Intel Corporation

Other

George W Cox

David Johnston

David W Aucsmith

Paul E Onnen

Justin R Rattner

Ned M Smith

Craig B Peterson

David M Durham

Travis T Schluessler

Martin Guy Dixon

Stephen Anthony Fischer

Gurbir Singh

Jiangtao Li

Adi Shaliv

Anand Rajan

John L Wipfli

William L Bain, Jr

Vincent J Zimmer

Jason W Brandt

Shay Gueron

Sanu K Mathew

Jesse R Walker

Shekhar Yeshwant Borkar

James A Sutton, Ii

Ernie F Brickell

Howard C Herbert

Linda J Rankin

Kevin C Kahn

James S Coke

David G Carson

Robert C Duzett

Charles E Dike

Brad W Hosler

Gregory M Iovino

Kevin Gotze

Stephen R Colley

Edward V Gamsaragan

John A Bayliss

John A Urbanski

David W Archer

Keith-Michael W Self

Kevin Altis

Daniel Ramos

Gunendran Thuraisingham

Roger C Swanson

Greg W Piper

Bert E Forbes

Scott A Ogilvie

Robert C Bedichek

Gerhard Grassl

Karanvir “Ken” Grewal

Karanvir Ken Grewal

Embodiments of methods, systems, and storage medium associated with providing access to encrypted data for authorized users are disclosed herein. In one instance, the method may include obtaining a derived value for an authenticated user based on user personalization data of the authenticated user, and generating a user-specific encryption key based on the derived value. The derived value may have entropy in excess of a predetermined level. The user-specific encryption key may enable the authenticated user to access the encrypted data stored at the storage device. Other embodiments may be described and/or claimed.

Providing access to encrypted data

A hardware-based digital random number generator is provided. In one embodiment, a processor includes a digital random number generator (DRNG) to condition entropy data provided by an entropy source, to generate a plurality of deterministic random bit (DRB) strings, and to generate a plurality of nondeterministic random bit (NRB) strings, and an execution unit coupled to the DRNG, in response to a first instruction to read a seed value, to retrieve one of the NRB strings from the DRNG and to store the NRB string in a destination register specified by the first instruction.

Method and apparatus for a non-deterministic random bit generator (NRBG)

A method and device for securely provisioning trust anchors includes generating a database wrapper key as a function of computing device hardware. The database wrapper key encrypts a key database when it is not in use by a trusted execution environment and may be generated using a Physical Unclonable Function (PUF). A local computing device establishes a secure connection and security protocols with a remote computing device. In establishing the secure connection, the local computing device and remote computing device may exchange and/or authenticate cryptographic keys, including Enhanced Privacy Identification (EPID) keys, and establish a session key and device identifier(s). One or more trust anchors are then provisioned depending on whether unilateral, bilateral, or multilateral trust is established. The local computing device may act as a group or domain controller in establishing multilateral trust. Any of the devices may also require user presence to be verified.

Device, method, and system for secure trust anchor provisioning and protection using tamper-resistant hardware

A processor of an aspect includes root key generation logic to generate a root key. The root key generation logic includes a source of static and entropic bits. The processor also includes key derivation logic coupled with the root key generation logic. The key derivation logic is to derive one or more keys from the root key. The processor also includes cryptographic primitive logic coupled with the root key generation logic. The cryptographic primitive logic is to perform cryptographic operations. The processor also includes a security boundary containing the root key generation logic, the key derivation logic, and the cryptographic primitive logic. Other processors, methods, and systems are also disclosed.

Secure key derivation and cryptography logic for integrated circuits

An integrated circuit substrate of an aspect includes a plurality of exposed electrical contacts. The integrated circuit substrate also includes an inaccessible set of Physically Unclonable Function (PUF) cells to generate an inaccessible set of PUF bits that are not accessible through the exposed electrical contacts. The integrated circuit substrate also includes an accessible set of PUF cells to generate an accessible set of PUF bits that are accessible through the exposed electrical contacts. Other apparatus, methods, and systems are also disclosed.

Integrated circuits having accessible and inaccessible physically unclonable functions

A measurement engine performs active platform observation. A program includes an integrity manifest to indicate an integrity check value for a section of the program's source code. The measurement engine computes a comparison value on the program's image in memory and determines if the comparison value matches the expected integrity check value. If the values do not match, the program's image is determined to be modified, and appropriate remedial action can be triggered. The integrity manifest can include a secure signature to verify the validity of the integrity manifest.

Signed manifest for run-time verification of software program identity and integrity

A hardware-based digital random number generator is provided. The digital random number generator is a randomly behaving random number generator based on a set of nondeterministic behaviors. The nondeterministic behaviors include temporal asynchrony between subunits, entropy source 'extra' bits, entropy measurement, autonomous deterministic random bit generator reseeding and consumption from a shared resource.

Digital random number generator using partially entropic data

Provided are a techniques for determining whether tagged memory is available. In response to determining that tagged memory is available, it is determined whether an Extensible Firmware Interface (EFI) system is implemented. In response to determining that the EFI system is implemented, object descriptors for EFI runtime code and data are allocated and one or more call points from non-tagged memory to tagged memory are provided for use at runtime.

High integrity firmware

Briefly, in accordance with one embodiment of the invention, a method of using a digital signature includes: electronically referencing at least one plurality of electronic signals with a digital signature remotely stored from the plurality.

Object-based digital signatures

A method and apparatus of communicating information comprising providing a datum which includes a digital certificate containing data. The digital certificate including an extension which includes: a first identifier which specifies a major classification of the data; a second identifier which specifies a minor classification of the data; and data in a format according to the major classification and the minor classification, the data indicating an owner of the datum and a use for which the datum is intended. The certificate allows authentication of the certificate itself and the data contained therein, and the data contained in the certificate can include information allowing verification of the identity of the holder of the certificate.

Digital certificates containing multimedia data extensions

An above-ground device that semi-automatically tees golf balls at practice areas such as driving ranges, without requiring the golfer to bend down and tee each golf ball by hand following each practice shot. The device comprises a U-shaped conduit which is embedded in the foam rubber backing of the playing surface mat typically found at a teeing area of a driving range in such a way that the openings in the conduit directly communicate with two holes drilled though the playing surface mat so as to create a continuous pathway between the two holes through the conduit. A semi-rigid rod is inserted into the conduit of such length that when one end is flush with the playing surface mat the other end protrudes above the playing surface mat approximately to the height of a standard golf tee. The ends of the rod are flared to substantially the shape of a standard golf tee.

Semi-automatic golf teeing device

The method and apparatus of the present invention allows for all applications running on a computer which conform to the Object Linking and Embedding Application Programming Interface (OLE API) to automatically become capable of accessing World-Wide Web (WWW) files of arbitrary type. The standard OLE API is extended to utilize Uniform Resource Locators (URL), the WWW global naming convention,

Accessing internets world-wide web through object linking and embedding

Growing community of inventors

Lake Oswego, OR, United States of America

George W Cox