公开(公告)号：US20160342798A1

公开(公告)日：2016-11-24

申请号：US15218978

申请日：2016-07-25

Applicant: Intel Corporation

Inventor： NED M. Smith ,  VICTORIA C. MOORE ,  STEVEN L. GROBMAN

IPC: G06F21/60 ,  G06F3/06 ,  H04L29/06

CPC classification number: G06F21/602 ,  G06F3/0623 ,  G06F3/0632 ,  G06F3/0671 ,  G06F21/305 ,  G06F21/74 ,  G06F21/78 ,  G06F21/85 ,  G06F2221/2147 ,  G06F2221/2149 ,  H04L9/0894 ,  H04L9/321 ,  H04L29/06979 ,  H04L63/08 ,  H04L63/0807 ,  H04L63/083

Abstract: A method, apparatus, system, and computer program product for management of storage devices protected by encryption, user authentication, and password protection and auditing schemes in virtualized and non-virtualized environments.

Abstract translation: 一种用于在虚拟化和非虚拟化环境中管理由加密，用户认证，密码保护和审计方案保护的存储设备的方法，设备，系统和计算机程序产品。

公开(公告)号：US20150341332A1

公开(公告)日：2015-11-26

申请号：US14714513

申请日：2015-05-18

Applicant: Intel Corporation

Inventor： NED M. SMITH ,  CONOR P. CAHILL ,  VICTORIA C. MOORE ,  JASON MARTIN ,  MICAH J. SHELLER

IPC: H04L29/06 ,  G06F21/33 ,  G06F21/31

CPC classification number: H04L9/0861 ,  G06F21/31 ,  G06F21/33 ,  G06F21/45 ,  H04L9/3234 ,  H04L63/0281 ,  H04L63/061 ,  H04L63/08 ,  H04L63/0815 ,  H04L63/0823 ,  H04L63/0838 ,  H04L63/1466 ,  H04L2209/127 ,  H04L2463/082

Abstract: In an embodiment, a security engine of a processor includes an identity provider logic to generate a first key pair of a key pairing associating system user and a service provider that provides a web service and having a second system coupled to the system via a network, to perform a secure communication with the second system to enable the second system to verify that the identity provider logic is executing in a trusted execution environment, and responsive to the verification, to send a first key of the first key pair to the second system. This key may enable the second system to verify an assertion communicated by the identity provider logic that the user has been authenticated to the system according to a multi-factor authentication. Other embodiments are described and claimed.

Abstract translation: 在一个实施例中，处理器的安全引擎包括身份提供者逻辑，以生成密钥配对关联系统用户的第一密钥对和提供Web服务并具有通过网络耦合到系统的第二系统的服务提供者， 以执行与所述第二系统的安全通信，以使所述第二系统能够验证所述身份提供者逻辑在可信执行环境中正在执行，并且响应于所述验证​​，将所述第一密钥对的第一密钥发送到所述第二系统。 该密钥可以使得第二系统可以根据多因素认证来验证由身份提供者逻辑传达的断言，用户已被认证给系统。 描述和要求保护其他实施例。