中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

85 records (took 0.022 seconds)

    TECHNOLOGIES FOR SECURE TRUSTED I/O ACCESS CONTROL
    32.
    发明申请
    TECHNOLOGIES FOR SECURE TRUSTED I/O ACCESS CONTROL 审中-公开
    安全有效的I / O访问控制技术

    公开(公告)号：US20170024569A1

    公开(公告)日：2017-01-26

    申请号：US14974944

    申请日：2015-12-18

    Applicant: Intel Corporation

    Inventor： Bin Xing ,  Pradeep M. Pappachan ,  Siddhartha Chhabra ,  Reshma Lal ,  Steven B. McGowan

    IPC: G06F21/60 ,  G06F13/28

    Abstract: Technologies for trusted I/O (TIO) include a computing device with a cryptographic engine and one or more I/O controllers. The computing device executes a TIO core service that has a cryptographic engine programming privileged granted by an operating system. The TIO core service receives a request from an application to protect a DMA channel. The TIO core service requests the operating system to protect the DMA channel, and the operating system verifies the cryptographic engine programming privilege of the TIO core service in response. The operating system programs the cryptographic engine to protect the DMA channel in response to verifying the cryptographic engine programming privilege of the TIO core service. If a privileged delegate determines that a user has confirmed termination of protection of the DMA channel, the TIO core service may unprotect the DMA channel. Other embodiments are described and claimed.

    Abstract translation: 可信任I / O（TIO）技术包括具有加密引擎和一个或多个I / O控制器的计算设备。 计算设备执行具有由操作系统许可的加密引擎编程的TIO核心服务。 TIO核心服务接收来自应用程序的请求以保护DMA通道。 TIO核心服务请求操作系统保护DMA通道，操作系统会对TIO核心服务的加密引擎编程权限进行验证。 响应于验证TIO核心服务的加密引擎编程权限，操作系统对加密引擎进行编程以保护DMA通道。 如果特权代表确定用户已经确认终止对DMA通道的保护，TIO核心服务可能会取消保护DMA通道。 描述和要求保护其他实施例。

    Integrity protected command buffer execution
    33.
    发明授权
    Integrity protected command buffer execution 有权

    公开(公告)号：US12284286B2

    公开(公告)日：2025-04-22

    申请号：US18048737

    申请日：2022-10-21

    Applicant: Intel Corporation

    Inventor： Pradeep M. Pappachan ,  Reshma Lal

    IPC: H04L9/32 ,  G06F21/60 ,  H04L9/08

    Abstract: Embodiments are directed to providing integrity-protected command buffer execution. An embodiment of an apparatus includes a computer-readable memory comprising one or more command buffers and a processing device communicatively coupled to the computer-readable memory to read, from a command buffer of the computer-readable memory, a first command received from a host device, the first command executable by one or more processing elements on the processing device, the first command comprising an instruction and associated parameter data, compute a first authentication tag using a cryptographic key associated with the host device, the instruction and at least a portion of the parameter data, and authenticate the first command by comparing the first authentication tag with a second authentication tag computed by the host device and associated with the command.

    Session management framework for secure communications between host devices and trusted devices
    37.
    发明授权
    Session management framework for secure communications between host devices and trusted devices 有权

    公开(公告)号：US11665144B2

    公开(公告)日：2023-05-30

    申请号：US17743659

    申请日：2022-05-13

    Applicant: Intel Corporation

    Inventor： Pradeep M. Pappachan ,  Reshma Lal

    IPC: H04L9/40 ,  H04W12/04 ,  H04W12/06 ,  H04L9/08 ,  G06F21/57

    CPC classification number: H04L63/0428 ,  G06F21/57 ,  H04L9/0841 ,  H04L63/061 ,  H04W12/04 ,  H04W12/06

    Abstract: Embodiments are directed to a session management framework for secure communications between host systems and trusted devices. An embodiment of computer-readable storage mediums includes instructions for establishing a security agreement between a host system and a trusted device, the host device including a trusted execution environment (TEE); initiating a key exchange between the host system and the trusted device, including sending a key agreement message from the host system to the trusted device; sending an initialization message to the trusted device; validating capabilities of the trusted device for a secure communication session between the host system and the trusted device; provisioning secrets to the trusted device and initializing cryptographic parameters with the trusted device; and sending an activate session message to the trusted device to activate the secure communication session over a secure communication channel.

    Secure accelerator device pairing for trusted accelerator-to-accelerator communication
    38.
    发明授权
    Secure accelerator device pairing for trusted accelerator-to-accelerator communication 有权

    公开(公告)号：US11575672B2

    公开(公告)日：2023-02-07

    申请号：US16723688

    申请日：2019-12-20

    Applicant: Intel Corporation

    Inventor： Salessawi Ferede Yitbarek ,  Pradeep M. Pappachan ,  Vincent Scarlata ,  Reshma Lal

    IPC: H04L29/06 ,  H04L9/40 ,  G06F21/62

    Abstract: Technologies for secure device configuration and management include a computing device having an I/O device. A trusted agent of the computing device is trusted by a virtual machine monitor of the computing device. The trusted agent executes an attestation algorithm to generate a first secure attestation for the first I/O device and a second secure attestation for the second I/O device, obtains a peer-to-peer communication key, and forwards the peer-to-peer communication key to the first I/O device and a second I/O device to enable secure peer-to-peer communication between the first I/O device and the second I/O device over a communication link secured by the peer-to-peer communication key. Other embodiments are described and claimed.

    TECHNOLOGIES FOR SECURE HARDWARE AND SOFTWARE ATTESTATION FOR TRUSTED I/O
    40.
    发明申请
    TECHNOLOGIES FOR SECURE HARDWARE AND SOFTWARE ATTESTATION FOR TRUSTED I/O 有权

    公开(公告)号：US20220035923A1

    公开(公告)日：2022-02-03

    申请号：US17451922

    申请日：2021-10-22

    Applicant: Intel Corporation

    Inventor： Pradeep M. Pappachan ,  Reshma Lal ,  Bin Xing ,  Siddhartha Chhabra ,  Vincent R. Scarlata ,  Steven B. McGowan

    IPC: G06F21/57 ,  G06F21/60

    Abstract: Technologies for trusted I/O attestation and verification include a computing device with a cryptographic engine and one or more I/O controllers. The computing device collects hardware attestation information associated with statically attached hardware I/O components that are associated with a trusted I/O usage protected by the cryptographic engine. The computing device verifies the hardware attestation information and securely enumerates one or more dynamically attached hardware components in response to verification. The computing device collects software attestation information for trusted software components loaded during secure enumeration. The computing device verifies the software attestation information. The computing device may collect firmware attestation information for firmware loaded in the I/O controllers and verify the firmware attestation information. The computing device may collect application attestation information for a trusted application that uses the trusted I/O usage and verify the application attestation information. Other embodiments are described and claimed.

Patent Agency Ranking