专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2018005384A1 DATA SECURITY IN A CLOUD NETWORK 审中-公开
标题翻译：云网络中的数据安全
公开(公告)号：WO2018005384A1
公开(公告)日：2018-01-04
申请号：PCT/US2017/039331
申请日：2017-06-26
申请人： INTEL CORPORATION
发明人： SCARLATA, Vincent R. , MCKEEN, Francis X. , ROZAS, Carlos V. , JOHNSON, Simon P. , ZHANG, Bo , VIJ, Mona , BAKER, Brandon , KUMAR, Mohan J. , MALLICK, Asit K. , GENTRY, Mark A. , CHAKRABARTI, Somnath
IPC分类号： G06F21/60 , G06F21/62 , H04L29/06 , H04L9/08
CPC分类号： H04L9/0816 , G06F21/6218 , H04L9/0861 , H04L9/088 , H04L9/0894 , H04L9/14 , H04L63/06
摘要： Particular embodiments described herein provide for an electronic device that can be configured to store data in a secure domain in a cloud network, create encryption keys, where each encryption key is to provide a different type of access to the data, and store the encryption keys in a secure domain key store in the cloud network. In an example, each encryption key provides access to a different version of the data. In another example, a counter engine stores the location of each version of the data in the cloud network.
摘要翻译：这里描述的特定实施例提供了一种电子设备，其可以被配置为将数据存储在云网络中的安全域中，创建加密密钥，其中每个加密密钥将提供对数据，并将加密密钥存储在云网络中的安全域密钥存储中。在一个示例中，每个加密密钥提供对不同版本的数据的访问。在另一个例子中，计数器引擎将每个数据版本的位置存储在云网络中。

2. 发明申请

WO2017052793A1 CRYPTOGRAPHIC CACHE LINES FOR A TRUSTED EXECUTION ENVIRONMENT 审中-公开
标题翻译： CRYPTOGRAPHIC CACHE线条用于执行执行环境
公开(公告)号：WO2017052793A1
公开(公告)日：2017-03-30
申请号：PCT/US2016/045408
申请日：2016-08-03
申请人： INTEL CORPORATION
发明人： CHHABRA, Siddhartha , MCKEEN, Francis X. , ROZAS, Carlos V. , KOMIJANI, Saeedeh , LEHMAN, Tamara S.
IPC分类号： G06F21/72 , G06F21/55
CPC分类号： G06F21/72 , G06F12/1408 , G06F21/64 , G06F21/78 , H04L9/002 , H04L9/0637 , H04L9/3242 , H04L2209/12
摘要： Memory security technologies are described. An example processing system includes a processor core and a memory controller coupled to the processor core and a memory. The processor core can receive a content read instruction from an application. The processor core can identify a cache line (CL) from a plurality of CLs of a cryptographic cache block (CCB) requested in the content read instruction. The processor core can load, from a cryptographic tree, tree nodes with security metadata. The processor core can retrieve, from the memory, the CCB. The processor core can generate a second MAC from the CCB. The processor core can compare the first MAC with the second MAC. The processor core can decrypt the CCB using security metadata when the first MAC matches the second MAC. The processor core can send at least the identified CL from the decrypted CCB to the application.
摘要翻译：内存安全技术被描述。示例性处理系统包括处理器核心和耦合到处理器核心和存储器的存储器控制器。处理器核心可以从应用程序接收内容读取指令。处理器核心可以从内容读取指令中请求的密码高速缓存块（CCB）的多个CL中识别高速缓存行（CL）。处理器核心可以从加密树中加载具有安全元数据的树节点。处理器核心可以从内存中检索CCB。处理器核心可以从CCB生成第二个MAC。处理器核心可以将第一MAC与第二MAC进行比较。当第一MAC与第二MAC匹配时，处理器核心可以使用安全元数据解密CCB。处理器核心可以将至少从被解密的CCB的所识别的CL发送到应用程序。

3. 发明申请

WO2015047789A1 SECURE MEMORY REPARTITIONING 审中-公开
标题翻译：安全记忆重写
公开(公告)号：WO2015047789A1
公开(公告)日：2015-04-02
申请号：PCT/US2014/055807
申请日：2014-09-16
申请人： INTEL CORPORATION , CHHABRA, Siddhartha , SAVAGAONKAR, Uday R. , GOLDSMITH, Michael A. , JOHNSON, Simon P. , LESLIE-HURD, Rebekah M. , MCKEEN, Francis X. , NEIGER, Gilbert , MAKARAM, Raghunandan , ROZAS, Carlos V. , SANTONI, Amy L. , SCARLATA, Vincent R. , SHANBHOGUE, Vedvyas , SMITH, Wesley H. , ANATI, Ittai , ALEXANDROVICH, Ilya
发明人： CHHABRA, Siddhartha , SAVAGAONKAR, Uday R. , GOLDSMITH, Michael A. , JOHNSON, Simon P. , LESLIE-HURD, Rebekah M. , MCKEEN, Francis X. , NEIGER, Gilbert , MAKARAM, Raghunandan , ROZAS, Carlos V. , SANTONI, Amy L. , SCARLATA, Vincent R. , SHANBHOGUE, Vedvyas , SMITH, Wesley H. , ANATI, Ittai , ALEXANDROVICH, Ilya
IPC分类号： G06F21/79 , G06F12/14
CPC分类号： G06F12/1408 , G06F9/45558 , G06F12/0808 , G06F12/0897 , G06F12/1027 , G06F2009/45587 , G06F2212/1032 , G06F2212/1048 , G06F2212/152
摘要： Secure memory repartitioning technologies are described. A processor includes a processor core and a memory controller coupled between the processor core and main memory. The main memory includes a memory range including a section of convertible pages are convertible to secure pages or non-secure pages. The processor core, in response to a page conversion instruction, is to determine from the instruction a convertible page in the memory range to be converted and convert the convertible page to be at least one of a secure page or a non-secure page. The memory range may also include a hardware reserved section are convertible in response to a section conversion instruction.
摘要翻译：描述了安全的内存重新分区技术。处理器包括耦合在处理器核心和主存储器之间的处理器核心和存储器控制器。主存储器包括一个内存范围，包括可转换页面的一部分可转换为安全页面或非安全页面。响应于页面转换指令的处理器核心是从指令中确定要转换的存储器范围内的可转换页面，并将可转换页面转换为安全页面或非安全页面中的至少一个页面。存储器范围还可以包括可响应于段转换指令而转换的硬件保留部分。

4. 发明申请

WO2015013059A1 FEATURE LICENSING IN A SECURE PROCESSING ENVIRONMENT 审中-公开
标题翻译：安全加工环境中的特征许可
公开(公告)号：WO2015013059A1
公开(公告)日：2015-01-29
申请号：PCT/US2014/046610
申请日：2014-07-15
申请人： INTEL CORPORATION , SCARLATA, Vincent R. , ROZAS, Carlos V. , JOHNSON, Simon P. , SAVAGAONKAR, Uday R. , ANATI, Ittai , MCKEEN, Francis X. , GOLDSMITH, Michael A.
发明人： SCARLATA, Vincent R. , ROZAS, Carlos V. , JOHNSON, Simon P. , SAVAGAONKAR, Uday R. , ANATI, Ittai , MCKEEN, Francis X. , GOLDSMITH, Michael A.
IPC分类号： G06F21/00 , G06F9/06
CPC分类号： H04L9/3213 , G06F21/12 , G06F21/53 , H04L9/3263
摘要： Embodiments of an invention for feature licensing in a secure processing environment are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to initialize a secure enclave. The execution unit is to execute the instruction. Execution of the instruction includes determining whether a requested feature is licensed for use in the secure enclave.
摘要翻译：公开了在安全处理环境中的特征许可的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收初始化安全飞地的指令。执行单元执行指令。指令的执行包括确定所请求的特征是否被许可用于安全飞地。

5. 发明申请

WO2014105130A1 MEASURING APPLICATIONS LOADED IN SECURE ENCLAVES AT RUNTIME 审中-公开
标题翻译：测量在运行时以安全的方式装载的应用程序
公开(公告)号：WO2014105130A1
公开(公告)日：2014-07-03
申请号：PCT/US2013/046191
申请日：2013-06-17
申请人： INTEL CORPORATION , XING, Bin , HOEKSTRA, Matthew E. , GOLDSMITH, Michael A. , ROZAS, Carlos V. , SCARLATA, Vincent R. , JOHNSON, Simon P. , SAVAGAONKAR, Uday R. , MCKEEN, Francis X. , TOLOPKA, Stephen J.
发明人： XING, Bin , HOEKSTRA, Matthew E. , GOLDSMITH, Michael A. , ROZAS, Carlos V. , SCARLATA, Vincent R. , JOHNSON, Simon P. , SAVAGAONKAR, Uday R. , MCKEEN, Francis X. , TOLOPKA, Stephen J.
IPC分类号： G06F21/52 , G06F9/44
CPC分类号： G06F21/53 , G06F21/71 , G06F2221/2101 , G06F2221/2149
摘要： Embodiments of an invention for measuring applications loaded in secure enclaves at runtime are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to extend a first measurement of a secure enclave with a second measurement. The execution unit is to execute the instruction after initialization of the secure enclave.
摘要翻译：公开了用于在运行时测量加载在安全空间中的应用的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收用于通过第二测量来扩展安全飞地的第一测量的指令。执行单元将在安全飞地初始化后执行指令。

6. 发明申请

WO2014055136A1 PARALLELIZED COUNTER TREE WALK FOR LOW OVERHEAD MEMORY REPLAY PROTECTION 审中-公开
标题翻译：并行平衡计数器用于低过载存储器重放保护
公开(公告)号：WO2014055136A1
公开(公告)日：2014-04-10
申请号：PCT/US2013/045702
申请日：2013-06-13
申请人： INTEL CORPORATION
发明人： CHHABRA, Siddhartha , SAVAGAONKAR, Uday R. , DURHAM, David M. , COORAY, Niranjan L. , LONG, Men , ROZAS, Carlos V. , NARENDRA TRIVEDI, Alpa T.
IPC分类号： G06F21/78 , G06F13/14
CPC分类号： G06F12/1408 , G06F21/71
摘要： A processor includes a memory encryption engine that provides replay and confidentiality protections to a memory region. The memory encryption engine performs low-overhead parallelized tree walks along a counter tree structure. The memory encryption engine upon receiving an incoming read request for the protected memory region, performs a dependency check operation to identify dependency between the incoming read request and an in-process request and to remove the dependency when the in-process request is a read request that is not currently suspended.
摘要翻译：处理器包括为存储器区域提供重放和保密性保护的存储器加密引擎。存储器加密引擎沿着计数器树结构执行低架构并行化的树行走。存储器加密引擎在接收到对受保护的存储器区域的传入读取请求时，执行依赖性检查操作以识别传入的读取请求与进程内请求之间的依赖关系，并且当进程内请求是读取请求时，去除依赖关系目前尚未暂停。

7. 发明申请

WO2012082410A2 TECHNIQUE FOR SUPPORTING MULTIPLE SECURE ENCLAVES 审中-公开
标题翻译：支持多种安全措施的技术
公开(公告)号：WO2012082410A2
公开(公告)日：2012-06-21
申请号：PCT/US2011/063140
申请日：2011-12-02
申请人： INTEL CORPORATION , JOHNSON, Simon P. , SAVAGAONKAR, Uday R. , SCARLATA, Vincent R. , MCKEEN, Francis X. , ROZAS, Carlos V.
发明人： JOHNSON, Simon P. , SAVAGAONKAR, Uday R. , SCARLATA, Vincent R. , MCKEEN, Francis X. , ROZAS, Carlos V.
IPC分类号： G06F21/00 , G06F21/22 , G06F21/24
CPC分类号： G06F12/1466 , G06F21/53 , G06F21/6218 , G06F21/64 , G06F21/645
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

8. 发明申请

WO2012074720A1 METHOD AND APPARATUS FOR KEY PROVISIONING OF HARDWARE DEVICES 审中-公开
标题翻译：关键提供硬件设备的方法和装置
公开(公告)号：WO2012074720A1
公开(公告)日：2012-06-07
申请号：PCT/US2011/060345
申请日：2011-11-11
申请人： INTEL CORPORATION , BRICKELL, Ernie F. , GUERON, Shay , LI, Jiangtao , ROZAS, Carlos V. , NEMIROFF, Daniel , SCARLATA, Vincent R. , SAVAGAONKAR, Uday R. , JOHNSON, Simon P.
发明人： BRICKELL, Ernie F. , GUERON, Shay , LI, Jiangtao , ROZAS, Carlos V. , NEMIROFF, Daniel , SCARLATA, Vincent R. , SAVAGAONKAR, Uday R. , JOHNSON, Simon P.
IPC分类号： H04L9/08 , H04L9/14
CPC分类号： H04L9/0816 , G06F21/572 , G06F21/73
摘要： Keying materials used for providing security in a platform are securely provisioned both online and offline to devices in a remote platform. The secure provisioning of the keying materials is based on a revision of firmware installed in the platform.
摘要翻译：用于在平台中提供安全性的键控材料可以安全地在线和离线地配置到远程平台中的设备。密钥材料的安全配置基于安装在平台中的固件的修订版本。

9. 发明申请

WO2018064006A1 SECURING ACCESS TO CLOUD COMPONENTS 审中-公开
标题翻译：保护对云端组件的访问
公开(公告)号：WO2018064006A1
公开(公告)日：2018-04-05
申请号：PCT/US2017/053350
申请日：2017-09-26
申请人： INTEL CORPORATION
发明人： CHAKRABARTI, Somnath , VIJ, Mona , ROZAS, Carlos V. , BAKER, Brandon , SCARLATA, Vincent R. , BHANDARU, Malini K. , SUN, Ning , NAKAJIMA, Jun , MCKEEN, Francis X. , JOHNSON, Simon P.
IPC分类号： H04L29/06
CPC分类号： H04L63/10 , H04L63/08 , H04L63/126 , H04L67/10
摘要： Particular embodiments described herein provide for receiving a request from a first cloud component in a cloud network, wherein the request is to access a key and the key allows the first cloud component to access located trusted execution environment of a second cloud component in the cloud network and allow the request on the condition that the first cloud component is authenticated. A more specific example includes determining a type for the first cloud component, and comparing the determined type of the first cloud component with a component type associated with the key. The example may also include blocking the request if the determined type of the first cloud component does not match the component type associated with the key.
摘要翻译：这里描述的特定实施例提供了从云网络中的第一云组件接收请求，其中该请求是访问密钥，并且该密钥允许第一云组件访问所定位的可信执行环境云网络中的第二云组件，并且在第一云组件被认证的情况下允许该请求。更具体的示例包括确定第一云组件的类型，并且将确定的第一云组件的类型与与该密钥相关联的组件类型进行比较。该示例还可以包括如果所确定的第一云组件的类型不匹配与该密钥相关联的组件类型，则阻止该请求。

10. 发明申请

WO2018063719A1 SUPPORTING OVERSUBSCRIPTION OF GUEST ENCLAVE MEMORY PAGES 审中-公开
标题翻译：支持访客留言记录页的过度记录
公开(公告)号：WO2018063719A1
公开(公告)日：2018-04-05
申请号：PCT/US2017/049431
申请日：2017-08-30
申请人： INTEL CORPORATION
发明人： LESLIE-HURD, Rebekah M. , MCKEEN, Francis X. , ROZAS, Carlos V. , NEIGER, Gilbert , MALLICK, Asit K. , ANATI, Ittai , ALEXANDROVICH, Ilya , SHANBHOGUE, Vedvyas , CHAKRABARTI, Somnath
IPC分类号： G06F21/53 , G06F9/455
CPC分类号： G06F3/0631 , G06F3/0604 , G06F3/064 , G06F3/0664 , G06F3/0665 , G06F3/0673 , G06F9/45558 , G06F2009/45583
摘要： Implementations of the disclosure provide for supporting oversubscription of guest enclave memory pages. In one implementation, a processing device comprising a memory controller unit to access a secure enclave and a processor core, operatively coupled to the memory controller unit. The processing device is to identify a target memory page in memory. The target memory page is associated with a secure enclave of a virtual machine (VM). A data structure comprising context information corresponding to the target memory page is received. A state of the target memory page is determined based on the received data structure. The state indicating whether the target memory page is associated with at least one of: a child memory page or a parent memory page of the VM. Thereupon, an instruction to evict the target memory page from the secure enclave is generated based on the determined state.
摘要翻译：本公开的实施方式提供支持访客飞地存储器页面的超额预订。在一个实现中，处理设备包括用于访问安全区域的存储器控制器单元和可操作地耦合到存储器控制器单元的处理器核心。处理设备将识别存储器中的目标存储器页面。目标内存页面与虚拟机（VM）的安全区域相关联。接收包括对应于目标存储器页面的上下文信息的数据结构。目标存储器页面的状态基于接收到的数据结构来确定。指示目标存储器页面是否与VM的子存储器页面或父存储器页面中的至少一个相关联的状态。于是，基于确定的状态产生从安全区域驱逐目标存储器页面的指令。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式