公开(公告)号：US20210014217A1

公开(公告)日：2021-01-14

申请号：US16957628

申请日：2018-03-31

Applicant: INTEL CORPORATION

Inventor： Changzheng WEI ,  Weigang LI ,  Danny T. ZHOU ,  Junyuan WANG ,  Hari K. TADEPALLI ,  Rashmin N. PATEL

IPC: H04L29/06 ,  H04L9/32 ,  H04W12/00

Abstract: Technologies for securing a virtualization network function (VNF) image includes a security server to generate a wrapping cryptographic key to wrap a private key of the VNF image and replace the private key with the wrapped private key to secure the private key. During operation, the VNF image may be authenticated by a network function virtualization (NFV) server as needed. Additionally, the signature of the VNF image may be updated each time the VNF image is shutdown to ensure the continued authenticity of the VNF image.

公开(公告)号：US20210019172A1

公开(公告)日：2021-01-21

申请号：US17042114

申请日：2018-06-28

Applicant: INTEL CORPORATION

Inventor： Baiju V. PATEL ,  Kapil SOOD ,  Weigang LI ,  Ping YU ,  Changzheng WEI ,  Junyuan WANG ,  Xin ZENG

IPC: G06F9/455 ,  G06F21/60 ,  G06F21/53 ,  G06F21/64 ,  G06F12/14

Abstract: A cryptographic data item utilized to derive a first cryptographic key employed by a first memory controller for implementing a first cryptographically protected execution environment for storing memory pages associated with a virtual machine may be received from a first host system via a first secure communication channel. The cryptographic data item may be transmitted to a second host system via a second secure communication channel for implementing a second cryptographically protected environment on the second host system. The first host system may be caused to migrate the memory pages of the virtual machine via an unsecured communication channel to the second host system for storing in the second cryptographically protected execution environment.

公开(公告)号：US20210203491A1

公开(公告)日：2021-07-01

申请号：US16649192

申请日：2017-12-29

Applicant: INTEL CORPORATION

Inventor： Changzheng WEI ,  Junyuan WANG ,  Ned SMITH ,  Weigang LI ,  Ping YU

IPC: H04L9/08 ,  G16Y30/10 ,  H04L9/32 ,  H04L29/06 ,  G06F21/45

Abstract: Technologies for key management of internet-of-things (IoT) devices include an IoT device, an authority center server, and a group management server. The IoT device is configured to authenticate with an authority center server via an offline communication channel, receive a group member private key as a function of the authentication with the authority center server, and authenticate with a group management server via a secure online communication channel using the group member private key. The IoT device is further configured to receive a group shared key as a function of the authentication with the group management server, encrypt secret data with the group shared key, and transmit the encrypted secret data to the group management server. Other embodiments are described herein.

公开(公告)号：US20200233717A1

公开(公告)日：2020-07-23

申请号：US15755216

申请日：2017-03-28

Applicant: INTEL CORPORATION

Inventor： Ned M. SMITH ,  Changzheng WEI ,  Songwu SHEN ,  Ziye YANG ,  Junyuan WANG ,  Weigang LI ,  Wenqian YU

IPC: G06F9/50 ,  G06F21/76

Abstract: Technologies for hybrid acceleration of code include a computing device (100) having a processor (120), a field-programmable gate array (FPGA) (130), and an application-specific integrated circuit (ASIC) (132). The computing device (100) offloads a service request, such as a cryptographic request or a packet processing request, to the FPGA (130). The FPGA (130) performs one or more algorithmic tasks of an algorithm to perform the service request. The FPGA (130) determines one or more primitive tasks associated with an algorithm task and encapsulates each primitive task in a buffer that is accessible by the ASIC (132). The ASIC (132) performs the primitive tasks in response to encapsulation in the buffer, and the FPGA (130) returns results of the algorithm. The primitive operations may include cryptographic primitives such as modular exponentiation, modular multiplicative inverse, and modular multiplication. The results may be returned to the processor (120) or a network interface controller of the computing device (100).

公开(公告)号：US20200150734A1

公开(公告)日：2020-05-14

申请号：US16747202

申请日：2020-01-20

Applicant: Intel Corporation

Inventor： Liang MA ,  Weigang LI ,  Madhusudana RAGHUPATRUNI ,  Hongjun NI ,  Xuekun HU ,  Changzheng WEI ,  Chris MACNAMARA ,  John J. BROWNE

IPC: G06F1/324 ,  G06F21/60 ,  G06F9/54 ,  G06F21/53

Abstract: Examples described herein provide for a first core to map a measurement of packet processing activity and operating parameters so that a second core can access the measurement of packet processing activity and potentially modify an operating parameter of the first core. The second core can modify operating parameters of the first core based on the measurement of packet processing activity. The first and second cores can be provisioned on start-up with a common key. The first and second cores can use the common key to encrypt or decrypt measurement of packet processing activity and operating parameters that are shared between the first and second cores. Accordingly, operating parameters of the first core can be modified by a different core while providing for secure modification of operating parameters.