专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08055912B2 Method and system for bootstrapping a trusted server having redundant trusted platform modules 有权
标题翻译：用于引导具有冗余可信平台模块的可信服务器的方法和系统
公开(公告)号：US08055912B2
公开(公告)日：2011-11-08
申请号：US12621524
申请日：2009-11-19
申请人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
发明人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
IPC分类号： G06F11/30
CPC分类号： G06F21/575
摘要： Multiple trusted platform modules within a data processing system are used in a redundant manner that provides a reliable mechanism for securely storing secret data at rest that is used to bootstrap a system trusted platform module. A hypervisor requests each trusted platform module to encrypt a copy of the secret data, thereby generating multiple versions of encrypted secret data values, which are then stored within a non-volatile memory within the trusted platform. At some later point in time, the encrypted secret data values are retrieved, decrypted by the trusted platform module that performed the previous encryption, and then compared to each other. If any of the decrypted values do not match a quorum of values from the comparison operation, then a corresponding trusted platform module for a non-matching decrypted value is designated as defective because it has not been able to correctly decrypt a value that it previously encrypted.
摘要翻译：以冗余的方式使用数据处理系统内的多个可信任的平台模块，其提供用于安全地存储用于引导系统可信平台模块的休息处的秘密数据的可靠机制。管理程序请求每个可信平台模块加密秘密数据的副本，从而生成加密的秘密数据值的多个版本，然后存储在可信平台内的非易失性存储器中。在稍后的时间点，加密的秘密数据值由执行先前加密的可信任平台模块进行解密，然后进行比较。如果解密值中的任何一个与比较操作中的值的数量不匹配，则用于非匹配解密值的相应的可信平台模块被指定为有缺陷的，因为它不能正确解密之前加密的值。

2. 发明申请

US20100070781A1 METHOD AND SYSTEM FOR BOOTSTRAPPING A TRUSTED SERVER HAVING REDUNDANT TRUSTED PLATFORM MODULES 有权
标题翻译：用于引导具有冗余引导平台模块的有效服务器的方法和系统
公开(公告)号：US20100070781A1
公开(公告)日：2010-03-18
申请号：US12621524
申请日：2009-11-19
申请人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
发明人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
IPC分类号： G06F11/30
CPC分类号： G06F21/575
摘要： Multiple trusted platform modules within a data processing system are used in a redundant manner that provides a reliable mechanism for securely storing secret data at rest that is used to bootstrap a system trusted platform module. A hypervisor requests each trusted platform module to encrypt a copy of the secret data, thereby generating multiple versions of encrypted secret data values, which are then stored within a non-volatile memory within the trusted platform. At some later point in time, the encrypted secret data values are retrieved, decrypted by the trusted platform module that performed the previous encryption, and then compared to each other. If any of the decrypted values do not match a quorum of values from the comparison operation, then a corresponding trusted platform module for a non-matching decrypted value is designated as defective because it has not been able to correctly decrypt a value that it previously encrypted.
摘要翻译：以冗余的方式使用数据处理系统内的多个可信任的平台模块，其提供用于安全地存储用于引导系统可信平台模块的休息处的秘密数据的可靠机制。管理程序请求每个可信平台模块加密秘密数据的副本，从而生成加密的秘密数据值的多个版本，然后存储在可信平台内的非易失性存储器中。在稍后的时间点，加密的秘密数据值由执行先前加密的可信任平台模块进行解密，然后进行比较。如果解密值中的任何一个与比较操作中的值的数量不匹配，则用于非匹配解密值的相应的可信平台模块被指定为有缺陷的，因为它不能正确解密其先前加密的值。

3. 发明授权

US07664965B2 Method and system for bootstrapping a trusted server having redundant trusted platform modules 失效
标题翻译：用于引导具有冗余可信平台模块的可信服务器的方法和系统
公开(公告)号：US07664965B2
公开(公告)日：2010-02-16
申请号：US10835498
申请日：2004-04-29
申请人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
发明人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
IPC分类号： G06F11/30
CPC分类号： G06F21/575
摘要： Multiple trusted platform modules within a data processing system are used in a redundant manner that provides a reliable mechanism for securely storing secret data at rest that is used to bootstrap a system trusted platform module. A hypervisor requests each trusted platform module to encrypt a copy of the secret data, thereby generating multiple versions of encrypted secret data values, which are then stored within a non-volatile memory within the trusted platform. At some later point in time, the encrypted secret data values are retrieved, decrypted by the trusted platform module that performed the previous encryption, and then compared to each other. If any of the decrypted values do not match a quorum of values from the comparison operation, then a corresponding trusted platform module for a non-matching decrypted value is designated as defective because it has not been able to correctly decrypt a value that it previously encrypted.
摘要翻译：以冗余的方式使用数据处理系统内的多个可信任的平台模块，其提供用于安全地存储用于引导系统可信平台模块的休息处的秘密数据的可靠机制。管理程序请求每个可信平台模块加密秘密数据的副本，从而生成加密的秘密数据值的多个版本，然后存储在可信平台内的非易失性存储器中。在稍后的时间点，加密的秘密数据值由执行先前加密的可信任平台模块进行解密，然后进行比较。如果解密值中的任何一个与比较操作中的值的数量不匹配，则用于非匹配解密值的相应的可信平台模块被指定为有缺陷的，因为它不能正确解密其先前加密的值。

4. 发明授权

US08065522B2 Method and system for virtualization of trusted platform modules 有权
标题翻译：可信平台模块虚拟化的方法和系统
公开(公告)号：US08065522B2
公开(公告)日：2011-11-22
申请号：US12125871
申请日：2008-05-22
申请人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , Michael J. Kelly , William Lee Terrell
发明人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , Michael J. Kelly , William Lee Terrell
IPC分类号： H04L29/00 , H04L9/00
CPC分类号： G06F21/57 , G06F21/53 , H04L9/0897
摘要： A method, an apparatus, a system, and a computer program product is presented for virtualizing trusted platform modules within a data processing system. A virtual trusted platform module along with a virtual endorsement key is created within a physical trusted platform module within the data processing system using a platform signing key of the physical trusted platform module, thereby providing a transitive trust relationship between the virtual trusted platform module and the core root of trust for the trusted platform. The virtual trusted platform module can be uniquely associated with a partition in a partitionable runtime environment within the data processing system.
摘要翻译：提出了一种方法，装置，系统和计算机程序产品，用于虚拟化数据处理系统内的可信平台模块。使用物理可信平台模块的平台签名密钥在数据处理系统内的物理可信平台模块内创建虚拟可信平台模块以及虚拟认证密钥，从而在虚拟可信平台模块和虚拟可信平台模块之间提供传递信任关系信任平台的核心信任根源。虚拟可信平台模块可以与数据处理系统内的可分区运行时环境中的分区唯一关联。

5. 发明授权

US07380119B2 Method and system for virtualization of trusted platform modules 有权
标题翻译：可信平台模块虚拟化的方法和系统
公开(公告)号：US07380119B2
公开(公告)日：2008-05-27
申请号：US10835330
申请日：2004-04-29
申请人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , Michael J. Kelly , William Lee Terrell
发明人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , Michael J. Kelly , William Lee Terrell
IPC分类号： G06F1/24
CPC分类号： G06F21/57 , G06F21/53 , H04L9/0897
摘要： A method, an apparatus, a system, and a computer program product is presented for virtualizing trusted platform modules within a data processing system. A virtual trusted platform module along with a virtual endorsement key is created within a physical trusted platform module within the data processing system using a platform signing key of the physical trusted platform module, thereby providing a transitive trust relationship between the virtual trusted platform module and the core root of trust for the trusted platform. The virtual trusted platform module can be uniquely associated with a partition in a partitionable runtime environment within the data processing system.
摘要翻译：提出了一种方法，装置，系统和计算机程序产品，用于虚拟化数据处理系统内的可信平台模块。使用物理可信平台模块的平台签名密钥在数据处理系统内的物理可信平台模块内创建虚拟可信平台模块以及虚拟认证密钥，从而在虚拟可信平台模块和虚拟可信平台模块之间提供传递信任关系信任平台的核心信任根源。虚拟可信平台模块可以与数据处理系统内的可分区运行时环境中的分区唯一关联。

6. 发明申请

US20090327700A1 METHOD AND SYSTEM FOR VIRTUALIZATION OF TRUSTED PLATFORM MODULES 有权
标题翻译：信号平台模块虚拟化的方法和系统
公开(公告)号：US20090327700A1
公开(公告)日：2009-12-31
申请号：US12125871
申请日：2008-05-22
申请人： Steven A. Blade , Linda Nancy Betz , Andrew Gregory Kegel , Michael J. Kelly , William Lee Terrell
发明人： Steven A. Blade , Linda Nancy Betz , Andrew Gregory Kegel , Michael J. Kelly , William Lee Terrell
IPC分类号： G06F1/24
CPC分类号： G06F21/57 , G06F21/53 , H04L9/0897
摘要： A method, an apparatus, a system, and a computer program product is presented for virtualizing trusted platform modules within a data processing system. A virtual trusted platform module along with a virtual endorsement key is created within a physical trusted platform module within the data processing system using a platform signing key of the physical trusted platform module, thereby providing a transitive trust relationship between the virtual trusted platform module and the core root of trust for the trusted platform. The virtual trusted platform module can be uniquely associated with a partition in a partitionable runtime environment within the data processing system.
摘要翻译：提出了一种方法，装置，系统和计算机程序产品，用于虚拟化数据处理系统内的可信平台模块。使用物理可信平台模块的平台签名密钥在数据处理系统内的物理可信平台模块内创建虚拟可信平台模块以及虚拟认证密钥，从而在虚拟可信平台模块和虚拟可信平台模块之间提供传递信任关系信任平台的核心信任根源。虚拟可信平台模块可以与数据处理系统内的可分区运行时环境中的分区唯一关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式