专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US07137004B2 Manifest-based trusted agent management in a trusted operating system environment 有权
公开(公告)号：US07137004B2
公开(公告)日：2006-11-14
申请号：US09993370
申请日：2001-11-16
申请人： Paul England , Marcus Peinado , Daniel R. Simon , Josh D. Benaloh
发明人： Paul England , Marcus Peinado , Daniel R. Simon , Josh D. Benaloh
IPC分类号： H04L9/00
CPC分类号： G06F21/54 , G06F21/53 , G06F21/57
摘要： Manifest-based trusted agent management in a trusted operating system environment includes receiving a request to execute a process is received and setting up a virtual memory space for the process. Additionally, a manifest corresponding to the process is accessed, and which of a plurality of binaries can be executed in the virtual memory space is limited based on indicators, of the binaries, that are included in the manifest.

32. 发明申请

US20060212363A1 Rendering digital content in an encrypted rights-protected form 审中-公开
标题翻译：以加密的受保护的形式呈现数字内容
公开(公告)号：US20060212363A1
公开(公告)日：2006-09-21
申请号：US11353321
申请日：2006-02-13
申请人： Marcus Peinado , Rajasekhar Abburi , Arnold Blinn , Thomas Jones , John Manferdelli , Jeffrey Bell , Ramaranthnam Venkatesan , Paul England , Mariusz Jakubowski , Hai Yu
发明人： Marcus Peinado , Rajasekhar Abburi , Arnold Blinn , Thomas Jones , John Manferdelli , Jeffrey Bell , Ramaranthnam Venkatesan , Paul England , Mariusz Jakubowski , Hai Yu
IPC分类号： G06Q30/00
CPC分类号： H04L63/0442 , G06F21/10 , G06F21/71 , G06F21/84 , G06F2211/007 , G06F2221/0797 , G06F2221/2105 , G06F2221/2137 , G06Q30/06 , G06Q30/0601 , G07F11/002 , H04L63/068 , H04L63/0823 , H04L63/12 , H04L2463/101
摘要： To render digital content determined to be in an encrypted rights-protected form, each available license corresponding to the digital content to be rendered is identified, where each such license includes a decryption key (KD) for decrypting the digital content to be rendered, and where the decryption key (KD) in the license is encrypted according to a public key (PU) (PU(KD)). One of the identified licenses is selected and (KD) is obtained from the selected license by obtaining (PU(KD)) from the selected license and decrypting (PU(KD)) according to a private key (PR) corresponding to (PU) to produce (KD). The digital content is decrypted with (KD), and the decrypted digital content is provided for actual rendering.
摘要翻译：为了确定被确定为加密的受保护版权形式的数字内容，识别与要呈现的数字内容相对应的每个可用许可证，其中每个这样的许可证包括用于解密要呈现的数字内容的解密密钥（KD），以及其中许可证中的解密密钥（KD）根据公共密钥（PU）（PU（KD））被加密）。通过从所选许可证获得（PU（KD））并根据对应于（PU）的私钥（PR）解密（PU（KD）），从所选许可证中获得（KD）生产（KD）。数字内容用（KD）解密，解密的数字内容被提供用于实际渲染。

33. 发明授权

US06976175B2 Hierarchical trusted code for content protection in computers 失效
公开(公告)号：US06976175B2
公开(公告)日：2005-12-13
申请号：US11011457
申请日：2004-12-13
申请人： Paul England , Butler W. Lampson
发明人： Paul England , Butler W. Lampson
IPC分类号： G06F21/00 , G06Q10/10 , H04L9/00 , G06F17/60
CPC分类号： G06Q10/10 , G06F21/57
摘要： An architecture for protecting premium content in a nonsecure computer environment executes only a small number of code modules in a secure memory. The modules are arranged in a hierarchy of trust, where a module names other modules that it is willing to trust, and those modules in turn name other modules that they are willing to trust. A secure loader loads a security manager that oversees a number of content-providing modules for manipulating the content. A memory manager assigns permissions to various pages of the secure memory. The memory has rings of different security. The security model can be extended to program modules and other devices on the computer's bus, such as DMA controllers and peripherals.

34. 发明申请

US20050273644A1 System and method for transparent electronic data transfer using error correction to facilitate bandwidth-efficient data recovery 有权
公开(公告)号：US20050273644A1
公开(公告)日：2005-12-08
申请号：US11193267
申请日：2005-07-30
申请人： Cormac Herley , Paul England
发明人： Cormac Herley , Paul England
IPC分类号： H04L1/18 , G06F11/00
CPC分类号： H04L1/1812
摘要： The invention disclosed herein includes a system and method for electronically transferring data through a communications connection in a transparent manner such that the data transfer does not interfere with other traffic sharing the connection. The invention transfers data using bandwidth of the connection that other traffic are not using. If other traffic desires to use the bandwidth currently being used by the invention, the invention relinquishes the bandwidth to the other traffic and retreats to avoid bandwidth contention. Although a retreat may cause gaps in the data transferred, a key aspect of the invention is that any missing data due to these gaps is recovered easily and in a bandwidth-efficient way using novel error correction and recovery.

35. 发明申请

US20050235166A1 Method and system for allowing code to be securely initialized in a computer 有权
标题翻译：允许在计算机中安全地初始化代码的方法和系统
公开(公告)号：US20050235166A1
公开(公告)日：2005-10-20
申请号：US11152909
申请日：2005-06-15
申请人： Paul England , Bryan Willman
发明人： Paul England , Bryan Willman
IPC分类号： G06F1/24 , G06F9/445 , H04L9/32
CPC分类号： G06F15/177 , G06F9/4405 , G06F21/575
摘要： A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).
摘要翻译：存储器控制器防止CPU和其他I / O总线主机在代码（例如，可信核心）初始化过程中访问存储器。存储器控制器重置计算机中的CPU，并允许CPU开始访问特定位置的存储器（由存储器控制器标识给CPU）。一旦该CPU执行了初始化过程，代码就可以运行，任何其他CPU都可以访问存储器（复位后），以及任何其他总线主机（受到启动代码的任何控制）。

36. 发明授权

US06948073B2 Protecting decrypted compressed content and decrypted decompressed content at a digital rights management client 失效
公开(公告)号：US06948073B2
公开(公告)日：2005-09-20
申请号：US09892283
申请日：2001-06-27
申请人： Paul England , Marcus Peinado , Mukund Sankaranarayan
发明人： Paul England , Marcus Peinado , Mukund Sankaranarayan
IPC分类号： G06F21/00 , G06F11/30
CPC分类号： G06F21/10
摘要： Theft of decompressed digital content as the content is being rendered is prevented. A requested slow-down of the rendering of the content is detected. Transfers of relatively large amounts of data are detected. A re-compressor-based requested slow-down of the rendering of the content is detected. A re-compressor re-compressing the content is detected. In each situation, the detected activity is presumably initiated by a content thief attempting to steal the content. In each situation, the detected activity is responded to in a manner designed to frustrate the presumed attempt of the content thief to steal the content.

37. 发明申请

US20050171904A1 System and method for flexible micropayment of low value electronic assets 审中-公开
公开(公告)号：US20050171904A1
公开(公告)日：2005-08-04
申请号：US11087922
申请日：2005-03-23
申请人： Yacov Yacobi , Paul England
发明人： Yacov Yacobi , Paul England
IPC分类号： G06Q20/02 , G06Q20/06 , G06Q20/10 , G06Q20/12 , G06Q20/22 , G06Q20/38 , G06F17/60
CPC分类号： G06Q20/06 , G06Q20/02 , G06Q20/102 , G06Q20/108 , G06Q20/12 , G06Q20/29 , G06Q20/3825
摘要： An electronic asset system mints a stick of electronic assets that can be spent by the user with multiple vendors. Assets sticks are issued anonymously or non-anonymously in a way without requiring dedication to a particular vendor, hence allowing the user to spend one or more assets from the stick with different vendors. The auditor randomly audit samples of the spent assets to detect whether the assets have been fraudulently used. The electronic asset system employs tamper-resistant electronic wallets constructed as dedicated hardware devices, or as devices with secure-processor architecture. The electronic asset system also facilitates handling of electronic coupons in a manner that enforces compliance between the user and the vendor. The user and vendor each maintain a stick of corresponding coupons with pointers to the most recent and oldest coupons available for expenditure. When a coupon is used or granted, the user and vendor both update the appropriate pointer to their respective sticks and then exchange signed data describing placement of the pointer to verify a correspondence between the referenced coupons.

38. 发明授权

US06330670B1 Digital rights management operating system 有权
标题翻译：数字版权管理操作系统
公开(公告)号：US06330670B1
公开(公告)日：2001-12-11
申请号：US09227561
申请日：1999-01-08
申请人： Paul England , John D. DeTreville , Butler W. Lampson
发明人： Paul England , John D. DeTreville , Butler W. Lampson
IPC分类号： G06F944
CPC分类号： G06F9/468 , G06F9/4406 , G06F21/10 , G06F21/575 , G06F2221/2113
摘要： A digital rights management operating system protects rights-managed data, such as downloaded content, from access by untrusted programs while the data is loaded into memory or on a page file as a result of the execution of a trusted application that accesses the memory. To protect the rights-managed data resident in memory, the digital rights management operating system refuses to load an untrusted program into memory while the trusted application is executing or removes the data from memory before loading the untrusted program. If the untrusted program executes at the operating system level, such as a debugger, the digital rights management operating system renounces a trusted identity created for it by the computer processor when the computer was booted. To protect the rights-managed data on the page file, the digital rights management operating system prohibits raw access to the page file, or erases the data from the page file before allowing such access. Alternatively, the digital rights management operating system can encrypt the rights-managed data prior to writing it to the page file. The digital rights management operating system also limits the functions the user can perform on the rights-managed data and the trusted application, and can provide a trusted clock used in place of the standard computer clock.
摘要翻译：数字版权管理操作系统由于执行访问存储器的可信应用程序而将数据加载到存储器或页面文件中时，保护诸如下载的内容之类的权利管理的数据免受不可信程序的访问。为了保护驻留在内存中的权限管理数据，数字版权管理操作系统拒绝在可信应用程序正在执行之前加载不受信任的程序，或者在加载不受信任的程序之前从内存中删除数据。如果不可信程序在操作系统级别（例如调试器）上执行，则数字版权管理操作系统在计算机引导时放弃由计算机处理器为其创建的可信标识。为了保护页面文件上的权限管理数据，数字版权管理操作系统禁止原始访问页面文件，或者在允许访问页面之前从页面文件中删除数据。或者，数字权限管理操作系统可以在将权限管理的数据写入页面文件之前加密。数字版权管理操作系统还限制用户可以在权限管理的数据和可信应用上执行的功能，并且可以提供用于代替标准计算机时钟的可信时钟。

39. 发明授权

US08621243B2 Saving and retrieving data based on public key encryption 有权
公开(公告)号：US08621243B2
公开(公告)日：2013-12-31
申请号：US13015402
申请日：2011-01-27
申请人： Paul England , Marcus Peinado
发明人： Paul England , Marcus Peinado
IPC分类号： G06F12/14
CPC分类号： G06F21/6218
摘要： In accordance with certain aspects, data is received from a calling program. Ciphertext that includes the data is generated, using public key encryption, in a manner that allows the data to be obtained from the ciphertext only if one or more conditions are satisfied. In accordance with another aspect, a bit string is received from a calling program. Data in the bit string is decrypted using public key decryption and returned to the calling program only if one or more conditions included in the bit string are satisfied.

40. 发明授权

US08028172B2 Systems and methods for updating a secure boot process on a computer with a hardware security module 有权
标题翻译：使用硬件安全模块在计算机上更新安全引导过程的系统和方法
公开(公告)号：US08028172B2
公开(公告)日：2011-09-27
申请号：US11036018
申请日：2005-01-14
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D. Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D. Ray , Jonathan Schwartz
IPC分类号： H04L9/32
CPC分类号： G06F21/575
摘要： Systems and methods are provided for maintaining and updating a secure boot process on a computer with a trusted platform module (TPM). A boot process may be maintained by inspecting a log of TPM activity, determining data that prevented a secret to unseal, and returning the data to an original state. In situations where this type of recovery is not workable, techniques for authenticating a user may be used, allowing the authenticated user to bypass the security features of the boot process and reseal the boot secrets to platform configuration register (PCR) values that may have changed. Finally, a secure boot process may be upgraded by migrating TPM sealed secrets to a temporary storage location, updating one or more aspects of a secure boot process, and resealing the secrets to the resulting new platform configuration. Other advantages and features of the invention are described below.
摘要翻译：提供了系统和方法，用于在具有可信平台模块（TPM）的计算机上维护和更新安全引导过程。可以通过检查TPM活动的日志来确定启动过程，确定防止秘密解密的数据，并将数据返回到原始状态。在这种类型的恢复不可行的情况下，可以使用用于验证用户的技术，允许经过身份验证的用户绕过引导过程的安全特征并将启动秘密重新密封到可能已经改变的平台配置寄存器（PCR）值。最后，可以通过将TPM密封的秘密迁移到临时存储位置来升级安全引导过程，更新安全引导过程的一个或多个方面，以及将密码重新密封到所得到的新平台配置。下面描述本发明的其它优点和特征。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式