专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20150178226A1 USING AUTHENTICATED MANIFESTS TO ENABLE EXTERNAL CERTIFICATION OF MULTI-PROCESSOR PLATFORMS 有权
标题翻译：使用认证机构启用多处理器平台的外部认证
公开(公告)号：US20150178226A1
公开(公告)日：2015-06-25
申请号：US14140254
申请日：2013-12-24
申请人： Vincent R. Scarlata , Simon P. Johnson , Vladimir Beker , Jesse Walker , Carlos V. Rozas , Amy L. Santoni , Ittai Anati , Raghunandan Makaram , Francis X. McKeen , Uday R. Savagaonkar
发明人： Vincent R. Scarlata , Simon P. Johnson , Vladimir Beker , Jesse Walker , Carlos V. Rozas , Amy L. Santoni , Ittai Anati , Raghunandan Makaram , Francis X. McKeen , Uday R. Savagaonkar
IPC分类号： G06F12/14
CPC分类号： G06F12/1466 , G06F21/74 , G06F2212/1052
摘要： Systems and methods for secure delivery of output surface bitmaps to a display engine. An example processing system comprises: an architecturally protected memory; and a plurality of processing devices communicatively coupled to the architecturally protected memory, each processing device comprising a first processing logic to implement an architecturally-protected execution environment by performing at least one of: executing instructions residing in the architecturally protected memory, or preventing an unauthorized access to the architecturally protected memory; wherein each processing device further comprises a second processing logic to establish a secure communication channel with a second processing device of the processing system, employ the secure communication channel to synchronize a platform identity key representing the processing system, and transmit a platform manifest comprising the platform identity key to a certification system.
摘要翻译：用于将输出表面位图安全传递到显示引擎的系统和方法。一个示例处理系统包括：架构受保护的存储器; 以及多个处理设备，通信地耦合到架构保护的存储器，每个处理设备包括第一处理逻辑，以通过执行以下至少一个来实现架构保护的执行环境：执行驻留在架构保护的存储器中的指令，或者防止未授权的访问架构受保护的内存; 其中每个处理设备还包括第二处理逻辑，用于与所述处理系统的第二处理设备建立安全通信信道，采用所述安全通信信道来同步代表所述处理系统的平台标识密钥，并发送包括所述平台的平台清单认证系统的身份密钥。

12. 发明申请

US20120159184A1 Technique for Supporting Multiple Secure Enclaves 有权
标题翻译：支持多个安全漏洞的技术
公开(公告)号：US20120159184A1
公开(公告)日：2012-06-21
申请号：US12972406
申请日：2010-12-17
申请人： Simon P. Johnson , Uday R. Savagaonkar , Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas
发明人： Simon P. Johnson , Uday R. Savagaonkar , Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas
IPC分类号： G06F21/00
CPC分类号： G06F12/1466 , G06F21/53 , G06F21/6218 , G06F21/64 , G06F21/645
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

13. 发明授权

US08972746B2 Technique for supporting multiple secure enclaves 有权
标题翻译：支持多个安全飞地的技术
公开(公告)号：US08972746B2
公开(公告)日：2015-03-03
申请号：US12972406
申请日：2010-12-17
申请人： Simon P. Johnson , Uday R. Savagaonkar , Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas
发明人： Simon P. Johnson , Uday R. Savagaonkar , Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas
IPC分类号： G06F11/30 , G06F12/14 , G06F21/62
CPC分类号： G06F12/1466 , G06F21/53 , G06F21/6218 , G06F21/64 , G06F21/645
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

14. 发明申请

US20140189246A1 MEASURING APPLICATIONS LOADED IN SECURE ENCLAVES AT RUNTIME 审中-公开
标题翻译：测量在运行时以安全的方式装载的应用程序
公开(公告)号：US20140189246A1
公开(公告)日：2014-07-03
申请号：US13731439
申请日：2012-12-31
申请人： Bin Xing , Matthew E. Hoekstra , Michael A. Goldsmith , Carlos V. Rozas , Vincent R. Scarlata , Simon P. Johnson , Uday R. Savagaonkar , Francis X. Mckeen , Stephen J. Tolopka
发明人： Bin Xing , Matthew E. Hoekstra , Michael A. Goldsmith , Carlos V. Rozas , Vincent R. Scarlata , Simon P. Johnson , Uday R. Savagaonkar , Francis X. Mckeen , Stephen J. Tolopka
IPC分类号： G06F12/14 , G06F12/08
CPC分类号： G06F21/53 , G06F21/71 , G06F2221/2101 , G06F2221/2149
摘要： Embodiments of an invention for measuring applications loaded in secure enclaves at runtime are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to extend a first measurement of a secure enclave with a second measurement. The execution unit is to execute the instruction after initialization of the secure enclave.
摘要翻译：公开了用于在运行时测量加载在安全空间中的应用的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元接收用于扩展第二测量的安全飞地的第一测量的指令。执行单元在安全飞地初始化后执行指令。

15. 发明申请

US20140189242A1 LOGGING IN SECURE ENCLAVES 有权
标题翻译：登录在安全的包装
公开(公告)号：US20140189242A1
公开(公告)日：2014-07-03
申请号：US13729348
申请日：2012-12-28
申请人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
发明人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
IPC分类号： G06F12/08
CPC分类号： G06F21/60 , G06F12/0875 , G06F12/14 , G06F12/145 , G06F21/72 , G06F2212/1052 , G06F2212/152 , G06F2212/452
摘要： Embodiments of an invention for logging in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction having an associated enclave page cache address. The execution unit is to execute the instruction without causing a virtual machine exit, wherein execution of the instruction includes logging the instruction and the associated enclave page cache address.
摘要翻译：公开了用于登录安全飞行器的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。该指令单元用于接收具有关联的飞地页面缓存地址的指令。执行单元执行指令而不引起虚拟机退出，其中指令的执行包括记录指令和关联的飞地页面缓存地址。

16. 发明申请

US20130232344A1 TECHNIQUE FOR SUPPORTING MULTIPLE SECURE ENCLAVES 有权
标题翻译：支持多种安全措施的技术
公开(公告)号：US20130232344A1
公开(公告)日：2013-09-05
申请号：US13838237
申请日：2013-03-15
申请人： Simon P. Johnson , Uday R. Savagaonkar , Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas
发明人： Simon P. Johnson , Uday R. Savagaonkar , Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas
IPC分类号： G06F12/14
CPC分类号： G06F12/1466 , G06F21/53 , G06F21/6218 , G06F21/64 , G06F21/645
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

17. 发明申请

US20120137137A1 METHOD AND APPARATUS FOR KEY PROVISIONING OF HARDWARE DEVICES 审中-公开
标题翻译：关键提供硬件设备的方法和装置
公开(公告)号：US20120137137A1
公开(公告)日：2012-05-31
申请号：US12956793
申请日：2010-11-30
申请人： Ernest F. Brickell , Shay Gueron , Jiangtao Li , Carlos V. Rozas , Daniel Nemiroff , Vincent R. Scarlata , Uday R. Savagaonkar , Simon P. Johnson
发明人： Ernest F. Brickell , Shay Gueron , Jiangtao Li , Carlos V. Rozas , Daniel Nemiroff , Vincent R. Scarlata , Uday R. Savagaonkar , Simon P. Johnson
IPC分类号： G06F21/00
CPC分类号： H04L9/0816 , G06F21/572 , G06F21/73
摘要： Keying materials used for providing security in a platform are securely provisioned both online and offline to devices in a remote platform. The secure provisioning of the keying materials is based on a revision of firmware installed in the platform.
摘要翻译：用于在平台中提供安全性的键控材料可以安全地在线和离线地配置到远程平台中的设备。密钥材料的安全配置基于安装在平台中的固件的修订版本。

18. 发明申请

US20140089659A1 Method and apparatus for key provisioning of hardware devices 审中-公开
标题翻译：用于硬件设备密钥配置的方法和装置
公开(公告)号：US20140089659A1
公开(公告)日：2014-03-27
申请号：US13987807
申请日：2013-09-05
申请人： Ernest F. Brickell , Shay Gueron , Jiangtao Li , Carlos V. Rozas , Daniel Nemiroff , Vincent R. Scarlata , Uday R. Savagaonkar , Simon P. Johnson
发明人： Ernest F. Brickell , Shay Gueron , Jiangtao Li , Carlos V. Rozas , Daniel Nemiroff , Vincent R. Scarlata , Uday R. Savagaonkar , Simon P. Johnson
IPC分类号： H04L9/08
CPC分类号： H04L9/0816 , G06F21/572 , G06F21/73
摘要： Keying materials used for providing security in a platform are securely provisioned both online and offline to devices in a remote platform. The secure provisioning of the keying materials is based on a revision of firmware installed in the platform.
摘要翻译：用于在平台中提供安全性的键控材料可以安全地在线和离线地配置到远程平台中的设备。密钥材料的安全配置基于安装在平台中的固件的修订版本。

19. 发明授权

US07587595B2 Method and apparatus for providing software-based security coprocessors 有权
标题翻译：用于提供基于软件的安全协处理器的方法和装置
公开(公告)号：US07587595B2
公开(公告)日：2009-09-08
申请号：US11171133
申请日：2005-06-29
申请人： Vincent R. Scarlata , Carlos V. Rozas
发明人： Vincent R. Scarlata , Carlos V. Rozas
IPC分类号： H04L9/00
CPC分类号： G06F21/72 , G06F21/53 , G06F21/552 , G06F21/577 , G06F21/602 , G06F21/74 , G06F21/79 , G06F2221/2103 , G06F2221/2105 , G06F2221/2149
摘要： A virtual security coprocessor framework supports creation of at least one device model to emulate a predetermined cryptographic coprocessor. In one embodiment, the virtual security coprocessor framework uses a cryptographic coprocessor in a processing system to create an instance of the device model (DM) in the processing system. The DM may be based at least in part on a predetermined device model design. The DM may emulate the predetermined cryptographic coprocessor in accordance with the control logic of the device model design. In one embodiment, the virtual security coprocessor framework uses a physical trusted platform module (TPM) in a processing system to support one or more virtual TPMs (vTPMs) for one or more virtual machines (VMs) in the processing system. Other embodiments are described and claimed.
摘要翻译：虚拟安全协处理器框架支持创建至少一个设备模型以模拟预定的密码协处理器。在一个实施例中，虚拟安全协处理器框架在处理系统中使用密码协处理器来在处理系统中创建设备模型（DM）的实例。 DM可以至少部分地基于预定的设备模型设计。 DM可以根据设备模型设计的控制逻辑来模拟预定的密码协处理器。在一个实施例中，虚拟安全协处理器框架使用处理系统中的物理信任平台模块（TPM）来支持处理系统中的一个或多个虚拟机（VM）的一个或多个虚拟TPM（vTPM）。描述和要求保护其他实施例。

20. 发明申请

US20110191574A1 METHOD AND APPARATUS FOR BINDING TPM KEYS TO EXECUTION ENTITIES 有权
标题翻译：用于绑定TPM KEYS执行实体的方法和装置
公开(公告)号：US20110191574A1
公开(公告)日：2011-08-04
申请号：US13016145
申请日：2011-01-28
申请人： Alexander Iliev , Vincent R. Scarlata , Carlos V. Rozas
发明人： Alexander Iliev , Vincent R. Scarlata , Carlos V. Rozas
IPC分类号： G06F15/177 , H04L9/32
CPC分类号： G06F21/57 , G06F21/72 , G06F2221/2141 , H04L9/0897
摘要： A method and apparatus for binding trusted platform module (TPM) keys to execution entities are described. In one embodiment, the method includes the receipt of an authorization request issued by an execution entity for authorization data. According to the authorization request, the execution entity may be measured to generate an entity digest value. Once the entity digest value is generated, a platform reference module may grant the authorization request if the entity digest value verifies that the execution entity is an owner of the key held by the TPM. Accordingly, in one embodiment, a platform reference module, rather than an execution entity, holds the authorization data required by a TPM to use a key owned by the execution entity and held within sealed storage by the TPM. Other embodiments are described and claimed.
摘要翻译：描述了将可信平台模块（TPM）密钥绑定到执行实体的方法和装置。在一个实施例中，该方法包括接收由执行实体发出的授权数据的授权请求。根据授权请求，可以测量执行实体以生成实体摘要值。一旦生成实体摘要值，如果实体摘要值验证执行实体是TPM持有的密钥的所有者，则平台引用模块可以授予授权请求。因此，在一个实施例中，平台参考模块而不是执行实体保存TPM所需的授权数据，以使用由执行实体拥有的密钥并由TPM保存在密封存储器内。描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式