专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2010012678A1 METHOD AND APPARATUS FOR ENFORCING A PREDETERMINED MEMORY MAPPING 审中-公开
标题翻译：用于执行预定义存储器映射的方法和装置
公开(公告)号：WO2010012678A1
公开(公告)日：2010-02-04
申请号：PCT/EP2009/059648
申请日：2009-07-27
申请人： NAGRAVISION S.A. , GREMAUD, Fabien , KUDELSKI, Henri
发明人： GREMAUD, Fabien , KUDELSKI, Henri
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F12/1009
摘要： The present invention provides a system and a method for enforcing a predetermined mapping of addresses in a physical address space to addresses in a virtual address space in a data processing system comprising a processor in the virtual address space and a memory in a physical address space. During the compilation and linking of an application to be run on the data processing system, the predetermined mapping table is generated linking the virtual addresses to physical addresses. This predetermined mapping table is kept secret. A second mapping table is generated using a cryptographic function of the physical address with the virtual address as a key to link virtual addresses to intermediate addresses. The second mapping table is loaded into the memory management unit. The data processing system further comprises cryptographic hardware to convert the intermediate address to the physical address using the inverse of the cryptographic function which was used to calculate the intermediate address.
摘要翻译：本发明提供了一种系统和方法，用于将物理地址空间中的地址的预定映射实施到包括虚拟地址空间中的处理器和物理地址空间中的存储器的数据处理系统中的虚拟地址空间中的地址。在要在数据处理系统上运行的应用程序的编译和链接期间，生成将虚拟地址链接到物理地址的预定映射表。该预定映射表被保密。使用具有虚拟地址的物理地址的密码函数作为将虚拟地址链接到中间地址的关键字来生成第二映射表。第二个映射表被加载到存储器管理单元中。数据处理系统还包括使用用于计算中间地址的密码函数的倒数将中间地址转换为物理地址的密码硬件。

2. 发明申请

WO2009156402A1 SECURE MEMORY MANAGEMENT SYSTEM AND METHOD 审中-公开
标题翻译：安全存储管理系统和方法
公开(公告)号：WO2009156402A1
公开(公告)日：2009-12-30
申请号：PCT/EP2009/057830
申请日：2009-06-23
申请人： NAGRAVISION S.A. , GREMAUD, Fabien , GOGNIAT, Christophe , BELLOCCHIO, Marc , FUCHS, Pascal
发明人： GREMAUD, Fabien , GOGNIAT, Christophe , BELLOCCHIO, Marc , FUCHS, Pascal
IPC分类号： G06F21/00 , G06F21/02
CPC分类号： G06F21/57 , G06F21/79
摘要： The present invention describes a system and a method for securely loading digital information from a storage device into a memory module in a data processing system, said data processing system comprising at least one storage device, one memory module and at least one processor, said data processing system further comprising a memory access controller module connected between the processor and the memory module, and a secure memory management module connected to the processor, the memory module, the storage device and the memory access controller. Requests by the processor for data are passed to the secure memory management module, which loads the data from the storage device to the memory module and configures the memory access controller such that the processor will have access to the data.
摘要翻译：本发明描述了一种用于将数字信息从存储设备安全地加载到数据处理系统中的存储器模块的系统和方法，所述数据处理系统包括至少一个存储设备，一个存储器模块和至少一个处理器，所述数据处理系统还包括连接在处理器和存储器模块之间的存储器访问控制器模块，以及连接到处理器，存储器模块，存储设备和存储器访问控制器的安全存储器管理模块。处理器对数据的请求被传递到安全存储器管理模块，安全存储器管理模块将数据从存储设备加载到存储器模块，并配置存储器访问控制器，使得处理器能够访问数据。

3. 发明申请

WO2020114880A1 SECURELY TRANSMITTING DATA IN A DATA STREAM 审中-公开
公开(公告)号：WO2020114880A1
公开(公告)日：2020-06-11
申请号：PCT/EP2019/082925
申请日：2019-11-28
申请人： NAGRAVISION S.A.
发明人： GREMAUD, Fabien , THOMAS, Frederic , FISCHER, Jean-Bernard
IPC分类号： H04L29/06
摘要： In overview, a computer-implemented method of transmitting data in a data stream from a first device to a second device is disclosed. The data stream is encrypted before transmission from the first device to the second device, and a location of the data in the data stream is indicated to the second device. The location may be a pre-shared location between the first and second devices, or the first device may transmit the location of the data to the second device. The second device decrypts the encrypted data stream, identifies the data in the data stream based on the location, and encrypts the identified data in the data stream.

4. 发明申请

WO2020104685A1 DEVICE AUTHENTICATION WITH SEALING AND VERIFICATION 审中-公开
公开(公告)号：WO2020104685A1
公开(公告)日：2020-05-28
申请号：PCT/EP2019/082308
申请日：2019-11-22
申请人： NAGRAVISION S.A.
发明人： GREMAUD, Fabien
IPC分类号： H04L29/06
摘要： The disclosure relates to a method for sealing into a device (1) device information, which enable the secure functions of the device (1), managed by a RoT (2) of the device (1) by the security owner, furthermore to bootstrap the device (1) to a system (10) and to finally authenticate the combination of RoT (2) and device information in the device (1). This method has the minimum impact on the device (1) production flow.

5. 发明申请

WO2019129706A1 SECURE INSTALLATION OF APPLICATION KEYS 审中-公开
公开(公告)号：WO2019129706A1
公开(公告)日：2019-07-04
申请号：PCT/EP2018/086576
申请日：2018-12-21
申请人： NAGRAVISION S.A.
发明人： FISCHER, Jean-Bernard , FISCHER, Nicolas , GREMAUD, Fabien , VILLEGAS, Karine
IPC分类号： H04L9/08 , H04L9/14
CPC分类号： H04L9/14 , H04L9/0819 , H04L9/0822 , H04L9/0825 , H04L9/083
摘要： The present disclosure includes methods, devises and systems for preparing and installing one or more application keys owned by application owners in a remote device. The present disclosure further proposes methods, devices and systems for secure installation of subsequent application keys on a device utilising corresponding key derivation functions to associate an application with a respective policy and identifier using significantly low bandwidth for transfer of keys for execution of the respective application on the device.

6. 发明申请

WO2010010137A1 METHOD FOR UPDATING DATA IN MEMORIES USING A MEMORY MANAGEMENT UNIT 审中-公开
标题翻译：使用存储器管理单元更新存储器中的数据的方法
公开(公告)号：WO2010010137A1
公开(公告)日：2010-01-28
申请号：PCT/EP2009/059467
申请日：2009-07-23
申请人： NAGRAVISION S.A. , GREMAUD, Fabien , KUDELSKI, Henri
发明人： GREMAUD, Fabien , KUDELSKI, Henri
IPC分类号： G06F12/10
CPC分类号： G06F12/1009 , G06F8/656
摘要： A method for updating, in the background, data stored in physical memories without affecting the current operations performed by the microprocessor. When the update is completely terminated, the application switches from an old version to a new version. This switching occurs by a reconfiguration of the page table during which a first sub-tree structure of pointers accessing the old version of data stored in memories is replaced by a second sub-tree structure of pointers thus allowing access to the new version of data. This update method prevents incoherent transitory states of the system as the latter works with the previous data version until the installation of the new version becomes usable. In the case of an interruption to the update process, the application can always reinitialize the update since the old version of data can be reactivated by returning to the previous configuration of the page table.
摘要翻译：一种用于在后台更新存储在物理存储器中的数据而不影响由微处理器执行的当前操作的方法。当更新完全终止时，应用程序将从旧版本切换到新版本。这种切换通过页表的重新配置而发生，在该表中，访问存储在存储器中的旧版本数据的指针的第一子树结构由指针的第二子树结构代替，从而允许访问新版本的数据。该更新方法防止系统的不连贯的瞬态状态，因为后者适用于之前的数据版本，直到新版本的安装变得可用。在更新过程中断的情况下，应用程序可以随时重新初始化更新，因为可以通过返回页面表的先前配置来重新启用旧版本的数据。

7. 发明申请

WO2021233649A1 SECURE ELEMENT FOR SECURELY PROCESSING DIGITAL INFORMATION 审中-公开
公开(公告)号：WO2021233649A1
公开(公告)日：2021-11-25
申请号：PCT/EP2021/060973
申请日：2021-04-27
申请人： NAGRAVISION S.A.
发明人： VILLEGAS, Karine , HAUTIER, Roan , GREMAUD, Fabien , FUCHS, Pascal
IPC分类号： G06F21/71 , G06F21/64 , H04L29/06
摘要： The secure element (100) has a secure processor (110) for securely processing the digital information stored in a memory (200) external to the secure element, and a loading and pre-processing system configured to load the digital information from the external memory (200) into the secure element (100), and pre-process said digital information by executing a cryptographic algorithm before processing said digital information by the secure processor (110). The system reads a version number of the digital information that has been loaded, from an internal memory (122) of the secure element (100), and uses said version number in executing the cryptographic algorithm.

8. 发明申请

WO2020115545A1 METHODS AND DEVICES FOR REMOTE INTEGRITY VERIFICATION 审中-公开
公开(公告)号：WO2020115545A1
公开(公告)日：2020-06-11
申请号：PCT/IB2019/001279
申请日：2019-11-29
申请人： NAGRAVISION S.A.
发明人： GREMAUD, Fabien
IPC分类号： H04L9/08 , H04W12/10 , G06F21/57 , H04W12/12
摘要： A computer-implemented method for use by a client device is provided. The client device comprises a memory and is configured to send data according to a cryptographic protocol that uses a key. The method comprises: generating a data unit and a seed related to the data unit; generating a measurement result of the client device related to the seed; generating an attestation key based on the measurement result and a key that is agreed in accordance with the cryptographic protocol; encrypting the data unit at least in part based on the attestation key; and generating an output comprising the encrypted data unit. Related methods for use by a server device and a network component, and related client device, server device and network component are also provided.

9. 发明申请

WO2020104361A1 METHOD OF MANAGING NETWORK ACCESS OF A DEVICE AND DEVICE 审中-公开
公开(公告)号：WO2020104361A1
公开(公告)日：2020-05-28
申请号：PCT/EP2019/081618
申请日：2019-11-18
申请人： NAGRAVISION S.A.
发明人： GREMAUD, Fabien , MELIA, Telemaco , THOMAS, Frederic
IPC分类号： H04L29/08 , H04W12/08 , H04W4/70
摘要： In overview, disclosed methods and devices enable managing of the network access of a device by the selection of a network access profile from a plurality of network access profiles stored on the device. In order to select a network access profile, a security state of the device is determined at the device. A local decision rule is then executed based on a security state and a network access profile is selected based on an outcome of the execution of the local decision rule.

10. 发明申请

WO2019129459A1 SECURE PROVISIONING OF KEYS 审中-公开
公开(公告)号：WO2019129459A1
公开(公告)日：2019-07-04
申请号：PCT/EP2018/083213
申请日：2018-11-30
申请人： NAGRAVISION S.A.
发明人： GREMAUD, Fabien , FISCHER, Nicolas , VILLEGAS, Karine , FISCHER, Jean-Bernard
IPC分类号： H04L9/32 , H04L9/00 , H04L9/08
CPC分类号： H04L9/3247 , H04L9/006 , H04L9/0825 , H04L9/3263 , H04L9/3268
摘要： Methods and devices in accordance with the disclosure relate to the secure provision of one or more keys or key pairs to protect secret data for, or associated, with a computing device. The device is typically a computing device with at least one processor or processing module configured for executing one or more applications using the secret data. The present disclosure ensures secure key provisioning by ensuring that each key in a key pair, or at least one key among a plurality of keys is associated with a device or hardware module that is distinct to the device(s) or hardware module associated with the other or remaining keys. For asymmetric key provisioning, this relates to utilizing digital signatures verified by separate devices. For symmetric key provisioning, this relates to utilizing a secret key derivation function that will operates with secret seeds that are input from two separate sources.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式