专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2014158605A1 POLICY-BASED SECURE WEB BOOT 审中-公开
标题翻译：基于策略的安全WEB引导
公开(公告)号：WO2014158605A1
公开(公告)日：2014-10-02
申请号：PCT/US2014/018670
申请日：2014-02-26
申请人： INTEL CORPORATION , COCKRELL, Brian , GAUTHIER, Jacob J. , YAO, Jiewen , ZIMMER, Vincent J. , AMAYA, Elmer A.
发明人： COCKRELL, Brian , GAUTHIER, Jacob J. , YAO, Jiewen , ZIMMER, Vincent J. , AMAYA, Elmer A.
IPC分类号： G06F21/00 , G06F9/44 , G06F15/16
CPC分类号： H04L63/20 , G06F9/4408 , G06F9/4416 , G06F21/575 , H04L63/0823 , H04L67/02 , H04L67/125
摘要： A system, device, and method for providing policy-based secure cloud booting include a mobile computing device and a web server. The mobile computing device determines a remote boot address specifying the location of a boot resource on the web server. The mobile computing device opens a secure connection to the web server and maps the boot resource to a local firmware protocol. The mobile computing device executes the boot resource as a firmware image using the local firmware protocol. The boot resource may be a compact disc or DVD image mapped through a block I/O protocol. The boot resource may be a remote file system mapped through a file system protocol. The remote boot address may be configured using a manageability engine capable of out-of-band communication. The remote boot address may be determined based on the context of the mobile computing device, including location. Other embodiments are described and claimed.
摘要翻译：用于提供基于策略的安全云引导的系统，设备和方法包括移动计算设备和web服务器。移动计算设备确定指定web服务器上的引导资源的位置的远程引导地址。移动计算设备打开与Web服务器的安全连接，并将引导资源映射到本地固件协议。移动计算设备使用本地固件协议来执行作为固件映像的引导资源。引导资源可以是通过块I / O协议映射的光盘或DVD映像。引导资源可以是通过文件系统协议映射的远程文件系统。可以使用能够进行带外通信的可管理引擎来配置远程引导地址。可以基于移动计算设备的上下文（包括位置）来确定远程启动地址。描述和要求保护其他实施例。

2. 发明申请

WO2014139162A1 SECURITY CO-PROCESSOR BOOT PERFORMANCE 审中-公开
标题翻译：安全联合处理器引擎性能
公开(公告)号：WO2014139162A1
公开(公告)日：2014-09-18
申请号：PCT/CN2013/072732
申请日：2013-03-15
申请人： INTEL CORPORATION , DONG, Guo , YAO, Jiewen , ZIMMER, Vincent J. , ROTHMAN, Michael A.
发明人： DONG, Guo , YAO, Jiewen , ZIMMER, Vincent J. , ROTHMAN, Michael A.
IPC分类号： G06F21/00
CPC分类号： G06F21/575 , G06F9/4401 , G06F21/71 , G06F2221/034 , G09C1/00 , H04L2209/127
摘要： Technologies for improving platform initialization on a computing device include beginning initialization of a platform of the computing device using a basic input/output system (BIOS) of the computing device. A security co-processor driver module adds a security co-processor command to a command list when a security processor command is received from the BIOS module. The computing device establishes a periodic interrupt of the initialization of the platform to query the security co-processor regarding the availability of a response to a previously submitted security co-processor command, forward any responses received by the security co-processor driver module to the BIOS module, and submit the next security co-processor command in the command list to the security co-processor.
摘要翻译：用于在计算设备上改进平台初始化的技术包括使用计算设备的基本输入/输出系统（BIOS）开始初始化计算设备的平台。当从BIOS模块接收到安全处理器命令时，安全协处理器驱动程序模块将一个安全协处理器命令添加到命令列表中。计算设备建立平台的初始化的周期性中断，以向安全协处理器询问关于先前提交的安全协处理器命令的响应的可用性，将由安全协处理器驱动器模块接收的任何响应转发到 BIOS模块，并将命令列表中的下一个安全协处理器命令提交给安全协处理器。

3. 发明申请

WO2014047798A1 METHODS AND APPARATUS FOR DISPLAYING VIDEO DESPITE A NONFUNCTIONAL OPERATING SYSTEM 审中-公开
标题翻译：显示屏幕非功能操作系统的方法和装置
公开(公告)号：WO2014047798A1
公开(公告)日：2014-04-03
申请号：PCT/CN2012/081989
申请日：2012-09-26
申请人： INTEL CORPORATION , OUYANG, Qian , CONG, Yang , YAO, Jiewen , ZIMMER, Vincent J.
发明人： OUYANG, Qian , CONG, Yang , YAO, Jiewen , ZIMMER, Vincent J.
IPC分类号： G06F13/38
CPC分类号： H04N5/44 , H04L12/1827 , H04N21/41415 , H04N21/443 , H04N21/488 , H04N21/812
摘要： A first video messaging service, running on top of an operating system in a data processing system, automatically presents a first video message. After using the first video messaging service to present the first video message, the data processing system automatically determines whether the first video messaging service has become nonfunctional. In response to determining that the first video messaging service has become nonfunctional, the data processing system automatically uses a backup video messaging service to present a second video message. The backup video messaging service operates in a boot environment. In one embodiment, the data processing system is configured to provide digital signage, the first video messaging service presents content for the digital signage when the operating system is operational, and the second video messaging service presents content for the digital signage when the operating system is nonfunctional. Other embodiments are described and claimed.
摘要翻译：在数据处理系统中的操作系统之上运行的第一视频消息服务自动呈现第一视频消息。在使用第一视频消息服务呈现第一视频消息之后，数据处理系统自动地确定第一视频消息服务是否已经变得不起作用。为了响应于确定第一视频消息收发服务变得不起作用，数据处理系统自动使用备份视频消息服务来呈现第二视频消息。备份视频消息服务在引导环境中运行。在一个实施例中，数据处理系统被配置为提供数字标牌，当操作系统可操作时，第一视频消息收发服务呈现用于数字标牌的内容，并且当操作系统为非功能性。描述和要求保护其他实施例。

4. 发明申请

WO2018165981A1 TECHNOLOGIES FOR FAST UNMANNED AERIAL VEHICLE STATE MIGRATION USING A TRUSTED EXECUTION ENVIRONMENT 审中-公开
公开(公告)号：WO2018165981A1
公开(公告)日：2018-09-20
申请号：PCT/CN2017/077113
申请日：2017-03-17
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , POORNACHANDRAN, Rajesh
发明人： YAO, Jiewen , ZIMMER, Vincent J. , POORNACHANDRAN, Rajesh
IPC分类号： H04L29/06
CPC分类号： H04L67/12 , B64C39/024 , B64C2201/141 , G08G5/0056 , G08G5/0069 , H04L69/40
摘要： Technologies for control of an unmanned aerial vehicle (UAV) include a UAV including a computing device having a processor and a trusted execution environment (TEE). The TEE may be executed by a converged security and manageability engine (CSME) of the computing device. The TEE determines whether to take control of the UAV from an operating system, for example in response to a watchdog reset event. In response to taking control, the TEE controls navigation of the UAV and the operating system is booted. The TEE may control the UAV based on a navigation plan from the operating system or a default control policy. The operating system sends a message requesting control of the UAV in response to booting, and then resumes control of the UAV. The operating system may control navigation of the UAV based on abstracted sensor data received from the TEE. Other embodiments are described and claimed.

5. 发明申请

WO2017166264A1 APPARATUSES AND METHODS FOR PREBOOT VOICE AUTHENTICATION 审中-公开
标题翻译：用于事前声音认证的装置和方法
公开(公告)号：WO2017166264A1
公开(公告)日：2017-10-05
申请号：PCT/CN2016/078253
申请日：2016-04-01
申请人： INTEL CORPORATION , YAO, Jiewen Jacques , ZIMMER, Vincent J. , HOPKINS, Roy , WEBB, David , OUYANG, Qian , WU, Hao
发明人： YAO, Jiewen Jacques , ZIMMER, Vincent J. , HOPKINS, Roy , WEBB, David , OUYANG, Qian , WU, Hao
IPC分类号： G06F21/57 , G06F21/32
摘要： Apparatuses and methods for preboot voice authentication are described herein. An example system for voice boot authentication during preboot may include a preboot manager to call an audio input protocol. The preboot manager further to receive voice data from an audio communication platform. In response to a determination that voice sample data matches voice fingerprint data the preboot manager to receive a policy based on the voice fingerprint data. The policy specifies an operating system to load. The example system further including a voice recognition module to receive the voice data from the preboot manager and to parse the voice data to retrieve the voice sample data. The voice recognition module further to determine whether the voice sample data matches the voice fingerprint data.
摘要翻译：这里描述了用于预引导语音认证的设备和方法。预引导期间的语音引导认证的示例系统可以包括预引导管理器以调用音频输入协议。预启动管理器进一步从音频通信平台接收语音数据。响应于确定语音采样数据与语音指纹数据匹配，预启动管理器基于语音指纹数据来接收策略。该策略指定要加载的操作系统。该示例系统还包括语音识别模块，以从预启动管理器接收语音数据并解析语音数据以检索语音样本数据。语音识别模块进一步确定语音样本数据是否匹配语音指纹数据。

6. 发明申请

WO2015196347A1 FIRMWARE SENSOR LAYER 审中-公开
标题翻译：固件传感器层
公开(公告)号：WO2015196347A1
公开(公告)日：2015-12-30
申请号：PCT/CN2014/080587
申请日：2014-06-24
申请人： INTEL CORPORATION , HANEBUTTE, Ulf R. , YAO, Jiewen , ZIMMER, Vincent J.
发明人： HANEBUTTE, Ulf R. , YAO, Jiewen , ZIMMER, Vincent J.
IPC分类号： G06F15/177
CPC分类号： G06F9/4401 , G06F21/575 , G06F21/62
摘要： Computing devices,computer-readable storage media,and methods associated with providing an operating system (OS)-absent firmware sensor layer to support a boot process are disclosed herein.In embodiments, acomputing device may include a processor and firmware to be operated on the processor. The firmware may include one or more modules and a sensor layer. The sensor layer may be configured to receive,in the OS-absent environment,sensor data produced by a plurality of sensors. The sensor layer may be further configured to selectively provide the sensor data to the one or more modules via an interface of the sensor layer that abstracts the plurality of sensors. Other embodiments may be described and/or claimed.
摘要翻译：本文公开了计算设备，计算机可读存储介质和与提供操作系统（OS）的固件传感器层相关联以支持引导过程的方法。在实施例中，计算设备可以包括处理器和要在处理器。固件可以包括一个或多个模块和传感器层。传感器层可以被配置为在不存在OS的环境中接收由多个传感器产生的传感器数据。传感器层可以被进一步配置成经由传感器层的接口抽取多个传感器来选择性地将传感器数据提供给一个或多个模块。可以描述和/或要求保护其他实施例。

7. 发明申请

WO2015048922A1 TRUSTED BOOT AND RUNTIME OPERATION 审中-公开
标题翻译： TRUSTED BOOT和RUNTIME操作
公开(公告)号：WO2015048922A1
公开(公告)日：2015-04-09
申请号：PCT/CN2013/084806
申请日：2013-10-02
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , ADAMS, Nicholas J. , WISEMAN, Willard M. , LONG, Qin , LI, Shihui
发明人： YAO, Jiewen , ZIMMER, Vincent J. , ADAMS, Nicholas J. , WISEMAN, Willard M. , LONG, Qin , LI, Shihui
IPC分类号： G06F9/445
CPC分类号： G06F21/575 , G06F9/4403 , G06F21/72
摘要： An embodiment includes an apparatus comprising: an out-of-band cryptoprocess or including secure non- volatile storage that couples to a root index, having a fixed address, and comprises first and second variables referenced by the root index; and semiconductor integrated code (SIC) including embedded processor logic to initialize a processor and embedded memory logic to initialize a memory coupled to the processor; wherein (a) the SIC is to be executed responsive to resetting the processor and prior to providing control to boot code, and (b) the SIC is to perform pre-boot operations in response to accessing at least one of the first and second variables. Other embodiments are described herein.
摘要翻译：一个实施例包括一种装置，包括：带外密码过滤或包括耦合到具有固定地址的根索引的安全非易失性存储器，并且包括由根索引引用的第一和第二变量; 以及包括用于初始化处理器和嵌入式存储器逻辑的嵌入式处理器逻辑以初始化耦合到所述处理器的存储器的半导体集成代码（SIC）; 其中（a）响应于重置所述处理器并且在向引导代码提供控制之前响应于所述SIC执行所述SIC，以及（b）所述SIC响应于访问所述第一和第二变量中的至少一个来执行预引导操作。本文描述了其它实施例。

8. 发明申请

WO2019119408A1 MANAGEABILITY ENGINE AND AUTOMATIC FIRMWARE VALIDATION 审中-公开
公开(公告)号：WO2019119408A1
公开(公告)日：2019-06-27
申请号：PCT/CN2017/117970
申请日：2017-12-22
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J.
发明人： YAO, Jiewen , ZIMMER, Vincent J.
IPC分类号： G06F9/445
摘要： Malicious attacks have moved from higher level virus attacks on software and data files operating on a device, to subverting the firmware underlying the device, where the firmware will compromise operation of the device even after attempts to remove the virus, unwanted programs, or other activity due to the subversion. If the firmware is compromised then even a clean reinstall of all software and/or services on the device may only result in a clean device that is then subsequently compromised again. Although device manufacturers may update a firmware to remove the vulnerability, there remains a problem in getting users to actually perform the update. To facilitate device security, a database or databases of firmware may be maintained where their status of vulnerable (bad) or not (good) is maintained and various options are presented for scanning firmware for vulnerabilities, out of band or manually, and pulling/pushing updates as desired to automatically update a device or prompt a user for updating. Updates may be mandatory per a policy and/or controlled by user preference. Looking for vulnerabilities may be device driven, or managed by an external entity. As new vulnerabilities are discovered, existing firmware may be checked for the vulnerability, and if found, devices having vulnerable firmware may be updated. New firmware may be recorded in the database (s) and the database (s) periodically scanned for vulnerabilities.

9. 发明申请

WO2017107122A1 TECHNIQUES FOR COORDINATING DEVICE BOOT SECURITY 审中-公开
标题翻译：协调设备引导安全的技术
公开(公告)号：WO2017107122A1
公开(公告)日：2017-06-29
申请号：PCT/CN2015/098651
申请日：2015-12-24
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , LI, Wei , POORNACHANDRAN, Rajesh , MUDUSURU, Giri P.
发明人： YAO, Jiewen , ZIMMER, Vincent J. , LI, Wei , POORNACHANDRAN, Rajesh , MUDUSURU, Giri P.
IPC分类号： G06F21/57
CPC分类号： G06F21/57 , G06F21/575
摘要： Techniques for providing and maintaining protection of firmware routines that form part of a chain of trust through successive processing environments. An apparatus may include a first processor component (550); a volatile storage (562) coupled to the first processor component; an enclave component to, in a pre-OS operating environment, generate a secure enclave within a portion of the volatile storage to restrict access to a secured firmware loaded into the secure enclave; a first firmware driver (646) to, in the pre-OS operating environment, provide a first API to enable unsecured firmware to call a support routine of the secured firmware from outside the secure enclave; and a second firmware driver (647) to, in an OS operating environment that replaces the pre-OS operating environment, provide a second API to enable an OS of the OS operating environment to call the support routine from outside the secure enclave.
摘要翻译：通过连续处理环境提供并维护构成信任链一部分的固件例程的保护技术。一种装置可以包括第一处理器组件（550）; 耦合到第一处理器组件的易失性存储器（562）用于在OS前操作环境中在易失性存储器的一部分内生成安全区域以限制对加载到安全区域中的安全固件的访问的区域组件; 第一固件驱动程序（646），用于在OS前操作环境中提供第一API以使得不安全固件能够从安全区域外部调用安全固件的支持例程; 以及第二固件驱动程序（647），用于在替换操作系统前操作环境的操作系统操作环境中提供第二API以使操作系统操作环境的操作系统能够从安全飞地外调用支持例程。 p>

10. 发明申请

WO2015196381A1 HARDWARE CONFIGURATION REPORTING SYSTEMS 审中-公开
标题翻译：硬件配置报告系统
公开(公告)号：WO2015196381A1
公开(公告)日：2015-12-30
申请号：PCT/CN2014/080689
申请日：2014-06-25
申请人： INTEL CORPORATION , YAO, Jiewen , ZIMMER, Vincent J. , PAYNE, Brian S. , ADAMS, Nicholas J.
发明人： YAO, Jiewen , ZIMMER, Vincent J. , PAYNE, Brian S. , ADAMS, Nicholas J.
IPC分类号： G06F21/53
CPC分类号： G06F21/577 , G06F8/65 , G06F9/4401 , G06F9/4411 , G06F9/445 , G06F21/53
摘要： Embodiments related to hardware configuration reporting and arbitration are disclosed herein. For example, an apparatus for hardware configuration reporting may include: a processing device having a trusted execution environment (TEE) and a non-trusted execution environment (non-TEE); request service logic, stored in the memory, to operate within the TEE to receive an indication of a request from arbiter logic, wherein the request represents a hardware configuration register; and reporting logic, stored in the memory, to operate within the TEE and to report an indicator of a value of the hardware configuration register represented by the request to the arbiter logic. Other embodiments may be disclosed and/or claimed.
摘要翻译：本文公开了与硬件配置报告和仲裁相关的实施例。例如，用于硬件配置报告的装置可以包括：具有可信执行环境（TEE）和非可信执行环境（非TEE）的处理设备; 请求服务逻辑，存储在存储器中，以在TEE内操作以接收来自仲裁器逻辑的请求的指示，其中该请求表示硬件配置寄存器; 和存储在存储器中的报告逻辑，以在TEE内操作，并将由请求表示的硬件配置寄存器的值的指示符报告给仲裁器逻辑。可以公开和/或要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式