专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08544014B2 Scheduling threads in multi-core systems 有权
标题翻译：在多核系统中调度线程
公开(公告)号：US08544014B2
公开(公告)日：2013-09-24
申请号：US11782000
申请日：2007-07-24
申请人： Yadhu Gopalan , Bor-ming Hsieh , Mark Miller
发明人： Yadhu Gopalan , Bor-ming Hsieh , Mark Miller
IPC分类号： G06F9/46
CPC分类号： G06F9/5033 , G06F2209/5021
摘要： Scheduling of threads in a multi-core system is performed using per-processor queues for each core to hold threads with fixed affinity for each core. Cores are configured to pick the highest priority thread among the global run queue, which holds threads without affinity, and their respective per-processor queue. To select between two threads with same priority on both queues, the threads are assigned sequence numbers based on their time of arrival. The sequence numbers may be weighted for either queue to prioritize one over the other.
摘要翻译：使用每个核心的每个处理器队列来执行多核系统中的线程调度，以容纳对每个核心具有固定亲和力的线程。内核被配置为在全局运行队列中选择最高优先级的线程，全局运行队列保持没有关联性的线程，以及它们各自的每个处理器队列。要在两个队列中选择具有相同优先级的两个线程之间，线程将根据其到达时间分配序列号。可以为任一队列对序列号进行加权，以优先于另一队列。

2. 发明授权

US08327363B2 Application compatibility in multi-core systems 有权
标题翻译：多核系统中的应用兼容性
公开(公告)号：US08327363B2
公开(公告)日：2012-12-04
申请号：US11782060
申请日：2007-07-24
申请人： Yadhu Gopalan , Bor-ming Hsieh , Mark Miller
发明人： Yadhu Gopalan , Bor-ming Hsieh , Mark Miller
IPC分类号： G06F9/46
CPC分类号： G06F9/5033 , G06F9/4881 , G06F9/52 , G06F2209/483 , G06F2209/5018
摘要： Scheduling of threads in a multi-core system running various legacy applications along with multi-core compatible applications is configured such that threads from older single thread applications are assigned fixed affinity. Threads from multi-thread/single core applications are scheduled such that one thread at a time is made available to the cores based on the thread priority preventing conflicts and increasing resource efficiency. Threads from multi-core compatible applications are handled regularly.
摘要翻译：配置运行各种遗留应用程序以及多核兼容应用程序的多核系统中的线程的调度，使得来自较旧单线程应用程序的线程被分配固定的亲和度。调度来自多线程/单核心应用程序的线程，使得一个线程一次可用于基于线程优先级的核心，以防止冲突并提高资源效率。定期处理来自多核兼容应用程序的线程。

3. 发明授权

US08397290B2 Granting least privilege access for computing processes 失效
标题翻译：为计算过程授予最少权限访问权限
公开(公告)号：US08397290B2
公开(公告)日：2013-03-12
申请号：US12163164
申请日：2008-06-27
申请人： Neil Laurence Coles , Scott Randall Shell , Upender Reddy Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
发明人： Neil Laurence Coles , Scott Randall Shell , Upender Reddy Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
IPC分类号： G06F21/00
CPC分类号： G06F21/6281 , G06F9/468 , G06F2221/2145
摘要： Embodiments provide a security infrastructure that may be configured to run on top of an existing operating system to control what resources can be accessed by an applications and what APIs an application can call. Security decisions are made by taking into account both the current thread's identity and the current thread's call chain context to enable minimal privilege by default. The current thread context is captured and a copy of it is created to be used to perform security checks asynchronously. Every thread in the system has an associated identity. To obtain access to a particular resource, all the callers on the current thread are analyzed to make sure that each caller and thread has access to that resource. Only when each caller and thread has access to that resource is the caller given access to that resource.
摘要翻译：实施例提供了可被配置为在现有操作系统之上运行以控制应用程序可以访问哪些资源以及应用程序可以调用哪些API的安全基础设施。通过考虑当前线程的身份和当前线程的调用链上下文来进行安全性决策，以在默认情况下实现最小权限。捕获当前线程上下文，并创建其副本以用于异步执行安全检查。系统中的每个线程都有一个关联的身份。为了获得对特定资源的访问，分析当前线程上的所有调用者，以确保每个调用者和线程都可以访问该资源。只有当每个调用者和线程都能访问该资源时，调用者才能访问该资源。

4. 发明申请

US20090328180A1 Granting Least Privilege Access For Computing Processes 失效
标题翻译：为计算过程授予最低权限
公开(公告)号：US20090328180A1
公开(公告)日：2009-12-31
申请号：US12163164
申请日：2008-06-27
申请人： Neil Laurence Coles , Scott Randall Shell , Upender Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
发明人： Neil Laurence Coles , Scott Randall Shell , Upender Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
IPC分类号： H04L9/32 , G06F21/20
CPC分类号： G06F21/6281 , G06F9/468 , G06F2221/2145
摘要： Embodiments provide a security infrastructure that may be configured to run on top of an existing operating system to control what resources can be accessed by an applications and what APIs an application can call. Security decisions are made by taking into account both the current thread's identity and the current thread's call chain context to enable minimal privilege by default. The current thread context is captured and a copy of it is created to be used to perform security checks asynchronously. Every thread in the system has an associated identity. To obtain access to a particular resource, all the callers on the current thread are analyzed to make sure that each caller and thread has access to that resource. Only when each caller and thread has access to that resource is the caller given access to that resource.
摘要翻译：实施例提供了可被配置为在现有操作系统之上运行以控制应用程序可以访问哪些资源以及应用程序可以调用哪些API的安全基础设施。通过考虑当前线程的身份和当前线程的调用链上下文来进行安全性决策，以在默认情况下实现最小权限。捕获当前线程上下文，并创建其副本以用于异步执行安全检查。系统中的每个线程都有一个关联的身份。为了获得对特定资源的访问，分析当前线程上的所有调用者，以确保每个调用者和线程都可以访问该资源。只有当每个调用者和线程都能访问该资源时，调用者才能访问该资源。

5. 发明申请

US20060101194A1 System and method for executing binary images 有权
公开(公告)号：US20060101194A1
公开(公告)日：2006-05-11
申请号：US11305917
申请日：2005-12-19
申请人： Michael Malueg , Larry Morris , Bor-Ming Hsieh , Yadhu Gopalan
发明人： Michael Malueg , Larry Morris , Bor-Ming Hsieh , Yadhu Gopalan
IPC分类号： G06F12/00
CPC分类号： G06F9/44573
摘要： A system that determines where a particular XIP component is stored on a medium and loads the component into RAM for execution, providing the ability to demand page specific components at will from storage media, frees up working RAM on memory constrained devices. A Binary File System uses a generic block driver component that loads the XIP code from a block based storage medium. Features of the file system include the ability to load pre-“fixed up” components from a block based device. The invention thus allows an operating system to load code that was previously Executed In Place (XIP) from a block-oriented device.

6. 发明申请

US20050209991A1 Computing device with relatively limited storage space and operating / file system thereof 有权
标题翻译：具有相对有限的存储空间的计算设备及其操作/文件系统
公开(公告)号：US20050209991A1
公开(公告)日：2005-09-22
申请号：US11001280
申请日：2004-12-01
申请人： Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh , David Kelley
发明人： Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh , David Kelley
IPC分类号： G06F12/00 , G06F3/06 , G06F9/445 , G06F12/02 , G06F7/00
CPC分类号： G06F12/0246 , G06F3/0607 , G06F3/064 , G06F3/0679 , G06F8/654 , G06F12/0292
摘要： A computing device includes a processor, a storage device having an executable file, and a file system for executing the file in place on the storage device on behalf of the processor. The file is divided into multiple non-contiguous fragments on the storage device, and the computing device further includes a virtual address translator interposed between the processor and the storage device for translating between physical addresses of the fragments of the file on the storage device and corresponding virtual addresses employed by the processor.
摘要翻译：计算设备包括处理器，具有可执行文件的存储设备和用于代表处理器在存储设备上执行文件的文件系统。该文件在存储设备上分为多个不连续的片段，并且计算设备还包括插入在处理器和存储设备之间的虚拟地址转换器，用于在存储设备上的文件片段的物理地址和相应的处理器采用的虚拟地址。

7. 发明申请

US20070076475A1 SYSTEM AND METHOD FOR EXECUTING BINARY IMAGES 审中-公开
标题翻译：用于执行二进制图像的系统和方法
公开(公告)号：US20070076475A1
公开(公告)日：2007-04-05
申请号：US11539849
申请日：2006-10-09
申请人： Michael Malueg , Larry Morris , Bor-Ming Hsieh , Yadhu Gopalan
发明人： Michael Malueg , Larry Morris , Bor-Ming Hsieh , Yadhu Gopalan
IPC分类号： G11C16/04
CPC分类号： G06F9/44573
摘要： A system that determines where a particular XIP component is stored on a medium and loads the component into RAM for execution, providing the ability to demand page specific components at will from storage media, frees up working RAM on memory constrained devices. A Binary File System uses a generic block driver component that loads the XIP code from a block based storage medium. Features of the file system include the ability to load pre-“fixed up” components from a block based device.. The invention thus allows an operating system to load code that was previously Executed In Place (XIP) from a block-oriented device.
摘要翻译：确定特定XIP组件在介质上的存储位置并将组件加载到RAM中以执行的系统，提供从存储介质随意请求页面特定组件的能力，释放存储器受限设备上的工作RAM。二进制文件系统使用从基于块的存储介质加载XIP代码的通用块驱动程序组件。文件系统的特征包括从基于块的设备加载预“固定”组件的能力。因此，本发明允许操作系统从面向块的设备加载先前执行的（XIP）的代码。

8. 发明授权

US07930760B2 Centralized enforcement of name-based computer system security rules 有权
标题翻译：集中执行基于名称的计算机系统安全规则
公开(公告)号：US07930760B2
公开(公告)日：2011-04-19
申请号：US12163372
申请日：2008-06-27
申请人： Neil Coles , Yadhu Gopalan , Christopher Jordan , Matthew Lyons , Andrew Rogers , Upender Sandadi , Scott Shell , Zoheb Vacheri , Angelo Vals , Sharath Viswanathan , Loren M. Kohnfelder
发明人： Neil Coles , Yadhu Gopalan , Christopher Jordan , Matthew Lyons , Andrew Rogers , Upender Sandadi , Scott Shell , Zoheb Vacheri , Angelo Vals , Sharath Viswanathan , Loren M. Kohnfelder
IPC分类号： G06F21/00 , G06F21/22
CPC分类号： G06F21/6227 , G06F2221/2141
摘要： This disclosure describes techniques of using a centralized rule database to control the abilities of software processes to perform actions with regard to resources provided by a computer. As described herein, each software process executing in a computer executes within a chamber and each resource provided by the computer is associated with a canonical name that uniquely identifies the resource. Furthermore, the computer stores a set of security rules in a centralized rule database. In addition, this disclosure describes techniques of enforcing the rules stored in the centralized rule database.
摘要翻译：本公开描述了使用集中规则数据库来控制软件过程对由计算机提供的资源执行动作的能力的技术。如本文所述，在计算机中执行的每个软件进程在一个室内执行，并且由该计算机提供的每个资源与唯一地标识该资源的规范名称相关联。此外，计算机将一组安全规则存储在集中规则数据库中。此外，本公开描述了实施存储在集中式规则数据库中的规则的技术。

9. 发明授权

US07613738B2 FAT directory structure for use in transaction safe file system 有权
标题翻译： FAT目录结构用于事务安全文件系统
公开(公告)号：US07613738B2
公开(公告)日：2009-11-03
申请号：US11653585
申请日：2007-01-16
申请人： Sachin Patel , Yadhu Gopalan , Andrew Rogers
发明人： Sachin Patel , Yadhu Gopalan , Andrew Rogers
IPC分类号： G06F17/30
CPC分类号： G06F17/30138 , G06F17/30227
摘要： Directories in a file system are defined with a dummy cluster in a file allocation table as the initial entry. Subsequent clusters in a directory's definition may define any data for the directory that can be changed in a transaction-safe mode. A directory may be modified in a transaction-safe mode by modifying any of the subsequent clusters while tracking changes in a second file allocation table. When the changes have been made to the directory, a pointer to the second file allocation table may be switched to indicate that the second file allocation table is now last known good. The first file allocation table may then be synchronized with the second.
摘要翻译：文件系统中的目录使用文件分配表中的虚拟集群作为初始条目进行定义。目录定义中的后续集群可以定义可以在事务安全模式下更改的目录的任何数据。可以通过在跟踪第二个文件分配表中的更改的同时修改任何后续集群来以事务安全模式修改目录。当对目录进行了更改时，可以切换指向第二文件分配表的指针，以指示第二文件分配表现在最后一个已知的。然后可以将第一文件分配表与第二文件分配表同步。

10. 发明申请

US20090249436A1 Centralized Enforcement of Name-Based Computer System Security Rules 有权
标题翻译：基于名称的计算机系统安全规则的集中执行
公开(公告)号：US20090249436A1
公开(公告)日：2009-10-01
申请号：US12163372
申请日：2008-06-27
申请人： Neil Coles , Yadhu Gopalan , Christopher Jordan , Matthew Lyons , Andrew Rogers , Upender Sandadi , Scott Shell , Zoheb Vacheri , Angelo Vals , Sharath Viswanathan , Loren M. Kohnfelder
发明人： Neil Coles , Yadhu Gopalan , Christopher Jordan , Matthew Lyons , Andrew Rogers , Upender Sandadi , Scott Shell , Zoheb Vacheri , Angelo Vals , Sharath Viswanathan , Loren M. Kohnfelder
IPC分类号： G06F21/00
CPC分类号： G06F21/6227 , G06F2221/2141
摘要： This disclosure describes techniques of using a centralized rule database to control the abilities of software processes to perform actions with regard to resources provided by a computer. As described herein, each software process executing in a computer executes within a chamber and each resource provided by the computer is associated with a canonical name that uniquely identifies the resource. Furthermore, the computer stores a set of security rules in a centralized rule database. In addition, this disclosure describes techniques of enforcing the rules stored in the centralized rule database.
摘要翻译：本公开描述了使用集中式规则数据库来控制软件过程对由计算机提供的资源执行动作的能力的技术。如本文所述，在计算机中执行的每个软件进程在一个室内执行，并且由该计算机提供的每个资源与唯一地标识该资源的规范名称相关联。此外，计算机将一组安全规则存储在集中规则数据库中。此外，本公开描述了实施存储在集中式规则数据库中的规则的技术。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式