专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090049111A1 METHOD, APPARATUS AND SYSTEM FOR RESISTANCE TO SIDE CHANNEL ATTACKS ON RANDOM NUMBER GENERATORS 失效
标题翻译：方法，装置和系统，用于抵抗随机数发生器的侧面通道攻击
公开(公告)号：US20090049111A1
公开(公告)日：2009-02-19
申请号：US12131201
申请日：2008-06-02
申请人： Suresh Narayana Chari , Vincenzo Valentino Diluoffo , Paul Ashley Karger , Elaine Rivette Palmer , Tal Rabin , Josyula Ramachandra Rao , Pankaj Rohatgi , Helmut Scherzer , Michael Steiner , David Claude Toll
发明人： Suresh Narayana Chari , Vincenzo Valentino Diluoffo , Paul Ashley Karger , Elaine Rivette Palmer , Tal Rabin , Josyula Ramachandra Rao , Pankaj Rohatgi , Helmut Scherzer , Michael Steiner , David Claude Toll
IPC分类号： G06F7/58
CPC分类号： G06F7/582 , H04L9/003 , H04L9/0662
摘要： A random number generator (RNG) resistant to side channel attacks includes an activation pseudo random number generator (APRNG) having an activation output connected to an activation seed input to provide a next seed to the activation seed input. A second random number generator includes a second seed input, which receives the next seed and a random data output, which outputs random data in accordance with the next seed. An input seed memory is connected to the activation seed input and a feedback connection from the activation output so that the next seed is stored in the input seed memory to be used by the APRNG as the activation seed input at a next startup cycle.
摘要翻译：具有抗侧向信道攻击的随机数发生器（RNG）包括具有连接到激活种子输入的激活输出的激活伪随机数生成器（APRNG），以向激活种子输入提供下一种子。第二随机数生成器包括第二种子输入，其接收下一个种子和随机数据输出，其根据下一种子输出随机数据。输入种子存储器连接到激活种子输入和来自激活输出的反馈连接，使得下一种子存储在输入种子存储器中，以供APRNG使用，作为下一个启动周期的激活种子输入。

2. 发明授权

US07496616B2 Method, apparatus and system for resistance to side channel attacks on random number generators 失效
标题翻译：对随机数发生器进行侧向通道攻击的方法，装置和系统
公开(公告)号：US07496616B2
公开(公告)日：2009-02-24
申请号：US10987640
申请日：2004-11-12
申请人： Suresh Narayana Chari , Vincenzo Valentino Diluoffo , Paul Ashley Karger , Elaine Rivette Palmer , Tal Rabin , Josyula Ramachandra Rao , Pankaj Rohatgi , Helmut Scherzer , Michael Steiner , David Claude Toll
发明人： Suresh Narayana Chari , Vincenzo Valentino Diluoffo , Paul Ashley Karger , Elaine Rivette Palmer , Tal Rabin , Josyula Ramachandra Rao , Pankaj Rohatgi , Helmut Scherzer , Michael Steiner , David Claude Toll
IPC分类号： G06F1/02
CPC分类号： G06F7/582 , H04L9/003 , H04L9/0662
摘要： A random number generator (RNG) resistant to side channel attacks includes an activation pseudo random number generator (APRNG) having an activation output connected to an activation seed input to provide a next seed to the activation seed input. A second random number generator includes a second seed input, which receives the next seed and a random data output, which outputs random data in accordance with the next seed. An input seed memory is connected to the activation seed input and a feedback connection from the activation output so that the next seed is stored in the input seed memory to be used by the APRNG as the activation seed input at a next startup cycle.
摘要翻译：具有抗侧向信道攻击的随机数发生器（RNG）包括具有连接到激活种子输入的激活输出的激活伪随机数生成器（APRNG），以向激活种子输入提供下一种子。第二随机数生成器包括第二种子输入，其接收下一个种子和随机数据输出，其根据下一种子输出随机数据。输入种子存储器连接到激活种子输入和来自激活输出的反馈连接，使得下一种子存储在输入种子存储器中，以供APRNG使用，作为下一个启动周期的激活种子输入。

3. 发明授权

US08135766B2 Method, apparatus and system for resistance to side channel attacks on random number generators 失效
标题翻译：对随机数发生器进行侧向通道攻击的方法，装置和系统
公开(公告)号：US08135766B2
公开(公告)日：2012-03-13
申请号：US12131201
申请日：2008-06-02
申请人： Suresh Narayana Chari , Vincenzo Valentino Diluoffo , Paul Ashley Karger , Elaine Rivette Palmer , Tal Rabin , Josyula Ramachandra Rao , Pankaj Rohatgi , Helmut Scherzer , Michael Steiner , David Claude Toll
发明人： Suresh Narayana Chari , Vincenzo Valentino Diluoffo , Paul Ashley Karger , Elaine Rivette Palmer , Tal Rabin , Josyula Ramachandra Rao , Pankaj Rohatgi , Helmut Scherzer , Michael Steiner , David Claude Toll
IPC分类号： G06F7/58
CPC分类号： G06F7/582 , H04L9/003 , H04L9/0662
摘要： A random number generator (RNG) resistant to side channel attacks includes an activation pseudo random number generator (APRNG) having an activation output connected to an activation seed input to provide a next seed to the activation seed input. A second random number generator includes a second seed input, which receives the next seed and a random data output, which outputs random data in accordance with the next seed. An input seed memory is connected to the activation seed input and a feedback connection from the activation output so that the next seed is stored in the input seed memory to be used by the APRNG as the activation seed input at a next startup cycle.
摘要翻译：具有抗侧向信道攻击的随机数发生器（RNG）包括具有连接到激活种子输入的激活输出的激活伪随机数生成器（APRNG），以向激活种子输入提供下一种子。第二随机数生成器包括第二种子输入，其接收下一个种子和随机数据输出，其根据下一种子输出随机数据。输入种子存储器连接到激活种子输入和来自激活输出的反馈连接，使得下一种子存储在输入种子存储器中，以供APRNG使用，作为下一个启动周期的激活种子输入。

4. 发明授权

US08087090B2 Fuzzy multi-level security 有权
标题翻译：模糊多级安全
公开(公告)号：US08087090B2
公开(公告)日：2011-12-27
申请号：US12131206
申请日：2008-06-02
申请人： Pau-Chen Cheng , Shai Halevi , Trent Ray Jaeger , Paul Ashley Karger , Ronald Perez , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
发明人： Pau-Chen Cheng , Shai Halevi , Trent Ray Jaeger , Paul Ashley Karger , Ronald Perez , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G06F7/04 , G08B23/00
CPC分类号： G06N7/023 , G06F21/577 , G06F21/604 , G06F21/6218 , H04L63/105
摘要： An access control system and method includes a risk index module which computes a risk index for a dimension contributing to risk. A boundary range defined for a parameter representing each risk index such that the parameter above the range is unacceptable, below the range is acceptable and in the range is acceptable with mitigation measures. A mitigation module determines the mitigation measures which reduce the parameter within the range by mapping the effectiveness of performing the mitigation measures to determine a residual risk after a mitigation measure has been implemented.
摘要翻译：访问控制系统和方法包括风险指数模块，其计算用于风险的维度的风险指数。为表示每个风险指数的参数定义的边界范围，使得高于该范围的参数是不可接受的，低于该范围是可接受的，并且在该范围内可以用缓解措施来接受。缓解模块通过绘制执行缓解措施的有效性来确定缓解措施实施后的剩余风险，确定减少范围内的参数的缓解措施。

5. 发明授权

US08099781B2 Method of managing and mitigating security risks through planning 有权
标题翻译：通过规划管理和减轻安全风险的方法
公开(公告)号：US08099781B2
公开(公告)日：2012-01-17
申请号：US12508327
申请日：2009-07-23
申请人： Kay S. Anderson , Pau-Chen Cheng , Mark D. Feblowitz , Genady Grabarnik , Shai Halevi , Nagui Halim , Trent R. Jaeger , Paul Ashley Karger , Zhen Liu , Ronald Perez , Anton V. Riabov , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
发明人： Kay S. Anderson , Pau-Chen Cheng , Mark D. Feblowitz , Genady Grabarnik , Shai Halevi , Nagui Halim , Trent R. Jaeger , Paul Ashley Karger , Zhen Liu , Ronald Perez , Anton V. Riabov , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
IPC分类号： H04L29/00
CPC分类号： G06F21/577
摘要： An exemplary method is provided for managing and mitigating security risks through planning. A first security-related information of a requested product is received. A second security-related information of resources that are available for producing the requested product is received. A multi-stage process with security risks managed by the first security-related information and the second security-related information is performed to produce the requested product.
摘要翻译：提供了一种示范性的方法来通过规划来管理和减轻安全风险。收到所请求产品的第一个安全相关信息。接收到可用于生成请求的产品的资源的第二个安全相关信息。执行由第一安全相关信息和第二安全相关信息管理的具有安全风险的多阶段过程以产生所请求的产品。

6. 发明授权

US07832007B2 Method of managing and mitigating security risks through planning 失效
标题翻译：通过规划管理和减轻安全风险的方法
公开(公告)号：US07832007B2
公开(公告)日：2010-11-09
申请号：US11328589
申请日：2006-01-10
申请人： Kay S. Anderson , Pau-Chen Cheng , Mark D. Feblowitz , Genady Grabarnik , Shai Halevi , Nagui Halim , Trent R. Jaeger , Paul Ashley Karger , Zhen Liu , Ronald Perez , Anton V. Riabov , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
发明人： Kay S. Anderson , Pau-Chen Cheng , Mark D. Feblowitz , Genady Grabarnik , Shai Halevi , Nagui Halim , Trent R. Jaeger , Paul Ashley Karger , Zhen Liu , Ronald Perez , Anton V. Riabov , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
IPC分类号： H04L29/00
CPC分类号： G06F21/577
摘要： An exemplary method is provided for managing and mitigating security risks through planning. A first security-related information of a requested product is received. A second security-related information of resources that are available for producing the requested product is received. A multi-stage process with security risks managed by the first security-related information and the second security-related information is performed to produce the requested product.
摘要翻译：提供了一种示范性的方法来通过规划来管理和减轻安全风险。收到所请求产品的第一个安全相关信息。接收到可用于生成请求的产品的资源的第二个安全相关信息。执行由第一安全相关信息和第二安全相关信息管理的具有安全风险的多阶段过程以产生所请求的产品。

7. 发明授权

US07530110B2 System and method for fuzzy multi-level security 失效
标题翻译：模糊多层次安全的系统和方法
公开(公告)号：US07530110B2
公开(公告)日：2009-05-05
申请号：US11123998
申请日：2005-05-06
申请人： Pau-Chen Cheng , Shai Halevi , Trent Ray Jaeger , Paul Ashley Karger , Ronald Perez , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
发明人： Pau-Chen Cheng , Shai Halevi , Trent Ray Jaeger , Paul Ashley Karger , Ronald Perez , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
IPC分类号： H04K1/00 , H04L9/00 , H04L9/32
CPC分类号： G06N7/023 , G06F21/577 , G06F21/604 , G06F21/6218 , H04L63/105
摘要： An access control system and method includes a risk index module which computes a risk index for a dimension contributing to risk. A boundary range defined for a parameter representing each risk index such that the parameter above the range is unacceptable, below the range is acceptable and in the range is acceptable with mitigation measures. A mitigation module determines the mitigation measures which reduce the parameter within the range.
摘要翻译：访问控制系统和方法包括风险指数模块，其计算用于风险的维度的风险指数。为表示每个风险指数的参数定义的边界范围，使得高于该范围的参数是不可接受的，低于该范围是可接受的，并且在该范围内可以用缓解措施来接受。缓解模块确定减少该范围内的参数的缓解措施。

8. 发明申请

US20080263662A1 SYSTEM AND METHOD FOR FUZZY MULTI-LEVEL SECURITY 有权
标题翻译： FUZZY多级安全系统与方法
公开(公告)号：US20080263662A1
公开(公告)日：2008-10-23
申请号：US12131206
申请日：2008-06-02
申请人： Pau-Chen Cheng , Shai Halevi , Trent Ray Jaeger , Paul Ashley Karger , Ronald Perez , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
发明人： Pau-Chen Cheng , Shai Halevi , Trent Ray Jaeger , Paul Ashley Karger , Ronald Perez , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
IPC分类号： G06F21/00
CPC分类号： G06N7/023 , G06F21/577 , G06F21/604 , G06F21/6218 , H04L63/105
摘要： An access control system and method includes a risk index module which computes a risk index for a dimension contributing to risk. A boundary range defined for a parameter representing each risk index such that the parameter above the range is unacceptable, below the range is acceptable and in the range is acceptable with mitigation measures. A mitigation module determines the mitigation measures which reduce the parameter within the range.
摘要翻译：访问控制系统和方法包括风险指数模块，其计算用于风险的维度的风险指数。为表示每个风险指数的参数定义的边界范围，使得高于该范围的参数是不可接受的，低于该范围是可接受的，并且在该范围内可以用缓解措施来接受。缓解模块确定减少该范围内的参数的缓解措施。

9. 发明申请

US20090282487A1 Method of Managing and Mitigating Security Risks Through Planning 有权
标题翻译：通过规划管理和减轻安全风险的方法
公开(公告)号：US20090282487A1
公开(公告)日：2009-11-12
申请号：US12508327
申请日：2009-07-23
申请人： Kay S. Anderson , Pau-Chen Cheng , Mark D. Feblowitz , Genady Grabarnik , Shai Halevi , Nagui Halim , Trent R. Jaeger , Paul Ashley Karger , Zhen Liu , Ronald Perez , Anton V. Riabov , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
发明人： Kay S. Anderson , Pau-Chen Cheng , Mark D. Feblowitz , Genady Grabarnik , Shai Halevi , Nagui Halim , Trent R. Jaeger , Paul Ashley Karger , Zhen Liu , Ronald Perez , Anton V. Riabov , Pankaj Rohatgi , Angela Marie Schuett , Michael Steiner , Grant M. Wagner
IPC分类号： G06F11/00
CPC分类号： G06F21/577
摘要： An exemplary method is provided for managing and mitigating security risks through planning. A first security-related information of a requested product is received. A second security-related information of resources that are available for producing the requested product is received. A multi-stage process with security risks managed by the first security-related information and the second security-related information is performed to produce the requested product.
摘要翻译：提供了一种示范性的方法来通过规划来管理和减轻安全风险。收到所请求产品的第一个安全相关信息。接收到可用于生成请求的产品的资源的第二个安全相关信息。执行由第一安全相关信息和第二安全相关信息管理的具有安全风险的多阶段过程以产生所请求的产品。

10. 发明授权

US06430561B1 Security policy for protection of files on a storage device 失效
标题翻译：用于保护存储设备上的文件的安全策略
公开(公告)号：US06430561B1
公开(公告)日：2002-08-06
申请号：US09429963
申请日：1999-10-29
申请人： Vernon Ralph Austel , Paul Ashley Karger , David Claude Toll
发明人： Vernon Ralph Austel , Paul Ashley Karger , David Claude Toll
IPC分类号： G06F1730
CPC分类号： G07F7/1008 , G06F21/6218 , G06F21/6245 , G06F21/64 , G06Q20/341 , G06Q20/35765 , Y10S707/99939
摘要： Access to files by accessing programs, where files comprise other files, programs and data is controlled. An initial access class is assigned to each file and to each accessing program. An access class comprises an integrity access class and a secrecy access class. An integrity access class comprises rules governing modification of data contained in files and a security access class comprises rules governing disclosure of data contained in files. An integrity access class comprises a set of rules for allowing the performance of a read function, and another set of rules for allowing the performance of write/execute function. An execute function comprises transferring and chaining, where chaining comprises starting another process running at potentially different secrecy and integrity access classes. A secrecy access class comprises a set of rules for allowing the performance of a write function, and another set of rules for allowing the performance of read/execute function. The respective access classes of the target file, target program, and accessing program are compared. If the comparison results meet the security requirements, the function is performed.
摘要翻译：通过访问程序访问文件，其中文件包含其他文件，程序和数据。初始访问类被分配给每个文件和每个访问程序。访问类包括完整性访问类和保密访问类。完整性访问类包括管理文件中包含的数据的修改的规则，并且安全访问类包括管理文件中包含的数据的公开的规则。完整性访问类包括用于允许执行读取功能的一组规则，以及用于允许执行写/执行功能的另一组规则。执行功能包括传送和链接，其中链接包括以潜在的不同的秘密和完整性访问类别启动另一个进程。保密访问类包括用于允许执行写入功能的一组规则，以及用于允许执行读取/执行功能的另一组规则。比较目标文件，目标程序和访问程序的各个访问类别。如果比较结果符合安全要求，则执行该功能。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式