Apparatus and Method for Protecting Shared Objects

    公开(公告)号:US20230058046A1

    公开(公告)日:2023-02-23

    申请号:US17792292

    申请日:2020-01-29

    IPC分类号: G06F21/53

    摘要: An apparatus is configured to protect the privacy of shared objects by loading shared object into a user memory of a rich execution environment. The shared object has an encrypted segment and metadata. A request for decryption is sent to a trusted execution environment and the encrypted segment is decrypted based on the metadata and a predetermined platform key to produce a decrypted segment. The decrypted segment is written into the shared object. A request to lock the shared object is sent and a memory occupied by the shared object is locked or set to execute only. The lock of the memory region occupied by the decrypted shared object maps the memory region to be non-readable and non-writable to applications executing at a first privilege level and to the operating system kernel executing at a second privilege level.

    METHOD AND APPARATUS FOR APPLYING RECIPIENT CRITERIA IN IDENTITY-BASED ENCRYPTION
    5.
    发明申请
    METHOD AND APPARATUS FOR APPLYING RECIPIENT CRITERIA IN IDENTITY-BASED ENCRYPTION 有权
    在基于身份的加密中应用接收标准的方法和装置

    公开(公告)号:US20110206200A1

    公开(公告)日:2011-08-25

    申请号:US12708778

    申请日:2010-02-19

    IPC分类号: H04L9/30

    摘要: An approach is provided for reducing communication traffic and cost by applying recipient criteria in identity-based encryption. A recipient criterion application selects one or more recipient criteria for data, and encrypts the data using the selected one or more recipient criteria as a public key of identity-based encryption.

    摘要翻译: 提供了一种通过在基于身份的加密中应用接收者标准来减少通信流量和成本的方法。 收件人标准应用程序选择数据的一个或多个收件人标准,并且使用所选择的一个或多个收件人标准作为基于身份的加密的公钥来加密数据。

    SECURING COMMUNICATION
    6.
    发明申请
    SECURING COMMUNICATION 有权
    安全通信

    公开(公告)号:US20080162935A1

    公开(公告)日:2008-07-03

    申请号:US11618537

    申请日:2006-12-29

    IPC分类号: H04L9/30

    摘要: An apparatus comprising a processor, the processor configured to select a first cryptographic key, encrypt a message with the first cryptographic key to produce a first encrypted message, and further encrypt the first cryptographic key and an identifier of a second apparatus with a first encryption key to form a second encrypted message.

    摘要翻译: 一种包括处理器的设备,所述处理器被配置为选择第一加密密钥,用第一加密密钥加密消息以产生第一加密消息,并且进一步用第一加密密钥加密第一加密密钥和第二装置的标识符 以形成第二加密消息。

    Securing communication
    7.
    发明授权
    Securing communication 有权
    保障沟通

    公开(公告)号:US08769284B2

    公开(公告)日:2014-07-01

    申请号:US11618537

    申请日:2006-12-29

    IPC分类号: H04L9/32

    摘要: An apparatus comprising a processor, the processor configured to select a first cryptographic key, encrypt a message with the first cryptographic key to produce a first encrypted message, and further encrypt the first cryptographic key and an identifier of a second apparatus with a first encryption key to form a second encrypted message.

    摘要翻译: 一种包括处理器的设备,所述处理器被配置为选择第一加密密钥,用第一加密密钥加密消息以产生第一加密消息,并且进一步用第一加密密钥加密第一加密密钥和第二装置的标识符 以形成第二加密消息。

    Method for sharing the authorization to use specific resources
    8.
    发明授权
    Method for sharing the authorization to use specific resources 失效
    共享授权使用特定资源的方法

    公开(公告)号:US07343014B2

    公开(公告)日:2008-03-11

    申请号:US10621258

    申请日:2003-07-15

    IPC分类号: H04K9/00 H04L9/00

    摘要: The invention relates to a method for sharing the authorization to use specific resources among multiple devices, which resources are accessible via messages on which a secret key operation was applied with a predetermined secret master key d available at a master device 11. In order to provide an optimized sharing of authorization, it is proposed that the master device 11 splits the secret master key d into two parts d1, d2. A piece of information relating to the first part d1 of the secret master key d is forwarded to the slave device 13 for enabling this slave device to perform a partial secret key operation on a message m. The second part d2 of the secret master key d is forwarded to a server 12 for enabling the server 12 to perform partial secret key operations on a message m received from the slave device 13.

    摘要翻译: 本发明涉及一种用于共享在多个设备之间使用特定资源的授权的方法,所述资源可以通过使用在主设备11上可用的预定秘密主密钥d应用秘密密钥操作的消息来访问。 为了提供优化的授权共享,建议主设备11将秘密主密钥d分割成两部分d 2,d 2 2。 与秘密主密钥d的第一部分d 1相关的信息被转发到从设备13,以使该从设备能够对消息m执行部分秘密密钥操作。 秘密主密钥d的第二部分d 2 2被转发到服务器12,以使得服务器12能够对从设备13接收到的消息m执行部分秘密密钥操作。

    System for personal group management based on subscriber certificates
    9.
    发明申请
    System for personal group management based on subscriber certificates 审中-公开
    基于用户证书的个人组管理系统

    公开(公告)号:US20060075222A1

    公开(公告)日:2006-04-06

    申请号:US10960443

    申请日:2004-10-06

    IPC分类号: H04L9/00

    摘要: A method and corresponding equipment, for enabling a subscriber device (14) to engage a service provided by a server (12) to give a friend device (15) access to the service, including a step (21) in which the subscriber device (14) engages the server (12) to provide the service and obtains a subscriber certificate corresponding to the service; and a step (24) in which the subscriber device (14) issues to the friend device (15) a friend certificate based on the subscriber certificate, the friend certificate being such that it is recognized by the server as entitling the friend device to the service.

    摘要翻译: 一种方法和相应的设备,用于使订户设备(14)能够接受由服务器(12)提供的服务以给予朋友设备(15)访问所述服务,所述方法和相应的设备包括步骤(21),其中所述订户设备 14)与服务器(12)接合以提供服务并获得与该服务相对应的用户证书; 以及用户设备(14)根据所述用户证书向所述朋友设备(15)发送朋友证书的步骤(24),所述朋友证书被所述服务器识别为授权所述朋友设备 服务。

    Method and apparatus for improving digital signatures
    10.
    发明授权
    Method and apparatus for improving digital signatures 有权
    改进数字签名的方法和装置

    公开(公告)号:US09300472B2

    公开(公告)日:2016-03-29

    申请号:US13249710

    申请日:2011-09-30

    摘要: Systems and methods are provided for enchancing pseudo random number generation to thwart various security attacks to a system that relies on digital signature security measures. For example, a random number may be bound to a message that is to be signed using a digital signature. Alternatively, a random number may be bound to a secret seed value, which may be updated subsequent to each signing. Alternatively still, a random number may be bound to both the message to be signed using a digital signature and a secret seed value.

    摘要翻译: 提供了系统和方法,用于加强伪随机数生成,以阻止各种安全攻击到依赖于数字签名安全措施的系统。 例如,随机数可以绑定到要使用数字签名签名的消息。 或者,随机数可以绑定到秘密种子值,其可以在每次签名之后被更新。 或者,仍然可以使用数字签名和秘密种子值将随机数绑定到要签名的消息。