公开(公告)号：US09729331B2

公开(公告)日：2017-08-08

申请号：US14687840

申请日：2015-04-15

Applicant: CRYPTOGRAPHY RESEARCH, INC.

Inventor： Ambuj Kumar ,  Benjamin Che-Ming Jun

IPC: H04L29/06 ,  H04L9/32 ,  G06F3/06 ,  H04L9/08

CPC classification number: H04L9/3268 ,  G06F3/0619 ,  G06F3/0655 ,  G06F3/0679 ,  H04L9/0891 ,  H04L63/0823

Abstract: A request associated with a revocation of a key may be received. A hash value corresponding to the key that is stored in a memory may be identified. Furthermore, the hash value that is stored in the memory may be corrupted in response to the request associated with the revocation of the key.

公开(公告)号：US09553722B2

公开(公告)日：2017-01-24

申请号：US14792445

申请日：2015-07-06

Applicant: CRYPTOGRAPHY RESEARCH, INC.

Inventor： Benjamin Che-Ming Jun ,  Ambuj Kumar

IPC: H04L9/00 ,  H04L9/08

CPC classification number: H04L9/0866 ,  H04L9/003 ,  H04L2209/24

Abstract: A first key associated with a plurality of devices may be received. Furthermore, a second key associated with a single device may be received. The first key associated with the plurality of devices may be modified based on a device identification of the single device. Additionally, a primary key may be generated based on the modified first key and the second key.

Abstract translation: 可以接收与多个设备相关联的第一密钥。 此外，可以接收与单个设备相关联的第二密钥。 可以基于单个设备的设备标识来修改与多个设备相关联的第一密钥。 另外，可以基于修改的第一密钥和第二密钥来生成主密钥。

公开(公告)号：US20150326541A1

公开(公告)日：2015-11-12

申请号：US14535202

申请日：2014-11-06

Applicant: CRYPTOGRAPHY RESEARCH, INC.

Inventor： Michael Hamburg ,  Benjamin Che-Ming Jun ,  Paul C. Kocher ,  Daniel O'Loughlin ,  Denis Alexandrovich Pochuev ,  Ambuj Kumar

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0853 ,  G06F21/335 ,  G06F21/602 ,  G06F21/6209 ,  G06F21/72 ,  G06F21/73 ,  G06F2221/2107 ,  G06F2221/2135 ,  G06F2221/2145 ,  G06F2221/2149 ,  G06F2221/2153 ,  H04L63/0428 ,  H04L63/062 ,  H04L63/123 ,  H04L67/32 ,  H04W12/06

Abstract: The embodiments described herein describe technologies for ticketing systems used in consumption and provisioning of data assets, such as a pre-computed (PCD) asset. A ticket may be a digital file or data that enables enforcement of usage count limits and uniqueness issuance ore sequential issuance of target device parameters. On implementation includes an Appliance device of a cryptographic manager (CM) system that receives a Module and a ticket over a network from a Service device. The Module is an application that securely provisions a data asset to a target device in an operation phase of a manufacturing lifecycle of the target device. The ticket is digital data that grants permission to the Appliance device to execute the Module. The Appliance device verifies the ticket to execute the Module. The Module, when executed, results in a secure construction of a sequence of operations to securely provision the data asset to the target device.

Abstract translation: 这里描述的实施例描述了在诸如预先计算（PCD）资产的数据资产的消费和供应中使用的票务系统的技术。 票可以是数字文件或数据，其能够执行使用计数限制和唯一性发放矿石连续发放目标设备参数。 实施时包括通过网络从服务设备接收模块和故障单的密码管理器（CM）系统的电器设备。 该模块是在目标设备的制造生命周期的操作阶段中将数据资产安全地提供给目标设备的应用程序。 该票是允许电器设备执行模块的数字数据。 电器设备验证机票以执行模块。 该模块在执行时会导致一系列操作的安全构造，以将数据资产安全地提供给目标设备。

公开(公告)号：US11765149B2

公开(公告)日：2023-09-19

申请号：US16593377

申请日：2019-10-04

Applicant: Cryptography Research, Inc.

Inventor： Ambuj Kumar ,  Daniel Beitel ,  Benjamin Che-Ming Jun

IPC: H04L9/00 ,  H04L9/40 ,  G06F21/57 ,  H04L9/08 ,  H04L9/32 ,  H04W12/04 ,  H04W12/30 ,  G06F12/14

CPC classification number: H04L63/061 ,  G06F12/1408 ,  G06F21/575 ,  H04L9/0894 ,  H04L9/3236 ,  H04L9/3242 ,  H04L63/0435 ,  H04L63/0442 ,  H04W12/04 ,  H04W12/35 ,  G06F2212/1052

Abstract: A first instruction to store an entity identification (ID) in a memory of a device may be received. The entity ID may be stored in the memory in response to receiving the first instruction. Furthermore, a second instruction to store a value based on a key in the memory of the device may be received. A determination may be made as to whether the value based on the key that is to be stored in the memory corresponds to the entity ID that is stored in the memory. The value based on the key may be stored in the memory of the device when the value based on the key corresponds to the entity ID.

公开(公告)号：US10560260B2

公开(公告)日：2020-02-11

申请号：US16283574

申请日：2019-02-22

Applicant: Cryptography Research, Inc.

Inventor： Megan Anneke Wachs ,  Ambuj Kumar ,  Benjamin Che-Ming Jun

IPC: H04L9/32 ,  H04L9/06 ,  H04L9/08 ,  H04L29/06

Abstract: Values and a sequence of operations associated with generating a key may be received. A determination may be made as to whether the sequence of operations associated with the key matches an authorized sequence of operations. The key may be outputted when the received sequence of operations matches the authorized sequence of operations and the key may not be outputted when the received sequence of operations does not match the authorized sequence of operations.

公开(公告)号：US20190273604A1

公开(公告)日：2019-09-05

申请号：US16283574

申请日：2019-02-22

Applicant: Cryptography Research, Inc.

Inventor： Megan Anneke Wachs ,  Ambuj Kumar ,  Benjamin Che-Ming Jun

IPC: H04L9/06 ,  H04L29/06 ,  H04L9/08 ,  H04L9/32

Abstract: Values and a sequence of operations associated with generating a key may be received. A determination may be made as to whether the sequence of operations associated with the key matches an authorized sequence of operations. The key may be outputted when the received sequence of operations matches the authorized sequence of operations and the key may not be outputted when the received sequence of operations does not match the authorized sequence of operations.

公开(公告)号：US10019564B2

公开(公告)日：2018-07-10

申请号：US14670379

申请日：2015-03-26

Applicant: Cryptography Research, Inc.

Inventor： Benjamin Che-Ming Jun ,  Matthew Evan Orzen ,  Joel Patrick Wittenauer ,  Steven C. Woo

IPC: G06F21/44 ,  H04L29/06 ,  H04L9/32

CPC classification number: G06F21/44 ,  H04L9/321 ,  H04L9/3271 ,  H04L63/08

Abstract: Pairing data associated with a second device may be received at a first device. The pairing data may be received from a server. A first authentication proof may be generated based on the pairing data received from the server. A second authentication proof may be received from the second device. Furthermore, an authentication status of the second device may be updated based on a comparison of the first authentication proof that is based on the pairing data received from the server and the second authentication proof that is received from the second device.

公开(公告)号：US09544304B2

公开(公告)日：2017-01-10

申请号：US14535202

申请日：2014-11-06

Applicant: CRYPTOGRAPHY RESEARCH, INC.

Inventor： Michael Hamburg ,  Benjamin Che-Ming Jun ,  Paul C. Kocher ,  Daniel O'Loughlin ,  Denis Alexandrovich Pochuev ,  Ambuj Kumar

IPC: H04L9/32 ,  H04L29/06 ,  H04L29/08 ,  H04W12/06 ,  G06F21/60 ,  G06F21/62 ,  G06F21/72 ,  G06F21/73 ,  G06F21/33

Abstract: The embodiments described herein describe technologies for ticketing systems used in consumption and provisioning of data assets, such as a pre-computed (PCD) asset. A ticket may be a digital file or data that enables enforcement of usage count limits and uniqueness issuance ore sequential issuance of target device parameters. On implementation includes an Appliance device of a cryptographic manager (CM) system that receives a Module and a ticket over a network from a Service device. The Module is an application that securely provisions a data asset to a target device in an operation phase of a manufacturing lifecycle of the target device. The ticket is digital data that grants permission to the Appliance device to execute the Module. The Appliance device verifies the ticket to execute the Module. The Module, when executed, results in a secure construction of a sequence of operations to securely provision the data asset to the target device.

公开(公告)号：US20150326567A1

公开(公告)日：2015-11-12

申请号：US14535194

申请日：2014-11-06

Applicant: CRYPTOGRAPHY RESEARCH, INC.

Inventor： Michael Hamburg ,  Benjamin Che-Ming Jun ,  Paul C. Kocher ,  Daniel O'Loughlin ,  Denis Alexandrovich Pochuev

IPC: H04L29/06 ,  H04W12/06

CPC classification number: H04L63/0853 ,  G06F21/335 ,  G06F21/602 ,  G06F21/6209 ,  G06F21/72 ,  G06F21/73 ,  G06F2221/2107 ,  G06F2221/2135 ,  G06F2221/2145 ,  G06F2221/2149 ,  G06F2221/2153 ,  H04L63/0428 ,  H04L63/062 ,  H04L63/123 ,  H04L67/32 ,  H04W12/06

Abstract: The embodiments described herein describe technologies for Module management, including Module creation and Module deployment to a target device in an operation phase of a manufacturing lifecycle of the target device in a cryptographic manager (CM) environment. One implementation includes a Root Authority (RA) device that receives a command to create a Module and executes a Module Template to generate the Module in response to the command. The Module is deployed to an Appliance device. A set of instructions of the Module, when executed by the Appliance device, results in a secure construction of a sequence of operations to securely provision a data asset to the target device. The Appliance device is configured to distribute the data asset to a cryptographic manager (CM) core of the target device.

Abstract translation: 本文描述的实施例描述了用于模块管理的技术，包括在加密管理器（CM）环境中的目标设备的制造生命周期的操作阶段中的模块创建和模块部署到目标设备。 一个实现包括根授权（RA）设备，其接收创建模块的命令并执行模块模板以响应于该命令生成模块。 模块部署到设备设备。 当由设备设备执行时，该模块的一组指令导致一系列操作的安全构造，以将数据资产安全地提供给目标设备。 设备设备被配置为将数据资产分发到目标设备的加密管理器（CM）核心。

公开(公告)号：US11811908B2

公开(公告)日：2023-11-07

申请号：US16786796

申请日：2020-02-10

Applicant: Cryptography Research, Inc.

Inventor： Megan Anneke Wachs ,  Ambuj Kumar ,  Benjamin Che-Ming Jun

IPC: H04L9/06 ,  H04L9/08 ,  H04L9/40 ,  H04L9/32

CPC classification number: H04L9/0631 ,  H04L9/0643 ,  H04L9/0861 ,  H04L9/3236 ,  H04L63/06

Abstract: Values and a sequence of operations associated with generating a key may be received. A determination may be made as to whether the sequence of operations associated with the key matches an authorized sequence of operations. The key may be outputted when the received sequence of operations matches the authorized sequence of operations and the key may not be outputted when the received sequence of operations does not match the authorized sequence of operations.