专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09405707B2 Secure replay protected storage 有权
标题翻译：安全重放保护存储
公开(公告)号：US09405707B2
公开(公告)日：2016-08-02
申请号：US13997896
申请日：2011-12-20
申请人： Nitin V. Sarangdhar , William A. Stevens, Jr. , John J. Vranich
发明人： Nitin V. Sarangdhar , William A. Stevens, Jr. , John J. Vranich
IPC分类号： G06F11/30 , G06F12/14 , G06F13/14
CPC分类号： G06F12/1408 , G06F13/14 , G06F21/44 , G06F21/79 , G06F2212/1052
摘要： Embodiments of the invention create an underlying infrastructure in a flash memory device (e.g., a serial peripheral interface (SPI) flash memory device) such that it may be protected against user attacks—e.g., replacing the SPI flash memory device or a man-in-the-middle (MITM) attack to modify the SPI flash memory contents on the fly. In the prior art, monotonic counters cannot be stored in SPI flash memory devices because said devices do not provide replay protection for the counters. A user may also remove the flash memory device and reprogram it. Host platforms alone cannot protect against such hardware attacks.Embodiments of the invention enable secure standard storage flash memory devices such as SPI flash memory devices to achieve replay protection for securely stored data. Embodiments of the invention utilize flash memory controllers, flash memory devices, unique device keys and HMAC key logic to create secure execution environments for various components.
摘要翻译：本发明的实施例在闪存设备（例如，串行外围设备接口（SPI）闪存设备）中创建底层基础设施，使得其可以被保护免受用户攻击 - 例如，替换SPI闪存设备或管理员 - 中间（MITM）攻击，即时修改SPI闪存内容。在现有技术中，单调计数器不能存储在SPI闪存设备中，因为所述设备不为计数器提供重放保护。用户还可以移除闪存设备并对其进行重新编程。仅主机平台无法防范此类硬件攻击。本发明的实施例使得诸如SPI闪存设备之类的安全标准存储闪存设备能够实现用于安全存储的数据的重放保护。本发明的实施例利用闪存控制器，闪存设备，唯一设备密钥和HMAC密钥逻辑来为各种组件创建安全的执行环境。

2. 发明申请

US20150381368A1 TECHNOLOGIES FOR SECURE OFFLINE ACTIVATION OF HARDWARE FEATURES 审中-公开
标题翻译：硬件特性的离线激活技术
公开(公告)号：US20150381368A1
公开(公告)日：2015-12-31
申请号：US14318278
申请日：2014-06-27
申请人： William A. Stevens, JR. , Alberto J. Martinez , Mukesh Kataria , Purushottam Goel , Tim Abels , Mahesh S. Natu
发明人： William A. Stevens, JR. , Alberto J. Martinez , Mukesh Kataria , Purushottam Goel , Tim Abels , Mahesh S. Natu
IPC分类号： H04L9/32 , G06Q30/04 , G06F9/44
CPC分类号： G06Q30/04 , G06F21/44 , G06F21/629 , G06F21/82 , H04L63/0876 , H04L63/126
摘要： Technologies for secure offline activation of hardware features include a target computing device having a platform controller hub (PCH) including a converged security and manageability engine (CSME) and a number of in-field programmable fuses (IFPs). During assembly of the target computing device by an original equipment manufacturer (OEM), the CSME is provided a list of hardware features to be activated. The CSME configures the IFPs to enable the requested features, generates a digital receipt including the activated features and a unique device ID, and signs the receipt using a unique device key. Signed receipts may be periodically submitted to a vendor computing device, which verifies the signed receipts, extracts the active feature list, and bills the OEM for activated features of the PCHs. The vendor computing device may bill the OEM a maximum price for PCHs for which there is no associated signed receipt. Other embodiments are described and claimed.
摘要翻译：用于硬件特征的安全离线激活的技术包括具有包括融合安全性和可管理性引擎（CSME）的平台控制器集线器（PCH）以及多个现场可编程保险丝（IFP））的目标计算设备。在由原始设备制造商（OEM）组装目标计算设备的过程中，CSME提供要激活的硬件功能的列表。 CSME配置IFP以启用所请求的功能，生成包含激活的功能和唯一设备ID的数字收据，并使用唯一的设备密钥对收据进行签名。签署的收据可以定期地提交给供应商计算设备，该设备验证签署的收据，提取活动的特征列表，并为OEM的PCH的激活特征收费。供应商计算设备可以向OEM收取没有相关签名收据的PCH的最高价格。描述和要求保护其他实施例。

3. 发明申请

US20160182238A1 PARTITIONING ACCESS TO SYSTEM RESOURCES 有权
标题翻译：分区访问系统资源
公开(公告)号：US20160182238A1
公开(公告)日：2016-06-23
申请号：US14574969
申请日：2014-12-18
申请人： Prashant Dewan , Kapil Sood , Kumar N. Dwarakanath , Ioannis T. Schoinas , William A. Stevens, JR. , Ned M. Smith
发明人： Prashant Dewan , Kapil Sood , Kumar N. Dwarakanath , Ioannis T. Schoinas , William A. Stevens, JR. , Ned M. Smith
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： H04L9/3263 , G06F21/572 , G06F21/74 , G09C1/00 , H04L9/321 , H04L9/3234 , H04L9/3242 , H04L2209/12 , H04L2209/68
摘要： In one embodiment, a processor has at least one core to execute instructions, a security engine coupled to the at least one core, a first storage to store a first immutable key associated with a vendor of the processor, and a second storage to store a second immutable key associated with an original equipment manufacturer (OEM) of the system. A first portion of firmware is to be verified based at least in part on the first immutable key and a second portion of firmware is to be verified based at least in part on the second immutable key, the first portion of firmware associated with the vendor and the second portion of firmware associated with the OEM. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，处理器具有执行指令的至少一个核心，耦合到所述至少一个核心的安全引擎，用于存储与所述处理器的供应商相关联的第一不可变密钥的第一存储器，以及存储与系统的原始设备制造商（OEM）相关联的第二个不可变键。至少部分地基于第一不可变密钥验证固件的第一部分，并且至少部分地基于第二不可变密钥，与供应商相关联的固件的第一部分和与OEM相关联的固件的第二部分。描述和要求保护其他实施例。

4. 发明授权

US08364915B2 Method, apparatus and system for generating access information from an LRU tracking list 有权
标题翻译：用于从LRU跟踪列表生成访问信息的方法，装置和系统
公开(公告)号：US08364915B2
公开(公告)日：2013-01-29
申请号：US12822034
申请日：2010-06-23
申请人： Kie Woon Lim , Khee Wooi Lee , William A. Stevens, Jr.
发明人： Kie Woon Lim , Khee Wooi Lee , William A. Stevens, Jr.
IPC分类号： G06F12/00
CPC分类号： G06F12/123
摘要： Techniques for generating access information indicating a least recently used (LRU) memory region in a set of memory regions. In an embodiment, data is stored in an entry of an LRU tracking list (LTL) based on a touch message indicating when a memory group has been touched—e.g. read from, written to and/or associated with a memory region. The data stored in an LTL entry may include an identifier of a memory group and/or validity data specifying whether that LTL entry stores a set of default data. In another embodiment, access information may be generated based on the memory group identifier and the validity data.
摘要翻译：用于产生指示一组存储器区域中的最近最少使用（LRU）存储器区域的访问信息的技术。在一个实施例中，基于指示何时触摸存储器组的触摸消息，将数据存储在LRU跟踪列表（LTL）的条目中 - 例如，读取，写入和/或与存储器区域相关联。存储在LTL条目中的数据可以包括存储器组的标识符和/或指定该LTL条目是否存储一组默认数据的有效性数据。在另一个实施例中，可以基于存储器组标识符和有效性数据来生成访问信息。

5. 发明授权

US08086833B2 Method and system for linking firmware modules in a pre-memory execution environment 有权
标题翻译：用于在预存储器执行环境中链接固件模块的方法和系统
公开(公告)号：US08086833B2
公开(公告)日：2011-12-27
申请号：US12206630
申请日：2008-09-08
申请人： William A. Stevens, Jr. , Andrew J. Fish , Kirk D. Brannock , Robert P. Hale , Ramamurthy Krithivas
发明人： William A. Stevens, Jr. , Andrew J. Fish , Kirk D. Brannock , Robert P. Hale , Ramamurthy Krithivas
IPC分类号： G06F9/00 , G06F9/24 , G06F1/177
CPC分类号： G06F8/54 , G06F9/4401
摘要： A BIOS includes a core and multiple modules. The modules include both those that are platform specific and those that are not platform specific. Each module has a standard interface that allows the core (or other module) to call the module. A platform vendor constructs a BIOS by selecting modules from one or more vendors, which when executed can select modules that are suitable for the platform the BIOS resides in.
摘要翻译： BIOS包括核心和多个模块。这些模块包括那些具有平台特性的模块，以及不具有平台特性的模块。每个模块都有一个标准接口，允许核心（或其他模块）调用该模块。平台供应商通过从一个或多个供应商中选择模块来构建BIOS，当被执行时可以选择适合于BIOS所在平台的模块。

6. 发明申请

US20140223198A1 SECURE REPLAY PROTECTED STORAGE 有权
标题翻译：安全重置保护存储
公开(公告)号：US20140223198A1
公开(公告)日：2014-08-07
申请号：US13997896
申请日：2011-12-20
申请人： Nitin V. Saranghar , William A. Stevens, JR. , John J. Vranich
发明人： Nitin V. Saranghar , William A. Stevens, JR. , John J. Vranich
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F13/14 , G06F21/44 , G06F21/79 , G06F2212/1052
摘要： Embodiments of the invention create an underlying infrastructure in a flash memory device (e.g., a serial peripheral interface (SPI) flash memory device) such that it may be protected against user attacks—e.g., replacing the SPI flash memory device or a man-in-the-middle (MITM) attack to modify the SPI flash memory contents on the fly. In the prior art, monotonic counters cannot be stored in SPI flash memory devices because said devices do not provide replay protection for the counters. A user may also remove the flash memory device and reprogram it. Host platforms alone cannot protect against such hardware attacks.Embodiments of the invention enable secure standard storage flash memory devices such as SPI flash memory devices to achieve replay protection for securely stored data. Embodiments of the invention utilize flash memory controllers, flash memory devices, unique device keys and HMAC key logic to create secure execution environments for various components.
摘要翻译：本发明的实施例在闪存设备（例如，串行外围设备接口（SPI）闪存设备）中创建底层基础设施，使得其可以被保护免受用户攻击 - 例如，替换SPI闪存设备或管理员 - 中间（MITM）攻击，即时修改SPI闪存内容。在现有技术中，单调计数器不能存储在SPI闪存设备中，因为所述设备不为计数器提供重放保护。用户还可以移除闪存设备并对其进行重新编程。仅主机平台无法防范此类硬件攻击。本发明的实施例使得诸如SPI闪存设备之类的安全标准存储闪存设备能够实现用于安全存储的数据的重放保护。本发明的实施例利用闪存控制器，闪存设备，唯一设备密钥和HMAC密钥逻辑来为各种组件创建安全的执行环境。

7. 发明申请

US20130159727A1 SECURE REPLAY PROTECTED STORAGE 有权
标题翻译：安全重置保护存储
公开(公告)号：US20130159727A1
公开(公告)日：2013-06-20
申请号：US13631556
申请日：2012-09-28
申请人： Nitin V. Sarangdhar , William A. Stevens, JR. , John J. Vranich
发明人： Nitin V. Sarangdhar , William A. Stevens, JR. , John J. Vranich
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F21/445 , G06F21/79
摘要： Embodiments of the invention create an underlying infrastructure in a flash memory device (e.g., a serial peripheral interface (SPI) flash memory device) such that it may be protected against user attacks—e.g., replacing the SPI flash memory device or a man-in-the-middle (MITM) attack to modify the SPI flash memory contents on the fly. In the prior art, monotonic counters cannot be stored in SPI flash memory devices because said devices do not provide replay protection for the counters. A user may also remove the flash memory device and reprogram it. Host platforms alone cannot protect against such hardware attacks.Embodiments of the invention enable secure standard storage flash memory devices such as SPI flash memory devices to achieve replay protection for securely stored data. Embodiments of the invention utilize flash memory controllers, flash memory devices, unique device keys and HMAC key logic to create secure execution environments for various components.
摘要翻译：本发明的实施例在闪存设备（例如，串行外围设备接口（SPI）闪存设备）中创建底层基础设施，使得其可以被保护免受用户攻击 - 例如，替换SPI闪存设备或管理员 - 中间（MITM）攻击，即时修改SPI闪存内容。在现有技术中，单调计数器不能存储在SPI闪存设备中，因为所述设备不为计数器提供重放保护。用户还可以移除闪存设备并对其进行重新编程。仅主机平台无法防范此类硬件攻击。本发明的实施例使得诸如SPI闪存设备之类的安全标准存储闪存设备能够实现用于安全存储的数据的重放保护。本发明的实施例利用闪存控制器，闪存设备，唯一设备密钥和HMAC密钥逻辑来为各种组件创建安全的执行环境。

8. 发明申请

US20110161672A1 Provisioning, upgrading, and/or changing of hardware 有权
标题翻译：硬件的配置，升级和/或更改
公开(公告)号：US20110161672A1
公开(公告)日：2011-06-30
申请号：US12655579
申请日：2009-12-31
申请人： Alberto J. Martinez , William A. Stevens, JR. , Purushottam Goel , Ernie Brickell
发明人： Alberto J. Martinez , William A. Stevens, JR. , Purushottam Goel , Ernie Brickell
IPC分类号： H04L9/32 , G06F15/177 , H04L9/00 , G06F21/00
CPC分类号： H04L63/08 , G06F21/57 , H04L9/3249 , H04L63/06 , H04L2209/56
摘要： In some embodiments a secure permit request to change a hardware configuration is created. The secure permit request is sent to a remote location, and a permit sent from the remote location in response to the permit request is received. The hardware configuration is changed in response to the received permit. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，创建了用于改变硬件配置的安全许可证请求。安全许可请求被发送到远程位置，并且接收到响应于许可请求从远程位置发送的许可证。硬件配置根据接收到的许可证而改变。描述和要求保护其他实施例。

9. 发明授权

US06981081B2 Method for SMI arbitration timeliness in a cooperative SMI/driver use mechanism 失效
标题翻译：合作SMI /驾驶员使用机制中SMI仲裁及时性的方法
公开(公告)号：US06981081B2
公开(公告)日：2005-12-27
申请号：US10325776
申请日：2002-12-19
申请人： William A. Stevens, Jr. , Alberto J. Martinez , Christopher J. Spiegel
发明人： William A. Stevens, Jr. , Alberto J. Martinez , Christopher J. Spiegel
IPC分类号： G06F13/14 , G06F13/24 , G06F13/378
CPC分类号： G06F13/378
摘要： A Bus Driver implements an arbitration mechanism to allow both the system management interrupt (SMI) and the Bus Driver to cooperatively use a Bus host controller hardware. This mechanism employs a hardware-based semaphore (status bit) to allow either the SMI or the driver to claim ownership of the Bus host controller for an arbitrary period of time. While either the SMI or the driver may own the status bit, the other party must poll the bit until ownership is achieved. For the SMI, this involves scheduling a periodic SMI interrupt. The driver performs self arbitration of claiming the status bit to provide the periodic SMI interrupt the opportunity to claim the bit. The mechanism allows the SMI access to the Bus host controller in a “timely” manner, while minimizing impact to driver access to the Bus host controller, which could impact driver Bus transaction throughput.
摘要翻译：总线驱动器实现仲裁机制，允许系统管理中断（SMI）和总线驱动程序协同使用总线主机控制器硬件。该机制采用基于硬件的信号量（状态位）来允许SMI或驱动程序在任意一段时间内声明对总线主机控制器的所有权。虽然SMI或驱动程序可能拥有状态位，但是对方必须轮询该位，直到实现所有权。对于SMI，这涉及调度周期性SMI中断。驱动程序执行声称状态位的自我仲裁，以使周期性SMI中断有机会声明该位。该机制允许SMI以“及时”的方式访问总线主机控制器，同时最小化对驱动程序访问总线主机控制器的影响，这可能会影响驱动器总线事务吞吐量。

10. 发明授权

US06711675B1 Protected boot flow 有权
标题翻译：保护引导流程
公开(公告)号：US06711675B1
公开(公告)日：2004-03-23
申请号：US09503046
申请日：2000-02-11
申请人： Christopher J. Spiegel , Andrew H. Gafken , Robert P. Hale , William A. Stevens, Jr.
发明人： Christopher J. Spiegel , Andrew H. Gafken , Robert P. Hale , William A. Stevens, Jr.
IPC分类号： G06F15177
CPC分类号： G06F21/575 , G06F9/4401
摘要： A protected boot sequence in a computer system. A reset vector directs the system to a boot program including a protected program. This protected program verifies the integrity of the BIOS contents before branching to the BIOS for execution of normal bootstrap functions. The protected program can also lock down various blocks of bootstrap code to prevent them from being changed after a certain point in the boot sequence. The protected boot sequence can proceed in layers, with each layer providing some level of validation or security for succeeding layers.
摘要翻译：计算机系统中的受保护引导序列。复位向量将系统引导到包括受保护程序的引导程序。此受保护的程序在分支到BIOS以执行正常引导功能之前验证BIOS内容的完整性。受保护的程序还可以锁定引导代码的各种块，以防止在引导顺序中的某一点之后它们被更改。受保护的引导序列可以分层进行，每个层为后续层提供一定程度的验证或安全性。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式