公开(公告)号：US11947675B2

公开(公告)日：2024-04-02

申请号：US17052970

申请日：2019-02-11

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Jeffrey Kevin Jeansonne ,  Rosilet Retnamoni Braduke

IPC: G06F21/57

CPC classification number: G06F21/572 ,  G06F21/57 ,  G06F2221/034

Abstract: An example computing device incudes a main processor, a management firmware subsystem, and a controller to control operation of the management firmware subsystem. The controller is separate from a main processor. A memory stores subsystem data that is useable by the controller. The computing device further includes a set of instructions that determines a manufacturing mode of the computing device. The manufacturing mode is enabled when the computing device is under manufacture or maintenance. The manufacturing mode is disabled when the computing device is under normal operation. The set of instructions further determines a manufacturing state of the subsystem data. The manufacturing state indicates whether the subsystem data is complete. In response to determining that the manufacturing mode is disabled and that the manufacturing state of the subsystem data is incomplete, the set of instructions initiates a restoration of the subsystem data from a backup of the subsystem data.

公开(公告)号：US11429722B2

公开(公告)日：2022-08-30

申请号：US16479737

申请日：2018-01-29

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Jeffrey Kevin Jeansonne ,  Rosilet Retnamoni Braduke ,  Joshua Serratelli Schiffman ,  David Plaquin

IPC: G06F21/57 ,  G06F21/55 ,  G06F21/60

Abstract: An example system with a pre-OS (Operating System) environment, the pre-OS environment includes a private memory that is isolated from a processor of the system. The pre-OS environment also includes an embedded controller (EC) coupled to the private memory, where the EC includes an embedded key. The EC is to execute instructions to generate an encryption key based on the embedded key; generate a signature key; obtain data; produce an integrity-verification tag based on a hash of the obtained data, where the hash employs the signature key; encrypt the obtained data based on the encryption key; store the encrypted data in the private memory; and store the integrity-verification tag in the private memory in association with the stored encrypted data.

公开(公告)号：US20240104174A1

公开(公告)日：2024-03-28

申请号：US18264630

申请日：2021-03-10

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Rosilet Retnamoni Braduke ,  Wei Ze Liu ,  Rajesh A. Shah

IPC: G06F21/31 ,  G06F21/57

CPC classification number: G06F21/31 ,  G06F21/57

Abstract: Examples include a CPU coupled to a controller, the CPU to receive a user credential usable by the login executable code to perform device login authentication, determine a first hash value based on the login executable code, determine a second hash value based on the user credential, obtain a third hash value and a fourth hash value from the controller, wherein the third hash value is a reference hash value for the login executable code, and wherein the fourth hash value is a reference hash value for the user credential, compare the first hash value to the third hash value, compare the second hash value to the fourth hash value, execute an OS login service using the login executable code responsive to the first hash value matching the third hash value and the second hash value matching the fourth hash value.

公开(公告)号：US20230418590A1

公开(公告)日：2023-12-28

申请号：US17846752

申请日：2022-06-22

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Mason Andrew Gunyuzlu ,  Rosilet Retnamoni Braduke ,  Jeffrey Kevin Jeansonne ,  James Luke Mondshine

IPC: G06F8/654 ,  G06F21/57 ,  H04L9/32

CPC classification number: G06F8/654 ,  G06F21/572 ,  H04L9/3239 ,  G06F2221/033

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a basic input/output system (BIOS). In some examples, the electronic device includes a controller to unlock a region of the flash memory based on a message from the BIOS. In some examples, the electronic device includes an operating system (OS). In some examples, an application in the OS updates instructions in the region when the OS is loaded and the electronic device is in an awake state. In some examples, the controller locks the region after the update.

公开(公告)号：US11599426B2

公开(公告)日：2023-03-07

申请号：US17052411

申请日：2019-02-11

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Jeffrey Kevin Jeansonne ,  Rosilet Retnamoni Braduke ,  Wei Ze Liu

IPC: G06F11/14 ,  G06F9/4401 ,  G06F21/44

Abstract: An example computing device includes a controller to control operation of a firmware subsystem of the computing device. The controller is separate from a main processor of the computing device. A memory stores subsystem data that is useable by the controller. The subsystem data includes recovery information executable by the controller to initiate recovery of the subsystem. The computing device further includes recovery coordination instructions. The recovery coordination instructions determine integrity of the recovery information as stored on the memory and. In response to determining that the recovery information lacks integrity, the recovery coordination instructions initiate recovery of the firmware subsystem using a backup of the recovery information and perform recovery of the firmware subsystem using an update to the firmware subsystem.

公开(公告)号：US20210359854A1

公开(公告)日：2021-11-18

申请号：US17052367

申请日：2019-02-01

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Rosilet Retnamoni Braduke ,  Baraneedharan Anbazhagan ,  Christopher H. Stewart

IPC: H04L9/08 ,  H04L9/32

Abstract: In some examples, a device includes a memory, a processor, and a controller separate from the processor to derive a security credential based on information comprising a key accessible by the controller. The controller communicates the derived security credential in a secure manner to a program code executable on the processor, and uses the derived security credential to protect data stored in the memory against unauthorized access.

公开(公告)号：US12130926B2

公开(公告)日：2024-10-29

申请号：US18041400

申请日：2020-10-02

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Wei Ze Liu ,  Rosilet Retnamoni Braduke ,  ChengKai Yeh

IPC: G06F21/00 ,  G06F21/57

CPC classification number: G06F21/575

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a memory and a controller. In some examples, the controller is to enable a basic input/output system (BIOS) safe mode in response to an authentication procedure. In some examples, the controller is to provide access to back-up variable service region in the memory storing default BIOS data. In some examples, the controller is to start a modified BIOS based on the default BIOS data in response to enablement of the BIOS safe mode.

公开(公告)号：US20230229351A1

公开(公告)日：2023-07-20

申请号：US17576251

申请日：2022-01-14

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Wei Ze Liu ,  Khoa Dang Huynh ,  Rosilet Retnamoni Braduke

IPC: G06F3/06

CPC classification number: G06F3/0659 ,  G06F3/0656 ,  G06F3/0632 ,  G06F3/0604 ,  G06F3/0679

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a host memory to store an access control structure to access the flash memory. In some examples, the electronic device includes a first circuitry coupled to the host memory and the flash memory. In some examples, the first circuitry is to read the access control structure in the host memory to determine when to access the flash memory.

公开(公告)号：US11500978B2

公开(公告)日：2022-11-15

申请号：US16982198

申请日：2018-07-31

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Wei Ze Liu ,  Rosilet Retnamoni Braduke ,  Lan Wang

IPC: G06F21/46

Abstract: Examples associated with password updates are described. One example method includes receiving a request to modify an administrator password in a basic input/output system (BIOS). The administrator password may be updated. A first password tied to the administrator password may be identified. A first updated password is generated by concatenating a character string to the administrator password. The character string may be generated based on a password policy for the first password. The first password may then be updated to the first updated password.

公开(公告)号：US20210357499A1

公开(公告)日：2021-11-18

申请号：US17052970

申请日：2019-02-11

Applicant: Hewlett-Packard Development Company, L.P.

Inventor： Jeffrey Kevin Jeansonne ,  Rosilet Retnamoni Braduke

IPC: G06F21/55 ,  G06F21/57 ,  G06F3/06

Abstract: An example computing device incudes a main processor, a management firmware subsystem, and a controller to control operation of the management firmware subsystem. The controller is separate from a main processor. A memory stores subsystem data that is useable by the controller. The computing device further includes a set of instructions that determines a manufacturing mode of the computing device. The manufacturing mode is enabled when the computing device is under manufacture or maintenance. The manufacturing mode is disabled when the computing device is under normal operation. The set of instructions further determines a manufacturing state of the subsystem data. The manufacturing state indicates whether the subsystem data is complete. In response to determining that the manufacturing mode is disabled and that the manufacturing state of the subsystem data is incomplete, the set of instructions initiates a restoration of the subsystem data from a backup of the subsystem data.