专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20160124751A1 ACCESS ISOLATION FOR MULTI-OPERATING SYSTEM DEVICES 审中-公开
标题翻译：多操作系统设备的访问隔离
公开(公告)号：US20160124751A1
公开(公告)日：2016-05-05
申请号：US14772605
申请日：2014-03-19
申请人： Kevin LI , Vincent ZIMMER , Xiaohu ZHOU , Ping WU , Zijian YOU , Michael ROTHMAN , INTEL PATENT GROUP
发明人： KEVIN Y. LI , VINCENT J. ZIMMER , ZIAOHU ZHOU , PING WU , ZIJIAN YOU , MICHAEL A. ROTHMAN
IPC分类号： G06F9/44 , H04L9/08
CPC分类号： G06F9/441 , G06F9/45541 , G06F21/74 , H04L9/0822
摘要： The present application is directed to access isolation for multi-operating system devices. In general, a device may be configured using firmware to accommodate more than one operating system (OS) operating concurrently on the device or to transition from one OS to another. An access isolation module (AIM) in the firmware may determine a device equipment configuration and may partition the equipment for use by multiple operating systems. The AIM may disable OS-based equipment sensing and may allocate at least a portion of the equipment to each OS using customized tables. When transitioning between operating systems, the AIM may help to ensure that information from one OS is not accessible to others. For example, the AIM may detect when a foreground OS is to be replaced by a background OS, and may protect (e.g., lockout or encrypt) the files of the foreground OS prior to the background OS becoming active.
摘要翻译：本应用针对多操作系统设备的访问隔离。通常，可以使用固件来配置设备以容纳在设备上同时运行的多个操作系统（OS）或者从一个OS转换到另一个操作系统。固件中的访问隔离模块（AIM）可以确定设备设备配置，并且可以划分设备以供多个操作系统使用。 AIM可以禁用基于操作系统的设备感测，并且可以使用定制的表将至少一部分设备分配给每个OS。当在操作系统之间转换时，AIM可以帮助确保来自一个操作系统的信息不被其他人访问。例如，AIM可以检测前景OS何时被后台OS替换，并且可以在背景OS变为活动之前保护（例如，锁定或加密）前台OS的文件。

2. 发明授权

US09311177B2 Mechanism to support reliability, availability, and serviceability (RAS) flows in a peer monitor 有权
标题翻译：在对等监视器中支持可靠性，可用性和可服务性（RAS）流的机制
公开(公告)号：US09311177B2
公开(公告)日：2016-04-12
申请号：US13977098
申请日：2013-03-07
申请人： Jiewen Yao , Vincent Zimmer
发明人： Jiewen Yao , Vincent Zimmer
IPC分类号： G06F11/00 , G06F11/07 , G06F21/00 , G06F9/44 , G06F9/54 , G06F13/40 , G11C29/08 , G06F9/52
CPC分类号： G06F11/0793 , G06F9/4406 , G06F9/468 , G06F9/4812 , G06F9/52 , G06F9/542 , G06F11/00 , G06F11/073 , G06F13/4081 , G06F21/00 , G11C29/08
摘要： A mechanism to support reliability, availability, and serviceability (RAS) flows in a peer monitor is disclosed. A method of the disclosure includes receiving, by a processing device, a system management interrupt (SMI) event. The method further includes invoking, in response to the SMI event, a privilege manager to execute from a read-only memory (ROM) entry point to handle the SMI event, the privilege manager comprising a hot plug service module to provide support for memory hot plug functionality and processor hot plug functionality.
摘要翻译：公开了一种在对等监视器中支持可靠性，可用性和可服务性（RAS）流的机制。本公开的方法包括：通过处理设备接收系统管理中断（SMI）事件。该方法还包括响应于SMI事件调用特权管理器从只读存储器（ROM）入口点执行以处理SMI事件，该特权管理器包括热插拔服务模块以提供对存储器热的支持插头功能和处理器热插拔功能。

3. 发明授权

US09251347B2 Providing an immutable antivirus payload for internet ready compute nodes 有权
标题翻译：为互联网准备的计算节点提供不可变的防病毒有效载荷
公开(公告)号：US09251347B2
公开(公告)日：2016-02-02
申请号：US13993540
申请日：2012-03-30
申请人： Mallik Bulusu , Robert Swanson , Vincent Zimmer , Robert Bruce Bahnsen
发明人： Mallik Bulusu , Robert Swanson , Vincent Zimmer , Robert Bruce Bahnsen
IPC分类号： G06F15/16 , G06F21/56 , G06F21/57 , G06F9/44 , G06F9/00 , G06F17/00
CPC分类号： G06F21/561 , G06F9/4401 , G06F11/1417 , G06F21/56 , G06F21/568 , G06F21/575
摘要： In one embodiment, a method includes initializing a portion of a computing system in a pre-boot environment using a basic input/output system (BIOS) stored in a non-volatile storage of the computing system, launching a boot manager to enable a launch of an operating system (OS) payload, and if the OS payload is not successfully launched, executing an OS payload portion and an antivirus stack stored in the non-volatile storage to restore an integrity of the mass storage. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，一种方法包括使用存储在计算系统的非易失性存储器中的基本输入/输出系统（BIOS）在预引导环境中初始化计算系统的一部分，启动引导管理器以使能启动的操作系统（OS）有效载荷，并且如果OS有效载荷未成功启动，则执行存储在非易失性存储器中的OS有效载荷部分和防病毒栈以恢复大容量存储的完整性。描述和要求保护其他实施例。

4. 发明授权

US08751813B2 Cross validation of data using multiple subsystems 有权
标题翻译：使用多个子系统交叉验证数据
公开(公告)号：US08751813B2
公开(公告)日：2014-06-10
申请号：US13550583
申请日：2012-07-16
申请人： David Durhman , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
发明人： David Durhman , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
IPC分类号： H04L9/32
CPC分类号： G06F21/57 , G06F12/1433 , G06F21/575 , G06F21/64
摘要： A method and apparatus for cross validation of data using multiple subsystems are described. According to one embodiment of the invention, a computer comprises a first subsystem and a second subsystem; and a memory, the memory comprising a first memory region and a second memory region, the first memory region being associated with the first subsystem and a second memory region being associated with the second subsystem; upon start up of the computer, the first subsystem to validate the second memory region and the second subsystem to validate the first memory region.
摘要翻译：描述了使用多个子系统进行数据交叉验证的方法和装置。根据本发明的一个实施例，计算机包括第一子系统和第二子系统; 以及存储器，所述存储器包括第一存储器区域和第二存储器区域，所述第一存储器区域与所述第一子系统相关联，以及与所述第二子系统相关联的第二存储器区域; 在计算机启动时，第一子系统用于验证第二存储器区域和第二子系统以验证第一存储器区域。

5. 发明授权

US08561138B2 System and method to provide added security to a platform using locality-based data 有权
标题翻译：使用基于位置的数据为平台增加安全性的系统和方法
公开(公告)号：US08561138B2
公开(公告)日：2013-10-15
申请号：US12347830
申请日：2008-12-31
申请人： Michael M. Rothman , Vincent Zimmer
发明人： Michael M. Rothman , Vincent Zimmer
IPC分类号： G06F21/00
CPC分类号： G06F21/52 , G06F21/35 , G06F21/575 , G06F21/88 , G06F2221/2111
摘要： In some embodiments, the invention involves protecting a platform using locality-based data and, more specifically, to using the locality-based data to ensure that the platform has not been stolen or subject to unauthorized access. In some embodiments, a second level of security, such as a key fob, badge or other source device having an identifying RFID is used for added security. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，本发明涉及使用基于地点的数据来保护平台，更具体地说，涉及使用基于位置的数据来确保平台未被盗或遭受未经授权的访问。在一些实施例中，使用具有识别RFID的第二级安全性，例如密钥卡，徽章或其他源设备来增加安全性。描述和要求保护其他实施例。

6. 发明申请

US20130151876A1 METHOD AND APPARATUS FOR QUICK RESUMPTION 有权
标题翻译：快速恢复的方法和装置
公开(公告)号：US20130151876A1
公开(公告)日：2013-06-13
申请号：US13764245
申请日：2013-02-11
申请人： Michael Rothman , Glenn Hinton , Vincent Zimmer , Michael Kinney , Mark Doran
发明人： Michael Rothman , Glenn Hinton , Vincent Zimmer , Michael Kinney , Mark Doran
IPC分类号： G06F1/32
CPC分类号： G06F1/3234 , G06F9/4418
摘要： When transitioning from sleep mode to active mode, a processing system loads first stage resume content and second stage resume content into a volatile memory of the processing system. The first stage resume content may contain contextual data for a first program that was in use before the processing system transitioned to sleep mode. The second stage resume content may contain contextual data for another program that was in use before the processing system transitioned to sleep mode. The processing system may provide a user interface for the first program before all of the second stage resume content has been loaded into the volatile memory. Other embodiments are described and claimed.
摘要翻译：当从睡眠模式转换到活动模式时，处理系统将第一级恢复内容和第二级恢复内容加载到处理系统的易失性存储器中。第一阶段恢复内容可以包含在处理系统转换到睡眠模式之前正在使用的第一程序的上下文数据。第二阶段恢复内容可以包含在处理系统转换到睡眠模式之前正在使用的另一程序的上下文数据。处理系统可以在所有第二阶段恢复内容已经被加载到易失性存储器之前为第一程序提供用户界面。描述和要求保护其他实施例。

7. 发明授权

US08161258B2 Method to qualify access to a block storage device via augmentation of the device'S controller and firmware flow 有权
标题翻译：通过增加设备的控制器和固件流来限制访问块存储设备的方法
公开(公告)号：US08161258B2
公开(公告)日：2012-04-17
申请号：US13100138
申请日：2011-05-03
申请人： Mark Doran , Vincent Zimmer , Michael A. Rothman
发明人： Mark Doran , Vincent Zimmer , Michael A. Rothman
IPC分类号： G06F12/14
CPC分类号： G06F3/0644 , G06F3/0623 , G06F3/0676
摘要： A method to qualify access to a block storage device via augmentation of the device's controller and firmware flow. The method employs one or more block exclusion vectors (BEVs) that include attributes specifying allowed access operations for corresponding block address ranges. Logic in accordance with the BEVs is programmed into the controller for the block storage device, such as a disk drive controller for a disk drive. In response to an access request, a block address range corresponding to the storage block(s) requested to be accessed is determined. Based on the BEV entries, a determination is made to whether the determined logical block address range is covered by a corresponding BEV entry. If so, the attributes of the BEV are used to determine whether the access operation is allowed. The method may be used to secure access to firmware stored on a disk drive, thus enabling a system configuration that does not require a conventional firmware storage device.
摘要翻译：一种通过增加设备的控制器和固件流来限制访问块存储设备的方法。该方法采用一个或多个块排除向量（BEV），其包括指定相应块地址范围的允许访问操作的属性。根据BEV的逻辑被编程到用于块存储设备的控制器中，例如用于磁盘驱动器的磁盘驱动器控制器。响应于访问请求，确定与请求访问的存储块相对应的块地址范围。基于BEV条目，确定所确定的逻辑块地址范围是否被相应的BEV条目覆盖。如果是，则使用BEV的属性来确定是否允许访问操作。该方法可以用于保护对存储在磁盘驱动器上的固件的访问，从而实现不需要常规固件存储设备的系统配置。

8. 发明授权

US07953916B2 Dynamic, local retriggered interrupt routing discovery method 有权
标题翻译：动态本地重新触发中断路由发现方法
公开(公告)号：US07953916B2
公开(公告)日：2011-05-31
申请号：US12420685
申请日：2009-04-08
申请人： Jacob Pan , Vincent Zimmer
发明人： Jacob Pan , Vincent Zimmer
IPC分类号： G06F13/24
CPC分类号： G06F13/24
摘要： In some embodiments, the invention involves a dynamic interrupt route discovery method with local APIC (Advanced Programmable Interrupt Controller) retriggering to accommodate architectures that are not PC/AT compatible. In a mobile Internet device (MID) General Purpose Input/Output (GPIO) pins are dynamically allocated and IRQs are retriggered by a GPIO driver to multiplex the requests to an appropriate device. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，本发明涉及具有本地APIC（高级可编程中断控制器）重新触发的动态中断路由发现方法，以适应不兼容PC / AT的架构。在移动互联网设备（MID）中，动态分配通用输入/输出（GPIO）引脚，并由GPIO驱动程序重新触发IRQ，以将请求复用到适当的设备。描述和要求保护其他实施例。

9. 发明授权

US07934209B2 Method for firmware variable storage with eager compression, fail-safe extraction and restart time compression scan 有权
标题翻译：固件变量存储方法，具有急切压缩，故障安全提取和重启时间压缩扫描
公开(公告)号：US07934209B2
公开(公告)日：2011-04-26
申请号：US10561049
申请日：2004-05-26
申请人： Vincent Zimmer , Michael Rothman , Greg Miller , Mark Doran
发明人： Vincent Zimmer , Michael Rothman , Greg Miller , Mark Doran
IPC分类号： G06F9/44
CPC分类号： G06F9/4401 , H03M7/30
摘要： Firmware-based conversion methods for storing converted firmware variables in a firmware storage device, such as flash memory. Under one method, “eager” compression of firmware is performed. In response to a storage request, a determination is made to whether a compressor is available. If it is, the firmware variable is stored in a compressed form in the storage device; if not, the firmware variable is stored in an uncompressed form. In response to a read request for a stored firmware variable, a determination is made to whether the variable is stored in a compressed or uncompressed form. If it is compressed, a decompressor is employed to return the variable to its uncompressed form prior to providing it to the requestor; already uncompressed variables are provided directly to the requester. An application program interface is provided to enable operating system runtime access to the firmware variables. Similar conversions may be employed separately or in parallel, including encryption.
摘要翻译：用于将转换的固件变量存储在诸如闪存的固件存储设备中的基于固件的转换方法。在一种方法下，执行固件的“急切”压缩。响应于存储请求，确定压缩机是否可用。如果是，固件变量以压缩形式存储在存储设备中; 如果没有，则固件变量以未压缩形式存储。响应对存储的固件变量的读取请求，确定变量是以压缩形式还是未压缩形式存储。如果它被压缩，则使用解压缩器在将变量提供给请求者之前将其变为未压缩的形式; 已经将未压缩的变量直接提供给请求者。提供一个应用程序接口，以使操作系统运行时访问固件变量。类似的转换可以单独或并行使用，包括加密。

10. 发明申请

US20090282268A1 CROSS VALIDATION OF DATA USING MULTIPLE SUBSYSTEMS 有权
标题翻译：使用多个子系统的数据交叉验证
公开(公告)号：US20090282268A1
公开(公告)日：2009-11-12
申请号：US12502868
申请日：2009-07-14
申请人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
发明人： David Durham , Travis Schluessler , Raj Yavatkar , Vincent Zimmer , Carey Smith
IPC分类号： G06F12/14
CPC分类号： G06F21/57 , G06F12/1433 , G06F21/575 , G06F21/64
摘要： A method and apparatus for cross validation of data using multiple subsystems are described. According to one embodiment of the invention, a computer comprises a first subsystem and a second subsystem; and a memory, the memory comprising a first memory region and a second memory region, the first memory region being associated with the first subsystem and a second memory region being associated with the second subsystem; upon start up of the computer, the first subsystem to validate the second memory region and the second subsystem to validate the first memory region.
摘要翻译：描述了使用多个子系统进行数据交叉验证的方法和装置。根据本发明的一个实施例，计算机包括第一子系统和第二子系统; 以及存储器，所述存储器包括第一存储器区域和第二存储器区域，所述第一存储器区域与所述第一子系统相关联，以及与所述第二子系统相关联的第二存储器区域; 在计算机启动时，第一子系统用于验证第二存储器区域和第二子系统以验证第一存储器区域。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式