-
公开(公告)号:US20170371808A1
公开(公告)日:2017-12-28
申请号:US15192493
申请日:2016-06-24
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Adrian Shaw , Geoffrey Ndu , Fraser John Dickin
CPC classification number: G06F12/1408 , G06F12/1466 , G06F13/28 , G06F2212/1052 , G06F2212/402
Abstract: In one example in accordance with the present disclosure, a method may include retrieving, at a memory management unit (MMU), encrypted data from a memory via direct memory access and determining, at the MMU, a peripheral that is the intended recipient of the encrypted data. The method may also include accessing an application key used for transmission between an application and the peripheral, wherein the application key originates from the application and decrypting, at the MMU, the encrypted data using the application key and transmitting the decrypted data to the peripheral.
-
公开(公告)号:US20180211064A1
公开(公告)日:2018-07-26
申请号:US15415450
申请日:2017-01-25
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Geoffrey Ndu , Adrian Shaw , Brian Quentin Monahan
CPC classification number: G06F21/64 , G06F21/602 , H04L9/0643 , H04L9/3236
Abstract: In one example in accordance with the present disclosure, a system comprises a first memory module and a first memory integrity monitoring processor, embedded to the first memory module, to receive a second hash corresponding to a second memory module. The second hash includes a second sequence number for reconstruction of a final hash value and the second hash is not sequentially a first number in a sequence for reconstruction of the final hash value. The first processor may receive a third hash corresponding to a third memory module. The third hash includes a third sequence number for reconstruction of the final hash value and the third hash is received after the second hash. The first processor may determine if the second hash can be combined with the third hash, combine the second hash and third hash into a partial hash reconstruct the final hash value using the partial hash.
-
公开(公告)号:US10528752B2
公开(公告)日:2020-01-07
申请号:US15502661
申请日:2014-08-13
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Dejan S. Milojicic , Chris I. Dalton , Zhikui Wang , Chandrasekar Venkatraman , Adrian Shaw
Abstract: Example implementations relate to non-volatile storage of management data. In example implementations, a system is disclosed, the system including a plurality of computing devices, a management device, and a non-volatile memory including a plurality of management spaces corresponding to the plurality of computing devices. In example implementations, at least one of the plurality of management spaces is to be accessible by the management device and by the corresponding computing device, be inaccessible by computing devices other than the corresponding computing device, and store management data associated with the corresponding computing device.
-
公开(公告)号:US10425282B2
公开(公告)日:2019-09-24
申请号:US15500919
申请日:2014-11-28
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Ludovic Emmanuel Paul Noel Jacquin , Adrian Shaw , Chris I. Dalton
Abstract: A computing device having instructions that when executed by a processor may: receive, from a verifier, a request for attestation of a current network configuration of the computing device; identify network configuration rules, each network configuration rule specifying an action to be taken by the computing device in response to receiving a particular type of network traffic; generate, for each network configuration rule, a rule abstraction that represents the network configuration rule; provide data representing each rule abstraction to a trusted component; receive, from the trusted component, response data comprising i) data representing each rule abstraction, and ii) a digital signature; and provide the response data to the verifier as attestation proof of the current network configuration of the computing device.
-
公开(公告)号:US10242195B2
公开(公告)日:2019-03-26
申请号:US15217583
申请日:2016-07-22
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Ludovic Emmanuel Paul Noel Jacquin , Thomas M. Laffey , Adrian Shaw
Abstract: Examples described herein include a computing device with a processing resource to execute beginning booting instructions of the computing device. The beginning booting instructions may include a first booting instruction. The computing device also includes an access line to access the first booting instruction, a measuring engine to duplicate the first booting instruction and to generate a first integrity value associated with the first booting instruction, and a measurement register to store the first integrity value. The measuring engine may be operationally screened from the processing resource and the measurement register may be inaccessible to the processing resource.
-
公开(公告)号:US20170300349A1
公开(公告)日:2017-10-19
申请号:US15511933
申请日:2014-09-26
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Adrian Shaw , Chris I Dalton
CPC classification number: G06F9/45558 , G06F9/45533 , G06F2009/45583 , G06F2009/45595 , H04L69/22
Abstract: Techniques for storing hypervisor messages in a network packet are described. In one aspect, a hypervisor of a computing device obtains a network packet generated by a virtual machine. The hypervisor may then identify available space within the network packet that can store data relating to a hypervisor message. The hypervisor may then store the hypervisor message in the available space within the network packet. The hypervisor may cause a physical network interface controller to transmit the network packet to a destination device through a network path that includes a message logging device.
-
公开(公告)号:US20170228555A1
公开(公告)日:2017-08-10
申请号:US15502661
申请日:2014-08-13
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Dejan S. Milojicic , Chris I. Dalton , Zhikui Wang , Chandrasekar Venkatraman , Adrian Shaw
CPC classification number: G06F21/6218 , G06F8/65 , G06F12/1408 , G06F21/552 , G06F21/575 , G06F2212/402 , H04L9/30
Abstract: Example implementations relate to non-volatile storage of management data. In example implementations, a system is disclosed, the system including a plurality of computing devices, a management device, and a non-volatile memory including a plurality of management spaces corresponding to the plurality of computing devices. In example implementations, at least one of the plurality of management spaces is to be accessible by the management device and by the corresponding computing device, be inaccessible by computing devices other than the corresponding computing device, and store management data associated with the corresponding computing device.
-
公开(公告)号:US11757717B2
公开(公告)日:2023-09-12
申请号:US15500918
申请日:2014-11-28
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Ludovic Emmanuel Paul Noel Jacquin , Adrian Shaw , Chris I. Dalton
IPC: H04L41/0866 , H04L41/0893 , H04L41/28 , H04L41/12
CPC classification number: H04L41/0866 , H04L41/0893 , H04L41/12 , H04L41/28
Abstract: Examples relate to verifying network elements. In one example, a computing device may: receive, from a client device, a request for attestation of a back-end network, the request including back-end configuration requirements; obtain, from a network controller that controls the back-end network, a controller configuration that specifies each network element included in the back-end network; provide each network element included in the back-end network with a request for attestation of a network element configuration of the network element; receive, from each network element, response data that specifies the network element configuration of the network element; verify that the response data received from each network element meets the back-end configuration requirements included in the request for attestation of the back-end network; and provide the client device with data verifying that the back-end network meets the back-end configuration requirements.
-
公开(公告)号:US10896267B2
公开(公告)日:2021-01-19
申请号:US15420736
申请日:2017-01-31
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Geoffrey Ndu , Pratyusa K Manadhata , Christopher L. Dalton , Adrian Shaw , Stuart Haber
Abstract: Examples relate to Input/Output (I/O) data encryption and decryption. In an example, an encryption/decryption engine on an Integrated Circuit (IC) of a computing device obtains at least one plaintext data. Some examples determine, by the encryption/decryption engine, whether the at least one plaintext data is to be sent to a memory in the computing device or to an I/O device. Some examples apply, when the at least one plaintext data is to be sent to the I/O device and by the encryption/decryption engine, an encryption primitive of a block cipher encryption algorithm to the at least one plaintext data to create output encrypted data, wherein an initialization vector that comprises a random number is applied to the encryption primitive.
-
公开(公告)号:US10310990B2
公开(公告)日:2019-06-04
申请号:US15192493
申请日:2016-06-24
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Adrian Shaw , Geoffrey Ndu , Fraser John Dickin
Abstract: In one example in accordance with the present disclosure, a method may include retrieving, at a memory management unit (MMU), encrypted data from a memory via direct memory access and determining, at the MMU, a peripheral that is the intended recipient of the encrypted data. The method may also include accessing an application key used for transmission between an application and the peripheral, wherein the application key originates from the application and decrypting, at the MMU, the encrypted data using the application key and transmitting the decrypted data to the peripheral.
-
-
-
-
-
-
-
-
-