专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

71. 发明公开

EP3226512A1 SECURE SUBSCRIBER IDENTITY MODULE SERVICE 有权
标题翻译：安全订户身份模块服务
公开(公告)号：EP3226512A1
公开(公告)日：2017-10-04
申请号：EP17171624.4
申请日：2010-12-13
申请人： INTEL Corporation
发明人： DADU, Saurabh , PRAKASH, Gyan , MIRASHRAFI, Mojtaba
IPC分类号： H04L29/06 , G06F21/33 , G06F21/34 , H04W4/00 , G06F21/72 , G06F21/62
CPC分类号： H04L63/061 , G06F21/335 , G06F21/34 , G06F21/6272 , G06F21/72 , G06F2221/2105 , G06F2221/2115 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L63/0853 , H04L63/123 , H04W4/50
摘要： A method, apparatus, system, and computer program product for a secure subscriber identity module service. Communication via a mobile network is activated in response to receiving a request to activate communication service for the system by a secure partition of the system. In response to receiving the request, a key is retrieved for a permit service from storage accessible only by the secure partition. The key is included in a permit requesting to activate the communication service, and the permit is sent to a service provider for the communication service. The service provider communicates with the permit service to obtain a digital signature for the permit. The secure partition receives a signed permit from the service provider, confirms that the signed permit contains the digital signature by the permit service, and activates the communication service for the system in response to confirming that the signed permit contains the digital signature.
摘要翻译：用于安全订户身份模块服务的方法，设备，系统和计算机程序产品。响应于通过系统的安全分区接收到激活用于系统的通信服务的请求，激活经由移动网络的通信。响应于接收到该请求，从只能由安全分区访问的存储器中检索许可证服务的密钥。密钥包含在请求激活通信服务的许可证中，并且许可证被发送给通信服务的服务提供商。服务提供商与许可服务通信以获得许可的数字签名。安全分区接收来自服务提供商的签名许可证，确认签名许可证包含许可证服务的数字签名，并且响应于确认签名许可证包含数字签名而激活系统的通信服务。

72. 发明授权

EP2562669B1 Verfahren zur Durchführung eines Schreibzugriffs, Computerprogrammprodukt, Computersystem und Chipkarte 有权
标题翻译： Verfahren zurDurchführungeines Schreibzugriffs，Computerprogrammprodukt，Computersystem und Chipkarte
公开(公告)号：EP2562669B1
公开(公告)日：2017-09-06
申请号：EP12192600.0
申请日：2007-02-01
申请人： Bundesdruckerei GmbH
发明人： Bysziol-Wegener, Frank , Weiss, Niklas
IPC分类号： G06F21/30 , G06F21/57 , G06F21/34 , G06F21/35 , G06F21/36 , G06F21/60 , G06F21/72 , G06F21/77
CPC分类号： H04L9/3263 , G06F21/305 , G06F21/57 , H04L9/3234 , H04L63/0853

73. 发明公开

EP2577449A4 METHOD AND APPARATUS FOR TRUSTED EXECUTION IN INFRASTRUCTURE AS A SERVICE CLOUD ENVIRONMENTS 有权
标题翻译： VERFAHREN UND VORRICHTUNGFÜRSICHEREAUSFÜHRUNGEN在EINER INFRASTRUKTUR ALS SERVICE-CLOUD-UMGEBUNG
公开(公告)号：EP2577449A4
公开(公告)日：2017-07-05
申请号：EP11787280
申请日：2011-05-24
申请人： CISCO TECH INC
发明人： MAINO FABIO R , MONCLUS PERE
IPC分类号： G06F21/72 , G06F9/455 , G06F21/53 , G06F21/79
CPC分类号： H04L9/0894 , G06F9/45558 , G06F21/53 , G06F21/72 , G06F21/79 , G06F2009/45587
摘要： The present disclosure presents a method and apparatus configured to provide for the trusted execution of virtual machines (VMs) on a virtualization server, e.g., for executing VMs on a virtualization server provided within Infrastructure as a Service (IaaS) cloud environment. A physical multi-core CPU may be configured with a hardware trust anchor. The trust anchor itself may be configured to manage session keys used to encrypt/decrypt instructions and data when a VM (or hypervisor) is executed on one of the CPU cores. When a context switch occurs due to an exception, the trust anchor swaps the session key used to encrypt/decrypt the contents of memory and cache allocated to a VM (or hypervisor).
摘要翻译：本公开提出了一种被配置为在虚拟化服务器上提供虚拟机（VM）的可信执行，例如用于在基础设施即服务（IaaS）云环境内提供的虚拟化服务器上执行VM的方法和装置。物理多核CPU可以配置硬件信任锚点。当VM（或管理程序）在其中一个CPU核上执行时，信任锚本身可以被配置为管理用于加密/解密指令和数据的会话密钥。当由于异常而发生上下文切换时，信任锚交换用于加密/解密分配给VM（或管理程序）的内存和缓存内容的会话密钥。

74. 发明公开

EP3183685A1 ENCRYPTED CODE EXECUTION 审中-公开
标题翻译：加密代码执行
公开(公告)号：EP3183685A1
公开(公告)日：2017-06-28
申请号：EP14805647.6
申请日：2014-08-20
申请人： Intel Corporation
发明人： ROUBAN, Yevgeny
IPC分类号： G06F21/72
CPC分类号： G06F21/602 , G06F21/72 , H04L9/30 , H04L9/3247
摘要： Embodiments of an invention for encrypted code execution are disclosed. In one embodiment, a processor includes a private key, a code decryptor, and an encryption unit. The code decryptor is to decrypt the encrypted code to generate decrypted code, the encrypted code encrypted with a public key corresponding to the private key. The execution unit is to execute the decrypted code.
摘要翻译：公开了用于加密代码执行的发明的实施例。在一个实施例中，处理器包括私钥，代码解密器和加密单元。代码解密器用于解密加密的代码以生成解密的代码，加密的代码用对应于私钥的公钥加密。执行单元将执行解密的代码。

75. 发明授权

EP2417556B1 DATENVERARBEITUNGSGERÄT MIT ZERTIFIZIERBARER VERSCHLÜSSELUNG 有权
标题翻译：与认证的加密数据处理单元
公开(公告)号：EP2417556B1
公开(公告)日：2017-03-22
申请号：EP09796597.4
申请日：2009-10-07
申请人： Sommer, Ralf
发明人： Sommer, Ralf
IPC分类号： G06F21/71 , G06F19/00 , G06F21/72 , H04L29/06
CPC分类号： H04L63/0428 , G06F21/71 , G06F21/72 , G06F2221/2107 , G16H10/60

76. 发明公开

EP3140773A1 GENERATING AND DISTRIBUTING PRE-COMPUTED DATA (PCD) ASSETS TO A TARGET DEVICE 有权
标题翻译：生产和分配数据保持在预定目标设备
公开(公告)号：EP3140773A1
公开(公告)日：2017-03-15
申请号：EP15722868.5
申请日：2015-05-04
申请人： Cryptography Research Inc.
发明人： HAMBURG, Michael , JUN, Benjamin Che-Ming , KOCHER, Paul C. , O'LOUGHLIN, Daniel , POCHUEV, Denis Alexandrovich
IPC分类号： G06F21/73 , G06F21/72
CPC分类号： H04L63/0853 , G06F21/335 , G06F21/602 , G06F21/6209 , G06F21/72 , G06F21/73 , G06F2221/2107 , G06F2221/2135 , G06F2221/2145 , G06F2221/2149 , G06F2221/2153 , H04L63/0428 , H04L63/062 , H04L63/123 , H04L67/32 , H04W12/06
摘要： The embodiments described herein describe technologies for Module management, including Module creation and Module deployment to a target device in an operation phase of a manufacturing lifecycle of the target device in a cryptographic manager (CM) environment. One implementation includes a Root Authority (RA) device that receives a command to create a Module and executes a Module Template to generate the Module in response to the command. The Module is deployed to an Appliance device. A set of instructions of the Module, when executed by the Appliance device, results in a secure construction of a sequence of operations to securely provision a data asset to the target device. The Appliance device is configured to distribute the data asset to a cryptographic manager (CM) core of the target device.
摘要翻译：描述的实施例描述用于模块管理技术，包括模块创建和部署模块到目标设备到目标设备的制造周期的操作阶段中的密码管理器（CM）的环境。一种实现方式包括一个根机构（RA）设备没有接收命令以创建一个模块并执行模板模块，以产生响应于所述命令的模块。该模块在电器设备部署到。一组的模块的指令当由设备装置执行时，导致操作，以安全地规定一个数据资源到目标装置的一个序列的一个安全的结构。设备装置被配置为将数据资源分配给目标设备的密码管理器（CM）的核心。

77. 发明公开

EP2949074A4 PRIVILEGED CRYPTOGRAPHIC SERVICES IN A VIRTUALIZED ENVIRONMENT 有权
标题翻译： EINER VIRTUALISIERTEN UMGEBUNG特别荣誉
公开(公告)号：EP2949074A4
公开(公告)日：2016-09-21
申请号：EP14743982
申请日：2014-01-22
申请人： AMAZON TECH INC
发明人： ROTH GREGORY BRANCHEK , POTLAPALLY NACHIKETH RAO
IPC分类号： G06F21/53 , G06F21/57 , G06F21/64 , G06F21/72
CPC分类号： G06F21/72 , G06F21/53 , G06F21/57 , G06F21/575 , G06F21/602 , G06F21/64
摘要： A privileged cryptographic service is described, such as a service running in system management mode (SMM). The privileged service is operable to store and manage cryptographic keys and/or other security resources in a multitenant remote program execution environment. The privileged service can receive requests to use the cryptographic keys and issue responses to these requests. In addition, the privileged service can measure the hypervisor at runtime (e.g., either periodically or in response to the requests) in an attempt to detect evidence of tampering with the hypervisor. Because the privileged service is operating in system management mode that is more privileged than the hypervisor, the privileged service can be robust against virtual machine escape and other hypervisor attacks.
摘要翻译：描述了一种特权密码服务，例如以系统管理模式运行的服务（SMM）。特权服务可操作以在多租户远程程序执行环境中存储和管理加密密钥和/或其他安全资源。特权服务可以接收使用加密密钥的请求并发出对这些请求的响应。此外，特权服务可以在运行时（例如，周期性地或响应于请求）来测量管理程序，以试图检测篡改管理程序的证据。由于特权服务在比管理程序更具特权的系统管理模式下运行，因此特权服务可以针对虚拟机逃脱和其他管理程序攻击而强大。

78. 发明公开

EP3051452A1 Method and device for accessing a service 审中-公开
标题翻译： Verfahren und Vorrichtung zum Zugriff auf einen Dienst
公开(公告)号：EP3051452A1
公开(公告)日：2016-08-03
申请号：EP15305155.2
申请日：2015-02-02
申请人： GEMALTO SA
发明人： Chene, Gilles , Brun, Alain
IPC分类号： G06F21/35 , G06F21/64 , G06F21/72 , G06F21/77 , G06F21/71
CPC分类号： G06Q20/401 , G06F21/35 , G06F21/64 , G06F21/71 , G06F21/72 , G06F21/77 , G06F2221/2101 , G06F2221/2107 , G06F2221/2115 , G06F2221/2151 , G06F2221/2153 , G06Q10/02 , G06Q30/0601 , G06Q2220/00 , H04L9/14 , H04L9/30 , H04L9/3247 , H04L63/0492 , H04L63/0823 , H04L63/0853 , H04L2209/56 , H04W4/12
摘要： The invention relates to a method 20 for accessing a service.
According to the invention, a device 12 comprises data storing means, the method comprises the following steps. The device receives 22 data. The device gets 28, based upon the received data, transaction data. The device signs 212 the transaction data by using a private key relating to a transaction processing, a signature operation result being a transaction signature. The data storing means stores 218 the transaction data and the transaction signature. The device gets 224, based upon the received data, service data. The device sends to a first external entity the service data 228. The device sends the transaction data and the transaction signature 232 to either the first external entity or a second external entity.
The invention also relates to a corresponding device.
摘要翻译：本发明涉及一种访问服务的方法20。根据本发明，设备12包括数据存储装置，该方法包括以下步骤。设备接收22个数据。该设备根据接收的数据，交易数据获取28。设备通过使用与交易处理有关的私钥来签署212交易数据，签名操作结果是交易签名。数据存储装置存储交易数据和交易签名。设备根据接收到的数据获取224，服务数据。设备向第一外部实体发送服务数据228.设备将交易数据和交易签名232发送到第一外部实体或第二外部实体。本发明还涉及相应的装置。

79. 发明授权

EP2732400B1 METHOD AND SYSTEM FOR VERIFYING AN ACCESS REQUEST 有权
标题翻译：方法和系统用于验证访问请求
公开(公告)号：EP2732400B1
公开(公告)日：2016-06-15
申请号：EP13779326.1
申请日：2013-09-06
申请人： Visa Europe Limited
发明人： TARATINE, Boris , JOHNSON, Matthew , RUST, Simon Peter , ROUNDS, Andrew Warren
IPC分类号： G06F21/72 , G06F21/34
CPC分类号： G06F21/45 , G06F21/31 , G06F21/34 , G06F21/6245 , G06F21/725 , G06F2221/2151 , G06Q20/30 , H04L63/083 , H04L63/0846
摘要： A system for verifying a request for access to data is provided, the system comprising a first module and a second module. The first module is arranged to generate a password, and the second module is arranged to receive a password associated with a request for data (received at step), validate the received password, and enable access to the requested data. The system is such that the first and second modules share a secret that has been uniquely assigned thereto, the shared secret being for use in generation and validation of a said password. Furthermore, the first module is communicatively disconnected from the second module.

80. 发明授权

EP2240937B1 SYSTEM, METHOD AND MEMORY DEVICE PROVIDING DATA SCRAMBLING COMPATIBLE WITH ON-CHIP COPY OPERATION 有权
标题翻译：系统，方法和储存的装置，带有片上复制操作兼容的加密
公开(公告)号：EP2240937B1
公开(公告)日：2016-06-15
申请号：EP08869563.0
申请日：2008-12-31
申请人： SanDisk Technologies Inc.
发明人： LIN, Jason, T. , CHENG, Steven, S. , TRAISTER, Shai
IPC分类号： G06F12/14 , G06F21/72 , G11B20/00 , G11C11/56 , G11C16/04 , G11C7/10 , G11C16/34 , G06F21/79 , G06F12/02
CPC分类号： G11B20/0021 , G06F12/0246 , G06F12/1408 , G06F21/72 , G06F21/725 , G06F21/79 , G06F2212/1032 , G11C7/1006 , G11C11/5628 , G11C16/0483 , G11C16/3418 , G11C16/3427

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式