专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

81. 发明授权

US09673977B1 Refreshing public parameters in lattice-based cryptographic protocols 有权
公开(公告)号：US09673977B1
公开(公告)日：2017-06-06
申请号：US15266965
申请日：2016-09-15
申请人： ISARA Corporation
发明人： Kassem Kalach
IPC分类号： H04L9/08 , H04L29/06 , H04L9/30 , H04L9/28 , H04L9/16 , H04L9/14
CPC分类号： H04L9/3093 , H04L9/0816 , H04L9/0838 , H04L9/085 , H04L9/0852 , H04L9/0861 , H04L9/0869 , H04L9/14 , H04L9/16 , H04L9/30 , H04L9/304 , H04L2209/24
摘要： In a general aspect, a parameter is refreshed in a lattice-based cryptography system. In some aspects, a first value of a public parameter is obtained. The first value of the public parameter may have been previously used in an execution of a lattice-based cryptography protocol. A second value of the public parameter is generated based on the first value of the public parameter and random information. The second value of the public parameter is used in an execution of the lattice-based cryptography protocol.

82. 发明申请

US20170155634A1 PASSWORD-BASED MANAGEMENT OF ENCRYPTED FILES 有权
公开(公告)号：US20170155634A1
公开(公告)日：2017-06-01
申请号：US14953454
申请日：2015-11-30
申请人： International Business Machines Corporation
发明人： Jan L. Camenisch , Daniel Kovacs , Anja Lehmann , Gregory Neven
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L63/083 , H04L9/085 , H04L9/0863 , H04L9/0869 , H04L9/088 , H04L9/0891 , H04L9/0894 , H04L9/3218 , H04L9/3226 , H04L9/3236 , H04L63/0435 , H04L63/068
摘要： Embodiments include methods for managing encrypted files by storing a user password hash including a predetermined function of the user password associated with that user ID and the secret keys. Aspects also include, in response to receipt from a user computer of an input password and a the user ID for a required encrypted file, communicating with authentication servers to implement a key-reconstruction protocol in which each server computes first and second hash values for the required encrypted file. The file management server uses the first hash values to compute an input password hash including the predetermined function of the input password and the secret keys, checks if the input password hash matches the user password hash for the received user ID, and reconstructs the encryption key for the required encrypted file.

83. 发明申请

US20170148357A1 MATRIX GENERATION APPARATUS, MATRIX GENERATION METHOD, AND NON-TRANSITORY COMPUTER-READABLE RECORDING MEDIUM STORING MATRIX GENERATION PROGRAM 审中-公开
公开(公告)号：US20170148357A1
公开(公告)日：2017-05-25
申请号：US15320239
申请日：2014-07-02
申请人： Mitsubishi Electric Corporation
发明人： Yutaka KAWAI , Yasuyuki SAKAI
IPC分类号： G09C1/00
CPC分类号： G09C1/00 , H04L9/085
摘要： A matrix generation apparatus includes a tree structure generation part, a root processing part, and a node processing part. The tree structure generation part generates a binary tree T which expresses a logical formula F. The root processing part generates a matrix corresponding to the type of the element expressed by the root of the binary tree T, among the elements of the logical formula F. The node processing part sequentially selects nodes, other than the root, of the binary tree T, performs an operation corresponding to the type of the element expressed by each node having a child node, on the matrix M, and associates a variable being the element expressed by each node not having a child node, with one row of the matrix. The node processing part, after having selected the nodes of the binary tree T, outputs the matrix M and a mapping ρ. The mapping ρ is information indicating variables associated with the respective rows of the matrix M.

84. 发明授权

US09648012B1 Automatic propagation of password updates on multiple devices 有权
公开(公告)号：US09648012B1
公开(公告)日：2017-05-09
申请号：US14752141
申请日：2015-06-26
申请人： EMC Corporation
发明人： Salah Machani , Peter Alan Robinson
IPC分类号： H04L9/08 , H04L29/06 , H04L9/32
CPC分类号： H04L63/083 , H04L9/08 , H04L9/085 , H04L9/0891 , H04L9/3218 , H04L63/061
摘要： Embodiments are directed to techniques to automatically propagate password updates onto other devices that use a shared password to protect respective secure keys or other secrets. This may be done by calculating update data using a new password and an old password entered onto one device as part of a password change operation, and sending the update data to the other devices for use in updating the password on those devices.

85. 发明申请

US20170093585A1 SECURITY TOKEN FOR CERTIFICATE AUTHENTICATION AND DRIVING METHOD THEREFOR 审中-公开
公开(公告)号：US20170093585A1
公开(公告)日：2017-03-30
申请号：US15310745
申请日：2015-05-08
申请人： KEYPAIR CO., LTD.
发明人： Jung-Youp LEE
IPC分类号： H04L9/32 , H04L29/06 , H04L9/30 , H04L9/08 , H04L9/14
CPC分类号： H04L9/3263 , G06Q20/3223 , G06Q20/3278 , G06Q20/40 , G06Q20/4014 , G06Q40/02 , H04L9/085 , H04L9/0861 , H04L9/14 , H04L9/30 , H04L63/06 , H04L63/0823 , H04L2209/80 , H04L2209/805 , H04W4/80 , H04W12/04 , H04W12/06
摘要： The present invention relates to a security token for certificate authentication and a driving method thereof. The security token for certificate authentication, according to the present invention, comprises a security chip comprising: a key pair generation module for generating a pair of a private key and a public key for an authentication certificate; a digital signature module for generating a digital signature on the basis of the authentication certificate; an internal memory for storing the authentication certificate, the private and the public key; a near field communication (NFC) module for performing NFC with a wireless terminal; and a controller for controlling the key pair generation module, the digital signature module, the internal memory, and the NFC module.

86. 发明申请

US20170093564A1 RESHARING OF A SPLIT SECRET 有权
公开(公告)号：US20170093564A1
公开(公告)日：2017-03-30
申请号：US14871662
申请日：2015-09-30
申请人： Pure Storage, Inc.
发明人： Andrew R. Bernat , Ethan L. Miller
IPC分类号： H04L9/08
CPC分类号： H04L9/0891 , H04L9/0822 , H04L9/085
摘要： A processor-based method for secret sharing in a computing system is provided. The method includes encrypting shares of a new secret, using a previous secret and distributing unencrypted shares of the new secret and the encrypted shares of the new secret, to members of the computing system. The method includes decrypting at least a subset of the encrypted shares of the new secret, using the previous secret and regenerating the new secret from at least a subset of a combination of the unencrypted shares of the new secret and the decrypted shares of the new secret.

87. 发明授权

US09608967B2 Method and system for establishing a session key 有权
公开(公告)号：US09608967B2
公开(公告)日：2017-03-28
申请号：US14388191
申请日：2013-03-15
申请人： COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
发明人： Yosra Ben Saied , Christophe Janneteau , Alexis Olivereau
IPC分类号： H04L9/00 , H04L9/08 , H04L9/32 , H04L29/06
CPC分类号： H04L63/0428 , H04L9/0838 , H04L9/085 , H04L63/062 , H04L2209/76
摘要： A system and a method is provided for establishing a session key in a context of communications between entities, the identifiers of which are generated cryptographically and for which one of the entities is highly resource-constrained. It includes assigning to assistant entities of the resource-constrained entity, the highest-consuming asymmetric cryptography operations.

88. 发明授权

US09602480B2 Methods and apparatus for data access control 有权
公开(公告)号：US09602480B2
公开(公告)日：2017-03-21
申请号：US14435843
申请日：2012-10-26
申请人： Nokia Technologies Oy
发明人： Zheng Yan
IPC分类号： H04L29/06 , H04L9/08 , G06F21/62
CPC分类号： H04L63/061 , G06F21/62 , H04L9/085 , H04L63/0853
摘要： Systems and techniques for controlling access to data are described. Data is delivered to a repository in such a way that access to the data can be controlled, for example, by encrypting the data before delivery. The power to provide a requester with the ability to gain access to the data is divided, so that multiple entities can provide the requester with a portion of the information needed to gain access to the data. The portions of the information may be partial keys that can be assembled into a complete key. The requester can gain access to the data only if it receives all portions of the information needed to gain access to the data, and different criteria may be used to decide whether or not to provide each portion of the information to the requester.

89. 发明申请

US20170063559A1 AUTHENTICATION SYSTEM AND DEVICE INCLUDING PHYSICAL UNCLONABLE FUNCTION AND THRESHOLD CRYPTOGRAPHY 审中-公开
标题翻译：认证系统和设备，包括物理不可靠功能和阈值分析
公开(公告)号：US20170063559A1
公开(公告)日：2017-03-02
申请号：US14704914
申请日：2015-05-05
申请人： Sypris Electronics, LLC
发明人： John Ross Wallrabenstein
IPC分类号： H04L9/32 , H04L9/06 , H04L9/08
CPC分类号： H04L9/3278 , H04L9/085 , H04L9/3026 , H04L9/3066 , H04L9/3221
摘要： An authentication system and device including physical unclonable function (PUF) and threshold cryptography comprising: a PUF device having a PUF input and a PUF output and constructed to generate, in response to the input of a challenge, an output value characteristic to the PUF and the challenge; and a processor having a processor input that is connected to the PUF output, and having a processor output connected to the PUF input, the processor configured to: control the issuance of challenges to the PUF input via the processor output, receive output from the PUF output, combine multiple received PUF output values each corresponding to a share of a private key or secret, and perform threshold cryptographic operations. The system and device may be configured so that shares are refreshable, and may be configured to perform staggered share refreshing.
摘要翻译：一种包括物理不可克隆功能（PUF）和阈值密码术的认证系统和设备，包括：具有PUF输入和PUF输出的PUF设备，被构造成响应于质询的输入而产生PUF的输出值特性，挑战; 以及处理器，其具有连接到所述PUF输出的处理器输入，并且具有连接到所述PUF输入的处理器输出，所述处理器被配置为：经由所述处理器输出控制对所述PUF输入的挑战的发出，从PUF接收输出输出，组合多个接收的PUF输出值，每个对应于私钥或秘密的共享，并执行阈值加密操作。系统和设备可以被配置为使得共享是可刷新的，并且可以被配置为执行交错的共享刷新。

90. 发明授权

US09569623B2 Secure boot with resistance to differential power analysis and other external monitoring attacks 有权
标题翻译：安全启动，具有抗差分功率分析和其他外部监控攻击
公开(公告)号：US09569623B2
公开(公告)日：2017-02-14
申请号：US14617437
申请日：2015-02-09
申请人： Cryptography Research, Inc.
发明人： Paul C. Kocher , Pankaj Rohatgi , Joshua M. Jaffe
IPC分类号： H04L9/00 , G06F21/57 , G06F21/60 , H04L9/08 , H04L9/32 , G06F12/14 , H04L9/06 , H04L9/16 , G06F9/445 , G06F21/76 , G06F9/44 , G06F21/55 , H04L29/06
CPC分类号： G06F21/575 , G06F8/71 , G06F9/44505 , G06F12/1408 , G06F21/556 , G06F21/602 , G06F21/755 , G06F21/76 , G06F2212/402 , G06F2221/034 , G06F2221/2107 , G06F2221/2125 , G06F2221/2145 , H04L9/003 , H04L9/0631 , H04L9/085 , H04L9/0861 , H04L9/088 , H04L9/0894 , H04L9/16 , H04L9/3236 , H04L9/3247 , H04L63/0428 , H04L63/0869 , H04L2209/24 , H04L2209/38 , H04L2209/56 , H04L2463/061
摘要： A computing device includes a secure storage hardware to store a secret value and processing hardware comprising at least one of a cache or a memory. During a secure boot process the processing hardware loads untrusted data into at least one of the cache or the memory of the processing hardware, the untrusted data comprising an encrypted data segment and a validator, retrieves the secret value from the secure storage hardware, derives an initial key based at least in part on an identifier associated with the encrypted data segment and the secret value, verifies, using the validator, whether the encrypted data segment has been modified, and decrypts the encrypted data segment using a first decryption key derived from the initial key to produce a decrypted data segment responsive to verifying that the encrypted data segment has not been modified.
摘要翻译：计算设备包括用于存储秘密值的安全存储硬件和包括高速缓存或存储器中的至少一个的处理硬件。在安全引导过程期间，处理硬件将不可信数据加载到处理硬件的高速缓存或存储器中的至少一个中，不可信数据包括加密数据段和验证器，从安全存储硬件检索秘密值，至少部分地基于与加密数据段和秘密值相关联的标识符的初始密钥，使用验证器来验证加密数据段是否已经被修改，并且使用从第一解密密钥导出的第一解密密钥来解密加密数据段响应于验证加密的数据段未被修改来产生解密的数据段的初始密钥。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式