Intel Corporation

Mcafee, Inc.

Other

National Semiconductor Corporation

Howard C Herbert

Gilbert A Neiger

Francis X Mckeen

Shreekant S Thakkar

James A Sutton, Ii

Roger A Golliver

Derrick Chu Lin

Carl M Ellison

Ken Reneris

Millind Mittal

Derek L Davis

Ned M Smith

Prashant Dewan

Ernie F Brickell

Sven Schrecker

Moshe Maor

David M Durham

Uday R Savagaonkar

Jesse R Walker

Geoffrey S Strongin

John I Garney

Uttam K Sengupta

Gary L Graunke

Siddhartha Chhabra

Vincent J Zimmer

Michael A Rothman

Manoj R Sastry

Carlos V Rozas

Vincent R Scarlata

Simon P Johnson

Dion Rodgers

Michael A Goldsmith

Stephen R Van Doren

Stalinselvaraj Jeyasingh

Scott H Robinson

Joseph Frank Cihula

Carey W Smith

Stephen J Tolopka

Bernard Lint

Asher M Altman

Don Alan Van Dyke

Jiang Tao Li

Michael Lemay

David W Grawrock

Karanvir S Grewal

Jason Martin

Geoffrey Cooper

Kirk D Brannock

Keith L Shippy

Mark E Scott-Nash

Milland Mittal

David A deVries

David M Amols

Stephen H Price

Karanvir Ken S Grewal

Shay Gueron

Martin Guy Dixon

Tobias Max Kohlenberg

David J Clark

Simon R Hunt

Stephen Anthony Fischer

Katalin Klara Bartfai-Walcott

Willard M Wiseman

Daniel Nemiroff

Avigdor Dori Eldar

Rameshkumar G Illikkal

Nimrod Diamant

David Johnston

Purushottam Goel

Amber D Huffman

George W Cox

James S Coke

Venkata Ramanan Sambandam

Uri Blumenthal

Charles E Dike

Jennifer Eligius Mankin

Edward V Gamsaragan

David Hines

An Van Le

Stephen J Allen

William B Sweet

Jennifer Gilburg De Magnin

Gunendran Thuraisingham

Greg W Piper

Fran Corrado

Technologies disclosed herein provide a method for receiving at a device from a remote server, a request for state information from a first processor of the device, obtaining the state information from one or more registers of the first processor based on a request structure indicated by a first instruction of a software program executing on the device, and generating a response structure based, at least in part, on the obtained state information. The method further includes using a cryptographic algorithm and a shared key established between the device and the remote server to generate a signature based, at least in part, on the response structure, and communicating the response structure and the signature to the remote server. In more specific embodiments, both the response structure and the request structure each include a same nonce value.

Secure reporting of platform state information to a remote server

A technique to enable secure application and data integrity within a computer system. In one embodiment, one or more secure enclaves are established in which an application and data may be stored and executed.

Method and apparatus to provide secure application execution

In an example, there is disclosed a computing apparatus, having a computing resource; a bespoke sensor for measuring at least one parameter of usage of the computing resource; and one or more logic elements providing a trusted compute meter (TCM) agent to: receive an external workload; provision a workload enclave; execute the external workload within the TCM enclave; and measure resource usage of the external workload via the bespoke sensor. There is also disclosed a computer-readable medium having stored thereon executable instructions for providing a TCM agent, and a method of providing a TCM agent.

Trusted computing resource meter

A custody transfer of a device can include sending a start of transfer request to an attestation device over a short range wireless communication channel, a nonce is received from the attestation device in association with the start of transfer request, and the nonce is signed at the particular gateway device. The signed nonce is sent to the attestation device, a transfer confirmation message is received from the attestation device, and a transfer message is sent to a management system to report a transfer in custody of the attestation device involving the particular gateway device and another gateway device.

Attestation device custody transfer protocol

Sensor data may be filtered in a secure environment. The filtering may limit distribution of the sensor data. Filtering may modify the sensor data, for example, to prevent identification of a person depicted in a captured image or to prevent acquiring a user's precise location. Filtering may also add or require other data use controls to access the data. Attestation that a filter policy is being applied and working properly or not may be provided as well.

Verified sensor data processing

An apparatus is provided that includes at least one processor device, an energy storage module to power the apparatus, memory to store a secret such that powering down and restarting the apparatus causes the secret to be lost, logic executable by the at least one processor device to generate attestation data using the secret that data abstracts the secret, and a communications interface to send the attestation data to another device.

Simplified sensor integrity

Technologies for verification include storage with private keys, wherein each private key is associated with a group affiliation. The storage also includes characteristic information about an apparatus. The technologies also include a wireless interface configured to receive a request from a reader for verification of membership of the apparatus within a group affiliation. The technologies further include a controller with programmable logic for configuring the controller to determine whether to verify membership of the apparatus within a given group affiliation. The controller is also configured to verify membership of the apparatus within the given group affiliation by signing data with a private key associated with the given group affiliation. The signed data is sent to the reader. Membership within the given group affiliation conveys a subset of the characteristic information.

EPID attestation using RFID

In one embodiment, a system including one or more hardware processors is: to receive a user request to access a website; sign a nonce with at least some of the plurality of group private keys, the at least some of the plurality of group private keys corresponding to personalization attributes of the website; and send the signed nonce to a web server to enable personalized interaction with the web server. Other embodiments are described and claimed.

System, apparatus and method for providing privacy preserving interaction with a computing system

Technologies for sensor privacy on a computing device include receiving, by a sensor controller of the computing device, sensor data from a sensor of the computing device; determining a sensor mode for the sensor; and sending privacy data in place of the sensor data in response to a determination that the sensor mode for the sensor is set to a private mode. The technologies may also include receiving, by a security engine of the computing device, a sensor mode change command from a user of the computing device via a trusted input/output path of the computing device; and sending a mode command to the sensor controller to set the sensor mode of the sensor based on the sensor mode change command, wherein the sending the mode command comprises sending the mode command over a private bus established between the security engine and the sensor controller. Other embodiments are described herein.

Sensor privacy mode

In one embodiment, a networked device includes a main platform having a processor, a memory and a basic input/output system (BIOS), and a management subsystem coupled to the main platform to provision the main platform irrespective of the presence of an operating system on the main platform.

Automated provisioning of new networked devices

Embodiments of the inventions are generally directed to methods, apparatuses, and systems for the dynamic evaluation and delegation of network access control. In an embodiment, a platform includes a switch to control a network connection and an endpoint enforcement engine coupled with the switch. The endpoint enforcement engine may be capable of dynamically switching among a number of network access control modes responsive to an instruction received from the network connection.

Methods, apparatuses, and systems for the dynamic evaluation and delegation of network access control

Growing community of inventors

Phoenix, AZ, United States of America

Howard C Herbert