专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2022133860A1 KEY MANAGEMENT FOR CRYPTO PROCESSORS ATTACHED TO OTHER PROCESSING UNITS 审中-公开
公开(公告)号：WO2022133860A1
公开(公告)日：2022-06-30
申请号：PCT/CN2020/138853
申请日：2020-12-24
申请人： INTEL CORPORATION , KOUNAVIS, Michael , SMITH, Ned M. , WANG, Junyuan , GUO, Kaijie
发明人： KOUNAVIS, Michael , SMITH, Ned M. , WANG, Junyuan , GUO, Kaijie
IPC分类号： G06F12/14 , H04L9/32
摘要： Technology for protecting tenant workloads and tenant data within a multi-tenant workload environment may include a workload processor allocable into tenant slices, a cryptographic engine, memory storing a key table, and a key provisioner to provision a separate tenant key for each workload, each tenant key stored in the key table with an associated unique key handle and a resource identifier for a separate one of the plurality of tenant slices assigned to the respective workload, provide each respective tenant key to a respective requestor of each workload, and provide, for each workload, the respective key handle to the assigned tenant slice, the tenant slice to use the key handle to perform, via the cryptographic engine, a cryptographic operation on a wrapped data key associated with the workload.

2. 发明申请

WO2020205514A1 PRIVACY PROTECTED AUTONOMOUS ATTESTATION 审中-公开
公开(公告)号：WO2020205514A1
公开(公告)日：2020-10-08
申请号：PCT/US2020/025211
申请日：2020-03-27
申请人： INTEL CORPORATION , GIRISHKUMAR PARIKH, Bhushan , TADEPALLI, Hari K. , PALERMO, Stephen T. , O'DWYER, Thomas Joseph , BHARGAV-SPANTZEL, Abhilasha , SMITH, Ned M.
发明人： GIRISHKUMAR PARIKH, Bhushan , TADEPALLI, Hari K. , PALERMO, Stephen T. , O'DWYER, Thomas Joseph , BHARGAV-SPANTZEL, Abhilasha , SMITH, Ned M.
IPC分类号： G06F21/44 , G06F21/45 , H04L9/08 , H04L9/30 , H04L9/06
摘要： An apparatus operating as a certificate authority (CA) is described. The apparatus can perform operations including receiving, from a plurality of requesting devices, a request to join a group. The request can include identification information for the group and attestation evidence for the plurality of requesting devices. Responsive to receiving the request, the apparatus can provide a group certificate for the group to the plurality of requesting devices.

3. 发明申请

WO2019060758A1 DEVICE MANAGEMENT SERVICES BASED ON RESTFUL MESSAGING 审中-公开
公开(公告)号：WO2019060758A1
公开(公告)日：2019-03-28
申请号：PCT/US2018/052265
申请日：2018-09-21
申请人： INTEL CORPORATION
发明人： SMITH, Ned M.
IPC分类号： H04L29/06 , H04L29/08 , H04W4/70
CPC分类号： H04L67/142 , H04L67/12 , H04L67/14 , H04W4/50 , H04W4/70
摘要： Various systems and methods of establishing and utilizing device management (DM) services in Internet of Things (IoT) networks and similar distributed network architectures, are described. In an example, RESTful messaging within IoT operational and resource models are used to establish, instantiate, and operate DM services having various roles within an IoT framework abstraction.

4. 发明申请

WO2018208289A1 TWO-PHASE DISCOVERY AND ONBOARDING OF INTERNET OF THINGS (IOT) DEVICES 审中-公开
公开(公告)号：WO2018208289A1
公开(公告)日：2018-11-15
申请号：PCT/US2017/031747
申请日：2017-05-09
申请人： INTEL CORPORATION , SMITH, Ned M. , HELDT-SHELLER, Nathan
发明人： SMITH, Ned M. , HELDT-SHELLER, Nathan
IPC分类号： H04L29/06 , H04W4/00 , H04W12/02 , H04W12/04 , H04W84/18
摘要： Various systems and methods for discovery and onboarding in an interconnected network framework of Internet of Things (IoT) devices are described. In an example, a technique for onboarding and provisioning a device onto an interconnected network framework includes operations to: receive a unique temporary device identifier from a device instance, the device instance indicating availability for onboarding onto a network; onboard the device instance onto the network; establish a secure session with the device instance via the network; receive, in the secure session, a secure device identifier; and initiate provisioning of the device instance in a secure directory based on the secure device identifier. In a further example, techniques are provided to securely identify and provision a second device instance (a doppelganger device instance) operating on a physical device that hosts both the first device instance and the second device instance.

5. 发明申请

WO2017112381A1 SYSTEM, APPARATUS AND METHOD FOR TRANSFERRING OWNERSHIP OF A SMART DELIVERY PACKAGE 审中-公开
标题翻译：用于转移智能交付包的所有权的系统，装置和方法
公开(公告)号：WO2017112381A1
公开(公告)日：2017-06-29
申请号：PCT/US2016/064262
申请日：2016-11-30
申请人： INTEL CORPORATION
发明人： POORNACHANDRAN, Rajesh , SMITH, Ned M.
IPC分类号： G06Q10/08
CPC分类号： G06Q10/0833 , G06Q20/3224 , G06Q20/3276 , G06Q20/3827 , G06Q20/3829 , H04L9/3236 , H04L2209/38 , H04L2209/56 , H04W12/04
摘要： In one embodiment, an apparatus comprises: a hardware processor, a storage to store a digital title comprising a first ownership record having a public key of a current owner of the apparatus, the public key to be endorsed by a prior owner of the apparatus, and a wireless circuit to transmit and receive messages. The hardware processor may be adapted to generate a hash of a prior ownership record, and the wireless circuit is to cause the hash to be provided to a remote server that is to maintain a block chain regarding ownership of the apparatus. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，一种装置包括：硬件处理器，用于存储数字标题的存储器，所述数字标题包括具有所述装置的当前所有者的公共密钥的第一所有权记录，待批准的公钥由装置的在先所有者和无线电路来发送和接收消息。硬件处理器可以适用于生成在前所有权记录的散列，并且无线电路将使得散列被提供给远程服务器，该远程服务器将保持关于设备的所有权的块链。描述并要求保护其他实施例。

6. 发明申请

WO2017112281A1 SECURE DATA TRANSFER WITH COMPUTE STICK 审中-公开
标题翻译：安全的数据传输与计算棒
公开(公告)号：WO2017112281A1
公开(公告)日：2017-06-29
申请号：PCT/US2016/063535
申请日：2016-11-23
申请人： INTEL CORPORATION
发明人： POORNACHANDRAN, Rajesh , SMITH, Ned M.
IPC分类号： G09G5/00
CPC分类号： G06F13/102
摘要： Systems, apparatus and methods may provide for creating a communication path through a secure data interface that includes an electronic device control channel between a small form factor computing apparatus such as a compute stick and an external display. A second communication path may be established between a trusted execution environment region of the external display and a trusted execution environment region of the compute stick such that data may be securely transmitted between the compute stick and the external display through the first and second communication paths.
摘要翻译：系统，设备和方法可以提供通过安全数据接口来创建通信路径，所述安全数据接口包括小规格计算设备（例如计算棒）和外部显示器之间的电子设备控制通道。可以在外部显示器的可信执行环境区域和计算机可信执行环境区域之间建立第二通信路径，使得可以通过第一和第二通信路径在计算棒和外部显示器之间安全地传输数据。

7. 发明申请

WO2016200659A1 A SELF-CONFIGURING KEY MANAGEMENT SYSTEM FOR AN INTERNET OF THINGS NETWORK 审中-公开
标题翻译：一种用于网络互联网的自配置密钥管理系统
公开(公告)号：WO2016200659A1
公开(公告)日：2016-12-15
申请号：PCT/US2016/035282
申请日：2016-06-01
申请人： INTEL CORPORATION
发明人： SMITH, Ned M.
IPC分类号： H04L9/08 , H04L29/08 , H04L29/06
CPC分类号： H04L63/045 , H04L9/0822 , H04L9/0825 , H04L9/0841 , H04L9/088 , H04L9/14 , H04L9/3213 , H04L63/062 , H04L63/20 , H04L67/12
摘要： In one embodiment, a method includes receiving, in a first device, at least one of a first symmetric key and a first asymmetric key in a common key management structure, the common key management structure to accommodate asymmetric keys and symmetric keys, and further including security policy information to enable communication between the first device of a first domain of an Internet of Things (IoT) network and a second device of a second domain of the IoT network according to an inter-domain security policy; and sending a first message directly from the first device to the second device according to the security policy information of the common key management structure. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，一种方法包括在第一设备中接收公共密钥管理结构中的第一对称密钥和第一非对称密钥中的至少一个，用于容纳非对称密钥和对称密钥的公共密钥管理结构，并且还包括安全策略信息，以根据域间安全策略来实现物联网（IoT）网络的第一域的第一设备与物联网的第二域的第二设备之间的通信; 以及根据公共密钥管理结构的安全策略信息，将第一消息直接从第一设备发送到第二设备。描述和要求保护其他实施例。

8. 发明申请

WO2016200599A1 SYSTEM, APPARATUS AND METHOD FOR AUTO-OPTIMIZATION OF ACCESS CONTROL POLICY AND KEY MANAGEMENT IN A NETWORK AUTHORING TOOL 审中-公开
标题翻译：网络作业工具中访问控制政策和关键管理的自动优化的系统，装置和方法
公开(公告)号：WO2016200599A1
公开(公告)日：2016-12-15
申请号：PCT/US2016/033832
申请日：2016-05-23
申请人： INTEL CORPORATION
发明人： SMITH, Ned M. , YANG, Shao-Wen , HELDT-SHELLER, Nathan , WILLIS, Thomas G.
IPC分类号： H04L29/06 , H04L29/08 , H04L12/64
CPC分类号： H04L63/101 , H04L63/062 , H04L63/08 , H04L63/104 , H04L67/12 , H04W4/70 , H04W12/04 , H04W12/08
摘要： In one embodiment, a method includes: presenting, in a user interface of an authoring tool, a plurality of levels of abstraction for a network having a plurality of devices; receiving information from a user regarding a subset of the plurality of devices to be provisioned with one or more security keys and an access control policy; automatically provisioning a key schedule for the subset of the plurality of devices in the network based on the user input and a topological context of the network; and automatically provisioning the access control policy for the subset of the plurality of devices in the network based on the user input and the topological context of the network.
摘要翻译：在一个实施例中，一种方法包括：在创作工具的用户界面中呈现具有多个设备的网络的多个抽象级别; 从用户接收关于要被提供的多个设备的子集的信息，其具有一个或多个安全密钥和访问控制策略; 基于所述用户输入和所述网络的拓扑上下文，自动地为所述网络中的所述多个设备的子集提供密钥调度; 以及基于所述用户输入和所述网络的拓扑上下文，自动地为所述网络中的所述多个设备的子集提供所述访问控制策略。

9. 发明申请

WO2016200598A1 SYSTEM, APPARATUS AND METHOD FOR ACCESS CONTROL LIST PROCESSING IN A CONSTRAINED ENVIRONMENT 审中-公开
标题翻译：系统，装置和方法，用于在受约束的环境中访问控制列表处理
公开(公告)号：WO2016200598A1
公开(公告)日：2016-12-15
申请号：PCT/US2016/033831
申请日：2016-05-23
申请人： INTEL CORPORATION
发明人： SMITH, Ned M. , AGERSTAM, Mats G. , HELDT-SHELLER, Nathan
IPC分类号： H04L29/06
CPC分类号： H04L63/205 , H04L63/101 , H04L67/12 , H04W4/70 , H04W12/08
摘要： A method includes receiving a first request from a first device to access a first resource of the system and determining whether to grant access to the first resource based on a first access control list stored in the system, the first device having a first relevance value, and based on the determination, granting the access to the first resource; and receiving a second request from a second device to access a second resource of the system and forwarding the second request to an access manager service to determine whether to grant access to the second resource based on a second access control list stored in the access manager service associated with the second device, the second device having a second relevance value, receive an access grant from the access manager service and based thereon, granting the access to the second resource.
摘要翻译：一种方法包括从第一设备接收访问系统的第一资源的第一请求，并且基于存储在系统中的第一访问控制列表来确定是否授予对第一资源的访问，第一设备具有第一相关值，并基于确定，授予对第一资源的访问; 以及从第二设备接收第二请求以访问所述系统的第二资源，并且将所述第二请求转发给访问管理器服务以基于存储在所述访问管理器服务中的第二访问控制列表来确定是否授予对所述第二资源的访问与所述第二设备相关联，所述第二设备具有第二相关性值，从所述访问管理器服务接收访问许可，并且基于此，授予对所述第二资源的访问权限。

10. 发明申请

WO2016200594A2 SYSTEM, APPARATUS AND METHOD FOR SECURE COORDINATION OF A RENDEZVOUS POINT FOR DISTRIBUTED DEVICES USING ENTROPY MULTIPLEXING 审中-公开
标题翻译：用于使用熵多路复用的分布式设备的固定点的协调的系统，装置和方法
公开(公告)号：WO2016200594A2
公开(公告)日：2016-12-15
申请号：PCT/US2016/033820
申请日：2016-05-23
申请人： INTEL CORPORATION
发明人： SMITH, Ned M. , AGERSTAM, Mats G. , GADIRAJU, Narasimham
IPC分类号： H04L9/08 , H04L9/32
CPC分类号： H04L63/0428 , H04L63/083 , H04L67/1002 , H04W12/06

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式