专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US06823464B2 Method of providing enhanced security in a remotely managed computer system 有权
标题翻译：在远程管理的计算机系统中提供增强的安全性的方法
公开(公告)号：US06823464B2
公开(公告)日：2004-11-23
申请号：US09793239
申请日：2001-02-26
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield , James Peter Ward
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F124
CPC分类号： G06F21/305 , G06F21/57
摘要： Authentication of an entity remotely managing a data processing system is enabled to allow changes by the remote entity to hard-locked critical security information normally accessible only during the POST and only to trusted entities such as the system BIOS. The remote entity builds a change request and generates a hash from the change request with a current password appended. The change request and the hash are stored in a lockable non-volatile buffer which, once locked, requires a system reset to access. During the next POST, a trusted entity such as the system BIOS reads the change request, generates an authentication hash from the change request and the current password within the hard-locked security information, and compares the buffered hash with the generated hash. If a match is determined, the security information is updated; otherwise a tamper error is reported.
摘要翻译：允许远程管理数据处理系统的实体的认证允许远程实体更改硬锁定通常只能在POST期间可访问的关键安全性信息，并且只允许受信任的实体（如系统BIOS）。远程实体构建更改请求，并从附加当前密码的更改请求生成哈希值。更改请求和哈希存储在可锁定的非易失性缓冲区中，该缓冲区一旦被锁定就需要系统重置才能访问。在下一个POST期间，诸如系统BIOS的受信任的实体读取更改请求，从改变请求中生成认证散列，并在硬锁定的安全信息内生成当前密码，并将缓冲的散列与生成的散列进行比较。如果确定匹配，则更新安全信息; 否则报告篡改错误。

32. 发明授权

US06993648B2 Proving BIOS trust in a TCPA compliant system 有权
公开(公告)号：US06993648B2
公开(公告)日：2006-01-31
申请号：US09931538
申请日：2001-08-16
申请人： Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
发明人： Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F9/24
CPC分类号： G06F9/4401 , G06F8/65
摘要： When a flash unlock routine unlocks the flash memory to permit updating of a BIOS image, a message is left in secure non-volatile memory, such as a EEPROM. Upon the next re-boot, the boot block code will detect the special message in the non-volatile memory and perform a signature verification of the next block of code that is to be executed during the POST process. This code block will check the remainder of the BIOS image before POST proceeds.

33. 发明授权

US07484105B2 Flash update using a trusted platform module 有权
标题翻译：使用可信平台模块进行Flash更新
公开(公告)号：US07484105B2
公开(公告)日：2009-01-27
申请号：US09931629
申请日：2001-08-16
申请人： Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
发明人： Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F11/30 , H04L9/32 , H04L9/00
CPC分类号： G06F21/572
摘要： An update utility requests a signature verification of the utility's signature along with a request to unlock the flash memory stored in the utility. A trusted platform module (“TPM”) performs a signature verification of the utility using a previously stored public key. Upon verification of the signature, the TPM unlocks the flash memory to permit update of the utility. Upon completion of the update, the flash utility issues a lock request to the TPM to relock the flash memory.
摘要翻译：更新实用程序请求实用程序的签名的签名验证以及解锁存储在该实用程序中的闪存的请求。可信平台模块（“TPM”）使用先前存储的公钥执行实用程序的签名验证。在验证签名后，TPM解锁闪存以允许更新实用程序。完成更新后，闪存实用程序向TPM发出锁定请求以重新锁定闪存。

34. 发明授权

US07269747B2 Physical presence determination in a trusted platform 有权
标题翻译：可靠平台中的物理存在确定
公开(公告)号：US07269747B2
公开(公告)日：2007-09-11
申请号：US10411408
申请日：2003-04-10
申请人： Ryan Charles Catherman , Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
发明人： Ryan Charles Catherman , Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F1/28
CPC分类号： G06F21/57 , G06F21/575
摘要： A computer system is presented which provides a trusted platform by which operations can be performed with an increased level trust and confidence. The basis of trust for the computer system is established by an encryption coprocessor and by code which interfaces with the encryption coprocessor and establishes root of trust metrics for the platform. The encryption coprocessor is built such that certain critical operations are allowed only if physical presence of an operator has been detected. Physical presence is determined by inference based upon the status of registers in the core chipset.
摘要翻译：提出了一种计算机系统，其提供可信赖的平台，通过该平台可以以更高级别的信任和置信度执行操作。计算机系统的信任基础由加密协处理器和与加密协处理器接口的代码建立，并为平台建立信任度量的根。构建加密协处理器，使得仅当检测到操作者的物理存在时才允许某些关键操作。基于核心芯片组中寄存器的状态的推理确定物理存在。

35. 发明授权

US07254722B2 Trusted platform motherboard having physical presence detection based on activation of power-on-switch 有权
标题翻译：基于上电开关激活的可信平台主板具有物理存在检测
公开(公告)号：US07254722B2
公开(公告)日：2007-08-07
申请号：US10411415
申请日：2003-04-10
申请人： Ryan Charles Catherman , Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
发明人： Ryan Charles Catherman , Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F1/28
CPC分类号： G06F21/57 , G06F21/575 , H05K1/181
摘要： A motherboard for a computer system is presented which provides a trusted platform by which operations can be performed with an increased level trust and confidence. The basis of trust for the motherboard is established by an encryption coprocessor and by code which interfaces with the encryption coprocessor and establishes root of trust metrics for the platform. The encryption coprocessor is built such that certain critical operations are allowed only if physical presence of an operator has been detected. Physical presence is determined by inference based upon the status of registers in the core chipset on the motherboard.
摘要翻译：提供了一种用于计算机系统的主板，其提供可信赖的平台，通过该平台可以以更高级别的信任和置信度执行操作。主板的信任基础由加密协处理器和与加密协处理器接口的代码建立，并为平台建立信任度量的根源。构建加密协处理器，使得仅当检测到操作者的物理存在时才允许某些关键操作。基于主板上核心芯片组中寄存器的状态，推理确定物理存在。

36. 发明授权

US07194762B2 Method of creating password list for remote authentication to services 失效
标题翻译：创建用于远程认证服务的密码列表的方法
公开(公告)号：US07194762B2
公开(公告)日：2007-03-20
申请号：US09998484
申请日：2001-11-30
申请人： David Carroll Challener , Steven Dale Goodman
发明人： David Carroll Challener , Steven Dale Goodman
IPC分类号： H04L9/14
CPC分类号： G06F21/46
摘要： A method for providing security in password-based access to computer networks, the network including a server and a remote user, includes: signing a phrase by a security chip of the server using an encryption key; associating the signed phrase with the remote user; signing the phrase with an encryption key obtained by the security chip when a request for access to the computer network is received from the remote user; comparing the phrase signed with the obtained encryption key with the signed phrase associated with the remote user; and granting access to the remote user if the phrase signed with the obtained encryption key is the same as the stored signed phrase associated with the remote user. The use of the encryption key protects against “dictionary attacks”. Use of the security chip protects against offline attacks. These provide greater security for the computer network.
摘要翻译：一种用于提供对计算机网络的基于密码的访问中的安全性的方法，所述网络包括服务器和远程用户，包括：使用加密密钥由所述服务器的安全芯片签名短语; 将有符号短语与远程用户相关联; 当从远程用户接收到访问计算机网络的请求时，利用由安全芯片获得的加密密钥来签名该短语; 将与获得的加密密钥签名的短语与与远程用户相关联的有符号短语进行比较; 以及如果使用获得的加密密钥签名的短语与与远程用户相关联的所存储的已签名短语相同，则允许对远程用户的访问。使用加密密钥可防止“字典攻击”。使用安全芯片可防止脱机攻击。这些为计算机网络提供了更大的安全性。

37. 发明授权

US06711690B2 Secure write blocking circuit and method for preventing unauthorized write access to nonvolatile memory 失效
标题翻译：安全写阻塞电路和防止非易失性存储器的非法写入访问的方法
公开(公告)号：US06711690B2
公开(公告)日：2004-03-23
申请号：US09953775
申请日：2001-09-17
申请人： Richard Alan Dayan , Steven Dale Goodman , Joseph Michael Pennisi , Randall Scott Springfield
发明人： Richard Alan Dayan , Steven Dale Goodman , Joseph Michael Pennisi , Randall Scott Springfield
IPC分类号： G06F900
CPC分类号： G06F21/79
摘要： A secure write blocking circuit and method of operation thereof. The secure write blocking circuit includes enable and disable block input terminals coupled to a blocking circuit. The blocking circuit, such as a set/reset latch in a preferred embodiment, generates a block signal to prevent write access to a nonvolatile memory device, such as flash memory, in response to signals provided to the enable and disable input terminals. The secure write blocking circuit also includes an interrupt generator, coupled to the disable block input terminal, that generates an interrupt signal in response to a signal at the disable input terminal. In a related embodiment the secure write blocking circuit also includes a logic circuit, coupled to the blocking circuit, that receives the block signal and a write enable signal and in response thereto generates a control signal to a write enable input of the nonvolatile memory device.
摘要翻译：一种安全的写阻塞电路及其操作方法。安全写阻断电路包括耦合到阻塞电路的使能和禁止块输入端。阻塞电路，例如在优选实施例中的设置/复位锁存器，响应于提供给使能和禁止输入端子的信号，产生阻塞信号以防止对非易失性存储器件（例如闪速存储器）的写访问。安全写阻断电路还包括耦合到禁用块输入端的中断发生器，其响应于禁用输入端的信号而产生中断信号。在相关实施例中，安全写入分块电路还包括耦合到分块电路的逻辑电路，其接收块信号和写使能信号，并响应于此产生对非易失性存储器件的写使能输入的控制信号。

38. 发明授权

US07590870B2 Physical presence determination in a trusted platform 有权
标题翻译：可靠平台中的物理存在确定
公开(公告)号：US07590870B2
公开(公告)日：2009-09-15
申请号：US10411454
申请日：2003-04-10
申请人： Ryan Charles Catherman , Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
发明人： Ryan Charles Catherman , Steven Dale Goodman , James Patrick Hoff , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F1/28
CPC分类号： G06F21/57 , G06F21/575
摘要： A computer system is presented which provides a trusted platform by which operations can be performed with an increased level trust and confidence. The basis of trust for the computer system is established by an encryption coprocessor and by code which interfaces with the encryption coprocessor and establishes root of trust metrics for the platform. The encryption coprocessor is built such that certain critical operations are allowed only if physical presence of an operator has been detected. Physical presence is determined by inference based upon the status of registers in the core chipset.
摘要翻译：提出了一种计算机系统，其提供可信赖的平台，通过该平台可以以更高级别的信任和置信度执行操作。计算机系统的信任基础由加密协处理器和与加密协处理器接口的代码建立，并为平台建立信任度量的根。构建加密协处理器，使得仅当检测到操作者的物理存在时才允许某些关键操作。基于核心芯片组中寄存器的状态的推理确定物理存在。

39. 发明授权

US06282601B1 Multiprocessor data processing system and method of interrupt handling that facilitate identification of a processor requesting a system management interrupt 有权
标题翻译：多处理器数据处理系统和中断处理方法，便于识别要求系统管理中断的处理器
公开(公告)号：US06282601B1
公开(公告)日：2001-08-28
申请号：US09282332
申请日：1999-03-31
申请人： Steven Dale Goodman , Bharat B. Khatri
发明人： Steven Dale Goodman , Bharat B. Khatri
IPC分类号： G06F1324
CPC分类号： G06F13/24
摘要： Within a multiprocessor data processing system, a request for a system management interrupt by a requesting processor causes the state of at least the requesting processor to be saved in memory. Each processor's saved state includes contents of at least one internal software-writable register, where the software-writable register of the requesting processor contains an identifying signature. A system management interrupt handler is then executed. Execution of the system management interrupt handler entails determining, from the contents of at least one internal software-writable register saved within memory, the identity of the requesting processor. The system management interrupt handler then handles the system management interrupt in accordance with the determination of the requesting processor. The handling of the system management interrupt may entail reading data from or writing data into the saved state of the requesting processor.
摘要翻译：在多处理器数据处理系统内，请求处理器对系统管理中断的请求使至少请求处理器的状态被保存在存储器中。每个处理器的保存状态包括至少一个内部软件可写寄存器的内容，其中请求处理器的软件可写寄存器包含识别签名。然后执行系统管理中断处理程序。执行系统管理中断处理程序需要从保存在存储器内的至少一个内部软件可写寄存器的内容确定请求处理器的身份。然后系统管理中断处理程序根据请求处理器的确定处理系统管理中断。处理系统管理中断可能需要从请求处理器的保存状态读取数据或将数据写入到保存状态。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式