专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090129600A1 APPARATUS AND METHOD FOR A DIRECT ANONYMOUS ATTESTATION SCHEME FROM SHORT-GROUP SIGNATURES 有权
标题翻译：短组合签名方式的直接匿名表示方法的装置和方法
公开(公告)号：US20090129600A1
公开(公告)日：2009-05-21
申请号：US12208989
申请日：2008-09-11
申请人： Ernie F. Brickell , Jiangtao Li
发明人： Ernie F. Brickell , Jiangtao Li
IPC分类号： H04L9/30
CPC分类号： H04L9/3234 , H04L9/3073 , H04L9/3218 , H04L9/3255 , H04L2209/42
摘要： An apparatus and method is provided for a direct anonymous attestation scheme from short-group signatures. The method may include the creation of a group public/private key pair for a trusted membership group defined by an issuer; and assigning a cryptographic pair that is combined with a unique private member value to form a private membership key. A trusted member device generates the unique private member value during a join procedure of a trusted membership group. In one embodiment, the private member value of the private membership key is unknown to the issuer. A member may sign a message with the private membership key to form a short-group digital signature that is verified using a public key of the trusted membership group to maintain anonymity of trusted member devices. A size of the private membership key may be reduced to enable storage within a trusted platform module. Other embodiments are described and claimed.
摘要翻译：为短组签名提供直接匿名认证方案的设备和方法。该方法可以包括为由发行者定义的可信会员组创建组公/私钥对; 以及分配与唯一私有成员值组合的密码对以形成私有成员密钥。受信任的成员设备在受信任的成员资格组的连接过程中生成唯一的私有成员值。在一个实施例中，私人会员密钥的私人会员值对于发行者来说是未知的。成员可以使用私有成员密钥签名消息，形成一个短组数字签名，该数字签名使用受信任的成员资格组的公钥进行验证，以维护受信任的成员设备的匿名性。可以减小私有成员密钥的大小以使得能够在可信平台模块内存储。描述和要求保护其他实施例。

2. 发明授权

US08356181B2 Apparatus and method for a direct anonymous attestation scheme from short-group signatures 有权
标题翻译：来自短组签名的直接匿名认证方案的装置和方法
公开(公告)号：US08356181B2
公开(公告)日：2013-01-15
申请号：US12208989
申请日：2008-09-11
申请人： Ernie F. Brickell , Jiangtao Li
发明人： Ernie F. Brickell , Jiangtao Li
IPC分类号： H04L9/32
CPC分类号： H04L9/3234 , H04L9/3073 , H04L9/3218 , H04L9/3255 , H04L2209/42
摘要： An apparatus and method is provided for a direct anonymous attestation scheme from short-group signatures. The method may include the creation of a group public/private key pair for a trusted membership group defined by an issuer; and assigning a cryptographic pair that is combined with a unique private member value to form a private membership key. A trusted member device generates the unique private member value during a join procedure of a trusted membership group. In one embodiment, the private member value of the private membership key is unknown to the issuer. A member may sign a message with the private membership key to form a short-group digital signature that is verified using a public key of the trusted membership group to maintain anonymity of trusted member devices. A size of the private membership key may be reduced to enable storage within a trusted platform module. Other embodiments are described and claimed.
摘要翻译：为短组签名提供直接匿名认证方案的设备和方法。该方法可以包括为由发行者定义的可信会员组创建组公/私钥对; 以及分配与唯一私有成员值组合的密码对以形成私有成员密钥。受信任的成员设备在受信任的成员资格组的连接过程中生成唯一的私有成员值。在一个实施例中，私人会员密钥的私人会员值对于发行者来说是未知的。成员可以使用私有成员密钥签名消息，形成一个短组数字签名，该数字签名使用受信任的成员资格组的公钥进行验证，以维护受信任的成员设备的匿名性。可以减小私有成员密钥的大小以使得能够在可信平台模块内存储。描述和要求保护其他实施例。

3. 发明申请

US20150188717A1 PHYSICALLY UNCLONABLE FUNCTION REDUNDANT BITS 审中-公开
标题翻译：物理上不可逾越的功能冗余位
公开(公告)号：US20150188717A1
公开(公告)日：2015-07-02
申请号：US14141226
申请日：2013-12-26
申请人： Wei WU , Jiangtao Li , Patrick Koeberl
发明人： Wei WU , Jiangtao Li , Patrick Koeberl
IPC分类号： H04L9/32
CPC分类号： H04L9/3278 , G09C1/00 , H03K19/003 , H04L9/0866
摘要： Embodiments of an invention for using physically unclonable function redundant bits are disclosed. In one embodiment, an integrated circuit includes a PUF cell array and redundancy logic. The PUF cell array includes a plurality of redundant cells and is to provide a raw PUF value. The redundancy logic is to generate a redirection list to be used to replace each of one or more bits of the raw PUF value with a redundant bit value from one of the redundant cells.
摘要翻译：公开了用于使用物理上不可克隆的功能冗余位的发明的实施例。在一个实施例中，集成电路包括PUF单元阵列和冗余逻辑。 PUF单元阵列包括多个冗余单元并且提供原始PUF值。冗余逻辑是生成一个重定向列表，用于使用来自冗余单元之一的冗余比特值来替换原始PUF值的一个或多个比特中的每一个。

4. 发明申请

US20140270177A1 HARDENING INTER-DEVICE SECURE COMMUNICATION USING PHYSICALLY UNCLONABLE FUNCTIONS 审中-公开
标题翻译：使用物理不可靠功能的硬化设备安全通信
公开(公告)号：US20140270177A1
公开(公告)日：2014-09-18
申请号：US13844559
申请日：2013-03-15
申请人： Ernie Brickell , Jiangtao Li
发明人： Ernie Brickell , Jiangtao Li
IPC分类号： H04L9/08
CPC分类号： H04L9/0877 , H04L9/3278
摘要： Embodiments of an invention for hardened inter-device secure communication using physically unclonable functions are disclosed. In one embodiment, an apparatus includes a first storage location, a second storage location, a physically unclonable function (PUF) circuit, a PUF key generator, and an encryption unit. The first storage location is to store an embedded key. The second storage location is to store a fuse key. The PUF circuit is to provide a PUF value. The PUF key generator is to generate a PUF key based on the PUF value. The encryption unit is to receive from a key server a global key encrypted using the embedded key, decrypt the global key using the embedded key, encrypt the global key using the PUF key, and store the global key encrypted using the PUF key in the second storage location.
摘要翻译：公开了使用物理不可克隆功能的硬件设备间安全通信的发明的实施例。在一个实施例中，装置包括第一存储位置，第二存储位置，物理不可克隆功能（PUF）电路，PUF密钥发生器和加密单元。第一个存储位置是存储一个嵌入的密钥。第二个存储位置是存储保险丝钥匙。 PUF电路提供PUF值。 PUF密钥生成器基于PUF值生成PUF密钥。加密单元是从密钥服务器接收使用嵌入密钥加密的全局密钥，使用嵌入密钥解密全局密钥，使用PUF密钥加密全局密钥，并将使用PUF密钥加密的全局密钥存储在第二个密钥中存储位置。

5. 发明申请

US20140189890A1 DEVICE AUTHENTICATION USING A PHYSICALLY UNCLONABLE FUNCTIONS BASED KEY GENERATION SYSTEM 有权
标题翻译：使用基于物理不可靠函数的密钥生成系统的设备认证
公开(公告)号：US20140189890A1
公开(公告)日：2014-07-03
申请号：US13730469
申请日：2012-12-28
申请人： Patrick Koeberl , Jiangtao Li
发明人： Patrick Koeberl , Jiangtao Li
IPC分类号： G06F21/70
CPC分类号： G06F21/70 , G06F21/44 , G06F21/73 , G09C1/00 , H04L9/0866 , H04L2209/12
摘要： At least one machine accessible medium having instructions stored thereon for authenticating a hardware device is provided. When executed by a processor, the instructions cause the processor to receive two or more device keys from a physically unclonable function (PUF) on the hardware device, generate a device identifier from the two or more device keys, obtain a device certificate from the hardware device, perform a verification of the device identifier, and provide a result of the device identifier verification. In a more specific embodiment, the instructions cause the processor to perform a verification of a digital signature in the device certificate and to provide a result of the digital signature verification. The hardware device may be rejected if at least one of the device identifier verification and the digital signature verification fails.
摘要翻译：提供了至少一个具有存储在其上用于认证硬件设备的指令的机器可访问介质。当处理器执行时，指令使处理器从硬件设备上的物理不可克隆功能（PUF）接收两个或多个设备密钥，从两个或多个设备密钥生成设备标识符，从硬件获得设备证书设备，执行设备标识符的验证，并提供设备标识符验证的结果。在更具体的实施例中，指令使处理器执行设备证书中的数字签名的验证并提供数字签名验证的结果。如果设备标识符验证和数字签名验证中的至少一个失败，则硬件设备可能被拒绝。

6. 发明申请

US20120159155A1 Direct Anonymous Attestation Scheme with Outsourcing Capability 有权
标题翻译：具有外包能力的直接匿名认证计划
公开(公告)号：US20120159155A1
公开(公告)日：2012-06-21
申请号：US13398626
申请日：2012-02-16
申请人： Ernie Brickell , Jiangtao Li
发明人： Ernie Brickell , Jiangtao Li
IPC分类号： H04L9/32
CPC分类号： H04L9/3234 , H04L9/3073 , H04L9/3218 , H04L9/3255 , H04L2209/42
摘要： A Direct Anonymous Attestation (DAA) scheme using elliptic curve cryptography (ECC) and bilinear maps. A trusted platform module (TPM) may maintain privacy of a portion of a private membership key from an issuer while joining a group. Moreover, the TPM can outsource most of the computation involved in generating a signature to a host computer.
摘要翻译：使用椭圆曲线加密（ECC）和双线性映射的直接匿名证明（DAA）方案。可信平台模块（TPM）可以在加入组时从发行商维护私有成员密钥的一部分的隐私。此外，TPM可以将生成签名所涉及的大部分计算外包给主机。

7. 发明授权

US09544141B2 Secure key storage using physically unclonable functions 有权
标题翻译：使用物理不可克隆功能保护密钥存储
公开(公告)号：US09544141B2
公开(公告)日：2017-01-10
申请号：US13996544
申请日：2011-12-29
申请人： Jiangtao Li , Anand Rajan , Roel Maes , Sanu K Mathew , Ram Krishnamurthy , Ernie Brickell
发明人： Jiangtao Li , Anand Rajan , Roel Maes , Sanu K Mathew , Ram Krishnamurthy , Ernie Brickell
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L9/0891 , G09C1/00 , H04L9/0822 , H04L9/0861 , H04L9/0866 , H04L9/0894 , H04L2209/12
摘要： Some implementations disclosed herein provide techniques and arrangements for provisioning keys to integrated circuits/processors. A processor may include physically unclonable functions component, which may generate a unique hardware key based at least on at least one physical characteristic of the processor. The hardware key may be employed in encrypting a key such as a secret key. The encrypted key may be stored in a memory of the processor. The encrypted key may be validated. The integrity of the key may be protected by communicatively isolating at least one component of the processor.
摘要翻译：本文公开的一些实施例提供了用于向集成电路/处理器供应密钥的技术和布置。处理器可以包括物理上不可克隆的功能组件，其可以至少基于处理器的至少一个物理特性来生成唯一的硬件密钥。硬件密钥可用于加密诸如秘密密钥的密钥。加密密钥可以存储在处理器的存储器中。可以验证加密的密钥。可以通过通信地隔离处理器的至少一个组件来保护密钥的完整性。

8. 发明申请

US20150092939A1 DARK BITS TO REDUCE PHYSICALLY UNCLONABLE FUNCTION ERROR RATES 有权
标题翻译：降低物理不可靠功能错误率的差距
公开(公告)号：US20150092939A1
公开(公告)日：2015-04-02
申请号：US14040337
申请日：2013-09-27
申请人： Kevin Gotze , Gregory Iovino , David Johnston , Patrick Koeberl , Jiangtao Li , Wei Wu
发明人： Kevin Gotze , Gregory Iovino , David Johnston , Patrick Koeberl , Jiangtao Li , Wei Wu
IPC分类号： H04L9/34
CPC分类号： H04L9/34 , G09C1/00 , H04L9/0866 , H04L9/3278 , H04L2209/12
摘要： Embodiments of an invention for using dark bits to reduce physically unclonable function (PUF) error rates are disclosed. In one embodiment, an integrated circuit includes a PUF cell array and dark bit logic. The PUF cell array is to provide a raw PUF value. The dark bit logic is to select PUF cells to mark as dark bits and to generate a dark bit mask based on repeated testing of the PUF cell array.
摘要翻译：公开了使用暗位来减少物理不可克隆功能（PUF）错误率的发明的实施例。在一个实施例中，集成电路包括PUF单元阵列和暗位逻辑。 PUF单元阵列是提供原始PUF值。暗位逻辑是基于PUF单元阵列的重复测试来选择PUF单元来标记为暗位并产生暗位掩码。

9. 发明申请

US20140185795A1 FUSE ATTESTATION TO SECURE THE PROVISIONING OF SECRET KEYS DURING INTEGRATED CIRCUIT MANUFACTURING 有权
标题翻译：保险丝安全确保集成电路制造过程中秘密钥匙的提供
公开(公告)号：US20140185795A1
公开(公告)日：2014-07-03
申请号：US13728375
申请日：2012-12-27
申请人： Kevin C. Gotze , Jiangtao Li , Gregory M. Iovino
发明人： Kevin C. Gotze , Jiangtao Li , Gregory M. Iovino
IPC分类号： H04L9/08
CPC分类号： G06F21/73 , G06F21/44 , G09C1/00 , H04L9/0861 , H04L9/0866 , H04L9/3278
摘要： Embodiments of an invention for fuse attestation to secure the provisioning of secret keys during integrated circuit manufacturing are disclosed. In one embodiment, an apparatus includes a storage location, a physically unclonable function (PUF) circuit, a PUF key generator, an encryption unit, and a plurality of fuses. The storage location is to store a configuration fuse value. The PUF circuit is to provide a PUF value. The PUF key generator is to generate a PUF key based on the PUF value. The encryption unit is to encrypt the configuration fuse value using the PUF key. The PUF key and the configuration fuse value are to be provided to a key server. The key server is to determine that the configuration fuse value indicates that the apparatus is a production component, and, in response, provide a fuse key to be stored in the plurality of fuses.
摘要翻译：公开了用于在集成电路制造期间确保秘密密钥供应的熔丝证明的发明的实施例。在一个实施例中，一种装置包括存储位置，物理上不可克隆功能（PUF）电路，PUF密钥发生器，加密单元和多个保险丝。存储位置是存储配置熔丝值。 PUF电路提供PUF值。 PUF密钥生成器基于PUF值生成PUF密钥。加密单元使用PUF密钥加密配置熔丝值。 PUF键和配置保险丝值将提供给密钥服务器。密钥服务器是确定配置熔丝值表示该设备是生产部件，并且作为响应，提供要存储在多个保险丝中的熔丝钥匙。

10. 发明申请

US20140095883A1 HARDENING OF DIRECT ANONYMOUS ATTESTATION FROM SIDE-CHANNEL ATTACK 有权
标题翻译：从通道攻击引起的直接不正常情况的加强
公开(公告)号：US20140095883A1
公开(公告)日：2014-04-03
申请号：US13630109
申请日：2012-09-28
申请人： Sergey Kirillov , Jiangtao Li , Marc A. Valle
发明人： Sergey Kirillov , Jiangtao Li , Marc A. Valle
IPC分类号： H04L9/32
CPC分类号： H04L9/3281 , H04L9/003 , H04L9/0891 , H04L9/3247 , H04L2209/046
摘要： Various embodiments are generally directed to hardening the performance of calculations of a digital signature system for authenticating computing devices against side-channel attacks. An apparatus comprises a processor circuit and an interface operative to communicatively couple the processor circuit to a network; a storage communicatively coupled to the processor circuit and arranged to store instructions operative on the processor circuit to digitally sign a message to create a first signature using a modular arithmetic operation arranged to compensate for a value of a variable greater than a modulus without use of a branching instruction; and transmit the first signature to a verifying server via the network. Other embodiments are described and claimed herein.
摘要翻译：各种实施例通常旨在加强数字签名系统的计算性能，以便针对侧信道攻击认证计算设备。一种装置包括处理器电路和可操作地将处理器电路通信地耦合到网络的接口; 存储器，其通信地耦合到所述处理器电路并且被布置为存储在所述处理器电路上操作的指令以对信息进行数字签名以使用被设置为补偿大于模数的变量的值的模算术运算来创建第一签名而不使用分支指令并经由网络将第一签名发送给验证服务器。在此描述和要求保护的其它实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式