BR112023022877A2 - Dados confidenciais providos para um convidado seguro através de metadados - Google Patents
Dados confidenciais providos para um convidado seguro através de metadadosInfo
- Publication number
- BR112023022877A2 BR112023022877A2 BR112023022877A BR112023022877A BR112023022877A2 BR 112023022877 A2 BR112023022877 A2 BR 112023022877A2 BR 112023022877 A BR112023022877 A BR 112023022877A BR 112023022877 A BR112023022877 A BR 112023022877A BR 112023022877 A2 BR112023022877 A2 BR 112023022877A2
- Authority
- BR
- Brazil
- Prior art keywords
- metadata
- secure guest
- data provided
- confidential data
- sensitive data
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
- G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/088—Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45575—Starting, stopping, suspending or resuming virtual machine instances
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45587—Isolation or security of virtual machine instances
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Computing Systems (AREA)
- Databases & Information Systems (AREA)
- Mathematical Physics (AREA)
- Storage Device Security (AREA)
Abstract
dados confidenciais providos para um convidado seguro através de metadados. um convidado seguro de um ambiente de computação solicita dados confidenciais. os dados confidenciais estão incluídos nos metadados do convidado seguro, os quais são armazenados em um ambiente de execução confiável do ambiente de computação. com base na solicitação, os dados confidenciais são obtidos a partir dos metadados do convidado seguro que estão armazenados no ambiente de execução confiável.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US17/394,963 US11829495B2 (en) | 2021-08-05 | 2021-08-05 | Confidential data provided to a secure guest via metadata |
PCT/EP2022/071763 WO2023012197A1 (en) | 2021-08-05 | 2022-08-02 | Confidential data provided to a secure guest via metadata |
Publications (1)
Publication Number | Publication Date |
---|---|
BR112023022877A2 true BR112023022877A2 (pt) | 2024-02-27 |
Family
ID=83115403
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
BR112023022877A BR112023022877A2 (pt) | 2021-08-05 | 2022-08-02 | Dados confidenciais providos para um convidado seguro através de metadados |
Country Status (6)
Country | Link |
---|---|
US (1) | US11829495B2 (pt) |
EP (1) | EP4381400A1 (pt) |
CN (1) | CN117795510A (pt) |
BR (1) | BR112023022877A2 (pt) |
TW (1) | TWI827045B (pt) |
WO (1) | WO2023012197A1 (pt) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US12026266B2 (en) * | 2021-12-21 | 2024-07-02 | NeuShield, Inc. | Computer-implemented system and methods for providing encrypted protected data |
Family Cites Families (21)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7552419B2 (en) * | 2004-03-18 | 2009-06-23 | Intel Corporation | Sharing trusted hardware across multiple operational environments |
US8090919B2 (en) | 2007-12-31 | 2012-01-03 | Intel Corporation | System and method for high performance secure access to a trusted platform module on a hardware virtualization platform |
US8151262B2 (en) | 2007-03-30 | 2012-04-03 | Lenovo (Singapore) Pte. Ltd. | System and method for reporting the trusted state of a virtual machine |
US20130097296A1 (en) * | 2011-10-18 | 2013-04-18 | Telefonaktiebolaget L M Ericsson (Publ) | Secure cloud-based virtual machine migration |
US9158909B2 (en) | 2014-03-04 | 2015-10-13 | Amazon Technologies, Inc. | Authentication of virtual machine images using digital certificates |
US10516990B2 (en) | 2014-09-17 | 2019-12-24 | Simless, Inc. | Apparatuses, methods and systems for implementing a trusted subscription management platform |
EP3896899A1 (en) * | 2015-11-20 | 2021-10-20 | Genetec Inc. | Secure layered encryption of data streams |
US10210323B2 (en) | 2016-05-06 | 2019-02-19 | The Boeing Company | Information assurance system for secure program execution |
US10303899B2 (en) | 2016-08-11 | 2019-05-28 | Intel Corporation | Secure public cloud with protected guest-verified host control |
US10671737B2 (en) | 2017-11-10 | 2020-06-02 | Intel Corporation | Cryptographic memory ownership table for secure public cloud |
US11443040B2 (en) | 2019-03-08 | 2022-09-13 | International Business Machines Corporation | Secure execution guest owner environmental controls |
US11500988B2 (en) | 2019-03-08 | 2022-11-15 | International Business Machines Corporation | Binding secure keys of secure guests to a hardware security module |
CA3058499C (en) | 2019-03-26 | 2021-10-26 | Alibaba Group Holding Limited | Program execution and data proof scheme using multiple key pair signatures |
EP3948629A4 (en) | 2019-03-27 | 2023-01-18 | Xard Group Pty Ltd | LOCKING AND UNLOCKING APPLICATIONS ON A DIGITAL TRANSACTION PROCESSING UNIT (DTPU) |
SG11201909847SA (en) * | 2019-04-03 | 2019-11-28 | Alibaba Group Holding Ltd | Processing and storing blockchain data under a trusted execution environment |
PL3643041T3 (pl) | 2019-04-26 | 2021-09-06 | Advanced New Technologies Co., Ltd. | Rozproszone zarządzanie kluczami dla zaufanych środowisk wykonawczych |
JP7404749B2 (ja) * | 2019-10-07 | 2023-12-26 | 富士フイルムビジネスイノベーション株式会社 | 情報処理装置及びプログラム |
US20230044731A1 (en) * | 2021-08-05 | 2023-02-09 | International Business Machines Corporation | Attestation of a secure guest |
US11809607B2 (en) * | 2021-08-05 | 2023-11-07 | International Business Machines Corporation | Customization of multi-part metadata of a secure guest |
US20230039894A1 (en) * | 2021-08-05 | 2023-02-09 | International Business Machines Corporation | Deferred reclaiming of secure guest resources |
US20230040577A1 (en) * | 2021-08-05 | 2023-02-09 | International Business Machines Corporation | Secure guest image and metadata update |
-
2021
- 2021-08-05 US US17/394,963 patent/US11829495B2/en active Active
-
2022
- 2022-05-11 TW TW111117577A patent/TWI827045B/zh active
- 2022-08-02 CN CN202280054147.1A patent/CN117795510A/zh active Pending
- 2022-08-02 BR BR112023022877A patent/BR112023022877A2/pt unknown
- 2022-08-02 EP EP22761123.3A patent/EP4381400A1/en active Pending
- 2022-08-02 WO PCT/EP2022/071763 patent/WO2023012197A1/en active Application Filing
Also Published As
Publication number | Publication date |
---|---|
US11829495B2 (en) | 2023-11-28 |
TWI827045B (zh) | 2023-12-21 |
CN117795510A (zh) | 2024-03-29 |
EP4381400A1 (en) | 2024-06-12 |
TW202307705A (zh) | 2023-02-16 |
WO2023012197A1 (en) | 2023-02-09 |
US20230043503A1 (en) | 2023-02-09 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
BR112021018241A2 (pt) | Computação de preservação de privacidade distribuída em dados protegidos | |
EP4033693B1 (en) | Trusted computing base evidence binding for a migratable virtual machine | |
BR112019005438A2 (pt) | método e sistema de dupla anonimização de dados | |
US20140007087A1 (en) | Virtual trusted platform module | |
BR112021017439A2 (pt) | Vinculação de chaves seguras de convidados seguros a um módulo de segurança de hardware | |
BR112019015423A8 (pt) | Método implementado por computador para proteger dados sensíveis armazenados em um protocolo de confiança mantido por uma rede de protocolo de confiança, meio de armazenamento não transitório, legível por computador e sistema | |
BRPI0612139A2 (pt) | experiência dinámica de usuário com objetos ricos em semántica | |
BR112022010762A2 (pt) | Chamadas entre partições em armazenamentos de dados particionados e invioláveis | |
BR112013029404A2 (pt) | varredura antecipada de malware | |
BR112022000475A2 (pt) | Método para anonimizar dados em um sistema robótico cirúrgico, sistema de anonimização de dados e meio de armazenamento legível por computador não transitório | |
BR112015000175A2 (pt) | método, uma ou mais mídias de armazenamento não transitório legíveis por computador e um dispositivo, em particular, relacionado a recursos de computação resources e/ou computação de confiança com base em dispositivo móvel | |
WO2015180396A1 (zh) | 一种虚拟可信平台模块功能实现方法和管理设备 | |
BR112023022877A2 (pt) | Dados confidenciais providos para um convidado seguro através de metadados | |
Ren et al. | Appsec: A safe execution environment for security sensitive applications | |
BR112018010437A2 (pt) | proteção do código básico de entrada/saída (bios) | |
Tang et al. | Performance evaluation of light-weighted virtualization for paas in clouds | |
BR112014031586A2 (pt) | gerenciamento com base em rede de conjuntos de dados protegidos | |
BR112021017440A2 (pt) | Execução segura de controles de proprietário convidado para o controle de interface seguro | |
BR112019000593A2 (pt) | método, aparelho e mídia de armazenamento legível por computador para coletar informações | |
EA201890374A1 (ru) | Выполнение приложений на вычислительном устройстве | |
Agarwal et al. | Containing the hype | |
BR112017005636A2 (pt) | controle de acesso com base na localização do solicitante | |
Zhang et al. | Sgxpy: Protecting integrity of python applications with intel sgx | |
BRPI0813077B8 (pt) | sistema de módulo de processamento de computador | |
US11886899B2 (en) | Privacy preserving introspection for trusted execution environments |