-
公开(公告)号:US20210319121A1
公开(公告)日:2021-10-14
申请号:US17358526
申请日:2021-06-25
Applicant: Intel Corporation
Inventor: Prashant Dewan , Siddhartha Chhabra , James Boyd , Hormuzd Khosravi
Abstract: The disclosure generally relates to method, system and apparatus for concurrent volume and file based inline encryption on commodity operating systems (OS). More particularly, some embodiments of the disclosure relate to a Converged Cryptographic Engine (CCE) for storage encryption. An exemplary method for implementing non-disruptive inline encryption of a read/write transaction on a non-volatile memory (NVM) circuitry includes the steps of: generating one or more encryption keys for the read/write transaction on a storage volume of the NVM circuitry at a Setup logic; identifying a plurality of Logical Block Addresses (LBAs) corresponding to the storage volume for the read/write transaction at an NTFS logic; and, at a Storage encryption system logic: (1) receiving the plurality of LBAs and their corresponding storage volume from the NTFS, (2) identifying the storage volume on the NVM storage circuitry for the read/write transaction, (3) identifying the one or more encryption keys for the identified storage volume, (4) assigning a keyId to the identified encryption key, and (5) programming the KeyId on to the NVM circuitry.
-
公开(公告)号:US10810327B2
公开(公告)日:2020-10-20
申请号:US15863593
申请日:2018-01-05
Applicant: Intel Corporation
Inventor: Prashant Dewan , Siddhartha Chhabra , Uttam K. Sengupta
Abstract: In embodiments, an apparatus to enforce secure display view for trusted transactions may include a first input interface to receive from an application, via a trusted execution environment (TEE), viewport size data and an identifier of a display associated with a secure display of a trusted transaction; and a second input interface to receive from the application, via an untrusted execution environment, an encrypted transaction bitmap associated with the trusted transaction, to be securely displayed on the display; and an enforcement engine coupled to the first input interface and the second input interface, to verify that the size and location of the transaction bitmap are within the viewport to ensure the secure display of the transaction bitmap. In embodiments, after verification of the size and location of the transaction bitmap being within the viewport, the transaction bitmap may be displayed.
-
公开(公告)号:US20200285403A1
公开(公告)日:2020-09-10
申请号:US16832125
申请日:2020-03-27
Applicant: Intel Corporation
Inventor: Karunakara Kotary , Pannerkumar Rajagopal , Sahil Dureja , Mohamed Haniffa , Prashant Dewan
IPC: G06F3/06 , G06F13/16 , G06F9/4401
Abstract: An apparatus to facilitate memory map security in a system on chip (SOC), comprising is disclosed. The apparatus includes a micro controller to receive a request to grant a host device access to a memory device and perform an alias checking process to verify accuracy of a memory map of the memory device.
-
公开(公告)号:US20200226261A1
公开(公告)日:2020-07-16
申请号:US16832152
申请日:2020-03-27
Applicant: Intel Corporation
Inventor: Prashant Dewan , Chao Zhang , Nivedita Aggarwal , Aditya Katragada , Mohamed Haniffa , Kenji Chen
Abstract: An apparatus to verify firmware in a computing system, comprising a non-volatile memory, including firmware memory to store agent firmware associated with each of a plurality of interconnect protocol (IP) agents and version memory to store security version numbers (SVNs) included in the agent firmware, a security controller comprising verifier logic to verify an integrity of the version memory by applying a hash algorithm to contents of the version memory to generate a SVN hash, and a trusted platform module (TPM) to store the SVN hash.
-
公开(公告)号:US10565370B2
公开(公告)日:2020-02-18
申请号:US14998362
申请日:2015-12-24
Applicant: INTEL CORPORATION
Inventor: Alpa Narendra Trivedi , Ravi Sahita , David Durham , Karanvir Grewal , Prashant Dewan , Siddhartha Chhabra
IPC: G06F21/53 , G06F12/1009 , G06F13/28
Abstract: Various embodiments are generally directed to an apparatus, method, and other techniques to provide direct-memory access, memory-mapped input-output, and/or other memory transactions between devices designated for use by an enclave and the enclave itself. A secure device address map may be configured to map addresses for the enslave device and the enclave, and a register filter component may grant access to the enclave device to the enclave.
-
公开(公告)号:US10565130B2
公开(公告)日:2020-02-18
申请号:US15714323
申请日:2017-09-25
Applicant: Intel Corporation
Inventor: Siddhartha Chhabra , Reouven Elbaz , Krishnakumar Narasimhan , Prashant Dewan , David M. Durham
Abstract: Technologies for secure memory usage include a computing device having a processor that includes a memory encryption engine and a memory device coupled to the processor. The processor supports multiple processor usages, such as secure enclaves, system management firmware, and a virtual machine monitor. The memory encryption engine is configured to protect a memory region stored in the memory device for a processor usage. The memory encryption engine restricts access to one or more configuration registers to a trusted code base of the processor usage. The processor executes the processor usage and the memory encryption engine protects contents of the memory region during execution. The memory encryption engine may access integrity metadata based on the address of the protected memory region. The memory encryption engine may prepare top-level counter metadata for entering a low-power state. Other embodiments are described and claimed.
-
公开(公告)号:US20180018288A1
公开(公告)日:2018-01-18
申请号:US15209955
申请日:2016-07-14
Applicant: Intel Corporation
Inventor: Prashant Dewan , Siddhartha Chhabra , David M. Durham , Karanvir S. Grewal , Alpa T. Narendra Trivedi
CPC classification number: G06F12/1416 , G06F3/0622 , G06F3/0637 , G06F3/0673 , G06F21/10 , G06F21/602 , G06F21/6218 , G06F21/74 , G06F2212/1052 , G06F2221/2107
Abstract: In one embodiment, an apparatus includes: at least one core to execute instructions, the at least one core formed on a semiconductor die; a first memory formed on the semiconductor die, the first memory comprising a non-volatile random access memory, the first memory to store a first entry to be a monotonic counter, the first entry including a value field and a status field; and a control circuit, wherein the control circuit is to enable access to the first entry if the apparatus is in a secure mode and otherwise prevent the access to the first entry. Other embodiments are described and claimed.
-
公开(公告)号:US09786205B2
公开(公告)日:2017-10-10
申请号:US14369551
申请日:2013-12-23
Applicant: INTEL CORPORATION
Inventor: Prashant Dewan , Uttam Sengupta , Uday R. Savagaonkar , Siddhartha Chhabra , David Durham , Xiaozhu Kang
CPC classification number: G09C5/00
Abstract: Various embodiments are generally directed an apparatus and method for processing an encrypted graphic with a decryption key associated with a depth order policy including a depth position of a display scene, generating a graphic from the encrypted graphic when the encrypted graphic is successfully decrypted using the decryption key and assigning the graphic to a plane at the depth position of the display scene when the encrypted graphic is successfully decrypted.
-
19.
公开(公告)号:US09781118B2
公开(公告)日:2017-10-03
申请号:US13830634
申请日:2013-03-14
Applicant: Intel Corporation
Inventor: Hong C. Li , John B. Vicente , Prashant Dewan
CPC classification number: H04L63/101 , G06F21/51 , G06F21/53 , G06F2221/2119 , H04L67/02
Abstract: Systems and methods may provide for receiving web content and determining a trust level associated with the web content. Additionally, the web content may be mapped to an execution environment based at least in part on the trust level. In one example, the web content is stored to a trust level specific data container.
-
公开(公告)号:US20160012565A1
公开(公告)日:2016-01-14
申请号:US14864183
申请日:2015-09-24
Applicant: Intel Corporation
Inventor: Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , Michael A. Goldsmith , David M. Durham
CPC classification number: G06T1/60 , G06F3/147 , G06F21/84 , G06T1/20 , G09G2358/00 , H04N21/42653 , H04N21/4318 , H04N21/4367 , H04N21/44004 , H04N21/4408
Abstract: A protected graphics module can send its output to a display engine securely. Secure communications with the display can provide a level of confidentiality of content generated by protected graphics modules against software and hardware attacks.
Abstract translation: 受保护的图形模块可以将其输出安全地发送到显示引擎。 与显示器的安全通信可以提供受保护图形模块生成的内容对软件和硬件攻击的机密性。
-
-
-
-
-
-
-
-
-