专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20220012055A1 APPARATUS, COMPUTER-READABLE MEDIUM, AND METHOD FOR REDUCING BOUNDS CHECKING OVERHEAD BY INSTRUMENTING POINTER ARITHMETIC 有权
公开(公告)号：US20220012055A1
公开(公告)日：2022-01-13
申请号：US17485347
申请日：2021-09-25
申请人： Michael Lemay , David M. Durham
发明人： Michael Lemay , David M. Durham
IPC分类号： G06F9/30
摘要： Methods, apparatus, systems, and articles of manufacture are disclosed that perform bounds checking on authorized memory allocations during pointer arithmetic. In some examples, instruction decode circuitry decodes an update pointer instruction for a pointer. In some examples, bounds checking circuitry determines an authorized allocation for the pointer, determines one or more exclusion zones and poison zones for the pointer. In some examples, bounds checking circuitry updates the pointer and generates a fault if the pointer points to one of the exclusion zones and poisons the pointer if the pointer points to one of the poison zones.

2. 发明申请

US20210200546A1 HARDWARE APPARATUSES, METHODS, AND SYSTEMS FOR INDIVIDUALLY REVOCABLE CAPABILITIES FOR ENFORCING TEMPORAL MEMORY SAFETY 有权
公开(公告)号：US20210200546A1
公开(公告)日：2021-07-01
申请号：US16729358
申请日：2019-12-28
申请人： Michael LEMAY , Vedvyas SHANBHOGUE , Deepak GUPTA , Ravi SAHITA , David M. DURHAM , Willem PINCKAERS , Enrico PERLA
发明人： Michael LEMAY , Vedvyas SHANBHOGUE , Deepak GUPTA , Ravi SAHITA , David M. DURHAM , Willem PINCKAERS , Enrico PERLA
IPC分类号： G06F9/30 , G06F9/38 , G06F9/448 , G06F9/46 , G06F16/901
摘要： Systems, methods, and apparatuses relating to circuitry to implement individually revocable capabilities for enforcing temporal memory safety are described. In one embodiment, a hardware processor comprises an execution unit to execute an instruction to request access to a block of memory through a pointer to the block of memory, and a memory controller circuit to allow access to the block of memory when an allocated object tag in the pointer is validated with an allocated object tag in an entry of a capability table in memory that is indexed by an index value in the pointer, wherein the memory controller circuit is to clear the allocated object tag in the capability table when a corresponding object is deallocated.

3. 发明申请

US20180091308A1 CRYPTOGRAPHIC SYSTEM MEMORY MANAGEMENT 审中-公开
公开(公告)号：US20180091308A1
公开(公告)日：2018-03-29
申请号：US15816901
申请日：2017-11-17
申请人： David M. Durham , Rajat Agarwal , Siddhartha Chhabra , Sergej Deutsch , Karanvir S. Grewal , Ioannis T. Schoinas
发明人： David M. Durham , Rajat Agarwal , Siddhartha Chhabra , Sergej Deutsch , Karanvir S. Grewal , Ioannis T. Schoinas
IPC分类号： H04L9/32 , G06F3/06 , H04L9/06 , G06F11/10 , G11C29/52
摘要： In one example, a system for managing encrypted memory comprises a processor to store a first MAC based on data stored in system memory in response to a write operation to the system memory. The processor can also detect a read operation corresponding to the data stored in the system memory, calculate a second MAC based on the data retrieved from the system memory, determine that the second MAC does not match the first MAC, and recalculate the second MAC with a correction operation, wherein the correction operation comprises an XOR operation based on the data retrieved from the system memory and a replacement value for a device of the system memory. Furthermore, the processor can decrypt the data stored in the system memory in response to detecting the recalculated second MAC matches the first MAC and transmit the decrypted data to cache thereby correcting memory errors.

4. 发明申请

US20180046803A1 TECHNOLOGIES FOR HARDWARE ASSISTED NATIVE MALWARE DETECTION 审中-公开
公开(公告)号：US20180046803A1
公开(公告)日：2018-02-15
申请号：US15235806
申请日：2016-08-12
申请人： Xiaoning Li , Ravi L. Sahita , David M. Durham
发明人： Xiaoning Li , Ravi L. Sahita , David M. Durham
IPC分类号： G06F21/56 , G06F21/52 , G06F11/14
CPC分类号： G06F21/566 , G06F11/1417 , G06F11/302 , G06F11/3089 , G06F21/54 , G06F2201/84
摘要： Technologies for hardware assisted native malware detection include a computing device. The computing device includes one or more processors with hook logic to monitor for execution of branch instructions of an application, compare the monitored branch instructions to filter criteria, and determine whether a monitored branch instruction satisfies the filter criteria. Additionally, the computing device includes a malware detector to provide the filter criteria to the hook logic, provide an address of a callback function to the hook logic to be executed in response to a determination that a monitored branch instruction satisfies the filter criteria, and analyze, in response to execution of the callback function, the monitored branch instruction to determine whether the monitored branch instruction is indicative of malware. Other embodiments are also described and claimed.

5. 发明申请

US20170249260A1 SYSTEM FOR ADDRESS MAPPING AND TRANSLATION PROTECTION 审中-公开
公开(公告)号：US20170249260A1
公开(公告)日：2017-08-31
申请号：US15088739
申请日：2016-04-01
申请人： RAVI L. SAHITA , GILBERT NEIGER , VEDVYAS SHANBHOGUE , DAVID M. DURHAM , ANDREW V. ANDERSON , DAVID A. KOUFATY , ASIT K. MALLICK , ARUMUGAM THIYAGARAJAH , BARRY E. HUNTLEY , DEEPAK K. GUPTA , MICHAEL LEMAY , JOSEPH F. CIHULA , BAIJU V. PATEL
发明人： RAVI L. SAHITA , GILBERT NEIGER , VEDVYAS SHANBHOGUE , DAVID M. DURHAM , ANDREW V. ANDERSON , DAVID A. KOUFATY , ASIT K. MALLICK , ARUMUGAM THIYAGARAJAH , BARRY E. HUNTLEY , DEEPAK K. GUPTA , MICHAEL LEMAY , JOSEPH F. CIHULA , BAIJU V. PATEL
IPC分类号： G06F12/14 , G06F12/10 , G06F21/62 , G06F3/06
摘要： This disclosure is directed to a system for address mapping and translation protection. In one embodiment, processing circuitry may include a virtual machine manager (VMM) to control specific guest linear address (GLA) translations. Control may be implemented in a performance sensitive and secure manner, and may be capable of improving performance for critical linear address page walks over legacy operation by removing some or all of the cost of page walking extended page tables (EPTs) for critical mappings. Alone or in combination with the above, certain portions of a page table structure may be selectively made immutable by a VMM or early boot process using a sub-page policy (SPP). For example, SPP may enable non-volatile kernel and/or user space code and data virtual-to-physical memory mappings to be made immutable (e.g., non-writable) while allowing for modifications to non-protected portions of the OS paging structures and particularly the user space.

6. 发明授权

US09276745B2 Preserving image privacy when manipulated by cloud services 有权
标题翻译：在云服务操作时保护图像隐私
公开(公告)号：US09276745B2
公开(公告)日：2016-03-01
申请号：US13976298
申请日：2011-12-15
申请人： David M. Durham , Men Long , Karanvir S. Grewal , Prashant Dewan , Xiaozhu Kang
发明人： David M. Durham , Men Long , Karanvir S. Grewal , Prashant Dewan , Xiaozhu Kang
IPC分类号： H04L29/06 , G06F21/10 , H04L9/28 , H04L9/06 , H04N1/44 , G06F21/62 , H04N21/2743 , H04N21/4405 , H04N21/4408 , H04N21/4788 , H04N21/81
CPC分类号： H04L9/28 , G06F21/6263 , G06F2221/2107 , H04L9/065 , H04L63/0428 , H04N1/4486 , H04N21/2743 , H04N21/4405 , H04N21/4408 , H04N21/4788 , H04N21/8153
摘要： An apparatus and method for preserving image privacy when manipulated by cloud services includes middleware for receiving an original image, splitting the original image into two sub-images, where the RGB pixel values of the sub-images have a bit value that is less than RGB pixel values of the original image. The sub-images are encrypted by adding a keystream to the RGB pixel values of the sub-images. The sub-image data is transmitted to a cloud service such as a social network or photo-sharing site, which manipulate the images by resizing, cropping, filtering, or the like. The sub-image data is received by the middleware and is successfully decrypted irrespective of the manipulations performed by the cloud services. In an alternative embodiment, the blocks of the original image are permutated when encrypted, and then reverse-permutated when decrypted.
摘要翻译：一种用于在由云服务操作时保护图像隐私的装置和方法包括用于接收原始图像的中间件，将原始图像分割成两个子图像，其中子图像的RGB像素值具有小于RGB的比特值原始图像的像素值。通过向子图像的RGB像素值添加密钥流来加密子图像。子图像数据被发送到诸如社交网络或照片共享站点的云服务，其通过调整大小，裁剪，过滤等来操纵图像。子图像数据由中间件接收，并且被成功解密，而与云服务执行的操作无关。在替代实施例中，原始图像的块在加密时被置换，然后在被解密时反向排列。

7. 发明授权

US09081947B2 Turing test based user authentication and user presence verification system, device, and method 有权
标题翻译：基于图灵测试的用户认证和用户存在验证系统，设备和方法
公开(公告)号：US09081947B2
公开(公告)日：2015-07-14
申请号：US13976918
申请日：2011-12-27
申请人： Prashant Dewan , David M. Durham , Ling Huang , Karanvir S. Grewal , Xiaozhu Kang
发明人： Prashant Dewan , David M. Durham , Ling Huang , Karanvir S. Grewal , Xiaozhu Kang
IPC分类号： G06F21/32 , G06K9/78 , G06K9/00
CPC分类号： G06F21/32 , G06K9/00288 , G06K9/00899
摘要： A password-less method for authenticating a user includes capturing one or more images of a face of the user and comparing the one or more images with a previously collected face template. Randomly selected colored light and randomized blinking patterns are used to capture the images of the user. Such captured images are compared to previously collected face templates, thereby thwarting spoof attacks. A secret image, known only to the user and the device, is moved from one area of the display to another randomly selected area, using the movements of the user's head or face, thereby providing a Turing based challenge. Protected audio video path (PAVP) enabled devices and components are used to protect the challenge from malware attacks.
摘要翻译：用于认证用户的无密码方法包括捕获用户的脸部的一个或多个图像并将一个或多个图像与先前收集的面部模板进行比较。随机选择的彩色光和随机闪烁图案用于捕获用户的图像。将这样的拍摄图像与先前收集的面部模板进行比较，从而阻止欺骗攻击。使用用户和设备已知的秘密图像使用用户头部或脸部的移动从显示器的一个区域移动到另一个随机选择的区域，从而提供基于图灵的挑战。受保护的音频视频路径（PAVP）启用的设备和组件用于保护挑战免受恶意软件攻击。

8. 发明申请

US20140337983A1 Entry/Exit Architecture for Protected Device Modules 有权
标题翻译：保护设备模块的入口/出口架构
公开(公告)号：US20140337983A1
公开(公告)日：2014-11-13
申请号：US13891255
申请日：2013-05-10
申请人： Xiaozhu Kang , Alpa T. Narendra Trivedi , Siddhartha Chhabra , Prashant Dewan , Uday R. Savagaonkar , David M. Durham
发明人： Xiaozhu Kang , Alpa T. Narendra Trivedi , Siddhartha Chhabra , Prashant Dewan , Uday R. Savagaonkar , David M. Durham
IPC分类号： G06F21/60
CPC分类号： G06F21/53 , G06F12/14 , G06F21/50 , G06F21/60 , G06F21/78 , G06F2221/034
摘要： The entry/exit architecture may be a critical component of a protection framework using a secure enclaves-like trust framework for coprocessors. The entry/exit architecture describes steps that may be used to switch securely into a trusted execution environment (entry architecture) and out of the trusted execution environment (exit architecture), at the same time preventing any secure information from leaking to an untrusted environment.
摘要翻译：入口/出口架构可能是保护框架的关键组成部分，使用协同处理器的安全的类似信任框架。入口/出口架构描述了可用于将安全切换到受信任的执行环境（入口体系结构）并脱离可信执行环境（退出体系结构）的步骤，同时防止任何安全信息泄露到不受信任的环境中。

9. 发明申请

US20140267332A1 Secure Rendering of Display Surfaces 有权
标题翻译：显示表面的安全渲染
公开(公告)号：US20140267332A1
公开(公告)日：2014-09-18
申请号：US13832435
申请日：2013-03-15
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , Michael A. Goldsmith , David M. Durham
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , Michael A. Goldsmith , David M. Durham
IPC分类号： G06T1/60
CPC分类号： G06T1/60 , G06F3/147 , G06F21/84 , G06T1/20 , G09G2358/00 , H04N21/42653 , H04N21/4318 , H04N21/4367 , H04N21/44004 , H04N21/4408
摘要： A protected graphics module can send its output to a display engine securely. Secure communications with the display can provide a level of confidentiality of content generated by protected graphics modules against software and hardware attacks.
摘要翻译：受保护的图形模块可以将其输出安全地发送到显示引擎。与显示器的安全通信可以提供受保护图形模块生成的内容对软件和硬件攻击的机密性。

10. 发明申请

US20140215602A1 RANGE BASED USER IDENTIFICATION AND PROFILE DETERMINATION 有权
标题翻译：基于范围的用户识别和配置文件的确定
公开(公告)号：US20140215602A1
公开(公告)日：2014-07-31
申请号：US13995507
申请日：2011-12-30
申请人： Michelle H. Chuaprasort , David M. Durham , Mark D. Boucher , Sanjay Bakshi
发明人： Michelle H. Chuaprasort , David M. Durham , Mark D. Boucher , Sanjay Bakshi
IPC分类号： G06F21/35
CPC分类号： H04L63/0876 , G06F21/35 , G06Q10/10 , G06Q30/02 , H04L67/306
摘要： An embodiment includes a main compute node that detects the physical presence of a first user and subsequently loads a profile for the first user. The main compute node may detect the first user's presence based on detecting a first compute node corresponding to the first user. For example, the main compute node may be a desktop computer that detects the presence of the first user's Smart phone, which is nearby the first user. The main compute node may unload the first user's profile when the main compute node no longer detects the first user's presence. Upon detecting a second user's presence, the main computer may load a profile for the second user. The profile may include cookies and/or other identifiers for the second user. The profile may facilitate the second user's navigation of a computing environment (e.g. web pages). Other embodiments are addressed herein.
摘要翻译：一个实施例包括主计算节点，其检测第一用户的物理存在并随后加载用于第一用户的简档。主计算节点可以基于检测对应于第一用户的第一计算节点来检测第一用户的存在。例如，主计算节点可以是检测在第一用户附近的第一用户的智能电话的存在的台式计算机。当主计算节点不再检测到第一用户的存在时，主计算节点可以卸载第一用户的简档。当检测到第二用户的存在时，主计算机可以加载用于第二用户的简档。该简档可以包括用于第二用户的cookie和/或其他标识符。该简档可以促进第二用户导航计算环境（例如，网页）。其他实施例在这里被解决。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式