专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2006045644A1 VERIFYING BINDING OF AN INITIAL TRUSTED DEVICE TO A SECURED PROCESSING SYSTEM 审中-公开
标题翻译：将初始有害设备的验证绑定到安全处理系统
公开(公告)号：WO2006045644A1
公开(公告)日：2006-05-04
申请号：PCT/EP2005/052937
申请日：2005-06-23
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , BADE, Steven , CHALLENER, David, Carroll
发明人： BADE, Steven , CHALLENER, David, Carroll
IPC分类号： G06F21/00
CPC分类号： G06F21/57
摘要： A method and system for verifying binding of an initial trusted device to a secured processing system binds an initial device or replacement when no binding information is available from another device in the system. A platform credential is issued only when a valid binding is verified, by sending a proof of binding to a credential provider, such as the manufacturer. The method secures against security breaches that can occur when a device is removed from the system during the binding process. The binding information is generated in the device upon installation and includes system identification information so that at each initialization, upon return of binding information from the system to the device, the device can ensure that it is installed in the proper system and abort operation if the system does not match.
摘要翻译：用于验证初始可信设备与安全处理系统的绑定的方法和系统在没有绑定信息可用于系统中的另一设备时绑定初始设备或替换。只有当有效的绑定被验证时，才通过发送绑定到证书提供商（如制造商）的证明来颁发平台凭据。该方法可以防止在绑定过程中从系统中删除设备时可能发生的安全漏洞。捆绑信息在安装时在设备中生成，并且包括系统识别信息，使得在每次初始化时，从系统返回到设备的绑定信息，设备可以确保其被安装在适当的系统中并且如果系统不匹配。

2. 发明申请

WO2006008199A2 SECURE STORAGE TRACKING FOR ANTI-VIRUS SPEED-UP 审中-公开
标题翻译：用于防病毒速度的安全存储跟踪
公开(公告)号：WO2006008199A2
公开(公告)日：2006-01-26
申请号：PCT/EP2005/052192
申请日：2005-05-12
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , CHALLENER, David, Carroll , KARIDIS, John, Peter
发明人： CHALLENER, David, Carroll , KARIDIS, John, Peter
IPC分类号： G06F1/00
CPC分类号： G06F21/564 , G06F21/80
摘要： A computer system includes a security subsystem which is able to trustfully track which files or storage areas of a storage device have been altered since a last virus scan. The trusted information can then be used to accelerate scans for undesirable code or data such as viruses and invalid or corrupt registry entries. In the case of viruses, files or storage areas which have been altered are scanned against a super-set of virus definitions. Unaltered files or storage areas are scanned against a subset of virus definitions.
摘要翻译：计算机系统包括安全子系统，该子系统能够信任地跟踪自上次病毒扫描以来存储设备的哪些文件或存储区域被改变。然后，可信信息可用于加速扫描不期望的代码或数据，如病毒和无效或损坏的注册表项。在病毒的情况下，已经被更改的文件或存储区域被扫描超级病毒定义。未修改的文件或存储区域将针对病毒定义的一部分进行扫描。

3. 发明申请

WO2009127905A1 APPARATUS AND METHOD FOR ENABLING APPLICATIONS ON A SECURITY PROCESSOR 审中-公开
标题翻译：在安全处理器上应用应用的装置和方法
公开(公告)号：WO2009127905A1
公开(公告)日：2009-10-22
申请号：PCT/IB2008/051458
申请日：2008-04-16
申请人： LENOVO (SINGAPORE) PTE. LTD. , CHALLENER, David, Carroll , NICHOLSON, John H III , PENNISI, Joseph , WALTERMANN, Rod D
发明人： CHALLENER, David, Carroll , NICHOLSON, John H III , PENNISI, Joseph , WALTERMANN, Rod D
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： G06F21/57 , G06F21/51
摘要： A method and apparatus for enabling applications on security processors of computer systems. The computer system (10) includes a security architecture such as a Trusted Platform Module (TPM). The system (10) includes an input portion 812), a security portion (14) and a standard portion (16). The input portion (12) includes a variety of different input devices such as a card reader (20), keyboard (22) or fingerprint reader (24). The programmable security processor (26) in the security portion (14) implements a TPM security architecture. A nonvolatile memory (28) is connected to the processor (26). The nonvolatile memory (28) stores a secure table of hash values and endorsement keys which are used to determine whether applications to be loaded on the processor (26) are authorized. Each stored value is derived from a different application that is certified by the associated endorsement key to be executed on the processor.
摘要翻译：一种用于在计算机系统的安全处理器上实现应用的方法和装置。计算机系统（10）包括诸如可信平台模块（TPM）之类的安全架构。系统（10）包括输入部分812），安全部分（14）和标准部分（16）。输入部分（12）包括各种不同的输入设备，例如读卡器（20），键盘（22）或指纹读取器（24）。安全部分（14）中的可编程安全处理器（26）实现TPM安全体系结构。非易失性存储器（28）连接到处理器（26）。非易失性存储器（28）存储用于确定要加载在处理器（26）上的应用是否被授权的散列值和认可密钥的安全表。每个存储的值都是从由处理器执行的相关认可密钥认证的不同应用程序导出的。

4. 发明申请

WO2006008199A3 SECURE STORAGE TRACKING FOR ANTI-VIRUS SPEED-UP 审中-公开
标题翻译：安全存储跟踪抗病毒提速
公开(公告)号：WO2006008199A3
公开(公告)日：2006-04-13
申请号：PCT/EP2005052192
申请日：2005-05-12
申请人： IBM , IBM UK , CHALLENER DAVID CARROLL , KARIDIS JOHN PETER
发明人： CHALLENER DAVID CARROLL , KARIDIS JOHN PETER
IPC分类号： G06F1/04 , G06F21/00
CPC分类号： G06F21/564 , G06F21/80
摘要： A computer system includes a security subsystem which is able to trustfully track which files or storage areas of a storage device have been altered since a last virus scan. The trusted information can then be used to accelerate scans for undesirable code or data such as viruses and invalid or corrupt registry entries. In the case of viruses, files or storage areas which have been altered are scanned against a super-set of virus definitions. Unaltered files or storage areas are scanned against a subset of virus definitions.
摘要翻译：计算机系统包括安全子系统，其能够可靠地追踪自上次病毒扫描以来存储设备的哪些文件或存储区域已被改变。然后可信信息可用于加速扫描不需要的代码或数据，如病毒和无效或损坏的注册表项。对于病毒，已对文件或已更改的存储区域进行扫描以获得超级病毒定义。针对病毒定义的子集扫描未更改的文件或存储区域。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式