专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090319775A1 Data Path Security Processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US20090319775A1
公开(公告)日：2009-12-24
申请号：US12551381
申请日：2009-08-31
申请人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

2. 发明授权

US07587587B2 Data path security processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US07587587B2
公开(公告)日：2009-09-08
申请号：US10727430
申请日：2003-12-04
申请人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

3. 发明授权

US08055895B2 Data path security processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US08055895B2
公开(公告)日：2011-11-08
申请号：US12551381
申请日：2009-08-31
申请人： Mark Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

4. 发明授权

US07773754B2 Key management system and method 有权
标题翻译：密钥管理系统和方法
公开(公告)号：US07773754B2
公开(公告)日：2010-08-10
申请号：US10191365
申请日：2002-07-08
申请人： Mark L. Buer , Joseph J. Tardo
发明人： Mark L. Buer , Joseph J. Tardo
IPC分类号： H04L9/00 , H04K1/00
CPC分类号： H04L9/083 , G06F21/602 , G06F21/606 , G06F21/72 , H04L9/0822 , H04L9/0894 , H04L63/0485 , H04L63/164 , H04L2463/062
摘要： Methods and systems are disclosed for providing secured data transmission and for managing cryptographic keys. One embodiment of the invention provides secure key management when separate devices are used for generating and utilizing the keys. One embodiment of the invention provides secure storage of keys stored in an unsecured database. One embodiment of the invention provides key security in conjunction with high speed decryption and encryption, without degrading the performance of the data network.
摘要翻译：公开了用于提供安全数据传输和用于管理加密密钥的方法和系统。当使用单独的设备来产生和利用密钥时，本发明的一个实施例提供安全的密钥管理。本发明的一个实施例提供了存储在不安全数据库中的密钥的安全存储。本发明的一个实施例提供了与高速解密和加密相结合的关键安全性，而不降低数据网络的性能。

5. 发明授权

US08340299B2 Key management system and method 有权
标题翻译：密钥管理系统和方法
公开(公告)号：US08340299B2
公开(公告)日：2012-12-25
申请号：US12845638
申请日：2010-07-28
申请人： Mark L. Buer , Joseph J. Tardo
发明人： Mark L. Buer , Joseph J. Tardo
IPC分类号： H04L9/00 , H04L9/32 , H04L9/08
CPC分类号： H04L9/083 , G06F21/602 , G06F21/606 , G06F21/72 , H04L9/0822 , H04L9/0894 , H04L63/0485 , H04L63/164 , H04L2463/062
摘要： Methods and systems are disclosed for providing secured data transmission and for managing cryptographic keys. One embodiment of the invention provides secure key management when separate devices are used for generating and utilizing the keys. One embodiment of the invention provides secure storage of keys stored in an unsecured database. One embodiment of the invention provides key security in conjunction with high speed decryption and encryption, without degrading the performance of the data network.
摘要翻译：公开了用于提供安全数据传输和用于管理加密密钥的方法和系统。当使用单独的设备来产生和利用密钥时，本发明的一个实施例提供安全的密钥管理。本发明的一个实施例提供了存储在不安全数据库中的密钥的安全存储。本发明的一个实施例提供了与高速解密和加密相结合的关键安全性，而不降低数据网络的性能。

6. 发明申请

US20100290624A1 Key Management System and Method 有权
标题翻译：密钥管理系统与方法
公开(公告)号：US20100290624A1
公开(公告)日：2010-11-18
申请号：US12845638
申请日：2010-07-28
申请人： Mark L. BUER , Joseph J. Tardo
发明人： Mark L. BUER , Joseph J. Tardo
IPC分类号： H04L9/00
CPC分类号： H04L9/083 , G06F21/602 , G06F21/606 , G06F21/72 , H04L9/0822 , H04L9/0894 , H04L63/0485 , H04L63/164 , H04L2463/062
摘要： Methods and systems are disclosed for providing secured data transmission and for managing cryptographic keys. One embodiment of the invention provides secure key management when separate devices are used for generating and utilizing the keys. One embodiment of the invention provides secure storage of keys stored in an unsecured database. One embodiment of the invention provides key security in conjunction with high speed decryption and encryption, without degrading the performance of the data network.
摘要翻译：公开了用于提供安全数据传输和用于管理加密密钥的方法和系统。当使用单独的设备来产生和利用密钥时，本发明的一个实施例提供安全的密钥管理。本发明的一个实施例提供了存储在不安全数据库中的密钥的安全存储。本发明的一个实施例提供了与高速解密和加密相结合的关键安全性，而不降低数据网络的性能。

7. 发明授权

US5497421A Method and apparatus for protecting the confidentiality of passwords in a distributed data processing system 失效
公开(公告)号：US5497421A
公开(公告)日：1996-03-05
申请号：US314181
申请日：1994-09-28
申请人： Charles W. Kaufman , Morrie Gasser , Butler W. Lampson , Joseph J. Tardo , Kannan Alagappan
发明人： Charles W. Kaufman , Morrie Gasser , Butler W. Lampson , Joseph J. Tardo , Kannan Alagappan
IPC分类号： G06F1/00 , G06F21/00 , H04K1/00
CPC分类号： G06F21/79 , G06F21/335 , G06F21/85 , H04L9/0822 , H04L9/0825 , H04L9/0863 , H04L9/3226 , H04L9/3236 , G06F2221/2143
摘要： Apparatus for protecting the confidentiality of a user's password during a remote login authentication exchange between a user node and a directory service node of a distributed, public key cryptography system includes a specialized server application functioning as an intermediary agent for the login procedure. The login agent has responsibility for approving the user's login attempt and distributing a private key to the user. However, the login agent is not trusted with the user's password and is therefore a "semi-trusted" node. In another aspect of the invention, a login protocol enables remote authentication of the user password without transmitting the password over the network.

8. 发明授权

US5070528A Generic encryption technique for communication networks 失效
标题翻译：通用网络通用加密技术
公开(公告)号：US5070528A
公开(公告)日：1991-12-03
申请号：US546629
申请日：1990-06-29
申请人： William R. Hawe , Joseph J. Tardo , Charles W. Kaufman , Amar Gupta , Barry A. Spinney , Gregory M. Waters
发明人： William R. Hawe , Joseph J. Tardo , Charles W. Kaufman , Amar Gupta , Barry A. Spinney , Gregory M. Waters
IPC分类号： H04L29/06
CPC分类号： H04L29/06
摘要： A method and related cryptographic processing apparatus for handling information packets that are to be cryptographically processed prior to transmission onto a communication network, or that are to be locally cryptographically processed and looped back to a node processor. A special cryptographic preamble is included in each information packet that is to be subject to cryptographic processing. The cryptographic preamble contains an offset value pointing to the starting location of information that is to be processed, and completely defines the type of cryptographic processing to be performed. The cryptographic processor can then perform the processing as specified in the preamble without regard to a specific protocol. If the packet is to be transmitted onto the network, the preamble is stripped from the packet after cryptographic processing, so that the formats of packets transmitted onto the network will be unaffected by the preamble. Cryptographic processing modes include encryption of data for outbound transmission, encryption of a cipher key for loopback to the node processor, encryption or decryption of data for loopback to the node processor, and computation of an integrity check value for loopback to the node processor.

9. 发明授权

US07600131B1 Distributed processing in a cryptography acceleration chip 有权
标题翻译：密码加速芯片中的分布式处理
公开(公告)号：US07600131B1
公开(公告)日：2009-10-06
申请号：US09610798
申请日：2000-07-06
申请人： Suresh Krishna , Christopher Owen , Derrick C. Lin , Joseph J. Tardo , Patrick Law
发明人： Suresh Krishna , Christopher Owen , Derrick C. Lin , Joseph J. Tardo , Patrick Law
IPC分类号： H04L9/00
CPC分类号： H04L63/0428 , G06F9/3879 , G06F21/604 , G06F21/72 , G06F2207/7219 , H04L63/0485 , H04L63/164
摘要： Provided is an architecture for a cryptography accelerator chip that allows significant performance improvements over previous prior art designs. In various embodiments, the architecture enables parallel processing of packets through a plurality of cryptography engines and includes a classification engine configured to efficiently process encryption/decryption of data packets. Cryptography acceleration chips in accordance may be incorporated on network line cards or service modules and used in applications as diverse as connecting a single computer to a WAN, to large corporate networks, to networks servicing wide geographic areas (e.g., cities). The present invention provides improved performance over the prior art designs, with much reduced local memory requirements, in some cases requiring no additional external memory. In some embodiments, the present invention enables sustained full duplex Gigabit rate security processing of IPSec protocol data packets.
摘要翻译：提供了一种用于加密加速器芯片的架构，其允许比先前的现有技术设计显着的性能改进。在各种实施例中，架构能够通过多个密码引擎并行处理分组，并且包括被配置为有效地处理数据分组的加密/解密的分类引擎。密码学加速芯片可以被合并在网络线卡或服务模块上，并用于将单个计算机连接到WAN，大型企业网络以及服务于广泛地理区域（例如，城市）的网络的应用。本发明提供了相对于现有技术设计的改进的性能，其中局部存储器要求大大降低，在某些情况下不需要额外的外部存储器。在一些实施例中，本发明实现IPSec协议数据分组的持续全双工千兆比特速率安全处理。

10. 发明授权

US5235644A Probabilistic cryptographic processing method 失效
标题翻译：概率密码处理方法
公开(公告)号：US5235644A
公开(公告)日：1993-08-10
申请号：US546614
申请日：1990-06-29
申请人： Amar Gupta , Butler W. Lampson , William R. Hawe , Joseph J. Tardo , Charles W. Kaufman , Mark F. Kempf , Morrie Gasser , B. J. Herbison
发明人： Amar Gupta , Butler W. Lampson , William R. Hawe , Joseph J. Tardo , Charles W. Kaufman , Mark F. Kempf , Morrie Gasser , B. J. Herbison
IPC分类号： H04L29/02
CPC分类号： H04L29/02
摘要： A decryption method, and associated cryptographic processor, for performing in-line decryption of information frames received from a communication network through a first in-line processing stage. As an information packet is streamed into the cryptographic processor, a determination is made to an acceptable level of probability whether the packet contains data that should be decrypted. The decision whether or not decrypt is made by analyzing the incoming packet header, recognizing a limited number of packet formats, and further parsing the packet to locate any encrypted data and to make sure that the packet is not a segment of a larger message. Falsely decrypted packets are looped back through the cryptographic processor, to regenerate the data that was falsely decrypted. Decryption and encryption are performed in such a manner that a false decryption is completely reversible without loss of data. Special treatment is provided for packets containing data that cannot be divided into an integral number of standard blocks required for decryption processing.
摘要翻译：一种解密方法和相关联的密码处理器，用于通过第一串联处理级来执行从通信网络接收的信息帧的在线解密。当信息分组被流传输到密码处理器中时，确定分组是否包含应被解密的数据的可接受概率水平。通过分析进入的分组报头，识别有限数量的分组格式以及进一步解析分组以定位任何加密的数据并确保分组不是更大的消息的分段来进行解密的决定。虚假解密的数据包通过密码处理器环回，以重新生成被错误解密的数据。执行解密和加密，使得假解密完全可逆而不丢失数据。对于包含不能被分解为解密处理所需的整数个标准块的数据的数据包，提供特殊处理。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式