公开(公告)号：US20170111382A1

公开(公告)日：2017-04-20

申请号：US15396440

申请日：2016-12-31

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Mesut A. Ergin ,  John R. Fastabend ,  Shinae Woo ,  Jeffrey B. Shaw ,  Brian J. Skerry

IPC: H04L29/06

CPC classification number: H04L63/0272 ,  G06F21/554 ,  H04L63/0428 ,  H04L63/061 ,  H04L63/1408 ,  H04L63/1425 ,  H04L63/1433 ,  H04L63/20

Abstract: Technologies for distributed detection of security anomalies include a computing device to establish a trusted relationship with a security server. The computing device reads one or more packets of at least one of an inter-virtual network function network or an inter-virtual network function component network in response to establishing the trusted relationship and performs a security threat assessment of the one or more packets. The computing device transmits the security threat assessment to the security server.

公开(公告)号：US09525555B2

公开(公告)日：2016-12-20

申请号：US14574969

申请日：2014-12-18

Applicant: Intel Corporation

Inventor： Prashant Dewan ,  Kapil Sood ,  Kumar N. Dwarakanath ,  Ioannis T. Schoinas ,  William A. Stevens, Jr. ,  Ned M. Smith

IPC: H04L29/06 ,  H04L9/32 ,  G06F12/14

CPC classification number: H04L9/3263 ,  G06F21/572 ,  G06F21/74 ,  G09C1/00 ,  H04L9/321 ,  H04L9/3234 ,  H04L9/3242 ,  H04L2209/12 ,  H04L2209/68

Abstract: In one embodiment, a processor has at least one core to execute instructions, a security engine coupled to the at least one core, a first storage to store a first immutable key associated with a vendor of the processor, and a second storage to store a second immutable key associated with an original equipment manufacturer (OEM) of the system. A first portion of firmware is to be verified based at least in part on the first immutable key and a second portion of firmware is to be verified based at least in part on the second immutable key, the first portion of firmware associated with the vendor and the second portion of firmware associated with the OEM. Other embodiments are described and claimed.

Abstract translation: 在一个实施例中，处理器具有执行指令的至少一个核心，耦合到所述至少一个核心的安全引擎，用于存储与所述处理器的供应商相关联的第一不可变密钥的第一存储器，以及存储 与系统的原始设备制造商（OEM）相关联的第二个不可变的密钥。 至少部分地基于第一不可变密钥验证固件的第一部分，并且至少部分地基于第二不可变密钥，与供应商相关联的固件的第一部分和 与OEM相关联的固件的第二部分。 描述和要求保护其他实施例。

公开(公告)号：US20160285722A1

公开(公告)日：2016-09-29

申请号：US14671863

申请日：2015-03-27

Applicant: Intel Corporation

Inventor： Alexander W. Min ,  Jr-Shian Tsai ,  Janet Tsang ,  Kapil Sood ,  Tsung-Yuan C. Tai

IPC: H04L12/26 ,  H04L12/911

CPC classification number: H04L43/0876 ,  H04L41/0896 ,  H04L43/062 ,  H04L45/70 ,  H04L47/20 ,  H04L47/76 ,  H04L47/82

Abstract: Technologies for monitoring network traffic include a computing device that monitors network traffic at a graphics processing unit (GPU) of the computing device. The computing device manages computing resources of the computing device based on results of the monitored network traffic. The computing resources may include one or more virtual machines to process network traffic that is to be monitored at the GPU the computing device. Other embodiments are described and claimed.

Abstract translation: 用于监视网络流量的技术包括监视计算设备的图形处理单元（GPU）处的网络流量的计算设备。 计算设备基于所监视的网络流量的结果管理计算设备的计算资源。 计算资源可以包括一个或多个虚拟机来处理将在GPU处监视的计算设备的网络流量。 描述和要求保护其他实施例。

公开(公告)号：US12277228B2

公开(公告)日：2025-04-15

申请号：US18223399

申请日：2023-07-18

Applicant: Intel Corporation

Inventor： Yeluri Raghuram ,  Susanne M. Balle ,  Nigel Thomas Cook ,  Kapil Sood

IPC: G06F21/57 ,  G06F21/00 ,  G06F21/53 ,  G06F21/71 ,  H04L9/08

Abstract: Disclosed herein are embodiments related to security in cloudlet environments. In some embodiments, for example, a computing device (e.g., a cloudlet) may include: a trusted execution environment; a Basic Input/Output System (BIOS) to request a Key Encryption Key (KEK) from the trusted execution environment; and a Self-Encrypting Storage (SES) associated with the KEK; wherein the trusted execution environment is to verify the BIOS and provide the KEK to the BIOS subsequent to verification of the BIOS, and the BIOS is to provide the KEK to the SES to unlock the SES for access by the trusted execution environment.

公开(公告)号：US20240319979A1

公开(公告)日：2024-09-26

申请号：US18420132

申请日：2024-01-23

Applicant: Intel Corporation

Inventor： Ned M. Smith ,  Kshitij Arun Doshi ,  John Joseph Browne ,  Vincent J. Zimmer ,  Francesc Guim Bernat ,  Kapil Sood

IPC: G06F8/65 ,  G06F21/44 ,  G06F21/64 ,  H04L9/08 ,  H04L9/12 ,  H04L9/14 ,  H04L9/32 ,  H04L9/40

CPC classification number: G06F8/65 ,  G06F21/44 ,  G06F21/64 ,  H04L9/0861 ,  H04L9/0891 ,  H04L9/0894 ,  H04L9/12 ,  H04L9/14 ,  H04L9/3213 ,  H04L9/3228 ,  H04L9/3236 ,  H04L9/3247 ,  H04L9/3263 ,  H04L9/3273 ,  H04L63/0876 ,  H04L63/12

Abstract: Various systems and methods for enabling derivation and distribution of an attestation manifest for a software update image are described. In an example, these systems and methods include orchestration functions and communications, providing functionality and components for a software update process which also provides verification and attestation among multiple devices and operators.

公开(公告)号：US12068928B2

公开(公告)日：2024-08-20

申请号：US17033557

申请日：2020-09-25

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Timothy Verrall ,  Ned M. Smith ,  Tarun Viswanathan ,  Kshitij Doshi ,  Francesc Guim Bernat ,  John J. Browne ,  Katalin Bartfai-Walcott ,  Maryam Tahhan ,  Eoin Walsh ,  Damien Power

IPC: H04L12/00 ,  H04L9/40 ,  H04L41/5006 ,  H04L41/5019 ,  H04L43/0888

CPC classification number: H04L41/5006 ,  H04L41/5019 ,  H04L43/0888 ,  H04L63/123 ,  H04L63/126

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to schedule workloads based on secure edge to device telemetry by calculating a difference between a first telemetric data received from a first hardware device and an operating parameter and computing an adjustment for a second hardware device based on the difference between the first telemetric data and the operating parameter.

公开(公告)号：US20230359743A1

公开(公告)日：2023-11-09

申请号：US18223399

申请日：2023-07-18

Applicant: Intel Corporation

Inventor： Yeluri Raghuram ,  Susanne M. Balle ,  Nigel Thomas Cook ,  Kapil Sood

IPC: G06F21/57 ,  H04L9/08 ,  G06F21/53 ,  G06F21/71

CPC classification number: G06F21/575 ,  H04L9/0894 ,  G06F21/53 ,  G06F21/71 ,  H04L9/0822 ,  G06F21/00

Abstract: Disclosed herein are embodiments related to security in cloudlet environments. In some embodiments, for example, a computing device (e.g., a cloudlet) may include: a trusted execution environment; a Basic Input/Output System (BIOS) to request a Key Encryption Key (KEK) from the trusted execution environment; and a Self-Encrypting Storage (SES) associated with the KEK; wherein the trusted execution environment is to verify the BIOS and provide the KEK to the BIOS subsequent to verification of the BIOS, and the BIOS is to provide the KEK to the SES to unlock the SES for access by the trusted execution environment.

公开(公告)号：US11748486B2

公开(公告)日：2023-09-05

申请号：US17496146

申请日：2021-10-07

Applicant: Intel Corporation

Inventor： Yeluri Raghuram ,  Susanne M. Balle ,  Nigel Thomas Cook ,  Kapil Sood

IPC: G06F21/57 ,  H04L9/08 ,  G06F21/53 ,  G06F21/71 ,  G06F21/00

CPC classification number: G06F21/575 ,  G06F21/53 ,  G06F21/71 ,  H04L9/0822 ,  H04L9/0894 ,  G06F21/00

Abstract: Disclosed herein are embodiments related to security in cloudlet environments. In some embodiments, for example, a computing device (e.g., a cloudlet) may include: a trusted execution environment; a Basic Input/Output System (BIOS) to request a Key Encryption Key (KEK) from the trusted execution environment; and a Self-Encrypting Storage (SES) associated with the KEK; wherein the trusted execution environment is to verify the BIOS and provide the KEK to the BIOS subsequent to verification of the BIOS, and the BIOS is to provide the KEK to the SES to unlock the SES for access by the trusted execution environment.

公开(公告)号：US11711268B2

公开(公告)日：2023-07-25

申请号：US16723760

申请日：2019-12-20

Applicant: Intel Corporation

Inventor： Ned Smith ,  Francesc Guim Bernat ,  Sanjay Bakshi ,  Katalin Bartfai-Walcott ,  Kapil Sood ,  Kshitij Doshi ,  Robert Munoz

IPC: G06F9/46 ,  H04L41/084 ,  H04L41/0869 ,  H04L49/00 ,  H04L47/78 ,  H04L41/5054 ,  G06F9/48 ,  G06F9/50 ,  G06F9/54 ,  G06F11/30 ,  H04L9/06 ,  H04L9/32 ,  G06F1/20 ,  H04L67/10 ,  H04W4/08 ,  H04W12/04

CPC classification number: H04L41/0843 ,  G06F1/206 ,  G06F9/4881 ,  G06F9/505 ,  G06F9/5094 ,  G06F9/542 ,  G06F11/3006 ,  H04L9/0637 ,  H04L9/3213 ,  H04L9/3247 ,  H04L41/0869 ,  H04L41/5054 ,  H04L47/781 ,  H04L49/70 ,  H04L67/10 ,  H04W4/08 ,  H04W12/04 ,  G06F2209/5021

Abstract: Methods and apparatus to execute a workload in an edge environment are disclosed. An example apparatus includes a node scheduler to accept a task from a workload scheduler, the task including a description of a workload and tokens, a workload executor to execute the workload, the node scheduler to access a result of execution of the workload and provide the result to the workload scheduler, and a controller to access the tokens and distribute at least one of the tokens to at least one provider, the provider to provide a resource to the apparatus to execute the workload.

公开(公告)号：US20230045505A1

公开(公告)日：2023-02-09

申请号：US17891780

申请日：2022-08-19

Applicant: Intel Corporation

Inventor： Francesc Guim Bernat ,  Kapil Sood ,  Tarun Viswanathan ,  Kshitij Doshi ,  Timothy Verrall ,  Ned M. Smith ,  Manish Dave ,  Alex Vul

IPC: H04L41/00 ,  H04L9/40 ,  H04L41/5003 ,  H04L41/0893 ,  G06F21/57

Abstract: Technologies for accelerated orchestration and attestation include multiple edge devices. An edge appliance device performs an attestation process with each of its components to generate component certificates. The edge appliance device generates an appliance certificate that is indicative of the component certificates and a current utilization of the edge appliance device and provides the appliance certificate to a relying party. The relying party may be an edge orchestrator device. The edge orchestrator device receives a workload scheduling request with a service level agreement requirement. The edge orchestrator device verifies the appliance certificate and determines whether the service level agreement requirement is satisfied based on the appliance certificate. If satisfied, the workload is scheduled to the edge appliance device. Attestation and generation of the appliance certificate by the edge appliance device may be performed by an accelerator of the edge appliance device. Other embodiments are described and claimed.