专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明专利

JP2005129033A Integration of high-assurance feature into application through application factoring 有权
标题翻译：通过应用因素将高保真特征集成到应用中
公开(公告)号：JP2005129033A
公开(公告)日：2005-05-19
申请号：JP2004278411
申请日：2004-09-24
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： RAY KENNETH D , PEINADO MARCUS , ENGLAND PAUL , KURIEN THEKKTHALACKAL VARUGIS
IPC分类号： G06F21/24 , G06F1/00 , G06F3/00 , G06F9/44 , G06F9/45 , G06F9/46 , G06F12/14 , G06F15/76 , G06F17/00 , G06F21/00 , G06F21/22
CPC分类号： G06F21/53
摘要： PROBLEM TO BE SOLVED: To execute, in parallel with each other, a large-scale system having advanced features and a small-scale system for providing high-level security. SOLUTION: An application's functionality is partitioned into two groups depending on whether or not a specific operation like processing of secret data is executed. Separate software objects (processors) are created to perform these two groups of operations. A trusted processor handles secure data and runs in a high-assurance environment. When another processor detects secure data, that data are sent to the trusted processor. The data are wrapped in such a way that allows it to be routed to the trusted processor, and prevents the data from being deciphered by any entity other than the trusted processor. An infrastructure is provided that wraps objects, routes the objects to the correct processor, and allows their integrity to be attested through a chain of trust leading back to a base component that is known to be trustworthy. COPYRIGHT: (C)2005,JPO&NCIPI
摘要翻译：要解决的问题：并行执行具有高级特征的大型系统和用于提供高级安全性的小规模系统。解决方案：根据是否执行特定操作（如处理秘密数据），将应用程序的功能划分为两组。创建独立的软件对象（处理器）来执行这两组操作。值得信赖的处理器处理安全数据并在高保证环境中运行。当另一个处理器检测到安全数据时，该数据被发送到可信处理器。数据被包装成允许其被路由到可信处理器的方式，并且防止数据被除了可信处理器之外的任何实体解密。提供了一个基础设施，用于包装对象，将对象路由到正确的处理器，并通过一个信任链来验证其完整性，并将其引导回已知可靠的基础组件。版权所有（C）2005，JPO＆NCIPI

2. 发明专利

JP2006178936A Computer security management, such as in virtual machine or hardened operating system 有权
标题翻译：计算机安全管理，如虚拟机或硬化操作系统
公开(公告)号：JP2006178936A
公开(公告)日：2006-07-06
申请号：JP2005332691
申请日：2005-11-17
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： ARMSTRONG BENJAMIN , GARMS JASON , RAY KENNETH D , KRAMER MICHAEL , ENGLAND PAUL , FIELD SCOTT A
IPC分类号： G06F21/22
CPC分类号： G06F21/53 , G06F21/56 , G06F21/566
摘要： PROBLEM TO BE SOLVED: To provide a security scheme that provides security to one or more self-contained operating environment instances executed on a computer. SOLUTION: The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environments and processes running on the computer outside of the self-contained operating environments. COPYRIGHT: (C)2006,JPO&NCIPI
摘要翻译：要解决的问题：提供一种为在计算机上执行的一个或多个独立操作环境实例提供安全性的安全性方案。解决方案：安全方案可以包括实现可由监督过程等控制的一组安全应用。所述一组安全应用程序和监督过程可以在计算机的主机系统上操作，其还可以提供用于执行一个或多个独立操作环境的平台。安全性方案保护在独立操作环境中运行的一个或多个独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。版权所有（C）2006，JPO＆NCIPI

3. 发明专利

JP2011187089A System and method for protected operating system boot using state validation 有权
标题翻译：使用状态验证保护操作系统引导的系统和方法
公开(公告)号：JP2011187089A
公开(公告)日：2011-09-22
申请号：JP2011147422
申请日：2011-07-01
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： WILLMAN BRYAN MARK , ENGLAND PAUL , RAY KENNETH D , HUNTER JAMIE , MCMICHAEL LONNY D , LASALLE DEREK N , JACOMET PIERRE , PALEY MARK E , KURIEN THEKKTHALACKAL V , CROSS DAVID B
IPC分类号： G06F21/22 , G06F9/445 , G06F11/00 , G06F21/00 , G06N20060101
CPC分类号： G06F21/575 , G06F9/4401
摘要： PROBLEM TO BE SOLVED: To provide a mechanism for a protected operating system boot which prevents rogue components from being loaded with an operating system, and thus prevents divulgence of a system key under inappropriate circumstances. SOLUTION: After a portion of a machine startup procedure has occurred, the operating system loader is run, the loader is validated by a validator, and a correct machine state is either verified to exist and/or created. Once the loader has been verified to be a legitimate loader, and the machine state under which it is running is verified to be correct, the loader is carried out. COPYRIGHT: (C)2011,JPO&INPIT
摘要翻译：要解决的问题：提供一种用于防止流氓组件加载操作系统的受保护操作系统引导的机制，从而防止系统密钥在不适当情况下泄露。
解决方案：在机器启动过程的一部分发生之后，运行操作系统加载程序，加载程序由验证器验证，并且正确的机器状态被验证存在和/或创建。一旦加载程序已经被验证为合法的装载程序，并且验证其运行的机器状态是否正确，则执行加载程序。版权所有（C）2011，JPO＆INPIT

4. 发明专利

JP2005129034A Provision of safe input/output to reliable agent in system having high security execution environment 有权
标题翻译：在具有高安全执行环境的系统中为可靠代理人提供安全输入/输出
公开(公告)号：JP2005129034A
公开(公告)日：2005-05-19
申请号：JP2004278412
申请日：2004-09-24
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： WILLMAN BRYAN M , CHEW CHRISTINE M , RAY KENNETH D , ROBERTS PAUL C
IPC分类号： G06F9/46 , G06F1/00 , G06F9/00 , G06F21/00
CPC分类号： G06F21/83 , G06F21/53 , G06F21/57 , G06F21/84 , G06F2221/2105 , G06F2221/2113
摘要： PROBLEM TO BE SOLVED: To provide a technology offering security for a user input/output. SOLUTION: A first host operating system is used with a second high security operating system (nexus), and the first system offers at least a part of an infrastructure for the second system. A reliable UI engine includes a reliable input manager and a reliable output manager. The reliable input manager controls access to a reliable input and distributes a decoded input to the host operating system or an appropriate process executed on the nexus as necessary. The reliable output manager manages an output to a display device and allows a reliable agent inside the nexus to output display data without requiring the recognition of details depending on an output device. COPYRIGHT: (C)2005,JPO&NCIPI
摘要翻译：要解决的问题：提供为用户输入/输出提供安全性的技术。解决方案：第一个主机操作系统与第二个高安全性操作系统（nexus）一起使用，第一个系统为第二个系统提供至少一部分基础架构。可靠的UI引擎包括可靠的输入管理器和可靠的输出管理器。可靠的输入管理器控制对可靠输入的访问，并将解码的输入分发到主机操作系统或根据需要在关联上执行的适当的进程。可靠的输出管理器管理显示设备的输出，并且允许内部的可靠代理输出显示数据，而不需要根据输出设备识别细节。版权所有（C）2005，JPO＆NCIPI

5. 发明专利

JP2005056429A Projection of trustworthiness from trusted environment to untrusted environment 有权
标题翻译：从信息环境到非侵入环境的信任投射
公开(公告)号：JP2005056429A
公开(公告)日：2005-03-03
申请号：JP2004232729
申请日：2004-08-09
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： WILLMAN BRYAN MARK , ENGLAND PAUL , RAY KENNETH D , KAPLAN KEITH , KURIEN VARUGIS , MARR MICHAEL DAVID
IPC分类号： G06F21/22 , G06F9/46 , G06F11/30 , G06F15/00 , G06F21/00 , G06F1/00
CPC分类号： G06F21/552 , G06F21/57
摘要： PROBLEM TO BE SOLVED: To provide a mechanism for projecting the trustworthiness of entities in a trusted environment to entities in an untrusted environment. SOLUTION: In a single machine that has entities running in an untrusted environment and entities running in a trusted environment, the trustworthiness of the entities in the trusted environment is projected to the entities in the untrusted environment. This hosts an operating system (for example, the nexus) in which a normal operating system is protected by security. COPYRIGHT: (C)2005,JPO&NCIPI
摘要翻译：要解决的问题：提供一种用于将可信环境中的实体的可信度投影到不可信环境中的实体的机制。解决方案：在具有在不受信任环境中运行的实体和运行在受信任环境中的实体的单个机器中，可信环境中的实体的可信度将投影到不受信任环境中的实体。这是一个操作系统（例如，连接），其中正常的操作系统受到安全保护。版权所有（C）2005，JPO＆NCIPI

6. 发明专利

JP2006018825A System and method for protected operating system boot using state validation 有权
标题翻译：使用状态验证保护操作系统引导的系统和方法
公开(公告)号：JP2006018825A
公开(公告)日：2006-01-19
申请号：JP2005179527
申请日：2005-06-20
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： WILLMAN BRYAN MARK , ENGLAND PAUL , RAY KENNETH D , HUNTER JAMIE , MCMICHAEL LONNY D , LASALLE DEREK N , JACOMET PIERRE , PALEY MARK E , KURIEN THEKKTHALACKAL V , CROSS DAVID B
IPC分类号： G06F21/22 , G06F9/445 , G06F11/00 , G06F12/14 , G06F21/00 , G06N20060101
CPC分类号： G06F21/575 , G06F9/4401
摘要： PROBLEM TO BE SOLVED: To prevent rogue components from being loaded together with an operating system, to prevent divulgence of a system key under inappropriate circumstances. SOLUTION: After a portion of a machine startup procedure has occurred, an operating system loader is run, and the loader is validated, and a correct machine state is either verified to exist and/or to be created. Once the loader has been verified to be a legitimate loader and the machine state under which the loader is running is verified to be correct, a loader's future behavior is known to protect against the loading of rogue components that can cause divulgence of the system key. When the loader's behavior is known to be safe for the system key, a validator unseals the system key and provides it to the loader. COPYRIGHT: (C)2006,JPO&NCIPI
摘要翻译：要解决的问题：为了防止流氓组件与操作系统一起加载，以防止在不适当情况下泄露系统密钥。
解决方案：在机器启动过程的一部分发生之后，运行操作系统加载程序，验证加载程序，并验证是否存在和/或创建正确的机器状态。一旦加载程序被验证为合法的加载程序，并且加载程序正在运行的机器状态被验证为正确的，装载器的未来行为是已知的，以防止可能导致系统密钥泄露的流氓组件的加载。当装载机的行为已知对于系统密钥是安全的时，验证器将打开系统密钥并将其提供给加载程序。版权所有（C）2006，JPO＆NCIPI

7. 发明专利

JP2005129045A Secure identification of executable file for reliability determination entity 有权
标题翻译：用于可靠性确定实体的可执行文件的安全确定
公开(公告)号：JP2005129045A
公开(公告)日：2005-05-19
申请号：JP2004295110
申请日：2004-10-07
申请人： Microsoft Corp , マイクロソフトコーポレーション
发明人： DHIR ANSHUL , RAY KENNETH D , ENGLAND PAUL , KURIEN THEKKTHALACKAL VARUGIS
IPC分类号： G06F21/24 , G06F1/00 , G06F3/14 , G06F9/06 , G06F9/50 , G06F12/14 , G06F15/00 , G06F15/16 , G06F21/00 , G06F21/22 , G06K19/073 , G09C1/00 , H04L9/32
CPC分类号： G06F21/62
摘要： PROBLEM TO BE SOLVED: To supply authentication information to be used for a resource provider who supplies a resource to authenticate a resource recipient to the resource recipient. SOLUTION: A resource 12 is acquired from a resource provider (RP) 10 for a resource requester (RR) 14 operating on a computing device 18. The RR 14 is provided with an identify descriptor(id) 20 including security relevance information to designate an environment where the RR 14 is operating. A code identity code(code ID) 22 is calculated based on the loaded RR14 and id 20. The RP 10 verifies that the code ID calculated in the request of the resource 12 is matched with one of one or more valid codes ID 22 for the identified RR 14, and concludes that the RR 14 and id 20 are reliable, and the RP 10 supplies the requested resource 12 to the RR 14, and responds to the transferred request. COPYRIGHT: (C)2005,JPO&NCIPI
摘要翻译：要解决的问题：提供用于提供资源的资源提供者的认证信息，以向资源接收者认证资源接收者。解决方案：从用于在计算设备18上运行的资源请求者（RR）14的资源提供者（RP）10获取资源12.RR14具有包括安全相关信息的标识描述符（id）20 指定RR 14运行的环境。基于加载的RR14和ID20计算代码标识码（代码ID）22 .RR 10验证在资源12的请求中计算的代码ID与一个或多个有效代码ID 22中的一个匹配，用于标识的RR 14，并且得出结论，RR 14和ID 20是可靠的，并且RP 10将请求的资源12提供给RR14，并且响应于所传送的请求。版权所有（C）2005，JPO＆NCIPI

8. 发明专利

JP2002215395A SYSTEM AND METHOD FOR SPECIFYING DEVICE-SPECIFIC USER INTERFACE INFORMATION IN FIRMWARE OF USB DEVICE 审中-公开
公开(公告)号：JP2002215395A
公开(公告)日：2002-08-02
申请号：JP2001390570
申请日：2001-12-21
申请人： MICROSOFT CORP
发明人： BHESANIA FIRDOSH K , RAY KENNETH D , ST MICHEL STEPHANE
IPC分类号： G06F9/44 , G06F9/445
摘要： PROBLEM TO BE SOLVED: To obtain device-specific UI information from a USB device by using a host-specific device request. SOLUTION: In this system and procedure for storing the device-specific UI information in a firmware on the USB device, when receiving the host- specific device request, the USB device, in response to the request, transmits the device-specific information to an operating system and the requestors, such as the other computer applications. As a result of this, OEM/IHV (manufactures and dealers of USB device) can prepare additional brand-specific information in the USB device in a format allowing a judgment by the operating system. In addition, since the OEM/IHV can store the device-specific UI information in the firmware of the USB device, an installation medium does not need to be distributed with each USB devices, to designate the device-specific information.

9. 发明专利

JP2006323814A SYSTEM AND METHOD FOR SAFELY BOOTING COMPUTER HAVING RELIABLE PROCESSING MODULE 审中-公开
公开(公告)号：JP2006323814A
公开(公告)日：2006-11-30
申请号：JP2005353934
申请日：2005-12-07
申请人： MICROSOFT CORP
发明人： SCHWARTZ JAMES ANTHONY JR , HUNTER JAMIE , SCHWARTZ JONATHAN D , RAY KENNETH D , ENGLAND PAUL , HUMPHRIES RUSSELL , THOM STEFAN
IPC分类号： G06F21/22 , G06F9/445 , G06F21/24
摘要： PROBLEM TO BE SOLVED: To prevent unauthorized correction on data used during booting and access after booting for reinforcing security of a computer. SOLUTION: In the computer having a reliable platform module TPM, an expected hash value for a boot component can be placed inside a platform configuration register PCR, and consequently, the TPM can disclose a secret. Then, the boot component is decoded by using the secret, and its hash value is calculated to be placed inside the PCR. Subsequently, the comparison of PCRs can be carried out. When the comparison between the PCRs is not carried out, the access to an important secret for system operation can be disabled. The access to a first secret is allowed only when a plurality of first PCR values exist, while the access to a second secret is allowed only after one or a plurality of PCR values are replaced by new values. COPYRIGHT: (C)2007,JPO&INPIT

10. 发明专利

JP2003309570A Method for acquiring friendly name of bluetooth equipment 有权
标题翻译：获取蓝牙设备名称的方法
公开(公告)号：JP2003309570A
公开(公告)日：2003-10-31
申请号：JP2003052020
申请日：2003-02-27
申请人： Microsoft Corp , マイクロソフトコーポレイション
发明人： SHARMA OM , HOLAN DORON J , RAY KENNETH D , GILIBERTO LOUIS J
IPC分类号： H04L12/28 , H04L12/56 , H04L29/12 , H04W8/26 , H04W84/18 , H04W88/14
CPC分类号： H04L29/12132 , H04L29/12103 , H04L29/12594 , H04L61/1535 , H04L61/1552 , H04L61/30 , H04W8/26 , H04W84/18 , H04W88/14
摘要： PROBLEM TO BE SOLVED: To provide a method and an apparatus for reducing time needed to acquire a friendly name for Bluetooth equipment.
SOLUTION: A name server caches friendly names of equipment acquired from other equipment or other name servers. The name server is any equipment for caching the friendly names of the Bluetooth equipment and marking the friendly names to be used by the other equipment. Equipment on a requesting side determines whether the name server has responded to an inquiry command or not. If the name server has responded, the equipment on the requesting side acquires the friendly name which has been cached by the name server, and requests the friendly name which has not been cached but responded by the name server. Identification of the name server is achieved by appending a marker to null character of a friendly name field so as to indicate that the equipment which has responded is the name server.
COPYRIGHT: (C)2004,JPO
摘要翻译：要解决的问题：提供一种减少为蓝牙设备获取友好名称所需的时间的方法和装置。解决方案：名称服务器缓存从其他设备或其他名称服务器获取的设备的友好名称。名称服务器是用于缓存蓝牙设备的友好名称并标记其他设备使用的友好名称的任何设备。请求方的设备确定名称服务器是否响应查询命令。如果名称服务器已经响应，请求方的设备将获取名称服务器已经缓存的友好名称，并请求尚未缓存但由名称服务器响应的友好名称。通过将标记附加到友好名称字段的空字符来实现名称服务器的标识，以指示已经响应的设备是名称服务器。版权所有（C）2004，JPO

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式