公开(公告)号：US09391961B2

公开(公告)日：2016-07-12

申请号：US13967616

申请日：2013-08-15

Applicant: KABUSHIKI KAISHA TOSHIBA

Inventor： Hiroshi Isozaki ,  Jun Kanai

IPC: H04L9/00 ,  H04L9/32 ,  H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0428 ,  H04L63/0823 ,  H04L63/168 ,  H04L67/02

Abstract: An information operating device has a first connection unit, a second connection unit, a machine operating command for operating the information output device and a usage certificate certifying that the machine operating web application, a domain name attacher to attach a domain name of the first communication device, when the connection is established by the second connection unit to transmit the machine operating command for operating the information output device using the connection, an application executing unit to execute the PIN code input web application acquired from the first communication device through the first connection unit, an encryption information generator to generate encryption information and transmit it to the information output device, and a client processing unit to transmit the usage certificate and the encryption information to the information output device through the second connection unit.

Abstract translation: 信息操作装置具有第一连接单元，第二连接单元，用于操作信息输出设备的机器操作命令和证明机器操作web应用的使用证书，域名附属者附加第一通信的域名 设备，当通过第二连接单元建立连接以发送用于使用连接来操作信息输出设备的机器操作命令时，应用执行单元执行通过第一连接从第一通信设备获取的PIN码输入web应用 单元，加密信息生成器，用于生成加密信息并将其发送到信息输出设备;以及客户端处理单元，通过第二连接单元将使用证明和加密信息发送到信息输出设备。

公开(公告)号：US09354923B2

公开(公告)日：2016-05-31

申请号：US14198029

申请日：2014-03-05

Applicant: Kabushiki Kaisha Toshiba

Inventor： Jun Kanai ,  Hiroshi Isozaki

IPC: G06F9/42 ,  G06F9/46 ,  G06F13/24

CPC classification number: G06F9/462 ,  G06F13/24

Abstract: According to an embodiment, an information processing apparatus includes a banked register determiner and a saving register determiner. The banked register determiner is configured to hold register information indicating which of a banked register and a non-banked register a register which is used by the operating system is, receive an acquisition instruction for the non-banked or banked register and the information about the mode of the operating system, and return a list of the non-banked or banked registers. The saving register determiner is configured to acquire the mode in which the operating system is capable of operating, determine that saving of the banked register for the mode is necessary when another operating system is capable of operating in the mode, acquire a list of the banked registers, and acquire a list of the non-banked registers from the banked register determiner.

Abstract translation: 根据实施例，信息处理设备包括一个分组寄存器确定器和一个保存寄存器确定器。 分组寄存器确定器被配置为保持寄存器信息，该寄存器信息指示操作系统使用的寄存器和非存储寄存器中的哪一个寄存器是接收非存储或存储寄存器的获取指令，以及关于 操作系统的模式，并返回非存储或存储的寄存器的列表。 保存寄存器确定器被配置为获取操作系统能够操作的模式，确定当另一个操作系统能够以该模式操作时，为了该模式而节省存储的寄存器是必要的，获取该存储器的列表 寄存器，并从存储寄存器确定器获取非存储寄存器的列表。

公开(公告)号：US09112835B2

公开(公告)日：2015-08-18

申请号：US13914392

申请日：2013-06-10

Applicant: KABUSHIKI KAISHA TOSHIBA

Inventor： Hiroshi Isozaki ,  Hiroyuki Chaki ,  Kazunobu Konda ,  Takashi Kokubo ,  Hideki Ohkita

IPC: H04L29/06 ,  H04N7/167 ,  H04N21/2347 ,  H04N21/258 ,  H04N21/266 ,  H04N21/4405 ,  H04N21/4623 ,  H04N21/4627 ,  H04N21/6334 ,  H04N21/658 ,  H04N21/8355

CPC classification number: H04L63/0428 ,  H04N7/1675 ,  H04N21/2347 ,  H04N21/25816 ,  H04N21/25875 ,  H04N21/26609 ,  H04N21/26613 ,  H04N21/4405 ,  H04N21/4623 ,  H04N21/4627 ,  H04N21/63345 ,  H04N21/6582 ,  H04N21/8355

Abstract: According to one embodiment, a transmitting method transmits a start request for an authentication and key exchange from at least one of receivers to the transmitter, performs an authentication and key exchange for at least one of a first key common to the receivers and a second key peculiar to the at least one of the receivers, and encrypts the content by using a key shared by the transmitter and the at least one of the receivers to transmit the encrypted content to the at least one of the receivers.

Abstract translation: 根据一个实施例，一种发送方法从至少一个接收机发送认证和密钥交换的开始请求到发送器，对接收机共同的第一个密钥和第二个密钥中的至少一个执行认证和密钥交换 并且通过使用由发射机和至少一个接收机共享的密钥来加密内容，以将加密的内容发送到接收机中的至少一个。

公开(公告)号：US20140026228A1

公开(公告)日：2014-01-23

申请号：US13975597

申请日：2013-08-26

Applicant: KABUSHIKI KAISHA TOSHIBA

Inventor： Hiroshi Isozaki ,  Ryuiti Koike ,  Jun Kanai ,  Tatsuo Yamaguchi ,  Yuki Kanbe ,  Jun Ohashi ,  Satoshi Ozaki

IPC: G06F21/50

CPC classification number: G06F21/50 ,  G06F21/57

Abstract: According to one embodiment, an information processing apparatus includes a management module and a control module. The control module detects an event of requesting install of an application program, and transmits, prior to execution of the install, install event information including an application name of the application program to the management module. The management module notifies the install event information to a determination program, and transmits to the control module a determination result indicative of permission or prohibition of the install, the determination result being received from the determination program.

Abstract translation: 根据一个实施例，信息处理设备包括管理模块和控制模块。 控制模块检测请求安装应用程序的事件，并且在执行安装之前将包括应用程序的应用程序名称的事件信息安装到管理模块。 管理模块将安装事件信息通知给确定程序，并且向控制模块发送指示许可或禁止安装的确定结果，确定结果从确定程序接收。

公开(公告)号：US20140026198A1

公开(公告)日：2014-01-23

申请号：US14010870

申请日：2013-08-27

Applicant: Kabushiki Kaisha Toshiba

Inventor： Hiroshi Isozaki ,  Jun Kanai ,  Ryuiti Koike ,  Tatsuo Yamaguchi ,  Tetsuo Hatakeyama ,  Yuki Kanbe ,  Jun Ohashi ,  Tatsunori Saito ,  Satoshi Ozaki

IPC: H04L29/06

CPC classification number: H04L63/10 ,  H04L63/107

Abstract: According to one embodiment, a control module detects each of a plurality of events. A management module transmits a determination result indicative of one of permission and prohibition of execution of a specific process to the control module when a second event of requesting execution of the specific process is detected before detection of a first event of requesting a connection to a specific external communication device. When the second event is detected after the detection of the first event, the management module transmits the other of permission and prohibition of the execution of the specific process to the control module.

Abstract translation: 根据一个实施例，控制模块检测多个事件中的每一个。 管理模块在检测到请求执行特定处理的第二事件之前检测到请求执行特定进程的第二事件时，向控制模块发送指示一个许可和禁止执行特定进程的确定结果。 外部通信设备。 当在检测到第一事件之后检测到第二事件时，管理模块向控制模块发送许可并禁止执行特定处理的另一事件。

公开(公告)号：US10380057B2

公开(公告)日：2019-08-13

申请号：US15685030

申请日：2017-08-24

Applicant: Kabushiki Kaisha Toshiba

Inventor： Ryuta Nara ,  Hiroshi Isozaki ,  Kentaro Umesawa

IPC: G06F13/42 ,  G06F13/36 ,  G06F3/06 ,  H04L12/40

Abstract: According to an embodiment, a data storage device includes a data accumulation unit, a bus interface, and a processor. The processor is configured to control operation of the data storage device so as to spontaneously acquire data from an in-vehicle network via the bus interface and store the data in the data accumulation unit. The processor includes a message processing unit and a data access processing unit. The message processing unit is configured to transmit and receive messages, via the bus interface, to and from an electronic control unit or an external device connected to the in-vehicle network. The data access processing unit is configured to command the data accumulation unit to write and read data. Data included in a message received by the message processing unit is written in the data accumulation unit in accordance with a command of the data access processing unit.

公开(公告)号：US09608966B2

公开(公告)日：2017-03-28

申请号：US13967614

申请日：2013-08-15

Applicant: KABUSHIKI KAISHA TOSHIBA

Inventor： Jun Kanai ,  Hiroshi Isozaki

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0428 ,  H04L63/06 ,  H04L63/0823 ,  H04L63/18 ,  H04L67/02

Abstract: An information handling device has a first connection unit, a Web application executing unit to generate a device operating command, a second connection unit, an application authentication processing unit to generate a platform authenticator, an application origin information attacher to attach origin information of the web application to the platform authenticator, and a third connection unit to establish a connection for transmitting the device operating command and the platform authenticator attached with the origin information to the second communication device in order to transmit the device operating command and the platform authenticator attached with the origin information.

公开(公告)号：US09536113B2

公开(公告)日：2017-01-03

申请号：US14482036

申请日：2014-09-10

Applicant: Kabushiki Kaisha Toshiba

Inventor： Hiroshi Isozaki ,  Jun Kanai ,  Shintarou Sano ,  Shunsuke Sasaki ,  Toshiki Kizu

IPC: H04L29/06 ,  G06F21/74 ,  H04L9/08 ,  G06F21/57

CPC classification number: G06F21/74 ,  G06F21/57 ,  H04L9/0891

Abstract: According to an embodiment, an information processing apparatus includes a main processor, a secure operating system (OS) module, a non-secure OS module, a secure monitor memory setting module, a timer, and an address space controller. When receiving a notification of an interrupt from the timer, a secure monitor instructs the secure OS module to execute certain processing. The secure OS module is configured to execute certain processing instructed by the secure monitor and store data of a result of the processing in a first memory area.

Abstract translation: 根据实施例，信息处理设备包括主处理器，安全操作系统（OS）模块，非安全OS模块，安全监视器存储器设置模块，定时器和地址空间控制器。 当从定时器接收到中断的通知时，安全监视器指示安全OS模块执行某些处理。 安全OS模块被配置为执行由安全监视器指示的某些处理，并且将处理结果的数据存储在第一存储器区域中。

公开(公告)号：US20160378693A1

公开(公告)日：2016-12-29

申请号：US14929135

申请日：2015-10-30

Applicant: Kabushiki Kaisha Toshiba

Inventor： Shunsuke Sasaki ,  Toshiki Kizu ,  Hiroshi Isozaki ,  Jun Kanai ,  Shintarou Sano ,  Ryuta Nara

IPC: G06F12/14

CPC classification number: G06F12/1491 ,  G06F9/30054 ,  G06F9/48 ,  G06F21/74 ,  G06F2212/1052

Abstract: According to one embodiment, an information processing apparatus includes a processor and a memory. The processor operates in a first state and a second state. The memory includes a first region and a second region. A first program code is written in the second region. The first program code is executed when a call of the function provided by an operation system is invoked. A second program code is written in the first region. The processor executes the second program code to replace a first instruction included in the first program code with a second instruction. The second instruction is for switching the second state and the first state.

Abstract translation: 根据一个实施例，信息处理设备包括处理器和存储器。 处理器处于第一状态和第二状态。 存储器包括第一区域和第二区域。 在第二区域中写入第一程序代码。 当调用由操作系统提供的功能的调用时，执行第一程序代码。 第二个程序代码被写入第一个区域。 处理器执行第二程序代码以用第二指令替换包含在第一程序代码中的第一指令。 第二条指令用于切换第二状态和第一状态。

公开(公告)号：US09286242B2

公开(公告)日：2016-03-15

申请号：US14198003

申请日：2014-03-05

Applicant: Kabushiki Kaisha Toshiba

Inventor： Shintarou Sano ,  Shunsuke Sasaki ,  Hiroshi Isozaki ,  Jun Kanai ,  Toshiki Kizu ,  Ryuta Nara

IPC: G06F12/14

CPC classification number: G06F12/1408 ,  G06F12/1491

Abstract: According to one embodiment, an information processing apparatus includes a processor, a main memory, and a memory controller. The memory controller executes an access restriction for each memory region. A first program decodes a protected program which was encrypted in a secure mode. The first program places the protected program which was decoded in a memory region. A second program executes the protected program in a secure mode. The processor places a code region and a protected data region in the protected program which was decoded in a memory region having an access restriction by using the first program. When an access to the protected data region is confirmed, the processor confirms by using the second program that the access is caused by a command from the code region placed by the first program, and then, executes the command.

Abstract translation: 根据一个实施例，信息处理设备包括处理器，主存储器和存储器控制器。 存储器控制器对每个存储器区域执行访问限制。 第一个程序解码以安全模式加密的受保护程序。 第一个程序将被解码的保护程序放置在存储器区域中。 第二个程序以安全模式执行受保护的程序。 处理器将代码区域和受保护的数据区域放置在通过使用第一程序在具有访问限制的存储器区域中被解码的保护程序中。 当确认对受保护数据区域的访问时，处理器通过使用第二程序确认访问是由来自第一程序放置的代码区域的命令引起的，然后执行命令。