-
公开(公告)号:US20150304107A1
公开(公告)日:2015-10-22
申请号:US14255145
申请日:2014-04-17
Applicant: International Business Machines Corporation
Inventor: Volker Boenisch , Reinhard Buendgen , Franziska Geisert , Jakob Lang , Mareike Lattermann , Budy D. Notohardjono , Angel Nunez-Mencias
CPC classification number: G06F7/588 , G09C1/00 , H04L9/0869 , H04L2209/24
Abstract: Generating a pool of random numbers for use by computer applications. Vibration sensors are placed throughout a machine and collects information theoretic entropy data from the measurement of the vibration sensors. The data is then filtered and added to an entropy pool. Applications needing a random number may acquire a number from the pool. A method, computer program product and system to generate the pool are provided.
Abstract translation: 生成计算机应用程序使用的随机数字池。 将振动传感器放置在整个机器中,并从振动传感器的测量中收集信息理论熵数据。 然后将数据过滤并添加到熵池。 需要随机数的应用程序可以从池中获取一个数字。 提供了一种生成池的方法,计算机程序产品和系统。
-
公开(公告)号:US11388008B2
公开(公告)日:2022-07-12
申请号:US16512878
申请日:2019-07-16
Applicant: International Business Machines Corporation
Inventor: Christoph Vincent Schlameuss , Benno Schuepferling , Dennis Zeisberg , Volker Boenisch , Jakob Christopher Lang
Abstract: Provided is a method and system for protecting the integrity of a computing system. The system may initialize a plurality of trusted platform modules (TPMs) within the computing system. The system may read a unique identifier corresponding to each TPM of the plurality of TPMs to determine a system state. The system may write the system state to platform configuration registers (PCRs) of each of the plurality of TPMs. The system may load a sealed private owner key part into each TPM of the plurality of TPMs. The plurality of TPMs may determine if a predetermined number of unique identifiers have been processed by validating a value of the PCRs to meet an owner key policy. The plurality of TPMs may unseal the private owner key part in each TPM where the value of the PCRs meets the owner key policy.
-
公开(公告)号:US10936325B2
公开(公告)日:2021-03-02
申请号:US16559723
申请日:2019-09-04
Applicant: International Business Machines Corporation
Inventor: Reinhard T. Buendgen , Jakob C. Lang , Volker Boenisch , Angel Nunez Mencias
IPC: G06F9/4401 , G06F9/445 , G06F9/50
Abstract: A computer-implemented method, for booting a computer system, that provides a list with entries of startup processes. Each startup process defines a resource of the computer system. For each startup process a requirement is defined. The method further comprises fetching one of the entries of the list with entries of startup processes; determining whether the requirement is satisfied for the one of the entries of the list with entries of startup processes; fetching, in case the requirement is not fulfilled, a next one of the entries of the list with entries of startup processes; starting, in case the required resource is fulfilled, the startup process; and repeating the fetching a next one of the entries, the determining and the starting until all startup processes of the list of startup processes have been started.
-
公开(公告)号:US20210021422A1
公开(公告)日:2021-01-21
申请号:US16512878
申请日:2019-07-16
Applicant: International Business Machines Corporation
Inventor: Christoph Vincent Schlameuss , Benno Schuepferling , Dennis Zeisberg , Volker Boenisch , Jakob Christopher Lang
Abstract: Provided is a method and system for protecting the integrity of a computing system. The system may initialize a plurality of trusted platform modules (TPMs) within the computing system. The system may read a unique identifier corresponding to each TPM of the plurality of TPMs to determine a system state. The system may write the system state to platform configuration registers (PCRs) of each of the plurality of TPMs. The system may load a sealed private owner key part into each TPM of the plurality of TPMs. The plurality of TPMs may determine if a predetermined number of unique identifiers have been processed by validating a value of the PCRs to meet an owner key policy. The plurality of TPMs may unseal the private owner key part in each TPM where the value of the PCRs meets the owner key policy.
-
公开(公告)号:US20180081636A1
公开(公告)日:2018-03-22
申请号:US15823992
申请日:2017-11-28
Applicant: International Business Machines Corporation
Inventor: Volker Boenisch , Reinhard Buendgen , Franziska Geisert , Jakob Lang , Mareike Lattermann , Budy D. Notohardjono , Angel Nunez-Mencias
CPC classification number: G06F7/588 , G09C1/00 , H04L9/0869 , H04L2209/24
Abstract: Generating a pool of random numbers for use by computer applications. Vibration sensors are placed throughout a machine and collects information theoretic entropy data from the measurement of the vibration sensors. The data is then filtered and added to an entropy pool. Applications needing a random number may acquire a number from the pool. A method, computer program product and system to generate the pool are provided.
-
公开(公告)号:US09880812B2
公开(公告)日:2018-01-30
申请号:US14949307
申请日:2015-11-23
Applicant: International Business Machines Corporation
Inventor: Volker Boenisch , Reinhard Buendgen , Franziska Geisert , Jakob Lang , Mareike Lattermann , Budy D Notohardjono , Angel Nunez-Mencias
CPC classification number: G06F7/588 , G09C1/00 , H04L9/0869 , H04L2209/24
Abstract: Generating a pool of random numbers for use by computer applications. Vibration sensors are placed throughout a machine and collects information theoretic entropy data from the measurement of the vibration sensors. The data is then filtered and added to an entropy pool. Applications needing a random number may acquire a number from the pool. A method, computer program product and system to generate the pool are provided.
-
公开(公告)号:US09329836B2
公开(公告)日:2016-05-03
申请号:US14255125
申请日:2014-04-17
Applicant: International Business Machines Corporation
Inventor: Volker Boenisch , Reinhard Buendgen , Franziska Geisert , Jakob Lang , Mareike Lattermann , Budy D Notohardjono , Angel Nunez-Mencias
CPC classification number: G06F7/588 , G06F2207/3804 , H04L9/0866 , H04L9/0869 , H04L2209/24 , H04L2209/805
Abstract: Generating a pool of random numbers for use by computer applications. Vibration sensors are placed throughout a machine and collect entropy data from the measurements of the vibration sensors. The data is then filtered and sent via secure connection to a second machine to be added to the second machine's entropy pool. Applications needing a random number may acquire a number from the pool. A method, computer program product and system to generate the pool are provided.
-
公开(公告)号:US10606681B2
公开(公告)日:2020-03-31
申请号:US15809359
申请日:2017-11-10
Applicant: International Business Machines Corporation
Inventor: Volker Boenisch , Reinhard T. Buendgen , Franziska Geisert , Michael Holzheu , Jakob C. Lang , Angel Nunez Mencias
Abstract: Methods and systems for executing dumping of main memory content and CPU states and for an adaptive boot. The methods and the systems provide a configuration list of the computer system comprising a pre-defined set of dedicated resources for the dumping, provide threshold values for a pre-defined set of minimum resources for executing a reboot of the computer system, assign the pre-defined set of the dedicated resources for executing the dumping, start the dumping, release ones of the dedicated resources after content of the ones of the dedicated resources has been dumped, start a reboot process of the computer system in response to determining that the ones of the dedicated resources exceeds the threshold values for the pre-defined set of the minimum resources for executing the reboot process, and continue to release others of the dedicated resources to the reboot process until the dumping is completed.
-
公开(公告)号:US10592255B2
公开(公告)日:2020-03-17
申请号:US15791697
申请日:2017-10-24
Applicant: International Business Machines Corporation
Inventor: Reinhard T. Buendgen , Jakob C. Lang , Volker Boenisch , Angel Nunez Mencias
IPC: G06F9/4401 , G06F9/445 , G06F9/50
Abstract: A computer-implemented method, for booting a computer system, that provides a list with entries of startup processes. Each startup process defines a resource of the computer system. For each startup process a requirement is defined. The method further comprises fetching one of the entries of the list with entries of startup processes; determining whether the requirement is satisfied for the one of the entries of the list with entries of startup processes; fetching, in case the requirement is not fulfilled, a next one of the entries of the list with entries of startup processes; starting, in case the required resource is fulfilled, the startup process; and repeating the fetching a next one of the entries, the determining and the starting until all startup processes of the list of startup processes have been started.
-
公开(公告)号:US10585736B2
公开(公告)日:2020-03-10
申请号:US15665454
申请日:2017-08-01
Applicant: International Business Machines Corporation
Inventor: Volker Boenisch , Reinhard T. Buendgen , Franziska Geisert , Michael Holzheu , Jakob C. Lang , Angel Nunez Mencias
Abstract: Methods and systems for executing dumping of main memory content and CPU states and for an adaptive boot. The methods and the systems provide a configuration list of the computer system comprising a pre-defined set of dedicated resources for the dumping, provide threshold values for a pre-defined set of minimum resources for executing a reboot of the computer system, assign the pre-defined set of the dedicated resources for executing the dumping, start the dumping, release ones of the dedicated resources after content of the ones of the dedicated resources has been dumped, start a reboot process of the computer system in response to determining that the ones of the dedicated resources exceeds the threshold values for the pre-defined set of the minimum resources for executing the reboot process, and continue to release others of the dedicated resources to the reboot process until the dumping is completed.
-
-
-
-
-
-
-
-
-