Quang Duy Phan Deceased1415 Ball Rd, Anaheim, CA 92802

6557104, Apr 29, 2003

May 2, 1997

08/848963

Son Trung Vu - Huntington Beach CA
Quang Phan - Tustin CA

Phoenix Technologies Ltd. - San Jose CA

H04L 932

713189, 713192, 713193

A method and apparatus for secure processing of cryptographic keys, wherein a cryptographic key stored on a token is processed in a secure processor mode using a secure memory. A main system processor is initialized into a secure processing mode, which cannot be interrupted by other interrupts, during a power-on sequence. A user enters a Personal Identification Number (PIN) to unlock the cryptographic key stored on the token. The cryptographic key and associated cryptographic program are then loaded into the secure memory. The secure memory is locked to prevent access to the stored data from any other processes. The user is then prompted to remove the token and the processor exits the secure mode and the system continues normal boot-up operations. When an application requests security processing, the cryptographic program is executed by the processor in the secure mode such that no other programs or processes can observe the execution of the program. Two-factor authentication is thus obtained without the need for any additional hardware.

6892304, May 10, 2005

Oct 3, 2000

09/679450

Leonard J. Galasso - Rancho Santa Margarita CA, US
Matthew E. Zilmer - Upland CA, US
Quang Phan - Tustin CA, US

Phoenix Technologies Ltd. - Milpitas CA

G06F012/14
G06F005/177

713189, 713 2, 713179, 709222

In accordance with one aspect of the current invention, the system comprises a memory for storing instruction sequences by which the processor-based system is processed, where the memory includes a physical memory and a virtual memory. The system also comprises a processor for executing the stored instruction sequences. The stored instruction sequences include process acts to cause the processor to: map a plurality of predetermined instruction sequences from the physical memory to the virtual memory, determine an offset to one of the plurality of predetermined instruction sequences in the virtual memory, receive an instruction to execute the one of the plurality of predetermined instruction sequences, transfer control to the one of the plurality of predetermined instruction sequences, and process the one of the plurality of predetermined instruction sequences from the virtual memory. In accordance with another aspect of the present invention, the system includes an access driver to generate a service request to utilize BIOS services such that the service request contains a service request signature created using a private key in a cryptographic key pair. The system also includes an interface to verify the service request signature using a public key in the cryptographic key pair to ensure integrity of the service request.

2001000, Jul 5, 2001

Sep 11, 1997

08/927934

LEONARD J. GALASSO - RANCHO SANTA MARGARITA CA, US
SON VU - HUNTINGTON BEACH CA, US
QUANG PHAN - TUSTIN CA, US

G06F012/14

713/187000, 713/189000

A method for validating expansion ROM cards which are loaded into a Personal Computer. A ROM image is signed (encrypted) using a private key and an encryption algorithm to create a digital signature. The digital signature is stored along with the ROM image on an expansion ROM. The system BIOS scans the system for the presence of an expansion ROM and when one is detected, the digital signature is verified (decrypted) using a public key corresponding to the private key. If the decrypted digital signature matches the ROM image (or a hash digest thereof), then the BIOS loads the ROM image.

2003017, Sep 11, 2003

Feb 26, 2003

10/376530

Son Vu - Huntington Beach CA, US
Quang Phan - Tustin CA, US

H04L009/00

713/164000, 713/200000

A method and apparatus for secure processing of cryptographic keys, wherein a cryptographic key stored on a token is processed in a secure processor mode using a secure memory. A main system processor is initialized into a secure processing mode, which cannot be interrupted by other interrupts, during a power-on sequence. A user enters a Personal Identification Number (PIN) to unlock the cryptographic key stored on the token. The cryptographic key and associated cryptographic program are then loaded into the secure memory. The secure memory is locked to prevent access to the stored data from any other processes. The user is then prompted to remove the token and the processor exits the secure mode and the system continues normal boot-up operations. When an application requests security processing, the cryptographic program is executed by the processor in the secure mode such that no other programs or processes can observe the execution of the program. Two-factor authentication is thus obtained without the need for any additional hardware.

6148387, Nov 14, 2000

Jun 18, 1999

9/336889

Leonard J. Galasso - Rancho Santa Margarita CA
Matthew E. Zilmer - Upland CA
Quang Phan - Tustin CA

Phoenix Technologies, Ltd. - San Jose CA

G06F 900

711203

In accordance with one aspect of the current invention, the system comprises a memory for storing instruction sequences by which the processor-based system is processed, where the memory includes a physical memory and a virtual memory. The system also comprises a processor for executing the stored instruction sequences. The stored instruction sequences include process acts to cause the processor to: map a plurality of predetermined instruction sequences from the physical memory to the virtual memory, determine an offset to one of the plurality of predetermined instruction sequences in the virtual memory, receive an instruction to execute the one of the plurality of predetermined instruction sequences, transfer control to the one of the plurality of predetermined instruction sequences, and process the one of the plurality of predetermined instruction sequences from the virtual memory. In accordance with another aspect of the present invention, the system includes an access driver to generate a service request to utilize BIOS services such that the service request contains a service request signature created using a private key in a cryptographic key pair. The system also includes an interface to verify the service request signature using a public key in the cryptographic key pair to ensure integrity of the service request.