专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US07194762B2 Method of creating password list for remote authentication to services 失效
标题翻译：创建用于远程认证服务的密码列表的方法
公开(公告)号：US07194762B2
公开(公告)日：2007-03-20
申请号：US09998484
申请日：2001-11-30
申请人： David Carroll Challener , Steven Dale Goodman
发明人： David Carroll Challener , Steven Dale Goodman
IPC分类号： H04L9/14
CPC分类号： G06F21/46
摘要： A method for providing security in password-based access to computer networks, the network including a server and a remote user, includes: signing a phrase by a security chip of the server using an encryption key; associating the signed phrase with the remote user; signing the phrase with an encryption key obtained by the security chip when a request for access to the computer network is received from the remote user; comparing the phrase signed with the obtained encryption key with the signed phrase associated with the remote user; and granting access to the remote user if the phrase signed with the obtained encryption key is the same as the stored signed phrase associated with the remote user. The use of the encryption key protects against “dictionary attacks”. Use of the security chip protects against offline attacks. These provide greater security for the computer network.
摘要翻译：一种用于提供对计算机网络的基于密码的访问中的安全性的方法，所述网络包括服务器和远程用户，包括：使用加密密钥由所述服务器的安全芯片签名短语; 将有符号短语与远程用户相关联; 当从远程用户接收到访问计算机网络的请求时，利用由安全芯片获得的加密密钥来签名该短语; 将与获得的加密密钥签名的短语与与远程用户相关联的有符号短语进行比较; 以及如果使用获得的加密密钥签名的短语与与远程用户相关联的所存储的已签名短语相同，则允许对远程用户的访问。使用加密密钥可防止“字典攻击”。使用安全芯片可防止脱机攻击。这些为计算机网络提供了更大的安全性。

22. 发明授权

US07962759B2 Reducing the boot time of a TCPA based computing system when the core root of trust measurement is embedded in the boot block code 有权
标题翻译：当信任测度的核心根源嵌入引导块代码时，减少基于TCPA的计算系统的启动时间
公开(公告)号：US07962759B2
公开(公告)日：2011-06-14
申请号：US12426519
申请日：2009-04-20
申请人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
发明人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
IPC分类号： G06F11/30 , G06F9/24
CPC分类号： G06F21/572 , G06F21/575
摘要： A computer program product and system for reducing the boot time of a TCPA based computing system. A flash memory in the TCPA based computing system may include a register comprising bits configured to indicate whether the segments of the flash memory have been updated. The flash memory may further include a table configured to store measurements of the segments of the flash memory. The flash memory may further include a boot block code that includes a Core Root of Trust for Measurement (CRTM). The CRTM may read the bits in the register to determine if any of the segments of the flash memory have been updated. The CRTM may further obtain the measurement values in the table for those segments that store the POST BIOS code that have not been updated thereby saving time from measuring the POST BIOS code and consequently reducing the boot time.
摘要翻译：一种用于减少基于TCPA的计算系统的引导时间的计算机程序产品和系统。基于TCPA的计算系统中的闪速存储器可以包括寄存器，其包括被配置为指示闪速存储器的段是否已被更新的位。闪存可以进一步包括被配置为存储闪存的片段的测量的表。闪速存储器还可以包括引导块代码，其包括用于测量的信任核心根（CRTM）。 CRTM可以读取寄存器中的位，以确定闪存中的任何段是否已更新。 CRTM可以进一步获得存储POST BIOS代码的那些片段的表中的测量值，从而节省了测量POST BIOS代码的时间，从而减少了引导时间。

23. 发明授权

US07757112B2 System and method for booting alternate MBR in event of virus attack 有权
标题翻译：在病毒攻击的情况下启动备用MBR的系统和方法
公开(公告)号：US07757112B2
公开(公告)日：2010-07-13
申请号：US11394278
申请日：2006-03-29
申请人： Philip Lee Childs , Mark Charles Davis , Steven Dale Goodman , Joseph Wayne Freeman , Randall Scott Springfield , Rod David Waltermann
发明人： Philip Lee Childs , Mark Charles Davis , Steven Dale Goodman , Joseph Wayne Freeman , Randall Scott Springfield , Rod David Waltermann
IPC分类号： G06F12/14
CPC分类号： G06F11/1417 , G06F11/1666 , G06F21/56 , G06F21/575
摘要： In the event of a virally infected MBR on a hard disk drive that might prevent booting, a service MBR in a hidden protected area (HPA) can be used to boot a service O.S., and then the service MBR can be replaced with a previously backed-up MBR, also in the HPA, to mount any missing partitions.
摘要翻译：如果硬盘驱动器上有病毒感染的MBR可能会阻止启动，则可以使用隐藏保护区域（HPA）中的服务MBR来引导服务操作系统，然后将服务MBR替换为先前支持的 -up MBR（也在HPA中）安装任何丢失的分区。

24. 发明授权

US07702894B2 System and method for loading programs from HDD independent of operating system 有权
标题翻译：从独立于操作系统的HDD加载程序的系统和方法
公开(公告)号：US07702894B2
公开(公告)日：2010-04-20
申请号：US11954664
申请日：2007-12-12
申请人： Rod David Waltermann , Nathan J. Peterson , Joseph Wayne Freeman , Randall Scott Springfield , Mark Charles Davis , Steven Dale Goodman , Isaac Kareel , Scott Edwards Kelso
发明人： Rod David Waltermann , Nathan J. Peterson , Joseph Wayne Freeman , Randall Scott Springfield , Mark Charles Davis , Steven Dale Goodman , Isaac Kareel , Scott Edwards Kelso
IPC分类号： G06F7/00
CPC分类号： G06F9/4406
摘要： A method for booting into computer memory a non-operating system (O.S.) program from a hard disk drive (HDD) prior to booting into memory an O.S. from the HDD. The method includes establishing a table of contents (TOC) on the HDD that contains entries for special O.S. programs. A pointer to the TOC is placed in non-volatile memory of the computer that is associated with the HDD, and when BIOS of the computer is prompted to load into memory one of the special O.S. programs, the pointer is accessed and used to locate the TOC, which in turn is accessed to load the special O.S. program.
摘要翻译：在引导到存储器之前从硬盘驱动器（HDD）引导到计算机存储器的非操作系统（O.S.）程序的方法。从硬盘。该方法包括在HDD上建立内容表（TOC），其中包含特殊O.S.的条目。程式。指向TOC的指针被放置在与HDD相关联的计算机的非易失性存储器中，并且当计算机的BIOS被提示加载到存储器中时，特别的O.S. 程序中，指针被访问并用于定位TOC，而TOC又被访问以加载特殊的O.S. 程序。

25. 发明授权

US07490250B2 Method and system for detecting a tamper event in a trusted computing environment 有权
标题翻译：用于在可信计算环境中检测篡改事件的方法和系统
公开(公告)号：US07490250B2
公开(公告)日：2009-02-10
申请号：US10012170
申请日：2001-10-26
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L9/32
CPC分类号： G06F21/554 , G06F21/575
摘要： A method, system and computer readable medium containing programming instructions for detecting a tamper event in a computer system having an embedded security system (ESS), a trusted operating system, and a plurality of devices is disclosed. The method, system and computer readable medium of the present invention provide for receiving a tamper signal in the ESS, and locking the tamper signal in the ESS. According to the method, system and computer readable medium of the present invention, the trusted operating system is capable of detecting the tamper signal in the ESS.
摘要翻译：公开了一种包含用于检测具有嵌入式安全系统（ESS），可信操作系统和多个设备的计算机系统中的篡改事件的编程指令的方法，系统和计算机可读介质。本发明的方法，系统和计算机可读介质提供在ESS中接收篡改信号，并将篡改信号锁定在ESS中。根据本发明的方法，系统和计算机可读介质，可信操作系统能够检测ESS中的篡改信号。

26. 发明授权

US07401361B2 System and method for reducing virus scan time 有权
标题翻译：减少病毒扫描时间的系统和方法
公开(公告)号：US07401361B2
公开(公告)日：2008-07-15
申请号：US10963888
申请日：2004-10-13
申请人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
发明人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
IPC分类号： G06F12/14 , G06F11/30 , G06F17/30
CPC分类号： G06F21/562 , G06F21/564 , Y10S707/99953 , Y10S707/99955
摘要： A system and method that marks whenever a sector on a hard drive is altered. A protected archive bit is maintained for each sector on the hard drive in a secured fashion. Authenticated requests are able to reset the protected archive bit. When a file is changed, the hard drive marks the sectors of the program that have been altered. When the virus protection application executes, it retrieves the sectors that have been altered, identifies the files that correspond to such sectors, and scans the identified files. If a virus has attacked the computer and attached itself to one of the files, the file is identified and scanned and the virus is discovered with appropriate eradication actions performed. An authentication scheme is assigned to a hard drive with a secret that is shared between the drive and the virus protection program and stored in a secure location.
摘要翻译：每当硬盘驱动器上的扇区被更改时都会标记的系统和方法。以安全的方式为硬盘驱动器上的每个扇区维护受保护的归档位。经认证的请求能够重置受保护的归档位。当文件更改时，硬盘驱动器会标记已更改的程序扇区。当病毒保护应用程序执行时，它检索已更改的扇区，识别与这些扇区相对应的文件，并扫描已识别的文件。如果病毒攻击了计算机并将其自身附加到其中一个文件中，则会识别并扫描文件，并发现病毒被发现，并执行适当的根除操作。将认证方案分配给具有在驱动器和病毒保护程序之间共享并存储在安全位置的秘密的硬盘驱动器。

27. 发明申请

US20050108564A1 Reducing the boot time of a TCPA based computing system when the Core Root of Trust Measurement is embedded in the boot block code 失效
标题翻译：当信任测度核心嵌入在引导块代码中时，减少基于TCPA的计算系统的启动时间
公开(公告)号：US20050108564A1
公开(公告)日：2005-05-19
申请号：US10712237
申请日：2003-11-13
申请人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
发明人： Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield
IPC分类号： G06F12/14 , G06F21/00 , H04L9/00
CPC分类号： G06F21/572 , G06F21/575
摘要： A method, computer program product and system for reducing the boot time of a TCPA based computing system. A flash memory in the TCPA based computing system may include a register comprising bits configured to indicate whether the segments of the flash memory have been updated. The flash memory may further include a table configured to store measurements of the segments of the flash memory. The flash memory may further include a boot block code that includes a Core Root of Trust for Measurement (CRTM). The CRTM may read the bits in the register to determine if any of the segments of the flash memory have been updated. The CRTM may further obtain the measurement values in the table for those segments that store the POST BIOS code that have not been updated thereby saving time from measuring the POST BIOS code and consequently reducing the boot time.
摘要翻译：一种用于减少基于TCPA的计算系统的启动时间的方法，计算机程序产品和系统。基于TCPA的计算系统中的闪速存储器可以包括寄存器，其包括被配置为指示闪速存储器的段是否已被更新的位。闪存可以进一步包括被配置为存储闪存的片段的测量的表。闪速存储器还可以包括引导块代码，其包括用于测量的信任核心根（CRTM）。 CRTM可以读取寄存器中的位，以确定闪存中的任何段是否已更新。 CRTM可以进一步获得存储POST BIOS代码的那些片段的表中的测量值，从而节省了测量POST BIOS代码的时间，从而减少了引导时间。

28. 发明授权

US06711690B2 Secure write blocking circuit and method for preventing unauthorized write access to nonvolatile memory 失效
标题翻译：安全写阻塞电路和防止非易失性存储器的非法写入访问的方法
公开(公告)号：US06711690B2
公开(公告)日：2004-03-23
申请号：US09953775
申请日：2001-09-17
申请人： Richard Alan Dayan , Steven Dale Goodman , Joseph Michael Pennisi , Randall Scott Springfield
发明人： Richard Alan Dayan , Steven Dale Goodman , Joseph Michael Pennisi , Randall Scott Springfield
IPC分类号： G06F900
CPC分类号： G06F21/79
摘要： A secure write blocking circuit and method of operation thereof. The secure write blocking circuit includes enable and disable block input terminals coupled to a blocking circuit. The blocking circuit, such as a set/reset latch in a preferred embodiment, generates a block signal to prevent write access to a nonvolatile memory device, such as flash memory, in response to signals provided to the enable and disable input terminals. The secure write blocking circuit also includes an interrupt generator, coupled to the disable block input terminal, that generates an interrupt signal in response to a signal at the disable input terminal. In a related embodiment the secure write blocking circuit also includes a logic circuit, coupled to the blocking circuit, that receives the block signal and a write enable signal and in response thereto generates a control signal to a write enable input of the nonvolatile memory device.
摘要翻译：一种安全的写阻塞电路及其操作方法。安全写阻断电路包括耦合到阻塞电路的使能和禁止块输入端。阻塞电路，例如在优选实施例中的设置/复位锁存器，响应于提供给使能和禁止输入端子的信号，产生阻塞信号以防止对非易失性存储器件（例如闪速存储器）的写访问。安全写阻断电路还包括耦合到禁用块输入端的中断发生器，其响应于禁用输入端的信号而产生中断信号。在相关实施例中，安全写入分块电路还包括耦合到分块电路的逻辑电路，其接收块信号和写使能信号，并响应于此产生对非易失性存储器件的写使能输入的控制信号。

29. 发明授权

US08862709B2 Remote management of boot application 有权
标题翻译：远程管理引导应用程序
公开(公告)号：US08862709B2
公开(公告)日：2014-10-14
申请号：US11955886
申请日：2007-12-13
申请人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
IPC分类号： G06F9/44 , H04L29/08 , H04L29/12 , G06F15/177 , H04N21/443
CPC分类号： G06F9/4416 , G06F9/4401 , G06F9/4406 , G06F9/4408 , G06F15/177 , H04L29/12235 , H04L67/34 , H04N21/443
摘要： Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.
摘要翻译：可以考虑通过用于具有LAN唤醒（WOL）功能的计算机的WOL分组来远程选择可启动图像的系统和布置。服务器端实施例包括用于确定要管理的客户机的硬件和/或软件，确定客户端是否在网络上是活动的，以及发送具有向量的WOL分组或操作系统分区标识（OSPID）来描述可引导的 WOL功能的计算机可访问的图像。一些实施例可以包括指向安全可启动图像的OSPID，例如硬盘驱动器上的可引导映像，连接到计算机的光盘（CD）或其他本地资源。客户端实施例可以在例如网络接口卡（NIC）处接收WOL分组，识别WOL分组包括描述可启动图像引导的OSPID，并且实现替代的引导顺序以从该可启动图像引导。

30. 发明授权

US08677117B2 Remote management of boot application 失效
公开(公告)号：US08677117B2
公开(公告)日：2014-03-18
申请号：US10749583
申请日：2003-12-31
申请人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
IPC分类号： H04L29/06
CPC分类号： G06F9/4416 , G06F9/4401 , G06F9/4406 , G06F9/4408 , G06F15/177 , H04L29/12235 , H04L67/34 , H04N21/443
摘要： Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式