专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20130212575A1 INFORMATION PROCESSOR AND METHOD FOR CONTROLLING THE SAME 有权
标题翻译：信息处理器及其控制方法
公开(公告)号：US20130212575A1
公开(公告)日：2013-08-15
申请号：US12918918
申请日：2009-02-09
申请人： Takayuki Ito , Manabu Maeda , Tomoyuki Haga , Hisashi Takayama , Hideki Matsushima
发明人： Takayuki Ito , Manabu Maeda , Tomoyuki Haga , Hisashi Takayama , Hideki Matsushima
IPC分类号： G06F9/455
CPC分类号： G06F9/45533 , G06F12/1475 , G06F12/1491 , G06F21/00 , G06F21/30 , G06F21/53
摘要： It is an object of the present invention to provide an information processing device that verifies the authorization of an application that has issued an access request to access a device. For the present invention to fulfill the above object, when an application 102 on a universal OS issues a processing request to a secure device driver 105, a secure VMM 100 and an application identification unit 106 on a management dedicated OS 104 lock a page table of the application 102 and refer to the page table to generate a hash value. The application is determined to be authorized or unauthorized by comparing the generated hash value with a reference hash value.
摘要翻译：本发明的目的是提供一种信息处理设备，其验证已经发出访问设备的访问请求的应用的授权。为了实现上述目的，为了实现上述目的，当通用OS上的应用102向安全设备驱动器105发出处理请求时，管理专用OS 104上的安全VMM100和应用识别单元106锁定应用程序102并参考页表来生成哈希值。通过将生成的散列值与引用散列值进行比较，确定应用程序被授权或未授权。

2. 发明授权

US08489873B2 Migration apparatus, method and system for transferring data protected within a first terminal device to a second terminal device 有权
标题翻译：用于将在第一终端设备中保护的数据传送到第二终端设备的移动设备，方法和系统
公开(公告)号：US08489873B2
公开(公告)日：2013-07-16
申请号：US12865894
申请日：2009-02-23
申请人： Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Yuichi Futa , Taichi Sato
发明人： Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Yuichi Futa , Taichi Sato
IPC分类号： H04L29/06
CPC分类号： G06F21/10 , G06F9/45558 , G06F21/57 , G06F2009/45587 , G06F2221/0782 , G06F2221/2137 , G06F2221/2145 , H04L9/14 , H04L9/3234 , H04L9/3247 , H04L9/3263 , H04L2209/127 , H04L2209/603
摘要： The present invention provides a migration apparatus that realizes safe migration of secret data between a first terminal device and a second terminal device. Before transmitting the secret data to the second terminal device, the migration apparatus (i) receives, from the first terminal device, a minimum evaluation level required of a destination of the secret data by the first terminal device, (ii) receives, from the second terminal device, an evaluation level of the second terminal device, (iii) judges whether the evaluation level of the second terminal device is lower than the minimum evaluation level, and (iv) sends the secret data to the second terminal device only if the evaluation level of the second terminal device is no lower than the minimum evaluation level.
摘要翻译：本发明提供一种迁移装置，其实现了第一终端装置与第二终端装置之间的秘密数据的安全迁移。在将秘密数据发送到第二终端装置之前，迁移装置（i）从第一终端装置接收第一终端装置对秘密数据的目的地所需的最小评价等级，（ii）从第二终端设备，第二终端设备的评估级别，（iii）判断第二终端设备的评估级别是否低于最小评估级别，以及（iv）仅在第二终端设备第二终端装置的评价等级不低于最低评价等级。

3. 发明申请

US20110173643A1 USING TRANSIENT PCRs TO REALISE TRUST IN APPLICATION SPACE OF A SECURE PROCESSING SYSTEM 审中-公开
标题翻译：使用瞬态PCR在安全处理系统的应用空间中实现信任
公开(公告)号：US20110173643A1
公开(公告)日：2011-07-14
申请号：US13063103
申请日：2009-10-09
申请人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga
发明人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga
IPC分类号： G06F9/44
CPC分类号： G06F21/575 , G06F2221/2145
摘要： A method to allow programs running within the application space of a device with a secure processor and a trusted computing base to flexibly use certificates that describe the required system state. An information processing device including PSC database (1112), Component and PSC Map (1202), and OS support (1200).
摘要翻译：允许具有安全处理器和可信计算基础的设备的应用空间内运行的程序灵活地使用描述所需系统状态的证书的方法。一种包括PSC数据库（1112），组件和PSC映射（1202）和OS支持（1200）的信息处理设备。

4. 发明授权

US08555049B2 Secure boot terminal, secure boot method, secure boot program, recording medium, and integrated circuit 有权
标题翻译：安全引导终端，安全引导方法，安全引导程序，记录介质和集成电路
公开(公告)号：US08555049B2
公开(公告)日：2013-10-08
申请号：US12676960
申请日：2008-09-30
申请人： Hisashi Takayama , Hideki Matsushima , Takayuki Ito , Tomoyuki Haga , Kenneth Alexander Nicolson
发明人： Hisashi Takayama , Hideki Matsushima , Takayuki Ito , Tomoyuki Haga , Kenneth Alexander Nicolson
IPC分类号： G06F15/177
CPC分类号： G06F21/575
摘要： A terminal that performs secure boot processing when booting, thereby booting reliably even if, during updating of a software module, the power is cut off or the update is otherwise interrupted. The terminal comprises a CPU, a software module storage unit, a certificate storage unit, an updating unit for updating the software module and certificate, a security device provided with a configuration information storage unit for storing the configuration information of the software module, an alternate configuration information storage unit for storing the configuration information of a software module in the configuration before the update, and a boot control unit for verifying and executing the software module by using the certificate. The terminal verifies the certificate of the software module by comparing the configuration information stored by the configuration information storage unit with the configuration information stored by the alternate configuration information storage unit.
摘要翻译：在启动时执行安全引导处理的终端，即使在更新软件模块期间断电或更新被中断的情况下也可以可靠地引导。终端包括CPU，软件模块存储单元，证书存储单元，用于更新软件模块和证书的更新单元，设置有用于存储软件模块的配置信息的配置信息存储单元的安全设备，配置信息存储单元，用于存储在更新之前的配置中的软件模块的配置信息;以及引导控制单元，用于通过使用证书来验证和执行软件模块。终端通过将由配置信息存储单元存储的配置信息与备用配置信息存储单元存储的配置信息进行比较来验证软件模块的证书。

5. 发明授权

US08464043B2 Information security device and information security system 有权
标题翻译：信息安全设备和信息安全系统
公开(公告)号：US08464043B2
公开(公告)日：2013-06-11
申请号：US12666375
申请日：2008-06-23
申请人： Hideki Matsushima , Yuichi Futa , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Taichi Sato
发明人： Hideki Matsushima , Yuichi Futa , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Taichi Sato
IPC分类号： H04L29/06
CPC分类号： H04L9/0836 , G06F21/62 , G06F21/6236 , G06F2221/2107 , G06F2221/2113 , G06F2221/2115 , H04L9/088 , H04L9/0897 , H04L9/14 , H04L2209/603 , H04N7/165 , H04N7/1675 , H04N21/2541 , H04N21/26613 , H04N21/4788 , H04N21/835 , H04N21/8355
摘要： Provided is a migration system considering security authentication levels and data protection strength levels of the both security devices between which data is migrated. A first terminal includes a mechanism for protecting data by a private key in the public key method held by TPM, and a second terminal includes a key in the private key method encrypted by the private key in the public key method held by TPM and a mechanism for protecting the data by the key. A Migration Authority holds a security policy table describing a security policy and judges whether data movement from the first terminal to the second terminal is enabled according to the security policy table.
摘要翻译：提供了考虑安全认证级别和迁移数据的两个安全设备的数据保护强度级别的迁移系统。第一终端包括用TPM保存的公钥方法中的私钥保护数据的机制，第二终端包括由TPM持有的公钥方法中的由私钥加密的私钥方法中的密钥，以及机制用于通过密钥保护数据。迁移管理局持有描述安全策略的安全策略表，并根据安全策略表判断是否启用从第一终端到第二终端的数据移动。

6. 发明授权

US08223972B2 Method and device for speeding up key use in key management software with tree structure 有权
标题翻译：用于树结构的密钥管理软件中加密密钥使用的方法和装置
公开(公告)号：US08223972B2
公开(公告)日：2012-07-17
申请号：US12146255
申请日：2008-06-25
申请人： Takayuki Ito , Hideki Matsushima , Hisashi Takayama , Tomoyuki Haga , Yuichi Futa , Manabu Maeda
发明人： Takayuki Ito , Hideki Matsushima , Hisashi Takayama , Tomoyuki Haga , Yuichi Futa , Manabu Maeda
IPC分类号： H04L9/00
CPC分类号： H04L9/0836 , H04L9/088
摘要： In the key management software having a key database with a tree structure, a high-speed data encryption/decryption process is achieved by changing the tree structure without reducing the security strength when deleting or adding a key from/to the tree structure. The key management software having the key database with the tree structure, when deleting or adding a key from/to the tree structure, refers to the encryption strength comparison table and the process time comparison table to change the tree structure without reducing the security strength. This reduces the number of times an encrypted key is loaded onto the encryption/decryption processing device during the data encryption/decryption process, thus achieving a high-speed data encryption/decryption.
摘要翻译：在具有树结构的密钥数据库的密钥管理软件中，通过在从树结构中删除或添加密钥时改变树结构而不降低安全强度来实现高速数据加密/解密处理。具有树结构的密钥数据库的密钥管理软件在从树结构中删除或添加密钥时，参考加密强度比较表和处理时间比较表来改变树结构而不降低安全强度。这减少了在数据加密/解密处理期间将加密密钥加载到加密/解密处理设备上的次数，从而实现高速数据加密/解密。

7. 发明申请

US20120102313A1 SECURE BOOT METHOD AND SECURE BOOT APPARATUS 有权
标题翻译：安全引导方法和安全引导装置
公开(公告)号：US20120102313A1
公开(公告)日：2012-04-26
申请号：US13375047
申请日：2010-07-01
申请人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Manabu Maeda
发明人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Manabu Maeda
IPC分类号： G06F21/00
CPC分类号： G06F21/575 , H04L9/3236 , H04L63/123 , H04W12/10
摘要： A method to allow a device to boot in a secure fashion, even though some of the components within the secure device's firmware may be not present, not authorised, or not correctly operating.
摘要翻译：即使安全设备的固件中的某些组件可能不存在，未被授权或不正确地操作，允许设备以安全方式引导的方法。

8. 发明申请

US20110081017A1 KEY MIGRATION DEVICE 审中-公开
标题翻译：主要移动设备
公开(公告)号：US20110081017A1
公开(公告)日：2011-04-07
申请号：US12993931
申请日：2009-05-25
申请人： Hideki Matsushima , Hisashi Takayama , Yuichi Futa , Takayuki Ito , Tomoyuki Haga
发明人： Hideki Matsushima , Hisashi Takayama , Yuichi Futa , Takayuki Ito , Tomoyuki Haga
IPC分类号： H04L9/00
CPC分类号： H04L9/0836 , H04L9/088
摘要： Provided is a key migration device which can securely and reliably control the migration of keys. A migration authority (101) fetches a generation level which is the security level of a first electronic terminal (3011) and an output destination level which is the security level of a third electronic terminal (3013), decides whether the relationship between the generation level and the output destination level satisfies a predetermined condition when a request for fetching a collection of keys is received from the third electronic terminal (3013), outputs the key generated by the first electronic terminal (3011) among the collection of keys to the third electronic terminal (3013) if the predetermined condition is fulfilled, and restricts output to the third electronic terminal (3013) of the key generated by the first electronic terminal (3011) among the collection of keys if the predetermined condition is not fulfilled.
摘要翻译：提供了一种可以安全可靠地控制密钥迁移的密钥迁移设备。移动机构（101）取出作为第一电子终端（3011）的安全级别的生成级别和作为第三电子终端（3013）的安全级别的输出目的地级别，决定生成级别并且当从第三电子终端（3013）接收到提取密钥集合的请求时，输出目的地级别满足预定条件，将由第一电子终端（3011）生成的密钥输出到第三电子邮件集合如果满足预定条件，并且如果不满足预定条件，则在密钥集合中限制由第一电子终端（3011）生成的密钥的输出到第三电子终端（3013）的终端（3013）。

9. 发明申请

US20110072266A1 INFORMATION PROCESSING DEVICE, AUTHENTICATION SYSTEM, AUTHENTICATION DEVICE, INFORMATION PROCESSING METHOD, INFORMATION PROCESSING PROGRAM, RECORDING MEDIUM, AND INTEGRATED CIRCUIT 有权
标题翻译：信息处理设备，认证系统，认证设备，信息处理方法，信息处理程序，记录介质和集成电路
公开(公告)号：US20110072266A1
公开(公告)日：2011-03-24
申请号：US12992699
申请日：2009-10-09
申请人： Hisashi Takayama , Hideki Matsushima , Takayuki Ito , Tomoyuki Haga , Kenneth Alexander Nicolson
发明人： Hisashi Takayama , Hideki Matsushima , Takayuki Ito , Tomoyuki Haga , Kenneth Alexander Nicolson
IPC分类号： G06F21/22
CPC分类号： H04L9/3247 , G06F21/445 , G06F2221/2129 , H04L9/3263 , H04L2209/60 , H04L2209/68 , H04L2209/80
摘要： The present invention provides an information processing device, an authentication system, etc. that save a server the trouble of updating a database, etc., even when a software module in a client device is updated, and that are capable of verifying whether software modules that have been started in the client device are valid. The terminal device A100 holds private keys 1 and 2, and performs authentication processing with the terminal device B101 using the private key 2. The private key 1 has been encrypted such that the private key 1 is decryptable only when secure boot is completed. The private key 2 has been encrypted such that the private key 2 is decryptable using the private key 1 only when the application module X that has been started is valid. When the authentication processing is successful, the terminal device B101 verifies that the terminal device A100 has completed secure boot and the application module X that has been started in the terminal device A100 is valid. Also, the terminal device B101 performs the authentication processing using the same private key 2, regardless of whether a program pertaining to the secure boot of the terminal device A100 is updated or not.
摘要翻译：本发明提供一种信息处理装置，认证系统等，其即使在客户端装置中的软件模块被更新时也能够保存服务器更新数据库等的故障，并且能够验证软件模块已经在客户端设备中启动的是有效的。终端装置A100保持私有密钥1和2，并使用专用密钥2对终端装置B101进行认证处理。专用密钥1已被加密，使得专用密钥1仅在安全引导完成时被解密。专用密钥2已经被加密，使得仅当已经启动的应用模块X有效时，私钥2可以使用专用密钥1被解密。当认证处理成功时，终端装置B101验证终端装置A100是否已经完成安全引导，并且已经在终端装置A100中启动的应用模块X有效。此外，终端装置B101使用相同的私钥2执行认证处理，而不管终端装置A100的安全引导有关的程序是否被更新。

10. 发明申请

US20090320110A1 SECURE BOOT WITH OPTIONAL COMPONENTS METHOD 有权
标题翻译：安全启动与可选组件方法
公开(公告)号：US20090320110A1
公开(公告)日：2009-12-24
申请号：US12484537
申请日：2009-06-15
申请人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Manabu Maeda
发明人： Kenneth Alexander Nicolson , Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Manabu Maeda
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： G06F21/57 , H04L9/3268 , H04L2209/80
摘要： A method is executed which is for managing the optional trusted components that are active within a device, such that the device itself controls the availability of trusted components. The device includes: a storing unit which stores a plurality of pieces of software and a plurality of certificates; a receiving unit which receives the certificates; and a selecting unit which selects one of the certificates. The device further includes an executing unit which verifies an enabled one of the plurality of pieces of software using the selected and updated one of the certificates.
摘要翻译：执行用于管理在设备内活动的可选可信组件的方法，使得设备本身控制可信组件的可用性。该装置包括：存储单元，存储多个软件和多个证书; 接收证书的接收单元; 以及选择单元，其选择证书之一。该设备还包括执行单元，其使用所选择和更新的一个证书来验证多个软件中启用的一个软件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式