专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US07698731B2 Security architecture and mechanism to access and use security components in operating system 有权
标题翻译：在操作系统中访问和使用安全组件的安全架构和机制
公开(公告)号：US07698731B2
公开(公告)日：2010-04-13
申请号：US10973067
申请日：2004-10-25
申请人： Stephen L. Johnson , Jinhong Katherine Guo , Il-Pyung Park
发明人： Stephen L. Johnson , Jinhong Katherine Guo , Il-Pyung Park
IPC分类号： G06F17/00
CPC分类号： H04L63/0263 , H04L63/04
摘要： A security architecture is provided for accessing security components associated with an operating system. The security architecture is generally comprised of: a policy tree storing a plurality of security policies, where each security policy is define as at least one system call which correlates to a security operation and a corresponding security component for executing the security operation; and a policy manager adapted to intercept system calls from the operating system and operable to determine an applicable response based on the policy tree. The policy tree and the policy manager reside in a protected memory space of the execution environment.
摘要翻译：提供安全架构用于访问与操作系统相关联的安全组件。安全架构通常包括：存储多个安全策略的策略树，其中每个安全策略被定义为与安全操作相关联的至少一个系统调用和用于执行安全操作的对应的安全组件; 以及策略管理器，其适于拦截来自所述操作系统的系统呼叫并可操作以基于所述策略树来确定适用的响应。策略树和策略管理器驻留在执行环境的受保护的内存空间中。

12. 发明申请

US20080120720A1 Intrusion detection via high dimensional vector matching 审中-公开
标题翻译：通过高维矢量匹配的入侵检测
公开(公告)号：US20080120720A1
公开(公告)日：2008-05-22
申请号：US11601864
申请日：2006-11-17
申请人： Jinhong Guo , Daniel Weber , Stephen Johnson , Il-Pyung Park
发明人： Jinhong Guo , Daniel Weber , Stephen Johnson , Il-Pyung Park
IPC分类号： G06F21/00
CPC分类号： G06F21/552
摘要： A method is provided for detecting intrusions to a computing environment. The method includes: monitoring system calls made to an operating system during a defined period of time; evaluating the system calls made during the defined time period in relation to system calls made during known intrusions; and evaluating the temporal sequence in which system calls were made during the defined time period when the system calls made match the system calls made during a known intrusion. If a potential intrusion is detected at this stage, then a more complicated detection scheme may be performed by a second detection scheme. For instance, the second detection scheme may assess the temporal sequence in which the system calls were made and/or the system files accessed by the system calls.
摘要翻译：提供了一种用于检测对计算环境的入侵的方法。该方法包括：在定义的时间段内监视对操作系统的系统调用; 评估在定义的时间段内与在已知入侵期间进行的系统呼叫相关的系统呼叫; 并且在系统调用所规定的时间段期间评估进行系统调用的时间序列，使得在已知入侵期间进行的系统呼叫匹配。如果在该阶段检测到潜在入侵，则可以通过第二检测方案来执行更复杂的检测方案。例如，第二检测方案可以评估系统调用的时间顺序和/或系统调用所访问的系统文件。

13. 发明申请

US20050080890A1 Server load balancing apparatus and method using MPLS session 有权
标题翻译：使用MPLS会话的服务器负载平衡设备和方法
公开(公告)号：US20050080890A1
公开(公告)日：2005-04-14
申请号：US10826205
申请日：2004-04-15
申请人： Sun Yang , Hyeon Yoon , Pyung Park , Ho Yoon
发明人： Sun Yang , Hyeon Yoon , Pyung Park , Ho Yoon
IPC分类号： H04L12/28 , G06F15/173 , H04L29/06 , H04L29/08
CPC分类号： H04L67/1008 , H04L67/1002 , H04L67/1017 , H04L67/1023 , H04L69/22
摘要： The present invention provides a server load balancing apparatus using MPLS session labels. The server load balancing apparatus includes a packet analyzing unit, a load balancing processing unit, a session label switching unit, a session managing unit, and a session label managing unit. The packet analyzing unit inspects whether a session label has been attached to a received packet, analyzes header information of the received packet to learn session information, and attaches a session label to a header of the received packet. The load balancing processing unit assigns a server to a session of the received packet without the session label attached. The session label switching unit hardware-switches the received packet with the session label attached using only the session label information. The session managing unit manages and maintains relevant information and states of sessions. The session label managing unit manages the session label.
摘要翻译：本发明提供一种使用MPLS会话标签的服务器负载平衡装置。服务器负载平衡装置包括分组分析单元，负载平衡处理单元，会话标签切换单元，会话管理单元和会话标签管理单元。分组分析单元检查会话标签是否附加到接收到的分组，分析接收分组的报头信息以学习会话信息，并将会话标签附加到接收分组的报头。负载平衡处理单元将服务器分配给接收到的分组的会话，而不附加会话标签。会话标签交换单元使用仅使用会话标签信息的会话标签硬件切换接收的分组。会话管理单元管理和维护会话的相关信息和状态。会话标签管理单元管理会话标签。

14. 发明授权

US07774599B2 Methodologies to secure inter-process communication based on trust 有权
标题翻译：基于信任来确保进程间通信的方法
公开(公告)号：US07774599B2
公开(公告)日：2010-08-10
申请号：US11532159
申请日：2006-09-15
申请人： Jinhong Guo , Stephen L. Johnson , Il-Pyung Park , Lasse Bigum , Henrik Davidsen , Lars T. Mikkelsen , Egon Pedersen , Anders Ravn , Emmanuel Fleury
发明人： Jinhong Guo , Stephen L. Johnson , Il-Pyung Park , Lasse Bigum , Henrik Davidsen , Lars T. Mikkelsen , Egon Pedersen , Anders Ravn , Emmanuel Fleury
IPC分类号： H04L29/06
CPC分类号： H04L9/3263 , G06F21/57 , G06F21/606 , H04L9/3247 , H04L2209/08 , H04L2209/56
摘要： A system securing inter-process communication (IPC) based on trust includes a user quota mechanism to provide resource management of IPC's. A single user is allowed to allocate a fixed amount of objects less than a system maximum. A trusted IPC mechanism mediates access to IPC objects by employing signed executables signed by a key and containing a list of trusted keys. A trust relationship is used among a set of subjects connected to an IPC to determine whether communication can be carried out between processes. In order for the processes to communicate via an IPC, either they have to trust each other, or a kernel must trust one process and that process must also trust the other process.
摘要翻译：基于信任确保进程间通信（IPC）的系统包括用户配额机制，以提供IPC的资源管理。允许单个用户分配少于系统最大值的固定数量的对象。受信任的IPC机制通过使用由密钥签名并包含可信密钥列表的签名的可执行文件来介入对IPC对象的访问。在与IPC连接的一组主题中使用信任关系，以确定是否可以在进程之间执行通信。为了使进程通过IPC进行通信，或者它们必须相互信任，或内核必须信任一个进程，该进程也必须信任另一进程。

15. 发明申请

US20060090193A1 Security architecture and mechanism to access and use security components in operating system 有权
标题翻译：在操作系统中访问和使用安全组件的安全架构和机制
公开(公告)号：US20060090193A1
公开(公告)日：2006-04-27
申请号：US10973067
申请日：2004-10-25
申请人： Stephen Johnson , Jinhong Guo , Il-Pyung Park
发明人： Stephen Johnson , Jinhong Guo , Il-Pyung Park
IPC分类号： H04L9/00
CPC分类号： H04L63/0263 , H04L63/04
摘要： A security architecture is provided for accessing security components associated with an operating system. The security architecture is generally comprised of: a policy tree storing a plurality of security policies, where each security policy is define as at least one system call which correlates to a security operation and a corresponding security component for executing the security operation; and a policy manager adapted to intercept system calls from the operating system and operable to determine an applicable response based on the policy tree. The policy tree and the policy manager reside in a protected memory space of the execution environment.
摘要翻译：提供安全架构用于访问与操作系统相关联的安全组件。安全架构通常包括：存储多个安全策略的策略树，其中每个安全策略被定义为与安全操作相关联的至少一个系统调用和用于执行安全操作的对应的安全组件; 以及策略管理器，其适于拦截来自所述操作系统的系统呼叫并可操作以基于所述策略树来确定适用的响应。策略树和策略管理器驻留在执行环境的受保护的内存空间中。

16. 发明申请

US20050273619A1 Mandatory access control (MAC) method 有权
标题翻译：强制访问控制（MAC）方法
公开(公告)号：US20050273619A1
公开(公告)日：2005-12-08
申请号：US10863784
申请日：2004-06-08
申请人： Jinhong Katherine Guo , Stephen Johnson , Il-Pyung Park
发明人： Jinhong Katherine Guo , Stephen Johnson , Il-Pyung Park
IPC分类号： G06F21/00 , H04K1/00 , H04L29/06
CPC分类号： H04L63/102 , G06F21/6218 , G06F2221/2113 , Y10S707/99939
摘要： A mandatory access control method for securing an operating system is presented. A first integrity subject reads a first object. The first integrity subject attempts to read a second object. It is determined that a conflict exists between the first and second objects. At least one security rule is applied to the conflict between the first and the second objects.
摘要翻译：提出了一种用于保护操作系统的强制访问控制方法。第一个完整性主体读取第一个对象。第一个完整性主体尝试读取第二个对象。确定在第一和第二对象之间存在冲突。至少一个安全规则被应用于第一和第二对象之间的冲突。

17. 发明申请

US20050257093A1 Dynamic update of pluggable modules using a reference manager 审中-公开
标题翻译：使用引用管理器动态更新可插拔模块
公开(公告)号：US20050257093A1
公开(公告)日：2005-11-17
申请号：US10829096
申请日：2004-04-21
申请人： Stephen Johnson , Jinhong Guo , Il-Pyung Park
发明人： Stephen Johnson , Jinhong Guo , Il-Pyung Park
IPC分类号： G06F9/445 , G06F11/00
CPC分类号： G06F8/656
摘要： A method is provided for replacing a loadable software module in an operating system. The method include: maintaining a reference count for a loadable software module associated with a kernel of the operating system; linking a replacement software module for the loadable software module into the kernel of the operating system; receiving a resource request for the loadable software module after the replacement software module is linked into the kernel; and directing the resource request for the loadable software module to the replacement software module. The method may further include unlinking the loadable software module from the kernel of the operating system when there are no longer any active references to the loadable module.
摘要翻译：提供了一种用于替换操作系统中的可加载软件模块的方法。该方法包括：维护与操作系统的内核相关联的可加载软件模块的引用计数; 将可加载软件模块的替换软件模块链接到操作系统的内核; 在替换软件模块链接到内核之后，接收可加载软件模块的资源请求; 并将可加载软件模块的资源请求定向到替换软件模块。该方法还可以包括当不再对可加载模块的任何活动引用时，将可加载的软件模块与操作系统的内核断开连接。

18. 发明授权

US5821812A Wideband amplifier using parallel feedback transistor 失效
标题翻译：宽带放大器采用并联反馈晶体管
公开(公告)号：US5821812A
公开(公告)日：1998-10-13
申请号：US747083
申请日：1996-11-13
申请人： Moon-Pyung Park , Hyeon-Cheol Ki , Sung-Ho Park , Tae-Woo Lee , Kie-Moon Song
发明人： Moon-Pyung Park , Hyeon-Cheol Ki , Sung-Ho Park , Tae-Woo Lee , Kie-Moon Song
IPC分类号： H03F3/187 , H03F3/45 , H03F1/14
CPC分类号： H03F3/45085 , H03F2203/45511 , H03F2203/45528 , H03F2203/45566 , H03F2203/45652 , H03F2203/45702 , H03F2203/45722
摘要： In a wideband amplifier whose bandwidth is increased using a parallel feedback transistors(PFT), capacitive elements are connected between the first and seventh nodes which are emitters of the seventh and eighth transistors which are parallel feedback transistors, and alternating current(AC) grounds, wherein outputs are supplied from the first and seventh nodes, and the emitter follower buffers are coupled to the first and seventh nodes so that a negative feedback current is leaked through the collector parasitic capacitances of emitter follower buffer transistors. The bandwidth of the amplifier is greatly increased without making the circuit complex.
摘要翻译：在使用并行反馈晶体管（PFT）增加带宽的宽带放大器中，电容元件连接在作为并行反馈晶体管的第七和第八晶体管的发射极之间的第一和第七节点之间，以及交流电（AC）其中从第一和第七节点提供输出，并且射极跟随缓冲器耦合到第一和第七节点，使得负反馈电流通过射极跟随器缓冲晶体管的集电极寄生电容泄漏。放大器的带宽大大增加，而不会使电路复杂。

19. 发明授权

US4859839A Point-of-sale terminal for laundry or dry cleaning establishments 失效
标题翻译：洗衣或干洗场所的销售点终端
公开(公告)号：US4859839A
公开(公告)日：1989-08-22
申请号：US216885
申请日：1988-07-08
申请人： Bruce Tetelman , Yannis Milios , Il-Pyung Park , Tom Recht
发明人： Bruce Tetelman , Yannis Milios , Il-Pyung Park , Tom Recht
IPC分类号： G07G1/00 , G07G1/12
CPC分类号： G07G1/0018 , G07G1/12
摘要： A computerized point-of-sale terminal for use in laundry and dry cleaning establishments includes a keyboard for entering items to be laundered or dry cleaned, characteristics of the entered items, and services to be performed on the entered items, and a printer for printing a ticket. The terminal also includes a stationary bar code reader positioned to read a bar code on a ticket being moved by the ticket transport mechanism of the printer. The printer, ticket transport mechanism and bar code reader are all controlled by programmed routines being executed by the computer of the terminal. By using a single ticket transport mechanism for both the printer and the bar code reader, the number of parts as well as the weight and bulk of the terminal is reduced.
摘要翻译：用于洗衣和干洗场所的计算机化的销售点终端包括用于输入要洗涤或干洗的物品的键盘，输入的物品的特征以及要在输入的物品上执行的服务，以及用于打印的打印机一张票。终端还包括固定条形码读取器，其被定位成读取由打印机的票据传送机构移动的票据上的条形码。打印机，票据传输机构和条形码读取器都由终端计算机执行的编程程序控制。通过为打印机和条形码读取器使用单票传送机构，减少了部件的数量以及终端的重量和体积。

20. 发明申请

US20070186274A1 Zone based security model 审中-公开
标题翻译：基于区域的安全模型
公开(公告)号：US20070186274A1
公开(公告)日：2007-08-09
申请号：US11348882
申请日：2006-02-07
申请人： Michel Thrysoe , Jinhong Guo , Stephen Johnson , Il-Pyung Park
发明人： Michel Thrysoe , Jinhong Guo , Stephen Johnson , Il-Pyung Park
IPC分类号： H04L9/32
CPC分类号： G06F21/53
摘要： An access control method includes dividing a data processing system into multiple zones. Memberships of processes and objects in the zones are identified, and internal relationships between the zones are defined. The relationships between the zones are used to grant or deny processes access to objects based on their memberships in the zones and positions of the processes in the zones.
摘要翻译：访问控制方法包括将数据处理系统划分为多个区域。识别区域中的进程和对象的成员资格，并且定义区域之间的内部关系。区域之间的关系用于根据其在区域中的进程的区域和位置中的成员资格来授予或拒绝进程对对象的访问。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式