专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2013081441A1 A SYSTEM AND METHOD FOR ESTABLISHING MUTUAL REMOTE ATTESTATION IN INTERNET PROTOCOL SECURITY (IPSEC) BASED VIRTUAL PRIVATE NETWORK (VPN) 审中-公开
标题翻译：一种用于建立基于互联网协议安全（IPSEC）的虚拟私有网络（VPN）中的互联远程监控的系统和方法
公开(公告)号：WO2013081441A1
公开(公告)日：2013-06-06
申请号：PCT/MY2012/000160
申请日：2012-06-28
申请人： MIMOS BERHAD , NORAZAH, Abd, Aziz , SHARIPAH, Setapa , MOHD, Aminudin, Mohd, Khalid , KILAUSURIA, Abdullah
发明人： NORAZAH, Abd, Aziz , SHARIPAH, Setapa , MOHD, Aminudin, Mohd, Khalid , KILAUSURIA, Abdullah
IPC分类号： H04L29/06 , G06F21/00
CPC分类号： H04L63/0823 , H04L63/164
摘要： The system and method of the present invention proposes an extension to the IPSec key exchange protocol by establishing properties-based attestation using key management service. The present invention protects integrity between network encryptor of sender-receiver/gateway to gateway platform machine by measuring properties which bundles with IPSec based VPN network. The system of the present invention comprising at least one sender and receiver platform; IPsec components extension; a plurality of properties of remote attestation modules (600); at least one signer mechanism (602); and at least one TPM (604). The methodology of the present invention establishes mutual remote attestation in IPSec based VPN by obtaining at least one key management service (KeyMS) measurement value to configure each KeyMS in VPN (102); establishing attestation in KeyMS session (104); signing Encapsulation Security Protocol (ESP) Authentication header (AH) packet with TPM certificate (106); appending signature to ESP and/or AH payload (108) and validating attestation data between gateways through trusted third party (110).
摘要翻译：本发明的系统和方法通过使用密钥管理服务建立基于属性的认证来提出对IPSec密钥交换协议的扩展。本发明通过测量与基于IPSec的VPN网络捆绑的属性来保护发送器 - 接收器/网关的网络加密器与网关平台机器之间的完整性。本发明的系统包括至少一个发送器和接收器平台; IPsec组件扩展; 远程证明模块的多个属性（600）; 至少一个签名机构（602）; 和至少一个TPM（604）。本发明的方法通过获得至少一个密钥管理服务（KeyMS）测量值来在VPN（102）中配置每个密钥管理系统，在基于IPSec的VPN中建立相互远程认证; 在KeyMS会议（104）中建立认证; 签名具有TPM证书的封装安全协议（ESP）认证报头（AH）报文（106）; 将签名附加到ESP和/或AH有效载荷（108），并通过可信第三方（110）验证网关之间的证明数据。

2. 发明申请

WO2013036097A1 A SYSTEM AND METHOD TO ESTABLISH TRUSTED BOOT LOADER USING SELF-SUBSTANTIATED BOOT LOADER 审中-公开
标题翻译：一种使用自主启动装载机建立信号引导装载机的系统和方法
公开(公告)号：WO2013036097A1
公开(公告)日：2013-03-14
申请号：PCT/MY2012/000164
申请日：2012-06-28
申请人： MIMOS BERHAD , MOHD, Anuar Mat Isa , KILAUSURIA, Abdullah , AZHAR, Abu Talib , MOHD, Azuddin Parman , NORAZAH, Abd Aziz
发明人： MOHD, Anuar Mat Isa , KILAUSURIA, Abdullah , AZHAR, Abu Talib , MOHD, Azuddin Parman , NORAZAH, Abd Aziz
IPC分类号： G06F21/00
CPC分类号： G06F9/4401 , G06F21/575
摘要： The present invention provides a system and method for establishing a trusted boot loader using a self-substantiated boot loader in a computing platform. It is a Minimal Real-Time Operating System (RTOS) that loads and executes a trusted boot files and kernel modules. The system and method capture platform evidences from a client machine and a server machine, performs measurement on the integrity of the platform evidences to ensure that it is running on trusted slates, and updates the platform evidences and platform configurations to the server machine for validation. The platform evidences are updated in the client machine by downloading a plurality of instructions from the server machine. Any changes in the platform may show that the platform is compromise by unknown entities. The system runs as part of the boot loader modules to provide trusted environment to the operating system. The system and method is operable with or without TPM chip.
摘要翻译：本发明提供了一种用于在计算平台中使用自确定的引导加载程序来建立可信引导加载程序的系统和方法。它是一个最小的实时操作系统（RTOS），用于加载和执行受信任的引导文件和内核模块。系统和方法捕获平台从客户端机器和服务器机器获得证据，对平台证据的完整性进行测量，以确保其在受信任的板条上运行，并将平台证据和平台配置更新到服务器机器进行验证。通过从服务器机器下载多个指令，在客户端机器中更新平台证据。平台的任何变化可能表明平台受到未知实体的折中。系统作为引导加载程序模块的一部分运行，为操作系统提供可信赖的环境。该系统和方法可在有或没有TPM芯片的情况下运行。

3. 发明申请

WO2014038926A1 A SYSTEM AND METHOD OF MUTUAL TRUSTED AUTHENTICATION AND IDENTITY ENCRYPTION 审中-公开
标题翻译：互相认证和识别加密的系统和方法
公开(公告)号：WO2014038926A1
公开(公告)日：2014-03-13
申请号：PCT/MY2013/000161
申请日：2013-09-06
申请人： MIMOS BERHAD
发明人： NORAZAH, Abd Aziz , AAKULA, Bhagyalaxmi , KILAUSURIA, Abdullah
IPC分类号： H04L9/32 , G06F21/57 , H04L9/30
CPC分类号： G06F21/57 , H04L9/3073 , H04L9/3234
摘要： Mutual trusted authentication and identity encryption is provided by utilizing transport layer security extension with properties based attestation mechanism. The system of the present invention comprising a server platform (104) installed with an integrity measurement architecture (IMA) module (104b); a trusted authority module (TA) (104d) associated with a server platform) 104); an integrity properties collection module (IPCM) (104e) in communication with the trusted authority module (TA) (104d); a client platform (102) that is in communication with and registrable to the server platform (104); a transport layer security extension module (TLS extension module) (104a, 102c) associated with the server platform (104) and the client platform (102); and a trusted platform module (TPM) (102b, 104c) associated with the server platform (104) and said client platform (102). The general process of the present invention comprises three main components, wherein the first stage (402) establishes the security and integrity of the server platform. After the establishment of process (402), the next step is to establish identity encryption in the SSL/TLS extension and establish property-based attestation integrated with the Trusted Authority (TA) in the server platform (404). Upon completion of the processes of establishment, communication is performed with secure data transmission using mutual trusted identity encryption between client and server (406) wherein a handshake protocol is established to prioritise exchange of the certificates and keys to ensure the authentication and encryption of data (704).
摘要翻译：通过利用基于属性的认证机制的传输层安全扩展来提供相互信任的认证和身份加密。本发明的系统包括安装有完整性测量架构（IMA）模块（104b）的服务器平台（104）; 与服务器平台相关联的可信授权模块（TA）（104d））104）; 与可信管理模块（TA）（104d）通信的完整性属性收集模块（IPCM）（104e）; 与服务器平台（104）通信并可注册的客户端平台（102）; 与所述服务器平台（104）和所述客户端平台（102）相关联的传输层安全扩展模块（TLS扩展模块）（104a，102c）; 以及与所述服务器平台（104）和所述客户端平台（102）相关联的可信平台模块（TPM）（102b，104c）。本发明的一般过程包括三个主要组件，其中第一阶段（402）建立服务器平台的安全性和完整性。在建立进程（402）之后，下一步是在SSL / TLS扩展中建立身份加密，并建立与服务器平台（404）中的可信管理机构（TA）集成的基于属性的认证。在完成建立过程之后，使用客户端和服务器之间的相互信任身份加密（406）执行使用安全数据传输的通信，其中建立握手协议来优先交换证书和密钥以确保数据的认证和加密（ 704）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式