专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20070014416A1 System and method for protecting against dictionary attacks on password-protected TPM keys 审中-公开
标题翻译：防止对密码保护的TPM密钥的字典攻击的系统和方法
公开(公告)号：US20070014416A1
公开(公告)日：2007-01-18
申请号：US11183116
申请日：2005-07-15
申请人： David Rivera , David Challener , James Hoff
发明人： David Rivera , David Challener , James Hoff
IPC分类号： H04L9/00
CPC分类号： H04L9/0863 , H04L9/002 , H04L9/0822 , H04L9/0897 , H04L2209/127
摘要： A computer system that may include a trusted platform module (TPM) along with a processor hashes a user-supplied password for a predetermined time period that is selected to render infeasible a dictionary attack on the password. The results of the hash are used to render an AES key, which is used to encrypt an RSA key. The encrypted RSA key along with the total number of hash cycles that were used is stored and the RSA key is provided to the TPM as a security key. In the event that the RSA key in the TPM must be recovered, the encrypted stored version is decrypted with an AES key that is generated based on the user inputting the same password and hashing the password for the stored number of cycles.
摘要翻译：可以包括可信平台模块（TPM）以及处理器的计算机系统将用户提供的密码散列在预定时间段内，该预定时间段被选择为对密码进行字典攻击不可行。哈希的结果用于渲染AES密钥，用于加密RSA密钥。存储加密的RSA密钥以及所使用的散列周期的总数，并将RSA密钥作为安全密钥提供给TPM。在必须恢复TPM中的RSA密钥的情况下，加密的存储版本将使用基于用户输入相同密码生成的AES密钥解密，并对存储的周期数进行散列密码。

12. 发明申请

US20060085630A1 Enabling attestation during return from S4 state with standard TCG hardware 有权
标题翻译：在使用标准TCG硬件从S4状态返回期间启用认证
公开(公告)号：US20060085630A1
公开(公告)日：2006-04-20
申请号：US10967760
申请日：2004-10-16
申请人： David Challener , Daryl Cromer , Joseph Freeman , Steven Goodman , James Hoff , Howard Locker , Randall Springfield , James Ward
发明人： David Challener , Daryl Cromer , Joseph Freeman , Steven Goodman , James Hoff , Howard Locker , Randall Springfield , James Ward
IPC分类号： G06F9/24
CPC分类号： G06F21/575
摘要： A method and system for enabling security attestation for a computing device during a return from an S4 sleep state. When the computing device enters into the S4 state following a successful boot up, the attestation log is appended to the TPM tick count and the log is signed (with a security signature). When the device is awaken from S4 state, the BIOS obtains and verifies the log created during the previous boot. The CRTM maintains a set of virtual PCRs and references these virtual PCRs against the log. If the values do not match, the return from S4 state fails and the device is rebooted.
摘要翻译：一种用于在从S4睡眠状态返回期间为计算设备提供安全认证的方法和系统。当计算设备在成功启动后进入S4状态时，认证日志会追加到TPM刻度计数，并且日志被签名（具有安全签名）。当设备从S4状态唤醒时，BIOS将获取并验证在以前引导过程中创建的日志。 CRTM维护一组虚拟PCR，并将这些虚拟PCR引用到日志中。如果值不匹配，则S4状态返回失败，设备重启。

13. 发明申请

US20070192620A1 Method for preventing malicious software from execution within a computer system 有权
标题翻译：防止在计算机系统内执行恶意软件的方法
公开(公告)号：US20070192620A1
公开(公告)日：2007-08-16
申请号：US11353896
申请日：2006-02-14
申请人： David Challener , Mark Davis , Peter Hortensius , Rod Waltermann
发明人： David Challener , Mark Davis , Peter Hortensius , Rod Waltermann
IPC分类号： H04L9/32
CPC分类号： G06F21/567 , G06F21/125
摘要： A method for preventing malicious software from execution within a computer system is disclosed. A permutation is performed on a subset of instructions within an application program to yield a permuted sequence of instructions before any actual execution of the application program on the computer system. A permutation sequence number of the permuted sequence of instructions is stored in a permuted instruction pointer table. The permuted sequence of instructions is executed in an execution module that is capable of translating the permuted sequence of instructions to an actual machine code of a processor within the computer system according to the permutation sequence number of the permuted sequence of instructions stored in the permuted instruction pointer table.
摘要翻译：公开了一种防止在计算机系统内执行恶意软件的方法。在应用程序中的指令子集上执行排列，以在计算机系统上的应用程序的任何实际执行之前产生置换的指令序列。置换的指令序列的置换序列号存储在置换的指令指针表中。指令的置换序列在执行模块中执行，该执行模块能够根据存储在置换指令中的置换的指令序列的置换序列号，将置换的指令序列转换为计算机系统内的处理器的实际机器码指针表。

14. 发明申请

US20060185017A1 Execution validation using header containing validation data 有权
标题翻译：使用包含验证数据的头执行验证
公开(公告)号：US20060185017A1
公开(公告)日：2006-08-17
申请号：US11319329
申请日：2005-12-28
申请人： David Challener , Daryl Cromer , Howard Locker , David Safford , Randall Springfield
发明人： David Challener , Daryl Cromer , Howard Locker , David Safford , Randall Springfield
IPC分类号： G06F12/14
CPC分类号： G06F21/565 , G06F2221/2151
摘要： The present invention adds a procedure to the operating system file subsystem of a processing system that significantly reduces the amount of time necessary to verify the validity of executable files. Each executable is extended with a file signature containing a header containing validation data. This header may be added to an existing ELF header, added as a new section, or placed in a file's extended attribute store. The header contains results of all previous validation checks that have been performed. The file signature is inserted, with a date stamp, into the file attributes. On execution, the system checks the previously-created file signature against a current file signature, instead of creating the file signature for every file during the execution process. Checks to ensure that the file signature is secure, and is valid and up to date, are also implemented. Only if the file signature is not valid and up-to-date does the execution program create a new file signature at the time of execution.
摘要翻译：本发明向处理系统的操作系统文件子系统添加了一个过程，其显着地减少了验证可执行文件的有效性所需的时间量。每个可执行文件使用包含包含验证数据的标题的文件签名进行扩展。该标题可以被添加到现有的ELF标题中，作为新的部分添加，或者被放置在文件的扩展属性存储中。标题包含已执行的所有先前验证检查的结果。将文件签名带有日期戳插入到文件属性中。执行时，系统会根据当前文件签名检查先前创建的文件签名，而不是在执行过程中为每个文件创建文件签名。检查以确保文件签名是安全的，并且是有效的和最新的，也被实现。只有当文件签名无效且最新的执行程序在执行时才会创建新的文件签名。

15. 发明申请

US20060021032A1 Secure storage tracking for anti-virus speed-up 有权
公开(公告)号：US20060021032A1
公开(公告)日：2006-01-26
申请号：US10894588
申请日：2004-07-20
申请人： David Challener , John Karidis
发明人： David Challener , John Karidis
IPC分类号： G06F12/14
CPC分类号： G06F21/564 , G06F21/80
摘要： A computer system includes a security subsystem which is able to trustfully track which files or storage areas of a storage device have been altered since a last virus scan. The trusted information can then be used to accelerate scans for undesirable code or data such as viruses and invalid or corrupt registry entries. In the case of viruses, files or storage areas which have been altered are scanned against a super-set of virus definitions. Unaltered files or storage areas are scanned against a subset of virus definitions.

16. 发明申请

US20050192814A1 Browser URL and content preloading based on autonomic collaboration 审中-公开
标题翻译：基于自主协作的浏览器URL和内容预加载
公开(公告)号：US20050192814A1
公开(公告)日：2005-09-01
申请号：US10778873
申请日：2004-02-13
申请人： David Challener , Michael Vanover
发明人： David Challener , Michael Vanover
IPC分类号： G06F17/30 , G06Q30/00 , G06F17/60
CPC分类号： G06Q30/02 , G06F16/9535
摘要： In a LAN environment, which provides access for multiple users to the Internet, clients (predictors) are selected for identifying Internet content, by their requests, which would be of interest to a larger audience, and then this content is “pushed down” to the caches of an audience of clients. In so selecting content there is a recognition of a shared intellectual direction (e.g. a joint effort) that exists to encourage interest in similar material. This cache “library” is particularly directed to mobile users who work unconnected at times and may lack the time or background to select and pre-load the library.
摘要翻译：在为多个用户提供互联网访问的局域网环境中，选择客户端（预测器）来识别互联网内容，通过他们的请求，这将是较大的受众感兴趣的，然后该内容被“推下” 客户的观众的高速缓存。在选择内容时，认识到共同的智力方向（例如联合努力），以鼓励对类似材料的兴趣。这种高速缓存“库”特别针对于有时工作未连接的移动用户，并且可能缺少选择和预加载库的时间或背景。

17. 发明申请

US20050134523A1 Creating an encrypted channel to a wireless video display 审中-公开
标题翻译：创建加密的频道到无线视频显示
公开(公告)号：US20050134523A1
公开(公告)日：2005-06-23
申请号：US10738182
申请日：2003-12-17
申请人： David Challener , Clain Anderson
发明人： David Challener , Clain Anderson
IPC分类号： G09G3/00 , G09G5/00 , H04L9/08
CPC分类号： H04L9/0662 , H04L9/0838 , H04L2209/80
摘要： A system for creating a secure wireless channel between a laptop computer and a video projector. The system allows a person, or presenter, to send presentation information wirelessly without having to worry about unwanted eavesdroppers receiving the presentation information. Prior to the presentation, the projector generates a random number and projects the number on a screen. The presenter types the random number into his computer and an encryption program within the computer uses the random number to create a temporary session key. Advantageously, the random number is never transmitted wirelessly. The session key is then used to encrypt the presentation information before the information is wirelessly transmitted to the projector. The projector receives the information and uses the same random number to decrypt the presentation information. After decryption, the presentation information is projected on a screen for presentation to the audience.
摘要翻译：一种用于在膝上型计算机和视频投影仪之间创建安全无线信道的系统。该系统允许个人或演示者无线地发送演示信息，而不必担心接收演示信息的不必要的窃听者。在演示之前，投影机会生成一个随机数字，并将数字投影到屏幕上。演示者将随机数输入他的计算机，计算机内的加密程序使用随机数创建一个临时会话密钥。有利地，该随机数从不被无线传输。然后，会话密钥用于在将信息无线传输到投影仪之前加密演示信息。投影机接收信息并使用相同的随机数来解密演示信息。在解密之后，将演示信息投影在屏幕上以呈现给观众。

18. 发明申请

US20050114339A1 System and method to allow valid profiles in autonomic computing discovery 有权
标题翻译：允许自动计算发现中的有效配置文件的系统和方法
公开(公告)号：US20050114339A1
公开(公告)日：2005-05-26
申请号：US10718940
申请日：2003-11-21
申请人： David Challener , Jeffrey Ford
发明人： David Challener , Jeffrey Ford
IPC分类号： G06F17/30
CPC分类号： G06F17/3056 , Y10S707/99945
摘要： A system and method to allow valid profiles in autonomic computing discover is presented. A client accesses a network and sends a profile information request to a central computing device, such as a server. The server identifies client properties, such as the client's location and a user functionality description which corresponds to the client's user. The server uses the identified client properties to select an appropriate master profile from a master profile look-up table. The server sends master profile information, such as the master profile's pathname and revision time, to the client. In turn, the client determines whether it already has a valid profile or whether it should download an up-to-date version. If the client requires an up-to-date profile version, the client downloads the master profile from the server and uses the downloaded profile for various computing tasks.
摘要翻译：提出了一种在自主计算发现中允许有效配置文件的系统和方法。客户端访问网络并向诸如服务器的中央计算设备发送简档信息请求。服务器识别客户端属性，例如客户端的位置和与客户端用户对应的用户功能描述。服务器使用标识的客户端属性从主配置文件查找表中选择适当的主配置文件。服务器向客户端发送主配置文件信息，如主配置文件的路径名和修订时间。反过来，客户端确定它是否已经具有有效的配置文件，或者是否应该下载最新版本。如果客户端需要最新的配置文件版本，客户端将从服务器下载主配置文件，并使用下载的配置文件进行各种计算任务。

19. 发明申请

US20090089808A1 METHODS AND ARRANGEMENTS FOR EFFECTING SUPPLEMENTARY MAIL TRANSFER OR MANAGEMENT 有权
标题翻译：对补充邮件传送或管理的方法和安排
公开(公告)号：US20090089808A1
公开(公告)日：2009-04-02
申请号：US11865051
申请日：2007-09-30
申请人： Howard Locker , David Challener , Daryl Cromer , James S. Rutledge , Randall Scott Springfield , James J. Thrasher , Michael Vanover
发明人： Howard Locker , David Challener , Daryl Cromer , James S. Rutledge , Randall Scott Springfield , James J. Thrasher , Michael Vanover
IPC分类号： G06F9/44
CPC分类号： G06F1/3225 , G06Q10/107
摘要： Arrangements for permitting incoming mail to be transferred from a WAN Drive to a notebook computer hard drive under conditions that are not stressful to the hard drive. Preferably, a WAN card is configured to wake a notebook when mail capacity is full or close to full. Mail is then preferably moved from the flash drive to the hard drive, subject to verification that this will not overly stress the hard drive. In a variant embodiment, the WAN card may preferably be configured to wake a notebook when mail is received at all. Again, mail is then preferably moved from the flash drive to the hard drive, subject to verification that this will not overly stress the hard drive. Once mail is moved to the hard drive, the system preferably runs an embedded email program that allows the user to employ an existing VPN infrastructure.
摘要翻译：允许接收邮件在不受硬盘驱动器压力的条件下从WAN驱动器传输到笔记本电脑硬盘驱动器的安排。优选地，WAN卡被配置为当邮件容量已满或接近满时唤醒笔记本电脑。然后，邮件最好从闪存驱动器移动到硬盘驱动器，经验证，这不会过度强调硬盘驱动器。在一个变型实施例中，WAN卡优选地被配置成完全在接收到邮件时唤醒笔记本电脑。再次，邮件优选地从闪存驱动器移动到硬盘驱动器，经过验证，这不会过度强调硬盘驱动器。一旦邮件移动到硬盘驱动器，系统最好运行嵌入式电子邮件程序，允许用户使用现有的VPN基础设施。

20. 发明申请

US20070192581A1 Method and apparatus for tracking boot history 有权
标题翻译：跟踪启动历史的方法和装置
公开(公告)号：US20070192581A1
公开(公告)日：2007-08-16
申请号：US11352499
申请日：2006-02-10
申请人： David Challener , Daryl Cromer , Mark Charles Davis , Jerry Dishman , Howard Locker , Randall Springfield
发明人： David Challener , Daryl Cromer , Mark Charles Davis , Jerry Dishman , Howard Locker , Randall Springfield
IPC分类号： G06F9/00 , G06F15/177
CPC分类号： G06F21/57 , G06F9/4408 , G06F21/562
摘要： A computer determines whether it has been booted from a hard disk drive or from an alternate source (e.g., a floppy drive or portable memory) that entails a higher risk of importing a virus into the computer, and if it is determined that a non-HDD source was booted from, corrective action such as a virus scan can be preemptively taken.
摘要翻译：计算机确定是从硬盘驱动器还是从备份源（例如，软盘驱动器或便携式存储器）引导，这导致将病毒导入计算机的风险更高，并且如果确定非易失性存储器 HDD源被启动，可以抢先采取诸如病毒扫描的纠正措施。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式