专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US09148428B1 Seamless management of untrusted data using virtual machines 有权
标题翻译：使用虚拟机无缝管理不受信任的数据
公开(公告)号：US09148428B1
公开(公告)日：2015-09-29
申请号：US13419345
申请日：2012-03-13
申请人： Gaurav Banga , Sergei Vorobiev , Deepak Khajura , Ian Pratt , Vikram Kapoor , Simon Crosby
发明人： Gaurav Banga , Sergei Vorobiev , Deepak Khajura , Ian Pratt , Vikram Kapoor , Simon Crosby
IPC分类号： H04L29/06 , G06F21/00 , G06F21/62
CPC分类号： G06F9/3891 , G06F9/455 , G06F9/45558 , G06F9/5027 , G06F9/5077 , G06F21/6218 , G06F2009/45587 , G06F2209/5018 , H04L63/10 , H04L63/105 , H04L63/1425 , H04L63/20 , H04L67/42
摘要： Approaches for managing potentially malicious files using one or more virtual machines. In response to receiving a request to perform an action on a file, a client applies a policy to determine whether the action is deemed trustworthy. The client identifies, without human intervention, a virtual machine, executing or to be executed on the client, in which the action is to be performed based on whether the action is deemed trustworthy. In this way, embodiments allow a user to make use of data deemed untrusted in certain cases without allowing the untrusted data from having unfettered access to the resources of the client. If the requested action is performed in a different virtual machine from which the action was requested, embodiments enable the performance of the action to be performed seamlessly to the user.
摘要翻译：使用一个或多个虚拟机管理潜在恶意文件的方法。响应于接收到对文件执行动作的请求，客户端应用策略来确定该动作是否被认为是可信赖的。客户机在没有人为干预的情况下识别虚拟机，在客户机上执行或执行，根据该动作是否被认为可信赖地执行该动作。以这种方式，实施例允许用户在某些情况下使用被认为不受信任的数据，而不允许不受信任的数据不受限制地访问客户端的资源。如果在请求动作的不同的虚拟机中执行所请求的动作，则实施例使得能够对用户无缝地执行动作的执行。

12. 发明授权

US08972980B2 Automated provisioning of secure virtual execution environment using virtual machine templates based on requested activity 有权
标题翻译：基于请求的活动，使用虚拟机模板自动配置安全虚拟执行环境
公开(公告)号：US08972980B2
公开(公告)日：2015-03-03
申请号：US13115354
申请日：2011-05-25
申请人： Gaurav Banga , Ian Pratt , Kiran Bondalapati , Vikram Kapoor
发明人： Gaurav Banga , Ian Pratt , Kiran Bondalapati , Vikram Kapoor
IPC分类号： G06F9/455 , G06F9/445 , G06F9/44 , G06F9/50 , G06F21/00
CPC分类号： G06F9/5077 , G06F9/45545 , G06F9/5027 , G06F2009/45562 , G06F2009/45587 , G06F2209/5018
摘要： Approaches for executing untrusted software on a client without compromising the client using micro-virtualization to execute untrusted software in isolated contexts. A template for instantiating a virtual machine on a client is identified in response to receiving a request to execute an application. After the template is identified, without human intervention, a virtual machine is instantiated, using the template, in which the application is to be executed. The template may be selected from a plurality of templates based on the nature of the request, as each template describe characteristics of a virtual machine suitable for a different type of activity. Selected resources such as files are displayed to the virtual machines according to user and organization policies and controls. When the client determines that the application has ceased to execute, the client ceases execution of the virtual machine without human intervention.
摘要翻译：在客户端上执行不受信任的软件的方法，而不会在使用微型虚拟化的情况下使用独立的上下文来执行不受信任的软件。响应于接收到执行应用的请求，识别用于在客户机上实例化虚拟机的模板。在模板被识别之后，没有人为干预，就会使用要在其中执行应用程序的模板来实例化一个虚拟机。可以基于请求的性质从多个模板中选择模板，因为每个模板描述适合于不同类型活动的虚拟机的特征。所选资源（如文件）将根据用户和组织策略和控件显示给虚拟机。当客户端确定应用程序已停止执行时，客户端将在不进行人为干预的情况下停止执行虚拟机。

13. 发明申请

US20130132691A1 APPROACHES FOR EFFICIENT PHYSICAL TO VIRTUAL DISK CONVERSION 有权
标题翻译：有效的虚拟磁盘转换的方法
公开(公告)号：US20130132691A1
公开(公告)日：2013-05-23
申请号：US13302123
申请日：2011-11-22
申请人： Gaurav Banga , Ian Pratt , Simon Crosby , Vikram Kapoor , Kiran Bondalapati , Vadim Dmitriev
发明人： Gaurav Banga , Ian Pratt , Simon Crosby , Vikram Kapoor , Kiran Bondalapati , Vadim Dmitriev
IPC分类号： G06F12/16
CPC分类号： G06F21/53 , G06F9/4406 , G06F9/45558 , G06F2009/45579
摘要： Approaches for providing a guest operating system to a virtual machine. A read-only copy of one or more disk volumes, including a boot volume, is created. A copy of a master boot record (MBR) for the one or more disk volumes is also stored. The read-only copy may be, but need not be, made using a Volume Shadow Copy Service (VSS). A virtual disk, for use by the virtual machine, is created based on the read-only copy of the one or more disk volumes and the copy of the master boot record (MBR), wherein the virtual disk comprises the guest operating system used by the virtual machine. In this way, a single installed operating system may provide both the host operating system and the guest operating system.
摘要翻译：将客户操作系统提供给虚拟机的方法。创建一个或多个磁盘卷（包括引导卷）的只读副本。还存储一个或多个磁盘卷的主引导记录（MBR）的副本。只读副本可能是，但不一定要使用卷影复制服务（VSS）。基于所述一个或多个磁盘卷的只读副本和所述主引导记录（MBR）的副本创建虚拟机使用的虚拟磁盘，其中所述虚拟磁盘包括由虚拟机。以这种方式，单个安装的操作系统可以提供主机操作系统和客户机操作系统。

14. 发明申请

US20130055256A1 APPROACHES FOR AUTOMATED MANAGEMENT OF VIRTUAL MACHINES FOR RUNNING UNTRUSTED CODE SAFELY 有权
标题翻译：虚拟机自动管理无法使用的代码管理方法
公开(公告)号：US20130055256A1
公开(公告)日：2013-02-28
申请号：US13223091
申请日：2011-08-31
申请人： Gaurav Banga , Kiran Bondalapati , Ian Pratt , Vikram Kapoor
发明人： Gaurav Banga , Kiran Bondalapati , Ian Pratt , Vikram Kapoor
IPC分类号： G06F9/455 , G06F15/16
CPC分类号： G06F9/45533 , G06F9/45558 , G06F9/5077 , G06F21/53 , G06F2009/45587
摘要： Approaches for transferring data to a client by safely receiving the data in or more virtual machines. In response to the client determining that digital content, originating from an external source, is to be received or processed by the client, the client identifies, without human intervention, one or more virtual machines, executing or to be executed on the client, into which the digital content is to be stored. In doing so, the client may consult policy data to determine a placement policy, a containment policy, and a persistence policy for any virtual machine to receive the digital content. In this way, digital content, such as executable code or interpreted data, of unknown trustworthiness may be safely received by the client without the possibility of any malicious code therein from affecting any undesirable consequence upon the client.
摘要翻译：通过在或多个虚拟机中安全接收数据来将数据传输到客户端的方法。响应于客户端确定来自外部源的数字内容将被客户端接收或处理，客户端在没有人为干预的情况下识别一个或多个虚拟机，在客户机上执行或执行，数字内容将被存储。在这样做时，客户端可以查询策略数据以确定放置策略，收容策略和任何虚拟机接收数字内容的持久性策略。以这种方式，客户端可以安全地接收到具有未知可信度的数字内容，例如可执行代码或解释数据，而不存在任何恶意代码在客户端上不会产生任何不良后果的可能性。

15. 发明授权

US10055231B1 Network-access partitioning using virtual machines 有权
公开(公告)号：US10055231B1
公开(公告)日：2018-08-21
申请号：US13527161
申请日：2012-06-19
申请人： Xin Li , Gaurav Banga , Ian Pratt , Vikram Kapoor
发明人： Xin Li , Gaurav Banga , Ian Pratt , Vikram Kapoor
IPC分类号： G06F9/46 , G06F9/38 , G06F9/455
CPC分类号： G06F9/3891 , G06F9/455 , G06F9/45558 , G06F9/5027 , G06F9/5077 , G06F15/76 , G06F21/6218 , G06F2009/45587 , G06F2209/5018 , H04L63/10 , H04L63/105 , H04L63/1425 , H04L63/20 , H04L67/42
摘要： Approaches for handling network resources in a virtualized computing environment. A first request for network resources is received from a first virtual machine. Policy data is consulted to determine how to service the first request. The first request is processed by providing the first virtual machine with access to only a first portion of network resources. A second request for network resources is received from a second virtual machine. Policy data is consulted to determine how to service the second request. The second request is processed by providing the second virtual machine with access to only a second portion of network resources that is not coextensive with the first portion. In this way, virtual machines may have access to particular resources and/or specific bounded areas of a network.

16. 发明授权

US09734131B1 Synchronizing history data across a virtualized web browser 有权
公开(公告)号：US09734131B1
公开(公告)日：2017-08-15
申请号：US13526403
申请日：2012-06-18
申请人： Kiran Bondalapati , Vikram Kapoor , Prakash Buddhiraja , Gaurav Banga , Ian Pratt
发明人： Kiran Bondalapati , Vikram Kapoor , Prakash Buddhiraja , Gaurav Banga , Ian Pratt
IPC分类号： G06F17/21
CPC分类号： G06F17/21 , G06F9/45533 , G06F17/30873
摘要： Approaches for synchronizing history data across a virtualized web browser. When a user instructs a virtualized web browser, executing on a host operating system, to display a web page, a host module executing on the host operating system may instruct a guest module executing within a particular virtual machine to retrieve the web page. The host module may provide to the guest module history data for the virtualized web browser. History data describes browsing history for the virtualized web browser, either in the current instance or for previous instances. The guest module performs operations in accordance with the history data. When the host module receives the screen data content from the guest module, the host module instructs the virtualized web browser to display the web page using the screen data content.

17. 发明授权

US09244705B1 Intelligent micro-virtual machine scheduling 有权
标题翻译：智能微虚机调度
公开(公告)号：US09244705B1
公开(公告)日：2016-01-26
申请号：US13527542
申请日：2012-06-19
申请人： Kiran Bondalapati , Gaurav Banga , Vikram Kapoor , Ian Pratt
发明人： Kiran Bondalapati , Gaurav Banga , Vikram Kapoor , Ian Pratt
IPC分类号： G06F9/46 , G06F9/455
CPC分类号： G06F9/45504 , G06F9/45545 , G06F9/45558 , G06F9/5027 , G06F9/5077 , G06F2009/45562 , G06F2009/45587 , G06F2209/5018
摘要： Programmatically adjusting the operational state of one or more virtual machines based on policy. Resource consumption on a hardware device is monitored. A policy that considers at least a present level of resource consumption and an amount of available resources of the hardware device is consulted. An operational state of a particular virtual machine that resides on the hardware device is changed. The change in operational state may be performed to optimize performance of a virtual machine with which a user is interacting, to enforce behavior constraints upon the virtual machine, or to adjust its execution in view of the available resources on the device.
摘要翻译：基于策略以编程方式调整一个或多个虚拟机的运行状态。监视硬件设备上的资源消耗。参考至少考虑了目前的资源消耗水平和硬件设备的可用资源量的策略。驻留在硬件设备上的特定虚拟机的操作状态发生变化。可以执行操作状态的改变以优化用户正在交互的虚拟机的性能，以强制对虚拟机的行为约束，或者根据设备上的可用资源调整其执行。

18. 发明授权

US09201850B1 Composing the display of a virtualized web browser 有权
标题翻译：组成虚拟化网页浏览器的显示
公开(公告)号：US09201850B1
公开(公告)日：2015-12-01
申请号：US13526373
申请日：2012-06-18
申请人： Prakash Buddhiraja , Kiran Bondalapati , Vikram Kapoor , Gaurav Banga , Ian Pratt
发明人： Prakash Buddhiraja , Kiran Bondalapati , Vikram Kapoor , Gaurav Banga , Ian Pratt
IPC分类号： G06F17/21
CPC分类号： G06F17/21 , G06F9/45558 , G06F2009/45595
摘要： Approaches for composing the display of a virtualized web browser. A virtualized web browser is instructed to display a web page. The virtualized web browser, in turn, instructs one or more virtual machines to retrieve content for at least a portion of the web page. Each of the one or more virtual machines renders the content retrieved thereby. Upon the virtualized web browser obtaining the rendered screen data content from the one or more virtual machines, the virtualized web browser displays the web page using the rendered content.
摘要翻译：组合虚拟化网络浏览器显示的方法。指示虚拟化网络浏览器显示网页。反过来，虚拟化web浏览器指示一个或多个虚拟机检索网页的至少一部分的内容。一个或多个虚拟机中的每一个呈现由其检索的内容。在虚拟网页浏览器从一个或多个虚拟机获得渲染的屏幕数据内容的情况下，虚拟网页浏览器使用所呈现的内容显示网页。

19. 发明授权

US08839245B1 Transferring files using a virtualized application 有权
标题翻译：使用虚拟化应用程序传输文件
公开(公告)号：US08839245B1
公开(公告)日：2014-09-16
申请号：US13526354
申请日：2012-06-18
申请人： Deepak Khajuria , Kiran Bondalapati , Vikram Kapoor , Gaurav Banga , Ian Pratt
发明人： Deepak Khajuria , Kiran Bondalapati , Vikram Kapoor , Gaurav Banga , Ian Pratt
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F17/30233 , G06F2009/45595
摘要： Approaches for transferring a file using a virtualized application. A virtualized application executes within a virtual machine residing on a physical machine. When the virtualized application is instructed to download a file stored external to the physical machine, the virtualized application displays an interface which enables at least a portion of a file system, maintained by a host OS, to be browsed while preventing files stored within the virtual machine to be browsed. Upon the virtualized application receiving input identifying a target location within the file system, the virtualized application stores the file at the target location. The virtualized application may also upload a file stored on the physical machine using an interface which enables at least a portion of a file system of a host OS to be browsed while preventing files in the virtual machine to be browsed.
摘要翻译：使用虚拟化应用程序传输文件的方法。虚拟化应用程序在驻留在物理机器上的虚拟机中执行。当指示虚拟化应用程序下载存储在物理机外部的文件时，虚拟化应用程序显示一个接口，该接口使得能够浏览由主机OS维护的文件系统的至少一部分，同时防止存储在虚拟机中的文件机器被浏览。在虚拟化应用程序接收到识别文件系统中的目标位置的输入时，虚拟应用程序将文件存储在目标位置。虚拟化应用还可以使用允许在主机OS的文件系统的至少一部分被浏览的同时上传存储在物理机上的文件，同时防止虚拟机中的文件被浏览。

20. 发明授权

US08719933B1 Safe printing 有权
标题翻译：安全打印
公开(公告)号：US08719933B1
公开(公告)日：2014-05-06
申请号：US13526810
申请日：2012-06-19
申请人： Deepak Khajuria , Gaurav Banga , Vikram Kapoor , Ian Pratt
发明人： Deepak Khajuria , Gaurav Banga , Vikram Kapoor , Ian Pratt
IPC分类号： G06F21/00
CPC分类号： G06F21/608
摘要： Approaches for processing a digital file in a manner designed to minimize exposure of any malicious code contained therein. A digital file resides with a virtual machine. When the virtual machine receives an instruction to print, fax, or email the digital file, the virtual machine creates, from the digital file existing in an original format, a copy of the digital file in a different format within the virtual machine. The different format preserves a visual presentation of the digital file without supporting metadata or file format data structures of the original format. The virtual machine instructs the host OS to print the copy of the digital file, send a facsimile of the copy of the digital file, or email the copy of the digital file. The host OS may consult policy data in determining how to carry out the request vis-à-vis the digital file.
摘要翻译：用于以旨在最小化其中包含的任何恶意代码的暴露的方式处理数字文件的方法。数字文件驻留有虚拟机。当虚拟机接收到打印，传真或电子邮件数字文件的指令时，虚拟机将以原始格式存在的数字文件以虚拟机内的不同格式创建数字文件的副本。不同的格式保留了数字文件的可视化呈现，而不支持原始格式的元数据或文件格式数据结构。虚拟机指示主机OS打印数字文件的副本，发送数字文件副本的传真，或者发送数字文件的副本。主机操作系统可以在确定如何对数字文件执行请求时查询策略数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式