专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08805837B2 Alternate data stream cache for file classification 有权
标题翻译：用于文件分类的备用数据流缓存
公开(公告)号：US08805837B2
公开(公告)日：2014-08-12
申请号：US12605451
申请日：2009-10-26
申请人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
发明人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
IPC分类号： G06F17/30
CPC分类号： G06F17/30115 , G06F17/30598
摘要： Described is caching classification-related metadata for a file in an alternate data stream of that file. When a file is classified (e.g., for data management), the classification properties are cached in association with the file, along with classification-related metadata that indicates the state of the file at the time of caching. The classification-related metadata in the alternate data stream is then useable in determining whether the classification properties are valid and up-to-date when next accessed, or whether the file needs to be reclassified. If the properties are valid and up-to-date, they may be used without requiring the computationally costly steps of reclassification. Also described is using more than one alternate data stream for the cache, and extending the classification-related metadata through a defined extension mechanism.
摘要翻译：描述了该文件的备用数据流中文件的缓存分类相关元数据。当文件被分类（例如，用于数据管理）时，分类属性与文件相关联地缓存，以及指示缓存时文件状态的分类相关元数据。备用数据流中的分类相关元数据可用于确定下次访问时分类属性是否有效和最新，还是文件是否需要重新分类。如果属性是有效和最新的，则可以使用它们，而不需要重新分类的计算上昂贵的步骤。还描述了为缓存使用多于一个备用数据流，并通过定义的扩展机制来扩展与分类有关的元数据。

2. 发明申请

US20110099152A1 ALTERNATE DATA STREAM CACHE FOR FILE CLASSIFICATION 有权
标题翻译：用于文件分类的替代数据流缓存
公开(公告)号：US20110099152A1
公开(公告)日：2011-04-28
申请号：US12605451
申请日：2009-10-26
申请人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
发明人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
IPC分类号： G06F17/00 , G06F12/00 , G06F12/08
CPC分类号： G06F17/30115 , G06F17/30598
摘要： Described is caching classification-related metadata for a file in an alternate data stream of that file. When a file is classified (e.g., for data management), the classification properties are cached in association with the file, along with classification-related metadata that indicates the state of the file at the time of caching. The classification-related metadata in the alternate data stream is then useable in determining whether the classification properties are valid and up-to-date when next accessed, or whether the file needs to be reclassified. If the properties are valid and up-to-date, they may be used without requiring the computationally costly steps of reclassification. Also described is using more than one alternate data stream for the cache, and extending the classification-related metadata through a defined extension mechanism.
摘要翻译：描述了该文件的备用数据流中文件的缓存分类相关元数据。当文件被分类（例如，用于数据管理）时，分类属性与文件相关联地缓存，以及指示缓存时文件状态的分类相关元数据。备用数据流中的分类相关元数据可用于确定下次访问时分类属性是否有效和最新，还是文件是否需要重新分类。如果属性是有效和最新的，则可以使用它们，而不需要重新分类的计算上昂贵的步骤。还描述了为缓存使用多于一个备用数据流，并通过定义的扩展机制来扩展与分类有关的元数据。

3. 发明授权

US09038168B2 Controlling resource access based on resource properties 有权
标题翻译：基于资源属性控制资源访问
公开(公告)号：US09038168B2
公开(公告)日：2015-05-19
申请号：US12622441
申请日：2009-11-20
申请人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
发明人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
IPC分类号： G06F12/14 , G06F21/62
CPC分类号： G06F21/6218 , G06F2221/2141
摘要： Described is a technology by which access to a resource is determined by evaluating a resource label of the resource against a user claim of an access request, according to policy decoupled from the resource. The resource may be a file, and the resource label may be obtained by classifying the file into classification properties, such that a change to the file may change its resource label, thereby changing which users have access to the file. The resource label-based access evaluation may be logically combined with a conventional ACL-based access evaluation to determine whether to grant or deny access to the resource.
摘要翻译：描述了根据从资源分离的策略来评估资源的资源标签以针对访问请求的用户权利要求来确定对资源的访问的技术。资源可以是文件，并且可以通过将文件分类为分类属性来获得资源标签，使得文件的改变可以改变其资源标签，从而改变哪些用户有权访问该文件。基于资源标签的访问评估可以逻辑地与传统的基于ACL的访问评估组合以确定是否授予或拒绝对资源的访问。

4. 发明申请

US20110126281A1 Controlling Resource Access Based on Resource Properties 有权
标题翻译：基于资源属性控制资源访问
公开(公告)号：US20110126281A1
公开(公告)日：2011-05-26
申请号：US12622441
申请日：2009-11-20
申请人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
发明人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
IPC分类号： G06F21/00 , G06F12/14
CPC分类号： G06F21/6218 , G06F2221/2141
摘要： Described is a technology by which access to a resource is determined by evaluating a resource label of the resource against a user claim of an access request, according to policy decoupled from the resource. The resource may be a file, and the resource label may be obtained by classifying the file into classification properties, such that a change to the file may change its resource label, thereby changing which users have access to the file. The resource label-based access evaluation may be logically combined with a conventional ACL-based access evaluation to determine whether to grant or deny access to the resource.
摘要翻译：描述了根据从资源分离的策略来评估资源的资源标签以针对访问请求的用户权利要求来确定对资源的访问的技术。资源可以是文件，并且可以通过将文件分类为分类属性来获得资源标签，使得文件的改变可以改变其资源标签，从而改变哪些用户有权访问该文件。基于资源标签的访问评估可以逻辑地与传统的基于ACL的访问评估组合以确定是否授予或拒绝对资源的访问。

5. 发明申请

US20100274750A1 Data Classification Pipeline Including Automatic Classification Rules 审中-公开
标题翻译：数据分类管理包括自动分类规则
公开(公告)号：US20100274750A1
公开(公告)日：2010-10-28
申请号：US12427755
申请日：2009-04-22
申请人： Paul Adrian Oltean , Clyde Law , Judd Hardy , Nir Ben-Zvi , Ran Kalach
发明人： Paul Adrian Oltean , Clyde Law , Judd Hardy , Nir Ben-Zvi , Ran Kalach
IPC分类号： G06N5/02
CPC分类号： G06F16/16 , G06F16/122
摘要： Described is a technology in which data items (e.g., files) are processed through an extensible data processing pipeline, including a classification pipeline, to facilitate management of the data items based upon their classifications. A discovery module locates data items to process. An independent classification pipeline obtains metadata (properties) associated with each discovered data item, and one or more classifiers classify the data item based on the metadata. An independent policy module applies policy to each data item based upon its classification. Multiple classifiers may be invoked, based upon various criteria. Predefined ordering of the classifiers, authoritative classifiers and/or an aggregation mechanism handle any classification conflicts. Different types of classifiers may be provided, and each classifier may correspond to automatic classification rules; the classifier may directly change a property, (e.g., set the classification) or return a result to a corresponding rule mechanism for changing a property.
摘要翻译：描述了一种技术，其中通过包括分类流水线的可扩展数据处理流水线处理数据项（例如文件），以便于基于它们的分类来管理数据项。发现模块定位要处理的数据项。独立分类管道获取与每个发现的数据项相关联的元数据（属性），并且一个或多个分类器基于元数据对数据项进行分类。独立的策略模块根据分类对每个数据项应用策略。可以基于各种标准来调用多个分类器。分类器，权威分类器和/或聚合机制的预定义排序可以处理任何分类冲突。可以提供不同类型的分类器，并且每个分类器可以对应于自动分类规则; 分类器可以直接改变属性（例如，设置分类）或将结果返回到用于改变属性的相应规则机制。

6. 发明申请

US20110239293A1 AUDITING ACCESS TO DATA BASED ON RESOURCE PROPERTIES 审中-公开
标题翻译：基于资源特性的数据访问
公开(公告)号：US20110239293A1
公开(公告)日：2011-09-29
申请号：US12730241
申请日：2010-03-24
申请人： Raja Pazhanivel Perumal , Nir Ben-Zvi , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law
发明人： Raja Pazhanivel Perumal , Nir Ben-Zvi , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law
IPC分类号： G06F21/00
CPC分类号： G06F21/552
摘要： Described is a technology, such as implemented in an operating system security system, by which a resource's metadata (e.g., including data properties) is evaluated against an audit rule or audit rules associated with that resource (e.g., object). The audit rule may be associated with all such resources corresponding to a resource manager, and/or by a resource-specific audit rule. When a resource is accessed, each audit rule is processed against the metadata to determine whether to generate an audit event for that rule. The audit rule may be in the form of one or more conditional expressions. Audit events may be maintained and queried to obtain audit information for various usage scenarios.
摘要翻译：描述了一种诸如在操作系统安全系统中实现的技术，通过该技术，资源的元数据（例如，包括数据属性）针对与该资源（例如，对象）相关联的审计规则或审计规则进行评估。审计规则可以与对应于资源管理器的所有这样的资源和/或资源特定的审计规则相关联。访问资源时，会根据元数据对每个审核规则进行处理，以确定是否为该规则生成审核事件。审计规则可以是一个或多个条件表达式的形式。可以维护和查询审计事件以获取各种使用场景的审计信息。

7. 发明申请

US20080229115A1 PROVISION OF FUNCTIONALITY VIA OBFUSCATED SOFTWARE 审中-公开
标题翻译：通过强化软件提供功能
公开(公告)号：US20080229115A1
公开(公告)日：2008-09-18
申请号：US11687252
申请日：2007-03-16
申请人： Matthias Hermann Wollnik , Nir Ben-Zvi , Aaron Goldsmid , Hakki Tunc Bostanci , Karan Singh Dhillon , Nathan Jeffrey Ide , John Richard McDowell , David John Linsley
发明人： Matthias Hermann Wollnik , Nir Ben-Zvi , Aaron Goldsmid , Hakki Tunc Bostanci , Karan Singh Dhillon , Nathan Jeffrey Ide , John Richard McDowell , David John Linsley
IPC分类号： H04L9/32
CPC分类号： G06F21/14 , H04L9/0825 , H04L2209/16
摘要： In an example embodiment, executable files are individually encrypted utilizing a symmetric cryptographic key. For each user to be given access to the obfuscated file, the symmetric cryptographic key is encrypted utilizing a public key of a respective public/private key pair. A different public key/private key pair is utilized for each user. Obfuscated files are formed comprising the encrypted executable files and a respective encrypted symmetric cryptographic key. The private keys of the public/private key pairs are stored on respective smart cards. The smart cards are distributed to the users. When a user wants to invoke the functionality of an obfuscated file, the user provides the private key via his/her smart card. The private key is retrieved and is utilized to decrypt the appropriate portion of the obfuscated file. The symmetric cryptographic key obtained therefrom is utilized to decrypt the encrypted executable file.
摘要翻译：在示例实施例中，使用对称加密密钥对可执行文件进行单独加密。为了使每个用户被访问该混淆文件，使用相应的公共/私人密钥对的公开密钥对对称加密密钥进行加密。每个用户使用不同的公钥/私钥对。形成包含加密的可执行文件和相应加密的对称加密密钥的混淆文件。公钥/私钥对的私钥存储在相应的智能卡上。智能卡分发给用户。当用户想要调用混淆文件的功能时，用户通过他/她的智能卡提供私钥。检索私钥并用于解密混淆文件的适当部分。从其获得的对称密码密钥用于解密加密的可执行文件。

8. 发明申请

US20070234430A1 Anti-Debugging Protection of Binaries with Proxy Code Execution 有权
标题翻译：使用代理代码执行的二进制反调试保护
公开(公告)号：US20070234430A1
公开(公告)日：2007-10-04
申请号：US11754024
申请日：2007-05-25
申请人： Aaron Goldsmid , Nir Ben-Zvi , Sekhar Chintalapati , Karan Dhillon , Nathan Ide , David Linsley , Ping Xie
发明人： Aaron Goldsmid , Nir Ben-Zvi , Sekhar Chintalapati , Karan Dhillon , Nathan Ide , David Linsley , Ping Xie
IPC分类号： H04L9/00
CPC分类号： G06F21/125 , G06F21/121 , G06F21/52 , G06F2221/2105
摘要： A first process operating on a computer comprises code to be executed in connection therewith, where the code includes at least one triggering device. A digital license corresponds to the first process and sets forth terms and conditions for operating the first process. A second process operating on the computer proxy-executes code corresponding to each triggering device of the first process on behalf of such first process. The second process includes a selection of options to thwart reverse engineering by a debugger if a debugger is detected. The options include execution by a proxy engine of a re-routed call, crashing the first process, detection ad elimination of a debugger related interrupt a call to an arbitrary function.
摘要翻译：在计算机上操作的第一进程包括要与其一起执行的代码，其中代码包括至少一个触发设备。数字许可证对应于第一个进程，并列出了操作第一个进程的条款和条件。在计算机代理上操作的第二进程代表第一进程执行对应于第一进程的每个触发装置的代码。如果检测到调试器，第二个过程包括一些选项来阻止调试器的逆向工程。选项包括代理引擎执行重新路由呼叫，崩溃第一个进程，检测广告消除调试器相关中断对任意函数的调用。

9. 发明申请

US20070011686A1 Changing code execution path using kernel mode redirection 有权
标题翻译：使用内核模式重定向更改代码执行路径
公开(公告)号：US20070011686A1
公开(公告)日：2007-01-11
申请号：US11177079
申请日：2005-07-08
申请人： Nir Ben-Zvi
发明人： Nir Ben-Zvi
IPC分类号： G06F3/00
CPC分类号： G06F8/656
摘要： A mechanism for redirecting a code execution path in a running process. A one-byte interrupt instruction (e.g., INT 3) is inserted into the code path. The interrupt instruction passes control to a kernel handler, which after executing a replacement function, returns to continue executing the process. The replacement function resides in a memory space that is accessible to the kernel handler. The redirection mechanism may be applied without requiring a reboot of the computing device on which the running process is executing. In addition, the redirection mechanism may be applied without overwriting more than one byte in the original code.
摘要翻译：在运行过程中重定向代码执行路径的机制。一个字节的中断指令（例如，INT 3）被插入到代码路径中。中断指令将控制传递给内核处理程序，内核处理程序在执行替换函数后返回以继续执行进程。替换函数驻留在内核处理程序可访问的存储器空间中。可以应用重定向机制，而不需要重新启动正在执行正在运行的进程的计算设备。此外，可以应用重定向机制而不覆盖原始代码中的多于一个字节。

10. 发明授权

US09501656B2 Mapping global policy for resource management to machines 有权
标题翻译：将资源管理的全球策略映射到机器
公开(公告)号：US09501656B2
公开(公告)日：2016-11-22
申请号：US13079987
申请日：2011-04-05
申请人： Matthias Wollnik , Nir Ben-Zvi , Judd Hardy , Ivelin L. Zheglov , Ravindra Mysore Seetharam
发明人： Matthias Wollnik , Nir Ben-Zvi , Judd Hardy , Ivelin L. Zheglov , Ravindra Mysore Seetharam
IPC分类号： G06F21/62
CPC分类号： G06F21/6218
摘要： A global policy is applied to only select resources (e.g., certain file folders) based on property settings associated as metadata with those resources. The resource property settings correspond to a defined property set (e.g., a global taxonomy) that is consistent with the global policy. When global policy is received, the property metadata for each resource determines whether to apply the global policy to that resource. In this way, a central administrator may provide the defined property set, a policy author may provide the policy, and a local administrator may set the resource property settings.
摘要翻译：应用全局策略仅基于与这些资源相关联的作为元数据的属性设置来选择资源（例如，某些文件夹）。资源属性设置对应于与全局策略一致的定义属性集（例如，全局分类法）。当收到全局策略时，每个资源的属性元数据决定是否将该全局策略应用于该资源。以这种方式，中央管理员可以提供定义的属性集，策略作者可以提供策略，并且本地管理员可以设置资源属性设置。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式