DEVICE IDENTIFIER COMPOSITION ENGINE 3-LAYER ARCHITECTURE

    公开(公告)号:US20230396449A1

    公开(公告)日:2023-12-07

    申请号:US17810952

    申请日:2022-07-06

    CPC classification number: H04L9/3265 H04L9/0825

    Abstract: Implementations described herein relate to a device identifier composition engine (DICE) 3-layer architecture. In some implementations, a device may include a secure computing environment including a hardware root of trust (HRoT) DICE component. The secure computing environment may include a DICE layer 0 component configured to derive a DICE identity key. The secure computing environment may include a DICE layer 1 component configured to derive a DICE alias key based on the DICE identity key. The secure computing environment may include a controller configured to receive an update to firmware of a component. The controller may be configured to update the firmware of the component based on receiving the update. The controller may be configured to update one or more keys of the component or one or more keys of one or more components above the component in a layer stack.

    IMMUTABLE CERTIFICATE FOR DEVICE IDENTIFIER COMPOSITION ENGINE

    公开(公告)号:US20240184929A1

    公开(公告)日:2024-06-06

    申请号:US18489625

    申请日:2023-10-18

    CPC classification number: G06F21/73 G06F21/602 G06F21/64

    Abstract: Implementations described herein relate to an immutable certificate for a device identifier composition engine (DICE). In some implementations, a device may include a secure computing environment. The secure component environment may include a hardware root of trust (HRoT) DICE component, a DICE layer 0 (L0) component configured to derive a DICE identity key, wherein the DICE L0 component is above the HRoT DICE component in a layer stack, a DICE layer 1 (L1) component configured to derive a DICE alias key based on the DICE identity key, wherein the DICE L1 component is above the DICE L0 component in the layer stack, wherein the DICE L1 component and the DICE L0 component are implemented as mutable code, and a controller. The controller may be configured to generate a set of certificates based on a compound device identifier (CDI).

    PREVENTING PROFILED SIDE CHANNEL ATTACKS
    4.
    发明公开

    公开(公告)号:US20240169063A1

    公开(公告)日:2024-05-23

    申请号:US18511425

    申请日:2023-11-16

    CPC classification number: G06F21/566 G06F2221/034

    Abstract: Implementations described herein relate to preventing profiled side channel attacks. A host device may obtain a first profiling configuration that is based on a plurality of keys and one or more characteristics of a first memory device and may obtain a second profiling configuration that is based on the plurality of keys and one or more characteristics of a second memory device. The host device may generate a model based on the first profiling configuration and the second profiling configuration. The host device may initiate or perform a profiled side channel attach using the model.

    CLASSIFICATION AND MITIGATION OF COMPUTE EXPRESS LINK SECURITY THREATS

    公开(公告)号:US20230394140A1

    公开(公告)日:2023-12-07

    申请号:US17811770

    申请日:2022-07-11

    CPC classification number: G06F21/554 G06F2221/034

    Abstract: In some implementations, a system includes a set of servers configured to establish a set of virtual machines to provide a computing environment; a set of compute express link (CXL) interface components configured to communicate with the set of servers via a set of CXL interconnects; and a controller configured to at least one of: encrypt protocol data against a CXL interposer security threat associated with the set of CXL interconnects or a malicious extension security threat, provide a secure handshake verification of an identity of the set of CXL interface components, enforce a chain of trust rooted in hardware of the set of CXL interface components; restrict access to an area of memory of the set of CXL interface components that stores security data for verified or secured processes; or perform a security check and set up a set of security features of the set of CXL interface components.

Patent Agency Ranking