专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07730318B2 Integration of high-assurance features into an application through application factoring 有权
标题翻译：通过应用程序保理将高保证功能集成到应用程序中
公开(公告)号：US07730318B2
公开(公告)日：2010-06-01
申请号：US10693749
申请日：2003-10-24
申请人： Thekkthalackal Varugis Kurien , Kenneth D. Ray , Marcus Peinado , Paul England
发明人： Thekkthalackal Varugis Kurien , Kenneth D. Ray , Marcus Peinado , Paul England
IPC分类号： H04L9/32
CPC分类号： G06F21/53
摘要： Application factoring or partitioning is used to integrate secure features into a conventional application. An application's functionality is partitioned into two sets according to whether a given action does, or does not, involve the handling of sensitive data. Separate software objects (processors) are created to perform these two sets of actions. A trusted processor handles secure data and runs in a high-assurance environment. When another processor encounters secure data, that data is sent to the trusted processor. The data is wrapped in such a way that allows it to be routed to the trusted processor, and prevents the data from being deciphered by any entity other than the trusted processor. An infrastructure is provided that wraps objects, routes them to the correct processor, and allows their integrity to be attested through a chain of trust leading back to base component that is known to be trustworthy.
摘要翻译：应用因子分解或分区用于将安全特征集成到常规应用中。应用程序的功能根据给定操作是否涉及敏感数据的处理而分为两组。创建独立的软件对象（处理器）来执行这两组操作。值得信赖的处理器处理安全数据并在高保证环境中运行。当另一个处理器遇到安全数据时，该数据被发送到可信处理器。以允许将数据路由到可信处理器的方式包装数据，并且防止数据被除可信处理器之外的任何实体解密。提供了一个基础设施，用于包装对象，将它们路由到正确的处理器，并通过一系列信任来验证其完整性，并将其引导回已知可靠的基础组件。

2. 发明授权

US07493429B2 Communication of information via a side-band channel, and use of same to verify positional relationship 失效
标题翻译：通过边带通道进行信息通信，并使用它来验证位置关系
公开(公告)号：US07493429B2
公开(公告)日：2009-02-17
申请号：US10759325
申请日：2004-01-16
申请人： John E. Paff , Marcus Peinado , Thekkthalackal Varugis Kurien , Bryan Mark Willman , Paul England , Andrew John Thornton
发明人： John E. Paff , Marcus Peinado , Thekkthalackal Varugis Kurien , Bryan Mark Willman , Paul England , Andrew John Thornton
IPC分类号： G06F13/12 , G06F13/38
CPC分类号： G06F21/606 , G06F21/85
摘要： The present invention provides for trusted side-band communications between components in a computer system, so that use of the system bus may be avoided. Two components may be connected by means other than a bus (e.g., an infrared port, a wire, an unused pin, etc.), whereby these components may communicate without the use of the system bus. The non-bus communication channel may be referred to as “side-band.” The side-band channel may be used to communicate information that might identify the user's hardware (e.g., a public key) or other information that the user may not want to be easily intercepted by the public at large. Communication over the side-band channel may also be used to verify that the participants in a communication are within a defined positional relationship to each other.
摘要翻译：本发明提供计算机系统中的组件之间的可靠的边带通信，从而可以避免使用系统总线。两个组件可以通过除总线（例如，红外线端口，电线，未使用的引脚等）之外的方式连接，由此这些组件可以在不使用系统总线的情况下进行通信。非总线通信信道可以被称为“边带”。边带频道可以用于传达可能识别用户硬件（例如，公共密钥）的信息或用户可能不希望容易被公众容易地截获的其他信息。通过边带信道的通信也可以用于验证通信中的参与者在彼此之间的定义的位置关系内。

3. 发明授权

US07457964B2 Trusted path for transmitting content thereon 有权
标题翻译：用于在其上传送内容的可信路径
公开(公告)号：US07457964B2
公开(公告)日：2008-11-25
申请号：US10771888
申请日：2004-02-04
申请人： Andrew John Thornton , John E. Paff , Marcus Peinado , Thekkthalackal Varugis Kurien
发明人： Andrew John Thornton , John E. Paff , Marcus Peinado , Thekkthalackal Varugis Kurien
IPC分类号： H04K1/00 , H04L9/00
CPC分类号： G06F21/10 , G06F21/606 , G06F2221/2129
摘要： A method is provided for a processor of a computing device to obtain a trusted identification of a hardware peripheral of the computing device, for the computing device and the peripheral to derive a set of shared keys, and for the processor to send trusted data to the peripheral.
摘要翻译：提供了一种用于计算设备的处理器以获得计算设备的硬件外围设备的可信标识的方法，用于计算设备和外围设备以导出一组共享密钥，并且为了使处理器将可信数据发送到外围设备

4. 发明申请

US20090313397A1 Methods and Systems for Protecting Data in USB Systems 审中-公开
标题翻译： USB系统数据保护方法与系统
公开(公告)号：US20090313397A1
公开(公告)日：2009-12-17
申请号：US12348487
申请日：2009-01-05
申请人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
发明人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
IPC分类号： G06F13/28
CPC分类号： G06F12/1408 , G06F3/065 , G06F13/28 , G06F13/362 , G06F13/4282 , G06F21/606 , G06F21/72 , G06F21/73 , G06F21/78 , G06F21/85 , G06F2212/1052 , G06F2221/0704 , G06F2221/2105 , G06F2221/2129 , G06F2221/2147 , G06F2221/2153
摘要： The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.
摘要翻译：下面描述的各种实施例旨在从在USB总线上操作的I / O设备到主机（例如安全软件应用或安全内核）上执行的软件提供经认证和保密的消息传递。这些实施例可以防止在主计算机上执行的软件所征收的攻击。在一些实施例中，提供了安全的功能部件或模块，并且可以使用加密技术来提供对USB数据的观察和操纵的保护。在其他实施例中，USB数据可以通过不被利用（或不需要利用）加密技术的技术来保护。根据这些实施例，USB设备可以被指定为“安全”，因此，可以通过USB向这些指定设备发送和从这些指定设备发送的数据提供到受保护的存储器中。可以利用内存间接技术来确保进出安全设备的数据受到保护。

5. 发明授权

US07478235B2 Methods and systems for protecting data in USB systems 有权
标题翻译：在USB系统中保护数据的方法和系统
公开(公告)号：US07478235B2
公开(公告)日：2009-01-13
申请号：US10187259
申请日：2002-06-28
申请人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
发明人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
IPC分类号： H04L9/00 , H04L9/32 , G06F11/30
CPC分类号： G06F12/1408 , G06F3/065 , G06F13/28 , G06F13/362 , G06F13/4282 , G06F21/606 , G06F21/72 , G06F21/73 , G06F21/78 , G06F21/85 , G06F2212/1052 , G06F2221/0704 , G06F2221/2105 , G06F2221/2129 , G06F2221/2147 , G06F2221/2153
摘要： The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.
摘要翻译：下面描述的各种实施例旨在从在USB总线上操作的I / O设备到主机（例如安全软件应用或安全内核）上执行的软件提供经认证和保密的消息传递。这些实施例可以防止在主计算机上执行的软件所征收的攻击。在一些实施例中，提供了安全的功能部件或模块，并且可以使用加密技术来提供对USB数据的观察和操纵的保护。在其他实施例中，USB数据可以通过不被利用（或不需要利用）加密技术的技术来保护。根据这些实施例，USB设备可以被指定为“安全”，因此，可以通过USB向这些指定设备发送和从这些指定设备发送的数据提供到受保护的存储器中。可以利用内存间接技术来确保进出安全设备的数据受到保护。

6. 发明授权

US09183406B2 Saving and retrieving data based on public key encryption 有权
标题翻译：基于公钥加密保存和检索数据
公开(公告)号：US09183406B2
公开(公告)日：2015-11-10
申请号：US13012573
申请日：2011-01-24
申请人： Paul England , Marcus Peinado
发明人： Paul England , Marcus Peinado
IPC分类号： G06F21/00 , G06F21/62
CPC分类号： G06F21/6218
摘要： In accordance with certain aspects, data is received from a calling program. Ciphertext that includes the data is generated, using public key encryption, in a manner that allows the data to be obtained from the ciphertext only if one or more conditions are satisfied. In accordance with another aspect, a bit string is received from a calling program. Data in the bit string is decrypted using public key decryption and returned to the calling program only if one or more conditions included in the bit string are satisfied.
摘要翻译：根据某些方面，从呼叫程序接收数据。使用公钥加密来生成包含数据的密文，只有满足一个或多个条件，才允许从密文获得数据。根据另一方面，从调用程序接收位串。使用公钥解密解密比特串中的数据，只有满足包含在比特串中的一个或多个条件时才返回给调用程序。

7. 发明授权

US08601286B2 Saving and retrieving data based on public key encryption 有权
标题翻译：基于公钥加密保存和检索数据
公开(公告)号：US08601286B2
公开(公告)日：2013-12-03
申请号：US13015440
申请日：2011-01-27
申请人： Paul England , Marcus Peinado
发明人： Paul England , Marcus Peinado
IPC分类号： G06F12/14
CPC分类号： G06F21/6218
摘要： In accordance with certain aspects, data is received and a digital signature is generated and output. The digital signature can be a digital signature of the data and one or more conditions that are to be satisfied in order for the data to be revealed, or a digital signature over data generated using a private key associated with a bound key that is bound to one or more processors.
摘要翻译：根据某些方面，接收数据并生成并输出数字签名。数字签名可以是数据的数字签名以及为了使数据被显示而被满足的一个或多个条件，或者使用与绑定的绑定密钥相关联的私有密钥生成的数据的数字签名一个或多个处理器。

8. 发明授权

US07975117B2 Enforcing isolation among plural operating systems 有权
标题翻译：在多个操作系统之间实现隔离
公开(公告)号：US07975117B2
公开(公告)日：2011-07-05
申请号：US10741629
申请日：2003-12-19
申请人： Marcus Peinado , Paul England , Bryan Mark Willman , Yuqun Chen , Andrew John Thornton
发明人： Marcus Peinado , Paul England , Bryan Mark Willman , Yuqun Chen , Andrew John Thornton
IPC分类号： G06F13/00
CPC分类号： G06F21/78 , G06F12/1425 , G06F12/1483
摘要： Plural guest operating systems run on a computer, where a security kernel enforces a policy of isolation among the guest operating systems. An exclusion vector defines a set of pages that cannot be accessed by direct memory access (DMA) devices. The security kernel enforces an isolation policy by causing certain pages to be excluded from direct access. Thus, device drivers in guest operating systems are permitted to control DMA devices directly without virtualization of those devices, while each guest is prevented from using DMA devices to access pages that the guest is not permitted to access under the policy.
摘要翻译：多个客户机操作系统在计算机上运行，其中安全内核在客户机操作系统之间执行隔离策略。排除向量定义了一组不能被直接存储器访问（DMA）设备访问的页面。安全内核通过使某些页面被排除在直接访问之外来执行隔离策略。因此，允许来宾操作系统中的设备驱动程序直接控制DMA设备，而不会对这些设备进行虚拟化，同时阻止每个客户端使用DMA设备来访问访客不允许访问策略下的页面。

9. 发明授权

US07587589B2 Saving and retrieving data based on symmetric key encryption 有权
标题翻译：基于对称密钥加密保存和检索数据
公开(公告)号：US07587589B2
公开(公告)日：2009-09-08
申请号：US11557641
申请日：2006-11-08
申请人： Paul England , Marcus Peinado
发明人： Paul England , Marcus Peinado
IPC分类号： H04L29/06
CPC分类号： G06F21/6218
摘要： In accordance with certain aspects, data is received from a calling program. Ciphertext that includes the data is generated, using a symmetric cipher, in a manner that allows only one or more target programs to be able to obtain the data from the ciphertext. In accordance with other aspects, a bit string is received from a calling program. An identifier of the calling program is checked to determine whether the calling program is allowed to access data encrypted in ciphertext of the bit string. The integrity of the data is also verified, and the data is decrypted using a symmetric key. The data is returned to the calling program only if the calling program is allowed to access the data and if the integrity of the data is successfully verified.
摘要翻译：根据某些方面，从呼叫程序接收数据。使用对称密码，以允许只有一个或多个目标程序能够从密文获得数据的方式生成包含数据的密文。根据其他方面，从呼叫程序接收到位串。检查调用程序的标识符以确定是否允许调用程序访问以位串的密文加密的数据。还验证数据的完整性，并使用对称密钥对数据进行解密。只有当主叫程序被允许访问数据并且数据的完整性被成功验证时，才将数据返回给调用程序。

10. 发明授权

US07243230B2 Transferring application secrets in a trusted operating system environment 有权
标题翻译：在受信任的操作系统环境中传送应用程序秘密
公开(公告)号：US07243230B2
公开(公告)日：2007-07-10
申请号：US09993340
申请日：2001-11-16
申请人： Paul England , Marcus Peinado , Daniel R. Simon , Josh D. Benaloh
发明人： Paul England , Marcus Peinado , Daniel R. Simon , Josh D. Benaloh
IPC分类号： H04L9/00
CPC分类号： G06F21/57 , G06F21/606
摘要： Transferring application secrets in a trusted operating system environment involves receiving a request to transfer application data from a source computing device to a destination computing device. A check is made as to whether the application data can be transferred to the destination computing device, and if so, whether the application data can be transferred under control of the user or a third party. If these checks succeed, a check is also made as to whether the destination computing device is a trustworthy device running known trustworthy software. Input is also received from the appropriate one of the user or third party to control transferring of the application data to the destination computing device. Furthermore, application data is stored on the source computing device in a manner that facilitates determining whether the application data can be transferred, and that facilitates transferring the application data if it can be transferred.
摘要翻译：在受信任的操作系统环境中传送应用程序秘密涉及接收将应用数据从源计算设备传送到目的地计算设备的请求。检查应用数据是否可以传送到目的地计算设备，如果是，可以在用户或第三方的控制下传送应用数据。如果这些检查成功，还要检查目的地计算设备是否是运行已知可靠软件的值得信赖的设备。还从适当的用户或第三方接收输入以控制将应用数据传送到目的地计算设备。此外，应用数据以便于确定是否可以传送应用数据的方式存储在源计算设备上，并且如果可以传送应用数据便于传送应用数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式