专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07716727B2 Network security device and method for protecting a computing device in a networked environment 有权
标题翻译：用于在网络环境中保护计算设备的网络安全设备和方法
公开(公告)号：US07716727B2
公开(公告)日：2010-05-11
申请号：US10978236
申请日：2004-10-29
申请人： Thomas G. Phillips , Christopher A. Schoppa , Alexander Frank , Mark Curtis Light , Wiliam Jefferson Westerinen
发明人： Thomas G. Phillips , Christopher A. Schoppa , Alexander Frank , Mark Curtis Light , Wiliam Jefferson Westerinen
IPC分类号： G06F21/00 , H04L29/06
CPC分类号： H04L63/1441
摘要： A network security module for protecting computing devices connected to a communication network from security threats is presented. The network security module is interposed, either logically or physically, between the protected computer and the communication network. The network security module receives security information from a security service. The security information comprises security measures which, when enforced by the network security module, protect the computer from a security threat to the computer. The network security module implements the security measures by controlling the network activities between the protected computer and the network. The network security module also temporarily implements security patches until corresponding patches are installed onto the protected computer.
摘要翻译：提出了一种用于保护连接到通信网络的计算设备免受安全威胁的网络安全模块。网络安全模块在逻辑上或物理上介于受保护的计算机和通信网络之间。网络安全模块从安全服务接收安全信息。安全信息包括安全措施，当由网络安全模块执行时，其保护计算机免受对计算机的安全威胁。网络安全模块通过控制受保护的计算机和网络之间的网络活动来实现安全措施。网络安全模块还临时实施安全补丁，直到相应的修补程序安装到受保护的计算机上。

2. 发明授权

US07546471B2 Method and system for virus detection using pattern matching techniques 有权
标题翻译：使用模式匹配技术进行病毒检测的方法和系统
公开(公告)号：US07546471B2
公开(公告)日：2009-06-09
申请号：US11036846
申请日：2005-01-14
申请人： Thomas G. Phillips , Christopher A. Schoppa , William J. Westerinen
发明人： Thomas G. Phillips , Christopher A. Schoppa , William J. Westerinen
IPC分类号： G06F11/30 , G06F11/00
CPC分类号： H04L63/1416 , G06F21/564 , H04L63/145
摘要： A method and system for providing virus detection. A virus detection system provides for the use of pattern matching techniques on data at a binary level for virus detection. Whenever an incoming data stream is received, the data stream is segmented into time-based data frames. The time-based data frames are processed to generate associated data frame images utilizing signal processing identification and filter techniques. One or more data frame images are compared to a stored virus image utilizing pattern analysis techniques. A pattern match value associated with each data frame image is generated based on the comparison and a determination is made as to whether or not the pattern match value exceeds a pattern match value threshold. When the pattern match value exceeds the pattern match value threshold, a pattern associated with the virus image is removed from the time-based frames to produce a filtered data stream.
摘要翻译：一种用于提供病毒检测的方法和系统。病毒检测系统提供对二进制级别的数据使用模式匹配技术进行病毒检测。每当接收到输入数据流时，数据流被分段成基于时间的数据帧。处理基于时间的数据帧，以利用信号处理识别和滤波技术生成相关联的数据帧图像。利用模式分析技术将一个或多个数据帧图像与存储的病毒图像进行比较。基于比较生成与每个数据帧图像相关联的模式匹配值，并且确定模式匹配值是否超过模式匹配值阈值。当模式匹配值超过模式匹配值阈值时，与基于时间的帧相关联的与病毒图像相关联的模式被产生过滤的数据流。

3. 发明授权

US08214296B2 Disaggregated secure execution environment 有权
标题翻译：分解的安全执行环境
公开(公告)号：US08214296B2
公开(公告)日：2012-07-03
申请号：US11353675
申请日：2006-02-14
申请人： Alexander Frank , Curt A. Steeb , Isaac P. Ahdout , Richard B. Thompson , Thomas G. Phillips , William J. Westerinen , Zhangwei Xu
发明人： Alexander Frank , Curt A. Steeb , Isaac P. Ahdout , Richard B. Thompson , Thomas G. Phillips , William J. Westerinen , Zhangwei Xu
IPC分类号： G06F21/00
CPC分类号： H04L9/00 , G06F21/55 , G06F21/554 , G06F2221/2135
摘要： An electronic device, such as, a computer, may be adapted for self-monitoring for compliance to an operating policy. The operating policy may specify a pay-per-use or subscription business model and measurements associated with compliant usage. A secure execution environment may measure usage in accordance with the business model as well as monitor and enforce compliance to the operating policy. To increase the difficulty of attacking or otherwise disabling the secure execution environment, elements of the secure execution environment may be distributed. The distribution points may include other functional elements of the computer, such as interface circuits, or may even be remotely located over a network. An implementation method for disaggregating the secure execution environment is also disclosed.
摘要翻译：诸如计算机的电子设备可以适于自我监视以符合操作策略。操作策略可以指定按使用付费或订阅业务模式以及与合规使用相关联的测量。安全执行环境可以根据业务模式来测量使用情况，并监视和实施对操作策略的遵守。为了增加攻击或以其他方式禁用安全执行环境的难度，可以分发安全执行环境的元素。分发点可以包括计算机的其他功能元件，例如接口电路，或者甚至可以远程位于网络上。还公开了用于分解安全执行环境的实现方法。

4. 发明申请

US20080250406A1 Virtual Machine Support for Metered Computer Usage 有权
标题翻译：计算机计算机使用的虚拟机支持
公开(公告)号：US20080250406A1
公开(公告)日：2008-10-09
申请号：US11696271
申请日：2007-04-04
申请人： Todd L. Carpenter , William J. Westerinen , Thomas G. Phillips , Curt Andrew Steeb , Zhangwei Xu , Alexander Frank
发明人： Todd L. Carpenter , William J. Westerinen , Thomas G. Phillips , Curt Andrew Steeb , Zhangwei Xu , Alexander Frank
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F21/53 , G06F21/575 , G06F2009/45587
摘要： A virtual machine monitor provides a trusted operating environment for a software usage metering application when a qualified virtual machine monitor is loaded as part of trusted boot and when all other programs and operating systems run in containers managed by the virtual machine monitor. The virtual machine monitor may also host a locking application for limiting the functionality of the computer if contractual terms of use are not met. Both the metering and locking applications run at a higher privilege level than ring 0, at the same level as the virtual machine monitor.
摘要翻译：当合格的虚拟机监视器作为可信引导的一部分加载时，以及所有其他程序和操作系统在虚拟机监视器管理的容器中运行时，虚拟机监视器为软件使用计量应用程序提供可信赖的操作环境。如果不符合合同使用条款，虚拟机监视器还可以承载用于限制计算机的功能的锁定应用程序。计量和锁定应用程序都以与环0相同的级别运行，处于与虚拟机监视器相同的级别。

5. 发明授权

US07421413B2 Delicate metering of computer usage 失效
标题翻译：电脑使用精巧计量
公开(公告)号：US07421413B2
公开(公告)日：2008-09-02
申请号：US11074558
申请日：2005-03-08
申请人： Alexander Frank , Thomas G. Phillips , George V. Reilly
发明人： Alexander Frank , Thomas G. Phillips , George V. Reilly
IPC分类号： G06F17/00
CPC分类号： G06Q30/06 , G06Q30/0284
摘要： A pay-per-use or metered-use computer uses a balance manager to monitor usage and update a value balance according to a first usage schedule when the computer is in active use. When the activity level of the computer is reduced below a threshold, the balance manager may update the value balance according to a second usage schedule. Activity level of the computer is determined by monitoring the activity level of a one or more components of the computer including input devices, communication controllers, and the processing unit. Rules can be applied to determine when to switch between usage schedules and if credits to the value balance should be made.
摘要翻译：按使用付费或计量使用的计算机使用余额管理器来监视使用情况，并在计算机正在使用时根据第一使用计划更新价值余额。当计算机的活动级别降低到阈值以下时，余额管理器可以根据第二使用进度来更新值平衡。通过监视包括输入设备，通信控制器和处理单元的计算机的一个或多个组件的活动级别来确定计算机的活动级别。可以应用规则来确定什么时候在使用计划之间切换，并且如果应该计算到价值平衡的分数。

6. 发明授权

US08073779B2 Disaggregated secure execution environment 有权
公开(公告)号：US08073779B2
公开(公告)日：2011-12-06
申请号：US11353675
申请日：2006-02-14
申请人： Alexander Frank , Curt A. Steeb , Isaac P. Ahdout , Richard B. Thompson , Thomas G. Phillips , William J. Westerinen , Zhangwei Xu
发明人： Alexander Frank , Curt A. Steeb , Isaac P. Ahdout , Richard B. Thompson , Thomas G. Phillips , William J. Westerinen , Zhangwei Xu
IPC分类号： G06F21/00
摘要： An electronic device, such as, a computer, may be adapted for self-monitoring for compliance to an operating policy. The operating policy may specify a pay-per-use or subscription business model and measurements associated with compliant usage. A secure execution environment may measure usage in accordance with the business model as well as monitor and enforce compliance to the operating policy. To increase the difficulty of attacking or otherwise disabling the secure execution environment, elements of the secure execution environment may be distributed. The distribution points may include other functional elements of the computer, such as interface circuits, or may even be remotely located over a network. An implementation method for disaggregating the secure execution environment is also disclosed.

7. 发明授权

US07603716B2 Distributed network security service 失效
标题翻译：分布式网络安全服务
公开(公告)号：US07603716B2
公开(公告)日：2009-10-13
申请号：US11224605
申请日：2005-09-12
申请人： Alexander Frank , James S. Duffus , Thomas G. Phillips
发明人： Alexander Frank , James S. Duffus , Thomas G. Phillips
IPC分类号： G06F21/00 , G06F21/20
CPC分类号： H04L63/105 , H04L63/145 , H04L63/20 , H04L67/10
摘要： A method and apparatus to distribute a network security service is disclosed. The security software may be distributed across nodes on a network and may use a separate security device that has two channels, one to review network traffic and a second to send updates to other security devices.
摘要翻译：公开了一种分发网络安全服务的方法和装置。安全软件可以分布在网络上的节点上，并且可以使用具有两个通道的单独的安全设备，一个用于检查网络流量，另一个用于向其他安全设备发送更新。

8. 发明授权

US08073442B2 Binding a device to a provider 有权
标题翻译：将设备绑定到提供商
公开(公告)号：US08073442B2
公开(公告)日：2011-12-06
申请号：US11244217
申请日：2005-10-05
申请人： Alexander Frank , Bohdan Raciborski , James S. Duffus , Jeffrey A. Herold , Martin H. Hall , Paul C. Sutton , Thomas G. Phillips
发明人： Alexander Frank , Bohdan Raciborski , James S. Duffus , Jeffrey A. Herold , Martin H. Hall , Paul C. Sutton , Thomas G. Phillips
IPC分类号： G06F7/04
CPC分类号： G06Q30/04 , H04L9/3247 , H04L2209/56
摘要： A pay-per-use or pay-as-you-go computer uses a secure memory to store individual unique program identifiers. Each unique program identifier is associated with a particular hardware or software component, or service, or the entire computer available to a user. By combining the unique program identifier with a computer hardware identifier uniquely identified transactions may be tracked for both billing and reconciliation. Certificates associated with each unique program identifier, and coupled to the hardware identifier, provide a cryptographic basis for mutual verification of messages, requests, configuration instructions, and provisioning.
摘要翻译：按使用付费或即付即用的计算机使用安全内存来存储单独的唯一程序标识符。每个唯一的程序标识符与特定的硬件或软件组件或服务或用户可用的整个计算机相关联。通过将唯一程序标识符与计算机硬件标识符组合，唯一标识的事务可以跟踪计费和对帐。与每个唯一程序标识符相关联并与硬件标识符相关联的证书为消息，请求，配置指令和配置的相互验证提供了密码基础。

9. 发明授权

US08839236B2 Virtual machine support for metered computer usage 有权
标题翻译：虚拟机支持计算机使用
公开(公告)号：US08839236B2
公开(公告)日：2014-09-16
申请号：US11696271
申请日：2007-04-04
申请人： Todd L. Carpenter , William J. Westerinen , Thomas G. Phillips , Curt Andrew Steeb , Zhangwei Xu , Alexander Frank
发明人： Todd L. Carpenter , William J. Westerinen , Thomas G. Phillips , Curt Andrew Steeb , Zhangwei Xu , Alexander Frank
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F21/53 , G06F21/575 , G06F2009/45587
摘要： A virtual machine monitor provides a trusted operating environment for a software usage metering application when a qualified virtual machine monitor is loaded as part of trusted boot and when all other programs and operating systems run in containers managed by the virtual machine monitor. The virtual machine monitor may also host a locking application for limiting the functionality of the computer if contractual terms of use are not met. Both the metering and locking applications run at a higher privilege level than ring 0, at the same level as the virtual machine monitor.
摘要翻译：当合格的虚拟机监视器作为可信引导的一部分加载时，以及所有其他程序和操作系统在虚拟机监视器管理的容器中运行时，虚拟机监视器为软件使用计量应用程序提供可信赖的操作环境。如果不符合合同使用条款，虚拟机监视器还可以承载用于限制计算机的功能的锁定应用程序。计量和锁定应用程序都以与环0相同的级别运行，处于与虚拟机监视器相同的级别。

10. 发明授权

US08464348B2 Isolated computing environment anchored into CPU and motherboard 有权
标题翻译：隔离的计算环境锚定在CPU和主板上
公开(公告)号：US08464348B2
公开(公告)日：2013-06-11
申请号：US11022493
申请日：2004-12-22
申请人： Alexander Frank , Martin H. Hall , Thomas G. Phillips
发明人： Alexander Frank , Martin H. Hall , Thomas G. Phillips
IPC分类号： G06F11/30 , G06F12/14 , G08B29/00 , H04L9/32
CPC分类号： G06F21/10 , G06F21/123 , G06F21/50 , G06F21/725 , G06F2221/2135 , G06F2221/2137 , G06F2221/2153 , G06Q20/145 , G06Q20/341 , G06Q20/3552 , G07F7/082 , G07F7/1008 , G07F7/1016 , H04L9/3247 , H04L63/0823 , H04L67/125 , H04L67/34 , H04L2209/12 , H04L2209/56
摘要： A computer is adapted for pay-for-use operation by adding a isolated computing environment to a standard computer. The isolated computing environment may include a trusted non-volatile memory, a digital signature verification capability, a clock or timer and a logic circuit for triggering execution of a validation program responsive to the clock or timer. The isolated computing environment may be protected from tampering by physical or cryptographic mechanisms, or both. The validation program measures or monitors for non-compliant states of the computer and may enforce sanctions when non-compliant states of the computer are detected.
摘要翻译：计算机适用于通过向标准计算机添加隔离的计算环境进行付费用途操作。隔离的计算环境可以包括可信非易失性存储器，数字签名验证能力，时钟或定时器以及用于响应于时钟或定时器触发执行验证程序的逻辑电路。孤立的计算环境可以通过物理或加密机制或两者来保护免受篡改。验证程序测量或监视计算机的不符合条件的状态，并且可以在检测到计算机的非符合状态时执行制裁。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式