-
1.
公开(公告)号:EP2761523A4
公开(公告)日:2015-04-29
申请号:EP12837063
申请日:2012-07-04
Applicant: IBM
Inventor: BUHLER PETER , CLERC DAVID , GARCES-ERICE LUIS , GSCHWIND THOMAS , ROONEY JOHN G , SCHADE ANDREAS , SCOTTON PAOLO
CPC classification number: G06F9/4416 , G06F21/575
Abstract: Methods and apparatus are provided for provisioning an operating system image from a server (2) to an untrusted user terminal (4) via a data communications network (3). A trusted device (5) such as a pocket USB device has tamper-resistant storage (9) containing bootloader logic, for controlling booting of a user terminal, and security data. On connection of the trusted device (5) to an untrusted user terminal (4), the user terminal is booted via the bootloader logic on the trusted device. Under control of the bootloader logic, a connection is established to the server (2) via the network (3) and the server is authenticated using the security data on the trusted device (5). An operating system boot image is received from the server (2) via this connection. The boot image is used to provision an operating system image from the server (2) to the user terminal (4) for execution of the operating system at the user terminal (4).
-
公开(公告)号:JP2001306873A
公开(公告)日:2001-11-02
申请号:JP2001061140
申请日:2001-03-06
Applicant: IBM
Inventor: SCHADE ANDREAS , HOFFNER YIGAL , FIELD SIMON , FACCIORUSSO CHRISTIAN
Abstract: PROBLEM TO BE SOLVED: To provide an electronic transaction system which can perform the comprehensive substitution of an actual transaction state in regard to a method that judges whether coincidence is recognized between the request of a customer and the proposal of a supplier. SOLUTION: This system includes a step to receive the request of a customer having a feature data element (PD) that can be updated and includes the constraint condition data (CST) showing a set of features of a product and the address data with which a trader device can acquire the current specifications of variable features from a customer device (a), a step to compare the data (CST) with the feature data (P) (b), a step to repeat negotiation for acquiring the current specifications of the element (PD) that is proposed by a supplier and can be updated and also the current specifications of the element (PD) with which the customer's request can be updated until the negotiation success condition or negotiation end condition is satisfied (c) and a step to judge whether the customer's request is coincident with the supplier's proposal (d).
-
公开(公告)号:JP2001357339A
公开(公告)日:2001-12-26
申请号:JP2001122575
申请日:2001-04-20
Applicant: IBM
Inventor: HUSEMANN DIRK , HERMANN RETO , MOSER MICHAEL , SCHADE ANDREAS
Abstract: PROBLEM TO BE SOLVED: To provide an improved transaction system and one example for this system. SOLUTION: This method enables a customer, who accesses a customer system (40) and a portable telephone (43) having a related telephone number, to order a deliverable (41) provided at a specific price by a merchandiser system (45). The merchandiser system (45) is accessed through the customer system (40) and a network (44). The deliverable (41) can be ordered by using the customer system (40). Order confirmation of the deliverable (41) is sent to the portable telephone (43) by using the telephone number of this telephone, and the order for the deliverable (41) is confirmed by using the portable telephone (43), and a response is transmitted to the merchandiser system (45) or an electric communication provider system (48). The price for the deliverable is charged by a bill (51) of the telephone charge issued to the portable telephone (43) by the electric communication provider system (48), and thus the customer can obtain the deliverable (41).
-
公开(公告)号:JP2001045029A
公开(公告)日:2001-02-16
申请号:JP2000017026
申请日:2000-01-26
Applicant: IBM
Inventor: HERMANN RETO , HUSEMAN DIRK , MOSER MICHAEL , NIDD MIKE , SCHADE ANDREAS
Abstract: PROBLEM TO BE SOLVED: To provide a technique that classifies services of an adjacent range division type in a radio local network. SOLUTION: A radio local network contains all devices including a device 10 as its part. The device 10 stores a list of identifiers relating to service servers in addition to recording of information with respect to service and its relating identifiers. In the case that lists of relating identifiers and identifiers are compared and a relating service is served by a service server listed in the identification list, it is discriminated that the service resides in the vicinity of the server. In the case that the relating service is served by the service server not listed in the identifier list, it is discriminated that the service is not resident in the vicinity of the server. The device 10 includes a network interface 25 for radio communication with the service server and a service discovery module 11 that stores recording of the information service and the relating identifier.
-
公开(公告)号:GB2523057B
公开(公告)日:2015-10-07
申请号:GB201510657
申请日:2013-11-26
Applicant: IBM
Inventor: BAENTSCH MICHAEL , GSCHWIND THOMAS , SCHADE ANDREAS
-
公开(公告)号:CA2296800C
公开(公告)日:2010-01-19
申请号:CA2296800
申请日:2000-01-24
Applicant: IBM
Inventor: SCHADE ANDREAS , MOSER MICHAEL , NIDD MICHAEL , HUSEMANN DIRK , HERMANN RETO
Abstract: Scheme and apparatus for distinguishing services offered by a service- providing device in adjacency of the apparatus from services offered by a service-providing devi ce not being in the apparatus' adjacency. All devices - including the apparatus - are part of a wireless local network. The apparatus maintains a record with information about services and associated identifiers as well as a list of identifiers about the service-providing devices. The associated identifiers and the list of identifiers are compared to determine an associated service as being in adjacency of the apparatus if it is rendered by a service-providing device being listed in th e list of identifiers. An associated service is determined as not being in adjacency of the apparatus if it is rendered by a service-providing device not being listed in the list of identifiers. The apparatus comprises a network interface for wireless communication with the service-providing devices, and a service discovery module which maintains the record with information services and associated identifiers.
-
公开(公告)号:GB2508894A
公开(公告)日:2014-06-18
申请号:GB201222583
申请日:2012-12-14
Applicant: IBM
Inventor: BAENTSCH MICHAEL , GSCHWIND THOMAS , SCHADE ANDREAS
Abstract: A trusted boot device 10 is connected to a computer 101 to allow the computer to boot a trusted environment, such as an operating system. During the boot process, the computer processor 105 executes code which behaves differently in a virtual machine. If the code determines that it is being executed in a virtual machine, the boot is prevented. The code may detect execution in a virtual machine by detecting features supported by the processor. It may measure the computation time or number of processor cycles needed to execute a particular task. This task may involve communicating with a server via a network interface. The code may switch the processor between processor modes. It may read or write a machine specific register.
-
公开(公告)号:GB2508893A
公开(公告)日:2014-06-18
申请号:GB201222582
申请日:2012-12-14
Applicant: IBM
Inventor: BAENTSCH MICHAEL , GSCHWIND THOMAS , SCHADE ANDREAS
IPC: G06F21/57
Abstract: A boot device 10 may be connected to a users personal computer 100 to allow it to operate in a corporate bring your own device (BYOD) environment. When the computer attempts to boot from the device, software on the device is loaded into a memory 121 on the computer. The software checks the trustworthiness of the firmware 122 on the computer. If the firmware is not trustworthy, then the software prevents the boot of the computer. The firmware may be checked by generating one or more hash values of the firmware and comparing the value with a list of values corresponding to trusted firmware. The list may be stored on the boot device. The list may be stored on a server 30 connected to the computer via a network 165 using a network interface card 124.
-
公开(公告)号:CA2296800A1
公开(公告)日:2000-07-29
申请号:CA2296800
申请日:2000-01-24
Applicant: IBM
Inventor: HUSEMANN DIRK , MOSER MICHAEL , NIDD MICHAEL , SCHADE ANDREAS , HERMANN RETO
Abstract: Scheme and apparatus for distinguishing services offered by a serviceproviding device in adjacency of the apparatus from services offered by a service-providing device not being in the apparatus' adjacency. All devices - including the apparatus - are part of a wireless local network. The apparatus maintains a record with information about services and associated identifiers as well as a list of identifiers about the service-providing devices. The associated identifiers and the list of identifiers are compared to determine an associated service as being in adjacency of the apparatus if it is rendered by a service-providing device being listed in the list of identifiers. An associated service is determined as not being in adjacency of the apparatus if it is rendered by a service-providing device not being listed in the list of identifiers. The apparatus comprises a network interface for wireless communication with the service-providing devices, and a service discovery module which maintains the record with information services and associated identifiers.
-
公开(公告)号:GB2523057A
公开(公告)日:2015-08-12
申请号:GB201510657
申请日:2013-11-26
Applicant: IBM
Inventor: BAENTSCH MICHAEL , GSCHWIND THOMAS , SCHADE ANDREAS
Abstract: The present invention is notably directed to a method for enabling a computer (101) to boot from a user trusted device (10), the user trusted device (10) comprising a connection interface (12) enabling connection (S2) with said computer (101), the method comprising: enabling (S3) said computer (101) to start booting from the user trusted device (10) upon connection (S2) of the user trusted device with said computer (101) via said connection interface (12); instructing a processor (105) of the computer (101) to execute (S7) virtualization sensitive code and issue (S8) completion data upon completion of execution, which completion data depends on the virtualization sensitive code and its execution by the processor (105); determining (S9 S14), based on said completion data, whether the execution was not performed in a virtualized environment; and enabling (S15) said computer (101) to complete booting from the user trusted device (10) upon determining that the execution was not performed in a virtualized environment. The invention is further directed to a user trusted device enabling this method and to related systems.
-
-
-
-
-
-
-
-
-