TAMPER-RESISTANT TRUSTED VIRTUAL MACHINE
    1.
    发明申请
    TAMPER-RESISTANT TRUSTED VIRTUAL MACHINE 审中-公开
    防篡改信号虚拟机

    公开(公告)号:WO2005052841A2

    公开(公告)日:2005-06-09

    申请号:PCT/EP2004052884

    申请日:2004-11-09

    CPC classification number: G06F21/6218 G06F21/14 G06F21/51

    Abstract: A trusted Java virtual machine provides a method for supporting tamper-resistant applications, ensuring the integrity of an application and its secrets such as keys. The trusted Java virtual machine verifies the integrity of the Java application, prevents debugging of the Java application, and allows the Java application to securely store and retrieve secrets. The trusted Java virtual machine environment comprises a TrustedDictionary, a TrustedBundle, an optional encryption method for encrypting and decrypting byte codes, and an underlying trusted Java virtual machine. The encrypted TrustedDictionary protects data while the TrustedBundle protects programming code, allowing applications to store secret data and secure counters. The application designer can restrict TrustedBundle access to only those interfaces that the application designer explicitly exports. The open source code may optionally be encrypted. Secrets required by the open source programming code of the application are encrypted in TrustedDictionary.

    Abstract translation: 受信任的Java虚拟机提供了一种支持防篡改应用程序的方法,确保应用程序的完整性及其密钥(如密钥)。 受信任的Java虚拟机验证Java应用程序的完整性,防止Java应用程序的调试,并允许Java应用程序安全地存储和检索秘密。 受信任的Java虚拟机环境包括TrustedDictionary,TrustedBundle,用于加密和解密字节代码的可选加密方法,以及底层可信Java虚拟机。 加密的TrustedDictionary保护数据,而TrustedBundle保护编程代码,允许应用程序存储秘密数据和安全计数器。 应用程序设计人员可以将TrustedBundle访问限制为应用程序设计程序明确导出的那些接口。 可以可选地加密开源代码。 应用程序的开源编程代码所需的秘密在TrustedDictionary中加密。

    TAMPER-RESISTANT TRUSTED VIRTUAL MACHINE
    4.
    发明申请
    TAMPER-RESISTANT TRUSTED VIRTUAL MACHINE 审中-公开
    防篡改信号虚拟机

    公开(公告)号:WO2005052841A9

    公开(公告)日:2006-07-20

    申请号:PCT/EP2004052884

    申请日:2004-11-09

    CPC classification number: G06F21/6218 G06F21/14 G06F21/51

    Abstract: A trusted Java virtual machine provides a method for supporting tamper-resistant applications, ensuring the integrity of an application and its secrets such as keys. The trusted Java virtual machine verifies the integrity of the Java application, prevents debugging of the Java application, and allows the Java application to securely store and retrieve secrets. The trusted Java virtual machine environment comprises a TrustedDictionary, a TrustedBundle, an optional encryption method for encrypting and decrypting byte codes, and an underlying trusted Java virtual machine. The encrypted TrustedDictionary protects data while the TrustedBundle protects programming code, allowing applications to store secret data and secure counters. The application designer can restrict TrustedBundle access to only those interfaces that the application designer explicitly exports. The open source code may optionally be encrypted. Secrets required by the open source programming code of the application are encrypted in TrustedDictionary.

    Abstract translation: 受信任的Java虚拟机提供了一种支持防篡改应用程序的方法,确保应用程序的完整性及其密钥(如密钥)。 受信任的Java虚拟机验证Java应用程序的完整性,阻止Java应用程序的调试,并允许Java应用程序安全地存储和检索秘密。 受信任的Java虚拟机环境包括TrustedDictionary,TrustedBundle,用于加密和解密字节代码的可选加密方法以及底层可信Java虚拟机。 加密的TrustedDictionary保护数据,而TrustedBundle保护编程代码,允许应用程序存储秘密数据和安全计数器。 应用程序设计人员可以将TrustedBundle访问限制为应用程序设计程序明确导出的那些接口。 可以可选地加密开源代码。 应用程序的开源编程代码所需的秘密在TrustedDictionary中加密。

    SOFTWARE SECURE AUTHENTICATED CHANNEL
    5.
    发明申请
    SOFTWARE SECURE AUTHENTICATED CHANNEL 审中-公开
    软件安全认证通道

    公开(公告)号:WO0221243A3

    公开(公告)日:2003-10-09

    申请号:PCT/GB0103962

    申请日:2001-09-05

    Applicant: IBM IBM UK

    CPC classification number: G06F21/64 G06F21/445

    Abstract: Software manufacturers examine their module and determine a range of addresses in memory which the module occupies. A protected range of addresses in memory is predefined to not allow changes, such as patching by hackers. Each manufacturer delivers the range of addresses describing the protected area and a known good version of their module to other manufacturers that they want to interoperate with. The other manufacturers return digital signatures on the protected area, and these digital signatures are stored in the first manufacturer's module. Correspondingly, the other manufacturers do the same with their own modules. Then, in order to effect a secure communication channel between two modules the modules first pass each other the signatures previously produced. Then, to ensure that communication is being effected with an authentic authorized module, through the use of the signature and the address ranges in the protected area, each module checks that the other module has not been patched. They each further verify that all the entry points in the other module they intend to call are in fact within the protected area. In the event that both modules are verified as being trustworthy, the modules now call each other freely. However, each module, when it is called must verify that it was called from within the protected area of the other module.

    Abstract translation: 软件制造商检查其模块并确定模块占用的内存中的一系列地址。 内存中保护的地址范围被预先定义为不允许更改,例如黑客修补。 每个制造商提供描述保护区域的一系列地址和其模块的已知良好版本,以供他们想要互操作的其他制造商。 其他制造商在保护区域返回数字签名,这些数字签名存储在第一个制造商的模块中。 相应地,其他制造商也用自己的模块做同样的事情。 然后,为了实现两个模块之间的安全通信信道,模块首先通过彼此之前产生的签名。 然后,为了确保通过真实的授权模块进行通信,通过使用保护区域中的签名和地址范围,每个模块检查另一个模块未被修补。 他们每个进一步验证他们打算打电话的其他模块中的所有入口点实际上在保护区内。 如果两个模块都被验证为可靠的,那么这些模块现在可以自由地相互呼叫。 然而,每个模块在被调用时都必须验证它是否在另一个模块的保护区内被调用。

Patent Agency Ranking