专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20090106832A1 COMPUTER SYSTEM AND PROGRAM CREATING DEVICE 有权
标题翻译：计算机系统和程序创建设备
公开(公告)号：US20090106832A1
公开(公告)日：2009-04-23
申请号：US11915198
申请日：2006-05-30
申请人： Tomoyuki Haga , Hiroshi Okuyama , Hideki Matsushima , Yoshikatsu Ito , Shigehiko Kimura , Yasuki Oiwa , Takafumi Kagawa
发明人： Tomoyuki Haga , Hiroshi Okuyama , Hideki Matsushima , Yoshikatsu Ito , Shigehiko Kimura , Yasuki Oiwa , Takafumi Kagawa
IPC分类号： G06F21/00
CPC分类号： G06F9/468 , G06F21/74
摘要： A mobile telephone 10 includes: a CPU 102 that fetches and decodes instructions included in an OS, a nonsecure program, a switch device driver, and a secure program, and operates according to the decoding results; and a memory 107 including a controlled area and an uncontrollable area. The OS has only the controlled area as its access space, and includes an instruction for mediating access of the nonsecure program to the controlled area and an instruction for instructing the switch device driver to make a switch to the secure program. The nonsecure program includes an instruction to access the controlled area via the OS. The switch device driver includes an instruction to make a switch from execution of the OS to execution of the secure program in response to an instruction of the OS. The secure program has only the uncontrollable area as its access space, and includes an instruction to access the uncontrollable area.
摘要翻译：移动电话10包括：CPU 102，其对包含在OS中的指令，非安全程序，开关设备驱动程序和安全程序进行读取和解码，并根据解码结果进行操作; 以及包括受控区域和不可控制区域的存储器107。 OS仅具有受控区域作为其访问空间，并且包括用于调停非安全程序到受控区域的访问的指令以及用于指示交换机设备驱动程序切换到安全程序的指令。非安全程序包括通过操作系统访问受控区域的指令。开关设备驱动器包括响应于OS的指令从OS的执行切换到安全程序的执行的指令。安全程序只有不可控制的区域作为其访问空间，并且包括访问不可控区域的指令。

22. 发明授权

US07934256B2 Electronic device, update server device, key update device 有权
标题翻译：电子设备，更新服务器设备，密钥更新设备
公开(公告)号：US07934256B2
公开(公告)日：2011-04-26
申请号：US11914918
申请日：2006-05-30
申请人： Hideki Matsushima , Takafumi Kagawa , Tomoyuki Haga , Hiroshi Okuyama , Shigehiko Kimura , Yasuki Oiwa , Yoshikatsu Ito
发明人： Hideki Matsushima , Takafumi Kagawa , Tomoyuki Haga , Hiroshi Okuyama , Shigehiko Kimura , Yasuki Oiwa , Yoshikatsu Ito
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L9/0891 , G06F11/1433 , G06F21/57 , G06F21/64 , G06F21/86 , G06F2221/2129 , H04L63/123 , H04L63/1441 , H04L67/34 , H04L2209/80
摘要： The present invention offers an electronic device that reduces the amount of data for communication required when files pertaining to software are to be updated, as compared to the conventional devices, and performs tamper detection. The present invention is an electronic device having an application file pertaining to an operation of application software and updating the application file via a network. The electronic device (i) stores therein the application file including one or more data pieces, (ii) receives, from an external apparatus via the network, update data and location information indicating a location, within the application file, which is for rewrite with the update data, (iii) rewrites only part of the application file by writing over a data piece present at the indicated location with the update data, to update the application file, and (iv) examines whether the updated application file has been tampered with.
摘要翻译：本发明提供了一种电子设备，与常规设备相比，减少了与更新软件相关的文件所需的通信数据量，并进行了篡改检测。本发明是一种电子设备，具有与应用软件的操作有关的应用文件，并经由网络更新应用文件。电子设备（i）在其中存储包括一个或多个数据的应用文件，（ii）经由网络从外部设备接收更新数据和指示应用文件内的用于重写的位置的位置信息，所述更新数据，（iii）通过使用所述更新数据写入所述指示位置处的数据段来仅重写所述应用文件的一部分，以更新所述应用文件，以及（iv）检查所更新的应用文件是否已被篡改。

23. 发明申请

US20130212575A1 INFORMATION PROCESSOR AND METHOD FOR CONTROLLING THE SAME 有权
标题翻译：信息处理器及其控制方法
公开(公告)号：US20130212575A1
公开(公告)日：2013-08-15
申请号：US12918918
申请日：2009-02-09
申请人： Takayuki Ito , Manabu Maeda , Tomoyuki Haga , Hisashi Takayama , Hideki Matsushima
发明人： Takayuki Ito , Manabu Maeda , Tomoyuki Haga , Hisashi Takayama , Hideki Matsushima
IPC分类号： G06F9/455
CPC分类号： G06F9/45533 , G06F12/1475 , G06F12/1491 , G06F21/00 , G06F21/30 , G06F21/53
摘要： It is an object of the present invention to provide an information processing device that verifies the authorization of an application that has issued an access request to access a device. For the present invention to fulfill the above object, when an application 102 on a universal OS issues a processing request to a secure device driver 105, a secure VMM 100 and an application identification unit 106 on a management dedicated OS 104 lock a page table of the application 102 and refer to the page table to generate a hash value. The application is determined to be authorized or unauthorized by comparing the generated hash value with a reference hash value.
摘要翻译：本发明的目的是提供一种信息处理设备，其验证已经发出访问设备的访问请求的应用的授权。为了实现上述目的，为了实现上述目的，当通用OS上的应用102向安全设备驱动器105发出处理请求时，管理专用OS 104上的安全VMM100和应用识别单元106锁定应用程序102并参考页表来生成哈希值。通过将生成的散列值与引用散列值进行比较，确定应用程序被授权或未授权。

24. 发明申请

US20110173643A1 USING TRANSIENT PCRs TO REALISE TRUST IN APPLICATION SPACE OF A SECURE PROCESSING SYSTEM 审中-公开
标题翻译：使用瞬态PCR在安全处理系统的应用空间中实现信任
公开(公告)号：US20110173643A1
公开(公告)日：2011-07-14
申请号：US13063103
申请日：2009-10-09
申请人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga
发明人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga
IPC分类号： G06F9/44
CPC分类号： G06F21/575 , G06F2221/2145
摘要： A method to allow programs running within the application space of a device with a secure processor and a trusted computing base to flexibly use certificates that describe the required system state. An information processing device including PSC database (1112), Component and PSC Map (1202), and OS support (1200).
摘要翻译：允许具有安全处理器和可信计算基础的设备的应用空间内运行的程序灵活地使用描述所需系统状态的证书的方法。一种包括PSC数据库（1112），组件和PSC映射（1202）和OS支持（1200）的信息处理设备。

25. 发明申请

US20070113079A1 Data processing apparatus 有权
标题翻译：数据处理装置
公开(公告)号：US20070113079A1
公开(公告)日：2007-05-17
申请号：US10580818
申请日：2004-11-26
申请人： Takayuki Ito , Teruto Hirota , Kouichi Kanemura , Tomoyuki Haga , Yoshikatsu Ito
发明人： Takayuki Ito , Teruto Hirota , Kouichi Kanemura , Tomoyuki Haga , Yoshikatsu Ito
IPC分类号： H04L9/00
CPC分类号： G06F9/4812 , G06F9/468 , G06F21/78 , G06F2221/2105
摘要： In a data processing apparatus that switches between a secure mode and a normal mode during execution, the secure mode allowing access to secure resources to be protected, the normal mode not allowing access to the secure resources, when the secure resources increase in the secure mode, the load on a protection mechanism for protecting the resources becomes large. Thus, there is a demand for data processing apparatuses that are able to reduce secure resources. The present invention relates to a data processing apparatus that stores therein a secure program including one or more processing procedures which use secure resources and a call instruction for calling a normal program to be executed in a normal mode. While executing the secure program, the data processing apparatus calls the normal program with the call instruction and operates according to the called normal program.
摘要翻译：在执行期间在安全模式和正常模式之间切换的数据处理装置中，当安全模式下的安全资源增加时，安全模式允许访问保护资源以被保护，正常模式不允许访问安全资源用于保护资源的保护机制的负担变大。因此，需要能够减少安全资源的数据处理装置。数据处理装置本发明涉及一种数据处理装置，其中存储有一个或多个使用安全资源的处理过程的安全程序和用于调用在正常模式下执行的正常程序的呼叫指令。在执行安全程序时，数据处理装置利用呼叫指令调用正常程序，并根据所调用的正常程序进行操作。

26. 发明授权

US07788487B2 Data processing apparatus 有权
标题翻译：数据处理装置
公开(公告)号：US07788487B2
公开(公告)日：2010-08-31
申请号：US10580818
申请日：2004-11-26
申请人： Takayuki Ito , Teruto Hirota , Kouichi Kanemura , Tomoyuki Haga , Yoshikatsu Ito
发明人： Takayuki Ito , Teruto Hirota , Kouichi Kanemura , Tomoyuki Haga , Yoshikatsu Ito
IPC分类号： H04L29/06 , G06F7/04 , G06F13/00
CPC分类号： G06F9/4812 , G06F9/468 , G06F21/78 , G06F2221/2105
摘要： In a data processing apparatus that switches between a secure mode and a normal mode during execution, the secure mode allowing access to secure resources to be protected, the normal mode not allowing access to the secure resources, when the secure resources increase in the secure mode, the load on a protection mechanism for protecting the resources becomes large. Thus, there is a demand for data processing apparatuses that are able to reduce secure resources.The present invention relates to a data processing apparatus that stores therein a secure program including one or more processing procedures which use secure resources and a call instruction for calling a normal program to be executed in a normal mode. While executing the secure program, the data processing apparatus calls the normal program with the call instruction and operates according to the called normal program.
摘要翻译：在执行期间在安全模式和正常模式之间切换的数据处理装置中，当安全模式下的安全资源增加时，安全模式允许访问保护资源以被保护，正常模式不允许访问安全资源用于保护资源的保护机制的负担变大。因此，需要能够减少安全资源的数据处理装置。数据处理装置本发明涉及一种数据处理装置，其中存储有一个或多个使用安全资源的处理过程的安全程序和用于调用在正常模式下执行的正常程序的呼叫指令。在执行安全程序时，数据处理装置利用呼叫指令调用正常程序，并根据所调用的正常程序进行操作。

27. 发明授权

US08892862B2 Secure boot method for executing a software component including updating a current integrity measurement based on whether the software component is enabled 有权
标题翻译：用于执行软件组件的安全引导方法，包括基于软件组件是否被启用来更新当前的完整性度量
公开(公告)号：US08892862B2
公开(公告)日：2014-11-18
申请号：US13375047
申请日：2010-07-01
申请人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Manabu Maeda
发明人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Manabu Maeda
IPC分类号： G06F9/00 , G06F21/00 , G06F21/57
CPC分类号： G06F21/575 , H04L9/3236 , H04L63/123 , H04W12/10
摘要： A method for executing a predetermined software component which is verifiable against integrity measurements, the method including (i) providing a first mapping from logical identifiers to software component enabled status flags, (ii) providing a second mapping from the logical identifiers and previous software component statuses information to actual integrity measurement certificates containing verification data, (iii) looking up the first mapping for a given logical identifier identifying the predetermined software component to get a status flag indicating whether the predetermined software component is enabled, (iv) if the status flag indicates that the predetermined software component is not enabled, updating a current integrity measurement stored within a disabled integrity measurement certificate, and (v) if the status flag indicates that the predetermined software component is enabled and verification of the predetermined software component is successful, updating a current integrity measurement stored within an integrity measurement certificate.
摘要翻译：一种用于执行可针对完整性测量验证的预定软件组件的方法，所述方法包括（i）提供从逻辑标识符到启用软件组件的状态标志的第一映射，（ii）从逻辑标识符和先前软件组件提供第二映射（iii）查找用于识别预定软件组件的给定逻辑标识符的第一映射，以获得指示预定软件组件是否被使能的状态标志，（iv）如果状态标志指示预定软件组件未被启用，更新存储在禁用完整性测量证书内的当前完整性度量，以及（v）如果状态标志指示预定软件组件被启用并且预定软件组件的验证成功，则更新当前int 质量测量存储在完整性测量证书中。

28. 发明申请

US20110185165A1 INFORMATION PROCESSING DEVICE, INFORMATION PROCESSING METHOD, INFORMATION PROCESSING PROGRAM, AND INTEGRATED CIRCUIT 有权
标题翻译：信息处理设备，信息处理方法，信息处理程序和集成电路
公开(公告)号：US20110185165A1
公开(公告)日：2011-07-28
申请号：US13121770
申请日：2009-10-09
申请人： Tomoyuki Haga , Kenneth Alexander Nicolson , Hideki Matsushima , Takayuki Ito , Hisashi Takayama
发明人： Tomoyuki Haga , Kenneth Alexander Nicolson , Hideki Matsushima , Takayuki Ito , Hisashi Takayama
IPC分类号： G06F9/24
CPC分类号： G06F21/57
摘要： It is possible to update and re-seal sealed data having a usability condition of matching with predetermined terminal environment information during a secure boot without rebooting a terminal when a program using the sealed data is updated. An information processing terminal (10) has first sealed data (310, 320, 330) respectively having usability conditions (312, 322, 332) of matching with predetermined terminal environment information during a secure boot and second sealed data (340, 350, 360) respectively having usability conditions (342, 352, 362) of matching with terminal environment information upon completion of the secure boot. Upon completion of the secure boot, the second sealed data is unsealed and the first sealed data is resealed using the unsealed data (341, 351, 361).
摘要翻译：可以在安全引导期间更新和重新密封具有与预定终端环境信息匹配的可用性条件的密封数据，而不使用密封数据的程序更新时重新启动终端。信息处理终端（10）具有在安全引导期间分别具有与预定终端环境信息匹配的可用性条件（312,322,332）的第一密封数据（310,320,330）和第二密封数据（340,350,360 ）分别具有在安全引导完成时与终端环境信息匹配的可用性条件（342,352,362）。完成安全启动后，第二密封数据被开封，并且使用未密封的数据（341,351,361）重新密封第一密封数据。

29. 发明申请

US20110173460A1 INFORMATION PROCESSING DEVICE, METHOD, PROGRAM, AND INTEGRATED CIRCUIT 审中-公开
标题翻译：信息处理设备，方法，程序和集成电路
公开(公告)号：US20110173460A1
公开(公告)日：2011-07-14
申请号：US13119524
申请日：2009-10-07
申请人： Takayuki Ito , Hideki Matsushima , Hisashi Takayama , Tomoyuki Haga
发明人： Takayuki Ito , Hideki Matsushima , Hisashi Takayama , Tomoyuki Haga
IPC分类号： G06F12/14
CPC分类号： H04L9/0836 , H04L9/0894 , H04L2209/60
摘要： The aim is to provide high-speed data synchronization. To achieve the aim, in data synchronization using a plurality of key databases with respect to same data pieces, a key for one key database, which has been determined in advance, is used for updating the data piece managed under the other key database. This reduces the number of key decryption operations. A key management software 116, which manages a key database A120 and a key database B121 each having a tree structure, determines whether to perform data synchronization when requested by an upper-level application to perform data encryption, and performs synchronization of encrypted data by using a key of the other database which has been determined in advance. This reduces the number of times the encrypted key is loaded onto a cryptographic processing unit 114, and realizes high-speed cryptographic processing on data.
摘要翻译：目的是提供高速数据同步。为了实现上述目的，在使用多个密钥数据库的数据同步中，使用已经被预先确定的一个密钥数据库的密钥来更新在另一密钥数据库下管理的数据片段。这减少了密钥解密操作的数量。管理密钥数据库A120的密钥管理软件116和具有树状结构的密钥数据库B121，在上层应用程序请求时进行数据同步，进行数据加密，通过使用加密数据进行同步，预先确定的其他数据库的一个关键字。这减少了加密密钥加载到加密处理单元114上的次数，并实现对数据的高速加密处理。

30. 发明申请

US20100325628A1 INFORMATION PROCESSING DEVICE 审中-公开
标题翻译：信息处理设备
公开(公告)号：US20100325628A1
公开(公告)日：2010-12-23
申请号：US12866311
申请日：2009-02-23
申请人： Tomoyuki Haga , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Manabu Maeda
发明人： Tomoyuki Haga , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Manabu Maeda
IPC分类号： G06F9/455
CPC分类号： G06F21/575
摘要： A terminal having a plurality of virtual machines in one-to-one correspondence with a plurality of stakeholders is enabled to activate in compliance with the trust dependency relation among the virtual machines and a virtual machine monitor. The terminal includes: the plurality of virtual machines in one-to-one correspondence with the plurality of stakeholders; a plurality of tamper-resistant modules in one-to-one correspondence with the virtual machines, and a management unit controlling the virtual machines and the tamper-resistant modules in mutually related manner. Each virtual machine securely boots with reference to a certificate having a trust dependency with one or other virtual machines.
摘要翻译：具有与多个利益相关者一一对应的多个虚拟机的终端能够根据虚拟机和虚拟机监视器之间的信任依赖关系来激活。终端包括：多个虚拟机与多个利益相关者一一对应; 与虚拟机一一对应的多个防篡改模块，以及以相互关联的方式控制虚拟机和防篡改模块的管理单元。参考具有与一个或其他虚拟机的信任依赖关系的证书，每个虚拟机都将安全启动。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式