公开(公告)号：US11429289B2

公开(公告)日：2022-08-30

申请号：US16832125

申请日：2020-03-27

Applicant: Intel Corporation

Inventor： Karunakara Kotary ,  Pannerkumar Rajagopal ,  Sahil Dureja ,  Mohamed Haniffa ,  Prashant Dewan

IPC: G06F3/06 ,  G06F13/16 ,  G06F9/4401

Abstract: An apparatus to facilitate memory map security in a system on chip (SOC), is disclosed. The apparatus includes a micro controller to receive a request to grant a host device an access to a memory device and perform an alias checking process to verify accuracy of a memory map of the memory device.

公开(公告)号：US11416370B2

公开(公告)日：2022-08-16

申请号：US16832163

申请日：2020-03-27

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Uttam Sengupta ,  Aditya Katragada

IPC: G06F11/34 ,  H04L9/32 ,  H04L67/125

Abstract: An apparatus to collect firmware measurement data at a computing system is disclosed. The apparatus includes a plurality of agents, each including a non-volatile memory storing firmware executed to perform a function associated with the agent, verification logic to generate measurement data by verifying the integrity of the firmware and a register to store the measurement data, and a processor to execute an instruction to collect firmware measurement data from each of the plurality of agents.

公开(公告)号：US11409877B2

公开(公告)日：2022-08-09

申请号：US16832152

申请日：2020-03-27

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Chao Zhang ,  Nivedita Aggarwal ,  Aditya Katragada ,  Mohamed Haniffa ,  Kenji Chen

IPC: G06F21/57 ,  G06F8/65 ,  G06F21/64 ,  G06F21/44

Abstract: An apparatus to verify firmware in a computing system, comprising a non-volatile memory, including firmware memory to store agent firmware associated with each of a plurality of interconnect protocol (IP) agents and version memory to store security version numbers (SVNs) included in the agent firmware, a security controller comprising verifier logic to verify an integrity of the version memory by applying a hash algorithm to contents of the version memory to generate a SVN hash, and a trusted platform module (TPM) to store the SVN hash.

公开(公告)号：US20220197825A1

公开(公告)日：2022-06-23

申请号：US17482370

申请日：2021-09-22

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Baiju Patel

IPC: G06F12/14 ,  G06F13/28 ,  G06F12/02

Abstract: The disclosed embodiments are generally directed to inline encryption of data at line speed at a chip interposed between two memory components. The inline encryption may be implemented at a System-on-Chip (“SOC” or “SOC”). The memory components may comprise Non-Volatile Memory express (NVMe) and a dynamic random access memory (DRAM). An exemplary device includes an SOC to communicate with a Non-Volatile Memory NVMe circuitry to provide direct memory access (DMA) to an external memory component. The SOC may include: a cryptographic controller circuitry; a cryptographic memory circuitry in communication with the cryptographic controller, the cryptographic memory circuitry configured to store instructions to encrypt or decrypt data transmitted through the SOC; and an encryption engine in communication with the crypto controller circuitry, the encryption engine configured to encrypt or decrypt data according to instructions stored at the crypto memory circuitry. Other embodiments are also disclosed and claimed.

公开(公告)号：US20220159081A1

公开(公告)日：2022-05-19

申请号：US17591116

申请日：2022-02-02

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Siddhartha Chhabra ,  Uttam K. Sengupta ,  Howard C. Herbert

IPC: H04L67/142 ,  H04L9/40

Abstract: Technologies disclosed herein provide a method for receiving at a device from a remote server, a request for state information from a first processor of the device, obtaining the state information from one or more registers of the first processor based on a request structure indicated by a first instruction of a software program executing on the device, and generating a response structure based, at least in part, on the obtained state information. The method further includes using a cryptographic algorithm and a shared key established between the device and the remote server to generate a signature based, at least in part, on the response structure, and communicating the response structure and the signature to the remote server. In more specific embodiments, both the response structure and the request structure each include a same nonce value.

公开(公告)号：US20220100865A1

公开(公告)日：2022-03-31

申请号：US17548825

申请日：2021-12-13

Applicant: Intel Corporation

Inventor： Baiju Patel ,  Prashant Dewan

IPC: G06F21/57 ,  H04L9/14 ,  H04L9/32 ,  G06F21/60 ,  H04L9/08 ,  G06F9/4401

Abstract: An apparatus to facilitate security within a computing system is disclosed. The apparatus includes a storage drive, a controller, comprising a trusted port having one or more key slots to program one or more cryptographic keys and an encryption engine to receive the cryptographic keys via the one or more key slots, encrypt data written to the storage drive using the cryptographic keys and decrypt data read from the storage drive using the cryptographic keys.

公开(公告)号：US20210319124A1

公开(公告)日：2021-10-14

申请号：US17357978

申请日：2021-06-25

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Siddhartha Chhabra ,  Junhai Qiu ,  Ke Sun

IPC: G06F21/62

Abstract: Methods and apparatus relating to Organic Light Emitting Diode (OLED) compensation based on protected content are described. In an embodiment, secure memory stores data that is only accessible by trusted logic. Display controller logic circuitry updates pixel values to be stored in the secure memory based on a plurality of frames. The display controller logic circuitry allows access by untrusted software to the updated pixel values after a first number of updates to the pixel values stored in the secure memory. Other embodiments are also disclosed and claimed.

公开(公告)号：US20210303692A1

公开(公告)日：2021-09-30

申请号：US16832489

申请日：2020-03-27

Applicant: Intel Corporation

Inventor： Vinupama Godavarthi ,  Andrzej Mialkowski ,  Kar Leong Wong ,  Aditya Katragada ,  Maciej Kusio ,  Prashant Dewan ,  Karunakara Kotary

IPC: G06F21/57 ,  G06F21/78 ,  G06F12/0804

Abstract: An apparatus to implement an IP independent secure firmware load into an IP agent without a ROM to establish hardware root of trust is disclosed. The apparatus includes a plurality of agents, at least one agent including an isolated memory region accessible only to a trusted entity of the at least one agent and a main memory, and a processor to allocate a section of the isolated memory region of the at least one agent, verify a first stage firmware module, the first stage firmware module comprising instructions to enable the at least one agent to load and verify a second stage firmware module, place the first stage firmware module into memory of the at least one agent without a ROM to establish the hardware root of trust

公开(公告)号：US20210303691A1

公开(公告)日：2021-09-30

申请号：US16832416

申请日：2020-03-27

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Karunakara Kotary ,  Nivedita Aggarwal ,  Vinupama Godavarthi ,  Aditya Katragada ,  Mohamed Haniffa ,  Tung Lun Loo

IPC: G06F21/57

Abstract: An apparatus to implement an IP independent firmware load is disclosed. The apparatus includes a plurality of agents, a plurality of agents, at least one agent including a memory to store firmware to be executed by the agent to perform a function associated with the agent and a register to store enumeration data for the firmware load mechanism of the IP, and a processor to initiate an enumeration process to read the enumeration data from the register of the at least one agent, make a decision based on that data to retrieve a firmware module from a storage device, verify the firmware module, and load the firmware module into the memory of the at least one agent.

公开(公告)号：US11093648B2

公开(公告)日：2021-08-17

申请号：US16457904

申请日：2019-06-28

Applicant: Intel Corporation

Inventor： Sudeep Divakaran ,  Ranjit Sivaram Narjala ,  Prashant Dewan

IPC: G06F21/62 ,  G06F9/451 ,  G06F3/0488 ,  G06F3/0484 ,  G06F3/0362 ,  G06F3/0482 ,  G06F21/32

Abstract: Technologies provide hardware-assisted privacy protection of sensor data. One embodiment includes unlocking a user interface coupled to a trusted execution environment of a processor in a device, where the user interface includes a plurality of selectable settings associated with a plurality of access levels for sensor data captured by a sensor. The embodiment also includes receiving a selection signal from the user interface indicating that a user selected a first setting associated with a first access level for the sensor data captured by the sensor, and restricting access to the sensor data based on a first set of one or more entities associated with the first access level. In more specific embodiments, the user interface includes a knob that is rotatably attached to a housing of the device or a privacy panel including a slider bar that is to be displayed on a touch screen display of the device.