专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20160117265A1 MAINTAINING A SECURE PROCESSING ENVIRONMENT ACROSS POWER CYCLES 有权
标题翻译：维护安全循环的安全环境
公开(公告)号：US20160117265A1
公开(公告)日：2016-04-28
申请号：US14525421
申请日：2014-10-28
申请人： Francis X. MCKEEN , Vincent Scarlata , Carlos Rozas , Ittai Anati , Vedvyas Shanbhogue
发明人： Francis X. MCKEEN , Vincent Scarlata , Carlos Rozas , Ittai Anati , Vedvyas Shanbhogue
IPC分类号： G06F12/14 , G06F12/08
CPC分类号： G06F12/1416 , G06F9/4418 , G06F12/0804 , G06F12/0875 , G06F12/1408 , G06F12/1441 , G06F21/53 , G06F2212/1016 , G06F2212/1028 , G06F2212/1052 , G06F2212/152 , G06F2212/452 , Y02D10/13
摘要： Embodiments of an invention for maintaining a secure processing environment across power cycles are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to evict a root version array page entry from a secure cache. The execution unit is to execute the instruction. Execution of the instruction includes generating a blob to contain information to maintain a secure processing environment across a power cycle and storing the blob in a non-volatile memory.
摘要翻译：公开了用于在电力周期内保持安全处理环境的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元接收从安全缓存驱逐根版本阵列页条目的指令。执行单元执行指令。该指令的执行包括生成一个blob以包含信息以在整个电源周期内维护一个安全的处理环境，并将该blob存储在一个非易失性存储器中。

2. 发明授权

US09276750B2 Secure processing environment measurement and attestation 有权
标题翻译：安全的处理环境测量和认证
公开(公告)号：US09276750B2
公开(公告)日：2016-03-01
申请号：US13949192
申请日：2013-07-23
申请人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
发明人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L9/3242 , G06F9/3004 , H04L9/3234 , H04L2209/127
摘要： Embodiments of an invention for secure processing environment measurement and attestation are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction associated with a build or a rebuild of a secure enclave. The execution unit is to execute the first instruction. Execution of the first instruction, when associated with the build, includes calculation of a first measurement and a second measurement of the secure enclave. Execution of the first instruction, when associated with the rebuild, includes calculation of the second measurement without calculation of the first measurement.
摘要翻译：公开了用于安全处理环境测量和认证的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收与构建或重建安全飞地相关联的第一条指令。执行单元执行第一条指令。当与构建相关联时，执行第一条指令包括对安全飞地的第一测量和第二测量的计算。当与重建相关联时，第一条指令的执行包括第二次测量的计算，而不计算第一次测量。

3. 发明申请

US20150033012A1 SECURE PROCESSING ENVIRONMENT MEASUREMENT AND ATTESTATION 有权
标题翻译：安全处理环境测量和指导
公开(公告)号：US20150033012A1
公开(公告)日：2015-01-29
申请号：US13949192
申请日：2013-07-23
申请人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
发明人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
IPC分类号： H04L9/32
CPC分类号： H04L9/3242 , G06F9/3004 , H04L9/3234 , H04L2209/127
摘要： Embodiments of an invention for secure processing environment measurement and attestation are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction associated with a build or a rebuild of a secure enclave. The execution unit is to execute the first instruction. Execution of the first instruction, when associated with the build, includes calculation of a first measurement and a second measurement of the secure enclave. Execution of the first instruction, when associated with the rebuild, includes calculation of the second measurement without calculation of the first measurement.
摘要翻译：公开了用于安全处理环境测量和认证的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收与构建或重建安全飞地相关联的第一条指令。执行单元执行第一条指令。当与构建相关联时，执行第一条指令包括对安全飞地的第一测量和第二测量的计算。当与重建相关联时，第一条指令的执行包括第二次测量的计算，而不计算第一次测量。

4. 发明申请

US20150033316A1 FEATURE LICENSING IN A SECURE PROCESSING ENVIRONMENT 有权
标题翻译：安全加工环境中的特征许可
公开(公告)号：US20150033316A1
公开(公告)日：2015-01-29
申请号：US13949213
申请日：2013-07-23
申请人： Vincent Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Ittai Anati , Francis McKeen , Michael Goldsmith
发明人： Vincent Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Ittai Anati , Francis McKeen , Michael Goldsmith
IPC分类号： G06F21/10 , H04L9/32
CPC分类号： H04L9/3213 , G06F21/12 , G06F21/53 , H04L9/3263
摘要： Embodiments of an invention for feature licensing in a secure processing environment are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to initialize a secure enclave. The execution unit is to execute the instruction. Execution of the instruction includes determining whether a requested feature is licensed for use in the secure enclave.
摘要翻译：公开了在安全处理环境中的特征许可的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收初始化安全飞地的指令。执行单元执行指令。指令的执行包括确定所请求的特征是否被许可用于安全飞地。

5. 发明授权

US09286235B2 Virtual memory address range register 有权
标题翻译：虚拟内存地址范围寄存器
公开(公告)号：US09286235B2
公开(公告)日：2016-03-15
申请号：US13538900
申请日：2012-06-29
申请人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
发明人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
IPC分类号： G06F9/26 , G06F9/34 , G06F12/10
CPC分类号： G06F12/109 , G06F12/0284 , G06F12/1036 , G06F2212/656 , G06F2212/657
摘要： Embodiments of apparatuses and methods including virtual address memory range registers are disclosed. In one embodiment, a processor includes a memory interface, address translation hardware, and virtual memory address comparison hardware. The memory interface is to access a system memory using a physical memory address. The address translation hardware is to support translation of a virtual memory address to the physical memory address. The virtual memory address is used by software to access a virtual memory location in the virtual memory address space of the processor. The virtual memory address comparison hardware is to determine whether the virtual memory address is within a virtual memory address range.
摘要翻译：公开了包括虚拟地址存储器范围寄存器的装置和方法的实施例。在一个实施例中，处理器包括存储器接口，地址转换硬件和虚拟存储器地址比较硬件。存储器接口是使用物理内存地址访问系统内存。地址转换硬件是支持将虚拟内存地址转换为物理内存地址。虚拟存储器地址由软件用于访问处理器的虚拟存储器地址空间中的虚拟存储器位置。虚拟内存地址比较硬件是确定虚拟内存地址是否在虚拟内存地址范围内。

6. 发明申请

US20140006746A1 VIRTUAL MEMORY ADDRESS RANGE REGISTER 有权
标题翻译：虚拟内存地址范围注册
公开(公告)号：US20140006746A1
公开(公告)日：2014-01-02
申请号：US13538900
申请日：2012-06-29
申请人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
发明人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
IPC分类号： G06F12/10
CPC分类号： G06F12/109 , G06F12/0284 , G06F12/1036 , G06F2212/656 , G06F2212/657
摘要： Embodiments of apparatuses and methods including virtual address memory range registers are disclosed. In one embodiment, a processor includes a memory interface, address translation hardware, and virtual memory address comparison hardware. The memory interface is to access a system memory using a physical memory address. The address translation hardware is to support translation of a virtual memory address to the physical memory address. The virtual memory address is used by software to access a virtual memory location in the virtual memory address space of the processor. The virtual memory address comparison hardware is to determine whether the virtual memory address is within a virtual memory address range.
摘要翻译：公开了包括虚拟地址存储器范围寄存器的装置和方法的实施例。在一个实施例中，处理器包括存储器接口，地址转换硬件和虚拟存储器地址比较硬件。存储器接口是使用物理内存地址访问系统内存。地址转换硬件是支持将虚拟内存地址转换为物理内存地址。虚拟存储器地址由软件用于访问处理器的虚拟存储器地址空间中的虚拟存储器位置。虚拟内存地址比较硬件是确定虚拟内存地址是否在虚拟内存地址范围内。

7. 发明申请

US20140283098A1 MUTUALLY ASSURED DATA SHARING BETWEEN DISTRUSTING PARTIES IN A NETWORK ENVIRONMENT 有权
标题翻译：在网络环境中分派对之间的数据共享
公开(公告)号：US20140283098A1
公开(公告)日：2014-09-18
申请号：US13844101
申请日：2013-03-15
申请人： Vinay Phegade , Anand Rajan , Simon Johnson , Vincent Scarlata , Carlos Rozas , Nikhil Deshpande
发明人： Vinay Phegade , Anand Rajan , Simon Johnson , Vincent Scarlata , Carlos Rozas , Nikhil Deshpande
IPC分类号： G06F21/60
CPC分类号： H04L63/0428 , G06F21/57 , G06F21/60 , G06F21/64 , G06F2221/2105 , H04L63/126 , H04L63/302
摘要： An apparatus for sharing information between entities includes a processor and a trusted execution module executing on the processor. The trusted execution module is configured to receive first confidential information from a first client device associated with a first entity, seal the first confidential information within a trusted execution environment, receive second confidential information from a second client device associated with a second entity, seal the second confidential information within the trusted execution environment, and execute code within the trusted execution environment. The code is configured to compute a confidential result based upon the first confidential information and the second confidential information.
摘要翻译：用于在实体之间共享信息的装置包括处理器和在处理器上执行的可信执行模块。可信执行模块被配置为从与第一实体相关联的第一客户端设备接收第一机密信息，将可信执行环境中的第一机密信息密封，从与第二实体相关联的第二客户端设备接收第二机密信息，可信执行环境中的第二机密信息，并在可信执行环境内执行代码。代码被配置为基于第一机密信息和第二机密信息来计算机密结果。

8. 发明申请

US20060256105A1 Method and apparatus for providing software-based security coprocessors 有权
公开(公告)号：US20060256105A1
公开(公告)日：2006-11-16
申请号：US11171133
申请日：2005-06-29
申请人： Vincent Scarlata , Carlos Rozas
发明人： Vincent Scarlata , Carlos Rozas
IPC分类号： G06T1/00
CPC分类号： G06F21/72 , G06F21/53 , G06F21/552 , G06F21/577 , G06F21/602 , G06F21/74 , G06F21/79 , G06F2221/2103 , G06F2221/2105 , G06F2221/2149
摘要： A virtual security coprocessor framework supports creation of at least one device model to emulate a predetermined cryptographic coprocessor. In one embodiment, the virtual security coprocessor framework uses a cryptographic coprocessor in a processing system to create an instance of the device model (DM) in the processing system. The DM may be based at least in part on a predetermined device model design. The DM may emulate the predetermined cryptographic coprocessor in accordance with the control logic of the device model design. In one embodiment, the virtual security coprocessor framework uses a physical trusted platform module (TPM) in a processing system to support one or more virtual TPMs (vTPMs) for one or more virtual machines (VMs) in the processing system. Other embodiments are described and claimed.

9. 发明申请

US20060020781A1 Method and apparatus for providing secure virtualization of a trusted platform module 有权
公开(公告)号：US20060020781A1
公开(公告)日：2006-01-26
申请号：US10876994
申请日：2004-06-24
申请人： Vincent Scarlata , Carlos Rozas
发明人： Vincent Scarlata , Carlos Rozas
IPC分类号： G06F1/24
CPC分类号： G06F21/57 , G06F9/45558 , G06F21/53 , G06F2009/45587
摘要： A method and a related apparatus provide a virtual trusted platform module (TPM). In an example embodiment, a virtual TPM service creates a virtual TPM for use in a processing system that contains a physical TPM. The virtual TPM service may store a key for the virtual TPM in the physical TPM. The virtual TPM service may then use the virtual TPM to provide emulated physical TPM features. In one embodiment, the virtual TPM service may use the virtual TPM to emulate a physical TPM for a virtual machine in the processing system. Other embodiments are described and claimed.

10. 发明申请

US20070006169A1 Method and apparatus for binding TPM keys to execution entities 有权
标题翻译：将TPM密钥绑定到执行实体的方法和装置
公开(公告)号：US20070006169A1
公开(公告)日：2007-01-04
申请号：US11170853
申请日：2005-06-30
申请人： Alexander Iliev , Vincent Scarlata , Carlos Rozas
发明人： Alexander Iliev , Vincent Scarlata , Carlos Rozas
IPC分类号： G06F9/44
CPC分类号： G06F21/57 , G06F21/72 , G06F2221/2141 , H04L9/0897
摘要： A method and apparatus for binding trusted platform module (TPM) keys to execution entities are described. In one embodiment, the method includes the receipt of an authorization request issued by an execution entity for authorization data. According to the authorization request, the execution entity may be measured to generate an entity digest value. Once the entity digest value is generated, a platform reference module may grant the authorization request if the entity digest value verifies that the execution entity is an owner of the key held by the TPM. Accordingly, in one embodiment, a platform reference module, rather than an execution entity, holds the authorization data required by a TPM to use a key owned by the execution entity and held within sealed storage by the TPM. Other embodiments are described and claimed.
摘要翻译：描述了将可信平台模块（TPM）密钥绑定到执行实体的方法和装置。在一个实施例中，该方法包括接收由执行实体发出的授权数据的授权请求。根据授权请求，可以测量执行实体以生成实体摘要值。一旦生成实体摘要值，如果实体摘要值验证执行实体是TPM持有的密钥的所有者，则平台引用模块可以授予授权请求。因此，在一个实施例中，平台参考模块而不是执行实体保存TPM所需的授权数据，以使用由执行实体拥有的密钥并由TPM保存在密封存储器内。描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式