利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

61 条记录 (耗时 0.025 秒)

    Method of delivering direct proof private keys to devices using a distribution CD
    53.
    发明授权
    Method of delivering direct proof private keys to devices using a distribution CD 有权
    使用分发CD向设备提供直接验证私钥的方法

    公开(公告)号：US07792303B2

    公开(公告)日：2010-09-07

    申请号：US10892265

    申请日：2004-07-14

    申请人： Ernie F. Brickell ,  James A. Sutton, II ,  Clifford D. Hall ,  David W. Grawrock

    发明人： Ernie F. Brickell ,  James A. Sutton, II ,  Clifford D. Hall ,  David W. Grawrock

    IPC分类号： H04L9/00 ,  H04L9/06 ,  H04L9/32

    CPC分类号： H04L63/062 ,  G06F21/57 ,  G06F21/73 ,  H04L9/0841 ,  H04L63/0853 ,  H04L2209/125

    摘要： Delivering a Direct Proof private key to a device installed in a client computer system in the field may be accomplished in a secure manner without requiring significant non-volatile storage in the device. A unique pseudo-random value is generated and stored in the device at manufacturing time. The pseudo-random value is used to generate a symmetric key for encrypting a data structure holding a Direct Proof private key and a private key digest associated with the device. The resulting-encrypted data structure is stored on a removable storage medium (such as a CD), and distributed to the owner of the client computer system. When the device is initialized on the client computer system, the system checks if a localized encrypted data structure is present in the system. If not, the system obtains the associated encrypted data structure from the removable storage medium. The device decrypts the encrypted data structure using a symmetric key regenerated from its stored pseudo-random value to obtain the Direct Proof private key. If the private key is valid, it may be used for subsequent authentication processing by the device in the client computer system.

    摘要翻译： 将直接证明私钥提供给安装在该领域中的客户端计算机系统中的设备可以以安全的方式来实现，而不需要设备中的显着的非易失性存储。 在制造时产生并存储在设备中的唯一伪随机值。 伪随机值用于生成用于加密持有Direct Proof私钥和与该设备相关联的私钥摘要的数据结构的对称密钥。 所得到的加密数据结构存储在可移动存储介质（例如CD）上，并分发给客户端计算机系统的所有者。 当在客户端计算机系统上初始化设备时，系统会检查系统中是否存在本地化的加密数据结构。 如果不是，系统从可移动存储介质中获得相关联的加密数据结构。 设备使用从其存储的伪随机值重新生成的对称密钥来解密加密数据结构，以获得直接证明私钥。 如果私钥有效，则其可以用于客户端计算机系统中的设备的后续认证处理。

    Platform configuration register virtualization apparatus, systems, and methods
    55.
    发明授权
    Platform configuration register virtualization apparatus, systems, and methods 有权
    平台配置寄存器虚拟化设备，系统和方法

    公开(公告)号：US07707629B2

    公开(公告)日：2010-04-27

    申请号：US11095034

    申请日：2005-03-31

    申请人： David W. Grawrock

    发明人： David W. Grawrock

    IPC分类号： G06F21/00

    CPC分类号： G06F21/57 ,  G06F9/45533

    摘要： Apparatus and systems, as well as methods and articles, may operate to intercept a first request to use a platform configuration register (PCR) directed to a first trusted platform module (TPM) port, a second request to use the PCR directed to the first TPM port, or both, and to re-direct the first and second requests to use the PCR to a second TPM port capable of accessing a first virtual static platform configuration register (VS-PCR) set and a second VS-PCR set.

    摘要翻译： 装置和系统以及方法和文章可以操作以截取使用针对第一可信平台模块（TPM）端口的平台配置寄存器（PCR）的第一请求，第二请求使用针​​对第一信任平台模块 TPM端口或两者，并且将第一和第二请求重新定向到能够访问第一虚拟静态平台配置寄存器（VS-PCR）集合和第二VS-PCR集合的第二TPM端口。

    Creation and distribution of a secret value between two devices
    58.
    发明授权
    Creation and distribution of a secret value between two devices 有权
    在两个设备之间创建和分发一个秘密值

    公开(公告)号：US07215781B2

    公开(公告)日：2007-05-08

    申请号：US09747238

    申请日：2000-12-22

    申请人： David W. Grawrock

    发明人： David W. Grawrock

    IPC分类号： H04L9/12

    CPC分类号： G06F21/445 ,  G06F21/606

    摘要： In general, one embodiment of the invention features a method comprising operations performed internally within a device. A first operation involves generating data for permanent storage in a protected area of internal memory of the device. This prevents subsequent modification of the data. A second operation involves producing a secret value being a combination of both the data and a short term value generated in response to a periodic event such as a power-up sequence of a platform employing the device.

    摘要翻译： 通常，本发明的一个实施例的特征在于包括在设备内部执行的操作的方法。 第一操作涉及在设备的内部存储器的保护区域中生成用于永久存储的数据。 这样可以防止数据的后续修改。 第二操作涉及产生秘密值，该秘密值是数据和响应周期性事件（例如采用该设备的平台的上电序列）生成的短期值的组合。