专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

EP3219047A2 TRUSTED PLATFORM MODULE CERTIFICATION AND ATTESTATION UTILIZING AN ANONYMOUS KEY SYSTEM 审中-公开
标题翻译：值得信赖的平台模块认证和利用匿名密钥系统进行验证
公开(公告)号：EP3219047A2
公开(公告)日：2017-09-20
申请号：EP15858908.5
申请日：2015-10-14
申请人： INTEL Corporation
发明人： SARANGDHAR, Nitin V. , NEMIROFF, Daniel , SMITH, Ned M. , BRICKELL, Ernie , LI, Jiangtao
IPC分类号： H04L9/32 , H04L9/08
CPC分类号： H04L9/3234 , G06F21/57 , G06F21/64 , H04L9/0861 , H04L9/0866 , H04L9/14 , H04L9/3263 , H04L2209/127
摘要： This application is directed to trusted platform module certification and attestation utilizing an anonymous key system. In general, TPM certification and TPM attestation may be supported in a device utilizing integrated TPM through the use of anonymous key system (AKS) certification. An example device may comprise at least combined AKS and TPM resources that load AKS and TPM firmware (FW) into a runtime environment that may further include at least an operating system (OS) encryption module, an AKS service module and a TPM Certification and Attestation (CA) module. For TPM certification, the CA module may interact with the other modules in the runtime environment to generate a TPM certificate, signed by an AKS certificate, that may be transmitted to a certification platform for validation. For TPM attestation, the CA module may cause TPM credentials to be provided to the attestation platform for validation along with the TPM and/or AKS certificates.
摘要翻译：该应用针对可信平台模块认证和利用匿名密钥系统进行认证。一般而言，TPM认证和TPM认证可以通过使用匿名密钥系统（AKS）认证在利用集成TPM的设备中得到支持。示例设备可以包括至少组合的AKS和TPM资源，其将AKS和TPM固件（FW）加载到运行时间环境中，该运行时间环境还可以至少包括操作系统（OS）加密模块，AKS服务模块和TPM认证和证明（CA）模块。对于TPM认证，CA模块可以与运行时环境中的其他模块交互以生成TPM证书，该证书由AKS证书签名，可以传输到认证平台进行验证。对于TPM证明，CA模块可能会导致TPM证书与TPM和/或AKS证书一起提供给证明平台进行验证。

2. 发明公开

EP2761524A1 SECURE DISPLAY FOR SECURE TRANSACTIONS 审中-公开
标题翻译： SAFE显示交易安全
公开(公告)号：EP2761524A1
公开(公告)日：2014-08-06
申请号：EP11873403.7
申请日：2011-09-30
申请人： Intel Corporation
发明人： SARANGDHAR, Nitin V. , AVADHANAM, Satyanarayana , KAMBHATLA, Srikanth
IPC分类号： G06F21/10 , G06F21/30 , G06F3/14
CPC分类号： H04L63/145 , G06F3/14 , G06F9/451 , G06F21/00 , G09G5/14 , G09G2340/14 , G09G2358/00 , G09G2380/00
摘要： A platform may use a central processing unit to run an operating system. Independently of the operating system, in the central processing unit, a hardware controller, such as a manageability engine, may be used to control which window is on the top of the Z-order and thereby control which window is displayed to the user. As a result, in some embodiments, the hardware controller can prevent an interloper or malware from interjecting an illegitimate window over a legitimate window that the user actually desired to access. In addition, a hardware indicator may be provided to assure the user when an accessed website is legitimate.

3. 发明公开

EP3304401A1 SYSTEM, APPARATUS AND METHOD FOR CONTROLLING MULTIPLE TRUSTED EXECUTION ENVIRONMENTS IN A SYSTEM 审中-公开
标题翻译：用于控制系统中的多个可信执行环境的系统，装置和方法
公开(公告)号：EP3304401A1
公开(公告)日：2018-04-11
申请号：EP16803924.6
申请日：2016-05-02
申请人： Intel Corporation
发明人： POORNACHANDRAN, Rajesh , SMITH, Ned M. , SARANGDHAR, Nitin V. , GREWAL, Karanvir S. , SAHITA, Ravi L. , ROBINSON, Scott H.
IPC分类号： G06F21/53 , G06F21/57 , G06F21/62 , G06F21/44
CPC分类号： G06F21/57 , G06F21/10 , G06F21/554 , G06F21/71 , G06F2221/034 , G06F2221/2125 , G06F2221/2143 , H04L9/0897 , H04L9/3226 , H04L9/3273 , H04L2209/603
摘要： In an embodiment, a system is adapted to: record at least one measurement of a virtual trusted execution environment in a storage of the system and generate a secret sealed to a state of this measurement; create, using the virtual trusted execution environment, an isolated environment including a secure enclave and an application, the virtual trusted execution environment to protect the isolated environment; receive, in the application, a first measurement quote associated with the virtual trusted execution environment and a second measurement quote associated with the secure enclave; and communicate quote information regarding the first and second measurement quotes to a remote attestation service to enable the remote attestation service to verify the virtual trusted execution environment and the secure enclave, and responsive to the verification the secret is to be provided to the virtual trusted execution environment and the isolated environment. Other embodiments are described and claimed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式