专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2016160209A1 TECHNOLOGIES FOR SECURE SERVER ACCESS USING A TRUSTED LICENSE AGENT 审中-公开
标题翻译：使用知识型许可证代理进行安全服务器访问的技术
公开(公告)号：WO2016160209A1
公开(公告)日：2016-10-06
申请号：PCT/US2016/019791
申请日：2016-02-26
申请人： INTEL CORPORATION
发明人： LENZ, Oron , MILSHTEN, Noam , BERDICHEVSKY, Ilya
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/10 , G06F21/10 , G06F21/577 , H04L63/06 , H04L63/08 , H04L63/0853 , H04L63/0876 , H04L63/102 , H04L2463/103
摘要： Technologies for secure server access include a client computing device that loads a license agent into a secure enclave established by a processor of the client computing device. The license agent receives a request from an application to access a remote server device. The license agent opens a secure connection with the server device and performs remote attestation of the secure enclave. The license agent authenticates the user and transmits a machine identifier and a user identifier to the server device. The machine identifier may be based on an enclave sealing key of the client computing device. The server device verifies that the machine identifier and the user identifier are bound to a valid application license. If the machine identifier and the user identifier are successfully verified, the application communicates with the server device using the secure connection. Other embodiments are described and claimed.
摘要翻译：用于安全服务器访问的技术包括将许可代理加载到由客户端计算设备的处理器建立的安全空间中的客户端计算设备。许可证代理从应用程序接收访问远程服务器设备的请求。许可证代理打开与服务器设备的安全连接，并执行安全飞地的远程验证。许可证代理认证用户，并将机器标识符和用户标识符发送到服务器设备。机器标识符可以基于客户端计算设备的飞地密封密钥。服务器设备验证机器标识符和用户标识符是否绑定到有效的应用许可证。如果机器标识符和用户标识符被成功验证，则应用程序使用安全连接与服务器设备进行通信。描述和要求保护其他实施例。

2. 发明申请

WO2013180736A1 IDENTIFICATION AND EXECUTION OF SUBSETS OF A PLURALITY OF INSTRUCTIONS IN A MORE SECURE EXECUTION ENVIRONMENT 审中-公开
标题翻译：在更安全的执行环境中确定和执行大量指令的附件
公开(公告)号：WO2013180736A1
公开(公告)日：2013-12-05
申请号：PCT/US2012/040597
申请日：2012-06-01
申请人： INTEL CORPORATION , GOFFMAN, Sergei , BERENZON, Alex , LENZ, Oron , DEVOR, Tevi , ZHANG, Bo , ZAHAVI, Yoram , MAOR, Moshe
发明人： GOFFMAN, Sergei , BERENZON, Alex , LENZ, Oron , DEVOR, Tevi , ZHANG, Bo , ZAHAVI, Yoram , MAOR, Moshe
IPC分类号： G06F21/22 , G06F9/44
CPC分类号： G06F21/602 , G06F21/125 , G06F21/53 , G06F21/54
摘要： Embodiments of apparatus, computer-implemented methods, systems, devices, and computer-readable media are described herein for identifying and encrypting a subset of a plurality of instructions, for execution in a more secure execution environment, In various embodiments, the subset may include a single entry point and a single exit point. In various embodiments, one or more instructions of the plurality of instructions that precede or follow the subset may be executed in a first execution environment with a first security level. In various embodiments, the subset may be executed in a second execution environment with a second security level that is more secure than the first security level.
摘要翻译：本文描述了装置，计算机实现的方法，系统，设备和计算机可读介质的实施例，用于识别和加密多个指令的子集，以在更安全的执行环境中执行。在各种实施例中，子集可以包括单个入口点和单个出口点。在各种实施例中，可以在具有第一安全级别的第一执行环境中执行在子集之前或之后的多个指令中的一个或多个指令。在各种实施例中，子集可以在具有比第一安全级别更安全的第二安全级别的第二执行环境中执行。

3. 发明公开

EP3275159A1 TECHNOLOGIES FOR SECURE SERVER ACCESS USING A TRUSTED LICENSE AGENT 有权
标题翻译：使用受信任的许可代理进行安全服务器访问的技术
公开(公告)号：EP3275159A1
公开(公告)日：2018-01-31
申请号：EP16773675.0
申请日：2016-02-26
申请人： Intel Corporation
发明人： LENZ, Oron , MILSHTEN, Noam , BERDICHEVSKY, Ilya
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/10 , G06F21/10 , G06F21/577 , H04L63/06 , H04L63/08 , H04L63/0853 , H04L63/0876 , H04L63/102 , H04L2463/103
摘要： Technologies for secure server access include a client computing device that loads a license agent into a secure enclave established by a processor of the client computing device. The license agent receives a request from an application to access a remote server device. The license agent opens a secure connection with the server device and performs remote attestation of the secure enclave. The license agent authenticates the user and transmits a machine identifier and a user identifier to the server device. The machine identifier may be based on an enclave sealing key of the client computing device. The server device verifies that the machine identifier and the user identifier are bound to a valid application license. If the machine identifier and the user identifier are successfully verified, the application communicates with the server device using the secure connection. Other embodiments are described and claimed.

4. 发明授权

EP3275159B1 TECHNOLOGIES FOR SECURE SERVER ACCESS USING A TRUSTED LICENSE AGENT 有权
公开(公告)号：EP3275159B1
公开(公告)日：2020-07-29
申请号：EP16773675.0
申请日：2016-02-26
申请人： Intel Corporation
发明人： LENZ, Oron , MILSHTEN, Noam , BERDICHEVSKY, Ilya
IPC分类号： H04L29/06 , H04L9/32 , G06F21/10 , G06F21/57

5. 发明授权

EP2856377B1 IDENTIFICATION AND EXECUTION OF SUBSETS OF A PLURALITY OF INSTRUCTIONS IN A MORE SECURE EXECUTION ENVIRONMENT 有权
标题翻译：在更安全的执行环境中识别和执行多项指令的子集
公开(公告)号：EP2856377B1
公开(公告)日：2017-09-27
申请号：EP12877666.3
申请日：2012-06-01
申请人： Intel Corporation
发明人： GOFFMAN, Sergei , BERENZON, Alex , LENZ, Oron , DEVOR, Tevi , ZHANG, Bo , ZAHAVI, Yoram , MAOR, Moshe
IPC分类号： G06F21/10 , G06F9/44 , G06F21/53 , G06F21/54
CPC分类号： G06F21/602 , G06F21/125 , G06F21/53 , G06F21/54

6. 发明公开

EP2856377A1 IDENTIFICATION AND EXECUTION OF SUBSETS OF A PLURALITY OF INSTRUCTIONS IN A MORE SECURE EXECUTION ENVIRONMENT 有权
标题翻译：识别与在命令中几组执行。在更高的安全设计环境
公开(公告)号：EP2856377A1
公开(公告)日：2015-04-08
申请号：EP12877666.3
申请日：2012-06-01
申请人： Intel Corporation
发明人： GOFFMAN, Sergei , BERENZON, Alex , LENZ, Oron , DEVOR, Tevi , ZHANG, Bo , ZAHAVI, Yoram , MAOR, Moshe
IPC分类号： G06F21/10 , G06F9/44
CPC分类号： G06F21/602 , G06F21/125 , G06F21/53 , G06F21/54
摘要： Embodiments of apparatus, computer-implemented methods, systems, devices, and computer-readable media are described herein for identifying and encrypting a subset of a plurality of instructions, for execution in a more secure execution environment, In various embodiments, the subset may include a single entry point and a single exit point. In various embodiments, one or more instructions of the plurality of instructions that precede or follow the subset may be executed in a first execution environment with a first security level. In various embodiments, the subset may be executed in a second execution environment with a second security level that is more secure than the first security level.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式