IMPROVING RESTORATION OF FIRMWARE DATA
    31.
    发明公开

    公开(公告)号:US20240134756A1

    公开(公告)日:2024-04-25

    申请号:US17972522

    申请日:2022-10-23

    CPC classification number: G06F11/1469 G06F9/4403 G06F2201/84

    Abstract: A basic input/output system (BIOS) determine whether an automated recovery mechanism is enabled in response to a detection of a data corruption. An embedded controller may extract recovery data from a storage device upon confirmation that the automated recovery mechanism is enabled. In response to verification that the recovery data is valid, the controller may decrypt a BIOS firmware data in the recovery data and push the BIOS firmware data into a non-volatile random access memory, and decrypt an embedded controller firmware data in the recovery data and push the embedded controller firmware data into the non-volatile random access memory.

    COLLECTION OF FORENSIC DATA AFTER A PROCESSOR FREEZE

    公开(公告)号:US20230409423A1

    公开(公告)日:2023-12-21

    申请号:US17841913

    申请日:2022-06-16

    CPC classification number: G06F11/0772 G06F11/1441 G06F11/3089

    Abstract: An information handling system includes a processor and an embedded controller. The processor executes operations while the information handling system is in an active power state. The embedded controller communicates with the processor. While the information handling system is in the active power state, the embedded controller detects a trigger event. In response to the trigger event, the embedded controller provides a ping command to the processor. Based on a response to the ping command not being received, the embedded controller determines a processor freeze, stores forensic data associated with the processor freeze, and stores an indication to perform a processor freeze recovery during a next boot operation.

    Runtime device firmware verification using trust chaining

    公开(公告)号:US11704402B2

    公开(公告)日:2023-07-18

    申请号:US16526467

    申请日:2019-07-30

    CPC classification number: G06F21/44 G06F9/4411 G06F21/575

    Abstract: Systems and methods are disclosed herein that may implement an information handling system including a gateway and a peripheral device monitor. The gateway may interface peripheral devices and control access of host resources of the information handling system by any of the peripheral devices. The peripheral device monitor may detect connection of an unverified peripheral device to the gateway, perform a trust verification process with the unverified peripheral device, control the gateway to enable access of the host resources by the unverified peripheral device when the unverified peripheral device becomes verified, and control the gateway to prevent access to the host resources by the unverified peripheral device when the unverified peripheral device fails the trust verification process. The trust verification process may include validating a device certificate and verifying a digest of boot code of the peripheral device. The peripheral device monitor may perform a verification failure procedure when the unverified peripheral device fails the trust verification process.

    SYSTEM AND METHOD FOR BINDING APPLICATIONS TO A ROOT OF TRUST

    公开(公告)号:US20220382887A1

    公开(公告)日:2022-12-01

    申请号:US17332184

    申请日:2021-05-27

    Abstract: A method for binding applications to a platform root of trust includes pre-provisioning application binding components in an information handling system. An application requesting OS access sends its access control list (ACL)and application metadata to the BIOS, which performs initial checks. The BIOS responds with platform metadata and a first nonce. The application communicates the metadata, the first nonce and a second nonce to a server. The server checks the nonces and metadata, creates a third nonce and an application binding object (ABO). The application checks the nonces and sends a binding certificate to the BIOS. The BIOS checks the nonces, creates a binding certificate, verifies the binding certificate and sends a binding session credential (BSC) to the application. The application binds the BSC with platform credentials.

    Systems and methods for achieving faster boot times using BIOS attribute mitigation

    公开(公告)号:US11500647B2

    公开(公告)日:2022-11-15

    申请号:US17087021

    申请日:2020-11-02

    Abstract: A BIOS may include a plurality of BIOS attributes associated with the information handling system, each attribute of the plurality of BIOS attributes having metadata defining a priority for such attribute. The BIOS may also include an attribute engine configured to execute a preboot process prior to booting of an operating system of the information handling system, wherein the preboot process is configured to identify boot-critical attributes of the plurality of BIOS attributes based on the metadata and load the boot-critical attributes. The attribute engine may also execute a steady-state process after booting of the operating system of the information handling system, wherein the steady-state process is configured to load attributes of the plurality of BIOS attributes other than the boot-critical attributes in an order based on the metadata.

    Information handling system and method to automatically synchronize operating system and boot firmware languages

    公开(公告)号:US11307907B2

    公开(公告)日:2022-04-19

    申请号:US16780053

    申请日:2020-02-03

    Abstract: Information handling systems (IHS) and methods are provided to automatically synchronize operating system (OS) and boot firmware languages. In one embodiment, a method may detect a change in an active OS language from a first language pack to a second language pack, notify the boot firmware that the active OS language was changed, and provide an identity of the second language pack to the boot firmware during OS runtime. When the IHS is subsequently rebooted, the active boot firmware language may be synchronized to the active OS language. In another embodiment, the method may detect a change in an active boot firmware language from a first language pack to a second language pack, notify the OS that the active boot firmware language was changed, and provide an identity of the second language pack to the OS during a pre-boot phase. When the OS is subsequently booted, the active OS language may be synchronized to the active boot firmware language.

    Deploying software updates in coordination with end-user productivity

    公开(公告)号:US11204756B1

    公开(公告)日:2021-12-21

    申请号:US16904293

    申请日:2020-06-17

    Abstract: Software updates can be deployed in end user devices in coordination with end-user productivity. A system monitoring engine can be employed on end user devices to compile productivity impact data from which heat maps may be created. An optimal deployment detection engine can employ the heat maps to create or maintain period-based groupings. When software updates are available, the optimal deployment detection engine can employ the period-based groupings to create optimal deployment plans specific to the end user devices. The installation of the software updates can then be performed on each end user device in accordance with that end user device's optimal deployment plan.

    Systems and methods for modifying boot operation of an information handling system

    公开(公告)号:US11132206B2

    公开(公告)日:2021-09-28

    申请号:US16402834

    申请日:2019-05-03

    Abstract: Systems and methods are provide that may be implemented to modify boot operation for an information handling system using commands of a script that is detected and authenticated by boot code of the information handling system. The script may include at least one command that modifies a boot operation of the information handling system when performed by the processor. The boot code may be executed by the processor during startup, to detect and authenticate the script, and to process the at least one command after the script is authenticated. Multiple commands may be defined including triggerless actions or trigger actions which are performed in response to a trigger event. A trigger event may be a hardware interaction, such as the pressing of a button.

    Automatic creation of best known configurations

    公开(公告)号:US11113169B2

    公开(公告)日:2021-09-07

    申请号:US16780166

    申请日:2020-02-03

    Abstract: Best known configurations can be automatically created for particular platforms. An update tool can be installed on end user devices and can include a health monitor engine that creates health reports for drivers and/or firmware installed on the corresponding end user device. The health reports generated on the end user devices can be provided to a best known configuration engine that can evaluate them to calculate a best known configuration for each platform. The best known configurations can then be distributed to the update tool on the end user devices to cause them to configure the end user devices to match the corresponding best known configuration.

    AUTOMATIC CREATION OF BEST KNOWN CONFIGURATIONS

    公开(公告)号:US20210240589A1

    公开(公告)日:2021-08-05

    申请号:US16780166

    申请日:2020-02-03

    Abstract: Best known configurations can be automatically created for particular platforms. An update tool can be installed on end user devices and can include a health monitor engine that creates health reports for drivers and/or firmware installed on the corresponding end user device. The health reports generated on the end user devices can be provided to a best known configuration engine that can evaluate them to calculate a best known configuration for each platform. The best known configurations can then be distributed to the update tool on the end user devices to cause them to configure the end user devices to match the corresponding best known configuration.

Patent Agency Ranking