Steven Neal Goodman

US Patent:

6711690, Mar 23, 2004

Filed:

Sep 17, 2001

Appl. No.:

09/953775

Inventors:

Richard Alan Dayan - Wake Forest NC
Steven Dale Goodman - Raleigh NC
Joseph Michael Pennisi - Apex NC
Randall Scott Springfield - Chapel Hill NC

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 900

US Classification:

713202, 711164

Abstract:

A secure write blocking circuit and method of operation thereof. The secure write blocking circuit includes enable and disable block input terminals coupled to a blocking circuit. The blocking circuit, such as a set/reset latch in a preferred embodiment, generates a block signal to prevent write access to a nonvolatile memory device, such as flash memory, in response to signals provided to the enable and disable input terminals. The secure write blocking circuit also includes an interrupt generator, coupled to the disable block input terminal, that generates an interrupt signal in response to a signal at the disable input terminal. In a related embodiment the secure write blocking circuit also includes a logic circuit, coupled to the blocking circuit, that receives the block signal and a write enable signal and in response thereto generates a control signal to a write enable input of the nonvolatile memory device.

US Patent:

6721885, Apr 13, 2004

Filed:

Sep 8, 2000

Appl. No.:

09/658130

Inventors:

Joseph Wayne Freeman - Raleigh NC
Joseph Franklin Garvey - Cary NC
Steven D. Goodman - Raleigh NC
Randall S. Springfield - Chapel Hill NC

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 15177

US Classification:

713 2, 713100, 713320

Abstract:

Disclosed is a method for reducing power-up time and avoiding customer-induced failures of computer systems during power-up. An intrusion switch, which is connected to the inside frame of the computer system is utilized. The intrusion switch signals the BIOS of the computer system whenever the cover of the computers system unit is opened. The BIOS controls the POST operation during power-up of the computer system. During an initial power-up of the computer system, the POST configuration code examines and configures the hardware and sets the applicable registers, etc. At the end of the POST configuration code, the register values are stored in non-volatile storage. During a subsequent power-up of the computer system, a check is made to see if the cover of the system had been opened. When the cover has not been opened, the BIOS assumes that no changed has occurred in the hardware configuration and the BIOS restores the register values from non-volatile storage without completing the POST operation. When the cover has been opened, the BIOS discards the register values and initiates the POST operation, i. e.

US Patent:

6782349, Aug 24, 2004

Filed:

May 3, 2002

Appl. No.:

10/063608

Inventors:

David Carroll Challener - Raleigh NC
Chad Lee Gettelfinger - Durham NC
Steven Dale Goodman - Raleigh NC
Hernando Ovies - Cary NC
Randall Scott Springfield - Chapel Hill NC
James Peter Ward - Raleigh NC

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 1900

US Classification:

702186, 713187, 713191, 713193

Abstract:

A method and system for updating a root of trust measurement (RTM) function in a personal computer is disclosed. The RTM function is located in a boot block of the personal computer. The method and system comprise initializing a request to update the RTM function and unlocking the boot block based on an authentication process. The method and system further includes updating the RTM function. Through the use of the method and system in accordance with the present invention, the RTM function in a personal computer is updated in a manner that ensures that the update is authentic.

US Patent:

6823464, Nov 23, 2004

Filed:

Feb 26, 2001

Appl. No.:

09/793239

Inventors:

Daryl Carvis Cromer - Apex NC
Joseph Wayne Freeman - Raleigh NC
Steven Dale Goodman - Raleigh NC
Randall Scott Springfield - Chapel Hill NC
James Peter Ward - Raleigh NC

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 124

US Classification:

713202, 7136185, 7136193, 7136200, 7136201

Abstract:

Authentication of an entity remotely managing a data processing system is enabled to allow changes by the remote entity to hard-locked critical security information normally accessible only during the POST and only to trusted entities such as the system BIOS. The remote entity builds a change request and generates a hash from the change request with a current password appended. The change request and the hash are stored in a lockable non-volatile buffer which, once locked, requires a system reset to access. During the next POST, a trusted entity such as the system BIOS reads the change request, generates an authentication hash from the change request and the current password within the hard-locked security information, and compares the buffered hash with the generated hash. If a match is determined, the security information is updated; otherwise a tamper error is reported.

US Patent:

6892305, May 10, 2005

Filed:

Oct 12, 2000

Appl. No.:

09/689460

Inventors:

Richard Alan Dayan - Wake Forest NC, US
Steven Dale Goodman - Raleigh NC, US
Joseph Michael Pennisi - Apex NC, US
Randall Scott Springfield - Chapel Hill NC, US
James Peter Ward - Raleigh NC, US
Joseph Wayne Freeman - Raleigh NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F009/00
G06F012/14
H04L009/32

US Classification:

713192, 713 1, 713 2, 713185, 713194

Abstract:

A method and system for booting up a computer system in a secure fashion is disclosed. The method and system comprise determining the presence of a security feature element during an initialization of the computer system wherein the security feature element includes a public key and a corresponding private key, storing a portion of the public key in a nonvolatile memory within the computer system if the security feature element is present and utilizing an algorithm to determine the presence of the security feature element prior to a subsequent boot-up of the computer system. Through the use of the present invention, a computer system is capable of being booted up whereby the computer system determines if a security feature element was previously present in the system. If a security feature element was previously present in the computer system, any stored keys, along with the secrets that they protect, are prevented from being compromised. It is also an object of the present invention to preclude the system from compromising any keys and associated secrets if a security feature element in the system was not previously present in the system.

US Patent:

6925557, Aug 2, 2005

Filed:

Oct 26, 2001

Appl. No.:

10/055452

Inventors:

Daryl Carvis Cromer - Apex NC, US
Joseph Wayne Freeman - Raleigh NC, US
Steven Dale Goodman - Raleigh NC, US
Eric Richard Kern - Durham NC, US
Randall Scott Springfield - Chapel NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F013/00

US Classification:

713 2, 713100, 713200, 710 16, 710104

Abstract:

A method, system and computer readable medium containing programming instructions for booting a computer system having a plurality of devices is disclosed. They include provisions for initiating a boot sequence in the computer system and determining whether a device of the plurality of devices is either a bootable device or a nonbootable device. If the device is a nonbootable device, a clean restart of the boot sequence is performed, wherein the nonbootable device is bypassed during the clean restart.

US Patent:

6990515, Jan 24, 2006

Filed:

Apr 29, 2002

Appl. No.:

10/135010

Inventors:

Daryl Carvis Cromer - Apex NC, US
Joseph Wayne Freeman - Raleigh NC, US
Chad Lee Gettelfinger - Durham NC, US
Steven Dale Goodman - Raleigh NC, US
Eric Richard Kern - Durham NC, US
Randall Scott Springfield - Chapel Hill NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 1/26
G06F 15/173

US Classification:

709208, 709225, 713310

Abstract:

In a computer network including a plurality of interconnected computers, one of the computers being a sleeping computer in a power down state, the sleeping computer listening for a packet associated with the sleeping computer, a method of waking the sleeping computer from the computer network. An incoming packet of data is transmitted from an administration system in the network to the sleeping computer. When the sleeping computer detects the incoming packet, it determines if the incoming packet contains a data sequence associated with the sleeping computer. If the incoming packet matches the particular data sequence associated with the sleeping computer, the sleeping computer transmits a reply message to the administration system. Upon receiving the reply, the administration system modifies the reply message in a predetermined manner and transmits the modified reply to the sleeping computer. If the sleeping computer determines the reply message was modified in the predetermined manner, then a signal is issued to wake the sleeping computer.

US Patent:

6993648, Jan 31, 2006

Filed:

Aug 16, 2001

Appl. No.:

09/931538

Inventors:

Steven Dale Goodman - Raleigh NC, US
James Patrick Hoff - Raleigh NC, US
Randall Scott Springfield - Chapel Hill NC, US
James Peter Ward - Raleigh NC, US

Assignee:

Lenovo (Singapore) Pte. Ltd.

International Classification:

G06F 9/24

US Classification:

713 2, 713155

Abstract:

When a flash unlock routine unlocks the flash memory to permit updating of a BIOS image, a message is left in secure non-volatile memory, such as a EEPROM. Upon the next re-boot, the boot block code will detect the special message in the non-volatile memory and perform a signature verification of the next block of code that is to be executed during the POST process. This code block will check the remainder of the BIOS image before POST proceeds.

Address:

675 Glenridge Close Dr, Atlanta, GA 30328

Phone:

4042525804

VIN:

WBAWL73537PX47902

Make:

BMW

Model:

3 SERIES

Year:

2007