专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090172385A1 ENABLING SYSTEM MANAGEMENT MODE IN A SECURE SYSTEM 有权
标题翻译：在安全系统中启用系统管理模式
公开(公告)号：US20090172385A1
公开(公告)日：2009-07-02
申请号：US11967779
申请日：2007-12-31
申请人： Sham M. Datta , Mohan J. Kumar , Maheeh Natu
发明人： Sham M. Datta , Mohan J. Kumar , Maheeh Natu
IPC分类号： G06F9/00
CPC分类号： G06F9/30087 , G06F9/45533
摘要： Apparatuses, methods, and systems for enabling system management mode in a secure system are disclosed. In one embodiment, a processor includes sub-operating-system mode logic, virtual machine logic, and control logic. The sub-operating-system mode logic is to support a sub-operating-system mode. The virtual machine logic is to support virtualization. The control logic is to prevent virtualization from being enabled when the sub-operating-system mode is disabled.
摘要翻译：公开了一种用于在安全系统中启用系统管理模式的装置，方法和系统。在一个实施例中，处理器包括子操作系统模式逻辑，虚拟机逻辑和控制逻辑。子操作系统模式逻辑是支持子操作系统模式。虚拟机逻辑是支持虚拟化。控制逻辑是防止在禁用子操作系统模式时启用虚拟化。

2. 发明授权

US08473945B2 Enabling system management mode in a secure system 有权
标题翻译：在安全系统中启用系统管理模式
公开(公告)号：US08473945B2
公开(公告)日：2013-06-25
申请号：US11967779
申请日：2007-12-31
申请人： Sham M. Datta , Mohan J. Kumar , Maheeh Natu
发明人： Sham M. Datta , Mohan J. Kumar , Maheeh Natu
IPC分类号： G06F9/455
CPC分类号： G06F9/30087 , G06F9/45533
摘要： Apparatuses, methods, and systems for enabling system management mode in a secure system are disclosed. In one embodiment, a processor includes sub-operating-system mode logic, virtual machine logic, and control logic. The sub-operating-system mode logic is to support a sub-operating-system mode. The virtual machine logic is to support virtualization. The control logic is to prevent virtualization from being enabled when the sub-operating-system mode is disabled.
摘要翻译：公开了一种用于在安全系统中启用系统管理模式的装置，方法和系统。在一个实施例中，处理器包括子操作系统模式逻辑，虚拟机逻辑和控制逻辑。子操作系统模式逻辑是支持子操作系统模式。虚拟机逻辑是支持虚拟化。控制逻辑是防止在禁用子操作系统模式时启用虚拟化。

3. 发明申请

US20110161676A1 ENTERING A SECURED COMPUTING ENVIRONMENT USING MULTIPLE AUTHENTICATED CODE MODULES 有权
标题翻译：使用多个授权代码模块进入安全的计算环境
公开(公告)号：US20110161676A1
公开(公告)日：2011-06-30
申请号：US12650579
申请日：2009-12-31
申请人： Sham M. Datta , Ernie F. Brickell , Mohan J. Kumar
发明人： Sham M. Datta , Ernie F. Brickell , Mohan J. Kumar
IPC分类号： G06F21/00
CPC分类号： G06F21/00 , G06F21/57 , G06F21/572 , G06F21/71 , G06F2221/2149 , G06F2221/2153
摘要： Systems, apparatuses, and methods, and for entering a secured system environment using multiple authenticated code modules are disclosed. In one embodiment, a processor includes a decoder and control logic. The decoder is to decode a secured enter instruction. The control logic is to find an entry corresponding to the processor in a match table in a master authenticated code module and to read a master header and an individual authenticated code module from the master authenticated code module in response to decoding the secured enter instruction.
摘要翻译：公开了系统，装置和方法以及使用多个认证代码模块输入安全系统环境。在一个实施例中，处理器包括解码器和控制逻辑。解码器是对安全的输入指令进行解码。控制逻辑是在主认证代码模块的匹配表中找到与处理器相对应的条目，并且响应于对安全的进入指令进行解码，从主认证代码模块读取主标题和单独的认证代码模块。

4. 发明申请

US20130212673A1 ENTERING A SECURED COMPUTING ENVIRONMENT USING MULTIPLE AUTHENTICATED CODE MODULES 审中-公开
标题翻译：使用多个授权代码模块进入安全的计算环境
公开(公告)号：US20130212673A1
公开(公告)日：2013-08-15
申请号：US13837837
申请日：2013-03-15
申请人： Sham M. Datta , Ernie F. Brickell , Mohan J. Kumar
发明人： Sham M. Datta , Ernie F. Brickell , Mohan J. Kumar
IPC分类号： G06F21/00
CPC分类号： G06F21/00 , G06F21/57 , G06F21/572 , G06F21/71 , G06F2221/2149 , G06F2221/2153
摘要： Systems, apparatuses, and methods, and for entering a secured system environment using multiple authenticated code modules are disclosed. In one embodiment, a processor includes a decoder and control logic. The decoder is to decode a secured enter instruction. The control logic is to find an entry corresponding to the processor in a match table in a master authenticated code module and to read a master header and an individual authenticated code module from the master authenticated code module in response to decoding the secured enter instruction.
摘要翻译：公开了系统，装置和方法以及使用多个认证代码模块输入安全系统环境。在一个实施例中，处理器包括解码器和控制逻辑。解码器是对安全的输入指令进行解码。控制逻辑是在主认证代码模块的匹配表中找到与处理器相对应的条目，并且响应于对安全的进入指令进行解码，从主认证代码模块读取主标题和单独的认证代码模块。

5. 发明授权

US07971048B2 System and method for establishing a trust domain on a computer platform 有权
标题翻译：在计算机平台上建立信任域的系统和方法
公开(公告)号：US07971048B2
公开(公告)日：2011-06-28
申请号：US12056452
申请日：2008-03-27
申请人： Sham M. Datta , Mohan J. Kumar , Ernest Brickell
发明人： Sham M. Datta , Mohan J. Kumar , Ernest Brickell
IPC分类号： G06F15/177
CPC分类号： G06F21/57
摘要： Embodiments of the invention provide systems and methods associated with a measurement engine in a server platform. In one such embodiment of the invention, the measurement engine hardware verifies/authenticates its own firmware and then system initialization firmware by measuring such firmware and storing measurement results in a register that is not spoofable by malicious code. In this instance, the measurement engine holds the host CPU complex in a reset state until the measurement engine has verified the system initialization firmware. In another such embodiment of the invention, the measurement engine hardware also measures firmware associated with one or more system service processors and stores such measurement results in a register. In this case, the measurement engine holds the system service processors and the host CPU complex in reset until the measurements are completed. Other embodiments are described.
摘要翻译：本发明的实施例提供了与服务器平台中的测量引擎相关联的系统和方法。在本发明的一个这样的实施例中，测量引擎硬件通过测量这样的固件来验证/认证其自己的固件，然后验证其自身的固件，并将测量结果存储在恶意代码不能欺骗的寄存器中。在这种情况下，测量引擎将主机复合体保持在复位状态，直到测量引擎已经验证了系统初始化固件。在本发明的另一个这样的实施例中，测量引擎硬件还测量与一个或多个系统服务处理器相关联的固件并将这样的测量结果存储在寄存器中。在这种情况下，测量引擎将系统服务处理器和主机CPU复合体保持在复位状态，直到测量完成。描述其他实施例。

6. 发明申请

US20080163331A1 RECONFIGURING A SECURE SYSTEM 有权
标题翻译：重新建立安全系统
公开(公告)号：US20080163331A1
公开(公告)日：2008-07-03
申请号：US11618649
申请日：2006-12-29
申请人： Sham M. Datta , Mohan J. Kumar , James A. Sutton , Ernie Brickell , Ioannis T. Schoinas
发明人： Sham M. Datta , Mohan J. Kumar , James A. Sutton , Ernie Brickell , Ioannis T. Schoinas
IPC分类号： G06F21/00 , G06F17/00
CPC分类号： G06F21/57
摘要： Apparatuses, methods, and systems for reconfiguring a secure system are disclosed. In one embodiment, an apparatus includes a configuration storage location, a lock, and lock override logic. The configuration storage location is to store information to configure the apparatus. The lock is to prevent writes to the configuration storage location. The lock override logic is to allow instructions executed from sub-operating mode code to override the lock.
摘要翻译：公开了用于重新配置安全系统的装置，方法和系统。在一个实施例中，装置包括配置存储位置，锁定和锁定超驰逻辑。配置存储位置是存储信息以配置设备。该锁是为了防止写入配置存储位置。锁定覆盖逻辑是允许从子操作模式代码执行的指令覆盖锁定。

7. 发明申请

US20130103938A1 Reconfiguring A Secure System 有权
标题翻译：重新配置安全系统
公开(公告)号：US20130103938A1
公开(公告)日：2013-04-25
申请号：US13664930
申请日：2012-10-31
申请人： Sham M. Datta , Mohan J. Kumar , Ernie Brickell , Ioannis T. Schoinas , James A. Sutton
发明人： Sham M. Datta , Mohan J. Kumar , Ernie Brickell , Ioannis T. Schoinas , James A. Sutton
IPC分类号： G06F21/00
CPC分类号： G06F21/57
摘要： Apparatuses, methods, and systems for reconfiguring a secure system are disclosed. In one embodiment, an apparatus includes a configuration storage location, a lock, and lock override logic. The configuration storage location is to store information to configure the apparatus. The lock is to prevent writes to the configuration storage location. The lock override logic is to allow instructions executed from sub-operating mode code to override the lock.
摘要翻译：公开了用于重新配置安全系统的装置，方法和系统。在一个实施例中，装置包括配置存储位置，锁定和锁定超驰逻辑。配置存储位置是存储信息以配置设备。该锁是为了防止写入配置存储位置。锁定覆盖逻辑是允许从子操作模式代码执行的指令覆盖锁定。

8. 发明授权

US08316414B2 Reconfiguring a secure system 有权
标题翻译：重新配置安全系统
公开(公告)号：US08316414B2
公开(公告)日：2012-11-20
申请号：US11618649
申请日：2006-12-29
申请人： Sham M. Datta , Mohan J. Kumar , James A. Sutton , Ernie Brickell , Ioannis T. Schoinas
发明人： Sham M. Datta , Mohan J. Kumar , James A. Sutton , Ernie Brickell , Ioannis T. Schoinas
IPC分类号： G06F21/00
CPC分类号： G06F21/57
摘要： Apparatuses, methods, and systems for reconfiguring a secure system are disclosed. In one embodiment, an apparatus includes a configuration storage location, a lock, and lock override logic. The configuration storage location is to store information to configure the apparatus. The lock is to prevent writes to the configuration storage location. The lock override logic is to allow instructions executed from sub-operating mode code to override the lock.
摘要翻译：公开了用于重新配置安全系统的装置，方法和系统。在一个实施例中，装置包括配置存储位置，锁定和锁定超驰逻辑。配置存储位置是存储信息以配置设备。该锁是为了防止写入配置存储位置。锁定覆盖逻辑是允许从子操作模式代码执行的指令覆盖锁定。

9. 发明授权

US09202015B2 Entering a secured computing environment using multiple authenticated code modules 有权
标题翻译：使用多个经过身份验证的代码模块进入安全的计算环境
公开(公告)号：US09202015B2
公开(公告)日：2015-12-01
申请号：US12650579
申请日：2009-12-31
申请人： Sham M. Datta , Ernie F. Brickell , Mohan J. Kumar
发明人： Sham M. Datta , Ernie F. Brickell , Mohan J. Kumar
IPC分类号： G06F21/00 , G06F21/57 , G06F21/71
CPC分类号： G06F21/00 , G06F21/57 , G06F21/572 , G06F21/71 , G06F2221/2149 , G06F2221/2153
摘要： Systems, apparatuses, and methods, and for entering a secured system environment using multiple authenticated code modules are disclosed. In one embodiment, a processor includes a decoder and control logic. The decoder is to decode a secured enter instruction. The control logic is to find an entry corresponding to the processor in a match table in a master authenticated code module and to read a master header and an individual authenticated code module from the master authenticated code module in response to decoding the secured enter instruction.
摘要翻译：公开了系统，装置和方法以及使用多个认证代码模块输入安全系统环境。在一个实施例中，处理器包括解码器和控制逻辑。解码器是对安全的输入指令进行解码。控制逻辑是在主认证代码模块的匹配表中找到与处理器相对应的条目，并且响应于对安全的进入指令进行解码，从主认证代码模块读取主标题和单独的认证代码模块。

10. 发明申请

US20090249050A1 SYSTEM AND METHOD FOR ESTABLISHING A TRUST DOMAIN ON A COMPUTER PLATFORM 有权
标题翻译：在计算机平台上建立信任域的系统和方法
公开(公告)号：US20090249050A1
公开(公告)日：2009-10-01
申请号：US12056452
申请日：2008-03-27
申请人： Sham M. Datta , Mohan J. Kumar , Ernest Brickell
发明人： Sham M. Datta , Mohan J. Kumar , Ernest Brickell
IPC分类号： G06F9/24
CPC分类号： G06F21/57
摘要： Embodiments of the invention provide systems and methods associated with a measurement engine in a server platform. In one such embodiment of the invention, the measurement engine hardware verifies/authenticates its own firmware and then system initialization firmware by measuring such firmware and storing measurement results in a register that is not spoofable by malicious code. In this instance, the measurement engine holds the host CPU complex in a reset state until the measurement engine has verified the system initialization firmware. In another such embodiment of the invention, the measurement engine hardware also measures firmware associated with one or more system service processors and stores such measurement results in a register. In this case, the measurement engine holds the system service processors and the host CPU complex in reset until the measurements are completed. Other embodiments are described.
摘要翻译：本发明的实施例提供了与服务器平台中的测量引擎相关联的系统和方法。在本发明的一个这样的实施例中，测量引擎硬件通过测量这样的固件来验证/认证其自己的固件，然后验证其自身的固件，并将测量结果存储在恶意代码不能欺骗的寄存器中。在这种情况下，测量引擎将主机复合体保持在复位状态，直到测量引擎已经验证了系统初始化固件。在本发明的另一个这样的实施例中，测量引擎硬件还测量与一个或多个系统服务处理器相关联的固件并将这样的测量结果存储在寄存器中。在这种情况下，测量引擎将系统服务处理器和主机CPU复合体保持在复位状态，直到测量完成。描述其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式