专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明申请

US20120144482A1 Method and System for Whitelisting Software Components 有权
标题翻译：软件组件白名单的方法和系统
公开(公告)号：US20120144482A1
公开(公告)日：2012-06-07
申请号：US13287707
申请日：2011-11-02
申请人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
发明人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/566 , G06F2221/2149
摘要： A method and system for whitelisting software components is disclosed. In a first operating environment, runtime information may be collected about a first loaded and executing software component. The collected information may be communicated to a second software component operating in a second operating environment that is isolated from the first operating environment. The collect runtime information may be compared with a validated set of information about the first software component. Other embodiments are described and claimed.
摘要翻译：公开了一种用于白名单软件组件的方法和系统。在第一操作环境中，可以收集有关第一加载和执行的软件组件的运行时信息。收集的信息可以被传送到在与第一操作环境隔离的第二操作环境中操作的第二软件组件。收集运行时信息可以与关于第一软件组件的经验证的一组信息进行比较。描述和要求保护其他实施例。

32. 发明授权

US08099718B2 Method and system for whitelisting software components 有权
标题翻译：软件组件白名单的方法和系统
公开(公告)号：US08099718B2
公开(公告)日：2012-01-17
申请号：US11984001
申请日：2007-11-13
申请人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
发明人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/566 , G06F2221/2149
摘要： A method and system for whitelisting software components is disclosed. In a first operating environment, runtime information may be collected about a first loaded and executing software component. The collected information may be communicated to a second software component operating in a second operating environment that is isolated from the first operating environment. The collect runtime information may be compared with a validated set of information about the first software component. Other embodiments are described and claimed.
摘要翻译：公开了一种用于白名单软件组件的方法和系统。在第一操作环境中，可以收集有关第一加载和执行的软件组件的运行时信息。收集的信息可以被传送到在与第一操作环境隔离的第二操作环境中操作的第二软件组件。收集运行时信息可以与关于第一软件组件的经验证的一组信息进行比较。描述和要求保护其他实施例。

33. 发明申请

US20090172814A1 DYNAMIC GENERATION OF INTEGRITY MANIFEST FOR RUN-TIME VERIFICATION OF SOFTWARE PROGRAM 有权
标题翻译：软件程序运行验证的完整性更新动态生成
公开(公告)号：US20090172814A1
公开(公告)日：2009-07-02
申请号：US11967928
申请日：2007-12-31
申请人： Hormuzd Khosravi , David Durham , Prashant Dewan , Ravi Sahita , Uday R. Savagaonkar , Men Long
发明人： Hormuzd Khosravi , David Durham , Prashant Dewan , Ravi Sahita , Uday R. Savagaonkar , Men Long
IPC分类号： G06F21/22
CPC分类号： G06F21/64 , G06F21/51
摘要： A measurement engine generates an integrity manifest for a software program and uses it to perform active platform observation. The integrity manifest indicates an integrity check value for a section of the program's code. The measurement engine computes a comparison value on the program's image in memory and determines if the comparison value matches the expected integrity check value. If the values do not match, the program's image is determined to be modified, and appropriate remedial action may be triggered.
摘要翻译：测量引擎为软件程序生成完整性清单，并使用它来执行主动平台观察。完整性清单表示程序代码的一部分的完整性检查值。测量引擎计算内存中程序映像的比较值，并确定比较值是否与预期的完整性校验值相匹配。如果值不匹配，则确定程序的图像被修改，并且可能触发适当的补救动作。

34. 发明授权

US08713260B2 Adaptive block pre-fetching method and system 有权
标题翻译：自适应块预取方法和系统
公开(公告)号：US08713260B2
公开(公告)日：2014-04-29
申请号：US12753295
申请日：2010-04-02
申请人： Nadim Taha , Hormuzd Khosravi
发明人： Nadim Taha , Hormuzd Khosravi
IPC分类号： G06F13/00
CPC分类号： G06F12/0862
摘要： A method and system may include fetching a first pre-fetched data block having a first length greater than the length of a first requested data block, storing the first pre-fetched data block in a cache, and then fetching a second pre-fetched data block having a second length, greater than the length of a second requested data block, if data in the second requested data block is not entirely stored in a valid part of the cache. The first and second pre-fetched data blocks may be associated with a storage device over a channel. Other embodiments are described and claimed.
摘要翻译：方法和系统可以包括获取具有大于第一请求数据块的长度的第一长度的第一预取数据块，将第一预取数据块存储在高速缓存中，然后获取第二预取数据如果第二请求数据块中的数据未完全存储在高速缓存的有效部分中，则具有大于第二请求数据块的长度的第二长度的块。第一和第二预取数据块可以通过信道与存储设备相关联。描述和要求保护其他实施例。

35. 发明申请

US20120178481A1 REMOTE MANAGEMENT OVER A WIRELESS WIDE-AREA NETWORK USING SHORT MESSAGE SERVICE 有权
标题翻译：使用短消息服务的无线宽带网络进行远程管理
公开(公告)号：US20120178481A1
公开(公告)日：2012-07-12
申请号：US13426929
申请日：2012-03-22
申请人： Gyan Prakash , Farid Adrangi , Selim Aissi , Hormuzd Khosravi , Saurabh Dadu
发明人： Gyan Prakash , Farid Adrangi , Selim Aissi , Hormuzd Khosravi , Saurabh Dadu
IPC分类号： H04W4/14 , H04W84/04
CPC分类号： H04L67/125 , H04W4/12 , H04W52/0225 , Y02D70/1222 , Y02D70/166
摘要： Illustrative embodiments of systems and methods providing remote management over a wireless wide-area network (WWAN) using short messages are disclosed. In one embodiment, a computing device may include an in-band processor, a wireless transceiver configured for communications over a WWAN, and an out-of-band (OOB) processor capable of communicating over the WWAN using the wireless transceiver irrespective of an operational state of the in-band processor. The OOB processor may be configured to receive a short message via the wireless transceiver, determine whether the short message originated from a trusted remote computing device, and execute at least one operation indicated by the short message in response to determining that the short message originated from a trusted remote computing device.
摘要翻译：公开了使用短消息在无线广域网（WWAN）上提供远程管理的系统和方法的说明性实施例。在一个实施例中，计算设备可以包括带内处理器，配置用于通过WWAN进行通信的无线收发器以及能够使用无线收发器通过WWAN进行通信的带外（OOB）处理器，而不管操作状态的带内处理器。 OOB处理器可以被配置为经由无线收发器接收短消息，确定短消息是否源自可信远程计算设备，并且响应于确定短消息源自于可信远程计算设备，执行由短消息指示的至少一个操作可靠的远程计算设备。

36. 发明申请

US20110289146A1 METHOD AND APPARATUS ALLOWING SCAN OF DATA STORAGE DEVICE FROM REMOTE SERVER 有权
标题翻译：从远程服务器允许数据存储设备扫描的方法和设备
公开(公告)号：US20110289146A1
公开(公告)日：2011-11-24
申请号：US12785131
申请日：2010-05-21
申请人： Hormuzd Khosravi , David Durham , David A. Edwards , Venkat R. Gokulrangan , Men Long , Yasser Rasheed
发明人： Hormuzd Khosravi , David Durham , David A. Edwards , Venkat R. Gokulrangan , Men Long , Yasser Rasheed
IPC分类号： G06F15/167 , G06F12/00
CPC分类号： G06F21/57 , G06F21/56
摘要： A method and device allowing a scan of a data storage device from a remote server are disclosed. In some embodiments, a computing device may include an out-of-band (OOB) configured to compute a first hash value for data stored in one or more sectors of a data storage device at a first time; receive, using communication circuitry, a request to transmit a portion of the data stored in the one or more sectors of the data storage device at a second time, the second time being subsequent to the first time; compute a second hash value for the data stored in the one or more sectors of the data storage device at the second time; and transmit, using the communication circuitry, the requested portion of the data, only if the second hash value does not match the first hash value.
摘要翻译：公开了允许从远程服务器扫描数据存储设备的方法和设备。在一些实施例中，计算设备可以包括带外（OOB），其被配置为在第一时间对存储在数据存储设备的一个或多个扇区中的数据计算第一散列值; 接收使用通信电路的请求，以在第二时间之后的第二时间第二时间发送存储在数据存储装置的一个或多个扇区中的数据的一部分的请求; 在第二次计算存储在数据存储设备的一个或多个扇区中的数据的第二哈希值; 并且仅当所述第二散列值与所述第一散列值不匹配时，才使用所述通信电路来发送所请求的数据部分。

37. 发明申请

US20110151854A1 REMOTE MANAGEMENT OVER A WIRELESS WIDE-AREA NETWORK USING SHORT MESSAGE SERVICE 有权
标题翻译：使用短消息服务的无线宽带网络进行远程管理
公开(公告)号：US20110151854A1
公开(公告)日：2011-06-23
申请号：US12645948
申请日：2009-12-23
申请人： Gyan Prakash , Farid Adrangi , Selim Aissi , Hormuzd Khosravi , Saurabh Dadu
发明人： Gyan Prakash , Farid Adrangi , Selim Aissi , Hormuzd Khosravi , Saurabh Dadu
IPC分类号： H04M3/00 , H04W4/12 , G06F17/00
CPC分类号： H04L67/125 , H04W4/12 , H04W52/0225 , Y02D70/1222 , Y02D70/166
摘要： A method and device for remote management over a wireless wide-area network includes receiving a short message over a wireless wide-area network (WWAN) using an out-of-band (OOB) processor of a computing device. The OOB processor is capable of communicating over the WWAN irrespective of an operational state of an in-band processor of the computing device. The computing device executes at least one operation with the OOB processor in response to receiving the short message.
摘要翻译：一种用于通过无线广域网进行远程管理的方法和设备包括使用计算设备的带外（OOB）处理器在无线广域网（WWAN）上接收短消息。 OOB处理器能够通过WWAN进行通信，而与计算设备的带内处理器的操作状态无关。计算设备响应于接收到该短消息而与OOB处理器执行至少一个操作。

38. 发明申请

US20080082680A1 Method for provisioning of credentials and software images in secure network environments 审中-公开
标题翻译：在安全网络环境中提供凭据和软件映像的方法
公开(公告)号：US20080082680A1
公开(公告)日：2008-04-03
申请号：US11540352
申请日：2006-09-29
申请人： Karanvir Grewal , Vincent Zimmer , Hormuzd Khosravi , Alan D. Ross
发明人： Karanvir Grewal , Vincent Zimmer , Hormuzd Khosravi , Alan D. Ross
IPC分类号： G06F15/16
CPC分类号： G06F9/4416 , G06F21/575 , H04L63/0428 , H04L63/12 , H04L67/34
摘要： A method of providing a secure download of a boot image to a remote boot environment of a computer system. In one embodiment of the invention, the remote boot environment and a boot image source engage in a boot image exchange through an authentication channel. In another embodiment, data related to the boot image exchange is tunneled in the authentication channel to protect the boot image exchange from security attacks.
摘要翻译：提供引导映像到计算机系统的远程引导环境的安全下载的方法。在本发明的一个实施例中，远程引导环境和引导映像源通过认证通道参与引导映像交换。在另一个实施例中，与引导映像交换有关的数据在认证通道中被隧道传送，以保护启动映像交换免受安全攻击。

39. 发明授权

US08572692B2 Method and system for a platform-based trust verifying service for multi-party verification 有权
公开(公告)号：US08572692B2
公开(公告)日：2013-10-29
申请号：US12215907
申请日：2008-06-30
申请人： Divya Naidu Kolar Sunder , Hormuzd Khosravi , David Durham , Dan Dahle , Prashant Dewan
发明人： Divya Naidu Kolar Sunder , Hormuzd Khosravi , David Durham , Dan Dahle , Prashant Dewan
IPC分类号： G06F7/04 , H04L9/32
CPC分类号： H04L63/126 , G06F21/31 , G06F21/57 , G06F21/577 , G06F2221/2129 , H04L63/0823 , H04L63/123
摘要： A method and system for a platform-based trust verifying service for multi-party verification. In one embodiment, the method includes a client platform accessing an service provider over a network. Upon accessing the service provider, the client platform receives a request from the service provider for platform measurement and verification. The client platform collects platform information and performs measurement and verification, including performing an integrity manifest comparison. If the integrity manifest comparison indicates a good client platform posture, then the client platform signs the client platform posture and sends an approval notification to the service provider indicating that the client platform has not been compromised. The client platform may then receive the service of the service provider. If the integrity manifest comparison indicates that the client platform posture is not good, then the client platform will send a failure notification to the service provider indicating that the client platform has been compromised.

40. 发明授权

US08555348B2 Hierarchical trust based posture reporting and policy enforcement 有权
标题翻译：基于层次信任的姿势报告和策略执行
公开(公告)号：US08555348B2
公开(公告)日：2013-10-08
申请号：US12714979
申请日：2010-03-01
申请人： Hormuzd Khosravi , David Durham , Karanvir Grewal
发明人： Hormuzd Khosravi , David Durham , Karanvir Grewal
IPC分类号： G06F17/30
CPC分类号： H04L63/0227
摘要： A method that includes initiating a network access request from an access requester on a platform that couples to a network, the network access request made to a policy decision point for the network. The method also includes establishing a secure communication channel over a communication link between the policy decision point and a policy enforcement point on the platform. Another secure communication channel is established over another communication link. The other communication link is between at least the policy enforcement point and a manageability engine resident on the platform. The manageability engine forwards posture information associated with the access requester via the other secure communication channel. The posture information is then forwarded to the policy decision point via the secure communication channel between the policy enforcement point and the policy decision point. The policy decision point indicates what access the access requester can obtain to the network based on a comparison of the posture information to one or more network administrative policies.
摘要翻译：一种方法，其包括从耦合到网络的平台上的访问请求者发起网络访问请求，所述网络访问请求发送到网络的策略决策点。该方法还包括在策略决策点和平台上的策略执行点之间的通信链路上建立安全通信信道。通过另一个通信链路建立另一个安全通信信道。另一个通信链路至少在平台上驻留的策略执行点和可管理引擎之间。可管理性引擎经由另一个安全通信信道转发与访问请求者相关联的姿势信息。然后，姿势信息经由策略执行点和策略决策点之间的安全通信信道被转发到策略决策点。策略决策点基于姿势信息与一个或多个网络管理策略的比较来指示访问请求者可以获得哪些访问到网络。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式