公开(公告)号：WO2014196966A1

公开(公告)日：2014-12-11

申请号：PCT/US2013/044158

申请日：2013-06-04

Applicant: INTEL CORPORATION ,  LAL, Reshma ,  MARTIN, Jason ,  SHELLER, Micah J. ,  AMIRFATHI, Michael M. ,  HELDT-SHELLER, Nathan ,  PAPPACHAN, Pradeep M.

Inventor： LAL, Reshma ,  MARTIN, Jason ,  SHELLER, Micah J. ,  AMIRFATHI, Michael M. ,  HELDT-SHELLER, Nathan ,  PAPPACHAN, Pradeep M.

IPC: G06F21/62

CPC classification number: H04N21/64715 ,  G06F21/10 ,  G06F21/72 ,  H04L9/0816 ,  H04L2209/24

Abstract: Technologies for hardening the security of digital information on a client device are described. In some embodiments, the client device includes a secure processing environment such as a secure enclave, which may be used to protect digital information on a client platform. The secure environment(s) may also protect assets which may be used to access the digital information. Using the secure processing environment(s), the described technologies may protect digital information as it is provided to, stored on, accessed on, and/or processed for display by a client device, even if the client device may be infested with malware or subject to attack by another entity.

Abstract translation: 描述了在客户端设备上加强数字信息安全性的技术。 在一些实施例中，客户端设备包括诸如安全飞地之类的安全处理环境，其可以用于保护客户端平台上的数字信息。 安全环境还可以保护可能用于访问数字信息的资产。 使用安全处理环境，所描述的技术可以保护数字信息，因为它被提供给存储，访问和/或处理以供客户端设备显示，即使客户端设备可能被恶意软件或 受另一实体的攻击。

公开(公告)号：WO2014196964A1

公开(公告)日：2014-12-11

申请号：PCT/US2013/044140

申请日：2013-06-04

Applicant: INTEL CORPORATION ,  PAPPACHAN, Pradeep M. ,  LAL, Reshma

Inventor： PAPPACHAN, Pradeep M. ,  LAL, Reshma

IPC: G06F21/30

CPC classification number: H04L9/14 ,  H04L2209/60

Abstract: The present disclosure is directed to application integrity protection via secure interaction and processing. For example, interaction with a user interface in a device may result in input information being generated. Following encryption, the input information may be conveyed to an application executing in a secure processing environment. The encrypted input information may be received, decrypted and processed by the application. An example application may include a secure controller component, a secure model component and a secure view component. The secure controller component may, for example, provide change instructions to the secure model component based on the decrypted input information. The secure model component may then, if necessary, provide a change notification to the secure view component based on the change instructions. The secure view component may then generate output information, which may be encrypted prior to being provided to the user interface for decryption, processing and presentation.

Abstract translation: 本公开涉及通过安全交互和处理的应用完整性保护。 例如，与设备中的用户界面的交互可能导致生成输入信息。 在加密之后，可以将输入信息传送到在安全处理环境中执行的应用。 加密的输入信息可以被应用程序接收，解密和处理。 示例应用可以包括安全控制器组件，安全模型组件和安全视图组件。 例如，安全控制器组件可以基于解密的输入信息向安全模型组件提供改变指令。 然后，如果需要，安全模型组件可以基于改变指令向安全视图组件提供改变通知。 然后，安全视图组件可以生成输出信息，其可以在被提供给用户接口以进行解密，处理和呈现之前被加密。

公开(公告)号：WO2014196963A1

公开(公告)日：2014-12-11

申请号：PCT/US2013/044112

申请日：2013-06-04

Applicant: INTEL CORPORATION ,  LAL, Reshma ,  ZMUDZINSKI, Krystof, C. ,  PAPPACHAN, Pradeep, M. ,  SHELLER, Micah, J.

Inventor： LAL, Reshma ,  ZMUDZINSKI, Krystof, C. ,  PAPPACHAN, Pradeep, M. ,  SHELLER, Micah, J.

IPC: H04L9/00

CPC classification number: H04L63/0428 ,  H04L9/14 ,  H04L9/3223 ,  H04L63/062 ,  H04L63/08 ,  H04L2209/60

Abstract: The present disclosure is directed to an end-to-end secure communication system wherein, in addition to encrypting transmissions between clients, communication-related operations occurring within each client may also be secured. Each client may comprise a secure processing environment to process encrypted communication information received from other clients and locally-captured media information for transmission to other clients. The secure processing environment may include resources to decrypt received encrypted communication information and to process the communication information into media information for presentation by the client. The secure processing environment may also operate in reverse to provide locally recorded audio, image, video, etc. to other clients. Encryption protocols may be employed at various stages of information processing in the client to help ensure that information being transferred between the processing resources cannot be read, copied, altered, etc. In one example implementation, a server may manage interaction between clients, provision encryption keys, etc.

Abstract translation: 本公开涉及一种端到端安全通信系统，其中除了加密客户端之间的传输之外，还可以确保在每个客户端内发生的与通信相关的操作。 每个客户端可以包括用于处理从其他客户端接收的加密通信信息和本地捕获的媒体信息以便传输到其他客户端的安全处理环境。 安全处理环境可以包括用于解密所接收的加密通信信息并将通信信息处理成媒体信息以供客户呈现的资源。 安全处理环境也可以相反地操作，以向其他客户端提供本地记录的音频，图像，视频等。 可以在客户端的信息处理的各个阶段采用加密协议，以帮助确保在处理资源之间传递的信息不能被读取，复制，改变等。在一个示例实现中，服务器可以管理客户端之间的交互，提供加密 钥匙等