Method for backing up and restoring an encryption key
    2.
    发明授权
    Method for backing up and restoring an encryption key 有权
    备份和恢复加密密钥的方法

    公开(公告)号:US08055911B2

    公开(公告)日:2011-11-08

    申请号:US11886344

    申请日:2005-12-07

    CPC分类号: H04L9/0894

    摘要: The present invention allows creation of a backup key for backing up an encryption key inside a source trusted chip, encrypting the encryption key with the backup key, exporting the encrypted encryption key from the source trusted chip and storing it in a storage device, encrypting the backup key for transmission to a trusted third party. If the encrypted encryption key needs to be restored inside a destination trusted chip, the backup key and the encryption key encrypted with the backup key are imported to the destination trusted chip, where the encrypted encryption key is decrypted with the backup key inside the destination trusted chip to obtain the encryption key of the source trusted chip.

    摘要翻译: 本发明允许创建用于备份源可信芯片内的加密密钥的备份密钥,用备份密钥加密加密密钥,从源可信芯片导出加密的加密密钥并将其存储在存储设备中,加密 用于传输到可信第三方的备份密钥。 如果需要在目的地信任芯片内恢复加密的加密密钥,则备份密钥和用备份密钥加密的加密密钥被导入到目的地信任芯片,其中加密的加密密钥用目的地信任的备份密钥解密 芯片获得源信赖芯片的加密密钥。

    METHOD FOR ESTABLISHING A TRUSTED RUNNING ENVIRONMENT IN THE COMPUTER
    3.
    发明申请
    METHOD FOR ESTABLISHING A TRUSTED RUNNING ENVIRONMENT IN THE COMPUTER 审中-公开
    在计算机中建立有害运行环境的方法

    公开(公告)号:US20090288161A1

    公开(公告)日:2009-11-19

    申请号:US11720640

    申请日:2005-07-11

    IPC分类号: G06F11/00

    CPC分类号: G06F21/52 G06F21/57

    摘要: The present invention discloses a method for establishing a trusted running environment in a computer. A trusted file authentication module and a trusted process memory code authentication module are preset in operation system (OS) of the computer and a secured OS is loaded and run. The trusted file authentication module intercepts all file operation behaviors, checks whether current file to be operated is a trusted file or not, and processes the file according to its operation type if it is trusted, otherwise processes the file after its eligibility is verified; the trusted process memory code authentication module authenticates on timing whether the running state and the integrality for all process code are normal or not; if any process is abnormal, giving an alarm, saving field data run by the process and closing down the process; otherwise continuing to run normally. With this invention, the security for the running environment in the computer can be ensured whether the attack from known or unknown virus exists or not, and this facilitates application and reduces implementation cost.

    摘要翻译: 本发明公开了一种在计算机中建立受信任运行环境的方法。 在计算机的操作系统(OS)中预设了可信文件认证模块和可信过程存储器代码认证模块,并且加载并运行安全操作系统。 可信文件认证模块拦截所有文件操作行为,检查当前操作的文件是否为可信文件,如果文件信任,则根据操作类型处理该文件,否则在验证文件资格后处理文件; 信任过程存储器代码认证模块根据定时验证所有处理代码的运行状态和完整性是否正常; 如果任何进程异常,发出报警,保存进程运行的现场数据并关闭进程; 否则继续正常运行。 利用本发明,可以确保计算机中的运行环境的安全性是否存在来自已知或未知病毒的攻击,并且这有助于应用并降低实施成本。

    Method for Backing Up and Restoring an Encryption Key
    4.
    发明申请
    Method for Backing Up and Restoring an Encryption Key 有权
    备份和恢复加密密钥的方法

    公开(公告)号:US20080192940A1

    公开(公告)日:2008-08-14

    申请号:US11886344

    申请日:2005-12-07

    IPC分类号: H04L9/00

    CPC分类号: H04L9/0894

    摘要: The present invention allows creation of a backup key for backing up an encryption key inside a source trusted chip, encrypting the encryption key with the backup key, exporting the encrypted encryption key from the source trusted chip and storing it in a storage device, encrypting the backup key for transmission to a trusted third party. If the encrypted encryption key needs to be restored inside a destination trusted chip, the backup key and the encryption key encrypted with the backup key are imported to the destination trusted chip, where the encrypted encryption key is decrypted with the backup key inside the destination trusted chip to obtain the encryption key of the source trusted chip.

    摘要翻译: 本发明允许创建用于备份源可信芯片内的加密密钥的备份密钥,用备份密钥加密加密密钥,从源可信芯片导出加密的加密密钥并将其存储在存储设备中,加密 用于传输到可信第三方的备份密钥。 如果需要在目的地信任芯片内恢复加密的加密密钥,则备份密钥和用备份密钥加密的加密密钥被导入到目的地信任芯片,其中加密的加密密钥用目的地信任的备份密钥解密 芯片获得源信赖芯片的加密密钥。