公开(公告)号：US20230252154A1

公开(公告)日：2023-08-10

申请号：US18012650

申请日：2021-06-17

申请人： Fabrizio De Santis ,  Markus Dichtl ,  Daniel Schneider ,  Tolga Sel ,  Thomas Zeschg

发明人： Fabrizio De Santis ,  Markus Dichtl ,  Daniel Schneider ,  Tolga Sel ,  Thomas Zeschg

IPC分类号： G06F21/57 ,  G06F9/4401 ,  H04L9/32

CPC分类号： G06F21/575 ,  G06F9/4401 ,  H04L9/3242 ,  G06F2221/034

摘要： The invention relates to a booting device (2) for a computer element (1) for booting the computer element (1), wherein the booting device (2) comprises a memory unit (3) for storing a protection code (4), and a protection unit (5) for checking the integrity of a software component (6) of the computer element (1) based on the protection code (4), wherein the booting device (2) is suitable for executing the software component (6) to boot the computer element (1), wherein the protection code (4) can be at least partially changed from outside the booting device (2). The protection code, which serves to check the integrity of a booting process, can be changed and/or updated from outside the booting device, e.g. by a user.

公开(公告)号：US09542537B2

公开(公告)日：2017-01-10

申请号：US13508712

申请日：2010-10-14

申请人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

发明人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

IPC分类号： G06F21/10 ,  H04L9/32

CPC分类号： G06F21/10 ,  H04L9/3247 ,  H04L2209/60

摘要： A method and system for confidentially providing a software component which is encrypted using a secret cryptographic key of a software component manufacturer, and the key is then encrypted using a first cryptographic system key, wherein the encrypted software component and the encrypted key are transported by the software component manufacturer to a destination system device. After decrypting the transported encrypted key using a second cryptographic system key, the transported encrypted software component is decrypted using the decrypted key, wherein the decrypted software component is provided for execution on the destination system device. The method can be used to protect source codes or object codes of a developed software component from access by a third party and still allows for processing using standard tools.

摘要翻译： 一种用于保密地提供使用软件组件制造商的秘密密码密钥加密的软件组件的方法和系统，然后使用第一密码系统密钥对密钥进行加密，其中加密的软件组件和加密密钥由 软件组件制造商到目标系统设备。 在使用第二密码系统密钥解密所传送的加密密钥之后，使用解密密钥解密所传送的加密软件组件，其中解密的软件组件被提供用于在目标系统设备上执行。 该方法可用于保护开发的软件组件的源代码或目标代码不被第三方访问，并且仍允许使用标准工具进行处理。

公开(公告)号：US09372966B2

公开(公告)日：2016-06-21

申请号：US13508621

申请日：2010-10-06

申请人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

发明人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

IPC分类号： G06F21/12 ,  G06F9/445

CPC分类号： G06F21/125 ,  G06F9/44552

摘要： A method and a system for naming-conflict-free integration of software components originating from software component manufacturers (OEM), comprising software development devices from different software component manufacturers (OEM) that manufacture and encrypt software components with the respective cryptographic key, wherein when a naming conflict occurs during the integration of encrypted software components, at least one of the encrypted software components in which the naming conflict occurred is expanded by a naming conflict resolution rule to thereby allows for the resolution of naming conflicts in encrypted software components that can originate from different software component manufacturers without the source code of the software components becoming visible to third parties.

摘要翻译： 一种用于命名不受软件组件制造商（OEM）的软件组件进行命名冲突的集成的方法和系统，包括来自不同软件组件制造商（OEM）的软件开发设备，该软件组件制造商（OEM）使用相应的加密密钥来制造和加密软件组件，其中何时 在加密软件组件的集成期间发生命名冲突，通过命名冲突解决规则来扩展发生命名冲突的加密软件组件中的至少一个，从而允许解决可能发起的加密软件组件中的命名冲突 来自不同软件组件制造商的软件组件的源代码对第三方变得可见。

公开(公告)号：US20140354327A1

公开(公告)日：2014-12-04

申请号：US14268747

申请日：2014-05-02

申请人： Pascale Böffgen ,  Markus Dichtl

发明人： Pascale Böffgen ,  Markus Dichtl

IPC分类号： H03K19/003 ,  H03K19/00

CPC分类号： H03K19/00346 ,  G06F7/588 ,  H03K19/0008

摘要： An apparatus for generating random bits includes a plurality of mapping devices. A respective mapping device is configured to map a predefined number of input signals, with the aid of a combinatorial mapping, into a predefined number of output signals. The plurality of mapping devices are concatenated with one another, and at least one combinatorial mapping is configured such that a state change of an input signal of a respective mapping device is mapped on average onto more than one output signal of the respective mapping device. No feedback loop is present such that a state change of at least one feedback output signal of a specific mapping device is fed as a state change of at least one input signal to another mapping device such that one or a plurality of output signals of the specific mapping device is influenced by the state change of the feedback output signal.

摘要翻译： 一种用于产生随机比特的装置包括多个映射装置。 相应的映射设备被配置为将预定数量的输入信号借助于组合映射映射到预定数量的输出信号中。 多个映射设备彼此并置，并且配置至少一个组合映射，使得各个映射设备的输入信号的状态改变被平均地映射到各个映射设备的多于一个的输出信号上。 没有反馈回路存在，使得特定映射设备的至少一个反馈输出信号的状态改变被馈送到至少一个输入信号的状态改变到另一映射设备，使得特定映射设备的一个或多个输出信号 映射设备受到反馈输出信号的状态变化的影响。

公开(公告)号：US20120321089A1

公开(公告)日：2012-12-20

申请号：US13508712

申请日：2010-10-14

申请人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

发明人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

IPC分类号： H04L9/08

CPC分类号： G06F21/10 ,  H04L9/3247 ,  H04L2209/60

摘要： A method and system for confidentially providing a software component which is encrypted using a secret cryptographic key of a software component manufacturer, and the key is then encrypted using a first cryptographic system key, wherein the encrypted software component and the encrypted key are transported by the software component manufacturer to a destination system device. After decrypting the transported encrypted key using a second cryptographic system key, the transported encrypted software component is decrypted using the decrypted key, wherein the decrypted software component is provided for execution on the destination system device. The method can be used to protect source codes or object codes of a developed software component from access by a third party and still allows for processing using standard tools.

摘要翻译： 一种用于保密地提供使用软件组件制造商的秘密密码密钥加密的软件组件的方法和系统，然后使用第一密码系统密钥对密钥进行加密，其中加密的软件组件和加密密钥由 软件组件制造商到目标系统设备。 在使用第二密码系统密钥解密所传送的加密密钥之后，使用解密密钥解密所传送的加密软件组件，其中解密的软件组件被提供用于在目标系统设备上执行。 该方法可用于保护开发的软件组件的源代码或目标代码不被第三方访问，并且仍允许使用标准工具进行处理。

公开(公告)号：US20110032041A1

公开(公告)日：2011-02-10

申请号：US12937735

申请日：2009-03-11

申请人： Markus Dichtl

发明人： Markus Dichtl

IPC分类号： H03K3/03

CPC分类号： G06F7/588

摘要： A device (1) for generating a random bit sequence has a digital ring oscillator circuit (2) having at least one first feedback path (R8) and one second feedback path (R14). To this end, a changeover is performed between the feedback paths (R8, R14) at times which can be predetermined, and a random signal (OS) having a random level history can be tapped at an output node (4) of the ring oscillator circuit (2).

摘要翻译： 用于产生随机比特序列的装置（1）具有数字环形振荡器电路（2），其具有至少一个第一反馈路径（R8）和一个第二反馈路径（R14）。 为此，在可以预定的时间在反馈路径（R8，R14）之间进行切换，并且可以在环形振荡器的输出节点（4）处抽取具有随机电平历史的随机信号（OS） 电路（2）。

公开(公告)号：US20070067692A1

公开(公告)日：2007-03-22

申请号：US11470100

申请日：2006-09-05

申请人： Markus Dichtl

发明人： Markus Dichtl

IPC分类号： G01R31/28 ,  G06F11/00

CPC分类号： G06F7/582

摘要： Random numbers can be generated in a statistically independent manner and with identical probability if the bits generated by a controlled bit generator are stored by a storage in a plurality of memory regions, wherein the bits are each stored in such memory regions associated with a difference of the bits of the values 1 and 0 generated up to the time of storage, and if all the bits stored within a memory region are subjected to algorithmic post-processing as soon as a predetermined number of bits within a memory region is exceeded. The fact that the bits are not stored and processed sequentially, i.e. in the order of generation, allows using a sequence of bits within which the individual bits are statistically independent of one another for the algorithmic post-processing. Thus, a way of performing algorithmic post-processing of the bits without reducing the entropy is provided.

摘要翻译： 如果由受控位产生器产生的位由多个存储器区域中的存储器存储，则可以以统计独立的方式并且以相同的概率生成随机数，其中每个存储在与差异相关联的这样的存储器区域中 值1和0的比特生成直到存储时间，并且如果超出存储区域内的预定数量的比特，则存储在存储器区域中的所有位都经过算法后处理。 这些比特未被顺序地存储和处理，即以生成的顺序允许使用比特序列，其中各个比特在统计上彼此独立，用于算法后处理。 因此，提供了一种在不减少熵的情况下执行比特的后处理的算法。

公开(公告)号：US06678665B1

公开(公告)日：2004-01-13

申请号：US08942743

申请日：1997-10-02

申请人： Glenn Benson ,  Markus Dichtl

发明人： Glenn Benson ,  Markus Dichtl

IPC分类号： G06F1760

CPC分类号： G06F21/10 ,  G06F2221/2103 ,  H04L9/302 ,  H04L9/3218 ,  H04L9/3271 ,  H04L2209/56 ,  H04L2209/605

摘要： A method for protecting an item of software, wherein at least one challenge means is associated with said protected item of software, and at least one response means accesses one private keying material. The challenge means has no access to said private keying material. The response means proves to the challenge means that the response means has access to the private keying material using an asymmetric probabilistic proof, e.g., zero knowledge proof. The challenge means validates this proof using the public keying material that corresponds to the response means' private keying material.

摘要翻译： 一种用于保护软件项目的方法，其中至少一个挑战装置与所述受保护的软件项目相关联，并且至少一个响应装置访问一个私人密钥材料。 挑战手段无法访问所述私人密钥材料。 响应意味着证明挑战意味着响应装置可以使用非对称概率证明（例如零知识证明）访问私人密钥材料。 挑战是使用对应于响应手段的私人密钥材料的公共密钥材料验证该证据。

公开(公告)号：US09983245B2

公开(公告)日：2018-05-29

申请号：US14396949

申请日：2013-03-14

申请人： Markus Dichtl ,  Bernd Meyer

发明人： Markus Dichtl ,  Bernd Meyer

IPC分类号： G01R31/08 ,  G01R27/26 ,  G08B29/08 ,  G08B29/24 ,  G06F21/85 ,  G06F21/86

CPC分类号： G01R27/2605 ,  G01R27/2611 ,  G06F21/85 ,  G06F21/86 ,  G08B29/08 ,  G08B29/24

摘要： A method for recognizing a manipulation of at least one electrical line includes determining a parameter that is dependent on a resistance and a capacity, a resistance and an inductivity, or a resistance, a capacity, and an inductivity of the electrical line; comparing the determined parameter to a reference parameter to provide a comparison result; and recognizing a manipulation of the electrical line based on the provided comparison result.

公开(公告)号：US09571273B2

公开(公告)日：2017-02-14

申请号：US13508707

申请日：2010-10-12

申请人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

发明人： Michael Braun ,  Markus Dichtl ,  Bernd Meyer

IPC分类号： H04L29/06 ,  H04L9/08

CPC分类号： H04L9/0825

摘要： A method and system for accelerated decryption of a cryptographically protected user data unit, wherein a transmitter initially generates a cryptographic key that is provided with a related key identification. The transmitter then performs asymmetrical encryption of the generated cryptographic key using a public cryptographic key and encryption of at least one user data unit using the generated cryptographic key. The encrypted user data unit, the asymmetrically encrypted cryptographic key and the related key identification of the cryptographic key are transported to a receiver that decrypts the received asymmetrically encrypted key using a private key, if verification of the received related key identification of the cryptographic key indicates the cryptographic key is not present in a decrypted state in the receiver. The receiver then decrypts the received cryptographically encrypted user data unit using the cryptographic key in the receiver or with the cryptographic key decrypted using the private key.

摘要翻译： 一种用于加密解密密码保护的用户数据单元的方法和系统，其中发射机最初生成具有相关密钥标识的加密密钥。 然后，发射机使用公共加密密钥对所生成的加密密钥进行不对称加密，并使用生成的加密密钥对至少一个用户数据单元进行加密。 如果加密密钥的加密用户数据单元，非对称加密的加密密钥和密钥的相关密钥标识被传送到使用专用密钥对接收到的非对称加密密钥进行解密的接收机， 加密密钥在接收机中不存在于解密状态。 然后，接收机使用接收机中的加密密钥或使用私钥解密的加密密钥来解密所接收的密码加密的用户数据单元。