公开(公告)号：US10715335B2

公开(公告)日：2020-07-14

申请号：US16026657

申请日：2018-07-03

Applicant: Intel Corporation

Inventor： Steffen Schulz ,  Rafael Misoczki ,  Manoj R. Sastry ,  Jesse Walker

IPC: H04L29/06 ,  H04L9/32 ,  H04L29/08 ,  H04L9/08 ,  G06F8/65 ,  H04L9/14 ,  H04L9/30

Abstract: In a method for validating software updates, a data processing system contains a current version of a software component. The data processing system saves at least first and second current advance keys (AKs). After saving the current AKs, the data processing system receives an update package for a new version of the software component. The data processing system extracts a digital signature and two or more new AKs from the update package. The data processing system uses at least one current AK to determine whether the digital signature is valid. In response to a determination that the digital signature is valid, the data processing system uses a software image from the update package to update the software component, and the data processing system saves the new AKs, for subsequent utilization as the current AKs.

公开(公告)号：US20190342835A1

公开(公告)日：2019-11-07

申请号：US15911540

申请日：2018-03-05

Applicant: Intel Corporation

Inventor： Xiaohong Gong ,  Jesse Walker

IPC: H04W52/02 ,  G06F1/3209 ,  H04W76/28 ,  H04W76/14 ,  G06F1/3228

Abstract: Embodiments provide techniques for device power management in wireless networks. For instance, an apparatus may include a power management module, and a transceiver module. The power management module determines a beacon interval and a wakeup interval. The transceiver module to send a transmission to one or more remote devices that includes the beacon interval and the wakeup interval. The beacon interval indicates a time interval between consecutive beacon transmissions of the apparatus, and the wakeup interval indicates a time interval between when the apparatus receives two consecutive beacons from a peer device.

公开(公告)号：US10404468B2

公开(公告)日：2019-09-03

申请号：US15351606

申请日：2016-11-15

Applicant: Intel Corporation

Inventor： Santosh Ghosh ,  Manoj R. Sastry ,  Jesse Walker ,  Li Zhao ,  Rafael Misoczki

IPC: G06F11/30 ,  G06F12/14 ,  H04L9/32 ,  H04L9/06

Abstract: Technologies for counter with CBC-MAC (CCM) mode encryption include a computing device that performs a CBC-MAC authentication operation on a message with an encryption key, using a 64-bit block cipher to generate a message authentication code. The computing device generates a first 64-bit authentication block including an 8-bit flag field and a length field of between 11 and 32 bits. The flag field indicates the length of the length field. Performing the CBC-MAC authentication operation includes formatting the message into one or more 64-bit authentication blocks. The computing device performs a counter mode encryption operation on the message with the encryption key using the 64-bit block cipher to generate a cipher text. Performing the counter mode encryption includes generating multiple 64-bit keystream blocks. The computing device generates an authentication tag based on the message authentication code and a first keystream block of keystream blocks. Other embodiments are described and claimed.

公开(公告)号：US20190246268A1

公开(公告)日：2019-08-08

申请号：US16188848

申请日：2018-11-13

Applicant: INTEL CORPORATION

Inventor： Jesse Walker ,  Shlomo Ovadia ,  Suman Sharma

IPC: H04W12/02 ,  H04L9/08 ,  H04L29/06 ,  H04W76/14

CPC classification number: H04W12/02 ,  H04L9/083 ,  H04L63/0428 ,  H04L63/062 ,  H04L2209/80 ,  H04L2463/061 ,  H04L2463/062 ,  H04W76/14 ,  H04W84/12 ,  H04W84/18

Abstract: Method and system of secured direct link set-up (DLS) for wireless networks. In accordance with aspects of the method, techniques are disclosed for setting up computationally secure direct links between stations in a wireless network in a manner that is computationally secure. A direct link comprising a new communication session is set up between first and second stations in a wireless local area network (WLAN) hosted by an access point (AP), the direct link comprising a new communication session. The AP generates a unique session key for the new communication session and transfers secured copies of the session key to each of the first and second stations in a manner under which only the first and second stations can obtain the session key. A security mechanism is then implemented on the unsecured direct link to secure the direct link between the first and second stations using a secure session key derived from the session key.

公开(公告)号：US10187385B2

公开(公告)日：2019-01-22

申请号：US14369219

申请日：2013-11-26

Applicant: INTEL CORPORATION

Inventor： Adi Shaliv ,  Jesse Walker

IPC: H04L29/06 ,  G06F21/44 ,  H04L9/32

Abstract: Various embodiments are generally directed to techniques to form secure communications between two computing devices in which the chain of trust of those communications is extended to a particular application routine executed by one of the two computing devices. An apparatus includes a processor component; a verifying component to verify a link attestation credential received from a server to verify an ability of the server to form a secure pipeline, and to signal an application routine with an indication of a result of the verification by the verifying component; and a hash component to generate a return hash of a return signature associated with the application routine to indicate to the server that the application routine has also verified the link attestation credential to form the secure pipeline between the server and the application routine. Other embodiments are described and claimed.

公开(公告)号：US20180131509A1

公开(公告)日：2018-05-10

申请号：US15691558

申请日：2017-08-30

Applicant: Intel Corporation

Inventor： Jesse Walker ,  Gyan Prakash ,  David Stanasolovich ,  James R. Gregg

IPC: H04L9/08 ,  H04L9/30 ,  H04L9/32 ,  G06F21/33

CPC classification number: H04L9/0819 ,  G06F21/33 ,  G06F2221/2117 ,  G06Q20/382 ,  G06Q20/3821 ,  G06Q20/3827 ,  G06Q20/40 ,  G06Q2220/00 ,  H04L9/30 ,  H04L9/3239 ,  H04L9/3263 ,  H04L63/061 ,  H04L63/0823 ,  H04L2209/24

Abstract: Systems and methods may provide for online identification and authentication. In one example, the method may include generating a credential to represent a relationship based on a common ground of authenticated communication between a first user and a second user, identifying the second user to the first user, authenticating the relationship of the second user to the first user, and initiating, upon authentication, a communication between the first user and the second user.

公开(公告)号：US20170272415A1

公开(公告)日：2017-09-21

申请号：US15070166

申请日：2016-03-15

Applicant: Intel Corporation

Inventor： Meiyuan Zhao ,  Jesse Walker ,  Xiruo Liu ,  Steffen Schulz ,  Jianqing Zhang

IPC: H04L29/06

CPC classification number: H04L63/061 ,  H04L63/0807 ,  H04L63/0884 ,  H04W12/06

Abstract: In one embodiment, a computing device includes at least one hardware processor to execute instructions, a network interface to enable communication with a second computing device and a third computing device, and at least one storage medium. Such medium may store instructions that when executed by the computing device enable the computing device to request delegation of a key provisioning privilege for the second computing device from the third computing device via a parent-guardian delegation protocol comprising a three-party key distribution protocol with the second computing device and the third computing device, the three-party key distribution protocol having interposed therein a two-party authenticated key exchange protocol between the computing device and the third computing device. Other embodiments are described and claimed.

公开(公告)号：US20170118633A1

公开(公告)日：2017-04-27

申请号：US15194237

申请日：2016-06-27

Applicant: INTEL CORPORATION

Inventor： Jesse Walker ,  Shlomo Ovadia ,  Suman Sharma

IPC: H04W12/02 ,  H04L9/08 ,  H04W76/02 ,  H04L29/06

CPC classification number: H04W12/02 ,  H04L9/083 ,  H04L63/0428 ,  H04L63/062 ,  H04L2209/80 ,  H04L2463/061 ,  H04L2463/062 ,  H04W76/14 ,  H04W84/12 ,  H04W84/18

Abstract: Method and system of secured direct link set-up (DLS) for wireless networks. In accordance with aspects of the method, techniques are disclosed for setting up computationally secure direct links between stations in a wireless network in a manner that is computationally secure. A direct link comprising a new communication session is set up between first and second stations in a wireless local area network (WLAN) hosted by an access point (AP), the direct link comprising a new communication session. The AP generates a unique session key for the new communication session and transfers secured copies of the session key to each of the first and second stations in a manner under which only the first and second stations can obtain the session key. A security mechanism is then implemented on the unsecured direct link to secure the direct link between the first and second stations using a secure session key derived from the session key.

公开(公告)号：US09378352B2

公开(公告)日：2016-06-28

申请号：US13763116

申请日：2013-02-08

Applicant: Intel Corporation

Inventor： Gyan Prakash ,  Venkatesh Ramamurthy ,  Hong Li ,  Jesse Walker

IPC: G06F21/35 ,  G06F21/36 ,  H04L29/06 ,  H04W12/06

CPC classification number: G06F21/35 ,  G06F21/36 ,  H04L63/0853 ,  H04L2463/082 ,  H04W12/06

Abstract: Mobile device, client device and server associated with client-server authentication are described. In embodiments, the mobile device may comprise a camera and a token extractor. The token extractor may be coupled to the camera and configured to analyze an image, captured by the camera. The captured image may contain a barcode and may be displayed on a client device in response to a request of a server for access to a resource. The barcode may contain a token, which may be extracted by the token extractor to be used to gain access to a resource requested from a server. Other embodiments may be described and/or claimed.

Abstract translation: 描述了与客户机 - 服务器认证相关联的移动设备，客户端设备和服务器。 在实施例中，移动设备可以包括相机和令牌提取器。 令牌提取器可以耦合到相机并且被配置为分析由相机捕获的图像。 捕获的图像可以包含条形码，并且可以响应于服务器访问资源的请求而在客户端设备上显示。 条形码可以包含令牌，其可以由令牌提取器提取以被用于获得对从服务器请求的资源的访问。 可以描述和/或要求保护其他实施例。

公开(公告)号：US09307409B2

公开(公告)日：2016-04-05

申请号：US14141477

申请日：2013-12-27

Applicant: Intel Corporation

Inventor： Farhana Asrar Sheikh ,  Patrick Koeberl ,  Jesse Walker ,  Hossein Alavi ,  Men Long ,  Ram Kumar Krishnamurthy ,  Alpa T. Narendra Trivedi

IPC: H04L29/06 ,  H04W12/08 ,  H04W24/04 ,  H04W88/06

CPC classification number: H04W12/08 ,  H04L63/10 ,  H04L67/025 ,  H04L67/04 ,  H04W24/04 ,  H04W88/06

Abstract: Some demonstrative embodiments include apparatuses, systems and/or methods of protecting domains of a multimode wireless radio transceiver. For example, an apparatus may include a protection domain controller (PDC) to restrict access of a configuration software to a protection domain of a plurality of protection domains of a multimode wireless radio transceiver based on a security level of the configuration software, wherein the protection domain includes one or more radio configuration parameters of the multimode wireless radio transceiver.

Abstract translation: 一些演示实施例包括保护多模无线电收发机的域的设备，系统和/或方法。 例如，设备可以包括保护域控制器（PDC），其基于配置软件的安全级别来限制配置软件到多模无线无线电收发器的多个保护域的保护域的访问，其中保护 域包括多模无线收发器的一个或多个无线电配置参数。