专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20050257073A1 Method and system for bootstrapping a trusted server having redundant trusted platform modules 失效
标题翻译：用于引导具有冗余可信平台模块的可信服务器的方法和系统
公开(公告)号：US20050257073A1
公开(公告)日：2005-11-17
申请号：US10835498
申请日：2004-04-29
申请人： Steven Bade , Linda Betz , Andrew Kegel , David Safford , Leendert Doorn
发明人： Steven Bade , Linda Betz , Andrew Kegel , David Safford , Leendert Doorn
IPC分类号： G06F21/24 , G06F1/00 , G06F3/06 , G06F12/14 , G06F12/16 , G06F21/00 , H04L9/32
CPC分类号： G06F21/575
摘要： Multiple trusted platform modules within a data processing system are used in a redundant manner that provides a reliable mechanism for securely storing secret data at rest that is used to bootstrap a system trusted platform module. A hypervisor requests each trusted platform module to encrypt a copy of the secret data, thereby generating multiple versions of encrypted secret data values, which are then stored within a non-volatile memory within the trusted platform. At some later point in time, the encrypted secret data values are retrieved, decrypted by the trusted platform module that performed the previous encryption, and then compared to each other. If any of the decrypted values do not match a quorum of values from the comparison operation, then a corresponding trusted platform module for a non-matching decrypted value is designated as defective because it has not been able to correctly decrypt a value that it previously encrypted.
摘要翻译：以冗余的方式使用数据处理系统内的多个可信任的平台模块，其提供用于安全地存储用于引导系统可信平台模块的休息处的秘密数据的可靠机制。管理程序请求每个可信平台模块加密秘密数据的副本，从而生成加密的秘密数据值的多个版本，然后存储在可信平台内的非易失性存储器中。在稍后的时间点，加密的秘密数据值由执行先前加密的可信任平台模块进行解密，然后进行比较。如果解密值中的任何一个与比较操作中的值的数量不匹配，则用于非匹配解密值的相应的可信平台模块被指定为有缺陷的，因为它不能正确解密其先前加密的值。

IPRDB

热门服务

关于我们

友情链接

联系方式