专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08601170B1 Managing firmware update attempts 有权
公开(公告)号：US08601170B1
公开(公告)日：2013-12-03
申请号：US12555455
申请日：2009-09-08
申请人： Michael David Marr , Pradeep Vincent , Matthew T. Corddry , James R. Hamilton
发明人： Michael David Marr , Pradeep Vincent , Matthew T. Corddry , James R. Hamilton
IPC分类号： G06F3/00 , G06F13/28 , G06F11/30 , G06F9/44
CPC分类号： G06F21/572 , G06F8/65 , G06F11/3003 , G06F11/3051 , G06F21/57 , G06F21/575 , G06F21/577 , G06F2201/865 , G06F2201/88 , G06F2221/033 , H04L67/10
摘要： Attempts to update confirmation information or firmware for a hardware device can be monitored using a secure counter that is configured to monotonically adjust a current value of the secure counter for each update or update attempt. The value of the counter can be determined every time the validity of the firmware is confirmed, and this value can be stored to a secure location. At subsequent times, such as during a boot process, the actual value of the counter can be determined and compared with the expected value. If the values do not match, such that the firmware may be in an unexpected state, an action can be taken, such as to prevent access to, or isolate, the hardware until such time as the firmware can be validated or updated to an expected state.

2. 发明授权

US08971538B1 Firmware validation from an external channel 有权
标题翻译：来自外部通道的固件验证
公开(公告)号：US08971538B1
公开(公告)日：2015-03-03
申请号：US12555436
申请日：2009-09-08
申请人： Michael David Marr , Pradeep Vincent , Matthew T. Corddry , James R. Hamilton
发明人： Michael David Marr , Pradeep Vincent , Matthew T. Corddry , James R. Hamilton
IPC分类号： H04L29/06 , G06F9/445 , H04L29/08
CPC分类号： H04L9/3236 , G06F8/65 , G06F21/00 , H04L9/30 , H04L63/145 , H04L67/34
摘要： The state of firmware for devices on a provisioned host machine can be validated independent of the host CPU(s) or other components exposed to the user. A port that is not fully exposed or accessible to the user can be used to perform a validation process on firmware without accessing a CPU of the host device. The firmware can be scanned and a hashing or similar algorithm can be used to determine validation information, such as hash values, for the firmware, which can be compared to validation information stored in a secure location. If the current and stored validation information do not match, one or more remedial actions can be taken to address the firmware being in an unknown or unintended state.
摘要翻译：配置的主机上的设备的固件状态可以独立于主机CPU或暴露给用户的其他组件进行验证。用户未完全暴露或可访问的端口可用于在不访问主机设备的CPU的情况下对固件执行验证过程。可以扫描固件，并且可以使用散列或类似的算法来确定固件的验证信息，例如哈希值，这可以与存储在安全位置的验证信息进行比较。如果当前和存储的验证信息不匹配，则可以采取一种或多种补救措施来解决处于未知或非预期状态的固件。

3. 发明授权

US09565207B1 Firmware updates from an external channel 有权
标题翻译：来自外部通道的固件更新
公开(公告)号：US09565207B1
公开(公告)日：2017-02-07
申请号：US12554690
申请日：2009-09-04
申请人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
发明人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
IPC分类号： G06F15/173 , H04L29/06 , G06F21/00
CPC分类号： H04L63/145 , G06F21/00 , G06F21/572 , G06F2221/2107 , H04L9/0894 , H04L9/3247
摘要： When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.
摘要翻译：当向用户提供对至少一部分设备硬件的本地访问时，可以通过控制用于更新该信息的机制来阻止用户修改固件和其他配置信息。在一些实施例中，可以使用非对称密钥方法来加密或签名固件。在其他情况下，只能通过不暴露给客户的通道或端口启用固件更新，或仅映射用户可访问的硬件部分来控制访问。在其他实施例中，可以通过在可修改固件的初始可变性周期之后仅在机器上提供用户来防止用户修改固件，使得当固件可以被更新时，用户永远不能访问设备。上述的组合和变化也可以使用。

4. 发明授权

US09148413B1 Secured firmware updates 有权
标题翻译：安全固件更新
公开(公告)号：US09148413B1
公开(公告)日：2015-09-29
申请号：US13539069
申请日：2012-06-29
申请人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
发明人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
IPC分类号： H04L29/06 , G06F21/00
CPC分类号： G06F8/65 , G06F21/572 , G06F21/629 , H04L63/0428 , H04L63/08 , H04L63/20
摘要： When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.
摘要翻译：当向用户提供对至少一部分设备硬件的本地访问时，可以通过控制用于更新该信息的机制来阻止用户修改固件和其他配置信息。在一些实施例中，可以使用非对称密钥方法来加密或签名固件。在其他情况下，只能通过不暴露给客户的通道或端口启用固件更新，或仅映射用户可访问的硬件部分来控制访问。在其他实施例中，可以通过在可修改固件的初始可变性周期之后仅在机器上提供用户来防止用户修改固件，使得当固件可以被更新时，用户永远不能访问设备。上述的组合和变化也可以使用。

5. 发明授权

US08381264B1 Managing hardware reboot and reset in shared environments 有权
标题翻译：在共享环境中管理硬件重启和重置
公开(公告)号：US08381264B1
公开(公告)日：2013-02-19
申请号：US12557411
申请日：2009-09-10
申请人： Matthew T. Corddry , Michael David Marr , James R. Hamilton , Peter N. De Santis
发明人： Matthew T. Corddry , Michael David Marr , James R. Hamilton , Peter N. De Santis
IPC分类号： G06F7/04 , G06F15/16 , G06F17/30 , H04L29/06
CPC分类号： H04L63/10 , G06F9/4401 , H04L67/125 , H04L67/22
摘要： In an environment such as a cloud computing environment where various guests can be provisioned on a host machine or other hardware device, it can be desirable to prevent those users from rebooting or otherwise restarting the machine or other resources using unauthorized information or images that can be obtained from across the network. A cloud manager can cause one or more network switches or other routing or communication processing components to deny communication access between user-accessible ports on a machine or device and the provisioning systems, or other specific network resources, such that the user cannot cause the host machine to pull information from those resources upon a restart or reboot of the machine. Further, various actions can be taken upon a reboot or attempted reboot, such as to isolate the host machine or even power off the specific machine.
摘要翻译：在诸如云计算环境的环境中，可以在主机或其他硬件设备上配置各种客户端，可能希望防止这些用户重新启动或以其他方式重新启动机器或其他资源，使用未经授权的信息或图像可以从网络获得。云管理器可以使一个或多个网络交换机或其他路由或通信处理组件拒绝机器或设备上的用户可访问端口与供应系统或其他特定网络资源之间的通信接入，使得用户不能使主机机器在重新启动或重新启动机器时从这些资源中提取信息。此外，可以在重新启动或尝试重新启动时执行各种操作，例如隔离主机或甚至断开特定机器的电源。

6. 发明授权

US08887144B1 Firmware updates during limited time period 有权
标题翻译：有限时间内的固件更新
公开(公告)号：US08887144B1
公开(公告)日：2014-11-11
申请号：US12554770
申请日：2009-09-04
申请人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
发明人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
IPC分类号： G06F9/44 , G06F9/445 , H04L29/08
CPC分类号： G06F9/4416 , G06F8/65 , G06F21/572 , H04L41/082 , H04L63/126 , H04L67/34
摘要： When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.
摘要翻译：当向用户提供对至少一部分设备硬件的本地访问时，可以通过控制用于更新该信息的机制来阻止用户修改固件和其他配置信息。在一些实施例中，可以使用非对称密钥方法来加密或签名固件。在其他情况下，只能通过不暴露给客户的通道或端口启用固件更新，或仅映射用户可访问的硬件部分来控制访问。在其他实施例中，可以通过在可修改固件的初始可变性周期之后仅在机器上提供用户来防止用户修改固件，使得当固件可以被更新时，用户永远不能访问设备。上述的组合和变化也可以使用。

7. 发明授权

US08214653B1 Secured firmware updates 有权
标题翻译：安全固件更新
公开(公告)号：US08214653B1
公开(公告)日：2012-07-03
申请号：US12554736
申请日：2009-09-04
申请人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
发明人： Michael David Marr , Matthew T. Corddry , James R. Hamilton
IPC分类号： G06F21/00
CPC分类号： G06F8/65 , G06F21/572 , G06F21/629 , H04L63/0428 , H04L63/08 , H04L63/20
摘要： When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.
摘要翻译：当向用户提供对至少一部分设备硬件的本地访问时，可以通过控制用于更新该信息的机制来阻止用户修改固件和其他配置信息。在一些实施例中，可以使用非对称密钥方法来加密或签名固件。在其他情况下，只能通过不暴露给客户的通道或端口启用固件更新，或仅映射用户可访问的硬件部分来控制访问。在其他实施例中，可以通过在可修改固件的初始可变性周期之后仅在机器上提供用户来防止用户修改固件，使得当固件可以被更新时，用户永远不能访问设备。上述的组合和变化也可以使用。

8. 发明授权

US10177934B1 Firmware updates inaccessible to guests 有权
公开(公告)号：US10177934B1
公开(公告)日：2019-01-08
申请号：US12554777
申请日：2009-09-04
申请人： Michael David Marr , Pradeep Vincent , James R. Hamilton
发明人： Michael David Marr , Pradeep Vincent , James R. Hamilton
IPC分类号： H04L12/66 , H04L12/40 , H04L29/06 , H04L29/08 , G06F8/65 , G06F9/4401
摘要： When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.

9. 发明授权

US09037922B1 Monitoring and analysis of operating states in a computing environment 有权
标题翻译：在计算环境中监视和分析运行状态
公开(公告)号：US09037922B1
公开(公告)日：2015-05-19
申请号：US13461068
申请日：2012-05-01
申请人： Luis Felipe Cabrera , Eric Jason Brandwine , James R. Hamilton , Jonathan A. Jenkins , Matthew D. Klein , Nathan Thomas , Pradeep Vincent
发明人： Luis Felipe Cabrera , Eric Jason Brandwine , James R. Hamilton , Jonathan A. Jenkins , Matthew D. Klein , Nathan Thomas , Pradeep Vincent
IPC分类号： G06F11/00 , G06F11/30
CPC分类号： G06F11/3495 , G06F11/0709 , G06F11/076 , G06F11/079 , G06F11/3006 , G06F11/3065 , G06F11/3072 , G06F11/3409
摘要： A set of techniques is described for monitoring and analyzing crashes and other malfunctions in a multi-tenant computing environment (e.g. cloud computing environment). The computing environment may host many applications that are executed on different computing resource combinations. The combinations may include varying types and versions of hardware or software resources. A monitoring service is deployed to gather statistical data about the failures occurring in the computing environment. The statistical data is then analyzed to identify abnormally high failure patterns. The failure patterns may be associated with particular computing resource combinations being used to execute particular types of applications. Based on these failure patterns, suggestions can be issued to a user to execute the application using a different computing resource combination. Alternatively, the failure patterns may be used to modify or update the various resources in order to correct the potential malfunctions caused by the resource.
摘要翻译：描述了一组技术来监视和分析多租户计算环境（例如云计算环境）中的崩溃和其他故障。计算环境可以承载在不同的计算资源组合上执行的许多应用。组合可以包括硬件或软件资源的不同类型和版本。部署监控服务来收集有关在计算环境中发生故障的统计数据。然后分析统计数据以识别异常高的故障模式。故障模式可以与用于执行特定类型的应用的特定计算资源组合相关联。基于这些故障模式，可以向用户发出建议，以使用不同的计算资源组合来执行应用。或者，可以使用故障模式来修改或更新各种资源，以便校正由资源引起的潜在的故障。

10. 发明授权

US10120714B1 Customizing computing resources for application workload 有权
公开(公告)号：US10120714B1
公开(公告)日：2018-11-06
申请号：US13461030
申请日：2012-05-01
申请人： Luis Felipe Cabrera , Eric Jason Brandwine , James R. Hamilton , Jonathan A. Jenkins , Matthew D. Klein , Nathan Thomas , Pradeep Vincent
发明人： Luis Felipe Cabrera , Eric Jason Brandwine , James R. Hamilton , Jonathan A. Jenkins , Matthew D. Klein , Nathan Thomas , Pradeep Vincent
IPC分类号： G06F9/50 , H04L12/24 , H04L12/911
摘要： A set of techniques for customizing resources for the workload of an application is described. The application can be received and hosted on a set of hardware and software resources of a service provider, which may include server instances, databases, load balancers and the like. Once the application is deployed and processing workload, it can be monitored to gather runtime trace information associated with the workload. This runtime trace information can be analyzed for potential optimizations and improvements to the set of resources or their configuration. Additionally, the user is enabled to input hardware/software specifications for the resources used to run the application. The service provider can use these specifications, along with the runtime trace information to optimize the resource stack used to execute the user's application.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式