专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明申请

US20160092673A1 HARDWARE SHADOW STACK SUPPORT FOR LEGACY GUESTS 有权
标题翻译：硬件阴影堆栈支持LEGACY GUESTS
公开(公告)号：US20160092673A1
公开(公告)日：2016-03-31
申请号：US14498075
申请日：2014-09-26
申请人： Michael LeMay , Barry E. Huntley
发明人： Michael LeMay , Barry E. Huntley
IPC分类号： G06F21/52 , G06F9/455
CPC分类号： G06F21/52 , G06F8/30 , G06F8/31 , G06F9/4484 , G06F9/45533 , G06F9/45558 , G06F11/3419 , G06F21/56 , G06F2009/45587
摘要： Technologies for shadow stack support for legacy guests include a computing device having a processor with shadow stack support. During execution of a call instruction, the processor determines whether a legacy stack pointer is within bounds and generates a virtual machine exit if the legacy stack pointer is out-of-bounds. If not out-of-bounds, the processor pushes a return address onto the legacy stack and onto a shadow stack protected by a hypervisor. During execution of a return instruction, the processor determines whether top return addresses of the legacy stack and the shadow stack match, and generates a virtual machine exit if the return addresses do not match. If the return addresses match, the processor pops the return addresses off of the legacy stack and off of the shadow stack. The stack out-of-bounds and the stack mismatch virtual machine exits may be handled by the hypervisor. Other embodiments are described and claimed.
摘要翻译：用于传统客户端的影子堆栈支持技术包括具有处理器的计算设备，该处理器具有阴影栈支持。在执行调用指令期间，处理器确定传统堆栈指针是否在边界内，如果传统堆栈指针超出边界，则会生成虚拟机退出。如果不是超出范围，处理器将返回地址推送到传统堆栈上，并将其保存到由管理程序保护的影子堆栈上。在执行返回指令期间，处理器确定传统堆栈和影子堆叠的顶部返回地址是否匹配，并且如果返回地址不匹配则生成虚拟机退出。如果返回地址匹配，处理器会将返回地址从传统堆栈中弹出并离开阴影栈。虚拟机管理程序可以处理堆栈超出范围和堆栈不匹配的虚拟机退出。描述和要求保护其他实施例。

32. 发明申请

US20150007304A1 METHOD AND APPARATUS FOR SECURING A DYNAMIC BINARY TRANSLATION SYSTEM 有权
标题翻译：用于保护动态二进制翻译系统的方法和装置
公开(公告)号：US20150007304A1
公开(公告)日：2015-01-01
申请号：US13930766
申请日：2013-06-28
申请人： Lior Malka , Koichi Yamada , Palanivelrajan Shanmugavelayutham , Barry E. Huntley , Scott D. Rodgers , James D. Beaney, JR.
发明人： Lior Malka , Koichi Yamada , Palanivelrajan Shanmugavelayutham , Barry E. Huntley , Scott D. Rodgers , James D. Beaney, JR.
IPC分类号： G06F21/52
CPC分类号： G06F21/74 , G06F21/54
摘要： A processor and method are described for managing different privilege levels associated with different types of program code, including binary translation program code. For example, one embodiment of a method comprises entering into one of a plurality of privilege modes responsive to detecting the execution of a corresponding one of a plurality of different types of program code including native executable program code, translated executable program code, and binary translation program code. In one embodiment, the binary translation program code includes sub-components each of which are associated with a different privilege level for improved security.
摘要翻译：描述了处理器和方法，用于管理与不同类型的程序代码相关联的不同特权级别，包括二进制翻译程序代码。例如，方法的一个实施例包括响应于检测到多个不同类型的程序代码中的相应的一个程序代码的执行，包括本机可执行程序代码，翻译的可执行程序代码和二进制转换，来进入多个特权模式之一程序代码。在一个实施例中，二进制翻译程序代码包括子组件，每个子组件与不同的权限级别相关联，以提高安全性。

33. 发明申请

US20180183796A1 ONBOARDING AND ACCOUNTING OF DEVICES INTO AN HPC FABRIC 审中-公开
公开(公告)号：US20180183796A1
公开(公告)日：2018-06-28
申请号：US15392379
申请日：2016-12-28
申请人： Ned M. Smith , Barry E. Huntley , Simon Red Hunt
发明人： Ned M. Smith , Barry E. Huntley , Simon Red Hunt
IPC分类号： H04L29/06 , H04L12/931 , H04L12/933 , H04L29/08
CPC分类号： H04L63/10 , H04L63/0428 , H04L67/10
摘要： A method to onboard a slave node to a high performance computing system that includes a fabric switch network that includes a fabric switch master and a group of slave nodes, wherein the fabric switch master is configured to route messages between slave nodes of the group comprising: receiving a fabric switch master address message, at an onboarding slave node, over an external network; providing an identification message, by the onboarding slave node, over the fabric switch network; receiving the identification message, at the fabric switch master, over the fabric switch network; providing the permission message, by the fabric switch master, over the fabric switch network; and receiving, a permission message, at the onboarding slave node, over the fabric switch network.

34. 发明申请

US20180181764A1 SYSTEM, APPARATUS AND METHOD FOR TRUSTED CHANNEL CREATION USING EXECUTE-ONLY CODE 审中-公开
公开(公告)号：US20180181764A1
公开(公告)日：2018-06-28
申请号：US15390846
申请日：2016-12-27
申请人： Barry E. Huntley
发明人： Barry E. Huntley
IPC分类号： G06F21/60 , G06F9/455
CPC分类号： G06F21/602 , G06F9/45558 , G06F21/606 , G06F2009/45587
摘要： In one embodiment, an apparatus includes a first virtual machine (VM) including an encryption logic to encrypt first information. The encryption logic may include a first code block stored in a first execute-only region of a memory to encrypt the first information with a first key provisioned by a trusted agent, the first key stored in the first code block. The apparatus may further include a second VM including a decryption logic to decrypt the first information, and a shared buffer to enable secure communication of the encrypted first information from the first VM to the second VM, without involvement of the trusted agent. Other embodiments are described and claimed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式