专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20150007262A1 SECURE EXECUTION AND UPDATE OF APPLICATION MODULE CODE 有权
标题翻译：应用模块代码的安全执行和更新
公开(公告)号：US20150007262A1
公开(公告)日：2015-01-01
申请号：US14318070
申请日：2014-06-27
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： H04L29/06
CPC分类号： H04L63/0428 , G06F7/58 , G06F21/60 , G06F21/602 , H04L9/0866 , H04L9/0869 , H04L9/3278 , H04L63/08 , H04L63/123 , H04L2209/56 , H04W12/04
摘要： A dynamic root of trust can be injected in an application module on a client device using a backend server and can be continuously monitored to ensure authenticity, integrity and confidentiality at load time, run time and update time of the application module. The dynamic root of trust can be updated directly from the backend server and can be used to establish a time bound trust chain for the other software modules loaded and executed as part of the application module.
摘要翻译：信任的动态根源可以使用后端服务器注入到客户端设备上的应用程序模块中，并可以连续监视，以确保在加载时间，运行时间和应用程序模块的更新时间的真实性，完整性和机密性。可以直接从后端服务器更新信任的动态根，并且可以用于为作为应用程序模块的一部分加载和执行的其他软件模块建立时间限制的信任链。

2. 发明申请

US20190188394A1 SECURITY ENGINE FOR A SECURE OPERATING ENVIRONMENT 审中-公开
公开(公告)号：US20190188394A1
公开(公告)日：2019-06-20
申请号：US16269829
申请日：2019-02-07
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： G06F21/60 , G06F21/62 , G06F21/53 , G06F21/57
CPC分类号： G06F21/604 , G06F21/53 , G06F21/57 , G06F21/6218 , G06F2221/2113
摘要： The presenting invention relates to techniques for implementing a secure operating environment for the execution of applications on a computing devices (e.g., a mobile phone). In The secure operating environment may provide a trusted environment with dedicated computing resources to manage security and integrity of processing and data for the applications. The applications may be provided with a variety of security services and/or functions to meet different levels of security demanded by an application. The secure operating environment may include a security engine that enumerates and/or determines the security capabilities of the secure operating environment and the computing device, e.g., the hardware, the software, and/or the firmware of the computing device. The security engine may provide security services desired by applications by choosing from the security capabilities that are supported by the secure operating environment and the computing device.

3. 发明申请

US20180107828A1 METHOD AND SYSTEM FOR UTILIZING SECURE PROFILES IN EVENT DETECTION 审中-公开
公开(公告)号：US20180107828A1
公开(公告)日：2018-04-19
申请号：US15828042
申请日：2017-11-30
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： G06F21/60 , G06F21/62 , G06F21/53 , G06F21/57
CPC分类号： G06F21/604 , G06F21/53 , G06F21/57 , G06F21/6218 , G06F2221/2113
摘要： The presenting invention relates to techniques for implementing a secure operating environment for the execution of applications on a computing devices (e.g., a mobile phone). In The secure operating environment may provide a trusted environment with dedicated computing resources to manage security and integrity of processing and data for the applications. The applications may be provided with a variety of security services and/or functions to meet different levels of security demanded by an application. The secure operating environment may include a security engine that enumerates and/or determines the security capabilities of the secure operating environment and the computing device, e.g., the hardware, the software, and/or the firmware of the computing device. The security engine may provide security services desired by applications by choosing from the security capabilities that are supported by the secure operating environment and the computing device.

4. 发明申请

US20160335441A1 SECURITY ENGINE FOR A SECURE OPERATING ENVIRONMENT 审中-公开
标题翻译：安全运行环境安全发动机
公开(公告)号：US20160335441A1
公开(公告)日：2016-11-17
申请号：US15220290
申请日：2016-07-26
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： G06F21/60 , G06F21/62
CPC分类号： G06F21/604 , G06F21/53 , G06F21/57 , G06F21/6218 , G06F2221/2113
摘要： The presenting invention relates to techniques for implementing a secure operating environment for the execution of applications on a computing devices (e.g., a mobile phone). In The secure operating environment may provide a trusted environment with dedicated computing resources to manage security and integrity of processing and data for the applications. The applications may be provided with a variety of security services and/or functions to meet different levels of security demanded by an application. The secure operating environment may include a security engine that enumerates and/or determines the security capabilities of the secure operating environment and the computing device, e.g., the hardware, the software, and/or the firmware of the computing device. The security engine may provide security services desired by applications by choosing from the security capabilities that are supported by the secure operating environment and the computing device.
摘要翻译：本发明涉及用于实现用于在计算设备（例如，移动电话）上执行应用的安全操作环境的技术。在安全的操作环境中，可以为受信任的环境提供专用的计算资源来管理应用程序的处理和数据的安全性和完整性。应用可以被提供有各种安全服务和/或功能以满足应用所要求的不同级别的安全性。安全操作环境可以包括枚举和/或确定安全操作环境和计算设备（例如计算设备的硬件，软件和/或固件）的安全能力的安全引擎。安全引擎可以通过从由安全操作环境和计算设备支持的安全功能中进行选择来提供应用所期望的安全服务。

5. 发明申请

US20150007265A1 SECURE DATA TRANSMISSION AND VERIFICATION WITH UNTRUSTED COMPUTING DEVICES 有权
标题翻译：安全的数据传输和验证与非处理的计算设备
公开(公告)号：US20150007265A1
公开(公告)日：2015-01-01
申请号：US14318266
申请日：2014-06-27
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： G06F21/60 , H04L29/06
CPC分类号： H04L63/0428 , G06F7/58 , G06F21/60 , G06F21/602 , H04L9/0866 , H04L9/0869 , H04L9/3278 , H04L63/08 , H04L63/123 , H04L2209/56 , H04W12/04
摘要： Techniques from the proposed invention relate to providing enhanced security. For example, techniques described herein allow a computer system, such as a mobile device, to support a wide variety of security functions and security sensitive applications on a mobile device by providing enhanced security via secure input and output data transmission and verification through a secure module. The secure module may cause user interfaces to be provided to users by providing obfuscated user interface data to the operating system that do not reveal elements that are part of the user interfaces. The secure module may receive obfuscated user input values representing user input values, and de-obfuscate these user input values, whereby the actual input values are not exposed to the underlying operating system. The secure module may track the flow of user input/output data through the computing device to ensure the integrity and authenticity of this data.
摘要翻译：来自所提出的发明的技术涉及提供增强的安全性。例如，本文描述的技术允许诸如移动设备的计算机系统通过经由安全输入和输出数据传输和验证通过安全模块提供增强的安全性来支持移动设备上的各种安全功能和安全敏感应用。安全模块可以通过向操作系统提供模糊的用户界面数据而不向用户提供不显示作为用户界面的元素的用户界面。安全模块可以接收表示用户输入值的混淆的用户输入值，并且对这些用户输入值进行去模糊化，由此实际输入值不暴露给底层操作系统。安全模块可以通过计算设备跟踪用户输入/输出数据的流程，以确保该数据的完整性和真实性。

6. 发明申请

US20150006601A1 RANDOM NUMBER GENERATOR IN A VIRTUALIZED ENVIRONMENT 有权
标题翻译：虚拟环境中的随机数发生器
公开(公告)号：US20150006601A1
公开(公告)日：2015-01-01
申请号：US14318046
申请日：2014-06-27
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： G06F7/58 , H04L9/08
CPC分类号： H04L63/0428 , G06F7/58 , G06F21/60 , G06F21/602 , H04L9/0866 , H04L9/0869 , H04L9/3278 , H04L63/08 , H04L63/123 , H04L2209/56 , H04W12/04
摘要： Techniques are described for generating high quality entropy in a software only or a hardware assisted software environment, such as a virtualized environment. Embodiments of the invention describe creating an entropy pool within the virtualized environment using multiple sources of entropy. The entropy pool may be used in creating dynamically customizable and high entropy RNG and PUF. The sources of entropy may include trusted sources, untrusted sources and entropy sources with a varied scale of trust and entropy quality associated with them.
摘要翻译：描述了用于仅在软件中产生高质量熵的技术或者诸如虚拟化环境的硬件辅助软件环境。本发明的实施例描述了使用多个熵源在虚拟环境中创建熵池。熵池可用于创建动态可定制和高熵RNG和PUF。熵的来源可能包括信任来源，不可信源和熵源，其信任度和熵质量与之相关。

7. 发明申请

US20170063809A1 SECURE DATA TRANSMISSION AND VERIFICATION WITH UNTRUSTED COMPUTING DEVICES 审中-公开
标题翻译：安全的数据传输和验证与非处理的计算设备
公开(公告)号：US20170063809A1
公开(公告)日：2017-03-02
申请号：US15291926
申请日：2016-10-12
申请人： Selim Aissi , Taeho Kgil , Gyan Prakash
发明人： Selim Aissi , Taeho Kgil , Gyan Prakash
IPC分类号： H04L29/06 , G06F21/60
CPC分类号： H04L63/0428 , G06F7/58 , G06F21/60 , G06F21/602 , H04L9/0866 , H04L9/0869 , H04L9/3278 , H04L63/08 , H04L63/123 , H04L2209/56 , H04W12/04
摘要： Techniques from the proposed invention relate to providing enhanced security. For example, techniques described herein allow a computer system, such as a mobile device, to support a wide variety of security functions and security sensitive applications on a mobile device by providing enhanced security via secure input and output data transmission and verification through a secure module. The secure module may cause user interfaces to be provided to users by providing obfuscated user interface data to the operating system that do not reveal elements that are part of the user interfaces. The secure module may receive obfuscated user input values representing user input values, and de-obfuscate these user input values, whereby the actual input values are not exposed to the underlying operating system. The secure module may track the flow of user input/output data through the computing device to ensure the integrity and authenticity of this data.
摘要翻译：来自所提出的发明的技术涉及提供增强的安全性。例如，本文描述的技术允许诸如移动设备的计算机系统通过经由安全输入和输出数据传输和验证通过安全模块提供增强的安全性来支持移动设备上的各种安全功能和安全敏感应用。安全模块可以通过向操作系统提供模糊的用户界面数据而不向用户提供不显示作为用户界面的元素的用户界面。安全模块可以接收表示用户输入值的混淆的用户输入值，并且对这些用户输入值进行去模糊化，由此实际输入值不暴露给底层操作系统。安全模块可以通过计算设备跟踪用户输入/输出数据的流程，以确保该数据的完整性和真实性。

8. 发明申请

US20170177694A1 SYSTEM AND METHOD FOR MAINTAINING DEVICE STATE COHERENCY 有权
公开(公告)号：US20170177694A1
公开(公告)日：2017-06-22
申请号：US15455003
申请日：2017-03-09
申请人： Selim Aissi , Taeho Kgil
发明人： Selim Aissi , Taeho Kgil
IPC分类号： G06F17/30 , G06F21/60 , G06F21/62 , G06F11/14
CPC分类号： G06F17/30578 , G06F11/1461 , G06F11/1464 , G06F17/30082 , G06F17/30117 , G06F17/30368 , G06F17/30575 , G06F21/602 , G06F21/6209 , G06F2201/80 , G06F2201/82 , G06Q20/3223 , G06Q20/36 , G06Q50/01
摘要： Embodiments of the invention are directed to systems and methods for maintaining coherency between different entities in a distributed system. A coherency module automatically detects a change in state in a first entity, wherein the change in state relates to a change in functional code in the first entity. A synchronization message is transmitted to a second entity to synchronize data in the second entity with data in the first entity as a result of the change in state, The second entity is configured to synchronize the data in the second entity with the data in the first entity after receiving the synchronization message.

9. 发明申请

US20180352005A1 DATA SENSITIVITY BASED AUTHENTICATION AND AUTHORIZATION 审中-公开
公开(公告)号：US20180352005A1
公开(公告)日：2018-12-06
申请号：US16040340
申请日：2018-07-19
申请人： Ajit Gaddam , Selim Aissi , Taeho Kgil
发明人： Ajit Gaddam , Selim Aissi , Taeho Kgil
IPC分类号： H04L29/06
摘要： Systems, devices, apparatuses, and methods of the present invention distribute authentication across multiple users. A data sensitivity model can define the sensitivity of different types of data. When an application requests access to a particular data item, the sensitivity of that data item can be determined. If the data item has a low sensitivity, access to the data item can be granted, if the data item has a high sensitivity, the system can request authentication before granting access to-the data item.

10. 发明申请

US20140372754A1 IMAGE BASED KEY DERIVATION FUNCTION 有权
标题翻译：基于图像的主要衍生功能
公开(公告)号：US20140372754A1
公开(公告)日：2014-12-18
申请号：US14304488
申请日：2014-06-13
申请人： Selim Aissi , Taeho Kgil , Ajit Gaddam
发明人： Selim Aissi , Taeho Kgil , Ajit Gaddam
IPC分类号： H04L29/06
CPC分类号： H04L63/083 , G06F21/36 , G06F2221/2107 , G09C5/00 , H04L9/0861 , H04L63/0428 , H04L63/06 , H04L63/08 , H04L2463/061 , H04L2463/062
摘要： Embodiments of the invention relate to methods of generating and using an image-based derived key. In various embodiments, the image-based derived key may be used to facilitate user authentication and data encryption. For some embodiments, a method is disclosed comprising determining an image-based derived key, wherein the image-based derived key is generated from a selection of authentication images chosen by a user, encrypting data using the image-based derived key, and transmitting the encrypted data.
摘要翻译：本发明的实施例涉及生成和使用基于图像的导出密钥的方法。在各种实施例中，基于图像的导出密钥可以用于促进用户认证和数据加密。对于一些实施例，公开了一种方法，其包括确定基于图像的导出密钥，其中基于图像的导出密钥是从用户选择的认证图像的选择生成的，使用基于图像的派生密钥对数据进行加密，以及发送加密数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式