164 results about "Trusted Platform Module" patented technology

Techniques for secure cryptographic secret bootstrapping balance the need to quickly and conveniently restore cryptographic secrets to server computers in the event of an outage with the need for security. Before the outage, a server computer uses a trusted platform module of the server computer to seal an encryption key used to encrypt a secret stored at the server computer. In response to the outage, the server computer restores the secret by using the trusted platform module to unseal the encryption key and then using the unsealed encryption key to decrypt the encrypted secret. The techniques can be used to restore cryptographic secrets rapidly and securely to a cluster of server computers used for cryptographic operations in a provider network without the overhead of safe room procedures.

A method for managing an LCS includes: sending a request to a microvisor kernel of a microvisor to provision an LCS on a first information handling system (IHS), wherein the request comprises at least a configuration template (CT); sending a second request to the microvisor kernel to verify that an enclave with a virtual trusted platform module (vTPM) is ready to communicate with the LCS; initiating, based successfully verifying, provisioning of the LCS based on the CT, wherein the provisioning of the LCS comprises at least an initiation of a guest basic input / output system (BIOS) of the LCS; receiving a notification, from the microvisor kernel, specifying that the LCS has been provisioned; after the notification has been received: sending a second notification to a user of the first IHS, wherein the second notification specifies a predetermined expiry date of the enclave with the vTPM on the first IHS.

Methods and systems for registering a management controller of a data processing system with a server and an orchestrator are disclosed. To do so, a key pair may be generated by the management controller and a private key of the key pair may be kept secret by the management controller. Previously established trust between a trusted platform module of the data processing system and a manufacturer of the data processing system may be leveraged to register the management controller with the server. Hardware resources of the data processing system may register a public key of the key pair with the server and may request registration of the management controller with the orchestrator. The management controller may obtain a challenge from an internet of things hub associated with the orchestrator and may respond to the challenge, via an out of band communication channel, to complete the registration of the management controller.

The invention belongs to the field of identity authentication in the Internet of Vehicles, and particularly relates to an Internet of Vehicles commuting-oriented dual authentication key negotiation method, which specifically comprises the following steps of: constructing an Internet of Vehicles system which comprises a trusted center, a roadside unit and a vehicle, and publishing initial system parameters by the trusted center; a vehicle, a user and a roadside unit respectively complete identity registration and verification to a credible center, the credible center respectively distributes corresponding identity verification key parameters to the vehicle and the roadside unit, and a driver logs in through a biological key; the credible platform module integrity evaluation report of the vehicle is verified, the behavior score of the vehicle is calculated according to the historical behavior information of the vehicle, and the behavior score is composed of a travel score and an interaction score; after the session key negotiation process between the roadside unit and the vehicles is completed, the roadside unit acts as a main authentication node to realize authentication between the vehicles by using the key information generated by the vehicles, and only after the authentication is completed, an authentication result is uploaded to a trusted center for recording. According to the invention, each entity in the Internet of Vehicles system can be ensured to communicate safely, and the calculation overhead and the communication overhead are reduced, so that the authentication efficiency is improved.

Methods and systems for registering a management controller of a data processing system with a server are disclosed. To register a management controller, an identifier for the management controller may be cryptographically signed using a private key of a public private key pair kept secret by a trusted platform module (TPM). The signed identifier may be provided to the server and the sever may utilize a public key of the public private key pair to verify the signed identifier was signed by a trusted entity. If the signed identifier is verified by the server, the server may register the management controller as associated with the data processing system and as a trusted entity to manage operation of hardware resources of the data processing system. The management controller may subsequently utilize an out of band communication channel to interact with the server to manage the operation of the data processing system.

The invention provides a communication method of a TPM (Trusted Platform Module), the TPM, a single board and equipment, and is applied to the technical field of computers, the TPM comprises a TPM logic module, a receiving buffer, a TPM register and a processor, and the TPM register is a storage space divided from a memory of the TPM. The TPM logic module receives a TPM register write command sent by the host and stores the effective load of the write command to the receiving buffer, and the effective load of the TPM register write command is part of or all of the content forming TPM command data; when the data in the receiving buffer reaches a first data volume threshold value, the processor transfers and stores the data in the receiving buffer into a TPM (Trusted Platform Module) register; when all contents of the TPM command data are stored in the TPM register, the processor executes the TPM command data. The problem that TPM hardware cost is high due to the fact that a pure hardware scheme is adopted in TPM communication in the related technology can be solved.

Disclosed are a method and device for installing a certificate on the basis of encryption and decryption of a contract certificate private key for an electric vehicle communication controller. The method for installing the certificate comprises: a step in which the electric vehicle communication controller transmits, to a secondary actor, a certificate installation request message signed with a private key associated with a manufacturer's provisioning certificate; and a step of receiving, from the secondary actor, a certificate installation response message signed with a private key associated with a leaf certificate of a certificate provisioning service, wherein an encrypted private key element of the certificate installation response message stores a private key belonging to a new contract certificate which is encrypted for the electric vehicle communication controller without a trust platform module, the private key belonging to the new contract certificate is encrypted with AES-GCM-256 on the basis of an encryption key which is entered from a public key of the manufacturer's provisioning certificate and generated through an ECDH protocol, and the private key encrypted with the AES-GCM-256 is included in a ciphertext at 528-bits or 448-bits after an initial initialization vector of a contract certificate data packet.

Techniques are described herein that are capable of renewing a signed attestation artifact with limited usage of a trusted platform module (TPM). Based on initiation of a cold boot of a host, attestation artifacts are received from the host. The attestation artifacts prove trust in a trusted execution environment (TEE) that runs on the host. The attestation artifacts include a public portion of an ephemeral cryptographic key (ECKeyPub), a public portion of a signing key (SKeyPub), and a signed key claim. The attestation artifacts are validated, and a signed attestation artifact, which includes the ECKeyPub and the SKeyPub, is generated and provided to the host. Based on a request to renew the signed attestation artifact including the signed attestation artifact, which includes the ECKeyPub and the SKeyPub, and further based on the TEE possessing the ephemeral cryptographic key, the signed attestation artifact is renewed during the cold boot session.

The invention relates to the technical field of 5G communication modules, in particular to a data encryption system based on a 5G communication module and a method thereof.The data encryption system comprises a terminal device module, a power private network eSIM, an X.509 digital certificate issued by a CA and a private key are pre-installed in a terminal device and stored in a trusted execution environment or a trusted platform module, firmware integrity verification can be completed after power-on, and the terminal device module is connected with the terminal device module. TLS bidirectional handshake with an identity authentication gateway is initiated through the eSIM and the digital certificate so as to establish an encryption channel with a session identifier; and the identity authentication gateway is used for receiving and verifying eSIM authentication information and an equipment certificate from the terminal equipment, and generating a unique session identifier after finishing TLS bidirectional authentication. In the invention, through combining the eSIM network authentication of the electric power private network and the X.509 certificate issued by the CA, TLS bidirectional handshake between the equipment and the identity gateway is realized, and dual authentication between a physical link layer and an application link layer is realized; and risks of equipment counterfeiting, malicious man-in-the-middle access and the like are completely eradicated.

The invention provides a method and equipment for realizing a firmware trusted platform module on an RISC-V platform, the functions of the trusted platform module are realized without extra hardware extension through cooperation of software and firmware in combination with a PMP mechanism, a PUF and a hardware timer of the RISC-V platform, and the realization mode comprises an isolation execution process, a hardware execution process and a hardware execution process. An fTPM isolation memory area is configured in the starting stage through a PMP mechanism, and access to fTPM codes and data is limited; a static data protection process: generating a device key by using a PUF (Physical Unclonable Function), and carrying out encryption and integrity protection on fTPM persistent data in combination with a Flash locking mechanism; the trusted starting process comprises the steps of adopting a DME mechanism, ensuring and maintaining the integrity of a starting metric chain and supporting a PCR register function; the efficient communication process comprises the steps of dynamically adjusting the PMP permission of a shared memory area through a dynamic permission exchange page mechanism, and realizing zero-copy communication between the fTPM and an operating system or an application program; and the secure clock process comprises the step of constructing an independent trusted clock source based on a hardware timer of the RISC-V platform.

Methods and systems for registering a management controller of a data processing system with a server are disclosed. To register a management controller, an identifier for the management controller may be cryptographically signed using a private key of a public private key pair kept secret by a trusted platform module (TPM). The signed identifier may be provided to the server and the sever may utilize a public key of the public private key pair to verify the signed identifier was signed by a trusted entity. If the signed identifier is verified by the server, the server may register the management controller as associated with the data processing system and as a trusted entity to manage operation of hardware resources of the data processing system. The management controller may subsequently utilize an out of band communication channel to interact with the server to manage the operation of the data processing system.

The invention provides an energy storage station trusted supply chain and command physical consistency verification method and device. The method comprises the following steps: setting a trusted platform module or a security element in a key device of the energy storage station, and generating a device trusted state identifier; adding a time quality identifier and a source signature to the measurement and state data; identity authentication, protocol analysis, object address and parameter range verification and rate constraint verification are carried out on the remote control instruction; generating a feasible region according to state estimation and equipment constraint, and performing executable judgment on the instruction; when any link does not meet the preset condition, switching to a verifiable security state and blocking a remote write-in path; and when the command firewall and the physical consistency check are both passed, a control instruction is issued to the converter control device and the battery management system, and power, reactive power and grid-connected and off-grid control of the energy storage station is executed. According to the application, supply chain credible closed loop, metering linkage access and double-loop instruction verification can be realized, and failure safety and verifiable evidence obtaining are supported.

Disclosed herein are system, method, and computer program product embodiments for verifying the integrity of a boot process without relying on a boot aggregate value. An embodiment operates by cryptographically validating, by a hardware root of trust, a first code module associated with a digital signature. The embodiment determines that the first code module was cryptographically validated and cryptographically measures the first code module thereby generating a first measurement. The embodiment stores a representation of the first measurement in a first platform configuration register (PCR) of a trusted platform module. The embodiment configures a remote attestation agent to instruct a remote attestation server to attest the value stored in the first PCR. The embodiment transmits a TPM attestation quote to the remote attestation server. The embodiment receives an acknowledgment from the remote attestation server indicating a match between the value stored in the first PCR and an allowed cryptographic measurement.

Systems and methods are provided for implementing virtualization of discrete and migratable cryptographic processors (e.g., trusted platform modules (“TPMs”)). In examples, an orchestrator in a control plane causes migration of a first cryptographic processor emulator (e.g., a TPM emulator) that has been instantiated on a first platform root of trust (“PROT”) to a second PROT, by requesting secret data (e.g., an endorsement seed associated with the cryptographic processor emulator, sealed secrets, etc.) stored in a first memory in the first PROT. The orchestrator receives the secret data, instantiates a second cryptographic processor emulator on the second PROT based on the secret data, and transfers the secret data to a second memory in the second PROT. The orchestrator instructs the cryptographic processor emulator on the first PROT to delete the secret data from the first memory, and sends a status of the migration to a requesting device that requested the migration.

A key management system for providing encryption of a disk in a client device is provided. The system comprises a trusted platform module (TPM) having a first fragment of a key, a remote storage having a second fragment of the key, and a processing unit to partially boot instructions relating to booting of the client device, send a request for validation to the TPM, receive the first fragment of the key from the TPM on successful validation, request for the second fragment of the key with credentials to access the remote storage. The credentials and a network of the request are verified, the second fragment of the key is transmitted on successful validation. The first fragment and the second fragment of the key are combined to generate an encryption key for booting the client device. The first fragment of the key and the second fragment of the key are rotatable.

The invention discloses an equipment control method, equipment, a storage medium and a computer program product, and relates to the technical field of computers, the method comprises the following steps: when a sleep instruction is received, creating a trusted execution environment, and exporting a dynamic session state plaintext from a trusted platform module into the trusted execution environment; encrypting the dynamic session state plaintext by using a pre-generated dormancy binding key in the trusted execution environment to obtain a dynamic session state ciphertext, and calculating a verification value corresponding to the dynamic session state ciphertext; creating a dormant mirror image based on the dynamic session state ciphertext and the corresponding check value in the trusted execution environment, and storing the dormant mirror image in a nonvolatile storage medium; and triggering a sleep operation. The awakening efficiency of the device from the dormant state is improved.

An information handling system may validate a connection request received from a trusted platform module (TPM)-virtual (vTPM) module according to a policy, wherein the connection request originated from a virtual machine associated with the TPM-vTPM module which consumes services from a clustered vTPM domain service. In response to determining that the connection request is valid based on the policy, the system may determine the vTPM domain service associated to the TPM-vTPM module, and determine whether to route or redirect the connection request according to policy. In response to determining that the connection request is to be redirected, the system may transmit a response to the TPM-vTPM module, wherein the response includes redirect information to the vTPM domain service. In response to determining that the connection request is to be routed, the system may route the connection request to the vTPM domain service.

The invention discloses an external field equipment trusted access method based on a non-addressable stealth gateway, which relates to the technical field of network security access, and comprises the following four steps: in a manufacturing period and first access, a certificate authorization machine binds equipment identity and trusted platform module measurement, policy decision point decision, policy execution point implementation and policy subset loading; initiating from the outside of the equipment, establishing an end-to-end trusted channel with the center, and performing inward isolation and transparent bearing on rear-end real services; updating strategies, algorithms and secret keys on line under the control of a unified strategy library; according to the method, the attack surface is reduced, the transformation cost is reduced, non-stop treatment is ensured, the encrypted traffic can be observed and audited, only trusted equipment can reach the center through a trusted channel, and event linkage right descending and certificate state linkage treatment are supported.

A method comprising an attestation proxy (AP): sending a trusted platform module (TPM) quote request message directly to a virtual TPM (vTPM) uniquely associated with an attester device, to prompt the vTPM to: produce a set of platform configuration register (PCR) values based on measurements requested and received by the vTPM directly from the attester device, then send a TPM quote comprising the set of PCR values directly to the AP; the attestation method further comprising the AP: receiving the TPM quote; retrieving, from a local copy of a distributed ledger (DL), a latest set of PCR values recorded for the attester device; comparing that set of PCR values retrieved from the local copy of the DL with the set of PCR values received in the TPM quote to generate a local attestation indicator; and producing an attestation result based on the local attestation indicator.

The invention relates to a trusted control method and device for a container operation environment, equipment and a medium, and belongs to the technical field of computer security. A lightweight virtual machine is created on a host, a virtual trusted platform module is integrated in the lightweight virtual machine, a trusted startup process is executed in a startup process, and a trusted measurement result is calculated; submitting a trusted measurement result to a remote attestation server so as to verify the trusted state of the lightweight virtual machine; after the verification is passed, receiving an authorization response issued by the remote certification server; requesting to download the target encryption container mirror image from the container mirror image warehouse by using the download token, and downloading the target encryption container mirror image after the verification is passed; and decrypting the target encryption container mirror image by using the decryption key, and loading the decrypted target encryption container mirror image to the container operation environment to start the corresponding target container. A trusted closed loop is formed, and it is ensured that the container operation environment has safety and credibility in the initialization stage.

The invention belongs to the field of distributed control systems, and provides a DCS controller credible alarm uploading method, system and device and a storage medium, and the method comprises the steps: S1, a credible proxy service module monitors and obtains alarm information generated by a credible module in a DCS controller in real time; s2, the trusted proxy service module analyzes the alarm information and generates an alarm information message; s3, the trusted proxy service module sends the alarm information message to DCS system control software; the DCS system control software runs in an operating system of the DCS controller; s4, the DCS system control software receives the alarm information message and sends the alarm information message to a trusted management center by using a communication link; wherein the communication link is an encrypted communication link based on a UDP (User Datagram Protocol) and depending on a TPM (Trusted Platform Module). According to the invention, the alarm information can be sent timely, efficiently and safely, and the reliability and safety of the DCS system are improved.

The invention relates to the technical field of network security and communication, in particular to a security communication platform and method constructed based on security control and trusted network connection. The security communication platform comprises a security management and control center platform, a trusted password service platform, a trusted network connection optimization architecture, a distributed network architecture, a security shared memory mechanism, an application cluster system and a trusted VPN function module, the security management and control center platform is deployed in a core network, and a trusted platform module is arranged in the security management and control center platform as a global trusted root. By constructing an integrated platform of the trusted security management and control system and the secure and trusted intelligent VPN, triple security assurance of trusted access terminal, trusted network connection and trusted data transmission can be realized, and the requirements of a key information system on high security, high reliability and high adaptation of network communication are met; the defects of the traditional VPN in the aspects of attack surface control, encryption capability, identity authentication, systematic defense and the like are overcome.

An information handling system includes a virtual trusted platform module (TPM) consumer associated with a virtual machine. The virtual TPM (vTPM) consumer may consume TPM services from a clustered vTPM domain service and determine the connection information of the vTPM domain service. The vTPM consumer transmits a connection request for a TPM operation request to the vTPM domain service, wherein the connection request includes a payload in addition to the connection information. The consumer may also receive a response associated with the TPM operation request from the vTPM domain service.

The invention relates to a firmware trusted platform module realized by utilizing a PMP memory protection mechanism in a framework, which is used for solving the problems of realization complexity of a current firmware TPM (Trusted Platform Module) scheme under an RISC-V (Reduced Infrastructure Standard-Virtualization) framework and support requirements on extra hardware. The method comprises the following modules: (1) an NVRAM security memory module using a PMP mechanism: based on an RISC-V instruction set, realizing memory isolation by using a privilege architecture and a physical memory protection (PMP) technology, dividing a plurality of memory areas and configuring different access permissions; through the mode, the security of the memory is ensured from the aspect of hardware, and meanwhile, a reducible key is generated by adopting a DRAM (Dynamic Random Access Memory) latch PUF (Physical Unclonable Function), so that the security risk of key storage is avoided. The PMP technology is further used for controlling access to Flash equipment, so that the NVRAM data can be safely encrypted and stored and effectively protected. And (2) an RISC-V architecture rollback attack defense module: modifying part of TPM command semantics and utilizing an NVRAM to maintain a scheme of error attempt times so as to cope with the problems of rollback attacks possibly faced by the TPM, lack of a security clock and the like.

Disclosed are a method and device for installing a certificate on the basis of encryption and decryption of a contract certificate private key for an electric vehicle communication controller. The method for installing the certificate comprises: a step in which the electric vehicle communication controller transmits, to a secondary actor, a certificate installation request message signed with a private key associated with a manufacturer's provisioning certificate; and a step of receiving, from the secondary actor, a certificate installation response message signed with a private key associated with a leaf certificate of a certificate provisioning service, wherein an encrypted private key element of the certificate installation response message stores a private key belonging to a new contract certificate which is encrypted for the electric vehicle communication controller without a trust platform module, the private key belonging to the new contract certificate is encrypted with AES-GCM-256 on the basis of an encryption key which is entered from a public key of the manufacturer's provisioning certificate and generated through an ECDH protocol, and the private key encrypted with the AES-GCM-256 is included in a ciphertext at 528-bits or 448-bits after an initial initialization vector of a contract certificate data packet.

The present disclosure relates to a computer system (200) including a processor (202) configured to: carry out a cryptographic operation (204) using first cryptographic information (206) and second cryptographic information (208), wherein the first cryptographic information (206) is or comprises a first cryptographic key (302), and the second cryptographic information (208) is or comprises a second cryptographic key (304), wherein the cryptographic operation (204) comprises combining the first cryptographic key (302) and the second cryptographic key (304) with one another, wherein the first cryptographic information (206) is stored in a Trusted Platform Module (210), and wherein the processor (202) is configured to retrieve the second cryptographic information (208) from one or more UEFI variables (212).

In one embodiment, a method receives a secret and a passwordless login request using a credential provider of the client device. The method pairs the credential provider of the client device with a trusted platform module (TPM) associated with a computing device. The method encrypts, using the TPM of the computing device, the secret with a hardware-bound key associated with the computing device. The method receives, from the client device, a push notification associated with the passwordless login request. The method obtains, from the client device, biometric authentication data and a nonce encrypted with a public key. The method validates a proximity of the biometric authentication data and determine a decrypted nonce by decrypting the nonce using a private key associated with the client device. The method validates the decrypted nonce with the secret. In response to determining the decrypted nonce is valid, the method approves the passwordless login request.

A system and method of securing and virtualizing firmware trusted platform modules (TPMs) for virtualizing a hardware security module (HSM) for a host within a network fabric is provided. The system and method include operably coupling a set of components associated with a host comprising a data processing unit (DPU) secure vault and a firmware trusted platform module (TPM). The firmware TPM is configured as a virtual firmware TPM. The DPU secure vault secures the virtual firmware TPM into one or more virtual firmware TPMs based on one or more partitions configured with the DPU secure vault. A virtual TPM manager communicatively coupled to the DPU secure vault manages one or more virtual TPMs for hosting a set of Virtual Machines (VMs) or Containers.

A computer-implemented system for predicting financial behavior and adaptive budget optimization based on machine learning, consisting of: a multitude of distributed processing nodes to enable low-latency communication between the nodes; a transaction data ingestion processor configured to establish authenticated connections with a plurality of financial data sources, wherein the ingestion module is further configured to normalize received transaction records into a standardized schema comprising at least a merchant identifier, a transaction category, a timestamp, a transaction amount, and optional geolocation metadata; a preprocessing engine comprising a classification sub-module trained through supervised learning to assign transaction categories based on merchant identifiers and context attributes, and a feature extraction sub-module configured to compute temporal, statistical, and behavioral feature vectors from the normalized transaction data; a prediction control unit comprising a plurality of lightweight neural network architectures, including at least one recurrent neural network (RNN) and at least one attention-based temporal model, the prediction control unit configured to predict short-term and medium-term output trends by sequentially processing the feature vectors; a budget optimization computation unit configured to solve multi-constraint budget allocation problems using a hybrid approach comprising a primary linear programming solver and an additional heuristic optimization technique, wherein the budget optimization computation unit is further configured to dynamically adjust budget allocations based on updated forecasts and user-defined constraints; a security subsystem configured for encryption at rest and in transit, as well as secure key storage in a hardware-based Trusted Platform Module (TPM); and a user interaction interface configured to display budget recommendations and forecasted spending trends through at least one web application, mobile application, or hardware device interface.

A computer system for failing a secure boot in a case tampering event comprises a microcontroller unit (MCU); a trusted platform module (TPM), for generating random bytes for a secure boot of the computer system; a bootloader, for storing information comprising the random bytes in the MCU and at least one hardware of the computer system and performing the secure boot, wherein the TPM is comprised in the bootloader; an operating system (OS), for performing the secure boot; and at least one sensor, coupled to the MCU, for detecting a case tampering event, and transmitting a signal for triggering a deletion of the random bytes, if the case tampering event happens. The MCU performs the operation of deleting the random bytes stored in the MCU and the at least one hardware according to a power supply, in response to the signal.