-
公开(公告)号:US20180181760A1
公开(公告)日:2018-06-28
申请号:US15739105
申请日:2016-08-10
Applicant: CRYPTOGRAPHY RESEARCH, INC.
Inventor: Ambuj KUMAR
IPC: G06F21/57 , G06F9/4401 , H04L9/32 , G06F21/44
CPC classification number: G06F21/575 , G06F9/4401 , G06F21/44 , G06F21/51 , G06F2221/034 , H04L9/3247
Abstract: A container corresponding to executable code may be received. In response to receiving the container, a container manager resident in a memory of a computation environment may be executed to verify the container. The container manager may be verified by a boot loader of the computation environment. Permissions of the container to access the resources of a computation environment may be determined after the verification of the container by the container manager. Access to one or more resources of the computation environment may be provided by transferring control to the one or more resources from the container manager to the container based on the permissions of the container for the resources of the computation environment.
-
公开(公告)号:US20230047575A1
公开(公告)日:2023-02-16
申请号:US17876960
申请日:2022-07-29
Applicant: Cryptography Research, Inc.
Inventor: Benjamin Che-Ming JUN , William Craig RAWLINGS , Ambuj KUMAR , Mark Evan MARSON
Abstract: A request associated with one or more privileges assigned to a first entity may be received. Each of the one or more privileges may correspond to an operation of an integrated circuit. Information corresponding to the first entity and stored in a memory that is associated with the integrated circuit may be identified. Furthermore, the memory may be programmed to modify the information stored in the memory that is associated with the integrated circuit in response to the request associated with the one or more privileges assigned to the first entity.
-
公开(公告)号:US20170249099A1
公开(公告)日:2017-08-31
申请号:US15512041
申请日:2015-08-31
Applicant: CRYPTOGRAPHY RESEARCH, INC.
Inventor: Benjamin Che-Ming JUN , William Craig RAWLINGS , Ambuj KUMAR , Mark Evan MARSON
CPC classification number: G06F3/0637 , G06F3/0622 , G06F3/0688 , G06F21/71 , G06F21/76 , G11C17/16 , G11C17/18
Abstract: A request associated with one or more privileges assigned to a first entity may be received. Each of the one or more privileges may correspond to an operation of an integrated circuit. Information corresponding to the first entity and stored in a memory that is associated with the integrated circuit may be identified. Furthermore, the memory may be programmed to modify the information stored in the memory that is associated with the integrated circuit in response to the request associated with the one or more privileges assigned to the first entity.
-
公开(公告)号:US20210173576A1
公开(公告)日:2021-06-10
申请号:US17112864
申请日:2020-12-04
Applicant: Cryptography Research, Inc.
Inventor: Benjamin Che-Ming JUN , William Craig RAWLINGS , Ambuj KUMAR , Mark Evan MARSON
Abstract: A request associated with one or more privileges assigned to a first entity may be received. Each of the one or more privileges may correspond to an operation of an integrated circuit. Information corresponding to the first entity and stored in a memory that is associated with the integrated circuit may be identified. Furthermore, the memory may be programmed to modify the information stored in the memory that is associated with the integrated circuit in response to the request associated with the one or more privileges assigned to the first entity.
-
公开(公告)号:US20170142083A1
公开(公告)日:2017-05-18
申请号:US15322707
申请日:2015-07-09
Applicant: CRYPTOGRAPHY RESEARCH, INC.
Inventor: Ambuj KUMAR , Daniel BEITEL , Benjamin Che-Ming JUN
CPC classification number: H04L63/061 , G06F12/1408 , G06F21/575 , G06F2212/1052 , H04L9/0894 , H04L9/3236 , H04L9/3242 , H04L63/0435 , H04L63/0442 , H04W12/0023 , H04W12/04
Abstract: A first instruction to store an entity identification (ID) in a memory of a device may be received. The entity ID may be stored in the memory in response to receiving the first instruction. Furthermore, a second instruction to store a value based on a key in the memory of the device may be received. A determination may be made as to whether the value based on the key that is to be stored in the memory corresponds to the entity ID that is stored in the memory. The value based on the key may be stored in the memory of the device when the value based on the key corresponds to the entity ID.
-
公开(公告)号:US20220382874A1
公开(公告)日:2022-12-01
申请号:US17650544
申请日:2022-02-10
Applicant: Cryptography Research, Inc.
Inventor: Ambuj KUMAR
IPC: G06F21/57 , G06F21/51 , G06F9/4401 , G06F21/44 , H04L9/32
Abstract: A container corresponding to executable code may be received. In response to receiving the container, a container manager resident in a memory of a computation environment may be executed to verify the container. The container manager may be verified by a boot loader of the computation environment. Permissions of the container to access the resources of a computation environment may be determined after the verification of the container by the container manager. Access to one or more resources of the computation environment may be provided by transferring control to the one or more resources from the container manager to the container based on the permissions of the container for the resources of the computation environment.
-
公开(公告)号:US20210160063A1
公开(公告)日:2021-05-27
申请号:US17119513
申请日:2020-12-11
Applicant: Cryptography Research, Inc
Inventor: Ambuj KUMAR , Ronald PEREZ
Abstract: A secret key value that is inaccessible to software is scrambled according to registers consisting of one-time programmable (OTP) bits. A first OTP register is used to change the scrambling of the secret key value whenever a lifecycle event occurs. A second OTP register is used to undo the change in the scrambling of the secret key. A third OTP register is used to affect a permanent change to the scrambling of the secret key. The scrambled values of the secret key (whether changed or unchanged) are used as seeds to produce keys for cryptographic operations by a device.
-
公开(公告)号:US20180357183A1
公开(公告)日:2018-12-13
申请号:US15780005
申请日:2016-12-01
Applicant: CRYPTOGRAPHY RESEARCH, INC.
Inventor: Ambuj KUMAR , William Craig RAWLINGS
CPC classification number: G06F12/1408 , G06F21/57 , G06F21/6281 , G06F2212/1052 , G06F2221/2145 , H04L9/088 , H04L9/0897 , H04L9/3247 , H04L63/00 , H04L63/10 , H04L63/126
Abstract: A container from a first root of trust associated with a first root entity may be received. The container may correspond to a mapping of a resource of an integrated circuit that is associated with the first root entity. The container may be verified based on a key that corresponds to the first root of trust and that is stored in the integrated circuit at manufacturing of the integrated circuit. An identification may be made that an assignment of the resource from the container corresponds to assigning the resource from the first root of trust to a new root of trust. A new key corresponding to the new root of trust may be generated. Information corresponding to the new key may be stored into a memory of the integrated circuit. Furthermore, the new key may be used to delegate the resource to a subsequent container.
-
公开(公告)号:US20180248688A1
公开(公告)日:2018-08-30
申请号:US15755274
申请日:2016-12-15
Applicant: Cryptography Research, Inc
Inventor: Ambuj KUMAR , Ronald PEREZ
IPC: H04L9/08
CPC classification number: H04L9/0861 , G09C1/00 , H04L9/085 , H04L9/0891
Abstract: A secret key value that is inaccessible to software is scrambled according to registers consisting of one-time programmable (OTP) bits. A first OTP register is used to change the scrambling of the secret key value whenever a lifecycle event occurs. A second OTP register is used to undo the change in the scrambling of the secret key. A third OTP register is used to affect a permanent change to the scrambling of the secret key. The scrambled values of the secret key (whether changed or unchanged) are used as seeds to produce keys for cryptographic operations by a device.
-
-
-
-
-
-
-
-