专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2016209534A1 MULTI-PAGE CHECK HINTS FOR SELECTIVE CHECKING OF PROTECTED CONTAINER PAGE VERSUS REGULAR PAGE TYPE INDICATIONS FOR PAGES OF CONVERTIBLE MEMORY 审中-公开
标题翻译：多页检查用于选择性检查受保护的容器页面的说明正常页面类型适用于可转换存储器的页码
公开(公告)号：WO2016209534A1
公开(公告)日：2016-12-29
申请号：PCT/US2016/034385
申请日：2016-05-26
申请人： INTEL CORPORATION
发明人： ZMUDZINSKI, Krystof C. , SHANBHOGUE, Vedvyas
IPC分类号： G06F21/79 , G06F21/60 , G06F12/14 , G06F12/10
CPC分类号： G06F12/1027 , G06F12/1009 , G06F2212/1052 , G06F2212/305 , G06F2212/651 , G06F2212/684
摘要： A processor of an aspect includes at least one translation lookaside buffer (TLB) and a memory management unit (MMU). Each TLB is to store translations of logical addresses to corresponding physical addresses. The MMU, in response to a miss in the at least one TLB for a translation of a first logical address to a corresponding physical address, is to check for a multi-page protected container page versus regular page (P/R) check hint. If the multi-page P/R check hint is found, then the MMU is to check a P/R indication. If the multi-page P/R check hint is not found, then the MMU does not check the P/R indication. Other processors, methods, and systems are also disclosed.
摘要翻译：一个方面的处理器包括至少一个翻译后备缓冲器（TLB）和存储器管理单元（MMU）。每个TLB将逻辑地址的翻译存储到相应的物理地址。响应于在至少一个TLB中为了将第一逻辑地址转换为对应的物理地址而错过的MMU将检查多页面受保护的容器页面与常规页面（P / R）检查提示。如果发现多页P / R检查提示，则MMU将检查P / R指示。如果未找到多页P / R检查提示，则MMU不会检查P / R指示。还公开了其他处理器，方法和系统。

2. 发明申请

WO2013147891A1 CLIENT SECURITY SCORING 审中-公开
标题翻译：客户安全评分
公开(公告)号：WO2013147891A1
公开(公告)日：2013-10-03
申请号：PCT/US2012/031694
申请日：2012-03-30
申请人： INTEL CORPORATION , DESHPANDE, Nikhil M. , ZMUDZINSKI, Krystof C. , GARDNER, Donald S.
发明人： DESHPANDE, Nikhil M. , ZMUDZINSKI, Krystof C. , GARDNER, Donald S.
IPC分类号： G06Q20/40 , G06Q20/32 , G06F21/00
CPC分类号： G06F21/577 , G06Q20/3224 , G06Q20/4016
摘要： Methods, apparatuses and techniques for security evaluation. A security profile of a client device is evaluated. The security profile is based on hardware and software security mechanism utilization of the client device. A security score is generated based on the security profile. The security score is provided to a service provider.
摘要翻译：安全评估的方法，设备和技术。评估客户端设备的安全配置文件。安全配置文件基于客户端设备的硬件和软件安全机制利用。基于安全性配置文件生成安全分数。安全分数提供给服务提供商。

3. 发明申请

WO2016209547A1 PROCESSORS, METHODS, SYSTEMS, AND INSTRUCTIONS TO SUPPORT LIVE MIGRATION OF PROTECTED CONTAINERS 审中-公开
标题翻译：处理者，方法，系统和支持保护集装箱移动的指示
公开(公告)号：WO2016209547A1
公开(公告)日：2016-12-29
申请号：PCT/US2016/034519
申请日：2016-05-27
申请人： INTEL CORPORATION
发明人： ROZAS, Carlos V. , VIJ, Mona , LESLIE-HURD, Rebekah M. , ZMUDZINSKI, Krystof C. , CHAKRABARTI, Somnath , MCKEEN, Francis X. , SCARLATA, Vincent R. , JOHNSON, Simon P. , ALEXANDROVICH, Ilya , NEIGER, Gilbert , SHANBHOGUE, Vedvyas , ANATI, Ittai
IPC分类号： H04L29/06 , H04L9/08 , H04L29/08
CPC分类号： G06F12/1408 , G06F9/30145 , G06F21/53 , G06F21/602 , G06F2212/1052
摘要： A processor includes a decode unit to decode an instruction that is to indicate a page of a protected container memory, and a storage location outside of the protected container memory. An execution unit, in response to the instruction, is to ensure that there are no writable references to the page of the protected container memory while it has a write protected state. The execution unit is to encrypt a copy of the page of the protected container memory. The execution unit is to store the encrypted copy of the page to the storage location outside of the protected container memory, after it has been ensured that there are no writable references. The execution unit is to leave the page of the protected container memory in the write protected state, which is also valid and readable, after the encrypted copy has been stored to the storage location.
摘要翻译：处理器包括解码单元，用于解码指示受保护的容器存储器的页面的指令以及受保护的容器存储器之外的存储位置。执行单元响应于该指令，是确保在受保护的容器存储器具有写保护状态时不存在对受保护的容器存储器的页的可写引用。执行单元是加密受保护的容器存储器的页面的副本。在确保没有可写入引用之后，执行单元将页面的加密副本存储到受保护的容器存储器外部的存储位置。执行单元将保护的容器存储器的页面保留在写保护状态中，该保护状态在加密的副本已被存储到存储位置之后也是有效和可读的。

4. 发明申请

WO2016048478A1 MEMORY INITIALIZATION IN A PROTECTED REGION 审中-公开
标题翻译：保护区的记忆初始化
公开(公告)号：WO2016048478A1
公开(公告)日：2016-03-31
申请号：PCT/US2015/045385
申请日：2015-08-14
申请人： INTEL CORPORATION
发明人： LESLIE-HURD, Rebekah M. , MCKEEN, Francis X. , ROZAS, Carlos V. , ZMUDZINSKI, Krystof C.
IPC分类号： G06F12/14 , G06F12/08 , G06F13/16
CPC分类号： G06F12/1441 , G06F9/52 , G06F21/53 , G06F21/74 , G06F21/79
摘要： Secure memory allocation technologies are described. A processor includes a processor core and a memory controller that is coupled between the processor core and main memory. The main memory comprises a protected region including secured pages. The processor, in response to a content copy instruction, is to initialize a target page in the protected region of an application address space. The processor, in response to the content copy instruction, is also to select content of a source page in the protected region to be copied. The processor, in response to the content copy instruction, is also to copy the selected content to the target page in the protected region of the application address space.
摘要翻译：描述了安全的内存分配技术。处理器包括耦合在处理器核心和主存储器之间的处理器核心和存储器控制器。主存储器包括保护区域，包括安全页面。响应于内容复制指令的处理器是初始化应用地址空间的受保护区域中的目标页面。处理器响应于内容复制指令，也是选择要复制的受保护区域中的源页面的内容。响应于内容复制指令，处理器还将所选择的内容复制到应用地址空间的受保护区域中的目标页面。

5. 发明申请

WO2012012218A3 PROVIDING PLATFORM INDEPENDENT MEMORY LOGIC 审中-公开
公开(公告)号：WO2012012218A3
公开(公告)日：2012-01-26
申请号：PCT/US2011/043638
申请日：2011-07-12
申请人： INTEL CORPORATION , XING, Bin C. , ZIMMER, Vincent J. , ZMUDZINSKI, Krystof C.
发明人： XING, Bin C. , ZIMMER, Vincent J. , ZMUDZINSKI, Krystof C.
IPC分类号： G06F9/22 , G06F9/06
摘要： In one embodiment, the present invention includes semiconductor integrated code (SIC) corresponding to platform independent code of a processor manufacturer. This code may include embedded memory code (EMC) to initialize a memory via initialization of a memory controller, and a mapping of memory signals using an on-die termination (ODT) data structure accessible via the EMC, where the ODT data structure is provided by an original equipment manufacturer (OEM) and corresponds to a parameterized rule set for a platform dependent memory configuration of the memory. Other embodiments are described and claimed.

6. 发明申请

WO2017112908A1 INSTRUCTIONS AND LOGIC TO SUSPEND/RESUME MIGRATION OF ENCLAVES IN A SECURE ENCLAVE PAGE CACHE 审中-公开
标题翻译：指示和逻辑在挂起页面缓存中暂停/恢复Enclve的迁移
公开(公告)号：WO2017112908A1
公开(公告)日：2017-06-29
申请号：PCT/US2016/068447
申请日：2016-12-22
申请人： INTEL CORPORATION
发明人： ROZAS, Carlos V. , ALEXANDROVICH, Ilya , NEIGER, Gilbert , MCKEEN, Francis X. , ANATI, Ittai , SHANBHOGUE, Vedvyas , VIJ, Mona , LESLIE-HURD, Rebekah M. , ZMUDZINSKI, Krystof C. , CHAKRABARTI, Somnath , SCARLATA, Vincent R. , JOHNSON, Simon P.
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F12/0802 , G06F12/1466 , G06F2212/1052 , G06F2212/402 , G06F2212/60 , H04L9/0891 , H04L9/0894 , H04L9/14 , H04L9/32 , H04L9/3226
摘要： Instructions and logic support suspending and resuming migration of enclaves in a secure enclave page cache (EPC). An EPC stores a secure domain control structure (SDCS) in storage accessible by an enclave for a management process, and by a domain of enclaves. A second processor checks if a corresponding version array (VA) page is bound to the SDCS, and if so: increments a version counter in the SDCS for the page, performs an authenticated encryption of the page from the EPC using the version counter in the SDCS, and writes the encrypted page to external memory. A second processor checks if a corresponding VA page is bound to a second SDCS of the second processor, and if so: performs an authenticated decryption of the page using a version counter in the second SDCS, and loads the decrypted page to the EPC in the second processor if authentication passes.
摘要翻译：
指令和逻辑支持暂停和恢复安全区域页面缓存（EPC）中的区域迁移。 EPC将安全域控制结构（SDCS）存储在可由管理进程的飞地访问的存储中，并且通过飞地域来存储。第二个处理器检查相应版本阵列（VA）页面是否绑定到SDCS，如果是：在页面的SDCS中递增版本计数器，使用版本计数器在EPC中使用版本计数器对EPC进行认证加密 SDCS，并将加密的页面写入外部存储器。第二处理器检查相应的VA页面是否绑定到第二处理器的第二SDCS，并且如果是：使用第二SDCS中的版本计数器执行对页面的认证解密，并且将解密的页面加载到EPC中的第二个处理器，如果验证通过。

7. 发明申请

WO2017030822A1 PLATFORM MIGRATION OF SECURE ENCLAVES 审中-公开
标题翻译：平台安全移民安全
公开(公告)号：WO2017030822A1
公开(公告)日：2017-02-23
申请号：PCT/US2016/046062
申请日：2016-08-08
申请人： INTEL CORPORATION
发明人： ROZAS, Carlos V. , VIJ, Mona , LESLIE-HURD, Rebekah M. , ZMUDZINSKI, Krystof C. , CHAKRABARTI, Somnath , MCKEEN, Francis X. , SCARLATA, Vincent R. , JOHNSON, Simon P. , ALEXANDROVICH, Ilya
IPC分类号： G06F12/14
CPC分类号： H04L9/0891 , G06F9/45558 , G06F2009/45575 , G06F2009/45587 , H04L63/061 , H04L63/10 , H04L67/34
摘要： A processor to support platform migration of secure enclaves is disclosed. In one embodiment, the processor includes a memory controller unit to access secure enclaves and a processor core coupled to the memory controller unit. The processor core to identify a control structure associated with a secure enclave. The control structure comprises a plurality of data slots and keys associated with a first platform comprising the memory controller unit and the processor core. A version of data from the secure enclave is associated with the plurality of data slots. Migratable keys are generated as a replacement for the keys associated with the control structure. The migratable keys control access to the secure enclave. Thereafter, the control structure is migrated to a second platform to enable access to the secure enclave on the second platform.
摘要翻译：公开了一种用于支持安全飞行器的平台迁移的处理器。在一个实施例中，处理器包括存储器控制器单元以访问安全的包围层和耦合到存储器控制器单元的处理器核心。处理器核心，用于识别与安全飞地相关联的控制结构。控制结构包括与包括存储器控制器单元和处理器核心的第一平台相关联的多个数据时隙和密钥。来自安全飞地的数据的版本与多个数据时隙相关联。生成可迁移键作为与控制结构相关联的键的替代。可移植键控制对安全飞地的访问。此后，将控制结构迁移到第二平台以使得能够访问第二平台上的安全飞地。

8. 发明申请

WO2016137867A1 INSTRUCTIONS AND LOGIC TO FORK PROCESSES OF SECURE ENCLAVES AND ESTABLISH CHILD ENCLAVES IN A SECURE ENCLAVE PAGE CACHE 审中-公开
标题翻译：指示和逻辑安全保护程序，并在安全的页面缓存中建立儿童安全
公开(公告)号：WO2016137867A1
公开(公告)日：2016-09-01
申请号：PCT/US2016/018881
申请日：2016-02-22
申请人： INTEL CORPORATION
发明人： PANDEY, Prashant , VIJ, Mona , CHAKRABARTI, Somnath , ZMUDZINSKI, Krystof C.
IPC分类号： G06F12/14 , G06F12/08
CPC分类号： G06F21/12 , G06F12/0811 , G06F12/0822 , G06F12/0875 , G06F12/14 , G06F12/1425 , G06F13/24 , G06F2212/1052 , G06F2212/283 , G06F2212/452
摘要： Instructions and logic fork processes and establish child enclaves in a secure enclave page cache (EPC). Instructions specify addresses for secure storage allocated to enclaves of a parent and a child process to store secure enclave control structure (SECS) data, application data, code, etc. The processor includes an EPC to store enclave data of the parent and child processes. Embodiments of the parent may execute, or a system may execute an instruction to copy parent SECS to secure storage for the child, initialize a unique child ID and link to the parent's SECS/ID. Embodiments of the child may execute, or the system may execute an instruction to copy pages from the parent enclave to the enclave of the child where both have the same key, set an entry for EPC mapping to partial completion, and record a page state in the child enclave, if interrupted. Thus copying can be resumed.
摘要翻译：指令和逻辑fork处理并在安全的飞地页面缓存（EPC）中建立子空间。指令指定分配给父节点和子进程的子进程的安全存储的地址，以存储安全的飞地控制结构（SECS）数据，应用程序数据，代码等。处理器包括用于存储父进程和子进程的飞地数据的EPC。父级的实施例可以执行，或者系统可以执行复制父SECS以保护子级的存储的指令，初始化唯一的子ID并链接到父级的SECS / ID。子系统的实施例可以执行，或者系统可以执行将父页面的页面复制到具有相同密钥的小孩的飞地的指令，将用于EPC映射的条目设置为部分完成，并将页面状态记录在小孩飞散，如果中断。因此可以恢复复印。

9. 发明申请

WO2016105651A1 SYSTEM AND METHOD FOR PROVIDING GLOBAL PLATFORM COMPLIANT TRUSTED EXECUTION ENVIRONMENT 审中-公开
标题翻译：提供全球平台综合执行环境的系统和方法
公开(公告)号：WO2016105651A1
公开(公告)日：2016-06-30
申请号：PCT/US2015/056654
申请日：2015-10-21
申请人： INTEL CORPORATION
发明人： VARADARAJAN, Srikanth , LAL, Reshma , ZMUDZINSKI, Krystof C.
IPC分类号： H04L9/32
CPC分类号： H04L9/3234 , G06F9/4406 , G06F9/45533 , G06F9/45558 , G06F9/4843 , G06F9/54 , G06F21/74 , G06F2009/45587 , G09C1/00 , H04L2209/127
摘要： Method of providing a Global Platform (GP) compliant Trusted Execution Environment (TEE) starts with main processor executing an application stored in memory device. Application includes client application (CA) and trusted application (TA). Executing the application includes running CA in client process and TA in TEE host process. Client process and TEE host process are separate. Using TEE host process, a request including identifier of the TA is received from client process to open session. Using GP Trusted Services enclave included in TEE host process, TA enclave associated with the identifier is determined and loaded in the TEE host process using the GP Trusted Services enclave to establish the session. Using TEE host process, commands to be invoked in TA enclave and set of parameters needed for commands are received from client process. Using GP Internal APIs, commands in TA enclave associated with identifier are executed. Other embodiments are also described.
摘要翻译：提供全球平台（GP）兼容的可执行环境（TEE）的方法从执行存储在存储设备中的应用程序的主处理器开始。应用程序包括客户端应用程序（CA）和可信应用程序（TA）。执行应用程序包括在客户端进程中运行CA，在TEE主机进程中运行TA。客户端进程和TEE主机进程是分开的。使用TEE主机进程，从客户端进程接收到包括TA标识符的请求以打开会话。使用包含在TEE主机进程中的GP可信服务飞地，使用GP可信服务飞地来确定和加载与TID主机进程相关联的TA标识符以建立会话。使用TEE主机进程，可以从客户端进程接收在TA包中调用的命令和命令所需的参数集。使用GP Internal API，执行与标识符相关联的TA包层中的命令。还描述了其它实施例。

10. 发明公开

EP3641270A1 PROCESSORS, METHODS, SYSTEMS, AND INSTRUCTIONS TO SUPPORT LIVE MIGRATION OF PROTECTED CONTAINERS 审中-公开
公开(公告)号：EP3641270A1
公开(公告)日：2020-04-22
申请号：EP19209069.4
申请日：2016-05-27
申请人： INTEL Corporation
发明人： ROZAS, Carlos V. , VIJ, Mona , LESLIE-HURD, Rebekah M. , ZMUDZINSKI, Krystof C. , CHAKRABARTI, Somnath , MCKEEN, Francis X. , SCARLATA, Vincent R. , JOHNSON, Simon P. , ALEXANDROVICH, Ilya , NEIGER, Gilbert , SHANBHOGUE, Vedvyas , ANATI, Ittai
IPC分类号： H04L29/06 , H04L9/08 , H04L29/08 , G06F9/455 , G06F8/41 , G06F21/53 , G06F21/60 , G06F12/14
摘要： A processor includes a decode unit to decode an instruction that is to indicate a page of a protected container memory, and a storage location outside of the protected container memory. An execution unit, in response to the instruction, is to ensure that there are no writable references to the page of the protected container memory while it has a write protected state. The execution unit is to encrypt a copy of the page of the protected container memory. The execution unit is to store the encrypted copy of the page to the storage location outside of the protected container memory, after it has been ensured that there are no writable references. The execution unit is to leave the page of the protected container memory in the write protected state, which is also valid and readable, after the encrypted copy has been stored to the storage location.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式