JP5373753B2 - 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム - Google Patents

複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム Download PDF

Info

Publication number
JP5373753B2
JP5373753B2 JP2010277703A JP2010277703A JP5373753B2 JP 5373753 B2 JP5373753 B2 JP 5373753B2 JP 2010277703 A JP2010277703 A JP 2010277703A JP 2010277703 A JP2010277703 A JP 2010277703A JP 5373753 B2 JP5373753 B2 JP 5373753B2
Authority
JP
Japan
Prior art keywords
master
processor
authenticated code
code module
header
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
JP2010277703A
Other languages
English (en)
Japanese (ja)
Other versions
JP2011141870A (ja
Inventor
エム． ダッタ、シャム
エフ． ブリッケル、アーニー
ジェー． クマー、モハン
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Intel Corp
Original Assignee
Intel Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Intel Corp filed Critical Intel Corp
Publication of JP2011141870A publication Critical patent/JP2011141870A/ja
Application granted granted Critical
Publication of JP5373753B2 publication Critical patent/JP5373753B2/ja
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/572—Secure firmware programming, e.g. of basic input output system [BIOS]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2149—Restricted operating environment
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2153—Using hardware token as a secondary aspect

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Physics (AREA)
  • Storage Device Security (AREA)
JP2010277703A 2009-12-31 2010-12-14 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム Expired - Fee Related JP5373753B2 (ja)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US12/650,579 US9202015B2 (en) 2009-12-31 2009-12-31 Entering a secured computing environment using multiple authenticated code modules
US12/650,579 2009-12-31

Related Child Applications (1)

Application Number Title Priority Date Filing Date
JP2013194105A Division JP5752767B2 (ja) 2009-12-31 2013-09-19 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム

Publications (2)

Publication Number Publication Date
JP2011141870A JP2011141870A (ja) 2011-07-21
JP5373753B2 true JP5373753B2 (ja) 2013-12-18

Family

ID=44188915

Family Applications (2)

Application Number Title Priority Date Filing Date
JP2010277703A Expired - Fee Related JP5373753B2 (ja) 2009-12-31 2010-12-14 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム
JP2013194105A Expired - Fee Related JP5752767B2 (ja) 2009-12-31 2013-09-19 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム

Family Applications After (1)

Application Number Title Priority Date Filing Date
JP2013194105A Expired - Fee Related JP5752767B2 (ja) 2009-12-31 2013-09-19 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム

Country Status (6)

Country Link
US (2) US9202015B2 (enExample)
JP (2) JP5373753B2 (enExample)
CN (1) CN102122327B (enExample)
BR (1) BRPI1005586A2 (enExample)
DE (1) DE102010054614A1 (enExample)
TW (1) TWI582632B (enExample)

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9202015B2 (en) * 2009-12-31 2015-12-01 Intel Corporation Entering a secured computing environment using multiple authenticated code modules
WO2012023050A2 (en) 2010-08-20 2012-02-23 Overtis Group Limited Secure cloud computing system and method
US9596082B2 (en) 2011-12-15 2017-03-14 Intel Corporation Secure debug trace messages for production authenticated code modules
US9930066B2 (en) 2013-02-12 2018-03-27 Nicira, Inc. Infrastructure level LAN security
US20150082006A1 (en) * 2013-09-06 2015-03-19 Futurewei Technologies, Inc. System and Method for an Asynchronous Processor with Asynchronous Instruction Fetch, Decode, and Issue
US9734313B2 (en) 2014-06-16 2017-08-15 Huawei Technologies Co., Ltd. Security mode prompt method and apparatus
CN105335672B (zh) * 2014-06-16 2020-12-04 华为技术有限公司 一种安全模式提示方法及装置
US9613218B2 (en) 2014-06-30 2017-04-04 Nicira, Inc. Encryption system in a virtualized environment
US10181027B2 (en) * 2014-10-17 2019-01-15 Intel Corporation Interface between a device and a secure processing environment
US10079880B2 (en) * 2015-06-07 2018-09-18 Apple Inc. Automatic identification of invalid participants in a secure synchronization system
US10798073B2 (en) 2016-08-26 2020-10-06 Nicira, Inc. Secure key management protocol for distributed network encryption
EP3788528B1 (en) * 2018-04-30 2022-12-14 Google LLC Enclave interactions
CN112005237B (zh) 2018-04-30 2024-04-30 谷歌有限责任公司 安全区中的处理器与处理加速器之间的安全协作
DE102018120347A1 (de) * 2018-08-21 2020-02-27 Pilz Gmbh & Co. Kg Automatisierungssystem zur Überwachung eines sicherheitskritischen Prozesses

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS62126451A (ja) * 1985-11-27 1987-06-08 Mitsubishi Electric Corp 分散処理装置のイニシヤルプログラムロ−ド方式
JPS62128354A (ja) 1985-11-29 1987-06-10 Fuji Electric Co Ltd マルチプロセツサシステムの起動方式
US6948070B1 (en) * 1995-02-13 2005-09-20 Intertrust Technologies Corporation Systems and methods for secure transaction management and electronic rights protection
JP2000215093A (ja) * 1999-01-27 2000-08-04 Fuji Photo Film Co Ltd 画像ファイル装置および方法
US7360076B2 (en) 2001-06-13 2008-04-15 Itt Manufacturing Enterprises, Inc. Security association data cache and structure
TW583568B (en) 2001-08-27 2004-04-11 Dataplay Inc A secure access method and system
US20030126454A1 (en) 2001-12-28 2003-07-03 Glew Andrew F. Authenticated code method and apparatus
US7627753B2 (en) 2002-03-19 2009-12-01 Microsoft Corporation Secure digital data format and code enforced policy
US7069442B2 (en) 2002-03-29 2006-06-27 Intel Corporation System and method for execution of a secured environment initialization instruction
KR20040099253A (ko) * 2002-04-23 2004-11-26 마쯔시다덴기산교 가부시키가이샤 서버 장치 및 프로그램 관리 시스템
US20040117318A1 (en) * 2002-12-16 2004-06-17 Grawrock David W. Portable token controlling trusted environment launch
US7103779B2 (en) * 2003-09-18 2006-09-05 Apple Computer, Inc. Method and apparatus for incremental code signing
US7698552B2 (en) 2004-06-03 2010-04-13 Intel Corporation Launching a secure kernel in a multiprocessor system
JP4447977B2 (ja) * 2004-06-30 2010-04-07 富士通マイクロエレクトロニクス株式会社 セキュアプロセッサ、およびセキュアプロセッサ用プログラム。
JP4522372B2 (ja) 2005-02-07 2010-08-11 株式会社ソニー・コンピュータエンタテインメント プロセッサと外部のデバイスとの間にセキュアセッションを実現する方法および装置
US7752428B2 (en) * 2005-03-31 2010-07-06 Intel Corporation System and method for trusted early boot flow
US7831778B2 (en) 2006-03-30 2010-11-09 Silicon Image, Inc. Shared nonvolatile memory architecture
US8458726B2 (en) * 2007-12-03 2013-06-04 Intel Corporation Bios routine avoidance
FR2918830B1 (fr) 2007-07-13 2009-10-30 Viaccess Sa Verification de code mac sans revelation.
US20090204823A1 (en) * 2008-02-07 2009-08-13 Analog Devices, Inc. Method and apparatus for controlling system access during protected modes of operation
US9202015B2 (en) * 2009-12-31 2015-12-01 Intel Corporation Entering a secured computing environment using multiple authenticated code modules

Also Published As

Publication number Publication date
US20130212673A1 (en) 2013-08-15
US20110161676A1 (en) 2011-06-30
JP2011141870A (ja) 2011-07-21
DE102010054614A1 (de) 2011-07-07
TW201140367A (en) 2011-11-16
US9208292B2 (en) 2015-12-08
JP2013251016A (ja) 2013-12-12
BRPI1005586A2 (pt) 2012-02-28
US9202015B2 (en) 2015-12-01
CN102122327B (zh) 2016-05-25
TWI582632B (zh) 2017-05-11
CN102122327A (zh) 2011-07-13
JP5752767B2 (ja) 2015-07-22

Similar Documents

Publication Publication Date Title
JP5373753B2 (ja) 複数の認証済みコードモジュールを利用するプロセッサ、方法、及びシステム
US11843705B2 (en) Dynamic certificate management as part of a distributed authentication system
JP4883459B2 (ja) ポイントツーポイント相互接続システム上のセキュアな環境初期化命令の実行
EP3582129B1 (en) Technologies for secure hardware and software attestation for trusted i/o
RU2599340C2 (ru) Использование аутентифицированных манифестов для обеспечения внешней сертификации многопроцессорных платформ
TWI528281B (zh) 平臺韌體防護方法、設備、系統以及相關的機器可讀媒體
US8799673B2 (en) Seamlessly encrypting memory regions to protect against hardware-based attacks
US11909882B2 (en) Systems and methods to cryptographically verify an identity of an information handling system
EP3646223A1 (en) Remote attestation for multi-core processor
TW201220040A (en) Method to ensure platform silicon configuration integrity
US20180113715A1 (en) Providing a trustworthy indication of the current state of a multi-processor data processing apparatus
US10013041B2 (en) Directed wakeup into a secured system environment
US9202056B2 (en) Inter-processor attestation hardware
US20180053017A1 (en) Programmable logic device, information processing apparatus, and processing method
Muramoto et al. Improving Hardware Security on Talos II Architecture Through Boot Image Encryption
US11977639B2 (en) Indicating a type of secure boot to endpoint devices by a security processor
CN113496036B (zh) 安全组件和预加载方法
GB2412465A (en) Resetting a register on receipt of a locality confirming message

Legal Events

Date Code Title Description
A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20130122

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20130123

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20130419

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20130514

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20130802

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20130820

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20130919

R150 Certificate of patent or registration of utility model

Free format text: JAPANESE INTERMEDIATE CODE: R150

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

LAPS Cancellation because of no payment of annual fees