专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20140006805A1 Protecting Secret State from Memory Attacks 审中-公开
标题翻译：保护秘密状态免受记忆攻击
公开(公告)号：US20140006805A1
公开(公告)日：2014-01-02
申请号：US13535578
申请日：2012-06-28
申请人： Patrick J. Colp , Himanshu Raj , Stefan Saroiu , Alastair Wolman
发明人： Patrick J. Colp , Himanshu Raj , Stefan Saroiu , Alastair Wolman
IPC分类号： G06F12/14
CPC分类号： G06F12/1425 , G06F21/78 , G06F21/79
摘要： Described is a technology by which classes of memory attacks are prevented, including cold boot attacks, DMA attacks, and bus monitoring attacks. In general, secret state such as an AES key and an AES round block are maintained in on-SoC secure storage, such as a cache. Corresponding cache locations are locked to prevent eviction to unsecure storage. AES tables are accessed only in the on-SoC secure storage, to prevent access patterns from being observed. Also described is securely preparing for an interrupt-based context switch during AES round computations and securely resuming from a context switch without needing to repeat any already completed round or round of computations.
摘要翻译：描述了一种防止内存攻击类别的技术，包括冷启动攻击，DMA攻击和总线监视攻击。通常，诸如AES密钥和AES循环的秘密状态被保持在诸如高速缓存之类的SoC安全存储中。相应的缓存位置被锁定，以防止驱逐不安全的存储。 AES表只能在on-SoC安全存储中访问，以防止访问模式被观察。还描述了在AES循环计算期间安全地准备用于基于中断的上下文切换，并且从上下文切换安全地恢复，而不需要重复任何已经完成的一轮或一轮的计算。

12. 发明申请

US20130054948A1 Attestation Protocol for Securely Booting a Guest Operating System 有权
标题翻译：用于安全引导客户机操作系统的认证协议
公开(公告)号：US20130054948A1
公开(公告)日：2013-02-28
申请号：US13222379
申请日：2011-08-31
申请人： Himanshu Raj , Stefan Saroiu , Alastair Wolman , Paul England , Anh M. Nguyen , Shravan Rayanchu
发明人： Himanshu Raj , Stefan Saroiu , Alastair Wolman , Paul England , Anh M. Nguyen , Shravan Rayanchu
IPC分类号： G06F15/177
CPC分类号： G06F9/4406 , G06F9/4416 , G06F9/45533 , G06F9/45558 , G06F21/50 , G06F21/53 , G06F21/57 , G06F21/575 , G06F2009/45587 , G06F2221/034 , G06F2221/2105 , G06F2221/2149
摘要： In a cloud computing environment, a production server virtualization stack is minimized to present fewer security vulnerabilities to malicious software running within a guest virtual machine. The minimal virtualization stack includes support for those virtual devices necessary for the operation of a guest operating system, with the code base of those virtual devices further reduced. Further, a dedicated, isolated boot server provides functionality to securely boot a guest operating system. The boot server is isolated through use of an attestation protocol, by which the boot server presents a secret to a network switch to attest that the boot server is operating in a clean mode. The attestation protocol may further employ a secure co-processor to seal the secret, so that it is only accessible when the boot server is operating in the clean mode.
摘要翻译：在云计算环境中，最小化生产服务器虚拟化堆栈，以减少在虚拟机中运行的恶意软件的安全漏洞。最小的虚拟化堆栈包括对客户操作系统的操作所需的那些虚拟设备的支持，这些虚拟设备的代码基础进一步减少。此外，专用的隔离引导服务器提供安全引导客户机操作系统的功能。引导服务器通过使用认证协议进行隔离，引导服务器向网络交换机提供秘密，以证明引导服务器以干净的模式运行。认证协议可以进一步采用安全协处理器来密封秘密，使得仅当引导服务器以干净模式操作时才可访问。

13. 发明授权

US08375221B1 Firmware-based trusted platform module for arm processor architectures and trustzone security extensions 有权
标题翻译：基于固件的信任平台模块，用于ARM处理器架构和信任域安全扩展
公开(公告)号：US08375221B1
公开(公告)日：2013-02-12
申请号：US13193945
申请日：2011-07-29
申请人： Stefan Thom , Jeremiah Cox , David Linsley , Magnus Nystrom , Himanshu Raj , David Robinson , Stefan Saroiu , Rob Spiger , Alastair Wolman
发明人： Stefan Thom , Jeremiah Cox , David Linsley , Magnus Nystrom , Himanshu Raj , David Robinson , Stefan Saroiu , Rob Spiger , Alastair Wolman
IPC分类号： G06F11/30 , G06F7/04
CPC分类号： G06F21/552 , G06F21/46 , G06F21/57 , G06F21/572 , G06F21/575 , G06F21/71 , G06F21/74 , G06F2221/034
摘要： A “Firmware-Based TPM” or “fTPM” ensures that secure code execution is isolated to prevent a wide variety of potential security breaches. Unlike a conventional hardware based Trusted Platform Module (TPM), isolation is achieved without the use of dedicated security processor hardware or silicon. In general, the fTPM is first instantiated in a pre-OS boot environment by reading the fTPM from system firmware or firmware accessible memory or storage and placed into read-only protected memory of the device. Once instantiated, the fTPM enables execution isolation for ensuring secure code execution. More specifically, the fTPM is placed into protected read-only memory to enable the device to use hardware such as the ARM® architecture's TrustZone™ extensions and security primitives (or similar processor architectures), and thus the devices based on such architectures, to provide secure execution isolation within a “firmware-based TPM” without requiring hardware modifications to existing devices.
摘要翻译：基于固件的TPM或fTPM确保安全代码执行被隔离，以防止各种潜在的安全漏洞。与传统的基于硬件的可信平台模块（TPM）不同，在不使用专用安全处理器硬件或硅片的情况下实现隔离。通常，通过从系统固件或固件可访问的存储器或存储器读取fTPM并将其放置在设备的只读受保护的存储器中，fTPM首先在前OS引导环境中实例化。一旦实例化，fTPM就能实现执行隔离，以确保执行安全的代码。更具体地说，将fTPM放置到受保护的只读存储器中，以使设备能够使用诸如ARM®架构的TrustZone™扩展和安全原语（或类似的处理器架构）之类的硬件，从而使基于这种架构的设备提供基于固件的TPM中的安全执行隔离，而不需要对现有设备进行硬件修改。

14. 发明授权

US08266634B2 Resource assignment system with recovery notification 有权
标题翻译：具有恢复通知的资源分配系统
公开(公告)号：US08266634B2
公开(公告)日：2012-09-11
申请号：US11958392
申请日：2007-12-18
申请人： Alastair Wolman , Atul Adya , John D. Dunagan
发明人： Alastair Wolman , Atul Adya , John D. Dunagan
IPC分类号： G06F13/00
CPC分类号： G06F9/5011 , G06F9/5016 , G06F9/5077 , H04L67/1002 , H04L67/1034
摘要： The application discloses a resource assignment system including recovery notification procedures or methods to notify an application or node of potentially lost resources. The recovery notification procedures or calls are invoked in response to a recovery notification registration function. In response to recovery notification registration, a recovery notification or call is generated to report lost resources.
摘要翻译：该应用公开了一种资源分配系统，其包括恢复通知过程或用于向应用或节点通知可能丢失的资源的方法。响应于恢复通知注册功能调用恢复通知过程或调用。响应恢复通知注册，生成恢复通知或呼叫以报告丢失的资源。

15. 发明授权

US08055649B2 Scaled management system 有权
标题翻译：规模化管理系统
公开(公告)号：US08055649B2
公开(公告)日：2011-11-08
申请号：US12043487
申请日：2008-03-06
申请人： John D Dunagan , Heather E Warncke , Albert Greenberg , Alastair Wolman , Emre M Kiciman
发明人： John D Dunagan , Heather E Warncke , Albert Greenberg , Alastair Wolman , Emre M Kiciman
IPC分类号： G06F17/30
CPC分类号： H04L67/327
摘要： An exemplary system for managing an applications and data space includes a strategy layer configured to receive a query statement and to formulate one or more custom queries based on the query statement and a query scheduler layer configured to schedule issuance of the one or more custom queries to one or more query response modules associated with the applications and data space. Other methods, devices and systems are also disclosed.
摘要翻译：用于管理应用和数据空间的示例性系统包括：策略层，被配置为接收查询语句，并且基于查询语句来制定一个或多个自定义查询;以及查询调度器层，被配置为调度所述一个或多个定制查询的发布与应用程序和数据空间相关联的一个或多个查询响应模块。还公开了其它方法，装置和系统。

16. 发明授权

US07774490B2 Crisscross cancellation protocol 失效
标题翻译：十字交叉取消协议
公开(公告)号：US07774490B2
公开(公告)日：2010-08-10
申请号：US11858140
申请日：2007-09-20
申请人： Atul Adya , Alastair Wolman , John D Dunagan
发明人： Atul Adya , Alastair Wolman , John D Dunagan
IPC分类号： G06F15/16
CPC分类号： H04L65/1003 , H04L43/10 , H04L67/14 , H04L67/142
摘要： Technologies, systems, and methods for ordered message delivery that avoid message races or crisscrosses between communicating nodes. For example, if Node A sends message 3 towards Node B and, shortly thereafter, Node B sends message X to Node A, Node A would like to know whether or not message X reflects Node B's state after receiving message 3. If Node B received message 3 prior to sending message X, then proper state may be maintained between the nodes. But if messages 3 and X crisscrossed, or if message 3 was never properly received by Node B, then the state between the nodes may be corrupt. Technologies, systems, and methods are provided to avoid such corruption.
摘要翻译：用于有序消息传递的技术，系统和方法，可避免通信节点之间的消息种族或交叉。例如，如果节点A向节点B发送消息3，并且此后不久，节点B向节点A发送消息X，则节点A想要知道消息X是否在接收到消息3之后反映节点B的状态。如果节点B接收到消息3在发送消息X之前，则可以在节点之间保持适当的状态。但如果消息3和X十字交叉，或者如果节点B从未正确接收到消息3，则节点之间的状态可能已损坏。提供技术，系统和方法以避免这种腐败。

17. 发明申请

US20090100441A1 RESOURCE ASSIGNMENT SYSTEM WITH RECOVERY NOTIFICATION 有权
标题翻译：具有恢复通知的资源分配系统
公开(公告)号：US20090100441A1
公开(公告)日：2009-04-16
申请号：US11958392
申请日：2007-12-18
申请人： Alastair Wolman , Atul Adya , John D. Dunagan
发明人： Alastair Wolman , Atul Adya , John D. Dunagan
IPC分类号： G06F13/00 , G06F9/46
CPC分类号： G06F9/5011 , G06F9/5016 , G06F9/5077 , H04L67/1002 , H04L67/1034
摘要： The application discloses a resource assignment system including recovery notification procedures or methods to notify an application or node of potentially lost resources. The recovery notification procedures or calls are invoked in response to a recovery notification registration function. In response to recovery notification registration, a recovery notification or call is generated to report lost resources.
摘要翻译：该应用公开了一种资源分配系统，其包括恢复通知过程或用于向应用或节点通知可能丢失的资源的方法。响应于恢复通知注册功能调用恢复通知过程或调用。响应恢复通知注册，生成恢复通知或呼叫以报告丢失的资源。

18. 发明申请

US20090100436A1 PARTITIONING SYSTEM INCLUDING A GENERIC PARTITIONING MANAGER FOR PARTITIONING RESOURCES 有权
标题翻译：包括用于分配资源的通用分配管理器的分区系统
公开(公告)号：US20090100436A1
公开(公告)日：2009-04-16
申请号：US11958388
申请日：2007-12-18
申请人： Atul Adya , Alastair Wolman , John D. Dunagan
发明人： Atul Adya , Alastair Wolman , John D. Dunagan
IPC分类号： G06F9/46
CPC分类号： G06F9/5061
摘要： The application discloses a generic partitioning manager for partitioning resources across one or more owner nodes. In illustrated embodiments described, the partitioning manager interfaces with the one or more owner nodes through an owner library. A lookup node or application interfaces with the partitioning manager through the lookup library to lookup address or locations of the partitioned resources. In illustrated embodiments, resources are partitioned via the partitioning manager in response to lease request messages from an owner library. In illustrated embodiments, the lease grant message includes a complete list of the leases for the owner node.
摘要翻译：该应用公开了一种通用分区管理器，用于跨一个或多个所有者节点分配资源。在所描述的所示实施例中，分区管理器通过所有者库与一个或多个所有者节点接口。查找节点或应用程序通过查找库与分区管理器进行接口，以查找分区资源的地址或位置。在所示实施例中，响应于来自所有者库的租赁请求消息，经由分区管理器对资源进行分区。在所示实施例中，租赁授权消息包括所有者节点的租赁的完整列表。

19. 发明申请

US20080248749A1 SIGNALING OVER CELLULAR NETWORKS TO REDUCE THE WI-FI ENERGY CONSUMPTION OF MOBILE DEVICES 有权
标题翻译：通过细胞网络信号降低移动设备的无线电能量消耗
公开(公告)号：US20080248749A1
公开(公告)日：2008-10-09
申请号：US11964173
申请日：2007-12-26
申请人： Paramvir Bahl , Ranveer Chandra , Kevin Chin , Alastair Wolman , Yuvraj Agarwal
发明人： Paramvir Bahl , Ranveer Chandra , Kevin Chin , Alastair Wolman , Yuvraj Agarwal
IPC分类号： H04B7/00
CPC分类号： H04W52/0229 , H04L65/1069 , H04M1/2535 , H04M1/725 , H04M2250/06 , H04W52/0209 , H04W52/0235 , H04W52/0274 , H04W74/085 , H04W76/10 , H04W80/04 , H04W84/10 , H04W88/06 , H04W92/00 , Y02D70/00 , Y02D70/1224 , Y02D70/142 , Y02D70/23
摘要： Techniques for increasing the battery life on a mobile device by decreasing the energy consumption of the mobile device's wireless fidelity (Wi-Fi) interface are described. In one embodiment, the mobile device's Wi-Fi interface is automatically disabled when the device is not engaged. When the device receives a wake up call from a server via its Cellular interface, the Wi-Fi interface is enabled if the device answers the wake up call and the Wi-Fi interface is available. Using its Wi-Fi interface, the mobile device then connects to an IP-based network via a Wi-Fi access point.
摘要翻译：描述了通过降低移动设备的无线保真（Wi-Fi）接口的能量消耗来增加移动设备上的电池寿命的技术。在一个实施例中，当设备未被接合时，移动设备的Wi-Fi接口被自动禁用。当设备通过其蜂窝接口从服务器接收到唤醒呼叫时，如果设备应答唤醒呼叫并且Wi-Fi接口可用，则Wi-Fi接口被启用。使用其Wi-Fi接口，移动设备然后通过Wi-Fi接入点连接到基于IP的网络。

20. 发明授权

US5953534A Environment manipulation for executing modified executable and dynamically-loaded library files 失效
标题翻译：用于执行修改的可执行和动态加载的库文件的环境操作
公开(公告)号：US5953534A
公开(公告)日：1999-09-14
申请号：US996838
申请日：1997-12-23
申请人： Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Geoffrey Michael Voelker , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
发明人： Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Geoffrey Michael Voelker , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
IPC分类号： G06F11/34 , G06F9/445
CPC分类号： G06F11/3466
摘要： A method and procedure for modifying modules comprising a binary executable software program in such a way that, despite the transformations performed and the creation of new versions of the modules, the transformed program appears (to that program, including all of its components) as if it is running in the identical environment as the original program. The environment includes environment variables, the name of the program, the names of all of the dynamically loaded library (DLL) files that the program references, the directory in which the program resides, and the current directory at the time the program started execution. When the program has been transformed, e.g., for the purposes of monitoring or measurement, the environment also includes the effective addresses of data and instruction references made by the program. By employing the present invention, a modified software program will have the same behavior as the original unmodified program from which it is derived, even though it and many of its environment characteristics have been changed.
摘要翻译：一种用于修改包括二进制可执行软件程序的模块的方法和过程，使得尽管执行了转换和创建了新版本的模块，但出现了转换的程序（该程序包括其所有组件），如同它与原始程序在相同的环境中运行。环境包括环境变量，程序名称，程序引用的所有动态加载库（DLL）文件的名称，程序所在的目录以及程序开始执行时的当前目录。当程序已经变换时，例如为了监视或测量的目的，环境还包括由程序作出的数据和指令引用的有效地址。通过采用本发明，修改的软件程序将具有与从其导出的原始未修改程序相同的行为，尽管它和许多其环境特性已被改变。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式