专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US07757035B2 Method for optimizing virtualization technology and memory protections using processor-extensions for page table and page directory striping 有权
标题翻译：使用处理器扩展优化虚拟化技术和内存保护的方法，用于页表和页目录条带化
公开(公告)号：US07757035B2
公开(公告)日：2010-07-13
申请号：US11768344
申请日：2007-06-26
申请人： David Durham , Hormuzd Khosravi , Gayathri Nagabhushan , Uday Savagaonkar
发明人： David Durham , Hormuzd Khosravi , Gayathri Nagabhushan , Uday Savagaonkar
IPC分类号： G06F21/00 , G06F13/00 , G06F13/28 , G06F9/46
CPC分类号： G06F12/145 , G06F12/1036 , G06F12/109
摘要： In a virtualized processor based system causing a transition to a virtual machine monitor executing on the processor based system in response to a modification of a page table of a guest executing in a virtual machine of the processor based system, and the virtual machine monitor responding to the transition by performing a verification action, and for each bit modified in the page table of the guest, reading a status indicator for the bit to determine if the bit is significant; and causing the transition only if the status indicator for any bit modified in the page table indicates that the bit is significant.
摘要翻译：在基于虚拟化处理器的系统中，响应于在基于处理器的系统的虚拟机中执行的访客的页表的修改，导致在基于处理器的系统上执行的虚拟机监视器的转换，并且虚拟机监视器响应于通过执行验证动作的转换，以及对访客的页表中修改的每个位，读取该位的状态指示符，以确定该位是否有效; 并且仅当在页表中修改的任何位的状态指示符指示该位是有效时才引起转换。

22. 发明申请

US20090006714A1 METHOD FOR OPTIMIZING VIRTUALIZATION TECHNOLOGY AND MEMORY PROTECTIONS USING PROCESSOR-EXTENSIONS FOR PAGE TABLE AND PAGE DIRECTORY STRIPING 有权
标题翻译：使用处理器扩展优化虚拟化技术和存储器保护的方法，用于页表和页面目录条带
公开(公告)号：US20090006714A1
公开(公告)日：2009-01-01
申请号：US11768344
申请日：2007-06-26
申请人： David Durham , Hormuzd Khosravi , Gayathri Nagabhushan , Uday Savagaonkar
发明人： David Durham , Hormuzd Khosravi , Gayathri Nagabhushan , Uday Savagaonkar
IPC分类号： G06F12/02
CPC分类号： G06F12/145 , G06F12/1036 , G06F12/109
摘要： In a virtualized processor based system causing a transition to a virtual machine monitor executing on the processor based system in response to a modification of a page table of a guest executing in a virtual machine of the processor based system, and the virtual machine monitor responding to the transition by performing a verification action, and for each bit modified in the page table of the guest, reading a status indicator for the bit to determine if the bit is significant; and causing the transition only if the status indicator for any bit modified in the page table indicates that the bit is significant.
摘要翻译：在基于虚拟化处理器的系统中，响应于在基于处理器的系统的虚拟机中执行的访客的页表的修改，导致在基于处理器的系统上执行的虚拟机监视器的转换，并且虚拟机监视器响应于通过执行验证动作的转换，以及对访客的页表中修改的每个位，读取该位的状态指示符，以确定该位是否有效; 并且仅当在页表中修改的任何位的状态指示符指示该位是有效时才引起转换。

23. 发明授权

US08839450B2 Secure vault service for software components within an execution environment 有权
标题翻译：为执行环境中的软件组件提供安全的保管库服务
公开(公告)号：US08839450B2
公开(公告)日：2014-09-16
申请号：US11833073
申请日：2007-08-02
申请人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
IPC分类号： G06F12/14 , G06F17/30
CPC分类号： G06F21/6209 , G06F12/1408 , G06F12/1466 , G06F12/1475 , G06F21/52 , G06F21/53
摘要： Embodiments of apparatuses, articles, methods, and systems for secure vault service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise compromised operating system environment. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译：这里一般地描述用于执行环境中的软件组件的安全保险库服务的装置，物品，方法和系统的实施例。一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制存储器区域，以便仅通过特定认证的，授权的和已验证的软件组件进行访问，即使在其他受损的操作系统环境的一部分。代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。可以描述和要求保护其他实施例。

24. 发明申请

US20090125885A1 Method and system for whitelisting software components 有权
标题翻译：软件组件白名单的方法和系统
公开(公告)号：US20090125885A1
公开(公告)日：2009-05-14
申请号：US11984001
申请日：2007-11-13
申请人： Nagabhushan Gayathri , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
发明人： Nagabhushan Gayathri , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/566 , G06F2221/2149
摘要： A method and system for whitelisting software components is disclosed. In a first operating environment, runtime information may be collected about a first loaded and executing software component. The collected information may be communicated to a second software component operating in a second operating environment that is isolated from the first operating environment. The collect runtime information may be compared with a validated set of information about the first software component. Other embodiments are described and claimed.
摘要翻译：公开了一种用于白名单软件组件的方法和系统。在第一操作环境中，可以收集有关第一加载和执行的软件组件的运行时信息。收集的信息可以被传送到在与第一操作环境隔离的第二操作环境中操作的第二软件组件。收集运行时信息可以与关于第一软件组件的经验证的一组信息进行比较。描述和要求保护其他实施例。

25. 发明授权

US08434067B2 Method and system for whitelisting software components 有权
公开(公告)号：US08434067B2
公开(公告)日：2013-04-30
申请号：US13287707
申请日：2011-11-02
申请人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
发明人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/566 , G06F2221/2149
摘要： A method and system for whitelisting software components is disclosed. In a first operating environment, runtime information may be collected about a first loaded and executing software component. The collected information may be communicated to a second software component operating in a second operating environment that is isolated from the first operating environment. The collect runtime information may be compared with a validated set of information about the first software component. Other embodiments are described and claimed.

26. 发明授权

US08205238B2 Platform posture and policy information exchange method and apparatus 有权
标题翻译：平台姿势和政策信息交换方法和装置
公开(公告)号：US08205238B2
公开(公告)日：2012-06-19
申请号：US11393486
申请日：2006-03-30
申请人： Uri Blumenthal , Hormuzd Khosravi , Karanvir Grewal
发明人： Uri Blumenthal , Hormuzd Khosravi , Karanvir Grewal
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L63/101
摘要： Transport agnostic, secure communication protocol for transmitting host platform posture information to the Network Access Control Server or PDP (Policy Decision Point) and for receiving policy information to be enforced on the trusted host platform and respective applications for data processing and communication are described herein.
摘要翻译：这里描述了用于将主机平台姿势信息发送到网络访问控制服务器或PDP（策略决策点）并且用于接收在可信主机平台上执行的策略信息和用于数据处理和通信的相应应用的传输不可知的安全通信协议。

27. 发明申请

US20070240197A1 Platform posture and policy information exchange method and apparatus 有权
标题翻译：平台姿势和政策信息交换方法和装置
公开(公告)号：US20070240197A1
公开(公告)日：2007-10-11
申请号：US11393486
申请日：2006-03-30
申请人： Uri Blumenthal , Hormuzd Khosravi , Karanvir Grewal
发明人： Uri Blumenthal , Hormuzd Khosravi , Karanvir Grewal
IPC分类号： H04L9/00
CPC分类号： H04L63/0227 , H04L63/101
摘要： Transport agnostic, secure communication protocol for transmitting host platform posture information to the Network Access Control Server or PDP (Policy Decision Point) and for receiving policy information to be enforced on the trusted host platform and respective applications for data processing and communication are described herein.
摘要翻译：这里描述了用于将主机平台姿势信息发送到网络访问控制服务器或PDP（策略决策点）并且用于接收在可信主机平台上执行的策略信息和用于数据处理和通信的相应应用的传输不可知的安全通信协议。

28. 发明授权

US08364973B2 Dynamic generation of integrity manifest for run-time verification of software program 有权
标题翻译：动态生成软件程序的运行时验证的完整性清单
公开(公告)号：US08364973B2
公开(公告)日：2013-01-29
申请号：US11967928
申请日：2007-12-31
申请人： Hormuzd Khosravi , David Durham , Prashant Dewan , Ravi Sahita , Uday R. Savagaonkar , Men Long
发明人： Hormuzd Khosravi , David Durham , Prashant Dewan , Ravi Sahita , Uday R. Savagaonkar , Men Long
IPC分类号： G06F21/00
CPC分类号： G06F21/64 , G06F21/51
摘要： A measurement engine generates an integrity manifest for a software program and uses it to perform active platform observation. The integrity manifest indicates an integrity check value for a section of the program's code. The measurement engine computes a comparison value on the program's image in memory and determines if the comparison value matches the expected integrity check value. If the values do not match, the program's image is determined to be modified, and appropriate remedial action may be triggered.
摘要翻译：测量引擎为软件程序生成完整性清单，并使用它来执行主动平台观察。完整性清单表示程序代码的一部分的完整性检查值。测量引擎计算内存中程序映像的比较值，并确定比较值是否与预期的完整性校验值相匹配。如果值不匹配，则确定程序的图像被修改，并且可能触发适当的补救动作。

29. 发明申请

US20080022129A1 SECURE PLATFORM VOUCHER SERVICE FOR SOFTWARE COMPONENTS WITHIN AN EXECUTION ENVIRONMENT 有权
标题翻译：执行环境中软件组件的安全平台提供服务
公开(公告)号：US20080022129A1
公开(公告)日：2008-01-24
申请号：US11864573
申请日：2007-09-28
申请人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
IPC分类号： H04L9/00 , G06F12/14 , H04L9/32
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： Embodiments of apparatus, articles, methods, and systems for secure platform voucher service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise comprised operating system environment. A provisioning remote entity or gateway only needs to know a platform's public key or certificate hierarchy in order to receive verification proof for any component in the platform. The verification proof or voucher helps to assure to the remote entity that no man-in-the-middle, rootkit, spyware or other malware running in the platform or on the network will have access to the provisioned material. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译：这里一般地描述用于执行环境中的软件组件的安全平台凭单服务的装置，物品，方法和系统的实施例。一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制仅通过特定认证的，授权的和已验证的软件组件进行访问的存储器区域，即使在另外包含的操作系统环境的一部分。配置远程实体或网关只需要知道平台的公钥或证书层次结构，以便接收平台中任何组件的验证证明。验证证明或凭证有助于向远程实体确保在平台或网络上运行的中间人，rootkit，间谍软件或其他恶意软件将无法访问所提供的资料。代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。可以描述和要求保护其他实施例。

30. 发明申请

US20090038017A1 SECURE VAULT SERVICE FOR SOFTWARE COMPONENTS WITHIN AN EXECUTION ENVIRONMENT 有权
标题翻译：执行环境中软件组件的安全维护服务
公开(公告)号：US20090038017A1
公开(公告)日：2009-02-05
申请号：US11833073
申请日：2007-08-02
申请人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： G06F21/6209 , G06F12/1408 , G06F12/1466 , G06F12/1475 , G06F21/52 , G06F21/53
摘要： Embodiments of apparatuses, articles, methods, and systems for secure vault service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise compromised operating system environment. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译：这里一般地描述用于执行环境中的软件组件的安全保险库服务的装置，物品，方法和系统的实施例。一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制存储器区域，以便仅通过特定认证的，授权的和已验证的软件组件进行访问，即使在其他受损的操作系统环境的一部分。代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。可以描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式