JAMES MARK EDWARDS, MD
Radiology at Sam Jackson Park Rd, Portland, OR

2002014, Oct 3, 2002

Mar 31, 2001

09/823491

James Edwards - Portland OR, US
Frederick Strahm - Hillsboro OR, US
John Richardson - Portland OR, US
Ylian Saint-Hilaire - Hillsboro OR, US

G06F011/30, G06F012/14

713/200000

A method and apparatus are described for preventing security vulnerabilities resulting from buffer overruns. According to one embodiment of the present invention, CALL is modified to place a return address on the stack, and then a random amount of space is added to the stack. This random value is placed in a known place on the stack, or kept in a non-accessible CPU register. The rest of the stack is built normally. When RET is called it finds the number of bytes added to the stack and finds the return address on the stack and returns as normal. This method allows a simple hardware solution that will not be visible to the software, yet provide a powerful deterrent to hackers looking to exploit buffer overrun vulnerabilities in software. Without any software modifications we would be able to deter a significant number of buffer overrun attacks. By affecting components lower on the environment it is possible to influence a larger set of software. For example, it is possible to affect all of the software running on the system without having to change any of the software.

6463471, Oct 8, 2002

Dec 28, 1998

09/221628

Christian Dreke - Portland OR
James W. Edwards - Portland OR
Walter K. Hazzard - Portland OR
Aaron Kunze - Portland OR

Intel Corporation - Santa Clara CA

G06F 15173

709224, 709207, 709204

A method for distributing and maintaining network presence information is presented. According to an embodiment of the present invention, a user logs onto the Internet and transmits to an Internet Presence Information Server (IPIS) his/her presence information, a list of peers (individual network users) whose network presence are of interest to the user, and a request for a list of peers interested in the users network presence. The IPIS then responds to the user with both a list including the last known Internet Protocol (IP) address for each peer the user is interested in and a list of peers interested in the users Internet presence. No further communication between the user and IPIS is required after the IPIS responds to the user with these two lists. The user then attempts to directly contact the peers on the first list received from the IPIS by confirming and authenticating the received IP addresses. According to policy, the user directly contacts the peers on the second list received from the IPIS to inform those peers the user is currently signed on-line.

8607040, Dec 10, 2013

Nov 16, 2010

12/947485

Vincent J. Zimmer - Federal Way WA, US
Abdul M. Bailey - Tigard OR, US
James W. Edwards - Portland OR, US
Rahul Khanna - Portland OR, US
Yu Fu Li - Shanghai, CN
Di Tang - Shanghai, CN

Intel Corporation - Santa Clara CA

G06F 9/00, G06F 15/177

713 2

Methods and apparatuses for re-instantiating a firmware environment that includes one or more firmware functions available at pre-boot time when transitioning the computing device from a first, higher power consumption state to a second, lower power consumption state. The firmware environment determines whether a cryptographic signature on a firmware volume is verified; whether hardware resources of the computing device requested by a manifest of the firmware volume are available; and whether a firmware module of the firmware volume is compatible with installed firmware of the firmware environment. If so, the firmware environment reserves space in a memory to accommodate resources used by the firmware module, and executes the firmware module with the computing device in the second, lower power consumption state.

2007007, Apr 5, 2007

Sep 30, 2005

11/244494

Mark Walker - Beaverton OR, US
James Edwards - Portland OR, US

G06F 15/16

709227000

A multi-mode remote user interface server has been presented. In one embodiment, the multi-mode remote user interface server includes a first storage device to store instructions of a remote-capable application, a second storage device coupled to the first storage device to store a graphical interface description language (GIDL) document associated with the remote-capable application, and a processing device coupled to the first storage device and configured to serve remote client devices having different levels of processing capability, the processing device to allow a remote client device to select a mode out of a plurality of modes in which the remote-capable application is to be run. Other embodiments have been claimed and described.

7577451, Aug 18, 2009

Apr 4, 2001

09/826251

Ylian Saint-Hilaire - Hillsboro OR, US
James Edwards - Portland OR, US

Intel Corporation - Santa Clara CA

H04W 4/00, H04B 7/00

455465, 455462, 4555521

A pair of shorter range radio frequency networks may be linked together using a longer range communication protocol that is not based on the same radio frequency protocol utilized by the shorter range radio frequency networks. Enumeration data from one of the shorter range networks may be exchanged over a longer range network to combine the two shorter range networks using proxy devices such as cellular telephones. This may allow devices in a shorter range network to communicate over a longer range.

7441270, Oct 21, 2008

Jul 6, 2000

09/612324

James W. Edwards - Portland OR, US
Ylian Saint-Hilaire - Hillsboro OR, US
John W. Richardson - Portland OR, US

Intel Corporation - Santa Clara CA

H04L 29/00

726 15, 726 11, 726 12, 726 13, 713152, 709206, 709223, 709227

A communication system includes a first endpoint located behind a first connectivity barrier, such as a firewall or a consumer gateway, and a second endpoint. A service is arranged to respond to a request from the first endpoint to establish communications with the second endpoint by assigning a server to handle a session between the first endpoint and the service. A session initiated by the second endpoint is established with the service if the second endpoint is located behind a second connectivity barrier. If the second endpoint is not located behind a connectivity barrier, a transport level communications connection can be established with the second endpoint. In some cases, the service can instruct the first endpoint to establish a direct session with the second endpoint.