专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07752428B2 System and method for trusted early boot flow 失效
标题翻译：可信早期启动流的系统和方法
公开(公告)号：US07752428B2
公开(公告)日：2010-07-06
申请号：US11096832
申请日：2005-03-31
申请人： Shamanna M. Datta , Vincent J. Zimmer , Michael A. Rothman
发明人： Shamanna M. Datta , Vincent J. Zimmer , Michael A. Rothman
IPC分类号： G06F9/00
CPC分类号： G06F21/575 , H04L9/3234
摘要： In some embodiments, the invention involves extending trusted computing environments to the boot firmware. In at least one embodiment, the present invention is intended to enable the trusted environment to be extended forward to the pre-boot environment in addition to post-OS load environment. Embodiments of the present invention enable the trusted environment to extend to the firmware at power-on. The firmware is integrated within the secure perimeter which was previously only available to the OS. In other words, the BIOS is made to be a trusted entity, as well as the OS. Extensible firmware interface (EFI) modules are signed with a public key. The processor has an embedded private key. EFI modules are verified using the keys to ensure a trusted environment from boot to OS launch. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，本发明涉及将可信计算环境扩展到引导固件。在至少一个实施例中，本发明旨在使可信环境除了后OS负载环境之外还能够向前扩展到预引导环境。本发明的实施例使可信环境能够在上电时扩展到固件。固件集成在安全周边内，以前只可用于操作系统。换句话说，BIOS被做成可靠的实体以及操作系统。可扩展固件接口（EFI）模块使用公共密钥进行签名。处理器具有嵌入式私钥。 EFI模块使用密钥进行验证，以确保从引导到操作系统启动的受信任环境。描述和要求保护其他实施例。

2. 发明授权

US09566158B2 Hardware protection of virtual machine monitor runtime integrity watcher 有权
标题翻译：虚拟机监控运行时完整性监视器的硬件保护
公开(公告)号：US09566158B2
公开(公告)日：2017-02-14
申请号：US13995742
申请日：2011-12-31
申请人： Shamanna M. Datta , Albert J. Munoz , Mahesh S. Natu , Scott T. Durrant
发明人： Shamanna M. Datta , Albert J. Munoz , Mahesh S. Natu , Scott T. Durrant
IPC分类号： G06F9/455 , A61F2/34 , A61B17/80 , A61F2/30 , A61B17/82 , A61B17/86 , A61F2/46
CPC分类号： A61F2/34 , A61B17/8066 , A61B17/82 , A61B17/866 , A61B17/8685 , A61F2/30734 , A61F2/30749 , A61F2/30771 , A61F2/30907 , A61F2/30965 , A61F2002/30011 , A61F2002/30169 , A61F2002/30189 , A61F2002/30326 , A61F2002/3038 , A61F2002/30387 , A61F2002/30449 , A61F2002/30462 , A61F2002/30471 , A61F2002/30474 , A61F2002/30507 , A61F2002/30538 , A61F2002/30578 , A61F2002/30579 , A61F2002/30611 , A61F2002/30617 , A61F2002/30736 , A61F2002/3082 , A61F2002/30841 , A61F2002/3092 , A61F2002/3096 , A61F2002/3412 , A61F2002/3429 , A61F2002/3441 , A61F2002/3448 , A61F2002/348 , A61F2002/3487 , A61F2002/4615 , A61F2002/4619 , G06F9/45533 , G06F9/45558 , G06F21/53 , G06F2009/45583 , G06F2221/2149
摘要： An apparatus and method for hardware protection of a virtual machine monitor (VMM) runtime integrity watcher is described. A set of one or more hardware range registers that protect a contiguous memory space that is to store the VMM runtime integrity watcher. The set of hardware range registers are to protect the VMM runtime integrity watcher from being modified when loaded into the contiguous memory space. The VMM runtime integrity watcher, when executed, performs an integrity check on a VMM during runtime of the VMM.
摘要翻译：描述了用于虚拟机监视器（VMM）运行时完整性监视器的硬件保护的装置和方法。一组一个或多个硬件范围寄存器，用于保护存储VMM运行时完整性监视器的连续内存空间。该组硬件范围寄存器用于保护VMM运行时完整性监视器在加载到连续的内存空间时被修改。 VMM运行时完整性观察器在执行时，在VMM的运行期间对VMM执行完整性检查。

3. 发明申请

US20130326288A1 PROCESSOR THAT DETECTS WHEN SYSTEM MANAGEMENT MODE ATTEMPTS TO REACH PROGRAM CODE OUTSIDE OF PROTECTED SPACE 审中-公开
标题翻译：当系统管理模式尝试达到保护空间外的程序代码时，检测器的处理器
公开(公告)号：US20130326288A1
公开(公告)日：2013-12-05
申请号：US13997046
申请日：2011-12-31
申请人： Shamanna M. Datta , Rajesh S. Parathasarathy , Mahesh S. Natu , Frank Binns , Mohan J. Kumar
发明人： Shamanna M. Datta , Rajesh S. Parathasarathy , Mahesh S. Natu , Frank Binns , Mohan J. Kumar
IPC分类号： G06F11/07
CPC分类号： G06F11/0754 , G06F12/1441 , G06F21/52
摘要： A method is described that includes detecting that a memory access of system management mode program code is attempting to reach program code outside of a protected region of memory by comparing a target memory address of a memory access instruction of the system management program code again information that defines confines of the protection region. The method also includes raising an error signal in response to the detecting.
摘要翻译：描述了一种方法，其包括通过将系统管理程序代码的存储器访问指令的目标存储器地址再次比较来检测系统管理模式程序代码的存储器访问尝试到达存储器的受保护区域之外的程序代码，定义保护区域的范围。该方法还包括响应于检测而提高误差信号。

4. 发明申请

US20130212672A1 EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION ON A POINT-TO-POINT INTERCONNECT SYSTEM 审中-公开
标题翻译：一个点到点互连系统的安全环境初始化指导的执行
公开(公告)号：US20130212672A1
公开(公告)日：2013-08-15
申请号：US13837498
申请日：2013-03-15
申请人： Shamanna M. Datta , Mohan J. Kumar
发明人： Shamanna M. Datta , Mohan J. Kumar
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/00 , G06F21/74 , G06F21/85
摘要： Methods and apparatus for initiating secure operations in a microprocessor system are described. In one embodiment, a system includes a processor to execute a secured enter instruction, and a chipset to cause the system to enter a quiescent state during execution of the secured enter instruction.
摘要翻译：描述了在微处理器系统中启动安全操作的方法和装置。在一个实施例中，系统包括执行安全输入指令的处理器和芯片组，以使系统在执行安全输入指令期间进入静止状态。

5. 发明申请

US20140040543A1 Providing State Storage in a Processor for System Management Mode 审中-公开
标题翻译：在处理器中为系统管理模式提供状态存储
公开(公告)号：US20140040543A1
公开(公告)日：2014-02-06
申请号：US14048451
申请日：2013-10-08
申请人： Mahesh Natu , Thanunathan Rangarajan , Gautam Doshi , Shamanna M. Datta , Baskaran Ganesan , Mohan J. Kumar , Rajesh S. Parthasarathy , Frank Binns , Rajesh Nagaraja Murthy , Robert C. Swanson
发明人： Mahesh Natu , Thanunathan Rangarajan , Gautam Doshi , Shamanna M. Datta , Baskaran Ganesan , Mohan J. Kumar , Rajesh S. Parthasarathy , Frank Binns , Rajesh Nagaraja Murthy , Robert C. Swanson
IPC分类号： G11C7/10
CPC分类号： G06F13/24 , G06F9/30101 , G06F9/3017 , G06F9/30189 , G06F9/3851 , G06F9/461 , G11C7/1072 , G11C11/40615
摘要： In one embodiment, the present invention includes a processor that has an on-die storage such as a static random access memory to store an architectural state of one or more threads that are swapped out of architectural state storage of the processor on entry to a system management mode (SMM). In this way communication of this state information to a system management memory can be avoided, reducing latency associated with entry into SMM. Embodiments may also enable the processor to update a status of executing agents that are either in a long instruction flow or in a system management interrupt (SMI) blocked state, in order to provide an indication to agents inside the SMM. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括具有诸如静态随机存取存储器之类的片上存储器的处理器，用于存储在进入系统时从处理器的架构状态存储器交换的一个或多个线程的架构状态管理模式（SMM）。以这种方式，可以避免该状态信息与系统管理存储器的通信，减少与进入SMM相关联的延迟。实施例还可以使处理器更新处于长指令流或处于系统管理中断（SMI）阻塞状态中的执行代理的状态，以向SMM内的代理提供指示。描述和要求保护其他实施例。

6. 发明申请

US20070277223A1 Execution of a secured environment initialization instruction on a point-to-point interconnect system 有权
标题翻译：在点对点互连系统上执行安全环境初始化指令
公开(公告)号：US20070277223A1
公开(公告)日：2007-11-29
申请号：US11442230
申请日：2006-05-26
申请人： Shamanna M. Datta , Mohan J. Kumar
发明人： Shamanna M. Datta , Mohan J. Kumar
IPC分类号： H04L9/32
CPC分类号： G06F21/53 , G06F21/00 , G06F21/74 , G06F21/85
摘要： Methods and apparatus for initiating secure operations in a microprocessor system are described. In one embodiment, a system includes a processor to execute a secured enter instruction, and a chipset to cause the system to enter a quiescent state during execution of the secured enter instruction.
摘要翻译：描述了在微处理器系统中启动安全操作的方法和装置。在一个实施例中，系统包括执行安全输入指令的处理器和芯片组，以使系统在执行安全输入指令期间进入静止状态。

7. 发明授权

US09448867B2 Processor that detects when system management mode attempts to reach program code outside of protected space 有权
标题翻译：检测系统管理模式何时尝试到达受保护的空间之外的程序代码的处理器
公开(公告)号：US09448867B2
公开(公告)日：2016-09-20
申请号：US13997046
申请日：2011-12-31
申请人： Shamanna M. Datta , Rajesh S. Parathasarathy , Mahesh S. Natu , Frank Binns , Mohan J. Kumar
发明人： Shamanna M. Datta , Rajesh S. Parathasarathy , Mahesh S. Natu , Frank Binns , Mohan J. Kumar
IPC分类号： G06F11/00 , G06F11/07 , G06F12/14 , G06F21/52
CPC分类号： G06F11/0754 , G06F12/1441 , G06F21/52
摘要： A method is described that includes detecting that a memory access of system management mode program code is attempting to reach program code outside of a protected region of memory by comparing a target memory address of a memory access instruction of the system management program code again information that defines confines of the protection region. The method also includes raising an error signal in response to the detecting.
摘要翻译：描述了一种方法，其包括通过将系统管理程序代码的存储器访问指令的目标存储器地址再次比较来检测系统管理模式程序代码的存储器访问尝试到达存储器的受保护区域之外的程序代码，定义保护区域的范围。该方法还包括响应于检测而提高误差信号。

8. 发明申请

US20130275980A1 HARDWARE PROTECTION OF VIRTUAL MACHINE MONITOR RUNTIME INTEGRITY WATCHER 有权
标题翻译：虚拟机监控器的硬件保护运行完整性监视器
公开(公告)号：US20130275980A1
公开(公告)日：2013-10-17
申请号：US13995742
申请日：2011-06-08
申请人： Shamanna M. Datta , Albert J. Munoz , Mahesh S. Natu , Scott T. Durrant
发明人： Shamanna M. Datta , Albert J. Munoz , Mahesh S. Natu , Scott T. Durrant
IPC分类号： G06F9/455
CPC分类号： A61F2/34 , A61B17/8066 , A61B17/82 , A61B17/866 , A61B17/8685 , A61F2/30734 , A61F2/30749 , A61F2/30771 , A61F2/30907 , A61F2/30965 , A61F2002/30011 , A61F2002/30169 , A61F2002/30189 , A61F2002/30326 , A61F2002/3038 , A61F2002/30387 , A61F2002/30449 , A61F2002/30462 , A61F2002/30471 , A61F2002/30474 , A61F2002/30507 , A61F2002/30538 , A61F2002/30578 , A61F2002/30579 , A61F2002/30611 , A61F2002/30617 , A61F2002/30736 , A61F2002/3082 , A61F2002/30841 , A61F2002/3092 , A61F2002/3096 , A61F2002/3412 , A61F2002/3429 , A61F2002/3441 , A61F2002/3448 , A61F2002/348 , A61F2002/3487 , A61F2002/4615 , A61F2002/4619 , G06F9/45533 , G06F9/45558 , G06F21/53 , G06F2009/45583 , G06F2221/2149
摘要： An apparatus and method for hardware protection of a virtual machine monitor (VMM) runtime integrity watcher is described. A set of one or more hardware range registers that protect a contiguous memory space that is to store the VMM runtime integrity watcher. The set of hardware range registers are to protect the VMM runtime integrity watcher from being modified when loaded into the contiguous memory space. The VMM runtime integrity watcher, when executed, performs an integrity check on a VMM during runtime of the VMM.
摘要翻译：描述了用于虚拟机监视器（VMM）运行时完整性监视器的硬件保护的装置和方法。一组一个或多个硬件范围寄存器，用于保护存储VMM运行时完整性监视器的连续内存空间。该组硬件范围寄存器用于保护VMM运行时完整性监视器在加载到连续的内存空间时被修改。 VMM运行时完整性观察器在执行时，在VMM的运行期间对VMM执行完整性检查。

9. 发明授权

US08812828B2 Methods and apparatuses for recovering usage of trusted platform module 有权
标题翻译：恢复信任平台模块使用的方法和装置
公开(公告)号：US08812828B2
公开(公告)日：2014-08-19
申请号：US12947218
申请日：2010-11-16
申请人： Shamanna M. Datta , Mahesh S. Natu
发明人： Shamanna M. Datta , Mahesh S. Natu
IPC分类号： G06F9/24 , G06F21/57 , G06F21/00 , G06F11/07
CPC分类号： G06F21/57 , G06F11/0793 , G06F21/00 , G06F21/575
摘要： Methods and systems to perform platform security in conjunction with hardware-base root of trust logic are presented. In one embodiment, a method includes determining whether a status from an authenticated code module is indicative of an error or not. The method further includes determining whether the hardware-based root of trust logic is enabled based on content in a non-volatile memory location. If the hardware-based root of trust is enabled and the status is indicative of an error, the method further includes writing to the non-volatile memory location to disable hardware-based root of trust logic during a next boot sequence. In one embodiment, a platform initializes and uses the trusted platform module in conjunction with the hardware-based root of trust logic or with a platform-based root of trust logic.
摘要翻译：提出了结合信任逻辑的硬件根本来执行平台安全性的方法和系统。在一个实施例中，一种方法包括确定来自认证代码模块的状态是否指示错误。该方法还包括基于非易失性存储器位置中的内容来确定信任逻辑的基于硬件的根是否被启用。如果启用了基于硬件的信任根，并且状态指示了错误，则该方法还包括在下一个引导序列期间写入非易失性存储器位置以禁用基于硬件的信任逻辑根。在一个实施例中，平台与基于硬件的信任逻辑根或基于平台的信任逻辑逻辑基础一起初始化并使用可信平台模块。

10. 发明授权

US07934076B2 System and method for limiting exposure of hardware failure information for a secured execution environment 有权
标题翻译：用于限制安全执行环境的硬件故障信息暴露的系统和方法
公开(公告)号：US07934076B2
公开(公告)日：2011-04-26
申请号：US10956322
申请日：2004-09-30
申请人： Stephen A. Fischer , Shamanna M. Datta
发明人： Stephen A. Fischer , Shamanna M. Datta
IPC分类号： G06F9/00
CPC分类号： G06F21/74 , G06F2221/2101
摘要： A method and apparatus for limiting the exposure of hardware failure information is described. In one embodiment, an error reporting system of a processor may log various status and error address data into registers that retain their contents through a warm reset event. But the error reporting system of the processor may then determine whether the processor is operating in a trusted or secure mode. If not, then the processor's architectural state variables may also be logged into registers. But if the processor is operating in a trusted or secure mode, then the logging of the architectural state variables may be inhibited, or flagged as invalid.
摘要翻译：描述了用于限制硬件故障信息的暴露的方法和装置。在一个实施例中，处理器的错误报告系统可以将各种状态和错误地址数据记录到通过热复位事件保留其内容的寄存器中。但是处理器的错误报告系统然后可以确定处理器是否以可信任或安全模式操作。如果没有，则处理器的体系结构状态变量也可能被记录到寄存器中。但是，如果处理器以可信任或安全模式运行，则可能会禁止对架构状态变量的日志记录或标记为无效。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式