专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09135453B2 Preventing data extraction by side-channel attack 有权
标题翻译：通过侧信道攻击防止数据提取
公开(公告)号：US09135453B2
公开(公告)日：2015-09-15
申请号：US14131396
申请日：2012-08-27
申请人： Chaim Shen-Orr , Yonatan Shlomovich , Reuven Elbaum , Zvi Shkedy , Lior Amarilio , Yigal Shapiro , Uri Bear
发明人： Chaim Shen-Orr , Yonatan Shlomovich , Reuven Elbaum , Zvi Shkedy , Lior Amarilio , Yigal Shapiro , Uri Bear
IPC分类号： G06F17/30 , G06F21/60 , G06F21/55 , H04L9/00
CPC分类号： G06F21/60 , G06F21/755 , H04L9/003
摘要： A method for data transfer includes receiving a control signal triggering a transfer of a secret value into an element (24) of a circuit (20). In response to the control signal, a dummy value (42, 50) and the secret value are inserted in succession into the element of the circuit.
摘要翻译：一种用于数据传送的方法包括接收触发将秘密值转移到电路（20）的元件（24）中的控制信号。响应于控制信号，将虚拟值（42,50）和秘密值相继插入到电路的元件中。

2. 发明申请

US20140143883A1 Preventing Data Extraction by Side-Channel Attack 有权
标题翻译：通过侧向通道攻击防止数据提取
公开(公告)号：US20140143883A1
公开(公告)日：2014-05-22
申请号：US14131396
申请日：2012-08-27
申请人： Chaim Shen-Orr , Yonatan Shlomovich , Reuven Elbaum , Zvi Shkedy , Lior Amarilio , Yigal Shapiro , Uri Bear
发明人： Chaim Shen-Orr , Yonatan Shlomovich , Reuven Elbaum , Zvi Shkedy , Lior Amarilio , Yigal Shapiro , Uri Bear
IPC分类号： G06F21/60
CPC分类号： G06F21/60 , G06F21/755 , H04L9/003
摘要： A method for data transfer includes receiving a control signal triggering a transfer of a secret value into an element (24) of a circuit (20). In response to the control signal, a dummy value (42, 50) and the secret value are inserted in succession into the element of the circuit.
摘要翻译：一种用于数据传送的方法包括接收触发将秘密值传送到电路（20）的元件（24）中的控制信号。响应于控制信号，将虚拟值（42,50）和秘密值相继插入到电路的元件中。

3. 发明授权

US08539596B2 Security within integrated circuits 有权
标题翻译：集成电路内的安全
公开(公告)号：US08539596B2
公开(公告)日：2013-09-17
申请号：US12736564
申请日：2009-05-21
申请人： Chaim Shen-Orr , Zvi Shkedy , Reuven Elbaum , Yonatan Shlomovich , Yigal Shapiro , Yaacov Belenky , Yaakov (Jordan) Levy , Reuben Sumner , Itsik Mantin
发明人： Chaim Shen-Orr , Zvi Shkedy , Reuven Elbaum , Yonatan Shlomovich , Yigal Shapiro , Yaacov Belenky , Yaakov (Jordan) Levy , Reuben Sumner , Itsik Mantin
IPC分类号： G06F21/00
CPC分类号： G06F21/60 , G06F21/79 , H04L9/003
摘要： A method for hindering detection of information unintentionally leaked from a secret held in a memory unit is described, the method including receiving a triggering event waiting for at least a first amount of time to pass after the receipt of the triggering event, the memory unit being in a non-operational state during the at least a first amount of time after the at least a first amount of time has passed, changing at least one first condition under which the memory unit operates, thereby causing the memory unit to enter an operational state, waiting for a second amount of time to pass after the changing at least one first condition, and changing, after the second amount of time, at least one second condition under which the memory unit operates, thereby causing the memory unit to enter the non-operational state, wherein access to the secret information is enabled only during the second amount of time, and detection of secret information unintentionally leaked is limited during the first amount of time. Related apparatus and methods are also described.
摘要翻译：描述了阻止从存储单元中保存的秘密泄漏的信息的检测的方法，所述方法包括在接收到触发事件之后接收等待至少第一时间量的触发事件以通过，所述存储单元为在所述至少第一时间量之后的至少第一时间量内处于非操作状态，改变所述存储器单元在其下操作的至少一个第一状态，从而使所述存储器单元进入操作状态在改变至少一个第一条件之后等待第二时间量过去，并且在所述第二时间量之后改变所述存储器单元操作的至少一个第二状态，从而使所述存储器单元进入非其中对秘密信息的访问仅在第二时间段期间被启用，并且在f期间有意无意地泄漏的秘密信息的检测受到限制第一次的时间还描述了相关装置和方法。

4. 发明申请

US20110083194A1 SECURITY WITHIN INTEGRATED CIRCUITS 有权
标题翻译：在集成电路中的安全
公开(公告)号：US20110083194A1
公开(公告)日：2011-04-07
申请号：US12736564
申请日：2009-05-21
申请人： Chaim Shen-Orr , Zvi Shkedy , Reuven Elbaum , Yonatan Shlomovich , Yigal Shapiro , Yaacov Belenky , Yaakov (Jordan) Levy , Reuben Sumner , Itsik Mantin
发明人： Chaim Shen-Orr , Zvi Shkedy , Reuven Elbaum , Yonatan Shlomovich , Yigal Shapiro , Yaacov Belenky , Yaakov (Jordan) Levy , Reuben Sumner , Itsik Mantin
IPC分类号： G06F21/24
CPC分类号： G06F21/60 , G06F21/79 , H04L9/003
摘要： A method for hindering detection of information unintentionally leaked from a secret held in a memory unit is described, the method including receiving a triggering event waiting for at least a first amount of time to pass after the receipt of the triggering event, the memory unit being in a non-operational state during the at least a first amount of time after the at least a first amount of time has passed, changing at least one first condition under which the memory unit operates, thereby causing the memory unit to enter an operational state, waiting for a second amount of time to pass after the changing at least one first condition, and changing, after the second amount of time, at least one second condition under which the memory unit operates, thereby causing the memory unit to enter the non-operational state, wherein access to the secret information is enabled only during the second amount of time, and detection of secret information unintentionally leaked is limited during the first amount of time. Related apparatus and methods are also described.
摘要翻译：描述了阻止从存储单元中保存的秘密泄漏的信息的检测的方法，所述方法包括在接收到触发事件之后接收等待至少第一时间量的触发事件以通过，所述存储单元为在所述至少第一时间量之后的至少第一时间量内处于非操作状态，改变所述存储器单元在其下操作的至少一个第一状态，从而使所述存储器单元进入操作状态在改变至少一个第一条件之后等待第二时间量过去，并且在所述第二时间量之后改变所述存储器单元操作的至少一个第二状态，从而使所述存储器单元进入非其中对秘密信息的访问仅在第二时间段期间被启用，并且在f期间有意无意地泄漏的秘密信息的检测受到限制第一次的时间还描述了相关装置和方法。

5. 发明申请

US20190286853A1 CIRCUITS SUPPORTING IMPROVED SIDE CHANNEL AND FAULT INJECTION ATTACK RESISTANCE 审中-公开
公开(公告)号：US20190286853A1
公开(公告)日：2019-09-19
申请号：US16431153
申请日：2019-06-04
申请人： Yaacov Belenky , Gyora Benedek , Reuven Elbaum , David Novick , Elad Peer , Chaim Shen-Orr , Yonatan Shlomovich
发明人： Yaacov Belenky , Gyora Benedek , Reuven Elbaum , David Novick , Elad Peer , Chaim Shen-Orr , Yonatan Shlomovich
IPC分类号： G06F21/72 , H04L9/08 , H04L9/06 , G06F21/60 , G06F21/56
摘要： The present disclosure is directed to systems and methods to protect against SCA and fault injection attacks through the use of a temporary or ephemeral key to cryptographically alter input data portions. Universal resistant block (URB) circuitry receives a seed data value and a at least one secret key data value and generates an ephemeral key output data value. Cryptographic circuitry uses the ephemeral key data value to transform an input data portion to produce an transformed output data portion. The use of an SCA or fault injection attack on the transformed output data portion will reveal only the ephemeral key data value and not the at least one secret key data value. Further, where a unique ephemeral key data value is used to transform each input data portion, an attacker cannot discover the ephemeral key in a piecemeal manner and must instead discover the complete ephemeral key data value—significantly increasing the difficulty of performing a successful SCA or fault injection attack.

6. 发明授权

US07920702B2 Digital rights management system and method 有权
标题翻译：数字版权管理系统和方法
公开(公告)号：US07920702B2
公开(公告)日：2011-04-05
申请号：US12388717
申请日：2009-02-19
申请人： Chaim Shen-Orr , Eliphaz Hibshoosh , Gyora Benedek , Hillel Solow , Yaacov Belenky , Yossi Tsuria , Zvi Shkedy
发明人： Chaim Shen-Orr , Eliphaz Hibshoosh , Gyora Benedek , Hillel Solow , Yaacov Belenky , Yossi Tsuria , Zvi Shkedy
IPC分类号： H04L9/32 , H04N7/167
CPC分类号： G06F21/10 , G06F2221/0704 , G06F2221/0744 , G09G5/00 , G09G2358/00 , G09G2360/18
摘要： A system and a method for providing variable security mechanisms for securing digital content, in which a single security mechanism is not used for all content. Instead, at least one characteristic or feature of the security mechanism is varied between units, instances or categories of content. Therefore, even if unauthorized access is gained to a single unit of content, the overall integrity and security of the system for content distribution is not compromised. Preferably, security is provided though a general mechanism, which is then varied in order to provide variable, dissimilar security schemes for different types of content. By “type of content”, it is meant any of a single unit of content, a single instance of content or a single category of content. For example, for a category of content, the content may be characterized according to the identity of the content itself, such as the title of a movie for example, and/or according to the owner of a particular copy of the content. Thus, different security schemes may optionally and preferably be generated from a particular root structure. Related apparatus and methods are also provided.
摘要翻译：一种用于提供用于保护数字内容的可变安全机制的系统和方法，其中单个安全机制不用于所有内容。相反，安全机制的至少一个特性或特征在单元，实例或内容类别之间变化。因此，即使未授权的访问获得到单个内容单元，内容分发系统的整体完整性和安全性也不会受到损害。优选地，通过通用机制来提供安全性，然后进行变化，以便为不同类型的内容提供可变的不同的安全方案。根据“内容类型”，它是指单个内容单元，单个内容实例或单个内容类别中的任何一个。例如，对于内容的类别，内容可以根据内容本身的身份（例如电影的标题）和/或根据内容的特定副本的所有者来表征。因此，可以可选地且优选地从特定根结构生成不同的安全方案。还提供了相关的装置和方法。

7. 发明申请

US20090154697A1 DIGITAL RIGHTS MANAGEMENT SYSTEM AND METHOD 有权
标题翻译：数字权限管理系统与方法
公开(公告)号：US20090154697A1
公开(公告)日：2009-06-18
申请号：US12388717
申请日：2009-02-19
申请人： Chaim Shen-Orr , Eliphaz Hibshoosh , Gyora Benedek , Hillel Solow , Yaacov Belenky , Yossi Tsuria , Zvi Shkedy
发明人： Chaim Shen-Orr , Eliphaz Hibshoosh , Gyora Benedek , Hillel Solow , Yaacov Belenky , Yossi Tsuria , Zvi Shkedy
IPC分类号： H04N7/167
CPC分类号： G06F21/10 , G06F2221/0704 , G06F2221/0744 , G09G5/00 , G09G2358/00 , G09G2360/18
摘要： A system and a method for providing variable security mechanisms for securing digital content, in which a single security mechanism is not used for all content. Instead, at least one characteristic or feature of the security mechanism is varied between units, instances or categories of content. Therefore, even if unauthorized access is gained to a single unit of content, the overall integrity and security of the system for content distribution is not compromised. Preferably, security is provided though a general mechanism, which is then varied in order to provide variable, dissimilar security schemes for different types of content. By “type of content”, it is meant any of a single unit of content, a single instance of content or a single category of content. For example, for a category of content, the content may be characterized according to the identity of the content itself, such as the title of a movie for example, and/or according to the owner of a particular copy of the content. Thus, different security schemes may optionally and preferably be generated from a particular root structure. Related apparatus and methods are also provided.
摘要翻译：一种用于提供用于保护数字内容的可变安全机制的系统和方法，其中单个安全机制不用于所有内容。相反，安全机制的至少一个特性或特征在单元，实例或内容类别之间变化。因此，即使未授权的访问获得到单个内容单元，内容分发系统的整体完整性和安全性也不会受到损害。优选地，通过通用机制来提供安全性，然后进行变化，以便为不同类型的内容提供可变的不同的安全方案。根据“内容类型”，它是指单个内容单元，单个内容实例或单个内容类别中的任何一个。例如，对于内容的类别，内容可以根据内容本身的身份（例如电影的标题）和/或根据内容的特定副本的所有者来表征。因此，可以可选地且优选地从特定根结构生成不同的安全方案。还提供了相关的装置和方法。

8. 发明授权

US07512986B2 Digital rights management system and method 有权
标题翻译：数字版权管理系统和方法
公开(公告)号：US07512986B2
公开(公告)日：2009-03-31
申请号：US10472286
申请日：2002-02-21
申请人： Chaim Shen-Orr , Eliphaz Hibshoosh , Gyora Benedek , Hillel Solow , Yaacov Belenky , Yossi Tsuria , Zvi Shkedy
发明人： Chaim Shen-Orr , Eliphaz Hibshoosh , Gyora Benedek , Hillel Solow , Yaacov Belenky , Yossi Tsuria , Zvi Shkedy
IPC分类号： G06F12/14 , H04N7/16
CPC分类号： G06F21/10 , G06F2221/0704 , G06F2221/0744 , G09G5/00 , G09G2358/00 , G09G2360/18
摘要： A system and a method for providing variable security mechanisms for securing digital content, in which a single security mechanism is not used for all content. Instead, at least one characteristic or feature of the security mechanism is varied between units, instances or categories of content. Therefore, even if unauthorized access is gained to a single unit of content, the overall integrity and security of the system for content distribution is not compromised. Preferably, security is provided through a general mechanism, which is then varied in order to provide variable, dissimilar security schemes for different types of content. By “type of content”, it is meant any of a single unit of content, a single instance of content or a single category of content. For example, for a category of content, the content may be characterized according to the identity of the content itself, such as the title of a movie for example, and/or according to the owner of a particular copy of the content. Thus, different security schemes may optionally and preferably be generated from a particular root structure. Related apparatus and methods are also provided.
摘要翻译：一种用于提供用于保护数字内容的可变安全机制的系统和方法，其中单个安全机制不用于所有内容。相反，安全机制的至少一个特性或特征在单元，实例或内容类别之间变化。因此，即使未授权的访问获得到单个内容单元，内容分发系统的整体完整性和安全性也不会受到损害。优选地，通过通用机制提供安全性，然后进行变化，以便为不同类型的内容提供可变的不同的安全性方案。根据“内容类型”，它是指单个内容单元，单个内容实例或单个内容类别中的任何一个。例如，对于内容的类别，内容可以根据内容本身的身份（例如电影的标题）和/或根据内容的特定副本的所有者来表征。因此，可以可选地且优选地从特定根结构生成不同的安全方案。还提供了相关的装置和方法。

9. 发明申请

US20080137851A1 Native Scrambling System 有权
标题翻译：本地加扰系统
公开(公告)号：US20080137851A1
公开(公告)日：2008-06-12
申请号：US11918110
申请日：2006-03-22
申请人： Chaim Shen-Orr , Eliphaz Hibshoosh , Yaacov Belenky , Yaakov (Jordan) Levy
发明人： Chaim Shen-Orr , Eliphaz Hibshoosh , Yaacov Belenky , Yaakov (Jordan) Levy
IPC分类号： H04N7/167
CPC分类号： H04L63/0428 , H04N21/23476 , H04N21/434 , H04N21/44055
摘要： A system for scrambling/descrambling packets of a stream of content, each packet having a must stay clear (MSC) section, the system including an input handler including a receiving module to receive the stream, a characteristic analyzer to analyze the stream in order to determine a data independent characteristic of each packet, and a scrambling /descrambling device operationally associated with the input handler, the scrambling/descrambling device including a receiving module to receive the data independent characteristic for each packet from the input handler, and an Initial Value module to determine an Initial Value for each packet as a function of the data independent characteristic of one of the packets being processed, wherein the scrambling/descrambling device is adapted to scramble and/or descramble the packets based on the Initial Value and a Control Word. Related apparatus and methods are included.
摘要翻译：一种用于对内容流进行加扰/解扰的分组的系统，每个分组具有必须保持清晰（MSC）部分，所述系统包括包括接收模块的输入处理器以接收流;特征分析器，用于分析流，以便确定每个分组的数据独立特性，以及与输入处理器操作地相关联的加扰/解扰设备，加扰/解扰设备包括接收模块，用于从输入处理器接收每个分组的数据独立特性，以及初始值模块根据所处理的一个分组的数据独立特性来确定每个分组的初始值，其中所述加扰/解扰设备适于基于初始值和控制字对分组进行加扰和/或解扰。包括相关的装置和方法。

10. 发明申请

US20070300070A1 System for Proximity Determination 有权
标题翻译：接近度测定系统
公开(公告)号：US20070300070A1
公开(公告)日：2007-12-27
申请号：US11629435
申请日：2005-05-11
申请人： Chaim Shen-Orr , Eliphaz Hibshoosh , Yaacov Belenky
发明人： Chaim Shen-Orr , Eliphaz Hibshoosh , Yaacov Belenky
IPC分类号： H04L9/32 , H04K1/00
CPC分类号： H04L63/0823 , G06F21/33 , G06F2221/2103 , G06F2221/2111 , G06F2221/2129 , H04L63/0428 , H04L63/06 , H04W12/02 , H04W12/04 , H04W12/06 , H04W24/00
摘要： A method for determining proximity between a first device and a second device, the method comprising providing a first device storing a first device private key, the first device having an associated secure first device certificate storing secured information, the secured information comprising a first device public key corresponding to the first device private key, providing a second device storing a second device private key, the second device having an associated secure second device certificate storing secured information, the secured information comprising a second device public key corresponding to the second device private key, and a second device processing delay, providing a copy of the second device certificate to the first device, establishing a secure authenticated channel between the first device and the second device, sending a proximity challenge from the first device to the second device, the proximity challenge including a numeric challenge value, receiving the proximity challenge at the second device, processing the proximity challenge at the second device to produce the response to the proximity challenge, and sending the response to the proximity challenge from the second device to the first device, receiving the response to the proximity challenge at the first device, and performing the following at the first device verifying, at the first device, that the response to the proximity challenge is legitimate, determining a gross time between sending the proximity challenge and receiving the response to the proximity challenge, subtracting the second device processing delay from the gross time to produce a net response time, and comparing the net response time to a first threshold and determining whether the first device and the second device are in proximity based on a result of the comparing. Related methods and apparatus are also described.
摘要翻译：一种用于确定第一设备和第二设备之间的接近度的方法，所述方法包括提供存储第一设备私钥的第一设备，所述第一设备具有存储安全信息的相关联的安全第一设备证书，所述安全信息包括第一设备公共密钥对应于第一设备专用密钥，提供存储第二设备专用密钥的第二设备，第二设备具有存储安全信息的相关联的安全第二设备证书，所述安全信息包括与第二设备专用密钥对应的第二设备公钥以及第二设备处理延迟，将第二设备证书的副本提供给第一设备，在第一设备和第二设备之间建立安全认证信道，从第一设备向第二设备发送接近质询，接近度挑战包括数字挑战价值，接受近似处理在第二设备处的接近度挑战，以产生对接近度挑战的响应，以及将响应发送到从第二设备到第一设备的接近挑战，接收对接近挑战的响应第一设备，并且在第一设备处，在第一设备处，验证对接近度挑战的响应是合法的，确定发送邻近度挑战和接收到接近质疑的响应之间的总时间，然后减去第二设备处理从总时间的延迟以产生净响应时间，以及将净响应时间与第一阈值进行比较，并且基于比较的结果来确定第一设备和第二设备是否处于接近状态。还描述了相关方法和装置。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式