Patents by Inventor Zhihua Shan

Zhihua Shan has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Devices and methods for key attestation with multiple device certificates
    Patent number: 11374766
    Abstract: A device with key attestation features comprises an operating system stored in its memory, the operating system comprising a secure environment including a trusted application, and two or more device certificates, each associated with a device key pair, stored in the memory of the device. The trusted application is configured to handle key pair generation requests and key pair attestation requests to read an indication of a preferred device certificate. An attestation certificate that is generated in response to the key pair attestation request is then signed using one of the two or more device certificates with its associated device key pair based on the indication of a preferred device certificate.
    Type: Grant
    Filed: August 11, 2017
    Date of Patent: June 28, 2022
    Assignee: HUAWEI TECHNOLOGIES CO., LTD.
    Inventors: Pekka Laitinen, Qiming Li, Sampo Sovio, Gang Lian, Zhihua Shan
  • Secure Provisioning of Data to Client Device
    Publication number: 20200374112
    Abstract: In a method for secure provisioning of data to a client device, a non-trusted manufacturing facility is equipped with a secure server device to establish a secure data provisioning channel from the secure server device to trusted hardware in client devices without the secure server device and the client devices needing to have a shared secret.
    Type: Application
    Filed: December 1, 2017
    Publication date: November 26, 2020
    Inventors: Sampo Sovio, Qiming Li, Pekka Laitinen, Gang Lian, Meilun Xie, Xiwen Fang, Zhihua Shan
  • Devices and Methods for Key Attestation with Multiple Device Certificates
    Publication number: 20200186357
    Abstract: A device with key attestation features comprises an operating system stored in its memory, the operating system comprising a secure environment including a trusted application, and two or more device certificates, each associated with a device key pair, stored in the memory of the device. The trusted application is configured to handle key pair generation requests and key pair attestation requests to read an indication of a preferred device certificate. An attestation certificate that is generated in response to the key pair attestation request is then signed using one of the two or more device certificates with its associated device key pair based on the indication of a preferred device certificate.
    Type: Application
    Filed: August 11, 2017
    Publication date: June 11, 2020
    Inventors: Pekka Laitinen, Qiming Li, Sampo Sovio, Gang Lian, Zhihua Shan