专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060253705A1 Systems and methods for determining if applications executing on a computer system are trusted 有权
标题翻译：用于确定在计算机系统上执行的应用程序是否被信任的系统和方法
公开(公告)号：US20060253705A1
公开(公告)日：2006-11-09
申请号：US11123778
申请日：2005-05-06
申请人： Paul Roberts , Laura Benofsky , William Holt , Leslie Johnson , Bryan Willman , Madeline Bryant
发明人： Paul Roberts , Laura Benofsky , William Holt , Leslie Johnson , Bryan Willman , Madeline Bryant
IPC分类号： H04L9/00
CPC分类号： G06F21/52 , G06F21/445 , G06F21/6209
摘要： Access to an authentication image may be protected so that only authenticated processes have access to the image. The image can be displayed to authenticate a User Interface (UI) to a computer user. The image indicates the UI can be trusted. If the image is not displayed, it may be that an application UI is “spoofed” to trick a user into providing sensitive information. Additionally, a large variety of different images can be used as authentication images, so spoofing one image be recognized by most users. A set of original images may be provided, along with image modification processes which can generate a large number of variations. Techniques for authenticating UIs in a virtual machine context are provided. A secure attention sequence is also provided, which allows users to test whether processes running on a computer are authenticated.
摘要翻译：可以保护对认证图像的访问，使得只有经过身份验证的进程才能访问图像。可以显示图像以向用户验证用户界面（UI）。图像表示UI可以被信任。如果图像不显示，那么应用程序UI可能会“欺骗”欺骗用户提供敏感信息。另外，可以使用大量不同的图像作为认证图像，因此欺骗一个图像被大多数用户识别。可以提供一组原始图像以及可以产生大量变化的图像修改处理。提供了用于在虚拟机上下文中验证UI的技术。还提供了一个安全的关注序列，允许用户测试在计算机上运行的进程是否进行身份验证。

2. 发明申请

US20050091503A1 Providing secure input and output to a trusted agent in a system with a high-assurance execution environment 有权
标题翻译：在具有高度可靠执行环境的系统中为可信代理提供安全的输入和输出
公开(公告)号：US20050091503A1
公开(公告)日：2005-04-28
申请号：US10693407
申请日：2003-10-24
申请人： Paul Roberts , Christine Chew , Bryan Willman , Kenneth Ray
发明人： Paul Roberts , Christine Chew , Bryan Willman , Kenneth Ray
IPC分类号： G06F9/46 , G06F1/00 , G06F9/00 , G06F21/00 , H04K1/00 , H04L9/00
CPC分类号： G06F21/83 , G06F21/53 , G06F21/57 , G06F21/84 , G06F2221/2105 , G06F2221/2113
摘要： Techniques are disclosed to provide security for user output and input in which a first, host operating system is used along with a second, high assurance operating system (nexus), where the first system provides at least some of the infrastructure for the second system. A trusted UI engine has a trusted input manager and a trusted output manager. The trusted input manager controls access to trusted input, distributing decrypted input to the host operating system where appropriate, or to the appropriate process running in the nexus. The trusted output manager manages output to the display, and allows trusted agents in the nexus to output data for display without needing to be aware of output-device-dependent details.
摘要翻译：披露技术来提供用户输出和输入的安全性，其中使用第一主机操作系统以及第二高保证操作系统（nexus），其中第一系统为第二系统提供至少一些基础设施。受信任的UI引擎具有可信输入管理器和可信输出管理器。受信任的输入管理器控制对可信输入的访问，在适当的情况下将解密的输入分发到主机操作系统，或者在关联中运行适当的进程。受信任的输出管理器管理到显示器的输出，并允许连接中的可信代理输出数据进行显示，而不需要注意输出设备相关细节。

3. 发明申请

US20050091486A1 Providing a graphical user interface in a system with a high-assurance execution environment 有权
标题翻译：在具有高保证执行环境的系统中提供图形用户界面
公开(公告)号：US20050091486A1
公开(公告)日：2005-04-28
申请号：US10691759
申请日：2003-10-23
申请人： Idan Avraham , Christine Chew , Paul Roberts , Bryan Willman
发明人： Idan Avraham , Christine Chew , Paul Roberts , Bryan Willman
IPC分类号： G06F21/24 , G06F1/00 , G06F3/00 , G06F3/048 , G06F3/14 , G06F9/06 , G06F9/455 , G06F9/46 , G06F12/14 , G06F13/00 , G06F21/00 , G09G5/14 , H04L9/00
CPC分类号： G06F21/84
摘要： Techniques are disclosed to provide security for graphical user interface elements being displayed in a system in which a first, host operating system is used along with a second, high assurance operating system, where the first system provides at least some of the infrastructure for the second system. Graphical user interface elements associated with the high-assurance operating system are prevented from being obscured and from any partial transparency. Additionally, a piece of secret information is stored which can be displayed upon command by graphical user interface elements associated with the high-assurance operating system. Coordinating certain elements of the display of all graphical user interface elements associated with the high assurance operating system also helps to identify legitimate elements associated with the high assurance operating system, as opposed to impostor elements which are not. Where a windowing system is used, public title information is furnished to a host operating system windowing system to identify a window owned by a process running on a high-assurance operating system. Private title information associated with the same window is used only in the high assurance operating system.
摘要翻译：公开了技术来提供在系统中显示的图形用户界面元素的安全性，其中第一主机操作系统与第二高保证操作系统一起使用，其中第一系统为第二系统提供至少一些基础设施系统。与高保证操作系统相关联的图形用户界面元素被防止被遮蔽并且不受任何部分透明度的影响。此外，存储一个秘密信息，该秘密信息可以根据与高保证操作系统相关联的图形用户界面元素的命令显示。与高保证操作系统相关联的所有图形用户界面元素的显示的某些元素的协调也有助于识别与高保证操作系统相关联的合法元素，而不是冒号元素。在使用窗口系统的情况下，将主题信息提供给主机操作系统窗口系统，以识别在高保证操作系统上运行的进程所拥有的窗口。与同一窗口相关联的私有标题信息仅在高保证操作系统中使用。

4. 发明申请

US20060075264A1 Security state watcher 有权
公开(公告)号：US20060075264A1
公开(公告)日：2006-04-06
申请号：US10954917
申请日：2004-09-30
申请人： Bryan Willman , Christine Chew , Paul Roberts , David Wooten , John Paff
发明人： Bryan Willman , Christine Chew , Paul Roberts , David Wooten , John Paff
IPC分类号： G06F12/14
CPC分类号： G06F21/577 , Y10S257/922
摘要： A security device watches over the secure functionality in a computer system. This “watcher” security device may be integrated within the computer system or may be separate from it. The security device queries the secure functionality to determine whether the state of the secure functionality is acceptable. If no satisfactory state exists, or if no response is received, then a signal is transmitted. The signal may be auditory (a buzzer) or visual (a flashing light) in order to signal to any user that the secure functionality has been compromised. Optionally, human input devices may be disabled, or a monitoring service notified, in conjunction with or in lieu of the signal. If the secure functionality includes a secret shared between the secure functionality and the user, then the security device may signal the secret. For example, where the secret is visual, the security device may display the secret. Where there is more than one element of secure functionality in the computer system, the security device may separately watch and report on more than one element of secure functionality. The security device may also display status information regarding the computer system. Some or all of the security device may be distributed via a trusted distribution infrastructure.

5. 发明授权

US07721341B2 Method and system for allowing code to be securely initialized in a computer 有权
标题翻译：允许在计算机中安全地初始化代码的方法和系统
公开(公告)号：US07721341B2
公开(公告)日：2010-05-18
申请号：US11152909
申请日：2005-06-15
申请人： Paul England , Bryan Willman
发明人： Paul England , Bryan Willman
IPC分类号： G06F12/14 , G06F21/22
CPC分类号： G06F15/177 , G06F9/4405 , G06F21/575
摘要： A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).
摘要翻译：存储器控制器防止CPU和其他I / O总线主机在代码（例如，可信核心）初始化过程中访问存储器。存储器控制器重置计算机中的CPU，并允许CPU开始访问特定位置的存储器（由存储器控制器标识给CPU）。一旦该CPU执行了初始化过程，代码就可以运行，任何其他CPU都可以访问存储器（复位后），以及任何其他总线主机（受到启动代码的任何控制）。

6. 发明申请

US20050204128A1 System and method for n-way authentication in a network 有权
标题翻译：网络中n路认证的系统和方法
公开(公告)号：US20050204128A1
公开(公告)日：2005-09-15
申请号：US10766060
申请日：2004-01-28
申请人： Michael Aday , Bryan Willman , Marcus Peinado , Alan Geller
发明人： Michael Aday , Bryan Willman , Marcus Peinado , Alan Geller
IPC分类号： H04L9/00
CPC分类号： H04L9/0825 , H04L9/14 , H04L2209/56
摘要： A method of controlling information exposure in a multiparty transaction includes an originating transaction participant cryptographically encoding all information for each of the transaction participants such that a unique data content and encryption are used for each of the messages destined to the other transaction participants. The cryptographically encoded messages are transmitted to the transaction participants such that each may decrypt their message and respond to a primary transaction participant with status concerning their portion of the transaction. After reception of affirmative status messages from the transaction participants, the primary transaction participant may transmit messages to the responding transaction participants to execute the multiparty transaction. The originating transaction participant may also be provided an indication that the multiparty transaction is executed.
摘要翻译：控制多方交易中的信息曝光的方法包括对每个交易参与者的所有信息进行密码编码的始发交易参与者，从而为发往其他交易参与者的每个消息使用唯一的数据内容和加密。密码编码的消息被传送到交易参与者，使得每个消息可以解密他们的消息并且响应具有关于其交易部分的状态的主交易参与者。在从交易参与者接收到肯定状态消息之后，主交易参与者可以向响应的交易参与者发送消息以执行多方交易。也可以向源交易参与者提供执行多方交易的指示。

7. 发明申请

US20050086517A1 Page granular curtained memory via mapping control 审中-公开
标题翻译：通过映射控制的页面精细窗帘内存
公开(公告)号：US20050086517A1
公开(公告)日：2005-04-21
申请号：US10970104
申请日：2004-10-21
申请人： Bryan Willman , Paul England
发明人： Bryan Willman , Paul England
IPC分类号： G06F12/14 , H04L9/00
CPC分类号： G06F12/145 , G06F12/1491
摘要： Methods of providing and limiting access to trusted memory are provided. Trusted memory pages are not mapped with page map pages. When a central processor is operated in a page-mapping mode, access to the trusted memory is limited. In particular, without mapping information, software and hardware modules cannot access and modify the contents of trusted memory sections.
摘要翻译：提供了提供和限制访问可信存储器的方法。信任的内存页面不与页面映射页面进行映射。当中央处理器在页面映射模式下操作时，对可信存储器的访问受到限制。具体来说，没有映射信息，软件和硬件模块不能访问和修改可信存储器部分的内容。

8. 发明授权

US07496768B2 Providing secure input and output to a trusted agent in a system with a high-assurance execution environment 有权
标题翻译：在具有高度可靠执行环境的系统中为可信代理提供安全的输入和输出
公开(公告)号：US07496768B2
公开(公告)日：2009-02-24
申请号：US10693407
申请日：2003-10-24
申请人： Paul C. Roberts , Christine M. Chew , Bryan Willman , Kenneth D. Ray
发明人： Paul C. Roberts , Christine M. Chew , Bryan Willman , Kenneth D. Ray
IPC分类号： H04L9/32 , H04L9/00 , G06F11/30 , G06F17/30
CPC分类号： G06F21/83 , G06F21/53 , G06F21/57 , G06F21/84 , G06F2221/2105 , G06F2221/2113
摘要： Techniques are disclosed to provide security for user output and input in which a first, host operating system is used along with a second, high assurance operating system (nexus), where the first system provides at least some of the infrastructure for the second system. A trusted UI engine has a trusted input manager and a trusted output manager. The trusted input manager controls access to trusted input, distributing decrypted input to the host operating system where appropriate, or to the appropriate process running in the nexus. The trusted output manager manages output to the display, and allows trusted agents in the nexus to output data for display without needing to be aware of output-device-dependent details.
摘要翻译：披露技术来提供用户输出和输入的安全性，其中使用第一主机操作系统以及第二高保证操作系统（nexus），其中第一系统为第二系统提供至少一些基础设施。受信任的UI引擎具有可信输入管理器和可信输出管理器。受信任的输入管理器控制对可信输入的访问，在适当的情况下将解密的输入分发到主机操作系统，或者在关联中运行适当的进程。受信任的输出管理器管理到显示器的输出，并允许连接中的可信代理输出数据进行显示，而不需要注意输出设备相关细节。

9. 发明申请

US20070112999A1 Efficient power management of a system with virtual machines 有权
标题翻译：具有虚拟机的系统的高效电源管理
公开(公告)号：US20070112999A1
公开(公告)日：2007-05-17
申请号：US11437109
申请日：2006-05-18
申请人： Adrian Oney , Bryan Willman , Eric Traut , Forrest Foltz , Matthew Hendel , Rene Vega
发明人： Adrian Oney , Bryan Willman , Eric Traut , Forrest Foltz , Matthew Hendel , Rene Vega
IPC分类号： G06F21/00
CPC分类号： G06F9/442 , G06F1/28 , G06F1/30 , G06F1/3246 , G06F1/3268 , G06F1/3287 , G06F1/329 , G06F9/455 , G06F9/45545 , G06F9/45554 , G06F9/45558 , G06F9/50 , G06F17/00 , G06F17/30144 , G06F17/3015 , G06F21/53 , G06F21/575 , G06F21/6245 , G06F2009/45562 , G06F2009/45579 , G06F2009/45583
摘要： Efficient power management of a system with virtual machines is disclosed. In particular, such efficient power management may enable coordination of system-wide power changes with virtual machines. Additionally, such efficient power management may enable coherent power changes in a system with a virtual machine monitor. Furthermore, such efficient power management may enable dynamic control and communication of power state changes.
摘要翻译：公开了具有虚拟机的系统的有效功率管理。特别地，这种有效的功率管理可以实现与虚拟机协调系统范围的功率变化。此外，这种有效的功率管理可以使得具有虚拟机监视器的系统中的一致的功率改变。此外，这种有效的功率管理可以实现功率状态变化的动态控制和通信。

10. 发明申请

US20050144476A1 Method and system for allowing code to be securely intialized in a computer 有权
标题翻译：允许代码在计算机中安全地初始化的方法和系统
公开(公告)号：US20050144476A1
公开(公告)日：2005-06-30
申请号：US11066890
申请日：2005-02-25
申请人： Paul England , Bryan Willman
发明人： Paul England , Bryan Willman
IPC分类号： G06F1/24 , G06F9/445 , H04L9/00
CPC分类号： G06F15/177 , G06F9/4405 , G06F21/575
摘要： A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).
摘要翻译：存储器控制器防止CPU和其他I / O总线主机在代码（例如，可信核心）初始化过程中访问存储器。存储器控制器重置计算机中的CPU，并允许CPU开始访问特定位置的存储器（由存储器控制器标识给CPU）。一旦该CPU执行了初始化过程，代码就可以运行，任何其他CPU都可以访问存储器（复位后），以及任何其他总线主机（受到启动代码的任何控制）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式