BR112021026146A2 - Orquestração de chave criptográfica entre destinatários de confiança em um cluster de múltiplos nós - Google Patents
Orquestração de chave criptográfica entre destinatários de confiança em um cluster de múltiplos nósInfo
- Publication number
- BR112021026146A2 BR112021026146A2 BR112021026146A BR112021026146A BR112021026146A2 BR 112021026146 A2 BR112021026146 A2 BR 112021026146A2 BR 112021026146 A BR112021026146 A BR 112021026146A BR 112021026146 A BR112021026146 A BR 112021026146A BR 112021026146 A2 BR112021026146 A2 BR 112021026146A2
- Authority
- BR
- Brazil
- Prior art keywords
- worker
- node
- cryptographic key
- node cluster
- key orchestration
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
- G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0894—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- Signal Processing (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Mathematical Physics (AREA)
- Storage Device Security (AREA)
- Mobile Radio Communication Systems (AREA)
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US16/449,904 US11044080B2 (en) | 2019-06-24 | 2019-06-24 | Cryptographic key orchestration between trusted containers in a multi-node cluster |
| PCT/EP2020/066133 WO2020260026A1 (en) | 2019-06-24 | 2020-06-10 | Cryptographic key orchestration between trusted containers in a multi-node cluster |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| BR112021026146A2 true BR112021026146A2 (pt) | 2022-02-08 |
Family
ID=71094329
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| BR112021026146A BR112021026146A2 (pt) | 2019-06-24 | 2020-06-10 | Orquestração de chave criptográfica entre destinatários de confiança em um cluster de múltiplos nós |
Country Status (12)
| Country | Link |
|---|---|
| US (1) | US11044080B2 (cg-RX-API-DMAC7.html) |
| EP (1) | EP3987712B1 (cg-RX-API-DMAC7.html) |
| JP (1) | JP7486530B2 (cg-RX-API-DMAC7.html) |
| KR (1) | KR102726547B1 (cg-RX-API-DMAC7.html) |
| CN (1) | CN113826352A (cg-RX-API-DMAC7.html) |
| AU (1) | AU2020305390B2 (cg-RX-API-DMAC7.html) |
| BR (1) | BR112021026146A2 (cg-RX-API-DMAC7.html) |
| CA (1) | CA3143383A1 (cg-RX-API-DMAC7.html) |
| IL (1) | IL288689B2 (cg-RX-API-DMAC7.html) |
| MX (1) | MX2021015223A (cg-RX-API-DMAC7.html) |
| SG (1) | SG11202110433SA (cg-RX-API-DMAC7.html) |
| WO (1) | WO2020260026A1 (cg-RX-API-DMAC7.html) |
Families Citing this family (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2021056069A1 (en) * | 2019-09-25 | 2021-04-01 | Commonwealth Scientific And Industrial Research Organisation | Cryptographic services for browser applications |
| US11354151B2 (en) * | 2020-02-12 | 2022-06-07 | International Business Machines Corporation | Hardware memory encryption and protection for containers |
| US11494219B2 (en) * | 2020-02-26 | 2022-11-08 | Red Hat, Inc. | Encryption and remote attestation of containers |
| US20240022423A1 (en) * | 2021-03-12 | 2024-01-18 | Meta Platforms, Inc. | Processing private information in a distributed enclave framework |
| US11995197B2 (en) * | 2021-07-27 | 2024-05-28 | International Business Machines Corporation | Sensitive data encryption |
| WO2023038817A1 (en) * | 2021-09-08 | 2023-03-16 | Thales Dis Cpl Usa, Inc. | Extension of functionality to filesystems in container orchestration systems |
| US12041164B2 (en) | 2021-09-10 | 2024-07-16 | International Business Machines Corporation | Encryption key hybrid deployment management |
| US12316765B2 (en) * | 2023-05-10 | 2025-05-27 | Google Llc | Untrusted multi-party compute system |
| JPWO2024252681A1 (cg-RX-API-DMAC7.html) * | 2023-06-09 | 2024-12-12 | ||
| US20250062898A1 (en) * | 2023-08-14 | 2025-02-20 | Ally Financial Inc. | Techniques for secret synchronization and management across multiple clusters |
| US12602502B2 (en) * | 2023-10-13 | 2026-04-14 | Privafy Inc | System and method for providing trustworthy access enforcement to microservice container images on orchestration platforms |
| US12587838B2 (en) | 2023-10-19 | 2026-03-24 | International Business Machines Corporation | Encrypted end-to-end messaging using near-field communication (NFC) tags |
Family Cites Families (22)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7421741B2 (en) | 2003-10-20 | 2008-09-02 | Phillips Ii Eugene B | Securing digital content system and method |
| KR100904549B1 (ko) * | 2007-10-22 | 2009-06-25 | 성균관대학교산학협력단 | 이동 에이전트에 상응하여 링 토폴로지 형성 방법 및 그시스템 |
| GB2481563B (en) | 2009-12-22 | 2017-07-19 | Intel Corp | Method and apparatus to provide secure application execution |
| US8924727B2 (en) | 2012-10-12 | 2014-12-30 | Intel Corporation | Technologies labeling diverse content |
| EP2874093A1 (en) * | 2013-11-13 | 2015-05-20 | Gemalto SA | Method to protect a set of sensitive data associated to public data in a secured container |
| US9461821B1 (en) * | 2014-06-30 | 2016-10-04 | Emc Corporation | System and method for key material protection on devices using a secret sharing scheme |
| WO2017034642A2 (en) * | 2015-06-05 | 2017-03-02 | Nutanix, Inc. | Optimizable full-path encryption in a virtualization environment |
| US10534724B2 (en) * | 2015-12-24 | 2020-01-14 | Intel Corporation | Instructions and logic to suspend/resume migration of enclaves in a secure enclave page cache |
| US10523427B2 (en) * | 2016-01-11 | 2019-12-31 | Dell Products L.P. | Systems and methods for management controller management of key encryption key |
| US11063980B2 (en) * | 2016-02-26 | 2021-07-13 | Fornetix Llc | System and method for associating encryption key management policy with device activity |
| US10326744B1 (en) * | 2016-03-21 | 2019-06-18 | EMC IP Holding Company LLC | Security layer for containers in multi-tenant environments |
| US10498726B2 (en) * | 2016-03-22 | 2019-12-03 | International Business Machines Corporation | Container independent secure file system for security application containers |
| CN107959567B (zh) * | 2016-10-14 | 2021-07-27 | 阿里巴巴集团控股有限公司 | 数据存储方法、数据获取方法、装置及系统 |
| US11165565B2 (en) * | 2016-12-09 | 2021-11-02 | Microsoft Technology Licensing, Llc | Secure distribution private keys for use by untrusted code |
| US11438155B2 (en) * | 2017-01-24 | 2022-09-06 | Microsoft Technology Licensing, Llc | Key vault enclave |
| US10567359B2 (en) | 2017-07-18 | 2020-02-18 | International Business Machines Corporation | Cluster of secure execution platforms |
| US10554634B2 (en) * | 2017-08-18 | 2020-02-04 | Intel Corporation | Techniques for shared private data objects in a trusted execution environment |
| US10872145B2 (en) | 2017-10-25 | 2020-12-22 | International Business Machines Corporation | Secure processor-based control plane function virtualization in cloud systems |
| US10776459B2 (en) * | 2017-12-07 | 2020-09-15 | International Business Machines Corporation | Facilitating build and deploy runtime memory encrypted cloud applications and containers |
| US11388272B2 (en) * | 2018-03-30 | 2022-07-12 | Intel Corporation | Technologies for network packet processing between cloud and telecommunications networks |
| US10884814B2 (en) * | 2018-09-28 | 2021-01-05 | Intel Corporation | Mobile edge-cloud security infrastructure |
| US11048800B2 (en) * | 2018-12-17 | 2021-06-29 | Intel Corporation | Composable trustworthy execution environments |
-
2019
- 2019-06-24 US US16/449,904 patent/US11044080B2/en active Active
-
2020
- 2020-06-10 AU AU2020305390A patent/AU2020305390B2/en active Active
- 2020-06-10 CN CN202080035909.4A patent/CN113826352A/zh active Pending
- 2020-06-10 WO PCT/EP2020/066133 patent/WO2020260026A1/en not_active Ceased
- 2020-06-10 CA CA3143383A patent/CA3143383A1/en active Pending
- 2020-06-10 SG SG11202110433SA patent/SG11202110433SA/en unknown
- 2020-06-10 MX MX2021015223A patent/MX2021015223A/es unknown
- 2020-06-10 JP JP2021575206A patent/JP7486530B2/ja active Active
- 2020-06-10 KR KR1020217039137A patent/KR102726547B1/ko active Active
- 2020-06-10 BR BR112021026146A patent/BR112021026146A2/pt unknown
- 2020-06-10 EP EP20732828.7A patent/EP3987712B1/en active Active
- 2020-06-10 IL IL288689A patent/IL288689B2/en unknown
Also Published As
| Publication number | Publication date |
|---|---|
| CN113826352A (zh) | 2021-12-21 |
| IL288689B2 (en) | 2024-06-01 |
| EP3987712B1 (en) | 2025-07-23 |
| US11044080B2 (en) | 2021-06-22 |
| CA3143383A1 (en) | 2020-12-30 |
| US20200403784A1 (en) | 2020-12-24 |
| KR102726547B1 (ko) | 2024-11-06 |
| EP3987712A1 (en) | 2022-04-27 |
| MX2021015223A (es) | 2022-01-18 |
| IL288689A (en) | 2022-02-01 |
| JP2022537739A (ja) | 2022-08-29 |
| AU2020305390B2 (en) | 2023-07-13 |
| KR20220002616A (ko) | 2022-01-06 |
| JP7486530B2 (ja) | 2024-05-17 |
| IL288689B1 (en) | 2024-02-01 |
| SG11202110433SA (en) | 2021-10-28 |
| WO2020260026A1 (en) | 2020-12-30 |
| AU2020305390A1 (en) | 2021-10-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| BR112021026146A2 (pt) | Orquestração de chave criptográfica entre destinatários de confiança em um cluster de múltiplos nós | |
| BR112015019378A2 (pt) | serviço de segurança de dados | |
| CL2018002362A1 (es) | Almacenamiento y transferencia seguros resistentes a pérdida de múltiples partes de claves criptográficas para sistemas a base de cadena de bloques en conjunto con un sistema de administración de billetera. | |
| MX2017003826A (es) | Sistema de gestion de trafico distribuido y tecnicas. | |
| CO2019007876A2 (es) | Direccionamiento de un entorno de ejecución confiable utilizando clave de cifrado | |
| EP4407492A3 (en) | Systems and methods for computing with private healthcare data | |
| EA201891829A1 (ru) | Способ и система для эффективного перевода криптовалюты, связанной с заработной платой, в блокчейне для создания способа и системы автоматизированной выплаты заработной платы на основе смарт-контрактов | |
| BR112016024453A8 (pt) | método implementado por computador para gerenciar conjunto de dados, sistema de computação e meio de armazenamento legível por computador físico | |
| NZ752240A (en) | Secure key management | |
| SA519402322B1 (ar) | (msls)مستويات مفردة مُتعدِّدة للأمان في سحابة مُتعدِّدة المستأجرين | |
| BR112017014076A2 (pt) | segurança para aplicativos móveis de pagamento. | |
| BR112019015423A8 (pt) | Método implementado por computador para proteger dados sensíveis armazenados em um protocolo de confiança mantido por uma rede de protocolo de confiança, meio de armazenamento não transitório, legível por computador e sistema | |
| NZ735353A (en) | Systems and methods for organizing devices in a policy hierarchy | |
| MX356293B (es) | Sistemas y métodos con seguridad de programa de criptografía y resistencia a uso indebido. | |
| BR112018000325A2 (pt) | separação de módulos de software por gerenciamento de chave de criptografia controlado | |
| BR112019022697A2 (pt) | redes de comunicação e de monitoramento de estrutura | |
| Zhou et al. | Identity-based proxy re-encryption version 2: Making mobile access easy in cloud | |
| BR112019000805A2 (pt) | sistema e método para gerenciamento de chave de ponta a ponta | |
| JP2022537739A5 (cg-RX-API-DMAC7.html) | ||
| GB2541572A (en) | Applications of secured memory areas and secure environments in policy-based access control systems for mobile devices | |
| BR112017001424A2 (pt) | receptor de pin criptografador | |
| BR112018074082A2 (pt) | portas seguras para máquinas dispensadoras conectadas | |
| CO7160075A2 (es) | Manejo basado en red de conjuntos de datos protegidos | |
| Quoc et al. | Secfl: Confidential federated learning using tees | |
| Jain et al. | FIXED POINT THEOREMS FOR OCCASIONALLY WEAKLY COMPATIBLE EXPANSIVE MAPPINGS. |