会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 51. 发明申请
    • APPLICATION SECURITY MODEL
    • 应用安全模型
    • US20090126011A1
    • 2009-05-14
    • US11939383
    • 2007-11-13
    • Michael D. DownenRaja KrishnaswamyArun MoorthyCharles W. Kaufman
    • Michael D. DownenRaja KrishnaswamyArun MoorthyCharles W. Kaufman
    • G06F21/00
    • G06F21/563G06F21/51
    • Performing security sensitive operations with an application security model. Security agnostic code is executed. The security agnostic code is identified as not having authorization to perform a security sensitive operation. Executing the security agnostic code includes calling code identified as security safe critical code. In response to the security agnostic code calling the security safe critical code, the security safe critical code is executed. The security safe critical code includes functionality for performing validity checks. Executing the security safe critical code includes performing an validity check for the security agnostic code. When the security agnostic code passes the validity check, code identified as security critical code is called. In response to the security safe critical code calling the security critical code, the security critical code is executed. The security critical code is authorized to perform the security sensitive operation.
    • 使用应用程序安全模型执行安全敏感操作。 执行安全不可知代码。 安全性不可知代码被识别为没有执行安全敏感操作的授权。 执行安全性不可知代码包括调用被标识为安全关键代码的代码。 响应安全隐私代码调用安全安全关键代码,执行安全安全关键代码。 安全关键代码包括执行有效性检查的功能。 执行安全安全关键代码包括对安全性不可知代码执行有效性检查。 当安全不可知代码通过有效性检查时,称为安全关键代码的代码。 响应安全关键代码调用安全关键代码,执行安全关键代码。 授权安全关键代码执行安全敏感操作。
    • 53. 发明授权
    • System and method providing inlined stub
    • 系统和方法提供内联存根
    • US06980997B1
    • 2005-12-27
    • US09894394
    • 2001-06-28
    • Frank V. Peschel-GalleeRaja KrishnaswamyPatrick H. Dussud
    • Frank V. Peschel-GalleeRaja KrishnaswamyPatrick H. Dussud
    • G06F17/00
    • G06F9/547G06F9/541G06F12/0253Y10S707/99944Y10S707/99945
    • A system and method is provided to facilitate communications between object systems. A caller is provided having optimized in-lined functionality when initiating a remote function call between managed and unmanaged object systems, for example. The in-lined functionality includes utilizing direct calls and returns within a calling function. In this manner, pushing additional arguments onto an execution stack because of an external stub reference is mitigated. In addition, one or more code loops can be analyzed to enable stack markers to be “hoisted” and thus pushed a single time instead of each time the calling function executes. Other aspects of the optimized caller provide garbage collection and thread management, security attribute checking on outgoing calls, calling convention considerations, wherein arguments and return values are organized according to the convention utilized by the remote object system, and in-lined marshalling to provide enhanced performance over external stub code references. Code extensibility options can be included enabling functions to be generalized thereby insulating object systems from implementation details of the called functions.
    • 提供了一种系统和方法来促进对象系统之间的通信。 例如,在启动被管理对象系统和非托管对象系统之间的远程函数调用时,提供一个具有优化内嵌功能的调用者。 嵌入式功能包括在调用功能中使用直接调用和返回。 以这种方式,由于外部存根引用将附加参数推送到执行堆栈得到缓解。 此外,可以分析一个或多个代码循环,以使堆栈标记“挂起”,从而推动一次,而不是每次调用函数执行。 优化的呼叫者的其他方面提供垃圾收集和线程管理,对呼出的呼叫的安全属性检查,调用惯例注意事项,其中参数和返回值根据远程对象系统使用的惯例进行组织,并且内联编组以提供增强的 对外部存根代码引用的性能。 可以包括代码可扩展性选项,使得功能得以泛化,从而将对象系统与被调用函数的实现细节隔离。
    • 56. 发明授权
    • Method and system for locating enclosing owners of embedded objects
    • 用于定位嵌入式对象封闭所有者的方法和系统
    • US06708222B1
    • 2004-03-16
    • US08847124
    • 1997-05-01
    • Ketan DalalRaja Krishnaswamy
    • Ketan DalalRaja Krishnaswamy
    • G06F944
    • G06F9/4493G06F9/4488
    • A computer-based method and system for generating a reference to an enclosing object from a reference to an embedded object that is embedded within the enclosing object. The enclosing object has an enclosing class, and the embedded object has an embedded class. Each class inherits a base class that has a reference counting data member. The system redefines the base class such that the reference counting data member is divided into an offset portion and a reference counting portion. The system then instantiates the enclosing object. The enclosing object has an enclosing object address, and the embedded object has an embedded object address. The system stores in the offset portion of the reference counting data member of the base class of the embedded object a difference between the enclosing object address and the embedded object address. When the system receives a reference to the embedded object, the system retrieves from the offset portion of the reference counting data member of the embedded object referenced by the received reference the difference between the enclosing object address and the embedded object address. The system then combines the retrieved difference with the embedded object address of the received reference to generate the enclosing object address.
    • 一种基于计算机的方法和系统,用于从嵌入在所述封闭对象内的嵌入对象的引用生成对封闭对象的引用。 封闭对象具有封闭类,嵌入对象具有嵌入类。 每个类继承一个具有引用计数数据成员的基类。 系统重新定义基类,使得引用计数数据成员被分成偏移部分和引用计数部分。 然后系统实例化封闭对象。 封闭对象具有封闭对象地址,嵌入对象具有嵌入对象地址。 该系统存储嵌入对象的基类的引用计数数据成员的偏移部分中的封闭对象地址和嵌入对象地址之间的差异。 当系统接收对嵌入对象的引用时,系统从接收到的参考引用的嵌入对象的引用计数数据成员的偏移部分中检索包围对象地址和嵌入对象地址之间的差异。 然后,系统将检索到的差异与接收到的引用的嵌入对象地址组合以生成包围对象地址。