专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20120096270A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20120096270A1
公开(公告)日：2012-04-19
申请号：US13337919
申请日：2011-12-27
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karavir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karavir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

2. 发明授权

US08266707B2 Tamper resistant method, apparatus and system for secure portability of digital rights management-protected content 有权
标题翻译：防篡改方法，装置和系统，用于数字版权管理保护内容的安全可移植性
公开(公告)号：US08266707B2
公开(公告)日：2012-09-11
申请号：US12039456
申请日：2008-02-28
申请人： Uday Savagaonkar , Prashant Dewan , Men Long
发明人： Uday Savagaonkar , Prashant Dewan , Men Long
IPC分类号： G06F21/00
CPC分类号： G06F21/10
摘要： An apparatus and system provide a tamper-resistant scheme for portability of DRM-protected digital content. According to embodiments of the invention, a portable crypto unit may be utilized in conjunction with a VT integrity services (VIS) scheme as well as a Virtual Machine Manager (VMM) and a TPM to provide a secure scheme to protect digital content. Additionally, in one embodiment, the digital content may be partitioned into blocks comprising multiple segments to further enhance the security of the scheme.
摘要翻译：一种装置和系统为DRM保护的数字内容的便携性提供防篡改方案。根据本发明的实施例，便携式加密单元可以与VT完整性服务（VIS）方案以及虚拟机管理器（VMM）和TPM结合使用，以提供保护数字内容的安全方案。此外，在一个实施例中，数字内容可以被划分为包括多个段的块，以进一步增强该方案的安全性。

3. 发明申请

US20090220090A1 TAMPER RESISTANT METHOD, APPARATUS AND SYSTEM FOR SECURE PORTABILITY OF DIGITAL RIGHTS MANAGEMENT-PROTECTED CONTENT 有权
标题翻译：防篡改方法，安全数据管理保护内容可移植性的装置和系统
公开(公告)号：US20090220090A1
公开(公告)日：2009-09-03
申请号：US12039456
申请日：2008-02-28
申请人： Uday Savagaonkar , Prashant Dewan , Men Long
发明人： Uday Savagaonkar , Prashant Dewan , Men Long
IPC分类号： H04L9/06 , H04L9/32
CPC分类号： G06F21/10
摘要： An apparatus and system provide a tamper-resistant scheme for portability of DRM-protected digital content. According to embodiments of the invention, a portable crypto unit may be utilized in conjunction with a VT integrity services (VIS) scheme as well as a Virtual Machine Manager (VMM) and a TPM to provide a secure scheme to protect digital content. Additionally, in one embodiment, the digital content may be partitioned into blocks comprising multiple segments to further enhance the security of the scheme.
摘要翻译：一种装置和系统为DRM保护的数字内容的便携性提供防篡改方案。根据本发明的实施例，便携式加密单元可以与VT完整性服务（VIS）方案以及虚拟机管理器（VMM）和TPM结合使用，以提供保护数字内容的安全方案。此外，在一个实施例中，数字内容可以被划分为包括多个段的块，以进一步增强该方案的安全性。

4. 发明申请

US20090119510A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20090119510A1
公开(公告)日：2009-05-07
申请号：US11935783
申请日：2007-11-06
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

5. 发明申请

US20150205732A1 SEAMLESSLY ENCRYPTING MEMORY REGIONS TO PROTECT AGAINST HARDWARE-BASED ATTACKS 审中-公开
标题翻译：无缝加密存储区域防范基于硬件的攻击
公开(公告)号：US20150205732A1
公开(公告)日：2015-07-23
申请号：US14449467
申请日：2014-08-01
申请人： Uday SAVAGAONKAR , Ravi Sahita , David Durham , Men Long
发明人： Uday SAVAGAONKAR , Ravi Sahita , David Durham , Men Long
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F12/1441 , G06F2212/1052
摘要： Systems, apparatuses, and methods, and for seamlessly protecting memory regions to protect against hardware-based attacks are disclosed. In one embodiment, an apparatus includes a decoder, control logic, and cryptographic logic. The decoder is to decode a transaction between a processor and memory-mapped input/output space. The control logic is to redirect the transaction from the memory-mapped input/output space to a system memory. The cryptographic logic is to operate on data for the transaction.
摘要翻译：公开了系统，装置和方法，并且用于无缝地保护存储器区域以防止基于硬件的攻击。在一个实施例中，一种装置包括解码器，控制逻辑和加密逻辑。解码器是对处理器和存储器映射的输入/输出空间之间的事务进行解码。控制逻辑是将事务从存储器映射的输入/输出空间重定向到系统存储器。密码逻辑是对数据进行交易操作。

6. 发明授权

US08826035B2 Cumulative integrity check value (ICV) processor based memory content protection 有权
标题翻译：累积完整性检查值（ICV）处理器内存保护
公开(公告)号：US08826035B2
公开(公告)日：2014-09-02
申请号：US12646028
申请日：2009-12-23
申请人： David Durham , Men Long , Uday Savagaonkar
发明人： David Durham , Men Long , Uday Savagaonkar
IPC分类号： G06F21/00
CPC分类号： G06F21/79 , G06F21/72
摘要： In general, in one aspect, the disclosure describes a process that includes a cryptographic engine and first and second registers. The cryptographic engine is to encrypt data to be written to memory, to decrypt data read from memory, to generate read integrity check values (ICVs) and write ICVs for memory accesses. The cryptographic engine is also to create a cumulative read ICV and a cumulative write ICV by XORing the generated read ICV and the generated write ICV with a current read MAC and a current write ICV respectively and to validate data integrity by comparing the cumulative read ICV and the cumulative write ICV. The first and second registers are to store the cumulative read and write ICVs respectively at the processor. Other embodiments are described and claimed.
摘要翻译：通常，在一个方面，本公开描述了包括密码引擎和第一和第二寄存器的过程。加密引擎是对要写入存储器的数据进行加密，解密从存储器读取的数据，生成读取完整性检查值（ICV），并为存储器访问写入ICV。密码引擎还通过分别用当前读取的MAC和当前的写入ICV异或生成的读取ICV和产生的写ICV来创建累积读取ICV和累积写入ICV，并通过比较累积读取ICV和累积写ICV。第一和第二寄存器分别在处理器处存储累积读和写ICV。描述和要求保护其他实施例。

7. 发明授权

US08532303B2 Symmetric key distribution framework for the internet 有权
标题翻译：互联网的对称密钥分发框架
公开(公告)号：US08532303B2
公开(公告)日：2013-09-10
申请号：US11957184
申请日：2007-12-14
申请人： Divya Naidu Kolar Sunder , Prashant Dewan , Men Long
发明人： Divya Naidu Kolar Sunder , Prashant Dewan , Men Long
IPC分类号： H04L9/08
CPC分类号： H04L63/0435 , H04L9/083 , H04L63/0428 , H04L63/062 , H04L63/20
摘要： A method, device, and system are disclosed. In one embodiment the method includes receiving measured health information from a client on a key distribution server. Once the measured health information is received the server is capable of validating the measured health information to see if it is authentic. The server is also capable of sending a session key to the client when the measured health information is validated. When the client receives the session key, the client is capable of initiating an encrypted and authenticated connection with an application server in the domain using the session key.
摘要翻译：公开了一种方法，装置和系统。在一个实施例中，该方法包括从密钥分发服务器上的客户端接收测量的健康信息。一旦接收到测量的健康信息，服务器就能够验证测量的健康信息，看它是否可信。当测量的健康信息被验证时，服务器还能够向客户端发送会话密钥。当客户端接收会话密钥时，客户端能够使用会话密钥发起与域中的应用服务器的加密和认证连接。

8. 发明授权

US08498420B2 Symmetric key distribution framework for the internet 有权
公开(公告)号：US08498420B2
公开(公告)日：2013-07-30
申请号：US11957184
申请日：2007-12-14
申请人： Divya Naidu Kolar Sunder , Prashant Dewan , Men Long
发明人： Divya Naidu Kolar Sunder , Prashant Dewan , Men Long
IPC分类号： H04L9/08
摘要： A method, device, and system are disclosed. In one embodiment the method includes receiving measured health information from a client on a key distribution server. Once the measured health information is received the server is capable of validating the measured health information to see if it is authentic. The server is also capable of sending a session key to the client when the measured health information is validated. When the client receives the session key, the client is capable of initiating an encrypted and authenticated connection with an application server in the domain using the session key.

9. 发明申请

US20080022388A1 Method and apparatus for multiple inclusion offsets for security protocols 审中-公开
标题翻译：用于安全协议的多重包含偏移的方法和装置
公开(公告)号：US20080022388A1
公开(公告)日：2008-01-24
申请号：US11478986
申请日：2006-06-30
申请人： Karanvir Grewal , David Durham , Hormuzd Khosravi , Men Long , Prashant Dewan
发明人： Karanvir Grewal , David Durham , Hormuzd Khosravi , Men Long , Prashant Dewan
IPC分类号： G06F15/16
CPC分类号： H04L63/105
摘要： A method and apparatus to define multiple zones in a data packet for inclusion in processing by security operations of a security protocol. In one embodiment, each defined zone has an associated list of security operations to which the zone is subjected. In another embodiment, the list of security operations for a zone includes parameters to be passed when performing the security operations on the zone.
摘要翻译：一种在数据分组中定义多个区域以包括在安全协议的安全操作的处理中的方法和装置。在一个实施例中，每个定义的区域具有该区域经受的安全操作的关联列表。在另一个实施例中，区域的安全操作的列表包括在区域上执行安全操作时要传递的参数。

10. 发明申请

US20090172814A1 DYNAMIC GENERATION OF INTEGRITY MANIFEST FOR RUN-TIME VERIFICATION OF SOFTWARE PROGRAM 有权
标题翻译：软件程序运行验证的完整性更新动态生成
公开(公告)号：US20090172814A1
公开(公告)日：2009-07-02
申请号：US11967928
申请日：2007-12-31
申请人： Hormuzd Khosravi , David Durham , Prashant Dewan , Ravi Sahita , Uday R. Savagaonkar , Men Long
发明人： Hormuzd Khosravi , David Durham , Prashant Dewan , Ravi Sahita , Uday R. Savagaonkar , Men Long
IPC分类号： G06F21/22
CPC分类号： G06F21/64 , G06F21/51
摘要： A measurement engine generates an integrity manifest for a software program and uses it to perform active platform observation. The integrity manifest indicates an integrity check value for a section of the program's code. The measurement engine computes a comparison value on the program's image in memory and determines if the comparison value matches the expected integrity check value. If the values do not match, the program's image is determined to be modified, and appropriate remedial action may be triggered.
摘要翻译：测量引擎为软件程序生成完整性清单，并使用它来执行主动平台观察。完整性清单表示程序代码的一部分的完整性检查值。测量引擎计算内存中程序映像的比较值，并确定比较值是否与预期的完整性校验值相匹配。如果值不匹配，则确定程序的图像被修改，并且可能触发适当的补救动作。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式