Patents by Inventor Steffen Eiden

Steffen Eiden has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Selecting an HSM for association to a secure guest
    Patent number: 12468859
    Abstract: A method for a policy-based association of a hardware security module to a secure guest is disclosed. The method comprises maintaining a binding between a secure guest and an HSM. Thereby, the binding enables the trusted guest to send only non-sensitive request to the HSM. The method comprises further maintaining, for a secure guest, a pair of a secret and a secret name, submitting a query to the bound HSM for obtaining HSM configuration data, and upon determining that the obtained HSM configuration data match a rule available to the secure guest, wherein the rule associates the HSM to a secret name, requesting to associate the secret from the pair of secret and the secret name to the bound HSM, thereby triggering that the trusted firmware allows the secure guest to submit a sensitive crypto-request to the bound and associated HSM.
    Type: Grant
    Filed: January 25, 2023
    Date of Patent: November 11, 2025
    Assignee: International Business Machines Corporation
    Inventors: Reinhard Theodor Buendgen, Viktor Mihajlovski, Jonathan D. Bradbury, Harald Freudenberger, Steffen Eiden, Volker Urban, Eric David Rossman
  • SELECTING AN HSM FOR ASSOCIATION TO A SECURE GUEST
    Publication number: 20240176913
    Abstract: A method for a policy-based association of a hardware security module to a secure guest is disclosed. The method comprises maintaining a binding between a secure guest and an HSM. Thereby, the binding enables the trusted guest to send only non-sensitive request to the HSM. The method comprises further maintaining, for a secure guest, a pair of a secret and a secret name, submitting a query to the bound HSM for obtaining HSM configuration data, and upon determining that the obtained HSM configuration data match a rule available to the secure guest, wherein the rule associates the HSM to a secret name, requesting to associate the secret from the pair of secret and the secret name to the bound HSM, thereby triggering that the trusted firmware allows the secure guest to submit a sensitive crypto-request to the bound and associated HSM.
    Type: Application
    Filed: January 25, 2023
    Publication date: May 30, 2024
    Inventors: Reinhard Theodor Buendgen, Viktor Mihajlovski, Jonathan D. Bradbury, Harald Freudenberger, Steffen Eiden, Volker Urban, Eric David Rossman