会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 2. 发明申请
    • System and Method for Processor-Based Security
    • 基于处理器的安全性的系统和方法
    • US20100281273A1
    • 2010-11-04
    • US12689674
    • 2010-01-19
    • Ruby B. LeeDavid Champagne
    • Ruby B. LeeDavid Champagne
    • G06F12/14G06F21/22
    • F04B33/00G06F21/57G06F21/575G06F21/72
    • A system and method for processor-based security is provided, for on-chip security and trusted computing services for software applications. A processor is provided having a processor core, a cache memory, a plurality of registers for storing at least one hash value and at least one encryption key, a memory interface, and at least one on-chip instruction for creating a secure memory area in a memory external to the processor, and a hypervisor program executed by the processor. The hypervisor program instructs the processor to execute the at least one on-chip instruction to create a secure memory area for a software area for a software module, and the processor encrypts data written to, and decrypts data read from, the external memory using the at least one encryption key and the verifying data read from the external memory using the at least one hash value. Secure module interactions are provided, as well as the generation of a power-on key which can be used to protect memory in the event of a re-boot event. Lightweight, run-time attestation reports are generated which include selected information about software modules executed by the processors, for use in determining whether the processor is trusted to provide secure services.
    • 提供了一种用于基于处理器的安全性的系统和方法,用于软件应用的片上安全和可信计算服务。 提供一种处理器,其具有处理器核心,高速缓存存储器,用于存储至少一个散列值的多个寄存器和至少一个加密密钥,存储器接口以及用于创建安全存储器区域的至少一个片上指令 处理器外部的存储器和由处理器执行的管理程序程序。 管理程序指令处理器执行至少一个片上指令以为软件模块的软件区域创建安全存储区域,并且处理器使用以下方式对写入的数据和从外部存储器读取的数据进行加密 至少一个加密密钥和使用所述至少一个哈希值从外部存储器读取的验证数据。 提供安全模块交互,以及生成可以在重新启动事件的情况下保护内存的开机密钥。 生成轻量级的运行时证明报告,其中包括有关由处理器执行的软件模块的选定信息,用于确定处理器是否被信任以提供安全服务。
    • 3. 发明申请
    • Parallel Read Functional Unit for Microprocessors
    • 微处理器并行读功能单元
    • US20100228939A1
    • 2010-09-09
    • US12690040
    • 2010-01-19
    • Ruby B. LeeYu-Yuan Chen
    • Ruby B. LeeYu-Yuan Chen
    • G06F12/00
    • G06F12/00G06F9/30032G06F9/30036G06F9/3004G06F21/72H04L9/0631H04L2209/04H04L2209/12
    • A functional unit for a microprocessor is provided, which allows for fast, parallel data read, write, and manipulation operations in the microprocessor that are useful for a number of software applications, such as cryptography. The functional unit includes first and second source registers for receiving first and second data items to be processed by the functional unit, first and second banks of memory tables, a combinational logic circuit, and a decoder. The first and second banks of memory tables are in communication with the first source register, and each of the tables is indexed by an index comprising a portion of the first data item received by the first source register. Each index points to a lookup result in a respective one of the memory tables. The combinational logic circuit is in communication with the first and second banks of memory tables and the second source register, receives the lookup results, and processes the lookup results and the second data item in the second source register to produce a result data item. The decoder circuit is in communication with the combinational logic circuit, and extracts an operational code from an instruction supplied to the functional unit, decodes the operational code, and controls the combinational logic circuit in accordance with the operational code.
    • 提供了一种用于微处理器的功能单元,其允许在微处理器中的快速,并行数据读取,写入和操作操作,其对于诸如密码学的许多软件应用是有用的。 功能单元包括用于接收要由功能单元处理的第一和第二数据项的第一和第二源寄存器,存储器表的第一和第二组,组合逻辑电路和解码器。 第一和第二存储表组与第一源寄存器通信,并且每个表由包括由第一源寄存器接收的第一数据项的一部分的索引索引。 每个索引指向相应的一个存储器表中的查找结果。 组合逻辑电路与第一和第二组存储器表和第二源寄存器通信,接收查找结果,并处理第二源寄存器中的查找结果和第二数据项以产生结果数据项。 解码器电路与组合逻辑电路通信,并从提供给功能单元的指令中提取操作码,解码操作码,并根据操作码控制组合逻辑电路。
    • 4. 发明授权
    • Variable reordering (Mux) instructions for parallel table lookups from registers
    • 来自寄存器的并行表查找的可变重排序(Mux)指令
    • US07424597B2
    • 2008-09-09
    • US10403785
    • 2003-03-31
    • Ruby B. LeeDale Morris
    • Ruby B. LeeDale Morris
    • G06F9/312G06F9/315
    • G06F9/30032G06F9/3004
    • Parallel table lookups are implemented using variable Mux instructions to reorder data. Table data can be represented in a “table” register, while the desired ordering can be represented in an “Index” register. A direct variable Mux instruction can specify the table register and the index register as arguments, along with a result register. The instruction writes at least some of the data from the table register into the result register as specified in the index register. If the entire table cannot fit within a single register, entries can be divided between two or more table registers. An indirect variable Mux instruction can specify both a table-register-select register and a subword-location-select register. Both the direct and indirect Mux instructions can be used with entry data that is divided in accordance with significance between registers. In that case, plural Mux instructions are used with UnPack instructions that concatenate portions of the table entries.
    • 使用变量Mux指令实现并行表查找,以重新排序数据。 表数据可以在“表”寄存器中表示,而所需的顺序可以在“索引”寄存器中表示。 直接变量Mux指令可以指定表寄存器和索引寄存器作为参数,以及结果寄存器。 该指令将表寄存器中的至少一些数据写入索引寄存器中指定的结果寄存器。 如果整个表不能放在单个寄存器中,则可以在两个或多个表寄存器之间划分条目。 间接变量Mux指令可以指定表寄存器选择寄存器和子字选择寄存器。 直接和间接MUX指令都可以与根据寄存器之间的重要性划分的条目数据一起使用。 在这种情况下,多个Mux指令用于连接表项部分的UnPack指令。
    • 5. 发明授权
    • Method and system for performing permutations using permutation instructions based on butterfly networks
    • 使用基于蝴蝶网络的置换指令进行排列的方法和系统
    • US06922472B2
    • 2005-07-26
    • US09850237
    • 2001-05-07
    • Ruby B. LeeXiao YangManish Vachharajani
    • Ruby B. LeeXiao YangManish Vachharajani
    • H04L9/34H04K1/04H04K1/00H04K1/06H04K3/00
    • G06F9/30032G06F9/30018G06F9/30036H04L9/34
    • The present invention provides permutation instructions which can be used in software executed in a programmable processor for solving permutation problems in cryptography, multimedia and other applications. The permute instructions are based on a Benes network comprising two butterfly networks of the same size connected back-to-back. Intermediate sequences of bits are defined that an initial sequence of bits from a source register are transformed into. Each intermediate sequence of bits is used as input to a subsequent permutation instruction. Permutation instructions are determined for permitting the initial source sequence of bits into one or more intermediate sequence of bits until a desired sequence is obtained. The intermediate sequences of bits are determined by configuration bits. The permutation instructions form a permutation instruction sequence of at least one instruction. At most 21 gr/m permutation instructions are used in the permutation instruction sequence, where r is the number of k-bit subwords to be permuted, and m is the number of network stages executed in one instruction. The permutation instructions can be used to permute k-bit subwords packed into an n-bit word, where k can be 1, 2, . . . , or n bits, and k*r=n.
    • 本发明提供了可用于在可编程处理器中执行的用于解密密码学,多媒体和其他应用中的置换问题的软件中的置换指令。 该置换指令是基于一个Benes网络,它包括两个背对背连接的相同尺寸的蝴蝶网络。 定义位的中间序列,来自源寄存器的初始位序列被转换成。 每个中间位数序列用作后续排列指令的输入。 确定置换指令,以允许位的初始源序列到一个或多个中间比特序列,直到获得所需的序列。 位的中间序列由配置位确定。 置换指令形成至少一个指令的置换指令序列。 在排列指令序列中使用最多21个字节/ m的置换指令,其中r是要置换的k位子字的数量,m是在一个指令中执行的网络级数。 置换指令可用于置换打包成n位字的k位子词,其中k可以是1,2。 。 。 ,或n位,并且k * r = n。
    • 6. 发明授权
    • Processor for performing subword permutations and combinations
    • 用于执行子字排列和组合的处理器
    • US06381690B1
    • 2002-04-30
    • US08509867
    • 1995-08-01
    • Ruby B. Lee
    • Ruby B. Lee
    • G06F9315
    • G06F7/762G06F7/76G06F9/30032G06F9/30036
    • An apparatus for operating on the contents of an input register to generate the contents of an output register which contains a permutation, with or without repetitions, or a combination of the contents of the input register. The apparatus partitions the input register into a plurality of sub-words, each sub-word being characterized by a location in the input register and a length greater than one bit. In response to an instruction specifying a rearrangement of the input register, the present invention directs at least one of the sub-words in the input register to a location in the output register that differs from the location occupied by the sub-word in the input register. The ordering of the sub-words in the output register differ from the order obtainable by a single shift instruction. In the preferred embodiment of the present invention, the invention is implemented by modifying a conventional shifter comprising a plurality of layers of multiplexers. The modification comprises independently setting the control signals for at least one of the multiplexers in at least one of the layers.
    • 一种用于对输入寄存器的内容进行操作以产生包含有或没有重复的排列或输入寄存器的内容的组合的输出寄存器的内容的装置。 该设备将输入寄存器分割为多个子字,每个子字的特征在于输入寄存器中的一个位置,长度大于一位。 响应于指定输入寄存器的重排的指令,本发明将输入寄存器中的至少一个子字引导到输出寄存器中与输入中的子字占据的位置不同的位置 寄存器。 输出寄存器中的子字的排序与通过单个移位指令可获得的顺序不同。 在本发明的优选实施例中,本发明通过修改包括多层复用器的常规移位器来实现。 修改包括独立地设置至少一个层中的多路复用器中的至少一个的控制信号。
    • 8. 发明授权
    • System and method for processor-based security
    • 用于基于处理器的安全性的系统和方法
    • US08738932B2
    • 2014-05-27
    • US12689674
    • 2010-01-19
    • Ruby B. LeeChampagne David
    • Ruby B. LeeChampagne David
    • G06F21/00
    • F04B33/00G06F21/57G06F21/575G06F21/72
    • A system and method for processor-based security is provided, for on-chip security and trusted computing services for software applications. A processor is provided having a processor core, a cache memory, a plurality of registers for storing at least one hash value and at least one encryption key, a memory interface, and at least one on-chip instruction for creating a secure memory area in a memory external to the processor, and a hypervisor program executed by the processor. The hypervisor program instructs the processor to execute the at least one on-chip instruction to create a secure memory area for a software area for a software module, and the processor encrypts data written to, and decrypts data read from, the external memory using the at least one encryption key and the verifying data read from the external memory using the at least one hash value. Secure module interactions are provided, as well as the generation of a power-on key which can be used to protect memory in the event of a re-boot event. Lightweight, run-time attestation reports are generated which include selected information about software modules executed by the processors, for use in determining whether the processor is trusted to provide secure services.
    • 提供了一种用于基于处理器的安全性的系统和方法,用于软件应用的片上安全和可信计算服务。 提供一种处理器,其具有处理器核心,高速缓存存储器,用于存储至少一个散列值的多个寄存器和至少一个加密密钥,存储器接口以及用于创建安全存储器区域的至少一个片上指令 处理器外部的存储器和由处理器执行的管理程序程序。 管理程序指令处理器执行至少一个片上指令以为软件模块的软件区域创建安全存储区域,并且处理器使用以下方式对写入的数据和从外部存储器读取的数据进行加密 至少一个加密密钥和使用所述至少一个哈希值从外部存储器读取的验证数据。 提供安全模块交互,以及生成可以在重新启动事件的情况下保护内存的开机密钥。 生成轻量级的运行时证明报告,其中包括有关由处理器执行的软件模块的选定信息,用于确定处理器是否被信任以提供安全服务。
    • 10. 发明授权
    • Parallel subword instructions for directing results to selected subword locations of data processor result register
    • 用于将结果指向数据处理器结果寄存器的选定子字位置的并行子字指令
    • US07730292B2
    • 2010-06-01
    • US10403977
    • 2003-03-31
    • Ruby B. Lee
    • Ruby B. Lee
    • G06F7/00G06F15/00
    • G06F9/30021G06F9/30029G06F9/30032G06F9/30036G06F9/30109
    • In the context of a microprocessor and a program, the invention provides parallel subword compare instructions that store results in a selectable intra-register subword location. In a targeting approach, an instruction permits the location to be specified; alternatively, there can be plural instructions, each associated with one of the locations. In a replicating approach, plural replicas are stored in the alternative locations. In a shifting approach, the instruction moves prior results, so that the number of subsequent iterations of the instruction determines the location of a result. The invention provides for overwriting and content-preserving instructions, and for overlapping and separate locations. The invention allows results from multiple parallel subword compare operations with relatively few instructions. The invention also provides for other parallel subword instructions.
    • 在微处理器和程序的上下文中,本发明提供了将结果存储在可选择的寄存器内单词位置的并行子字比较指令。 在定位方法中,指令允许指定位置; 或者,可以有多个指令,每个指令与一个位置相关联。 在复制方法中,多个副本存储在替代位置。 在移动方法中,指令移动先前的结果,使得指令的后续迭代的数量确定结果的位置。 本发明提供重写和内容保存指令以及重叠和分开的位置。 本发明允许具有相对较少指令的多个并行子字比较操作的结果。 本发明还提供了其他并行子字指令。