178 results about "Booting" patented technology

Systems and methods for providing a secure motherboard replacement are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions that, upon execution, cause the IHS to, when a replacement motherboard is booted for the first time, attach to a device that stores one or more BIOS entitlements associated with the IHS, configure a BIOS on the replacement motherboard with the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

Systems and methods for providing a Basic Input / Output System (BIOS) password retention system that may be used for motherboard replacement are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted on the HIS, obtain An encrypted BIOS password associated with a previous motherboard that has been removed from the IHS, configure the BIOS password on the replacement motherboard without providing a clear text version of the BIOS pw, and complete booting of the IHS into a normal mode of operation.

The present subject matter relates generally to a system and a method for self- evaluation and booting system (100) for a vehicle (100a). The present invention provides a self-evaluation and booting system (100) that checks the status of one or more electronics and electrical components of the vehicle (100a), each time the vehicle (100a) is switched ON. The system and the method as per the present invention does a self-evaluation and booting of the one or more electronics and electrical components to find a fault as well as resolve the fault by one or more pre-defined action. The system and the method as per the present invention further controls a degree of immobilization based on category of each of one or more unresolved faults from one or more identified faults.

The invention discloses a control flow verification method for booting firmware, electronic equipment, a storage medium and a product, and relates to the technical field of firmware security, the method comprises the following steps: before the booting firmware is booted, performing symmetric signature on a jump target address list of a control flow by using a derived symmetric key, and in the current execution stage of the booting firmware, performing symmetric signature on the jump target address list of the control flow; the symmetric signature is verified by using the symmetric key, and calling in the current execution stage is realized based on the jump target address if verification is passed; and after the execution of the current execution stage is finished, obtaining the descriptor of the next execution stage, carrying out asymmetric signature and verification on the descriptor, and skipping the control flow of the current execution stage to the next execution stage after the verification is passed. The technical problems that control flow hijacking cannot be defended in related technologies, and the dynamic integrity of indirect calling and cross-stage jump targets in the multi-stage starting process is difficult to guarantee are solved, and the technical effect of improving the firmware defense capability is achieved.

Systems and methods for thermal testing in a firmware framework. In some embodiments, an Information Handling System (IHS) may include a controller, where the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where the orchestrator is configured to trigger thermal data collection by one or more selected nodes prior to the booting of any Operating System (OS) of the IHS.

Systems and methods for providing a bios entitlement retention system that may be used for motherboard replacement using system devices are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted for the first time, attach to a system device that stores one or more Basic Input / Output System (BIOS) entitlements associated with the IHS, configure a BIOS on the replacement motherboard using the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

Systems and methods include an Information Handling System (IHS) that is adapted to utilize runtime hotkeys in the selection of boot modes that are supported by the IHS. The IHS is powered and a boot sequence is initiated. Further booting of the IHS is halted upon detecting a selection of a boot device during the boot sequence. One or more hot keys are identified for use in booting the selected boot device. The selection of a hot key that is supported by the boot device is detected. Booting of the IHS is resumed by booting the selected boot device according to a boot mode corresponding to the selected hot keys.

Systems and methods for providing a BIOS entitlement retention system that may be used for motherboard replacement using a non-volatile storage system. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted on the HIS: obtain a plurality of BIOS entitlements from a non-volatile storage system of the HIS, configure a BIOS on the replacement motherboard using the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

The application relates to the technical field of blockchains, and particularly discloses an application sensitive data communication method based on a blockchain, which comprises identity registration and trusted booting, strategy on-chain and commitment, session negotiation and encryption encapsulation, controlled unsealing and verifiable calculation, on-chain verification and auditing, and revocation and emergency. The scheme realizes minimum exposure of application sensitive data through the blockchain technology; the visible range of data is controlled through verifiable access strategies and short-term session keys; key operations are fixed in the blockchain through threshold cryptography and trusted execution environments, so that the operations are verifiable; on-chain and off-chain cooperation and batch processing aggregation are adopted, so that the communication and calculation burdens are reduced.

One or more programs of a microcontroller are updated using an update method including individually updating different images of the one or more programs. The updating of each image includes: selecting of a program to be executed, from among several programs, on booting of the microcontroller; selecting one or more memory slots of the one or more programs into which to load an image used for the update; and updating version and image dependency data of the one or more programs contained in an update program.

Disclosed are an electronic device for restricting access to development functions and an operating method thereof. According to the present invention, the electronic device comprises a memory storing instructions and one or more processors for executing the instructions. When the one or more processors individually or collectively execute the instructions, the instructions cause the electronic device to: determine whether a booting command is for entering a developer mode when receiving the booting command for the electronic device from a user; receive, from a host device for using the developer mode, a first function number for any one of development functions provided by the developer mode when the booting command is for entering the developer mode; generate first information on the basis of the first function number; transmit the first information to the host device; receive, in response to the transmission of the first information to the host device, second information generated, on the basis of the first information, by a server authenticating the user; and determine whether to enter the developer mode on the basis of the first information and the second information.

The invention provides a starting method and device, a storage medium and a computer program product. The method comprises the following steps: before an encryption component of the confidential virtual machine is started, calling an authentication component to execute authentication verification, after the authentication verification succeeds, obtaining a secret key of the encryption component from trusted equipment, and / or decrypting the encryption component based on the secret key, so as to continue to start the confidential virtual machine; wherein the integration operation of the authentication component is executed before the encryption component is started.

The invention relates to a non-transient computer readable storage medium, an electronic device and a protection method thereof. The electronic device comprises a housing, a disassembly detector, a security chip and a controller. The disassembly detector is disposed in the internal space of the housing and is configured to generate a warning signal based on the disassembly of the housing. The security chip is configured to store verification data, the verification data including a first code in an initial state. The security chip is communicatively connected to the disassembly detector and is configured to change the content of the verification data based on receiving the warning signal. The controller is communicatively connected to the security chip. When the electronic device performs a startup program, the controller is configured to receive the verification data and confirm whether the verification data conforms to the first code. And if the verification data is consistent with the first code, the controller allows the startup program to continue to proceed, and otherwise, the controller drives the startup program to be paused or terminated. By means of the configuration, the electronic device can detect that the machine shell is disassembled and forbids or limits starting up, and data stored in the electronic device are prevented from being stolen.

According to embodiments of the present disclosure, booting may be performed using different firmware based on the usage environment information of a storage device, and control may be performed by differently setting a processing delay time for the host device's commands and the operation priority for the reliability or stability of the storage device, thereby maintaining the operational stability of the storage device and preventing or minimizing the degradation of operating performance depending on the usage environment.

A first hypervisor running on a first processor cluster is provided. During operation, the first hypervisor can determine a first set of processing nodes and a first memory unit of the first processor cluster in response to the booting up of a first Basic Input / Output System (BIOS) of the first processor cluster. The first hypervisor can discover a second hypervisor running on a second processor cluster comprising a second set of processing nodes and a second memory unit. The first hypervisor can operate, with the second hypervisor, a distributed system comprising the first and second sets of processing nodes and the first and second memory units. The first hypervisor can then operate, with the second hypervisor, a global virtual machine on the distributed system. The virtual memory space of the global virtual machine can be mapped to respective memory spaces of the first and second processor clusters.

The application relates to a novel LinuxBoot starting and booting method and system based on a RISC-V server CPU, which comprises the following steps: firstly, ZSBL is executed, and FSBL is loaded and jumped to. Then, the FSBL loads a DTB, OpenSBI and LinuxBoot into a memory; the OpenSBI firstly executes underlying initialization, then executes platform early initialization, related hardware device initialization and platform final initialization, and finally executes secondary boot to jump to a LinuxBoot kernel; the LinuxBoot kernel loads u-root as initramfs; the LinuxBoot kernel loads a real Linux kernel image and a device tree, and sets hardware configuration and parameters, so that the Linux kernel is started. The application improves the efficiency and flexibility of system starting; and realizes fast, reliable and flexible starting of a server system.

This application processor may be configured to identify the type of firmware used by a communication processor before or after booting, on the basis of identifying a booting command of the communication processor. Here, the type of firmware may be identified as any one of process firmware for a function test and / or calibration of the communication processor and user firmware for performing a function of the communication processor. The application processor may be configured to store the identified type of firmware in an area of a memory of an electronic device, shared by the communication processor and the application processor. The application processor may be configured to provide the booting command to the communication processor.

An electronic device includes a processor and one or more secure elements. The processor executes a first high-level operating system and a first application. The one or more secure elements execute a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and execute a second low-level operating system to execute a second application and to perform wireless communication with the first application. At each booting of the electronic device, the first low-level operating system performs a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system. In response to a request from the first application to the second application, the second low-level operating system requests a result of the verification from the first low-level operating system, and transmits the result to the second application.

The application relates to the technical field of mainboards, in particular to an industrial mainboard security starting method based on a hardware root of trust, which comprises the following steps: after the industrial mainboard is powered on and reset, a security control domain runs prior to a business processing domain, and a main processor is kept waiting for starting; the security control domain reads hardware root anchor credentials and an initial boot program, and sequentially performs integrity measurement and signature verification on the initial boot program and a later-stage boot program; after the verification passes, running key materials are derived based on a random seed, device private credentials and a later-stage boot program digest, a running private key is written into a restricted key area, and a running public key is written into a public storage area; when a boot update package exists, a firmware public key certificate, a boot image signature and a replacement identifier are verified, a boot image is loaded after the certificate is valid and the signature passes, starting proof information is generated, an access path is closed and the main processor is released; any verification failure enters a fault processing flow.

A memory controller includes a buffer, a prefetch controller, and a boot controller. The buffer stores workload information including a history of an expected I / O request expected to be received from a host during booting operation. The prefetch controller is configured to, before a target I / O request is received from the host after start of booting, read expected data corresponding to the expected I / O request from memory devices based on workload information, and store the expected data in the buffer. The boot controller updates the workload information based on the target I / O request depending on whether target data corresponding to the target I / O request is included in the expected data, and stores updated workload information in an area in which data is readable with a minimum number of accesses from a plurality of the memory devices.

Encryption system with an application-specific integrated circuit (ASIC) which has a permanent memory for the non-volatile storage of the operating system (OS) of a processor and software modules for encrypting the data memory of the processor and which has a hardware-implemented encryption algorithm, characterized in that a security module (SM) is integrated in the ASIC for autonomous booting of the operating system (OS), consisting of: - a symmetric cryptosystem (SK) for processing symmetric keys, - an asymmetric cryptosystem (AK) for the use of public and private keys, - a module for generating cryptographic hash functions (KH), - a module for the secure exchange of keys using hardware-implemented key exchange protocols (SP), - a key storage (SS) for the secure storage of root keys (WS), which are protected by appropriate measures in the physical structures of the ASIC and - a key management system (SMS) for the secure introduction of authenticated-encrypted key packets, and that the security module (SM) communicates with a central processing unit (CPU) via a communication interface (CS1), and that the central processing unit (CPU) communicates with at least one internal storage (IS) and one external storage (ES), as well as with at least one internal persistent storage (IP) and one external persistent storage (EP), such that the operating system (OS) is loaded by a second-stage bootloader (SSB) stored in the external persistent storage (EP), and then the operating system (OS) loads the applications, the second-stage bootloader (SSB) itself being decrypted and loaded by a first-stage bootloader (FSB) stored in the internal persistent storage (IP), and a public key (PUBOS) to verify the operating system (OS).and a symmetric key (KOS) to decrypt the operating system (OS), and that the contents of the internal memory (IS) and the external memory (ES) are decrypted by the security module (SM) during read accesses by the central management unit (CMU) or other modules integrated on the ASIC, and re-encrypted during write accesses by the same.

Various example embodiments are directed to techniques for a booting process of a memory device using a Decision Feedback Equalizer (DFE) training technique. A method may include predicting one or more DFE tap values based on a plurality of configuration parameters of the memory device, determining an accuracy level of the predicted one or more DFE tap values based on a signal processed using the predicted one or more DFE tap values, and in response to the accuracy level of the predicted one or more DFE tap values being above an accuracy threshold value, setting a value of a prediction flag as TRUE, validating a plurality of eye margins of the signal processed using the predicted DFE tap values, storing the predicted DFE tap values based on results of the validation, and performing a subsequent boot process of the memory device using the predicted DFE tap values.

The technology relates to a computer-implemented method for automated deployment of at least one computing infrastructure comprising at least one un-provisioned server and at least one switch. The method comprises accessing a computer-readable medium comprising instructions which, upon being operated by a processor, causes execution of: a server management module, and a key management module; wherein, during each booting of the at least one server, the server management module compares a series of at least one signature, to signatures stored in a signatures file, and depending on the result of the comparison, the server management module validates the loading of the operating system if all the signatures of the series are listed in the signatures file, such that only the totally signed operating system is loaded during the booting of the at least one server.

A booting process on a client device in a client / server network, in which a custom bootloader is installed in place of a standard bootloader for an operating system of the client device. The method includes receiving a signal instructing the client device to boot; writing UEFI variable(s) from the signal on the device; evaluating the UEFI variables. When the UEFI variables do not identify a security flag, the custom bootloader performs a direct boot to the operating system. When the UEFI variables identify a security flag, the custom bootloader executes one of a programmed bootloader process to determine whether: a correct boot sequence involves a separate bootable image present on the client device; or to connect to the server and receive a correct playbook for execution. The method also includes executing one of the separate bootable image or the correct playbook to boot the operating system.

Techniques for secure booting of Unified Extensible Firmware Interface (UEFI)-compliant devices are described. In one example, execution of a driver associated with a hardware component of a computing device can be detected during boot of the computing device. Based on the detection, a first driver hash of the UEFI's system table can be calculated, where the system table is a data structure that stores configuration details of the computing device and UEFI services. Thereafter, based on detecting completion of the driver's execution, a second driver hash of the system table can be calculated. The first driver hash and the second driver hash can then be compared to determine tampering with the UEFI's system table.

Provided are a processing device and a method for secure booting thereof, in which the processing device includes a security core that operates a Root of Trust and sequentially performs an integrity check on first firmware and second firmware through the Root of Trust, a main core that sequentially operates the first firmware and the second firmware, a non-volatile memory storing the first firmware and the second firmware, and a first volatile memory that loads the first firmware and the second firmware from a main core domain of the main core and operates the loaded firmware with the main core.

A method for programming an integrated circuit comprising one or more microprocessors, at least one random-access memory, at least one read-only memory and at least one non-volatile rewritable memory, at least one high-speed bus and one bus, and functional components, wherein a step of recording, in the non-volatile rewritable memory, a set of executable computer codes is carried out, the method comprising booting steps according to an execution mode or according to a programming mode comprising: ⋅an original step of recording, in a non-erasable mass memory of the integrated circuit during the manufacture of the integrated circuit: ⋅a set of static resources comprising the digital development tools forming an assisted development environment executable by a browser and the technical documentation relating to the programming of the integrated circuit; ⋅and a boot code according to a programming mode; ⋅wherein the booting step according to the programming mode consists in controlling: ⋅querying the state of the hardware and software dynamic resources of the integrated circuit and a step of recording, in a local rewritable memory, the state for each of the hardware and software resources; ⋅activating the transfer of the static resources and the dynamic resources to a connected external computer device.

This application provides an intelligent boot device and method for a computer system, relating to the field of computer technology. The device includes: a baseboard management controller with an out-of-band monitoring module that monitors the boot process and generates a boot status identifier; a boot control unit that reads the identifier; a multi-level redundant storage partition including primary and backup boot path partitions and an independent repair partition; and a boot control unit that selects a boot device from the primary, backup, or repair partition based on the identifier. This application solves the technical problem of traditional server single-path boot mode, where damage to critical boot components leads to system boot failure, and the recovery process relies on manual intervention. It achieves a three-level fault-tolerance mechanism by constructing primary and backup dual paths and an independent repair partition, and utilizes out-of-band monitoring to achieve automatic fault detection and intelligent boot path switching, thereby improving the reliability and automation of server system booting and reducing business offline time.

The invention discloses a startup method and electronic equipment, relates to the technical field of terminals, and can detect abnormal power supply of a central processing unit (CPU) core group, make adaptive adjustment, and start the electronic equipment based on the CPU core group with normal power supply, so that the electronic equipment is started to display a desktop. The problem that the electronic equipment cannot be started up due to abnormal power supply of the CPU core group in the starting-up process is solved, and the electronic equipment can be normally started up. The method is applied to the electronic equipment, the electronic equipment comprises at least one CPU core group, and each CPU core group comprises one or more CPU cores. In the startup process of the electronic equipment, under the condition that it is detected that power supply of the first CPU core group is abnormal and power supply of the second CPU core group is normal, the electronic equipment is started based on the second CPU core group; and then, after the electronic equipment is started, a desktop is displayed.