公开(公告)号：US10735428B2

公开(公告)日：2020-08-04

申请号：US16149796

申请日：2018-10-02

Applicant: ARM IP Limited ,  ARM Limited

Inventor： Milosch Meriac ,  Geraint Luff ,  William Allen Curtis ,  Remy Pottier

IPC: H04L29/06 ,  H04W12/02 ,  H04L29/08

Abstract: In one example, a method includes obtaining, by a data processing device, first secret data associated with a first user and corresponding to a first location of a remote resource. The method further includes generating, using the first secret data, a first uniform resource locator (URL) usable to obtain the first location, and accessing the first location using the first URL. The method further includes obtaining, in response to transfer of usage rights of the data processing device from the first user to a second user, second secret data associated with the second user and corresponding to a second location of the remote resource. The method further includes generating, using the second secret data, a second URL usable to obtain the second location, and accessing the second location using the second URL. The second location is inaccessible via the first URL. The first location is inaccessible via the second URL.

公开(公告)号：US10657086B2

公开(公告)日：2020-05-19

申请号：US16303305

申请日：2017-05-26

Applicant: Arm IP Limited

Inventor： Milosch Meriac ,  Alessandro Angelino

IPC: G06F13/26 ,  G06F9/48 ,  G06F21/62

Abstract: A machine implemented method for prioritizing system interrupts in a processing system is provided. The method comprising: determining, at a supervisor module, for each interrupt, a relative interrupt priority in accordance with at least one interrupt parameter for said interrupt; prioritising, at said supervisor module, each said interrupt with respect to other interrupts of said system in compliance with said determined relative interrupt priority; and in response to a change to said at least one interrupt parameter during operation of said system, adjusting said determined relative interrupt priority, and re-prioritising each said interrupt with respect to said other interrupts of said system in compliance with said adjusted relative interrupt priority.

公开(公告)号：US10530586B2

公开(公告)日：2020-01-07

申请号：US15516766

申请日：2015-09-22

Applicant: ARM IP Limited

Inventor： Milosch Meriac ,  Geraint Luff

IPC: H04L29/00 ,  H04L9/32 ,  H04L9/14 ,  H04L9/30 ,  H04L29/06 ,  H04W12/04 ,  H04W12/06

Abstract: A method of generating a shortcut certificate for authenticating a user digital certificate generated by an issuing certification authority; the method comprising: authenticating the digital certificate of the issuing certification authority; creating the shortcut certificate for the digital certificate of the issuing certification authority when the digital certificate of the issuing certification authority is authenticated; wherein the shortcut certificate comprises a signed entry of an authentication of the issuing certification authority.

公开(公告)号：US20190074978A1

公开(公告)日：2019-03-07

申请号：US16183445

申请日：2018-11-07

Applicant: ARM IP Limited

Inventor： Geraint David Luff ,  Milosch Meriac

IPC: H04L9/32 ,  H04L29/08 ,  G16H10/65 ,  G16H80/00 ,  G06F12/0813 ,  G06F17/30 ,  G06F19/00 ,  G06F21/62 ,  H04L29/06 ,  H04L9/30 ,  H04L9/14

Abstract: A method of accessing a remote resource (4) from a data processing device (2) includes obtaining a first URL corresponding to the remote resource (4), obtaining secret data corresponding to the first URL, using the secret data to generate an obscured URL at the data processing device (2), and accessing the remote resource using the obscured URL. This allows the user of the device (2) to see a first URL which is intelligible and provides useful information about the device, without sharing that information with the network. The obscured URL identifies the actual location of the remote resource and can be an unintelligible stream of digits or letters.

公开(公告)号：US20190036928A1

公开(公告)日：2019-01-31

申请号：US16149796

申请日：2018-10-02

Applicant: ARM IP Limited ,  ARM Limited

Inventor： Milosch Meriac ,  Geraint Luff ,  William Allen Curtis ,  Remy Pottier

IPC: H04L29/06 ,  H04L29/08 ,  H04W12/02

Abstract: In one example, a method includes obtaining, by a data processing device, first secret data associated with a first user and corresponding to a first location of a remote resource. The method further includes generating, using the first secret data, a first uniform resource locator (URL) usable to obtain the first location, and accessing the first location using the first URL. The method further includes obtaining, in response to transfer of usage rights of the data processing device from the first user to a second user, second secret data associated with the second user and corresponding to a second location of the remote resource. The method further includes generating, using the second secret data, a second URL usable to obtain the second location, and accessing the second location using the second URL. The second location is inaccessible via the first URL. The first location is inaccessible via the second URL.

公开(公告)号：US20190036705A1

公开(公告)日：2019-01-31

申请号：US16025403

申请日：2018-07-02

Applicant: ARM IP Limited

Inventor： Milosch Meriac ,  Brendan James Moran

IPC: H04L9/32

Abstract: A method of authorizing an operation on a remote device with a cryptographic signature verification component, the remote device being operable in a communications network having human-readable messages with message signatures, comprising receiving at an arbitrator an authorization request to perform an operation requiring authorization on the remote device; retrieving from the request an operation identifier and plaintext data; sending a human-readable request with the identifier and the plaintext data to an authorizer; receiving a reply from an authorizer, the reply message comprising at least the plaintext data and a verifiable cryptographic signature identifying the authorizer derived from the request; and on receiving the reply, sending a request to perform the operation to the remote device with an authorization derived from at least the cryptographic signature, the cryptographic signature being suitable for verification by the cryptographic signature verification component on the remote device.

公开(公告)号：US20180048648A1

公开(公告)日：2018-02-15

申请号：US15659849

申请日：2017-07-26

Applicant: ARM IP Limited

Inventor： Alessandro Angelino ,  Milosch Meriac

IPC: H04L29/06 ,  G06F21/62

Abstract: A machine implemented method for protecting a target domain and a source domain from unauthorized accesses. The method comprising: identifying an exit call gateway comprising an exit transition instruction and at least one exit access parameter, said exit access parameters restricting exit from said source domain; identifying an entry call gateway corresponding to said exit call gateway, said entry call gateway comprising a transition instruction and at least one entry access parameter, said entry access parameters restricting access to said target domain; determining that said exit access parameters and said entry access parameters are compatible with each other; and performing a context switch from said source domain to said target domain, when said exit access parameters and said entry access parameters are complied with.

公开(公告)号：US11210393B2

公开(公告)日：2021-12-28

申请号：US16303291

申请日：2017-04-06

Applicant: Arm IP Limited

Inventor： Milosch Meriac ,  Alessandro Angelino

IPC: G06F21/55 ,  G06F9/46 ,  G06F1/24 ,  G06F9/455

Abstract: A technology for mutually isolating accessors of a shared electronic device from leakage of context data after a context switch comprises: on making the shared electronic device available to the plurality of accessors, establishing a portion of storage as an indicator location for the shared electronic device; when a first accessor requests use of the shared electronic device, writing at least one device-reset-required indicator to the indicator location; on switching context to a new context, after context save, when a second accessor requests use of the shared electronic device, resetting context data of the shared electronic device to a known state and reconciling the first device-reset-required indicator and a second device-reset-required indicator for the new context.

公开(公告)号：US10986074B2

公开(公告)日：2021-04-20

申请号：US15434510

申请日：2017-02-16

Applicant: ARM IP Limited

Inventor： Amyas Edward Wykes Phillips ,  Milosch Meriac

IPC: H04L9/06 ,  H04L9/00 ,  H04W12/04 ,  H04L29/06 ,  H04W4/70 ,  H04L9/08 ,  H04L9/14 ,  H04W12/00

Abstract: A method of generating wireless communications from a transmit-only device, the method comprising: generating, at the transmit-only device, a first current session key; generating, at the transmit-only device, operational data; generating, at the transmit-only device, crypto-data by performing a cryptographic operation on the operational data using the first current session key; transmitting, from the transmit-only device, a first identifier to enable a resource derive the first current session key; transmitting, from the transmit-only device, the crypto-data.

公开(公告)号：US10860354B2

公开(公告)日：2020-12-08

申请号：US15304302

申请日：2015-04-20

Applicant: ARM IP LIMITED

Inventor： Milosch Meriac ,  Hugo John Martin Vincent ,  James Crosby

IPC: G06F9/455 ,  G06F21/74 ,  G06F12/14 ,  G06F9/46 ,  G06F9/54 ,  G06F21/60

Abstract: A data processing system operates in a plurality of modes including a first privilege mode and a second privilege mode with the first privilege mode giving rights of access that are not available in the second privilege mode. Application code executes in the second privilege mode and generates function calls to hypervisor code which executes in the first privilege mode. These function calls are to perform a secure function requiring the rights of access which are only available in the first privilege mode. Scheduling code which executes in the second privilege mode controls scheduling of both the application code and the hypervisor code. Memory protection circuitry operating with physical addresses serves to control access permissions required to access different regions within the memory address space using configuration data which is written by the hypervisor code. The hypervisor code temporarily grants access to different regions within the physical memory address space to the system in the second privilege mode as needed to support the execution of code scheduled by the scheduling code.