专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US07200761B1 Method to use secure passwords in an unsecure program environment 失效
标题翻译：在不安全的程序环境中使用安全密码的方法
公开(公告)号：US07200761B1
公开(公告)日：2007-04-03
申请号：US09711028
申请日：2000-11-09
申请人： Joseph Wayne Freeman , Randall Scott Springfield , Steven Dale Goodman , Isaac Karpel
发明人： Joseph Wayne Freeman , Randall Scott Springfield , Steven Dale Goodman , Isaac Karpel
IPC分类号： G06F9/00 , G06F11/30 , G06F15/173 , G06F15/16 , H04L9/00
CPC分类号： G06F21/575 , G06F11/2284 , G06F21/79
摘要： During power up initialization, security data such as passwords and other sensitive data which are stored in a lockable memory device are read and copied to protected system management interrupt (SMI) memory space, subject to verification by code running in the SMI memory space that the call to write the security data originates with a trusted entity. Once copied to SMI memory space, the security data is erased from regular system memory and the lockable storage device is hard locked (requiring a reset to unlock) against direct access prior to starting the operating system. The copy of the security data within the SMI memory space is invisible to the operating system. However, the operating system may initiate a call to code running in the SMI memory space to check a password entered by the user, with the SMI code returning a “match” or “no match” indication. The security data may thus be employed after the lockable memory device is hard locked and the operating system is started.
摘要翻译：在上电初始化期间，存储在可锁定存储器设备中的安全数据（例如密码和其他敏感数据）被读取并复制到受保护的系统管理中断（SMI）存储器空间，经由在SMI存储器空间中运行的代码进行验证，调用写入安全数据来源于受信任的实体。一旦复制到SMI内存空间，安全数据将从常规系统内存中擦除，锁定的存储设备在启动操作系统之前就被硬锁定（需要重新启动）以防止直接访问。 SMI内存空间中的安全数据的副本对于操作系统是不可见的。然而，操作系统可以启动对在SMI存储器空间中运行的代码的调用，以检查由用户输入的密码，SMI代码返回“匹配”或“不匹配”指示。因此，在可锁定存储器件被硬锁定并且操作系统启动之后可以采用安全数据。

12. 发明授权

US06990515B2 Secure method and system to prevent internal unauthorized remotely initiated power up events in computer systems 有权
公开(公告)号：US06990515B2
公开(公告)日：2006-01-24
申请号：US10135010
申请日：2002-04-29
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： G06F1/26 , G06F15/173
CPC分类号： G06F21/575 , H04L63/12
摘要： In a computer network including a plurality of interconnected computers, one of the computers being a sleeping computer in a power down state, the sleeping computer listening for a packet associated with the sleeping computer, a method of waking the sleeping computer from the computer network. An incoming packet of data is transmitted from an administration system in the network to the sleeping computer. When the sleeping computer detects the incoming packet, it determines if the incoming packet contains a data sequence associated with the sleeping computer. If the incoming packet matches the particular data sequence associated with the sleeping computer, the sleeping computer transmits a reply message to the administration system. Upon receiving the reply, the administration system modifies the reply message in a predetermined manner and transmits the modified reply to the sleeping computer. If the sleeping computer determines the reply message was modified in the predetermined manner, then a signal is issued to wake the sleeping computer. Otherwise, the incoming packet is discarded and the sleeping computer is not awakened.

13. 发明授权

US07814532B2 Data processing system and method for password protecting a boot device 有权
标题翻译：用于密码保护引导设备的数据处理系统和方法
公开(公告)号：US07814532B2
公开(公告)日：2010-10-12
申请号：US09847085
申请日：2001-05-02
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： G06F7/04 , G08B29/00 , G06F9/00 , G06F15/177
CPC分类号： G06F21/575
摘要： A data processing system and method of password protecting the boot of a data processing system are disclosed. According to the method, in response to an attempt to boot the data processing system utilizing a boot device, the boot device is interrogated for a password. If the boot device supplies password information corresponding to that of a trusted boot device, the data processing system boots utilizing the boot device. If, however, the boot device does not supply password information corresponding to that of a trusted boot device, booting from the boot device is inhibited. In a preferred embodiment, the password information comprises a unique combination of the boot device's manufacturer-supplied model and serial numbers.
摘要翻译：公开了一种密码保护数据处理系统引导的数据处理系统和方法。根据该方法，响应于利用引导设备引导数据处理系统的尝试，引导设备被询问密码。如果引导设备提供与可信引导设备的密码信息相对应的密码信息，则数据处理系统使用引导设备引导。但是，如果引导设备不提供与受信任引导设备相对应的密码信息，则禁止从引导设备引导。在优选实施例中，密码信息包括引导设备的制造商提供的模型和序列号的唯一组合。

14. 发明授权

US07191464B2 Method and system for tracking a secure boot in a trusted computing environment 有权
标题翻译：用于在可信计算环境中跟踪安全引导的方法和系统
公开(公告)号：US07191464B2
公开(公告)日：2007-03-13
申请号：US09978381
申请日：2001-10-16
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L9/32 , G06F15/177
CPC分类号： G06F21/575
摘要： A method, system and computer readable medium containing programming instructions for tracking a secure boot in a computer system having a plurality of devices is disclosed. The method, system and computer readable medium include providing an embedded security system (ESS) in the computer system, wherein the ESS includes at least one boot platform configuration register (PCR) and a shadow PCR for each of the at least one boot PCRs, initiating a platform reset to boot the computer system via BIOS, and, for a device booted, generating a measurement value for the device and extending that value to one of the at least one boot PCRs and its corresponding shadow PCR. The system, method and computer readable medium of the present invention also includes comparing the measurement values of the boot PCRs to their corresponding shadow PCRs, whereby the computer system is trusted if the measurement values match.
摘要翻译：公开了一种包含用于在具有多个设备的计算机系统中跟踪安全引导的编程指令的方法，系统和计算机可读介质。所述方法，系统和计算机可读介质包括在所述计算机系统中提供嵌入式安全系统（ESS），其中所述ESS包括用于所述至少一个启动PCR中的每一个的至少一个引导平台配置寄存器（PCR）和阴影PCR，启动平台重置以通过BIOS引导计算机系统，并且对于引导的设备，生成所述设备的测量值并将该值扩展到所述至少一个启动PCR中的一个及其相应的阴影PCR。本发明的系统，方法和计算机可读介质还包括将引导PCR的测量值与其相应的阴影PCR进行比较，从而如果测量值匹配，则计算机系统被信任。

15. 发明授权

US07174465B2 Secure method for system attribute modification 有权
标题翻译：系统属性修改的安全方法
公开(公告)号：US07174465B2
公开(公告)日：2007-02-06
申请号：US10180160
申请日：2002-06-26
申请人： Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , William Fred Keown, Jr. , Eric Richard Kern , Randall Scott Springfield
发明人： Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , William Fred Keown, Jr. , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L9/32 , H04L9/00
CPC分类号： G06F21/57
摘要： A method is disclosed for securely updating system attributes of a client computer with a BIOS and includes signing a public key of a secure server with a private key of the BIOS prior to completion of manufacturing of the client computer to create an encrypted public key and embedded private key stored at the server. The method includes receiving at the server a request packet transmitted from the client computer requesting system attribute modification, encrypting the request packet to create an encrypted packet, and transmitting a return packet to client computer comprising the encrypted packet, the server's public key, and server instructions. The client computer decrypts the request packet using the server's public key and compares it to the original request packet, and if identical, executes the server instructions to modify the client computer's boot block to update client computer's system attributes.
摘要翻译：公开了一种用于使用BIOS安全地更新客户端计算机的系统属性的方法，并且包括在完成客户端计算机的制造之前用BIOS的私钥对安全服务器的公共密钥进行签名以创建加密的公共密钥并且嵌入私钥存储在服务器端。该方法包括在服务器处接收从客户端计算机发送的请求系统属性修改的请求分组，对请求分组进行加密以创建加密的分组，以及向包括加密分组，服务器的公钥和服务器的客户端计算机发送返回分组说明。客户端计算机使用服务器的公钥解密请求包，并将其与原始请求包进行比较，如果相同，则执行服务器指令修改客户端计算机的启动块以更新客户端计算机的系统属性。

16. 发明授权

US07082129B2 Secure method and system to prevent external unauthorized remotely initiated power up events in computer 失效
标题翻译：安全的方法和系统，以防止外部未经授权的远程启动电脑中的加电事件
公开(公告)号：US07082129B2
公开(公告)日：2006-07-25
申请号：US10134936
申请日：2002-04-29
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L12/28
CPC分类号： G06F1/3209 , H04L12/12 , H04L45/20 , Y02D50/40
摘要： In a computer network including a plurality of interconnected computers, one of the computers being a sleeping computer in a power down state, the sleeping computer listening for a packet associated with the sleeping computer, a method and system of waking the sleeping computer from the computer network. An incoming packet of data is transmitted from one of the computers in the network to the sleeping computer. When the sleeping computer detects the incoming packet, it determines if the incoming packet contains a data sequence associated with the sleeping computer. Further, the sleeping computer compares a transit value in the incoming packet to a predetermined value stored at the sleeping computer. The transit value indicates how far the data packet has traveled through the network, indicating the approximate origin of the data packet. Knowing the approximate origin of the data packet allows the client system to identify if the data packet originated from an external network. The predetermined value represents an origin within the internal network. Accordingly, if the incoming packet matches the particular data sequence associated with the sleeping computer, and the transit value in the packet matches the predetermined value stored at the sleeping computer, then a signal is issued to wake the sleeping computer. Otherwise, the incoming packet is discarded and the sleeping computer is not awaken.
摘要翻译：在包括多个相互连接的计算机的计算机网络中，计算机中的一个是处于断电状态的休眠计算机，睡眠计算机监听与休眠计算机相关联的分组，从计算机唤醒睡眠计算机的方法和系统网络。传入的数据包从网络中的一台计算机发送到睡眠计算机。当睡眠计算机检测到传入分组时，它确定传入分组是否包含与睡眠计算机相关联的数据序列。此外，睡眠计算机将输入分组中的传输值与存储在睡眠计算机上的预定值进行比较。传输值表示数据分组通过网络传播的距离，指示数据分组的近似来源。知道数据包的近似来源允许客户端系统识别数据包是否源自外部网络。预定值表示内部网络内的原点。因此，如果输入分组与休眠计算机相关联的特定数据序列匹配，并且分组中的传输值与存储在睡眠计算机上的预定值匹配，则发出信号以唤醒睡眠计算机。否则，传入的数据包被丢弃，并且睡眠的计算机没有被唤醒。

17. 发明授权

US07962759B2 Reducing the boot time of a TCPA based computing system when the core root of trust measurement is embedded in the boot block code 有权
标题翻译：当信任测度的核心根源嵌入引导块代码时，减少基于TCPA的计算系统的启动时间
公开(公告)号：US07962759B2
公开(公告)日：2011-06-14
申请号：US12426519
申请日：2009-04-20
申请人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
发明人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
IPC分类号： G06F11/30 , G06F9/24
CPC分类号： G06F21/572 , G06F21/575
摘要： A computer program product and system for reducing the boot time of a TCPA based computing system. A flash memory in the TCPA based computing system may include a register comprising bits configured to indicate whether the segments of the flash memory have been updated. The flash memory may further include a table configured to store measurements of the segments of the flash memory. The flash memory may further include a boot block code that includes a Core Root of Trust for Measurement (CRTM). The CRTM may read the bits in the register to determine if any of the segments of the flash memory have been updated. The CRTM may further obtain the measurement values in the table for those segments that store the POST BIOS code that have not been updated thereby saving time from measuring the POST BIOS code and consequently reducing the boot time.
摘要翻译：一种用于减少基于TCPA的计算系统的引导时间的计算机程序产品和系统。基于TCPA的计算系统中的闪速存储器可以包括寄存器，其包括被配置为指示闪速存储器的段是否已被更新的位。闪存可以进一步包括被配置为存储闪存的片段的测量的表。闪速存储器还可以包括引导块代码，其包括用于测量的信任核心根（CRTM）。 CRTM可以读取寄存器中的位，以确定闪存中的任何段是否已更新。 CRTM可以进一步获得存储POST BIOS代码的那些片段的表中的测量值，从而节省了测量POST BIOS代码的时间，从而减少了引导时间。

18. 发明授权

US07757112B2 System and method for booting alternate MBR in event of virus attack 有权
标题翻译：在病毒攻击的情况下启动备用MBR的系统和方法
公开(公告)号：US07757112B2
公开(公告)日：2010-07-13
申请号：US11394278
申请日：2006-03-29
申请人： Philip Lee Childs , Mark Charles Davis , Steven Dale Goodman , Joseph Wayne Freeman , Randall Scott Springfield , Rod David Waltermann
发明人： Philip Lee Childs , Mark Charles Davis , Steven Dale Goodman , Joseph Wayne Freeman , Randall Scott Springfield , Rod David Waltermann
IPC分类号： G06F12/14
CPC分类号： G06F11/1417 , G06F11/1666 , G06F21/56 , G06F21/575
摘要： In the event of a virally infected MBR on a hard disk drive that might prevent booting, a service MBR in a hidden protected area (HPA) can be used to boot a service O.S., and then the service MBR can be replaced with a previously backed-up MBR, also in the HPA, to mount any missing partitions.
摘要翻译：如果硬盘驱动器上有病毒感染的MBR可能会阻止启动，则可以使用隐藏保护区域（HPA）中的服务MBR来引导服务操作系统，然后将服务MBR替换为先前支持的 -up MBR（也在HPA中）安装任何丢失的分区。

19. 发明授权

US07702894B2 System and method for loading programs from HDD independent of operating system 有权
标题翻译：从独立于操作系统的HDD加载程序的系统和方法
公开(公告)号：US07702894B2
公开(公告)日：2010-04-20
申请号：US11954664
申请日：2007-12-12
申请人： Rod David Waltermann , Nathan J. Peterson , Joseph Wayne Freeman , Randall Scott Springfield , Mark Charles Davis , Steven Dale Goodman , Isaac Kareel , Scott Edwards Kelso
发明人： Rod David Waltermann , Nathan J. Peterson , Joseph Wayne Freeman , Randall Scott Springfield , Mark Charles Davis , Steven Dale Goodman , Isaac Kareel , Scott Edwards Kelso
IPC分类号： G06F7/00
CPC分类号： G06F9/4406
摘要： A method for booting into computer memory a non-operating system (O.S.) program from a hard disk drive (HDD) prior to booting into memory an O.S. from the HDD. The method includes establishing a table of contents (TOC) on the HDD that contains entries for special O.S. programs. A pointer to the TOC is placed in non-volatile memory of the computer that is associated with the HDD, and when BIOS of the computer is prompted to load into memory one of the special O.S. programs, the pointer is accessed and used to locate the TOC, which in turn is accessed to load the special O.S. program.
摘要翻译：在引导到存储器之前从硬盘驱动器（HDD）引导到计算机存储器的非操作系统（O.S.）程序的方法。从硬盘。该方法包括在HDD上建立内容表（TOC），其中包含特殊O.S.的条目。程式。指向TOC的指针被放置在与HDD相关联的计算机的非易失性存储器中，并且当计算机的BIOS被提示加载到存储器中时，特别的O.S. 程序中，指针被访问并用于定位TOC，而TOC又被访问以加载特殊的O.S. 程序。

20. 发明授权

US07490250B2 Method and system for detecting a tamper event in a trusted computing environment 有权
标题翻译：用于在可信计算环境中检测篡改事件的方法和系统
公开(公告)号：US07490250B2
公开(公告)日：2009-02-10
申请号：US10012170
申请日：2001-10-26
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L9/32
CPC分类号： G06F21/554 , G06F21/575
摘要： A method, system and computer readable medium containing programming instructions for detecting a tamper event in a computer system having an embedded security system (ESS), a trusted operating system, and a plurality of devices is disclosed. The method, system and computer readable medium of the present invention provide for receiving a tamper signal in the ESS, and locking the tamper signal in the ESS. According to the method, system and computer readable medium of the present invention, the trusted operating system is capable of detecting the tamper signal in the ESS.
摘要翻译：公开了一种包含用于检测具有嵌入式安全系统（ESS），可信操作系统和多个设备的计算机系统中的篡改事件的编程指令的方法，系统和计算机可读介质。本发明的方法，系统和计算机可读介质提供在ESS中接收篡改信号，并将篡改信号锁定在ESS中。根据本发明的方法，系统和计算机可读介质，可信操作系统能够检测ESS中的篡改信号。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式