专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

61. 发明申请

US20050021973A1 Cryptographic method and apparatus 审中-公开
标题翻译：密码方法和装置
公开(公告)号：US20050021973A1
公开(公告)日：2005-01-27
申请号：US10831776
申请日：2004-04-22
申请人： Liqun Chen , Martin Sadler , Keith Harrison
发明人： Liqun Chen , Martin Sadler , Keith Harrison
IPC分类号： H04L9/08 , H04L9/30 , H04L9/32 , H04L9/00
CPC分类号： H04L9/3242 , H04L9/0847 , H04L9/302 , H04L9/3073
摘要： First data is encrypted by a first party using an encryption key string formed using at least a hash value of the first data, this hash value being either in clear or in an encrypted form enabling its recovery in clear by a trusted party. The encrypted first data and the encryption key string are made available to a second party which forwards the encryption key string to the trusted party. The trusted party carries out at least one check on the basis of data contained in the encryption key string and, if the checks are satisfactory, provides a decryption key to the second party. Where the encryption key string comprises the hash value of the first data in encrypted form, the trusted party will typically decrypt the hash value and pass it to the second party to enable the latter to check the integrity of the first data.
摘要翻译：第一数据由第一方使用至少使用第一数据的散列值形成的加密密钥串进行加密，该散列值是清楚的或以加密的形式使得其被可信方清除。加密的第一数据和加密密钥串可用于将加密密钥串转发给可信方的第二方。受信任方根据包含在加密密钥串中的数据执行至少一个检查，并且如果检查令人满意，则向第二方提供解密密钥。在加密密钥串包括加密形式的第一数据的哈希值的情况下，受信任方通常将对散列值进行解密，并将其传递给第二方，以使后者能够检查第一数据的完整性。

62. 发明申请

US20160335453A1 Managing Data 审中-公开
标题翻译：管理数据
公开(公告)号：US20160335453A1
公开(公告)日：2016-11-17
申请号：US14713617
申请日：2015-05-15
申请人： Gina Kounga , Liqun Chen
发明人： Gina Kounga , Liqun Chen
IPC分类号： G06F21/62 , H04L29/06 , H04L9/08 , G06F21/64
CPC分类号： G06F21/6245 , G06F9/45533 , H04L9/0822 , H04L9/0825 , H04L9/0897
摘要： One example discloses a data manager of a data collector (DCDM) 8 executing on a virtual machine 6 for managing sensitive data. The DCDM 8 can have a conformance certificate that characterizes functionality of the DCDM 8. The DCDM 8 can request sensitive data from a data subject 16, wherein the request for the sensitive data includes the conformance certificate. The DCDM 8 can further receive, in response to the request, the sensitive data encrypted with an encrypted secret key. The secret key can be decrypt-able with a private key stored at a trusted platform module for the data collector (DCTPM) 12.
摘要翻译：一个例子公开了在虚拟机6上执行的用于管理敏感数据的数据收集器（DCDM）8的数据管理器。 DCDM 8可以具有表征DCDM 8的功能的一致性证书.DCDM 8可以从数据主体16请求敏感数据，其中敏感数据的请求包括一致性证书。 DCDM 8可以响应于该请求进一步接收用加密的密钥加密的敏感数据。密钥可以使用存储在用于数据收集器（DCTPM）12的可信平台模块的私钥进行解密。

63. 发明授权

US08670568B2 Methods and systems for utilizing cryptographic functions of a cryptographic co-processor 有权
标题翻译：用于利用加密协处理器的加密功能的方法和系统
公开(公告)号：US08670568B2
公开(公告)日：2014-03-11
申请号：US13189071
申请日：2011-07-22
申请人： Wael M. Ibrahim , Graeme J. Proudler , Liqun Chen , Manuel Novoa
发明人： Wael M. Ibrahim , Graeme J. Proudler , Liqun Chen , Manuel Novoa
IPC分类号： H04L9/00
CPC分类号： H04L9/0825 , G06F21/572 , G06F21/72 , H04L9/3234 , H04L9/3247 , H04L2209/42 , H04L2209/80
摘要： A computer platform is provided that comprises a processor and a cryptographic co-processor coupled to the processor. The computer platform further comprises a platform entity coupled to the processor. The platform entity establishes a secure relationship with the cryptographic co-processor that enables the platform entity to utilize cryptographic functions provided by the cryptographic co-processor.
摘要翻译：提供了一种包括处理器和耦合到处理器的密码协处理器的计算机平台。计算机平台还包括耦合到处理器的平台实体。平台实体与密码协处理器建立安全关系，使得平台实体能够利用由密码协处理器提供的加密功能。

64. 发明授权

US08566615B2 Document management system and method 有权
标题翻译：文件管理系统和方法
公开(公告)号：US08566615B2
公开(公告)日：2013-10-22
申请号：US13096949
申请日：2011-04-28
申请人： Helen Balinsky , Liqun Chen , Steven J. Simske
发明人： Helen Balinsky , Liqun Chen , Steven J. Simske
IPC分类号： H04L29/06
CPC分类号： H04L9/0869 , H04L9/0866 , H04L9/088
摘要： A document management system and method are disclosed herein. An example of the document management system includes a composite document generation module that generates a composite document and a secret seed that is associated with an owner or initiator of the composite document, and a key derivation module that derives, from the secret seed and using a key derivation function, at least one of a key for encryption, a key for decryption, a key for signature, or a key for verification for a participant of a workflow associated with the composite document.
摘要翻译：本文公开了一种文档管理系统和方法。文档管理系统的示例包括复合文档生成模块，其生成与复合文档的所有者或发起者相关联的复合文档和秘密种子，以及密钥导出模块，其从秘密种子导出并使用密钥导出功能，用于加密的密钥，用于解密的密钥，用于签名的密钥中的至少一个或用于验证与所述复合文档相关联的工作的参与者的密钥中的至少一个。

65. 发明申请

US20130227281A1 MANAGING DATA 有权
标题翻译：管理数据
公开(公告)号：US20130227281A1
公开(公告)日：2013-08-29
申请号：US13882692
申请日：2011-04-07
申请人： Gina Kounga , Liqun Chen
发明人： Gina Kounga , Liqun Chen
IPC分类号： G06F21/62
CPC分类号： G06F21/6209 , G06F21/44 , G06F21/6245 , G06F21/6263 , G06F2009/45587 , G06F2221/2105
摘要： One example discloses a data manager of a data collector (DCDM) 8 executing on a virtual machine 6 for managing sensitive data. The DCDM 8 can have a conformance certificate that characterizes functionality of the DCDM 8. The DCDM 8 can request sensitive data from a data subject 16, wherein the request for the sensitive data includes the conformance certificate. The DCDM 8 can further receive, in response to the request, the sensitive data encrypted with an encrypted secret key. The secret key can be decrypt-able with a private key stored at a trusted platform module for the data collector (DCTPM) 12.
摘要翻译：一个例子公开了在虚拟机6上执行用于管理敏感数据的数据收集器（DCDM）8的数据管理器。 DCDM 8可以具有表征DCDM 8的功能的一致性证书.DCDM 8可以从数据主体16请求敏感数据，其中敏感数据的请求包括一致性证书。 DCDM 8可以响应于该请求进一步接收用加密的密钥加密的敏感数据。密钥可以使用存储在用于数据收集器（DCTPM）12的可信平台模块的私钥进行解密。

66. 发明授权

US08499149B2 Revocation for direct anonymous attestation 有权
公开(公告)号：US08499149B2
公开(公告)日：2013-07-30
申请号：US12378996
申请日：2009-02-19
申请人： Liqun Chen
发明人： Liqun Chen
IPC分类号： H04L9/16
CPC分类号： H04L9/3218 , H04L9/0891 , H04L9/3247 , H04L2209/42
摘要： Direct Anonymous Attestation involves a Signer using a credential supplied by an Issuer to anonymously prove to a Verifier, on the basis of a public key of the Issuer, the Issuer's attestation to the Signer's membership of a particular group. To facilitate membership revocation, the Issuer updates the public key at intervals, and also effects a complementary updating to the Signer's credential unless the Signer has ceased to be a legitimate group member. A non-updated credential is inadequate to enable the Signer to prove its Issuer attested group membership to a Verifier on the basis of the updated Issuer public key.

67. 发明申请

US20120239714A1 DOCUMENT MANAGEMENT SYSTEM AND METHOD 有权
标题翻译：文件管理系统和方法
公开(公告)号：US20120239714A1
公开(公告)日：2012-09-20
申请号：US13050888
申请日：2011-03-17
申请人： Helen Balinsky , Liqun Chen , Steven J. Simske
发明人： Helen Balinsky , Liqun Chen , Steven J. Simske
IPC分类号： G06F17/30
CPC分类号： G06F17/2229 , G06F21/6227 , H04L9/14 , H04L2209/60
摘要： A document management system includes a document. One or more of a plurality of map-files of the document correspond(s) with a step of a multi-step workflow associated with the document. A random nonce is generated for each of the steps of the multi-step workflow except for an initial step of the multi-step workflow. Each of the random nonces i) is incorporated as a map-file entry into a respective one of the plurality of map-files corresponding with a step of the multi-step workflow that directly precedes the step of the multi-step workflow for which the random nonce is generated and ii) is used to perform a nonce-based initiating operation a respective one of the plurality of map-files corresponding with the step of the multi-step workflow for which the random nonce is generated.
摘要翻译：文件管理系统包括文件。文档的多个地图文件中的一个或多个对应于具有与文档相关联的多步工作流的步骤。为多步骤工作流程的每个步骤生成随机随机数，除了多步骤工作流程的初始步骤。随机随机i）中的每一个被并入作为地图文件条目到与多步骤工作流的步骤相对应的多个地图文件中的相应一个，其直接在多步骤工作流的步骤之前，其中生成随机随机数，并且ii）用于执行对应于生成随机随机数的多步骤工作流的步骤的多个映射文件中的相应一个映射文件的基于事件的发起操作。

68. 发明授权

US08015369B2 Updating data entries stored on a data storage unit from an authority 有权
标题翻译：从授权机构更新存储在数据存储单元上的数据条目
公开(公告)号：US08015369B2
公开(公告)日：2011-09-06
申请号：US12019237
申请日：2008-01-24
申请人： Helen Balinsky , Thomas Rathbone , Liqun Chen , Keith Harrison
发明人： Helen Balinsky , Thomas Rathbone , Liqun Chen , Keith Harrison
IPC分类号： G06F13/00
CPC分类号： G06F21/6209 , G06F21/606 , G06F21/77
摘要： A method of updating a data entry stored on a data storage unit, the data entry including data elements that are unique to the data storage unit and the data entry, may begin with generating, at the data storage unit, an update request that includes the data entry for transmission to an authority authorized to update the data entry. The authority then extracts extracting at the authority the unique data elements from the update request and verifies the authenticity of the data storage unit and data entry from the unique data elements. The authority then generates an updated data entry including a further data element unique to the updated data entry and derived from the updated data. The authority then transmits the updated data entry to the data storage unit. The method may then include storing the updated data entry on the data storage unit.
摘要翻译：一种更新存储在数据存储单元上的数据条目的方法，包括数据存储单元唯一的数据元素和数据输入的数据输入可以开始于在数据存储单元处生成包括用于传输给授权更新数据条目的机构的数据条目。然后，授权机构从更新请求中提取提取唯一数据元素，并从唯一数据元素验证数据存储单元的真实性和数据输入。然后，权限生成更新的数据条目，其包括更新的数据条目唯一的另外的数据元素，并从更新的数据导出。然后，权限将更新的数据条目发送到数据存储单元。该方法然后可以包括将更新的数据条目存储在数据存储单元上。

69. 发明授权

US07986778B2 Cryptographic method and apparatus 有权
标题翻译：密码方法和装置
公开(公告)号：US07986778B2
公开(公告)日：2011-07-26
申请号：US11166921
申请日：2005-06-23
申请人： Keith Alexander Harrison , Liqun Chen
发明人： Keith Alexander Harrison , Liqun Chen
IPC分类号： H04K1/00
CPC分类号： H04L9/3073 , H04L9/321 , H04L9/3247 , H04L2209/04
摘要： A cryptographic method and apparatus is provided in which an identifier-based encryption process is used to encrypt a message with an identifier string that specifies conditions to be checked by a trusted entity before providing a decrypted form of the encrypted message, or enabling its decryption. A further trusted entity is used to verify the identity of the message sender as indicated by a further identifier string, and to provide the sender with a secret key that the sender uses to generate complimentary signature components. These signature components are sent along with the encrypted message and are used, along with other data including the first identifier string and a public key of the further trusted entity, to authenticate the identity of the message sender.
摘要翻译：提供了一种加密方法和装置，其中使用基于标识符的加密过程来加密具有标识符串的消息，所述标识符字符串在提供加密消息的解密形式之前指定由受信任实体检查的条件，或使其能够进行解密。另一受信任的实体用于验证由另外的标识符字符串指示的消息发送者的身份，并向发送者提供发送者用于生成互补签名组件的秘密密钥。这些签名组件与加密消息一起发送，并与包括第一标识符串和另外可信实体的公开密钥的其他数据一起使用，以验证消息发送者的身份。

70. 发明授权

US07865876B2 Multiple trusted computing environments 有权
标题翻译：多个可信计算环境
公开(公告)号：US07865876B2
公开(公告)日：2011-01-04
申请号：US10175542
申请日：2002-06-18
申请人： Jonathan Griffin , Christopher I. Dalton , Michael Child , Liqun Chen , Andrew Patrick Norman
发明人： Jonathan Griffin , Christopher I. Dalton , Michael Child , Liqun Chen , Andrew Patrick Norman
IPC分类号： G06F9/44 , G06F9/455 , H04L9/32
CPC分类号： G06F21/64 , G06F21/57 , G06F2211/009 , G06F2211/1097 , G06F2221/2101 , G06F2221/2103 , G06F2221/2129 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153
摘要： A computing platform 20 provides multiple computing environments 24 each containing a guest operating system 25 provided by a virtual machine application 26. Optionally, each computing environment 24 is formed in a compartment 220 of a compartmented host operating system 22. A trusted device 213 verifies that the host operating system 22 and each guest operating system 25 operates in a secure and trusted manner by forming integrity metrics which can be interrogated by a user 10. Each computing environment is isolated and secure, and can be verified as trustworthy independent of any other computing environment.
摘要翻译：计算平台20提供多个计算环境24，每个计算环境包含由虚拟机应用程序26提供的客户机操作系统25.可选地，每个计算环境24形成在分隔的主机操作系统22的隔室220中。可信设备213验证主机操作系统22和每个客户操作系统25通过形成可由用户10询问的完整性度量以安全和可靠的方式操作。每个计算环境是隔离和安全的，并且可以被验证为独立于任何其他计算环境。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式