专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO0175564A3 PLATFORM AND METHOD FOR REMOTE ATTESTATION OF A PLATFORM 审中-公开
标题翻译：用于远程实现平台的平台和方法
公开(公告)号：WO0175564A3
公开(公告)日：2003-01-16
申请号：PCT/US0108891
申请日：2001-03-21
申请人： INTEL CORP , HERBERT HOWARD C , GRAWROCK DAVID W , ELLISON CARL M , GOLLIVER ROGER A , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
发明人： HERBERT HOWARD C , GRAWROCK DAVID W , ELLISON CARL M , GOLLIVER ROGER A , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
IPC分类号： G06F1/00 , G06F12/14 , G06F21/00
CPC分类号： G06F21/305 , G06F9/30189 , G06F12/1491 , G06F21/35 , G06F21/53 , G06F21/57 , G06F21/575 , G06F21/64 , G06F21/74 , G06F2221/2101 , G06F2221/2103 , G06F2221/2105 , G06F2221/2149
摘要： In one embodiment, a method of remote attestation for a special mode of operation. The method comprises storing an audit log within protected memory of a platform. The audit log is a listing of data representing each of a plurality of IsoX software modules loaded into the platform. The audit log is retrieved from the protected memory in response to receiving a remote attestation request from a remotely located platform. Then, the retrieved audit log is digitally signed to produce a digital signature for transfer to the remotely located platform.
摘要翻译：在一个实施例中，用于特殊操作模式的远程证明的方法。该方法包括将审核日志存储在平台的受保护的存储器内。审计日志是表示加载到平台中的多个IsoX软件模块中的每一个的数据的列表。响应于从远程位置的平台接收远程认证请求，从受保护的内存中检索审核日志。然后，检索的审核日志进行数字签名，以产生数字签名，以转移到位于远程的平台。

2. 发明申请

WO0175565A3 ISOLATED INSTRUCTIONS FOR ISOLATED EXECUTION 审中-公开
标题翻译：隔离指示用于隔离执行
公开(公告)号：WO0175565A3
公开(公告)日：2002-06-27
申请号：PCT/US0109371
申请日：2001-03-23
申请人： INTEL CORP , ELLISON CARL M , GOLLIVER ROGER A , HERBERT HOWARD C , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
发明人： ELLISON CARL M , GOLLIVER ROGER A , HERBERT HOWARD C , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
IPC分类号： G06F9/46 , G06F1/00 , G06F9/48 , G06F21/00
CPC分类号： G06F21/53 , G06F2221/2105
摘要： A technique is provided to execute isolated instructions according to an embodiment of the present invention. An execution unit executes an isolated instruction in a processor operating in a platform. The processor is configured in one of a normal execution mode and an isolated execution mode. A parameter storage containing at least one parameter to support execution of the isolated instruction when the processor is configured in the isolated execution mode.
摘要翻译：提供了根据本发明的实施例的执行隔离指令的技术。执行单元在平台中操作的处理器中执行隔离指令。处理器配置为正常执行模式和隔离执行模式之一。当处理器被配置为隔离执行模式时，包含至少一个参数以支持执行隔离指令的参数存储器。

3. 发明申请

WO0239269A3 APPARATUS AND METHOD TO RESCHEDULE INSTRUCTIONS 审中-公开
标题翻译：装置说明书和方法
公开(公告)号：WO0239269A3
公开(公告)日：2003-01-23
申请号：PCT/US0150735
申请日：2001-10-18
申请人： INTEL CORP , CARMEAN DOUGLAS M , BOGGS DARRELL D , SAGER DAVID J , MCKEEN FRANCIS X , HAMMARLUND PER , SINGHAL RONAK
发明人： CARMEAN DOUGLAS M , BOGGS DARRELL D , SAGER DAVID J , MCKEEN FRANCIS X , HAMMARLUND PER , SINGHAL RONAK
IPC分类号： G06F9/38
CPC分类号： G06F9/3842 , G06F9/3861
摘要： Breaking replay dependency loops in a processor using a rescheduled replay queue. The processor comprise a replay queue to receive a plurality of instructions, and an execution unit to execute the plurality of instructions. A scheduler is coupled between the replay queue and the execution unit. The scheduler speculatively schedules instructions for execution and increments a counter for each of the plurality of instructions to reflect the number of times each of the plurality of instructions has been executed. The scheduler also dispatches each instruction to the execution unit either when the counter does not exceed a maximum number of replays or, if the counter exceeds the maximum number of replays, when the instruction is safe to execute. A checker is coupled tot he execution unit to determine whether each instruction has executed successfully. The checker is also coupled to the replay queue to communicate to the replay queue each instruction that has not executed successfully.
摘要翻译：使用重新安排的重播队列在处理器中重新播放依赖循环。处理器包括用于接收多个指令的重播队列，以及执行多个指令的执行单元。调度器耦合在重播队列和执行单元之间。调度器推测性地调度用于执行的指令，并且为多个指令中的每一个递增计数器，以反映多个指令中的每一个已被执行的次数。当计数器不超过最大重放次数时，或者当计数器超过最大重放次数时，当指令执行安全时，调度器也将每条指令分派给执行单元。检查器与执行单元相连以确定每个指令是否已成功执行。检查器还耦合到重播队列，以便与未执行成功的每个指令通信给重播队列。

4. 发明申请

WO0175563A3 GENERATING A KEY HIERARCHY FOR USE IN AN ISOLATED EXECUTION ENVIRONMENT 审中-公开
标题翻译：产生用于隔离执行环境的关键层次
公开(公告)号：WO0175563A3
公开(公告)日：2002-05-23
申请号：PCT/US0108365
申请日：2001-03-14
申请人： INTEL CORP , ELLISON CARL M , GOLLIVER ROGER A , HERBERT HOWARD C , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
发明人： ELLISON CARL M , GOLLIVER ROGER A , HERBERT HOWARD C , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
IPC分类号： G06F21/22 , G06F21/00 , G09C1/00 , H04L9/08 , H04L9/10 , G06F1/00
CPC分类号： G06F21/53 , G06F21/57 , G06F2221/2101 , G06F2221/2105
摘要： The present invention is a method, apparatus, and system to generate a key hierarchy for use in an isolated execution environment of a protected platform. In order to bind secrets to particular code operating in isolated execution, a key hierarchy comprising a series of symmetric keys for a standard symmetric cipher is utilized. The protected platform includes a processor that is configured in one of a normal execution mode and an isolated execution mode. A key storage stores an initial key that is unique for the platform. A cipher key creator located in the protected platform creates the hierarchy of keys based upon the initial key. The cipher key creator creates a series of symmetric cipher keys to protect the secrets of loaded software code.
摘要翻译：本发明是一种用于生成在受保护平台的隔离执行环境中使用的密钥层级的方法，装置和系统。为了将秘密绑定到在隔离执行中操作的特定代码，使用包括用于标准对称密码的一系列对称密钥的密钥层次。受保护平台包括被配置为正常执行模式和隔离执行模式之一的处理器。密钥存储存储该平台独有的初始密钥。位于受保护平台中的加密密钥创建者基于初始密钥创建密钥的层次结构。密码密钥创建者创建一系列对称密钥，以保护加载的软件代码的秘密。

5. 发明公开

EP3049992A4 SECURE MEMORY REPARTITIONING 有权
标题翻译： REPARTITIONIERUNG EINES SICHEREN DATENSPEICHERS
公开(公告)号：EP3049992A4
公开(公告)日：2017-05-03
申请号：EP14849831
申请日：2014-09-16
申请人： INTEL CORP
发明人： CHHABRA SIDDHARTHA , SAVAGAONKAR UDAY R , GOLDSMITH MICHAEL A , JOHNSON SIMON P , LESLIE-HURD REBEKAH M , MCKEEN FRANCIS X , NEIGER GILBERT , MAKARAM RAGHUNANDAN , ROZAS CARLOS V , SANTONI AMY L , SCARLATA VINCENT R , SHANBHOGUE VEDVYAS , SMITH WESLEY H , ANATI ITTAI , ALEXANDROVICH ILYA
IPC分类号： G06F21/79 , G06F12/14
CPC分类号： G06F12/1408 , G06F9/45558 , G06F12/0808 , G06F12/0897 , G06F12/1027 , G06F2009/45587 , G06F2212/1032 , G06F2212/1048 , G06F2212/152
摘要： Secure memory repartitioning technologies are described. A processor includes a processor core and a memory controller coupled between the processor core and main memory. The main memory includes a memory range including a section of convertible pages that are convertible to secure pages or non-secure pages. The processor core, in response to a page conversion instruction, is to determine from the instruction a convertible page in the memory range to be converted and convert the convertible page to be at least one of a secure page or a non-secure page. The memory range may also include a hardware reserved section that is convertible in response to a section conversion instruction.
摘要翻译：描述了安全内存重新分区技术。处理器包括处理器核心和耦合在处理器核心与主存储器之间的存储器控制器。主存储器包括一个存储器范围，包括一部分可转换页面可转换为安全页面或非安全页面。响应于页面转换指令，处理器核心根据指令确定要转换的存储器范围中的可转换页面并将可转换页面转换为安全页面或非安全页面中的至少一个。存储器范围还可以包括响应于区段转换指令而可转换的硬件保留区段。

6. 发明公开

EP3025268A4 FEATURE LICENSING IN A SECURE PROCESSING ENVIRONMENT 有权
标题翻译： EINER SICHEREN VERARBEITUNGSUMGEBUNG中的FUNKTIONSLIZENZIERUNG
公开(公告)号：EP3025268A4
公开(公告)日：2017-03-01
申请号：EP14829860
申请日：2014-07-15
申请人： INTEL CORP
发明人： SCARLATA VINCENT R , ROZAS CARLOS V , JOHNSON SIMON P , SAVAGAONKAR UDAY R , ANATI ITTAI , MCKEEN FRANCIS X , GOLDSMITH MICHAEL A
IPC分类号： G06F21/00 , G06F9/06
CPC分类号： H04L9/3213 , G06F21/12 , G06F21/53 , H04L9/3263
摘要： Embodiments of an invention for feature licensing in a secure processing environment are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to initialize a secure enclave. The execution unit is to execute the instruction. Execution of the instruction includes determining whether a requested feature is licensed for use in the secure enclave.
摘要翻译：公开了在安全处理环境中的特征许可的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收初始化安全飞地的指令。执行单元执行指令。指令的执行包括确定请求的特征是否被许可用于安全飞地。

7. 发明公开

EP2726991A4 METHOD AND APPARATUS FOR MEMORY ENCRYPTION WITH INTEGRITY CHECK AND PROTECTION AGAINST REPLAY ATTACKS 有权
标题翻译：方法和设备用于加密一个程序完整性测试和保护免受攻击PLAY
公开(公告)号：EP2726991A4
公开(公告)日：2015-04-08
申请号：EP11868426
申请日：2011-06-29
申请人： INTEL CORP
发明人： GUERON SHAY , SAVAGAONKAR UDAY , MCKEEN FRANCIS X , ROZAS CARLOS V , DURHAM DAVID M , DOWECK JACOB , MULLA OFIR , ANATI ITTAI , GREENFIELD ZVIKA , MAOR MOSHE
IPC分类号： G06F12/14 , G06F21/00 , G06F21/72
CPC分类号： G06F21/72 , G06F12/1408 , G06F21/00 , G06F21/64 , H04L9/0637 , H04L9/3242
摘要： A method and apparatus to provide cryptographic integrity checks and replay protection to protect against hardware attacks on system memory is provided. A mode of operation for block ciphers enhances the standard XTS-AES mode of operation to perform memory encryption by extending a tweak to include a “time stamp” indicator. A tree-based replay protection scheme uses standard XTS-AES to encrypt contents of a cache line in the system memory. A Message-Authentication Code (MAC) for the cache line is encrypted using enhanced XTS-AES and a “time stamp” indicator associated with the cache line. The “time stamp indicator” is stored in a processor.
摘要翻译：一种方法和装置，以提供加密的完整性检查和重放保护，以防止硬件攻击上提供系统内存。操作的块密码A模式增强操作的标准XTS-AES模式通过扩展一个调整为包括“时间戳”指示器来执行存储器加密。基于树的重放保护方案采用标准的XTS-AES加密系统内存的缓存行的内容。用于高速缓存线A的消息认证码（MAC）是使用增强XTS-AES和与高速缓存行关联的“时间戳”指示器加密。的“时间戳指示符”被存储在处理器中。

8. 发明申请

WO2012082410A3 TECHNIQUE FOR SUPPORTING MULTIPLE SECURE ENCLAVES 审中-公开
标题翻译：技术支持多重安全包围
公开(公告)号：WO2012082410A3
公开(公告)日：2012-08-16
申请号：PCT/US2011063140
申请日：2011-12-02
申请人： INTEL CORP , JOHNSON SIMON P , SAVAGAONKAR UDAY R , SCARLATA VINCENT R , MCKEEN FRANCIS X , ROZAS CARLOS V
发明人： JOHNSON SIMON P , SAVAGAONKAR UDAY R , SCARLATA VINCENT R , MCKEEN FRANCIS X , ROZAS CARLOS V
IPC分类号： G06F21/00 , G06F21/22 , G06F21/24
CPC分类号： G06F12/1466 , G06F21/53 , G06F21/6218 , G06F21/64 , G06F21/645
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用程序和数据完整性的技术。在一个实施例中，建立一个或多个安全区域，其中可以存储和执行应用程序和数据。

9. 发明申请

WO2011078855A1 METHOD AND APPARATUS TO PROVIDE SECURE APPLICATION EXECUTION 审中-公开
标题翻译：提供安全应用执行的方法和设备
公开(公告)号：WO2011078855A1
公开(公告)日：2011-06-30
申请号：PCT/US2009069212
申请日：2009-12-22
申请人： INTEL CORP , MCKEEN FRANCIS X , ROZAS CARLOS V , SAVAGANKAR UDAY R , JOHNSON SIMON P , SCARLATA VINCENT R , GOLDSMITH MICHAEL A , BRICKELL ERNIE , LI JIANGTAO , HERBERT HOWARD C , DEWAN PRASHANT , TOLOPKA STEPHEN J , NEIGER GILBERT , DURHAM DAVID , GRAUNKE GARY , LINT BERNARD , VAN DYKE DON A , CIHULA JOSEPH , JEYASINGH STALINSELVARAJ , VAN DOREN STEPHEN R , RODGERS DION , GARNEY JOHN
发明人： MCKEEN FRANCIS X , ROZAS CARLOS V , SAVAGANKAR UDAY R , JOHNSON SIMON P , SCARLATA VINCENT R , GOLDSMITH MICHAEL A , BRICKELL ERNIE , LI JIANGTAO , HERBERT HOWARD C , DEWAN PRASHANT , TOLOPKA STEPHEN J , NEIGER GILBERT , DURHAM DAVID , GRAUNKE GARY , LINT BERNARD , VAN DYKE DON A , CIHULA JOSEPH , JEYASINGH STALINSELVARAJ , VAN DOREN STEPHEN R , RODGERS DION , GARNEY JOHN
IPC分类号： G06F9/44 , G06F12/02 , G06F13/14 , G06F21/72 , G06F21/74
CPC分类号： G06F12/1491 , G06F12/0802 , G06F12/10 , G06F21/72 , G06F21/74 , G06F2221/2105
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

10. 发明申请

WO0175595A3 CONTROLLING ACCESSES TO ISOLATED MEMORY USING A MEMORY CONTROLLER FOR ISOLATED EXECUTION 审中-公开
标题翻译：使用存储器控制器进行隔离存储器的访问控制
公开(公告)号：WO0175595A3
公开(公告)日：2002-07-25
申请号：PCT/US0108374
申请日：2001-03-14
申请人： INTEL CORP , ELLISON CARL M , GOLLIVER ROGER A , HERBERT HOWARD C , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
发明人： ELLISON CARL M , GOLLIVER ROGER A , HERBERT HOWARD C , LIN DERRICK C , MCKEEN FRANCIS X , NEIGER GILBERT , RENERIS KEN , SUTTON JAMES A , THAKKAR SHREEKANT S , MITTAL MILLIND
IPC分类号： G06F21/00 , G06F12/14
CPC分类号： G06F21/53 , G06F9/30189 , G06F12/1491 , G06F21/567 , G06F21/71 , G06F21/74 , G06F21/85 , G06F2221/2105 , G06F2221/2141 , G06F2221/2145
摘要： An access transaction generated by a processor is configured using a configuration storage containing a configuration setting. The processor has a normal execution mode and an isolated execution mode. The access transaction has access information. Access to the configuration storage is controlled. An access grant signal is generated using the configuration setting and the access information. The access grant signal indicates if the access transaction is valid.
摘要翻译：使用包含配置设置的配置存储来配置由处理器生成的访问事务。处理器具有正常执行模式和隔离执行模式。访问事务具有访问信息。控制对配置存储的访问。使用配置设置和访问信息生成访问许可信号。访问许可信号指示访问事务是否有效。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式