专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US10547448B2 Configurator key package for device provisioning protocol (DPP) 有权
公开(公告)号：US10547448B2
公开(公告)日：2020-01-28
申请号：US15648437
申请日：2017-07-12
申请人： QUALCOMM Incorporated
发明人： Rosario Cammarota , Jouni Kalevi Malinen , Peerapol Tinnakornsrisuphap
IPC分类号： H04L9/26 , H04L9/08 , H04W12/04
摘要： This disclosure provides systems, methods, and apparatus, including computer programs encoded on computer storage media, for enhancing a device provisioning protocol (DPP) to support multiple configurators. In one aspect, a first configurator device can export a configurator key package. In one aspect, the configurator key package may be used for backup and restore of the configurator keys. The configurator key package may include a configurator private signing key and, optionally, a configurator public verification key. A second configurator device may obtain the configurator key package and also may obtain decryption information which can be used to decrypt the configurator key package. Thus, in another aspect, both the first configurator device and the second configurator device can use the same configurator keys with the device provisioning protocol to configure enrollees to a network.

22. 发明申请

US20190306710A1 ONBOARDING MULTIPLE ACCESS POINT (MULTI-AP) DEVICE USING DEVICE PROVISIONING PROTOCOL (DPP) 审中-公开
公开(公告)号：US20190306710A1
公开(公告)日：2019-10-03
申请号：US16357196
申请日：2019-03-18
申请人： QUALCOMM Incorporated
发明人： Rosario Cammarota , Sai Yiu Duncan Ho , Brian Michael Buesker
IPC分类号： H04W12/06 , H04W24/02 , G06F9/4401 , H04L29/06 , H04W12/04
摘要： This disclosure provides systems, methods and apparatus, including computer programs encoded on computer storage media, for onboarding one or more Multi-AP devices using a device provisioning protocol (DPP) and a Multi-AP communication protocol. In one aspect, a first Multi-AP device may determine, during an onboarding process, DPP configuration information that was derived using the DPP. The first Multi-AP device may establish a Multi-AP network configuration between the first Multi-AP device and a second Multi-AP device using the Multi-AP communication protocol based, at least in part, on the DPP configuration information. In one aspect, the DPP configuration information may be derived remotely by the network operator prior to device deployment. In one aspect, a configurator station (STA) may be delegated as the DPP configurator by the network operator, and may onboard one or more STAs into the Multi-AP network using the DPP and the Multi-AP communication protocol.

23. 发明授权

US10235303B2 Secure entry and exit for software modules protected by controlled encryption key management 有权
公开(公告)号：US10235303B2
公开(公告)日：2019-03-19
申请号：US15232723
申请日：2016-08-09
申请人： QUALCOMM Incorporated
发明人： David Hartley , Roberto Avanzi , Rosario Cammarota
IPC分类号： G06F12/14 , G06F21/12 , G06F21/62 , H04L29/06 , G06F21/14 , G06F21/74
摘要： Techniques for protecting software in a computing device are provided. A method according to these techniques includes receiving a request from a non-secure software module to execute an instruction of a secure software module comprising encrypted program code, determining whether the instruction comprises an instruction associated with a controlled point of entry to the secure software module accessible outside of the secure software module, executing one or more instructions of the secure software module responsive to the instruction comprising an instruction associated with the controlled point of entry to the secure software module, and controlling exit from the secure software module to return execution to the non-secure software module.

24. 发明授权

US10223289B2 Secure handling of memory caches and cached software module identities for a method to isolate software modules by means of controlled encryption key management 有权
公开(公告)号：US10223289B2
公开(公告)日：2019-03-05
申请号：US15070947
申请日：2016-03-15
申请人： QUALCOMM Incorporated
发明人： Roberto Avanzi , David Hartley , Rosario Cammarota
IPC分类号： G06F21/00 , G06F12/14 , G06F12/0802 , G06F21/14 , G06F21/79 , G06F21/60
摘要： In an aspect, a cache memory device receives a request to read an instruction or data associated with a memory device. The request includes a first realm identifier and a realm indicator bit, where the first realm identifier enables identification of a realm that includes one or more selected regions in the memory device. The cache memory device determines whether the first realm identifier matches a second realm identifier in a cache tag when the instruction or data is stored in the cache memory device, where the instruction or data stored in the cache memory device has been decrypted based on an ephemeral encryption key associated with the second realm identifier when the first realm identifier indicates the realm and when the realm indicator bit is enabled. The cache memory device transmits the instruction or data when the first realm identifier matches the second realm identifier.

25. 发明授权

US10142303B2 Separation of software modules by controlled encryption key management 有权
公开(公告)号：US10142303B2
公开(公告)日：2018-11-27
申请号：US15053892
申请日：2016-02-25
申请人： QUALCOMM Incorporated
发明人： Roberto Avanzi , David Hartley , Rosario Cammarota
IPC分类号： H04L29/06 , G06F12/14 , G06F21/62 , G06F21/78 , G06F11/07 , G06F11/16 , G06F11/30
摘要： In an aspect, a method for protecting software includes obtaining a payload including at least one of instructions or data, establishing a realm in a memory device, encrypting the payload based on an ephemeral encryption key (EEK) associated with the realm, and storing the encrypted payload in the realm of the memory device. In another aspect, a method for protecting software includes receiving a memory transaction associated with the memory device, the memory transaction including at least a realm identifier (RID) and a realm indicator bit, obtaining the EEK associated with the RID when the RID indicates the realm and when the realm indicator bit is enabled, decrypting an instruction and/or data retrieved from the realm based on the EEK when the memory transaction is a read transaction, and encrypting second data for storage in the realm based on the EEK when the memory transaction is a write transaction.

26. 发明授权

US09875378B2 Physically unclonable function assisted memory encryption device techniques 有权
公开(公告)号：US09875378B2
公开(公告)日：2018-01-23
申请号：US14738240
申请日：2015-06-12
申请人： QUALCOMM Incorporated
发明人： Olivier Jean Benoit , Rosario Cammarota
IPC分类号： G06F21/00 , G06F12/14 , G06F21/79 , H04L9/32 , H04L9/08 , G06F21/73 , G06F21/85 , G06F11/30
CPC分类号： G06F21/79 , G06F12/1408 , G06F21/73 , G06F21/85 , H04L9/0866 , H04L9/0897 , H04L9/3278
摘要： Techniques for encrypting the data in the memory of a computing device are provided. An example method for protecting data in a memory according to the disclosure includes encrypting data associated with a store request using a memory encryption device of the processor to produce encrypted data. Encrypting the data includes: obtaining a challenge value, providing the challenge value to a physically unclonable function module to obtain a response value, and encrypting the data associated with the store request using the response value as an encryption key to generate the encrypted data. The method also includes storing the encrypted data and the challenge value associated with the encrypted data in the memory.

27. 发明申请

US20170010982A1 SECURE HANDLING OF MEMORY CACHES AND CACHED SOFTWARE MODULE IDENTITIES FOR A METHOD TO ISOLATE SOFTWARE MODULES BY MEANS OF CONTROLLED ENCRYPTION KEY MANAGEMENT 审中-公开
标题翻译：通过控制加密方式分离软件模块的方法来安全地处理内存缓存和缓存软件模块标识
公开(公告)号：US20170010982A1
公开(公告)日：2017-01-12
申请号：US15070947
申请日：2016-03-15
申请人： QUALCOMM Incorporated
发明人： Roberto Avanzi , David Hartley , Rosario Cammarota
IPC分类号： G06F12/14 , G06F21/60 , G06F12/08
CPC分类号： G06F12/1408 , G06F12/0802 , G06F12/1466 , G06F21/14 , G06F21/602 , G06F21/79
摘要： In an aspect, a cache memory device receives a request to read an instruction or data associated with a memory device. The request includes a first realm identifier and a realm indicator bit, where the first realm identifier enables identification of a realm that includes one or more selected regions in the memory device. The cache memory device determines whether the first realm identifier matches a second realm identifier in a cache tag when the instruction or data is stored in the cache memory device, where the instruction or data stored in the cache memory device has been decrypted based on an ephemeral encryption key associated with the second realm identifier when the first realm identifier indicates the realm and when the realm indicator bit is enabled. The cache memory device transmits the instruction or data when the first realm identifier matches the second realm identifier.
摘要翻译：在一方面，高速缓冲存储器设备接收读取与存储器设备相关联的指令或数据的请求。该请求包括第一领域标识符和领域指示符位，其中第一领域标识符使得能够识别包括存储器设备中的一个或多个所选区域的领域。当指令或数据存储在高速缓冲存储器件中时，高速缓存存储器件确定第一区标识符是否与高速缓存标签中的第二区标识符匹配，其中存储在高速缓冲存储器件中的指令或数据已经基于短暂的解密当第一领域标识符指示领域以及当领域指示符位被启用时与第二领域标识符相关联的加密密钥。当第一领域标识符与第二领域标识符匹配时，高速缓冲存储器设备发送指令或数据。

28. 发明授权

US09407754B1 Multi-granular authentication techniques 有权
标题翻译：多粒度认证技术
公开(公告)号：US09407754B1
公开(公告)日：2016-08-02
申请号：US14622742
申请日：2015-02-13
申请人： QUALCOMM Incorporated
发明人： Olivier Jean Benoit , Rishab Nithyanand , Rosario Cammarota , Anand Palanigounder
IPC分类号： H04M1/66 , H04M1/725 , H04W12/06 , H04L29/06 , H04W12/12
CPC分类号： H04M1/72577 , H04L63/1425 , H04W12/06 , H04W12/12
摘要： Techniques for authenticating a user of a mobile device at a computing platform are provided. A method according to these techniques includes generating a first profile and second profile of user behavior for the user of the mobile device, the first profile comprising a first type of profile having at least a first duration and the second profile comprising a second type of profile having a second duration that is shorter than the first duration, monitoring user behavior to generate usage behavior data, comparing the usage behavior data to the first profile and the second profile, performing a first type of authentication action responsive to the usage behavior data deviating from the first profile, and performing a second type of authentication action responsive to the usage behavior data deviating from the second profile.
摘要翻译：提供了用于在计算平台上认证移动设备的用户的技术。根据这些技术的方法包括为移动设备的用户生成用户行为的第一简档和第二简档，第一简档包括具有至少第一持续时间的第一类型的简档，并且第二简档包括第二类型的简档具有比第一持续时间短的第二持续时间，监视用户行为以生成使用行为数据，将使用行为数据与第一配置文件和第二配置文件进行比较，响应于偏离的使用行为数据执行第一类型的认证动作所述第一简档，以及响应于偏离所述第二简档的所述使用行为数据执行第二类型的认证动作。

29. 发明授权

US09344553B1 Multi-granular authentication techniques 有权
公开(公告)号：US09344553B1
公开(公告)日：2016-05-17
申请号：US14622742
申请日：2015-02-13
申请人： QUALCOMM Incorporated
发明人： Olivier Jean Benoit , Rishab Nithyanand , Rosario Cammarota , Anand Palanigounder
IPC分类号： H04M1/66 , H04M1/725 , H04W12/06
摘要： Techniques for authenticating a user of a mobile device at a computing platform are provided. A method according to these techniques includes generating a first profile and second profile of user behavior for the user of the mobile device, the first profile comprising a first type of profile having at least a first duration and the second profile comprising a second type of profile having a second duration that is shorter than the first duration, monitoring user behavior to generate usage behavior data, comparing the usage behavior data to the first profile and the second profile, performing a first type of authentication action responsive to the usage behavior data deviating from the first profile, and performing a second type of authentication action responsive to the usage behavior data deviating from the second profile.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式