Method for provably secure erasure of data

    公开(公告)号:US09852305B2

    公开(公告)日:2017-12-26

    申请号:US15502506

    申请日:2015-10-21

    申请人: NEC EUROPE LTD.

    发明人: Sebastian Gajek

    摘要: A method for provably secure erasure of data, performed in a memory available to one or more computing devices, includes generating prover state information (PSI), verifier state information (VSI), and common reference information (CRI) based on security information, a pregiven time-constraint, and a pregiven space-constraint, the generating PSI, VSI, and CRI being performed interactively between a prover computing device (PCD), and a verifier computing device, (VCD); computing, by the VCD based on the VSI, a challenge; computing a proof-of-erasure (POE) by the PCD based on the PSI and the computed challenge, the POE having a size corresponding to the pregiven space-constraint; and verifying by the VCD based on the VSI and the POE.

    TARGETED SECURE DATA OVERWRITE
    46.
    发明申请

    公开(公告)号:US20170344280A1

    公开(公告)日:2017-11-30

    申请号:US15164834

    申请日:2016-05-25

    IPC分类号: G06F3/06

    摘要: Provided are a computer program product, system, and method in accordance with one embodiment of the present description, in which selected memory resources targeted for secure data cleaning. For example, memory resources which may be targeted for secure data cleaning may include a specific volume (or portion of a volume) of data storage which has been selected for secure erasure of any residual data which may remain on the targeted storage volume before the volume is released for use by others. Other examples of memory resources which may be targeted for secure data cleaning in accordance with the present description may include one or more buffers located in switches or other storage area network components which provide data paths between hosts and storage controllers or storage control units. Other aspects of targeted secure data overwriting in accordance with the present description are described.

    Certificate Management Method, Device, and System

    公开(公告)号:US20170338968A1

    公开(公告)日:2017-11-23

    申请号:US15673075

    申请日:2017-08-09

    摘要: A certificate management method, a device, and a system relate to the communications field and for certificate management are used to resolve a problem that communication security of a virtual network system is degraded because after a virtualized network function (VNF) instance is terminated in the virtual network system, a private key corresponding to a certificate of the VNF instance may be illegally obtained by an attacker to forge an identity of the VNF instance. A specific solution includes obtaining, by a first device, a certificate identifier of a first instance, and updating certificate status information of the first instance to a revocation state according to the certificate identifier of the first instance, or sending, by the first device, a first request message to a second device, where the first request message requests to revoke a certificate of the first instance.