-
公开(公告)号：JP2011065665A
公开(公告)日：2011-03-31
申请号：JP2010243228
申请日：2010-10-29
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID
CPC classification number: H04L63/062 , G06F21/57 , G06F21/73 , G06F2221/2103 , H04L63/104
Abstract: PROBLEM TO BE SOLVED: To provide a method and a device effective for verifying inclusion of a platform in a data center. SOLUTION: The present invention relates to a server comprising a secret key used for verifying whether the server is included in a data center computer system or not, and comprising at least one token for sealing processing the secret key in the server. COPYRIGHT: (C)2011,JPO&INPIT
Abstract translation: 要解决的问题：提供一种有效地验证在数据中心中包含平台的方法和设备。 解决方案：本发明涉及包括用于验证服务器是否包括在数据中心计算机系统中的秘密密钥的服务器，并且包括用于密码处理服务器中的秘密密钥的至少一个令牌。 版权所有（C）2011，JPO＆INPIT
-
公开(公告)号：JP2011060311A
公开(公告)日：2011-03-24
申请号：JP2010243222
申请日：2010-10-29
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID
CPC classification number: H04L63/062 , G06F21/57 , G06F21/73 , G06F2221/2103 , H04L63/104
Abstract: PROBLEM TO BE SOLVED: To provide an effective method and a device for validating whether a platform is included in a data center. SOLUTION: A machine-readable storage medium providing instructions to make a machine perform processing when executed by the machine carries out steps of: revoking a current cryptographic key pair held in the optional number of servers in a data center computer system when it is determined that one of the optional number of servers in the data center computer system is damaged; generating a new cryptographic key pair associated with the data center computer system; and storing a new private key of the new cryptographic key pair in the optional number of damaged servers. COPYRIGHT: (C)2011,JPO&INPIT
Abstract translation: 要解决的问题：提供用于验证数据中心中是否包括平台的有效方法和装置。 解决方案：提供用于使机器在由机器执行时执行处理的指令的机器可读存储介质执行以下步骤：当数据中心计算机系统中的可选数量的服务器中保存的当前加密密钥对时， 确定数据中心计算机系统中可选数量的服务器之一被损坏; 生成与数据中心计算机系统相关联的新的加密密钥对; 以及将新的加密密钥对的新私钥存储在可选数量的损坏的服务器中。 版权所有（C）2011，JPO＆INPIT
-
公开(公告)号：JP2009219162A
公开(公告)日：2009-09-24
申请号：JP2009154991
申请日：2009-06-30
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID
CPC classification number: H04L63/062 , G06F21/57 , G06F21/73 , G06F2221/2103 , H04L63/104
Abstract: PROBLEM TO BE SOLVED: To provide an effective method and apparatus for verifying whether a platform is included within a data center or not. SOLUTION: A server comprises: a private key to be used for verifying whether a server is included within a data center computer system or not; and at least one token for seal-processing the private key to the server. COPYRIGHT: (C)2009,JPO&INPIT
Abstract translation: 要解决的问题：提供用于验证平台是否包括在数据中心内的有效方法和装置。 解决方案：服务器包括：用于验证服务器是否包括在数据中心计算机系统内的专用密钥; 以及至少一个用于密码处理该服务器的私钥的令牌。 版权所有（C）2009，JPO＆INPIT
-
公开(公告)号：JP2007265434A
公开(公告)日：2007-10-11
申请号：JP2007150997
申请日：2007-06-06
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID , UHLIG RICHARD , POISNER DAVID , GLEW ANDREW , HALL CLIFFORD , SMITH III LAWRENCE , NEIGER GILBERT , KOZUCH MICHAEL , GEORGE ROBERT , BURGESS BRADLEY
CPC classification number: G06F21/53 , G06F12/1491 , G06F21/57 , G06F2221/2105
Abstract: PROBLEM TO BE SOLVED: To provide a system and a method for allowing execution of a system management mode (SMM) code during secure operations in a microprocessor system. SOLUTION: In one embodiment, a system management interruption (SMI) may be first directed to a handler in a secured virtual machine monitor (SVMM). The SMI may then be re-directed to an SMM code located in a virtual machine (VM) that is under the security control of the SVMM. This redirection can be accomplished by allowing reading from and writing to the system management (SM) base register in the processor. COPYRIGHT: (C)2008,JPO&INPIT
Abstract translation: 要解决的问题：提供一种用于在微处理器系统中的安全操作期间允许执行系统管理模式（SMM）代码的系统和方法。 解决方案：在一个实施例中，可以将系统管理中断（SMI）首先定向到安全虚拟机监视器（SVMM）中的处理程序。 然后，SMI可以被重定向到位于SVMM的安全控制下的虚拟机（VM）中的SMM代码。 这种重定向可以通过读取和写入处理器中的系统管理（SM）基址寄存器来实现。 版权所有（C）2008，JPO＆INPIT
-
公开(公告)号：JP2011072006A
公开(公告)日：2011-04-07
申请号：JP2010243227
申请日：2010-10-29
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID
CPC classification number: H04L63/062 , G06F21/57 , G06F21/73 , G06F2221/2103 , H04L63/104
Abstract: PROBLEM TO BE SOLVED: To provide a method and an apparatus effective to verify whether a platform is included in a data center. SOLUTION: An inclusion verification relates to a server comprising a private key to verify if the server is included in a data-center computer system and at least one token to perform a sealing process of the private key to the server. COPYRIGHT: (C)2011,JPO&INPIT
Abstract translation: 要解决的问题：提供一种有效地验证平台是否包括在数据中心中的方法和装置。 解决方案：包含验证涉及包括用于验证服务器是否包括在数据中心计算机系统中的私钥的服务器和至少一个令牌以执行对服务器的私钥的密封处理。 版权所有（C）2011，JPO＆INPIT
-
Patent Agency Ranking
公开(公告)号：JP2010044791A
公开(公告)日：2010-02-25
申请号：JP2009262787
申请日：2009-11-18
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID
CPC classification number: H04L63/062 , G06F21/57 , G06F21/73 , G06F2221/2103 , H04L63/104
Abstract: PROBLEM TO BE SOLVED: To provide an effective method and device for validation of inclusion of platforms within a data center. SOLUTION: A machine-readable storage medium providing instructions to cause a machine to perform processing when executed by the machine carries out steps of revoking a current cryptographic key pair held in the optional number of servers in a data center computer system when determining that one of the optional number of servers in the data center computer system is damaged; generating a new cryptographic key pair associated with the data center computer system; and storing a new private key of the new cryptographic key pair in the optional number of damaged servers. COPYRIGHT: (C)2010,JPO&INPIT
Abstract translation: 要解决的问题：提供一种用于验证在数据中心内包含平台的有效方法和设备。 解决方案：当机器执行时提供使机器执行处理的机器可读存储介质执行在确定数据中心计算机系统中时保留在数据中心计算机系统中的可选数量的服务器中的当前加密密钥对的步骤 数据中心计算机系统中可选数量的服务器之一被损坏; 生成与数据中心计算机系统相关联的新的加密密钥对; 以及将新的加密密钥对的新私钥存储在可选数量的损坏的服务器中。 版权所有（C）2010，JPO＆INPIT
-
7.发明专利System and method for execution of secured environment initialization instruction 有权执行安全环境初始化指令的系统和方法
公开(公告)号：JP2009054164A
公开(公告)日：2009-03-12
申请号：JP2008236958
申请日：2008-09-16
Applicant: Intel Corp , インテル コーポレイション
Inventor： SUTTON II JAMES , GRAWROCK DAVID
CPC classification number: G06F9/4403 , G01N23/223 , G01N33/502 , G01N33/6872 , G01N2223/076 , G06F9/44505 , G06F12/0802 , G06F12/145 , G06F12/1458 , G06F13/4282 , G06F21/57 , G06F21/572 , G06F2212/1052 , G06F2212/60 , G06F2213/0026 , G06F2221/033 , H04L9/32 , H04L9/3247
Abstract: PROBLEM TO BE SOLVED: To provide a system and method for execution of a secured environment initialization instruction. SOLUTION: A method and apparatus for initiating secure operations in a microprocessor system is described. In one embodiment, one initiating logical processor initiates a process by halting the execution of the other logical processors and then loading initialization and secure virtual machine monitor software into a memory. The initiating processor then loads initialization software into a secure memory for authentication and execution. The initialization software authenticates and registers the secure virtual machine monitor software prior to secure system operations. COPYRIGHT: (C)2009,JPO&INPIT
Abstract translation: 要解决的问题：提供用于执行安全环境初始化指令的系统和方法。 描述了一种用于在微处理器系统中发起安全操作的方法和装置。 在一个实施例中，一个起始逻辑处理器通过停止其他逻辑处理器的执行，然后加载初始化并将虚拟机监视软件保护到存储器中来发起进程。 启动处理器然后将初始化软件加载到安全存储器中以进行认证和执行。 初始化软件在安全系统操作之前对安全虚拟机监控软件进行认证和注册。 版权所有（C）2009，JPO＆INPIT
-
公开(公告)号：WO2012087330A3
公开(公告)日：2013-06-13
申请号：PCT/US2010061995
申请日：2010-12-23
Applicant: INTEL CORP , TROBOUGH MARK , TIRUVALLUR KRESHAVAN , PRUDVI CHINNA , LOVIN CHRISTIAN , GRAWROCK DAVID , NEJEDLO JAY , KABADI ASHOK , GOFF TRAVIS , HALPRIN EVAN J , UDAWATTA KAPILA , FOO JIUN LONG , CHEAH WEE HOO , YONG VUI , GOPAL SELVAKUMAR RAJA , LEE YEN TAT , SAMAAN SAMIE B , KILLPACK KIP , DOBLER NIEL , HAKIM NAGIB Z , WHITE MICHAEL T , MEYER BRIAN , PENNER BILL , BAUDREXL JOHN , WUNDERLICH RUSS , KOZACZUK ANTHONY , GREALISH JAMES , MARKLEY KYLE , STOREY TIM , MCCONNELL LOREN , COOL LYLE , KATARIA MUKESH , MOHAMMED RAHIMA , ZHENG TIEYU , XIA AMY , SAHA RIDVAN
Inventor： TROBOUGH MARK , TIRUVALLUR KRESHAVAN , PRUDVI CHINNA , LOVIN CHRISTIAN , GRAWROCK DAVID , NEJEDLO JAY , KABADI ASHOK , GOFF TRAVIS , HALPRIN EVAN J , UDAWATTA KAPILA , FOO JIUN LONG , CHEAH WEE HOO , YONG VUI , GOPAL SELVAKUMAR RAJA , LEE YEN TAT , SAMAAN SAMIE B , KILLPACK KIP , DOBLER NIEL , HAKIM NAGIB Z , WHITE MICHAEL T , MEYER BRIAN , PENNER BILL , BAUDREXL JOHN , WUNDERLICH RUSS , KOZACZUK ANTHONY , GREALISH JAMES , MARKLEY KYLE , STOREY TIM , MCCONNELL LOREN , COOL LYLE , KATARIA MUKESH , MOHAMMED RAHIMA , ZHENG TIEYU , XIA AMY , SAHA RIDVAN
CPC classification number: G06F11/2733 , G06F11/267
Abstract: An apparatus and method is described herein for providing a test, validation, and debug architecture. At a target or base level, hardware hooks (Design for Test or DFx) are designed into and integrated with silicon parts. A controller may provide abstracted access to such hooks, such as through an abstraction layer that abstracts low level details of the hardware DFx. In addition, the abstraction layer through an interface, such as APIs, provides services, routines, and data structures to higher-level software/presentation layers, which are able to collect test data for validation and debug of a unit/platform under test. Moreover, the architecture potentially provides tiered (multiple levels of) secure access to the test architecture. Additionally, physical access to the test architecture for a platform may be simplified through use of a unified, bi-directional test access port, while also potentially allowing remote access to perform remote test and debug of a part/platform under test. In essence, a complete test architecture stack is described herein for test, validation, and debug of electronic parts, devices, and platforms.
Abstract translation: 这里描述了一种用于提供测试，验证和调试架构的装置和方法。 在目标或基准级别，硬件钩（Design for Test或DFx）被设计并集成在硅部件中。 控制器可以提供对这种钩子的抽象访问，例如通过抽象层来抽象硬件DFx的低级细节。 此外，通过接口（如API）的抽象层向更高级的软件/表示层提供服务，例程和数据结构，这些层能够收集测试数据，以便对被测单元/平台进行验证和调试。 此外，该架构可能提供对测试架构的分层（多级）安全访问。 此外，可以通过使用统一的双向测试访问端口来简化对平台的测试架构的物理访问，同时还可能允许远程访问对被测试的部件/平台进行远程测试和调试。 本质上描述了一个完整的测试架构栈，用于电子部件，设备和平台的测试，验证和调试。
-
9.发明申请METHOD OF DELIVERING DIRECT PROOF PRIVATE KEYS TO DEVICES USING AN ON-LINE SERVICE 审中-公开使用在线服务向设备传送直接证明私人密钥的方法
公开(公告)号：WO2006023151A2
公开(公告)日：2006-03-02
申请号：PCT/US2005024374
申请日：2005-07-08
Applicant: INTEL CORP , SUTTON JAMES II , BRICKELL ERNEST , HALL CLIFFORD , GRAWROCK DAVID
Inventor： SUTTON JAMES II , BRICKELL ERNEST , HALL CLIFFORD , GRAWROCK DAVID
CPC classification number: H04L9/0844 , H04L2209/127
Abstract: Delivering a Direct Proof private key to a device installed in a client computer system in the field may be accomplished in a secure manner without requiring significant non-volatile storage in the device. A unique pseudo-random value is generated and stored in the device at manufacturing time. The pseudorandom value is used to generate a symmetric key for encrypting a data structure holding a Direct Proof private key and a private key digest associated with the device. The resulting encrypted data structure is stored on a protected on-liner server accessible by the client computer system. When the device is initialized on the client computer system, the system checks if a localized encrypted data structure is present in the system. If not, the system obtains the associated encrypted data structure from the protected on-line server using a secure protocol. The device decrypts the encrypted data structure using a symmetric key regenerated from its stored pseudo-random value to obtain the Direct Proof private key. If the private key is valid, it may be used for subsequent authentication processing by the device in the client computer system.
Abstract translation: 将直接证明私钥提供给安装在该领域中的客户端计算机系统中的设备可以以安全的方式来实现，而不需要设备中的显着的非易失性存储。 在制造时产生并存储在设备中的唯一伪随机值。 伪随机值用于生成用于加密持有直接证明私钥和与该设备相关联的私钥摘要的数据结构的对称密钥。 所得到的加密数据结构存储在由客户端计算机系统可访问的受保护的在线服务器上。 当在客户端计算机系统上初始化设备时，系统会检查系统中是否存在本地化的加密数据结构。 如果没有，系统将使用安全协议从受保护的在线服务器获取相关联的加密数据结构。 设备使用从其存储的伪随机值重新生成的对称密钥来解密加密数据结构，以获得直接证明私钥。 如果私钥有效，则可以用于客户端计算机系统中的设备的后续认证处理。
-
10.发明申请
公开(公告)号：WO0203196A3
公开(公告)日：2003-03-20
申请号：PCT/US0119325
申请日：2001-06-14
Applicant: INTEL CORP , GRAWROCK DAVID
Inventor： GRAWROCK DAVID
CPC classification number: G06F21/575 , G06F9/4401
Abstract: In one embodiment, an integrated circuit device comprises a trusted platform module and a boot block memory unit covered by a common package. The boot block memory unit is in communication with the trusted platform module and provides boot information to the trusted platform module. An example of the boot information includes a boot block code.
Abstract translation: 在一个实施例中，集成电路设备包括可信平台模块和由公共封装覆盖的引导块存储器单元。 引导块存储器单元与可信平台模块进行通信，并向可信平台模块提供引导信息。 引导信息的示例包括引导块代码。
-
-
-
-
-
-
-
-
-
Search Results
71
records
(took 0.027 seconds)
