公开(公告)号：EP2909772B1

公开(公告)日：2019-08-21

申请号：EP12886780.1

申请日：2012-10-17

申请人： Intel Corporation

发明人： NEMIROFF, Daniel ,  THADIKARAN, Paul J. ,  SAXENA, Paritosh ,  TRIANTAFILLOU, Nicholas D. ,  GAFKEN, Andrew H.

IPC分类号： G06F21/78 ,  G06F21/55 ,  G06F21/56

公开(公告)号：EP3219047A2

公开(公告)日：2017-09-20

申请号：EP15858908.5

申请日：2015-10-14

申请人： INTEL Corporation

发明人： SARANGDHAR, Nitin V. ,  NEMIROFF, Daniel ,  SMITH, Ned M. ,  BRICKELL, Ernie ,  LI, Jiangtao

IPC分类号： H04L9/32 ,  H04L9/08

CPC分类号： H04L9/3234 ,  G06F21/57 ,  G06F21/64 ,  H04L9/0861 ,  H04L9/0866 ,  H04L9/14 ,  H04L9/3263 ,  H04L2209/127

摘要： This application is directed to trusted platform module certification and attestation utilizing an anonymous key system. In general, TPM certification and TPM attestation may be supported in a device utilizing integrated TPM through the use of anonymous key system (AKS) certification. An example device may comprise at least combined AKS and TPM resources that load AKS and TPM firmware (FW) into a runtime environment that may further include at least an operating system (OS) encryption module, an AKS service module and a TPM Certification and Attestation (CA) module. For TPM certification, the CA module may interact with the other modules in the runtime environment to generate a TPM certificate, signed by an AKS certificate, that may be transmitted to a certification platform for validation. For TPM attestation, the CA module may cause TPM credentials to be provided to the attestation platform for validation along with the TPM and/or AKS certificates.

摘要翻译： 该应用针对可信平台模块认证和利用匿名密钥系统进行认证。 一般而言，TPM认证和TPM认证可以通过使用匿名密钥系统（AKS）认证在利用集成TPM的设备中得到支持。 示例设备可以包括至少组合的AKS和TPM资源，其将AKS和TPM固件（FW）加载到运行时间环境中，该运行时间环境还可以至少包括操作系统（OS）加密模块，AKS服务模块和TPM认证和证明 （CA）模块。 对于TPM认证，CA模块可以与运行时环境中的其他模块交互以生成TPM证书，该证书由AKS证书签名，可以传输到认证平台进行验证。 对于TPM证明，CA模块可能会导致TPM证书与TPM和/或AKS证书一起提供给证明平台进行验证。

公开(公告)号：EP2909772A1

公开(公告)日：2015-08-26

申请号：EP12886780.1

申请日：2012-10-17

申请人： Intel Corporation

发明人： NEMIROFF, Daniel ,  THADIKARAN, Paul J. ,  SAXENA, Paritosh ,  TRIANTAFILLOU, Nicholas D. ,  GAFKEN, Andrew H.

IPC分类号： G06F21/10

CPC分类号： G06F21/55 ,  G06F21/554 ,  G06F21/568 ,  G06F21/78

摘要： An embodiment may include a storage processor that may be comprised, at least in part, in a host. The host may include at least one host central processing unit (CPU) to execute at least one host operating system (OS). The storage processor may execute at least one operation in isolation from interference from and control by the at least one host CPU and the at least one host OS. The at least one operation may facilitate, at least in part: (1) prevention, at least in part, of unauthorized access to storage, (2) prevention, at least in part, of execution by the at least one host CPU of at least one unauthorized instruction, (3) detection, at least in part, of the at least one unauthorized instruction, and/or (4) remediation, at least in part, of at least one condition associated, at least in part, with the at least unauthorized instruction.

公开(公告)号：EP3605372A1

公开(公告)日：2020-02-05

申请号：EP19191969.5

申请日：2011-12-28

申请人： INTEL Corporation

发明人： PENDAKUR, Ramesh ,  GINTZ, Walter, C. ,  NEMIROFF, Daniel ,  HAZRA, Mousumi, M.

IPC分类号： G06F21/12 ,  H04L9/32 ,  H04N21/418 ,  H04N21/4363 ,  H04N21/4367 ,  H04N21/4408 ,  H04N21/6334

摘要： A system architecture provides a hardware-based root of trust solution for supporting distribution and playback of premium digital content. In an embodiment, hardware root of trust for digital content and services is a solution where the basis of trust for security purposes is rooted in hardware and firmware mechanisms in a client computing system, rather than in software. From this root of trust, the client computing system constructs an entire media processing pipeline that is protected for content authorization and playback. In embodiments of the present invention, the security of the client computing system for content processing is not dependent on the operating system (OS), basic input/output system (BIOS), media player application, or other host software.

公开(公告)号：EP3123337B1

公开(公告)日：2018-06-13

申请号：EP15769624.6

申请日：2015-01-30

申请人： Intel Corporation

发明人： SWANSON, Robert C. ,  NEMIROFF, Daniel ,  ZIMMER, Vincent J. ,  BULUSU, Mallik ,  LINDSLEY, John R. ,  CONE, Robert W. ,  TRIVEDI, Malay ,  KWIDZINSKI, Piotr

IPC分类号： G06F12/02 ,  G06F13/28 ,  G06F21/57 ,  G06F3/06 ,  G06F21/55 ,  H04L29/06

CPC分类号： H04L63/10 ,  G06F3/0622 ,  G06F3/0637 ,  G06F3/0683 ,  G06F13/28 ,  G06F21/554 ,  G06F21/57 ,  G06F21/572

摘要： Embodiments of multinode hubs for trust operations are disclosed herein. In some embodiments, a multinode hub may include a plurality of memory regions, a trapping module, and a trusted platform module (TPM) component. Each memory region may be associated with and receive trust operation data from a coherent computing node. The trapping module may generate trap notifications in response to accesses to the plurality of memory regions by the associated coherent computing nodes. The trap notifications may indicate which of the plurality of memory locations has been accessed, and the TPM component may process the trust operation data in a memory region indicated by a trap notification. Other embodiments may be disclosed and/or claimed.

公开(公告)号：EP2585923A2

公开(公告)日：2013-05-01

申请号：EP11807267.7

申请日：2011-06-27

申请人： Intel Corporation

发明人： NEMIROFF, Daniel ,  VEMBU, Balaji ,  GUTIERREZ, Rahul ,  KAREENAHALLI, Suryaprasad

IPC分类号： G06F12/00 ,  G06F9/06 ,  G06F13/28

CPC分类号： G06F9/5027

摘要： The architecture and techniques described herein can improve system performance with respect to the following. Communication between two interdependent hardware engines, that are part of pipeline, such that the engines are synchronized to consume resources when the engines are done with the work. Reduction of the role of software/firmware from feeding each stage of the hardware pipeline when the previous stage of the pipeline has completed. Reduction in the memory allocation for software-initialized hardware descriptors to improve performance by reducing pipeline stalls due to software interaction.

公开(公告)号：EP2661716B1

公开(公告)日：2019-08-21

申请号：EP11855191.0

申请日：2011-12-28

申请人： Intel Corporation

发明人： PENDAKUR, Ramesh ,  GINTZ, Walter, C. ,  NEMIROFF, Daniel ,  HAZRA, Mousumi, M.

IPC分类号： G06F21/12 ,  H04L9/32 ,  H04N21/418 ,  H04N21/4363 ,  H04N21/4367 ,  H04N21/4408 ,  H04N21/6334

公开(公告)号：EP2580704B1

公开(公告)日：2018-03-28

申请号：EP11792835.8

申请日：2011-05-05

申请人： Intel Corporation

发明人： VEMBU, Balaji ,  KAREENAHALLI, Suryaprasad ,  NEMIROFF, Daniel ,  BOGIN, Zohar ,  GUTIERREZ, Raul

IPC分类号： H04N21/418 ,  H04N21/4405 ,  H04N21/426 ,  H04N21/4408 ,  G06F21/10

CPC分类号： H04N21/4405 ,  G06F21/10 ,  H04N21/4181 ,  H04N21/42623 ,  H04N21/4408

摘要： An apparatus for secured playback is presented. In one embodiment, the apparatus includes a controller that includes a key derivation module to manage authentication and key derivation. In one embodiment, the apparatus provides a video decryption key to a graphics engine if video data portions in a data stream are retrievable without having to decrypt the data stream. In one embodiment, the apparatus also includes a decryption module to decrypt a part of data in conjunction with an encryption key to generate video information and video data. The controller then writes an encrypted version of the video data to a video buffer of a graphics engine.

公开(公告)号：EP2661716A2

公开(公告)日：2013-11-13

申请号：EP11855191.0

申请日：2011-12-28

申请人： Intel Corporation

发明人： PENDAKUR, Ramesh ,  GINTZ, Walter, C. ,  NEMIROFF, Daniel ,  HAZRA, Mousumi, M.

IPC分类号： G06F21/24 ,  G06F21/22

CPC分类号： H04N21/4367 ,  G06F21/10 ,  G06F21/123 ,  G06F21/72 ,  H04L9/3234 ,  H04N21/4181 ,  H04N21/43635 ,  H04N21/4408 ,  H04N21/63345

摘要： A system architecture provides a hardware-based root of trust solution for supporting distribution and playback of premium digital content. In an embodiment, hardware root of trust for digital content and services is a solution where the basis of trust for security purposes is rooted in hardware and firmware mechanisms in a client computing system, rather than in software. From this root of trust, the client computing system constructs an entire media processing pipeline that is protected for content authorization and playback. In embodiments of the present invention, the security of the client computing system for content processing is not dependent on the operating system (OS), basic input/output system (BIOS), media player application, or other host software.

公开(公告)号：EP2567378A2

公开(公告)日：2013-03-13

申请号：EP11777785.4

申请日：2011-04-08

申请人： Intel Corporation

发明人： NEMIROFF, Daniel ,  VEMBU, Balaji ,  GUTIERREZ, Raul ,  KAREENAHALLI, Suryaprasad

IPC分类号： G11B20/12 ,  H04N7/26

CPC分类号： G11B27/3027 ,  G11B27/28

摘要： Encoded data decoding techniques. A data decoding agent determines a data segment size for a packet that includes a header and a data segment. The data decoding agent determines a segment end location based, at least in part, on the data segment size. The data decoding agent processes subblocks of data from the data segment. The data decoding agent compares a current location to the segment end location to determine if a current subblock of data from the data segments contains the segment end location. The data decoding agent triggers an exception handler if the current subblock contains the segment end location.