公开(公告)号：US20150365715A1

公开(公告)日：2015-12-17

申请号：US14304721

申请日：2014-06-13

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR ,  Chenxi ZHANG

IPC: H04N21/426 ,  H04N21/4405 ,  H04N21/418 ,  H04N21/6334 ,  H04N21/414 ,  H04N21/44 ,  H04N21/4627

CPC classification number: H04N21/42623 ,  G06F21/00 ,  G09C1/00 ,  H04L9/00 ,  H04L2209/603 ,  H04N21/41407 ,  H04N21/4182 ,  H04N21/44004 ,  H04N21/4405 ,  H04N21/4627

Abstract: Disclosed is an apparatus and method to determine usage rules for video content by buffer tracking. A computing device may include a secure processor configured to: store digital rights management (DRM) rules associated with a DRM key and usage rules for a session; command a cryptoprocessor to decrypt video content with the DRM key and to log an output buffer designation of the command to decrypt the video content. The secure processor may command a buffer tracking table to store the output buffer designation of the cryptoprocessor of the command to decrypt and the associated usage rules and a plurality of input and output buffer designations from a plurality of video content drivers, such that, based upon a buffer designation from an output driver to display video content received by the secure processor, the secure processor may determine usage rules to be applied to the decrypted video content for display.

Abstract translation: 公开了一种通过缓冲器跟踪来确定视频内容的使用规则的装置和方法。 计算设备可以包括安全处理器，其被配置为：存储与DRM密钥相关联的数字版权管理（DRM）规则和会话的使用规则; 命令密码处理器用DRM密钥解密视频内容，并记录命令的输出缓冲区指定以解密视频内容。 安全处理器可以命令缓冲器跟踪表来存储命令的密码处理器的输出缓冲器指定以从多个视频内容驱动器解密和相关联的使用规则以及多个输入和输出缓冲器指定，使得基于 来自输出驱动器的缓冲器指定以显示由安全处理器接收的视频内容，安全处理器可以确定要应用于解密的视频内容以供显示的使用规则。

公开(公告)号：US20150286242A1

公开(公告)日：2015-10-08

申请号：US14244626

申请日：2014-04-03

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR ,  Michael K. BATENBURG

IPC: G06F1/08

CPC classification number: G06F1/08 ,  G06F1/324 ,  Y02D10/126

Abstract: Disclosed is an apparatus and method to set the speed of a clock. A computing device may include a processor and a scheduler of the processor, the scheduler may be configured to: receive a plurality of votes for requested bandwidths from a plurality of different execution environments; sum the requested bandwidths; and set the clock speed based upon the sum of the requested bandwidths.

Abstract translation: 公开了一种设置时钟速度的装置和方法。 计算设备可以包括处理器和处理器的调度器，调度器可以被配置为：从多个不同的执行环境接收所请求的带宽的多个投票; 对请求的带宽求和; 并且基于所请求的带宽的和来设置时钟速度。

公开(公告)号：US20170093586A1

公开(公告)日：2017-03-30

申请号：US14865448

申请日：2015-09-25

Applicant: QUALCOMM Incorporated

Inventor： Maria MIRANDA ,  Qazi BASHIR ,  Satyajit PATNE ,  Ron KEIDAR

IPC: H04L9/32

CPC classification number: H04L9/3268 ,  H04L9/3236 ,  H04L9/3247 ,  H04L9/3263 ,  H04L2209/38 ,  H04W12/04

Abstract: Techniques for managing certificates on a computing device are provided. An example method according to these techniques includes receiving an image file comprising a hash value of a certificate on which a certificate action is to be performed, the certificate action being a revocation action or an activation action, the image file having been signed by a signing certificate, determining whether the image file has been signed by a valid certificate by comparing a hash value of the signing certificate to a plurality of hash values associated with certificates stored in a one-time programmable memory of the computing device, and performing the certificate action, responsive to the image file having been signed by the valid certificate and the certificate on which the certificate action is to be performed having been found in the memory, by setting a value of an indicator associated with the certificate in the memory.

公开(公告)号：US20170061144A1

公开(公告)日：2017-03-02

申请号：US14691302

申请日：2015-04-20

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR ,  Osman KOYUNCU ,  Assaf SHACHAM

IPC: G06F21/62 ,  G06F21/57 ,  H04L9/06

CPC classification number: G06F21/6218 ,  G06F21/575 ,  G06F21/602 ,  G06F21/72 ,  G09C1/00 ,  H04L9/0618 ,  H04L9/0637 ,  H04L2209/12 ,  H04L2209/125 ,  H04L2209/24

Abstract: Disclosed is a method and apparatus to decrypt file segments in parallel. In one embodiment, an integrated circuit may be used with a storage device of a computing device that comprises: a hardware interface to communicate with the storage device; a crypto-engine to encrypt file segments to be stored on the storage device and to decrypt file segments read from the storage device; and a processor. The processor may be configured to: read a plurality of decrypted file segments from the storage device through the crypto-engine in parallel; and to store the plurality of decrypted file segments.

Abstract translation: 公开了并行解密文件段的方法和装置。 在一个实施例中，集成电路可以与计算设备的存储设备一起使用，所述存储设备包括：与存储设备通信的硬件接口; 加密引擎，用于加密要存储在存储设备上的文件段并解密从存储设备读取的文件段; 和处理器。 处理器可以被配置为：并行地通过密码引擎从存储设备读取多个解密的文件段; 并存储多个解密的文件段。

公开(公告)号：US20170249183A1

公开(公告)日：2017-08-31

申请号：US15595579

申请日：2017-05-15

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR ,  Osman KOYUNCU ,  Michael BATENBURG

IPC: G06F9/455 ,  G06F9/50 ,  G06F21/82 ,  G06F13/40

CPC classification number: G06F13/4068 ,  G06F9/45558 ,  G06F9/5077 ,  G06F13/40 ,  G06F21/82 ,  G06F2009/45579

Abstract: System and method for providing adaptive access to a hardware block on a computer system. In one embodiment, a method includes receiving a first access request and a second access request with an access controller, wherein the second access request is received sequentially after the first access request, and the first access request includes a first master identification and the second access request includes a second master identification, determining if the second master identification is equal to the first master identification, providing access to the second access request if the second master identification is equal to the first master identification, wherein the first master identification is associated with one or more hardware block interface values, invalidating the one or more hardware block interface values associated with the first master identification if the second master identification is not equal to the first master identification, and associating the one or more hardware block interface values with the second master identification and a corresponding privilege.

公开(公告)号：US20170093582A1

公开(公告)日：2017-03-30

申请号：US14866636

申请日：2015-09-25

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR ,  Eugen PIRVU ,  Jeff SMITH

IPC: H04L9/32 ,  G06F9/44

CPC classification number: H04L9/3263 ,  G06F9/4416 ,  G06F21/575 ,  G06F21/64 ,  H04L2209/64

Abstract: A secure boot method includes: obtaining a certificate digest at a digest processor from a write-once, always-on memory; calculating a flash digest using the digest processor by cryptographically processing a sensitive information image; and comparing, using the digest processor, the flash digest with the certificate digest.

公开(公告)号：US20170090909A1

公开(公告)日：2017-03-30

申请号：US14866682

申请日：2015-09-25

Applicant: QUALCOMM Incorporated

Inventor： Xu GUO ,  Ron KEIDAR ,  Rodney ZIOLKOWSKI ,  Mahesh Dandapani IYER ,  Yau CHU

IPC: G06F9/445 ,  G06F21/57

CPC classification number: G06F8/66 ,  G06F21/57 ,  G06F21/572 ,  G06F21/575 ,  G06F2221/033

Abstract: Methods, apparatus, and computer program products for securely writing patch code to a memory of a system-on-chip (SoC) are described. An example of a method for securely writing patch code to the memory of the SoC includes determining an authentication status of a patch code image, if the authentication status of the patch code image is authenticated, then writing the patch code from the patch code image into a one-time programmable (OTP) memory and generating a system reset signal, and if the authentication status of the patch code image is unauthenticated, then booting the SoC without writing the patch code from the patch code image into the OTP memory.

公开(公告)号：US20170085540A1

公开(公告)日：2017-03-23

申请号：US14862059

申请日：2015-09-22

Applicant: QUALCOMM Incorporated

Inventor： Roberto AVANZI ,  Rosario CAMMAROTA ,  Ron KEIDAR

IPC: H04L29/06

CPC classification number: H04L63/061 ,  H04L9/0877 ,  H04L63/0428 ,  H04L63/062 ,  H04L63/0853 ,  H04L2209/60 ,  H04L2209/80 ,  H04W4/70 ,  H04W12/02

Abstract: A method includes: decrypting, in a device, a first subset of encrypted data using a cryptographic device key associated with the device to produce first plain text, where a set of encrypted data comprises the first subset of encrypted data and a second subset of encrypted data, and where the first subset of encrypted data and the second subset of encrypted data each contain less encrypted data than the set of encrypted data and are different from each other; decrypting, in the device, the second subset of encrypted data using the cryptographic device key to produce second plain text; encrypting, in the device, the first plain text using a first ephemeral key to produce first re-encrypted data; and encrypting, in the device, the second plain text using a second ephemeral key to produce second re-encrypted data, the second ephemeral key being different from the first ephemeral key.

公开(公告)号：US20160295283A1

公开(公告)日：2016-10-06

申请号：US14677762

申请日：2015-04-02

Applicant: QUALCOMM Incorporated

Inventor： Roberto AVANZI ,  Simo Petteri KANGASLAMPI ,  Ron KEIDAR ,  Chang-Kuk CHOI

IPC: H04N21/4627 ,  H04N21/439

CPC classification number: H04N21/4627 ,  G06F21/10 ,  G06F2221/07 ,  H04L2209/603 ,  H04N21/4394 ,  H04N21/4398

Abstract: Techniques for preventing circumvention of digital rights management protections on electronic content are provided. A method according to these techniques includes receiving a content stream, obtaining samples from the content stream, generating a histogram based on the samples from the content stream, classifying the content stream as including audio content or non-audio content based on the histogram, and modifying portions of the content stream responsive to classifying the content stream as including non-audio content. The content stream can be modified such that any video content included in the content stream would be rendered unplayable, while audio content included in the content stream remains playable.

Abstract translation: 提供了防止数字版权管理保护电子内容的技术。 根据这些技术的方法包括接收内容流，从内容流获得样本，基于来自内容流的样本生成直方图，基于直方图将内容流分类为包括音频内容或非音频内容;以及 响应于将内容流分类为包括非音频内容来修改内容流的部分。 可以修改内容流，使得包含在内容流中的任何视频内容将被渲染为不可播放，而包含在内容流中的音频内容保持可播放。

公开(公告)号：US20160259750A1

公开(公告)日：2016-09-08

申请号：US14638669

申请日：2015-03-04

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR ,  Osman KOYUNCU ,  Michael BATENBURG

IPC: G06F13/40 ,  G06F9/455

CPC classification number: G06F13/4068 ,  G06F9/45558 ,  G06F9/5077 ,  G06F13/40 ,  G06F21/82 ,  G06F2009/45579

Abstract: System and method for providing adaptive access to a hardware block on a computer system. In one embodiment, a method includes receiving a first access request and a second access request with an access controller, wherein the second access request is received sequentially after the first access request, and the first access request includes a first master identification and the second access request includes a second master identification, determining if the second master identification is equal to the first master identification, providing access to the second access request if the second master identification is equal to the first master identification, wherein the first master identification is associated with one or more hardware block interface values, invalidating the one or more hardware block interface values associated with the first master identification if the second master identification is not equal to the first master identification, and associating the one or more hardware block interface values with the second master identification and a corresponding privilege.

Abstract translation: 用于提供对计算机系统上的硬件块的自适应访问的系统和方法。 在一个实施例中，一种方法包括接收具有访问控制器的第一访问请求和第二访问请求，其中在第一访问请求之后顺序地接收第二访问请求，并且第一访问请求包括第一主标识和第二访问 请求包括第二主标识，确定第二主标识是否等于第一主标识，如果第二主标识等于第一主标识，则提供对第二存取请求的访问，其中第一主标识与一个相关联 或多个硬件块接口值，如果所述第二主标识不等于所述第一主标识，则使与所述第一主标识相关联的所述一个或多个硬件块接口值无效，并且将所述一个或多个硬件块接口值与所述第二主控 识别和相应的privi 稀少