227 results about "Booting" patented technology

In an example, a computing device is described. The computing device comprises a component to perform a crypto-graphic operation and store an indication of a measured state of the computing device obtained during booting of the computing device. The computing device further comprises a processor to obtain a secret for use by the component, install an administration credential in a firmware of the computing device and transmit the secret to the component via the firmware.

An example method may include booting, by a host computer system, an operating system (OS) kernel; locking, by a security service running on the host computer system, a plurality of physical pages in a memory of the host computer system, wherein the plurality of physical pages is designated for use by the OS kernel, wherein the plurality of physical pages, upon locking, are unmodifiable by the OS kernel, and wherein the security service is associated with a privilege level higher than a privilege level of the OS kernel; performing, by the security service, a cryptographic measurement on the plurality of the physical pages; and generating, by the host computer system, a measurement report based on the cryptographic measurement.

Example methods and apparatus are disclosed herein to mitigate firmware malware, an example apparatus comprising at least one memory; instructions; and at least one processor to execute the instructions to cause the at least one processor to at least: detect presence of firmware malware, the firmware malware to be executed prior to booting of an operating system of a computing device; attempt remediation of the firmware malware; and in response to a failure to remediate the firmware malware, cause display of a notification of the presence of the firmware malware.

An example computing device includes a storage device, a random-access memory, a read only memory, and a processor. The processor is to determine, during a booting process, whether an operating system being booted is a primary operating system, in response to a determination that the operating system being booted is different from the primary operating system, determine whether the operating system being booted satisfies a first criteria, and, in response to a determination that the operating system being booted fails to satisfy the first criteria, disable software persistence.

Systems and methods for providing a secure motherboard replacement are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions that, upon execution, cause the IHS to, when a replacement motherboard is booted for the first time, attach to a device that stores one or more BIOS entitlements associated with the IHS, configure a BIOS on the replacement motherboard with the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

Systems and methods for providing a Basic Input / Output System (BIOS) password retention system that may be used for motherboard replacement are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted on the HIS, obtain An encrypted BIOS password associated with a previous motherboard that has been removed from the IHS, configure the BIOS password on the replacement motherboard without providing a clear text version of the BIOS pw, and complete booting of the IHS into a normal mode of operation.

The present subject matter relates generally to a system and a method for self- evaluation and booting system (100) for a vehicle (100a). The present invention provides a self-evaluation and booting system (100) that checks the status of one or more electronics and electrical components of the vehicle (100a), each time the vehicle (100a) is switched ON. The system and the method as per the present invention does a self-evaluation and booting of the one or more electronics and electrical components to find a fault as well as resolve the fault by one or more pre-defined action. The system and the method as per the present invention further controls a degree of immobilization based on category of each of one or more unresolved faults from one or more identified faults.

The invention discloses a control flow verification method for booting firmware, electronic equipment, a storage medium and a product, and relates to the technical field of firmware security, the method comprises the following steps: before the booting firmware is booted, performing symmetric signature on a jump target address list of a control flow by using a derived symmetric key, and in the current execution stage of the booting firmware, performing symmetric signature on the jump target address list of the control flow; the symmetric signature is verified by using the symmetric key, and calling in the current execution stage is realized based on the jump target address if verification is passed; and after the execution of the current execution stage is finished, obtaining the descriptor of the next execution stage, carrying out asymmetric signature and verification on the descriptor, and skipping the control flow of the current execution stage to the next execution stage after the verification is passed. The technical problems that control flow hijacking cannot be defended in related technologies, and the dynamic integrity of indirect calling and cross-stage jump targets in the multi-stage starting process is difficult to guarantee are solved, and the technical effect of improving the firmware defense capability is achieved.

Systems and methods for thermal testing in a firmware framework. In some embodiments, an Information Handling System (IHS) may include a controller, where the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where the orchestrator is configured to trigger thermal data collection by one or more selected nodes prior to the booting of any Operating System (OS) of the IHS.

Systems and methods for handling accident data in an Information Handling System (IHS) unable to boot are described. In some embodiments, an Information Handling System (IHS) may include an Embedded Controller (EC), and a memory coupled to, or integrated into, the EC, where the memory comprises program instructions that, upon execution by the EC, cause the EC to determine that a booting process is incomplete and, at least in part in response to the determination, store accident data in a Non-Volatile Memory (NVM).

Systems and methods for providing a bios entitlement retention system that may be used for motherboard replacement using system devices are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted for the first time, attach to a system device that stores one or more Basic Input / Output System (BIOS) entitlements associated with the IHS, configure a BIOS on the replacement motherboard using the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

Systems and methods include an Information Handling System (IHS) that is adapted to utilize runtime hotkeys in the selection of boot modes that are supported by the IHS. The IHS is powered and a boot sequence is initiated. Further booting of the IHS is halted upon detecting a selection of a boot device during the boot sequence. One or more hot keys are identified for use in booting the selected boot device. The selection of a hot key that is supported by the boot device is detected. Booting of the IHS is resumed by booting the selected boot device according to a boot mode corresponding to the selected hot keys.

Systems and methods for providing a BIOS entitlement retention system that may be used for motherboard replacement using a non-volatile storage system. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted on the HIS: obtain a plurality of BIOS entitlements from a non-volatile storage system of the HIS, configure a BIOS on the replacement motherboard using the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

The application relates to the technical field of blockchains, and particularly discloses an application sensitive data communication method based on a blockchain, which comprises identity registration and trusted booting, strategy on-chain and commitment, session negotiation and encryption encapsulation, controlled unsealing and verifiable calculation, on-chain verification and auditing, and revocation and emergency. The scheme realizes minimum exposure of application sensitive data through the blockchain technology; the visible range of data is controlled through verifiable access strategies and short-term session keys; key operations are fixed in the blockchain through threshold cryptography and trusted execution environments, so that the operations are verifiable; on-chain and off-chain cooperation and batch processing aggregation are adopted, so that the communication and calculation burdens are reduced.

According to an embodiment, an electronic device may comprise an antenna circuit including an antenna, a first capacitor, a switch, a sensor, and at least one processor. The at least one processor may be configured to control the switch to connect the first capacitor and the sensor, based on start of booting of the electronic device, determine an initial value of the sensor for determining whether a user grips at least a portion of the electronic device, based on the connection of the first capacitor and the sensor, and control the switch to connect the antenna circuit and the sensor, based on the determination of the initial value of the sensor. Other various embodiments are possible as well.

One or more programs of a microcontroller are updated using an update method including individually updating different images of the one or more programs. The updating of each image includes: selecting of a program to be executed, from among several programs, on booting of the microcontroller; selecting one or more memory slots of the one or more programs into which to load an image used for the update; and updating version and image dependency data of the one or more programs contained in an update program.

Disclosed are an electronic device for restricting access to development functions and an operating method thereof. According to the present invention, the electronic device comprises a memory storing instructions and one or more processors for executing the instructions. When the one or more processors individually or collectively execute the instructions, the instructions cause the electronic device to: determine whether a booting command is for entering a developer mode when receiving the booting command for the electronic device from a user; receive, from a host device for using the developer mode, a first function number for any one of development functions provided by the developer mode when the booting command is for entering the developer mode; generate first information on the basis of the first function number; transmit the first information to the host device; receive, in response to the transmission of the first information to the host device, second information generated, on the basis of the first information, by a server authenticating the user; and determine whether to enter the developer mode on the basis of the first information and the second information.

Systems, methods, and devices securely boot processors and nonvolatile memories. Methods include implementing, using a controller of a secured nonvolatile memory, a validation operation on a first portion of code stored in a first secured storage region of the secured nonvolatile memory, the validation operation comprising computing a validation value. Methods also include retrieving a second portion of code from a second secured storage region, the second portion of code comprising a pre-computed validation value, the first and second portion of code being associated with booting a processor, and implementing a comparison operation of the validation value and the pre-computed validation value. Methods further include generating, using the controller, a signal based on a result of the comparison operation, the signal being provided to the processor via an interface of the secured nonvolatile memory, and the signal enabling booting of the processor in response to a matching comparison operation.

The invention provides a starting method and device, a storage medium and a computer program product. The method comprises the following steps: before an encryption component of the confidential virtual machine is started, calling an authentication component to execute authentication verification, after the authentication verification succeeds, obtaining a secret key of the encryption component from trusted equipment, and / or decrypting the encryption component based on the secret key, so as to continue to start the confidential virtual machine; wherein the integration operation of the authentication component is executed before the encryption component is started.

A method comprises executing a booting operation comprising booting of an operating system of a host device and booting of an operating system of a data processing unit running on the host device, and detecting a failure of at least the booting of the operating system of the data processing unit. Execution of the booting operation is paused in response to the detecting, and data corresponding to the failure is collected. At least one function associated with the data processing unit that is contributing to the failure is identified based on the collected data. A basic input / output system of the host device is provided with access to identifying information for the at least one function. The booting operation is re-executed, wherein the basic input / output system excludes the at least one function from being configured by the operating system of the host device based on the identifying information.

The invention relates to a non-transient computer readable storage medium, an electronic device and a protection method thereof. The electronic device comprises a housing, a disassembly detector, a security chip and a controller. The disassembly detector is disposed in the internal space of the housing and is configured to generate a warning signal based on the disassembly of the housing. The security chip is configured to store verification data, the verification data including a first code in an initial state. The security chip is communicatively connected to the disassembly detector and is configured to change the content of the verification data based on receiving the warning signal. The controller is communicatively connected to the security chip. When the electronic device performs a startup program, the controller is configured to receive the verification data and confirm whether the verification data conforms to the first code. And if the verification data is consistent with the first code, the controller allows the startup program to continue to proceed, and otherwise, the controller drives the startup program to be paused or terminated. By means of the configuration, the electronic device can detect that the machine shell is disassembled and forbids or limits starting up, and data stored in the electronic device are prevented from being stolen.

The present invention is to properly register a face image of an authorized user used for face authentication. An information processing apparatus executes face detection processing to detect an area of a face image with a face captured therein from a captured image captured by an imaging unit, and face authentication processing to authenticate the face based on information on the detected face image and information on a face image of an authorized user, and the information processing apparatus executes a program of a system to boot the system from a standby state based on the fact that the area of the face image is detected by the face detection processing and face authentication by the face authentication processing is successful. Further, when booting the system, the information processing apparatus controls whether or not to execute user registration processing to register information on the face image detected by the face detection processing after booting the system as information on the face image of the authorized user depending on whether or not a booting factor is input to an HID.

According to embodiments of the present disclosure, booting may be performed using different firmware based on the usage environment information of a storage device, and control may be performed by differently setting a processing delay time for the host device's commands and the operation priority for the reliability or stability of the storage device, thereby maintaining the operational stability of the storage device and preventing or minimizing the degradation of operating performance depending on the usage environment.

A first hypervisor running on a first processor cluster is provided. During operation, the first hypervisor can determine a first set of processing nodes and a first memory unit of the first processor cluster in response to the booting up of a first Basic Input / Output System (BIOS) of the first processor cluster. The first hypervisor can discover a second hypervisor running on a second processor cluster comprising a second set of processing nodes and a second memory unit. The first hypervisor can operate, with the second hypervisor, a distributed system comprising the first and second sets of processing nodes and the first and second memory units. The first hypervisor can then operate, with the second hypervisor, a global virtual machine on the distributed system. The virtual memory space of the global virtual machine can be mapped to respective memory spaces of the first and second processor clusters.

The application relates to a novel LinuxBoot starting and booting method and system based on a RISC-V server CPU, which comprises the following steps: firstly, ZSBL is executed, and FSBL is loaded and jumped to. Then, the FSBL loads a DTB, OpenSBI and LinuxBoot into a memory; the OpenSBI firstly executes underlying initialization, then executes platform early initialization, related hardware device initialization and platform final initialization, and finally executes secondary boot to jump to a LinuxBoot kernel; the LinuxBoot kernel loads u-root as initramfs; the LinuxBoot kernel loads a real Linux kernel image and a device tree, and sets hardware configuration and parameters, so that the Linux kernel is started. The application improves the efficiency and flexibility of system starting; and realizes fast, reliable and flexible starting of a server system.

This application processor may be configured to identify the type of firmware used by a communication processor before or after booting, on the basis of identifying a booting command of the communication processor. Here, the type of firmware may be identified as any one of process firmware for a function test and / or calibration of the communication processor and user firmware for performing a function of the communication processor. The application processor may be configured to store the identified type of firmware in an area of a memory of an electronic device, shared by the communication processor and the application processor. The application processor may be configured to provide the booting command to the communication processor.

An electronic device includes a processor and one or more secure elements. The processor executes a first high-level operating system and a first application. The one or more secure elements execute a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and execute a second low-level operating system to execute a second application and to perform wireless communication with the first application. At each booting of the electronic device, the first low-level operating system performs a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system. In response to a request from the first application to the second application, the second low-level operating system requests a result of the verification from the first low-level operating system, and transmits the result to the second application.

The application relates to the technical field of mainboards, in particular to an industrial mainboard security starting method based on a hardware root of trust, which comprises the following steps: after the industrial mainboard is powered on and reset, a security control domain runs prior to a business processing domain, and a main processor is kept waiting for starting; the security control domain reads hardware root anchor credentials and an initial boot program, and sequentially performs integrity measurement and signature verification on the initial boot program and a later-stage boot program; after the verification passes, running key materials are derived based on a random seed, device private credentials and a later-stage boot program digest, a running private key is written into a restricted key area, and a running public key is written into a public storage area; when a boot update package exists, a firmware public key certificate, a boot image signature and a replacement identifier are verified, a boot image is loaded after the certificate is valid and the signature passes, starting proof information is generated, an access path is closed and the main processor is released; any verification failure enters a fault processing flow.

A memory controller includes a buffer, a prefetch controller, and a boot controller. The buffer stores workload information including a history of an expected I / O request expected to be received from a host during booting operation. The prefetch controller is configured to, before a target I / O request is received from the host after start of booting, read expected data corresponding to the expected I / O request from memory devices based on workload information, and store the expected data in the buffer. The boot controller updates the workload information based on the target I / O request depending on whether target data corresponding to the target I / O request is included in the expected data, and stores updated workload information in an area in which data is readable with a minimum number of accesses from a plurality of the memory devices.