10 results about "Trusted components" patented technology

The invention relates to the technical field of creative mobile terminals, in particular to a trusted startup method and system for a creative mobile terminal, and the method comprises the steps: carrying out hierarchical verification and state monitoring on a hardware trust root module, security startup firmware and an operating system kernel, extracting multi-dimensional security features, and constructing a system security feature vector; secondly, establishing a trust chain component dependency graph, and generating a trusted startup sequence with the minimum security risk through constraint optimization; in combination with the trusted startup sequence and the feature vector, intelligently identifying startup threats and dividing risk levels to form a layered security protection strategy; and dynamically adjusting a protection strategy and allocating a resource weight, loading and dividing the trusted component into a high-security verification area and a basic verification area for block verification, and outputting a trusted startup execution result. According to the method, full-link trusted measurement, intelligent risk management and control and resource optimization scheduling in the starting process are realized, and the safety and starting efficiency of the credential terminal are remarkably improved.

The invention relates to a method for starting a computing unit comprising a microcontroller and a trusted component, wherein, during the startup of the computing unit, the trusted component verifies the hardware configuration of the microcontroller. The invention further relates to a device and a computer program.

At least one secure object of the security module is bound to the security guest. The trusted component determines whether metadata of the security guest includes a secret binding attribute of the security module. Based on determining that the metadata includes the secret binding attribute, the trusted component configures the security module for the security guest in a select mode. The select mode prevents certain operations from being intercepted by a hypervisor associated with the security guest. The trusted component intercepts security module communications and performs cryptographic operations on one or more secure objects of the security module communications using the secret binding attribute to provide cryptographic results. Results of the security module communications including the cryptographic results are provided to a receiver.

The application discloses a trusted starting method of a multi-processor system, a trusted component and a chip, and relates to the chip field.In the method, when starting, the multi-processor system performs identity authentication and key negotiation between a processor and a trusted component through a main processor, and after the identity authentication is passed and the key is negotiated, the measurement result of the slave processor encrypted based on the key is forwarded to the trusted component through the main processor, so that the slave processor and the trusted component are guaranteed to perform channel encryption on the basis of mutual trust of identities, the measurement result of the slave processor cannot be viewed or tampered with in the transmission process, and the security of the trusted starting of the system is improved.

A trusted component can be deployed to a computing cluster that collects audit evidence inside the cluster continuously. Performing the evidence collection within the cloud service avoids extending access to cloud resources, since the cloud service already has access to the cloud resources being audited. Additionally, since the evidence collection component is deployed to production servers, existing processes for testing and verifying standards compliance will be applied to the evidence collection component, increasing the quality of the component as compared to less thoroughly vetted external solutions. The evidence collection component may run on a regular schedule and collect evidence regularly (e.g., daily). The relevant information is retrieved from logs generated by the services being audited. The retrieved data is stored in an object store. Thus, only the information published by the evidence collection component is made accessible to external tools, enhancing the security of the services.

A computer program product for enabling processing within a data processing environment, wherein the computer program product comprises: comprising at least one computer-readable storage medium that is readable by at least one processing circuit and stores instructions for carrying out a procedure: Binding at least one secure object of a security module (150) of the data processing environment to a secure guest (180) of the data processing environment, wherein the secure guest is configured to use the security module (150), and wherein the binding has: Determine (300) through a trusted component (160) of the data processing environment whether metadata of the secure guest (180) contains a confidential binding attribute for the security module (150), wherein the confidential binding attribute is to be used to bind the one or more secure objects generated by the security module (150) to the secure guest (180), wherein the security module (150) is separate from the trusted component and is assigned to the secure guest (180) via a hypervisor (170); Configure (304) by the trusted component (160) based on the finding that the metadata contains the confidential binding attribute, the security module (150) for the secure guest (180) in a selected mode, wherein the selected mode prevents certain operations from being intercepted by a hypervisor (170); Interception (306) of a security module data transmission by the trusted component (160); Performing a cryptographic operation on one or more secure objects of the security module data transmission using the confidential binding attribute to provide a cryptographic result; and Providing a result of the security module data transmission to a receiver, wherein the result contains the cryptographic result.

Systems and methods to enhance validation of trusted components of an electronic gaming terminal are described. The system includes a platform controller, and one or more component controllers. The platform controller generates and shares an encryption key with the component controllers. The platform controller validates the component controller by transmitting encrypted first data set, receiving encrypted second data set, and validating the component controller based on decrypting the second data set. In response to the component controller being deemed invalid, the platform controller prevents launching of a gaming application.

Methods, systems, and computer program products for executing trusted software components in public computing clouds. Verifiably authentic software components are installed into a tenant partition of a multi-tenant public cloud-based environment. To do so, a software component installer is configured to install registered software components into the tenant partition. Installer processing includes (1) obtaining a component-specific token for a software component wherein the component-specific token is specific to both the software component to be installed and a particular tenant, and (2) installing the software component on behalf of the given tenant in the multi-tenant public cloud-based environment. Prior to executing the underlying code of the tenant-specific software component, the software component is authenticated with a component registry using the component-specific token. Additional trusted components are installed based on demand from within the tenant partition. No user or administrator intervention is needed and no credentials are hard-coded into the software components.

A computing network comprising a computing service provider and an edge computing network is managed. A trusted device establishes a root of trust at the edge computing network via a trusted component on the trusted device. In response to receiving a first indication of a disconnection or degradation of communications between the computing service provider and the edge computing network, the edge computing network initiates an autonomous mode at the edge computing network. While the edge computing network is operating in the autonomous mode, the trusted device detects new devices that are attempting to access computing resources in the edge computing network. The trusted device stores data pertaining to new devices that were not authorized to access the computing resources in the edge computing network.

An access object authentication method includes a trusted component that is in a computing device and that completes an access object authentication process. When a client requests to access a target object, the trusted component receives an object identifier (ID) and an authentication ID of the target object from the client to perform, based on the authentication ID, tenant authentication on a tenant to which the client belongs. When the authentication on the tenant to which the client belongs succeeds, the trusted component accesses a storage device based on the object ID of the target object.