专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20050149722A1 Session key exchange 有权
标题翻译：会话密钥交换
公开(公告)号：US20050149722A1
公开(公告)日：2005-07-07
申请号：US10748773
申请日：2003-12-30
申请人： Willard Wiseman , David Grawrock , Ernie Brickell , Matthew Wood , Joseph Cihula
发明人： Willard Wiseman , David Grawrock , Ernie Brickell , Matthew Wood , Joseph Cihula
IPC分类号： H04L9/08 , H04L9/30 , H04L9/32 , H04L29/06 , H04L9/00
CPC分类号： H04L63/061 , H04L9/321 , H04L9/3263 , H04L63/067 , H04L63/0823 , H04L2209/127 , H04L2209/56
摘要： According to an embodiment of the invention, a method and apparatus for session key exchange are described. An embodiment of a method comprises requesting a service for a platform; certifying the use of the service for one or more acceptable configurations of the platform; and receiving a session key for a session of the service, the service being limited to the one or more acceptable configurations of the platform.
摘要翻译：根据本发明的实施例，描述了用于会话密钥交换的方法和装置。一种方法的实施例包括请求一个平台的服务; 证明使用该服务的平台的一个或多个可接受的配置; 以及接收所述服务的会话的会话密钥，所述服务被限制为所述平台的所述一个或多个可接受的配置。

2. 发明申请

US20060021029A1 Method of improving computer security through sandboxing 有权
标题翻译：通过沙箱提高计算机安全性的方法
公开(公告)号：US20060021029A1
公开(公告)日：2006-01-26
申请号：US10881602
申请日：2004-06-29
申请人： Ernie Brickell , Clifford Hall , Joseph Cihula , Richard Uhlig
发明人： Ernie Brickell , Clifford Hall , Joseph Cihula , Richard Uhlig
IPC分类号： G06F11/30
CPC分类号： G06F21/53 , G06F21/51 , G06F21/566 , G06F2221/2145
摘要： Improving security of a processing system may be accomplished by at least one of executing and accessing a suspect file in a sandbox virtual machine.
摘要翻译：可以通过在沙盒虚拟机中执行和访问可疑文件中的至少一个来实现提高处理系统的安全性。

3. 发明申请

US20060136910A1 Method, apparatus and system for improving security in a virtual machine host 有权
标题翻译：用于提高虚拟机主机安全性的方法，装置和系统
公开(公告)号：US20060136910A1
公开(公告)日：2006-06-22
申请号：US11016653
申请日：2004-12-17
申请人： Ernie Brickell , Clifford Hall , Joseph Cihula , Richard Uhlig
发明人： Ernie Brickell , Clifford Hall , Joseph Cihula , Richard Uhlig
IPC分类号： G06F9/455
CPC分类号： G06F21/52 , G06F21/57
摘要： A method, apparatus and system for improving security on a virtual machines host is described. A shared file system on the host may include annotations usable by a service module to access files across VMs and to enforce security policies. The service module may additionally enable a unified user interface to improve usability of the host.
摘要翻译：描述了一种用于提高虚拟机主机上的安全性的方法，装置和系统。主机上的共享文件系统可以包括服务模块可用于访问跨VM的文件并执行安全策略的注释。服务模块还可以使统一的用户界面提高主机的可用性。

4. 发明授权

US09087200B2 Method and apparatus to provide secure application execution 有权
标题翻译：提供安全应用程序执行的方法和装置
公开(公告)号：US09087200B2
公开(公告)日：2015-07-21
申请号：US13527547
申请日：2012-06-19
申请人： Francis X. McKeen , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
发明人： Francis X. McKeen , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
IPC分类号： G06F21/72 , G06F21/60 , G06F21/53 , G06F12/14
CPC分类号： G06F21/60 , G06F21/53 , G06F21/72
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

5. 发明申请

US20130159726A1 METHOD AND APPARATUS TO PROVIDE SECURE APPLICATION EXECUTION 有权
标题翻译：提供安全应用执行的方法和设备
公开(公告)号：US20130159726A1
公开(公告)日：2013-06-20
申请号：US13527547
申请日：2012-06-19
申请人： Francis X. MCKEEN , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
发明人： Francis X. MCKEEN , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
IPC分类号： G06F21/72
CPC分类号： G06F21/60 , G06F21/53 , G06F21/72
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

6. 发明申请

US20050275661A1 Displaying a trusted user interface using background images 审中-公开
标题翻译：使用背景图像显示可信用户界面
公开(公告)号：US20050275661A1
公开(公告)日：2005-12-15
申请号：US10866004
申请日：2004-06-10
申请人： Joseph Cihula , Ernie Brickell , Chiung-Chen Yu
发明人： Joseph Cihula , Ernie Brickell , Chiung-Chen Yu
IPC分类号： G06F21/00 , G09G5/00
CPC分类号： G06F21/55 , G06F21/57
摘要： In one implementation, a method for ensuring the trustworthiness of graphical user interfaces is described wherein a computing system user selects and/or modifies an image to be used as at least a portion of the background of one or more visual elements of a graphical user interface of a trusted computing environment. The user selected background image facilitates recognition by the user of the trustworthiness of the environment's graphical user interface when it is displayed to the user. The computing system seals the selected image or a modified version of the selected image within the trusted computing environment to prevent access to that image by computing environments other than the trusted computing environment. Additional embodiments are described and claimed.
摘要翻译：在一个实现中，描述了用于确保图形用户界面的可信赖性的方法，其中计算系统用户选择和/或修改要用作图形用户界面的一个或多个视觉元素的背景的至少一部分的图像的可信计算环境。用户选择的背景图像便于用户在向用户显示时识别环境的图形用户界面的可信赖性。计算系统将所选择的图像或受信任的计算环境内的所选图像的修改版本密封，以防止通过除了可信计算环境之外的计算环境来访问该图像。描述和要求保护附加的实施例。

7. 发明申请

US20060013399A1 Method of delivering direct proof private keys to devices using a distribution CD 有权
标题翻译：使用分发CD向设备提供直接验证私钥的方法
公开(公告)号：US20060013399A1
公开(公告)日：2006-01-19
申请号：US10892265
申请日：2004-07-14
申请人： Ernie Brickell , James Sutton , Clifford Hall , David Grawrock
发明人： Ernie Brickell , James Sutton , Clifford Hall , David Grawrock
IPC分类号： H04L9/00
CPC分类号： H04L63/062 , G06F21/57 , G06F21/73 , H04L9/0841 , H04L63/0853 , H04L2209/125
摘要： Delivering a Direct Proof private key to a device installed in a client computer system in the field may be accomplished in a secure manner without requiring significant non-volatile storage in the device. A unique pseudo-random value is generated and stored in the device at manufacturing time. The pseudo-random value is used to generate a symmetric key for encrypting a data structure holding a Direct Proof private key and a private key digest associated with the device. The resulting-encrypted data structure is stored on a removable storage medium (such as a CD), and distributed to the owner of the client computer system. When the device is initialized on the client computer system, the system checks if a localized encrypted data structure is present in the system. If not, the system obtains the associated encrypted data structure from the removable storage medium. The device decrypts the encrypted data structure using a symmetric key regenerated from its stored pseudo-random value to obtain the Direct Proof private key. If the private key is valid, it may be used for subsequent authentication processing by the device in the client computer system.
摘要翻译：将直接证明私钥提供给安装在该领域中的客户端计算机系统中的设备可以以安全的方式来实现，而不需要设备中的显着的非易失性存储。在制造时产生并存储在设备中的唯一伪随机值。伪随机值用于生成用于加密持有Direct Proof私钥和与该设备相关联的私钥摘要的数据结构的对称密钥。所得到的加密数据结构存储在可移动存储介质（例如CD）上，并分发给客户端计算机系统的所有者。当在客户端计算机系统上初始化设备时，系统会检查系统中是否存在本地化的加密数据结构。如果不是，系统从可移动存储介质中获得相关联的加密数据结构。设备使用从其存储的伪随机值重新生成的对称密钥来解密加密数据结构，以获得直接证明私钥。如果私钥有效，则其可以用于客户端计算机系统中的设备的后续认证处理。

8. 发明申请

US20060015751A1 Method of storing unique constant values 失效
公开(公告)号：US20060015751A1
公开(公告)日：2006-01-19
申请号：US10891699
申请日：2004-07-14
申请人： Ernie Brickell , Alberto Martinez , David Grawrock , James Sutton , Clifford Hall
发明人： Ernie Brickell , Alberto Martinez , David Grawrock , James Sutton , Clifford Hall
IPC分类号： G06F12/14
CPC分类号： G06F21/73
摘要： Secure storage and retrieval of a unique value associated with a device to/from a memory of a processing system. In at least one embodiment, the device needs to be able to access the unique value across processing system resets, and the device does not have sufficient non-volatile storage to store the unique value itself. Instead, the unique value is stored in the processing system memory in such a way that the stored unique value does not create a unique identifier for the processing system or the device. A pseudo-randomly or randomly generated initialization vector may be used to vary an encrypted data structure used to store the unique value in the memory.

9. 发明申请

US20060013402A1 Method of delivering Direct Proof private keys to devices using an on-line service 失效
标题翻译：使用在线服务将Direct Proof私钥交付给设备的方法
公开(公告)号：US20060013402A1
公开(公告)日：2006-01-19
申请号：US10892256
申请日：2004-07-14
申请人： James Sutton , Ernie Brickell , Clifford Hall , David Grawrock
发明人： James Sutton , Ernie Brickell , Clifford Hall , David Grawrock
IPC分类号： H04L9/00
CPC分类号： H04L9/0844 , H04L2209/127
摘要： Delivering a Direct Proof private key to a device installed in a client computer system in the field may be accomplished in a secure manner without requiring significant non-volatile storage in the device. A unique pseudo-random value is generated and stored in the device at manufacturing time. The pseudo-random value is used to generate a symmetric key for encrypting a data structure holding a Direct Proof private key and a private key digest associated with the device. The resulting encrypted data structure is stored on a protected on-liner server accessible by the client computer system. When the device is initialized on the client computer system, the system checks if a localized encrypted data structure is present in the system. If not, the system obtains the associated encrypted data structure from the protected on-line server using a secure protocol. The device decrypts the encrypted data structure using a symmetric key regenerated from its stored pseudo-random value to obtain the Direct Proof private key. If the private key is valid, it may be used for subsequent authentication processing by the device in the client computer system.
摘要翻译：将直接证明私钥提供给安装在该领域中的客户端计算机系统中的设备可以以安全的方式来实现，而不需要设备中的显着的非易失性存储。在制造时产生并存储在设备中的唯一伪随机值。伪随机值用于生成用于加密持有Direct Proof私钥和与该设备相关联的私钥摘要的数据结构的对称密钥。所得到的加密数据结构存储在由客户端计算机系统可访问的受保护的在线服务器上。当在客户端计算机系统上初始化设备时，系统会检查系统中是否存在本地化的加密数据结构。如果没有，系统将使用安全协议从受保护的在线服务器获取相关联的加密数据结构。设备使用从其存储的伪随机值重新生成的对称密钥来解密加密数据结构，以获得直接证明私钥。如果私钥有效，则其可以用于客户端计算机系统中的设备的后续认证处理。

10. 发明申请

US20050081065A1 Method for securely delegating trusted platform module ownership 审中-公开
标题翻译：安全委托可信平台模块所有权的方法
公开(公告)号：US20050081065A1
公开(公告)日：2005-04-14
申请号：US10686343
申请日：2003-10-14
申请人： Ernie Brickell , David Grawrock , James Sutton
发明人： Ernie Brickell , David Grawrock , James Sutton
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： G06F21/53 , G06F21/57
摘要： Managing authorization tokens within a computer system may be accomplished by creating a master owner token indicating full ownership of a resource within the computer system by a management environment, creating at least one delegate owner token for a environment, communicating the delegate owner token to the environment and to the resource, and allowing access to the resource by the environment when the environment presents a valid delegate owner token to the resource. In one embodiment, the resource comprises a trusted platform module (TPM).
摘要翻译：管理计算机系统中的授权令牌可以通过创建主管理器令牌来实现，该主人拥有者标记由管理环境指示计算机系统内的资源的完全所有权，为环境创建至少一个委托所有者令牌，将委托所有者令牌传达给环境和资源，并且当环境向资源呈现有效的代理所有者令牌时，允许环境访问资源。在一个实施例中，资源包括可信平台模块（TPM）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式