专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060031790A1 Trusted computing platform 有权
标题翻译：可信计算平台
公开(公告)号：US20060031790A1
公开(公告)日：2006-02-09
申请号：US11249820
申请日：2005-10-12
申请人： Graeme Proudler , Dipankar Gupta , Liqun Chen , Siani Pearson , Boris Balacheff , Bruno Van Wilder , David Chan
发明人： Graeme Proudler , Dipankar Gupta , Liqun Chen , Siani Pearson , Boris Balacheff , Bruno Van Wilder , David Chan
IPC分类号： G06F17/50
CPC分类号： G06F21/445 , G06F21/34 , G06F21/57 , G06F21/606 , G06F21/64 , G06F21/85 , G06F2207/7219 , G06F2211/009 , G06F2221/2103
摘要： In a computing platform, a trusted hardware device (24) is added to the motherboard (20). The trusted hardware device (24) is configured to acquire an integrity metric, for example a hash of the BIOS memory (29), of the computing platform. The trusted hardware device (24) is tamper-resistant, difficult to forge and inaccessible to other functions of the platform. The hash can be used to convince users that that the operation of the platform (hardware or software) has not been subverted in some way, and is safe to interact with in local or remote applications. In more detail, the main processing unit (21) of the computing platform is directed to address the trusted hardware device (24), in advance of the BIOS memory, after release from ‘reset’. The trusted hardware device (24) is configured to receive memory read signals from the main processing unit (21) and, in response, return instructions, in the native language of the main processing unit (21), that instruct the main processing unit to establish the hash and return the value to be stored by the trusted hardware device (24). Since the hash is calculated in advance of any other system operations, this is a relatively strong method of verifying the integrity of the system. Once the hash has been returned, the final instruction calls the BIOS program and the system boot procedure continues as normal. Whenever a user wishes to interact with the computing platform, he first requests the integrity metric, which he compares with an authentic integrity metric that was measured by a trusted party. If the metrics are the same, the platform is verified and interactions can continue. Otherwise, interaction halts on the basis that the operation of the platform may have been subverted.
摘要翻译：在计算平台中，将可信硬件设备（24）添加到主板（20）。可信硬件设备（24）被配置为获取计算平台的完整性度量，例如BIOS存储器（29）的散列。受信任的硬件设备（24）是防篡改的，难以伪造并且不能访问平台的其他功能。该哈希可以用于说服用户，平台（硬件或软件）的操作没有以某种方式颠覆，并且可以安全地与本地或远程应用程序进行交互。更详细地说，计算平台的主处理单元（21）在从“复位”释放之后被引导以在BIOS存储器之前对可信硬件设备（24）进行寻址。可信硬件设备（24）被配置为从主处理单元（21）接收存储器读取信号，并响应于主处理单元（21）的母语的返回指令，其指示主处理单元建立散列并返回由可信硬件设备（24）存储的值。由于散列是在任何其他系统操作之前计算出来的，所以这是验证系统完整性的相对较强的方法。一旦散列已经返回，最后的指令调用BIOS程序，并且系统引导过程正常进行。每当用户希望与计算平台进行交互时，他首先请求完整性度量，其与被可信方测量的真实完整性度量进行比较。如果指标相同，则会验证平台并继续进行交互。否则，交互停止，基于平台的操作可能已被颠覆。

2. 发明申请

US20080022128A1 SYSTEM FOR PROVIDING A TRUSTWORTHY USER INTERFACE 有权
标题翻译：提供信任用户界面的系统
公开(公告)号：US20080022128A1
公开(公告)日：2008-01-24
申请号：US11861127
申请日：2007-09-25
申请人： Graeme Proudler , Boris Balacheff , Liqun Chen , David Chan
发明人： Graeme Proudler , Boris Balacheff , Liqun Chen , David Chan
IPC分类号： G06F12/14
CPC分类号： H04L9/3234 , G06F21/84 , G06F2211/009 , G09C5/00 , H04L9/3247 , H04L9/3273 , H04L2209/38 , H04L2209/56
摘要： The preferred embodiment of the invention comprises a computer system which employs a trusted display processor (260), which has a trusted processor (300) and trusted memory (305, 315, 335, 345) physically and functionally distinct from the processor and memory of the computer system. The trusted display processor (260) is immune to unauthorised modification or inspection of internal data. It is physical to prevent forgery, tamper-resistant to prevent counterfeiting, and has crypto functions (340) to securely communicate at a distance. The trusted display processor (266) interacts with a user's smartcard (122) in order to extract and display a trusted image, or seal (1000), generate a digital signature of the bitmap of a document image and control the video memory (315) so that other processes of the computer system cannot subvert the image during the signing process. The user interacts with the trusted display processor via a trusted switch (135).
摘要翻译：本发明的优选实施例包括使用可信显示处理器（260）的计算机系统，该可信显示处理器（260）具有物理和功能上不同于处理器和存储器的可信处理器（300）和可信存储器（305,315,335,345）计算机系统。受信任的显示处理器（260）不受未经授权的修改或内部数据的检查。防止伪造，防篡改，防止伪造，具有密码功能（340）可远距离安全通信是物理的。可信赖的显示处理器（266）与用户的智能卡（122）交互以提取和显示可信图像，或者密封（1000），生成文档图像的位图的数字签名并控制视频存储器（315）使得计算机系统的其他进程在签名过程中不能颠覆图像。用户通过可信交换机（135）与受信任的显示处理器进行交互。

3. 发明授权

US06988250B1 Trusted computing platform using a trusted device assembly 有权
标题翻译：使用可信设备组件的可信计算平台
公开(公告)号：US06988250B1
公开(公告)日：2006-01-17
申请号：US09913452
申请日：2000-02-15
申请人： Graeme John Proudler , Dipankar Gupta , Liqun Chen , Siani Lynne Pearson , Boris Balacheff , Bruno Edgard Van Wilder , David Chan
发明人： Graeme John Proudler , Dipankar Gupta , Liqun Chen , Siani Lynne Pearson , Boris Balacheff , Bruno Edgard Van Wilder , David Chan
IPC分类号： G06F17/50
CPC分类号： G06F21/445 , G06F21/34 , G06F21/57 , G06F21/606 , G06F21/64 , G06F21/85 , G06F2207/7219 , G06F2211/009 , G06F2221/2103
摘要： In a computing platform, a trusted hardware device (24) is added to the motherboard (20). The trusted hardware device (24) is configured to acquire an integrity metric, for example a hash of the BIOS memory (29), of the computing platform. The trusted hardware device (24) is tamper-resistant, difficult to forge and inaccessible to other functions of the platform. The hash can be used to convince users that that the operation of the platform (hardware or software) has not been subverted in some way, and is safe to interact with in local or remote applications.In more detail, the main processing unit (21) of the computing platform is directed to address the trusted hardware device (24), in advance of the BIOS memory, after release from ‘reset’. The trusted hardware device (24) is configured to receive memory read signals from the main processing unit (21) and, in response, return instructions, in the native language of the main processing unit (21), that instruct the main processing unit to establish the hash and return the value to be stored by the trusted hardware device (24). Since the hash is calculated in advance of any other system operations, this is a relatively strong method of verifying the integrity of the system. Once the hash has been returned, the final instruction calls the BIOS program and the system boot procedure continues as normal.Whenever a user wishes to interact with the computing platform, he first requests the integrity metric, which he compares with an authentic integrity metric that was measured by a trusted party. If the metrics are the same, the platform is verified and interactions can continue. Otherwise, interaction halts on the basis that the operation of the platform may have been subverted.
摘要翻译：在计算平台中，将可信硬件设备（24）添加到主板（20）。可信硬件设备（24）被配置为获取计算平台的完整性度量，例如BIOS存储器（29）的散列。受信任的硬件设备（24）是防篡改的，难以伪造并且不能访问平台的其他功能。该哈希可以用于说服用户，平台（硬件或软件）的操作没有以某种方式颠覆，并且可以安全地与本地或远程应用程序进行交互。更详细地说，计算平台的主处理单元（21）在从“复位”释放之后被引导以在BIOS存储器之前对可信硬件设备（24）进行寻址。可信硬件设备（24）被配置为从主处理单元（21）接收存储器读取信号，并响应于主处理单元（21）的母语的返回指令，其指示主处理单元建立散列并返回由可信硬件设备（24）存储的值。由于散列是在任何其他系统操作之前计算出来的，所以这是验证系统完整性的相对较强的方法。一旦散列已经返回，最后的指令调用BIOS程序，并且系统引导过程正常进行。每当用户希望与计算平台进行交互时，他首先请求完整性度量，其与被可信方测量的真实完整性度量进行比较。如果指标相同，则会验证平台并继续进行交互。否则，交互停止，基于平台的操作可能已被颠覆。

4. 发明授权

US07444601B2 Trusted computing platform 有权
标题翻译：可信计算平台
公开(公告)号：US07444601B2
公开(公告)日：2008-10-28
申请号：US11249820
申请日：2005-10-12
申请人： Graeme John Proudler , Dipankar Gupta , Liqun Chen , Siani Lynne Pearson , Boris Balacheff , Bruno Edgard Van Wilder , David Chan
发明人： Graeme John Proudler , Dipankar Gupta , Liqun Chen , Siani Lynne Pearson , Boris Balacheff , Bruno Edgard Van Wilder , David Chan
IPC分类号： G06F17/50
CPC分类号： G06F21/445 , G06F21/34 , G06F21/57 , G06F21/606 , G06F21/64 , G06F21/85 , G06F2207/7219 , G06F2211/009 , G06F2221/2103
摘要： In a computing platform, a trusted hardware device (24) is added to the motherboard (20). The trusted hardware device (24) is configured to acquire an integrity metric, for example a hash of the BIOS memory (29), of the computing platform. The trusted hardware device (24) is tamper-resistant, difficult to forge and inaccessible to other functions of the platform. The hash can be used to convince users that that the operation of the platform (hardware or software) has not been subverted in some way, and is safe to interact with in local or remote applications.In more detail, the main processing unit (21) of the computing platform is directed to address the trusted hardware device (24), in advance of the BIOS memory, after release from ‘reset’. The trusted hardware device (24) is configured to receive memory read signals from the main processing unit (21) and, in response, return instructions, in the native language of the main processing unit (21), that instruct the main processing unit to establish the hash and return the value to be stored by the trusted hardware device (24). Since the hash is calculated in advance of any other system operations, this is a relatively strong method of verifying the integrity of the system. Once the hash has been returned, the final instruction calls the BIOS program and the system boot procedure continues as normal.Whenever a user wishes to interact with the computing platform, he first requests the integrity metric, which he compares with an authentic integrity metric that was measured by a trusted party. If the metrics are the same, the platform is verified and interactions can continue. Otherwise, interaction halts on the basis that the operation of the platform may have been subverted.
摘要翻译：在计算平台中，将可信硬件设备（24）添加到主板（20）。可信硬件设备（24）被配置为获取计算平台的完整性度量，例如BIOS存储器（29）的散列。受信任的硬件设备（24）是防篡改的，难以伪造并且不能访问平台的其他功能。该哈希可以用于说服用户，平台（硬件或软件）的操作没有以某种方式颠覆，并且可以安全地与本地或远程应用程序进行交互。更详细地说，计算平台的主处理单元（21）在从“复位”释放之后被引导以在BIOS存储器之前对可信硬件设备（24）进行寻址。可信硬件设备（24）被配置为从主处理单元（21）接收存储器读取信号，并响应于主处理单元（21）的母语的返回指令，其指示主处理单元建立散列并返回由可信硬件设备（24）存储的值。由于散列是在任何其他系统操作之前计算出来的，所以这是验证系统完整性的相对较强的方法。一旦散列已经返回，最后的指令调用BIOS程序，并且系统引导过程正常进行。每当用户希望与计算平台进行交互时，他首先请求完整性度量，其与被可信方测量的真实完整性度量进行比较。如果指标相同，则会验证平台并继续进行交互。否则，交互停止，基于平台的操作可能已被颠覆。

5. 发明授权

US07904730B2 System for providing a trustworthy user interface 有权
标题翻译：提供可靠的用户界面的系统
公开(公告)号：US07904730B2
公开(公告)日：2011-03-08
申请号：US11861127
申请日：2007-09-25
申请人： Graeme John Proudler , Boris Balacheff , Liqun Chen , David Chan
发明人： Graeme John Proudler , Boris Balacheff , Liqun Chen , David Chan
IPC分类号： G06F12/14
CPC分类号： H04L9/3234 , G06F21/84 , G06F2211/009 , G09C5/00 , H04L9/3247 , H04L9/3273 , H04L2209/38 , H04L2209/56
摘要： The preferred embodiment of the invention comprises a computer system which employs a trusted display processor (260), which has a trusted processor (300) and trusted memory (305, 315, 335, 345) physically and functionally distinct from the processor and memory of the computer system. The trusted display processor (260) is immune to unauthorised modification or inspection of internal data. It is physical to prevent forgery, tamper-resistant to prevent counterfeiting, and has crypto functions (340) to securely communicate at a distance. The trusted display processor (260) interacts with a user's smartcard (122) in order to extract and display a trusted image, or seal (1000), generate a digital signature of the bitmap of a document image and control the video memory (315) so that other processes of the computer system cannot subvert the image during the signing process. The user interacts with the trusted display processor via a trusted switch (135).
摘要翻译：本发明的优选实施例包括使用可信显示处理器（260）的计算机系统，该可信显示处理器（260）具有物理和功能上不同于处理器和存储器的可信处理器（300）和可信存储器（305,315,335,345）计算机系统。受信任的显示处理器（260）不受未经授权的修改或内部数据的检查。防止伪造，防篡改，防止伪造，具有密码功能（340）可远距离安全通信是物理的。可信赖的显示处理器（260）与用户的智能卡（122）交互以提取和显示可信图像，或者密封（1000），生成文档图像的位图的数字签名并控制视频存储器（315）使得计算机系统的其他进程在签名过程中不能颠覆图像。用户通过可信交换机（135）与受信任的显示处理器进行交互。

6. 发明授权

US07302585B1 System for providing a trustworthy user interface 有权
标题翻译：提供可靠的用户界面的系统
公开(公告)号：US07302585B1
公开(公告)日：2007-11-27
申请号：US09979905
申请日：2000-05-25
申请人： Graeme John Proudler , Boris Balacheff , Liqun Chen , David Chan
发明人： Graeme John Proudler , Boris Balacheff , Liqun Chen , David Chan
IPC分类号： G06F12/14 , H04L9/32 , G06K19/00
CPC分类号： H04L9/3234 , G06F21/84 , G06F2211/009 , G09C5/00 , H04L9/3247 , H04L9/3273 , H04L2209/38 , H04L2209/56
摘要： The preferred embodiment of the invention comprises a computer system which employs a trusted display processor (260), which has a trusted processor (300) and trusted memory (305, 315, 335, 345) physically and functionally distinct from the processor and memory of the computer system. The trusted display processor (260) is immune to unauthorised modification or inspection of internal data. It is physical to prevent forgery, tamper-resistant to prevent counterfeiting, and has crypto functions (340) to securely communicate at a distance. The trusted display processor (260) interacts with a user's smartcard (122) in order to extract and display a trusted image, or seal (1000), generate a digital signature of the bitmap of a document image and control the video memory (315) so that other processes of the computer system cannot subvert the image during the signing process. The user interacts with the trusted display processor via a trusted switch (135).
摘要翻译：本发明的优选实施例包括使用可信显示处理器（260）的计算机系统，该可信显示处理器（260）具有物理和功能上不同于处理器和存储器的可信处理器（300）和可信存储器（305,315,335,345）计算机系统。受信任的显示处理器（260）不受未经授权的修改或内部数据的检查。防止伪造，防篡改，防止伪造，具有密码功能（340）可远距离安全通信是物理的。可信赖的显示处理器（260）与用户的智能卡（122）交互以提取和显示可信图像，或者密封（1000），生成文档图像的位图的数字签名并控制视频存储器（315）使得计算机系统的其他进程在签名过程中不能颠覆图像。用户通过可信交换机（135）与受信任的显示处理器进行交互。

7. 发明授权

US07096204B1 Electronic commerce system 有权
标题翻译：电子商务系统
公开(公告)号：US07096204B1
公开(公告)日：2006-08-22
申请号：US10110280
申请日：2000-10-06
申请人： Liqun Chen , Boris Balacheff , Roelf du Toit , Siani Lynne Pearson , David Chan
发明人： Liqun Chen , Boris Balacheff , Roelf du Toit , Siani Lynne Pearson , David Chan
IPC分类号： G06Q99/00
CPC分类号： G06Q30/06 , G06Q20/02 , G06Q20/04 , G06Q20/105 , G06Q20/12 , G06Q20/20 , G06Q20/367 , G06Q20/3674 , G06Q20/383 , G06Q20/385
摘要： A method of brokering a transaction between a consumer and a vendor by a broker, wherein the consumer, the broker and the vendor are all attached to a public network, the consumer having a secure token containing a true consumer identity. The method comprising the steps of: the consumer obtaining a temporary identity from the broker by using the true consumer identity from the secure token; the consumer selecting a purchase to be made from the vendor; the consumer requesting the purchase from the vendor and providing the temporary identity to the vendor; the vendor requesting transaction authorisation from the broker by forwarding the request and the temporary identity to the broker; the broker matching the temporary identity to a current list of temporary identities, and obtaining the true consumer identity; the broker providing authorisation for the transaction based on transaction details and true consumer identity.
摘要翻译：由经纪人代理消费者和供应商之间的交易的方法，其中消费者，经纪商和供应商都连接到公共网络，消费者具有包含真实消费者身份的安全令牌。该方法包括以下步骤：消费者通过使用来自安全令牌的真实消费者身份从代理获取临时身份; 消费者选择从供应商进行的购买; 消费者请求从供应商购买并向供应商提供临时身份; 供应商通过将请求和临时身份转发给经纪人从代理商请求交易授权; 经纪人将临时身份与当前的临时身份列表进行匹配，并获得真实的消费者身份; 经纪人根据交易细节和真实的消费者身份为交易提供授权。

8. 发明申请

US20050223221A1 Apparatus and method for creating a trusted environment 有权
标题翻译：用于创建可信环境的装置和方法
公开(公告)号：US20050223221A1
公开(公告)日：2005-10-06
申请号：US11090964
申请日：2005-03-25
申请人： Graeme Proudler , Boris Balacheff , David Plaquin
发明人： Graeme Proudler , Boris Balacheff , David Plaquin
IPC分类号： G06F21/57 , G06F21/62 , G06F9/45
CPC分类号： G06F21/57 , G06F21/575 , G06F21/62 , G06F2221/2105 , G06F2221/2145 , G06F2221/2149 , G06F2221/2153
摘要： A computer apparatus for creating a trusted environment comprising a trusted device arranged to acquire a first integrity metric to allow determination as to whether the computer apparatus is operating in a trusted manner; a processor arranged to allow execution of a first trust routine and associated first operating environment, and means for restricting the first operating environment access to resources available to the trust routine, wherein the trust routine being arranged to acquire the first integrity metric and a second integrity metric to allow determination as to whether the first operating environment is operating in a trusted manner.
摘要翻译：一种用于创建可信环境的计算机设备，包括被配置为获取第一完整性度量以允许确定所述计算机设备是否以可信任方式操作的信任设备; 布置成允许执行第一信任例程和相关联的第一操作环境的处理器以及用于限制第一操作环境访问可用于信任例程的资源的装置，其中所述信任例程被布置为获取第一完整性度量和第二完整性度量以允许确定第一操作环境是否以可信任的方式操作。

9. 发明授权

US07194623B1 Data event logging in computing platform 有权
标题翻译：数据事件记录在计算平台上
公开(公告)号：US07194623B1
公开(公告)日：2007-03-20
申请号：US09979902
申请日：2000-05-25
申请人： Graeme John Proudler , Boris Balacheff , Siani Lynne Pearson , David Chan
发明人： Graeme John Proudler , Boris Balacheff , Siani Lynne Pearson , David Chan
IPC分类号： H04L9/00
CPC分类号： G06F21/57 , G06F21/552 , G06F2211/009 , G06F2221/2101 , G06F2221/2103 , H04L63/0853 , H04L63/1425
摘要： There is disclosed a computer entity having a trusted component which compiles an event log for events occurring on a computer platform. The event log contains event data of types which are pre-specified by a user by inputting details through a dialogue display generated by the trusted component. Items which can be monitored include data files, applications drivers and the like. The trusted component operates through a monitoring agent which may be launched onto the computer platform. The monitoring agent may be periodically interrogated to make sure that it is operating correctly and responding to interrogations by the trusted component.
摘要翻译：公开了一种具有可信组件的计算机实体，该信任组件针对在计算机平台上发生的事件编译事件日志。事件日志包含由用户通过由可信组件生成的对话显示输入细节而预先指定的类型的事件数据。可以监视的项目包括数据文件，应用驱动程序等。受信任的组件通过可以发送到计算机平台上的监视代理来操作。可以定期询问监视代理以确保其正常工作并响应可信部件的询问。

10. 发明授权

US08972743B2 Computer security system and method 有权
标题翻译：计算机安全系统和方法
公开(公告)号：US08972743B2
公开(公告)日：2015-03-03
申请号：US11130057
申请日：2005-05-16
申请人： Lan Wang , Jennifer Rios , Valiuddin Ali , Boris Balacheff
发明人： Lan Wang , Jennifer Rios , Valiuddin Ali , Boris Balacheff
IPC分类号： H04L29/06 , G06F21/62
CPC分类号： G06F21/62 , G06F21/6245 , G06F2221/2117 , G06F2221/2153
摘要： A computer security system comprises a secure platform adapted to receive sensitive data from an agent. The secure platform is also adapted to cooperate with a trusted platform module (TPM) to encrypt the sensitive data via a TPM storage key associated with the agent.
摘要翻译：计算机安全系统包括适于从代理接收敏感数据的安全平台。安全平台还适用于与可信平台模块（TPM）协作，以通过与代理相关联的TPM存储密钥来加密敏感数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式