公开(公告)号：US20150212971A1

公开(公告)日：2015-07-30

申请号：US13691635

申请日：2012-11-30

Applicant: Google Inc.

Inventor： Joao Paulo PAGAIME da SILVA ,  Kenneth Edward MIXTER ,  Raymond LO ,  Glenn WILSON ,  William Alexander DREWRY ,  Bin ZHAO ,  Sumit GWALANI ,  Mattias Stefan NISSLER

IPC: G06F15/177

CPC classification number: H04L63/083 ,  H04L63/0428 ,  H04L63/0823

Abstract: A system and a method for registering an electronic device are provided. An auto-enrollment status of an electronic device by an enterprise is determined based on hash information associated with an identifier for the electronic device. In a case where the auto-enrollment status of the electronic device is determined to require auto-enrollment of the electronic device by the enterprise, one or more configuration settings for the electronic device as designated by the enterprise are identified, and the electronic device is requested to adopt the one or more configuration settings as designated by the enterprise in response to providing the auto-enrollment login interface to the electronic device.

Abstract translation: 提供了一种用于登记电子设备的系统和方法。 基于与电子设备的标识符相关联的哈希信息来确定企业的电子设备的自动注册状态。 在电子设备的自动注册状态被确定为要求企业自动注册电子设备的情况下，识别由企业指定的电子设备的一个或多个配置设置，并且电子设备是 响应于向电子设备提供自动注册登录界面，请求采用企业指定的一个或多个配置设置。

公开(公告)号：US20170041147A1

公开(公告)日：2017-02-09

申请号：US14821616

申请日：2015-08-07

Applicant: Google Inc.

Inventor： Darren David KRAHN ,  William Alexander DREWRY ,  Sumit GWALANI

IPC: H04L9/32 ,  H04L9/08 ,  H04L29/06

CPC classification number: H04L9/3247 ,  G06F21/445 ,  G06F21/57 ,  H04L9/0825 ,  H04L9/0877 ,  H04L9/0897 ,  H04L9/3234 ,  H04L9/3268 ,  H04L63/0428 ,  H04L63/0823 ,  H04L63/123

Abstract: Techniques for peer to peer attestation are provided. An example method includes receiving, at a first device, a discovery message from a second device, based on the discovery message, establishing a communication channel between the first device and the second device, receiving, at the first device, identity information from the second device, the identity information including one or more of: a trusted platform module (TPM) endorsement key certificate, a public portion of an identity key, one or more platform control register (PCR) values or a quote of the PCR values with the identity key, verifying, at the first device, one or more of the PCR values, the quote or the endorsement key certificate and authenticating one or more of the communication channel or the identity information of the second device based on the verification of a signature received from the second device.

Abstract translation: 提供了对等认证的技术。 一种示例性方法包括：在第一设备处，基于所述发现消息从第二设备接收发现消息，在所述第一设备和所述第二设备之间建立通信信道，在所述第一设备处接收来自所述第二设备的身份信息 设备，身份信息包括以下中的一个或多个：可信平台模块（TPM）认可密钥证书，身份密钥的公共部分，一个或多个平台控制寄存器（PCR）值或具有身份的PCR值的引用 密钥，在第一设备处验证一个或多个PCR值，报价或背书密钥证书，并且基于从第一设备接收到的签名的验证来验证第二设备的一个或多个通信信道或身份信息 第二个设备。

公开(公告)号：US20150095641A1

公开(公告)日：2015-04-02

申请号：US14040482

申请日：2013-09-27

Applicant: Google Inc.

Inventor： William Alexander DREWRY

IPC: H04L9/32 ,  H04L29/06

CPC classification number: H04L9/3268 ,  H04L9/00 ,  H04L9/3236 ,  H04L63/0407 ,  H04L63/0823

Abstract: A method includes receiving a request for a device to replace a unique identifier associated with the device with a revocable identifier, generating a revocable identifier for the device, wherein the revocable identifier comprises at least a cryptographic representation of the unique identifier associated with the device and a counter value, checking the generated revocable identifier to determine that the generated revocable identifier has not previously been generated for the device and associating the generated revocable identifier with the device.

Abstract translation: 一种方法包括：接收对设备的请求，以使用可撤销标识符替换与所述设备相关联的唯一标识符，生成所述设备的可撤销标识符，其中所述可撤销标识符至少包括与所述设备相关联的所述唯一标识符的加密表示，以及 计数器值，检查所生成的可撤销标识符以确定生成的可撤销标识符先前尚未为该设备生成并且将生成的可撤销标识符与设备相关联。

公开(公告)号：US20150169315A1

公开(公告)日：2015-06-18

申请号：US14631750

申请日：2015-02-25

Applicant: GOOGLE INC.

Inventor： Elizabeth Sandra FONG-JONES ,  William Alexander DREWRY

IPC: G06F9/445 ,  G06F9/44

CPC classification number: G06F8/65 ,  G06F8/61 ,  G06F9/4401 ,  G06F9/4406

Abstract: Systems and methods for updating operating system software are provided. In some aspects, an update for an operating system of a computing device is received, at a first time, at the computing device. A pre-reboot state of the computing device is stored at a second time. The pre-reboot state includes login information for logging into the computing device as a specified user of the computing device, the specified user of the computing device being logged into the computing device at the second time. The computing device is rebooted. Prior to or during rebooting of the computing device, the operating system of the computing device is updated according to the received update. After rebooting the computing device, user access is provided to the updated operating system according to the stored pre-reboot state of the computing device.

Abstract translation: 提供了更新操作系统软件的系统和方法。 在一些方面，计算设备的操作系统的更新在第一时间在计算设备处被接收。 第二次存储计算设备的预重新启动状态。 预重新启动状态包括作为计算设备的指定用户登录到计算设备的登录信息，计算设备的指定用户在第二时间登录到计算设备。 重新启动计算设备。 在重新启动计算设备之前或期间，根据接收到的更新来更新计算设备的操作系统。 在重新启动计算设备之后，根据存储的计算设备的重新启动前状态向更新的操作系统提供用户访问。