[go: up one dir, main page]

MX2019008693A - Direccionamiento de un entorno de ejecucion confiable utilizando clave de firma. - Google Patents

Direccionamiento de un entorno de ejecucion confiable utilizando clave de firma.

Info

Publication number
MX2019008693A
MX2019008693A MX2019008693A MX2019008693A MX2019008693A MX 2019008693 A MX2019008693 A MX 2019008693A MX 2019008693 A MX2019008693 A MX 2019008693A MX 2019008693 A MX2019008693 A MX 2019008693A MX 2019008693 A MX2019008693 A MX 2019008693A
Authority
MX
Mexico
Prior art keywords
protected data
requestor
trustlet
key
execution environment
Prior art date
Application number
MX2019008693A
Other languages
English (en)
Inventor
F Novak Mark
Original Assignee
Microsoft Technology Licensing Llc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Technology Licensing Llc filed Critical Microsoft Technology Licensing Llc
Publication of MX2019008693A publication Critical patent/MX2019008693A/es

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2105—Dual mode as a secondary aspect

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Storage Device Security (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

En este documento se describen métodos, sistemas, y dispositivos para entregar datos protegidos a un entorno de ejecución confiable (TrEE) asociado con un solicitante no confiable. El TrEE anidado puede incluir un trustlet que se ejecuta sobre kernel seguro. En un aspecto, una cabeza de protocolo de direccionamiento, u otro intermediario entre un solicitante y un sistema de gestión de claves u otro almacén de datos protegidos, que puede recibir una solicitud de datos protegidos de un solicitante potencialmente no confiable, una declaración de afirmación del kernel seguro, y una declaración desertificación de clave La declaración de certificación de clave puede unir una clave de cifrado pública de trustlet y un ID de trustlet. La cabeza de protocolo de direccionamiento puede recuperar los datos protegidos, y cifrar los datos protegidos con la clave de cifrado pública de trustlet. La cabeza de protocolo de direccionamiento puede después enviar los datos protegidos cifrados al solicitante.
MX2019008693A 2017-01-26 2017-12-20 Direccionamiento de un entorno de ejecucion confiable utilizando clave de firma. MX2019008693A (es)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/417,042 US10419402B2 (en) 2017-01-26 2017-01-26 Addressing a trusted execution environment using signing key
PCT/US2017/067461 WO2018140170A1 (en) 2017-01-26 2017-12-20 Addressing a trusted execution environment using signing key

Publications (1)

Publication Number Publication Date
MX2019008693A true MX2019008693A (es) 2019-09-11

Family

ID=60991591

Family Applications (1)

Application Number Title Priority Date Filing Date
MX2019008693A MX2019008693A (es) 2017-01-26 2017-12-20 Direccionamiento de un entorno de ejecucion confiable utilizando clave de firma.

Country Status (17)

Country Link
US (1) US10419402B2 (es)
EP (1) EP3574443A1 (es)
JP (1) JP2020506611A (es)
KR (1) KR102489790B1 (es)
CN (1) CN110249336B (es)
AU (1) AU2017396531B2 (es)
CA (1) CA3048895C (es)
CL (1) CL2019002026A1 (es)
CO (1) CO2019007875A2 (es)
IL (1) IL268005B (es)
MX (1) MX2019008693A (es)
MY (1) MY201812A (es)
PH (1) PH12019550119A1 (es)
RU (1) RU2756040C2 (es)
SG (1) SG11201905458WA (es)
WO (1) WO2018140170A1 (es)
ZA (1) ZA201903702B (es)

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
BR112015026372B8 (pt) * 2013-04-18 2024-02-15 Facecon Co Ltd Dispositivo de comunicação que reforça a segurança para um arquivo armazenado em uma unidade virtual
US10897360B2 (en) 2017-01-26 2021-01-19 Microsoft Technology Licensing, Llc Addressing a trusted execution environment using clean room provisioning
US10972265B2 (en) * 2017-01-26 2021-04-06 Microsoft Technology Licensing, Llc Addressing a trusted execution environment
US10897459B2 (en) 2017-01-26 2021-01-19 Microsoft Technology Licensing, Llc Addressing a trusted execution environment using encryption key
US10515077B2 (en) * 2017-06-14 2019-12-24 Microsoft Technology Licensing, Llc Execution optimization of database statements involving encrypted data
US10771439B2 (en) * 2017-06-28 2020-09-08 Microsoft Technology Licensing, Llc Shielded networks for virtual machines
CN112292678B (zh) * 2019-01-04 2025-01-14 百度时代网络技术（北京）有限公司 用于验证将要由主机系统的数据处理加速器执行的内核对象的方法与系统
EP3610405B1 (en) * 2019-03-26 2021-07-21 Advanced New Technologies Co., Ltd. Program execution and data proof scheme using multiple key pair signatures
US11640475B1 (en) * 2019-11-26 2023-05-02 Gobeep, Inc. Systems and processes for providing secure client controlled and managed exchange of data between parties
CN116010970A (zh) * 2021-05-20 2023-04-25 浙江网商银行股份有限公司 基于遥感数据的数据处理方法及装置
CN114036527B (zh) * 2021-11-04 2023-01-31 云海链控股股份有限公司 一种代码注入方法、代码运行端、代码注入端及相关设备
CN115065487B (zh) * 2022-08-17 2022-12-09 北京锘崴信息科技有限公司 隐私保护云计算方法、保护金融隐私数据的云计算方法
US20240195635A1 (en) * 2022-12-12 2024-06-13 Intel Corporation Roots of trust in intellectual property (ip) blocks in a system on a chip (soc)
CN117992993B (zh) * 2024-04-07 2024-06-14 蓝象智联(杭州)科技有限公司 基于可信执行环境的数据管控方法和系统

Family Cites Families (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7437771B2 (en) * 2004-04-19 2008-10-14 Woodcock Washburn Llp Rendering protected digital content within a network of computing devices or the like
US8059820B2 (en) * 2007-10-11 2011-11-15 Microsoft Corporation Multi-factor content protection
CN101159556B (zh) * 2007-11-09 2011-01-26 清华大学 基于组密钥服务器的共享加密文件系统中的密钥管理方法
WO2012122994A1 (en) * 2011-03-11 2012-09-20 Kreft Heinz Off-line transfer of electronic tokens between peer-devices
EP2717186A4 (en) * 2011-05-25 2015-05-13 Panasonic Ip Man Co Ltd INFORMATION PROCESSING DEVICE AND INFORMATION PROCESSING METHOD
US9413538B2 (en) * 2011-12-12 2016-08-09 Microsoft Technology Licensing, Llc Cryptographic certification of secure hosted execution environments
EP2820587B1 (de) * 2012-02-28 2020-04-08 Giesecke+Devrient Mobile Security GmbH Verfahren zur computer-zugangskontrolle mittels mobilem endgerät
EP2680487B1 (en) * 2012-06-29 2019-04-10 Orange Secured cloud data storage, distribution and restoration among multiple devices of a user
US9064109B2 (en) * 2012-12-20 2015-06-23 Intel Corporation Privacy enhanced key management for a web service provider using a converged security engine
EP2759955A1 (en) * 2013-01-28 2014-07-30 ST-Ericsson SA Secure backup and restore of protected storage
WO2014142858A1 (en) * 2013-03-14 2014-09-18 Intel Corporation Trusted data processing in the public cloud
EP3036680B1 (en) * 2013-08-21 2018-07-18 Intel Corporation Processing data privately in the cloud
US9633210B2 (en) * 2013-09-13 2017-04-25 Microsoft Technology Licensing, Llc Keying infrastructure
WO2015047285A1 (en) * 2013-09-27 2015-04-02 Intel Corporation Protection scheme for remotely-stored data
EP2887607A1 (en) * 2013-12-23 2015-06-24 Orange Migration of assets of a trusted execution environment
US9652631B2 (en) * 2014-05-05 2017-05-16 Microsoft Technology Licensing, Llc Secure transport of encrypted virtual machines with continuous owner access
GB201408539D0 (en) * 2014-05-14 2014-06-25 Mastercard International Inc Improvements in mobile payment systems
US9775029B2 (en) * 2014-08-22 2017-09-26 Visa International Service Association Embedding cloud-based functionalities in a communication device
US9621547B2 (en) * 2014-12-22 2017-04-11 Mcafee, Inc. Trust establishment between a trusted execution environment and peripheral devices
CN105812332A (zh) * 2014-12-31 2016-07-27 北京握奇智能科技有限公司 数据保护方法
US9722775B2 (en) * 2015-02-27 2017-08-01 Verizon Patent And Licensing Inc. Network services via trusted execution environment
US10073985B2 (en) * 2015-02-27 2018-09-11 Samsung Electronics Co., Ltd. Apparatus and method for trusted execution environment file protection
CN104899506B (zh) * 2015-05-08 2018-01-12 深圳市雪球科技有限公司 基于可信执行环境中虚拟安全元件的安全系统实现方法
WO2017004447A1 (en) * 2015-06-30 2017-01-05 Activevideo Networks, Inc. Remotely managed trusted execution environment for digital-rights management in a distributed network with thin clients
CN105260663B (zh) * 2015-09-15 2017-12-01 中国科学院信息工程研究所 一种基于TrustZone技术的安全存储服务系统及方法
CN109150548B (zh) * 2015-12-01 2021-10-08 神州融安科技（北京）有限公司 一种数字证书签名、验签方法及系统、数字证书系统
CN105978917B (zh) * 2016-07-19 2019-05-10 恒宝股份有限公司 一种用于可信应用安全认证的系统和方法
CN106230584B (zh) * 2016-07-21 2019-09-03 北京可信华泰信息技术有限公司 一种可信平台控制模块的密钥迁移方法

Also Published As

Publication number Publication date
US10419402B2 (en) 2019-09-17
PH12019550119A1 (en) 2020-03-09
KR20190108580A (ko) 2019-09-24
IL268005B (en) 2022-03-01
NZ754540A (en) 2023-08-25
CN110249336A (zh) 2019-09-17
CL2019002026A1 (es) 2019-12-13
RU2019126631A3 (es) 2021-04-08
CO2019007875A2 (es) 2019-07-31
CA3048895C (en) 2024-05-28
AU2017396531A1 (en) 2019-07-04
SG11201905458WA (en) 2019-08-27
CN110249336B (zh) 2023-05-30
AU2017396531B2 (en) 2021-11-25
CA3048895A1 (en) 2018-08-02
IL268005A (en) 2019-09-26
JP2020506611A (ja) 2020-02-27
ZA201903702B (en) 2020-10-28
BR112019013584A2 (pt) 2020-01-07
MY201812A (en) 2024-03-19
US20180212932A1 (en) 2018-07-26
RU2019126631A (ru) 2021-02-26
RU2756040C2 (ru) 2021-09-24
EP3574443A1 (en) 2019-12-04
WO2018140170A1 (en) 2018-08-02
KR102489790B1 (ko) 2023-01-17

Similar Documents

Publication Publication Date Title
PH12019550119A1 (en) Addressing a trusted execution environment using signing key
PH12019550116A1 (en) Addressing a trusted execution environment using encryption key
HK1212524A1 (en) Data security management system
BR112017003018A2 (pt) fornecimento seguro de uma credencial de autenticação
PH12018550176A1 (en) Using hardware based secure isolated region to prevent piracy and cheating on electronic devices
WO2016057086A3 (en) Common modulus rsa key pairs for signature generation and encryption/decryption
WO2019137564A3 (en) Securely executing smart contract operations in a trusted execution environment
AU2018367363A1 (en) Processing data queries in a logically sharded data store
PH12018502196A1 (en) System and methods for validating and performing operations on homomorphically encrypted data
WO2016166612A3 (en) Systems and methods for electronically sharing private documents using pointers
EP4236203A3 (en) Data security using request-supplied keys
WO2015134760A3 (en) Secure hardware for cross-device trusted applications
WO2016130406A3 (en) Protecting sensitive data security
NZ701459A (en) Systems and methods for secure processing with embedded cryptographic unit
PH12018502160A1 (en) Systems and methods for secure storage of user information in a user profile
MY190550A (en) Method and device for processing service request
JP2013516685A5 (es)
WO2009158086A3 (en) Techniques for ensuring authentication and integrity of communications
WO2017023388A3 (en) Secure data management system and method
JP2016512675A5 (es)
EP4429167A3 (en) Encrypting data records and processing encrypted records without exposing plaintext
SG10201907538SA (en) Cloud encryption key broker apparatuses, methods and systems
NZ714230A (en) System and methods for encrypting data
BR112018000325A2 (pt) separação de módulos de software por gerenciamento de chave de criptografia controlado
NZ752240A (en) Secure key management