专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2017210145A1 FLEXIBLE PROVISIONING OF ATTESTATION KEYS IN SECURE ENCLAVES 审中-公开
标题翻译：在安全环境中灵活地提供证明密钥
公开(公告)号：WO2017210145A1
公开(公告)日：2017-12-07
申请号：PCT/US2017/034897
申请日：2017-05-28
申请人： INTEL CORPORATION
发明人： SCARLATA, Vincent R. , MCKEEN, Francis X. , ROZAS, Carlos V. , JOHNSON, Simon P. , ZHANG, Bo , BEANEY, JR., James D. , ZMIJEWSKI, Piotr , SMITH, Wesley Hamilton , CABRE, Eduardo
IPC分类号： G06F21/53 , G06F21/62 , H04L9/08
CPC分类号： H04L9/3252 , G06F21/44 , G06F21/53 , G09C1/00 , H04L9/0866 , H04L9/14 , H04L9/302 , H04L9/3066 , H04L9/3234 , H04L9/3247 , H04L9/3249 , H04L63/06 , H04L63/062 , H04L63/0823 , H04L63/12 , H04L2209/127
摘要： A computing platform implements one or more secure enclaves including a first provisioning enclave to interface with a first provisioning service to obtain a first attestation key from the first provisioning service, a second provisioning enclave to interface with a different, second provisioning service to obtain a second attestation key from the second provisioning service, and a provisioning certification enclave to sign first data from the first provisioning enclave and second data from the second provisioning enclave using a hardware-based provisioning attestation key. The signed first data is used by the first provisioning enclave to authenticate to the first provisioning service to obtain the first attestation key and the signed second data is used by the second provisioning enclave to authenticate to the second provisioning service to obtain the second attestation key.
摘要翻译：计算平台实现一个或多个安全区域，所述安全区域包括第一供应区域和第一供应服务，以从第一供应服务获得第一认证密钥，第二供应区域与不同的，第二供应服务以从第二供应服务获得第二认证密钥，以及供应认证区域，以使用基于硬件的供应认证密钥来对来自第一供应区域的第一数据和来自第二供应区域的第二数据进行签名。经签名的第一数据由第一供应区域用于向第一供应服务认证以获得第一认证密钥，并且由第二供应区域使用经签署的第二数据来向第二供应服务认证以获得第二认证密钥。

2. 发明申请

WO2017112248A1 TRUSTED LAUNCH OF SECURE ENCLAVES IN VIRTUALIZED ENVIRONMENTS 审中-公开
标题翻译：值得信赖的安全环境在虚拟化环境中的推出
公开(公告)号：WO2017112248A1
公开(公告)日：2017-06-29
申请号：PCT/US2016/063301
申请日：2016-11-22
申请人： INTEL CORPORATION
发明人： ROBINSON, Scott H. , SAHITA, Ravi L. , SHANAHAN, Mark W. , GREWAL, Karanvir S. , SARANGDHAR, Nitin V. , ROZAS, Carlos V. , ZHANG, Bo , CEN, Shanwei
IPC分类号： G06F21/53 , G06F21/54
CPC分类号： G06F12/145 , G06F9/45558 , G06F12/0815 , G06F21/575 , G06F2009/45579 , G06F2009/45583 , G06F2009/45587 , G06F2009/45591 , G06F2212/1052 , G06F2212/621 , G06F2221/034
摘要： Systems, apparatuses and methods may provide for verifying, from outside a trusted computing base of a computing system, an identity an enclave instance prior to the enclave instance being launched in the trusted computing base, determining a memory location of the enclave instance and confirming that the memory location is local to the computing system. In one example, the enclave instance is a proxy enclave instance, wherein communications are conducted with one or more additional enclave instances in the trusted computing base via the proxy enclave instance and an unencrypted channel.
摘要翻译：系统，装置和方法可以提供用于从计算系统的可信计算基础的外部验证在可靠计算库中启动包围区实例之前的包围区实例的身份，确定存储器飞地实例的位置以及确认存储位置对于计算系统是本地的。在一个示例中，飞地实例是代理飞地实例，其中经由代理飞地实例和未加密信道与可信计算库中的一个或多个附加飞地实例进行通信。

3. 发明申请

WO2016209526A1 TECHNOLOGIES FOR VIRTUALIZED ACCESS TO SECURITY SERVICES PROVIDED BY A CONVERGED MANAGEABILITY AND SECURITY ENGINE 审中-公开
标题翻译：用于虚拟化访问由可转换的可管理性和安全引擎提供的安全服务的技术
公开(公告)号：WO2016209526A1
公开(公告)日：2016-12-29
申请号：PCT/US2016/034333
申请日：2016-05-26
申请人： INTEL CORPORATION
发明人： VIJ, Mona , ROZAS, Carlos V. , SCARLATA, Vincent R. , MCKEEN, Francis X. , ZHANG, Bo
IPC分类号： G06F21/62 , G06F21/57 , G06F9/455
CPC分类号： H04L63/0823 , G06F9/45558 , G06F2009/45587 , H04L63/0281 , H04L63/10
摘要： Technologies for secure access to platform security services include a computing device having a processor and a security engine. The computing device establishes a platform services enclave in a virtual machine of the computing device using secure enclave support of the processor. The platform services enclave receives a platform services request from an application enclave via a first authenticated session and transmits the platform services request to a virtual security engine established by a host environment via a second authenticated session. The first and second authenticated sessions may be authenticated by report-based attestation and quote-based attestation, respectively. The virtual security engine transmits the platform services request to the security engine via a long-term pairing session established by the virtual security engine with the security engine. The security engine performs the platform services request using hardware resources shared with other platform services enclaves. Other embodiments are described and claimed.
摘要翻译：用于安全访问平台安全服务的技术包括具有处理器和安全引擎的计算设备。计算设备使用处理器的安全飞行支持在计算设备的虚拟机中建立平台服务飞地。平台服务飞地通过第一认证会话从应用飞地接收平台服务请求，并通过第二认证会话将平台服务请求发送到由主机环境建立的虚拟安全引擎。第一次和第二次认证的会话可以分别通过基于报告的认证和基于报价的认证进行认证。虚拟安全引擎通过虚拟安全引擎与安全引擎建立的长期配对会话将平台服务请求发送到安全引擎。安全引擎使用与其他平台服务飞地共享的硬件资源来执行平台服务请求。描述和要求保护其他实施例。

4. 发明申请

WO2017218180A1 PLATFORM ATTESTATION AND REGISTRATION FOR SERVERS 审中-公开
标题翻译：平台验证和服务器注册
公开(公告)号：WO2017218180A1
公开(公告)日：2017-12-21
申请号：PCT/US2017/035080
申请日：2017-05-30
申请人： INTEL CORPORATION
发明人： SCARLATA, Vincent R. , MCKEEN, Francis X. , ROZAS, Carlos V. , JOHNSON, Simon P. , ZHANG, Bo , BEANEY, James D. , ZMIJEWSKI, Piotr , SMITH, Wesley Hamilton , CABRE, Eduardo , SAVAGAONKAR, Uday R.
IPC分类号： G06F21/62 , G06F21/50 , G06F21/60 , H04L9/30
CPC分类号： H04L9/3263 , G09C1/00 , H04L9/0816 , H04L9/0822 , H04L9/14 , H04L9/3268 , H04L63/06 , H04L63/0823 , H04L63/12
摘要： Embodiments include systems, methods, computer readable media, and devices configured to, for a first processor of a platform, generate a platform root key; create a data structure to encapsulate the platform root key, the data structure comprising a platform provisioning key and an identification of a registration service; and transmit, on a secure connection, the data structure to the registration service to register the platform root key for the first processor of the platform. Embodiments include systems, methods, computer readable media, and devices configured to store a device certificate received from a key generation facility; receive a manifest from a platform, the manifest comprising an identification of a processor associated with the platform; and validate the processor using a stored device certificate.
摘要翻译：实施例包括被配置为对于平台的第一处理器生成平台根密钥的系统，方法，计算机可读介质和设备; 创建数据结构以封装平台根密钥，所述数据结构包括平台供应密钥和注册服务的标识; 并且在安全连接上将所述数据结构传输到所述注册服务以注册用于所述平台的所述第一处理器的所述平台根密钥。实施例包括被配置为存储从密钥生成设施接收到的设备证书的系统，方法，计算机可读介质和设备; 从平台接收清单，所述清单包括与所述平台相关联的处理器的标识; 并使用存储的设备证书验证处理器。

5. 发明申请

WO2015060858A1 METHODS AND APPARATUS FOR PROTECTING SOFTWARE FROM UNAUTHORIZED COPYING 审中-公开
标题翻译：用于从未经授权的复制保护软件的方法和装置
公开(公告)号：WO2015060858A1
公开(公告)日：2015-04-30
申请号：PCT/US2013/066715
申请日：2013-10-24
申请人： INTEL CORPORATION , XING, Bin , ZHANG, Bo , SHANAHAN, Mark W. , BEANEY, James D., Jr.
发明人： XING, Bin , ZHANG, Bo , SHANAHAN, Mark W. , BEANEY, James D., Jr.
IPC分类号： G06F21/12
CPC分类号： G06F21/12 , G06F21/53 , G06F2221/03 , G06F2221/07
摘要： A processing device provides a method for protecting a program from unauthorized copying. The processing device may include an encrypted version of the program. According to one example method, the processing device creates a secure enclave, and in response to a request to execute the encrypted program, the processing device automatically generates a decrypted version of the program in the secure enclave by decrypting the encrypted program in the secure enclave. After automatically generating the decrypted version of the program in the secure enclave, the processing device may automatically execute the decrypted version of the program in the secure enclave. Other embodiments are described and claimed.
摘要翻译：一种处理装置提供了一种保护程序免遭未经授权复制的方法。处理设备可以包括程序的加密版本。根据一个示例性方法，处理设备创建安全飞地，并且响应于执行加密程序的请求，处理设备通过解密安全飞地中的加密程序来自动地生成安全飞地中的程序的解密版本。在安全飞地自动生成程序的解密版本之后，处理装置可以自动地在安全飞地中执行程序的解密版本。描述和要求保护其他实施例。

6. 发明申请

WO2017044198A1 APPLICATION EXECUTION ENCLAVE MEMORY PAGE CACHE MANAGEMENT METHOD AND APPARATUS 审中-公开
标题翻译：应用程序执行内容存储页缓存管理方法和设备
公开(公告)号：WO2017044198A1
公开(公告)日：2017-03-16
申请号：PCT/US2016/044319
申请日：2016-07-27
申请人： INTEL CORPORATION
发明人： XING, Bin , SHANAHAN, Mark W. , ZHANG, Bo
IPC分类号： G06F21/53 , G06F21/60
CPC分类号： G06F3/0605 , G06F3/061 , G06F3/0622 , G06F3/0631 , G06F3/0673 , G06F12/0875 , G06F12/0893 , G06F12/1441 , G06F21/10 , G06F21/125 , G06F21/53 , G06F2212/1016 , G06F2212/1052 , G06F2212/1056 , G06F2212/151 , G06F2212/45
摘要： Apparatuses, methods and storage medium associated with application execution enclave cache management, are disclosed herein. In embodiments, an apparatus may include one or more processors with supports for application execution enclaves; cache memory coupled with the one or more processors to be organized into a plurality of cache pages; and an exception handler to be operated by the one or more processors to handle cache page fault exceptions, wherein to handle cache page fault exceptions includes to handle a cache page fault triggered to request additional allocation of one or more cache pages to an execution enclave of an application. Other embodiments may be described and/or claimed.
摘要翻译：本文公开了与应用执行包层缓存管理相关联的设备，方法和存储介质。在实施例中，设备可以包括具有用于应用执行包层的支持的一个或多个处理器; 与所述一个或多个处理器耦合的高速缓冲存储器将被组织成多个高速缓存页面; 以及由所述一个或多个处理器操作以处理高速缓存页错误异常的异常处理程序，其中处理高速缓存页错误异常包括处理触发的高速缓存页错误以请求对一个或多个高速缓存页的附加分配到执行空间一个应用程序。可以描述和/或要求保护其他实施例。

7. 发明申请

WO2013180736A1 IDENTIFICATION AND EXECUTION OF SUBSETS OF A PLURALITY OF INSTRUCTIONS IN A MORE SECURE EXECUTION ENVIRONMENT 审中-公开
标题翻译：在更安全的执行环境中确定和执行大量指令的附件
公开(公告)号：WO2013180736A1
公开(公告)日：2013-12-05
申请号：PCT/US2012/040597
申请日：2012-06-01
申请人： INTEL CORPORATION , GOFFMAN, Sergei , BERENZON, Alex , LENZ, Oron , DEVOR, Tevi , ZHANG, Bo , ZAHAVI, Yoram , MAOR, Moshe
发明人： GOFFMAN, Sergei , BERENZON, Alex , LENZ, Oron , DEVOR, Tevi , ZHANG, Bo , ZAHAVI, Yoram , MAOR, Moshe
IPC分类号： G06F21/22 , G06F9/44
CPC分类号： G06F21/602 , G06F21/125 , G06F21/53 , G06F21/54
摘要： Embodiments of apparatus, computer-implemented methods, systems, devices, and computer-readable media are described herein for identifying and encrypting a subset of a plurality of instructions, for execution in a more secure execution environment, In various embodiments, the subset may include a single entry point and a single exit point. In various embodiments, one or more instructions of the plurality of instructions that precede or follow the subset may be executed in a first execution environment with a first security level. In various embodiments, the subset may be executed in a second execution environment with a second security level that is more secure than the first security level.
摘要翻译：本文描述了装置，计算机实现的方法，系统，设备和计算机可读介质的实施例，用于识别和加密多个指令的子集，以在更安全的执行环境中执行。在各种实施例中，子集可以包括单个入口点和单个出口点。在各种实施例中，可以在具有第一安全级别的第一执行环境中执行在子集之前或之后的多个指令中的一个或多个指令。在各种实施例中，子集可以在具有比第一安全级别更安全的第二安全级别的第二执行环境中执行。

8. 发明申请

WO2018119823A1 TECHNOLOGIES FOR LIDAR BASED MOVING OBJECT DETECTION 审中-公开
公开(公告)号：WO2018119823A1
公开(公告)日：2018-07-05
申请号：PCT/CN2016/112890
申请日：2016-12-29
申请人： INTEL CORPORATION , WANG, Zhigang , ZHANG, Bo
发明人： WANG, Zhigang , ZHANG, Bo
IPC分类号： G01S13/52
摘要： Technologies for monitoring a movement of one or more objects include an autonomous compute device. The autonomous compute device includes an optical system, for example, a LIDAR system, to capture optical data that may be used to determine a relative position of the one or more objects relative to the autonomous compute device. Based on the optical data captured at one point in time and an indication of how much the autonomous compute device has moved, the autonomous compute device may predict where an object will be relative to the autonomous compute device at a later point in time. Based on optical data captured at the later point in time, the autonomous compute device may determine whether the position of the object has been changed and further analyze the changes to monitor the movement of the object.

9. 发明申请

WO2018005384A1 DATA SECURITY IN A CLOUD NETWORK 审中-公开
标题翻译：云网络中的数据安全
公开(公告)号：WO2018005384A1
公开(公告)日：2018-01-04
申请号：PCT/US2017/039331
申请日：2017-06-26
申请人： INTEL CORPORATION
发明人： SCARLATA, Vincent R. , MCKEEN, Francis X. , ROZAS, Carlos V. , JOHNSON, Simon P. , ZHANG, Bo , VIJ, Mona , BAKER, Brandon , KUMAR, Mohan J. , MALLICK, Asit K. , GENTRY, Mark A. , CHAKRABARTI, Somnath
IPC分类号： G06F21/60 , G06F21/62 , H04L29/06 , H04L9/08
CPC分类号： H04L9/0816 , G06F21/6218 , H04L9/0861 , H04L9/088 , H04L9/0894 , H04L9/14 , H04L63/06
摘要： Particular embodiments described herein provide for an electronic device that can be configured to store data in a secure domain in a cloud network, create encryption keys, where each encryption key is to provide a different type of access to the data, and store the encryption keys in a secure domain key store in the cloud network. In an example, each encryption key provides access to a different version of the data. In another example, a counter engine stores the location of each version of the data in the cloud network.
摘要翻译：这里描述的特定实施例提供了一种电子设备，其可以被配置为将数据存储在云网络中的安全域中，创建加密密钥，其中每个加密密钥将提供对数据，并将加密密钥存储在云网络中的安全域密钥存储中。在一个示例中，每个加密密钥提供对不同版本的数据的访问。在另一个例子中，计数器引擎将每个数据版本的位置存储在云网络中。

10. 发明公开

EP3314520A1 TECHNOLOGIES FOR VIRTUALIZED ACCESS TO SECURITY SERVICES PROVIDED BY A CONVERGED MANAGEABILITY AND SECURITY ENGINE 审中-公开
标题翻译：通过集中管理和安全引擎提供虚拟访问安全服务的技术
公开(公告)号：EP3314520A1
公开(公告)日：2018-05-02
申请号：EP16814973.0
申请日：2016-05-26
申请人： Intel Corporation
发明人： VIJ, Mona , ROZAS, Carlos V. , SCARLATA, Vincent R. , MCKEEN, Francis X. , ZHANG, Bo
IPC分类号： G06F21/62 , G06F21/57 , G06F9/455
CPC分类号： H04L63/0823 , G06F9/45558 , G06F2009/45587 , H04L63/0281 , H04L63/10
摘要： Technologies for secure access to platform security services include a computing device having a processor and a security engine. The computing device establishes a platform services enclave in a virtual machine of the computing device using secure enclave support of the processor. The platform services enclave receives a platform services request from an application enclave via a first authenticated session and transmits the platform services request to a virtual security engine established by a host environment via a second authenticated session. The first and second authenticated sessions may be authenticated by report-based attestation and quote-based attestation, respectively. The virtual security engine transmits the platform services request to the security engine via a long-term pairing session established by the virtual security engine with the security engine. The security engine performs the platform services request using hardware resources shared with other platform services enclaves. Other embodiments are described and claimed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式