专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20180212971A1 DATA UNSEALING WITH A SEALING ENCLAVE 审中-公开
公开(公告)号：US20180212971A1
公开(公告)日：2018-07-26
申请号：US15414505
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： H04L29/06 , H04L9/08
摘要： Techniques for securely sealing and unsealing enclave data across platforms are presented. Enclave data from a source enclave hosted on a first computer may be securely sealed to a sealing enclave on a second computer, and may further be securely unsealed for a destination enclave on a third computer. Securely transferring an enclave workload from one computer to another is disclosed.

22. 发明申请

US20180212770A1 KEY VAULT ENCLAVE 审中-公开
公开(公告)号：US20180212770A1
公开(公告)日：2018-07-26
申请号：US15414394
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： H04L9/08 , H04L9/32 , H04L29/06
CPC分类号： H04L9/0894 , G06F21/602 , H04L9/0861 , H04L9/3247 , H04L63/0428
摘要： Techniques for implementing a key vault as an enclave are presented. The techniques include securely storing, in a key vault enclave, a key for an encryption system according to a key use policy; sending an vault attestation report of a key vault enclave to a vault client; and performing an operation in the key vault enclave with the key. Some embodiments further include receiving, at the key vault enclave, a client attestation report of the vault client wherein the vault client and key vault enclave are hosted on different native enclave platforms.

23. 发明申请

US20180211054A1 DEPENDENT ENCLAVE BINARIES 审中-公开
公开(公告)号：US20180211054A1
公开(公告)日：2018-07-26
申请号：US15414412
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： G06F21/62 , G06F21/64
CPC分类号： G06F21/6218 , G06F21/57 , G06F21/64
摘要： Techniques for instantiating an enclave from dependent enclave images are presented. The techniques include identifying a first set of dependent enclave indicators from a primary enclave image, identifying a first dependent enclave image corresponding to one of the first set of dependent enclave indicators, creating a secure enclave container, and copying at least a portion of the primary enclave image and at least a portion of the first dependent enclave image into the secure enclave container.

24. 发明申请

US20180211035A1 ABSTRACT ENCLAVE IDENTITY 审中-公开
公开(公告)号：US20180211035A1
公开(公告)日：2018-07-26
申请号：US15414355
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： G06F21/53 , H04L9/32 , G06F21/64 , H04L9/06
CPC分类号： G06F21/53 , G06F21/57 , G06F21/64 , G06F21/74 , H04L9/0643 , H04L9/3247
摘要： An abstract enclave identity is presented. An abstract identity may be a secure identity that may be the same for multiple related, but not identical, enclave instantiations. An enclave identity value may be determined from an abstract enclave identity type with respect to a instantiated enclave. Various enclave operations may be performed with an abstract identity, such as sealing data to an abstract identity, incrementing a monotonic counter, making trusted time measurement.

25. 发明申请

US20170046520A1 DATA CENTER PRIVACY 审中-公开
标题翻译：数据中心隐私
公开(公告)号：US20170046520A1
公开(公告)日：2017-02-16
申请号：US14824310
申请日：2015-08-12
申请人： Microsoft Technology Licensing, LLC
发明人： Olga Ohrimenko , Manuel Costa , Cedric Fournet , Christos Gkantsidis , Markulf Kohlweiss , Divya Sharma
IPC分类号： G06F21/60 , G06F21/62
CPC分类号： G06F21/602 , G06F9/5066 , G06F21/6218 , H04L9/14 , H04L63/0428 , H04L2209/16
摘要： A data center has a plurality of secure processing units; a plurality of data stores holding encrypted data records; and a network connecting the secure processing units and the data stores. The secure processing units comprise computing functionality configured to execute a data processing operation in parallel on the secure processing units by being configured to read encrypted records from the stores, process one or more of the encrypted records within the secure processing units, send one or more of the encrypted records to the stores. The data center is configured to carry out a secret shuffle of the data records to protect the privacy of data processed in the data center from an observer observing any one or more of: the reading of the records, the sending of the records, the writing of the records; the secret shuffle comprising a random permutation of the records hidden from the observer.
摘要翻译：数据中心具有多个安全处理单元; 保存加密数据记录的多个数据存储器; 以及连接安全处理单元和数据存储的网络。安全处理单元包括计算功能，其被配置为在安全处理单元上并行地执行数据处理操作，其被配置为从存储器读取加密的记录，处理安全处理单元内的一个或多个加密记录，发送一个或多个的加密记录到商店。数据中心配置为执行数据记录的秘密洗牌，以保护数据中心处理数据的隐私，观察者遵守以下任何一个或多个：记录的读取，记录的发送，写入的记录; 秘密洗牌包括从观察者隐藏的记录的随机排列。

26. 发明授权

US11921911B2 Peripheral device 有权
公开(公告)号：US11921911B2
公开(公告)日：2024-03-05
申请号：US17374942
申请日：2021-07-13
申请人： Microsoft Technology Licensing, LLC
发明人： Stavros Volos , David Thomas Chisnall , Saurabh Mohan Kulkarni , Kapil Vaswani , Manuel Costa , Samuel Alexander Webster , Cédric Alain Marie Fournet , Richard Osborne , Daniel John Pelham Wilkinson , Graham Bernard Cunningham
IPC分类号： H04L29/00 , G06F21/60 , G06F21/85 , H04L9/30 , H04L9/32
CPC分类号： G06F21/85 , G06F21/602 , H04L9/30 , H04L9/3265
摘要： A peripheral device, for use with a host, comprises one or more compute elements a security module and at least one encryption unit. The security module is configured to form a trusted execution environment on the peripheral device for processing sensitive data using sensitive code. The sensitive data and sensitive code are provided by a trusted computing entity which is in communication with the host computing device. The at least one encryption unit is configured to encrypt and decrypt data transferred between the trusted execution environment and the trusted computing entity via the host computing device. The security module is configured to compute and send an attestation to the trusted computing entity to attest that the sensitive code is in the trusted execution environment.

27. 发明授权

US11438155B2 Key vault enclave 有权
公开(公告)号：US11438155B2
公开(公告)日：2022-09-06
申请号：US15414394
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： H04L9/08 , G06F21/60 , H04L9/32 , H04L9/40
摘要： Techniques for implementing a key vault as an enclave are presented. The techniques include securely storing, in a key vault enclave, a key for an encryption system according to a key use policy; sending an vault attestation report of a key vault enclave to a vault client; and performing an operation in the key vault enclave with the key. Some embodiments further include receiving, at the key vault enclave, a client attestation report of the vault client wherein the vault client and key vault enclave are hosted on different native enclave platforms.

28. 发明授权

US10931652B2 Data sealing with a sealing enclave 有权
公开(公告)号：US10931652B2
公开(公告)日：2021-02-23
申请号：US15414492
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： H04L29/06 , G06F12/14 , G06F21/62 , G06F21/60
摘要： Techniques for securely sealing and unsealing enclave data across platforms are presented. Enclave data from a source enclave hosted on a first computer may be securely sealed to a sealing enclave on a second computer, and may further be securely unsealed for a destination enclave on a third computer. Securely transferring an enclave workload from one computer to another is disclosed.

29. 发明授权

US10911451B2 Cross-platform enclave data sealing 有权
公开(公告)号：US10911451B2
公开(公告)日：2021-02-02
申请号：US15414371
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： H04L29/06 , G06F21/64 , G06F21/60
摘要： Techniques for securely sealing and unsealing enclave data across platforms are presented. Enclave data from a source enclave hosted on a first computer may be securely sealed to a sealing enclave on a second computer, and may further be securely unsealed for a destination enclave on a third computer. Securely transferring an enclave workload from one computer to another is disclosed.

30. 发明授权

US10867029B2 Enclave client abstraction model 有权
公开(公告)号：US10867029B2
公开(公告)日：2020-12-15
申请号：US15414332
申请日：2017-01-24
申请人： Microsoft Technology Licensing, LLC
发明人： Manuel Costa
IPC分类号： G06F9/455 , G06F21/53
CPC分类号： G06F21/53 , G06F9/45558 , G06F2009/45587
摘要： Abstraction programming models of enclave security platforms are described, including receiving a request from an enclave client according to a client abstraction protocol, converting the request into a native enclave protocol, and sending the converted request to a native platform. The request may be, for example: a request to instantiate an enclave, verify an attestation report of an enclave, a request to call into an enclave, or a request to allocate memory that is shared with both the enclave and the enclave client.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式