专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

41. 发明申请

US20130054948A1 Attestation Protocol for Securely Booting a Guest Operating System 有权
标题翻译：用于安全引导客户机操作系统的认证协议
公开(公告)号：US20130054948A1
公开(公告)日：2013-02-28
申请号：US13222379
申请日：2011-08-31
申请人： Himanshu Raj , Stefan Saroiu , Alastair Wolman , Paul England , Anh M. Nguyen , Shravan Rayanchu
发明人： Himanshu Raj , Stefan Saroiu , Alastair Wolman , Paul England , Anh M. Nguyen , Shravan Rayanchu
IPC分类号： G06F15/177
CPC分类号： G06F9/4406 , G06F9/4416 , G06F9/45533 , G06F9/45558 , G06F21/50 , G06F21/53 , G06F21/57 , G06F21/575 , G06F2009/45587 , G06F2221/034 , G06F2221/2105 , G06F2221/2149
摘要： In a cloud computing environment, a production server virtualization stack is minimized to present fewer security vulnerabilities to malicious software running within a guest virtual machine. The minimal virtualization stack includes support for those virtual devices necessary for the operation of a guest operating system, with the code base of those virtual devices further reduced. Further, a dedicated, isolated boot server provides functionality to securely boot a guest operating system. The boot server is isolated through use of an attestation protocol, by which the boot server presents a secret to a network switch to attest that the boot server is operating in a clean mode. The attestation protocol may further employ a secure co-processor to seal the secret, so that it is only accessible when the boot server is operating in the clean mode.
摘要翻译：在云计算环境中，最小化生产服务器虚拟化堆栈，以减少在虚拟机中运行的恶意软件的安全漏洞。最小的虚拟化堆栈包括对客户操作系统的操作所需的那些虚拟设备的支持，这些虚拟设备的代码基础进一步减少。此外，专用的隔离引导服务器提供安全引导客户机操作系统的功能。引导服务器通过使用认证协议进行隔离，引导服务器向网络交换机提供秘密，以证明引导服务器以干净的模式运行。认证协议可以进一步采用安全协处理器来密封秘密，使得仅当引导服务器以干净模式操作时才可访问。

42. 发明授权

US08375221B1 Firmware-based trusted platform module for arm processor architectures and trustzone security extensions 有权
标题翻译：基于固件的信任平台模块，用于ARM处理器架构和信任域安全扩展
公开(公告)号：US08375221B1
公开(公告)日：2013-02-12
申请号：US13193945
申请日：2011-07-29
申请人： Stefan Thom , Jeremiah Cox , David Linsley , Magnus Nystrom , Himanshu Raj , David Robinson , Stefan Saroiu , Rob Spiger , Alastair Wolman
发明人： Stefan Thom , Jeremiah Cox , David Linsley , Magnus Nystrom , Himanshu Raj , David Robinson , Stefan Saroiu , Rob Spiger , Alastair Wolman
IPC分类号： G06F11/30 , G06F7/04
CPC分类号： G06F21/552 , G06F21/46 , G06F21/57 , G06F21/572 , G06F21/575 , G06F21/71 , G06F21/74 , G06F2221/034
摘要： A “Firmware-Based TPM” or “fTPM” ensures that secure code execution is isolated to prevent a wide variety of potential security breaches. Unlike a conventional hardware based Trusted Platform Module (TPM), isolation is achieved without the use of dedicated security processor hardware or silicon. In general, the fTPM is first instantiated in a pre-OS boot environment by reading the fTPM from system firmware or firmware accessible memory or storage and placed into read-only protected memory of the device. Once instantiated, the fTPM enables execution isolation for ensuring secure code execution. More specifically, the fTPM is placed into protected read-only memory to enable the device to use hardware such as the ARM® architecture's TrustZone™ extensions and security primitives (or similar processor architectures), and thus the devices based on such architectures, to provide secure execution isolation within a “firmware-based TPM” without requiring hardware modifications to existing devices.
摘要翻译：基于固件的TPM或fTPM确保安全代码执行被隔离，以防止各种潜在的安全漏洞。与传统的基于硬件的可信平台模块（TPM）不同，在不使用专用安全处理器硬件或硅片的情况下实现隔离。通常，通过从系统固件或固件可访问的存储器或存储器读取fTPM并将其放置在设备的只读受保护的存储器中，fTPM首先在前OS引导环境中实例化。一旦实例化，fTPM就能实现执行隔离，以确保执行安全的代码。更具体地说，将fTPM放置到受保护的只读存储器中，以使设备能够使用诸如ARM®架构的TrustZone™扩展和安全原语（或类似的处理器架构）之类的硬件，从而使基于这种架构的设备提供基于固件的TPM中的安全执行隔离，而不需要对现有设备进行硬件修改。

43. 发明授权

US08140478B2 Commit rate management with decoupled commit operations 有权
标题翻译：具有解耦提交操作的提交率管理
公开(公告)号：US08140478B2
公开(公告)日：2012-03-20
申请号：US12362169
申请日：2009-01-29
申请人： Alastair Wolman , John Dunagan , John Carleton McCullough , Bruce W. Copeland , Jeremy L. Dewey
发明人： Alastair Wolman , John Dunagan , John Carleton McCullough , Bruce W. Copeland , Jeremy L. Dewey
IPC分类号： G06F7/00 , G06F17/30
CPC分类号： G06F17/30377
摘要： Consistency is managed among data operations by coalescing commit operations, adjusting a commit rate to optimize latency, and converging to fairness across servers. Write operations representing a change to data stored by one or more of a plurality of computing devices are received in succession by, for example, a cloud computing service. A state of a plurality of tracking objects is adjusted to indicate whether the change in data has been provided to the computing devices and whether the change in data has been acknowledged by the computing devices. Changes to the same data are coalesced such that only the most recent change is provided to the computing devices for storage. In some embodiments, the commit rate is adjustable such that the commit rate decreases quickly but increases slowly based on measured latencies.
摘要翻译：通过合并提交操作，调整提交速率来优化延迟并在服务器之间融合到公平性，在数据操作之间管理一致性。代表对由多个计算设备中的一个或多个计算设备存储的数据的改变的写操作由例如云计算服务连续接收。调整多个跟踪对象的状态以指示数据的改变是否已经被提供给计算设备，以及数据的改变是否已被计算设备确认。对相同数据的更改合并，使得只有最近的更改提供给计算设备才能进行存储。在一些实施例中，提交速率是可调节的，使得提交速率快速降低，但是基于测量的延迟而缓慢增加。

44. 发明申请

US20100191712A1 COMMIT RATE MANAGEMENT WITH DECOUPLED COMMIT OPERATIONS 有权
标题翻译：提交费用管理与解除委托操作
公开(公告)号：US20100191712A1
公开(公告)日：2010-07-29
申请号：US12362169
申请日：2009-01-29
申请人： Alastair Wolman , John Dunagan , John Carleton McCullough , Bruce W. Copeland , Jeremy L. Dewey
发明人： Alastair Wolman , John Dunagan , John Carleton McCullough , Bruce W. Copeland , Jeremy L. Dewey
IPC分类号： G06F7/00
CPC分类号： G06F17/30377
摘要： Consistency is managed among data operations by coalescing commit operations, adjusting a commit rate to optimize latency, and converging to fairness across servers. Write operations representing a change to data stored by one or more of a plurality of computing devices are received in succession by, for example, a cloud computing service. A state of a plurality of tracking objects is adjusted to indicate whether the change in data has been provided to the computing devices and whether the change in data has been acknowledged by the computing devices. Changes to the same data are coalesced such that only the most recent change is provided to the computing devices for storage. In some embodiments, the commit rate is adjustable such that the commit rate decreases quickly but increases slowly based on measured latencies.
摘要翻译：通过合并提交操作，调整提交速率来优化延迟并在服务器之间融合到公平性，在数据操作之间管理一致性。代表对由多个计算设备中的一个或多个计算设备存储的数据的改变的写操作由例如云计算服务连续接收。调整多个跟踪对象的状态以指示数据的改变是否已经被提供给计算设备，以及数据的改变是否已被计算设备确认。对相同数据的更改合并，使得只有最近的更改提供给计算设备才能进行存储。在一些实施例中，提交速率是可调节的，使得提交速率快速降低，但是基于测量的延迟而缓慢增加。

45. 发明申请

US20080248749A1 SIGNALING OVER CELLULAR NETWORKS TO REDUCE THE WI-FI ENERGY CONSUMPTION OF MOBILE DEVICES 有权
标题翻译：通过细胞网络信号降低移动设备的无线电能量消耗
公开(公告)号：US20080248749A1
公开(公告)日：2008-10-09
申请号：US11964173
申请日：2007-12-26
申请人： Paramvir Bahl , Ranveer Chandra , Kevin Chin , Alastair Wolman , Yuvraj Agarwal
发明人： Paramvir Bahl , Ranveer Chandra , Kevin Chin , Alastair Wolman , Yuvraj Agarwal
IPC分类号： H04B7/00
CPC分类号： H04W52/0229 , H04L65/1069 , H04M1/2535 , H04M1/725 , H04M2250/06 , H04W52/0209 , H04W52/0235 , H04W52/0274 , H04W74/085 , H04W76/10 , H04W80/04 , H04W84/10 , H04W88/06 , H04W92/00 , Y02D70/00 , Y02D70/1224 , Y02D70/142 , Y02D70/23
摘要： Techniques for increasing the battery life on a mobile device by decreasing the energy consumption of the mobile device's wireless fidelity (Wi-Fi) interface are described. In one embodiment, the mobile device's Wi-Fi interface is automatically disabled when the device is not engaged. When the device receives a wake up call from a server via its Cellular interface, the Wi-Fi interface is enabled if the device answers the wake up call and the Wi-Fi interface is available. Using its Wi-Fi interface, the mobile device then connects to an IP-based network via a Wi-Fi access point.
摘要翻译：描述了通过降低移动设备的无线保真（Wi-Fi）接口的能量消耗来增加移动设备上的电池寿命的技术。在一个实施例中，当设备未被接合时，移动设备的Wi-Fi接口被自动禁用。当设备通过其蜂窝接口从服务器接收到唤醒呼叫时，如果设备应答唤醒呼叫并且Wi-Fi接口可用，则Wi-Fi接口被启用。使用其Wi-Fi接口，移动设备然后通过Wi-Fi接入点连接到基于IP的网络。

46. 发明授权

US5953534A Environment manipulation for executing modified executable and dynamically-loaded library files 失效
标题翻译：用于执行修改的可执行和动态加载的库文件的环境操作
公开(公告)号：US5953534A
公开(公告)日：1999-09-14
申请号：US996838
申请日：1997-12-23
申请人： Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Geoffrey Michael Voelker , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
发明人： Theodore H. Romer , Alastair Wolman , Dennis Chua Lee , Geoffrey Michael Voelker , Brian N. Bershad , John Bradley Chen , Henry M. Levy , Wayne Anthony Wong
IPC分类号： G06F11/34 , G06F9/445
CPC分类号： G06F11/3466
摘要： A method and procedure for modifying modules comprising a binary executable software program in such a way that, despite the transformations performed and the creation of new versions of the modules, the transformed program appears (to that program, including all of its components) as if it is running in the identical environment as the original program. The environment includes environment variables, the name of the program, the names of all of the dynamically loaded library (DLL) files that the program references, the directory in which the program resides, and the current directory at the time the program started execution. When the program has been transformed, e.g., for the purposes of monitoring or measurement, the environment also includes the effective addresses of data and instruction references made by the program. By employing the present invention, a modified software program will have the same behavior as the original unmodified program from which it is derived, even though it and many of its environment characteristics have been changed.
摘要翻译：一种用于修改包括二进制可执行软件程序的模块的方法和过程，使得尽管执行了转换和创建了新版本的模块，但出现了转换的程序（该程序包括其所有组件），如同它与原始程序在相同的环境中运行。环境包括环境变量，程序名称，程序引用的所有动态加载库（DLL）文件的名称，程序所在的目录以及程序开始执行时的当前目录。当程序已经变换时，例如为了监视或测量的目的，环境还包括由程序作出的数据和指令引用的有效地址。通过采用本发明，修改的软件程序将具有与从其导出的原始未修改程序相同的行为，尽管它和许多其环境特性已被改变。

47. 发明授权

US08812830B2 Attestation protocol for securely booting a guest operating system 有权
标题翻译：用于安全引导客户机操作系统的认证协议
公开(公告)号：US08812830B2
公开(公告)日：2014-08-19
申请号：US13222379
申请日：2011-08-31
申请人： Himanshu Raj , Stefan Saroiu , Alastair Wolman , Paul England , Anh M. Nguyen , Shravan Rayanchu
发明人： Himanshu Raj , Stefan Saroiu , Alastair Wolman , Paul England , Anh M. Nguyen , Shravan Rayanchu
IPC分类号： G06F9/00 , G06F15/177 , G06F9/455 , G06F7/04
CPC分类号： G06F9/4406 , G06F9/4416 , G06F9/45533 , G06F9/45558 , G06F21/50 , G06F21/53 , G06F21/57 , G06F21/575 , G06F2009/45587 , G06F2221/034 , G06F2221/2105 , G06F2221/2149
摘要： In a cloud computing environment, a production server virtualization stack is minimized to present fewer security vulnerabilities to malicious software running within a guest virtual machine. The minimal virtualization stack includes support for those virtual devices necessary for the operation of a guest operating system, with the code base of those virtual devices further reduced. Further, a dedicated, isolated boot server provides functionality to securely boot a guest operating system. The boot server is isolated through use of an attestation protocol, by which the boot server presents a secret to a network switch to attest that the boot server is operating in a clean mode. The attestation protocol may further employ a secure co-processor to seal the secret, so that it is only accessible when the boot server is operating in the clean mode.
摘要翻译：在云计算环境中，最小化生产服务器虚拟化堆栈，以减少在虚拟机中运行的恶意软件的安全漏洞。最小的虚拟化堆栈包括对客户操作系统的操作所需的那些虚拟设备的支持，这些虚拟设备的代码基础进一步减少。此外，专用的隔离引导服务器提供安全引导客户机操作系统的功能。引导服务器通过使用认证协议进行隔离，引导服务器向网络交换机提供秘密，以证明引导服务器以干净的模式运行。认证协议可以进一步采用安全协处理器来密封秘密，使得仅当引导服务器以干净模式操作时才可访问。

48. 发明申请

US20130251216A1 Personal Identification Combining Proximity Sensing with Biometrics 有权
标题翻译：将接近感知与生物识别相结合的个人识别
公开(公告)号：US20130251216A1
公开(公告)日：2013-09-26
申请号：US13429261
申请日：2012-03-23
申请人： Christopher Stephen Frederick Smowton , Ronnie Chaiken , Weidong Cui , Oliver H. Foehr , Jacob Rubin Lorch , David Molnar , Bryan Jeffrey Parno , Stefan Saroiu , Alastair Wolman
发明人： Christopher Stephen Frederick Smowton , Ronnie Chaiken , Weidong Cui , Oliver H. Foehr , Jacob Rubin Lorch , David Molnar , Bryan Jeffrey Parno , Stefan Saroiu , Alastair Wolman
IPC分类号： G06K9/00 , H04L9/00
CPC分类号： G06F21/32 , G06K9/00912 , G06K9/6293 , G06K9/6807 , H04L9/3231 , H04L2209/56 , H04L2209/80 , H04W12/06
摘要： Described is a technology by which the identity of a person (e.g., a customer in a commercial transaction) is determinable without active identification effort, via biometric data is obtained without action by the person. Machine processing of the biometric data over a set of possible persons, determined from secondary proximity sensing, is used to determine or assist in determining the identity of the person.
摘要翻译：描述的是通过生物特征数据获得没有人的行动的人（例如，商业交易中的客户）的身份可以在没有主动识别努力的情况下被确定的技术。使用从二次邻近感测确定的一组可能的人的生物特征数据的机器处理来确定或协助确定人的身份。

49. 发明申请

US20130159223A1 Virtual Sensor Development 有权
标题翻译：虚拟传感器开发
公开(公告)号：US20130159223A1
公开(公告)日：2013-06-20
申请号：US13330457
申请日：2011-12-19
申请人： Paramvir Bahl , Aman Kansal , Romit Roy Choudhury , David Chiyuan Chu , Alastair Wolman , Jie Liu , Xuan Bao
发明人： Paramvir Bahl , Aman Kansal , Romit Roy Choudhury , David Chiyuan Chu , Alastair Wolman , Jie Liu , Xuan Bao
IPC分类号： G06F15/18 , G06N5/04
CPC分类号： G01D1/00 , G06N5/04
摘要： Embodiments include processes, systems, and devices for developing a virtual sensor. The virtual sensor includes one or more inference models. A decision engine utilizes an inference model associated with a mobile device to determine another inference model that is configured to accept physical sensor data from another mobile device. In this way, the virtual sensor can be developed for use with many mobile devices using initial inference models developed for a small number of mobile devices or a single mobile device. Embodiments also include methods to select mobile devices from which to request physical sensor data for virtual sensor input. Embodiments also include architectures that provide a library of virtual sensors.
摘要翻译：实施例包括用于开发虚拟传感器的过程，系统和设备。虚拟传感器包括一个或多个推理模型。决策引擎利用与移动设备相关联的推理模型来确定被配置为从另一移动设备接收物理传感器数据的另一推理模型。以这种方式，虚拟传感器可以开发用于许多移动设备，使用为少数移动设备或单个移动设备开发的初始推理模型。实施例还包括选择移动设备的方法，从中请求用于虚拟传感器输入的物理传感器数据。实施例还包括提供虚拟传感器库的架构。

50. 发明申请

US20100105409A1 PEER AND COMPOSITE LOCALIZATION FOR MOBILE APPLICATIONS 有权
标题翻译：用于移动应用的同步和复合定位
公开(公告)号：US20100105409A1
公开(公告)日：2010-04-29
申请号：US12395386
申请日：2009-02-27
申请人： Sharad Agarwal , Paramvir Bahl , Nilanjan Banerjee , Ranveer Chandra , Alastair Wolman
发明人： Sharad Agarwal , Paramvir Bahl , Nilanjan Banerjee , Ranveer Chandra , Alastair Wolman
IPC分类号： H04W64/00
CPC分类号： H04W64/00 , G01S5/0263 , G01S5/0289 , G01S19/48
摘要： A system and method for peer based localization system using radio technology, such as Bluetooth or Wi-Fi ad-hoc technology that enables mobile devices such as cell phones, smart phones, laptops, handheld communication devices, handheld computing devices, satellite radios, global positioning systems, PDAs, etc. to discover their physical location relative to one another. In addition, the peer based localization can use a plurality of radio technologies to increase the accuracy of the physical location estimates. Additionally or alternatively, the peer based localization technique can be combined with infrastructure based location techniques, such as triangulation, GPS, or infrastructure based Wi-Fi localization in order to transpose virtual coordinates into physical coordinates.
摘要翻译：一种使用无线电技术的基于对等的定位系统的系统和方法，例如蓝牙或Wi-Fi专用技术，其使移动设备例如蜂窝电话，智能电话，膝上型计算机，手持通信设备，手持计算设备，卫星无线电，全球定位系统，PDA等，以发现它们相对于彼此的物理位置。此外，基于对等的定位可以使用多个无线电技术来增加物理位置估计的准确性。另外或替代地，基于对等的定位技术可以与基于基础设施的定位技术组合，例如三角测量，GPS或基于Wi-Fi的基础设施定位，以便将虚拟坐标转换成物理坐标。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式