专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07380268B2 Methods apparatus and program products for wireless access points 有权
标题翻译：方法无线接入点的设备和程序产品
公开(公告)号：US07380268B2
公开(公告)日：2008-05-27
申请号：US10507546
申请日：2002-11-20
申请人： David C. Challener , Garry M. Kump , Francis E. Noel, Jr. , David R. Safford , Douglas L. Schales , Leendert P. Van Doorn
发明人： David C. Challener , Garry M. Kump , Francis E. Noel, Jr. , David R. Safford , Douglas L. Schales , Leendert P. Van Doorn
IPC分类号： H04L9/32 , G06F11/00
CPC分类号： H04L63/02 , H04L41/12 , H04L63/1408 , H04M1/68 , H04W12/12
摘要： Methods, apparatus and program products which monitor wireless access points (12, 16) through which data can be exchanged with a network (10), identify an unauthorized access point (16), and respond to monitored data flow in a variety of manners including determining the location of the identified unauthorized access point, establishing filtering, and controlling accounting for access services.
摘要翻译：监视与网络（10）可以交换数据的无线接入点（12,16）的方法，装置和程序产品识别未经授权的接入点（16），并以各种方式响应受监控的数据流，包括确定所识别的未授权接入点的位置，建立过滤和控制对接入业务的计费。

2. 发明授权

US07805765B2 Execution validation using header containing validation data 有权
标题翻译：使用包含验证数据的头执行验证
公开(公告)号：US07805765B2
公开(公告)日：2010-09-28
申请号：US11319329
申请日：2005-12-28
申请人： David C. Challener , Daryl C. Cromer , Howard J. Locker , David R. Safford , Randall S. Springfield
发明人： David C. Challener , Daryl C. Cromer , Howard J. Locker , David R. Safford , Randall S. Springfield
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16
CPC分类号： G06F21/565 , G06F2221/2151
摘要： Executable files are extended with a file signature containing a header containing validation data. This header may be added to an existing executable and linking format (ELF) header, added as a new section, or placed in a file's extended attribute store. The header contains results of all previous validation checks that have been performed. The file signature is inserted, with a date stamp, into the file attributes. On execution, the system checks the previously-created file signature against a current file signature, instead of creating the file signature for every file during the execution process. Checks to ensure that the file signature is secure, and is valid and up to date, are also implemented. Only if the file signature is not valid and up-to-date does the execution program create a new file signature at the time of execution.
摘要翻译：可执行文件使用包含包含验证数据的标题的文件签名进行扩展。该头可以被添加到现有的可执行和链接格式（ELF）头部，作为新部分添加或放置在文件的扩展属性存储中。标题包含已执行的所有先前验证检查的结果。将文件签名带有日期戳插入到文件属性中。执行时，系统会根据当前文件签名检查先前创建的文件签名，而不是在执行过程中为每个文件创建文件签名。检查以确保文件签名是安全的，并且是有效的和最新的，也被实现。只有当文件签名无效且最新的执行程序在执行时才会创建新的文件签名。

3. 发明授权

US07752667B2 Rapid virus scan using file signature created during file write 有权
标题翻译：使用在文件写入期间创建的文件签名进行快速病毒扫描
公开(公告)号：US07752667B2
公开(公告)日：2010-07-06
申请号：US11024914
申请日：2004-12-28
申请人： David C. Challener , Daryl C. Cromer , Howard J. Locker , David R. Safford , Randall S. Springfield
发明人： David C. Challener , Daryl C. Cromer , Howard J. Locker , David R. Safford , Randall S. Springfield
IPC分类号： G06F11/04 , G06F12/14 , G06F12/16
CPC分类号： G06F21/565 , G06F2221/2151
摘要： A procedure and implementations thereof are disclosed that significantly reduce the amount of time necessary to perform a virus scan. A file signature is created each time a file is modified (i.e., with each “file write” to that file). The file signature is inserted, with a date stamp, into the file attributes. The virus scan program checks the previously-created file signature against the virus signature file instead of creating the file signature for every file during the virus scan. Checks to ensure that the file signature is secure, and is valid and up to date, are also implemented. Only if the file signature is not valid and up-to-date does the virus scan program create a new file signature at the time of the running of the virus scan.
摘要翻译：公开了显着地减少进行病毒扫描所需的时间量的过程和实施方式。每次修改文件（即每个“文件写入”文件）时都会创建文件签名。将文件签名带有日期戳插入到文件属性中。病毒扫描程序根据病毒签名文件检查先前创建的文件签名，而不是在病毒扫描期间为每个文件创建文件签名。检查以确保文件签名是安全的，并且是有效的和最新的，也被实现。只有当病毒扫描程序在病毒扫描运行时病毒扫描程序创建新的文件签名时，文件签名无效并且是最新的。

4. 发明授权

US10802990B2 Hardware based mandatory access control 有权
公开(公告)号：US10802990B2
公开(公告)日：2020-10-13
申请号：US12245964
申请日：2008-10-06
申请人： William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C. Toll
发明人： William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C. Toll
IPC分类号： G06F12/14 , G06F21/71 , G06F21/62
摘要： Hardware mechanisms are provided for performing hardware based access control of instructions to data. These hardware mechanisms associate an instruction access policy label with an instruction to be processed by a processor and associate an operand access policy label with data to be processed by the processor. The instruction access policy label is passed along with the instruction through one or more hardware functional units of the processor. The operand access policy label is passed along with the data through the one or more hardware functional units of the processor. One or more hardware implemented policy engines associated with the one or more hardware functional units of the processor are utilized to control access by the instruction to the data based on the instruction access policy label and the operand access policy label.

5. 发明申请

US20100125709A1 Logical Partition Memory 有权
标题翻译：逻辑分区内存
公开(公告)号：US20100125709A1
公开(公告)日：2010-05-20
申请号：US12272261
申请日：2008-11-17
申请人： William E. Hall , Guerney D.H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C. Toll
发明人： William E. Hall , Guerney D.H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C. Toll
IPC分类号： G06F12/10 , G06F12/00 , G06F12/02
CPC分类号： G06F12/1036
摘要： A mechanism is provided, in a data processing system, for accessing memory based on an effective address submitted by a process of a partition. The mechanism may translate the effective address into a virtual address using a segment look-aside buffer. The mechanism may further translate the virtual address into a partition real address using a page table. Moreover, the mechanism may translate the partition real address into a system real address using a logical partition real memory map for the partition. The system real address may then be used to access the memory.
摘要翻译：在数据处理系统中提供了一种基于由分区的进程提交的有效地址来访问存储器的机制。该机制可以使用段间隔缓冲区将有效地址转换为虚拟地址。该机制可以使用页表进一步将虚拟地址转换成分区实际地址。此外，该机制可以使用分区的逻辑分区实际存储器映射将分区实际地址转换为系统实际地址。然后可以使用系统实际地址来访问存储器。

6. 发明授权

US06535607B1 Method and apparatus for providing interoperability between key recovery and non-key recovery systems 有权
公开(公告)号：US06535607B1
公开(公告)日：2003-03-18
申请号：US09184002
申请日：1998-11-02
申请人： Coimbatore S. Chandersekaran , Rosario Gennaro , Sarbari Gupta , Stephen M. Matyas, Jr. , David R. Safford , Nevenko Zunic
发明人： Coimbatore S. Chandersekaran , Rosario Gennaro , Sarbari Gupta , Stephen M. Matyas, Jr. , David R. Safford , Nevenko Zunic
IPC分类号： H04L900
CPC分类号： H04L9/0841 , H04L9/0894
摘要： A method and apparatus for ensuring that a key recovery-enabled (KR-enabled) system communicating with a non-KR-enabled system in a cryptographic communication system transmits the information necessary to permit key recovery by a key recovery entity. In a first embodiment, data is encrypted under a second key K that is generated as a one-way function of a first key K′ and a key recovery block KRB generated on the first key K′. The key recovery block KRB and the encrypted data e(K, data) are transmitted to the receiver, who cannot decrypt the data without regenerating the second key K from the first key K′ and the key recovery block KRB. In a second embodiment, data is encrypted under a second key K that is generated independently of the first key K′. A third key X, generated as a one-way function of the first key K′ and a key recovery block KRB generated on the second key K, is used to encrypt the XOR product Y of the first and second keys K′, K. The key recovery block KRB, the encrypted XOR product e(X, Y) and the encrypted data e(K, data) are transmitted to the receiver, who cannot decrypt the data without regenerating the third key X from the first key K′ and the key recovery block KRB, decrypting the XOR product Y using the regenerated third key X, and recombining the XOR product Y with the first key K″ to regenerate the second key K. In a third embodiment, an integrity value is computed on a key K and its key recovery block KRB. The integrity value and the key K are encrypted to form an encrypted portion of a key exchange block KEB, while the key recovery block KRB is put in an unencrypted portion of the key exchange block KEB, which is sent along with the encrypted data e(K, data) to the receiver. The receiver decrypts the encrypted portion, recomputes the integrity value and compares it with the received integrity value. Only if the two integrity values compare is the key K extracted and used to decrypt the data.

7. 发明授权

US08850557B2 Processor and data processing method with non-hierarchical computer security enhancements for context states 有权
标题翻译：处理器和数据处理方法，用于上下文状态的非分层计算机安全增强
公开(公告)号：US08850557B2
公开(公告)日：2014-09-30
申请号：US13408170
申请日：2012-02-29
申请人： Richard H. Boivie , William E. Hall , Guerney D. H. Hunt , Suzanne K. McIntosh , Mark F. Mergen , Marcel C. Rosu , David R. Safford , David C. Toll , Carl Lynn C. Karger
发明人： Richard H. Boivie , William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Suzanne K. McIntosh , Mark F. Mergen , Marcel C. Rosu , David R. Safford , David C. Toll
IPC分类号： G06F12/14 , G06F21/31
CPC分类号： G06F21/31 , G06F21/54 , G06F21/6218 , G06F2221/2105
摘要： Disclosed are a processor and processing method that provide non-hierarchical computer security enhancements for context states. The processor can comprise a context control unit that uses context identifier tags associated with corresponding contexts to control access by the contexts to context information (i.e., context states) contained in the processor's non-stackable and/or stackable registers. For example, in response to an access request, the context control unit can grant a specific context access to a register only when that register is tagged with a specific context identifier tag. If the register is tagged with another context identifier tag, the contents of the specific register are saved in a context save area of memory and the previous context states of the specific context are restored to the specific register before access can be granted. The context control unit can also provide such computer security enhancements while still facilitating authorized cross-context and/or cross-level communications.
摘要翻译：公开了一种为上下文状态提供非分层计算机安全增强的处理器和处理方法。处理器可以包括上下文控制单元，其使用与相应上下文相关联的上下文标识符标签来控制上下文对包含在处理器的不可堆叠和/或可堆叠寄存器中的上下文信息（即上下文状态）的访问。例如，响应于访问请求，上下文控制单元可以仅在该寄存器被标记有特定上下文标识符标签时才向该寄存器授予特定上下文访问。如果寄存器用另一个上下文标识符标记，则将特定寄存器的内容保存在存储器的上下文保存区域中，并且特定上下文的先前上下文状态将被恢复到特定寄存器，然后才能授予访问权限。上下文控制单元还可以提供这样的计算机安全增强，同时还促进授权的交叉上下文和/或跨级通信。

8. 发明授权

US08135937B2 Logical partition memory 有权
标题翻译：逻辑分区内存
公开(公告)号：US08135937B2
公开(公告)日：2012-03-13
申请号：US12272261
申请日：2008-11-17
申请人： William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C. Toll
发明人： William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C. Toll
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28 , G06F9/46 , G06F9/26 , G06F9/34
CPC分类号： G06F12/1036
摘要： A mechanism is provided, in a data processing system, for accessing memory based on an effective address submitted by a process of a partition. The mechanism may translate the effective address into a virtual address using a segment look-aside buffer. The mechanism may further translate the virtual address into a partition real address using a page table. Moreover, the mechanism may translate the partition real address into a system real address using a logical partition real memory map for the partition. The system real address may then be used to access the memory.
摘要翻译：在数据处理系统中提供了一种基于由分区的进程提交的有效地址来访问存储器的机制。该机制可以使用段间隔缓冲区将有效地址转换为虚拟地址。该机制可以使用页表进一步将虚拟地址转换成分区实际地址。此外，该机制可以使用分区的逻辑分区实际存储器映射将分区实际地址转换为系统实际地址。然后可以使用系统实际地址来访问存储器。

9. 发明授权

US08055912B2 Method and system for bootstrapping a trusted server having redundant trusted platform modules 有权
标题翻译：用于引导具有冗余可信平台模块的可信服务器的方法和系统
公开(公告)号：US08055912B2
公开(公告)日：2011-11-08
申请号：US12621524
申请日：2009-11-19
申请人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
发明人： Steven A. Bade , Linda Nancy Betz , Andrew Gregory Kegel , David R. Safford , Leendert Peter Van Doorn
IPC分类号： G06F11/30
CPC分类号： G06F21/575
摘要： Multiple trusted platform modules within a data processing system are used in a redundant manner that provides a reliable mechanism for securely storing secret data at rest that is used to bootstrap a system trusted platform module. A hypervisor requests each trusted platform module to encrypt a copy of the secret data, thereby generating multiple versions of encrypted secret data values, which are then stored within a non-volatile memory within the trusted platform. At some later point in time, the encrypted secret data values are retrieved, decrypted by the trusted platform module that performed the previous encryption, and then compared to each other. If any of the decrypted values do not match a quorum of values from the comparison operation, then a corresponding trusted platform module for a non-matching decrypted value is designated as defective because it has not been able to correctly decrypt a value that it previously encrypted.
摘要翻译：以冗余的方式使用数据处理系统内的多个可信任的平台模块，其提供用于安全地存储用于引导系统可信平台模块的休息处的秘密数据的可靠机制。管理程序请求每个可信平台模块加密秘密数据的副本，从而生成加密的秘密数据值的多个版本，然后存储在可信平台内的非易失性存储器中。在稍后的时间点，加密的秘密数据值由执行先前加密的可信任平台模块进行解密，然后进行比较。如果解密值中的任何一个与比较操作中的值的数量不匹配，则用于非匹配解密值的相应的可信平台模块被指定为有缺陷的，因为它不能正确解密之前加密的值。

10. 发明申请

US20100088739A1 Hardware Based Mandatory Access Control 审中-公开
标题翻译：基于硬件的强制访问控制
公开(公告)号：US20100088739A1
公开(公告)日：2010-04-08
申请号：US12245964
申请日：2008-10-06
申请人： William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C Toll
发明人： William E. Hall , Guerney D. H. Hunt , Paul A. Karger , Mark F. Mergen , David R. Safford , David C Toll
IPC分类号： G06F12/14 , G06F21/00
CPC分类号： G06F12/1483 , G06F21/629 , G06F21/71
摘要： Hardware mechanisms are provided for performing hardware based access control of instructions to data. These hardware mechanisms associate an instruction access policy label with an instruction to be processed by a processor and associate an operand access policy label with data to be processed by the processor. The instruction access policy label is passed along with the instruction through one or more hardware functional units of the processor. The operand access policy label is passed along with the data through the one or more hardware functional units of the processor. One or more hardware implemented policy engines associated with the one or more hardware functional units of the processor are utilized to control access by the instruction to the data based on the instruction access policy label and the operand access policy label.
摘要翻译：硬件机制被提供用于执行对数据的指令的基于硬件的访问控制。这些硬件机制将指令访问策略标签与要由处理器处理的指令相关联，并将操作数访问策略标签与要由处理器处理的数据相关联。指令访问策略标签与指令一起通过处理器的一个或多个硬件功能单元传递。操作数访问策略标签与数据一起通过处理器的一个或多个硬件功能单元传递。与处理器的一个或多个硬件功能单元相关联的一个或多个硬件实现的策略引擎被用于基于指令访问策略标签和操作数访问策略标签来控制对数据的指令的访问。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式