专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07996687B2 Product for providing a scalable trusted platform module in a hypervisor environment 失效
标题翻译：用于在管理程序环境中提供可扩展的可信平台模块的产品
公开(公告)号：US07996687B2
公开(公告)日：2011-08-09
申请号：US12262445
申请日：2008-10-31
申请人： Richard Louis Arndt , Steven A. Bade , Thomas J. Dewkett , Charles W. Gainey, Jr. , Nia Letise Kelley , Siegfried Sutter , Helmut H. Weber
发明人： Richard Louis Arndt , Steven A. Bade , Thomas J. Dewkett , Charles W. Gainey, Jr. , Nia Letise Kelley , Siegfried Sutter , Helmut H. Weber
IPC分类号： G06F11/30 , H04K1/10
CPC分类号： H04L63/20 , G06F21/57 , H04L63/0876 , H04L63/102
摘要： Multiple logical partitions are provided in a data processing system. A unique context is generated for each one of the logical partitions. When one of the logical partitions requires access to the hardware TPM, that partition's context is required to be stored in the hardware TPM. The hardware TPM includes a finite number of storage locations, called context slots, for storing contexts. Each context slot can store one partition's context. Each one of the partitions is associated with one of the limited number of context storage slots in the hardware TPM. At least one of the context slots is simultaneously associated with more than one of the logical partitions. Contexts are swapped into and out of the hardware TPM during runtime of the data processing system so that when ones of the partitions require access to the hardware TPM, their required contexts are currently stored in the hardware TPM.
摘要翻译：在数据处理系统中提供了多个逻辑分区。为每个逻辑分区生成唯一的上下文。当其中一个逻辑分区需要访问硬件TPM时，该分区的上下文需要存储在硬件TPM中。硬件TPM包括有限数量的存储位置，称为上下文时隙，用于存储上下文。每个上下文时隙都可以存储一个分区的上下文。每个分区与硬件TPM中的有限数量的上下文存储时隙中的一个相关联。至少一个上下文时隙同时与多于一个的逻辑分区相关联。在数据处理系统的运行期间，上下文交换进出硬件TPM，以便当这些分区中的一个需要访问硬件TPM时，其所需的上下文当前存储在硬件TPM中。

2. 发明申请

US20100042823A1 Method, Apparatus, and Product for Providing a Scalable Trusted Platform Module in a Hypervisor Environment 失效
标题翻译：在Hypervisor环境中提供可扩展可信平台模块的方法，设备和产品
公开(公告)号：US20100042823A1
公开(公告)日：2010-02-18
申请号：US12262445
申请日：2008-10-31
申请人： Richard Louis Arndt , Steven A. Bade , Thomas J. Dewkett , Charles W. Gainey, JR. , Nia Letise Kelley , Siegfried Sutter , Helmut H. Weber
发明人： Richard Louis Arndt , Steven A. Bade , Thomas J. Dewkett , Charles W. Gainey, JR. , Nia Letise Kelley , Siegfried Sutter , Helmut H. Weber
IPC分类号： G06F12/14 , G06F9/24 , G06F9/455
CPC分类号： H04L63/20 , G06F21/57 , H04L63/0876 , H04L63/102
摘要： A method, apparatus, and computer program product are described for implementing a trusted computing environment within a data processing system where the data processing system includes a single hardware trusted platform module (TPM). Multiple logical partitions are provided in the data processing system. A unique context is generated for each one of the logical partitions. When one of the logical partitions requires access to the hardware TPM, that partition's context is required to be stored in the hardware TPM. The hardware TPM includes a finite number of storage locations, called context slots, for storing contexts. Each context slot can store one partition's context. Each one of the partitions is associated with one of the limited number of context storage slots in the hardware TPM. At least one of the context slots is simultaneously associated with more than one of the logical partitions. Contexts are swapped into and out of the hardware TPM during runtime of the data processing system so that when ones of the partitions require access to the hardware TPM, their required contexts are currently stored in the hardware TPM.
摘要翻译：描述了一种在数据处理系统内实现可信计算环境的方法，装置和计算机程序产品，其中数据处理系统包括单个硬件可信平台模块（TPM）。在数据处理系统中提供了多个逻辑分区。为每个逻辑分区生成唯一的上下文。当其中一个逻辑分区需要访问硬件TPM时，该分区的上下文需要存储在硬件TPM中。硬件TPM包括有限数量的存储位置，称为上下文时隙，用于存储上下文。每个上下文时隙都可以存储一个分区的上下文。每个分区与硬件TPM中的有限数量的上下文存储时隙中的一个相关联。至少一个上下文时隙同时与多于一个的逻辑分区相关联。在数据处理系统的运行期间，上下文交换进出硬件TPM，以便当这些分区中的一个需要访问硬件TPM时，其所需的上下文当前存储在硬件TPM中。

3. 发明授权

US07478246B2 Method for providing a scalable trusted platform module in a hypervisor environment 失效
标题翻译：在管理程序环境中提供可扩展的可信平台模块的方法
公开(公告)号：US07478246B2
公开(公告)日：2009-01-13
申请号：US10902670
申请日：2004-07-29
申请人： Richard Louis Arndt , Steven A. Bade , Thomas J. Dewkett , Charles W. Gainey, Jr. , Nia Letise Kelley , Siegfried Sutter , Helmut H. Weber
发明人： Richard Louis Arndt , Steven A. Bade , Thomas J. Dewkett , Charles W. Gainey, Jr. , Nia Letise Kelley , Siegfried Sutter , Helmut H. Weber
IPC分类号： G06F11/30 , H04K1/10
CPC分类号： H04L63/20 , G06F21/57 , H04L63/0876 , H04L63/102
摘要： A method is described for implementing a trusted computing environment within a data processing system where the data processing system includes a single hardware trusted platform module (TPM). Multiple logical partitions are provided in the data processing system. A unique context is generated for each one of the logical partitions. When one of the logical partitions requires access to the hardware TPM, that partition's context is required to be stored in the hardware TPM. The hardware TPM includes a finite number of storage locations, called context slots, for storing contexts. Each context slot can store one partition's context. Each one of the partitions is associated with one of the limited number of context storage slots in the hardware TPM. At least one of the context slots is simultaneously associated with more than one of the logical partitions. Contexts are swapped into and out of the hardware TPM during runtime of the data processing system so that when ones of the partitions require access to the hardware TPM, their required contexts are currently stored in the hardware TPM.
摘要翻译：描述了一种在数据处理系统内实现可信计算环境的方法，其中数据处理系统包括单个硬件可信平台模块（TPM）。在数据处理系统中提供了多个逻辑分区。为每个逻辑分区生成唯一的上下文。当其中一个逻辑分区需要访问硬件TPM时，该分区的上下文需要存储在硬件TPM中。硬件TPM包括有限数量的存储位置，称为上下文时隙，用于存储上下文。每个上下文时隙都可以存储一个分区的上下文。每个分区与硬件TPM中的有限数量的上下文存储时隙中的一个相关联。至少一个上下文时隙同时与多于一个的逻辑分区相关联。在数据处理系统的运行期间，上下文交换进出硬件TPM，以便当这些分区中的一个需要访问硬件TPM时，其所需的上下文当前存储在硬件TPM中。

4. 发明授权

US07624283B2 Protocol for trusted platform module recovery through context checkpointing 有权
标题翻译：通过上下文检查点对可信平台模块进行恢复的协议
公开(公告)号：US07624283B2
公开(公告)日：2009-11-24
申请号：US11352762
申请日：2006-02-13
申请人： Steven A. Bade , Thomas J. Dewkett , Nia L. Kelley , Siegfried Sutter , Helmut H. Weber
发明人： Steven A. Bade , Thomas J. Dewkett , Nia L. Kelley , Siegfried Sutter , Helmut H. Weber
IPC分类号： G06F11/30 , H04K1/10
CPC分类号： G06F21/57
摘要： A computer implemented method for recovering a partition context in the event of a system or hardware device failure. Upon receiving a command from a partition to modify context data in a trusted platform module (TPM) hardware device, a trusted platform module input/output host partition (TMPIOP) provides an encrypted copy of the context data and the command to the TPM hardware device, which processes the command and updates the context data. If the TPM hardware device successfully processes the command, the TMPIOP receives the updated context data from the TPM hardware device and stores the updated context data received in encrypted form in a context data cache or a non-volatile storage off-board the TPM hardware device. If the TPM hardware device fails to successfully process the command, the TMPIOP uses a last valid copy of the context data to retry processing of the command on a different TPM hardware device.
摘要翻译：一种用于在系统或硬件设备故障的情况下恢复分区上下文的计算机实现的方法。信任平台模块输入/输出主机分区（TMPIOP）在接收到来自分区的命令以修改可信平台模块（TPM）硬件设备中的上下文数据时，将上下文数据的加密副本提供给TPM硬件设备，它处理命令并更新上下文数据。如果TPM硬件设备成功地处理该命令，则TMPIOP从TPM硬件设备接收更新的上下文数据，并将以加密形式接收到的更新的上下文数据存储在上行数据高速缓存或TPM硬件设备的非易失性存储器。如果TPM硬件设备无法成功处理该命令，则TMPIOP将使用上一个上下文数据的最后一个有效副本来重试不同TPM硬件设备上的命令处理。

5. 发明授权

US08549592B2 Establishing virtual endorsement credentials for dynamically generated endorsement keys in a trusted computing platform 有权
标题翻译：在可信计算平台中为动态生成的认可密钥建立虚拟认可凭据
公开(公告)号：US08549592B2
公开(公告)日：2013-10-01
申请号：US11179238
申请日：2005-07-12
申请人： Steven A. Bade , James Patrick Hoff , Siegfried Sutter , James Peter Ward , Helmut H. Weber
发明人： Steven A. Bade , James Patrick Hoff , Siegfried Sutter , James Peter Ward , Helmut H. Weber
IPC分类号： H04L29/06
CPC分类号： G06F21/57 , H04L9/0877 , H04L9/321 , H04L9/3234 , H04L9/3263
摘要： A method and apparatus are disclosed in a data processing system for establishing virtual endorsement credentials. The data processing system includes a hardware trusted platform module (TPM). Logical partitions are generated in the system. A different virtual TPM is generated for each one of the logical partitions. For each one of the logical partitions, the virtual TPM that was generated for the logical partition then dynamically generates a virtual endorsement key, which is stored only within a corresponding virtual TPM. Using the virtual endorsement key, each virtual TPM also generates a virtual endorsement credential for use by the logical partition that includes the virtual TPM. The virtual endorsement credential is generated within the data processing system without the data processing system or its devices accessing a trusted third party that is external to the data processing system.
摘要翻译：在用于建立虚拟背书凭证的数据处理系统中公开了一种方法和装置。数据处理系统包括硬件可信平台模块（TPM）。逻辑分区在系统中生成。为每个逻辑分区生成不同的虚拟TPM。对于逻辑分区中的每一个，为逻辑分区生成的虚拟TPM然后动态地生成仅存储在相应虚拟TPM内的虚拟签名密钥。使用虚拟认可密钥，每个虚拟TPM还生成供包括虚拟TPM的逻辑分区使用的虚拟签注凭证。在数据处理系统内生成虚拟签注凭证，而数据处理系统或其设备访问数据处理系统外部的受信任的第三方。

6. 发明申请

US20090063857A1 METHOD AND SYSTEM FOR PROVIDING A TRUSTED PLATFORM MODULE IN A HYPERVISOR ENVIRONMENT 有权
公开(公告)号：US20090063857A1
公开(公告)日：2009-03-05
申请号：US12261060
申请日：2008-10-30
申请人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
发明人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
IPC分类号： G06F21/00
CPC分类号： G06F21/53
摘要： A method is presented for implementing a trusted computing environment within a data processing system. A hypervisor is initialized within the data processing system, and the hypervisor supervises a plurality of logical, partitionable, runtime environments within the data processing system. The hypervisor reserves a logical partition for a hypervisor-based trusted platform module (TPM) and presents the hypervisor-based trusted platform module to other logical partitions as a virtual device via a device interface. Each time that the hypervisor creates a logical partition within the data processing system, the hypervisor also instantiates a logical TPM within the reserved partition such that the logical TPM is anchored to the hypervisor-based TPM. The hypervisor manages multiple logical TPM's within the reserved partition such that each logical TPM is uniquely associated with a logical partition.

7. 发明授权

US08086852B2 Providing a trusted platform module in a hypervisor environment 有权
标题翻译：在管理程序环境中提供可信赖的平台模块
公开(公告)号：US08086852B2
公开(公告)日：2011-12-27
申请号：US12207487
申请日：2008-09-09
申请人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
发明人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
IPC分类号： H04L9/00
CPC分类号： G06F21/53
摘要： A method is presented for implementing a trusted computing environment within a data processing system. A hypervisor is initialized within the data processing system, and the hypervisor supervises a plurality of logical, partitionable, runtime environments within the data processing system. The hypervisor reserves a logical partition for a hypervisor-based trusted platform module (TPM) and presents the hypervisor-based trusted platform module to other logical partitions as a virtual device via a device interface. Each time that the hypervisor creates a logical partition within the data processing system, the hypervisor also instantiates a logical TPM within the reserved partition such that the logical TPM is anchored to the hypervisor-based TPM. The hypervisor manages multiple logical TPM's within the reserved partition such that each logical TPM is uniquely associated with a logical partition.
摘要翻译：呈现一种用于在数据处理系统内实现可信计算环境的方法。在数据处理系统内初始化管理程序，并且管理程序监视数据处理系统内的多个逻辑，可分割的运行时环境。虚拟机管理程序为基于虚拟机管理程序的可信平台模块（TPM）预留逻辑分区，并通过设备接口将基于虚拟机管理程序的可信平台模块作为虚拟设备呈现给其他逻辑分区。每当虚拟机管理程序在数据处理系统内创建一个逻辑分区时，管理程序也会在保留的分区内实例化一个逻辑TPM，使得逻辑TPM被锚定到基于管理程序的TPM。虚拟机管理程序管理保留分区内的多个逻辑TPM，使得每个逻辑TPM与逻辑分区唯一相关联。

8. 发明授权

US07707411B2 Method and system for providing a trusted platform module in a hypervisor environment 有权
标题翻译：在管理程序环境中提供可信平台模块的方法和系统
公开(公告)号：US07707411B2
公开(公告)日：2010-04-27
申请号：US12261060
申请日：2008-10-30
申请人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
发明人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
IPC分类号： G06F21/00
CPC分类号： G06F21/53
摘要： A method is presented for implementing a trusted computing environment within a data processing system. A hypervisor is initialized within the data processing system, and the hypervisor supervises a plurality of logical, partitionable, runtime environments within the data processing system. The hypervisor reserves a logical partition for a hypervisor-based trusted platform module (TPM) and presents the hypervisor-based trusted platform module to other logical partitions as a virtual device via a device interface. Each time that the hypervisor creates a logical partition within the data processing system, the hypervisor also instantiates a logical TPM within the reserved partition such that the logical TPM is anchored to the hypervisor-based TPM. The hypervisor manages multiple logical TPM's within the reserved partition such that each logical TPM is uniquely associated with a logical partition.
摘要翻译：呈现一种用于在数据处理系统内实现可信计算环境的方法。在数据处理系统内初始化管理程序，并且管理程序监视数据处理系统内的多个逻辑，可分割的运行时环境。虚拟机管理程序为基于虚拟机管理程序的可信平台模块（TPM）预留逻辑分区，并通过设备接口将基于虚拟机管理程序的可信平台模块作为虚拟设备呈现给其他逻辑分区。每当虚拟机管理程序在数据处理系统内创建一个逻辑分区时，管理程序也会在保留的分区内实例化一个逻辑TPM，使得逻辑TPM被锚定到基于管理程序的TPM。虚拟机管理程序管理保留分区内的多个逻辑TPM，使得每个逻辑TPM与逻辑分区唯一相关联。

9. 发明授权

US07484099B2 Method, apparatus, and product for asserting physical presence with a trusted platform module in a hypervisor environment 失效
标题翻译：用于在管理程序环境中用可信平台模块断言物理存在的方法，装置和产品
公开(公告)号：US07484099B2
公开(公告)日：2009-01-27
申请号：US10902712
申请日：2004-07-29
申请人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
发明人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
IPC分类号： H04L9/00
CPC分类号： G06F21/34 , G06F21/57 , G06F21/575 , G06F2221/2129
摘要： A method, apparatus, and computer program product are described for asserting physical presence in a trusted computing environment included within a data processing system. The trusted computing environment includes a trusted platform module (TPM). The data processing system is coupled to a hardware management console. The trusted platform module determines whether the hardware management console is a trusted entity. The trusted platform module also determines whether the hardware management console has knowledge of a secret key that is possessed by the TPM. If the TPM determines that the hardware management console is a trusted entity and has knowledge of the secret key, the TPM determines that physical presence has been asserted. Otherwise, if the TPM determines that either the hardware management console is not a trusted entity or the TPM determines that the hardware management console does not have knowledge of the secret key, the TPM determines that physical presence has not been asserted and will not execute commands that require the successful assertion of “physical presence”.
摘要翻译：描述了一种用于断定包括在数据处理系统内的可信计算环境中的物理存在的方法，装置和计算机程序产品。可信计算环境包括可信平台模块（TPM）。数据处理系统耦合到硬件管理控制台。可信平台模块确定硬件管理控制台是否是可信实体。可信平台模块还确定硬件管理控制台是否具有TPM拥有的秘密密钥的知识。如果TPM确定硬件管理控制台是可信赖的实体并具有秘密密钥的知识，则TPM确定物理存在已经被断言。否则，如果TPM确定硬件管理控制台不是可信实体，或者TPM确定硬件管理控制台不具有秘密密钥的知识，则TPM确定物理存在尚未被断言，并且将不执行命令这要求成功地断言“身体存在”。

10. 发明授权

US07484091B2 Method and system for providing a trusted platform module in a hypervisor environment 失效
标题翻译：在管理程序环境中提供可信平台模块的方法和系统
公开(公告)号：US07484091B2
公开(公告)日：2009-01-27
申请号：US10835350
申请日：2004-04-29
申请人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
发明人： Steven A. Bade , Ryan Charles Catherman , James Patrick Hoff , Nia Letise Kelley , Emily Jane Ratliff
IPC分类号： G06F21/00
CPC分类号： G06F21/53
摘要： A method is presented for implementing a trusted computing environment within a data processing system. A hypervisor is initialized within the data processing system, and the hypervisor supervises a plurality of logical, partitionable, runtime environments within the data processing system. The hypervisor reserves a logical partition for a hypervisor-based trusted platform module (TPM) and presents the hypervisor-based trusted platform module to other logical partitions as a virtual device via a device interface. Each time that the hypervisor creates a logical partition within the data processing system, the hypervisor also instantiates a logical TPM within the reserved partition such that the logical TPM is anchored to the hypervisor-based TPM. The hypervisor manages multiple logical TPM's within the reserved partition such that each logical TPM is uniquely associated with a logical partition.
摘要翻译：呈现一种用于在数据处理系统内实现可信计算环境的方法。在数据处理系统内初始化管理程序，并且管理程序监视数据处理系统内的多个逻辑，可分割的运行时环境。虚拟机管理程序为基于虚拟机管理程序的可信平台模块（TPM）预留逻辑分区，并通过设备接口将基于虚拟机管理程序的可信平台模块作为虚拟设备呈现给其他逻辑分区。每当虚拟机管理程序在数据处理系统内创建一个逻辑分区时，管理程序也会在保留的分区内实例化一个逻辑TPM，使得逻辑TPM被锚定到基于管理程序的TPM。虚拟机管理程序管理保留分区内的多个逻辑TPM，使得每个逻辑TPM与逻辑分区唯一相关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式