专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09425965B2 Cryptographic certification of secure hosted execution environments 有权
标题翻译：安全托管执行环境的加密认证
公开(公告)号：US09425965B2
公开(公告)日：2016-08-23
申请号：US13372390
申请日：2012-02-13
申请人： Andrew A. Baumann , Galen C. Hunt , Marcus Peinado
发明人： Andrew A. Baumann , Galen C. Hunt , Marcus Peinado
IPC分类号： G06F21/00 , H04L9/32 , G06F21/57
CPC分类号： H04L9/3263 , G06F21/577 , G06F2221/034
摘要： Implementations for providing a persistent secure execution environment with a hosted computer are described. A host operating system of a computing system provides an encrypted checkpoint to a persistence module that executes in a secure execution environment of a hardware-protected memory area initialized by a security-enabled processor. The encrypted checkpoint is derived at least partly from another secure execution environment that is cryptographically certifiable as including another hardware-protected memory area established in an activation state to refrain from executing software not trusted by the client system.
摘要翻译：描述了用托管计算机提供持久的安全执行环境的实现。计算系统的主机操作系统向在由安全启用的处理器初始化的硬件保护的存储器区域的安全执行环境中执行的持久性模块提供加密的检查点。加密的检查点至少部分地从另一个安全执行环境导出，该安全执行环境被加密地认证为包括在激活状态下建立的另一硬件保护的存储器区域以避免执行不被客户机系统信任的软件。

2. 发明授权

US09413538B2 Cryptographic certification of secure hosted execution environments 有权
标题翻译：安全托管执行环境的加密认证
公开(公告)号：US09413538B2
公开(公告)日：2016-08-09
申请号：US13323465
申请日：2011-12-12
申请人： Andrew A. Baumann , Galen C. Hunt , Marcus Peinado
发明人： Andrew A. Baumann , Galen C. Hunt , Marcus Peinado
IPC分类号： H04L9/32 , G06F21/57
CPC分类号： H04L9/3263 , G06F21/577 , G06F2221/034
摘要： Implementations for providing a secure execution environment with a hosted computer are described. A security-enabled processor establishes a hardware-protected memory area with an activation state that executes only software identified by a client system. The hardware-protected memory area is inaccessible by code that executes outside the hardware-protected memory area. A certification is transmitted to the client system to indicate that the secure execution environment is established, in its activation state, with only the software identified by the request.
摘要翻译：描述了用托管计算机提供安全执行环境的实现。支持安全性的处理器建立具有仅执行由客户端系统识别的软件的激活状态的硬件保护的存储器区域。由硬件保护的存储区域外部执行的代码无法访问硬件保护的存储器区域。将证书发送到客户端系统，以指示安全执行环境在其激活状态下仅由请求识别的软件建立。

3. 发明申请

US20120017213A1 ULTRA-LOW COST SANDBOXING FOR APPLICATION APPLIANCES 有权
标题翻译：超低成本用于应用电器的成本
公开(公告)号：US20120017213A1
公开(公告)日：2012-01-19
申请号：US12834895
申请日：2010-07-13
申请人： Galen C. Hunt , Donald Porter
发明人： Galen C. Hunt , Donald Porter
IPC分类号： G06F9/46 , G06F13/38
CPC分类号： G06F21/53
摘要： The disclosed architecture facilitates the sandboxing of applications by taking core operating system components that normally run in the operating system kernel or otherwise outside the application process and on which a sandboxed application depends on to run, and converting these core operating components to run within the application process. The architecture takes the abstractions already provided by the host operating system and converts these abstractions for use by the sandbox environment. More specifically, new operating system APIs (application program interfaces) are created that include only the basic computation services, thus, separating the basic services from rich application APIs. The code providing the rich application APIs is copied out of the operating system and into the application environment—the application process.
摘要翻译：所公开的架构通过采用通常在操作系统内核中运行的核心操作系统组件或者在应用程序进程外的其他应用程序依赖于运行的核心操作系统组件，并将这些核心操作组件转换为在应用程序内运行，从而有助于沙盒化处理。架构采用主机操作系统提供的抽象，并转换这些抽象以供沙盒环境使用。更具体地说，创建了仅包括基本计算服务的新的操作系统API（应用程序接口），从而将基本服务与丰富的应用API分开。提供丰富应用程序API的代码从操作系统复制到应用程序环境中 - 应用程序进程。

4. 发明申请

US20110258290A1 Bandwidth-Proportioned Datacenters 有权
标题翻译：带宽比例数据中心
公开(公告)号：US20110258290A1
公开(公告)日：2011-10-20
申请号：US12766726
申请日：2010-04-23
申请人： Edmund B. Nightingale , Jeremy E. Elson , Jonathan R. Howell , Galen C. Hunt , David A. Maltz
发明人： Edmund B. Nightingale , Jeremy E. Elson , Jonathan R. Howell , Galen C. Hunt , David A. Maltz
IPC分类号： G06F15/16
CPC分类号： G06F17/30194
摘要： A system including at least one storage node and at least one computation node connected by a switch is described herein. Each storage node has one or more storage units and one or more network interface components, the collective bandwidths of the storage units and the network interface components being proportioned to one another to enable communication to and from other nodes at the collective bandwidth of the storage units. Each computation node has logic configured to make requests of storage nodes, an input/output bus, and one or more network interface components, the bandwidth of the bus and the collective bandwidths of the network interface components being proportioned to one another to enable communication to and from other nodes at the bandwidth of the input/output bus.
摘要翻译：本文描述了包括至少一个存储节点和由交换机连接的至少一个计算节点的系统。每个存储节点具有一个或多个存储单元和一个或多个网络接口组件，存储单元和网络接口组件的集合带宽彼此成比例，以使得能够在存储单元的集合带宽处与其他节点进行通信。每个计算节点具有被配置为进行存储节点，输入/输出总线以及一个或多个网络接口组件的请求的逻辑，总线的带宽和网络接口组件的集体带宽彼此成比例，以使得能够并从输入/输出总线带宽的其他节点。

5. 发明授权

US07984429B2 Tools and techniques for instrumenting interfaces of units of a software program 有权
标题翻译：用于测试软件程序单元接口的工具和技术
公开(公告)号：US07984429B2
公开(公告)日：2011-07-19
申请号：US11097636
申请日：2005-04-01
申请人： Galen C. Hunt
发明人： Galen C. Hunt
IPC分类号： G06F9/44 , G06F9/45
CPC分类号： G06F9/5066 , G06F9/449 , G06F9/465 , H04L43/0864 , H04L43/0894 , H04L67/10
摘要： A method of instrumenting one or more units of an application program is disclosed. Each unit can have one or more interfaces through which communications pass through the unit. Client units can request creation of a server unit. When they do so, the call is intercepted and sent to a unit creation function, which creates the server unit and returns a reference to an interface of the server unit. When a reference to an interface of the server unit is detected, an interface wrapper is created for the interface, the interface wrapper comprising a reference to instrumentation, the reference to the interface, and a reference to a type description of the interface. The client receives a reference to the interface wrapper in place of a reference to the interface, and thereafter is able to treat the reference to the interface wrapper as if it were a reference to the interface.
摘要翻译：公开了一种测试应用程序的一个或多个单元的方法。每个单元可以具有一个或多个通信通过该接口的接口。客户端单元可以请求创建服务器单元。当它们这样做时，呼叫被拦截并发送到单元创建功能，其创建服务器单元并返回对服务器单元的接口的引用。当检测到对服务器单元的接口的引用时，为接口创建接口包装器，接口包装器包括对仪器的引用，对接口的引用以及对接口的类型描述的引用。客户端接收对接口包装器的引用，代替对接口的引用，此后可以将接口包装器的引用视为对接口的引用。

6. 发明申请

US20100318293A1 RETRACING STEPS 审中-公开
标题翻译：追溯步伐
公开(公告)号：US20100318293A1
公开(公告)日：2010-12-16
申请号：US12484089
申请日：2009-06-12
申请人： Alice Jane Brush , James W. Scott , Galen C. Hunt , Raman K. Sarin , Andrew W. Jacobs , Barry C. Bond , Oscar E. Murillo , Amy Karlson
发明人： Alice Jane Brush , James W. Scott , Galen C. Hunt , Raman K. Sarin , Andrew W. Jacobs , Barry C. Bond , Oscar E. Murillo , Amy Karlson
IPC分类号： G01C21/00 , G01C21/34
CPC分类号： G01C21/20 , G01C21/165
摘要： Techniques for creating breadcrumbs for a trail of activity are described. The trail of activity may be created by recording movement information based on inferred actions of walking, not walking, or changing floor levels. The movement information may be recorded with an accelerometer and a pressure sensor. A representation of a list of breadcrumbs may be visually displayed on a user interface of a mobile device, in a reverse order to retrace steps. In some implementations, a compass may additionally or alternatively be used to collect directional information relative to the earth's magnetic poles.
摘要翻译：描述了用于创建行踪踪迹的面包屑的技术。活动的轨迹可以通过记录运动信息来创建，这些信息是基于推测的步行，而不是步行或改变楼层的动作。可以用加速度计和压力传感器来记录运动信息。面包屑列表的表示可以以可逆显示的方式显示在移动设备的用户界面上，以相反的顺序回溯步骤。在一些实施方案中，罗盘可以附加地或替代地用于收集相对于地球磁极的方向信息。

7. 发明授权

US07337443B2 Method and apparatus for processing program threads 有权
标题翻译：处理程序线程的方法和装置
公开(公告)号：US07337443B2
公开(公告)日：2008-02-26
申请号：US10610314
申请日：2003-06-30
申请人： Robert V. Welland , Galen C. Hunt , Dimitris Achlioptas
发明人： Robert V. Welland , Galen C. Hunt , Dimitris Achlioptas
IPC分类号： G06F9/46 , G06F9/455 , G06F15/00 , G06F15/76
CPC分类号： G06F9/4881 , G06F9/3836
摘要： A procedure identifies a program image and generates a basic block flow graph associated with the program image. Execution of the program image is benchmarked and the basic block flow graph is annotated with the results of the benchmarking of the program image. Basic blocks of the program are then grouped into bins. When the program image is executed, a drafting scheduler stops threads before they leave a bin and schedules any threads queued for the same bin.
摘要翻译：程序识别节目图像并生成与节目图像相关联的基本块流程图。对程序图像的执行进行基准测试，基本块流程图用程序映像的基准测试结果进行注释。然后将程序的基本块分组成箱。当执行程序映像时，一个起草调度程序在他们离开一个bin之前停止线程，并调度排队等同于一个bin的任何线程。

8. 发明授权

US07200530B2 Architecture for distributed computing system and automated design, deployment, and management of distributed applications 有权
标题翻译：分布式计算系统的架构和分布式应用程序的自动设计，部署和管理
公开(公告)号：US07200530B2
公开(公告)日：2007-04-03
申请号：US11321280
申请日：2005-12-29
申请人： Mathilde C. Brown , Charlie D. Chase , Kevin Grealish , Galen C. Hunt , Aamer Hydrie , David Noble , Geoffrey Outhred , Glenn R. Peterson , Bassam Tabbara , Alexander Torone , Robert V. Welland
发明人： Mathilde C. Brown , Charlie D. Chase , Kevin Grealish , Galen C. Hunt , Aamer Hydrie , David Noble , Geoffrey Outhred , Glenn R. Peterson , Bassam Tabbara , Alexander Torone , Robert V. Welland
IPC分类号： G06F17/50
CPC分类号： G06F8/20
摘要： A design tool includes a service definition model to enable abstract description of distributed computing systems and distributed applications. The design tool also includes a schema to dictate how functional operations within the service definition model are to be specified. The functional operations include design of distributed applications, deployment of distributed applications, and management of distributed applications.
摘要翻译：设计工具包括一个服务定义模型，以实现分布式计算系统和分布式应用程序的抽象描述。设计工具还包括一个模式来指定如何指定服务定义模型中的功能操作。功能操作包括分布式应用程序的设计，分布式应用程序的部署以及分布式应用程序的管理。

9. 发明授权

US07096258B2 System and method providing automatic policy enforcement in a multi-computer service application 有权
标题翻译：在多计算机服务应用程序中提供自动策略实施的系统和方法
公开(公告)号：US07096258B2
公开(公告)日：2006-08-22
申请号：US10845324
申请日：2004-05-12
申请人： Galen C. Hunt , Aamer Hydrie , Steven P. Levi , Bassam Tabbara , Mark D. Van Antwerp , Robert V. Welland
发明人： Galen C. Hunt , Aamer Hydrie , Steven P. Levi , Bassam Tabbara , Mark D. Van Antwerp , Robert V. Welland
IPC分类号： G06F15/177
CPC分类号： G06F9/5066
摘要： Systems and methods to enforce policy in a multi-computer service application are described. In one aspect, a scale-independent logical model of an application is generated. The application is for implementation in a distributed computing system. The scale-independent logical model includes multiple components representing logical functions of the application and intercommunication protocols. The model components are converted into one or more instances representative of physical resources used to implement the logical functions. The instances specify information such as communication ports on the physical resources and communication paths that link the physical resources.
摘要翻译：描述在多计算机服务应用程序中执行策略的系统和方法。在一个方面，生成应用的与规模无关的逻辑模型。该应用程序用于在分布式计算系统中实现。规模无关逻辑模型包括表示应用程序和互通协议的逻辑功能的多个组件。模型组件被转换为代表用于实现逻辑功能的物理资源的一个或多个实例。这些实例在链接物理资源的物理资源和通信路径上指定诸如通信端口的信息。

10. 发明授权

US07072807B2 Architecture for distributed computing system and automated design, deployment, and management of distributed applications 有权
公开(公告)号：US07072807B2
公开(公告)日：2006-07-04
申请号：US10789440
申请日：2004-02-26
申请人： Mathilde C. Brown , Charlie D. Chase , Kevin Grealish , Galen C. Hunt , Aamer Hydrie , David Noble , Geoffrey Outhred , Glenn R. Peterson , Bassam Tabbara , Alexander Torone , Robert V. Welland
发明人： Mathilde C. Brown , Charlie D. Chase , Kevin Grealish , Galen C. Hunt , Aamer Hydrie , David Noble , Geoffrey Outhred , Glenn R. Peterson , Bassam Tabbara , Alexander Torone , Robert V. Welland
IPC分类号： G06F17/50
CPC分类号： G06F8/20
摘要： A design tool includes a service definition model to enable abstract description of distributed computing systems and distributed applications. The design tool also includes a schema to dictate how functional operations within the service definition model are to be specified. The functional operations include design of distributed applications, deployment of distributed applications, and management of distributed applications.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式