专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20130061282A1 Content Handling for Applications 审中-公开
标题翻译：应用程序的内容处理
公开(公告)号：US20130061282A1
公开(公告)日：2013-03-07
申请号：US13227201
申请日：2011-09-07
申请人： David L. Risney, JR. , Scott B. Graham , Mathias Jourdain , Sermet Iskin , David Andrew Ross
发明人： David L. Risney, JR. , Scott B. Graham , Mathias Jourdain , Sermet Iskin , David Andrew Ross
IPC分类号： G06F21/00
CPC分类号： G06F21/629 , G06F21/52 , G06F21/53 , G06F21/56 , G06F21/566 , G06F2221/2141 , H04L63/14 , H04L63/1408 , H04L63/1416 , H04L63/1433 , H04L63/1441 , H04L63/145 , H04L63/1483
摘要： Techniques for content handling for applications are described. In one or more implementations, a first set of content handling policies is enforced for a first portion of an application that is permitted to invoke code elements of the computing device and a second set of content handling policies is enforced for a second portion of the application that is not permitted to invoke the code elements. Further, a determination is made whether to apply the first set of content handling policies or the second set of content handling policies to content based on which portion of the application is requesting the content.
摘要翻译：描述用于应用的内容处理的技术。在一个或多个实现中，为允许调用计算设备的代码元素的应用的第一部分强制执行第一组内容处理策略，并且为应用的第二部分强制执行第二组内容处理策略这是不允许调用代码元素的。此外，确定是否基于应用的哪个部分请求内容来应用第一组内容处理策略或第二组内容处理策略到内容。

2. 发明申请

US20130067570A1 Content Inspection 有权
标题翻译：内容检查
公开(公告)号：US20130067570A1
公开(公告)日：2013-03-14
申请号：US13228338
申请日：2011-09-08
申请人： David L. Risney, JR. , Scott B. Graham , David Andrew Ross , Mathias Jourdain
发明人： David L. Risney, JR. , Scott B. Graham , David Andrew Ross , Mathias Jourdain
IPC分类号： G06F21/24
CPC分类号： G06F21/566 , G06F21/629 , G06F2221/2141 , H04L63/107 , H04L63/126 , H04L63/14
摘要： Content inspection techniques are described. In one or more implementations, it is detected that an application executing on a computing device is calling a particular code element of a group of code elements to be used to process content. For example, the group of code elements can include a pre-specified group of code elements (e.g., functions and/or properties) that may enable access to particular functionalities of a computing device and thus are associated with a known security risk. It is then ascertained that the content is untrusted and, in response to ascertaining that the content is untrusted, the content is inspected to determine if the content is safe to be passed to the code element.
摘要翻译：描述内容检查技术。在一个或多个实现中，检测到在计算设备上执行的应用正在调用要用于处理内容的一组代码元素的特定代码元素。例如，代码元素组可以包括预先指定的代码元素组（例如，功能和/或属性），其可以使得能够访问计算设备的特定功能，并且因此与已知的安全风险相关联。然后确定内容是不受信任的，并且响应于确定内容不受信任，检查内容以确定内容是否安全地被传递给代码元素。

3. 发明申请

US20130067585A1 SEPARATE SCRIPT CONTEXT TO ISOLATE MALICIOUS SCRIPT 有权
标题翻译：独立的脚本说明了分离的恶意书
公开(公告)号：US20130067585A1
公开(公告)日：2013-03-14
申请号：US13228346
申请日：2011-09-08
申请人： Andy R. Sterland , David L. Risney, JR. , Scott B. Graham
发明人： Andy R. Sterland , David L. Risney, JR. , Scott B. Graham
IPC分类号： G06F21/00
CPC分类号： G06F21/53
摘要： Various embodiments provide an ability to isolate execution of trusted content and/or script from execution of untrusted content and/or script. Separate contexts and/or execution environments can be used for the trusted content and untrusted content, respectively. A trusted context and/or execution environment associated with execution of trusted content can be configured to enable access to sensitive resources associated with a computing device. An untrusted context and/or execution environment associated with execution of untrusted content can be configured with limited and/or no access to the sensitive resources. Alternately or additionally, data generated within the untrusted context can be transferred to the trusted context in a benign manner.
摘要翻译：各种实施例提供将可信内容和/或脚本的执行隔离为不受信任的内容和/或脚本的执行的能力。单独的上下文和/或执行环境可以分别用于可信内容和不可信内容。与可信内容的执行相关联的可信赖的上下文和/或执行环境可以被配置为使得能够访问与计算设备相关联的敏感资源。与执行不受信任的内容相关联的不可信上下文和/或执行环境可以被配置为对敏感资源的有限和/或不访问。或者或另外地，在不可信上下文内生成的数据可以以良性的方式传送到可信上下文。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式