专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08266446B2 Software protection against fault attacks 有权
标题翻译：防止故障攻击的软件保护
公开(公告)号：US08266446B2
公开(公告)日：2012-09-11
申请号：US12253394
申请日：2008-10-17
申请人： Boris Dolgunov , Arseniy Aharonov , Raphael Slepon Ben-Yaish
发明人： Boris Dolgunov , Arseniy Aharonov , Raphael Slepon Ben-Yaish
IPC分类号： G06F12/14
CPC分类号： G06F21/556
摘要： A method for protecting information in a device includes providing a device with a non-secure hardware domain, a processor having a software-controlled mode of operation, and a secure hardware domain having a secure memory that is inaccessible by the processor when the processor is operating in the software-controlled mode of operation. Data from the non-secure hardware domain is established in the secure hardware domain. Computing operations are executed on the data in the secure hardware domain to produce a result. The secure hardware domain is purged, while retaining the result therein. The result is thereafter returned from the secure hardware domain into the non-secure hardware domain.
摘要翻译：一种用于保护设备中的信息的方法包括：提供具有非安全硬件域的设备，具有软件控制操作模式的处理器，以及具有安全存储器的安全硬件域，所述安全存储器在处理器为以软件控制的操作模式运行。来自非安全硬件域的数据建立在安全的硬件领域。对安全硬件域中的数据执行计算操作以产生结果。清除安全硬件域，同时保留其中的结果。之后，结果从安全硬件域返回到非安全的硬件域。

2. 发明申请

US20090113214A1 SOFTWARE PROTECTION AGAINST FAULT ATTACKS 有权
标题翻译：软件防范故障攻击
公开(公告)号：US20090113214A1
公开(公告)日：2009-04-30
申请号：US12253394
申请日：2008-10-17
申请人： Boris Dolgunov , Arseniy Aharonov , Raphael Slepon Ben-Yaish
发明人： Boris Dolgunov , Arseniy Aharonov , Raphael Slepon Ben-Yaish
IPC分类号： G06F12/14
CPC分类号： G06F21/556
摘要： A method for protecting information in a device includes providing a device with a non-secure hardware domain, a processor having a software-controlled mode of operation, and a secure hardware domain having a secure memory that is inaccessible by the processor when the processor is operating in the software-controlled mode of operation. Data from the non-secure hardware domain is established in the secure hardware domain. Computing operations are executed on the data in the secure hardware domain to produce a result. The secure hardware domain is purged, while retaining the result therein. The result is thereafter returned from the secure hardware domain into the non-secure hardware domain.
摘要翻译：用于保护设备中的信息的方法包括：提供具有非安全硬件域的设备，具有软件控制的操作模式的处理器，以及具有安全存储器的安全硬件域，所述安全存储器在处理器为以软件控制的操作模式运行。来自非安全硬件域的数据建立在安全的硬件领域。对安全硬件域中的数据执行计算操作以产生结果。清除安全硬件域，同时保留其中的结果。之后，结果从安全硬件域返回到非安全的硬件域。

3. 发明授权

US08726040B2 Memory randomization for protection against side channel attacks 有权
标题翻译：记忆随机化，以防止侧向信道攻击
公开(公告)号：US08726040B2
公开(公告)日：2014-05-13
申请号：US13486668
申请日：2012-06-01
申请人： Boris Dolgunov , Arseniy Aharonov
发明人： Boris Dolgunov , Arseniy Aharonov
IPC分类号： G06F21/00 , G06F11/20 , G06F12/14 , H04K1/00 , H04L9/00
CPC分类号： G06F21/556 , G06F12/1408 , H04L9/0894
摘要： Side channel attacks against a computing device are prevented by combinations of scrambling data to be stored in memory and scrambling the memory addresses of the data using software routines to execute scrambling and descrambling functions. Encrypted versions of variables, data and lookup tables, commonly employed in cryptographic algorithms, are thus dispersed into pseudorandom locations. Data and cryptographic primitives that require data-dependent memory accesses are thus shielded from attacks that could reveal memory access patterns and compromise cryptographic keys.
摘要翻译：通过将要存储在存储器中的加扰数据的组合和使用软件例程对数据的存储器地址进行加扰来执行加扰和解扰功能来防止针对计算设备的侧信道攻击。通常在加密算法中使用的变量，数据和查找表的加密版本因此分散到伪随机位置。因此，需要依赖数据的内存访问的数据和加密原语可以防止可能暴露内存访问模式和危及加密密钥的攻击。

4. 发明授权

US08082236B2 Write failure protection for hierarchical integrity schemes 有权
标题翻译：为层次完整性方案写入失败保护
公开(公告)号：US08082236B2
公开(公告)日：2011-12-20
申请号：US12252784
申请日：2008-10-16
申请人： Arseniy Aharonov , Boris Dolgunov
发明人： Arseniy Aharonov , Boris Dolgunov
IPC分类号： G06F17/30
CPC分类号： G06F21/64 , G06F21/78
摘要： A method for data integrity protection includes arranging in an integrity hierarchy a plurality of data blocks, which contain data. The integrity hierarchy includes multiple levels of signature blocks containing signatures computed respectively over lower levels in the hierarchy, wherein the levels culminate in a top-level block containing a top-level signature computed over the hierarchy. A modification to be made in the data stored in a given data block is received. One or more of the signatures is recomputed in response to the modification, including the top-level signature. Copies of the given data block, and of the signature blocks, including a copy of the top-level block, are stored in respective locations in a storage medium. An indication that the copy is a valid version of the top-level block is recorded in the copy of the top-level block.
摘要翻译：一种用于数据完整性保护的方法包括在完整性层级中布置包含数据的多个数据块。完整性层次结构包括多个级别的签名块，其包含分别在层次结构中的较低级别上计算的签名，其中级别最终导致包含在层次结构上计算的顶级签名的顶级块。接收在给定数据块中存储的数据中进行的修改。响应于修改重新计算一个或多个签名，包括顶级签名。给定数据块和包括顶级块的副本的签名块的副本存储在存储介质中的相应位置中。该副本是顶级块的有效版本的指示被记录在顶级块的副本中。

5. 发明授权

US07979628B2 Re-flash protection for flash memory 有权
标题翻译：重新闪存保护闪存
公开(公告)号：US07979628B2
公开(公告)日：2011-07-12
申请号：US12252930
申请日：2008-10-16
申请人： Boris Dolgunov , Arseniy Aharonov
发明人： Boris Dolgunov , Arseniy Aharonov
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28
CPC分类号： G06F21/554 , G06F21/64 , G06F21/79
摘要： A method for storing data includes providing a memory package including an integrated circuit containing a non-volatile memory and counter circuitry. The data is written to the non-volatile memory. The counter circuitry is operated to maintain a count of write operations performed on the non-volatile memory. The data and the count from the memory package are received at a controller, separate from the memory package, and the data is authenticated in response to the count.
摘要翻译：一种用于存储数据的方法包括提供包括包含非易失性存储器和计数器电路的集成电路的存储器包。数据被写入非易失性存储器。操作计数器电路以维持对非易失性存储器执行的写入操作的计数。来自存储器包的数据和计数在与存储器包分开的控制器处被接收，并且数据被认证以响应于计数。

6. 发明申请

US20090113217A1 MEMORY RANDOMIZATION FOR PROTECTION AGAINST SIDE CHANNEL ATTACKS 有权
标题翻译：用于保护边界通道攻击的记忆随机
公开(公告)号：US20090113217A1
公开(公告)日：2009-04-30
申请号：US12254225
申请日：2008-10-20
申请人： Boris Dolgunov , Arseniy Aharonov
发明人： Boris Dolgunov , Arseniy Aharonov
IPC分类号： H04L9/06
CPC分类号： G06F21/556 , G06F12/1408 , H04L9/0894
摘要： Side channel attacks against a computing device are prevented by combinations of scrambling data to be stored in memory and scrambling the memory addresses of the data using software routines to execute scrambling and descrambling functions. Encrypted versions of variables, data and lookup tables, commonly employed in cryptographic algorithms, are thus dispersed into pseudorandom locations. Data and cryptographic primitives that require data-dependent memory accesses are thus shielded from attacks that could reveal memory access patterns and compromise cryptographic keys.
摘要翻译：通过将要存储在存储器中的加扰数据的组合和使用软件例程对数据的存储器地址进行加扰来执行加扰和解扰功能来防止针对计算设备的侧向信道攻击。通常在加密算法中使用的变量，数据和查找表的加密版本因此分散到伪随机位置。因此，需要依赖数据的内存访问的数据和加密原语可以防止可能暴露内存访问模式和危及加密密钥的攻击。

7. 发明申请

US20120317423A1 Memory randomization for protection against side channel attacks 有权
公开(公告)号：US20120317423A1
公开(公告)日：2012-12-13
申请号：US13486668
申请日：2012-06-01
申请人： Boris Dolgunov , Arseniy Aharonov
发明人： Boris Dolgunov , Arseniy Aharonov
IPC分类号： G06F12/14
CPC分类号： G06F21/556 , G06F12/1408 , H04L9/0894
摘要： Side channel attacks against a computing device are prevented by combinations of scrambling data to be stored in memory and scrambling the memory addresses of the data using software routines to execute scrambling and descrambling functions. Encrypted versions of variables, data and lookup tables, commonly employed in cryptographic algorithms, are thus dispersed into pseudorandom locations. Data and cryptographic primitives that require data-dependent memory accesses are thus shielded from attacks that could reveal memory access patterns and compromise cryptographic keys.

8. 发明授权

US08195957B2 Memory randomization for protection against side channel attacks 有权
标题翻译：记忆随机化，以防止侧向信道攻击
公开(公告)号：US08195957B2
公开(公告)日：2012-06-05
申请号：US12254225
申请日：2008-10-20
申请人： Boris Dolgunov , Arseniy Aharonov
发明人： Boris Dolgunov , Arseniy Aharonov
IPC分类号： G06F21/00 , G06F11/30 , G06F12/14 , H04K1/00 , H04L9/00
CPC分类号： G06F21/556 , G06F12/1408 , H04L9/0894
摘要： Side channel attacks against a computing device are prevented by combinations of scrambling data to be stored in memory and scrambling the memory addresses of the data using software routines to execute scrambling and descrambling functions. Encrypted versions of variables, data and lookup tables, commonly employed in cryptographic algorithms, are thus dispersed into pseudorandom locations. Data and cryptographic primitives that require data-dependent memory accesses are thus shielded from attacks that could reveal memory access patterns and compromise cryptographic keys.
摘要翻译：通过将要存储在存储器中的加扰数据的组合和使用软件例程对数据的存储器地址进行加扰来执行加扰和解扰功能来防止针对计算设备的侧信道攻击。通常在加密算法中使用的变量，数据和查找表的加密版本因此分散到伪随机位置。因此，需要依赖数据的内存访问的数据和加密原语可以防止可能暴露内存访问模式和危及加密密钥的攻击。

9. 发明申请

US20090112823A1 WRITE FAILURE PROTECTION FOR HIERARCHICAL INTEGRITY SCHEMES 有权
标题翻译：用于分层整合方案的写失败保护
公开(公告)号：US20090112823A1
公开(公告)日：2009-04-30
申请号：US12252784
申请日：2008-10-16
申请人： Arseniy Aharonov , Boris Dolgunov
发明人： Arseniy Aharonov , Boris Dolgunov
IPC分类号： G06F7/06 , G06F17/30
CPC分类号： G06F21/64 , G06F21/78
摘要： A method for data integrity protection includes arranging in an integrity hierarchy a plurality of data blocks, which contain data. The integrity hierarchy includes multiple levels of signature blocks containing signatures computed respectively over lower levels in the hierarchy, wherein the levels culminate in a top-level block containing a top-level signature computed over the hierarchy. A modification to be made in the data stored in a given data block is received. One or more of the signatures is recomputed in response to the modification, including the top-level signature. Copies of the given data block, and of the signature blocks, including a copy of the top-level block, are stored in respective locations in a storage medium. An indication that the copy is a valid version of the top-level block is recorded in the copy of the top-level block.
摘要翻译：一种用于数据完整性保护的方法包括在完整性层级中布置包含数据的多个数据块。完整性层次结构包括多个级别的签名块，其包含分别在层次结构中的较低级别上计算的签名，其中级别最终导致包含在层次结构上计算的顶级签名的顶级块。接收在给定数据块中存储的数据中进行的修改。响应于修改重新计算一个或多个签名，包括顶级签名。给定数据块和包括顶级块的副本的签名块的副本存储在存储介质中的相应位置中。该副本是顶级块的有效版本的指示被记录在顶级块的副本中。

10. 发明授权

US08392714B2 Secure overlay manager protection 有权
标题翻译：安全覆盖管理器保护
公开(公告)号：US08392714B2
公开(公告)日：2013-03-05
申请号：US12255229
申请日：2008-10-21
申请人： Boris Dolgunov , Yonatan Halevi , Eran Shen , Amir Samuelov , Niv Cohen , Michael Holtzman , Rotem Sela
发明人： Boris Dolgunov , Yonatan Halevi , Eran Shen , Amir Samuelov , Niv Cohen , Michael Holtzman , Rotem Sela
IPC分类号： H04L9/32
CPC分类号： G06F21/57 , G06F21/572
摘要： A method for protection of data includes maintaining a control parameter indicative of a current version of the data. The data is partitioned into multiple segments. Respective signatures of the segments are computed, responsively to the control parameter, the segments and respective signatures forming respective signed input segments, which are stored in a memory. After the signed input segments are stored, a signed output segment is fetched from the memory. The signature of the signed output segment is verified responsively to the control parameter, and the data in the signed output segment is processed responsively to verifying the signature.
摘要翻译：用于保护数据的方法包括维护指示数据的当前版本的控制参数。数据被分割成多个段。响应于控制参数，形成分别存储在存储器中的相应带符号输入段的段和相应签名来计算段的相应签名。在有符号输入段被存储之后，从存储器中取出带符号的输出段。响应于控制参数验证有符号输出段的签名，并且响应地处理签名输出段中的数据以验证签名。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式