TL;DR: In this article, the authors describe interconnectable personal computer architectures comprising secure, portable and persistent computing environments that provide secure computing sessions with persistence using a secure non-computing client device, such as a USB device, that interfaces with a host computer and, optionally, a trusted server.
Abstract: Disclosed are interconnectable personal computer architectures comprising secure, portable and persistent computing environments that provide secure computing sessions with persistence. The computing environments are implemented using a secure non-computing client device, such as a USB device, that interfaces with a host computer and, optionally, a trusted server. The secure non-computing client device is used to instantiate a secure BIOS and a secure cold or warm boot of the host computer, from the client device, in a host protected area of the host computer, or from the trusted server. The client device comprises a security device, such a trusted platform module, that encrypts and decrypts data transferred between the client apparatus and the host computer to provide a sealed computing environment on the host computer. The client device may implement keyboard logger attack prevention. The client device may also implement a high assurance guard to protect applications. The client device may also comprise security wrapper software that encapsulates malware processed by the host computer. Computing methods and software are also disclosed.
TL;DR: In this paper, a system for updating or recovering system firmware (BIOS) of a computer system using a utility running from a protected area of a mass storage device is described.
Abstract: A System for updating or recovering system firmware (BIOS) of a computer system (10) using a utility running from a protected area of a mass storage device (20). This avoids the standard operating system environment and removes the possibility of tampering or deletion of required files. Files containing a copy of system firmware (BIOS) and a firmware update utility for writing to the system EEPROM or flash ROM (12) are transferred to the mass storage device (20). Once the files are transferred, the area on the mass storage device containing these files are protected in a Host Protected Area. After protecting or locking this area, the system firmware or boot utility either boots the standard operating system or runs the firmware update utility from the Host Protected Area in recovery mode if the firmware is corrupted. The firmware update utility is run in an environment outside of and independent of the standard operating environment of the computer system.
TL;DR: In this article, the content of a hard disk drive or the like information storage media that includes content stored in a host protected area (HPA) or reserve area of the hard disk is duplicated using hard disk disk drive duplicating machinery.
Abstract: The content of a hard disk drive or the like information storage media that includes content stored in a host protected area (HPA) or reserve area of the hard disk is duplicated using hard disk drive duplicating machinery. The duplication process includes the steps of detecting the presence of a HPA on a source drive, and if detected, generating an HPA are of the same or of a sufficiently accommodating size on the target disk drive. Information from the source HPA drive to the thus created HPA area of the target-drive. The remaining content from the source drive is written to an available section of the target drive. The invention is thereby able to detect whether a source drive has a HPA, create an HPA on the target drive, and to copy the content of the source HPA to the HPA on the target device to ensure a proper duplication of the target drive.
TL;DR: In this paper, the authors divide a media space, such as found in a hard drive or other mass storage device, into a portion directly accessible by all applications and a portion inaccessible by all software except host Basic Input Output System (BIOS) code.
Abstract: A method and system divides a media space, such as found in a hard drive or other mass storage device, into a portion directly accessible by all software and a portion inaccessible by all software except host Basic Input Output System (BIOS) code. A special procedure to access media space may include a special instruction or instruction set with or without a password to allow hard drive support for READ ONLY partitions, READ ONLY CD-ROM emulation, and other READ ONLY hard drive access requirements. The special procedure may user an expanded ATA command set, an expanded BIOS command set with System Management Mode, or code to temporarily unprotect at least a portion of the portion normally inaccessible by the software other than host BIOS code.
TL;DR: In this paper, a boot engineering extension record (BEER) is configured to have SETMAX pointer that points to a user area of the hard disk drive and a PARTIES service area that is part of a host protected area.
Abstract: Computer systems, software and methods that allow information from a nonvolatile removable media device, such as a CD-ROM or DVD, or the like, to be placed on a mass storage device. Once the information from the non-volatile removable media device is on the mass storage device, a computer operating system can then use the information in the same manner as it would normally use a CD-ROM, DVD, or other media inserted in its reader. In accordance with the present invention, the systems, software and methods are operative to create a boot engineering extension record (BEER) on the hard disk drive. The boot engineering extension record is configured to have SETMAX pointer that points to a user area of the hard disk drive and a service area pointer that points to a PARTIES service area that is part of a host protected area. Data derived from the removable storage media device is stored in the PARTIES service area, which will be used in an emulated removable storage media device. An operating system is configured to access 24 the PARTIES service area so that the data that emulates the removable storage media device is available to a user. The operating system is also configured to access the user area, which provides for access to user applications and user data of a user of the computer system.