专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2017107122A1 TECHNIQUES FOR COORDINATING DEVICE BOOT SECURITY 审中-公开
标题翻译：协调设备引导安全的技术
公开(公告)号：WO2017107122A1
公开(公告)日：2017-06-29
申请号：PCT/CN2015/098651
申请日：2015-12-24
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , LI, Wei , POORNACHANDRAN, Rajesh , MUDUSURU, Giri P.
发明人： YAO, Jiewen , ZIMMER, Vincent J. , LI, Wei , POORNACHANDRAN, Rajesh , MUDUSURU, Giri P.
IPC分类号： G06F21/57
CPC分类号： G06F21/57 , G06F21/575
摘要： Techniques for providing and maintaining protection of firmware routines that form part of a chain of trust through successive processing environments. An apparatus may include a first processor component (550); a volatile storage (562) coupled to the first processor component; an enclave component to, in a pre-OS operating environment, generate a secure enclave within a portion of the volatile storage to restrict access to a secured firmware loaded into the secure enclave; a first firmware driver (646) to, in the pre-OS operating environment, provide a first API to enable unsecured firmware to call a support routine of the secured firmware from outside the secure enclave; and a second firmware driver (647) to, in an OS operating environment that replaces the pre-OS operating environment, provide a second API to enable an OS of the OS operating environment to call the support routine from outside the secure enclave.
摘要翻译：通过连续处理环境提供并维护构成信任链一部分的固件例程的保护技术。一种装置可以包括第一处理器组件（550）; 耦合到第一处理器组件的易失性存储器（562）用于在OS前操作环境中在易失性存储器的一部分内生成安全区域以限制对加载到安全区域中的安全固件的访问的区域组件; 第一固件驱动程序（646），用于在OS前操作环境中提供第一API以使得不安全固件能够从安全区域外部调用安全固件的支持例程; 以及第二固件驱动程序（647），用于在替换操作系统前操作环境的操作系统操作环境中提供第二API以使操作系统操作环境的操作系统能够从安全飞地外调用支持例程。 p>

2. 发明申请

WO2018165981A1 TECHNOLOGIES FOR FAST UNMANNED AERIAL VEHICLE STATE MIGRATION USING A TRUSTED EXECUTION ENVIRONMENT 审中-公开
公开(公告)号：WO2018165981A1
公开(公告)日：2018-09-20
申请号：PCT/CN2017/077113
申请日：2017-03-17
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , POORNACHANDRAN, Rajesh
发明人： YAO, Jiewen , ZIMMER, Vincent J. , POORNACHANDRAN, Rajesh
IPC分类号： H04L29/06
CPC分类号： H04L67/12 , B64C39/024 , B64C2201/141 , G08G5/0056 , G08G5/0069 , H04L69/40
摘要： Technologies for control of an unmanned aerial vehicle (UAV) include a UAV including a computing device having a processor and a trusted execution environment (TEE). The TEE may be executed by a converged security and manageability engine (CSME) of the computing device. The TEE determines whether to take control of the UAV from an operating system, for example in response to a watchdog reset event. In response to taking control, the TEE controls navigation of the UAV and the operating system is booted. The TEE may control the UAV based on a navigation plan from the operating system or a default control policy. The operating system sends a message requesting control of the UAV in response to booting, and then resumes control of the UAV. The operating system may control navigation of the UAV based on abstracted sensor data received from the TEE. Other embodiments are described and claimed.

3. 发明申请

WO2016201628A1 PLATFORM MANAGEMENT METHOD AND APPARATUS INCLUDING EXPIRATION DETECTION 审中-公开
标题翻译：平台管理方法和装置，包括过期检测
公开(公告)号：WO2016201628A1
公开(公告)日：2016-12-22
申请号：PCT/CN2015/081610
申请日：2015-06-17
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , POORNACHANDRAN, Rajesh
发明人： YAO, Jiewen , ZIMMER, Vincent J. , POORNACHANDRAN, Rajesh
IPC分类号： G06F21/00
CPC分类号： G06F21/10 , G06F1/14 , G06F21/57 , G06F21/572 , G06F21/725
摘要： Apparatuses, methods and storage media associated with managing a computing platform in view of an expiration date are described herein. In embodiments, an apparatus may include a computing platform that includes one or more processors to execute applications; and a trusted execution environment that includes a tamper-proof storage to store an expiration date of the computing platform, and a firmware module to be operated in a secure system management mode to regulate operation of the computing platform in view of at least whether a current date is earlier than the expiration date. Other embodiments may be described or claimed.
摘要翻译：这里描述了考虑到到期日期来管理计算平台的装置，方法和存储介质。在实施例中，设备可以包括包括一个或多个处理器以执行应用的计算平台; 以及可信赖执行环境，其包括用于存储计算平台的到期日期的防篡改存储器，以及待安全系统管理模式操作以固定计算平台的操作的固件模块，以至少考虑当前的日期早于有效期。可以描述或要求保护其他实施例。

4. 发明申请

WO2016149895A1 EXECUTION CONTEXT MIGRATION METHOD AND APPARATUS 审中-公开
标题翻译：执行上下文移动方法和装置
公开(公告)号：WO2016149895A1
公开(公告)日：2016-09-29
申请号：PCT/CN2015/074838
申请日：2015-03-23
申请人： INTEL CORPORATION , ZIMMER, Vincent J. , YAO, Jiewen , JAYAKUMAR, Sarathy , SWANSON, Robert C. , POORNACHANDRAN, Rajesh , SELVARAJE, Gopinatth , SUN, Mingqiu , HOWARD, John S. , GORBATOV, Eugene
发明人： ZIMMER, Vincent J. , YAO, Jiewen , JAYAKUMAR, Sarathy , SWANSON, Robert C. , POORNACHANDRAN, Rajesh , SELVARAJE, Gopinatth , SUN, Mingqiu , HOWARD, John S. , GORBATOV, Eugene
IPC分类号： G06F9/06
CPC分类号： G06F9/4856 , G06F1/1632 , G06F1/3215 , G06F1/3287 , G06F1/3293 , G06F9/46 , G06F9/4812 , G06F9/4893 , G06F9/5027 , Y02D10/24
摘要： Methods, apparatuses and storage medium associated with migration between processors by a computing device are disclosed. A portable electronic device having an internal processor and internal memory may be attached to a dock. The dock may include another processor as well other memory. The attachment of the dock to the portable electronic device may cause an interrupt. In response to this interrupt, a state associated with the internal processor may be copied to the other memory of the dock. Instructions for the computing device may then be executed using the other processor of the dock.
摘要翻译：公开了一种通过计算设备与处理器之间的迁移相关联的方法，设备和存储介质。具有内部处理器和内部存储器的便携式电子设备可以附接到坞站。码头可以包括另一个处理器以及其他存储器。坞站连接到便携式电子设备可能会导致中断。响应于该中断，与内部处理器相关联的状态可以被复制到码头的另一个存储器。然后可以使用码头的另一个处理器来执行计算设备的指令。

5. 发明申请

WO2014134808A1 MECHANISM TO SUPPORT RELIABILITY, AVAILABILITY, AND SERVICEABILITY (RAS) FLOWS IN A PEER MONITOR 审中-公开
标题翻译：支持对等监视器的可靠性，可用性和可维护性（RAS）流程的机制
公开(公告)号：WO2014134808A1
公开(公告)日：2014-09-12
申请号：PCT/CN2013/072294
申请日：2013-03-07
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J.
发明人： YAO, Jiewen , ZIMMER, Vincent J.
IPC分类号： G06F21/00
CPC分类号： G06F11/0793 , G06F9/4406 , G06F9/468 , G06F9/4812 , G06F9/52 , G06F9/542 , G06F11/00 , G06F11/073 , G06F13/4081 , G06F21/00 , G11C29/08
摘要： A mechanism to support reliability, availability, and serviceability (RAS) flows in a peer monitor is disclosed. A method of the disclosure includes receiving, by a processing device, a system management interrupt (SMI) event. The method further includes invoking, in response to the SMI event, a privilege manager to execute from a read-only memory (ROM) entry point to handle the SMI event, the privilege manager comprising a hot plug service module to provide support for memory hot plug functionality and processor hot plug functionality.
摘要翻译：公开了一种在对等监视器中支持可靠性，可用性和可服务性（RAS）流的机制。本公开的方法包括：通过处理设备接收系统管理中断（SMI）事件。该方法还包括响应于SMI事件调用特权管理器从只读存储器（ROM）入口点执行以处理SMI事件，特权管理器包括热插拔服务模块，以提供对存储器热的支持插头功能和处理器热插拔功能。

6. 发明申请

WO2015196347A1 FIRMWARE SENSOR LAYER 审中-公开
标题翻译：固件传感器层
公开(公告)号：WO2015196347A1
公开(公告)日：2015-12-30
申请号：PCT/CN2014/080587
申请日：2014-06-24
申请人： INTEL CORPORATION , HANEBUTTE, Ulf R. , YAO, Jiewen , ZIMMER, Vincent J.
发明人： HANEBUTTE, Ulf R. , YAO, Jiewen , ZIMMER, Vincent J.
IPC分类号： G06F15/177
CPC分类号： G06F9/4401 , G06F21/575 , G06F21/62
摘要： Computing devices,computer-readable storage media,and methods associated with providing an operating system (OS)-absent firmware sensor layer to support a boot process are disclosed herein.In embodiments, acomputing device may include a processor and firmware to be operated on the processor. The firmware may include one or more modules and a sensor layer. The sensor layer may be configured to receive,in the OS-absent environment,sensor data produced by a plurality of sensors. The sensor layer may be further configured to selectively provide the sensor data to the one or more modules via an interface of the sensor layer that abstracts the plurality of sensors. Other embodiments may be described and/or claimed.
摘要翻译：本文公开了计算设备，计算机可读存储介质和与提供操作系统（OS）的固件传感器层相关联以支持引导过程的方法。在实施例中，计算设备可以包括处理器和要在处理器。固件可以包括一个或多个模块和传感器层。传感器层可以被配置为在不存在OS的环境中接收由多个传感器产生的传感器数据。传感器层可以被进一步配置成经由传感器层的接口抽取多个传感器来选择性地将传感器数据提供给一个或多个模块。可以描述和/或要求保护其他实施例。

7. 发明申请

WO2015048922A1 TRUSTED BOOT AND RUNTIME OPERATION 审中-公开
标题翻译： TRUSTED BOOT和RUNTIME操作
公开(公告)号：WO2015048922A1
公开(公告)日：2015-04-09
申请号：PCT/CN2013/084806
申请日：2013-10-02
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , ADAMS, Nicholas J. , WISEMAN, Willard M. , LONG, Qin , LI, Shihui
发明人： YAO, Jiewen , ZIMMER, Vincent J. , ADAMS, Nicholas J. , WISEMAN, Willard M. , LONG, Qin , LI, Shihui
IPC分类号： G06F9/445
CPC分类号： G06F21/575 , G06F9/4403 , G06F21/72
摘要： An embodiment includes an apparatus comprising: an out-of-band cryptoprocess or including secure non- volatile storage that couples to a root index, having a fixed address, and comprises first and second variables referenced by the root index; and semiconductor integrated code (SIC) including embedded processor logic to initialize a processor and embedded memory logic to initialize a memory coupled to the processor; wherein (a) the SIC is to be executed responsive to resetting the processor and prior to providing control to boot code, and (b) the SIC is to perform pre-boot operations in response to accessing at least one of the first and second variables. Other embodiments are described herein.
摘要翻译：一个实施例包括一种装置，包括：带外密码过滤或包括耦合到具有固定地址的根索引的安全非易失性存储器，并且包括由根索引引用的第一和第二变量; 以及包括用于初始化处理器和嵌入式存储器逻辑的嵌入式处理器逻辑以初始化耦合到所述处理器的存储器的半导体集成代码（SIC）; 其中（a）响应于重置所述处理器并且在向引导代码提供控制之前响应于所述SIC执行所述SIC，以及（b）所述SIC响应于访问所述第一和第二变量中的至少一个来执行预引导操作。本文描述了其它实施例。

8. 发明申请

WO2014158605A1 POLICY-BASED SECURE WEB BOOT 审中-公开
标题翻译：基于策略的安全WEB引导
公开(公告)号：WO2014158605A1
公开(公告)日：2014-10-02
申请号：PCT/US2014/018670
申请日：2014-02-26
申请人： INTEL CORPORATION , COCKRELL, Brian , GAUTHIER, Jacob J. , YAO, Jiewen , ZIMMER, Vincent J. , AMAYA, Elmer A.
发明人： COCKRELL, Brian , GAUTHIER, Jacob J. , YAO, Jiewen , ZIMMER, Vincent J. , AMAYA, Elmer A.
IPC分类号： G06F21/00 , G06F9/44 , G06F15/16
CPC分类号： H04L63/20 , G06F9/4408 , G06F9/4416 , G06F21/575 , H04L63/0823 , H04L67/02 , H04L67/125
摘要： A system, device, and method for providing policy-based secure cloud booting include a mobile computing device and a web server. The mobile computing device determines a remote boot address specifying the location of a boot resource on the web server. The mobile computing device opens a secure connection to the web server and maps the boot resource to a local firmware protocol. The mobile computing device executes the boot resource as a firmware image using the local firmware protocol. The boot resource may be a compact disc or DVD image mapped through a block I/O protocol. The boot resource may be a remote file system mapped through a file system protocol. The remote boot address may be configured using a manageability engine capable of out-of-band communication. The remote boot address may be determined based on the context of the mobile computing device, including location. Other embodiments are described and claimed.
摘要翻译：用于提供基于策略的安全云引导的系统，设备和方法包括移动计算设备和web服务器。移动计算设备确定指定web服务器上的引导资源的位置的远程引导地址。移动计算设备打开与Web服务器的安全连接，并将引导资源映射到本地固件协议。移动计算设备使用本地固件协议来执行作为固件映像的引导资源。引导资源可以是通过块I / O协议映射的光盘或DVD映像。引导资源可以是通过文件系统协议映射的远程文件系统。可以使用能够进行带外通信的可管理引擎来配置远程引导地址。可以基于移动计算设备的上下文（包括位置）来确定远程启动地址。描述和要求保护其他实施例。

9. 发明申请

WO2014139162A1 SECURITY CO-PROCESSOR BOOT PERFORMANCE 审中-公开
标题翻译：安全联合处理器引擎性能
公开(公告)号：WO2014139162A1
公开(公告)日：2014-09-18
申请号：PCT/CN2013/072732
申请日：2013-03-15
申请人： INTEL CORPORATION , DONG, Guo , YAO, Jiewen , ZIMMER, Vincent J. , ROTHMAN, Michael A.
发明人： DONG, Guo , YAO, Jiewen , ZIMMER, Vincent J. , ROTHMAN, Michael A.
IPC分类号： G06F21/00
CPC分类号： G06F21/575 , G06F9/4401 , G06F21/71 , G06F2221/034 , G09C1/00 , H04L2209/127
摘要： Technologies for improving platform initialization on a computing device include beginning initialization of a platform of the computing device using a basic input/output system (BIOS) of the computing device. A security co-processor driver module adds a security co-processor command to a command list when a security processor command is received from the BIOS module. The computing device establishes a periodic interrupt of the initialization of the platform to query the security co-processor regarding the availability of a response to a previously submitted security co-processor command, forward any responses received by the security co-processor driver module to the BIOS module, and submit the next security co-processor command in the command list to the security co-processor.
摘要翻译：用于在计算设备上改进平台初始化的技术包括使用计算设备的基本输入/输出系统（BIOS）开始初始化计算设备的平台。当从BIOS模块接收到安全处理器命令时，安全协处理器驱动程序模块将一个安全协处理器命令添加到命令列表中。计算设备建立平台的初始化的周期性中断，以向安全协处理器询问关于先前提交的安全协处理器命令的响应的可用性，将由安全协处理器驱动器模块接收的任何响应转发到 BIOS模块，并将命令列表中的下一个安全协处理器命令提交给安全协处理器。

10. 发明申请

WO2014047798A1 METHODS AND APPARATUS FOR DISPLAYING VIDEO DESPITE A NONFUNCTIONAL OPERATING SYSTEM 审中-公开
标题翻译：显示屏幕非功能操作系统的方法和装置
公开(公告)号：WO2014047798A1
公开(公告)日：2014-04-03
申请号：PCT/CN2012/081989
申请日：2012-09-26
申请人： INTEL CORPORATION , OUYANG, Qian , CONG, Yang , YAO, Jiewen , ZIMMER, Vincent J.
发明人： OUYANG, Qian , CONG, Yang , YAO, Jiewen , ZIMMER, Vincent J.
IPC分类号： G06F13/38
CPC分类号： H04N5/44 , H04L12/1827 , H04N21/41415 , H04N21/443 , H04N21/488 , H04N21/812
摘要： A first video messaging service, running on top of an operating system in a data processing system, automatically presents a first video message. After using the first video messaging service to present the first video message, the data processing system automatically determines whether the first video messaging service has become nonfunctional. In response to determining that the first video messaging service has become nonfunctional, the data processing system automatically uses a backup video messaging service to present a second video message. The backup video messaging service operates in a boot environment. In one embodiment, the data processing system is configured to provide digital signage, the first video messaging service presents content for the digital signage when the operating system is operational, and the second video messaging service presents content for the digital signage when the operating system is nonfunctional. Other embodiments are described and claimed.
摘要翻译：在数据处理系统中的操作系统之上运行的第一视频消息服务自动呈现第一视频消息。在使用第一视频消息服务呈现第一视频消息之后，数据处理系统自动地确定第一视频消息服务是否已经变得不起作用。为了响应于确定第一视频消息收发服务变得不起作用，数据处理系统自动使用备份视频消息服务来呈现第二视频消息。备份视频消息服务在引导环境中运行。在一个实施例中，数据处理系统被配置为提供数字标牌，当操作系统可操作时，第一视频消息收发服务呈现用于数字标牌的内容，并且当操作系统为非功能性。描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式