专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

161. 发明授权

US09729518B1 Method and apparatus for secure provisioning of an integrated circuit device 有权
公开(公告)号：US09729518B1
公开(公告)日：2017-08-08
申请号：US14255451
申请日：2014-04-17
申请人： Altera Corporation
发明人： Sean R. Atsatt
IPC分类号： H04L29/06 , G11C17/16
CPC分类号： H04L63/0428 , G06F21/10 , G06F21/76 , G11C7/24 , G11C16/22 , G11C17/16 , H04L63/06
摘要： A method of operating an integrated circuit may include generating a session key with a random number generator circuit. The session key may then be used to establish a secure communications channel between the integrated circuit and a remote server. The integrated circuit may be placed in a non-operational mode prior to establishing the secure communications channel. Accordingly, in response to establishing the secure communications channel, the integrated circuit may be placed in an operational mode to allow user operation. In some scenarios, the integrated circuit may receive license files from the remote server to enable implementation of specific logic blocks on the integrated circuit via the established secure communications channel.

162. 发明授权

US09674166B2 Method for securing a request for executing a first application, by a second application 有权
公开(公告)号：US09674166B2
公开(公告)日：2017-06-06
申请号：US14652023
申请日：2013-12-12
申请人： ORANGE
发明人： Jean-Philippe Wary , Christophe Mathias , Guirec Lorant , Jean Pierre Rosenthal
IPC分类号： H04L29/00 , H04L29/06 , H04W12/08 , G06F21/44 , G06F21/76
CPC分类号： H04L63/062 , G06F21/44 , G06F21/76 , H04L63/08 , H04W12/08
摘要： The invention relates to a method for securing a request for executing a first application (P1) in a first device (11) of a secured environment, by a second application (P2) located in a second device (10), said method including the following steps: receiving a first request to execute the first application, from the second application; generating a random number and a session key that is dependent on the random number, sending said random number to a trusted entity (12), said random number being intended for enabling the trusted entity to generate the session key, receiving a second request for executing the first application, from a third application (P3) generated by the trusted entity and transmitted to the second device, said third application including the session key, authenticating the third application by means of the session key, said authentication being the condition for the execution of the first application.

163. 发明授权

US09667629B2 Open connection manager virtualization at system-on-chip 有权
公开(公告)号：US09667629B2
公开(公告)日：2017-05-30
申请号：US14996082
申请日：2016-01-14
申请人： AT&T Intellectual Property I, L.P.
发明人： Mostafa Tofighbakhsh
IPC分类号： G06F21/76 , H04L29/06 , H04W12/06 , G06F21/57 , G06F21/60 , H04L12/933 , H04L29/08
CPC分类号： H04L63/0876 , G06F21/57 , G06F21/604 , G06F21/76 , H04L49/109 , H04L63/08 , H04L63/0823 , H04L63/102 , H04L69/30 , H04L69/321 , H04W12/06
摘要： Resource and memory use by applications used by user equipment (UE) can be adaptively controlled. A UE comprises a connection-manager kernel (CMKC) that can be embedded at the SOC level to facilitate resource and memory control at SOC level. CMKC operates in conjunction with an operating system kernel. CMKC comprises functional blocks that provide network enabler functions and observability APIs for network enhancement, traffic flow monitoring and filtering, QOE executive routines, and traffic flow time shifting. CMKC performs or provides analytics, security and firewall tags, cache management at SOC level, and policy enforcement. CMKC and a trusted memory operate in a trusted zone environment to facilitate secure operation. CMKC adaptively collects information from control registers and analytics, and maps such information to the trusted memory, which can be accessible to trusted APIs to facilitate enabling trusted applications to have knowledge of contextual network information.

164. 发明授权

US09652637B2 Method and system for allowing no code download in a code download scheme 有权
公开(公告)号：US09652637B2
公开(公告)日：2017-05-16
申请号：US11740575
申请日：2007-04-26
申请人： Andrew Dellow , Iue-Shuenn Chen , Stephane (Steve) Rodgers , Xuemin (Sherman) Chen
发明人： Andrew Dellow , Iue-Shuenn Chen , Stephane (Steve) Rodgers , Xuemin (Sherman) Chen
IPC分类号： G06F21/76 , G06F9/44
CPC分类号： G06F21/76 , G06F9/4403
摘要： Aspects of a method and system for allowing no code download in a code download scheme are provided. A system-on-a-chip (SoC) may comprise a security processor, a ROM, and a one-time-programmable (OTP) memory. The security processor may enable fetching code from a restricted function portion of the ROM. The restricted functions may comprise code for booting up the SoC and code that prevents enabling security algorithms within the SoC. The security processor may then enable booting up of at least a portion of the SoC based on the fetched code. The remaining portion of the ROM may comprise code for downloading security code from an external memory, such as a FLASH memory, to an internal memory, such as a RAM, to boot up the SoC. Access to the restricted function portion or the remaining portion of the ROM is based on at least one bit from the OTP memory.

165. 发明授权

US09646177B2 Systems and methods for preventing data remanence in memory systems 有权
公开(公告)号：US09646177B2
公开(公告)日：2017-05-09
申请号：US13098012
申请日：2011-04-29
申请人： Bruce B. Pedersen , Dirk A. Reese
发明人： Bruce B. Pedersen , Dirk A. Reese
IPC分类号： G06F7/38 , G06F21/79 , G06F21/76 , G11C7/20 , G11C11/419
CPC分类号： G06F21/79 , G06F21/76 , G11C7/20 , G11C11/419
摘要： Methods, circuits, and systems for preventing data remanence in memory systems are provided. Original data is stored in a first memory, which may be a static random access memory (SRAM). Data is additionally stored in a second memory. Data in the first memory is periodically inverted, preventing data remanence in the first memory. The data in the second memory is periodically inverted concurrently with the data in the first memory. The data in the second memory is used to keep track of the inversion state of the data in the first memory. The original data in the first memory can be reconstructed performing a logical exclusive-OR operation between the data in the first memory and the data in the second memory.

166. 发明申请

US20170046702A1 Domain-Specific Hardwired eCommerce Learning Machine 审中-公开
标题翻译：域名硬线电子商务学习机
公开(公告)号：US20170046702A1
公开(公告)日：2017-02-16
申请号：US14825813
申请日：2015-08-13
申请人： Hackproof Technologies, Inc.
发明人： Joseph Mitola, III
IPC分类号： G06Q20/40 , H04L29/06 , H04L29/08
CPC分类号： G06Q20/405 , G06F9/524 , G06F11/00 , G06F11/0721 , G06F11/0793 , G06F21/56 , G06F21/57 , G06F21/71 , G06F21/76 , G06N99/005 , H04L47/70 , H04L63/123 , H04L67/02 , Y02D30/40
摘要： A domain-specific hardwired symbolic eCommerce machine is described that processes information via the hardwired mapping of symbols from one or more domains onto other such domains, computing and communicating with improved security and reduced power consumption because it has no CPU, no Random Access Memory (RAM), no instruction registers, no Instruction Set Architecture (ISA), no operating system (OS) and no applications programming. The machine provides web services by recognizing legal requests such as HTTP POST request and responding with an HTML web page. In some embodiments, the machine has no unconstrained RAM into which malware may insert itself and needs no anti-virus software.
摘要翻译：描述了一种特定于域的硬连线符号电子商务机器，其通过来自一个或多个域的符号的硬连线映射来处理信息到其他这样的域上，由于没有CPU而没有随机存取存储器（没有CPU）而以改进的安全性和降低的功耗进行计算和通信 RAM），无指令寄存器，无指令集架构（ISA），无操作系统（OS），无应用程序编程。该机器通过识别诸如HTTP POST请求和HTML网页响应之类的合法请求来提供Web服务。在一些实施例中，机器没有无约束的RAM，恶意软件可能插入其中，并且不需要防病毒软件。

167. 发明授权

US09552494B1 Protected indexing and querying of large sets of textual data 有权
标题翻译：保护索引和查询大量文本数据
公开(公告)号：US09552494B1
公开(公告)日：2017-01-24
申请号：US15233117
申请日：2016-08-10
申请人： TERBIUM LABS LLC
发明人： Daniel J. Rogers , Tyler Carbone , Dionysus Blazakis
IPC分类号： G06F21/62 , G06F17/30 , H04L9/06 , G06F21/72 , G06F21/76
CPC分类号： G06F21/6227 , G06F17/30628 , G06F17/30675 , G06F21/60 , G06F21/6209 , G06F21/72 , G06F21/76 , G06F2221/0737 , H04L9/0643 , H04L63/0428
摘要： A protected querying technique involves creating shingles from a query and then fingerprinting the shingles. The documents to be queried are also shingled and then fingerprinted. The overlap between adjacent shingles for the query and the documents to be queried is different, there being less, or no overlap for the document shingles. The query fingerprint is compared to the fingerprints of the documents to be queried to determine whether there are any matches.
摘要翻译：受保护的查询技术涉及从查询中创建带状键，然后指示瓦片。要查询的文件也被遮盖，然后进行指纹识别。用于查询的相邻散光板和要查询的文档之间的重叠是不同的，文档带有较少或没有重叠。将查询指纹与要查询的文档的指纹进行比较，以确定是否存在任何匹配。

168. 发明授权

US09519807B1 Hash generation circuitry and methods for multi-channel, multi-lane encryption and authentication 有权
标题翻译：哈希生成电路和多通道，多通道加密和认证的方法
公开(公告)号：US09519807B1
公开(公告)日：2016-12-13
申请号：US14513519
申请日：2014-10-14
申请人： Altera Corporation
发明人： Martin Langhammer
IPC分类号： G06F11/30 , G06F21/72
CPC分类号： G06F21/76
摘要： Encryption/authentication circuitry includes an authentication portion operating on a plurality of lanes of encrypted data spanning a number of channels, and including hash constant storage for a predetermined maximum number of channels, and partial hash selection circuitry for determining, for each respective lane, a respective hash index into the hash constant storage. Wind-down mode detection circuitry also is described, as well as a method of operating such circuitry also is provided.
摘要翻译：加密/认证电路包括在跨多个通道的加密数据的多个通道上操作的认证部分，并且包括用于预定最大数量通道的散列常数存储器，以及用于为每个相应通道确定一个相应的哈希索引进入哈希常量存储。还描述了降压模式检测电路，并且还提供了操作这种电路的方法。

169. 发明申请

US20160335459A1 MULTI-LEVEL SECURITY DOMAIN SEPARATION USING SOFT-CORE PROCESSOR EMBEDDED IN AN FPGA 有权
标题翻译：使用嵌入在FPGA中的软核处理器的多级安全域分离
公开(公告)号：US20160335459A1
公开(公告)日：2016-11-17
申请号：US14603215
申请日：2015-01-22
申请人： RAYTHEON COMPANY
发明人： Matthew T. Kling , Clark B. Hockenbury , Jerrold L. Bonn , Susan F. Bataller , Mark Veneziano
IPC分类号： G06F21/76 , G06F21/60
CPC分类号： G06F21/76 , G06F21/606 , G06F21/74 , G06F2221/2113
摘要： A system and method for operating multiple security domains on one circuit card assembly, using a field-programmable gate array (FPGA) with an embedded security domain separation gate providing the MAC between multiple soft-core CPUs also embedded in the FPGA. In one embodiment, the FPGA is segregated into two or more security domains with no data paths between soft-core CPUs in each security domain except through the security domain separation gate. The security domain separation gate applies rules to any information to be transmitted between the security domains to avoid transmission of malicious content and to avoid transmission of information of a certain classification level or type to a security domain at a lower classification level or type.
摘要翻译：一种用于在一个电路卡组件上操作多个安全域的系统和方法，该系统和方法使用具有嵌入式安全域分离门的现场可编程门阵列（FPGA）来提供也嵌入在FPGA中的多个软核CPU之间的MAC。在一个实施例中，除了通过安全域分离门之外，FPGA在每个安全域中的软核CPU之间没有数据路径被分离成两个或更多个安全域。安全域分离门将规则应用于在安全域之间传送的任何信息，以避免传播恶意内容，并避免某种分类级别或类型的信息以较低的分类级别或类型传输到安全域。

170. 发明授权

US09436848B2 Configurator for secure feature and key manager 有权
标题翻译：用于安全功能和密钥管理器的配置器
公开(公告)号：US09436848B2
公开(公告)日：2016-09-06
申请号：US14289274
申请日：2014-05-28
申请人： Cryptography Research, Inc.
发明人： Daniel Beitel , Lauren Gao , Christopher Gori , Paul Carl Kocher , Ambuj Kumar , Andrew John Leiserson
IPC分类号： G06F11/30 , G06F21/76 , G06F21/57
CPC分类号： G06F21/76 , G06F21/572
摘要： A computing device receives a feature name or key name for an integrated circuit comprising a security manager core and an additional component. At least one of a) the additional component is associated with the key name or b) a feature provided by the additional component is associated with the feature name. The computing device receives a specified number of bits associated with the feature name or the key name, and maps the feature name to a feature address space or the key name to a key interface of the security manager core based at on the specified number of bits. The computing device generates at least one hardware description logic (HDL) module based on the mapping, wherein the at least one HDL module is usable to configure the security manager core for delivery of payloads associated with the feature name or the key name to the additional component.
摘要翻译：计算设备接收包括安全管理器核心和附加组件的集成电路的功能名称或密钥名称。 a）附加组件中的至少一个与密钥名称相关联，或者b）由附加组件提供的特征与特征名称相关联。计算设备接收与特征名称或密钥名称相关联的指定数量的位，并且基于指定的位数将特征名称映射到特征地址空间或密钥名称到安全管理器核心的密钥接口。所述计算设备基于所述映射生成至少一个硬件描述逻辑（HDL）模块，其中所述至少一个HDL模块可用于配置所述安全管理器核心，用于将与所述特征名称或所述密钥名称相关联的有效载荷传递到所述附加零件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式