专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09405707B2 Secure replay protected storage 有权
标题翻译：安全重放保护存储
公开(公告)号：US09405707B2
公开(公告)日：2016-08-02
申请号：US13997896
申请日：2011-12-20
申请人： Nitin V. Sarangdhar , William A. Stevens, Jr. , John J. Vranich
发明人： Nitin V. Sarangdhar , William A. Stevens, Jr. , John J. Vranich
IPC分类号： G06F11/30 , G06F12/14 , G06F13/14
CPC分类号： G06F12/1408 , G06F13/14 , G06F21/44 , G06F21/79 , G06F2212/1052
摘要： Embodiments of the invention create an underlying infrastructure in a flash memory device (e.g., a serial peripheral interface (SPI) flash memory device) such that it may be protected against user attacks—e.g., replacing the SPI flash memory device or a man-in-the-middle (MITM) attack to modify the SPI flash memory contents on the fly. In the prior art, monotonic counters cannot be stored in SPI flash memory devices because said devices do not provide replay protection for the counters. A user may also remove the flash memory device and reprogram it. Host platforms alone cannot protect against such hardware attacks.Embodiments of the invention enable secure standard storage flash memory devices such as SPI flash memory devices to achieve replay protection for securely stored data. Embodiments of the invention utilize flash memory controllers, flash memory devices, unique device keys and HMAC key logic to create secure execution environments for various components.
摘要翻译：本发明的实施例在闪存设备（例如，串行外围设备接口（SPI）闪存设备）中创建底层基础设施，使得其可以被保护免受用户攻击 - 例如，替换SPI闪存设备或管理员 - 中间（MITM）攻击，即时修改SPI闪存内容。在现有技术中，单调计数器不能存储在SPI闪存设备中，因为所述设备不为计数器提供重放保护。用户还可以移除闪存设备并对其进行重新编程。仅主机平台无法防范此类硬件攻击。本发明的实施例使得诸如SPI闪存设备之类的安全标准存储闪存设备能够实现用于安全存储的数据的重放保护。本发明的实施例利用闪存控制器，闪存设备，唯一设备密钥和HMAC密钥逻辑来为各种组件创建安全的执行环境。

2. 发明申请

US20150381368A1 TECHNOLOGIES FOR SECURE OFFLINE ACTIVATION OF HARDWARE FEATURES 审中-公开
标题翻译：硬件特性的离线激活技术
公开(公告)号：US20150381368A1
公开(公告)日：2015-12-31
申请号：US14318278
申请日：2014-06-27
申请人： William A. Stevens, JR. , Alberto J. Martinez , Mukesh Kataria , Purushottam Goel , Tim Abels , Mahesh S. Natu
发明人： William A. Stevens, JR. , Alberto J. Martinez , Mukesh Kataria , Purushottam Goel , Tim Abels , Mahesh S. Natu
IPC分类号： H04L9/32 , G06Q30/04 , G06F9/44
CPC分类号： G06Q30/04 , G06F21/44 , G06F21/629 , G06F21/82 , H04L63/0876 , H04L63/126
摘要： Technologies for secure offline activation of hardware features include a target computing device having a platform controller hub (PCH) including a converged security and manageability engine (CSME) and a number of in-field programmable fuses (IFPs). During assembly of the target computing device by an original equipment manufacturer (OEM), the CSME is provided a list of hardware features to be activated. The CSME configures the IFPs to enable the requested features, generates a digital receipt including the activated features and a unique device ID, and signs the receipt using a unique device key. Signed receipts may be periodically submitted to a vendor computing device, which verifies the signed receipts, extracts the active feature list, and bills the OEM for activated features of the PCHs. The vendor computing device may bill the OEM a maximum price for PCHs for which there is no associated signed receipt. Other embodiments are described and claimed.
摘要翻译：用于硬件特征的安全离线激活的技术包括具有包括融合安全性和可管理性引擎（CSME）的平台控制器集线器（PCH）以及多个现场可编程保险丝（IFP））的目标计算设备。在由原始设备制造商（OEM）组装目标计算设备的过程中，CSME提供要激活的硬件功能的列表。 CSME配置IFP以启用所请求的功能，生成包含激活的功能和唯一设备ID的数字收据，并使用唯一的设备密钥对收据进行签名。签署的收据可以定期地提交给供应商计算设备，该设备验证签署的收据，提取活动的特征列表，并为OEM的PCH的激活特征收费。供应商计算设备可以向OEM收取没有相关签名收据的PCH的最高价格。描述和要求保护其他实施例。

3. 发明申请

US20110307878A1 SYSTEM FOR ATOMICALLY UPDATING A PLURALITY OF FILES 有权
标题翻译：用于正式更新多个文件的系统
公开(公告)号：US20110307878A1
公开(公告)日：2011-12-15
申请号：US13212898
申请日：2011-08-18
申请人： Kirk D. Brannock , William A. Stevens
发明人： Kirk D. Brannock , William A. Stevens
IPC分类号： G06F9/44
CPC分类号： G06F8/654
摘要： A method for updating platform firmware is disclosed. This capability is facilitated by a standard software abstraction for a firmware storage device, known as Firmware Volume (FV) that is managed through a Firmware File System (FFS). The FFS enables firmware files to be created, deleted, and updated individually. The FFS also enables a plurality of firmware files to be updated atomically by managing file state information via state bits stored in a file header of each firmware file, whereby an atomic change to a single state bit simultaneously causes the FFS to use an updated set of firmware files in place of an original set of firmware files.
摘要翻译：公开了一种更新平台固件的方法。通过固件存储设备的标准软件抽象（称为通过固件文件系统（FFS）管理的固件卷（FV））来促进此功能。 FFS使固件文件可以单独创建，删除和更新。 FFS还通过经由存储在每个固件文件的文件头中的状态位来管理文件状态信息来使原始地更新多个固件文件，从而对单个状态位的原子改变同时使得FFS使用更新的一组固件文件代替一组原始固件文件。

4. 发明授权

US07299463B2 Method for atomically updating a plurality of files 失效
标题翻译：用于原子更新多个文件的方法
公开(公告)号：US07299463B2
公开(公告)日：2007-11-20
申请号：US09967093
申请日：2001-09-28
申请人： Kirk D. Brannock , William A. Stevens
发明人： Kirk D. Brannock , William A. Stevens
IPC分类号： G06F9/44
CPC分类号： G06F8/654
摘要： A method for updating platform firmware is disclosed. This capability is facilitated by a standard software abstraction for a firmware storage device, known as Firmware Volume (FV) that is managed through a Firmware File System (FFS). The FFS enables firmware files to be created, deleted, and updated individually. The FFS also enables a plurality of firmware files to be updated atomically by managing file state information via state bits stored in a file header of each firmware file, whereby an atomic change to a single state bit simultaneously causes the FFS to use an updated set of firmware files in place of an original set of firmware files.
摘要翻译：公开了一种更新平台固件的方法。通过固件存储设备的标准软件抽象（称为通过固件文件系统（FFS）管理的固件卷（FV））来促进此功能。 FFS使固件文件可以单独创建，删除和更新。 FFS还通过经由存储在每个固件文件的文件头中的状态位来管理文件状态信息来使原始地更新多个固件文件，从而对单个状态位的原子改变同时使得FFS使用更新的一组固件文件代替一组原始固件文件。

5. 发明授权

US06636957B2 Method and apparatus for configuring and initializing a memory device and a memory channel 失效
标题翻译：用于配置和初始化存储器件和存储器通道的方法和装置
公开(公告)号：US06636957B2
公开(公告)日：2003-10-21
申请号：US09779072
申请日：2001-02-07
申请人： William A. Stevens , Puthiya K. Nizar
发明人： William A. Stevens , Puthiya K. Nizar
IPC分类号： G06F1200
CPC分类号： G06F13/4243
摘要： A method and apparatus for configuring and/or initializing memory devices. A disclosed method initializes a memory controller and a plurality of memory controller configuration registers. Serial identification numbers are assigned to memory devices coupled to the memory controller. Additionally, groups of device identification numbers, which are based at least in part on the memory device sizes, are assigned to the memory devices, and the memory devices are enabled.
摘要翻译：一种用于配置和/或初始化存储器件的方法和装置。所公开的方法初始化存储器控制器和多个存储器控制器配置寄存器。串行识别号被分配给耦合到存储器控制器的存储器件。此外，至少部分地基于存储器设备大小的设备标识号码组被分配给存储器设备，并且存储器设备被使能。

6. 发明授权

US06173345B2 Method and apparatus for levelizing transfer delays for a channel of devices such as memory devices in a memory subsystem 有权
标题翻译：用于调整诸如存储器子系统中的存储器件的设备的通道的传输延迟的方法和装置
公开(公告)号：US06173345B2
公开(公告)日：2001-01-09
申请号：US09186042
申请日：1998-11-03
申请人： William A. Stevens
发明人： William A. Stevens
IPC分类号： G06F1300
CPC分类号： G11C29/842
摘要： A method and apparatus for levelizing transfer delays for a channel of devices. One method described determines a controller delay value by iteratively testing memory transfers to determine a largest transfer latency value using a subset of all available delays for at least one of a plurality of memory devices. Additionally, a memory device delay value for each of the plurality of memory devices is determined by testing memory transfers using at least one delay value for each of the plurality of memory devices.
摘要翻译：一种用于调整设备信道的传输延迟的方法和装置。所描述的一种方法通过迭代地测试存储器传输来确定控制器延迟值，以使用多个存储器设备中的至少一个的所有可用延迟的子集来确定最大传输等待时间值。另外，通过使用多个存储器件中的每一个的至少一个延迟值测试存储器传输来确定多个存储器件中的每一个的存储器件延迟值。

7. 发明申请

US20160182238A1 PARTITIONING ACCESS TO SYSTEM RESOURCES 有权
标题翻译：分区访问系统资源
公开(公告)号：US20160182238A1
公开(公告)日：2016-06-23
申请号：US14574969
申请日：2014-12-18
申请人： Prashant Dewan , Kapil Sood , Kumar N. Dwarakanath , Ioannis T. Schoinas , William A. Stevens, JR. , Ned M. Smith
发明人： Prashant Dewan , Kapil Sood , Kumar N. Dwarakanath , Ioannis T. Schoinas , William A. Stevens, JR. , Ned M. Smith
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： H04L9/3263 , G06F21/572 , G06F21/74 , G09C1/00 , H04L9/321 , H04L9/3234 , H04L9/3242 , H04L2209/12 , H04L2209/68
摘要： In one embodiment, a processor has at least one core to execute instructions, a security engine coupled to the at least one core, a first storage to store a first immutable key associated with a vendor of the processor, and a second storage to store a second immutable key associated with an original equipment manufacturer (OEM) of the system. A first portion of firmware is to be verified based at least in part on the first immutable key and a second portion of firmware is to be verified based at least in part on the second immutable key, the first portion of firmware associated with the vendor and the second portion of firmware associated with the OEM. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，处理器具有执行指令的至少一个核心，耦合到所述至少一个核心的安全引擎，用于存储与所述处理器的供应商相关联的第一不可变密钥的第一存储器，以及存储与系统的原始设备制造商（OEM）相关联的第二个不可变键。至少部分地基于第一不可变密钥验证固件的第一部分，并且至少部分地基于第二不可变密钥，与供应商相关联的固件的第一部分和与OEM相关联的固件的第二部分。描述和要求保护其他实施例。

8. 发明授权

US08839226B2 System for atomically updating a plurality of files 有权
标题翻译：用于原子地更新多个文件的系统
公开(公告)号：US08839226B2
公开(公告)日：2014-09-16
申请号：US13212898
申请日：2011-08-18
申请人： Kirk D. Brannock , William A. Stevens
发明人： Kirk D. Brannock , William A. Stevens
IPC分类号： G06F9/44
CPC分类号： G06F8/654
摘要： A method for updating platform firmware is disclosed. This capability is facilitated by a standard software abstraction for a firmware storage device, known as Firmware Volume (FV) that is managed through a Firmware File System (FFS). The FFS enables firmware files to be created, deleted, and updated individually. The FFS also enables a plurality of firmware files to be updated atomically by managing file state information via state bits stored in a file header of each firmware file, whereby an atomic change to a single state bit simultaneously causes the FFS to use an updated set of firmware files in place of an original set of firmware files.
摘要翻译：公开了一种更新平台固件的方法。通过固件存储设备的标准软件抽象（称为通过固件文件系统（FFS）管理的固件卷（FV））来促进此功能。 FFS使固件文件可以单独创建，删除和更新。 FFS还通过经由存储在每个固件文件的文件头中的状态位来管理文件状态信息来使原始地更新多个固件文件，从而对单个状态位的原子改变同时使得FFS使用更新的一组固件文件代替一组原始固件文件。

9. 发明授权

US08364915B2 Method, apparatus and system for generating access information from an LRU tracking list 有权
标题翻译：用于从LRU跟踪列表生成访问信息的方法，装置和系统
公开(公告)号：US08364915B2
公开(公告)日：2013-01-29
申请号：US12822034
申请日：2010-06-23
申请人： Kie Woon Lim , Khee Wooi Lee , William A. Stevens, Jr.
发明人： Kie Woon Lim , Khee Wooi Lee , William A. Stevens, Jr.
IPC分类号： G06F12/00
CPC分类号： G06F12/123
摘要： Techniques for generating access information indicating a least recently used (LRU) memory region in a set of memory regions. In an embodiment, data is stored in an entry of an LRU tracking list (LTL) based on a touch message indicating when a memory group has been touched—e.g. read from, written to and/or associated with a memory region. The data stored in an LTL entry may include an identifier of a memory group and/or validity data specifying whether that LTL entry stores a set of default data. In another embodiment, access information may be generated based on the memory group identifier and the validity data.
摘要翻译：用于产生指示一组存储器区域中的最近最少使用（LRU）存储器区域的访问信息的技术。在一个实施例中，基于指示何时触摸存储器组的触摸消息，将数据存储在LRU跟踪列表（LTL）的条目中 - 例如，读取，写入和/或与存储器区域相关联。存储在LTL条目中的数据可以包括存储器组的标识符和/或指定该LTL条目是否存储一组默认数据的有效性数据。在另一个实施例中，可以基于存储器组标识符和有效性数据来生成访问信息。

10. 发明授权

US08086833B2 Method and system for linking firmware modules in a pre-memory execution environment 有权
标题翻译：用于在预存储器执行环境中链接固件模块的方法和系统
公开(公告)号：US08086833B2
公开(公告)日：2011-12-27
申请号：US12206630
申请日：2008-09-08
申请人： William A. Stevens, Jr. , Andrew J. Fish , Kirk D. Brannock , Robert P. Hale , Ramamurthy Krithivas
发明人： William A. Stevens, Jr. , Andrew J. Fish , Kirk D. Brannock , Robert P. Hale , Ramamurthy Krithivas
IPC分类号： G06F9/00 , G06F9/24 , G06F1/177
CPC分类号： G06F8/54 , G06F9/4401
摘要： A BIOS includes a core and multiple modules. The modules include both those that are platform specific and those that are not platform specific. Each module has a standard interface that allows the core (or other module) to call the module. A platform vendor constructs a BIOS by selecting modules from one or more vendors, which when executed can select modules that are suitable for the platform the BIOS resides in.
摘要翻译： BIOS包括核心和多个模块。这些模块包括那些具有平台特性的模块，以及不具有平台特性的模块。每个模块都有一个标准接口，允许核心（或其他模块）调用该模块。平台供应商通过从一个或多个供应商中选择模块来构建BIOS，当被执行时可以选择适合于BIOS所在平台的模块。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式