TECHNOLOGIES FOR END-TO-END BIOMETRIC-BASED AUTHENTICATION AND PLATFORM LOCALITY ASSERTION

    公开(公告)号:US20190036699A1

    公开(公告)日:2019-01-31

    申请号:US16133952

    申请日:2018-09-18

    CPC classification number: H04L9/3231 H04L9/0816 H04L9/0825

    Abstract: Technologies for end-to-end biometric-based authentication and locality assertion include a computing device with one or more biometric devices. The computing device may securely exchange a key between a driver and a secure enclave. The driver may receive biometric data from the biometric sensor in a virtualization-protected memory buffer and encrypt the biometric data with the shared key. The secure enclave may decrypt the biometric data and perform a biometric authentication operation. The computing device may measure a virtual machine monitor (VMM) to generate attestation information for the VMM. A secure enclave may execute a virtualization report instruction to request the attestation information. The processor may copy the attestation information into the secure enclave memory. The secure enclave may verify the attestation information with a remote attestation server. If verified, the secure enclave may provide a shared secret to the VMM. Other embodiments are described and claimed.

    TECHNOLOGIES FOR ALTERING MODEM CONFIGURATIONS

    公开(公告)号:US20180287869A1

    公开(公告)日:2018-10-04

    申请号:US15473370

    申请日:2017-03-29

    Abstract: Methods, systems, and storage media are described for configuring a reconfigurable modem circuitry to communicate in accordance with various wireless communications protocols. A modem manager may be implemented in a secure execution environment of a computing platform. The modem manager may detect a trigger to reconfigure the modem circuitry, select a modem profile in response to the trigger, and reconfigure the modem circuitry in accordance with the selected modem profile. The modem circuitry, on reconfiguration, may communicate over a corresponding wireless network or in a corresponding network of the selected modem profile. Other embodiments may be described and/or claimed.

    Secure pairing for secure communication across devices
    8.
    发明授权
    Secure pairing for secure communication across devices 有权
    安全配对,实现跨设备的安全通信

    公开(公告)号:US09559851B2

    公开(公告)日:2017-01-31

    申请号:US14129437

    申请日:2013-06-13

    CPC classification number: H04L9/3268 H04L9/0841

    Abstract: Technologies for securely pairing a first computing device with a second computing device include the first computing device to generate a session message key based on a key exchange with the second computing device. The first computing device receives a message including a hardware key certificate, 5 a cryptographically-signed communication, and a message authentication code from the second computing device. The cryptographically-signed communication is signed with a private hardware key of the second computing device. The first computing device validates the message authentication code, the certificate, and the signature received from the second computing device. After validation, the first computing device 10 identifies a user of the second computing device based on user-identifying data received from the second computing device.

    Abstract translation: 用于将第一计算设备与第二计算设备安全地配对的技术包括:第一计算设备,用于基于与第二计算设备的密钥交换来生成会话消息密钥。 第一计算设备从第二计算设备接收包括硬件密钥证书,密码签名通信和消息认证码的消息。 密码签名的通信使用第二计算设备的专用硬件密钥进行签名。 第一计算设备验证从第二计算设备接收到的消息认证码,证书和签名。 在验证之后,第一计算设备10基于从第二计算设备接收的用户识别数据来识别第二计算设备的用户。

    METHODS, SYSTEMS AND APPARATUS TO TRACK A PROVENANCE OF GOODS

    公开(公告)号:US20200184489A1

    公开(公告)日:2020-06-11

    申请号:US16609405

    申请日:2017-06-30

    Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to track a provenance of goods. An example apparatus includes an unsigned block generator to generate a first unsigned block to store first processing data associated with the product by a first entity, a block signature engine to sign the first unsigned block with a first private key to generate a blockchain having a first signed block, the unsigned block generator to generate a second unsigned block in response to a second entity generating second processing data associated with the product by the second entity, the block signature engine to expand the blockchain by signing the second unsigned block with a second private key to generate a second signed block within the blockchain, and a blockchain validator to verify the product provenance by validating the first processing data and the second processing data using respective public keys associated with the first entity and the second entity.

Patent Agency Ranking