Filing Information

Inventor(s)	Geoffrey S. Strongin · Dale E. Gulick ·
Assignee(s)	Advanced Micro Devices, Inc. ·  View assignee updates
Attorney/Agent(s)	Williams, Morgan & Amerson ·
Primary Examiner	Thomas R. Peeso ·
Application Number	US9853437
Filing date	05/11/2001
Issue date	12/14/2004
Predicted expiration date	07/17/2023
Patent term adjustment	798
U.S. Classifications	713/182  · 713/201  · 713/200  · 713/168  ·
International Classifications	--
Kind Code	B1
International Classifications	713182 · 713168 · 713200 · 713201 ·
Related U.S. Application Data	This Application is a continuation-in-part of co-pending U.S. patent application Ser. No. 09/852,372, entitled, “Secure Execution Box and Method,” filed on May 10, 2001, whose inventors are Dale E. Gulick and Geoffrey S. Strongin. This Application is also a continuation-in-part of co-pending U.S. patent application Ser. No. 09/852,942 entitled, “Computer System Architecture for Enhanced Security and Manageability,” filed on May 10, 2001, whose inventors are Geoffrey S. Strongin and Dale E. Gulick.

Patent Family

Abstract

A device, method, and system for authenticating devices in a computer system. The device includes a storage location for storing a GUID. The device is configured to provide the GUID to a master in the computer system during a trusted setup. The device is further configured to provide at least an indication of the GUID during a data transaction. The computer system includes a master device and a device comprising a storage location for storing a GUID. The device is configured to provide the GUID to the master device during a trusted setup. The device is further configured to provide at least an indication of the GUID during a data transaction. The method includes providing a GUID and receiving a request for a data transaction. The method also includes transmitting data in the data transaction and at least an indication of the GUID in the data transaction and authenticating the data using at least the indication of the GUID in the data transaction.

Independent Claims | See all claims (109)

1. 1. A device for use in a personal computer system, wherein the device comprises a storage location for storing a GUID, wherein the device is configured to provide the GUID to a master in the computer system during a trusted setup, and wherein the device is further configured to provide at least an indication of the GUID during a data transaction.
2. 18. A device for use in a personal computer system, wherein the device comprises one or more storage locations for storing one or more of the group consisting of a GUID, a secret, and a system GUID; wherein the device is configured to perform during a trusted setup at least one or more from the group consisting of providing the GUID to a master in the computer system, receiving and storing the secret, and receiving and storing the system GUID; and wherein the device is further configured to provide at least an indication of one or more of the group consisting of the GUID, the secret, and the system GUID during a data transaction.
3. 25. A computer system, comprising: a master device; and a device comprising a storage location for storing a GUID, wherein the device is configured to provide the GUID to the master device during a trusted setup, and wherein the device is further configured to provide at least an indication of the GUID during a data transaction.
4. 41. A computer system, comprising: a master device; and a device comprising one or more storage locations for storing one or more of the group consisting of a GUID, a secret, and a system GUID; wherein the device is configured to perform during a trusted setup at least one or more from the group consisting of providing the GUID to the master device in the computer system, receiving and storing the secret from the master device, and receiving and storing the system GUID from the master device; and wherein the device is further configured to provide at least an indication of one or more of the group consisting of the GUID, the secret, and the system GUID during a data transaction with the master device.
5. 48. A method, comprising: providing a GUID; receiving a request for a data transaction; transmitting data in the data transaction and at least an indication of the GUID in the data transaction; and authenticating the data using at least the indication of the GUID in the data transaction.
6. 59. A method, comprising: providing a GUID to a master device during a trusted setup; setting an introduced bit during the trusted setup; receiving a data transaction request; and refusing the data transaction request once the introduced bit is set unless at least an indication of the GUID is provided in the data transaction request.
7. 66. A computer system, comprising: means for providing a GUID to a master device during a trusted setup; means for setting an introduced bit during the trusted setup; means for receiving a data transaction request; and means for refusing the data transaction request once the introduced bit is set unless at least an indication of the GUID is provided in the data transaction request.
8. 69. A system, comprising: a first device, including a timer and logic coupled to the timer; and a security authenticator configured to authenticate the first device, wherein the security authenticator is further configured to provide at least an indication to the logic that the timer is to be reset to a predetermined value in response to authenticating the first device.
9. 75. A computer system, comprising: a first device, including a first timer and first logic coupled to the first timer; a second device including a second timer and second logic coupled to the second timer, wherein the second device also includes a first security authenticator configured to authenticate the first device, wherein the first security authenticator is further configured to provide at least an indication to the first logic that the first timer is to be reset to a first predetermined value in response to authenticating the first device; and a second security authenticator configured to authenticate the second device, wherein the second security authenticator is further configured to provide at least an indication to the second logic that the second timer is to be reset to a second predetermined value in response to authenticating the second device.
10. 84. A method of operating a computer system, the method comprising: authenticating a first device; setting a starting value on a timer; updating the timer in a predetermined manner; and authenticating the first device if the timer has expired.
11. 88. A computer readable program storage device encoded with instructions that, when executed by a computer system, performs a method of operating the computer system, the method comprising: computer readable program storage device, comprising: providing a GUID; receiving a request for a data transaction; transmitting data in the data transaction and at least an indication of the GUID in the data transaction; and authenticating the data using at least the indication of the GUID in the data transaction.
12. 99. A computer readable program storage device encoded with instructions that, when executed by a computer system, performs a method of operating the computer system, the method comprising: providing a GUID to a master device during a trusted setup; setting an introduced bit during the trusted setup; receiving a data transaction request; and refusing the data transaction request once the introduced bit is set unless at least an indication of the GUID is provided in the data transaction request.
13. 106. A computer readable program storage device encoded with instructions that, when executed by a computer system, performs a method of operating the computer system, the method comprising: authenticating a first device; setting a staring value on a timer; updating the timer in a predetermined manner; and authenticating the first device if the timer has expired.