利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

16 条记录 (耗时 0.012 秒)

    MAINTAINING OPERATING SYSTEM SECRETS ACROSS RESETS
    5.
    发明公开
    MAINTAINING OPERATING SYSTEM SECRETS ACROSS RESETS 审中-公开

    公开(公告)号：EP3479283A1

    公开(公告)日：2019-05-08

    申请号：EP17735717.5

    申请日：2017-06-22

    申请人： Microsoft Technology Licensing, LLC

    发明人： YOUNG, Robert D. ,  BARKELEW, Jonathan Bret ,  AIGNER, Ronald ,  MICHAUD, Alain L. ,  COX, Jeremiah J.

    IPC分类号： G06F21/57 ,  G06F9/44 ,  H04L9/08

    摘要： A device includes a reset resistant store and a trusted key service. The reset resistant store maintains data across various different device reset or data invalidation operations. The trusted key service maintains, for each of one or more operating systems that run on the device from a boot configuration, an encrypted key associated with the boot configuration. The device also has a master key that is specific to the device. Each of the keys associated with a boot configuration is encrypted using the master key. When booting the device, the boot configuration being run on the device is identified, and the key associated with that boot configuration is obtained (e.g., from the reset resistant store or the encrypted key vault). The master key is used to decrypt the obtained key, and the obtained key is used to decrypt secrets associated with the operating system run from the boot configuration.

    TRUST SERVICE FOR A CLIENT DEVICE
    8.
    发明公开
    TRUST SERVICE FOR A CLIENT DEVICE 审中-公开
    客户端设备的信任服务

    公开(公告)号：EP3210155A1

    公开(公告)日：2017-08-30

    申请号：EP15788524.5

    申请日：2015-10-18

    申请人： Microsoft Technology Licensing, LLC

    发明人： THOM, Stefan ,  AIGNER, Ronald ,  MATTOON, Dennis J. ,  SCHAEFER, Stuart H. ,  KAPADIA, Merzin ,  SPIGER, Robert Karl ,  WOOTEN, David R. ,  ENGLAND, Paul

    IPC分类号： G06F21/62 ,  G06F21/72 ,  H04L29/06

    CPC分类号： H04L9/3247 ,  G06F21/53 ,  G06F21/629 ,  G06F21/72 ,  G06F2221/034 ,  H04L63/0428 ,  H04L63/0876 ,  H04L63/102

    摘要： Techniques for a trust service for a client device are described. In various implementations, a trust service is implemented remotely from a client device and provides various trust-related functions to the client device. According to various implementations, communication between a client device and a remote trust service is authenticated by a client identifier (ID) that is maintained by both the client device and the remote trust service. In at least some implementations, the client ID is stored on a location of the client device that is protected from access by (e.g., is inaccessible to) device components such as an operating system, applications, and so forth. Thus, the client ID may be utilized to generate signatures to authenticate communications between the client device and the remote trust service.

    摘要翻译： 描述了用于客户端设备的信任服务的技术。 在各种实现中，信任服务从客户端设备远程实现，并向客户端设备提供各种信任相关功能。 根据各种实现，客户端设备和远程信任服务之间的通信由客户端设备和远程信任服务两者维护的客户端标识符（ID）进行认证。 在至少一些实施方式中，客户端ID被存储在客户端设备的位置上，该位置被设备组件（诸如操作系统，应用等）（例如，不可访问）保护以免被访问。 因此，可以利用客户端ID来生成签名以认证客户端设备和远程信任服务之间的通信。