US5841869A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for trusted processing
Assignee: Cheyenne Property Trust
•
Filing: 1996-08-23
•
Granted: 1998-11-24
•
Expires: 2016-08-23
Abstract
Abstract Trusted processing capability, for example for a cryptographic unit element in an International Cryptography Framework, secures one or more tasks or processes associated with application code. Trusted processing is assured by a trusted element, where use of the trusted element is based upon the principles of separation and locality, i.e. where the trusted element is associated with a trusted computing base that is separated from the operating system and/or data by a trust boundary, and where protected mechanisms are used to access the trusted element, such that trusted execution occurs only locally in a trusted execution area. The trust processing capability also encompasses a policy controlled main CPU.
Inventors
- 👤 Roger Merkling
- 👤 Helmut Fieres
- 👤 Keith Klemba
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 15:28
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/602; G06F21/70; G06F21/71; G06F2211/00; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2113
Claims Analysis
Total Claims: 43
Claim 1
Independent Claim
79 words
A trusted processor, comprising: a process that executes a task within a system, said process having one or more partitions that define trusted modules; a trust boundary established by a trusted element; and a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 2
Dependent Claim
79 words
A trusted processor, comprising: a process that executes a task within a system, said process having one or more partitions that define trusted modules; a trust boundary established by a trusted element; and a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 3
Dependent Claim
12 words
The trusted processor of claim 1, said trusted element comprising: a policy.
Claim 4
Dependent Claim
13 words
The trusted processor of claim 2, wherein said policy implements a processor personality.
Claim 5
Dependent Claim
25 words
The trusted processor of claim 3, wherein said personality defines a level of trust and/or privilege to be afforded a user of said trusted processor.
Claim 6
Dependent Claim
17 words
The trusted processor of claim 1, further comprising: a envelope for conveying information across said trust boundary.
Claim 7
Dependent Claim
29 words
The trusted processor of claim 1, further comprising: a cryptographic unit; and a policy; wherein said cryptographic unit is controlled by said policy, said policy comprising said trusted element.
Claim 8
Dependent Claim
16 words
The trusted processor of claim 1, said trust boundary comprising: a physical, electrical, and/or logical barrier.
Claim 9
Dependent Claim
28 words
The trusted processor of claim 1, said trusted element comprising: a hardware element that cannot be duplicated because of the manner in which it is manufactured and/or personalized.
Claim 10
Dependent Claim
20 words
The trusted processor of claim 1, wherein said trusted element controls the use of cryptography within said trusted execution area.
Claim 11
Dependent Claim
26 words
The trusted processor of claim 10, wherein said trusted element defines a level of trust and/or privilege to be afforded a user of said trusted processor.
Claim 12
Dependent Claim
18 words
The trusted processor of claim 1, further comprising: a challenge/response mechanism for securing communications across said trust boundary.
Claim 13
Dependent Claim
20 words
The trusted processor of claim 11, said challenge/response mechanism further comprising: a decay function for dynamically altering a challenge/response key.
Claim 14
Dependent Claim
26 words
The trusted processor of claim 12, said decay function further comprising: means within or associated with said trusted computing base for randomly altering said challenge/response key.
Claim 15
Dependent Claim
26 words
The trusted processor of claim 12, said decay function further comprising: a fixed value offset that defines a range of acceptable values for said challenge/response key.
Claim 16
Dependent Claim
14 words
The trusted processor of claim 11, wherein said challenge/response mechanism is non-repeating and/or non-predictable.
Claim 17
Dependent Claim
90 words
A trusted processor, comprising: a process that executes a task within a system, said process having one or more partitions that define trusted modules; a trust boundary established by a trusted element, said trusted element comprising a policy that implements a processor personality; and a trusted computing base, including a trusted execution area; wherein said trusted computing base is separates from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 18
Dependent Claim
90 words
A trusted processor, comprising: a process that executes a task within a system, said process having one or more partitions that define trusted modules; a trust boundary established by a trusted element, said trusted element comprising a policy that implements a processor personality; and a trusted computing base, including a trusted execution area; wherein said trusted computing base is separates from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 19
Dependent Claim
34 words
The trusted processor of claim 16, wherein said processor further comprises: at least one application having at least one adaptive kernel, wherein said adaptation is in response to a personality imposed by said policy.
Claim 20
Independent Claim
87 words
A method for trusted processing, comprising the steps of: providing a process that executes a task within a system, said process having one or more partitions that define trusted modules; providing a trust boundary established by a trusted element; and providing a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 21
Independent Claim
87 words
A method for trusted processing, comprising the steps of: providing a process that executes a task within a system, said process having one or more partitions that define trusted modules; providing a trust boundary established by a trusted element; and providing a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 22
Dependent Claim
11 words
The method of claim 18, said trusted element comprising: a policy.
Claim 23
Dependent Claim
13 words
The method of claim 19, wherein said policy is a tamper-resistant smart card.
Claim 24
Dependent Claim
12 words
The method of claim 19, wherein said policy implements a processor personality.
Claim 25
Dependent Claim
24 words
The method of claim 21, wherein said personality defines a level of trust and/or privilege to be afforded a user of said trusted processor.
Claim 26
Dependent Claim
20 words
The method of claim 18, further comprising the step of: providing a envelope for conveying information across said trust boundary.
Claim 27
Dependent Claim
16 words
The method of claim 18, further comprising the step of: storing information in a personal token.
Claim 28
Dependent Claim
14 words
The method of claim 24, wherein said personal token is a tamper-resistant smart card.
Claim 29
Dependent Claim
33 words
The method of claim 18, further comprising the step of: providing a cryptographic unit; and providing a policy; wherein said cryptographic unit is controlled by said policy, said policy comprising said trusted element.
Claim 30
Dependent Claim
15 words
The method of claim 18, said trust boundary comprising: a physical, electrical, and/or logical barrier.
Claim 31
Dependent Claim
27 words
The method of claim 18, said trusted element comprising: a hardware element that cannot be duplicated because of the manner in which it is manufactured and/or personalized.
Claim 32
Dependent Claim
19 words
The method of claim 18, wherein said trusted element controls the use of cryptography within said trusted execution area.
Claim 33
Dependent Claim
25 words
The method of claim 18, wherein said trusted element defines a level of trust and/or privilege to be afforded a user of said trusted processor.
Claim 34
Dependent Claim
21 words
The method of claim 18, further comprising the step of: providing a challenge/response mechanism for securing communications across said trust boundary.
Claim 35
Dependent Claim
23 words
The method of claim 31, said challenge/response mechanism further comprising the step of: providing a decay function for dynamically altering a challenge/response key.
Claim 36
Dependent Claim
29 words
The method of claim 32, said decay function further comprising the step of: providing means within or associated with said trusted computing base for randomly altering said challenge/response key.
Claim 37
Dependent Claim
29 words
The method of claim 32, said decay function further comprising the step of: providing a fixed value offset that defines a range of acceptable values for said challenge/response key.
Claim 38
Dependent Claim
14 words
The trusted processor of claim 31, wherein said challenge/response mechanism is non-repeating and/or non-predictable.
Claim 39
Independent Claim
98 words
A method for trusted processing, comprising the steps of: providing a process that executes a task within a system, said process having one or more partitions that define trusted modules; providing a trust boundary established by a trusted element, said trusted element comprising a policy that implements a processor personality; and providing a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 40
Independent Claim
98 words
A method for trusted processing, comprising the steps of: providing a process that executes a task within a system, said process having one or more partitions that define trusted modules; providing a trust boundary established by a trusted element, said trusted element comprising a policy that implements a processor personality; and providing a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from said process by said trust boundary, and wherein each of said trusted modules separately access said trusted computing base and are each executed locally within said trusted execution area.
Claim 41
Dependent Claim
33 words
The method of claim 36, wherein said processor further comprises: at least one application having at least one adaptive kernel, wherein said adaptation is in response to a personality imposed by said policy.
Claim 42
Independent Claim
90 words
A method for trusted processing, comprising the steps of: providing a process that executes a task within a system, said process having one or more partitions that define trusted modules; providing a trust boundary established by a trusted element; and providing a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from data by said trust boundary, wherein said data are collected and/or transferred to said trusted computing base for processing; and wherein each of said trusted modules separately access said trusted computing base.
Claim 43
Independent Claim
90 words
A method for trusted processing, comprising the steps of: providing a process that executes a task within a system, said process having one or more partitions that define trusted modules; providing a trust boundary established by a trusted element; and providing a trusted computing base, including a trusted execution area; wherein said trusted computing base is separated from data by said trust boundary, wherein said data are collected and/or transferred to said trusted computing base for processing; and wherein each of said trusted modules separately access said trusted computing base.
References Cited (Backward Citations)
EP0266748A2
Cited
US4918653A
Cited
US4885789A
Cited
US4945468A
Cited
US4993068A
Cited
US5204961A
Cited
US5173939A
Cited
US5504814A
Cited
WO1994001821A1
Cited
US5596718A
Cited
US5341422A
Cited
US5434919A
Cited
US5574786A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-23 | 2002-05-25 | 2002-11-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-23 | 2006-05-25 | 2006-11-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-23 | 2010-05-25 | 2010-11-24 | $7700.00 | Window Closed / Lapsed |