专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明申请

US20080163209A1 Methods and apparatus for remeasuring a virtual machine monitor 有权
标题翻译：用于重新测试虚拟机监视器的方法和装置
公开(公告)号：US20080163209A1
公开(公告)日：2008-07-03
申请号：US11648103
申请日：2006-12-29
申请人： Carlos V. Rozas , Vincent R. Scarlata
发明人： Carlos V. Rozas , Vincent R. Scarlata
IPC分类号： G06F9/455
CPC分类号： G06F21/57 , G06F9/45533 , G06F9/45558 , G06F21/53 , G06F21/575 , G06F2009/45587 , G06F2221/033
摘要： A data processing system supports remeasurement of a virtual machine monitor (VMM). In one example process, the VMM may obtain a secret value from a trusted platform module (TPM) of the processing system. The VMM may provide the secret value from the VMM to a measurement agent executing in system management mode (SMM) of the processing system. The measurement agent may be a system management interrupt (SMI) transfer monitor (STM) that can create virtual machines to execute in SMM, for example. However, the VMM may verify the measurement agent before providing the secret value to the measurement agent. The measurement agent may generate a remeasurement value for the VMM, use the secret value that was obtained from the TPM to certify the remeasurement value, and communicate the remeasurement value to a requesting program, via the VMM. Other embodiments are described and claimed.
摘要翻译：数据处理系统支持重新测量虚拟机监视器（VMM）。在一个示例性过程中，VMM可以从处理系统的可信平台模块（TPM）获得秘密值。 VMM可以将来自VMM的秘密值提供给在处理系统的系统管理模式（SMM）中执行的测量代理。测量代理可以是例如可以创建在SMM中执行的虚拟机的系统管理中断（SMI）传送监视器（STM）。然而，VMM可以在向测量代理提供秘密值之前验证测量代理。测量代理可以生成VMM的重新测量值，使用从TPM获得的秘密值来验证重新测量值，并通过VMM将重新测量值传达给请求程序。描述和要求保护其他实施例。

32. 发明授权

US07640543B2 Memory isolation and virtualization among virtual machines 有权
标题翻译：虚拟机之间的内存隔离和虚拟化
公开(公告)号：US07640543B2
公开(公告)日：2009-12-29
申请号：US10881847
申请日：2004-06-30
申请人： Mona Vij , Carlos V. Rozas , Kumar Ranganathan
发明人： Mona Vij , Carlos V. Rozas , Kumar Ranganathan
IPC分类号： G06F9/455 , G06F21/00 , G06F13/28
CPC分类号： G06F12/109 , G06F12/1491
摘要： Disclosed is a virtual machine monitor (VMM) that controls access to a page table hierarchy by a guest operating system (OS). For example, the guest operating system may operate as part of a virtual machine. Particularly, the virtual machine monitor obtains control of memory access transactions responsive to the guest operating system attempting to access the page table hierarchy. More particularly, when the guest operating system attempts to access a page table, control of memory access transactions is trapped to the virtual machine monitor.
摘要翻译：公开了一种虚拟机监视器（VMM），其通过客户操作系统（OS）控制对页表层次结构的访问。例如，客户操作系统可以作为虚拟机的一部分来操作。特别地，虚拟机监视器响应于尝试访问页表层次的客户操作系统而获得对存储器访问事务的控制。更具体地，当客户机操作系统尝试访问页表时，存储器访问事务的控制被捕获到虚拟机监视器。

33. 发明申请

US20140040632A1 LOW-OVERHEAD CRYPTOGRAPHIC METHOD AND APPARATUS FOR PROVIDING MEMORY CONFIDENTIALITY, INTEGRITY AND REPLAY PROTECTION 有权
标题翻译：用于提供记忆保密性，完整性和重复保护的低成本克隆方法和设备
公开(公告)号：US20140040632A1
公开(公告)日：2014-02-06
申请号：US13976930
申请日：2011-12-28
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas , Alpa T. Narendra Trivedi , Men Long , David M. Durham
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas , Alpa T. Narendra Trivedi , Men Long , David M. Durham
IPC分类号： G06F21/64
CPC分类号： G06F21/64 , G06F12/1408 , G06F21/00 , G06F21/77
摘要： A method and system to provide a low-overhead cryptographic scheme that affords memory confidentiality, integrity and replay-protection by removing the critical read-after-write dependency between the various levels of the cryptographic tree. In one embodiment of the invention, the cryptographic processing of a child node can be pipelined with that of the parent nodes. This parallelization provided by the invention results in an efficient utilization of the cryptographic pipeline, enabling significantly lower performance overheads.
摘要翻译：一种提供低开销加密方案的方法和系统，其通过去除加密树的各个级别之间的关键读后依赖关系来提供内存机密性，完整性和重放保护。在本发明的一个实施例中，子节点的密码处理可以与母节点的密码处理流水线化。由本发明提供的这种并行化导致密码流水线的有效利用，能够显着降低性能开销。

34. 发明授权

US08595483B2 Associating a multi-context trusted platform module with distributed platforms 有权
标题翻译：将多上下文信任平台模块与分布式平台相关联
公开(公告)号：US08595483B2
公开(公告)日：2013-11-26
申请号：US13329713
申请日：2011-12-19
申请人： Carlos V. Rozas
发明人： Carlos V. Rozas
IPC分类号： H04L29/00
CPC分类号： G06F21/57 , G06F2221/2101 , G06F2221/2129 , G06F2221/2145
摘要： In one embodiment, the present invention includes a method for creating an instance of a virtual trusted platform module (TPM) in a central platform and associating the instance with a managed platform coupled to the central platform. Multiple such vTPM's may be instantiated, each associated with a different managed platform coupled to the central platform. The instances may all be maintained on the central platform, improving security. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括用于在中央平台中创建虚拟可信平台模块（TPM）的实例并将该实例与耦合到中央平台的受管平台相关联的方法。多个这样的vTPM可以被实例化，每个都与耦合到中央平台的不同的管理平台相关联。这些实例都可以在中央平台上维护，从而提高安全性。描述和要求保护其他实施例。

35. 发明授权

US08108668B2 Associating a multi-context trusted platform module with distributed platforms 有权
标题翻译：将多上下文信任平台模块与分布式平台相关联
公开(公告)号：US08108668B2
公开(公告)日：2012-01-31
申请号：US11474778
申请日：2006-06-26
申请人： Carlos V. Rozas
发明人： Carlos V. Rozas
IPC分类号： H04L9/00
CPC分类号： G06F21/57 , G06F2221/2101 , G06F2221/2129 , G06F2221/2145
摘要： In one embodiment, the present invention includes a method for creating an instance of a virtual trusted platform module (TPM) in a central platform and associating the instance with a managed platform coupled to the central platform. Multiple such vTPM's may be instantiated, each associated with a different managed platform coupled to the central platform. The instances may all be maintained on the central platform, improving security. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括用于在中央平台中创建虚拟可信平台模块（TPM）的实例并将该实例与耦合到中央平台的受管平台相关联的方法。多个这样的vTPM可以被实例化，每个都与耦合到中央平台的不同的管理平台相关联。这些实例都可以在中央平台上维护，从而提高安全性。描述和要求保护其他实施例。

36. 发明授权

US09342704B2 Allocating memory access control policies 有权
标题翻译：分配内存访问控制策略
公开(公告)号：US09342704B2
公开(公告)日：2016-05-17
申请号：US13993421
申请日：2011-12-28
申请人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： G06F21/00 , G06F21/62 , G06F21/53 , G06F7/04 , G06F15/16 , G06F17/30 , G06F12/00
CPC分类号： G06F21/62 , G06F21/53
摘要： Enabling access control caches for co-processors to be charged using a VMX-nonroot instruction. As a result a transition to VMX-root is not needed, saving the cycles involved in such a transition.
摘要翻译：使用VMX-nonroot指令为协处理器启用访问控制高速缓存。因此，不需要转换到VMX-root，从而节省了这种转换所涉及的周期。

37. 发明授权

US08819455B2 Parallelized counter tree walk for low overhead memory replay protection 有权
标题翻译：并行计数器树行走低开销内存重放保护
公开(公告)号：US08819455B2
公开(公告)日：2014-08-26
申请号：US13646105
申请日：2012-10-05
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , David M. Durham , Niranjan L. Cooray , Men Long , Carlos V. Rozas , Alpa T. Narendra Trivedi
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , David M. Durham , Niranjan L. Cooray , Men Long , Carlos V. Rozas , Alpa T. Narendra Trivedi
IPC分类号： G06F11/30 , G06F12/14
CPC分类号： G06F12/1408 , G06F21/71
摘要： A processor includes a memory encryption engine that provides replay and confidentiality protections to a memory region. The memory encryption engine performs low-overhead parallelized tree walks along a counter tree structure. The memory encryption engine upon receiving an incoming read request for the protected memory region, performs a dependency check operation to identify dependency between the incoming read request and an in-process request and to remove the dependency when the in-process request is a read request that is not currently suspended.
摘要翻译：处理器包括为存储器区域提供重放和保密性保护的存储器加密引擎。存储器加密引擎沿着计数器树结构执行低架构并行化的树行走。存储器加密引擎在接收到对受保护的存储器区域的传入读取请求时，执行依赖性检查操作以识别传入的读取请求与进程内请求之间的依赖关系，并且当进程内请求是读取请求时，去除依赖关系目前尚未暂停。

38. 发明申请

US20140208109A1 METHOD AND SYSTEM FOR PROTECTING MEMORY INFORMATION IN A PLATFORM 有权
标题翻译：保护平台内存信息的方法和系统
公开(公告)号：US20140208109A1
公开(公告)日：2014-07-24
申请号：US13976935
申请日：2011-12-28
申请人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： H04L29/06
CPC分类号： G06F21/64 , G06F12/1408 , G06F21/78 , G06F21/79 , H04L9/0643 , H04L2209/12
摘要： A method and system to provide an effective, scalable and yet low-cost solution for Confidentiality, Integrity and Replay protection for sensitive information stored in a memory and prevent an attacker from observing and/or modifying the state of the system. In one embodiment of the invention, the system has strong hardware protection for its memory contents via XTS-tweak mode of encryption where the tweak is derived based on “Global and Local Counters”. This scheme offers to enable die-area efficient Replay protection for any sized memory by allowing multiple counter levels and facilitates using small counter-sizes to derive the “tweak” used in the XTS encryption without sacrificing cryptographic strength.
摘要翻译：一种方法和系统，为存储在存储器中的敏感信息提供有效，可扩展且低成本的保密性，完整性和重放保护解决方案，并防止攻击者观察和/或修改系统的状态。在本发明的一个实施例中，系统通过经由XTS调整加密模式对其存储器内容具有强大的硬件保护，其中基于“全局和本地计数器”导出调整。该方案提供了通过允许多个计数器级别为任何大小的存储器提供芯片区域高效的重放保护，并有助于使用小型计数器来导出XTS加密中使用的“调整”，而不会牺牲加密强度。

39. 发明授权

US09092644B2 Method and system for protecting memory information in a platform 有权
标题翻译：保护平台内存信息的方法和系统
公开(公告)号：US09092644B2
公开(公告)日：2015-07-28
申请号：US13976935
申请日：2011-12-28
申请人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： G06F21/64 , H04L9/06 , G06F12/14 , G06F21/78 , G06F21/79
CPC分类号： G06F21/64 , G06F12/1408 , G06F21/78 , G06F21/79 , H04L9/0643 , H04L2209/12
摘要： A method and system to provide an effective, scalable and yet low-cost solution for Confidentiality, Integrity and Replay protection for sensitive information stored in a memory and prevent an attacker from observing and/or modifying the state of the system. In one embodiment of the invention, the system has strong hardware protection for its memory contents via XTS-tweak mode of encryption where the tweak is derived based on “Global and Local Counters”. This scheme offers to enable die-area efficient Replay protection for any sized memory by allowing multiple counter levels and facilitates using small counter-sizes to derive the “tweak” used in the XTS encryption without sacrificing cryptographic strength.
摘要翻译：一种方法和系统，为存储在存储器中的敏感信息提供有效，可扩展且低成本的保密性，完整性和重放保护解决方案，并防止攻击者观察和/或修改系统的状态。在本发明的一个实施例中，系统通过经由XTS调整加密模式对其存储器内容具有强大的硬件保护，其中基于“全局和本地计数器”导出调整。该方案提供了通过允许多个计数器级别为任何大小的存储器提供芯片区域高效的重放保护，并有助于使用小型计数器来导出XTS加密中使用的“调整”，而不会牺牲加密强度。

40. 发明申请

US20140123235A1 Allocating Memory Access Control Policies 有权
标题翻译：分配内存访问控制策略
公开(公告)号：US20140123235A1
公开(公告)日：2014-05-01
申请号：US13993421
申请日：2011-12-28
申请人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： G06F21/62
CPC分类号： G06F21/62 , G06F21/53
摘要： Enabling access control caches for co-processors to be charged using a VMX-nonroot instruction. As a result a transition to VMX-root is not needed, saving the cycles involved in such a transition.
摘要翻译：使用VMX-nonroot指令为协处理器启用访问控制高速缓存。因此，不需要转换到VMX-root，从而节省了这种转换所涉及的周期。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式