Intel Corporation

Amol Kulkarni

Jesse R Walker

Victor B Lortz

Shriharsha S Hegde

Tsung-Yuan Charles Tai

Jasmeet Chhabra

Ranjit S Narjala

Michael Berger

Gyan Prakash

Hormuzd M Khosravi

Christian Maciocco

Russell Jerome Fenger

Hsin-Yuo Liu

Manasi Deval

Preston Joel Hunt

Carol Bell

Jayant Mangalampalli

Manoj Gopalakrishnan

Vani Yalapalli

Ashish Kumar Mishra

Preston Hunt

A system and method are disclosed in which a node of a peer-to-peer (P2P) network supporting a blockchain is able to restart following network or power disruption (or is able to initially join the blockchain network) by bootstrapping information from one or more peer nodes in the P2P network. The bootstrapping operation involves communication between the Trusted Execution Environments (TEEs) of the two or more nodes. The system and method ensure that the retrieval of data related to the blockchain state are not from untrusted parts of the peer node(s) and the data has not been tampered with (avoidance of replay attacks).

Fast and secure protocol to bootstrap a blockchain by restoring the blockchain state using trusted execution environment

In an embodiment, a method includes registering applications and network services for notification of an out-of-band introduction, and using the out-of-band introduction to bootstrap secure in-band provisioning of credentials and policies that are used to control subsequent access and resource sharing on an in-band channel. In another embodiment, an apparatus implements the method.

Device introduction and access control framework

Embodiments of a system and method for secure clock management in a mobile device, or user equipment, are generally described herein. A timer offset may be calculated between a first secure clock time and a first network time. A reset delta based on at least the timer offset may be obtained and a recovered secure clock time based on at least the reset delta may be generated. A one-time password may be generated based on at least the recovered secure clock time.

Method and apparatus for hardware-assisted secure real time clock management

In a computing device that includes a host operating system and a management engine separate from the host operating system, if the primary operating system is not operating, a management engine may obtain from a credential server via a first network connection logon information for a secured network and the management engine connects to the secure network through a secured connection using the logon information. If the operating system is operating the operating system provides the logon information to the management engine. Certificate verification may be performed by a remote server on behalf of the management engine. Other embodiments are disclosed and claimed.

Method and apparatus for secured embedded device communication

A first message is transmitted over a communication channel to initiate a transaction. The first message contains a random number and a public key of a device. Continuing the transaction, a second message is received. The second message also contains a random number and a public key of a second device. At least one message is received that contains a proof-of-possession of the device's password, along with a credential that is encrypted with a credential key.

Method for secure device discovery and introduction

A method and apparatus for configuring data plane behavior on network forwarding elements are described. In one embodiment, the method includes receiving, within a network element control plane, protocol configuration information extracted from a protocol application utilizing a network protocol application programming interface (API). Once the protocol configuration information is received, the protocol configuration information is processed using a control interface corresponding to the network protocol implemented by the protocol application. Once the protocol configuration information is processed, the control interface programs one or more data plane forwarding elements of the network element according to protocol configuration information. Accordingly, by providing similar control interfaces for multiple, network protocols, inter-operability between components from multiple vendors is enabled.

Apparatus and method for configuring data plane behavior on network forwarding elements

Growing community of inventors

Hillsboro, OR, United States of America

Amol Kulkarni