William S Jacobs

US Patent:

20130019281, Jan 17, 2013

Filed:

Jul 11, 2011

Appl. No.:

13/179746

Inventors:

William E. Jacobs - Beaverton OR, US
Sunil Bhagia - Olympia WA, US
Dmitry Barsky - San Jose CA, US

Assignee:

CISCO TECHNOLOGY, INC. - San Jose CA

International Classification:

G06F 21/20

US Classification:

726 4

Abstract:

Techniques are provided for authenticating a user when accessing a Basic Input/Output System (BIOS) of a computing device. Access request information is received. An access information database is queried to authenticate the access request information with access information stored in the access information database. Validation information is received, indicating whether the access request information is authenticated, and permission is granted for access to settings of the computing device if the validation information indicates that the access request information is authenticated.

US Patent:

20130263205, Oct 3, 2013

Filed:

Mar 29, 2012

Appl. No.:

13/434535

Inventors:

William E. Jacobs - Beaverton OR, US

International Classification:

G06F 21/00

US Classification:

726 1

Abstract:

A method is provided in one example embodiment that includes storing a reference measurement of an object in a trusted storage and retrieving the reference measurement from the trusted storage before an operating system is loaded. In a pre-operating system environment, the reference measurement can be compared with a golden measurement and a policy action can be applied if a variance is detected between the reference measurement and the golden measurement. In more particular embodiments, the reference measurement is a measurement of firmware, and yet more particularly, the measurement is a hash of the firmware.

US Patent:

20180012023, Jan 11, 2018

Filed:

Sep 21, 2017

Appl. No.:

15/711688

Inventors:

- San Jose CA, US
William E. Jacobs - Beaverton OR, US

International Classification:

G06F 21/57
G06F 21/51
G06F 9/445

Abstract:

A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.

US Patent:

20160103995, Apr 14, 2016

Filed:

Dec 17, 2015

Appl. No.:

14/972502

Inventors:

- San Jose CA, US
William E. Jacobs - Beaverton OR, US

Assignee:

CISCO TECHNOLOGY, INC. - San Jose CA

International Classification:

G06F 21/57

Abstract:

A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.

US Patent:

20140351571, Nov 27, 2014

Filed:

May 23, 2013

Appl. No.:

13/901281

Inventors:

- San Jose CA, US
William E. Jacobs - Beaverton OR, US

Assignee:

CISCO TECHNOLOGY, INC. - San Jose CA

International Classification:

G06F 21/57

US Classification:

713 2

Abstract:

A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.