专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070016801A1 Method, apparatus, and product for establishing virtual endorsement credentials for dynamically generated endorsement keys in a trusted computing platform 有权
标题翻译：用于在可信计算平台中为动态生成的认可密钥建立虚拟背书凭证的方法，装置和产品
公开(公告)号：US20070016801A1
公开(公告)日：2007-01-18
申请号：US11179238
申请日：2005-07-12
申请人： Steven Bade , James Hoff , Siegfried Sutter , James Ward , Helmut Weber
发明人： Steven Bade , James Hoff , Siegfried Sutter , James Ward , Helmut Weber
IPC分类号： H04L9/00 , G06F12/14 , H04L9/32 , G06F11/30
CPC分类号： G06F21/57 , H04L9/0877 , H04L9/321 , H04L9/3234 , H04L9/3263
摘要： A method, apparatus, and computer program product are disclosed in a data processing system for establishing virtual endorsement credentials. The data processing system includes a hardware trusted platform module (TPM). Logical partitions are generated in the system. A different virtual TPM is generated for each one of the logical partitions. For each one of the logical partitions, the virtual TPM that was generated for the logical partition then dynamically generates a virtual endorsement credential for use by the logical partition that includes the virtual TPM. The virtual endorsement credential is generated within the data processing system without the data processing system or its devices accessing a trusted third party that is external to the data processing system.
摘要翻译：在用于建立虚拟背书凭证的数据处理系统中公开了一种方法，装置和计算机程序产品。数据处理系统包括硬件可信平台模块（TPM）。逻辑分区在系统中生成。为每个逻辑分区生成不同的虚拟TPM。对于逻辑分区中的每一个，为逻辑分区生成的虚拟TPM然后动态地生成供包括虚拟TPM的逻辑分区使用的虚拟签注凭证。在数据处理系统内生成虚拟签注凭证，而数据处理系统或其设备访问数据处理系统外部的受信任的第三方。

2. 发明申请

US20060230264A1 Backup restore in a corporate infrastructure 有权
标题翻译：企业基础架构中的备份还原
公开(公告)号：US20060230264A1
公开(公告)日：2006-10-12
申请号：US11101290
申请日：2005-04-07
申请人： Ryan Catherman , David Challener , Scott Elliott , James Hoff
发明人： Ryan Catherman , David Challener , Scott Elliott , James Hoff
IPC分类号： H04L9/00
CPC分类号： H04L63/0428 , G06F11/1446 , G06F21/6209 , H04L9/0822 , H04L2209/60 , H04L2463/062
摘要： A method and system for remotely storing a user's admin key to gain access to an intranet is presented. The user's admin key and intranet user identification (ID) are encrypted using an enterprise's public key, and together they are concatenated into a single backup admin file, which is stored in the user's client computer. If the user needs his admin file and is unable to access it in a backup client computer, he sends the encrypted backup admin file to a backup server and his unencrypted intranet user ID to an intranet authentication server. The backup server decrypts the user's single backup admin file to obtain the user's admin key and intranet user ID. If the unencrypted intranet user ID in the authentication server matches the decrypted intranet user ID in the backup server, then the backup server sends the backup client computer the decrypted admin key.
摘要翻译：介绍一种用于远程存储用户管理密钥以访问内联网的方法和系统。用户的管理密钥和内部网用户标识（ID）使用企业的公钥进行加密，并将它们并入一个备份管理文件，该文件存储在用户的客户端计算机中。如果用户需要他的管理员文件，并且无法在备份客户端计算机中访问它，则他将加密的备份管理文件发送到备份服务器，并将其未加密的内部网用户ID发送到内部网认证服务器。备份服务器解密用户的单备份管理文件，获取用户的管理密钥和内部网用户ID。如果身份验证服务器中未加密的Intranet用户ID与备份服务器中的解密内网用户ID匹配，则备份服务器将备份客户端计算机发送解密的管理密钥。

3. 发明申请

US20060112420A1 Secure single sign-on to operating system via power-on password 有权
公开(公告)号：US20060112420A1
公开(公告)日：2006-05-25
申请号：US10994620
申请日：2004-11-22
申请人： David Challener , Steven Goodman , James Hoff , David Rivera , Randall Springfield
发明人： David Challener , Steven Goodman , James Hoff , David Rivera , Randall Springfield
IPC分类号： H04L9/32
CPC分类号： G06F21/41
摘要： Methods and arrangements are disclosed for secure single sign on to an operating system using only a power-on password. In many embodiments modified BIOS code prompts for, receives and verifies the power-on password. The power-on password is hashed and stored in a Platform Configuration Register of the Trusted Platform Module. In a setup mode, the trusted platform module encrypts the operating system password using the hashed power-on password. In a logon mode, the trusted platform module decrypts the operating system password using the hashed power-on password.

4. 发明申请

US20060026418A1 Method, apparatus, and product for providing a multi-tiered trust architecture 审中-公开
标题翻译：用于提供多层次信任架构的方法，设备和产品
公开(公告)号：US20060026418A1
公开(公告)日：2006-02-02
申请号：US10902669
申请日：2004-07-29
申请人： Steven Bade , Ryan Catherman , James Hoff , Nia Kelley , Emily Ratliff
发明人： Steven Bade , Ryan Catherman , James Hoff , Nia Kelley , Emily Ratliff
IPC分类号： H04L9/00
CPC分类号： H04L63/20 , G06F21/57 , H04L9/3247 , H04L63/102 , H04L2209/127 , H04L2209/805
摘要： A method, apparatus, and computer program product are described for implementing a trusted computing environment within a data processing system. The data processing system includes multiple different service processor-based hardware platforms. Multiple different trusted platform modules (TPMs) are provided in the data processing system. Each TPM provides trust services to only one of the service processor-based hardware platforms. Each TPM provides its trust services to only a portion of the entire data processing system.
摘要翻译：描述了用于在数据处理系统内实现可信计算环境的方法，装置和计算机程序产品。数据处理系统包括多个不同的基于服务处理器的硬件平台。在数据处理系统中提供了多个不同的可信平台模块（TPM）。每个TPM仅向基于服务处理器的硬件平台之一提供信任服务。每个TPM仅向整个数据处理系统的一部分提供信任服务。

5. 发明申请

US20050246525A1 Method and system for hierarchical platform boot measurements in a trusted computing environment 失效
标题翻译：在可信计算环境中分层平台引导测量的方法和系统
公开(公告)号：US20050246525A1
公开(公告)日：2005-11-03
申请号：US10835503
申请日：2004-04-29
申请人： Steven Bade , Ryan Catherman , James Hoff , William Terrell
发明人： Steven Bade , Ryan Catherman , James Hoff , William Terrell
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： G06F21/57
摘要： An architecture for a distributed data processing system comprises a system-level service processor along with one or more node-level service processors; each are uniquely associated with a node, and each is extended to comprise any components that are necessary for operating the nodes as trusted platforms, such as a TPM and a CRTM in accordance with the security model of the Trusted Computing Group. These node-level service processors then inter-operate with the system-level service processor, which also contains any components that are necessary for operating the system as a whole as a trusted platform. A TPM within the system-level service processor aggregates integrity metrics that are gathered by the node-level service processors, thereafter reporting integrity metrics as requested, e.g., to a hypervisor, thereby allowing a large distributed data processing system to be validated as a trusted computing environment while allowing its highly parallelized initialization process to proceed.
摘要翻译：用于分布式数据处理系统的架构包括系统级服务处理器以及一个或多个节点级服务处理器; 每个都与节点唯一相关联，并且每个都被扩展以包括根据可信计算组的安全模型将节点操作为可信平台（例如TPM和CRTM）所需的任何组件。然后，这些节点级服务处理器与系统级服务处理器互操作，系统级服务处理器还包含将系统作为整体操作为可信平台所必需的任何组件。系统级服务处理器内的TPM聚合由节点级服务处理器收集的完整性度量，此后根据请求报告完整性度量，例如向管理程序报告，从而允许将大型分布式数据处理系统验证为可信任的同时允许其高度并行化的初始化过程进行。

6. 发明申请

US20050246521A1 Method and system for providing a trusted platform module in a hypervisor environment 失效
标题翻译：在管理程序环境中提供可信平台模块的方法和系统
公开(公告)号：US20050246521A1
公开(公告)日：2005-11-03
申请号：US10835350
申请日：2004-04-29
申请人： Steven Bade , Ryan Catherman , James Hoff , Nia Kelley , Emily Ratliff
发明人： Steven Bade , Ryan Catherman , James Hoff , Nia Kelley , Emily Ratliff
IPC分类号： G06F21/24 , G06F1/00 , G06F3/00 , G06F12/00 , G06F12/14 , G06F21/00 , G06F21/22
CPC分类号： G06F21/53
摘要： A method is presented for implementing a trusted computing environment within a data processing system. A hypervisor is initialized within the data processing system, and the hypervisor supervises a plurality of logical, partitionable, runtime environments within the data processing system. The hypervisor reserves a logical partition for a hypervisor-based trusted platform module (TPM) and presents the hypervisor-based trusted platform module to other logical partitions as a virtual device via a device interface. Each time that the hypervisor creates a logical partition within the data processing system, the hypervisor also instantiates a logical TPM within the reserved partition such that the logical TPM is anchored to the hypervisor-based TPM. The hypervisor manages multiple logical TPM's within the reserved partition such that each logical TPM is uniquely associated with a logical partition.
摘要翻译：呈现一种用于在数据处理系统内实现可信计算环境的方法。在数据处理系统内初始化管理程序，并且管理程序监视数据处理系统内的多个逻辑，可分割的运行时环境。虚拟机管理程序为基于虚拟机管理程序的可信平台模块（TPM）预留逻辑分区，并通过设备接口将基于虚拟机管理程序的可信平台模块作为虚拟设备呈现给其他逻辑分区。每当虚拟机管理程序在数据处理系统内创建一个逻辑分区时，管理程序也会在保留的分区内实例化一个逻辑TPM，使得逻辑TPM被锚定到基于管理程序的TPM。虚拟机管理程序管理保留分区内的多个逻辑TPM，使得每个逻辑TPM与逻辑分区唯一相关联。

7. 发明申请

US20050144440A1 Method for securely creating an endorsement certificate in an insecure environment 失效
标题翻译：在不安全的环境中安全地创建背书证书的方法
公开(公告)号：US20050144440A1
公开(公告)日：2005-06-30
申请号：US10750594
申请日：2003-12-31
申请人： Ryan Catherman , David Challener , James Hoff
发明人： Ryan Catherman , David Challener , James Hoff
IPC分类号： G06F21/00 , H04L9/00
CPC分类号： G06F21/602 , G06F21/57 , G06F2221/2117 , H04L9/0877 , H04L9/3236 , H04L9/3263
摘要： A method and system for ensuring security-compliant creation and signing of endorsement keys of manufactured TPMs. The endorsement keys are generated for the TPM. The TPM vendor selects an N-byte secret and stores the N-byte secret in the TPM along with the endorsement keys. The secret number cannot be read outside of the TPM. The secret number is also provided to the OEM's credential server. During the endorsement key (EK) credential process, the TPM generates an endorsement key, which comprises both the public key and a hash of the secret and the public key. The credential server matches the hash within the endorsement key with a second hash of the received public key (from the endorsement key) and the vendor provided secret. The EK certificate is generated and inserted into the TPM only when a match is confirmed.
摘要翻译：一种用于确保制造TPM的签注密钥的安全兼容创建和签名的方法和系统。为TPM生成认可密钥。 TPM供应商选择一个N字节的秘密，并将N字节的秘密与支持密钥一起存储在TPM中。无法在TPM之外读取密码。秘密编号也提供给OEM的凭据服务器。在认可密钥（EK）凭证处理过程中，TPM产生一个签名密钥，其包括公开密钥和密钥的散列以及公开密钥。凭证服务器将签名密钥内的散列与接收到的公钥（来自认可密钥）和供应商提供的秘密的第二散列进行匹配。仅当匹配确认时，EK证书才会生成并插入到TPM中。

8. 发明授权

US5978373A Wide area network system providing secure transmission 失效
标题翻译：广域网系统提供安全的传输
公开(公告)号：US5978373A
公开(公告)日：1999-11-02
申请号：US893473
申请日：1997-07-11
申请人： James Hoff , Randall L. Brown , Thomas J. Perry , Satrio P. Mualim , Kevin B. Plyler , John W. Spenik , James B. Southway , Frank Sciabica , Scott J. Baer
发明人： James Hoff , Randall L. Brown , Thomas J. Perry , Satrio P. Mualim , Kevin B. Plyler , John W. Spenik , James B. Southway , Frank Sciabica , Scott J. Baer
IPC分类号： G06F15/00 , H04L12/46 , H04L12/56 , H04L12/66 , H04L29/06 , H04M3/00 , H04M3/42 , H04L12/28
CPC分类号： H04L63/0236 , H04L63/10
摘要： A system that provides secure transmission of data between a subscriber's PC and an online service provider (OLS) over an Ethernet WAN. The system includes a remote transceiver unit located at a subscriber site and connected to the subscriber's PC; a central transceiver unit located at a telephone central office and connected to the remote transceiver unit over a twisted pair network and also connected to a WAN; an authorization server that is connected to the WAN; and one or more OLSs, which may include Internet service providers, connected to the WAN. Security of transmission is provided through a method in which only subscriber transmissions directed to a session-specific OLS are allowed to pass through the central transceiver unit onto the WAN, and only unicast transmissions from authorized OLSs are allowed to pass through the central transceiver unit to the subscriber port of the remote transceiver unit. Broadcast transmissions are minimized in favor of unicast messages. The authorization server delivers the IP and MAC addresses of the session-specific OLSs and the subscriber's PC to the remote transceiver units.
摘要翻译：通过以太网WAN在用户的PC和在线服务提供商（OLS）之间提供数据安全传输的系统。该系统包括位于用户站点并连接到订户的PC的远程收发器单元; 位于电话中心局的中央收发器单元，并通过双绞线网络连接到远程收发器单元，并且还连接到WAN; 连接到WAN的授权服务器; 以及一个或多个OLS，其可以包括连接到WAN的因特网服务提供商。通过一种方法提供传输的安全性，其中仅允许指向特定于会话的OLS的用户传输通过中央收发器单元到达WAN，并且仅允许来自授权OLS的单播传输通过中央收发器单元远程收发器单元的用户端口。广播传输最小化，有利于单播消息。授权服务器将会话特定OLS和用户PC的IP和MAC地址传送到远程收发器单元。

9. 发明申请

US20060101286A1 Theft deterrence using trusted platform module authorization 有权
公开(公告)号：US20060101286A1
公开(公告)日：2006-05-11
申请号：US10984400
申请日：2004-11-08
申请人： Ryan Catherman , David Challener , James Hoff , Joseph Pennisi , Randall Springfield
发明人： Ryan Catherman , David Challener , James Hoff , Joseph Pennisi , Randall Springfield
IPC分类号： G06F12/14
CPC分类号： G06F21/57 , G06F21/88
摘要： A method for theft deterrence of a computer system is disclosed. The computer system includes a trusted platform module (TPM) and storage medium. The method comprises providing a binding key in the TPM; and providing an encrypted symmetric key in the storage medium. The method further includes providing an unbind command to the TPM based upon an authorization to provide a decrypted symmetric key; and providing the decrypted symmetric key to the secure storage device to allow for use of the computer system. Accordingly, by utilizing a secure hard disk drive (HDD) that requires a decrypted key to function in conjunction with a TPM, a computer if stolen is virtually unusable by the thief. In so doing, the risk of theft of the computer is significantly reduced.

10. 发明申请

US20060075223A1 Scalable paging of platform configuration registers 有权
标题翻译：平台配置寄存器的可扩展分页
公开(公告)号：US20060075223A1
公开(公告)日：2006-04-06
申请号：US10957545
申请日：2004-10-01
申请人： Steven Bade , Charles Ball , Ryan Catherman , James Hoff , James Ward
发明人： Steven Bade , Charles Ball , Ryan Catherman , James Hoff , James Ward
IPC分类号： H04L9/00 , G06F12/14 , H04L9/32 , G06F11/30
CPC分类号： G06F21/57
摘要： A method, computer program, and system for paging platform configuration registers in and out of a trusted platform module. In a trusted computing platform, an unlimited number of platform configuration registers can be obtained through paging. The trust platform module encrypts and decrypts platform configuration registers for storage outside the trusted platform module.
摘要翻译：用于寻呼平台配置的方法，计算机程序和系统在可信平台模块内进出。在可信赖的计算平台中，可以通过寻呼获得无限数量的平台配置寄存器。信任平台模块对平台配置寄存器进行加密和解密，以便在可信平台模块之外进行存储。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式