Palmer E Newman, 8422558 SW 54Th Way, Boca Raton, FL 33433

6823463, Nov 23, 2004

May 16, 2000

09/571192

David Carroll Challener - Raleigh NC
Richard Alan Dayan - Wake Forest NC
Palmer Eugene Newman - Apex NC

International Business Machines Corporation - Armonk NY

G06F 1130

713202, 713100, 713200, 713201, 709217, 709219, 709220, 709221, 709222

A method for providing security to a computer on a computer network is disclosed. When a network-supplied privileged-access password (PAP) is encountered during a system boot-up operation of the computer, the network-supplied PAP is compared with a system-installed PAP. The network-supplied PAP is stored in a first location of a non-volatile memory of the computer, and the system-installed PAP is stored in a second location of the non-volatile memory of the computer. The system-installed PAP is previously entered to the computer via a keyboard of the computer. If the network-supplied PAP does not match the system-installed PAP, a tamper evident mechanism within the computer is set. Otherwise, if the network-supplied PAP matches the system-installed PAP, the boot-up operation continues to be performed. After the boot-up operation has been completed, configuration of the computer is allowed to be performed remotely over the computer network.

7096496, Aug 22, 2006

Dec 6, 1999

09/454646

David Carroll Challener - Raleigh NC, US
Richard Alan Dayan - Wake Forest NC, US
Palmer Eugene Newman - Apex NC, US

Lenovo (Singapore) Pte. Ltd.

G06F 21/20
G06F 15/177

726 17, 726 16, 726 21, 713 2, 713100, 713182, 713183

A system and method of providing increased security of a personal computer through the use of its operating system and initialization. The invention provides a security profile which indicates the level of authorization which the user has and the security exposure which a user will be permitted, which combines with a stored log of attempts to access the personal computer through the use of the password and the results of each attempt to provide a system where unsuccessful attempts will turn off the system. The system also includes a plurality of access levels so that some functions in the computer may be denied to a user but permitted to a system administrator. The access log also may include a record of physical security attacks or attempt, such as removing the covers of a personal computer. The system and method of the present invention have the advantage that, as a result of maintaining information on access attempt and other security information, a security profile may be established and criteria imposed on the user which will improve the security of the personal computer.

5918007, Jun 29, 1999

May 27, 1992

7/889325

John Wiley Blackledge - Boca Raton FL
Richard Alan Dayan - Boca Raton FL
Dennis Lee Moeller - Boca Raton FL
Palmer Eugene Newman - Boca Raton FL
Kenneth John Peter Zubay - Boca Raton FL

International Business Machines Corporation - Armonk NY

G06F 100

395186

This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system. The present invention protects a trusted personal computer system against a probing attack, in which an unauthorized user would attempt to overcome the security feature elements of the personal computer system by inserting some form of probe into an opening provided in the system enclosure for other, legitimate, purposes such as cooling air flow or removable media insertion. A plurality of security feature elements are mounted within the enclosure for selective activation to secure and non-secure states and are disposed at locations inaccessible to any unauthorized user of the personal computer system attempting to affect the operation of any one of the security feature elements by insertion of a probe through an opening.

5287519, Feb 15, 1994

Sep 17, 1992

7/947019

Richard A. Dayan - Boca Raton FL
Kimthanh D. Le - Boynton Beach FL
Matthew T. Mittelstedt - Lantana FL
Palmer E. Newman - Boca Raton FL
Dave L. Randall - Pompano Beach FL
Lisa A. Ruotolo - Lake Worth FL
JoAnna B. Yoder - Delray Beach FL

International Business Machines Corp. - Armonk NY

G06F 1314
G06F 704

395700

A method and medialess personal computer system workstation (or LAN station as herein defined) adaptable for securing the system against attack on a secured network with which the LAN station is associated. A flag bit is set in system memory during a power on self test to indicate whether access may be had to certain security features of the system, and a procedure is described by which access to a network stored configuration setting program may be gained in order to install, change or remove a password used for securing the LAN station while avoiding passing the critical password data through the network.

5388156, Feb 7, 1995

Feb 26, 1992

7/840965

John W. Blackledge - Boca Raton FL
Grant L. Clarke - Boca Raton FL
Richard A. Dayan - Boca Raton FL
Kimthanh D. Le - Boynton Beach FL
Patrick E. McCourt - Delray Beach FL
Matthew T. Mittelstedt - Delray Beach FL
Dennis L. Moeller - Boca Raton FL
Palmer E. Newman - Boca Raton FL
David L. Randall - Pompano Beach FL
JoAnna B. Yoder - Delray Beach FL

International Business Machines Corp. - Armonk NY

H04L 900

380 4

This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system. In particular, a personal computer system in accordance with this invention has a normally closed enclosure, at least one erasable memory element for selective activation to active and inactive states and for receiving and storing a privileged access password when in the active state, an option switch operatively connected with the erasable memory element for setting the erasable memory element to the active and inactive states, a tamper detection switch operatively connected with the erasable memory element for detecting opening of the enclosure and for invalidating any privileged access password stored in the erasable memory element in response to any switching of the tamper switch, and a system processor operatively connected with the erasable memory element for controlling access to at least certain levels of data stored within the system by distinguishing between the active and inactive states of the memory element and between entry and non-entry of any stored privileged access password. In the presently preferred form of the invention, two non-volatile erasable memory elements are provided, one an EEPROM and the other battery backed CMOS RAM.

5341422, Aug 23, 1994

Sep 17, 1992

7/947014

John W. Blackledge - Boca Raton FL
Richard A. Dayan - Boca Raton FL
Dennis L. Moeller - Boca Raton FL
Palmer E. Newman - Boca Raton FL
Kenneth J. P. Zubay - Boca Raton FL

International Business Machines Corp. - Armonk NY

H04L 900

380 4

This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system. This invention contemplates protecting a personal computer system which has the capability of becoming a secure system from being placed into that condition by an attack on an unsecured machine. Additionally, in a network environment, it is important to maintaining network security that any given particular system be uniquely identified to the network, in order to guard against the substitution of an insecure "alternate" which would open the network to attack through an insecure system. This invention contemplates provision for such identification in a secure manner.

5555373, Sep 10, 1996

Feb 6, 1995

8/383884

Richard A. Dayan - Boca Raton FL
Palmer E. Newman - Boca Raton FL

International Business Machines Corporation - Armonk NY

G06F 1100

39518801

A personal computer system is described, having security features enabling control over access to data retained in such a system. The system has a normally closed enclosure, at least one erasable memory element for selective activation to active and inactive states and for receiving and storing a privileged access password when in the active state, an option switch operatively connected with the erasable memory element for setting the erasable memory element to the active and inactive states, a tamper detection switch operatively connected with the erasable memory element for detecting opening of the enclosure, and a system processor operatively connected with the erasable memory element for controlling access to at least certain levels of data stored within the system by distinguishing between entry and non-entry of any stored privileged access password and between detection and non-detection of opening of the enclosure by the tamper detection switch. In addition, an inactivity monitor is provided for measuring the time period between successive uses of the system and for determining whether or not the measured time period exceeds a specified inactivity period. A utility is provided for rendering the monitor enabled.

5712973, Jan 27, 1998

May 20, 1996

8/650205

Richard A. Dayan - Wake Forest NC
Joseph P. McGovern - Apex NC
Palmer E. Newman - Apex NC

International Business Machines Corp. - Armonk NY

H04L 900

395186

A personal computer system has security features enabling control over access to data retained in such system. The system cooperates with a transmitter of radiation having a predefined characteristic. A radiation detector within the system detects such radiation and produces an alarm signal when detection fails or is lost. The alarm signal is retained and triggers security logic cooperating with power-on-sequence logic to prevent the system from becoming operative. It is preferred to also provide an erasable memory element that when switched to an active state stores a privileged-access password. Logic is provided to cooperate with such element and override the security logic when the correct password is input to the system. As an added security feature the transmitter may be deactivated if an intrusion is detected at the site to shut down all systems responding to the radiation in the security zone.