公开(公告)号：DE102008025197A1

公开(公告)日：2009-01-08

申请号：DE102008025197

申请日：2008-05-27

Applicant: INTEL CORP

Inventor： NEMIROFF DANIEL ,  HERBERT HOWARD C

IPC: G06F21/00 ,  G06F12/14 ,  H04L9/00

Abstract: According to some embodiments, a method for providing encryption, integrity, and anti-replay protection of data in a fault tolerant manner is disclosed. A data blob and an anti-replay table blob are copied to a temporary storage region in a non-volatile memory. In an atomic operation, a status indicator is set and a monotonic counter is incremented after the data blob and the anti-replay table blob are copied to the temporary storage region. If a fault occurs while the status indicator is set, the data blob and the anti-replay table blob may be recovered from the temporary storage region.

公开(公告)号：HK1072307A1

公开(公告)日：2005-08-19

申请号：HK05104208

申请日：2003-03-26

Applicant: INTEL CORP

Inventor： HERBERT HOWARD C ,  GRAWROCK DAVID W ,  ELLISON CARL M ,  GOLLIVER ROGER A ,  LIN DERRICK C ,  MCKEEN FRANCIS X ,  RENERIS KEN ,  SUTTON JAMES A ,  THAKKAR SHREEKANT S ,  MITTAL MILLIND ,  NEIGER GILBERT

IPC: G06F20060101 ,  G06F

公开(公告)号：GB2377793B

公开(公告)日：2004-12-22

申请号：GB0225049

申请日：2001-03-14

Applicant: INTEL CORP

Inventor： ELLISON CARL M ,  GOLLIVER ROGER A ,  HERBERT HOWARD C ,  LIN DERRICK C ,  MCKEEN FRANCIS X ,  NEIGER GILBERT ,  RENERIS KEN ,  SUTTON JAMES A ,  THAKKAR SHREEKANT S ,  MITTAL MILLIND

IPC: G06F21/00 ,  G06F12/14

Abstract: An access transaction generated by a processor is configured using a configuration storage containing a configuration setting. The processor has a normal execution mode and an isolated execution mode. The access transaction has access information. Access to the configuration storage is controlled. An access grant signal is generated using the configuration setting and the access information. The access grant signal indicates if the access transaction is valid.

公开(公告)号：DE10196007T1

公开(公告)日：2003-10-09

申请号：DE10196007

申请日：2001-03-21

Applicant: INTEL CORP

Inventor： HERBERT HOWARD C ,  GRAWROCK DAVID W ,  ELLISON CARL M ,  GOLLIVER ROGER A ,  LIN DERRICK C ,  MCKEEN FRANCIS X ,  NEIGER GILBERT ,  RENERIS KEN ,  SUTTON JAMES A ,  THAKKAR SHREEKANT S ,  MITTAL MILLIND

IPC: G06F1/00 ,  G06F12/14 ,  G06F21/00

公开(公告)号：DE10195999T1

公开(公告)日：2003-04-03

申请号：DE10195999

申请日：2001-03-14

Applicant: INTEL CORP

Inventor： ELLISON CARL M ,  GOLLIVER ROGER A ,  HERBERT HOWARD C ,  LIN DERRICK C ,  MCKEEN FRANCIS X ,  NEIGER GILBERT ,  RENERIS KEN ,  SUTTON JAMES A ,  THAKKAR SHREEKANT S ,  MITTAL MILLIND

IPC: G06F21/00 ,  G06F9/00

Abstract: An access transaction generated by a processor is configured using a configuration storage containing a configuration setting. The processor has a normal execution mode and an isolated execution mode. The access transaction has access information. Access to the configuration storage is controlled. An access grant signal is generated using the configuration setting and the access information. The access grant signal indicates if the access transaction is valid.

公开(公告)号：DE19782169T1

公开(公告)日：1999-10-28

申请号：DE19782169

申请日：1997-11-25

Applicant: INTEL CORP

Inventor： HERBERT HOWARD C ,  DAVIS DEREK L

IPC: G06F12/10 ,  G06F1/00 ,  G06F12/14 ,  G06F21/00 ,  G06F21/22 ,  G06F21/24 ,  G09C1/00 ,  H04L9/00 ,  H04L9/10 ,  H04L9/32

Abstract: A method and system for maintaining integrity and confidentiality of pages paged to an external storage unit from a physically secure environment. An outgoing page is selected to be exported from a physically secure environment to an insecure environment. An integrity check value is generated and stored for the outgoing page. In one embodiment, this takes the form of taking a one-way hash of the page using a well-known one-way hash function. The outgoing page is then encrypted using a cryptographically strong encryption algorithm. Among the algorithms that might be used in one embodiment of the invention are IDEA and DES. The encrypted outgoing page is then exported to the external storage. By virtue of the encryption and integrity check, the security of the data on the outgoing page is maintained in the insecure environment.

公开(公告)号：BRPI0924512A2

公开(公告)日：2016-03-01

申请号：BRPI0924512

申请日：2009-12-22

Applicant: INTEL CORP

Inventor： LINT BERNARD ,  ROZAS CARLOS V ,  DURHAM DAVID ,  RODGERS DION ,  DYKE DON A VAN ,  BRICKEL ERNIE ,  MCKEEN FRANCIS X ,  GRAUNKE GARY ,  NEIGER GILBERT ,  HERBERT HOWARD C ,  LI JIANG TAO ,  GARNEY JOHN ,  CIHULA JOSEPH ,  GOLDSMITH MICHAEL A ,  DEWAN PRASHANT ,  JOHNSON SIMON P ,  JEYASINGH STALINSELVARAJ ,  TOLOPKA STEPHEN J ,  DOREN STEPHEN R VAN ,  DOREN STEPHEN R VAN ,  SAVAGANKAR UDAY R ,  SCARLATA VINCENT R

IPC: G06F9/44 ,  G06F12/02 ,  G06F13/14 ,  G06F21/72 ,  G06F21/74

公开(公告)号：DE102008059485A1

公开(公告)日：2009-07-09

申请号：DE102008059485

申请日：2008-11-28

Applicant: INTEL CORP

Inventor： ELDAR AVIGDOR ,  HERBERT HOWARD C ,  GOEL PURUSHOTTAM ,  BLUMENTHAL URI ,  HINES DAVID ,  SMITH CAREY

IPC: H04L9/32 ,  H04L12/24

公开(公告)号：GB2405974A

公开(公告)日：2005-03-16

申请号：GB0426493

申请日：2001-03-21

Applicant: INTEL CORP

Inventor： HERBERT HOWARD C ,  GRAWROCK DAVID W ,  ELLISON CARL M ,  GOLLIVER ROGER A ,  LIN DERRICK C ,  MCKEEN FRANCIS X ,  RENERIS KEN ,  SUTTON JAMES A ,  THAKKAR SHREEKANT S ,  MITTAL MILLIND ,  NEIGER GILBERT

IPC: G06F1/00 ,  G06F21/57

Abstract: A platform has a protected memory for storing an audit log. The audit log is a listing of data representing each of a plurality of IsoX software modules loaded into the platform. The audit log is retrieved from the protected memory in response to receiving a remote attestation request from a remotely located platform. Then, the retrieved audit log is digitally signed to produce a digital signature for transfer to the remotely located platform.

公开(公告)号：HK1050254A1

公开(公告)日：2003-06-13

申请号：HK03102199

申请日：2003-03-26

Applicant: INTEL CORP

Inventor： ELLISON CARL M ,  GOLLIVER ROGER A ,  HERBERT HOWARD C ,  LIN DERRICK C ,  MCKEEN FRANCIS X ,  NEIGER GILBERT ,  RENERIS KEN ,  SUTTON JAMES A ,  THAKKAR SHREEKANT S ,  MITTAL MILLIND

IPC: G06F9/46 ,  G06F1/00 ,  G06F9/48 ,  G06F21/00 ,  G06F

Abstract: A technique is provided to execute isolated instructions according to an embodiment of the present invention. An execution unit executes an isolated instruction in a processor operating in a platform. The processor is configured in one of a normal execution mode and an isolated execution mode. A parameter storage containing at least one parameter to support execution of the isolated instruction when the processor is configured in the isolated execution mode.