274 results about "Booting" patented technology

A new system architecture for servers used in supercomputers uses an on-chip switch fabric with backpressure to improve performance. A server-on-a-chip includes one or more of the on-chip switch fabrics coupling one or more processing cores enabled to respond to the backpressure. Optionally, one or more ports of the on-chip switch fabrics are used to provide (external) ports of the server-on-a-chip to enable seamless communication with other server-on-a-chip instances. Various instances of the server-on-a-chip use the seamless communication to communicate with each other over a single printed circuit board and / or with each other across a plurality of printed circuit boards. Optional smart memory and / or multi-homed memory techniques improve memory efficiency by posting all writes, hiding DRAM maintenance operations (e.g., refresh, scrubbing, error correction and / or error logging), and / or reducing attack vectors, such as via secure booting of encrypted boot images.

An electronic device comprises a main chiplet including a first memory and at least one sub-chiplet including a second memory, wherein the main chiplet is configured to initialize a first interface for inter-chiplet connection based on first boot firmware stored in the first memory in response to receiving booting signal, acquire third boot firmware stored in an external memory, initialize a second interface for communication between an external device and the main chiplet based on the third boot firmware, set a configuration for interconnection between the main chiplet and the at least one sub-chiplet, initialize a third memory included in the main chiplet, and load at least one of an application firmware or an operating system to the third memory, and the at least one sub-chiplet is configured to initialize the first interface based on second boot firmware stored in the second memory in response to receiving the booting signal.

In an example, a computing device is described. The computing device comprises a component to perform a crypto-graphic operation and store an indication of a measured state of the computing device obtained during booting of the computing device. The computing device further comprises a processor to obtain a secret for use by the component, install an administration credential in a firmware of the computing device and transmit the secret to the component via the firmware.

Radio-frequency identification (RFID) tag readers or sensors interrogate and locate RFID tags in stores, warehouses, and other environments. Unfortunately, these sensors are vulnerable to intrusions, including attacks that can expose any computer network to which the sensors are coupled. Attacks like these can be prevented using a secure booting process for distributing and loading an operating system and / or other software onto each sensor. When the sensor first boots up, it validates a pair of locally stored binary files, e.g., using a pair of locally stored digital keys. Once booted, it establishes a secure connection to a controller, then downloads, validates, and executes a binary file from the controller. Executing the binary file from the controller loads an operating system kernel into the sensor's memory for secure operation.

Systems and methods for secure booting of secure programmable logic devices (PLDs) are disclosed. An example system includes a secure PLD including programmable logic blocks (PLBs) arranged in a PLD fabric of the secure PLD, and a configuration engine configured to program the PLD fabric according to a configuration image stored in a non-volatile memory (NVM) of the secure PLD and / or coupled through a configuration input / output (I / O) of the secure PLD to the configuration engine. The secure PLD is configured to retrieve a pre-authentication status associated with the configuration image from the NVM, determine or verify the retrieved pre-authentication status associated with the configuration image includes a valid status, and boot the PLD fabric of the secure PLD using the configuration image.

An example method may include booting, by a host computer system, an operating system (OS) kernel; locking, by a security service running on the host computer system, a plurality of physical pages in a memory of the host computer system, wherein the plurality of physical pages is designated for use by the OS kernel, wherein the plurality of physical pages, upon locking, are unmodifiable by the OS kernel, and wherein the security service is associated with a privilege level higher than a privilege level of the OS kernel; performing, by the security service, a cryptographic measurement on the plurality of the physical pages; and generating, by the host computer system, a measurement report based on the cryptographic measurement.

Example methods and apparatus are disclosed herein to mitigate firmware malware, an example apparatus comprising at least one memory; instructions; and at least one processor to execute the instructions to cause the at least one processor to at least: detect presence of firmware malware, the firmware malware to be executed prior to booting of an operating system of a computing device; attempt remediation of the firmware malware; and in response to a failure to remediate the firmware malware, cause display of a notification of the presence of the firmware malware.

An example computing device includes a storage device, a random-access memory, a read only memory, and a processor. The processor is to determine, during a booting process, whether an operating system being booted is a primary operating system, in response to a determination that the operating system being booted is different from the primary operating system, determine whether the operating system being booted satisfies a first criteria, and, in response to a determination that the operating system being booted fails to satisfy the first criteria, disable software persistence.

An electronic device comprises a main chiplet including a first memory and at least one sub-chiplet including a second memory, wherein the main chiplet is configured to initialize a first interface for inter-chiplet connection based on first boot firmware stored in the first memory in response to receiving booting signal, acquire third boot firmware stored in an external memory, initialize a second interface for communication between an external device and the main chiplet based on the third boot firmware, set a configuration for interconnection between the main chiplet and the at least one sub-chiplet, initialize a third memory included in the main chiplet, and load at least one of an application firmware or an operating system to the third memory, and the at least one sub-chiplet is configured to initialize the first interface based on second boot firmware stored in the second memory in response to receiving the booting signal.

A process includes, responsive to a computer platform being controlled by an operating system installation service that is remote with respect to the computer platform, retrieving, by the computer platform, an agent image, and booting, by the computer platform, to the agent image to launch a local agent that is executed on the computer platform. The process includes assisting, by the local agent, an installation of an operating system on the computer platform. The assisting includes accessing, by the local agent, an operating system installation image and generating an answer file to configure installation of the operating system using the operating system installation image.

A key management system for providing encryption of a disk in a client device is provided. The system comprises a trusted platform module (TPM) having a first fragment of a key, a remote storage having a second fragment of the key, and a processing unit to partially boot instructions relating to booting of the client device, send a request for validation to the TPM, receive the first fragment of the key from the TPM on successful validation, request for the second fragment of the key with credentials to access the remote storage. The credentials and a network of the request are verified, the second fragment of the key is transmitted on successful validation. The first fragment and the second fragment of the key are combined to generate an encryption key for booting the client device. The first fragment of the key and the second fragment of the key are rotatable.

Systems and methods for providing a secure motherboard replacement are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions that, upon execution, cause the IHS to, when a replacement motherboard is booted for the first time, attach to a device that stores one or more BIOS entitlements associated with the IHS, configure a BIOS on the replacement motherboard with the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

Systems and methods for providing a Basic Input / Output System (BIOS) password retention system that may be used for motherboard replacement are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted on the HIS, obtain An encrypted BIOS password associated with a previous motherboard that has been removed from the IHS, configure the BIOS password on the replacement motherboard without providing a clear text version of the BIOS pw, and complete booting of the IHS into a normal mode of operation.

The present subject matter relates generally to a system and a method for self- evaluation and booting system (100) for a vehicle (100a). The present invention provides a self-evaluation and booting system (100) that checks the status of one or more electronics and electrical components of the vehicle (100a), each time the vehicle (100a) is switched ON. The system and the method as per the present invention does a self-evaluation and booting of the one or more electronics and electrical components to find a fault as well as resolve the fault by one or more pre-defined action. The system and the method as per the present invention further controls a degree of immobilization based on category of each of one or more unresolved faults from one or more identified faults.

The invention discloses a control flow verification method for booting firmware, electronic equipment, a storage medium and a product, and relates to the technical field of firmware security, the method comprises the following steps: before the booting firmware is booted, performing symmetric signature on a jump target address list of a control flow by using a derived symmetric key, and in the current execution stage of the booting firmware, performing symmetric signature on the jump target address list of the control flow; the symmetric signature is verified by using the symmetric key, and calling in the current execution stage is realized based on the jump target address if verification is passed; and after the execution of the current execution stage is finished, obtaining the descriptor of the next execution stage, carrying out asymmetric signature and verification on the descriptor, and skipping the control flow of the current execution stage to the next execution stage after the verification is passed. The technical problems that control flow hijacking cannot be defended in related technologies, and the dynamic integrity of indirect calling and cross-stage jump targets in the multi-stage starting process is difficult to guarantee are solved, and the technical effect of improving the firmware defense capability is achieved.

Systems and methods for thermal testing in a firmware framework. In some embodiments, an Information Handling System (IHS) may include a controller, where the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where the orchestrator is configured to trigger thermal data collection by one or more selected nodes prior to the booting of any Operating System (OS) of the IHS.

Systems and methods for handling accident data in an Information Handling System (IHS) unable to boot are described. In some embodiments, an Information Handling System (IHS) may include an Embedded Controller (EC), and a memory coupled to, or integrated into, the EC, where the memory comprises program instructions that, upon execution by the EC, cause the EC to determine that a booting process is incomplete and, at least in part in response to the determination, store accident data in a Non-Volatile Memory (NVM).

Systems and methods for providing a bios entitlement retention system that may be used for motherboard replacement using system devices are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted for the first time, attach to a system device that stores one or more Basic Input / Output System (BIOS) entitlements associated with the IHS, configure a BIOS on the replacement motherboard using the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

Systems and methods include an Information Handling System (IHS) that is adapted to utilize runtime hotkeys in the selection of boot modes that are supported by the IHS. The IHS is powered and a boot sequence is initiated. Further booting of the IHS is halted upon detecting a selection of a boot device during the boot sequence. One or more hot keys are identified for use in booting the selected boot device. The selection of a hot key that is supported by the boot device is detected. Booting of the IHS is resumed by booting the selected boot device according to a boot mode corresponding to the selected hot keys.

A method for recognizing anomalies suggesting a manipulation during a secure booting operation of a software-controlled device comprises, inter alia, checking operating parameters of system components necessary for the operation of a microprocessor, checking a flag indicating an improperly concluded booting operation, and signature-based authenticity checking of software to be loaded or software components to be loaded. In the case of multistage booting operations, counter values assigned to a respective stage are compared with associated reference values. In the event of a fault, each check can output a signal on the basis of which, optionally together with further signals, the type of an attack can be recognized, so that specific countermeasures can be initiated.

Systems and methods for providing a BIOS entitlement retention system that may be used for motherboard replacement using a non-volatile storage system. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to, when a replacement motherboard is booted on the HIS: obtain a plurality of BIOS entitlements from a non-volatile storage system of the HIS, configure a BIOS on the replacement motherboard using the BIOS entitlements, and complete booting of the IHS into a normal mode of operation.

The application relates to the technical field of blockchains, and particularly discloses an application sensitive data communication method based on a blockchain, which comprises identity registration and trusted booting, strategy on-chain and commitment, session negotiation and encryption encapsulation, controlled unsealing and verifiable calculation, on-chain verification and auditing, and revocation and emergency. The scheme realizes minimum exposure of application sensitive data through the blockchain technology; the visible range of data is controlled through verifiable access strategies and short-term session keys; key operations are fixed in the blockchain through threshold cryptography and trusted execution environments, so that the operations are verifiable; on-chain and off-chain cooperation and batch processing aggregation are adopted, so that the communication and calculation burdens are reduced.

A control panel for controlling a security system. The control panel may comprise: one or more components; a memory for storing booting instructions, and a processor for executing the stored booting instructions. When carrying out a booting process defined by the booting instructions, the processor may be configured to generate at least one random time-delay value; assign the at least one random time-delay value to at least one booting stage of the booting process; delay the at least one booting stage of the booting process by the at least one time-delay value. Each of the at least one time-delay value may be assigned to one booting stage of the booting process, and each of the at least one booting stage may correspond to booting at least one of the one or more components.

According to an embodiment, an electronic device may comprise an antenna circuit including an antenna, a first capacitor, a switch, a sensor, and at least one processor. The at least one processor may be configured to control the switch to connect the first capacitor and the sensor, based on start of booting of the electronic device, determine an initial value of the sensor for determining whether a user grips at least a portion of the electronic device, based on the connection of the first capacitor and the sensor, and control the switch to connect the antenna circuit and the sensor, based on the determination of the initial value of the sensor. Other various embodiments are possible as well.

One or more programs of a microcontroller are updated using an update method including individually updating different images of the one or more programs. The updating of each image includes: selecting of a program to be executed, from among several programs, on booting of the microcontroller; selecting one or more memory slots of the one or more programs into which to load an image used for the update; and updating version and image dependency data of the one or more programs contained in an update program.

Disclosed are an electronic device for restricting access to development functions and an operating method thereof. According to the present invention, the electronic device comprises a memory storing instructions and one or more processors for executing the instructions. When the one or more processors individually or collectively execute the instructions, the instructions cause the electronic device to: determine whether a booting command is for entering a developer mode when receiving the booting command for the electronic device from a user; receive, from a host device for using the developer mode, a first function number for any one of development functions provided by the developer mode when the booting command is for entering the developer mode; generate first information on the basis of the first function number; transmit the first information to the host device; receive, in response to the transmission of the first information to the host device, second information generated, on the basis of the first information, by a server authenticating the user; and determine whether to enter the developer mode on the basis of the first information and the second information.

Systems, methods, and devices securely boot processors and nonvolatile memories. Methods include implementing, using a controller of a secured nonvolatile memory, a validation operation on a first portion of code stored in a first secured storage region of the secured nonvolatile memory, the validation operation comprising computing a validation value. Methods also include retrieving a second portion of code from a second secured storage region, the second portion of code comprising a pre-computed validation value, the first and second portion of code being associated with booting a processor, and implementing a comparison operation of the validation value and the pre-computed validation value. Methods further include generating, using the controller, a signal based on a result of the comparison operation, the signal being provided to the processor via an interface of the secured nonvolatile memory, and the signal enabling booting of the processor in response to a matching comparison operation.

The invention provides a starting method and device, a storage medium and a computer program product. The method comprises the following steps: before an encryption component of the confidential virtual machine is started, calling an authentication component to execute authentication verification, after the authentication verification succeeds, obtaining a secret key of the encryption component from trusted equipment, and / or decrypting the encryption component based on the secret key, so as to continue to start the confidential virtual machine; wherein the integration operation of the authentication component is executed before the encryption component is started.

A method comprises executing a booting operation comprising booting of an operating system of a host device and booting of an operating system of a data processing unit running on the host device, and detecting a failure of at least the booting of the operating system of the data processing unit. Execution of the booting operation is paused in response to the detecting, and data corresponding to the failure is collected. At least one function associated with the data processing unit that is contributing to the failure is identified based on the collected data. A basic input / output system of the host device is provided with access to identifying information for the at least one function. The booting operation is re-executed, wherein the basic input / output system excludes the at least one function from being configured by the operating system of the host device based on the identifying information.