专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09092644B2 Method and system for protecting memory information in a platform 有权
标题翻译：保护平台内存信息的方法和系统
公开(公告)号：US09092644B2
公开(公告)日：2015-07-28
申请号：US13976935
申请日：2011-12-28
申请人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Alpa T. Narendra Trivedi , David M. Durham , Men Long , Siddhartha Chhabra , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： G06F21/64 , H04L9/06 , G06F12/14 , G06F21/78 , G06F21/79
CPC分类号： G06F21/64 , G06F12/1408 , G06F21/78 , G06F21/79 , H04L9/0643 , H04L2209/12
摘要： A method and system to provide an effective, scalable and yet low-cost solution for Confidentiality, Integrity and Replay protection for sensitive information stored in a memory and prevent an attacker from observing and/or modifying the state of the system. In one embodiment of the invention, the system has strong hardware protection for its memory contents via XTS-tweak mode of encryption where the tweak is derived based on “Global and Local Counters”. This scheme offers to enable die-area efficient Replay protection for any sized memory by allowing multiple counter levels and facilitates using small counter-sizes to derive the “tweak” used in the XTS encryption without sacrificing cryptographic strength.
摘要翻译：一种方法和系统，为存储在存储器中的敏感信息提供有效，可扩展且低成本的保密性，完整性和重放保护解决方案，并防止攻击者观察和/或修改系统的状态。在本发明的一个实施例中，系统通过经由XTS调整加密模式对其存储器内容具有强大的硬件保护，其中基于“全局和本地计数器”导出调整。该方案提供了通过允许多个计数器级别为任何大小的存储器提供芯片区域高效的重放保护，并有助于使用小型计数器来导出XTS加密中使用的“调整”，而不会牺牲加密强度。

2. 发明申请

US20140123235A1 Allocating Memory Access Control Policies 有权
标题翻译：分配内存访问控制策略
公开(公告)号：US20140123235A1
公开(公告)日：2014-05-01
申请号：US13993421
申请日：2011-12-28
申请人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： G06F21/62
CPC分类号： G06F21/62 , G06F21/53
摘要： Enabling access control caches for co-processors to be charged using a VMX-nonroot instruction. As a result a transition to VMX-root is not needed, saving the cycles involved in such a transition.
摘要翻译：使用VMX-nonroot指令为协处理器启用访问控制高速缓存。因此，不需要转换到VMX-root，从而节省了这种转换所涉及的周期。

3. 发明申请

US20140101461A1 PARALLELIZED COUNTER TREE WALK FOR LOW OVERHEAD MEMORY REPLAY PROTECTION 有权
标题翻译：并行平衡计数器用于低过载存储器重放保护
公开(公告)号：US20140101461A1
公开(公告)日：2014-04-10
申请号：US13646105
申请日：2012-10-05
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , David M. Durham , Niranjan L. Cooray , Men Long , Carlos V. Rozas , Alpa T. Narendra Trivedi
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , David M. Durham , Niranjan L. Cooray , Men Long , Carlos V. Rozas , Alpa T. Narendra Trivedi
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F21/71
摘要： A processor includes a memory encryption engine that provides replay and confidentiality protections to a memory region. The memory encryption engine performs low-overhead parallelized tree walks along a counter tree structure. The memory encryption engine upon receiving an incoming read request for the protected memory region, performs a dependency check operation to identify dependency between the incoming read request and an in-process request and to remove the dependency when the in-process request is a read request that is not currently suspended.
摘要翻译：处理器包括为存储器区域提供重放和保密性保护的存储器加密引擎。存储器加密引擎沿着计数器树结构执行低架构并行化的树行走。存储器加密引擎在接收到对受保护的存储器区域的传入读取请求时，执行依赖性检查操作以识别传入的读取请求与进程内请求之间的依赖关系，并且当进程内请求是读取请求时，去除依赖关系目前尚未暂停。

4. 发明申请

US20120089831A1 Associating A Multi-Context Trusted Platform Module With Distributed Platforms 有权
标题翻译：将多上下文可信平台模块与分布式平台相关联
公开(公告)号：US20120089831A1
公开(公告)日：2012-04-12
申请号：US13329713
申请日：2011-12-19
申请人： Carlos V. Rozas
发明人： Carlos V. Rozas
IPC分类号： H04L9/00
CPC分类号： G06F21/57 , G06F2221/2101 , G06F2221/2129 , G06F2221/2145
摘要： In one embodiment, the present invention includes a method for creating an instance of a virtual trusted platform module (TPM) in a central platform and associating the instance with a managed platform coupled to the central platform. Multiple such vTPM's may be instantiated, each associated with a different managed platform coupled to the central platform. The instances may all be maintained on the central platform, improving security. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括用于在中央平台中创建虚拟可信平台模块（TPM）的实例并将该实例与耦合到中央平台的受管平台相关联的方法。多个这样的vTPM可以被实例化，每个都与耦合到中央平台的不同的管理平台相关联。这些实例都可以在中央平台上维护，从而提高安全性。描述和要求保护其他实施例。

5. 发明授权

US07653727B2 Cooperative embedded agents 失效
标题翻译：合作嵌入式代理
公开(公告)号：US07653727B2
公开(公告)日：2010-01-26
申请号：US10809316
申请日：2004-03-24
申请人： David M. Durham , Vincent J. Zimmer , Carey W. Smith , Raj Yavatkar , Travis T. Schluessler , Dylan C. Larson , Carlos V. Rozas
发明人： David M. Durham , Vincent J. Zimmer , Carey W. Smith , Raj Yavatkar , Travis T. Schluessler , Dylan C. Larson , Carlos V. Rozas
IPC分类号： G06F15/173 , G06F9/00 , G06F9/24 , G06F15/177
CPC分类号： G06F9/4411
摘要： Cooperative embedded agents as well as manageability and security operations that can be performed on a host system having cooperative embedded agents are disclosed.
摘要翻译：公开了可以在具有协作嵌入式代理的主机系统上执行的协同嵌入式代理以及可管理性和安全性操作。

6. 发明授权

US07587595B2 Method and apparatus for providing software-based security coprocessors 有权
标题翻译：用于提供基于软件的安全协处理器的方法和装置
公开(公告)号：US07587595B2
公开(公告)日：2009-09-08
申请号：US11171133
申请日：2005-06-29
申请人： Vincent R. Scarlata , Carlos V. Rozas
发明人： Vincent R. Scarlata , Carlos V. Rozas
IPC分类号： H04L9/00
CPC分类号： G06F21/72 , G06F21/53 , G06F21/552 , G06F21/577 , G06F21/602 , G06F21/74 , G06F21/79 , G06F2221/2103 , G06F2221/2105 , G06F2221/2149
摘要： A virtual security coprocessor framework supports creation of at least one device model to emulate a predetermined cryptographic coprocessor. In one embodiment, the virtual security coprocessor framework uses a cryptographic coprocessor in a processing system to create an instance of the device model (DM) in the processing system. The DM may be based at least in part on a predetermined device model design. The DM may emulate the predetermined cryptographic coprocessor in accordance with the control logic of the device model design. In one embodiment, the virtual security coprocessor framework uses a physical trusted platform module (TPM) in a processing system to support one or more virtual TPMs (vTPMs) for one or more virtual machines (VMs) in the processing system. Other embodiments are described and claimed.
摘要翻译：虚拟安全协处理器框架支持创建至少一个设备模型以模拟预定的密码协处理器。在一个实施例中，虚拟安全协处理器框架在处理系统中使用密码协处理器来在处理系统中创建设备模型（DM）的实例。 DM可以至少部分地基于预定的设备模型设计。 DM可以根据设备模型设计的控制逻辑来模拟预定的密码协处理器。在一个实施例中，虚拟安全协处理器框架使用处理系统中的物理信任平台模块（TPM）来支持处理系统中的一个或多个虚拟机（VM）的一个或多个虚拟TPM（vTPM）。描述和要求保护其他实施例。

7. 发明授权

US07062650B2 System and method for verifying integrity of system with multiple components 失效
公开(公告)号：US07062650B2
公开(公告)日：2006-06-13
申请号：US09967738
申请日：2001-09-28
申请人： Virginia L Robbins , Lewis V Rothrock , Carlos V Rozas
发明人： Virginia L Robbins , Lewis V Rothrock , Carlos V Rozas
IPC分类号： H04L9/00
CPC分类号： G06F21/51 , G06F21/10 , G06F21/57 , G06F21/64
摘要： A system and method for verifying integrity of a system with multiple components includes a plurality of related object components that forms the software system, a signed binary description file manager that generates a signed binary description file (SBDF) to store verification and license information of the plurality of related object components, and a verification agent that verifies itself and the plurality of related object components. The manager associates unique identification (ID) names that represents the related object components with corresponding sets of component license information, and stores the associations in the signed binary description file. The verification agent retrieves license information pertinent to itself and each of the related object components utilizing the SBDF. The verification agent verifies the related object components after verifying its own integrity.

8. 发明申请

US20180114013A1 EXTENDING PACKET PROCESSING TO TRUSTED PROGRAMMABLE AND FIXED-FUNCTION ACCELERATORS 审中-公开
公开(公告)号：US20180114013A1
公开(公告)日：2018-04-26
申请号：US15298419
申请日：2016-10-20
申请人： Kapil Sood , Somnath Chakrabarti , Wei Shen , Carlos V. Rozas , Mona Vij , Vincent R. Scarlata
发明人： Kapil Sood , Somnath Chakrabarti , Wei Shen , Carlos V. Rozas , Mona Vij , Vincent R. Scarlata
IPC分类号： G06F21/53 , G06F12/14 , G06F21/57 , G06F21/44 , G06F9/455 , G06F9/445
CPC分类号： G06F21/53 , G06F8/61 , G06F9/45558 , G06F12/1408 , G06F21/44 , G06F21/572 , G06F21/606 , G06F2009/45587 , G06F2212/1052 , G06F2212/152 , G06F2212/402
摘要： Methods and apparatus for extending packet processing to trusted programmable and fixed-function accelerators. Secure enclaves are created in system memory of a compute platform, wherein software code external from a secure enclave cannot access code or data within a secure enclave, and software code in a secure enclave can access code and data both within the secure enclave and external to the secure enclave. Software code for implementing packet processing operations is installed in the secure enclaves. The compute platform further includes one or more hardware-based accelerators that are used by the software to offload packet processing operations. The accelerators are configured to read packet data from input queues, process the data, and output processed data to output queues, wherein the input and output queues are located in encrypted portions of memory that may be in a secure enclave or external to the secure enclaves. Tokens are used by accelerators to validate access to memory in secure enclaves, and used by both accelerators and secure enclaves to access encrypted memory external to secure enclaves.

9. 发明授权

US09087200B2 Method and apparatus to provide secure application execution 有权
标题翻译：提供安全应用程序执行的方法和装置
公开(公告)号：US09087200B2
公开(公告)日：2015-07-21
申请号：US13527547
申请日：2012-06-19
申请人： Francis X. McKeen , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
发明人： Francis X. McKeen , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
IPC分类号： G06F21/72 , G06F21/60 , G06F21/53 , G06F12/14
CPC分类号： G06F21/60 , G06F21/53 , G06F21/72
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

10. 发明申请

US20150178226A1 USING AUTHENTICATED MANIFESTS TO ENABLE EXTERNAL CERTIFICATION OF MULTI-PROCESSOR PLATFORMS 有权
标题翻译：使用认证机构启用多处理器平台的外部认证
公开(公告)号：US20150178226A1
公开(公告)日：2015-06-25
申请号：US14140254
申请日：2013-12-24
申请人： Vincent R. Scarlata , Simon P. Johnson , Vladimir Beker , Jesse Walker , Carlos V. Rozas , Amy L. Santoni , Ittai Anati , Raghunandan Makaram , Francis X. McKeen , Uday R. Savagaonkar
发明人： Vincent R. Scarlata , Simon P. Johnson , Vladimir Beker , Jesse Walker , Carlos V. Rozas , Amy L. Santoni , Ittai Anati , Raghunandan Makaram , Francis X. McKeen , Uday R. Savagaonkar
IPC分类号： G06F12/14
CPC分类号： G06F12/1466 , G06F21/74 , G06F2212/1052
摘要： Systems and methods for secure delivery of output surface bitmaps to a display engine. An example processing system comprises: an architecturally protected memory; and a plurality of processing devices communicatively coupled to the architecturally protected memory, each processing device comprising a first processing logic to implement an architecturally-protected execution environment by performing at least one of: executing instructions residing in the architecturally protected memory, or preventing an unauthorized access to the architecturally protected memory; wherein each processing device further comprises a second processing logic to establish a secure communication channel with a second processing device of the processing system, employ the secure communication channel to synchronize a platform identity key representing the processing system, and transmit a platform manifest comprising the platform identity key to a certification system.
摘要翻译：用于将输出表面位图安全传递到显示引擎的系统和方法。一个示例处理系统包括：架构受保护的存储器; 以及多个处理设备，通信地耦合到架构保护的存储器，每个处理设备包括第一处理逻辑，以通过执行以下至少一个来实现架构保护的执行环境：执行驻留在架构保护的存储器中的指令，或者防止未授权的访问架构受保护的内存; 其中每个处理设备还包括第二处理逻辑，用于与所述处理系统的第二处理设备建立安全通信信道，采用所述安全通信信道来同步代表所述处理系统的平台标识密钥，并发送包括所述平台的平台清单认证系统的身份密钥。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式