Methods and apparatuses for recovering usage of trusted platform module
    5.
    发明授权
    Methods and apparatuses for recovering usage of trusted platform module 有权
    恢复信任平台模块使用的方法和装置

    公开(公告)号:US08812828B2

    公开(公告)日:2014-08-19

    申请号:US12947218

    申请日:2010-11-16

    摘要: Methods and systems to perform platform security in conjunction with hardware-base root of trust logic are presented. In one embodiment, a method includes determining whether a status from an authenticated code module is indicative of an error or not. The method further includes determining whether the hardware-based root of trust logic is enabled based on content in a non-volatile memory location. If the hardware-based root of trust is enabled and the status is indicative of an error, the method further includes writing to the non-volatile memory location to disable hardware-based root of trust logic during a next boot sequence. In one embodiment, a platform initializes and uses the trusted platform module in conjunction with the hardware-based root of trust logic or with a platform-based root of trust logic.

    摘要翻译: 提出了结合信任逻辑的硬件根本来执行平台安全性的方法和系统。 在一个实施例中,一种方法包括确定来自认证代码模块的状态是否指示错误。 该方法还包括基于非易失性存储器位置中的内容来确定信任逻辑的基于硬件的根是否被启用。 如果启用了基于硬件的信任根,并且状态指示了错误,则该方法还包括在下一个引导序列期间写入非易失性存储器位置以禁用基于硬件的信任逻辑根。 在一个实施例中,平台与基于硬件的信任逻辑根或基于平台的信任逻辑逻辑基础一起初始化并使用可信平台模块。

    METHODS AND APPARATUSES FOR RECOVERING USAGE OF TRUSTED PLATFORM MODULE
    6.
    发明申请
    METHODS AND APPARATUSES FOR RECOVERING USAGE OF TRUSTED PLATFORM MODULE 有权
    恢复使用信号平台模块的方法和设备

    公开(公告)号:US20120124356A1

    公开(公告)日:2012-05-17

    申请号:US12947218

    申请日:2010-11-16

    IPC分类号: G06F9/24

    摘要: Methods and systems to perform platform security in conjunction with hardware-base root of trust logic are presented. In one embodiment, a method includes determining whether a status from an authenticated code module is indicative of an error or not. The method further includes determining whether the hardware-based root of trust logic is enabled based on content in a non-volatile memory location. If the hardware-based root of trust is enabled and the status is indicative of an error, the method further includes writing to the non-volatile memory location to disable hardware-based root of trust logic during a next boot sequence. In one embodiment, a platform initializes and uses the trusted platform module in conjunction with the hardware-based root of trust logic or with a platform-based root of trust logic.

    摘要翻译: 提出了结合信任逻辑的硬件根本来执行平台安全性的方法和系统。 在一个实施例中,一种方法包括确定来自认证代码模块的状态是否指示错误。 该方法还包括基于非易失性存储器位置中的内容来确定信任逻辑的基于硬件的根是否被启用。 如果启用了基于硬件的信任根,并且状态指示了错误,则该方法还包括在下一个引导序列期间写入非易失性存储器位置以禁用基于硬件的信任逻辑根。 在一个实施例中,平台与基于硬件的信任逻辑根或基于平台的信任逻辑逻辑基础一起初始化并使用可信平台模块。

    System and method for limiting exposure of hardware failure information for a secured execution environment
    10.
    发明授权
    System and method for limiting exposure of hardware failure information for a secured execution environment 有权
    用于限制安全执行环境的硬件故障信息暴露的系统和方法

    公开(公告)号:US07934076B2

    公开(公告)日:2011-04-26

    申请号:US10956322

    申请日:2004-09-30

    IPC分类号: G06F9/00

    CPC分类号: G06F21/74 G06F2221/2101

    摘要: A method and apparatus for limiting the exposure of hardware failure information is described. In one embodiment, an error reporting system of a processor may log various status and error address data into registers that retain their contents through a warm reset event. But the error reporting system of the processor may then determine whether the processor is operating in a trusted or secure mode. If not, then the processor's architectural state variables may also be logged into registers. But if the processor is operating in a trusted or secure mode, then the logging of the architectural state variables may be inhibited, or flagged as invalid.

    摘要翻译: 描述了用于限制硬件故障信息的暴露的方法和装置。 在一个实施例中,处理器的错误报告系统可以将各种状态和错误地址数据记录到通过热复位事件保留其内容的寄存器中。 但是处理器的错误报告系统然后可以确定处理器是否以可信任或安全模式操作。 如果没有,则处理器的体系结构状态变量也可能被记录到寄存器中。 但是,如果处理器以可信任或安全模式运行,则可能会禁止对架构状态变量的日志记录或标记为无效。