专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US09286235B2 Virtual memory address range register 有权
标题翻译：虚拟内存地址范围寄存器
公开(公告)号：US09286235B2
公开(公告)日：2016-03-15
申请号：US13538900
申请日：2012-06-29
申请人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
发明人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
IPC分类号： G06F9/26 , G06F9/34 , G06F12/10
CPC分类号： G06F12/109 , G06F12/0284 , G06F12/1036 , G06F2212/656 , G06F2212/657
摘要： Embodiments of apparatuses and methods including virtual address memory range registers are disclosed. In one embodiment, a processor includes a memory interface, address translation hardware, and virtual memory address comparison hardware. The memory interface is to access a system memory using a physical memory address. The address translation hardware is to support translation of a virtual memory address to the physical memory address. The virtual memory address is used by software to access a virtual memory location in the virtual memory address space of the processor. The virtual memory address comparison hardware is to determine whether the virtual memory address is within a virtual memory address range.
摘要翻译：公开了包括虚拟地址存储器范围寄存器的装置和方法的实施例。在一个实施例中，处理器包括存储器接口，地址转换硬件和虚拟存储器地址比较硬件。存储器接口是使用物理内存地址访问系统内存。地址转换硬件是支持将虚拟内存地址转换为物理内存地址。虚拟存储器地址由软件用于访问处理器的虚拟存储器地址空间中的虚拟存储器位置。虚拟内存地址比较硬件是确定虚拟内存地址是否在虚拟内存地址范围内。

22. 发明授权

US07827550B2 Method and system for measuring a program using a measurement agent 有权
标题翻译：使用测量剂测量程序的方法和系统
公开(公告)号：US07827550B2
公开(公告)日：2010-11-02
申请号：US11206547
申请日：2005-08-17
申请人： Burzin Daruwala , Carlos Rozas , Mona Vij
发明人： Burzin Daruwala , Carlos Rozas , Mona Vij
IPC分类号： G06F9/455 , G06F11/30 , G06F11/00
CPC分类号： G06F12/1491
摘要： Executing a monitor, in a memory region of a platform protected from access by programs executing in a partition provided on the platform, and the monitor executing an agent to measure a program executing in the partition to obtain a measurement.
摘要翻译：在被保护在平台上提供的分区中执行的程序保护的平台的存储器区域中执行监视器，以及监视器执行代理以测量在分区中执行的程序以获得测量。

23. 发明申请

US20080059726A1 Dynamic measurement of an operating system in a virtualized system 审中-公开
标题翻译：虚拟化系统中操作系统的动态测量
公开(公告)号：US20080059726A1
公开(公告)日：2008-03-06
申请号：US11513963
申请日：2006-08-31
申请人： Carlos Rozas , Rolf Neugebauer
发明人： Carlos Rozas , Rolf Neugebauer
IPC分类号： G06F12/00
CPC分类号： G06F21/53 , G06F9/45533
摘要： Systems, methods, and media for dynamic measurement of operating systems in a virtualized system are disclosed. Some embodiments may include accessing a dirty bitmap associated with an operating system executing in a virtualized system where the dirty bitmap may include an indication of memory locations that have been modified since a previous access. Embodiments may also include analyzing the dirty bitmap to determine one or more memory locations associated with the operating system to measure and measuring the determined memory locations to produce measurements of the memory locations. Embodiments may also include performing an action based on the measurements of the memory locations. Other embodiments are disclosed and claimed.
摘要翻译：公开了用于虚拟化系统中的操作系统的动态测量的系统，方法和媒体。一些实施例可以包括访问与在虚拟化系统中执行的操作系统相关联的脏位图，其中脏位图可以包括自先前访问以来已被修改的存储器位置的指示。实施例还可以包括分析脏位图以确定与操作系统相关联的一个或多个存储器位置，以测量和测量所确定的存储器位置以产生存储器位置的测量。实施例还可以包括基于存储器位置的测量来执行动作。公开和要求保护其他实施例。

24. 发明授权

US09276750B2 Secure processing environment measurement and attestation 有权
标题翻译：安全的处理环境测量和认证
公开(公告)号：US09276750B2
公开(公告)日：2016-03-01
申请号：US13949192
申请日：2013-07-23
申请人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
发明人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L9/3242 , G06F9/3004 , H04L9/3234 , H04L2209/127
摘要： Embodiments of an invention for secure processing environment measurement and attestation are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction associated with a build or a rebuild of a secure enclave. The execution unit is to execute the first instruction. Execution of the first instruction, when associated with the build, includes calculation of a first measurement and a second measurement of the secure enclave. Execution of the first instruction, when associated with the rebuild, includes calculation of the second measurement without calculation of the first measurement.
摘要翻译：公开了用于安全处理环境测量和认证的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收与构建或重建安全飞地相关联的第一条指令。执行单元执行第一条指令。当与构建相关联时，执行第一条指令包括对安全飞地的第一测量和第二测量的计算。当与重建相关联时，第一条指令的执行包括第二次测量的计算，而不计算第一次测量。

25. 发明申请

US20150033012A1 SECURE PROCESSING ENVIRONMENT MEASUREMENT AND ATTESTATION 有权
标题翻译：安全处理环境测量和指导
公开(公告)号：US20150033012A1
公开(公告)日：2015-01-29
申请号：US13949192
申请日：2013-07-23
申请人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
发明人： Vincent R. Scarlata , Carlos Rozas , Simon Johnson , Uday Savagaonkar , Rebekah Leslie-Hurd , Barry Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis McKeen , Michael Goldsmith , William Wood , Shay Gueron
IPC分类号： H04L9/32
CPC分类号： H04L9/3242 , G06F9/3004 , H04L9/3234 , H04L2209/127
摘要： Embodiments of an invention for secure processing environment measurement and attestation are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction associated with a build or a rebuild of a secure enclave. The execution unit is to execute the first instruction. Execution of the first instruction, when associated with the build, includes calculation of a first measurement and a second measurement of the secure enclave. Execution of the first instruction, when associated with the rebuild, includes calculation of the second measurement without calculation of the first measurement.
摘要翻译：公开了用于安全处理环境测量和认证的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元将接收与构建或重建安全飞地相关联的第一条指令。执行单元执行第一条指令。当与构建相关联时，执行第一条指令包括对安全飞地的第一测量和第二测量的计算。当与重建相关联时，第一条指令的执行包括第二次测量的计算，而不计算第一次测量。

26. 发明申请

US20140006746A1 VIRTUAL MEMORY ADDRESS RANGE REGISTER 有权
标题翻译：虚拟内存地址范围注册
公开(公告)号：US20140006746A1
公开(公告)日：2014-01-02
申请号：US13538900
申请日：2012-06-29
申请人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
发明人： Gur Hildesheim , Shlomo Raikin , Ittai Anati , Gideon Gerzon , Uday Savagaonkar , Francis Mckeen , Carlos Rozas , Michael Goldsmith , Prashant Dewan
IPC分类号： G06F12/10
CPC分类号： G06F12/109 , G06F12/0284 , G06F12/1036 , G06F2212/656 , G06F2212/657
摘要： Embodiments of apparatuses and methods including virtual address memory range registers are disclosed. In one embodiment, a processor includes a memory interface, address translation hardware, and virtual memory address comparison hardware. The memory interface is to access a system memory using a physical memory address. The address translation hardware is to support translation of a virtual memory address to the physical memory address. The virtual memory address is used by software to access a virtual memory location in the virtual memory address space of the processor. The virtual memory address comparison hardware is to determine whether the virtual memory address is within a virtual memory address range.
摘要翻译：公开了包括虚拟地址存储器范围寄存器的装置和方法的实施例。在一个实施例中，处理器包括存储器接口，地址转换硬件和虚拟存储器地址比较硬件。存储器接口是使用物理内存地址访问系统内存。地址转换硬件是支持将虚拟内存地址转换为物理内存地址。虚拟存储器地址由软件用于访问处理器的虚拟存储器地址空间中的虚拟存储器位置。虚拟内存地址比较硬件是确定虚拟内存地址是否在虚拟内存地址范围内。

27. 发明申请

US20060004944A1 Memory isolation and virtualization among virtual machines 有权
公开(公告)号：US20060004944A1
公开(公告)日：2006-01-05
申请号：US10881847
申请日：2004-06-30
申请人： Mona Vij , Carlos Rozas , Kumar Ranganathan
发明人： Mona Vij , Carlos Rozas , Kumar Ranganathan
IPC分类号： G06F12/08
CPC分类号： G06F12/109 , G06F12/1491
摘要： Disclosed is a virtual machine monitor (VMM) that controls access to a page table hierarchy by a guest operating system (OS). For example, the guest operating system may operate as part of a virtual machine. Particularly, the virtual machine monitor obtains control of memory access transactions responsive to the guest operating system attempting to access the page table hierarchy. More particularly, when the guest operating system attempts to access a page table, control of memory access transactions is trapped to the virtual machine monitor.

28. 发明申请

US20050021986A1 Apparatus and method for memory encryption with reduced decryption latency 有权
标题翻译：减少解密延迟的存储器加密的装置和方法
公开(公告)号：US20050021986A1
公开(公告)日：2005-01-27
申请号：US10603680
申请日：2003-06-25
申请人： Gary Graunke , Carlos Rozas
发明人： Gary Graunke , Carlos Rozas
IPC分类号： G06F12/08 , G06F12/14 , G06F21/00 , H04L9/32
CPC分类号： G06F12/1408 , G06F12/0802 , G06F21/78 , G06F21/85 , H04L9/0637 , H04L2209/12
摘要： A method and apparatus for memory encryption with reduced decryption latency. In one embodiment, the method includes reading an encrypted data block from memory. During reading of the encrypted data block, a keystream used to encrypt the data block is regenerated according to one or more stored criteria of the encrypted data block. Once the encrypted data block is read, the encrypted data block is decrypted using the regenerated keystream. Accordingly, in one embodiment, encryption of either random access memory (RAM) or disk memory is performed. A keystream is regenerated during data retrieval such that once the data is received, the data may be decrypted using a single clock operation. As a result, memory encryption is performed without exacerbating memory latency between the processor and memory.
摘要翻译：一种减少解密延迟的存储器加密方法和装置。在一个实施例中，该方法包括从存储器读取加密的数据块。在读取加密数据块期间，根据加密数据块的一个或多个存储标准来重新生成用于加密数据块的密钥流。读取加密的数据块后，使用再生的密钥流对加密的数据块进行解密。因此，在一个实施例中，执行随机存取存储器（RAM）或磁盘存储器的加密。在数据检索期间重新生成密钥流，使得一旦接收到数据，可以使用单个时钟操作来解密数据。结果，执行存储器加密，而不会加剧处理器和存储器之间的存储器等待时间。

29. 发明授权

US06725373B2 Method and apparatus for verifying the integrity of digital objects using signed manifests 失效
标题翻译：使用签名清单验证数字对象的完整性的方法和装置
公开(公告)号：US06725373B2
公开(公告)日：2004-04-20
申请号：US09047231
申请日：1998-03-25
申请人： John M. Carbajal , Gary Graunke , Carlos Rozas
发明人： John M. Carbajal , Gary Graunke , Carlos Rozas
IPC分类号： H04L932
CPC分类号： H04L9/3247
摘要： A method for generating a signed manifest includes referencing an object. A metadata name is recorded. A digest algorithm is recorded. An integrity value that belongs to the object that corresponds to the metadata subject name is digested with the digest algorithm.
摘要翻译：用于生成签名清单的方法包括引用对象。记录元数据名称。记录摘要算法。属于与元数据主题名称对应的对象的完整性值用摘要算法消化。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式