专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2003003689A2 DYNAMIC CONFIGURATION OF IPSEC TUNNELS 审中-公开
标题翻译： IPSEC隧道的动态配置
公开(公告)号：WO2003003689A2
公开(公告)日：2003-01-09
申请号：PCT/US2002/017134
申请日：2002-05-30
申请人： INTEL CORPORATION
发明人： GREWAL, Karanvir , GEORGESCU, Cristina
IPC分类号： H04L29/00
CPC分类号： H04L63/164 , H04L63/0272 , H04L63/0823 , H04L63/205 , H04L69/24
摘要： A method and system for dynamically configuring a tunnel is presented. A client initiates a negotiation with a gateway. The gateway sends information to the client. The client extracts a security configuration from the information. Using the security configuration, a tunnel is established between the client and the gateway so that secure communication may occur.
摘要翻译：给出了用于动态配置隧道的方法和系统。客户端启动与网关的协商。网关将信息发送给客户端。客户端从信息中提取安全配置。使用安全配置，在客户端和网关之间建立隧道，以便可能发生安全通信。

2. 发明申请

WO2018013275A1 SYSTEM, APPARATUS AND METHOD FOR SECURE MONOTONIC COUNTER OPERATIONS IN A PROCESSOR 审中-公开
标题翻译：在处理器中用于安全的单调计数器操作的系统，装置和方法
公开(公告)号：WO2018013275A1
公开(公告)日：2018-01-18
申请号：PCT/US2017/037136
申请日：2017-06-13
申请人： INTEL CORPORATION
发明人： DEWAN, Prashant , CHHABRA, Siddhartha , DURHAM, David M. , GREWAL, Karanvir , NARENDRA TRIVEDI, Alpa T.
IPC分类号： G06F21/78 , G06F21/60 , G06F21/30
摘要： In one embodiment, an apparatus includes: at least one core to execute instructions, the at least one core formed on a semiconductor die; a first memory formed on the semiconductor die, the first memory comprising a non-volatile random access memory, the first memory to store a first entry to be a monotonic counter, the first entry including a value field and a status field; and a control circuit, wherein the control circuit is to enable access to the first entry if the apparatus is in a secure mode and otherwise prevent the access to the first entry. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，一种装置包括：至少一个内核以执行指令，所述至少一个内核形成在半导体管芯上; 形成在所述半导体管芯上的第一存储器，所述第一存储器包括非易失性随机存取存储器，所述第一存储器存储第一条目为单调计数器，所述第一条目包括值字段和状态字段; 以及控制电路，其中如果所述装置处于安全模式，则所述控制电路能够访问所述第一条目，并且否则阻止访问所述第一条目。描述并要求保护其他实施例。

3. 发明申请

WO2007002875A1 METHODS, APPARATUSES, AND SYSTEMS FOR THE DYNAMIC EVALUATION AND DELEGATION OF NETWORK ACCESS CONTROL 审中-公开
标题翻译：动态评估和网络访问控制代码的方法，设备和系统
公开(公告)号：WO2007002875A1
公开(公告)日：2007-01-04
申请号：PCT/US2006/025478
申请日：2006-06-29
申请人： INTEL CORPORATION , SMITH, Ned, M. , HERBERT, Howard, C. , GREWAL, Karanvir
发明人： SMITH, Ned, M. , HERBERT, Howard, C. , GREWAL, Karanvir
IPC分类号： H04L29/06 , H04L12/24
CPC分类号： H04L63/20 , H04L63/105 , H04L63/1408
摘要： Embodiments of the inventions are generally directed to methods, apparatuses, and systems for the dynamic evaluation and delegation of network access control. In an embodiment, a platform includes a switch to control a network connection and an endpoint enforcement engine coupled with the switch. The endpoint enforcement engine may be capable of dynamically switching among a number of network access control modes responsive to an instruction received from the network connection.
摘要翻译：本发明的实施例一般涉及用于动态评估和授权网络访问控制的方法，装置和系统。在一个实施例中，平台包括用于控制网络连接的开关和与开关耦合的端点执行引擎。端点执行引擎可以响应于从网络连接接收的指令而能够在多个网络访问控制模式之间动态切换。

4. 发明申请

WO2017112337A1 SYSTEM AND METHOD FOR ENABLING SECURE MEMORY TRANSACTIONS USING ENCLAVES 审中-公开
标题翻译：用于使用ENCLAVES来启用安全存储器事务的系统和方法
公开(公告)号：WO2017112337A1
公开(公告)日：2017-06-29
申请号：PCT/US2016/063764
申请日：2016-11-25
申请人： INTEL CORPORATION
发明人： NARENDRA TRIVEDI, Alpa , SAHITA, Ravi , DURHAM, David , GREWAL, Karanvir , DEWAN, Prashant , CHHABRA, Siddhartha
IPC分类号： G06F21/50 , G06F21/78
CPC分类号： G06F21/53 , G06F9/5077 , G06F9/544 , G06F12/1009 , G06F12/1081 , G06F13/28 , G06F21/606 , G06F21/6218 , G06F2212/1052 , G06F2212/152 , G06F2212/251 , G06F2213/28 , G06F2221/034
摘要： Various embodiments are generally directed to an apparatus, method, and other techniques to provide direct-memory access, memory-mapped input-output, and/or other memory transactions between devices designated for use by an enclave and the enclave itself. A secure device address map may be configured to map addresses for the enslave device and the enclave, and a register filter component may grant access to the enclave device to the enclave.
摘要翻译：各种实施例通常涉及用于在指定供飞地使用的设备之间提供直接存储器访问，存储器映射的输入输出和/或其它存储器事务的设备，方法和其他技术和飞地本身。安全设备地址映射可以被配置为映射奴役设备和飞地的地址，并且寄存器过滤器组件可以授予飞地设备对飞地的访问。

5. 发明申请

WO2007117939A1 HIERARCHICAL TRUST BASED POSTURE REPORTING AND POLICY ENFORCEMENT 审中-公开
标题翻译：基于信息的信托基础报告和政策执行
公开(公告)号：WO2007117939A1
公开(公告)日：2007-10-18
申请号：PCT/US2007/064699
申请日：2007-03-22
申请人： INTEL CORPORATION , KHOSRAVI, Hormuzd , DURHAM, David , GREWAL, Karanvir
发明人： KHOSRAVI, Hormuzd , DURHAM, David , GREWAL, Karanvir
IPC分类号： H04L12/22
CPC分类号： H04L63/0227
摘要： A method that includes initiating a network access request from an access requester on a platform that couples to a network, the network access request made to a policy decision point for the network. The method also includes establishing a secure communication channel over a communication link between the policy decision point and a policy enforcement point on the platform. Another secure communication channel is established over another communication link. The other communication link is between at least the policy enforcement point and a manageability engine resident on the platform. The manageability engine forwards posture information associated with the access requester via the other secure communication channel. The posture information is then forwarded to the policy decision point via the secure communication channel between the policy enforcement point and the policy decision point. The policy decision point indicates what access the access requester can obtain to the network based on a comparison of the posture information to one or more network administrative policies.
摘要翻译：一种方法，其包括从耦合到网络的平台上的访问请求者发起网络访问请求，所述网络访问请求对所述网络的策略决策点进行。该方法还包括在策略决策点和平台上的策略执行点之间的通信链路上建立安全通信信道。通过另一个通信链路建立另一个安全通信信道。另一个通信链路至少在平台上驻留的策略执行点和可管理引擎之间。可管理性引擎经由另一个安全通信信道转发与访问请求者相关联的姿势信息。然后，姿态信息经由策略执行点和策略决策点之间的安全通信信道被转发到策略决策点。策略决策点基于姿势信息与一个或多个网络管理策略的比较来指示访问请求者可以获得哪些访问到网络。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式