Technologies for collective authorization with hierarchical group keys

    公开(公告)号:US12047503B2

    公开(公告)日:2024-07-23

    申请号:US18051825

    申请日:2022-11-01

    CPC classification number: H04L9/14 H04L9/0822 H04L9/0825 H04L9/0836 H04L9/3247

    Abstract: Technologies for secure collective authorization include multiple computing devices in communication over a network. A computing device may perform a join protocol with a group leader to receive a group private key that is associated with an interface implemented by the computing device. The interface may be an instance of an object model implemented by the computing device or membership of the computing device in a subsystem. The computing device receives a request for attestation to the interface, selects the group private key for the interface, and sends an attestation in response to the request. Another computing device may receive the attestation and verify the attestation with a group public key corresponding to the group private key. The group private key may be an enhanced privacy identifier (EPID) private key, and the group public key may be an EPID public key. Other embodiments are described and claimed.

    Supervised online identity
    4.
    发明授权

    公开(公告)号:US11082431B2

    公开(公告)日:2021-08-03

    申请号:US16532057

    申请日:2019-08-05

    Abstract: Technologies to facilitate supervision of an online identify include a gateway server to facilitate and monitor access to an online service by a user of a “child” client computer device. The gateway server may include an identity manager to receive a request for access to the online service from the client computing device, retrieve access information to the online service, and facilitate access to the online service for the client computing device using the access information. The access information is kept confidential from the user. The gateway server may also include an activity monitor module to control activity between the client computing device and the online service based on the set of policy rules of a policy database. The gateway server may transmit notifications of such activity to a “parental” client computing device for review and/or approval, which also may be used to update the policy database.

    RANSOMWARE DETECTION AND REMEDIATION

    公开(公告)号:US20210150025A1

    公开(公告)日:2021-05-20

    申请号:US17132934

    申请日:2020-12-23

    Abstract: A system and method of detecting and remediating attacks includes receiving operating system (OS) read/write data from an OS, the OS read/write data describing at least one of reads from and writes to a storage device over a file system interface of the OS; collecting storage device read/write data, the storage device read/write data describing at least one of reads from and writes to the storage device; comparing the OS read/write data to the storage device read/write data; and determining if there is a discrepancy between the OS read/write data and the storage device read/write data. If there is a discrepancy, determining if there is an anomaly detected between OS read/write data and the storage device read/write data. If there is an anomaly, causing a remediation action to be taken to stop a malware attack.

    Supervised Online Identity
    7.
    发明申请

    公开(公告)号:US20200329050A1

    公开(公告)日:2020-10-15

    申请号:US16913557

    申请日:2020-06-26

    Abstract: Technologies to facilitate supervision of an online identify include a gateway server to facilitate and monitor access to an online service by a user of a “child” client computer device. The gateway server may include an identity manager to receive a request for access to the online service from the client computing device, retrieve access information to the online service, and facilitate access to the online service for the client computing device using the access information. The access information is kept confidential from the user. The gateway server may also include an activity monitor module to control activity between the client computing device and the online service based on the set of policy rules of a policy database. The gateway server may transmit notifications of such activity to a “parental” client computing device for review and/or approval, which also may be used to update the policy database.

    Secure Import and Export of Keying Material
    10.
    发明申请
    Secure Import and Export of Keying Material 有权
    安全输入和输出键控材料

    公开(公告)号:US20160323264A1

    公开(公告)日:2016-11-03

    申请号:US14367434

    申请日:2013-12-20

    Abstract: An embodiment includes a method executed by at least one processor of a first computing node comprising: generating a key pair including a first public key and a corresponding first private key; receiving an instance of a certificate, including a second public key, from a second computing node located remotely from the first computing node; associating the instance of the certificate with the key pair; receiving an additional instance of the certificate; verifying the additional instance of the certificate is associated with the key pair; and encrypting and exporting the first private key in response to verifying the additional instance of the certificate is associated with the key pair. Other embodiments are described herein.

    Abstract translation: 实施例包括由第一计算节点的至少一个处理器执行的方法,包括:生成包括第一公钥和对应的第一私钥的密钥对; 从位于远离所述第一计算节点的第二计算节点接收包括第二公钥的证书的实例; 将证书的实例与密钥对相关联; 接收证书的附加实例; 验证证书的附加实例与密钥对相关联; 并且响应于验证证书的附加实例而加密和导出第一私钥与密钥对相关联。 本文描述了其它实施例。

Patent Agency Ranking