Panasonic Corporation

Jfe Steel Corporation

Chugai Ro Co., Ltd.

Matsushita Electric Industrial Co., Ltd.

Panasonic Intellectual Property Management Co., Ltd.

Takayuki Ito

Tomoyuki Haga

Hideki Matsushima

Hisashi Takayama

Shinji Inoue

Takuji Maeda

Makoto Fujiwara

Yusuke Nemoto

Yasushi Yamada

Junichi Yasui

Manabu Maeda

Kenneth Alexander Nicolson

Yuichi Futa

Yoshikatsu Ito

Taichi Sato

Kouichi Kanemura

Teruto Hirota

Koichi Tsutsumi

Ikuhiro Sumi

Yoshihiro Miwa

Sumito Ozawa

Kouji Kobayashi

Kenichi Tomozawa

An auxiliary burner for an electric furnace capable of increasing and homogenizing the heating effect of iron scrap by suitably and efficiently burning solid fuel along with gas fuel. Auxiliary burnerfor an electric furnace comprises a solid fuel injection tube, a gas fuel injection tube, and a combustion-supporting gas injection tubein the stated order from the center side, all arranged coaxially, and is characterized in that: a combustion-supporting gas flow pathof the 10 combustion-supporting gas injection tubeis provided with a plurality of swirl vanesfor swirling the combustion-supporting gas, and the angle &#x3b8; formed between the swirl vanesand the burner axis is 5&#xb0; or more and 45&#xb0; or less.

Auxiliary burner for electric furnace

Provided is an auxiliary burner for an electric furnace capable of increasing and homogenizing the heating effect of iron scrap by suitably and efficiently burning solid fuel along with gas fuel. This auxiliary burnerfor an electric furnace comprises a solid fuel injection tube, a gas fuel injection tube, and a combustion-supporting gas injection tubein the stated order from the center side, all arranged coaxially, and is characterized in that: a flow pathof the combustion-supporting gas injection tubeis provided with a plurality of swirl vanesfor swirling the combustion-supporting gas, and a flow pathof the gas fuel injection tubeis provided with a plurality of swirl vanesfor swirling the gas fuel; and the angle &#x3b8;of the swirl vanesand the &#x3b8;of the swirl vanessatisfy the relationship &#x3b8;&#x3c;&#x3b8;.

A secure LSI deviceincludes an encryption sectionfor encrypting a program, and an external I/Ffor inputting/outputting a program or data from/to an external memory. In the encryption section, the operation of a private key arithmetic processing sectionis prohibited with respect to a sequence whose execution is determined by a key-generation/update sequencerto be impermissible. In the external I/F, a program processing sectionand a data processing sectionare structured independently from each other.

Semiconductor device including encryption section, semiconductor device including external interface, and content reproduction method

A method for executing a predetermined software component which is verifiable against integrity measurements, the method including (i) providing a first mapping from logical identifiers to software component enabled status flags, (ii) providing a second mapping from the logical identifiers and previous software component statuses information to actual integrity measurement certificates containing verification data, (iii) looking up the first mapping for a given logical identifier identifying the predetermined software component to get a status flag indicating whether the predetermined software component is enabled, (iv) if the status flag indicates that the predetermined software component is not enabled, updating a current integrity measurement stored within a disabled integrity measurement certificate, and (v) if the status flag indicates that the predetermined software component is enabled and verification of the predetermined software component is successful, updating a current integrity measurement stored within an integrity measurement certificate.

Secure boot method for executing a software component including updating a current integrity measurement based on whether the software component is enabled

A method to allow a value to be written into one PCR domain, only if values from a second PCR domain are valid, thus ensuring the extension of the chain of trust between domains.

Information processing device and information processing method

An information processing terminal includes first sealed data respectively having usability conditions of matching with predetermined terminal environment information during a secure boot and second sealed data respectively having usability conditions of matching with terminal environment information upon completion of the secure boot. Upon completion of the secure boot, the second sealed data is unsealed and the first sealed data is resealed using the unsealed data. It is possible to update and re-seal sealed data having a usability condition of matching with predetermined terminal environment information during a secure boot without rebooting a terminal when a program using the sealed data is updated.

Information processing device, information processing method, information processing program, and integrated circuit

An information processing device verifies the authorization of an application that has issued an access request to access a device. When an application on a universal OS issues a processing request to a secure device driver, a secure VMM and an application identification unit on a management dedicated OS lock a page table of the application and refer to the page table to generate a hash value. The application is determined to be authorized or unauthorized by comparing the generated hash value with a reference hash value.

Information processing device for controlling an application able to access a predetermined device, and control method using an information processing device for controlling an application able to access a predetermined device

A method to allow a device to boot in a secure fashion, even though some of the components within the secure device's firmware may not be present, not correctly authorized, or not correctly operating.

Method for finding next component to be booted based on booting status of current component to continue booting process by using a component look-up table

Information processing apparatus () ensures confidentiality of encryption and reduces overhead associated with processing not directly related to the encryption. The information processing apparatus () includes: application program (A) that includes an instruction for encryption which uses a key; tampering detection unit () that detects tampering of the program; CPU () that operates according to instructions and outputs a direction for encryption upon detecting the instruction for encryption; data encryption/decryption function unit () that controls switching to the protective mode according to the direction; and protected data operation unit () that stores a key in correspondence with the program, outputs the key in the protective mode, and controls switching to the normal mode, and the data encryption/decryption function unit () executes the encryption in the normal mode using the received key.

Program execution apparatus, control method, control program, and integrated circuit

A terminal that performs secure boot processing when booting, thereby booting reliably even if, during updating of a software module, the power is cut off or the update is otherwise interrupted. The terminal comprises a CPU, a software module storage unit, a certificate storage unit, an updating unit for updating the software module and certificate, a security device provided with a configuration information storage unit for storing the configuration information of the software module, an alternate configuration information storage unit for storing the configuration information of a software module in the configuration before the update, and a boot control unit for verifying and executing the software module by using the certificate. The terminal verifies the certificate of the software module by comparing the configuration information stored by the configuration information storage unit with the configuration information stored by the alternate configuration information storage unit.

Secure boot terminal, secure boot method, secure boot program, recording medium, and integrated circuit

The present invention provides an information processing apparatus that is capable of continuously performing secure boot between module groups in the case where software of a terminal device consists of module groups provided by a plurality of providers, while keeping independence between the providers. The information processing apparatus is provided with a linkage certificate that contains a first configuration comparison value, which indicates a cumulative hash value of the first module group to be started up by secure boot, and a module measurement value, which indicates a hash value of the first module of the second module group to be started up by secure boot. After the secure boot of the first module group, it is verified that the first module group has been started up by comparison with the first configuration comparison value.

Starts up of modules of a second module group only when modules of a first group have been started up legitimately

The present invention provides a migration apparatus that realizes safe migration of secret data between a first terminal device and a second terminal device. Before transmitting the secret data to the second terminal device, the migration apparatus (i) receives, from the first terminal device, a minimum evaluation level required of a destination of the secret data by the first terminal device, (ii) receives, from the second terminal device, an evaluation level of the second terminal device, (iii) judges whether the evaluation level of the second terminal device is lower than the minimum evaluation level, and (iv) sends the secret data to the second terminal device only if the evaluation level of the second terminal device is no lower than the minimum evaluation level.

Migration apparatus, method and system for transferring data protected within a first terminal device to a second terminal device

The present invention provides an information processing device, an authentication system, etc. that save a server the trouble of updating a database, etc., even when a software module in a client device is updated, and that are capable of verifying whether software modules that have been started in the client device are valid. The terminal device Aholds private keysand, and performs authentication processing with the terminal device Busing the private key. The private keyhas been encrypted such that the private keyis decryptable only when secure boot is completed. The private keyhas been encrypted such that the private keyis decryptable using the private keyonly when the application module X that has been started is valid. When the authentication processing is successful, the terminal device Bverifies that the terminal device Ahas completed secure boot and the application module X that has been started in the terminal device Ais valid. Also, the terminal device Bperforms the authentication processing using the same private key, regardless of whether a program pertaining to the secure boot of the terminal device Ais updated or not.

Information processing device, authentication system, authentication device, information processing method, information processing program, recording medium, and integrated circuit

Provided is a migration system considering security authentication levels and data protection strength levels of the both security devices between which data is migrated. A first terminal includes a mechanism for protecting data by a private key in the public key method held by TPM, and a second terminal includes a key in the private key method encrypted by the private key in the public key method held by TPM and a mechanism for protecting the data by the key. A Migration Authority holds a security policy table describing a security policy and judges whether data movement from the first terminal to the second terminal is enabled according to the security policy table.

Growing community of inventors

Osaka, Japan

Takayuki Ito