专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20060206943A1 Protecting software environment in isolated execution 有权
标题翻译：在孤立执行中保护软件环境
公开(公告)号：US20060206943A1
公开(公告)日：2006-09-14
申请号：US11386269
申请日：2006-03-21
申请人： Carl Ellison , Roger Golliver , Howard Herbert , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
发明人： Carl Ellison , Roger Golliver , Howard Herbert , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
IPC分类号： H04N7/16
CPC分类号： G06F21/53 , G06F9/468 , G06F21/562 , G06F21/57 , G06F21/74 , G06F2221/2105
摘要： A processing system has a processor that can operate in a normal ring 0 operating mode and one or more higher ring operating modes above the normal ring 0 operating mode. In addition, the processor can operate in an isolated execution mode. A memory in the processing system may include an ordinary memory area that can be accessed from the normal ring 0 operating mode, as well as an isolated memory area that can be accessed from the isolated execution mode but not from the normal ring 0 operating mode. The processing system may also include an operating system (OS) nub, as well as a key generator. The key generator may generate an OS nub key (OSNK) based at least in part on an identification of the OS nub and a master binding key (BK0) of the platform. Other embodiments are described and claimed.
摘要翻译：处理系统具有处理器，该处理器可以在正常环0操作模式和高于正常环0操作模式的一个或多个较高环操作模式下操作。此外，处理器可以在隔离的执行模式下操作。处理系统中的存储器可以包括可以从正常环0操作模式访问的普通存储器区域以及可以从隔离执行模式而不是从正常环0操作模式访问的隔离存储器区域。处理系统还可以包括操作系统（OS）nub以及密钥生成器。密钥生成器可以至少部分地基于OS nub的标识和平台的主绑定密钥（BK 0）来生成OS nub密钥（OSNK）。描述和要求保护其他实施例。

22. 发明申请

US20060200680A1 ATTESTATION KEY MEMORY DEVICE AND BUS 有权
标题翻译： ATTESTATION KEY MEMORY DEVICE和BUS
公开(公告)号：US20060200680A1
公开(公告)日：2006-09-07
申请号：US09672602
申请日：2001-02-26
申请人： Carl Ellison , Roger Golliver , Howard Herbert , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
发明人： Carl Ellison , Roger Golliver , Howard Herbert , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
IPC分类号： G06F12/14
CPC分类号： G06F12/1491 , G06F21/57 , G06F2221/2105
摘要： In an embodiment of the present invention, a technique is provided for remote attestation. An interface maps a device via a bus to an address space of a chipset in a secure environment for an isolated execution mode. The secure environment is associated with an isolated memory area accessible by at least one processor. The at least one processor operates in one of a normal execution mode and the isolated execution mode. A communication storage corresponding to the address space allows the device to exchange security information with the at least one processor in the isolated execution mode in a remote attestation.
摘要翻译：在本发明的实施例中，提供了用于远程证明的技术。接口将设备通过总线映射到安全环境中的芯片组的地址空间，用于隔离执行模式。安全环境与由至少一个处理器可访问的隔离存储器区域相关联。所述至少一个处理器以正常执行模式和隔离执行模式之一进行操作。对应于地址空间的通信存储器允许设备在远程证明中以隔离执行模式与至少一个处理器交换安全信息。

23. 发明申请

US20060015719A1 Platform and method for remote attestation of a platform 有权
公开(公告)号：US20060015719A1
公开(公告)日：2006-01-19
申请号：US11203538
申请日：2005-08-12
申请人： Howard Herbert , David Grawrock , Carl Ellison , Roger Golliver , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
发明人： Howard Herbert , David Grawrock , Carl Ellison , Roger Golliver , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
IPC分类号： H04L9/00
CPC分类号： G06F21/305 , G06F9/30189 , G06F12/1491 , G06F21/35 , G06F21/53 , G06F21/57 , G06F21/575 , G06F21/64 , G06F21/74 , G06F2221/2101 , G06F2221/2103 , G06F2221/2105 , G06F2221/2149
摘要： In one embodiment, a method of remote attestation for a special mode of operation. The method comprises storing an audit log within protected memory of a platform. The audit log is a listing of data representing each of a plurality of IsoX software modules loaded into the platform. The audit log is retrieved from the protected memory in response to receiving a remote attestation request from a remotely located platform. Then, the retrieved audit log is digitally signed to produce a digital signature for transfer to the remotely located platform.

24. 发明申请

US20050188198A1 Managing a secure platform using a hierarchical executive architecture in isolated execution mode 审中-公开
标题翻译：在隔离执行模式下使用分层执行体系管理安全平台
公开(公告)号：US20050188198A1
公开(公告)日：2005-08-25
申请号：US11115829
申请日：2005-04-26
申请人： Carl Ellison , Roger Golliver , Howard Herbert , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
发明人： Carl Ellison , Roger Golliver , Howard Herbert , Derrick Lin , Francis McKeen , Gilbert Neiger , Ken Reneris , James Sutton , Shreekant Thakkar , Millind Mittal
IPC分类号： G06F12/14 , G06F15/00 , G06F21/00 , H04L9/00
CPC分类号： G06F12/1491 , G06F21/57 , G06F21/74
摘要： An example processing system comprises a processor to execute in an isolated execution mode in a ring 0 operating mode. The processor also supports one or more higher ring operating modes, as well as a normal execution mode. The processing system also comprises memory, as well as a machine-accessible medium having instructions. When the processing system executes the instructions, the processing system configures the processor to run in the isolated execution mode, configures the processing system to establish an isolated memory area in the memory, and loads initialization software into the isolated memory area. The processing system may provide a manifest that represents the initialization software. The initialization software may be verified, based at least in part on the manifest.
摘要翻译：示例处理系统包括处理器，其以环0操作模式以孤立执行模式执行。处理器还支持一个或多个较高环操作模式以及正常执行模式。处理系统还包括存储器以及具有指令的机器可访问介质。当处理系统执行指令时，处理系统将处理器配置为以隔离执行模式运行，配置处理系统以在存储器中建立隔离的存储器区域，并将初始化软件加载到隔离存储器区域中。处理系统可以提供表示初始化软件的清单。至少部分地基于清单来验证初始化软件。

25. 发明授权

US08639914B2 Packing signed word elements from two source registers to saturated signed byte elements in destination register 失效
标题翻译：将来自两个源寄存器的符号字元素包装到目标寄存器中的饱和有符号字节元素
公开(公告)号：US08639914B2
公开(公告)日：2014-01-28
申请号：US13730831
申请日：2012-12-29
申请人： Alexander Peleg , Yaakov Yaari , Millind Mittal , Larry M. Mennemeier , Benny Eitan
发明人： Alexander Peleg , Yaakov Yaari , Millind Mittal , Larry M. Mennemeier , Benny Eitan
IPC分类号： G06F15/80
CPC分类号： G06F9/30036 , G06F7/49921 , G06F9/30025 , G06F9/30032 , G06F9/30109 , G06F9/3013 , G06F9/30145 , G06F9/30149 , G06F9/30167 , G06F9/30181 , G06F9/30192 , G06F9/30196
摘要： An apparatus includes an instruction decoder, first and second source registers and a circuit coupled to the decoder to receive packed data from the source registers and to unpack the packed data responsive to an unpack instruction received by the decoder. A first packed data element and a third packed data element are received from the first source register. A second packed data element and a fourth packed data element are received from the second source register. The circuit copies the packed data elements into a destination register resulting with the second packed data element adjacent to the first packed data element, the third packed data element adjacent to the second packed data element, and the fourth packed data element adjacent to the third packed data element.
摘要翻译：一种装置包括指令解码器，第一和第二源寄存器以及耦合到解码器的电路，用于从源寄存器接收压缩数据，并根据解码器接收到的解包指令对打包数据进行解包。从第一源寄存器接收第一打包数据元素和第三打包数据元素。从第二源寄存器接收第二打包数据元素和第四打包数据元素。所述电路将打包的数据元素复制到目的地寄存器中，其中与第一打包数据元素相邻的第二打包数据元素，与第二打包数据元素相邻的第三打包数据元素以及与第三打包数据元素相邻的第四打包数据元素数据元素。

26. 发明授权

US08627053B2 Method and apparatus for secure execution using a secure memory partition 有权
标题翻译：使用安全存储器分区进行安全执行的方法和装置
公开(公告)号：US08627053B2
公开(公告)日：2014-01-07
申请号：US12977468
申请日：2010-12-23
申请人： Millind Mittal
发明人： Millind Mittal
IPC分类号： G06F9/24 , G06F9/40
CPC分类号： G06F21/72 , G06F12/1408 , G06F12/1441 , G06F12/1491 , G06F21/60 , G06F21/602 , G06F21/78 , G06F2221/2107 , G06F2221/2125
摘要： A processor capable of secure execution. The processor contains an execution unit and secure partition logic that secures a partition in memory. The processor also contains cryptographic logic coupled to the execution unit that encrypts and decrypts secure data and code.
摘要翻译：能够安全执行的处理器。该处理器包含一个执行单元和安全的分区逻辑，将分区保存在内存中。处理器还包含耦合到执行单元的加密逻辑，其加密和解密安全数据和代码。

27. 发明授权

US08499012B1 System and method for attached storage stacking 有权
标题翻译：连接存储堆放的系统和方法
公开(公告)号：US08499012B1
公开(公告)日：2013-07-30
申请号：US12818870
申请日：2010-06-18
申请人： Millind Mittal
发明人： Millind Mittal
IPC分类号： G06F12/00 , G06F17/30 , G06F7/00
CPC分类号： H04L67/1097
摘要： A system and method are provided for stacking storage drives in a network attached storage (NAS) system. The method provides a NAS stacking network including at least a first and second stackable building block (SBB), where each SBB includes a head, with an embedded processor and storage application, and a storage drive including client files. The method connects a first interface of the first SBB to a client computer device via a LAN switch, and connects a second interface of the first SBB to the first interface of the second SBB. A directory is built of client files stored in the first and second SBBs. The directory is maintained in both the first and second SBBs. In one aspect, the first SBB, acting as a primary SBB, provides access to NAS stacking network directory structure in response to an inquiry from a client computer connected to the LAN switch.
摘要翻译：提供了一种用于将存储驱动器堆叠在网络连接存储（NAS）系统中的系统和方法。该方法提供包括至少第一和第二可堆叠构建块（SBB）的NAS堆叠网络，其中每个SBB包括具有嵌入式处理器和存储应用的头部以及包括客户端文件的存储驱动器。该方法通过LAN交换机将第一SBB的第一接口连接到客户端计算机设备，并将第一SBB的第二接口连接到第二SBB的第一接口。目录由存储在第一和第二SBB中的客户端文件构建。该目录保持在第一和第二SBB中。在一个方面，作为主SBB的第一SBB响应于来自连接到LAN交换机的客户端计算机的查询，提供对NAS堆叠网络目录结构的访问。

28. 发明授权

US08488618B1 Dual-connect service box with router bypass 有权
标题翻译：双路服务器与路由器旁路
公开(公告)号：US08488618B1
公开(公告)日：2013-07-16
申请号：US12769540
申请日：2010-04-28
申请人： Millind Mittal , Robert James Fanfelle
发明人： Millind Mittal , Robert James Fanfelle
IPC分类号： H04L12/28
CPC分类号： H04L63/02 , H04L63/0236
摘要： A system and method provide both inline services and in-network services for a dual-connect service box interposed between a modem and a router. The method transceives communications between a service box wide area network (WAN) port and a local area network (LAN) port of a WAN-connected broadband modem, and between a service box WAN-proxy port and a WAN port of a router. The method also selectively transceives communications between the service box WAN port and a LAN port. A service box binding module monitors messages transceived between the router and the modem to determine the service box WAN IP address, and registers at least one service box WAN IP addresses with a WAN network-connected account server. The method selectively transceives communications in response to an authentification means, which may be identifying an authorized port number in the communications, or identifying an authorized command in the communications.
摘要翻译：系统和方法为插入在调制解调器和路由器之间的双连接服务盒提供内联服务和网络内服务。该方法收发WAN连接宽带调制解调器的服务盒广域网（WAN）端口和局域网（LAN）端口之间以及路由器的服务盒WAN代理端口和WAN端口之间的通信。该方法还选择性地收发服务盒WAN端口和LAN端口之间的通信。服务箱绑定模块监视路由器和调制解调器之间收发的消息，以确定服务箱WAN IP地址，并向WAN网络连接的帐户服务器注册至少一个服务箱WAN IP地址。所述方法响应于认证装置选择性地收发通信，所述认证装置可能是识别通信中的授权端口号，或者识别通信中的授权命令。

29. 发明申请

US20130124833A1 Method and Apparatus for Unpacking Packed Data 审中-公开
公开(公告)号：US20130124833A1
公开(公告)日：2013-05-16
申请号：US13730846
申请日：2012-12-29
申请人： Alexander Peleg , Yaakov Yaari , Millind Mittal , Larry M. Mennemeier , Benny Eitan
发明人： Alexander Peleg , Yaakov Yaari , Millind Mittal , Larry M. Mennemeier , Benny Eitan
IPC分类号： G06F9/30
CPC分类号： G06F9/30036 , G06F7/49921 , G06F9/30025 , G06F9/30032 , G06F9/30109 , G06F9/3013 , G06F9/30145 , G06F9/30149 , G06F9/30167 , G06F9/30181 , G06F9/30192 , G06F9/30196
摘要： An apparatus includes an instruction decoder, first and second source registers and a circuit coupled to the decoder to receive packed data from the source registers and to unpack the packed data responsive to an unpack instruction received by the decoder. A first packed data element and a third packed data element are received from the first source register. A second packed data element and a fourth packed data element are received from the second source register. The circuit copies the packed data elements into a destination register resulting with the second packed data element adjacent to the first packed data element, the third packed data element adjacent to the second packed data element, and the fourth packed data element adjacent to the third packed data element.

30. 发明申请

US20130117540A1 METHOD AND APPARATUS FOR UNPACKING PACKED DATA 有权
标题翻译：打包包装数据的方法和装置
公开(公告)号：US20130117540A1
公开(公告)日：2013-05-09
申请号：US13730832
申请日：2012-12-29
申请人： Alexander Peleg , Yaakov Yaari , Millind Mittal , Larry M. Mennemeier , Benny Eitan
发明人： Alexander Peleg , Yaakov Yaari , Millind Mittal , Larry M. Mennemeier , Benny Eitan
IPC分类号： G06F9/30
CPC分类号： G06F9/30036 , G06F7/49921 , G06F9/30025 , G06F9/30032 , G06F9/30109 , G06F9/3013 , G06F9/30145 , G06F9/30149 , G06F9/30167 , G06F9/30181 , G06F9/30192 , G06F9/30196
摘要： An apparatus includes an instruction decoder, first and second source registers and a circuit coupled to the decoder to receive packed data from the source registers and to unpack the packed data responsive to an unpack instruction received by the decoder. A first packed data element and a third packed data element are received from the first source register. A second packed data element and a fourth packed data element are received from the second source register. The circuit copies the packed data elements into a destination register resulting with the second packed data element adjacent to the first packed data element, the third packed data element adjacent to the second packed data element, and the fourth packed data element adjacent to the third packed data element.
摘要翻译：一种装置包括指令解码器，第一和第二源寄存器以及耦合到解码器的电路，用于从源寄存器接收压缩数据，并根据解码器接收到的解包指令对打包数据进行解包。从第一源寄存器接收第一打包数据元素和第三打包数据元素。从第二源寄存器接收第二打包数据元素和第四打包数据元素。所述电路将打包的数据元素复制到目的地寄存器中，其中与第一打包数据元素相邻的第二打包数据元素，与第二打包数据元素相邻的第三打包数据元素以及与第三打包数据元素相邻的第四打包数据元素数据元素。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式