公开(公告)号：EP4064089A1

公开(公告)日：2022-09-28

申请号：EP22173464.3

申请日：2015-06-25

Applicant: INTEL Corporation

Inventor： ZIMMER, Vincent J. ,  ADAMS, Nicholas J. ,  MUDUSURU, Giri P. ,  ROSENBAUM, Lee G. ,  ROTHMAN, Michael A.

IPC: G06F21/57 ,  G06F21/72

Abstract: An embodiment includes an apparatus comprising: an out-of-band cryptoprocessor coupled to secure non-volatile storage; and at least one storage medium having firmware instructions stored thereon for causing, during runtime and after an operating system for the apparatus has booted, the cryptoprocessor to (a) store a key within the secure non-volatile storage, (b) sign an object with the key, while the key is within the cryptoprocessor, to produce a signature, and (c) verify the signature. Other embodiments are described herein.

公开(公告)号：EP3314444B1

公开(公告)日：2020-06-24

申请号：EP16814922.7

申请日：2016-05-23

Applicant: Intel Corporation

Inventor： KOTARY, Karunakara ,  POORNACHANDRAN, Rajesh ,  BRENDEN, Scott D. ,  ZIMMER, Vincent J.

IPC: G06F12/14 ,  G06F21/78 ,  G06F21/62 ,  G06F12/02 ,  G06F21/57 ,  G06F21/53

公开(公告)号：EP2973147B1

公开(公告)日：2019-03-27

申请号：EP14775411.3

申请日：2014-02-26

Applicant: Intel Corporation

Inventor： COCKRELL, Brian ,  GAUTHIER, Jacob J. ,  YAO, Jiewen ,  ZIMMER, Vincent J. ,  AMAYA, Elmer A.

IPC: G06F21/00 ,  G06F9/44 ,  G06F15/16

公开(公告)号：EP2798559B1

公开(公告)日：2019-03-13

申请号：EP11878914.8

申请日：2011-12-29

Applicant: Intel Corporation

Inventor： SMITH, Ned M. ,  ZIMMER, Vincent J. ,  MOORE, Victoria C.

IPC: G06F21/57 ,  G06F9/44 ,  G06F21/10 ,  G06F9/24

公开(公告)号：EP3314416A1

公开(公告)日：2018-05-02

申请号：EP16814938.3

申请日：2016-05-24

Applicant: INTEL Corporation

Inventor： GUPTA, Saurabh ,  ZIMMER, Vincent J. ,  POORNACHANDRAN, Rajesh

IPC: G06F9/44 ,  G06F9/445 ,  G06F15/78 ,  G06F21/57

CPC classification number: G06F9/4403 ,  G06F9/4401 ,  G06F9/5011 ,  G06F21/44 ,  G06F21/572

Abstract: The present disclosure is directed to firmware block dispatch based on fusing. A device may determine firmware blocks to load during initialization of the device based on fuses set in a processing module in the device. A firmware module may comprise at least a nonvolatile (NV) memory including boot code and a firmware information table (FIT). During initialization the boot code may cause the processing module to read fuse information from a fuse module and to determine at least one firmware block to load based on the fuse information. For example, the fuse information may comprise a fuse string and the processing module may compare the fuse string to the FIT table, determine at least one pointer in the FIT table associated with the fuse string and load at least one firmware block based on a location (e.g., offset) in the NV memory identified by the at least one pointer.

公开(公告)号：EP2831788B1

公开(公告)日：2018-05-02

申请号：EP12872999.3

申请日：2012-03-30

Applicant: Intel Corporation

Inventor： SAKTHIKUMAR, Palsamy ,  ZIMMER, Vincent J. ,  SWANSON, Robert C.

IPC: G06F21/56 ,  G06F9/06

CPC classification number: G06F21/56 ,  G06F21/566

Abstract: An apparatus includes a memory that is accessible by an operating system; and a basic input/output system (BIOS) handler. The BIOS handler, in response to detected malicious software activity, stores data in the memory to report the activity to the operating system.

公开(公告)号：EP3311319A1

公开(公告)日：2018-04-25

申请号：EP15895201.0

申请日：2015-06-17

Applicant: Intel Corporation

Inventor： YAO, Jiewen ,  ZIMMER, Vincent J. ,  POORNACHANDRAN, Rajesh

IPC: G06F21/00

CPC classification number: G06F21/10 ,  G06F1/14 ,  G06F21/57 ,  G06F21/572 ,  G06F21/725

Abstract: Apparatuses, methods and storage media associated with managing a computing platform in view of an expiration date are described herein. In embodiments, an apparatus may include a computing platform that includes one or more processors to execute applications; and a trusted execution environment that includes a tamper-proof storage to store an expiration date of the computing platform, and a firmware module to be operated in a secure system management mode to regulate operation of the computing platform in view of at least whether a current date is earlier than the expiration date. Other embodiments may be described or claimed.

公开(公告)号：EP3291635A2

公开(公告)日：2018-03-07

申请号：EP17001661.2

申请日：2011-12-21

Applicant: Intel Corporation

Inventor： BAHNSEN, Robert Bruce ,  BULUSU, Malik ,  ZIMMER, Vincent J. ,  GITTINS, Robert ,  SWANSON, Robert

IPC: H04W88/02 ,  G01S5/02 ,  H04W64/00 ,  H04L29/08 ,  H04L12/911 ,  H04W4/02

CPC classification number: H04L67/18 ,  G01S5/02 ,  H04L47/70 ,  H04W4/02 ,  H04W64/003

Abstract: Systems and methods providing a location-aware resource locator model for facilitating communication with networked electronic devices are generally disclosed herein. One embodiment includes a resource locator using a standard Uniform Resource Locator (URL) format, but enabling identification of one or many devices based on logical location information provided in the resource locator. The resource locator may also enable identification of the one or many devices based on logical proximity information (such as a logical term indicating a location property) relative to a dynamic location. Further disclosed embodiments include uses of a hierarchical structure to define logical terms and classes for use with a resource locator, and various location determination and lookup techniques used in connection with accessing an electronic device.

Abstract translation: 提供用于促进与联网的电子设备的通信的位置感知资源定位符模型的系统和方法在本文中大体公开。 一个实施例包括使用标准统一资源定位符（URL）格式的资源定位符，但是能够基于资源定位符中提供的逻辑位置信息来识别一个或多个设备。 资源定位符还可以基于相对于动态位置的逻辑邻近度信息（诸如指示位置属性的逻辑项）来实现对一个或多个设备的识别。 进一步公开的实施例包括使用分层结构来定义与资源定位符一起使用的逻辑术语和类，以及结合访问电子设备使用的各种位置确定和查找技术。

公开(公告)号：EP2798562A1

公开(公告)日：2014-11-05

申请号：EP11878781.1

申请日：2011-12-30

Applicant: Intel Corporation

Inventor： BULUSU, Mallik ,  BAHNSEN, Robert ,  ZIMMER, Vincent J. ,  GITTINS, Robert S. ,  SWANSON, Robert C.

IPC: G06F21/30

CPC classification number: H04L63/0876 ,  G06F21/00 ,  H04L63/08 ,  H04W12/06 ,  H04W12/08

Abstract: An embodiment includes a secure and stable method for sending information across a compute continuum. For example, the method may include executing an application (e.g., video player) on a first node (e.g., tablet) with a desire to perform “context migration” to a second node (e.g., desktop). This may allow a user to watch a movie on the tablet, stop watching the movie, and then resume watching the movie from the desktop. To do so in a secure and stable manner, the first node may request security and performance credentials from the second node. If both credential sets satisfy thresholds, the first node may transfer content (e.g., encrypted copy of a movie) and state information (e.g., placeholder indicating where the movie was when context transfer began). The second node may then allow the user to resume his or her movie watching from the desktop. Other embodiments are described herein.

Abstract translation: 一个实施例包括用于在计算连续体上发送信息的安全且稳定的方法。 例如，该方法可以包括在第一节点（例如，平板电脑）上执行应用（例如，视频播放器），期望执行到第二节点（例如桌面）的“上下文迁移”。 这可能允许用户在平板电脑上观看电影，停止观看电影，然后从桌面恢复观看电影。 为了以安全和稳定的方式这样做，第一节点可以从第二节点请求安全性和性能凭证。 如果两个证书组都满足阈值，则第一节点可以传送内容（例如，电影的加密副本）和状态信息（例如，指示上下文传送开始时电影在何处的占位符）。 然后，第二节点可以允许用户从桌面恢复他或她的电影观看。 本文描述了其它实施例。

公开(公告)号：EP2601587A2

公开(公告)日：2013-06-12

申请号：EP11814988.9

申请日：2011-07-18

Applicant: Intel Corporation

Inventor： SWANSON, Robert C. ,  ZIMMER, Vincent J. ,  BULUSU, Mallik ,  ROTHMAN, Michael A. ,  SAKTHIKUMAR, Palsamy

IPC: G06F13/14 ,  G06F9/22 ,  G06F11/27 ,  G06K17/00

CPC classification number: H04L45/02 ,  H04W4/80 ,  H04W84/18

Abstract: Radio frequency identification (RFID) tags embedded in processors within a computing system provide a separate communication path to other components of the computing system during initialization processing, apart from the system interconnect. Upon powering up, each processor causes its RFID tag to broadcast data regarding the processor's interconnect location and initialization status. A RFID receiver senses the RFID tags in the Platform Control Hub (PCH), and each processor's interconnect location and initialization status data is stored in registers within the PCH. During system initialization processing, the BIOS accesses these PCH registers to obtain the processor's data. The interconnect location and initialization status data is used by the BIOS to select the optimal routing table and configure the virtual network within the computing system based on the optimal routing table and the RFID tag data, without interrogating each processor individually over the system interconnect.