会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 46. 发明申请
    • Apparatus, system, and method for secure mass storage backup
    • 用于安全大容量存储备份的装置,系统和方法
    • US20050144443A1
    • 2005-06-30
    • US10748062
    • 2003-12-30
    • Daryl CromerHoward LockerRandall Springfield
    • Daryl CromerHoward LockerRandall Springfield
    • G06F21/00H04L9/00
    • G06F21/78G06F11/1458G06F11/1469
    • An apparatus for securely backing up data using a cryptographic module includes a mass storage device having a first accessible portion and a second encrypted portion. The mass storage device is initialized to only decrypt the encrypted portion on the system that first created the encrypted portion. The cryptographic module may be a Trusted Platform Module (TPM) based on specifications from the Trusted Computer Group. The mass storage device comprises a trusted platform interface module configured to communicate with the TPM. The system may include a motherboard having a TPM, and the mass storage device. The method in one embodiment comprises providing a computer readable mass storage device, initializing a password module, transmitting an encrypted password to the cryptographic module, authenticating the encrypted password, decrypting the encrypted password, transmitting the decrypted password to the computer readable medium, and decrypting the second encrypted portion using the decrypted password.
    • 使用加密模块安全地备份数据的装置包括具有第一可访问部分和第二加密部分的大容量存储设备。 大容量存储设备被初始化为仅对首先创建加密部分的系统上的加密部分进行解密。 加密模块可以是基于可信计算机组的规范的可信平台模块(TPM)。 大容量存储设备包括被配置为与TPM通信的可信平台接口模块。 该系统可以包括具有TPM的主板和大容量存储设备。 在一个实施例中的方法包括提供计算机可读大容量存储设备,初始化密码模块,向加密模块发送加密密码,认证加密密码,解密加密密码,将解密的密码发送到计算机可读介质,以及解密 使用解密密码的第二加密部分。
    • 47. 发明申请
    • Autonomic binding of subsystems to system to prevent theft
    • 子系统自动绑定到系统以防盗窃
    • US20050138345A1
    • 2005-06-23
    • US10738183
    • 2003-12-17
    • Daryl CromerHoward LockerRandall Springfield
    • Daryl CromerHoward LockerRandall Springfield
    • G06F13/10G06F1/00G06F1/18G06F12/14G06F13/14G06F15/177G06F21/00G06F21/24
    • G06F21/6272G06F1/183G06F21/575G06F21/88G06F2221/2129
    • A method is provided of uniquely binding, through connection, a subsystem device having restricted information space for storing code, to a system having a structure for generating and delivering a unique code to identify the system to the information storage space in the subsystem. The method comprises determining if the information storage space in the subsystem has information therein when the subsystem is connected to the system. If no information is contained in the information storage space in the subsystem, the system writes the unique code from the system to the information storage space in the subsystem. If information is in the information storage space, that information is compared with the unique code in the system, and operation of the system is allowed if, and only if, the information in the information storage space matches the unique code generated by the system. A structure for performing this method is also provided.
    • 提供了一种通过连接将具有用于存储代码的受限信息空间的子系统设备唯一地绑定到具有用于生成和递送唯一代码以将系统识别到子系统中的信息存储空间的结构的系统的方法。 该方法包括当子系统连接到系统时确定子系统中的信息存储空间是否具有信息。 如果子系统的信息存储空间中没有信息,则系统将唯一的代码写入子系统中的信息存储空间。 如果信息在信息存储空间中,则该信息与系统中的唯一代码进行比较,并且仅当信息存储空间中的信息与系统生成的唯一代码匹配时才允许系统的操作。 还提供了一种用于执行该方法的结构。
    • 49. 发明申请
    • Execution validation using header containing validation data
    • 使用包含验证数据的头执行验证
    • US20060185017A1
    • 2006-08-17
    • US11319329
    • 2005-12-28
    • David ChallenerDaryl CromerHoward LockerDavid SaffordRandall Springfield
    • David ChallenerDaryl CromerHoward LockerDavid SaffordRandall Springfield
    • G06F12/14
    • G06F21/565G06F2221/2151
    • The present invention adds a procedure to the operating system file subsystem of a processing system that significantly reduces the amount of time necessary to verify the validity of executable files. Each executable is extended with a file signature containing a header containing validation data. This header may be added to an existing ELF header, added as a new section, or placed in a file's extended attribute store. The header contains results of all previous validation checks that have been performed. The file signature is inserted, with a date stamp, into the file attributes. On execution, the system checks the previously-created file signature against a current file signature, instead of creating the file signature for every file during the execution process. Checks to ensure that the file signature is secure, and is valid and up to date, are also implemented. Only if the file signature is not valid and up-to-date does the execution program create a new file signature at the time of execution.
    • 本发明向处理系统的操作系统文件子系统添加了一个过程,其显着地减少了验证可执行文件的有效性所需的时间量。 每个可执行文件使用包含包含验证数据的标题的文件签名进行扩展。 该标题可以被添加到现有的ELF标题中,作为新的部分添加,或者被放置在文件的扩展属性存储中。 标题包含已执行的所有先前验证检查的结果。 将文件签名带有日期戳插入到文件属性中。 执行时,系统会根据当前文件签名检查先前创建的文件签名,而不是在执行过程中为每个文件创建文件签名。 检查以确保文件签名是安全的,并且是有效的和最新的,也被实现。 只有当文件签名无效且最新的执行程序在执行时才会创建新的文件签名。