专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

81. 发明申请

US20110119500A1 SAVING AND RETRIEVING DATA BASED ON PUBLIC KEY ENCRYPTION 有权
公开(公告)号：US20110119500A1
公开(公告)日：2011-05-19
申请号：US13015360
申请日：2011-01-27
申请人： Paul England , Marcus Peinado
发明人： Paul England , Marcus Peinado
IPC分类号： G06F12/14
CPC分类号： G06F21/6218
摘要： In accordance with certain aspects, data is received from a calling program. Ciphertext that includes the data is generated, using public key encryption, in a manner that allows the data to be obtained from the ciphertext only if one or more conditions are satisfied. In accordance with another aspect, a bit string is received from a calling program. Data in the bit string is decrypted using public key decryption and returned to the calling program only if one or more conditions included in the bit string are satisfied.

82. 发明授权

US07725703B2 Systems and methods for securely booting a computer with a trusted processing module 有权
标题翻译：使用可信处理模块安全地引导计算机的系统和方法
公开(公告)号：US07725703B2
公开(公告)日：2010-05-25
申请号：US11031161
申请日：2005-01-07
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D Ray , Jonathan Schwartz
IPC分类号： G06F21/02 , G06F21/22
CPC分类号： G06F21/575
摘要： In a computer with a trusted platform module (TPM), an expected hash value of a boot component may be placed into a platform configuration register (PCR), which allows a TPM to unseal a secret. The secret may then be used to decrypt the boot component. The hash of the decrypted boot component may then be calculated and the result can be placed in a PCR. The PCRs may then be compared. If they do not, access to the an important secret for system operation can be revoked. Also, a first secret may be accessible only when a first plurality of PCR values are extant, while a second secret is accessible only after one or more of the first plurality of PCR values has been replaced with a new value, thereby necessarily revoking further access to the first secret in order to grant access to the second secret.
摘要翻译：在具有可信平台模块（TPM）的计算机中，引导组件的预期散列值可以被放置到平台配置寄存器（PCR）中，这允许TPM解密秘密。然后可以使用秘密来解密引导组件。然后可以计算解密的引导组件的散列，并将结果置于PCR中。然后可以比较PCR。如果不这样做，可以取消对系统运行的重要秘密的访问。此外，只有当第一多个PCR值存在时，第一个秘密才可以访问，而第二个秘密只有在第一个多个PCR值中的一个或多个被新的值替换之后才可访问，从而必然取消进一步的访问到第一个秘密，以授予访问第二个秘密。

83. 发明授权

US07721341B2 Method and system for allowing code to be securely initialized in a computer 有权
标题翻译：允许在计算机中安全地初始化代码的方法和系统
公开(公告)号：US07721341B2
公开(公告)日：2010-05-18
申请号：US11152909
申请日：2005-06-15
申请人： Paul England , Bryan Willman
发明人： Paul England , Bryan Willman
IPC分类号： G06F12/14 , G06F21/22
CPC分类号： G06F15/177 , G06F9/4405 , G06F21/575
摘要： A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).
摘要翻译：存储器控制器防止CPU和其他I / O总线主机在代码（例如，可信核心）初始化过程中访问存储器。存储器控制器重置计算机中的CPU，并允许CPU开始访问特定位置的存储器（由存储器控制器标识给CPU）。一旦该CPU执行了初始化过程，代码就可以运行，任何其他CPU都可以访问存储器（复位后），以及任何其他总线主机（受到启动代码的任何控制）。

84. 发明授权

US07680743B2 Software application protection by way of a digital rights management (DRM) system 有权
标题翻译：通过数字版权管理（DRM）系统实现软件应用保护
公开(公告)号：US07680743B2
公开(公告)日：2010-03-16
申请号：US10146236
申请日：2002-05-15
申请人： Marcus Peinado , Paul England , John L. Manferdelli
发明人： Marcus Peinado , Paul England , John L. Manferdelli
IPC分类号： G06F17/60 , G07G1/12
CPC分类号： G06F21/10
摘要： A digital rights management (DRM) system, an application, and a DRM digital license for the application are all on a computing device. The application is for being executed to perform a function and includes code requiring that the DRM system determine that the application is allowed to be executed to perform the function based on the license. The application further includes code for determining that the application is to be executed on one of the computing device or in connection with the DRM system.
摘要翻译：用于该应用的数字版权管理（DRM）系统，应用程序和DRM数字许可证都在计算设备上。应用程序被执行以执行功能，并且包括要求DRM系统确定允许执行应用以执行基于许可证的功能的代码。应用还包括用于确定应用程序将在其中一个计算设备上执行或与DRM系统相关联的代码。

85. 发明申请

US20090164749A1 COUPLED SYMBIOTIC OPERATING SYSTEMS 有权
标题翻译：耦合符号操作系统
公开(公告)号：US20090164749A1
公开(公告)日：2009-06-25
申请号：US11959467
申请日：2007-12-19
申请人： Paul England , Jork Loeser , Luis Irun-Briz
发明人： Paul England , Jork Loeser , Luis Irun-Briz
IPC分类号： G06F12/08 , G06F9/46 , G06F12/10
CPC分类号： G06F12/1036 , G06F9/545 , G06F12/109 , G06F2212/656
摘要： A single application can be executed across multiple execution environments in an efficient manner if at least a relevant portion of the virtual memory assigned to the application was equally accessible by each of the multiple execution environments. A request by a process in one execution environment can, thereby, be directed to an operating system, or other core software, in another execution environment and can be made by a shadow of the requesting process in the same manner as the original request was made by the requesting process itself. Because of the memory invariance between the execution environments, the results of the request will be equally accessible to the original requesting process even though the underlying software that responded to the request may be executing in a different execution environment. A similar thread invariance can be maintained to provide for accurate translation of requests between execution environments.
摘要翻译：如果分配给应用的虚拟存储器的至少相关部分可以被多个执行环境中的每个执行环境同等地访问，则可以以有效的方式在多个执行环境中执行单个应用。一个执行环境中的进程的请求可以由此被引导到另一执行环境中的操作系统或其他核心软件，并且可以以与原始请求相同的方式通过请求进程的阴影来进行通过请求过程本身。由于执行环境之间的内存不变性，即使响应请求的底层软件可能在不同的执行环境中执行，原始请求进程的请求结果也可以同样访问。可以维护类似的线程不变性，以便在执行环境之间提供精确的请求转换。

86. 发明授权

US07530103B2 Projection of trustworthiness from a trusted environment to an untrusted environment 有权
标题翻译：从可信环境到不受信任的环境的可信赖性的投射
公开(公告)号：US07530103B2
公开(公告)日：2009-05-05
申请号：US10638199
申请日：2003-08-07
申请人： Bryan Mark Willman , Paul England , Kenneth D. Ray , Keith Kaplan , Varugis Kurien , Michael David Marr
发明人： Bryan Mark Willman , Paul England , Kenneth D. Ray , Keith Kaplan , Varugis Kurien , Michael David Marr
IPC分类号： G06F7/04 , H04L9/00 , G06F11/30
CPC分类号： G06F21/552 , G06F21/57
摘要： In a single machine that has entities running in an untrusted environment and entities running in a trusted environment, the trustworthiness of the entities in the trusted environment is projected to the entities in the untrusted environment. This is applicable, for example, to Microsoft®'s Next Generation Secure Computing Base (NGSCB), where a regular operating system (e.g., the Windows® operating system) hosts a secure operating system (e.g., the nexus).
摘要翻译：在具有在不受信任的环境中运行的实体的单个机器以及在可信环境中运行的实体的情况下，可信环境中的实体的可信度将投影到不受信任的环境中的实体。这适用于例如Microsoft（R）的下一代安全计算基础（NGSCB），其中常规操作系统（例如Windows（R）操作系统））承载安全操作系统（例如，连接）。

87. 发明授权

US07529919B2 Boot blocks for software 有权
标题翻译：软件启动块
公开(公告)号：US07529919B2
公开(公告)日：2009-05-05
申请号：US10431012
申请日：2003-05-07
申请人： Butler W. Lampson , John D. DeTreville , Paul England
发明人： Butler W. Lampson , John D. DeTreville , Paul England
IPC分类号： G06F21/22
CPC分类号： G06F9/468 , G06F9/4406 , G06F21/10 , G06F21/575 , G06F2221/2113 , H04L63/0435 , H04L63/0442 , H04L63/166
摘要： In accordance with one aspect of boot blocks for software, in a computer system that has a central processing unit and a software identity register, an atomic operation is executed to set an identity of a piece of software into the software identity register. If the atomic operation completes correctly, then the software identity register contains the identity of the piece of software; otherwise, the software identity register contains a value other than the identity of the piece of software.
摘要翻译：根据用于软件的引导块的一个方面，在具有中央处理单元和软件标识寄存器的计算机系统中，执行原子操作以将软件的身份设置为软件身份寄存器。如果原子操作正确完成，则软件身份寄存器包含该软件的身份; 否则，软件身份寄存器包含除该软件的身份之外的值。

88. 发明授权

US07506380B2 Systems and methods for boot recovery in a secure boot process on a computer with a hardware security module 有权
标题翻译：在具有硬件安全模块的计算机上的安全引导过程中启动恢复的系统和方法
公开(公告)号：US07506380B2
公开(公告)日：2009-03-17
申请号：US11035715
申请日：2005-01-14
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D. Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D. Ray , Jonathan Schwartz
IPC分类号： G06F21/02 , G06F11/30 , G06F9/00 , H04L9/00 , H04K1/00
CPC分类号： G06F21/575 , G06F2221/2101
摘要： Systems and methods are provided for maintaining and updating a secure boot process on a computer with a trusted platform module (TPM). A boot process may be maintained by inspecting a log of TPM activity, determining data that prevented a secret to unseal, and returning the data to an original state. In situations where this type of recovery is not workable, techniques for authenticating a user may be used, allowing the authenticated user to bypass the security features of the boot process and reseal the boot secrets to platform configuration register (PCR) values that may have changed. Finally, a secure boot process may be upgraded by migrating TPM sealed secrets to a temporary storage location, updating one or more aspects of a secure boot process, and resealing the secrets to the resulting new platform configuration. Other advantages and features of the invention are described below.
摘要翻译：提供了系统和方法，用于在具有可信平台模块（TPM）的计算机上维护和更新安全引导过程。可以通过检查TPM活动的日志来确定启动过程，确定防止秘密解密的数据，并将数据返回到原始状态。在这种类型的恢复不可行的情况下，可以使用用于验证用户的技术，允许经过身份验证的用户绕过引导过程的安全特征并将启动秘密重新密封到可能已经改变的平台配置寄存器（PCR）值。最后，可以通过将TPM密封的秘密迁移到临时存储位置来升级安全引导过程，更新安全引导过程的一个或多个方面，以及将密码重新密封到所得到的新平台配置。下面描述本发明的其它优点和特征。

89. 发明申请

US20080313647A1 Thread virtualization techniques 审中-公开
标题翻译：线程虚拟化技术
公开(公告)号：US20080313647A1
公开(公告)日：2008-12-18
申请号：US11820065
申请日：2007-06-18
申请人： Matthew D. Klein , Paul England
发明人： Matthew D. Klein , Paul England
IPC分类号： G06F13/00
CPC分类号： G06F9/545 , G06F9/45537
摘要： Various technologies and techniques are disclosed for virtualizing threads. An operating system thread is virtualized by intercepting accesses of the operating system thread state and emulating a normal operating system behavior. A kernel mode thread state is virtualized by intercepting kernel accesses of the kernel mode thread state and emulating a normal kernel mode behavior. A user mode thread state is virtualized by intercepting user mode accesses of the user mode thread state and emulating a normal user mode behavior. If the access is a write access, then the write access is applied to a virtual thread structure. If the access is a read access, then the read access is applied to the virtual thread structure.
摘要翻译：公开了用于虚拟化线程的各种技术和技术。通过拦截操作系统线程状态的访问并仿真正常的操作系统行为来虚拟化操作系统线程。内核模式线程状态通过截取内核模式线程状态的内核访问并模拟正常内核模式行为进行虚拟化。通过拦截用户模式线程状态的用户模式访问并模拟正常的用户模式行为来虚拟化用户模式线程状态。如果访问是写入访问，则写访问被应用于虚拟线程结构。如果访问是读访问，则读访问被应用于虚拟线程结构。

90. 发明申请

US20080307419A1 Lazy kernel thread binding 审中-公开
标题翻译：懒惰的内核线程绑定
公开(公告)号：US20080307419A1
公开(公告)日：2008-12-11
申请号：US11810649
申请日：2007-06-06
申请人： Matthew D. Klein , Paul England
发明人： Matthew D. Klein , Paul England
IPC分类号： G06F9/46
CPC分类号： G06F9/4881
摘要： Various technologies and techniques are disclosed for providing lazy kernel thread binding. User mode and kernel mode portions of thread scheduling are decoupled so that a particular user mode thread can be run on any one of multiple kernel mode threads. A dedicated backing thread is used whenever a user mode thread wants to perform an operation that could affect the kernel mode thread, such as a system call. For example, a notice is received that a particular user mode thread running on a particular kernel mode thread wants to make a system call. A dedicated backing thread that has been assigned to the particular user mode thread is woken. State is shuffled from the user mode thread to the dedicated backing thread using a state shuffling process. The particular kernel mode thread is put to sleep. The system call is executed using the dedicated backing thread.
摘要翻译：公开了各种技术和技术来提供延迟的内核线程绑定。线程调度的用户模式和内核模式部分被解耦，使得特定用户模式线程可以在多个内核模式线程中的任何一个上运行。只要用户模式线程想要执行可能影响内核模式线程的操作（如系统调用），就使用专用的后备线程。例如，接收到在特定内核模式线程上运行的特定用户模式线程想要进行系统调用的通知。已分配给特定用户模式线程的专用后退线程被唤醒。状态从用户模式线程被洗牌到使用状态洗牌过程的专用后备线程。特定的内核模式线程进入睡眠状态。系统调用使用专用的后备线程执行。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式