Authentication and Control of Encryption Keys

    公开(公告)号:US20250165582A1

    公开(公告)日:2025-05-22

    申请号:US19029433

    申请日:2025-01-17

    Applicant: Apple Inc.

    Abstract: An apparatus, a method, and a system are presented in which the apparatus includes an interface control circuit that may be configured to receive a message including a cryptographic keyword and a policy value. The policy value may include one or more data bits indicative of one or more policies that define allowable usage of the cryptographic keyword. The apparatus also includes a security circuit that may be configured to extract the cryptographic keyword and the policy value from the message, and to apply at least one policy of the one or more policies to usage of the cryptographic keyword in response to a determination that an authentication of the message succeeded.

    Embedded encryption/secure memory management unit for peripheral interface controller
    5.
    发明授权
    Embedded encryption/secure memory management unit for peripheral interface controller 有权
    用于外设接口控制器的嵌入式加密/安全内存管理单元

    公开(公告)号:US09256551B2

    公开(公告)日:2016-02-09

    申请号:US13963457

    申请日:2013-08-09

    Applicant: Apple Inc.

    Abstract: In an embodiment, a peripheral interface controller may include an inline cryptographic engine which may encrypt data being sent over a peripheral interface and decrypt data received from the peripheral interface. The encryption may be transparent to the device connected to the peripheral interface that is receiving/supplying the data. In an embodiment, the peripheral interface controller is included in a system on a chip (SOC) that also includes a memory controller configured to couple to a memory. The memory may be mounted on the SOC in a chip-on-chip or package-on-package configuration. The unencrypted data may be stored in the memory for use by other parts of the SOC (e.g. processors, on-chip peripherals, etc.). The keys used for the encryption/decryption of data may remain within the SOC.

    Abstract translation: 在一个实施例中,外围接口控制器可以包括内联密码引擎,其可以对通过外围接口发送的数据进行加密,并解密从外围接口接收的数据。 加密可能对连接到正在接收/提供数据的外设接口的设备是透明的。 在一个实施例中,外围接口控制器包括在芯片上的系统(SOC)中,该系统还包括被配置为耦合到存储器的存储器控​​制器。 存储器可以以片上芯片或封装的封装形式安装在SOC上。 未加密的数据可以存储在存储器中以供SOC的其他部分使用(例如处理器,片上外设等)。 用于加密/解密数据的密钥可能保留在SOC内。

    Authentication and control of encryption keys

    公开(公告)号:US11263306B2

    公开(公告)日:2022-03-01

    申请号:US16927934

    申请日:2020-07-13

    Applicant: Apple Inc.

    Abstract: An apparatus, a method, and a system are presented in which the apparatus includes an interface control circuit that may be configured to receive a message including a cryptographic keyword and a policy value. The policy value may include one or more data bits indicative of one or more policies that define allowable usage of the cryptographic keyword. The apparatus also includes a security circuit that may be configured to extract the cryptographic keyword and the policy value from the message, and to apply at least one policy of the one or more policies to usage of the cryptographic keyword in response to a determination that an authentication of the message succeeded.

    AUTHENTICATION AND CONTROL OF ENCRYPTION KEYS
    7.
    发明申请
    AUTHENTICATION AND CONTROL OF ENCRYPTION KEYS 有权
    加密钥的验证与控制

    公开(公告)号:US20160314295A1

    公开(公告)日:2016-10-27

    申请号:US14696581

    申请日:2015-04-27

    Applicant: Apple Inc.

    Abstract: An apparatus, a method, and a system are presented in which the apparatus may include a security circuit, a processor, and an interface controller. The security circuit may be configured to generate a keyword. The processor may be configured to determine one or more policies to be applied to usage of the keyword, and to generate a policy value. The policy value may include one or more data bits indicative of the determined one or more policies. The interface controller may be configured to generate a message including the keyword and the policy value. The interface controller may also be configured to send the message.

    Abstract translation: 提供了一种装置,方法和系统,其中装置可以包括安全电路,处理器和接口控制器。 安全电路可以被配置为生成关键字。 处理器可以被配置为确定要应用于关键字的使用的一个或多个策略,并且生成策略值。 策略值可以包括指示所确定的一个或多个策略的一个或多个数据比特。 接口控制器可以被配置为生成包括关键字和策略值的消息。 接口控制器还可以被配置为发送消息。

    AUTHENTICATION AND CONTROL OF ENCRYPTION KEYS

    公开(公告)号:US20220179944A1

    公开(公告)日:2022-06-09

    申请号:US17652517

    申请日:2022-02-25

    Applicant: Apple Inc.

    Abstract: An apparatus, a method, and a system are presented in which the apparatus includes an interface control circuit that may be configured to receive a message including a cryptographic keyword and a policy value. The policy value may include one or more data bits indicative of one or more policies that define allowable usage of the cryptographic keyword. The apparatus also includes a security circuit that may be configured to extract the cryptographic keyword and the policy value from the message, and to apply at least one policy of the one or more policies to usage of the cryptographic keyword in response to a determination that an authentication of the message succeeded.

    Authentication and control of encryption keys

    公开(公告)号:US10713351B2

    公开(公告)日:2020-07-14

    申请号:US16133625

    申请日:2018-09-17

    Applicant: Apple Inc.

    Abstract: An apparatus, a method, and a system are presented in which the apparatus includes an interface control circuit that may be configured to receive a message including a cryptographic keyword and a policy value. The policy value may include one or more data bits indicative of one or more policies that define allowable usage of the cryptographic keyword. The apparatus also includes a security circuit that may be configured to extract the cryptographic keyword and the policy value from the message, and to apply at least one policy of the one or more policies to usage of the cryptographic keyword in response to a determination that an authentication of the message succeeded.

Patent Agency Ranking