专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20110296156A1 System and Method for Secure Client Hosted Virtualization in an Information Handling System 有权
标题翻译：信息处理系统中安全客户端托管虚拟化的系统和方法
公开(公告)号：US20110296156A1
公开(公告)日：2011-12-01
申请号：US12790546
申请日：2010-05-28
申请人： Shree Dandekar , Frank H. Molsberry , Gary D. Huber , Neeraj Srivastava , Yuan-Chang Lo
发明人： Shree Dandekar , Frank H. Molsberry , Gary D. Huber , Neeraj Srivastava , Yuan-Chang Lo
IPC分类号： G06F21/00 , G06F9/445
CPC分类号： G06F21/53 , G06F9/45533 , G06F21/554 , G06F21/57 , G06F21/74
摘要： A client hosted virtualization system (CHVS) includes a processor and non-volatile memory with BIOS code and virtualization manager code. The virtualization manager initializes the CHVS, authenticates a virtual machine image and launches the virtual machine based on the image. The CHVS is configurable to execute the BIOS or the virtualization manager. A client system update network includes a client update system and a CHVS with a processor, a security processor, and non-volatile memory with BIOS code and virtualization manager code that initializes the CHVS, authenticates a virtual machine image and launches a virtual machine based on the image. The CHVS is configurable to execute the BIOS or the virtualization manager. The client update system receives updates and sends them to the CHVS. The CHVS authenticates the updates with the security processor, and overwrites the non-volatile memory with the updates.
摘要翻译：客户端托管的虚拟化系统（CHVS）包括具有BIOS代码和虚拟化管理器代码的处理器和非易失性存储器。虚拟化管理器初始化CHVS，验证虚拟机映像，并基于映像启动虚拟机。 CHVS可配置为执行BIOS或虚拟化管理器。客户端系统更新网络包括具有处理器，安全处理器和具有初始化CHVS的BIOS代码和虚拟化管理器代码的非易失性存储器的客户端更新系统和CHVS，验证虚拟机映像并基于图片。 CHVS可配置为执行BIOS或虚拟化管理器。客户端更新系统接收更新并将其发送到CHVS。 CHVS使用安全处理器验证更新，并用更新覆盖非易失性存储器。

2. 发明申请

US20100146582A1 ENCRYPTION MANAGEMENT IN AN INFORMATION HANDLING SYSTEM 审中-公开
标题翻译：信息处理系统中的加密管理
公开(公告)号：US20100146582A1
公开(公告)日：2010-06-10
申请号：US12328213
申请日：2008-12-04
申请人： Muhammed Jaber , David Konetski , Don C. McCall , Frank H. Molsberry , Kenneth Wade Stufflebeam, JR. , Michele A. Kopp
发明人： Muhammed Jaber , David Konetski , Don C. McCall , Frank H. Molsberry , Kenneth Wade Stufflebeam, JR. , Michele A. Kopp
IPC分类号： G06F21/00 , H04L9/06
CPC分类号： G06F21/6218 , H04L63/0428
摘要： A method of enforcing an encryption policy in an information handling system for receiving a request for access to data, automatically identifying from a plurality of encryption policies a particular encryption policy associated with the requested data, selecting an available encryption implementation module capable of enforcing the identified encryption policy, and initiating an encryption or decryption of the requested data using the selected encryption implementation module.
摘要翻译：一种在信息处理系统中执行加密策略的方法，用于接收对数据的访问请求，从多个加密策略中自动识别与所请求数据相关联的特定加密策略，选择能够执行所识别的加密策略的可用加密实现模块加密策略，以及使用所选择的加密实现模块发起所请求数据的加密或解密。

3. 发明授权

US08468362B2 System and method for providing access to an information handling system 有权
公开(公告)号：US08468362B2
公开(公告)日：2013-06-18
申请号：US13152470
申请日：2011-06-03
申请人： David Konetski , Frank H. Molsberry
发明人： David Konetski , Frank H. Molsberry
IPC分类号： G06F21/00 , G06F7/04
CPC分类号： G06F21/32
摘要： An information handling system includes a memory and a detector circuit. The memory is configured to store a first electrocardiogram measurement. The detector circuit is configured to receive a second electrocardiogram measurement in response to a specific combination of keys of a keyboard being pressed for a specific period of time, wherein each key in the specific key combination includes an electrocardiogram sensor on a top surface of the key, to authorize a user and log the user onto the information handling system when the second electrocardiogram measurement matches the first electrocardiogram measurement, and otherwise: to deny access to the information handling system; to increase a counter; to determine whether the counter has exceeded a threshold; and to request that an input window is displayed when the counter has exceeded the threshold.

4. 发明授权

US07559092B2 Secured KVM switch 有权
标题翻译：安全的KVM切换器
公开(公告)号：US07559092B2
公开(公告)日：2009-07-07
申请号：US11839372
申请日：2007-08-15
申请人： Douglas M. Anson , James C. Lowery , Frank H. Molsberry
发明人： Douglas M. Anson , James C. Lowery , Frank H. Molsberry
IPC分类号： H01H13/70
CPC分类号： G06F21/83 , G06F21/84 , G06F21/85
摘要： A method supports secure input/output (I/O) communications between an I/O device and a data processing system via a keyboard, video, and mouse (KVM) switch. An example embodiment includes the operations of establishing a first secure communication channel between the KVM switch and the I/O device and establishing a second secure communication channel between the KVM switch and the data processing system. In addition, I/O data may be received at the KVM switch from the I/O device via the first secure communication channel. In response to receipt of the I/O data from the I/O device, the I/O data may be transmitted from the KVM switch to the data processing system via the second secure communication channel. Embodiments may also include support for non-secure channels between the KVM switch and nonsecured I/O devices, nonsecured data processing systems, or both.
摘要翻译：一种方法通过键盘，视频和鼠标（KVM）开关支持I / O设备和数据处理系统之间的安全输入/输出（I / O）通信。示例性实施例包括在KVM切换器和I / O设备之间建立第一安全通信信道并在KVM切换器和数据处理系统之间建立第二安全通信信道的操作。此外，I / O数据可以经由第一安全通信信道从I / O设备在KVM切换器处被接收。响应于从I / O设备接收I / O数据，I / O数据可以经由第二安全通信信道从KVM切换器发送到数据处理系统。实施例还可以包括支持KVM切换器与非安全I / O设备之间的非安全通道，非安全数据处理系统或两者。

5. 发明授权

US08719557B2 System and method for secure client hosted virtualization in an information handling system 有权
标题翻译：信息处理系统中用于安全客户端托管虚拟化的系统和方法
公开(公告)号：US08719557B2
公开(公告)日：2014-05-06
申请号：US12790546
申请日：2010-05-28
申请人： Shree Dandekar , Frank H. Molsberry , Gary D. Huber , Neeraj Srivastava , Yuan-Chang Lo
发明人： Shree Dandekar , Frank H. Molsberry , Gary D. Huber , Neeraj Srivastava , Yuan-Chang Lo
IPC分类号： G06F21/00 , G06F9/445
CPC分类号： G06F21/53 , G06F9/45533 , G06F21/554 , G06F21/57 , G06F21/74
摘要： A client hosted virtualization system (CHVS) includes a processor and non-volatile memory with BIOS code and virtualization manager code. The virtualization manager initializes the CHVS, authenticates a virtual machine image and launches the virtual machine based on the image. The CHVS is configurable to execute the BIOS or the virtualization manager. A client system update network includes a client update system and a CHVS with a processor, a security processor, and non-volatile memory with BIOS code and virtualization manager code that initializes the CHVS, authenticates a virtual machine image and launches a virtual machine based on the image. The CHVS is configurable to execute the BIOS or the virtualization manager. The client update system receives updates and sends them to the CHVS. The CHVS authenticates the updates with the security processor, and overwrites the non-volatile memory with the updates.
摘要翻译：客户端托管的虚拟化系统（CHVS）包括具有BIOS代码和虚拟化管理器代码的处理器和非易失性存储器。虚拟化管理器初始化CHVS，验证虚拟机映像，并基于映像启动虚拟机。 CHVS可配置为执行BIOS或虚拟化管理器。客户端系统更新网络包括具有处理器，安全处理器和具有初始化CHVS的BIOS代码和虚拟化管理器代码的非易失性存储器的客户端更新系统和CHVS，验证虚拟机映像并基于图片。 CHVS可配置为执行BIOS或虚拟化管理器。客户端更新系统接收更新并将其发送到CHVS。 CHVS使用安全处理器验证更新，并用更新覆盖非易失性存储器。

6. 发明申请

US20100146267A1 Systems and methods for providing secure platform services 审中-公开
标题翻译：提供安全平台服务的系统和方法
公开(公告)号：US20100146267A1
公开(公告)日：2010-06-10
申请号：US12316189
申请日：2008-12-10
申请人： David Konetski , Richard W. Schuckle , Frank H. Molsberry
发明人： David Konetski , Richard W. Schuckle , Frank H. Molsberry
IPC分类号： H04L9/00
CPC分类号： G06F21/602 , G06F9/45533 , G06F12/14 , G06F21/53 , G06F21/60 , G06F21/70 , G06F21/86 , G06F21/87 , G06F2009/45587
摘要： Systems and methods for providing secure platform services using an information handling system, and which may be implemented to sequester or otherwise isolate sensitive cryptographic processes, as well as the keys used during such decryption and encryption processes. The systems and methods may be implemented as a set of secure services that are available to an operating system or to a Hypervisor executing on an information handling system, and the processing environment may be provided as a closed environment, thus preventing malicious code from infiltrating the processing environment. Dedicated and secure memory space may be employed to prevent key detection through memory scans.
摘要翻译：用于使用信息处理系统提供安全平台服务的系统和方法，并且其可被实现为隔离或隔离敏感密码过程，以及在这样的解密和加密处理期间使用的密钥。系统和方法可以被实现为可用于在信息处理系统上执行的操作系统或管理程序的一组安全服务，并且可以将处理环境提供为封闭环境，从而防止恶意代码渗透处理环境。可以采用专用和安全的存储器空间来防止通过存储器扫描的键检测。

7. 发明授权

US07284278B2 Secured KVM switch 有权
标题翻译：安全的KVM切换器
公开(公告)号：US07284278B2
公开(公告)日：2007-10-16
申请号：US10379193
申请日：2003-03-04
申请人： Douglas M. Anson , James C. Lowery , Frank H. Molsberry
发明人： Douglas M. Anson , James C. Lowery , Frank H. Molsberry
IPC分类号： H01H13/70
CPC分类号： G06F21/83 , G06F21/84 , G06F21/85
摘要： A method supports secure input/output (I/O) communications between an I/O device and a data processing system via a keyboard, video, and mouse (KVM) switch. An example embodiment includes the operations of establishing a first secure communication channel between the KVM switch and the I/O device and establishing a second secure communication channel between the KVM switch and the data processing system. In addition, I/O data may be received at the KVM switch from the I/O device via the first secure communication channel. In response to receipt of the I/O data from the I/O device, the I/O data may be transmitted from the KVM switch to the data processing system via the second secure communication channel. Embodiments may also include support for non-secure channels between the KVM switch and non-secured I/O devices, non-secured data processing systems, or both.
摘要翻译：一种方法通过键盘，视频和鼠标（KVM）开关支持I / O设备和数据处理系统之间的安全输入/输出（I / O）通信。示例性实施例包括在KVM切换器和I / O设备之间建立第一安全通信信道并在KVM切换器和数据处理系统之间建立第二安全通信信道的操作。此外，I / O数据可以经由第一安全通信信道从I / O设备在KVM切换器处被接收。响应于从I / O设备接收I / O数据，I / O数据可以经由第二安全通信信道从KVM切换器发送到数据处理系统。实施例还可以包括支持KVM切换器与非安全I / O设备之间的非安全通道，非安全数据处理系统或两者。

8. 发明申请

US20120311699A1 System and Method for Providing Access to an Information Handling System 有权
标题翻译：提供对信息处理系统的访问的系统和方法
公开(公告)号：US20120311699A1
公开(公告)日：2012-12-06
申请号：US13152470
申请日：2011-06-03
申请人： David Konetski , Frank H. Molsberry
发明人： David Konetski , Frank H. Molsberry
IPC分类号： G06F21/00 , G06F7/04
CPC分类号： G06F21/32
摘要： An information handling system includes a memory and a detector circuit. The memory is configured to store a first electrocardiogram measurement. The detector circuit is configured to receive a second electrocardiogram measurement in response to a specific combination of keys of a keyboard being pressed for a specific period of time, wherein each key in the specific key combination includes an electrocardiogram sensor on a top surface of the key, to authorize a user and log the user onto the information handling system when the second electrocardiogram measurement matches the first electrocardiogram measurement, and otherwise: to deny access to the information handling system; to increase a counter; to determine whether the counter has exceeded a threshold; and to request that an input window is displayed when the counter has exceeded the threshold.
摘要翻译：信息处理系统包括存储器和检测器电路。存储器被配置为存储第一次心电图测量。检测器电路被配置为响应于被按压特定时间段的键盘的特定组合而接收第二心电图测量，其中特定键组合中的每个键包括在键的顶表面上的心电图传感器当第二心电图测量与第一心电图测量相匹配时授权用户并将用户登录到信息处理系统，否则：拒绝对信息处理系统的访问; 增加柜台; 以确定计数器是否超过阈值; 并要求在计数器超过阈值时显示输入窗口。

9. 发明授权

US07308102B2 System and method for securing access to memory modules 有权
标题翻译：用于确保访问内存模块的系统和方法
公开(公告)号：US07308102B2
公开(公告)日：2007-12-11
申请号：US10634942
申请日：2003-08-05
申请人： Douglas M. Anson , Yuan-Chang Lo , Frank H. Molsberry , Clint H. O'Connor , William F. Sauber
发明人： Douglas M. Anson , Yuan-Chang Lo , Frank H. Molsberry , Clint H. O'Connor , William F. Sauber
IPC分类号： H04L9/32 , H04L9/14 , H04L9/16
CPC分类号： G06F12/1433
摘要： A system and method for securing access to memory modules includes a memory module, a virtual memory module, a boot module, and a gatekeeper. The boot module accepts a key and requests for the memory module and provides the requests and the key to the virtual memory module. The virtual memory module is externally accessible by the boot module and accepts the provided key and the requests from the boot module and transmits the requests and the provided key from the boot module to the gatekeeper. The gatekeeper regulates access to the memory module allowing no other components to directly access the memory module. The gatekeeper receives the provided key from the virtual memory module and the gatekeeper authenticates the provided key by comparing it with a stored key stored in secure location. Upon proper authentication of the provided key, the gatekeeper executes the request in the memory module.
摘要翻译：用于保护对存储器模块的访问的系统和方法包括存储器模块，虚拟存储器模块，引导模块和关守。引导模块接受密钥并请求内存模块，并将请求和密钥提供给虚拟内存模块。虚拟内存模块可由引导模块外部访问，并接受所提供的密钥和来自引导模块的请求，并将请求和提供的密钥从引导模块发送给关守。网守调节对内存模块的访问，允许其他组件直接访问内存模块。网守从虚拟存储器模块接收提供的密钥，并且关守通过将其与存储在安全位置中的存储密钥进行比较来认证所提供的密钥。对所提供的密钥进行适当认证后，网守将在存储器模块中执行该请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式