公开(公告)号：US12231452B2

公开(公告)日：2025-02-18

申请号：US17720905

申请日：2022-04-14

Applicant: Huawei Technologies Co., Ltd.

Inventor： Junli Hu ,  Wei Pan ,  Haifei Zeng ,  Yuguo Wang

IPC: H04L9/40 ,  G06F1/3206 ,  G06F21/57 ,  G06F21/60

Abstract: A remote attestation mode negotiation method for a combined device and a related device, where the combined device includes at least a first unit. The method implemented by the first unit includes sending a mode negotiation request message to the remote attestation device; receiving a mode negotiation response message comprising a target remote attestation mode; and determining the remote attestation mode based on the mode negotiation response message. In this way, a target remote attestation manner to be used subsequently can be determined through negotiation between the combined device and the remote attestation device, to provide a data basis for subsequently and sequentially performing remote attestation on the combined device.

公开(公告)号：US20220131856A1

公开(公告)日：2022-04-28

申请号：US17647657

申请日：2022-01-11

Applicant: Huawei Technologies Co., Ltd.

Inventor： Liang Xia ,  Wei Pan ,  Yulin Shi ,  Jianxiong Wei

IPC: H04L9/40

Abstract: This application discloses a remote attestation method and an apparatus. The method specifically includes: A first network device receives encrypted information and first measurement information of a second network device through the second network device, where the encrypted information is information obtained by encrypting second measurement information of a third network device; the first network device determines, based on the first measurement information, that the second network device is system-trusted; and the first network device decrypts the encrypted information to obtain the second measurement information.

公开(公告)号：US20240273049A1

公开(公告)日：2024-08-15

申请号：US18641106

申请日：2024-04-19

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Wei Pan ,  Tao Li ,  Junping Luo

IPC: G06F13/40

CPC classification number: G06F13/4068

Abstract: Embodiments of this application disclose a computing system, an addressing method, a compute node, and a program product, and pertain to the computing field. Each compute node in a computing system has a different first-level identifier, and a plurality of function modules in each compute node have different second-level identifiers. The second-level identifier is used for routing and addressing between function modules in a same compute node, and the first-level identifier and the second-level identifier are used for routing and addressing between function modules in different compute nodes. In other words, unified addressing is performed on the different compute nodes, and is also performed on the function modules in the same compute node. In this way, interconnection specifications used during communication between the compute nodes and communication in the compute node are consistent, complex protocol conversion is not needed, data processing efficiency is improved, and latency is reduced.

公开(公告)号：US12058125B2

公开(公告)日：2024-08-06

申请号：US17560581

申请日：2021-12-23

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Wei Pan ,  Liang Xia ,  Yulin Shi

IPC: H04L9/32 ,  G06F21/57 ,  H04L9/40 ,  H04L41/0246

CPC classification number: H04L63/0853 ,  H04L41/0246 ,  H04L63/0876 ,  H04L63/205

Abstract: This application discloses a remote attestation mode negotiation method and apparatus. Before remote attestation is performed, automatic negotiation is performed between a to-be-verified network device and a server, so that the to-be-verified network device and the server can determine, through negotiation from remote attestation modes supported by both the to-be-verified network device and the server, a remote attestation mode used to subsequently perform remote attestation between the network device and the server, and there is no need to manually statically configure a remote attestation mode for the network device and the server, thereby greatly reducing labor costs of determining the remote attestation mode. In addition, when there are a large quantity of devices, the automatic remote attestation mode negotiation method also helps configure a remote attestation mode more flexibly.

公开(公告)号：US20220239688A1

公开(公告)日：2022-07-28

申请号：US17720905

申请日：2022-04-14

Applicant: Huawei Technologies Co., Ltd.

Inventor： Junli Hu ,  Wei Pan ,  Haifei Zeng ,  Yuguo Wang

IPC: H04L9/40

Abstract: Embodiments of this application disclose a remote attestation mode negotiation method for a combined device and a related device. The combined device may include at least a first unit. The method implemented by the first unit includes: sending a mode negotiation request message to the remote attestation device; receiving a mode negotiation response message comprising a target remote attestation mode; and determining the remote attestation mode based on the mode negotiation response message. In this way, a target remote attestation manner to be used subsequently can be determined through negotiation between the combined device and the remote attestation device, to provide a data basis for subsequently and sequentially performing remote attestation on the combined device.

公开(公告)号：US20220116387A1

公开(公告)日：2022-04-14

申请号：US17560581

申请日：2021-12-23

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Wei Pan ,  Liang Xia ,  Yulin Shi

IPC: H04L9/40 ,  H04L41/0246

Abstract: This application discloses a remote attestation mode negotiation method and apparatus. Before remote attestation is performed, automatic negotiation is performed between a to-be-verified network device and a server, so that the to-be-verified network device and the server can determine, through negotiation from remote attestation modes supported by both the to-be-verified network device and the server, a remote attestation mode used to subsequently perform remote attestation between the network device and the server, and there is no need to manually statically configure a remote attestation mode for the network device and the server, thereby greatly reducing labor costs of determining the remote attestation mode. In addition, when there are a large quantity of devices, the automatic remote attestation mode negotiation method also helps configure a remote attestation mode more flexibly.

公开(公告)号：US20220255909A1

公开(公告)日：2022-08-11

申请号：US17727135

申请日：2022-04-22

Applicant: Huawei Technologies Co., Ltd.

Inventor： Wei Pan ,  Yonglong Fang ,  Liang Xia ,  Bo Wu

IPC: H04L9/40 ,  H04L45/24

Abstract: A method includes receiving, by a first network device, a first packet and a second packet, where the first packet and the second packet belong to first traffic, and all packets included in the first traffic match a first traffic differentiation rule; based on a mapping relationship between the first traffic and a first encryption policy group, encrypting, by the first network device, the first packet using a first encryption policy to obtain a third packet, and encrypting, by the first network device, the second packet using a second encryption policy to obtain a fourth packet, where the first encryption policy group includes the second encryption policy and the first encryption policy, and the first encryption policy and the second encryption policy are different encryption policies; and sending, by the first network device, the third packet and the fourth packet to a second network device.