专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20210006416A1 PLATFORM ATTESTATION AND REGISTRATION FOR SERVERS 有权
公开(公告)号：US20210006416A1
公开(公告)日：2021-01-07
申请号：US16856968
申请日：2020-04-23
申请人： Intel Corporation
发明人： Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas , Simon P. Johnson , Bo Zhang , James D. Beaney, JR. , Piotr Zmijewski , Wesley Hamilton Smith , Eduardo Cabre , Uday R. Savagaonkar
IPC分类号： H04L9/32 , H04L9/08 , G09C1/00 , H04L29/06 , H04L9/14
摘要： Embodiments include systems, methods, computer readable media, and devices configured to, for a first processor of a platform, generate a platform root key; create a data structure to encapsulate the platform root key, the data structure comprising a platform provisioning key and an identification of a registration service; and transmit, on a secure connection, the data structure to the registration service to register the platform root key for the first processor of the platform. Embodiments include systems, methods, computer readable media, and devices configured to store a device certificate received from a key generation facility; receive a manifest from a platform, the manifest comprising an identification of a processor associated with the platform; and validate the processor using a stored device certificate.

2. 发明授权

US10708067B2 Platform attestation and registration for servers 有权
公开(公告)号：US10708067B2
公开(公告)日：2020-07-07
申请号：US15201400
申请日：2016-07-02
申请人： Intel Corporation
发明人： Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas , Simon P. Johnson , Bo Zhang , James D. Beaney, Jr. , Piotr Zmijewski , Wesley Hamilton Smith , Eduardo Cabre , Uday R. Savagaonkar
IPC分类号： H04L9/32 , H04L9/08 , G09C1/00 , H04L29/06 , H04L9/14
摘要： Embodiments include systems, methods, computer readable media, and devices configured to, for a first processor of a platform, generate a platform root key; create a data structure to encapsulate the platform root key, the data structure comprising a platform provisioning key and an identification of a registration service; and transmit, on a secure connection, the data structure to the registration service to register the platform root key for the first processor of the platform. Embodiments include systems, methods, computer readable media, and devices configured to store a device certificate received from a key generation facility; receive a manifest from a platform, the manifest comprising an identification of a processor associated with the platform; and validate the processor using a stored device certificate.

3. 发明申请

US20190044710A1 TECHNOLOGIES FOR ESTABLISHING DEVICE LOCALITY 审中-公开
公开(公告)号：US20190044710A1
公开(公告)日：2019-02-07
申请号：US15856568
申请日：2017-12-28
申请人： Intel Corporation
发明人： Bo Zhang , Siddhartha Chhabra , William A. Stevens , Reshma Lal
IPC分类号： H04L9/08 , H04L9/32 , H04L29/06
摘要： Technologies for establishing device locality are disclosed. A processor in a computing device generates an identifier distinct to the computing device. The processor transmits the identifier to a management controller via a hardware bus in the computing device. The processor generates a key and encrypts the key with the identifier to generate a wrapped key. The processor transmits the wrapped key to the management controller. In turn, the management controller unwraps the key using the identifier. Other embodiments are described and claimed.

4. 发明授权

US09891936B2 Method and apparatus for page-level monitoring 有权
公开(公告)号：US09891936B2
公开(公告)日：2018-02-13
申请号：US14039195
申请日：2013-09-27
申请人： Intel Corporation
发明人： Jiwei Oliver Lu , Koichi Yamada , James D. Beany , Palaniverlrajan Shanmugavelayutham , Bo Zhang
IPC分类号： G06F12/00 , G06F9/455 , G06F12/10 , G06F12/1027
CPC分类号： G06F9/4552 , G06F12/10 , G06F12/1027 , G06F2212/682 , G06F2212/683
摘要： An apparatus and method for page level monitoring are described. For example, one embodiment of a method for monitoring memory pages comprises storing information related to each of a plurality of memory pages including an address identifying a location for a monitor variable for each of the plurality of memory pages in a data structure directly accessible only by a software layer operating at or above a first privilege level; detecting virtual-to-physical page mapping consistency changes or other page modifications to a particular memory page for which information is maintained in the data structure; responsively updating the monitor variable to reflect the consistency changes or page modifications; checking a first monitor variable associated with a first memory page prior to execution of first program code; and refraining from executing the first program code if the first monitor variable indicates consistency changes or page modifications to the first memory page.

5. 发明申请

US20170353319A1 FLEXIBLE PROVISIONING OF ATTESTATION KEYS IN SECURE ENCLAVES 审中-公开
公开(公告)号：US20170353319A1
公开(公告)日：2017-12-07
申请号：US15279527
申请日：2016-09-29
申请人： Intel Corporation
发明人： Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas , Simon P. Johnson , Bo Zhang , James D. Beaney, JR. , Piotr Zmijewski , Wesley H. Smith , Eduardo Cabre
IPC分类号： H04L9/32 , H04L9/14 , H04L9/30 , H04L29/06 , H04L9/08
CPC分类号： H04L9/3252 , G06F21/44 , G06F21/53 , G09C1/00 , H04L9/0866 , H04L9/14 , H04L9/302 , H04L9/3066 , H04L9/3234 , H04L9/3247 , H04L9/3249 , H04L63/06 , H04L63/062 , H04L63/0823 , H04L63/12 , H04L2209/127
摘要： A computing platform implements one or more secure enclaves including a first provisioning enclave to interface with a first provisioning service to obtain a first attestation key from the first provisioning service, a second provisioning enclave to interface with a different, second provisioning service to obtain a second attestation key from the second provisioning service, and a provisioning certification enclave to sign first data from the first provisioning enclave and second data from the second provisioning enclave using a hardware-based provisioning attestation key. The signed first data is used by the first provisioning enclave to authenticate to the first provisioning service to obtain the first attestation key and the signed second data is used by the second provisioning enclave to authenticate to the second provisioning service to obtain the second attestation key.

6. 发明授权

US09716710B2 Technologies for virtualized access to security services provided by a converged manageability and security engine 有权
公开(公告)号：US09716710B2
公开(公告)日：2017-07-25
申请号：US14752259
申请日：2015-06-26
申请人： Intel Corporation
发明人： Mona Vij , Carlos V. Rozas , Vincent R. Scarlata , Francis X. McKeen , Bo Zhang
IPC分类号： G06F7/04 , H04L29/06
CPC分类号： H04L63/0823 , G06F9/45558 , G06F2009/45587 , H04L63/0281 , H04L63/10
摘要： Technologies for secure access to platform security services include a computing device having a processor and a security engine. The computing device establishes a platform services enclave in a virtual machine of the computing device using secure enclave support of the processor. The platform services enclave receives a platform services request from an application enclave via a first authenticated session and transmits the platform services request to a virtual security engine established by a host environment via a second authenticated session. The first and second authenticated sessions may be authenticated by report-based attestation and quote-based attestation, respectively. The virtual security engine transmits the platform services request to the security engine via a long-term pairing session established by the virtual security engine with the security engine. The security engine performs the platform services request using hardware resources shared with other platform services enclaves. Other embodiments are described and claimed.

7. 发明申请

US20170185776A1 Trusted launch of secure enclaves in virtualized environments 审中-公开
公开(公告)号：US20170185776A1
公开(公告)日：2017-06-29
申请号：US14998065
申请日：2015-12-24
申请人： Intel Corporation
发明人： Scott H. Robinson , Ravi L. Sahita , Mark W. Shanahan , Karanvir S. Grewal , Nitin V. Sarangdhar , Carlos V. Rozas , Bo Zhang , Shanwei Cen
IPC分类号： G06F21/56 , G06F12/08 , G06F12/14 , G06F9/455
CPC分类号： G06F12/145 , G06F9/45558 , G06F21/575 , G06F2009/45579 , G06F2009/45583 , G06F2009/45587 , G06F2009/45591 , G06F2221/034
摘要： Systems, apparatuses and methods may provide for verifying, from outside a trusted computing base of a computing system, an identity an enclave instance prior to the enclave instance being launched in the trusted computing base, determining a memory location of the enclave instance and confirming that the memory location is local to the computing system. In one example, the enclave instance is a proxy enclave instance, wherein communications are conducted with one or more additional enclave instances in the trusted computing base via the proxy enclave instance and an unencrypted channel.

8. 发明申请

US20170068455A1 APPLICATION EXECUTION ENCLAVE MEMORY PAGE CACHE MANAGEMENT METHOD AND APPARATUS 有权
标题翻译：应用程序执行内容存储页缓存管理方法和设备
公开(公告)号：US20170068455A1
公开(公告)日：2017-03-09
申请号：US14849222
申请日：2015-09-09
申请人： Intel Corporation
发明人： Bin Xing , Mark W. Shanahan , Bo Zhang
IPC分类号： G06F3/06 , G06F12/08
CPC分类号： G06F12/1441 , G06F21/10 , G06F21/125 , G06F21/53
摘要： Apparatuses, methods and storage medium associated with application execution enclave cache management, are disclosed herein. In embodiments, an apparatus may include one or more processors with supports for application execution enclaves; cache memory coupled with the one or more processors to be organized into a plurality of cache pages; and an exception handler to be operated by the one or more processors to handle cache page fault exceptions, wherein to handle cache page fault exceptions includes to handle a cache page fault triggered to request additional allocation of one or more cache pages to an execution enclave of an application. Other embodiments may be described and/or claimed.
摘要翻译：本文公开了与应用执行包层缓存管理相关联的设备，方法和存储介质。在实施例中，设备可以包括具有用于应用执行包层的支持的一个或多个处理器; 与所述一个或多个处理器耦合的高速缓冲存储器将被组织成多个高速缓存页面; 以及由所述一个或多个处理器操作以处理高速缓存页错误异常的异常处理程序，其中处理高速缓存页错误异常包括处理触发的高速缓存页错误以请求对一个或多个高速缓存页的附加分配到执行空间一个应用程序。可以描述和/或要求保护其他实施例。

9. 发明授权

US10135622B2 Flexible provisioning of attestation keys in secure enclaves 有权
公开(公告)号：US10135622B2
公开(公告)日：2018-11-20
申请号：US15279527
申请日：2016-09-29
申请人： Intel Corporation
发明人： Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas , Simon P. Johnson , Bo Zhang , James D. Beaney, Jr. , Piotr Zmijewski , Wesley H. Smith , Eduardo Cabre
IPC分类号： H04L9/36 , H04L9/32 , H04L9/08 , H04L9/14 , H04L9/30 , H04L29/06 , G09C1/00 , G06F21/53
摘要： A computing platform implements one or more secure enclaves including a first provisioning enclave to interface with a first provisioning service to obtain a first attestation key from the first provisioning service, a second provisioning enclave to interface with a different, second provisioning service to obtain a second attestation key from the second provisioning service, and a provisioning certification enclave to sign first data from the first provisioning enclave and second data from the second provisioning enclave using a hardware-based provisioning attestation key. The signed first data is used by the first provisioning enclave to authenticate to the first provisioning service to obtain the first attestation key and the signed second data is used by the second provisioning enclave to authenticate to the second provisioning service to obtain the second attestation key.

10. 发明申请

US20170366359A1 PLATFORM ATTESTATION AND REGISTRATION FOR SERVERS 审中-公开
公开(公告)号：US20170366359A1
公开(公告)日：2017-12-21
申请号：US15201400
申请日：2016-07-02
申请人： Intel Corporation
发明人： Vincent R. Scarlata , Francis X. McKeen , Carlos V. Rozas , Simon P, Johnson , Bo Zhang , James D. Beaney, JR. , Piotr Zmijewski , Wesley Hamilton Smith , Eduardo Cabre , Uday R. Savagaonkar
IPC分类号： H04L9/32 , H04L9/08 , H04L9/14 , H04L29/06
CPC分类号： H04L9/3263 , G09C1/00 , H04L9/0816 , H04L9/0822 , H04L9/14 , H04L9/3268 , H04L63/06 , H04L63/0823 , H04L63/12
摘要： Embodiments include systems, methods, computer readable media, and devices configured to, for a first processor of a platform, generate a platform root key; create a data structure to encapsulate the platform root key, the data structure comprising a platform provisioning key and an identification of a registration service; and transmit, on a secure connection, the data structure to the registration service to register the platform root key for the first processor of the platform. Embodiments include systems, methods, computer readable media, and devices configured to store a device certificate received from a key generation facility; receive a manifest from a platform, the manifest comprising an identification of a processor associated with the platform; and validate the processor using a stored device certificate.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式