专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

41. 发明授权

US10515023B2 System for address mapping and translation protection 有权
公开(公告)号：US10515023B2
公开(公告)日：2019-12-24
申请号：US15088739
申请日：2016-04-01
申请人： Ravi L. Sahita , Gilbert Neiger , Vedvyas Shanbhogue , David M. Durham , Andrew V. Anderson , David A. Koufaty , Asit K. Mallick , Arumugam Thiyagarajah , Barry E. Huntley , Deepak K. Gupta , Michael Lemay , Joseph F. Cihula , Baiju V. Patel
发明人： Ravi L. Sahita , Gilbert Neiger , Vedvyas Shanbhogue , David M. Durham , Andrew V. Anderson , David A. Koufaty , Asit K. Mallick , Arumugam Thiyagarajah , Barry E. Huntley , Deepak K. Gupta , Michael Lemay , Joseph F. Cihula , Baiju V. Patel
IPC分类号： G06F12/00 , G06F12/14 , G06F12/1009 , G06F9/455 , G06F12/1027 , G06F21/78
摘要： This disclosure is directed to a system for address mapping and translation protection. In one embodiment, processing circuitry may include a virtual machine manager (VMM) to control specific guest linear address (GLA) translations. Control may be implemented in a performance sensitive and secure manner, and may be capable of improving performance for critical linear address page walks over legacy operation by removing some or all of the cost of page walking extended page tables (EPTs) for critical mappings. Alone or in combination with the above, certain portions of a page table structure may be selectively made immutable by a VMM or early boot process using a sub-page policy (SPP). For example, SPP may enable non-volatile kernel and/or user space code and data virtual-to-physical memory mappings to be made immutable (e.g., non-writable) while allowing for modifications to non-protected portions of the OS paging structures and particularly the user space.

42. 发明申请

US20190156183A1 DEFENDING NEURAL NETWORKS BY RANDOMIZING MODEL WEIGHTS 审中-公开
公开(公告)号：US20190156183A1
公开(公告)日：2019-05-23
申请号：US16233700
申请日：2018-12-27
申请人： David M. Durham , Michael Kounavis , Oleg Pogorelik , Alex Nayshtut , Omer Ben-Shalom , Antonios Papadimitriou
发明人： David M. Durham , Michael Kounavis , Oleg Pogorelik , Alex Nayshtut , Omer Ben-Shalom , Antonios Papadimitriou
IPC分类号： G06N3/04 , G06N3/063 , G06N3/08 , G06F17/18 , G06F7/58
摘要： The present disclosure is directed to systems and methods for the selective introduction of low-level pseudo-random noise into at least a portion of the weights used in a neural network model to increase the robustness of the neural network and provide a stochastic transformation defense against perturbation type attacks. Random number generation circuitry provides a plurality of pseudo-random values. Combiner circuitry combines the pseudo-random values with a defined number of least significant bits/digits in at least some of the weights used to provide a neural network model implemented by neural network circuitry. In some instances, selection circuitry selects pseudo-random values for combination with the network weights based on a defined pseudo-random value probability distribution.

43. 发明授权

US09501668B2 Secure video ouput path 有权
标题翻译：安全视频输出路径
公开(公告)号：US09501668B2
公开(公告)日：2016-11-22
申请号：US14036263
申请日：2013-09-25
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , David M. Durham , Balaji Vembu , Xiaozhu Kang , Scott Janus , Jason Martin , Vincent R. Scarlata
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , David M. Durham , Balaji Vembu , Xiaozhu Kang , Scott Janus , Jason Martin , Vincent R. Scarlata
IPC分类号： H04N7/167 , G06F21/82 , G06F21/84 , G06F21/85 , H04N21/41 , H04N21/4143 , H04N21/4367
CPC分类号： G06F21/82 , G06F21/84 , G06F21/85 , H04N21/4122 , H04N21/4143 , H04N21/4367
摘要： Systems and methods for secure delivery of output surface bitmaps to a display engine. An example processing system comprises: an architecturally protected memory; and a processing core communicatively coupled to the architecturally protected memory, the processing core comprising a processing logic configured to implement an architecturally-protected execution environment by performing at least one of: executing instructions residing in the architecturally protected memory and preventing an unauthorized access to the architecturally protected memory; wherein the processing logic is further configured to provide a secure video output path by generating an output surface bitmap encrypted with a first encryption key and storing an encrypted first encryption key in an external memory, wherein the encrypted first encryption key is produced by encrypting the first encryption key with a second encryption key.
摘要翻译：用于将输出表面位图安全传递到显示引擎的系统和方法。一个示例处理系统包括：架构受保护的存储器; 以及处理核心，其通信地耦合到所述体系结构保护的存储器，所述处理核心包括处理逻辑，所述处理逻辑被配置为通过执行以下中的至少一个来实现架构保护的执行环境：执行驻留在所述体系结构保护的存储器中的指令，建筑保护记忆; 其中所述处理逻辑还被配置为通过生成用第一加密密钥加密并将加密的第一加密密钥存储在外部存储器中的输出表面位图来提供安全视频输出路径，其中所述加密的第一加密密钥是通过加密所述第一加密密钥具有第二加密密钥的加密密钥。

44. 发明授权

US09405570B2 Low latency virtual machine page table management 有权
标题翻译：低延迟虚拟机页面表管理
公开(公告)号：US09405570B2
公开(公告)日：2016-08-02
申请号：US13341891
申请日：2011-12-30
申请人： Ravi L. Sahita , David M. Durham , Gilbert Neiger , Andrew V. Anderson , Scott D. Rodgers
发明人： Ravi L. Sahita , David M. Durham , Gilbert Neiger , Andrew V. Anderson , Scott D. Rodgers
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F2009/45583
摘要： Various embodiments of this disclosure may describe method, apparatus and system for reducing system latency caused by switching memory page permission views between programs while still protecting critical regions of the memory from attacks of malwares. Other embodiments may be disclosed and claimed.
摘要翻译：本公开的各种实施例可以描述用于减少由程序之间切换存储器页面许可视图而引起的系统延迟的方法，装置和系统，同时仍保护存储器的关键区域免受恶意软件的攻击。可以公开和要求保护其他实施例。

45. 发明申请

US20160179665A1 CONTROL OF ENTRY INTO PROTECTED MEMORY VIEWS 有权
标题翻译：进入受保护的存储器视图的控制
公开(公告)号：US20160179665A1
公开(公告)日：2016-06-23
申请号：US14581730
申请日：2014-12-23
申请人： Michael LeMay , Ravi L. Sahita , Barry E. Huntley , David M. Durham , Vedvyas Shanbhogue
发明人： Michael LeMay , Ravi L. Sahita , Barry E. Huntley , David M. Durham , Vedvyas Shanbhogue
IPC分类号： G06F12/08 , G06F9/455
CPC分类号： G06F12/08 , G06F9/45558 , G06F12/1009 , G06F12/1491 , G06F21/79 , G06F2009/45583 , G06F2009/45591 , G06F2212/151 , G06F2212/657
摘要： Generally, this disclosure provides systems, devices, methods and computer readable media for controlled memory view switching. The system may include a memory module comprising a shared address space between a first memory view and a second memory view. The system may also include a virtual machine monitor (VMM) to maintain a list of Controlled View Switch (CVS) descriptors. The system may further include a processor to receive a memory view switch request and to execute an instruction to save processor state information and switch from the first memory view to the second memory view, wherein the second memory view is specified by an extended page table pointer (EPTP) provided by one of the CVS descriptors.
摘要翻译：通常，本公开提供了用于受控存储器视图切换的系统，设备，方法和计算机可读介质。该系统可以包括存储器模块，该存储器模块包括第一存储器视图和第二存储器视图之间的共享地址空间。该系统还可以包括维护受控视图切换（CVS）描述符的列表的虚拟机监视器（VMM）。该系统还可以包括处理器，用于接收存储器视图切换请求并且执行用于保存处理器状态信息并从第一存储器视图切换到第二存储器视图的指令，其中第二存储器视图由扩展页表指针（EPTP）由其中一个CVS描述符提供。

46. 发明授权

US08751782B2 Secure local boot using third party data store (3PDS) based ISO image 有权
标题翻译：使用基于第三方数据存储（3PDS）的ISO映像进行本地启动
公开(公告)号：US08751782B2
公开(公告)日：2014-06-10
申请号：US12970698
申请日：2010-12-16
申请人： Hormuzd M. Khosravi , Divya Naidu Kolar Sundar , David M. Durham
发明人： Hormuzd M. Khosravi , Divya Naidu Kolar Sundar , David M. Durham
IPC分类号： G06F9/00 , G06F15/177 , G06F11/30 , G06F12/14 , G06F7/04 , G06F17/30
CPC分类号： G06F21/572 , G06F21/575
摘要： In some embodiments, the invention involves a method and apparatus for secure/authenticated local boot of a host operating system on a computing platform using active management technology (AMT) with a third party data store (3PDS)-based ISO firmware image. A portion of non-volatile memory is hardware secured against access by the host processor and OS, and accessible only to the AMT. The AMT comprises an AT/ATAPI protocol emulator to access an ISO boot image from secured memory, while appearing to the host processor as a communication with an AT/ATAPI device. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，本发明涉及一种用于使用基于第三方数据存储（3PDS）的ISO固件映像的主动管理技术（AMT）在计算平台上安全/认证的主机操作系统本地引导的方法和装置。非易失性存储器的一部分是由主机处理器和OS访问的硬件安全的，并且只能由AMT访问。 AMT包括AT / ATAPI协议仿真器，用于从安全存储器访问ISO引导映像，同时作为与AT / ATAPI设备的通信向主机处理器呈现。描述和要求保护其他实施例。

47. 发明申请

US20140096068A1 DEVICE AND METHOD FOR SECURE USER INTERFACE GESTURE PROCESSING USING PROCESSOR GRAPHICS 有权
标题翻译：使用处理器图形确保用户界面姿态处理的设备和方法
公开(公告)号：US20140096068A1
公开(公告)日：2014-04-03
申请号：US13631288
申请日：2012-09-28
申请人： Prashant Dewan , Siddhartha Chhabra , Xiaozhu Kang , Xiaoning Li , Uday R. Savagaonkar , David M. Durham , Paul S. Schmitz , Michael A. Goldsmith , Jason Martin
发明人： Prashant Dewan , Siddhartha Chhabra , Xiaozhu Kang , Xiaoning Li , Uday R. Savagaonkar , David M. Durham , Paul S. Schmitz , Michael A. Goldsmith , Jason Martin
IPC分类号： G06F3/0481 , G06F3/041
CPC分类号： G06F3/0481 , G06F3/041 , G06F3/04883 , G06F21/74 , G06F21/82
摘要： A device and method for securely rendering content on a gesture-enabled computing device includes initializing a secure execution environment on a processor graphics of the computing device. The computing device transfers view rendering code and associated state data to the secure execution environment. An initial view of the content is rendered by executing the view rendering code in the secure execution environment. A gesture is recognized, and an updated view of the content is rendered in the secure execution environment in response to the gesture. The gesture may include a touch gesture recognized on a touch screen, or a physical gesture of the user recognized by a camera. After the updated view of the content is rendered, the main processor of the computing device may receive updated view data from the secure execution environment.
摘要翻译：用于在启用姿势的计算设备上安全地呈现内容的设备和方法包括在计算设备的处理器图形上初始化安全执行环境。计算设备将视图呈现代码和相关联的状态数据传送到安全执行环境。通过在安全执行环境中执行视图呈现代码来呈现内容的初始视图。识别手势，并且响应于手势在安全执行环境中呈现内容的更新视图。手势可以包括在触摸屏上识别的触摸手势，或者由相机识别的用户的身体手势。在呈现内容的更新视图之后，计算设备的主处理器可以从安全执行环境接收更新的视图数据。

48. 发明申请

US20140095870A1 DEVICE, METHOD, AND SYSTEM FOR CONTROLLING ACCESS TO WEB OBJECTS OF A WEBPAGE OR WEB-BROWSER APPLICATION 审中-公开
标题翻译：用于控制访问网页或网络浏览器应用程序的WEB对象的设备，方法和系统
公开(公告)号：US20140095870A1
公开(公告)日：2014-04-03
申请号：US13631419
申请日：2012-09-28
申请人： Prashant Dewan , David M. Durham
发明人： Prashant Dewan , David M. Durham
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： H04L9/3231 , G06F21/32 , H04L9/0866 , H04L63/0428 , H04L63/0861 , H04L67/02 , H04L67/42
摘要： A method and device for securely displaying web content with secure web objects across untrusted channels includes downloading web content from a web server. The web content includes tags that a web browser uses to authenticate the current user and identify encrypted web objects packaged in the web content. The computing device authenticates the current user using a biometric recognition procedure. If the current user is authenticated and determined to be authorized to view the decrypted web object, the encrypted web object is decrypted and displayed to the user. If the user is unauthenticated, the encrypted web object is displayed in place of the encrypted web object such that the decrypted web object is displayed for only authorized persons physically present at the computing device. The biometric recognition procedure and web object decryption processes are protected through secure media path circuitry and secure memory.
摘要翻译：用于在不受信任的频道上安全地显示具有安全web对象的web内容的方法和装置包括从Web服务器下载web内容。网页内容包括网页浏览器用来验证当前用户并识别打包在网页内容中的加密网页对象的标签。计算设备使用生物识别程序认证当前用户。如果当前用户被认证并被确定为被授权以查看解密的web对象，则加密的web对象被解密并显示给用户。如果用户未经身份验证，则加密的web对象被显示代替加密的web对象，使得被解密的web对象被显示给仅在物理存在于计算设备处的授权人员。生物识别程序和web对象解密过程通过安全媒体路径电路和安全存储器进行保护。

49. 发明授权

US08635705B2 Computer system and method with anti-malware 有权
标题翻译：具有反恶意软件的计算机系统和方法
公开(公告)号：US08635705B2
公开(公告)日：2014-01-21
申请号：US12658876
申请日：2010-02-17
申请人： Ravi L. Sahita , David M. Durham , Steve Orrin , Yasser Rasheed , Prasanna G. Mulgaonkar , Paul S. Schmitz , Hormuzd M. Khosravi
发明人： Ravi L. Sahita , David M. Durham , Steve Orrin , Yasser Rasheed , Prasanna G. Mulgaonkar , Paul S. Schmitz , Hormuzd M. Khosravi
IPC分类号： G06F11/30 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： G06F21/53 , G06F21/55
摘要： In some embodiments, approaches may provide an out-of-band (OOB) agent to protect a platform. The OOB agent may be able to use non-TRS methods to measure and protect an in-band security agent. In some embodiments, a manageability engine can provide out of band connectivity to the in-band and out-of-band security agents and provide access to the system memory resources without having to rely on OS services. This can be used for a trusted anti-malware and remediation service.
摘要翻译：在一些实施例中，方法可以提供带外（OOB）代理来保护平台。 OOB代理可能能够使用非TRS方法来测量和保护带内安全代理。在一些实施例中，可管理性引擎可以向带内和带外安全代理提供带外连接，并提供对系统存储器资源的访问，而不必依赖于OS服务。这可以用于受信任的反恶意软件和修复服务。

50. 发明授权

US07653727B2 Cooperative embedded agents 失效
标题翻译：合作嵌入式代理
公开(公告)号：US07653727B2
公开(公告)日：2010-01-26
申请号：US10809316
申请日：2004-03-24
申请人： David M. Durham , Vincent J. Zimmer , Carey W. Smith , Raj Yavatkar , Travis T. Schluessler , Dylan C. Larson , Carlos V. Rozas
发明人： David M. Durham , Vincent J. Zimmer , Carey W. Smith , Raj Yavatkar , Travis T. Schluessler , Dylan C. Larson , Carlos V. Rozas
IPC分类号： G06F15/173 , G06F9/00 , G06F9/24 , G06F15/177
CPC分类号： G06F9/4411
摘要： Cooperative embedded agents as well as manageability and security operations that can be performed on a host system having cooperative embedded agents are disclosed.
摘要翻译：公开了可以在具有协作嵌入式代理的主机系统上执行的协同嵌入式代理以及可管理性和安全性操作。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式