TECHNOLOGIES FOR SECURE OFFLINE ACTIVATION OF HARDWARE FEATURES
    1.
    发明申请
    TECHNOLOGIES FOR SECURE OFFLINE ACTIVATION OF HARDWARE FEATURES 审中-公开
    硬件特性的离线激活技术

    公开(公告)号:US20150381368A1

    公开(公告)日:2015-12-31

    申请号:US14318278

    申请日:2014-06-27

    Abstract: Technologies for secure offline activation of hardware features include a target computing device having a platform controller hub (PCH) including a converged security and manageability engine (CSME) and a number of in-field programmable fuses (IFPs). During assembly of the target computing device by an original equipment manufacturer (OEM), the CSME is provided a list of hardware features to be activated. The CSME configures the IFPs to enable the requested features, generates a digital receipt including the activated features and a unique device ID, and signs the receipt using a unique device key. Signed receipts may be periodically submitted to a vendor computing device, which verifies the signed receipts, extracts the active feature list, and bills the OEM for activated features of the PCHs. The vendor computing device may bill the OEM a maximum price for PCHs for which there is no associated signed receipt. Other embodiments are described and claimed.

    Abstract translation: 用于硬件特征的安全离线激活的技术包括具有包括融合安全性和可管理性引擎(CSME)的平台控制器集线器(PCH)以及多个现场可编程保险丝(IFP))的目标计算设备。 在由原始设备制造商(OEM)组装目标计算设备的过程中,CSME提供要激活的硬件功能的列表。 CSME配置IFP以启用所请求的功能,生成包含激活的功能和唯一设备ID的数字收据,并使用唯一的设备密钥对收据进行签名。 签署的收据可以定期地提交给供应商计算设备,该设备验证签署的收据,提取活动的特征列表,并为OEM的PCH的激活特征收费。 供应商计算设备可以向OEM收取没有相关签名收据的PCH的最高价格。 描述和要求保护其他实施例。

    Tunneling platform management messages through inter-processor interconnects
    3.
    发明授权
    Tunneling platform management messages through inter-processor interconnects 有权
    隧道平台管理消息通过处理器间互连

    公开(公告)号:US08904079B2

    公开(公告)日:2014-12-02

    申请号:US13532085

    申请日:2012-06-25

    CPC classification number: G06F13/20 G06F15/17 G06F2213/0026

    Abstract: Methods and apparatus for tunneling platform management messages through inter-processor interconnects. Platform management messages are received from a management entity such as a management engine (ME) at a management component of a first processor targeted for a managed device operatively coupled to a second processor. Management message content is encapsulated in a tunnel message that is tunneled from the first processor to a second management component in the second processor via a socket-to-socket interconnect link between the processors. Once received at the second management component the encapsulated management message content is extracted and the original management message is recreated. The recreated management message is then used to manage the targeted device in a manner similar to if the ME was directly connected to the second processor. The disclosed techniques enable management of platform devices operatively coupled to processors in a multi-processor platform via a single management entity.

    Abstract translation: 通过处理器互连隧道化平台管理消息的方法和装置。 从管理实体(诸如管理引擎(ME))处接收平台管理消息,该管理引擎(ME)处于针对可操作地耦合到第二处理器的被管理设备的第一处理器的管理组件。 管理消息内容被封装在隧道消息中,隧道消息通过处理器之间的套接字到套接字互连链路从第一处理器隧道传送到第二处理器中的第二管理组件。 一旦在第二管理组件被接收到,则提取封装的管理消息内容,并重新创建原始管理消息。 然后,重新创建的管理消息用于以与ME直接连接到第二处理器相似的方式来管理目标设备。 所公开的技术使得能够经由单个管理实体来管理与多处理器平台中的处理器可操作地耦合的平台设备。

    System and method to seamlessly enable enhanced management and scripting of a computer system and its add-in devices
    10.
    发明授权
    System and method to seamlessly enable enhanced management and scripting of a computer system and its add-in devices 有权
    系统和方法无缝地实现计算机系统及其附加设备的增强的管理和脚本编制

    公开(公告)号:US07539854B2

    公开(公告)日:2009-05-26

    申请号:US10746579

    申请日:2003-12-24

    CPC classification number: G06F9/4411 G06F9/45512 G06F15/177 Y10S707/99933

    Abstract: An embodiment of the present invention is a system and method relating to seamlessly enable enhanced management and scripting of a computer system and its add-in devices. In at least one embodiment, the present invention enables a system administrator or integrator to script a common configuration for multiple devices and then automatically configure the devices using the script. The language construct and central data repository for configuration settings are extended to comprehend a scripting language. A script is read by a script engine during either pre-boot or runtime. The script engine searches a keyword database on the central data repository to determine requested configuration settings. A data offset is corresponding to a specific op-code is used to determine where configuration settings are located, for modification.

    Abstract translation: 本发明的一个实施例是一种与无缝地实现计算机系统及其附加装置的增强的管理和脚本化有关的系统和方法。 在至少一个实施例中,本发明使得系统管理员或集成商可以为多个设备编写通用配置,然后使用脚本自动配置设备。 用于配置设置的语言结构和中央数据存储库被扩展以理解脚本语言。 脚本在预引导或运行期间由脚本引擎读取。 脚本引擎搜索中央数据存储库中的关键字数据库以确定所请求的配置设置。 数据偏移对应于用于确定配置设置位置的特定操作码,以供修改。

Patent Agency Ranking