UNIQUE CODE IN MESSAGE FOR SIGNATURE GENERATION IN ASYMMETRIC CRYPTOGRAPHIC DEVICE
    1.
    发明申请
    UNIQUE CODE IN MESSAGE FOR SIGNATURE GENERATION IN ASYMMETRIC CRYPTOGRAPHIC DEVICE 审中-公开
    消息中的不正确代码用于不对称CRYPTOGRAPHIC设备中的签名生成

    公开(公告)号:US20140089670A1

    公开(公告)日:2014-03-27

    申请号:US13628946

    申请日:2012-09-27

    IPC分类号: H04L9/32

    CPC分类号: H04L9/3226 H04L9/3252

    摘要: Methods and systems are disclosed for verifying the use of a client device by a host device in a secure system. In one aspect, a method for authenticating a client device includes receiving, by the client device, a message from a host device, accessing, by the client device, a private key and a unique code stored on the client device, where the unique code is different than the private key, generating, by the client device, a digital signature for the message using the private key and the unique code, and providing, by the client device, the digital signature to the host device for verification of the use of the client device by the host device.

    摘要翻译: 公开了用于在安全系统中验证由主机设备使用客户端设备的方法和系统。 一方面,用于认证客户端设备的方法包括:由客户端设备从主机设备接收消息,由客户端设备访问存储在客户端设备上的专用密钥和唯一代码,其中唯一代码 与私钥不同,由客户端设备使用专用密钥和唯一代码生成消息的数字签名,并且由客户端设备向主机设备提供数字签名以验证使用 客户端设备由主机设备。

    Secure Storage and Signature
    2.
    发明申请
    Secure Storage and Signature 有权
    安全存储和签名

    公开(公告)号:US20140025944A1

    公开(公告)日:2014-01-23

    申请号:US13553388

    申请日:2012-07-19

    IPC分类号: H04L9/00

    摘要: An integrated circuit device comprises a processor and a secure protection zone with security properties that can be verified by a remote device communicating with the integrated circuit device. The secure protection zone includes a persistent storage that is configured for storing cryptographic keys and data. The secure protection zone also includes instructions that are configured for causing the processor to perform cryptographic operations using the cryptographic keys. In addition, the secure protection zone includes an ephemeral memory that is configured for storing information associated with the cryptographic operations. The instructions are configured for causing the processor to perform the cryptographic operations on the data stored in the persistent storage and the information in the ephemeral memory as part of a secure communication exchange with the remote device.

    摘要翻译: 集成电路设备包括处理器和具有安全属性的安全保护区域,其可以由与集成电路设备通信的远程设备进行验证。 安全保护区包括被配置用于存储加密密钥和数据的持久存储器。 安全保护区还包括配置用于使处理器使用密码密钥执行密码操作的指令。 此外,安全保护区域包括临时存储器,其被配置用于存储与密码操作相关联的信息。 指令被配置为使得处理器对存储在永久存储器中的数据和临时存储器中的信息执行密码操作,作为与远程设备的安全通信交换的一部分。

    Stored public key validity registers for cryptographic devices and systems
    3.
    发明授权
    Stored public key validity registers for cryptographic devices and systems 有权
    存储加密设备和系统的公钥有效性寄存器

    公开(公告)号:US08909929B2

    公开(公告)日:2014-12-09

    申请号:US13485678

    申请日:2012-05-31

    IPC分类号: H04L9/32 H04K1/00 H04L9/30

    摘要: Systems and techniques for performing cryptographic operations based on public key validity registers are described. A described system includes a controller and a memory structure to store one or more public keys. The memory structure includes one or more validity registers that respectively correspond to the one or more public keys. The controller has exclusive write access to the validity register. The controller can be configured to perform an authentication of a public key, write an authentication status value to the corresponding validity register based on a result of the authentication, and perform one or more cryptographic operations using the public key that are conditional on the validity register indicating an authenticated status for the public key.

    摘要翻译: 描述了基于公钥有效性寄存器执行加密操作的系统和技术。 所描述的系统包括控制器和用于存储一个或多个公共密钥的存储器结构。 存储器结构包括分别对应于一个或多个公钥的一个或多个有效性寄存器。 控制器具有对有效性寄存器的独占写访问权限。 控制器可以被配置为执行公开密钥的认证,基于认证的结果将认证状态值写入对应的有效性寄存器,并且使用以有效寄存器为条件的公开密钥来执行一个或多个密码操作 指示公钥的认证状态。

    Generating signatures using a secure device
    6.
    发明授权
    Generating signatures using a secure device 有权
    使用安全设备生成签名

    公开(公告)号:US09323950B2

    公开(公告)日:2016-04-26

    申请号:US13553388

    申请日:2012-07-19

    摘要: An integrated circuit device comprises a processor and a secure protection zone with security properties that can be verified by a remote device communicating with the integrated circuit device. The secure protection zone includes a persistent storage that is configured for storing cryptographic keys and data. The secure protection zone also includes instructions that are configured for causing the processor to perform cryptographic operations using the cryptographic keys. In addition, the secure protection zone includes an ephemeral memory that is configured for storing information associated with the cryptographic operations. The instructions are configured for causing the processor to perform the cryptographic operations on the data stored in the persistent storage and the information in the ephemeral memory as part of a secure communication exchange with the remote device.

    摘要翻译: 集成电路设备包括处理器和具有安全属性的安全保护区域,其可以由与集成电路设备通信的远程设备进行验证。 安全保护区包括被配置用于存储加密密钥和数据的持久存储器。 安全保护区还包括配置用于使处理器使用密码密钥执行密码操作的指令。 此外,安全保护区域包括临时存储器,其被配置用于存储与密码操作相关联的信息。 指令被配置为使得处理器对存储在永久存储器中的数据和临时存储器中的信息执行密码操作,作为与远程设备的安全通信交换的一部分。

    CRYPTOGRAPHIC AUTHENTICATION APPARATUS, SYSTEMS AND METHODS
    7.
    发明申请
    CRYPTOGRAPHIC AUTHENTICATION APPARATUS, SYSTEMS AND METHODS 有权
    CRYPTOGRAPHIC认证装置,系统和方法

    公开(公告)号:US20090265411A1

    公开(公告)日:2009-10-22

    申请号:US12105128

    申请日:2008-04-17

    申请人: Kerry Maletsky

    发明人: Kerry Maletsky

    IPC分类号: G06F7/503

    摘要: Apparatus, systems, and methods send an interrogation command from an interrogation and timing apparatus to a timed identification (TID) apparatus. The TID apparatus receives the interrogation command, performs a series of logical operations to calculate a response, and returns the response within a maximum length of time established by the interrogation and timing apparatus. The interrogation and timing apparatus confirms that the length of time between sending the interrogation command and receiving the response is within the maximum length of time and that the response is correct. If so, the TID apparatus is authenticated. Additional embodiments are disclosed and claimed.

    摘要翻译: 设备,系统和方法从询问和定时设备发送询问命令到定时识别(TID)设备。 TID设备接收询问命令,执行一系列逻辑操作来计算响应,并在由询问和定时设备建立的最大时间长度内返回响应。 询问和定时装置确认发送询问命令和接收响应之间的时间长度在最大时间长度内,并且响应是正确的。 如果是,则认证TID设备。 公开并要求保护附加实施例。

    Self powered electronic memory identification tag with dual
communication ports
    8.
    发明授权
    Self powered electronic memory identification tag with dual communication ports 失效
    具有双通信端口的自供电电子存储器识别标签

    公开(公告)号:US6046676A

    公开(公告)日:2000-04-04

    申请号:US971154

    申请日:1997-11-14

    IPC分类号: G06K19/07 G08B13/14

    CPC分类号: G06K19/0701 G06K19/0723

    摘要: A tag for use in identifying and communicating with an electronic device such as a computer is disclosed. The tag is self powered from an RF interrogation signal when the electronic device is not operating. The tag is provided with DC power from the electronic device when it is communicating with the electronic device to which it is attached as a portion of memory of the electronic device.

    摘要翻译: 公开了一种用于识别和诸如计算机之类的电子设备的通信的标签。 当电子设备不工作时,标签由RF询问信号自动供电。 当电子设备与作为电子设备的存储器的一部分连接的电子设备进行通信时,该标签被提供有来自电子设备的DC电力。

    Cryptographic authentication apparatus, systems and methods
    9.
    发明授权
    Cryptographic authentication apparatus, systems and methods 有权
    加密认证设备,系统和方法

    公开(公告)号:US08707037B2

    公开(公告)日:2014-04-22

    申请号:US12105128

    申请日:2008-04-17

    申请人: Kerry Maletsky

    发明人: Kerry Maletsky

    IPC分类号: H04L9/32

    摘要: Apparatus, systems, and methods send an interrogation command from an interrogation and timing apparatus to a timed identification (TID) apparatus. The TID apparatus receives the interrogation command, performs a series of logical operations to calculate a response, and returns the response within a maximum length of time established by the interrogation and timing apparatus. The interrogation and timing apparatus confirms that the length of time between sending the interrogation command and receiving the response is within the maximum length of time and that the response is correct. If so, the TID apparatus is authenticated. Additional embodiments are disclosed and claimed.

    摘要翻译: 设备,系统和方法从询问和定时设备发送询问命令到定时识别(TID)设备。 TID设备接收询问命令,执行一系列逻辑操作来计算响应,并在由询问和定时设备建立的最大时间长度内返回响应。 询问和定时装置确认发送询问命令和接收响应之间的时间长度在最大时间长度内,并且响应是正确的。 如果是,则认证TID设备。 公开并要求保护附加实施例。

    Method and apparatus for deploying and tracking computers
    10.
    发明授权
    Method and apparatus for deploying and tracking computers 失效
    用于部署和跟踪电脑的方法和装置

    公开(公告)号:US06778096B1

    公开(公告)日:2004-08-17

    申请号:US08971386

    申请日:1997-11-17

    IPC分类号: H04Q100

    摘要: A method of asset control and workstation computer deployment that utilizes a dual port electronic memory identification RFID tag to hold serial number and hardware and software configuration profiles as well as user information. The RFID tag is mapped into the workstation computer memory space and can also be read and written by wireless radio frequency signalling. Serial numbers and MAC address is stored on the tag by the manufacturer. User information, workstation profile and software image information is stored onto the tag while the computer is being received for forwarding to the final workstation destination without the need to unpack and power up the computer. The information stored on the tag is used to allow automated system configuration and software downloading to the computer.

    摘要翻译: 一种资产控制和工作站计算机部署的方法,利用双端口电子存储器识别RFID标签来保存序列号和硬件和软件配置简档以及用户信息。 RFID标签被映射到工作站计算机存储器空间中,并且还可以通过无线射频信号读取和写入。 序列号和MAC地址由制造商存储在标签上。 用户信息,工作站配置文件和软件映像信息存储在标签上,同时接收计算机以转发到最终的工作站目的地,而不需要打开和打开计算机的电源。 存储在标签上的信息用于允许自动系统配置和软件下载到计算机。