专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20120090016A1 Method and apparatus for registering agents onto a virtual machine monitor 有权
公开(公告)号：US20120090016A1
公开(公告)日：2012-04-12
申请号：US13373957
申请日：2011-12-06
申请人： Uday Savagaonkar , Ravi Sahita , Prashant Dewan
发明人： Uday Savagaonkar , Ravi Sahita , Prashant Dewan
IPC分类号： G06F21/00
CPC分类号： G06F21/64 , G06F9/45558 , G06F21/57 , G06F2009/45587
摘要： A method for managing an agent includes verifying an integrity of the agent in response to a registration request. Memory protection is provided for the agent dining integrity verification. An indication is generated when registration of the agent has been completed. According to one aspect of the present invention, providing memory protection includes having a virtual machine monitor limit access to the agent. Other embodiments are described and claimed.

12. 发明申请

US20090172330A1 Protection of user-level applications based on page table information 有权
标题翻译：基于页表信息保护用户级应用程序
公开(公告)号：US20090172330A1
公开(公告)日：2009-07-02
申请号：US12005681
申请日：2007-12-28
申请人： Prashant Dewan , Uday Savagaonkar
发明人： Prashant Dewan , Uday Savagaonkar
IPC分类号： G06F12/00
CPC分类号： G06F12/1491 , G06F12/145
摘要： In one embodiment, the present invention includes a virtual machine monitor (VMM) to access a protection indicator of a page table entry (PTE) of a page of a set of memory buffers and determine a state of the protection indicator, and if the protection indicator indicates that the page is a user-level page and if certain information of an agent that seeks to use the page matches that in a protected memory address array, a page table base register (PTBR) is updated to a protected page table (PPT) base address. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括一个虚拟机监视器（VMM），用于访问一组存储器缓冲器的页面的页表条目（PTE）的保护指示符，并确定保护指示符的状态，并且如果保护指示符表示页面是用户级页面，并且如果寻求使用页面的代理的特定信息与受保护的存储器地址阵列中的那些信息匹配，则页表基址寄存器（PTBR）被更新到受保护页表（PPT））基地址。描述和要求保护其他实施例。

13. 发明申请

US20120096270A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20120096270A1
公开(公告)日：2012-04-19
申请号：US13337919
申请日：2011-12-27
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karavir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karavir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

14. 发明申请

US20080244155A1 METHODS AND APPARATUS TO PROTECT DYNAMIC MEMORY REGIONS ALLOCATED TO PROGRAMMING AGENTS 审中-公开
标题翻译：保护动态记忆区域的方法和装置分配给编程代理
公开(公告)号：US20080244155A1
公开(公告)日：2008-10-02
申请号：US11694447
申请日：2007-03-30
申请人： Kyungwoo Lee , Prashant Dewan , Uday Savagaonkar
发明人： Kyungwoo Lee , Prashant Dewan , Uday Savagaonkar
IPC分类号： G06F12/02
CPC分类号： G06F12/145 , G06F12/1491
摘要： Methods and apparatus to protect dynamic memory regions allocated to programming agents are disclosed. An example method to protect a dynamic memory region disclosed herein comprises mapping protected memory regions to a protected page table for address translation associated with a protected agent, updating the protected page table with address information corresponding to the dynamic memory region during a context switch from execution of an unprotected agent to execution of the protected agent when the dynamic memory region was allocated for the unprotected agent prior to the context switch, and accessing the dynamic memory region during execution of the protected agent based on the address information in the protected page table without causing a subsequent context switch.
摘要翻译：公开了保护分配给编程代理的动态存储器区域的方法和装置。用于保护本文公开的动态存储器区域的示例性方法包括将受保护的存储器区域映射到用于与受保护代理相关联的地址转换的受保护页表，在从执行的上下文切换期间更新与对应于动态存储器区域的地址信息的受保护页表当在上下文切换之前为未受保护的代理分配动态存储器区域时，不受保护的代理执行受保护的代理，以及在受保护代理执行期间基于受保护页表中的地址信息访问动态存储器区域而没有导致后续的上下文切换。

15. 发明授权

US08266707B2 Tamper resistant method, apparatus and system for secure portability of digital rights management-protected content 有权
标题翻译：防篡改方法，装置和系统，用于数字版权管理保护内容的安全可移植性
公开(公告)号：US08266707B2
公开(公告)日：2012-09-11
申请号：US12039456
申请日：2008-02-28
申请人： Uday Savagaonkar , Prashant Dewan , Men Long
发明人： Uday Savagaonkar , Prashant Dewan , Men Long
IPC分类号： G06F21/00
CPC分类号： G06F21/10
摘要： An apparatus and system provide a tamper-resistant scheme for portability of DRM-protected digital content. According to embodiments of the invention, a portable crypto unit may be utilized in conjunction with a VT integrity services (VIS) scheme as well as a Virtual Machine Manager (VMM) and a TPM to provide a secure scheme to protect digital content. Additionally, in one embodiment, the digital content may be partitioned into blocks comprising multiple segments to further enhance the security of the scheme.
摘要翻译：一种装置和系统为DRM保护的数字内容的便携性提供防篡改方案。根据本发明的实施例，便携式加密单元可以与VT完整性服务（VIS）方案以及虚拟机管理器（VMM）和TPM结合使用，以提供保护数字内容的安全方案。此外，在一个实施例中，数字内容可以被划分为包括多个段的块，以进一步增强该方案的安全性。

16. 发明申请

US20090220090A1 TAMPER RESISTANT METHOD, APPARATUS AND SYSTEM FOR SECURE PORTABILITY OF DIGITAL RIGHTS MANAGEMENT-PROTECTED CONTENT 有权
标题翻译：防篡改方法，安全数据管理保护内容可移植性的装置和系统
公开(公告)号：US20090220090A1
公开(公告)日：2009-09-03
申请号：US12039456
申请日：2008-02-28
申请人： Uday Savagaonkar , Prashant Dewan , Men Long
发明人： Uday Savagaonkar , Prashant Dewan , Men Long
IPC分类号： H04L9/06 , H04L9/32
CPC分类号： G06F21/10
摘要： An apparatus and system provide a tamper-resistant scheme for portability of DRM-protected digital content. According to embodiments of the invention, a portable crypto unit may be utilized in conjunction with a VT integrity services (VIS) scheme as well as a Virtual Machine Manager (VMM) and a TPM to provide a secure scheme to protect digital content. Additionally, in one embodiment, the digital content may be partitioned into blocks comprising multiple segments to further enhance the security of the scheme.
摘要翻译：一种装置和系统为DRM保护的数字内容的便携性提供防篡改方案。根据本发明的实施例，便携式加密单元可以与VT完整性服务（VIS）方案以及虚拟机管理器（VMM）和TPM结合使用，以提供保护数字内容的安全方案。此外，在一个实施例中，数字内容可以被划分为包括多个段的块，以进一步增强该方案的安全性。

17. 发明授权

US07917724B2 Protection of user-level applications based on page table information 有权
标题翻译：基于页表信息保护用户级应用程序
公开(公告)号：US07917724B2
公开(公告)日：2011-03-29
申请号：US12005681
申请日：2007-12-28
申请人： Prashant Dewan , Uday Savagaonkar
发明人： Prashant Dewan , Uday Savagaonkar
IPC分类号： G06F12/14 , G06F12/02
CPC分类号： G06F12/1491 , G06F12/145
摘要： In one embodiment, the present invention includes a virtual machine monitor (VMM) to access a protection indicator of a page table entry (PTE) of a page of a set of memory buffers and determine a state of the protection indicator, and if the protection indicator indicates that the page is a user-level page and if certain information of an agent that seeks to use the page matches that in a protected memory address array, a page table base register (PTBR) is updated to a protected page table (PPT) base address. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括一个虚拟机监视器（VMM），用于访问一组存储器缓冲器的页面的页表条目（PTE）的保护指示符，并确定保护指示符的状态，并且如果保护指示符表示页面是用户级页面，并且如果寻求使用页面的代理的特定信息与受保护的存储器地址阵列中的那些信息匹配，则页表基址寄存器（PTBR）被更新到受保护页表（PPT））基地址。描述和要求保护其他实施例。

18. 发明申请

US20090119510A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20090119510A1
公开(公告)日：2009-05-07
申请号：US11935783
申请日：2007-11-06
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

19. 发明申请

US20080114985A1 Method and apparatus for registering agents onto a virtual machine monitor 有权
标题翻译：将代理登记到虚拟机监视器上的方法和装置
公开(公告)号：US20080114985A1
公开(公告)日：2008-05-15
申请号：US11591258
申请日：2006-10-31
申请人： Uday Savagaonkar , Ravi Sahita , Prashant Dewan
发明人： Uday Savagaonkar , Ravi Sahita , Prashant Dewan
IPC分类号： H04L9/00
CPC分类号： G06F21/64 , G06F9/45558 , G06F21/57 , G06F2009/45587
摘要： A method for managing an agent includes verifying an integrity of the agent in response to a registration request. Memory protection is provided for the agent during integrity verification. An indication is generated when registration of the agent has been completed. According to one aspect of the present invention, providing memory protection includes having a virtual machine monitor limit access to the agent. Other embodiments are described and claimed.
摘要翻译：用于管理代理的方法包括响应于注册请求验证代理的完整性。在完整性验证期间为代理提供内存保护。当代理商的注册已经完成时生成指示。根据本发明的一个方面，提供存储器保护包括具有虚拟机监视器对代理的限制访问。描述和要求保护其他实施例。

20. 发明申请

US20140173275A1 SECURING DATA TRANSMISSIONS BETWEEN PROCESSOR PACKAGES 审中-公开
标题翻译：保护处理器包之间的数据传输
公开(公告)号：US20140173275A1
公开(公告)日：2014-06-19
申请号：US13719939
申请日：2012-12-19
申请人： Simon Johnson , Abhishek Das , Carlos Rozas , Uday Savagaonkar , Robert Blankenship , Kiran Padwekar
发明人： Simon Johnson , Abhishek Das , Carlos Rozas , Uday Savagaonkar , Robert Blankenship , Kiran Padwekar
IPC分类号： H04L9/00
CPC分类号： H04L9/00 , G06F21/556 , G06F21/606 , H04L9/32 , H04L63/0428 , H04L63/0471 , H04L63/123
摘要： Embodiments of an invention for securing transmissions between processor packages are disclosed. In one embodiment, an apparatus includes an encryption unit to encrypt first content to be transmitted from the apparatus to a processor package directly through a point-to-point link.
摘要翻译：公开了用于确保处理器封装之间的传输的发明的实施例。在一个实施例中，一种装置包括加密单元，用于直接通过点对点链路加密要从装置发送到处理器包的第一内容。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式