专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07565492B2 Method and apparatus for preventing software side channel attacks 有权
标题翻译：防止软件侧信道攻击的方法和装置
公开(公告)号：US07565492B2
公开(公告)日：2009-07-21
申请号：US11513871
申请日：2006-08-31
申请人： Francis X. Mckeen , Leena K. Puthiyedath , Ernie Brickell , James B. Crossland
发明人： Francis X. Mckeen , Leena K. Puthiyedath , Ernie Brickell , James B. Crossland
IPC分类号： G06F12/00
CPC分类号： G06F21/79 , G06F12/0804 , G06F12/0848 , G06F12/0891 , G06F12/126 , G06F12/1416 , G06F21/556
摘要： A method for managing a cache is disclosed. A context switch is identified. It is determined whether an application running after the context switch requires protection. Upon determining that the application requires protection the cache is partitioned. According to an aspect of the present invention, a partitioned section of the cache is completely over written with data associated with the application. Other embodiments are described and claimed.
摘要翻译：公开了一种用于管理高速缓存的方法。识别上下文切换。确定在上下文切换后运行的应用程序是否需要保护。在确定应用程序需要保护时，缓存被分区。根据本发明的一个方面，高速缓存的分区部分完全被写入与应用相关的数据。描述和要求保护其他实施例。

2. 发明申请

US20080059711A1 Method and apparatus for preventing software side channel attacks 有权
标题翻译：防止软件侧信道攻击的方法和装置
公开(公告)号：US20080059711A1
公开(公告)日：2008-03-06
申请号：US11513871
申请日：2006-08-31
申请人： Francis X. McKeen , Leena K. Puthiyedath , Ernie Brickell , James B. Crossland
发明人： Francis X. McKeen , Leena K. Puthiyedath , Ernie Brickell , James B. Crossland
IPC分类号： G06F12/00
CPC分类号： G06F21/79 , G06F12/0804 , G06F12/0848 , G06F12/0891 , G06F12/126 , G06F12/1416 , G06F21/556
摘要： A method for managing a cache is disclosed. A context switch is identified. It is determined whether an application running after the context switch requires protection. Upon determining that the application requires protection the cache is partitioned. According to an aspect of the present invention, a partitioned section of the cache is completely over written with data associated with the application. Other embodiments are described and claimed.
摘要翻译：公开了一种用于管理高速缓存的方法。识别上下文切换。确定在上下文切换后运行的应用程序是否需要保护。在确定应用程序需要保护时，缓存被分区。根据本发明的一个方面，高速缓存的分区部分完全被写入与应用相关的数据。描述和要求保护其他实施例。

3. 发明授权

US09087200B2 Method and apparatus to provide secure application execution 有权
标题翻译：提供安全应用程序执行的方法和装置
公开(公告)号：US09087200B2
公开(公告)日：2015-07-21
申请号：US13527547
申请日：2012-06-19
申请人： Francis X. McKeen , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
发明人： Francis X. McKeen , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
IPC分类号： G06F21/72 , G06F21/60 , G06F21/53 , G06F12/14
CPC分类号： G06F21/60 , G06F21/53 , G06F21/72
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

4. 发明申请

US20130159726A1 METHOD AND APPARATUS TO PROVIDE SECURE APPLICATION EXECUTION 有权
标题翻译：提供安全应用执行的方法和设备
公开(公告)号：US20130159726A1
公开(公告)日：2013-06-20
申请号：US13527547
申请日：2012-06-19
申请人： Francis X. MCKEEN , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
发明人： Francis X. MCKEEN , Carlos V. Rozas , Uday R. Savagaonkar , Simon P. Johnson , Vincent Scarlata , Michael A. Goldsmith , Ernie Brickell , Jiang Tao Li , Howard C. Herbert , Prashant Dewan , Stephen J. Tolopka , Gilbert Neiger , David Durham , Gary Graunke , Bernard Lint , Don A. Van Dyke , Joseph Cihula , Stalinselvaraj Jeyasingh , Stephen R. Van Doren , Dion Rodgers , John Garney , Asher Altman
IPC分类号： G06F21/72
CPC分类号： G06F21/60 , G06F21/53 , G06F21/72
摘要： A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.
摘要翻译：一种在计算机系统内实现安全应用和数据完整性的技术。在一个实施例中，建立一个或多个安全空间，其中可以存储和执行应用和数据。

5. 发明授权

US09544141B2 Secure key storage using physically unclonable functions 有权
标题翻译：使用物理不可克隆功能保护密钥存储
公开(公告)号：US09544141B2
公开(公告)日：2017-01-10
申请号：US13996544
申请日：2011-12-29
申请人： Jiangtao Li , Anand Rajan , Roel Maes , Sanu K Mathew , Ram Krishnamurthy , Ernie Brickell
发明人： Jiangtao Li , Anand Rajan , Roel Maes , Sanu K Mathew , Ram Krishnamurthy , Ernie Brickell
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L9/0891 , G09C1/00 , H04L9/0822 , H04L9/0861 , H04L9/0866 , H04L9/0894 , H04L2209/12
摘要： Some implementations disclosed herein provide techniques and arrangements for provisioning keys to integrated circuits/processors. A processor may include physically unclonable functions component, which may generate a unique hardware key based at least on at least one physical characteristic of the processor. The hardware key may be employed in encrypting a key such as a secret key. The encrypted key may be stored in a memory of the processor. The encrypted key may be validated. The integrity of the key may be protected by communicatively isolating at least one component of the processor.
摘要翻译：本文公开的一些实施例提供了用于向集成电路/处理器供应密钥的技术和布置。处理器可以包括物理上不可克隆的功能组件，其可以至少基于处理器的至少一个物理特性来生成唯一的硬件密钥。硬件密钥可用于加密诸如秘密密钥的密钥。加密密钥可以存储在处理器的存储器中。可以验证加密的密钥。可以通过通信地隔离处理器的至少一个组件来保护密钥的完整性。

6. 发明申请

US20110161672A1 Provisioning, upgrading, and/or changing of hardware 有权
标题翻译：硬件的配置，升级和/或更改
公开(公告)号：US20110161672A1
公开(公告)日：2011-06-30
申请号：US12655579
申请日：2009-12-31
申请人： Alberto J. Martinez , William A. Stevens, JR. , Purushottam Goel , Ernie Brickell
发明人： Alberto J. Martinez , William A. Stevens, JR. , Purushottam Goel , Ernie Brickell
IPC分类号： H04L9/32 , G06F15/177 , H04L9/00 , G06F21/00
CPC分类号： H04L63/08 , G06F21/57 , H04L9/3249 , H04L63/06 , H04L2209/56
摘要： In some embodiments a secure permit request to change a hardware configuration is created. The secure permit request is sent to a remote location, and a permit sent from the remote location in response to the permit request is received. The hardware configuration is changed in response to the received permit. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，创建了用于改变硬件配置的安全许可证请求。安全许可请求被发送到远程位置，并且接收到响应于许可请求从远程位置发送的许可证。硬件配置根据接收到的许可证而改变。描述和要求保护其他实施例。

7. 发明申请

US20100299479A1 OBSCURING MEMORY ACCESS PATTERNS 有权
标题翻译：记忆存取模式
公开(公告)号：US20100299479A1
公开(公告)日：2010-11-25
申请号：US12562041
申请日：2009-09-17
申请人： Mark Buxton , Ernie Brickell , Quinn A. Jacobson , Hong Wang , Baiju Patel
发明人： Mark Buxton , Ernie Brickell , Quinn A. Jacobson , Hong Wang , Baiju Patel
IPC分类号： G06F12/08
CPC分类号： G06F12/0842 , G06F9/30047 , G06F12/1458 , G06F21/52 , G06F21/78
摘要： For each memory location in a set of memory locations associated with a thread, setting an indication associated with the memory location to request a signal if data from the memory location is evicted from a cache; and in response to the signal, reloading the set of memory locations into the cache.
摘要翻译：对于与线程相关联的一组存储器位置中的每个存储器位置，设置与存储器位置相关联的指示，以便如果来自存储器位置的数据被从高速缓存中移出，则请求信号; 并且响应于该信号，将该组存储器位置重新加载到高速缓存中。

8. 发明申请

US20090172639A1 FIRMWARE INTEGRITY VERIFICATION 审中-公开
标题翻译：固件完整性验证
公开(公告)号：US20090172639A1
公开(公告)日：2009-07-02
申请号：US11965295
申请日：2007-12-27
申请人： Mahesh Natu , Sham Datta , Ernie Brickell
发明人： Mahesh Natu , Sham Datta , Ernie Brickell
IPC分类号： G06F9/44
CPC分类号： G06F21/57
摘要： In some embodiments, the integrity of firmware stored in a non-volatile memory is verified prior to initiation of a firmware reset vector. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，在启动固件复位向量之前验证存储在非易失性存储器中的固件的完整性。描述和要求保护其他实施例。

9. 发明申请

US20080163331A1 RECONFIGURING A SECURE SYSTEM 有权
标题翻译：重新建立安全系统
公开(公告)号：US20080163331A1
公开(公告)日：2008-07-03
申请号：US11618649
申请日：2006-12-29
申请人： Sham M. Datta , Mohan J. Kumar , James A. Sutton , Ernie Brickell , Ioannis T. Schoinas
发明人： Sham M. Datta , Mohan J. Kumar , James A. Sutton , Ernie Brickell , Ioannis T. Schoinas
IPC分类号： G06F21/00 , G06F17/00
CPC分类号： G06F21/57
摘要： Apparatuses, methods, and systems for reconfiguring a secure system are disclosed. In one embodiment, an apparatus includes a configuration storage location, a lock, and lock override logic. The configuration storage location is to store information to configure the apparatus. The lock is to prevent writes to the configuration storage location. The lock override logic is to allow instructions executed from sub-operating mode code to override the lock.
摘要翻译：公开了用于重新配置安全系统的装置，方法和系统。在一个实施例中，装置包括配置存储位置，锁定和锁定超驰逻辑。配置存储位置是存储信息以配置设备。该锁是为了防止写入配置存储位置。锁定覆盖逻辑是允许从子操作模式代码执行的指令覆盖锁定。

10. 发明申请

US20070113077A1 System and Method for Establishing Trust Without Revealing Identity 有权
标题翻译：建立信任而不揭示身份的制度与方法
公开(公告)号：US20070113077A1
公开(公告)日：2007-05-17
申请号：US11622391
申请日：2007-01-11
申请人： Ernie Brickell
发明人： Ernie Brickell
IPC分类号： H04L9/00
CPC分类号： H04L9/3221 , H04L9/3247 , H04L9/3271 , H04L2209/127
摘要： One aspect of an embodiment of the invention provides a method, system, and device to prove to a challenger that a prover device has a signature from a device manufacturer without revealing the signature to the challenger. According to one implementation, a challenger is provided with the result of a one-way function of a secret held by a prover device. An interactive proof is employed, between the prover device and the challenger, to prove to the challenger that the secret used in the one-way function has been signed by a device signature without revealing the secret or the device signature or the prover device's identity to the challenger.
摘要翻译：本发明的实施例的一个方面提供了一种方法，系统和设备，用于向挑战者证明证明者设备具有来自设备制造商的签名，而不向挑战者显示签名。根据一个实施方案，挑战者被提供了由证明者设备保存的秘密的单向功能的结果。在证明者设备和挑战者之间采用交互式证明，向挑战者证明，单向功能中使用的秘密已经通过设备签名签名，而不会泄露秘密或设备签名或证明者设备的身份挑战者。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式