专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2016100012A1 SECURITY PLUGIN FOR A SYSTEM-ON-A-CHIP PLATFORM 审中-公开
标题翻译：系统级芯片平台的安全插件
公开(公告)号：WO2016100012A1
公开(公告)日：2016-06-23
申请号：PCT/US2015/064485
申请日：2015-12-08
申请人： INTEL CORPORATION
发明人： SASTRY, Manoj R. , NARENDRA TRIVEDI, Alpa , LONG, Men
IPC分类号： H04L9/08 , H04L29/06
CPC分类号： G06F21/72 , G06F21/85 , G06F2207/7219 , G06F2211/008 , G06F2213/0038 , G09C1/00 , H04L9/0643 , H04L9/0897 , H04L2209/76
摘要： Systems and techniques for a System-on-a-Chip (SoC) security plugin are described herein. A component message may be received at an interconnect endpoint from an SoC component. The interconnect endpoint may pass the component message to a security component via a security interlink. The security component may secure the component message, using a cryptographic engine, to create a secured message. The secured message is delivered back to the interconnect endpoint via the security interlink and transmitted across the interconnect by the interconnect endpoint.
摘要翻译：本文描述了片上系统（SoC）安全插件的系统和技术。可以在来自SoC组件的互连端点处接收组件消息。互连端点可以通过安全互连将组件消息传递给安全组件。安全组件可以使用加密引擎来保护组件消息来创建安全消息。安全消息通过安全互连传递回互连端点，并通过互连端点在互连上传输。

2. 发明申请

WO2014158744A1 A METHOD, APPARATUS, SYSTEM FOR QUALIFYING CPU TRANSACTIONS WITH SECURITY ATTRIBUTES 审中-公开
标题翻译：一种用于对具有安全属性的CPU交易进行质量评估的方法，装置
公开(公告)号：WO2014158744A1
公开(公告)日：2014-10-02
申请号：PCT/US2014/019791
申请日：2014-03-03
申请人： INTEL CORPORATION , SASTRY, Manoj R. , SCHOINAS, Ioannis T. , CERMAK, Daniel M.
发明人： SASTRY, Manoj R. , SCHOINAS, Ioannis T. , CERMAK, Daniel M.
IPC分类号： G06F9/06 , G06F13/14 , G06F21/00
CPC分类号： G06F21/74 , G06F21/57 , G06F21/78
摘要： Method, apparatus, and system for qualifying CPU transactions with security attributes. Immutable security attributes are generated for transactions initiator by a CPU or processor core that identifying the execution mode of the CPU/core being trusted or untrusted. The transactions may be targeted to an Input/Output (I/O) device or system memory via which a protected asset may be accessed. Policy enforcement logic blocks are implemented at various points in the apparatus or system that allow or deny transactions access to protected assets based on the immutable security attributes generated for the transactions. In one aspect, a multiple-level security scheme is implemented under which a mode register is updated via a first transaction to indicate the CPU/core is operating in a trusted execution mode, and security attributes are generated for a second transaction using execution mode indicia in the mode register to verify the transaction is from a trusted initiator.
摘要翻译：用于对具有安全属性的CPU事务进行限定的方法，设备和系统。由CPU或处理器核心为事务发起者生成不可变的安全属性，用于识别CPU /核心被信任或不可信任的执行模式。这些事务可以被定向到可被访问受保护资产的输入/输出（I / O）设备或系统存储器。策略执行逻辑块在设备或系统中的不同点实现，其允许或拒绝事务基于为事务生成的不可变安全属性而访问被保护资产。在一个方面，实现多级安全方案，在该级别下，通过第一事务来更新模式寄存器以指示CPU /核心以可信执行模式运行，并且使用执行模式标记为第二事务生成安全属性在模式寄存器中验证事务来自可信发起者。

3. 发明申请

WO2013095411A1 INCORPORATING ACCESS CONTROL FUNCTIONALITY INTO A SYSTEM ON A CHIP (SoC) 审中-公开
标题翻译：将访问控制功能纳入芯片系统（SoC）
公开(公告)号：WO2013095411A1
公开(公告)日：2013-06-27
申请号：PCT/US2011/066355
申请日：2011-12-21
申请人： INTEL CORPORATION , SASTRY, Manoj R. , SCHOINAS, Ioannis T. , TOEPFER, Robert J. , TRIVEDI, Alpa T. Narendra , LONG, Men
发明人： SASTRY, Manoj R. , SCHOINAS, Ioannis T. , TOEPFER, Robert J. , TRIVEDI, Alpa T. Narendra , LONG, Men
IPC分类号： G06F21/22 , G06F13/14
CPC分类号： G06F21/76 , G06F13/385
摘要： In one embodiment, the present invention includes a system on a chip (SoC) that has a first agent with an intellectual property (IP) logic, an interface to a fabric including a target interface, a master interface and a sideband interface, and an access control plug-in unit to handle access control policy for the first agent with respect to incoming and outgoing transactions. This access control plug-in unit can be incorporated into the SoC at integration time and without any modification to the IP logic. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括具有知识产权（IP）逻辑的第一代理的芯片系统（SoC），包括目标接口，主接口和边带接口的结构的接口，以及访问控制插件单元来处理关于传入和传出事务的第一代理的访问控制策略。该访问控制插件单元可以集成在SoC中，并且不对IP逻辑进行任何修改。描述和要求保护其他实施例。

4. 发明申请

WO2012040691A1 METHOD FOR ENFORCING RESOURCE ACCESS CONTROL IN COMPUTER SYSTEMS 审中-公开
标题翻译：在计算机系统中执行资源访问控制的方法
公开(公告)号：WO2012040691A1
公开(公告)日：2012-03-29
申请号：PCT/US2011/053216
申请日：2011-09-26
申请人： INTEL CORPORATION , SASTRY, Manoj R. , SCHOINAS, Ioannis T , CERMAK, Daniel M.
发明人： SASTRY, Manoj R. , SCHOINAS, Ioannis T , CERMAK, Daniel M.
IPC分类号： G06F21/22 , G06F13/14
CPC分类号： H04L63/10 , G06F12/1458 , G06F21/6218 , G06F21/78
摘要： A method and system for enforcing access control to system resources and assets. Security attributes associated with devices that initiate transactions in the system are automatically generated and forwarded with transaction messages. The security attributes convey access privileges assigned to each initiator. One or more security enforcement mechanisms are implemented in the system to evaluate the security attributes against access policy requirements to access various system assets and resources, such as memory, registers, address ranges, etc. If the privileges identified by the security attributes indicate the access request is permitted, the transaction is allowed to proceed. The security attributes of the initiator scheme provides a modular, consistent secure access enforcement scheme across system designs.
摘要翻译：一种执行对系统资源和资产的访问控制的方法和系统。与系统中启动事务的设备相关联的安全属性将自动生成并使用事务消息进行转发。安全属性传达分配给每个启动器的访问权限。在系统中实现一个或多个安全执行机制以根据访问策略要求评估安全属性以访问诸如存储器，寄存器，地址范围等的各种系统资产和资源。如果由安全属性标识的特权指示访问允许请求，允许交易进行。启动器方案的安全属性提供跨系统设计的模块化，一致的安全访问实施方案。

5. 发明申请

WO2018063643A1 SECURITY SYSTEM FOR ELECTRONIC EQUIPMENT 审中-公开
标题翻译：电子设备安全系统
公开(公告)号：WO2018063643A1
公开(公告)日：2018-04-05
申请号：PCT/US2017/048927
申请日：2017-08-28
申请人： INTEL CORPORATION
发明人： CHO, Kyong-Tak , ZHAO, Li , SASTRY, Manoj R.
IPC分类号： B60R16/023 , G06F21/55
摘要： One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.
摘要翻译：一个实施例提供了用于车辆的电子控制单元（ECU）。 ECU包括收发器电路，电压测量电路和特征集电路。收发器电路用于发送和/或接收消息中的至少一个。电压测量电路用于为接收消息的至少一个零比特的每个零比特确定高总线线电压（VCANH）值和/或低总线线电压（VCANL）值中的至少一个。接收到的消息包括多个比特。特征集合电路用于至少部分地基于高确认（ACK）阈值电压（VthH）和/或低ACK阈值电压（VthH）中的至少一个来确定特征集合的至少一个特征的值 VTHL）。该特征集包括多个VCANH值的操作最频繁测量的VCANH值（VfreqH2）和/或多个VCANL值的操作最频繁测量的VCANL值（VfreqL2）中的至少一个。

6. 发明申请

WO2017105656A1 SECURE UNLOCK TO ACCESS DEBUG HARDWARE 审中-公开
标题翻译：安全解锁访问调试硬件
公开(公告)号：WO2017105656A1
公开(公告)日：2017-06-22
申请号：PCT/US2016/060078
申请日：2016-11-02
申请人： INTEL CORPORATION
发明人： GHOSH, Santosh , SASTRY, Manoj R. , GHAZNAVI, Solmaz , CARRENO, Julien , KEARNEY, Padraig J.
IPC分类号： G06F21/62 , G06F21/60
CPC分类号： H04L9/3239 , G06F21/75 , G06F21/85 , G09C1/00 , H04L9/0643 , H04L63/061 , H04L63/123 , H04L2209/26
摘要： System and techniques for secure unlock to access debug hardware are described herein. A cryptographic key may be received at a hardware debug access port of a device. A digest may be computed from the cryptographic key at an unlock unit of the device. A fuse value may be received from a non-volatile read-only storage on the device. The digest and the fuse value may be compared to determine whether they are the same. A pass-fail pulse may be provided that indicates the result of the comparing.
摘要翻译：这里描述了用于安全解锁以访问调试硬件的系统和技术。密码密钥可以在设备的硬件调试访问端口处被接收。可以从设备的解锁单元处的密钥来计算摘要。可以从设备上的非易失性只读存储器接收熔丝值。可以比较摘要和熔丝值以确定它们是否相同。可以提供指示比较结果的合格/不合格脉冲。

7. 发明申请

WO2017222714A1 LIGHTWEIGHT TRUSTED EXECUTION FOR INTERNET-OF-THINGS DEVICES 审中-公开
标题翻译：用于互联网设备的轻量信任执行
公开(公告)号：WO2017222714A1
公开(公告)日：2017-12-28
申请号：PCT/US2017/033846
申请日：2017-05-22
申请人： INTEL CORPORATION
发明人： ZHAO, Li , SASTRY, Manoj R. , RAHA, Arnab
IPC分类号： G06F21/62 , G06F9/38
摘要： Lightweight trusted execution technologies for internet-of-things devices are described. In response to a memory request at a page unit from an application executing in a current domain, the page unit is to map a current virtual address (VA) to a current physical address (PA). The policy enforcement logic (PEL) reads, from a secure domain cache (SDC), a domain value (DID) and a VA value that correspond to the current PA. The PEL grants access when the current domain and the DID correspond to the unprotected region or the current domain and the DID correspond to the secure domain region, the current domain is equal to the DID, and the current VA is equal to the VA value. The PEL grants data access and denies code access when the current domain corresponds to the secure domain region and the DID corresponds to the unprotected region.
摘要翻译：描述了用于物联网设备的轻量级可信执行技术。响应于来自在当前域中执行的应用的页面单元的存储器请求，页面单元将当前虚拟地址（VA）映射到当前物理地址（PA）。策略执行逻辑（PEL）从安全域高速缓存（SDC）中读取与当前PA对应的域值（DID）和VA值。当当前域和DID对应于未保护区域或当前域并且DID对应于安全域区域，当前域等于DID并且当前VA等于VA值时，PEL授予访问权限。当当前域对应于安全域区域并且DID对应于未保护区域时，PEL授予数据访问并拒绝代码访问。

8. 发明申请

WO2017052748A1 METHODS AND APPARATUS FOR CONVEYING A NONCE VIA A HUMAN BODY COMMUNICATION CONDUIT 审中-公开
标题翻译：通过人体通信线路输送非手段的方法和装置
公开(公告)号：WO2017052748A1
公开(公告)日：2017-03-30
申请号：PCT/US2016/044042
申请日：2016-07-26
申请人： INTEL CORPORATION
发明人： GUTIERREZ, Christopher N. , ZHANG, Jianqing , SASTRY, Manoj R. , KONANUR, Anand S.
IPC分类号： H04L9/30 , H04L9/08 , H04L9/32
CPC分类号： H04L63/061 , H04B13/005 , H04W4/80 , H04W12/04
摘要： In a method for enabling devices to communicate securely, a first device dynamically generates a human body nonce (HBN) and then sends that HBN to a second device via a human body communication conduit (HBCC). After sending the HBN from the first device to the second device, the first device uses the HBN to establish security for an over-the-air (OTA) communication session between the first device and the second device. For instance, the first device may derive a key, based at least in part on the HBN, and the first device may use the key to encrypt communications to be sent OTA between the first device and the second device. Other embodiments are described and claimed.
摘要翻译：在使得设备能够安全通信的方法中，第一设备动态地生成人体随机数（HBN），然后经由人体通信管道（HBCC）将该HBN发送到第二设备。在将HBN从第一设备发送到第二设备之后，第一设备使用HBN为第一设备和第二设备之间的空中（OTA）通信会话建立安全性。例如，第一设备可以至少部分地基于HBN导出密钥，并且第一设备可以使用密钥来加密要在第一设备和第二设备之间发送OTA的通信。描述和要求保护其他实施例。

9. 发明申请

WO2016200597A1 SYSTEM, APPARATUS AND METHOD FOR MULTI-OWNER TRANSFER OF OWNERSHIP OF A DEVICE 审中-公开
标题翻译：用于设备所有权的多业务转移的系统，装置和方法
公开(公告)号：WO2016200597A1
公开(公告)日：2016-12-15
申请号：PCT/US2016/033829
申请日：2016-05-23
申请人： INTEL CORPORATION
发明人： WALKER, Jesse , SMITH, Ned M. , HERBERT, Howard C. , SASTRY, Manoj R.
IPC分类号： H04L29/06 , H04L29/08
CPC分类号： G06Q30/0635 , H04L9/0891 , H04L9/3247 , H04L63/061 , H04L63/0823 , H04L63/0876 , H04W4/70 , H04W12/04
摘要： In one embodiment, a method includes: receiving, in a device, a first message to request transfer of ownership of the device from a current owner to a new owner, the device having a storage to store a first title including a device identifier for the device and an owner identifier for the current owner, the storage to further store a first root authorization key associated with the current owner; sending a second message from the device to the new owner, the second message including a hash value of the first title; and receiving a third message, in the device, the third message including a second title for the device, the second title generated by the new owner and including a new owner identifier, the second title comprising a concatenation of the first title, to enable ownership of the device to be transferred to the new owner.
摘要翻译：在一个实施例中，一种方法包括：在设备中接收第一消息以请求将设备的所有权从当前拥有者转移到新所有者，所述设备具有存储第一标题的存储器，所述第一标题包括用于设备和当前所有者的所有者标识符，所述存储器进一步存储与当前所有者相关联的第一根授权密钥; 从所述设备向所述新所有者发送第二消息，所述第二消息包括所述第一标题的哈希值; 以及在所述设备中接收第三消息，所述第三消息包括所述设备的第二标题，由所述新所有者生成并包括新所有者标识符的所述第二标题，所述第二标题包括所述第一标题的级联以使所有权的设备被转移到新的所有者。

10. 发明申请

WO2018063646A1 ROOT OF TRUST (RoT) APPLICATION FOR INTERNET OF THINGS (IoT) DEVICES 审中-公开
标题翻译：信托（RoT）应用程序适用于物联网（IoT）设备
公开(公告)号：WO2018063646A1
公开(公告)日：2018-04-05
申请号：PCT/US2017/048946
申请日：2017-08-28
申请人： INTEL CORPORATION
发明人： ZHAO, Li , MISOCZKI, Rafael , GHOSH, Santosh , SASTRY, Manoj R.
IPC分类号： G06F9/44 , G06F9/445
CPC分类号： H04L9/0643 , G06F21/575 , H04L9/0836 , H04L9/3236 , H04L9/3247 , H04L63/123 , H04L2209/38
摘要： One embodiment provides an apparatus. The apparatus includes an Internet of Things (IoT) device including a processor, a memory, a flash memory, a network interface and a boot Read Only Memory (ROM). A Root-of-Trust (RoT) application stored in the boot ROM causes the processor run the RoT after initialization of the IoT device. The RoT causes the device to determine a selected image by determining if an update mode is set. The RoT also causes the processor to load the selected image into memory and determine whether a verification of a signature of the selected image is successful. When the verification of the signature is successful then control is transferred to the selected image and when the verification is not successful then a recovery boot is performed.
摘要翻译：一个实施例提供了一种装置。该装置包括物联网（IoT）设备，包括处理器，存储器，闪存，网络接口和引导只读存储器（ROM）。存储在引导ROM中的根信任（RoT）应用程序会使处理器在初始化IoT设备后运行RoT。 RoT使设备通过确定是否设置了更新模式来确定选定的图像。 RoT还使处理器将所选图像加载到存储器中并确定所选图像的签名的验证是否成功。当签名验证成功时，控制权转移到选定的映像上，当验证不成功时，执行恢复引导。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式