专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2007090719A2 METHOD FOR PREVENTING MALICIOUS SOFTWARE INSTALLATION ON AN INTERNET-CONNECTED COMPUTER 审中-公开
标题翻译：在互联网连接的计算机上防止恶意软件安装的方法
公开(公告)号：WO2007090719A2
公开(公告)日：2007-08-16
申请号：PCT/EP2007/050442
申请日：2007-01-17
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , KELLEY, Edward , MOTIKA, Franco , WILBRINK, Tijs
发明人： KELLEY, Edward , MOTIKA, Franco , WILBRINK, Tijs
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/565 , G06F21/566 , G06F2221/2149
摘要： A computer random access memory is divided into first and second partitions. Each partition has its own operating system (OS). The first partition has a conventional OS and is designated for non-Internet use. The second partition is designated for secure Internet access, and has an OS specific for Internet usage. Software in the second partition cannot write or copy files in the second partition. The size of the second partition is fixed and unchangeable while said second partition is open. Each software application in the second partition is allocated a memory region that cannot be changed, thereby preventing memory overflow attacks. A secure memory is designated for temporary storage of software used in the second partition. Cyclic redundancy check (CRC) values are calculated for all files in the secure memory. To detect unauthorized file changes, CRC values are calculated for all files used in the second partition, and checked against values stored in the secure memory. The second partition can write only to a secure memory using a security arrangement such as password protection or a download memory separate from the first partition to allow files stored in the download memory to be examined by scanning and testing from the first partition prior to being stored elsewhere in the computer.
摘要翻译：计算机随机存取存储器被分成第一和第二分区。每个分区都有自己的操作系统（OS）。第一个分区具有常规操作系统，并被指定用于非互联网使用。第二个分区被指定用于安全的Internet访问，并且具有专用于因特网使用的操作系统。第二个分区中的软件无法在第二个分区中写入或复制文件。第二分区的大小是固定的，并且在所述第二分区打开时不可改变。第二分区中的每个软件应用程序都被分配一个无法更改的内存区域，从而防止内存溢出攻击。指定用于在第二分区中使用的软件的临时存储的安全存储器。针对安全存储器中的所有文件计算循环冗余校验（CRC）值。要检测未经授权的文件更改，将对第二个分区中使用的所有文件计算CRC值，并对存储在安全存储器中的值进行检查。第二分区可以使用诸如密码保护的安全布置或与第一分区分开的下载存储器仅写入安全存储器，以允许存储在下载存储器中的文件通过在存储之前从第一分区扫描和测试来检查电脑里的其他地方

2. 发明授权

EP1984864B1 METHOD FOR PREVENTING MALICIOUS SOFTWARE INSTALLATION ON AN INTERNET-CONNECTED COMPUTER 有权转让
标题翻译：过程，以防止恶意软件安装在有关因特网的计算机
公开(公告)号：EP1984864B1
公开(公告)日：2011-04-20
申请号：EP07703940.2
申请日：2007-01-17
申请人： International Business Machines Corporation
发明人： KELLEY, Edward , MOTIKA, Franco , WILBRINK, Tijs
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/565 , G06F21/566 , G06F2221/2149
摘要： A computer random access memory is divided into first and second partitions. Each partition has its own operating system (OS). The first partition has a conventional OS and is designated for non-Internet use. The second partition is designated for secure Internet access, and has an OS specific for Internet usage. Software in the second partition cannot write or copy files in the second partition. The size of the second partition is fixed and unchangeable while said second partition is open. Each software application in the second partition is allocated a memory region that cannot be changed, thereby preventing memory overflow attacks. A secure memory is designated for temporary storage of software used in the second partition. Cyclic redundancy check (CRC) values are calculated for all files in the secure memory. To detect unauthorized file changes, CRC values are calculated for all files used in the second partition, and checked against values stored in the secure memory. The second partition can write only to a secure memory using a security arrangement such as password protection or a download memory separate from the first partition to allow files stored in the download memory to be examined by scanning and testing from the first partition prior to being stored elsewhere in the computer.

3. 发明公开

EP1984864A2 METHOD FOR PREVENTING MALICIOUS SOFTWARE INSTALLATION ON AN INTERNET-CONNECTED COMPUTER 有权转让
标题翻译：过程，以防止恶意软件安装在有关因特网的计算机
公开(公告)号：EP1984864A2
公开(公告)日：2008-10-29
申请号：EP07703940.2
申请日：2007-01-17
申请人： International Business Machines Corporation
发明人： KELLEY, Edward , MOTIKA, Franco , WILBRINK, Tijs
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/565 , G06F21/566 , G06F2221/2149
摘要： A computer random access memory is divided into first and second partitions. Each partition has its own operating system (OS). The first partition has a conventional OS and is designated for non-Internet use. The second partition is designated for secure Internet access, and has an OS specific for Internet usage. Software in the second partition cannot write or copy files in the second partition. The size of the second partition is fixed and unchangeable while said second partition is open. Each software application in the second partition is allocated a memory region that cannot be changed, thereby preventing memory overflow attacks. A secure memory is designated for temporary storage of software used in the second partition. Cyclic redundancy check (CRC) values are calculated for all files in the secure memory. To detect unauthorized file changes, CRC values are calculated for all files used in the second partition, and checked against values stored in the secure memory. The second partition can write only to a secure memory using a security arrangement such as password protection or a download memory separate from the first partition to allow files stored in the download memory to be examined by scanning and testing from the first partition prior to being stored elsewhere in the computer.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式