-
1.发明授权Method and system to support network port authentication from out-of-band firmware 失效从带外固件支持网络端口认证的方法和系统公开(公告)号：US07587750B2
公开(公告)日：2009-09-08
申请号：US10607678
申请日：2003-06-26
申请人： Vincent J. Zimmer , Rahul Khanna , Mallik Bulusu
发明人： Vincent J. Zimmer , Rahul Khanna , Mallik Bulusu
CPC分类号： H04L63/08 , G06F21/575 , G06F2221/2103 , H04L63/10
摘要： Methods and systems for performing network port authentication without requiring any operating system (OS) complicity are disclosed. Under one method, port authentication instructions are loaded into a protected memory space during a pre-boot of a supplicant system. In response to a port authentication request, the supplicant system's processor is switched to a hidden execution mode and executes the port authentication instructions to authenticate a network port hosted by an authenticator system to which the supplicant system is linked. One authentication process employs an authentication server that authenticates the supplicant via one of various authentication schemes, including an access challenge. Port authentication may also be performed via an out-of-band base management controller that operates independently from an operating system running on the supplicant.
摘要翻译： 公开了用于执行网络端口认证而不需要任何操作系统（OS）并发的方法和系统。 在一种方法下，在请求者系统的预引导期间，端口认证指令被加载到受保护的存储器空间中。 响应于端口认证请求，请求者系统的处理器被切换到隐藏的执行模式，并且执行端口认证指令以验证由请求方系统链接到的认证器系统托管的网络端口。 一个认证过程采用认证服务器，其通过各种认证方案之一来验证请求者，包括接入质询。 端口认证还可以通过独立于在请求方上运行的操作系统操作的带外基本管理控制器来执行。
-
2.发明授权Interleaved boot block to support multiple processor architectures and method of use 有权交叉引导块支持多种处理器架构和使用方法公开(公告)号：US07305544B2
公开(公告)日：2007-12-04
申请号：US11010167
申请日：2004-12-10
申请人： Mallik Bulusu , Vincent J. Zimmer , Rahul Khanna
发明人： Mallik Bulusu , Vincent J. Zimmer , Rahul Khanna
IPC分类号： G06F15/177 , G06F9/24
CPC分类号： G06F9/4401
摘要： A flash memory has an interleaved boot block compatible with multiple processor architectures. The interleaved boot block may include one boot block compatible with a first CPU architecture and another boot block compatible with a second CPU architecture. These two boot blocks may be combined in an interleaved manner in the flash memory so that during a boot process only one of the two boot blocks executes, although both are stored in the flash memory. By interleaving different boot blocks, a common socket computer system capable of supporting multiple processor architectures may be achieved without fully replacing an incompatible basic input/output system (BIOS). Further, the flash memory may contain an updatable portion in which any BIOS segments incompatible with a processor architecture may be updated via a recovery, or update, process.
摘要翻译： 闪存具有与多种处理器架构兼容的交错引导块。 交错的引导块可以包括与第一CPU架构兼容的一个引导块和与第二CPU架构兼容的另一启动块。 这两个引导块可以以交错方式组合在闪速存储器中，使得在引导过程中，两个引导块中只有一个执行，尽管两者都存储在闪速存储器中。 通过交织不同的引导块，可以在不完全替换不兼容的基本输入/输出系统（BIOS）的情况下实现能够支持多处理器体系结构的公共套接字计算机系统。 此外，闪存可以包含可更新部分，其中可以经由恢复或更新过程来更新与处理器架构不兼容的任何BIOS段。
-
公开(公告)号：US20130318577A1
公开(公告)日：2013-11-28
申请号：US13995511
申请日：2011-12-30
IPC分类号： H04L29/06
CPC分类号： H04L63/0876 , G06F21/00 , H04L63/08 , H04W12/06 , H04W12/08
摘要： An embodiment includes a secure and stable method for sending information across a compute continuum. For example, the method may include executing an application (e.g., video player) on a first node (e.g., tablet) with a desire to perform “context migration” to a second node (e.g., desktop). This may allow a user to watch a movie on the tablet, stop watching the movie, and then resume watching the movie from the desktop. To do so in a secure and stable manner, the first node may request security and performance credentials from the second node. If both credential sets satisfy thresholds, the first node may transfer content (e.g., encrypted copy of a movie) and state information (e.g., placeholder indicating where the movie was when context transfer began). The second node may then allow the user to resume his or her movie watching from the desktop. Other embodiments are described herein.
摘要翻译： 一个实施例包括用于在计算连续体上发送信息的安全且稳定的方法。 例如，该方法可以包括在第一节点（例如，平板电脑）上执行应用（例如，视频播放器），期望执行到第二节点（例如桌面）的“上下文迁移”。 这可能允许用户在平板电脑上观看电影，停止观看电影，然后从桌面恢复观看电影。 为了以安全和稳定的方式这样做，第一节点可以从第二节点请求安全性和性能证书。 如果两个凭证组都满足阈值，则第一节点可以传送内容（例如，电影的加密副本）和状态信息（例如，当上下文传送开始时，指示电影在哪里的占位符）。 然后，第二节点可以允许用户从桌面恢复他或她的电影观看。 本文描述了其它实施例。
-
公开(公告)号：US20120025953A1
公开(公告)日：2012-02-02
申请号：US12848654
申请日：2010-08-02
申请人： Robert C. Swanson , Vincent J. Zimmer , Mallik Bulusu , Michael A. Rothman , Palsamy Sakthikumar
发明人： Robert C. Swanson , Vincent J. Zimmer , Mallik Bulusu , Michael A. Rothman , Palsamy Sakthikumar
IPC分类号： G06K7/01
摘要： Using radio frequency identification (RFID) tags embedded in processors within a computing system to assist in system initialization processing. The RFID tags provide a separate communication path to other components of the computing system during initialization processing, apart from the system interconnect. When the computing system is powered up, each processor in the system may cause its RFID tag to broadcast data regarding the processor's interconnect location and initialization status. The RFID tags may be sensed by a RFID receiver in the Platform Control Hub (PCH) of the computing system, and each processor's interconnect location and initialization status data may be stored in selected registers within the PCH. When the BIOS executes during system initialization processing, the BIOS may access these PCH registers to obtain the processor's data. The interconnect location and initialization status data may be used by the BIOS to select the optimal routing table and to configure the virtual network within the computing system based at least in part on the optimal routing table and the RFID tag data and without the need for interrogating each processor individually over the system interconnect.
摘要翻译： 使用嵌入在计算系统内的处理器中的射频识别（RFID）标签来协助系统初始化处理。 除了系统互连，RFID标签在初始化处理期间提供到计算系统的其他组件的单独的通信路径。 当计算系统通电时，系统中的每个处理器可能使其RFID标签广播关于处理器的互连位置和初始化状态的数据。 RFID标签可以由计算系统的平台控制中心（PCH）中的RFID接收器感测，并且每个处理器的互连位置和初始化状态数据可以存储在PCH内的选定的寄存器中。 当BIOS在系统初始化处理期间执行时，BIOS可以访问这些PCH寄存器以获得处理器的数据。 BIOS可以使用互连位置和初始化状态数据来选择最佳路由表并且至少部分地基于最佳路由表和RFID标签数据来配置计算系统内的虚拟网络，并且不需要询问 每个处理器分别通过系统互连。
-
公开(公告)号：US20110307712A1
公开(公告)日：2011-12-15
申请号：US12814246
申请日：2010-06-11
申请人： Palsamy Sakthikumar , Robert C. Swanson , Vincent J. Zimmer , Michael A. Rothman , Mallik Bulusu
发明人： Palsamy Sakthikumar , Robert C. Swanson , Vincent J. Zimmer , Michael A. Rothman , Mallik Bulusu
IPC分类号： H04L9/00
CPC分类号： G06F21/572 , G06F2221/2141
摘要： A method, apparatus, system, and computer program product for multi-owner deployment of firmware images. The method includes obtaining a signed firmware image that comprises a first code module signed by a first code owner and a second code module signed by a second code owner. The method further includes obtaining an updated first code module comprising updated code for the first code module, verifying that the updated first code module is signed by the first code owner, and updating the signed firmware image with the updated first code module in response to verifying that the updated first code module is signed by the first code owner. The signed firmware image may further comprise an access control list that authorizes updates to the first code module by the first code owner and updates to the second code module by the second code owner.
摘要翻译： 一种用于多所有者部署固件映像的方法，设备，系统和计算机程序产品。 该方法包括获得包括由第一代码所有者签名的第一代码模块和由第二代码所有者签名的第二代码模块的签名固件映像。 所述方法还包括获得包括用于第一代码模块的更新代码的更新的第一代码模块，验证所更新的第一代码模块是否被第一代码所有者签名，以及响应于验证更新带有更新的第一代码模块的已签名固件映像 更新的第一代码模块由第一代码所有者签名。 签名的固件图像还可以包括访问控制列表，其授权第一代码所有者更新第一代码模块，并由第二代码所有者更新第二代码模块。
-
公开(公告)号：US07562230B2
公开(公告)日：2009-07-14
申请号：US10686410
申请日：2003-10-14
CPC分类号： G06F3/0623 , G06F21/80 , G06F2221/2143 , G06F2221/2153
摘要： In one embodiment, a method is provided that may include encrypting, based least in part upon at least one key, one or more respective portions of input data to generate one or more respective portions of output data to be stored in one or more locations in storage. The method of this embodiment also may include generating, based at least in part upon the one or more respective portions of the output data, check data to be stored in the storage, and/or selecting the one or more locations in the storage so as to permit the one or more respective portions of the output data to be distributed among two or more storage devices comprised in the storage. Many modifications, variations, and alternatives are possible without departing from this embodiment.
摘要翻译： 在一个实施例中，提供了一种方法，其可以包括至少部分地基于至少一个密钥加密输入数据的一个或多个相应部分，以生成要存储在一个或多个位置中的输出数据的一个或多个相应部分 存储。 该实施例的方法还可以包括至少部分地基于输出数据的一个或多个相应部分生成要存储在存储器中的检查数据和/或选择存储器中的一个或多个位置，以便 以允许输出数据的一个或多个相应部分在包括在存储器中的两个或更多个存储设备之间分配。 在不脱离本实施例的情况下，可以进行许多修改，变型和替换。
-
公开(公告)号：US20080244250A1
公开(公告)日：2008-10-02
申请号：US11731525
申请日：2007-03-30
IPC分类号： G06F9/00
CPC分类号： G06F9/4403 , G06F9/4401
摘要： In some embodiments, the invention involves speeding boot up of a platform by initializing the video card early on in the boot process. In an embodiment, processor cache memory is to be used as cache as RAM (CAR). Video graphics adapter (VGA) card initialization uses the CAR instead of system RAM to perform initialization. A portion of the firmware code, interrupt vector tables and handlers are mirrored in the CAR, from flash memory to mimic the behavior of system RAM during the video initialization. VGA initialization may occur before system RAM has initialized to enable early visual feedback to a user. Other embodiments are described and claimed.
摘要翻译： 在一些实施例中，本发明涉及通过在启动过程中提前初始化视频卡来加速平台的启动。 在一个实施例中，将处理器高速缓冲存储器用作高速缓存作为RAM（CAR）。 视频图形适配器（VGA）卡初始化使用CAR代替系统RAM执行初始化。 固件代码，中断向量表和处理程序的一部分在CAR中从闪存镜像到模拟视频初始化期间系统RAM的行为。 在系统RAM初始化之前可能会发生VGA初始化，以便能够为用户提供早期的视觉反馈。 描述和要求保护其他实施例。
-
公开(公告)号：US07278006B2
公开(公告)日：2007-10-02
申请号：US11027715
申请日：2004-12-30
IPC分类号： G06F12/00
CPC分类号： G06F12/023 , G06F2212/1044
摘要： Reducing memory fragmentation. Memory is allocated during a preboot phase of a computer system, wherein the memory is allocated based on a plurality of memory types. Fragmentation of memory is determined, wherein a fragment includes a contiguous block of memory of the same type. At least a portion of memory allocated to a firmware module is coalesced based on the plurality of memory types if the fragmentation is greater than a threshold. An operating system is booted by the computer system.
摘要翻译： 减少内存碎片。 在计算机系统的预引导阶段期间分配存储器，其中基于多个存储器类型来分配存储器。 确定存储器的碎片，其中片段包括相同类型的连续的存储块。 如果碎片大于阈值，则分配给固件模块的至少一部分存储器基于多个存储器类型进行合并。 操作系统由计算机系统启动。
-
9.发明授权System and method for saving and/or restoring system state information over a network 有权通过网络保存和/或恢复系统状态信息的系统和方法公开(公告)号：US07174451B2
公开(公告)日：2007-02-06
申请号：US10404508
申请日：2003-03-31
IPC分类号： G06F1/30
CPC分类号： G06F9/4416 , G06F9/4418
摘要： A system and method to resume execution of a client system from a saved system state without executing a boot-up process. A data storage unit and the client system having volatile system memory are coupled to a network. Data stored on the data storage unit is received via the network and loaded into the volatile system memory of the client system. The data contains information for the client system to resume execution from the saved system state without executing a boot-up process after a power-off state. The client system is then capable of resuming operation from the saved system state.
摘要翻译： 一种从保存的系统状态恢复客户端系统的执行而不执行引导过程的系统和方法。 具有易失性系统存储器的数据存储单元和客户端系统耦合到网络。 存储在数据存储单元上的数据经由网络接收并被加载到客户端系统的易失性系统存储器中。 数据包含客户端系统从保存的系统状态恢复执行的信息，而不在电源关闭状态后执行启动过程。 然后，客户端系统能够从保存的系统状态恢复操作。
-
公开(公告)号：US09210148B2
公开(公告)日：2015-12-08
申请号：US13995511
申请日：2011-12-30
CPC分类号： H04L63/0876 , G06F21/00 , H04L63/08 , H04W12/06 , H04W12/08
摘要： An embodiment includes a secure and stable method for sending information across a compute continuum. For example, the method may include executing an application (e.g., video player) on a first node (e.g., tablet) with a desire to perform “context migration” to a second node (e.g., desktop). This may allow a user to watch a movie on the tablet, stop watching the movie, and then resume watching the movie from the desktop. To do so in a secure and stable manner, the first node may request security and performance credentials from the second node. If both credential sets satisfy thresholds, the first node may transfer content (e.g., encrypted copy of a movie) and state information (e.g., placeholder indicating where the movie was when context transfer began). The second node may then allow the user to resume his or her movie watching from the desktop. Other embodiments are described herein.
摘要翻译： 一个实施例包括用于在计算连续体上发送信息的安全且稳定的方法。 例如，该方法可以包括在第一节点（例如，平板电脑）上执行应用（例如，视频播放器），期望执行到第二节点（例如桌面）的“上下文迁移”。 这可能允许用户在平板电脑上观看电影，停止观看电影，然后从桌面恢复观看电影。 为了以安全和稳定的方式这样做，第一节点可以从第二节点请求安全性和性能凭证。 如果两个凭证组都满足阈值，则第一节点可以传送内容（例如，电影的加密副本）和状态信息（例如，当上下文传送开始时，指示电影在哪里的占位符）。 然后，第二节点可以允许用户从桌面恢复他或她的电影观看。 本文描述了其它实施例。
-
-
-
-
-
-
-
-
-
搜索结果
537 条记录 (耗时 0.031 秒)
