专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09396329B2 Methods and apparatus for a safe and secure software update solution against attacks from malicious or unauthorized programs to update protected secondary storage 有权
标题翻译：用于安全和安全的软件更新解决方案和装置，以防止恶意或未经授权的程序来更新受保护的辅助存储
公开(公告)号：US09396329B2
公开(公告)日：2016-07-19
申请号：US13274753
申请日：2011-10-17
申请人： Karthikeyan Vaidyanathan , Akshay R. Kadam , Royce Fernald
发明人： Karthikeyan Vaidyanathan , Akshay R. Kadam , Royce Fernald
IPC分类号： G06F17/00 , G06F21/55 , G06F21/57
CPC分类号： G06F21/55 , G06F21/57
摘要： Described herein are articles, systems, and methods for using a storage controller to protect secure data blocks through the enforcement of a read only policy. In some embodiments, the articles use a combination of hardware protections and software protections (e.g., virtualization) to protect a system against attack from malware while such secure data is updated. Also described are systems and methods for securely updating data blocks secured in this fashion, and detecting and preventing the corruption of data stored on secondary storage media using a disk eventing mechanism.
摘要翻译：这里描述的是通过执行只读策略来使用存储控制器来保护安全数据块的文章，系统和方法。在一些实施例中，文章使用硬件保护和软件保护（例如虚拟化）的组合来保护系统在更新安全数据时不受恶意软件攻击。还描述了以这种方式安全地更新数据块的系统和方法，并且使用盘事件机制来检测和防止存储在辅助存储介质上的数据的损坏。

2. 发明申请

US20130097655A1 METHODS AND APPARATUS FOR A SAFE AND SECURE SOFTWARE UPDATE SOLUTION AGAINST ATTACKS FROM MALICIOUS OR UNAUTHORIZED PROGRAMS TO UPDATE PROTECTED SECONDARY STORAGE 有权
标题翻译：安全和安全的软件更新解决方案和装置，以防止从恶意程序或未经授权的程序到更新保护的次要存储的攻击
公开(公告)号：US20130097655A1
公开(公告)日：2013-04-18
申请号：US13274753
申请日：2011-10-17
申请人： Karthikeyan Vaidyanathan , Akshay R. Kadam , Royce Fernald
发明人： Karthikeyan Vaidyanathan , Akshay R. Kadam , Royce Fernald
IPC分类号： G06F21/00
CPC分类号： G06F21/55 , G06F21/57
摘要： Described herein are articles, systems, and methods for using a storage controller to protect secure data blocks through the enforcement of a read only policy. In some embodiments, the articles use a combination of hardware protections and software protections (e.g., virtualization) to protect a system against attack from malware while such secure data is updated. Also described are systems and methods for securely updating data blocks secured in this fashion, and detecting and preventing the corruption of data stored on secondary storage media using a disk eventing mechanism.
摘要翻译：这里描述的是通过执行只读策略来使用存储控制器来保护安全数据块的文章，系统和方法。在一些实施例中，文章使用硬件保护和软件保护（例如虚拟化）的组合来保护系统在更新安全数据时不受恶意软件攻击。还描述了以这种方式安全地更新数据块的系统和方法，并且使用盘事件机制来检测和防止存储在辅助存储介质上的数据的损坏。

3. 发明申请

US20120117348A1 TECHNIQUES FOR SECURITY MANAGEMENT PROVISIONING AT A DATA STORAGE DEVICE 有权
标题翻译：用于在数据存储设备上提供安全管理的技术
公开(公告)号：US20120117348A1
公开(公告)日：2012-05-10
申请号：US12941915
申请日：2010-11-08
申请人： Nicholas D. Triantafillou , Paritosh Saxena , Robert W. Strong , Richard J. Heiler , Eliezer Tamir , Simoni Ben-Michael , Brad W. Stewart , Akshay R. Kadam , Men Long , James T. Doyle , Hormuzd M. Khosravi , Lokpraveen B. Mosur , Edward J. Pullin , Paul S. Schmitz , Carol L. Barrett , Paul J. Thadikaran
发明人： Nicholas D. Triantafillou , Paritosh Saxena , Robert W. Strong , Richard J. Heiler , Eliezer Tamir , Simoni Ben-Michael , Brad W. Stewart , Akshay R. Kadam , Men Long , James T. Doyle , Hormuzd M. Khosravi , Lokpraveen B. Mosur , Edward J. Pullin , Paul S. Schmitz , Carol L. Barrett , Paul J. Thadikaran
IPC分类号： G06F12/14
CPC分类号： G06F21/566
摘要： Techniques for a data storage device to locally implement security management functionality. In an embodiment, a security management process of the data storage device is to determine whether an access to non-volatile media of the data storage device is authorized. In certain embodiments, the data storage device is to restrict access to a secure region of the non-volatile storage media, the secure region to store information used and/or generated by a security management process of the data storage device.
摘要翻译：用于数据存储设备本地实现安全管理功能的技术。在一个实施例中，数据存储设备的安全管理过程是确定对数据存储设备的非易失性介质的访问是否被授权。在某些实施例中，数据存储设备将限制对非易失性存储介质的安全区域的访问，该安全区域用于存储由数据存储设备的安全管理过程使用和/或生成的信息。

4. 发明授权

US09064116B2 Techniques for security management provisioning at a data storage device 有权
标题翻译：在数据存储设备上进行安全管理配置的技术
公开(公告)号：US09064116B2
公开(公告)日：2015-06-23
申请号：US12941915
申请日：2010-11-08
申请人： Nicholas D. Triantafillou , Paritosh Saxena , Robert W. Strong , Richard J. Heiler , Eliezer Tamir , Simoni Ben-Michael , Brad W. Stewart , Akshay R. Kadam , Men Long , James T. Doyle , Hormuzd M. Khosravi , Lokpraveen B. Mosur , Edward J. Pullin , Paul S. Schmitz , Carol L. Barrett , Paul J. Thadikaran
发明人： Nicholas D. Triantafillou , Paritosh Saxena , Robert W. Strong , Richard J. Heiler , Eliezer Tamir , Simoni Ben-Michael , Brad W. Stewart , Akshay R. Kadam , Men Long , James T. Doyle , Hormuzd M. Khosravi , Lokpraveen B. Mosur , Edward J. Pullin , Paul S. Schmitz , Carol L. Barrett , Paul J. Thadikaran
IPC分类号： G06F12/00 , G06F21/56
CPC分类号： G06F21/566
摘要： Techniques for a data storage device to locally implement security management functionality. In an embodiment, a security management process of the data storage device is to determine whether an access to non-volatile media of the data storage device is authorized. In certain embodiments, the data storage device is to restrict access to a secure region of the non-volatile storage media, the secure region to store information used and/or generated by a security management process of the data storage device.
摘要翻译：用于数据存储设备本地实现安全管理功能的技术。在一个实施例中，数据存储设备的安全管理过程是确定对数据存储设备的非易失性介质的访问是否被授权。在某些实施例中，数据存储设备将限制对非易失性存储介质的安全区域的访问，该安全区域用于存储由数据存储设备的安全管理过程使用和/或生成的信息。

5. 发明授权

US08413253B2 Protecting persistent secondary platform storage against attack from malicious or unauthorized programs 有权
标题翻译：保护持久的二级平台存储，防止恶意或未授权程序的攻击
公开(公告)号：US08413253B2
公开(公告)日：2013-04-02
申请号：US12655466
申请日：2009-12-30
申请人： Akshay R. Kadam
发明人： Akshay R. Kadam
IPC分类号： G06F21/00
CPC分类号： G06F12/1425
摘要： A high integrity storage manager protects critical system files by maintaining a list of protected disk blocks in hardware, such as in a memory of a microcontroller. The memory is inaccessible to software running on a host system comprising the microcontroller. This list of protected disk blocks is protected as “read only” by the hardware so that no write operation issued by software running on the host platform can overwrite a protected disk block. The high integrity storage manager intercepts write operations issued by applications via the operating system and file system running on the host processor and compares the disk blocks targeted by those write operations to the list of protected disk blocks. A write operation that would overwrite a disk block in the list of protected disk blocks is prevented from completion. Other embodiments are described and claimed.
摘要翻译：高完整性存储管理器通过在硬件（例如微控制器的存储器）中维护受保护的磁盘块的列表来保护关键系统文件。在包含微控制器的主机系统上运行的软件无法访问存储器。受保护的磁盘块的列表受到硬件的只读保护，因此在主机平台上运行的软件不会发出写操作可以覆盖受保护的磁盘块。高完整性存储管理器通过主机处理器上运行的操作系统和文件系统拦截应用程序发出的写入操作，并将这些写入操作所针对的磁盘块与受保护的磁盘块列表进行比较。将阻止覆盖受保护磁盘块列表中的磁盘块的写入操作完成。描述和要求保护其他实施例。

6. 发明申请

US20110162077A1 Protecting persistent secondary platform storage against attack from malicious or unauthorized programs 有权
标题翻译：保护持久的二级平台存储，防止恶意或未授权程序的攻击
公开(公告)号：US20110162077A1
公开(公告)日：2011-06-30
申请号：US12655466
申请日：2009-12-30
申请人： Akshay R. Kadam
发明人： Akshay R. Kadam
IPC分类号： G06F12/14
CPC分类号： G06F12/1425
摘要： A high integrity storage manager protects critical system files by maintaining a list of protected disk blocks in hardware, such as in a memory of a microcontroller. The memory is inaccessible to software running on a host system comprising the microcontroller. This list of protected disk blocks is protected as “read only” by the hardware so that no write operation issued by software running on the host platform can overwrite a protected disk block. The high integrity storage manager intercepts write operations issued by applications via the operating system and file system running on the host processor and compares the disk blocks targeted by those write operations to the list of protected disk blocks. A write operation that would overwrite a disk block in the list of protected disk blocks is prevented from completion. Other embodiments are described and claimed.
摘要翻译：高完整性存储管理器通过在硬件（例如微控制器的存储器）中维护受保护的磁盘块的列表来保护关键系统文件。在包含微控制器的主机系统上运行的软件无法访问存储器。受保护的磁盘块列表被硬件保护为“只读”，因此主机平台上运行的软件不会发出写入操作可以覆盖受保护的磁盘块。高完整性存储管理器通过主机处理器上运行的操作系统和文件系统拦截应用程序发出的写入操作，并将这些写入操作所针对的磁盘块与受保护的磁盘块列表进行比较。将阻止覆盖受保护磁盘块列表中的磁盘块的写入操作完成。描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式