专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07721341B2 Method and system for allowing code to be securely initialized in a computer 有权
标题翻译：允许在计算机中安全地初始化代码的方法和系统
公开(公告)号：US07721341B2
公开(公告)日：2010-05-18
申请号：US11152909
申请日：2005-06-15
申请人： Paul England , Bryan Willman
发明人： Paul England , Bryan Willman
IPC分类号： G06F12/14 , G06F21/22
CPC分类号： G06F15/177 , G06F9/4405 , G06F21/575
摘要： A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).
摘要翻译：存储器控制器防止CPU和其他I / O总线主机在代码（例如，可信核心）初始化过程中访问存储器。存储器控制器重置计算机中的CPU，并允许CPU开始访问特定位置的存储器（由存储器控制器标识给CPU）。一旦该CPU执行了初始化过程，代码就可以运行，任何其他CPU都可以访问存储器（复位后），以及任何其他总线主机（受到启动代码的任何控制）。

2. 发明申请

US20050204128A1 System and method for n-way authentication in a network 有权
标题翻译：网络中n路认证的系统和方法
公开(公告)号：US20050204128A1
公开(公告)日：2005-09-15
申请号：US10766060
申请日：2004-01-28
申请人： Michael Aday , Bryan Willman , Marcus Peinado , Alan Geller
发明人： Michael Aday , Bryan Willman , Marcus Peinado , Alan Geller
IPC分类号： H04L9/00
CPC分类号： H04L9/0825 , H04L9/14 , H04L2209/56
摘要： A method of controlling information exposure in a multiparty transaction includes an originating transaction participant cryptographically encoding all information for each of the transaction participants such that a unique data content and encryption are used for each of the messages destined to the other transaction participants. The cryptographically encoded messages are transmitted to the transaction participants such that each may decrypt their message and respond to a primary transaction participant with status concerning their portion of the transaction. After reception of affirmative status messages from the transaction participants, the primary transaction participant may transmit messages to the responding transaction participants to execute the multiparty transaction. The originating transaction participant may also be provided an indication that the multiparty transaction is executed.
摘要翻译：控制多方交易中的信息曝光的方法包括对每个交易参与者的所有信息进行密码编码的始发交易参与者，从而为发往其他交易参与者的每个消息使用唯一的数据内容和加密。密码编码的消息被传送到交易参与者，使得每个消息可以解密他们的消息并且响应具有关于其交易部分的状态的主交易参与者。在从交易参与者接收到肯定状态消息之后，主交易参与者可以向响应的交易参与者发送消息以执行多方交易。也可以向源交易参与者提供执行多方交易的指示。

3. 发明申请

US20050091503A1 Providing secure input and output to a trusted agent in a system with a high-assurance execution environment 有权
标题翻译：在具有高度可靠执行环境的系统中为可信代理提供安全的输入和输出
公开(公告)号：US20050091503A1
公开(公告)日：2005-04-28
申请号：US10693407
申请日：2003-10-24
申请人： Paul Roberts , Christine Chew , Bryan Willman , Kenneth Ray
发明人： Paul Roberts , Christine Chew , Bryan Willman , Kenneth Ray
IPC分类号： G06F9/46 , G06F1/00 , G06F9/00 , G06F21/00 , H04K1/00 , H04L9/00
CPC分类号： G06F21/83 , G06F21/53 , G06F21/57 , G06F21/84 , G06F2221/2105 , G06F2221/2113
摘要： Techniques are disclosed to provide security for user output and input in which a first, host operating system is used along with a second, high assurance operating system (nexus), where the first system provides at least some of the infrastructure for the second system. A trusted UI engine has a trusted input manager and a trusted output manager. The trusted input manager controls access to trusted input, distributing decrypted input to the host operating system where appropriate, or to the appropriate process running in the nexus. The trusted output manager manages output to the display, and allows trusted agents in the nexus to output data for display without needing to be aware of output-device-dependent details.
摘要翻译：披露技术来提供用户输出和输入的安全性，其中使用第一主机操作系统以及第二高保证操作系统（nexus），其中第一系统为第二系统提供至少一些基础设施。受信任的UI引擎具有可信输入管理器和可信输出管理器。受信任的输入管理器控制对可信输入的访问，在适当的情况下将解密的输入分发到主机操作系统，或者在关联中运行适当的进程。受信任的输出管理器管理到显示器的输出，并允许连接中的可信代理输出数据进行显示，而不需要注意输出设备相关细节。

4. 发明申请

US20050086517A1 Page granular curtained memory via mapping control 审中-公开
标题翻译：通过映射控制的页面精细窗帘内存
公开(公告)号：US20050086517A1
公开(公告)日：2005-04-21
申请号：US10970104
申请日：2004-10-21
申请人： Bryan Willman , Paul England
发明人： Bryan Willman , Paul England
IPC分类号： G06F12/14 , H04L9/00
CPC分类号： G06F12/145 , G06F12/1491
摘要： Methods of providing and limiting access to trusted memory are provided. Trusted memory pages are not mapped with page map pages. When a central processor is operated in a page-mapping mode, access to the trusted memory is limited. In particular, without mapping information, software and hardware modules cannot access and modify the contents of trusted memory sections.
摘要翻译：提供了提供和限制访问可信存储器的方法。信任的内存页面不与页面映射页面进行映射。当中央处理器在页面映射模式下操作时，对可信存储器的访问受到限制。具体来说，没有映射信息，软件和硬件模块不能访问和修改可信存储器部分的内容。

5. 发明授权

US08122361B2 Providing a graphical user interface in a system with a high-assurance execution environment 有权
标题翻译：在具有高保证执行环境的系统中提供图形用户界面
公开(公告)号：US08122361B2
公开(公告)日：2012-02-21
申请号：US10691759
申请日：2003-10-23
申请人： Idan Avraham , Christine M. Chew , Paul C. Roberts , Bryan Willman
发明人： Idan Avraham , Christine M. Chew , Paul C. Roberts , Bryan Willman
IPC分类号： G06F3/00 , H04L29/06
CPC分类号： G06F21/84
摘要： Techniques are disclosed to provide security for graphical user interface elements being displayed in a system having a host operating system and a high assurance operating system. Graphical user interface elements associated with the high-assurance operating system may be prevented from being obscured and from any partial transparency. Additionally, a piece of secret information may be stored and displayed by graphical user interface elements associated with the high-assurance operating system. Coordinating certain elements of the graphical user interface elements associated with the high assurance operating system also helps to identify legitimate elements associated with the high assurance operating system. Public title information may be furnished to a host operating system windowing system to identify a window owned by a process running on a high-assurance operating system. Private title information associated with the same window may be used in the high assurance operating system.
摘要翻译：公开了技术来提供在具有主机操作系统和高保证操作系统的系统中显示的图形用户界面元素的安全性。可以防止与高保证操作系统相关联的图形用户界面元素被遮蔽和不受任何部分透明度影响。此外，一个秘密信息可以由与高保证操作系统相关联的图形用户界面元素存储和显示。与高保证操作系统相关联的图形用户界面元素的某些元素的协调也有助于识别与高保证操作系统相关联的合法元素。可以向主机操作系统窗口系统提供公开标题信息，以识别在高保证操作系统上运行的进程所拥有的窗口。可以在高保证操作系统中使用与同一窗口相关联的私有标题信息。

6. 发明申请

US20090313397A1 Methods and Systems for Protecting Data in USB Systems 审中-公开
标题翻译： USB系统数据保护方法与系统
公开(公告)号：US20090313397A1
公开(公告)日：2009-12-17
申请号：US12348487
申请日：2009-01-05
申请人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
发明人： Paul England , Kenneth D. Ray , Marcus Peinado , John C. Dunn , Glen Slick , Bryan Willman
IPC分类号： G06F13/28
CPC分类号： G06F12/1408 , G06F3/065 , G06F13/28 , G06F13/362 , G06F13/4282 , G06F21/606 , G06F21/72 , G06F21/73 , G06F21/78 , G06F21/85 , G06F2212/1052 , G06F2221/0704 , G06F2221/2105 , G06F2221/2129 , G06F2221/2147 , G06F2221/2153
摘要： The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.
摘要翻译：下面描述的各种实施例旨在从在USB总线上操作的I / O设备到主机（例如安全软件应用或安全内核）上执行的软件提供经认证和保密的消息传递。这些实施例可以防止在主计算机上执行的软件所征收的攻击。在一些实施例中，提供了安全的功能部件或模块，并且可以使用加密技术来提供对USB数据的观察和操纵的保护。在其他实施例中，USB数据可以通过不被利用（或不需要利用）加密技术的技术来保护。根据这些实施例，USB设备可以被指定为“安全”，因此，可以通过USB向这些指定设备发送和从这些指定设备发送的数据提供到受保护的存储器中。可以利用内存间接技术来确保进出安全设备的数据受到保护。

7. 发明申请

US20050246511A1 Special-use heaps 有权
标题翻译：专用堆
公开(公告)号：US20050246511A1
公开(公告)日：2005-11-03
申请号：US10836423
申请日：2004-04-30
申请人： Bryan Willman , Nathan Lewis
发明人： Bryan Willman , Nathan Lewis
IPC分类号： G06F12/02 , G06F12/14
CPC分类号： G06F12/023 , G06F12/1416
摘要： Special purpose heaps are created to store different classes of data to which different rules apply. A library of functions is provided which is designed to respect the different classes of rules that apply to the different heaps, by storing data only on a heap that is designated for use with the proper class of data, and by resisting the performance of actions on data in a heap that is inconsistent with the rules that apply to the heap. The use of plural heaps in this manner discourages programmer error in which an operation is performed on data that is inconsistent with the data, since the programmer would explicitly have to copy data from one heap to the other in order to perform the action. In one example, one heap is designated for the storage of secret data, and another heap is designated for general-purpose (non-secret) data.
摘要翻译：创建专用堆以存储适用不同规则的不同类别的数据。提供了一个函数库，旨在通过将数据仅存储在指定用于正确类别的数据的堆上，并且通过抵抗对不同堆的操作的执行来遵守适用于不同堆的规则的不同类别堆中的数据与应用于堆的规则不一致。以这种方式使用多个堆不妨碍对与数据不一致的数据执行操作的程序员错误，因为程序员将明确地将数据从一个堆复制到另一个堆以执行该操作。在一个示例中，指定一个堆用于存储秘密数据，另一个堆被指定用于通用（非秘密）数据。

8. 发明申请

US20050235166A1 Method and system for allowing code to be securely initialized in a computer 有权
标题翻译：允许在计算机中安全地初始化代码的方法和系统
公开(公告)号：US20050235166A1
公开(公告)日：2005-10-20
申请号：US11152909
申请日：2005-06-15
申请人： Paul England , Bryan Willman
发明人： Paul England , Bryan Willman
IPC分类号： G06F1/24 , G06F9/445 , H04L9/32
CPC分类号： G06F15/177 , G06F9/4405 , G06F21/575
摘要： A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).
摘要翻译：存储器控制器防止CPU和其他I / O总线主机在代码（例如，可信核心）初始化过程中访问存储器。存储器控制器重置计算机中的CPU，并允许CPU开始访问特定位置的存储器（由存储器控制器标识给CPU）。一旦该CPU执行了初始化过程，代码就可以运行，任何其他CPU都可以访问存储器（复位后），以及任何其他总线主机（受到启动代码的任何控制）。

9. 发明授权

US07496768B2 Providing secure input and output to a trusted agent in a system with a high-assurance execution environment 有权
标题翻译：在具有高度可靠执行环境的系统中为可信代理提供安全的输入和输出
公开(公告)号：US07496768B2
公开(公告)日：2009-02-24
申请号：US10693407
申请日：2003-10-24
申请人： Paul C. Roberts , Christine M. Chew , Bryan Willman , Kenneth D. Ray
发明人： Paul C. Roberts , Christine M. Chew , Bryan Willman , Kenneth D. Ray
IPC分类号： H04L9/32 , H04L9/00 , G06F11/30 , G06F17/30
CPC分类号： G06F21/83 , G06F21/53 , G06F21/57 , G06F21/84 , G06F2221/2105 , G06F2221/2113
摘要： Techniques are disclosed to provide security for user output and input in which a first, host operating system is used along with a second, high assurance operating system (nexus), where the first system provides at least some of the infrastructure for the second system. A trusted UI engine has a trusted input manager and a trusted output manager. The trusted input manager controls access to trusted input, distributing decrypted input to the host operating system where appropriate, or to the appropriate process running in the nexus. The trusted output manager manages output to the display, and allows trusted agents in the nexus to output data for display without needing to be aware of output-device-dependent details.
摘要翻译：披露技术来提供用户输出和输入的安全性，其中使用第一主机操作系统以及第二高保证操作系统（nexus），其中第一系统为第二系统提供至少一些基础设施。受信任的UI引擎具有可信输入管理器和可信输出管理器。受信任的输入管理器控制对可信输入的访问，在适当的情况下将解密的输入分发到主机操作系统，或者在关联中运行适当的进程。受信任的输出管理器管理到显示器的输出，并允许连接中的可信代理输出数据进行显示，而不需要注意输出设备相关细节。

10. 发明申请

US20070112999A1 Efficient power management of a system with virtual machines 有权
标题翻译：具有虚拟机的系统的高效电源管理
公开(公告)号：US20070112999A1
公开(公告)日：2007-05-17
申请号：US11437109
申请日：2006-05-18
申请人： Adrian Oney , Bryan Willman , Eric Traut , Forrest Foltz , Matthew Hendel , Rene Vega
发明人： Adrian Oney , Bryan Willman , Eric Traut , Forrest Foltz , Matthew Hendel , Rene Vega
IPC分类号： G06F21/00
CPC分类号： G06F9/442 , G06F1/28 , G06F1/30 , G06F1/3246 , G06F1/3268 , G06F1/3287 , G06F1/329 , G06F9/455 , G06F9/45545 , G06F9/45554 , G06F9/45558 , G06F9/50 , G06F17/00 , G06F17/30144 , G06F17/3015 , G06F21/53 , G06F21/575 , G06F21/6245 , G06F2009/45562 , G06F2009/45579 , G06F2009/45583
摘要： Efficient power management of a system with virtual machines is disclosed. In particular, such efficient power management may enable coordination of system-wide power changes with virtual machines. Additionally, such efficient power management may enable coherent power changes in a system with a virtual machine monitor. Furthermore, such efficient power management may enable dynamic control and communication of power state changes.
摘要翻译：公开了具有虚拟机的系统的有效功率管理。特别地，这种有效的功率管理可以实现与虚拟机协调系统范围的功率变化。此外，这种有效的功率管理可以使得具有虚拟机监视器的系统中的一致的功率改变。此外，这种有效的功率管理可以实现功率状态变化的动态控制和通信。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式