专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20150378941A1 INSTRUCTIONS AND LOGIC TO INTERRUPT AND RESUME PAGING IN A SECURE ENCLAVE PAGE CACHE 有权
标题翻译：指令和逻辑中断和恢复寻呼在安全的页面缓存
公开(公告)号：US20150378941A1
公开(公告)日：2015-12-31
申请号：US14318508
申请日：2014-06-27
申请人： Carlos V. Rozas , Ilya Alexandrovich , Gilbert Neiger , Francis X. McKeen , Ittai Anati , Vedvyas Shanbhogue , Shay Gueron
发明人： Carlos V. Rozas , Ilya Alexandrovich , Gilbert Neiger , Francis X. McKeen , Ittai Anati , Vedvyas Shanbhogue , Shay Gueron
IPC分类号： G06F13/24 , G06F12/08
CPC分类号： G06F13/24 , G06F12/08 , G06F12/0806 , G06F12/0875 , G06F21/00 , G06F21/71 , G06F21/85 , G06F2212/1024 , G06F2212/1052 , G06F2212/62
摘要： Instructions and logic interrupt and resume paging in secure enclaves. Embodiments include instructions, specify page addresses allocated to a secure enclave, the instructions are decoded for execution by a processor. The processor includes an enclave page cache to store secure data in a first cache line and in a last cache line for a page corresponding to the page address. A page state is read from the first or last cache line for the page when an entry in an enclave page cache mapping for the page indicates only a partial page is stored in the enclave page cache. The entry for a partial page may be set, and a new page state may be recorded in the first cache line when writing-back, or in the last cache line when loading the page when the instruction's execution is being interrupted. Thus the writing-back, or loading can be resumed.
摘要翻译：指令和逻辑在安全飞地中中断和恢复寻呼。实施例包括指令，指定分配给安全空间的页面地址，指令被解码以供处理器执行。处理器包括用于将安全数据存储在与页面地址对应的页面的第一高速缓存行中的最后高速缓存行中的一个包围页面缓存。当页面的飞地页面缓存映射中的条目仅指示部分页面存储在飞地页面缓存中时，从页面的第一个或最后一个高速缓存行读取页面状态。可以设置部分页面的条目，并且当写回时可以在第一高速缓存行中记录新的页面状态，或者当指令的执行中断时在最后的高速缓存行中加载页面时。因此，可以恢复回写或加载。

22. 发明授权

US09189411B2 Logging in secure enclaves 有权
标题翻译：登录安全的飞地
公开(公告)号：US09189411B2
公开(公告)日：2015-11-17
申请号：US13729348
申请日：2012-12-28
申请人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
发明人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
IPC分类号： G06F12/00 , G06F12/08 , G06F12/14
CPC分类号： G06F21/60 , G06F12/0875 , G06F12/14 , G06F12/145 , G06F21/72 , G06F2212/1052 , G06F2212/152 , G06F2212/452
摘要： Embodiments of an invention for logging in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction having an associated enclave page cache address. The execution unit is to execute the instruction without causing a virtual machine exit, wherein execution of the instruction includes logging the instruction and the associated enclave page cache address.
摘要翻译：公开了用于登录安全飞行器的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。该指令单元用于接收具有关联的飞地页面缓存地址的指令。执行单元执行指令而不引起虚拟机退出，其中指令的执行包括记录指令和关联的飞地页面缓存地址。

23. 发明申请

US20150033034A1 MEASURING A SECURE ENCLAVE 审中-公开
标题翻译：测量一个安全的包装
公开(公告)号：US20150033034A1
公开(公告)日：2015-01-29
申请号：US13949110
申请日：2013-07-23
申请人： Gideon Gerzon , Shay Gueron , Simon P. Johnson , Francis X. Mckeen , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Ittai Anati
发明人： Gideon Gerzon , Shay Gueron , Simon P. Johnson , Francis X. Mckeen , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Ittai Anati
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： H04L9/3239 , G06F9/3004 , G06F12/1441 , G06F21/71 , G06F2221/2111
摘要： Embodiments of an invention for measuring a secure enclave are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first, a second, and a third instruction. The execution unit is to execute the first, the second, and the third instruction. Execution of the first instruction includes initializing a measurement field in a control structure of a secure enclave with an initial value. Execution of the second instruction includes adding a region to the secure enclave. Execution of the third instruction includes measuring a subregion of the region.
摘要翻译：公开了用于测量安全飞地的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收第一，第二和第三指令。执行单元执行第一，第二和第三指令。执行第一指令包括初始化具有初始值的安全飞地的控制结构中的测量场。执行第二条指令包括将一个区域添加到安全飞地。执行第三条指令包括测量该区域的一个子区域。

24. 发明授权

US08819455B2 Parallelized counter tree walk for low overhead memory replay protection 有权
标题翻译：并行计数器树行走低开销内存重放保护
公开(公告)号：US08819455B2
公开(公告)日：2014-08-26
申请号：US13646105
申请日：2012-10-05
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , David M. Durham , Niranjan L. Cooray , Men Long , Carlos V. Rozas , Alpa T. Narendra Trivedi
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , David M. Durham , Niranjan L. Cooray , Men Long , Carlos V. Rozas , Alpa T. Narendra Trivedi
IPC分类号： G06F11/30 , G06F12/14
CPC分类号： G06F12/1408 , G06F21/71
摘要： A processor includes a memory encryption engine that provides replay and confidentiality protections to a memory region. The memory encryption engine performs low-overhead parallelized tree walks along a counter tree structure. The memory encryption engine upon receiving an incoming read request for the protected memory region, performs a dependency check operation to identify dependency between the incoming read request and an in-process request and to remove the dependency when the in-process request is a read request that is not currently suspended.
摘要翻译：处理器包括为存储器区域提供重放和保密性保护的存储器加密引擎。存储器加密引擎沿着计数器树结构执行低架构并行化的树行走。存储器加密引擎在接收到对受保护的存储器区域的传入读取请求时，执行依赖性检查操作以识别传入的读取请求与进程内请求之间的依赖关系，并且当进程内请求是读取请求时，去除依赖关系目前尚未暂停。

25. 发明申请

US20140208109A1 METHOD AND SYSTEM FOR PROTECTING MEMORY INFORMATION IN A PLATFORM 有权
标题翻译：保护平台内存信息的方法和系统
公开(公告)号：US20140208109A1
公开(公告)日：2014-07-24
申请号：US13976935
申请日：2011-12-28
申请人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： H04L29/06
CPC分类号： G06F21/64 , G06F12/1408 , G06F21/78 , G06F21/79 , H04L9/0643 , H04L2209/12
摘要： A method and system to provide an effective, scalable and yet low-cost solution for Confidentiality, Integrity and Replay protection for sensitive information stored in a memory and prevent an attacker from observing and/or modifying the state of the system. In one embodiment of the invention, the system has strong hardware protection for its memory contents via XTS-tweak mode of encryption where the tweak is derived based on “Global and Local Counters”. This scheme offers to enable die-area efficient Replay protection for any sized memory by allowing multiple counter levels and facilitates using small counter-sizes to derive the “tweak” used in the XTS encryption without sacrificing cryptographic strength.
摘要翻译：一种方法和系统，为存储在存储器中的敏感信息提供有效，可扩展且低成本的保密性，完整性和重放保护解决方案，并防止攻击者观察和/或修改系统的状态。在本发明的一个实施例中，系统通过经由XTS调整加密模式对其存储器内容具有强大的硬件保护，其中基于“全局和本地计数器”导出调整。该方案提供了通过允许多个计数器级别为任何大小的存储器提供芯片区域高效的重放保护，并有助于使用小型计数器来导出XTS加密中使用的“调整”，而不会牺牲加密强度。

26. 发明申请

US20120137137A1 METHOD AND APPARATUS FOR KEY PROVISIONING OF HARDWARE DEVICES 审中-公开
标题翻译：关键提供硬件设备的方法和装置
公开(公告)号：US20120137137A1
公开(公告)日：2012-05-31
申请号：US12956793
申请日：2010-11-30
申请人： Ernest F. Brickell , Shay Gueron , Jiangtao Li , Carlos V. Rozas , Daniel Nemiroff , Vincent R. Scarlata , Uday R. Savagaonkar , Simon P. Johnson
发明人： Ernest F. Brickell , Shay Gueron , Jiangtao Li , Carlos V. Rozas , Daniel Nemiroff , Vincent R. Scarlata , Uday R. Savagaonkar , Simon P. Johnson
IPC分类号： G06F21/00
CPC分类号： H04L9/0816 , G06F21/572 , G06F21/73
摘要： Keying materials used for providing security in a platform are securely provisioned both online and offline to devices in a remote platform. The secure provisioning of the keying materials is based on a revision of firmware installed in the platform.
摘要翻译：用于在平台中提供安全性的键控材料可以安全地在线和离线地配置到远程平台中的设备。密钥材料的安全配置基于安装在平台中的固件的修订版本。

27. 发明申请

US20110191574A1 METHOD AND APPARATUS FOR BINDING TPM KEYS TO EXECUTION ENTITIES 有权
标题翻译：用于绑定TPM KEYS执行实体的方法和装置
公开(公告)号：US20110191574A1
公开(公告)日：2011-08-04
申请号：US13016145
申请日：2011-01-28
申请人： Alexander Iliev , Vincent R. Scarlata , Carlos V. Rozas
发明人： Alexander Iliev , Vincent R. Scarlata , Carlos V. Rozas
IPC分类号： G06F15/177 , H04L9/32
CPC分类号： G06F21/57 , G06F21/72 , G06F2221/2141 , H04L9/0897
摘要： A method and apparatus for binding trusted platform module (TPM) keys to execution entities are described. In one embodiment, the method includes the receipt of an authorization request issued by an execution entity for authorization data. According to the authorization request, the execution entity may be measured to generate an entity digest value. Once the entity digest value is generated, a platform reference module may grant the authorization request if the entity digest value verifies that the execution entity is an owner of the key held by the TPM. Accordingly, in one embodiment, a platform reference module, rather than an execution entity, holds the authorization data required by a TPM to use a key owned by the execution entity and held within sealed storage by the TPM. Other embodiments are described and claimed.
摘要翻译：描述了将可信平台模块（TPM）密钥绑定到执行实体的方法和装置。在一个实施例中，该方法包括接收由执行实体发出的授权数据的授权请求。根据授权请求，可以测量执行实体以生成实体摘要值。一旦生成实体摘要值，如果实体摘要值验证执行实体是TPM持有的密钥的所有者，则平台引用模块可以授予授权请求。因此，在一个实施例中，平台参考模块而不是执行实体保存TPM所需的授权数据，以使用由执行实体拥有的密钥并由TPM保存在密封存储器内。描述和要求保护其他实施例。

28. 发明申请

US20080244746A1 RUN-TIME REMEASUREMENT ON A TRUSTED PLATFORM 审中-公开
标题翻译：对一个有争议的平台的运行时间恢复
公开(公告)号：US20080244746A1
公开(公告)日：2008-10-02
申请号：US11692672
申请日：2007-03-28
申请人： Carlos V. Rozas , David Bowler , Vincent R. Scarlata , Burzin Daruwala
发明人： Carlos V. Rozas , David Bowler , Vincent R. Scarlata , Burzin Daruwala
IPC分类号： G06F15/18
CPC分类号： G06F21/57 , G06F2221/2101
摘要： A method and system are disclosed. In one embodiment, the method includes invoking a run-time measurement agent (RTMA) to run on a trusted platform, the RTMA measuring a core system code block multiple times after a single boot on the trusted platform; and a trusted platform module storing these multiple measurements.
摘要翻译：公开了一种方法和系统。在一个实施例中，该方法包括调用在受信任平台上运行的运行时测量代理（RTMA），RTMA在可信平台上单次引导之后多次测量核心系统代码块; 以及存储这些多个测量的可信平台模块。

29. 发明授权

US10642972B2 Extending packet processing to trusted programmable and fixed-function accelerators 有权
公开(公告)号：US10642972B2
公开(公告)日：2020-05-05
申请号：US15298419
申请日：2016-10-20
申请人： Kapil Sood , Somnath Chakrabarti , Wei Shen , Carlos V. Rozas , Mona Vij , Vincent R. Scarlata
发明人： Kapil Sood , Somnath Chakrabarti , Wei Shen , Carlos V. Rozas , Mona Vij , Vincent R. Scarlata
IPC分类号： G06F11/30 , G06F21/53 , G06F21/57 , G06F21/44 , G06F9/455 , G06F21/60 , G06F12/14 , G06F8/61
CPC分类号： G06F21/53 , G06F9/45558 , G06F21/44 , G06F21/572 , G06F21/606 , G06F8/61 , G06F12/1408 , G06F2009/45587 , G06F2212/1052 , G06F2212/152 , G06F2212/402
摘要： Methods and apparatus for extending packet processing to trusted programmable and fixed-function accelerators. Secure enclaves are created in system memory of a compute platform, wherein software code external from a secure enclave cannot access code or data within a secure enclave, and software code in a secure enclave can access code and data both within the secure enclave and external to the secure enclave. Software code for implementing packet processing operations is installed in the secure enclaves. The compute platform further includes one or more hardware-based accelerators that are used by the software to offload packet processing operations. The accelerators are configured to read packet data from input queues, process the data, and output processed data to output queues, wherein the input and output queues are located in encrypted portions of memory that may be in a secure enclave or external to the secure enclaves. Tokens are used by accelerators to validate access to memory in secure enclaves, and used by both accelerators and secure enclaves to access encrypted memory external to secure enclaves.

30. 发明申请

US20160203340A1 METHOD AND APPARATUS FOR SECURELY SAVING AND RESTORING THE STATE OF A COMPUTING PLATFORM 审中-公开
公开(公告)号：US20160203340A1
公开(公告)日：2016-07-14
申请号：US15079579
申请日：2016-03-24
申请人： VINCENT R. SCARLATA , SIMON P. JOHNSON , CARLOS V. ROZAS , FRANCIS X. MCKEEN , ITTAI ANATII , ILYA ALEXANDROVICH , REBEKAH M. LESLIE-HURD
发明人： VINCENT R. SCARLATA , SIMON P. JOHNSON , CARLOS V. ROZAS , FRANCIS X. MCKEEN , ITTAI ANATII , ILYA ALEXANDROVICH , REBEKAH M. LESLIE-HURD
IPC分类号： G06F21/74 , G06F21/85 , G06F21/81 , G06F21/62
CPC分类号： G06F21/64 , G06F21/62 , G06F21/74 , G06F21/81 , G06F21/85 , H04L63/061 , H04L63/0876
摘要： An apparatus and method for securely suspending and resuming the state of a processor. For example, one embodiment of a method comprises: generating a data structure including at least the monotonic counter value; generating a message authentication code (MAC) over the data structure using a first key; securely providing the data structure and the MAC to a module executed on the processor; the module verifying the MAC, comparing the monotonic counter value with a counter value stored during a previous suspend operation and, if the counter values match, then loading processor state required for the resume operation to complete. Another embodiment of a method comprises: generating a first key by a processor; securely sharing the first key with an off-processor component; and using the first key to generate a pairing ID usable to identify a pairing between the processor and the off-processor component.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式