专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20150040130A1 VIRTUAL HIGH PRIVILEGE MODE FOR A SYSTEM MANAGEMENT REQUEST 审中-公开
标题翻译：用于系统管理请求的虚拟高优先权模式
公开(公告)号：US20150040130A1
公开(公告)日：2015-02-05
申请号：US14240198
申请日：2011-08-30
申请人： Valiuddin Y. Ali , Jose Paulo Xavier Pires , James M. Mann , Boris Balacheff , Chris I. Dalton
发明人： Valiuddin Y. Ali , Jose Paulo Xavier Pires , James M. Mann , Boris Balacheff , Chris I. Dalton
IPC分类号： G06F9/455 , G06F21/57
CPC分类号： G06F9/45558 , G06F9/4401 , G06F9/45541 , G06F21/57 , G06F21/572 , G06F21/575 , G06F2009/45587
摘要： A computing system and a method of handling a system management request. The computing system includes a virtual high-privilege mode in a trusted domain managed by the virtual machine monitor. The virtual high-privilege mode handles the system management request.
摘要翻译：计算系统和处理系统管理请求的方法。计算系统包括由虚拟机监视器管理的可信域中的虚拟高权限模式。虚拟高权限模式处理系统管理请求。

2. 发明授权

US09559842B2 Trusted key management for virtualized platforms 有权
标题翻译：虚拟化平台的可信密钥管理
公开(公告)号：US09559842B2
公开(公告)日：2017-01-31
申请号：US12242104
申请日：2008-09-30
申请人： Adrian John Baldwin , Chris I. Dalton
发明人： Adrian John Baldwin , Chris I. Dalton
IPC分类号： H04L9/32 , H04L9/08
CPC分类号： H04L9/083 , H04L2209/805
摘要： To provide a secure service to an application virtual machine running in a first domain of a virtualized computing platform, a second domain is arranged to run a corresponding service driver exclusively for the application virtual machine. As part of the secure service, the service driver effects a key-based cryptographic operation; to do so, the service driver has to obtain the appropriate key from a key manager. The key manager is arranged to store the key and to release it to the service driver only upon receiving evidence of its identity and being satisfied of compliance with release policies associated with the key. These policies include receipt of valid integrity metrics, signed by trusted-device functionality of the virtualized computing platform, for the service driver and the code on which it depends.
摘要翻译：为了向在虚拟化计算平台的第一域中运行的应用虚拟机提供安全服务，第二域被安排为专用于应用虚拟机运行相应的服务驱动器。作为安全服务的一部分，服务驱动程序实现了基于密钥的加密操作; 要这样做，服务驱动程序必须从密钥管理器获取适当的密钥。密钥管理器被安排为存储密钥，并且仅在接收到其身份的证据并且满足与密钥相关的释放策略的满足时将其释放给服务驱动器。这些策略包括为服务驱动程序及其所依赖的代码接收由虚拟化计算平台的可信设备功能签名的有效完整性度量。

3. 发明授权

US09129103B2 Authenticate a hypervisor with encoded information 有权
标题翻译：使用编码信息验证管理程序
公开(公告)号：US09129103B2
公开(公告)日：2015-09-08
申请号：US13824530
申请日：2011-01-28
申请人： Lan Wang , Boris Balacheff , Chris I. Dalton
发明人： Lan Wang , Boris Balacheff , Chris I. Dalton
IPC分类号： G06F21/44 , G06F9/455 , G06F21/57
CPC分类号： G06F21/44 , G06F9/45558 , G06F21/57 , G06F21/575 , G06F2009/45587
摘要： Disclosed embodiments relate to authenticating a hypervisor with encoded hypervisor information. In one embodiment, booting firmware 112 includes instructions to determine whether a received hypervisor 108 is an authentic hypervisor. In one embodiment, booting firmware 112 includes instructions to determine whether the received hypervisor 108 is in a selected configuration. In one embodiment, booting firmware 112 includes instructions to determine whether the receive hypervisor 108 is a selected version.
摘要翻译：公开的实施例涉及用编码的管理程序信息验证管理程序。在一个实施例中，启动固件112包括用于确定接收到的管理程序108是否是真正的管理程序的指令。在一个实施例中，引导固件112包括用于确定接收到的管理程序108是否处于所选配置的指令。在一个实施例中，引导固件112包括用于确定接收管理程序108是否是所选版本的指令。

4. 发明申请

US20140359259A1 Communication with a Virtual Trusted Runtime BIOS 有权
标题翻译：与虚拟可信运行时BIOS的通信
公开(公告)号：US20140359259A1
公开(公告)日：2014-12-04
申请号：US14238729
申请日：2011-09-29
申请人： Valiuddin Y. Ali , Jose Paulo Xavier Pires , James M. Mann , Boris Balacheff , Chris I. Dalton
发明人： Valiuddin Y. Ali , Jose Paulo Xavier Pires , James M. Mann , Boris Balacheff , Chris I. Dalton
IPC分类号： G06F21/57 , G06F9/455
CPC分类号： G06F21/572 , G06F9/4401 , G06F9/45541 , G06F9/45558 , G06F21/57 , G06F21/575 , G06F2009/45587 , H04L9/0877 , H04L63/0435 , H04L63/0442 , H04L63/0823
摘要： A computing system and a method of communicating with a virtual trusted runtime BIOS. The computing system can include hardware and a virtual machine monitor. A virtual trusted runtime BIOS can be managed by the virtual machine monitor. A communication channel can communicate with the virtual trusted runtime BIOS. The communication channel can be secured by a secure socket layer.
摘要翻译：计算系统和与虚拟可信运行时BIOS进行通信的方法。计算系统可以包括硬件和虚拟机监视器。虚拟可信运行时BIOS可以由虚拟机监视器管理。通信通道可以与虚拟可信运行时BIOS进行通信。通信通道可以通过安全的插座层来保护。

5. 发明授权

US08370834B2 Routing across a virtual network 有权
标题翻译：跨虚拟网络路由
公开(公告)号：US08370834B2
公开(公告)日：2013-02-05
申请号：US12400491
申请日：2009-03-09
申请人： Aled Edwards , Anna Fischer , Chris I Dalton , Patrick Goldsack
发明人： Aled Edwards , Anna Fischer , Chris I Dalton , Patrick Goldsack
IPC分类号： G06F9/455 , G06F15/173
CPC分类号： G06F9/5077 , G06F9/546 , H04L29/12028 , H04L45/58 , H04L61/103 , H04L67/10 , H04L69/32
摘要： A data center can share processing resources using virtual networks. A virtual machine manager (10) hosts one or more virtual machines (11, 411), the virtual machines forming part of a segmented virtual network (34). Outgoing messages from the virtual machines have an intermediate destination address of an intermediate node in a local segment of the segmented virtual network, and the virtual machine manager has a router (18) for determining a new intermediate destination address outside the local segment, for routing the given outgoing message. By having the router as part of the virtual machine manager rather than having only a switch in the virtual machine manager, the need for virtual machines for implementing gateways is avoided. This can reduce the number of “hops” for the message between virtual entities hosted, and thus improve performance. This can help a service provider to share physical processing resources of a data center between different clients having their own virtual networks.
摘要翻译：数据中心可以使用虚拟网络共享处理资源。虚拟机管理器（10）托管一个或多个虚拟机（11,411），所述虚拟机构成分段虚拟网络（34）的一部分。来自虚拟机的传出消息具有分段虚拟网络的本地段中的中间节点的中间目的地址，并且虚拟机管理器具有用于确定本地段之外的新的中间目的地地址的路由器（18），用于路由给定的传出消息。通过将路由器作为虚拟机管理器的一部分，而不是在虚拟机管理器中只有交换机，则避免了为实现网关而需要虚拟机。这可以减少托管的虚拟实体之间的消息跳数，从而提高性能。这可以帮助服务提供商在具有自己的虚拟网络的不同客户端之间共享数据中心的物理处理资源。

6. 发明申请

US20090199177A1 VIRTUAL COMPUTING INFRASTRUCTURE 审中-公开
标题翻译：虚拟计算基础设施
公开(公告)号：US20090199177A1
公开(公告)日：2009-08-06
申请号：US11718194
申请日：2005-10-28
申请人： Nigel Edwards , Chris I. Dalton , Adrian John Baldwin , Patrick Goldsack , Antonio Lain
发明人： Nigel Edwards , Chris I. Dalton , Adrian John Baldwin , Patrick Goldsack , Antonio Lain
IPC分类号： G06F9/455
CPC分类号： H04L67/1097 , G06F9/5077
摘要： A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. The system has a mapping manager to dynamically alter the mapping for balancing, performance, and redundancy. There can be more independence from the underlying physical configuration, compared to known methods of virtualizing only some of the entities. The mapping manager can be distributed across a number of entities on different physical servers arranged to cooperate with each other.
摘要翻译：系统具有映射到用于处理，存储和网络通信的物理资源的虚拟覆盖基础设施，虚拟基础设施具有用于处理，存储和网络通信的虚拟实体。系统具有映射管理器，用于动态更改映射以实现平衡，性能和冗余。与已知的仅虚拟化一些实体的方法相比，底层物理配置可以有更多的独立性。映射管理器可以分布在布置为彼此协作的不同物理服务器上的多个实体上。

7. 发明授权

US09542197B2 Router and a virtual trusted runtime BIOS 有权
标题翻译：路由器和虚拟可信运行时BIOS
公开(公告)号：US09542197B2
公开(公告)日：2017-01-10
申请号：US14347086
申请日：2011-10-19
申请人： Valiuddin Y Ali , Jose Paulo Xavier Pires , James M Mann , Boris Balacheff , Chris I. Dalton
发明人： Valiuddin Y Ali , Jose Paulo Xavier Pires , James M Mann , Boris Balacheff , Chris I. Dalton
IPC分类号： G06F9/44 , G06F9/455 , G06F21/57
CPC分类号： G06F21/572 , G06F9/4401 , G06F9/45541 , G06F9/45558 , G06F21/57 , G06F21/575 , G06F2009/45587 , H04L9/0877 , H04L63/0435 , H04L63/0442 , H04L63/0823
摘要： An implementation may include a virtual trusted runtime BIOS managed by the virtual machine monitor. A replacement portion of the virtual trusted runtime BIOS may be included. A router can replace an address to a resource of the virtual trusted runtime BIOS with the address to the resource of the replacement portion of the virtual trusted runtime BIOS.
摘要翻译：实现可以包括由虚拟机监视器管理的虚拟可信运行时BIOS。可以包括虚拟可信运行时BIOS的替换部分。路由器可以将虚拟可信运行时BIOS的资源的地址替换为虚拟可信运行时BIOS的替换部分的资源的地址。

8. 发明申请

US20140250294A1 Router And A Virtual Trusted Runtime BIOS 有权
标题翻译：路由器和虚拟受信任的运行时BIOS
公开(公告)号：US20140250294A1
公开(公告)日：2014-09-04
申请号：US14347086
申请日：2011-10-19
申请人： Valiuddin Y. Ali , Jose Paulo Xavier Pires , James M. Mann , Boris Balacheff , Chris I. Dalton
发明人： Valiuddin Y. Ali , Jose Paulo Xavier Pires , James M. Mann , Boris Balacheff , Chris I. Dalton
IPC分类号： G06F21/57
CPC分类号： G06F21/572 , G06F9/4401 , G06F9/45541 , G06F9/45558 , G06F21/57 , G06F21/575 , G06F2009/45587 , H04L9/0877 , H04L63/0435 , H04L63/0442 , H04L63/0823
摘要： An implementation may include a virtual trusted runtime BIOS managed by the virtual machine monitor. A replacement portion of the virtual trusted runtime BIOS may be included. A router can replace an address to a resource of the virtual trusted runtime BIOS with the address to the resource of the replacement portion of the virtual trusted runtime BIOS.
摘要翻译：实现可以包括由虚拟机监视器管理的虚拟可信运行时BIOS。可以包括虚拟可信运行时BIOS的替换部分。路由器可以将虚拟可信运行时BIOS的资源的地址替换为虚拟可信运行时BIOS的替换部分的资源的地址。

9. 发明授权

US08707303B2 Dynamic virtualization and policy-based access control of removable storage devices in a virtualized environment 有权
标题翻译：虚拟化环境中可移动存储设备的动态虚拟化和基于策略的访问控制
公开(公告)号：US08707303B2
公开(公告)日：2014-04-22
申请号：US13259527
申请日：2009-10-22
申请人： Keith Harrison , Richard Brown , Chris I. Dalton
发明人： Keith Harrison , Richard Brown , Chris I. Dalton
IPC分类号： G06F9/455 , G06F17/30 , H04L29/06
CPC分类号： G06F21/53 , G06F9/45558 , G06F21/6209 , G06F21/78 , G06F2009/45587 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153
摘要： A method includes executing a hypervisor (165) with computing hardware (105) to implement a virtual machine (175); responsive to detecting a removable storage medium (115) communicatively coupled to the computing hardware (105), executing a virtualized migration control appliance (180) through the hypervisor (165) separate from the virtual machine (175); and blocking the virtual machine (175) from accessing data (185) stored by the removable storage medium (115) with the virtualized migration control appliance (180) if at least one governing policy prohibits the virtual machine (175) from accessing the data (185).
摘要翻译：一种方法包括用计算硬件（105）执行管理程序（165）以实现虚拟机（175）; 响应于检测通信地耦合到所述计算硬件（105）的可移动存储介质（115），通过与所述虚拟机（175）分离的所述管理程序（165）执行虚拟化迁移控制设备（180）; 以及如果至少一个管理策略禁止所述虚拟机（175）访问所述数据（175），则阻止所述虚拟机（175）访问由所述可移动存储介质（115）存储的虚拟化迁移控制设备（180）的数据（185） 185）。

10. 发明申请

US20130318595A1 Authenticate a Hypervisor with Encoded Information 有权
标题翻译：使用编码信息验证管理程序
公开(公告)号：US20130318595A1
公开(公告)日：2013-11-28
申请号：US13824530
申请日：2011-01-28
申请人： Lan Wang , Boris Balacheff , Chris I. Dalton
发明人： Lan Wang , Boris Balacheff , Chris I. Dalton
IPC分类号： G06F21/44
CPC分类号： G06F21/44 , G06F9/45558 , G06F21/57 , G06F21/575 , G06F2009/45587
摘要： Disclosed embodiments relate to authenticating a hypervisor with encoded hypervisor information. In one embodiment, booting firmware 112 includes instructions to determine whether a received hypervisor 108 is an authentic hypervisor. In one embodiment, booting firmware 112 includes instructions to determine whether the received hypervisor 108 is in a selected configuration. In one embodiment, booting firmware 112 includes instructions to determine whether the receive hypervisor 108 is a selected version.
摘要翻译：公开的实施例涉及用编码的管理程序信息验证管理程序。在一个实施例中，启动固件112包括用于确定接收到的管理程序108是否是真正的管理程序的指令。在一个实施例中，引导固件112包括用于确定接收到的管理程序108是否处于所选配置的指令。在一个实施例中，引导固件112包括用于确定接收管理程序108是否是所选版本的指令。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式