker ,  Randall Scott Springfield

发明人： David Carroll Challener ,  Daryl Cromer ,  Howard Locker ,  Randall Scott Springfield

IPC分类号： G06F9/00 ,  G06F15/177

CPC分类号： G06F21/305

摘要： A method computer usable medium and computer system circuitry are disclosed for starting or “booting up” a computer from a remote location using a remote command device such as a cellular telephone. The method and system includes a secure means for remotely storing and transmitting security passwords.

摘要翻译： 公开了一种方法计算机可用介质和计算机系统电路，用于使用诸如蜂窝电话的远程命令装置从远程位置启动或“启动”计算机。 该方法和系统包括用于远程存储和传输安全密码的安全装置。

公开(公告)号：US08140795B2

公开(公告)日：2012-03-20

申请号：US11068322

申请日：2005-02-28

申请人： David Carroll Challener ,  Rod David Waltermann

发明人： David Carroll Challener ,  Rod David Waltermann

IPC分类号： G06F12/00 ,  G06F13/00

CPC分类号： G06F3/0644 ,  G06F3/0622 ,  G06F3/0637 ,  G06F3/0676 ,  G06F21/805

摘要： The invention partitions the HDD into three areas, namely, no access, write-only, and the conventional read/write. Sensitive data (antivirus programs, back up data, etc.) is written into write-only areas, which thereafter become designated “no access” by appropriately changing their designation a data structure known as “logical block address” or “LBA”. Only users having approved passwords can change the status of a “no access” block back to “write-only” or “read/write”.

摘要翻译： 本发明将HDD分为三个区域，即无访问，只写和常规读/写。 将敏感数据（防病毒程序，备份数据等）写入只写区域，其后通过适当地改变它们的指定被称为“逻辑块地址”或“LBA”的数据结构，被指定为“无访问”。 只有具有认证密码的用户才能将“无访问”块的状态更改回“只读”或“读/写”。

公开(公告)号：US08089468B2

公开(公告)日：2012-01-03

申请号：US12192244

申请日：2008-08-15

申请人： Howard Locker ,  David Carroll Challener ,  Daryl Carvis Cromer ,  Qian Ying Wang

发明人： Howard Locker ,  David Carroll Challener ,  Daryl Carvis Cromer ,  Qian Ying Wang

IPC分类号： G06F3/02

CPC分类号： G06F3/0231 ,  G06F1/1626 ,  G06F1/1669 ,  G06F3/14 ,  G09G2340/0407 ,  G09G2340/0442 ,  G09G2340/14

摘要： An approach is provided that identifies when a wireless keyboard unit is connected to an information handling system that includes a display screen that is partially blocked when the keyboard is attached. A determination is made as to the size of the visible portion of the display screen. Items are displayed on the visible portion of the display screen. The approach refrains from displaying items on the blocked portion of the display screen. The user is able to move the wireless keyboard, the movement of the keyboard resulting in a changed size of the visible portion of the display screen. After the keyboard is repositioned, the visual items are re-displayed on the visible portion of the display screen so that the items fit in the changed size of the visible portion of the display screen.

摘要翻译： 提供了一种方法，其识别无线键盘单元何时连接到信息处理系统，该信息处理系统包括当附接键盘时部分阻止的显示屏幕。 确定显示屏的可见部分的尺寸。 项目显示在显示屏的可见部分。 该方法禁止在显示屏幕的屏蔽部分上显示项目。 用户能够移动无线键盘，键盘的移动导致显示屏幕的可见部分的尺寸改变。 在重新定位键盘之后，可视物品被重新显示在显示屏幕的可见部分上，使得这些物品符合显示屏幕的可见部分的改变的尺寸。