专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

51. 发明授权

US07865683B2 Identifier associated with memory locations for managing memory accesses 有权
标题翻译：与用于管理内存访问的内存位置相关联的标识符
公开(公告)号：US07865683B2
公开(公告)日：2011-01-04
申请号：US12824074
申请日：2010-06-25
申请人： David Durham , Ravi Sahita , Uday R. Savagaonkar , Priya Rajagopal , Hormuzd M. Khosravi
发明人： David Durham , Ravi Sahita , Uday R. Savagaonkar , Priya Rajagopal , Hormuzd M. Khosravi
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28
CPC分类号： G06F12/1491
摘要： Embodiments of apparatuses, articles, methods, and systems for associating identifiers with memory locations for controlling memory accesses are generally described herein. Other embodiments may be described and claimed.
摘要翻译：这里通常描述用于将标识符与用于控制存储器访问的存储器位置相关联的装置，物品，方法和系统的实施例。可以描述和要求保护其他实施例。

52. 发明授权

US07797749B2 Defending against worm or virus attacks on networks 有权
标题翻译：防御网络上的蠕虫或病毒攻击
公开(公告)号：US07797749B2
公开(公告)日：2010-09-14
申请号：US10980015
申请日：2004-11-03
申请人： Priya Rajagopal , Ravi Sahita , David Durham
发明人： Priya Rajagopal , Ravi Sahita , David Durham
IPC分类号： G08B23/00
CPC分类号： H04L63/1433 , G06F21/577 , H04L63/1408
摘要： A combination of more frequent and less frequent security monitoring may be used to defeat worm or virus attacks. At periodic intervals, a risk assessment scan may be implemented to determine whether or not a worm attack has occurred. Prior thereto, an intermediate detection by an anomaly detection agent may determine whether or not a worm attack may have occurred. If a potential worm attack may have occurred, intermediate action, such as throttling of traffic, may occur. Then, at the next risk assessment scan, a determination may be made as to whether the attack is actually occurring and, if so, more effective and performance altering techniques may be utilized to counter the attack.
摘要翻译：更频繁和较不频繁的安全监控的组合可用于击败蠕虫或病毒攻击。周期性地，可以实施风险评估扫描以确定是否已经发生蠕虫攻击。在此之前，异常检测代理的中间检测可以确定是否可能发生蠕虫攻击。如果可能发生潜在的蠕虫攻击，可能会发生中间动作，例如限制流量。然后，在下一次风险评估扫描中，可以确定攻击是否实际发生，如果是这样，则可以利用更有效的和更改性能的技术来对抗攻击。

53. 发明授权

US07536479B2 Local and remote network based management of an operating system-independent processor 有权
标题翻译：本地和远程网络管理的独立于操作系统的处理器
公开(公告)号：US07536479B2
公开(公告)日：2009-05-19
申请号：US10985123
申请日：2004-11-09
申请人： Ravi Sahita , Priya Rajagopal , David Durham , Scott Hahn , Carey Smith , Arvind Kumar
发明人： Ravi Sahita , Priya Rajagopal , David Durham , Scott Hahn , Carey Smith , Arvind Kumar
IPC分类号： G06F15/16
CPC分类号： H04L29/12009 , H04L29/12405 , H04L61/2528
摘要： In one embodiment, a method is provided. The method of this embodiment provides receiving one or more packets that are addressed to an alternate IP (Internet Protocol) address and that include a LADLC (local application data link control) address in a system having an operating system-independent processor (“service processor”) associated with the alternate IP address and an alternate DLC address, and an embedded network stack (“ENS”) of the service processor associated with a primary IP address; performing filtering to determine if the LADLC address matches the alternate DLC address; and if the LADLC address matches the alternate DLC address, then replacing the alternate IP address of the one or more packets with the primary IP address, and forwarding the one or more packets to the ENS.
摘要翻译：在一个实施例中，提供了一种方法。该实施例的方法提供接收一个或多个寻址到备用IP（因特网协议）地址的分组，并且在具有与操作系统无关的处理器（“服务处理器”）的系统中包括LADLC（本地应用数据链路控制）地址 “）与备用IP地址和备用DLC地址相关联，以及与主IP地址相关联的服务处理器的嵌入式网络堆栈（”ENS“）; 执行滤波以确定LADLC地址是否与备用DLC地址匹配; 并且如果LADLC地址与备用DLC地址匹配，则用主IP地址替换一个或多个数据包的备用IP地址，并将一个或多个数据包转发到ENS。

54. 发明授权

US07440461B2 Methods and apparatus for detecting patterns in a data stream 有权
标题翻译：用于检测数据流中的模式的方法和装置
公开(公告)号：US07440461B2
公开(公告)日：2008-10-21
申请号：US10744709
申请日：2003-12-23
申请人： Ravi Sahita , David Durham , Priya Rajagopal
发明人： Ravi Sahita , David Durham , Priya Rajagopal
IPC分类号： H04L12/28
CPC分类号： H04L63/1441 , G06F17/2705
摘要： In some embodiments, a method includes generating a prefix trie for a set of patterns, generating a suffix trie for the set of patterns, and establishing respective links between nodes of the prefix trie and respective corresponding nodes of the suffix trie. In some embodiments, a method includes adding a suffix to a suffix tree, so that the suffix (which is at least a portion of a pattern) is represented in the tree by a path that begins at a first node and ends at a second node, and associating with at least the first node and the second node a pattern identifier that identifies the pattern.
摘要翻译：在一些实施例中，一种方法包括为一组模式生成前缀特里，为该模式集合生成后缀特里，以及在前缀特里的节点和后缀特里的相应对应节点之间建立相应的链接。在一些实施例中，一种方法包括向后缀树添加后缀，使得后缀（其是模式的至少一部分）在树中由在第一节点开始并在第二节点结束的路径来表示并且至少与第一节点和第二节点相关联的是识别模式的模式标识符。

55. 发明申请

US20050289316A1 Mechanism for sequestering memory for a bus device 审中-公开
标题翻译：为总线设备隔离存储器的机制
公开(公告)号：US20050289316A1
公开(公告)日：2005-12-29
申请号：US10876190
申请日：2004-06-24
申请人： David Durham , Priya Rajagopal , Ravi Sahita
发明人： David Durham , Priya Rajagopal , Ravi Sahita
IPC分类号： G06F12/02 , G06F12/06 , G06F13/16 , G06F12/00 , G06F12/08
CPC分类号： G06F13/1668 , G06F12/0284
摘要： According to one embodiment a computer system is disclosed. The computer system includes a central processing unit (CPU), a memory control device coupled to the CPU, a main memory device coupled to the memory control device, a bus coupled to the memory control device, and one or more devices, coupled to the bus. A physical segment of the main memory device is remapped to a bus device region of the main memory for exclusive use by the one or more devices.
摘要翻译：根据一个实施例，公开了一种计算机系统。计算机系统包括中央处理单元（CPU），耦合到CPU的存储器控制设备，耦合到存储器控制设备的主存储设备，耦合到存储器控制设备的总线以及耦合到存储器控制设备的一个或多个设备总线。主存储器件的物理段被重新映射到主存储器的总线设备区域，供一个或多个设备专用。

56. 发明申请

US20090282268A1 CROSS VALIDATION OF DATA USING MULTIPLE SUBSYSTEMS 有权
标题翻译：使用多个子系统的数据交叉验证
公开(公告)号：US20090282268A1
公开(公告)日：2009-11-12
申请号：US12502868
申请日：2009-07-14
申请人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
发明人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
IPC分类号： G06F12/14
CPC分类号： G06F21/57 , G06F12/1433 , G06F21/575 , G06F21/64
摘要： A method and apparatus for cross validation of data using multiple subsystems are described. According to one embodiment of the invention, a computer comprises a first subsystem and a second subsystem; and a memory, the memory comprising a first memory region and a second memory region, the first memory region being associated with the first subsystem and a second memory region being associated with the second subsystem; upon start up of the computer, the first subsystem to validate the second memory region and the second subsystem to validate the first memory region.
摘要翻译：描述了使用多个子系统进行数据交叉验证的方法和装置。根据本发明的一个实施例，计算机包括第一子系统和第二子系统; 以及存储器，所述存储器包括第一存储器区域和第二存储器区域，所述第一存储器区域与所述第一子系统相关联，以及与所述第二子系统相关联的第二存储器区域; 在计算机启动时，第一子系统用于验证第二存储器区域和第二子系统以验证第一存储器区域。

57. 发明授权

US07594124B2 Cross validation of data using multiple subsystems 有权
标题翻译：使用多个子系统交叉验证数据
公开(公告)号：US07594124B2
公开(公告)日：2009-09-22
申请号：US10865144
申请日：2004-06-09
申请人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
发明人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
IPC分类号： G06F12/14 , H04L9/32
CPC分类号： G06F21/57 , G06F12/1433 , G06F21/575 , G06F21/64
摘要： A method and apparatus for cross validation of data using multiple subsystems are described. According to one embodiment of the invention, a computer comprises a first subsystem and a second subsystem; and a memory, the memory comprising a first memory region and a second memory region, the first memory region being associated with the first subsystem and a second memory region being associated with the second subsystem; upon start up of the computer, the first subsystem to validate the second memory region and the second subsystem to validate the first memory region.
摘要翻译：描述了使用多个子系统进行数据交叉验证的方法和装置。根据本发明的一个实施例，计算机包括第一子系统和第二子系统; 以及存储器，所述存储器包括第一存储器区域和第二存储器区域，所述第一存储器区域与所述第一子系统相关联，以及与所述第二子系统相关联的第二存储器区域; 在启动计算机时，第一子系统用于验证第二存储器区域和第二子系统以验证第一存储器区域。

58. 发明申请

US20070005992A1 Signed manifest for run-time verification of software program identity and integrity 有权
标题翻译：用于软件程序身份和完整性的运行时验证的签名清单
公开(公告)号：US20070005992A1
公开(公告)日：2007-01-04
申请号：US11173851
申请日：2005-06-30
申请人： Travis Schluessler , David Durham , George Cox , Karanvir Grewal
发明人： Travis Schluessler , David Durham , George Cox , Karanvir Grewal
IPC分类号： H04L9/00 , G06F12/14 , H04L9/32 , G06F11/30
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： A measurement engine performs active platform observation. A program includes an integrity manifest to indicate an integrity check value for a section of the program's source code. The measurement engine computes a comparison value on the program's image in memory and determines if the comparison value matches the expected integrity check value. If the values do not match, the program's image is determined to be modified, and appropriate remedial action can be triggered. The integrity manifest can include a secure signature to verify the validity of the integrity manifest.
摘要翻译：测量引擎执行主动平台观察。程序包括一个完整性清单，用于指示程序源代码的一部分的完整性检查值。测量引擎计算内存中程序映像的比较值，并确定比较值是否与预期的完整性校验值相匹配。如果值不匹配，则确定程序的图像被修改，并且可以触发适当的补救动作。完整性清单可以包括安全签名以验证完整性清单的有效性。

59. 发明申请

US20050278563A1 Notifying remote administrator of platform integrity determination 有权
标题翻译：通知远程管理员的平台完整性确定
公开(公告)号：US20050278563A1
公开(公告)日：2005-12-15
申请号：US10865354
申请日：2004-06-09
申请人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
发明人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
IPC分类号： G06F11/00 , G06F11/273 , G06F21/00
CPC分类号： G06F21/57 , G06F11/2294 , G06F21/552
摘要： Method and Apparatuses for determining integrity of a platform and notifying a remote system. In one embodiment a verification agent accesses a portion of a memory on the platform at initialization of the platform to determine if the data has been compromised or corrupted. The verification agent causes the information to be transmitted to a remote system. The verification agent may be local to the platform for which integrity is determined, and transmit the information to a remote administrator. Alternatively, the agent may access the platform over a bus or private channel, or a network connection and indicate information regarding the verification process to an entity remote to the tested platform.
摘要翻译：用于确定平台的完整性并通知远程系统的方法和装置。在一个实施例中，验证代理在平台初始化时访问平台上的存储器的一部分，以确定数据是否已被破坏或损坏。验证代理使得信息被发送到远程系统。验证代理可以是确定完整性的平台本地，并将信息发送给远程管理员。或者，代理可以通过总线或专用信道或网络连接来访问平台，并且向远程到被测平台的实体指示关于验证过程的信息。

60. 发明授权

US07953980B2 Signed manifest for run-time verification of software program identity and integrity 有权
标题翻译：用于软件程序身份和完整性的运行时验证的签名清单
公开(公告)号：US07953980B2
公开(公告)日：2011-05-31
申请号：US11173851
申请日：2005-06-30
申请人： Travis Schluessler , David Durham , George Cox , Karanvir “Ken” Grewal
发明人： Travis Schluessler , David Durham , George Cox , Karanvir “Ken” Grewal
IPC分类号： H04L9/32
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： A measurement engine performs active platform observation. A program includes an integrity manifest to indicate an integrity check value for a section of the program's source code. The measurement engine computes a comparison value on the program's image in memory and determines if the comparison value matches the expected integrity check value. If the values do not match, the program's image is determined to be modified, and appropriate remedial action can be triggered. The integrity manifest can include a secure signature to verify the validity of the integrity manifest.
摘要翻译：测量引擎执行主动平台观察。程序包括一个完整性清单，用于指示程序源代码的一部分的完整性检查值。测量引擎计算内存中程序映像的比较值，并确定比较值是否与预期的完整性校验值相匹配。如果值不匹配，则确定程序的图像被修改，并且可以触发适当的补救动作。完整性清单可以包括安全签名以验证完整性清单的有效性。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式