公开(公告)号：WO2022093455A1

公开(公告)日：2022-05-05

申请号：PCT/US2021/052087

申请日：2021-09-24

Applicant: INTEL CORPORATION

Inventor： SMITH, Ned M. ,  BEN-SHALOM, Omer ,  NAYSHTUT, Alex ,  LAL, Reshma ,  DEWAN, Prashant ,  PAPPACHAN, Pradeep ,  POORNACHANDRAN, Rajesh ,  KUMAR, Gaurav

IPC: G06F21/71 ,  G06F9/38 ,  H04L9/32 ,  H04L9/08 ,  G06T1/20

Abstract: Methods, apparatuses and system provide for technology that interleaves a plurality of verification commands with a plurality of copy commands in a command buffer, wherein each copy command includes a message authentication code (MAC) derived from a master session key, wherein one or more of the plurality of verification commands corresponds to a copy command in the plurality of copy commands, and wherein a verification command at an end of the command buffer corresponds to contents of the command buffer. The technology may also add a MAC generation command to the command buffer, wherein the MAC generation command references an address of a compute result.

公开(公告)号：WO2018165981A1

公开(公告)日：2018-09-20

申请号：PCT/CN2017/077113

申请日：2017-03-17

Applicant: INTEL CORPORATION ,  YAO, Jiewen ,  ZIMMER, Vincent J. ,  POORNACHANDRAN, Rajesh

Inventor： YAO, Jiewen ,  ZIMMER, Vincent J. ,  POORNACHANDRAN, Rajesh

IPC: H04L29/06

CPC classification number: H04L67/12 ,  B64C39/024 ,  B64C2201/141 ,  G08G5/0056 ,  G08G5/0069 ,  H04L69/40

Abstract: Technologies for control of an unmanned aerial vehicle (UAV) include a UAV including a computing device having a processor and a trusted execution environment (TEE). The TEE may be executed by a converged security and manageability engine (CSME) of the computing device. The TEE determines whether to take control of the UAV from an operating system, for example in response to a watchdog reset event. In response to taking control, the TEE controls navigation of the UAV and the operating system is booted. The TEE may control the UAV based on a navigation plan from the operating system or a default control policy. The operating system sends a message requesting control of the UAV in response to booting, and then resumes control of the UAV. The operating system may control navigation of the UAV based on abstracted sensor data received from the TEE. Other embodiments are described and claimed.

公开(公告)号：WO2018136146A1

公开(公告)日：2018-07-26

申请号：PCT/US2017/062684

申请日：2017-11-21

Applicant: INTEL CORPORATION

Inventor： POORNACHANDRAN, Rajesh ,  ZIMMER, Vincent ,  SMITH, Ned ,  CHANDRAMOHAN, Nadhiya

IPC: G06F21/50

Abstract: The present disclosure provides for MRC training. MRC training can include providing a hot add notification to a UEFI BIOS FW, receiving, at an MRC agent of the FIMC and from the UEFI BIOS FW, the MRC training request, and performing, at the MRC agent in response to the MRC training request, an MRC training independent of an SMM associated with the apparatus.

公开(公告)号：WO2018125989A3

公开(公告)日：2018-07-05

申请号：PCT/US2017/068683

申请日：2017-12-28

Applicant: INTEL CORPORATION

Inventor： SMITH, Ned M. ,  NOLAN, Keith ,  KELLY, Mark ,  BURNS, Gregory ,  NOLAN, Michael ,  BRADY, John ,  NI SCANAILL, Cliodhna ,  CAHILL, Niall ,  MACIEIRA, Thiago J. ,  ZHANG, Zheng ,  ANDERSON, Glen J. ,  MUTTIK, Igor ,  CARBONI, Davide ,  RYAN, Eugene ,  DAVIES, Richard ,  KOHLENBERG, Toby M. ,  KONING, Maarten ,  WENUS, Jakub ,  POORNACHANDRAN, Rajesh ,  DELEEUW, William C. ,  CHUKKA, Ravikiran

IPC: H04W4/70 ,  H04W4/08 ,  H04L29/08 ,  H04L29/12 ,  H04L9/32 ,  H04W84/18

Abstract: The Internet can be configured to provide communications to a large number of Internet-of-Things (IoT) devices. Devices can be designed to address the need for network layers, from central servers, through gateways, down to edge devices, to grow unhindered, to discover and make accessible connected resources, and to support the ability to hide and compartmentalize connected resources. Network protocols can be part of the fabric supporting human accessible services that operate regardless of location, time, or space. Innovations can include service delivery and associated infrastructure, such as hardware and software. Services may be provided in accordance with specified Quality of Service (QoS) terms. The use of IoT devices and networks can be included in a heterogeneous network of connectivity including wired and wireless technologies.

公开(公告)号：WO2018125484A1

公开(公告)日：2018-07-05

申请号：PCT/US2017/063645

申请日：2017-11-29

Applicant: INTEL CORPORATION

Inventor： TATOURIAN, Igor ,  WOUHAYBI, Rita H. ,  POORNACHANDRAN, Rajesh

IPC: H04L29/08 ,  G06K17/00

Abstract: In some embodiments, the disclosed subject matter involves a system and method to identify objects in an environment or scene to assist in locating objects and individuals. In at least one embodiment, users register with a service to help locate and/or track objects and individuals. The service may provide recommendations on how to locate, reach, or avoid the target object or individual. Identifying and tracking an object may be used to locate an individual when the object is correlated with the individual. Individuals may register with the service for purposes of user authentication and for defining privacy authorizations for data related to the identifying the user and user's location to other parties. The service may execute in a trusted execution environment to help preserve privacy. Embodiments may be used for games, geo-caching, finding groups and individuals for meeting up, avoiding objects or individuals, etc. Other embodiments are described and claimed.

公开(公告)号：WO2017112266A1

公开(公告)日：2017-06-29

申请号：PCT/US2016/063379

申请日：2016-11-22

Applicant: INTEL CORPORATION

Inventor： SUN, Mingqiu ,  ZIMMER, Vincent J. ,  POORNACHANDRAN, Rajesh ,  SELVARAJE, Gopinatth

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F9/5038 ,  G06F2009/4557 ,  G06F2009/45575 ,  G06F2009/45587

Abstract: A system on a chip (SoC) may comprise at least one processor with at least one core and a storage device comprising a first system, virtual machine configured to be executed on the at least one processor. The storage device may comprise a second system virtual machine configured to he executed by the at least one processor. The second system virtual machine may include at least one process virtual, machine; a modem, configured as one of the at least one process virtual machine: and a real-time operating system (RTOS) to schedule execution of the at least one process virtual machine on the at least one processor.

Abstract translation: 片上系统（SoC）可以包括具有至少一个核心的至少一个处理器和包括第一系统的存储设备，所述第一系统被配置为在所述至少一个处理器上执行。 存储设备可以包括被配置为由至少一个处理器执行的第二系统虚拟机。 第二系统虚拟机可以包括至少一个过程虚拟机; 调制解调器，被配置为所述至少一个过程虚拟机中的一个：以及实时操作系统（RTOS），用于调度所述至少一个过程虚拟机在所述至少一个处理器上的执行。

公开(公告)号：WO2016153694A1

公开(公告)日：2016-09-29

申请号：PCT/US2016/019285

申请日：2016-02-24

Applicant: INTEL CORPORATION

Inventor： SUN, Mingqiu ,  ZIMMER, Vincent J. ,  POORNACHANDRAN, Rajesh ,  SELVARAJE, Gopinatth

IPC: H04L9/32 ,  H04L12/24 ,  G06Q20/00

CPC classification number: G06Q20/204 ,  G06F21/606 ,  G06Q20/202 ,  G06Q20/4097 ,  H04L63/04 ,  H04L63/0428 ,  H04L63/101

Abstract: A point-of-sale device ("POS") may include a secure transaction tunnel generator ("STG"). The STG may generate secure tunnels between peripherals attached to the POS and remote network resources. The secure tunnel may be generated using a trusted execution environment ("TEE") of the POS. The STG may be alerted to the need to generate the secure tunnel based on an alert from the peripheral. The STG may execute under a protected environment and generate two ends of a secure transaction tunnel using the TEE. The STG may also check the peripheral against whitelists and/or blacklists to determine whether the peripheral is allowed or not disallowed to participate in secure transactions. By generating the secure tunnel, the STG may facilitate performance of transactions in such a way that sensitive information is not available to unsecured processes in the POS. Other embodiments may be described and/or claimed.

Abstract translation: 销售点设备（“POS”）可以包括安全事务隧道发生器（“STG”）。 STG可以在连接到POS的外围设备和远程网络资源之间生成安全隧道。 可以使用POS的可信执行环境（“TEE”）生成安全隧道。 可以基于来自外围设备的警报，警告STG需要生成安全通道。 STG可以在受保护的环境下执行，并使用TEE生成安全事务隧道的两端。 STG还可以检查外设是否有白名单和/或黑名单，以确定外设是否被允许或不允许参与安全事务。 通过生成安全隧道，STG可以以敏感信息不可用于POS中的不安全进程的方式促进事务的执行。 可以描述和/或要求保护其他实施例。

公开(公告)号：WO2015199823A1

公开(公告)日：2015-12-30

申请号：PCT/US2015/029978

申请日：2015-05-08

Applicant: INTEL CORPORATION

Inventor： DADU, Saurabh ,  POORNACHANDRAN, Rajesh ,  CHUKKA, Ravikiran ,  MISHRA, Ashok K.

IPC: G06F15/16 ,  H04W88/02 ,  H04W92/18

CPC classification number: H04L67/06 ,  G06F3/0482 ,  G06F3/04842 ,  G06F3/1454 ,  G06F17/30076 ,  G09G2370/025 ,  G09G2370/16 ,  H04L67/303 ,  H04W4/80

Abstract: Embodiments described herein relate generally to the transmission of a request for a file from a first computing device to a second computing device. The first computing device may present an image having a representation of a file to a user and detect a selection of a location on the image at which the representation of the file is disposed. The first computing device, in turn, may transmit the image and a description of the selection to the second computing device. Based on the received image and description of the selection, the second computing device may identify the file corresponding to the selected location on the image. The second computing device may adapt, or cause to be adapted, the identified file. The second computing device may then transmit the identified file (or the adapted version) to the first computing device. Other embodiments may be described and/or claimed.

Abstract translation: 本文所描述的实施例一般涉及将文件从第一计算设备传送到第二计算设备。 第一计算设备可以将具有文件表示的图像呈现给用户，并且检测对图像上的文件的表示进行设置的位置的选择。 第一计算设备又可以将图像和选择的描述传送到第二计算设备。 基于所接收的图像和选择的描述，第二计算设备可以识别与图像上的所选位置相对应的文件。 第二计算设备可以适应或引起适配识别的文件。 然后，第二计算设备可以将所识别的文件（或适配版本）发送到第一计算设备。 可以描述和/或要求保护其他实施例。

公开(公告)号：WO2014142960A1

公开(公告)日：2014-09-18

申请号：PCT/US2013/032031

申请日：2013-03-15

Applicant: INTEL CORPORATION

Inventor： DADU, Saurabh ,  PRAKASH, Gyan ,  POORNACHANDRAN, Rajesh ,  SATAPATHY, Jiphun ,  ADRANGI, Farid

IPC: G06F21/44

CPC classification number: G06F21/575 ,  G06F21/31 ,  G06F21/34 ,  G06F21/35 ,  G06F21/70 ,  G06F21/88 ,  G06F2221/032

Abstract: Various systems and methods for locking computing devices are described herein. In an example, a portable device comprises an electro-mechanical lock; and a firmware module coupled to the electro-mechanical lock, the firmware module configured to: receive an unlock code; validate the unlock code; and unlock the electro-mechanical lock when the unlock code is validated. In another example, device for managing BIOS authentication, the device comprising an NFC module, the NFC module comprising an NFC antenna; and a firmware module, wherein the firmware module is configured to: receive an unlock code from an NFC device via the NFC antenna; validate the unlock code; and unlock a BIOS of the device when the unlock code is validated.

Abstract translation: 这里描述了用于锁定计算设备的各种系统和方法。 在一个示例中，便携式设备包括机电锁; 以及耦合到所述机电锁的固件模块，所述固件模块被配置为：接收解锁码; 验证解锁码; 并且当解锁码被验证时解锁机电锁。 在另一示例中，用于管理BIOS验证的设备，所述设备包括NFC模块，所述NFC模块包括NFC天线; 固件模块，其中所述固件模块被配置为：经由所述NFC天线从NFC设备接收解锁码; 验证解锁码; 并在验证解锁码时解锁设备的BIOS。

公开(公告)号：WO2014105142A1

公开(公告)日：2014-07-03

申请号：PCT/US2013/046570

申请日：2013-06-19

Applicant: INTEL CORPORATION ,  BODIO, James F. ,  PRAKASH, Gyan ,  POORNACHANDRAN, Rajesh ,  DADU, Saurabh

Inventor： BODIO, James F. ,  PRAKASH, Gyan ,  POORNACHANDRAN, Rajesh ,  DADU, Saurabh

IPC: G06F1/32 ,  G06F13/00

CPC classification number: G06F1/3203 ,  G06F1/3243 ,  H04L67/30 ,  H04W52/0225 ,  H04W52/0251 ,  H04W52/028 ,  Y02D10/152 ,  Y02D70/1222 ,  Y02D70/1262 ,  Y02D70/142

Abstract: Methods and apparatus relating to communication link and network connectivity management in low power mode are described. In one embodiment, logic manages one or more external communication network links (also referred as "links") in response to a determination that a processor has entered a low power consumption state and based on policy information. The logic also blocks/intercepts one or more signals, corresponding to management of the one or more links, that are directed to the processor to allow the processor to stay in the low power consumption. Other embodiments are also claimed and disclosed.

Abstract translation: 描述了与低功率模式下的通信链路和网络连接管理相关的方法和装置。 在一个实施例中，响应于处理器已经进入低功耗状态并且基于策略信息的确定，逻辑管理一个或多个外部通信网络链路（也称为“链路”）。 逻辑还阻止/拦截对应于一个或多个链路的管理的一个或多个信号，其被引导到处理器以允许处理器保持低功耗。 还要求和公开其它实施例。