SG11201901127YA - Preserving protected secrets across a secure boot update - Google Patents

Preserving protected secrets across a secure boot update

Info

Publication number
SG11201901127YA
SG11201901127YA SG11201901127YA SG11201901127YA SG11201901127YA SG 11201901127Y A SG11201901127Y A SG 11201901127YA SG 11201901127Y A SG11201901127Y A SG 11201901127YA SG 11201901127Y A SG11201901127Y A SG 11201901127YA SG 11201901127Y A SG11201901127Y A SG 11201901127YA
Authority
SG
Singapore
Prior art keywords
microsoft
blobs
international
llc
redmond
Prior art date
Application number
SG11201901127YA
Other languages
English (en)
Inventor
- Kinshumann
Christopher Mccarron
Yevgeniy Anatolievich Samsonov
Original Assignee
Microsoft Technology Licensing Llc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Technology Licensing Llc filed Critical Microsoft Technology Licensing Llc
Publication of SG11201901127YA publication Critical patent/SG11201901127YA/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14Error detection or correction of the data by redundancy in operation
    • G06F11/1402Saving, restoring, recovering or retrying
    • G06F11/1415Saving, restoring, recovering or retrying at system level
    • G06F11/1417Boot up procedures
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14Error detection or correction of the data by redundancy in operation
    • G06F11/1402Saving, restoring, recovering or retrying
    • G06F11/1415Saving, restoring, recovering or retrying at system level
    • G06F11/1433Saving, restoring, recovering or retrying at system level during software upgrading
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/572Secure firmware programming, e.g. of basic input output system [BIOS]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/575Secure boot
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/085Secret sharing or secret splitting, e.g. threshold schemes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/12Details relating to cryptographic hardware or logic circuitry
    • H04L2209/127Trusted platform modules [TPM]

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Quality & Reliability (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)
  • Stored Programmes (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
SG11201901127YA 2016-08-31 2017-08-25 Preserving protected secrets across a secure boot update SG11201901127YA (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/253,521 US10177910B2 (en) 2016-08-31 2016-08-31 Preserving protected secrets across a secure boot update
PCT/US2017/048517 WO2018044696A1 (en) 2016-08-31 2017-08-25 Preserving protected secrets across a secure boot update

Publications (1)

Publication Number Publication Date
SG11201901127YA true SG11201901127YA (en) 2019-03-28

Family

ID=59791182

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201901127YA SG11201901127YA (en) 2016-08-31 2017-08-25 Preserving protected secrets across a secure boot update

Country Status (19)

Country Link
US (1) US10177910B2 (es)
EP (1) EP3507737B1 (es)
JP (1) JP6994022B2 (es)
KR (1) KR102386111B1 (es)
CN (1) CN109643352B (es)
AU (1) AU2017318962B2 (es)
BR (1) BR112019000763A8 (es)
CA (1) CA3030983A1 (es)
CL (1) CL2019000507A1 (es)
CO (1) CO2019001414A2 (es)
IL (1) IL264706B (es)
MX (1) MX2019002063A (es)
MY (1) MY202112A (es)
NZ (1) NZ749830A (es)
PH (1) PH12019550006A1 (es)
RU (1) RU2748392C2 (es)
SG (1) SG11201901127YA (es)
WO (1) WO2018044696A1 (es)
ZA (1) ZA201900424B (es)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP7367471B2 (ja) * 2019-11-07 2023-10-24 株式会社リコー 情報処理装置、ファイル保証方法、及びファイル保証プログラム
KR20220154879A (ko) * 2021-05-14 2022-11-22 현대자동차주식회사 차량 제어 장치 및 방법

Family Cites Families (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7058807B2 (en) 2002-04-15 2006-06-06 Intel Corporation Validation of inclusion of a platform within a data center
US7890771B2 (en) * 2002-04-17 2011-02-15 Microsoft Corporation Saving and retrieving data based on public key encryption
US7062764B2 (en) * 2002-06-17 2006-06-13 Microsoft Corporation System and method for manipulating offline software
US7694121B2 (en) * 2004-06-30 2010-04-06 Microsoft Corporation System and method for protected operating system boot using state validation
US20060095505A1 (en) * 2004-09-30 2006-05-04 Zimmer Vincent J Providing a trustworthy configuration server
US7725703B2 (en) * 2005-01-07 2010-05-25 Microsoft Corporation Systems and methods for securely booting a computer with a trusted processing module
US7565553B2 (en) 2005-01-14 2009-07-21 Microsoft Corporation Systems and methods for controlling access to data on a computer with a secure boot process
EP1866825A1 (en) * 2005-03-22 2007-12-19 Hewlett-Packard Development Company, L.P. Methods, devices and data structures for trusted data
US7809957B2 (en) 2005-09-29 2010-10-05 Intel Corporation Trusted platform module for generating sealed data
US8631507B2 (en) * 2006-03-27 2014-01-14 Intel Corporation Method of using signatures for measurement in a trusted computing environment
US8190916B1 (en) * 2006-07-27 2012-05-29 Hewlett-Packard Development Company, L.P. Methods and systems for modifying an integrity measurement based on user authentication
US8108940B2 (en) 2006-12-19 2012-01-31 International Business Machines Corporation Method for protecting data from unauthorised access
JP4903071B2 (ja) * 2007-03-15 2012-03-21 株式会社リコー 情報処理装置、ソフトウェア更新方法及び画像処理装置
JP2009169841A (ja) 2008-01-18 2009-07-30 Panasonic Corp 情報処理装置および携帯電話装置
JP5457362B2 (ja) 2008-10-10 2014-04-02 パナソニック株式会社 情報処理装置、情報処理方法、情報処理プログラム及び集積回路
US8495036B2 (en) * 2008-10-24 2013-07-23 Microsoft Corporation Blob manipulation in an integrated structured storage system
US8266448B2 (en) * 2008-12-09 2012-09-11 Nvidia Corporation Apparatus, system, method, and computer program product for generating and securing a program capable of being executed utilizing a processor to decrypt content
JP5493951B2 (ja) * 2009-04-17 2014-05-14 株式会社リコー 情報処理装置、正当性検証方法及びプログラム
US8588422B2 (en) 2009-05-28 2013-11-19 Novell, Inc. Key management to protect encrypted data of an endpoint computing device
US8490179B2 (en) * 2009-10-27 2013-07-16 Hewlett-Packard Development Company, L.P. Computing platform
GB2482652B (en) 2010-05-21 2016-08-24 Hewlett Packard Development Co Lp Extending integrity measurements in a trusted device using a policy register
MY150362A (en) 2010-11-02 2013-12-31 Mimos Berhad A system and method for securing data storage
US8762742B2 (en) * 2011-05-16 2014-06-24 Broadcom Corporation Security architecture for using host memory in the design of a secure element
US8612766B2 (en) * 2011-07-05 2013-12-17 Microsoft Corporation Secure credential unlock using trusted execution environments
US8694786B2 (en) * 2011-10-04 2014-04-08 International Business Machines Corporation Virtual machine images encryption using trusted computing group sealing
CN102650947B (zh) * 2012-04-01 2015-06-24 广东欧珀移动通信有限公司 一种Android手持设备连续增量的空中升级方法
WO2013174437A1 (en) 2012-05-24 2013-11-28 Telefonaktiebolaget L M Ericsson (Publ) Enhanced secure virtual machine provisioning
JP5980050B2 (ja) 2012-08-29 2016-08-31 キヤノン株式会社 情報処理装置
EP3236376A1 (en) * 2013-06-13 2017-10-25 Intel Corporation Secure battery authentication
US9652631B2 (en) * 2014-05-05 2017-05-16 Microsoft Technology Licensing, Llc Secure transport of encrypted virtual machines with continuous owner access
US9264410B2 (en) * 2014-06-05 2016-02-16 Sony Corporation Dynamic configuration of trusted executed environment resources
US9519787B2 (en) 2014-11-14 2016-12-13 Microsoft Technology Licensing, Llc Secure creation of encrypted virtual machines from encrypted templates

Also Published As

Publication number Publication date
BR112019000763A8 (pt) 2023-01-31
KR20190042018A (ko) 2019-04-23
CN109643352B (zh) 2023-07-18
EP3507737B1 (en) 2021-06-02
CN109643352A (zh) 2019-04-16
AU2017318962B2 (en) 2021-10-28
ZA201900424B (en) 2020-05-27
MX2019002063A (es) 2019-06-06
CA3030983A1 (en) 2018-03-08
NZ749830A (en) 2022-09-30
CO2019001414A2 (es) 2019-02-28
BR112019000763A2 (pt) 2019-04-24
CL2019000507A1 (es) 2019-07-05
WO2018044696A1 (en) 2018-03-08
MY202112A (en) 2024-04-04
PH12019550006A1 (en) 2020-01-20
RU2019105575A (ru) 2020-08-27
JP6994022B2 (ja) 2022-01-14
AU2017318962A1 (en) 2019-01-24
KR102386111B1 (ko) 2022-04-12
IL264706B (en) 2021-12-01
RU2019105575A3 (es) 2020-11-02
JP2019532402A (ja) 2019-11-07
US20180062833A1 (en) 2018-03-01
RU2748392C2 (ru) 2021-05-25
US10177910B2 (en) 2019-01-08
EP3507737A1 (en) 2019-07-10

Similar Documents

Publication Publication Date Title
SG11201905460SA (en) Data unsealing with a sealing enclave
SG11201903604PA (en) Iot security service
SG11201905461VA (en) Data sealing with a sealing enclave
SG11201809866PA (en) Cryptographic applications for a blockchain system
SG11201902981RA (en) Iot provisioning service
SG11201908288XA (en) Configurable annotations for privacy-sensitive user content
SG11201908293QA (en) Selective application of reprojection processing on layer sub-regions for optimizing late stage reprojection power
SG11201901550WA (en) Method and apparatus for data processing
SG11201808622SA (en) Chimeric receptors to flt3 and methods of use thereof
SG11201907551YA (en) Talent management platform
SG11201909011PA (en) Niraparib compositions
SG11201909561RA (en) Octree-based convolutional neural network
SG11201806853VA (en) Abstracted graphs from social relationship graph
SG11201807913XA (en) Stabilized soluble pre-fusion rsv f proteins
SG11201808713YA (en) Ophthalmic compositions comprising levodopa, an antioxidant and an aqueous carrier
SG11201805001UA (en) Method of treating influenza a
SG11201903885RA (en) Secure key management
SG11201909410VA (en) Machine learned decision guidance for alerts originating from monitoring systems
SG11201809872TA (en) Using hardware based secure isolated region to prevent piracy and cheating on electronic devices
SG11201900845YA (en) Uses of il-13 antagonists for treating atopic dermatitis
SG11201806393QA (en) Use of gabaa receptor modulators for treatment of itch
SG11201810078PA (en) Stabilized pre-fusion rsv f proteins
SG11201809875VA (en) Compositions and methods for treating spinal muscular atrophy
SG11201909024XA (en) Obtaining data from targets using imagery and other remote sensing data
SG11201900123TA (en) Compositions and methods for treating frontotemporal dementia