专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2014100781A1 TRUSTED CONTAINER 审中-公开
公开(公告)号：WO2014100781A1
公开(公告)日：2014-06-26
申请号：PCT/US2013/077340
申请日：2013-12-21
申请人： MCAFEE, INC. , VON BOKERN, Vincent Edward , GOEL, Purushottam , SCHRECKER, Sven , SMITH, Ned McArthur
发明人： VON BOKERN, Vincent Edward , GOEL, Purushottam , SCHRECKER, Sven , SMITH, Ned McArthur
IPC分类号： G06F21/50 , G06F15/16
CPC分类号： H04L63/0838 , H04L41/046 , H04L41/28 , H04L63/061 , H04L63/0823 , H04L63/18 , H04L63/20
摘要： A secure identifier is derived, using a secured microcontroller of a computing device, that is unique to a pairing of the computing device and a particular domain. Secure posture data corresponding to attributes of the computing device is identified in secured memory of the computing device. The secure identifier and security posture is sent in a secured container to a management device of the particular domain. The particular domain can utilize the information in the secured container to authenticate the computing device and determine a security task to be performed relating to interactions of the computing device with the particular domain.
摘要翻译：使用计算设备的安全微控制器导出安全标识符，其对于计算设备和特定域的配对是唯一的。在计算设备的安全存储器中识别与计算设备的属性相对应的安全姿势数据。安全标识符和安全状态在安全容器中发送到特定域的管理设备。特定域可以利用安全容器中的信息来认证计算设备并且确定要与计算设备与特定域的交互相关的安全性任务。

2. 发明申请

WO2014099196A1 HARDWARE MANAGEMENT INTERFACE 审中-公开
标题翻译：硬件管理界面
公开(公告)号：WO2014099196A1
公开(公告)日：2014-06-26
申请号：PCT/US2013/070459
申请日：2013-11-17
申请人： MCAFEE, INC. , VON BOKERN, Vincent Edward , GOEL, Purushottam , SCHRECKER, Sven
发明人： VON BOKERN, Vincent Edward , GOEL, Purushottam , SCHRECKER, Sven
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： H04L63/20 , H04L63/0876 , H04L63/102
摘要： A management controller of a computing device is identified on a network and queried for attributes of the computing device. The management controller is securely implemented in hardware of the computing device and is independent of a central processing unit (CPU) of the computing device. Data is received from the management controller that identifies one or more attributes of the computing device. A security policy of the network is implemented for the computing device based on the one or more attributes.
摘要翻译：在网络上识别计算设备的管理控制器，并查询计算设备的属性。管理控制器在计算设备的硬件中安全地实现，并且独立于计算设备的中央处理单元（CPU）。从管理控制器接收到识别计算设备的一个或多个属性的数据。基于一个或多个属性，为计算设备实现网络的安全策略。

3. 发明申请

WO2011081890A3 PROVISIONING, UPGRADING AND/OR CHANGING OF HARDWARE 审中-公开
标题翻译：提供，升级和/或更换硬件
公开(公告)号：WO2011081890A3
公开(公告)日：2011-11-03
申请号：PCT/US2010060115
申请日：2010-12-13
申请人： INTEL CORP , MARTINEZ ALBERTO J , STEVENS WILLIAM A , GOEL PURUSHOTTAM , BRICKELL ERNIE
发明人： MARTINEZ ALBERTO J , STEVENS WILLIAM A , GOEL PURUSHOTTAM , BRICKELL ERNIE
IPC分类号： G06F21/20 , G06F9/44 , G06F13/14 , G06F15/16
CPC分类号： H04L63/08 , G06F21/57 , H04L9/3249 , H04L63/06 , H04L2209/56
摘要： In some embodiments a secure permit request to change a hardware configuration is created. The secure permit request is sent to a remote location, and a permit sent from the remote location in response to the permit request is received. The hardware configuration is changed in response to the received permit. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，创建用于改变硬件配置的安全许可请求。安全许可请求被发送到远程位置，并且接收响应于许可请求从远程位置发送的许可。响应收到的许可证，硬件配置发生变化。描述并要求保护其他实施例。

4. 发明申请

WO2011084210A2 PROVIDING INTEGRITY VERIFICATION AND ATTESTATION IN A HIDDEN EXECUTION ENVIRONMENT 审中-公开
标题翻译：在隐藏执行环境中提供完整性验证和证明
公开(公告)号：WO2011084210A2
公开(公告)日：2011-07-14
申请号：PCT/US2010/054312
申请日：2010-10-27
申请人： INTEL CORPORATION , SMITH, Ned , SHANBHOGUE, Vedvyas , KUMAR, Arvind , GOEL, Purushottam
发明人： SMITH, Ned , SHANBHOGUE, Vedvyas , KUMAR, Arvind , GOEL, Purushottam
IPC分类号： G06F21/22 , G06F9/06
CPC分类号： G06F21/554 , G06F21/44 , G06F21/57 , G06F21/64
摘要： In one embodiment, a processor includes a microcode storage including processor instructions to create and execute a hidden resource manager (HRM) to execute in a hidden environment that is not visible to system software. The processor may further include an extend register to store security information including a measurement of at least one kernel code module of the hidden environment and a status of a verification of the at least one kernel code module. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，处理器包括微码存储器，微码存储器包括处理器指令以创建和执行隐藏资源管理器（HRM）以在系统软件不可见的隐藏环境中执行。处理器还可以包括扩展寄存器以存储包括隐藏环境的至少一个内核代码模块的测量结果和至少一个内核代码模块的验证状态的安全信息。描述并要求保护其他实施例。

5. 发明申请

WO2010078143A3 PROCESSOR EXTENSIONS FOR EXECUTION OF SECURE EMBEDDED CONTAINERS 审中-公开
公开(公告)号：WO2010078143A3
公开(公告)日：2010-07-08
申请号：PCT/US2009/069136
申请日：2009-12-22
申请人： INTEL CORPORATION , SHANBHOGUE, Vedvyas , KUMAR, Arvind , GOEL, Purushottam
发明人： SHANBHOGUE, Vedvyas , KUMAR, Arvind , GOEL, Purushottam
IPC分类号： G06F15/16 , G06F9/28 , G06F9/50
摘要： Methods and apparatus relating to processor extensions for execution of secure embedded containers are described. In an embodiment, a scalable solution for manageability function is provided, e.g., for UMPC environments or otherwise where utilizing a dedicated processor or microcontroller for manageability is inappropriate or impractical. For example, in an embodiment, an OS (Operating System) or VMM (Virtual Machine Manager) Independent (generally referred to herein as "OI") architecture involves creating one or more containers on a processor by dynamically partitioning resources (such as processor cycles, memory, devices) between the HOST OS/VMM and the OI container. Other embodiments are also described and claimed.

6. 发明申请

WO2014099688A1 HARDWARE-BASED DEVICE AUTHENTICATION 审中-公开
标题翻译：基于硬件的设备认证
公开(公告)号：WO2014099688A1
公开(公告)日：2014-06-26
申请号：PCT/US2013/075225
申请日：2013-12-15
申请人： MCAFEE, INC. , VON BOKERN, Vincent, Edward , GOEL, Purushottam , SCHRECKER, Sven , SMITH, Ned, Mcarthur
发明人： VON BOKERN, Vincent, Edward , GOEL, Purushottam , SCHRECKER, Sven , SMITH, Ned, Mcarthur
IPC分类号： G06F21/30 , G06F17/00
CPC分类号： H04L63/0838 , G06F21/305 , G06F21/44 , H04L9/0877 , H04L9/3226 , H04L9/3234 , H04L63/0876 , H04L63/102 , H04L63/20 , H04L67/141
摘要： An opportunity for a computing device to participate in a secure session with a particular domain is identified. A secured microcontroller of the computing device is used to identify a secured, persistent seed corresponding to the particular domain and stored in secured memory of the computing device. A secure identifier is derived based on the seed and sent for use by the particular domain in authenticating the computing device to the particular domain for the secure session. The particular domain can further apply security policies to transactions involving the computing device and particular domain based at least in part on the secure identifier.
摘要翻译：识别计算设备参与与特定域的安全会话的机会。计算设备的安全微控制器用于识别对应于特定域并且存储在计算设备的安全存储器中的安全的持久种子。基于种子导出安全标识符，并将其发送供特定域用于将计算设备认证到用于安全会话的特定域。所述特定域可以至少部分地基于所述安全标识符来进一步对涉及所述计算设备和特定域的事务应用安全策略。

7. 发明申请

WO2011084210A3 PROVIDING INTEGRITY VERIFICATION AND ATTESTATION IN A HIDDEN EXECUTION ENVIRONMENT 审中-公开
标题翻译：提供隐私执行环境中的完整性验证和验证
公开(公告)号：WO2011084210A3
公开(公告)日：2011-09-09
申请号：PCT/US2010054312
申请日：2010-10-27
申请人： INTEL CORP , SMITH NED , SHANBHOGUE VEDVYAS , KUMAR ARVIND , GOEL PURUSHOTTAM
发明人： SMITH NED , SHANBHOGUE VEDVYAS , KUMAR ARVIND , GOEL PURUSHOTTAM
IPC分类号： G06F21/22 , G06F9/06
CPC分类号： G06F21/554 , G06F21/44 , G06F21/57 , G06F21/64
摘要： In one embodiment, a processor includes a microcode storage including processor instructions to create and execute a hidden resource manager (HRM) to execute in a hidden environment that is not visible to system software. The processor may further include an extend register to store security information including a measurement of at least one kernel code module of the hidden environment and a status of a verification of the at least one kernel code module. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，处理器包括微代码存储器，其包括处理器指令，用于创建和执行在系统软件不可见的隐藏环境中执行的隐藏资源管理器（HRM）。处理器还可以包括扩展寄存器，用于存储包括隐藏环境的至少一个内核代码模块的测量值和至少一个内核代码模块的验证状态的安全信息。描述和要求保护其他实施例。

8. 发明申请

WO2010078143A2 PROCESSOR EXTENSIONS FOR EXECUTION OF SECURE EMBEDDED CONTAINERS 审中-公开
标题翻译：用于执行安全嵌入式容器的处理器扩展
公开(公告)号：WO2010078143A2
公开(公告)日：2010-07-08
申请号：PCT/US2009069136
申请日：2009-12-22
申请人： INTEL CORP , SHANBHOGUE VEDVYAS , KUMAR ARVIND , GOEL PURUSHOTTAM
发明人： SHANBHOGUE VEDVYAS , KUMAR ARVIND , GOEL PURUSHOTTAM
IPC分类号： G06F15/16 , G06F9/28 , G06F9/50
CPC分类号： G06F12/1408 , G06F9/45558 , G06F9/4812 , G06F9/5077 , G06F2009/45579 , G06F2212/1052 , H04L9/14 , H04L9/3242 , H04L63/168 , H04L2209/24 , Y02D10/22 , Y02D10/24 , Y02D10/36
摘要： Methods and apparatus relating to processor extensions for execution of secure embedded containers are described. In an embodiment, a scalable solution for manageability function is provided, e.g., for UMPC environments or otherwise where utilizing a dedicated processor or microcontroller for manageability is inappropriate or impractical. For example, in an embodiment, an OS (Operating System) or VMM (Virtual Machine Manager) Independent (generally referred to herein as "OI") architecture involves creating one or more containers on a processor by dynamically partitioning resources (such as processor cycles, memory, devices) between the HOST OS/VMM and the OI container. Other embodiments are also described and claimed.
摘要翻译：描述了与用于执行安全嵌入式容器的处理器扩展相关的方法和设备。在一个实施例中，提供了用于可管理性功能的可扩展解决方案，例如，用于UMPC环境或以其他方式利用专用处理器或微控制器进行可管理性不适当或不切实际的情况。例如，在一个实施例中，OS（操作系统）或VMM（虚拟机管理器）独立（在本文中通常称为“OI”）体系结构涉及通过动态地分配资源（例如处理器周期）来在处理器上创建一个或多个容器，内存，设备）在主机OS / VMM和OI容器之间。其他实施例也被描述和要求保护。

9. 发明申请

WO2014099690A1 HARDWARE MANAGEMENT INTERFACE 审中-公开
标题翻译：硬件管理界面
公开(公告)号：WO2014099690A1
公开(公告)日：2014-06-26
申请号：PCT/US2013/075227
申请日：2013-12-15
申请人： MCAFEE, INC. , VON BOKERN, Vincent, Edward , GOEL, Purushottam , SCHRECKER, Sven
发明人： VON BOKERN, Vincent, Edward , GOEL, Purushottam , SCHRECKER, Sven
IPC分类号： G06F21/50 , G06F15/16
CPC分类号： G06F9/4411 , G06F21/305
摘要： A management controller of a computing device is identified, the first management controller implemented in hardware of the first computing device and independent of a central processing unit (CPU) of the computing device. The management controller is queried for attributes of the computing device. Data is received from the management controller identifying one or more attributes of the computing device and a device drive is identified for the computing device. Communication is facilitated with the computing device using the device driver. In some instances, an inter-device operation is identified involving the computing device and at least one other computing device. The exchange of messages in the operation can be facilitated, for instance, by translating a message from the computing device for use by the other computing device involved in the operation.
摘要翻译：识别计算设备的管理控制器，第一管理控制器以第一计算设备的硬件实现，并且独立于计算设备的中央处理单元（CPU）。查询管理控制器的计算设备的属性。从管理控制器接收识别计算设备的一个或多个属性的数据，并为该计算设备识别设备驱动器。使用设备驱动程序的计算设备便于沟通。在一些情况下，识别涉及计算设备和至少一个其他计算设备的设备间操作。例如，可以通过翻译来自计算设备的消息以供在该操作中涉及的其他计算设备使用，可以促进操作中的消息交换。

10. 发明申请

WO2014099687A1 HARDWARE-BASED DEVICE AUTHENTICATION 审中-公开
标题翻译：基于硬件的设备认证
公开(公告)号：WO2014099687A1
公开(公告)日：2014-06-26
申请号：PCT/US2013/075224
申请日：2013-12-15
申请人： MCAFEE, INC. , VON BOKERN, Vincent, Edward , GOEL, Purushottam , SCHRECKER, Sven , SMITH, Ned, Mcarthur
发明人： VON BOKERN, Vincent, Edward , GOEL, Purushottam , SCHRECKER, Sven , SMITH, Ned, Mcarthur
IPC分类号： G06F21/30 , G06F17/00
CPC分类号： G06F21/44 , G06F17/3033 , G06F21/305 , H04L9/0877 , H04L9/3226 , H04L9/3234 , H04L63/0876 , H04L63/102 , H04L63/107 , H04L63/20
摘要： An opportunity for a computing device to participate in a secure session with a particular domain is identified. A domain identifier of the particular domain is received and a secured microcontroller of the computing device is used to identify a secured, persistent hardware identifier of the computing device stored in secured memory of the computing device. A secure identifier is derived for a pairing of the computing device and the particular domain based on the hardware identifier and domain identifier of the particular domain and the secure identifier is transmitted over a secured channel to the particular domain. The particular domain can verify identity of the computing device from the secure identifier and apply security policies to transactions involving the computing device and the particular domain based at least in part on the secure identifier.
摘要翻译：识别计算设备参与与特定域的安全会话的机会。接收特定域的域标识符，并且使用计算设备的安全微控制器来识别存储在计算设备的安全存储器中的计算设备的安全的持久硬件标识符。基于特定域的硬件标识符和域标识符，导出计算设备和特定域的配对的安全标识符，并且安全标识符通过安全信道发送到特定域。特定域可以从安全标识符中验证计算设备的身份，并且至少部分地基于安全标识符将安全策略应用于涉及计算设备和特定域的交易。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式