专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07409719B2 Computer security management, such as in a virtual machine or hardened operating system 有权
标题翻译：计算机安全管理，如虚拟机或硬化操作系统
公开(公告)号：US07409719B2
公开(公告)日：2008-08-05
申请号：US11019094
申请日：2004-12-21
申请人： Benjamin Armstrong , Paul England , Scott A. Field , Jason Garms , Michael Kramer , Kenneth D. Ray
发明人： Benjamin Armstrong , Paul England , Scott A. Field , Jason Garms , Michael Kramer , Kenneth D. Ray
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/56 , G06F21/566
摘要： A security scheme provides security to one or more self-contained operating environment instances executing on a computer. The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of the one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environment and processes running on the computer outside of the self-contained operating environments.
摘要翻译：安全方案为在计算机上执行的一个或多个自包含的操作环境实例提供安全性。安全方案可以包括实现可由监督过程等控制的一组安全应用。所述一组安全应用程序和监督过程可以在计算机的主机系统上操作，其还可以提供用于执行一个或多个独立操作环境的平台。安全性方案保护在独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。

2. 发明授权

US07836504B2 On-access scan of memory for malware 有权
标题翻译：恶意软件的内存访问扫描
公开(公告)号：US07836504B2
公开(公告)日：2010-11-16
申请号：US11070468
申请日：2005-03-01
申请人： Kenneth D Ray , Michael Kramer , Paul England , Scott A Field
发明人： Kenneth D Ray , Michael Kramer , Paul England , Scott A Field
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G06B23/00
CPC分类号： G06F12/145 , G06F21/562
摘要： The present invention provides a system, method, and computer-readable medium for identifying malware that is loaded in the memory of a computing device. Software routines implemented by the present invention track the state of pages loaded in memory using page table access bits available from a central processing unit. A page in memory may be in a state that is “unsafe” or potentially infected with malware. In this instance, the present invention calls a scan engine to search a page for malware before information on the page is executed.
摘要翻译：本发明提供一种用于识别加载到计算设备的存储器中的恶意软件的系统，方法和计算机可读介质。由本发明实现的软件程序使用从中央处理单元获得的页表访问位来跟踪加载在存储器中的页的状态。内存中的页面可能处于“不安全”或可能感染恶意软件的状态。在这种情况下，本发明在页面上的信息被执行之前，调用扫描引擎来搜索页面中的恶意软件。

3. 发明授权

US07490352B2 Systems and methods for verifying trust of executable files 有权
标题翻译：用于验证可执行文件信任的系统和方法
公开(公告)号：US07490352B2
公开(公告)日：2009-02-10
申请号：US11100770
申请日：2005-04-07
申请人： Michael Kramer , Kenneth D. Ray , Paul England , Scott A. Field , Jonathan D. Schwartz
发明人： Michael Kramer , Kenneth D. Ray , Paul England , Scott A. Field , Jonathan D. Schwartz
IPC分类号： G06F21/22 , G06F21/00 , G06F12/14
CPC分类号： G06F21/51 , G06F21/56
摘要： Systems and methods for validating integrity of an executable file are described. In one aspect, the systems and methods determine that an executable file is being introduced into a path of execution. The executable file is then automatically evaluated in view of multiple malware checks to detect if the executable file represents a type of malware. The multiple malware checks are integrated into an operating system trust verification process along the path of execution.
摘要翻译：描述用于验证可执行文件的完整性的系统和方法。在一个方面，系统和方法确定可执行文件正被引入到执行的路径中。然后，根据多个恶意软件检查自动评估可执行文件，以检测可执行文件是否代表一种恶意软件。多个恶意软件检查被集成到沿着执行路径的操作系统信任验证过程中。

4. 发明申请

US20060136720A1 Computer security management, such as in a virtual machine or hardened operating system 有权
标题翻译：计算机安全管理，如虚拟机或硬化操作系统
公开(公告)号：US20060136720A1
公开(公告)日：2006-06-22
申请号：US11019094
申请日：2004-12-21
申请人： Benjamin Armstrong , Paul England , Scott Field , Jason Garms , Michael Kramer , Kenneth Ray
发明人： Benjamin Armstrong , Paul England , Scott Field , Jason Garms , Michael Kramer , Kenneth Ray
IPC分类号： H04L9/00
CPC分类号： G06F21/53 , G06F21/56 , G06F21/566
摘要： A security scheme provides security to one or more self-contained operating environment instances executing on a computer. The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of the one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environment and processes running on the computer outside of the self-contained operating environments.
摘要翻译：安全方案为在计算机上执行的一个或多个自包含的操作环境实例提供安全性。安全方案可以包括实现可由监督过程等控制的一组安全应用。所述一组安全应用程序和监督过程可以在计算机的主机系统上操作，其还可以提供用于执行一个或多个独立操作环境的平台。安全性方案保护在独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。

5. 发明申请

US20090313397A1 Methods and Systems for Protecting Data in USB Systems 审中-公开
标题翻译： USB系统数据保护方法与系统
公开(公告)号：US20090313397A1
公开(公告)日：2009-12-17
申请号：US12348487
申请日：2009-01-05
申请人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
发明人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
IPC分类号： G06F13/28
CPC分类号： G06F12/1408 , G06F3/065 , G06F13/28 , G06F13/362 , G06F13/4282 , G06F21/606 , G06F21/72 , G06F21/73 , G06F21/78 , G06F21/85 , G06F2212/1052 , G06F2221/0704 , G06F2221/2105 , G06F2221/2129 , G06F2221/2147 , G06F2221/2153
摘要： The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.
摘要翻译：下面描述的各种实施例旨在从在USB总线上操作的I / O设备到主机（例如安全软件应用或安全内核）上执行的软件提供经认证和保密的消息传递。这些实施例可以防止在主计算机上执行的软件所征收的攻击。在一些实施例中，提供了安全的功能部件或模块，并且可以使用加密技术来提供对USB数据的观察和操纵的保护。在其他实施例中，USB数据可以通过不被利用（或不需要利用）加密技术的技术来保护。根据这些实施例，USB设备可以被指定为“安全”，因此，可以通过USB向这些指定设备发送和从这些指定设备发送的数据提供到受保护的存储器中。可以利用内存间接技术来确保进出安全设备的数据受到保护。

6. 发明授权

US07418512B2 Securely identifying an executable to a trust-determining entity 有权
标题翻译：安全地识别信任确定实体的可执行文件
公开(公告)号：US07418512B2
公开(公告)日：2008-08-26
申请号：US10692224
申请日：2003-10-23
申请人： Paul England , Anshul Dhir , Thekkthalackal Varugis Kurien , Kenneth D. Ray
发明人： Paul England , Anshul Dhir , Thekkthalackal Varugis Kurien , Kenneth D. Ray
IPC分类号： G06F15/16
CPC分类号： G06F21/62
摘要： A resource is obtained from a resource provider (RP) for a resource requester (RR) operating on a computing device. The RR has an identity descriptor (id) associated therewith, where the id including security-related information specifying an environment in which the RR operates. A code identity (code-ID) is calculated corresponding to and based on the loaded RR and loaded id. The RP verifies that the calculated code-ID in a request for the resource matches one of one or more valid code-IDs for the identified RR to conclude that the RR and id can be trusted, and the RP responds to the forwarded request by providing the requested resource to the RR.
摘要翻译：从用于在计算设备上操作的资源请求者（RR）的资源提供者（RP）获得资源。 RR具有与其相关联的身份描述符（id），其中id包括指定RR操作的环境的安全相关信息。代码标识（代码ID）是根据加载的RR和加载的id来计算的。 RP验证在资源请求中计算的代码ID与所识别的RR的一个或多个有效代码ID中的一个匹配，以得出可以信任的RR和ID，并且RP通过提供转发的请求来响应转发的请求向RR请求的资源。

7. 发明授权

US08028172B2 Systems and methods for updating a secure boot process on a computer with a hardware security module 有权
标题翻译：使用硬件安全模块在计算机上更新安全引导过程的系统和方法
公开(公告)号：US08028172B2
公开(公告)日：2011-09-27
申请号：US11036018
申请日：2005-01-14
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D. Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D. Ray , Jonathan Schwartz
IPC分类号： H04L9/32
CPC分类号： G06F21/575
摘要： Systems and methods are provided for maintaining and updating a secure boot process on a computer with a trusted platform module (TPM). A boot process may be maintained by inspecting a log of TPM activity, determining data that prevented a secret to unseal, and returning the data to an original state. In situations where this type of recovery is not workable, techniques for authenticating a user may be used, allowing the authenticated user to bypass the security features of the boot process and reseal the boot secrets to platform configuration register (PCR) values that may have changed. Finally, a secure boot process may be upgraded by migrating TPM sealed secrets to a temporary storage location, updating one or more aspects of a secure boot process, and resealing the secrets to the resulting new platform configuration. Other advantages and features of the invention are described below.
摘要翻译：提供了系统和方法，用于在具有可信平台模块（TPM）的计算机上维护和更新安全引导过程。可以通过检查TPM活动的日志来确定启动过程，确定防止秘密解密的数据，并将数据返回到原始状态。在这种类型的恢复不可行的情况下，可以使用用于验证用户的技术，允许经过身份验证的用户绕过引导过程的安全特征并将启动秘密重新密封到可能已经改变的平台配置寄存器（PCR）值。最后，可以通过将TPM密封的秘密迁移到临时存储位置来升级安全引导过程，更新安全引导过程的一个或多个方面，以及将密码重新密封到所得到的新平台配置。下面描述本发明的其它优点和特征。

8. 发明授权

US07529946B2 Enabling bits sealed to an enforceably-isolated environment 有权
标题翻译：使密封到可强制隔离环境的位
公开(公告)号：US07529946B2
公开(公告)日：2009-05-05
申请号：US11155071
申请日：2005-06-16
申请人： Kenneth D. Ray , Paul England , Peter Nicholas Biddle
发明人： Kenneth D. Ray , Paul England , Peter Nicholas Biddle
IPC分类号： G06F11/30 , G06F12/14 , H04L9/32
CPC分类号： G06F21/53 , G06F21/10 , G06F2221/2149
摘要： Prevention of unpermitted use of enabling bits is achieved by sealing the enabling bits to an environment in such a way that the bits can only be unsealed by or from the environment, and by using an isolation mechanism to isolate the environment from other environments on the machine on which the environment operates. The environment is trusted not to use the enabling bits except in accordance with a set of rules governing the bits. The enabling bits may be a decryption key for DRM-protected content, and the rules may be a license governing the use of that content. Trust that the enabling bits will not be misused is established by trusting the environment not to use the enabling bits contrary to the rules, trusting the isolation mechanism to isolate the environment, and trusting the unsealing mechanism only to unseal the bits for the environment.
摘要翻译：通过将启用比特密封到环境来实现防止未使用的使能位，使得这些比特仅能够被环境打开，或者通过使用隔离机制将环境与机器上的其它环境隔离开来环境运行。环境被信任不使用启用位，除了根据一组管理位的规则。启用位可以是用于受DRM保护的内容的解密密钥，并且规则可以是管理该内容的使用的许可证。相信启用位不会被滥用是通过信任环境不使用与规则相反的使能位来建立的，相信隔离机制来隔离环境，并且信任开封机制仅仅是为了解开环境的位。

9. 发明授权

US07725703B2 Systems and methods for securely booting a computer with a trusted processing module 有权
标题翻译：使用可信处理模块安全地引导计算机的系统和方法
公开(公告)号：US07725703B2
公开(公告)日：2010-05-25
申请号：US11031161
申请日：2005-01-07
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Anthony Schwartz, Jr. , Kenneth D Ray , Jonathan Schwartz
IPC分类号： G06F21/02 , G06F21/22
CPC分类号： G06F21/575
摘要： In a computer with a trusted platform module (TPM), an expected hash value of a boot component may be placed into a platform configuration register (PCR), which allows a TPM to unseal a secret. The secret may then be used to decrypt the boot component. The hash of the decrypted boot component may then be calculated and the result can be placed in a PCR. The PCRs may then be compared. If they do not, access to the an important secret for system operation can be revoked. Also, a first secret may be accessible only when a first plurality of PCR values are extant, while a second secret is accessible only after one or more of the first plurality of PCR values has been replaced with a new value, thereby necessarily revoking further access to the first secret in order to grant access to the second secret.
摘要翻译：在具有可信平台模块（TPM）的计算机中，引导组件的预期散列值可以被放置到平台配置寄存器（PCR）中，这允许TPM解密秘密。然后可以使用秘密来解密引导组件。然后可以计算解密的引导组件的散列，并将结果置于PCR中。然后可以比较PCR。如果不这样做，可以取消对系统运行的重要秘密的访问。此外，只有当第一多个PCR值存在时，第一个秘密才可以访问，而第二个秘密只有在第一个多个PCR值中的一个或多个被新的值替换之后才可访问，从而必然取消进一步的访问到第一个秘密，以授予访问第二个秘密。

10. 发明授权

US07530103B2 Projection of trustworthiness from a trusted environment to an untrusted environment 有权
标题翻译：从可信环境到不受信任的环境的可信赖性的投射
公开(公告)号：US07530103B2
公开(公告)日：2009-05-05
申请号：US10638199
申请日：2003-08-07
申请人： Bryan Mark Willman , Paul England , Kenneth D. Ray , Keith Kaplan , Varugis Kurien , Michael David Marr
发明人： Bryan Mark Willman , Paul England , Kenneth D. Ray , Keith Kaplan , Varugis Kurien , Michael David Marr
IPC分类号： G06F7/04 , H04L9/00 , G06F11/30
CPC分类号： G06F21/552 , G06F21/57
摘要： In a single machine that has entities running in an untrusted environment and entities running in a trusted environment, the trustworthiness of the entities in the trusted environment is projected to the entities in the untrusted environment. This is applicable, for example, to Microsoft®'s Next Generation Secure Computing Base (NGSCB), where a regular operating system (e.g., the Windows® operating system) hosts a secure operating system (e.g., the nexus).
摘要翻译：在具有在不受信任的环境中运行的实体的单个机器以及在可信环境中运行的实体的情况下，可信环境中的实体的可信度将投影到不受信任的环境中的实体。这适用于例如Microsoft（R）的下一代安全计算基础（NGSCB），其中常规操作系统（例如Windows（R）操作系统））承载安全操作系统（例如，连接）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式