专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US07802050B2 Monitoring a target agent execution pattern on a VT-enabled system 失效
标题翻译：在启用VT的系统上监视目标代理执行模式
公开(公告)号：US07802050B2
公开(公告)日：2010-09-21
申请号：US11541474
申请日：2006-09-29
申请人： Uday Savagaonkar , Ravi Sahita , David Durham
发明人： Uday Savagaonkar , Ravi Sahita , David Durham
IPC分类号： G06F21/00
CPC分类号： G06F21/56 , G06F21/57
摘要： Methods, apparatuses, articles, and systems for observing, by a virtual machine manager of a physical device, execution of a target process of a virtual machine of the physical device, including virtual addresses of the virtual machine referenced during the execution, are described herein. The virtual machine manager further determines whether the target process is executing in an expected manner based at least in part on the observed virtual address references and expected virtual address references.
摘要翻译：本文描述了由物理设备的虚拟机管理器观察物理设备的虚拟机的目标进程（包括在执行期间引用的虚拟机的虚拟地址）的方法，装置，物品和系统。虚拟机管理器进一步基于观察到的虚拟地址引用和预期的虚拟地址引用来进一步确定目标进程是否以预期的方式执行。

22. 发明申请

US20080022065A1 Dynamically sharing a stack between different code segments 失效
标题翻译：在不同代码段之间动态共享堆栈
公开(公告)号：US20080022065A1
公开(公告)日：2008-01-24
申请号：US11490824
申请日：2006-07-21
申请人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
发明人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
IPC分类号： G06F12/00
CPC分类号： G06F12/1475 , G06F12/145
摘要： In one embodiment, the present invention includes a method for receiving a request from a caller code portion of a first color to color at least a portion of a stack with a second color, determining if the request is valid, and if so remapping the stack portion from a first mapping colored with the first color to a second mapping colored with the second color. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括一种方法，用于从第一颜色的呼叫者代码部分接收请求以对具有第二颜色的堆栈的至少一部分进行着色，确定请求是否有效，以及如果重新映射堆栈从具有第一颜色的第一映射部分到第二颜色的第二映射。描述和要求保护其他实施例。

23. 发明授权

US08738889B2 Generating multiple address space identifiers per virtual machine to switch between protected micro-contexts 有权
标题翻译：为每个虚拟机生成多个地址空间标识符，以便在受保护的微上下文之间切换
公开(公告)号：US08738889B2
公开(公告)日：2014-05-27
申请号：US13650227
申请日：2012-10-12
申请人： Uday Savagaonkar , Madhavan Parthasarathy , Ravi Sahita , David Durham
发明人： Uday Savagaonkar , Madhavan Parthasarathy , Ravi Sahita , David Durham
IPC分类号： G06F12/00
CPC分类号： G06F12/1027 , G06F12/145
摘要： Embodiments of an invention for generating multiple address space identifiers per virtual machine to switch between protected micro-contexts are disclosed. In one embodiment, a method includes receiving an instruction requiring an address translation; initiating, in response to receiving the instruction, a page walk from a page table pointed to by the contents of a page table pointer storage location; finding, during the page walk, a transition entry; storing the address translation and one of a plurality of address source identifiers in a translation lookaside buffer, the one of the plurality of address source identifiers based on one of a plurality of a virtual partition identifiers, at least two of the plurality of virtual partition identifiers associated with one of a plurality of virtual machines; and re-initiating the page walk.
摘要翻译：公开了用于在每个虚拟机之间生成多个地址空间标识符以在受保护的微上下文之间切换的发明的实施例。在一个实施例中，一种方法包括接收需要地址转换的指令; 响应于接收到指令，从页表指针存储位置的内容指向的页表中启动页面移动; 在页面散步期间发现转换条目; 将地址转换和多个地址源标识符之一存储在转换后备缓冲器中，所述多个地址源标识符中的一个基于多个虚拟分区标识符中的一个，多个虚拟分区标识符中的至少两个与多个虚拟机中的一个相关联; 并重新启动页面散步。

24. 发明授权

US08261065B2 Protecting caller function from undesired access by callee function 有权
标题翻译：保护来电功能免受被叫功能的不期望的访问
公开(公告)号：US08261065B2
公开(公告)日：2012-09-04
申请号：US11770067
申请日：2007-06-28
申请人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
发明人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
IPC分类号： G06F21/00
CPC分类号： G06F21/52 , G06F9/4486
摘要： Disclosed is a method for restricting access of a first code of a plurality of codes and data of a first function from a second function. Thee method comprises calling the second function by the first function, addresses of the plurality of data may be stored in a stack page and colored in a first color (102). The method comprises performing access control check in a transition page for verifying whether the first function has permission to call the second function (104). Further the method comprises protecting the first code from the second function by coloring the data and/or addresses in a second color (106). Furthermore, the method comprises executing the second function by pushing addresses of the second function on the stack page, the addresses of the second function colored in a third color (108) and unprotecting the first code by coloring the addresses of the first code in the first color (110).
摘要翻译：公开了一种用于从第二功能限制多个代码的第一代码和第一函数的数据的访问的方法。该方法包括通过第一功能调用第二功能，多个数据的地址可以被存储在堆栈页面中并以第一颜色（102）着色。该方法包括在转换页面中执行访问控制检查，以验证第一功能是否具有调用第二功能的权限（104）。此外，该方法包括通过使第二颜色（106）中的数据和/或地址着色来保护第一代码免受第二功能。此外，该方法包括通过在堆栈页面上推动第二函数的地址来执行第二函数，第二函数的地址以第三颜色（108）着色，并且通过着色第一代码中的第一代码的地址来对第一代码进行保护第一颜色（110）。

25. 发明申请

US20080282358A1 Protecting Caller Function from Undesired Access by Callee Function 有权
标题翻译：保护来电者功能不受管道功能的不理想访问
公开(公告)号：US20080282358A1
公开(公告)日：2008-11-13
申请号：US11745399
申请日：2007-05-07
申请人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
发明人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
IPC分类号： G06F21/22 , G06F15/00
CPC分类号： G06F21/629 , G06F2221/2141
摘要： Disclosed is a method for restricting access of a first code of a plurality of codes of a first function from a second function. Thee method comprises calling the second function by the first function, addresses of the plurality of codes are stored in a stack page and colored in a first color (102). The method comprises performing access control check in a transition page for verifying whether the first function has permission to call the second function (104). Further the method comprises protecting the first code from the second function by coloring the addresses in a second color (106). Furthermore, the method comprises executing the second function by pushing addresses of the second function on the stack page, the addresses of the second function colored in a third color (108) and unprotecting the first code by coloring the addresses of the first code in the first color (110).
摘要翻译：公开了一种用于从第二功能限制第一功能的多个代码的第一代码的访问的方法。该方法包括通过第一功能调用第二函数，多个代码的地址被存储在堆栈页中并以第一颜色（102）着色。该方法包括在转换页面中执行访问控制检查，以验证第一功能是否具有调用第二功能的权限（104）。此外，该方法包括通过着色第二颜色（106）中的地址来保护第一代码免受第二功能。此外，该方法包括通过在堆栈页面上推动第二函数的地址来执行第二函数，第二函数的地址以第三颜色（108）着色，并且通过着色第一代码中的第一代码的地址来对第一代码进行保护第一颜色（110）。

26. 发明申请

US20080077767A1 Method and apparatus for secure page swapping in virtual memory systems 审中-公开
标题翻译：用于在虚拟存储器系统中进行安全页面交换的方法和装置
公开(公告)号：US20080077767A1
公开(公告)日：2008-03-27
申请号：US11528161
申请日：2006-09-27
申请人： Hormuzd M. Khosravi , Uday Savagaonkar , Ravi Sahita , David Durham , Travis Schluessler , Gayathri Nagabhushan
发明人： Hormuzd M. Khosravi , Uday Savagaonkar , Ravi Sahita , David Durham , Travis Schluessler , Gayathri Nagabhushan
IPC分类号： G06F12/00 , G06F13/00
CPC分类号： G06F12/1475 , G06F12/0804 , G06F12/1408 , G06F12/1491
摘要： Embodiments described herein disclose a method and apparatus for secure page swapping in a virtual memory system. An integrity check value mechanism is used to protect software programs from run-time attacks against memory pages while those pages are swapped to secondary memory. A hash value is computed for an agent page as it is swapped from primary memory to secondary memory. When the page is swapped back into primary memory from secondary memory, that hash value is recomputed to verify that the page was not modified while stored in secondary memory. Alternatively, the hash value is pre-computed and placed in an integrity manifest wherein it is retrieved and verified when the page is loaded back into primary memory from secondary memory.
摘要翻译：本文描述的实施例公开了一种用于虚拟存储器系统中的安全页面交换的方法和装置。完整性检查值机制用于保护软件程序免受针对存储器页面的运行时攻击，而这些页面被交换到辅助存储器。当代理页面从主存储器交换到辅助存储器时，计算哈希值。当页面从辅助存储器交换回主存储器时，重新计算该哈希值，以验证在存储在辅助存储器中的页面是否未被修改。或者，哈希值是预先计算的并且被放置在完整性清单中，其中当从第二存储器将页面加载回主存储器时，其被检索和验证。

27. 发明申请

US20130036291A1 GENERATING MULTIPLE ADDRESS SPACE IDENTIFIERS PER VIRTUAL MACHINE TO SWITCH BETWEEN PROTECTED MICRO-CONTEXTS 有权
标题翻译：每个虚拟机产生多个地址空间识别器，以保护受保护的微控制器
公开(公告)号：US20130036291A1
公开(公告)日：2013-02-07
申请号：US13650227
申请日：2012-10-12
申请人： Uday Savagaonkar , Madhavan Parthasarathy , Ravi Sahita , David Durham
发明人： Uday Savagaonkar , Madhavan Parthasarathy , Ravi Sahita , David Durham
IPC分类号： G06F12/10
CPC分类号： G06F12/1027 , G06F12/145
摘要： Embodiments of an invention for generating multiple address space identifiers per virtual machine to switch between protected micro-contexts are disclosed. In one embodiment, a method includes receiving an instruction requiring an address translation; initiating, in response to receiving the instruction, a page walk from a page table pointed to by the contents of a page table pointer storage location; finding, during the page walk, a transition entry; storing the address translation and one of a plurality of address source identifiers in a translation lookaside buffer, the one of the plurality of address source identifiers based on one of a plurality of a virtual partition identifiers, at least two of the plurality of virtual partition identifiers associated with one of a plurality of virtual machines; and re-initiating the page walk.
摘要翻译：公开了用于在每个虚拟机之间生成多个地址空间标识符以在受保护的微上下文之间切换的发明的实施例。在一个实施例中，一种方法包括接收需要地址转换的指令; 响应于接收到指令，从页表指针存储位置的内容指向的页表中启动页面移动; 在页面散步期间发现转换条目; 将地址转换和多个地址源标识符之一存储在转换后备缓冲器中，所述多个地址源标识符中的一个基于多个虚拟分区标识符中的一个，多个虚拟分区标识符中的至少两个与多个虚拟机中的一个相关联; 并重新启动页面散步。

28. 发明授权

US07512768B2 Dynamically sharing a stack between different code segments 失效
标题翻译：在不同代码段之间动态共享堆栈
公开(公告)号：US07512768B2
公开(公告)日：2009-03-31
申请号：US11490824
申请日：2006-07-21
申请人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
发明人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28 , G06F9/26 , G06F9/34
CPC分类号： G06F12/1475 , G06F12/145
摘要： In one embodiment, the present invention includes a method for receiving a request from a caller code portion of a first color to color at least a portion of a stack with a second color, determining if the request is valid, and if so remapping the stack portion from a first mapping colored with the first color to a second mapping colored with the second color. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括一种方法，用于从第一颜色的呼叫者代码部分接收请求以对具有第二颜色的堆栈的至少一部分进行着色，确定请求是否有效，以及如果重新映射堆栈从具有第一颜色的第一映射部分到第二颜色的第二映射。描述和要求保护其他实施例。

29. 发明申请

US20080082722A1 Monitoring a target agent execution pattern on a VT-enabled system 失效
标题翻译：在启用VT的系统上监视目标代理执行模式
公开(公告)号：US20080082722A1
公开(公告)日：2008-04-03
申请号：US11541474
申请日：2006-09-29
申请人： Uday Savagaonkar , Ravi Sahita , David Durham
发明人： Uday Savagaonkar , Ravi Sahita , David Durham
IPC分类号： G06F21/00
CPC分类号： G06F21/56 , G06F21/57
摘要： Methods, apparatuses, articles, and systems for observing, by a virtual machine manager of a physical device, execution of a target process of a virtual machine of the physical device, including virtual addresses of the virtual machine referenced during the execution, are described herein. The virtual machine manager further determines whether the target process is executing in an expected manner based at least in part on the observed virtual address references and expected virtual address references.
摘要翻译：本文描述了由物理设备的虚拟机管理器观察物理设备的虚拟机的目标进程（包括在执行期间引用的虚拟机的虚拟地址）的方法，装置，物品和系统。虚拟机管理器进一步基于观察到的虚拟地址引用和预期的虚拟地址引用来进一步确定目标进程是否以预期的方式执行。

30. 发明授权

US08839450B2 Secure vault service for software components within an execution environment 有权
标题翻译：为执行环境中的软件组件提供安全的保管库服务
公开(公告)号：US08839450B2
公开(公告)日：2014-09-16
申请号：US11833073
申请日：2007-08-02
申请人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
IPC分类号： G06F12/14 , G06F17/30
CPC分类号： G06F21/6209 , G06F12/1408 , G06F12/1466 , G06F12/1475 , G06F21/52 , G06F21/53
摘要： Embodiments of apparatuses, articles, methods, and systems for secure vault service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise compromised operating system environment. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译：这里一般地描述用于执行环境中的软件组件的安全保险库服务的装置，物品，方法和系统的实施例。一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制存储器区域，以便仅通过特定认证的，授权的和已验证的软件组件进行访问，即使在其他受损的操作系统环境的一部分。代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。可以描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式