专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

51. 发明申请

US20120226903A1 SECURE PLATFORM VOUCHER SERVICE FOR SOFTWARE COMPONENTS WITHIN AN EXECUTION ENVIRONMENT 有权
标题翻译：执行环境中软件组件的安全平台提供服务
公开(公告)号：US20120226903A1
公开(公告)日：2012-09-06
申请号：US13412382
申请日：2012-03-05
申请人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
IPC分类号： H04L29/06
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： Apparatuses, articles, methods, and systems for secure platform voucher service for software within an execution environment. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by authenticated, authorized and verified software components. A provisioning remote entity or gateway only needs to know a platform's public key or certificate hierarchy to receive verification for any component. The verification or voucher helps assure to the remote entity that no malware running in the platform or on the network will have access to provisioned material. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the software component.
摘要翻译：用于执行环境中的软件的安全平台凭证服务的设备，物品，方法和系统。一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制仅通过认证的，授权和验证的软件组件进行访问的存储器区域。配置远程实体或网关只需要知道平台的公钥或证书层次结构来接收任何组件的验证。验证或凭证有助于向远程实体确保在平台或网络上运行的恶意软件无法访问配置的资料。代表在受保护的内存区域中提供的经认证/授权/验证的软件组件的软件组件可访问的基础平台来锁定和解锁秘密。

52. 发明申请

US20120102285A1 PROVIDING PROTECTED ACCESS TO CRITICAL MEMORY REGIONS 有权
标题翻译：提供对关键存储区域的保护访问
公开(公告)号：US20120102285A1
公开(公告)日：2012-04-26
申请号：US13336913
申请日：2011-12-23
申请人： Uday Savagaonkar , Travis T. Schluessler , Hormuzd Khosravi , Ravi Sahita , Gayathri Nagabhushan , David Durham
发明人： Uday Savagaonkar , Travis T. Schluessler , Hormuzd Khosravi , Ravi Sahita , Gayathri Nagabhushan , David Durham
IPC分类号： G06F12/14
CPC分类号： G06F12/145
摘要： In accordance with disclosed embodiments, there are provided methods, systems, and apparatuses for implementing hardware of a virtualized processor based system detecting a specified type of memory access to an identified region of memory and in response to the detecting generating an interrupt for a virtual machine monitor (VMM) of the virtualized processor based system.
摘要翻译：根据所公开的实施例，提供了用于实现基于虚拟处理器的系统的硬件的方法，系统和装置，该系统检测对所识别的存储器区域的指定类型的存储器访问，并且响应于该检测产生虚拟机的中断基于虚拟化处理器的系统的监视器（VMM）。

53. 发明授权

US08132003B2 Secure platform voucher service for software components within an execution environment 有权
标题翻译：在执行环境中的软件组件的安全平台凭证服务
公开(公告)号：US08132003B2
公开(公告)日：2012-03-06
申请号：US11864573
申请日：2007-09-28
申请人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
IPC分类号： H04L29/06
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： Embodiments of apparatus, articles, methods, and systems for secure platform voucher service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise compromised operating system environment. A provisioning remote entity or gateway only needs to know a platform's public key or certificate hierarchy in order to receive verification proof for any component in the platform. The verification proof or voucher helps to assure to the remote entity that no man-in-the-middle, rootkit, spyware or other malware running in the platform or on the network will have access to the provisioned material. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译：这里一般地描述用于执行环境中的软件组件的安全平台凭单服务的装置，物品，方法和系统的实施例。一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制存储器区域，以便仅通过特定认证的，授权的和已验证的软件组件进行访问，即使在其他受损的操作系统环境的一部分。配置远程实体或网关只需要知道平台的公钥或证书层次结构，以便接收平台中任何组件的验证证明。验证证明或凭证有助于向远程实体确保在平台或网络上运行的中间人，rootkit，间谍软件或其他恶意软件将无法访问所提供的资料。代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。可以描述和要求保护其他实施例。

54. 发明申请

US20110289146A1 METHOD AND APPARATUS ALLOWING SCAN OF DATA STORAGE DEVICE FROM REMOTE SERVER 有权
标题翻译：从远程服务器允许数据存储设备扫描的方法和设备
公开(公告)号：US20110289146A1
公开(公告)日：2011-11-24
申请号：US12785131
申请日：2010-05-21
申请人： Hormuzd Khosravi , David Durham , David A. Edwards , Venkat R. Gokulrangan , Men Long , Yasser Rasheed
发明人： Hormuzd Khosravi , David Durham , David A. Edwards , Venkat R. Gokulrangan , Men Long , Yasser Rasheed
IPC分类号： G06F15/167 , G06F12/00
CPC分类号： G06F21/57 , G06F21/56
摘要： A method and device allowing a scan of a data storage device from a remote server are disclosed. In some embodiments, a computing device may include an out-of-band (OOB) configured to compute a first hash value for data stored in one or more sectors of a data storage device at a first time; receive, using communication circuitry, a request to transmit a portion of the data stored in the one or more sectors of the data storage device at a second time, the second time being subsequent to the first time; compute a second hash value for the data stored in the one or more sectors of the data storage device at the second time; and transmit, using the communication circuitry, the requested portion of the data, only if the second hash value does not match the first hash value.
摘要翻译：公开了允许从远程服务器扫描数据存储设备的方法和设备。在一些实施例中，计算设备可以包括带外（OOB），其被配置为在第一时间对存储在数据存储设备的一个或多个扇区中的数据计算第一散列值; 接收使用通信电路的请求，以在第二时间之后的第二时间第二时间发送存储在数据存储装置的一个或多个扇区中的数据的一部分的请求; 在第二次计算存储在数据存储设备的一个或多个扇区中的数据的第二哈希值; 并且仅当所述第二散列值与所述第一散列值不匹配时，才使用所述通信电路来发送所请求的数据部分。

55. 发明授权

US08032660B2 Apparatus and method for managing subscription requests for a network interface component 有权
标题翻译：用于管理网络接口组件的订阅请求的装置和方法
公开(公告)号：US08032660B2
公开(公告)日：2011-10-04
申请号：US12317896
申请日：2008-12-30
申请人： Ravi Sahita , David Durham , Arun Raghunath , Raj K. Ramanujan , Parthasarathy Sarangam
发明人： Ravi Sahita , David Durham , Arun Raghunath , Raj K. Ramanujan , Parthasarathy Sarangam
IPC分类号： G06F15/16
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L63/0227 , H04L63/08
摘要： In some embodiments, a processor-based system may include at least one processor, at least one memory coupled to the at least one processor, a network interface component, and a management controller. The management controller may be configured to receive information related to a subscription request for a virtual machine, generate configuration information for the network interface component based on the subscription request, and provide the configuration information to the network interface component. Other embodiments are disclosed and claimed.
摘要翻译：在一些实施例中，基于处理器的系统可以包括至少一个处理器，耦合到至少一个处理器的至少一个存储器，网络接口部件和管理控制器。管理控制器可以被配置为接收关于虚拟机的订阅请求的信息，基于订阅请求生成针对网络接口组件的配置信息，并将配置信息提供给网络接口组件。公开和要求保护其他实施例。

56. 发明申请

US20110161677A1 SEAMLESSLY ENCRYPTING MEMORY REGIONS TO PROTECT AGAINST HARDWARE-BASED ATTACKS 有权
标题翻译：无缝加密存储区域防范基于硬件的攻击
公开(公告)号：US20110161677A1
公开(公告)日：2011-06-30
申请号：US12651432
申请日：2009-12-31
申请人： Uday R. Savagaonkar , Ravi Sahita , David Durham , Men Long
发明人： Uday R. Savagaonkar , Ravi Sahita , David Durham , Men Long
IPC分类号： G06F12/14
CPC分类号： G06F12/1408 , G06F12/1441 , G06F2212/1052
摘要： Systems, apparatuses, and methods, and for seamlessly protecting memory regions to protect against hardware-based attacks are disclosed. In one embodiment, an apparatus includes a decoder, control logic, and cryptographic logic. The decoder is to decode a transaction between a processor and memory-mapped input/output space. The control logic is to redirect the transaction from the memory-mapped input/output space to a system memory. The cryptographic logic is to operate on data for the transaction.
摘要翻译：公开了系统，装置和方法，并且用于无缝地保护存储器区域以防止基于硬件的攻击。在一个实施例中，一种装置包括解码器，控制逻辑和加密逻辑。解码器是对处理器和存储器映射的输入/输出空间之间的事务进行解码。控制逻辑是将事务从存储器映射的输入/输出空间重定向到系统存储器。密码逻辑是对数据进行交易操作。

57. 发明授权

US07882318B2 Tamper protection of software agents operating in a vitual technology environment methods and apparatuses 失效
标题翻译：软件代理商的篡改保护在操作技术环境中的方法和设备
公开(公告)号：US07882318B2
公开(公告)日：2011-02-01
申请号：US11529828
申请日：2006-09-29
申请人： Uday Savagaonkar , Ravi Sahita , David Durham , Hormuzd Khosravi
发明人： Uday Savagaonkar , Ravi Sahita , David Durham , Hormuzd Khosravi
IPC分类号： G06F13/10
CPC分类号： G06F12/145 , G06F12/1491 , G06F21/54 , G06F21/6218 , G06F21/79 , G06F2221/2141
摘要： Methods, apparatuses, articles, and systems for comparing a first security domain of a first memory page of a physical device to a second security domain of a second memory page of the physical device, the security domains being stored in one or more registers of a processor of the physical device, are described herein. Based on the comparison, the processor disallows an instruction from the first memory page to access the second memory page if the first security domain is different from the second security domain. Resultantly, software agents, in particular, critical software agents, may be protected in a virtual technology (VT) environment more efficiently and effectively.
摘要翻译：用于将物理设备的第一存储器页面的第一安全域与物理设备的第二存储器页面的第二安全域进行比较的方法，设备，文章和系统，所述安全域被存储在物理设备的一个或多个寄存器中物理设备的处理器。基于比较，如果第一安全域与第二安全域不同，则处理器不允许来自第一存储器页的指令访问第二存储器页。因此，软件代理，特别是关键软件代理，可以在虚拟技术（VT）环境中更有效和更有效地得到保护。

58. 发明授权

US07739724B2 Techniques for authenticated posture reporting and associated enforcement of network access 有权
公开(公告)号：US07739724B2
公开(公告)日：2010-06-15
申请号：US11174205
申请日：2005-06-30
申请人： David Durham , Ravi Sahita , Karanvir Grewal , Ned Smith , Kapil Sood
发明人： David Durham , Ravi Sahita , Karanvir Grewal , Ned Smith , Kapil Sood
IPC分类号： G06F21/00
CPC分类号： H04L63/10 , G06F2221/2141 , H04L9/3234 , H04L9/3247 , H04L9/3263 , H04L63/0209 , H04L63/08 , H04L63/20
摘要： Architectures and techniques that allow a firmware agent to operate as a tamper-resistant agent on a host platform that may be used as a trusted policy enforcement point (PEP) on the host platform to enforce policies even when the host operating system is compromised. The PEP may be used to open access control and/or remediation channels on the host platform. The firmware agent may also act as a local policy decision point (PDP) on the host platform in accordance with an authorized enterprise PDP entity by providing policies if a host trust agent is non-responsive and may function as a passive agent when the host trust agent is functional.

59. 外观设计

USD600860S1 Article of protective gear for the body 有权
标题翻译：身体防护装备物品
公开(公告)号：USD600860S1
公开(公告)日：2009-09-22
申请号：US29278940
申请日：2007-04-13
申请人： David Durham
设计人： David Durham

60. 发明申请

US20090119510A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20090119510A1
公开(公告)日：2009-05-07
申请号：US11935783
申请日：2007-11-06
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式