专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060136720A1 Computer security management, such as in a virtual machine or hardened operating system 有权
标题翻译：计算机安全管理，如虚拟机或硬化操作系统
公开(公告)号：US20060136720A1
公开(公告)日：2006-06-22
申请号：US11019094
申请日：2004-12-21
申请人： Benjamin Armstrong , Paul England , Scott Field , Jason Garms , Michael Kramer , Kenneth Ray
发明人： Benjamin Armstrong , Paul England , Scott Field , Jason Garms , Michael Kramer , Kenneth Ray
IPC分类号： H04L9/00
CPC分类号： G06F21/53 , G06F21/56 , G06F21/566
摘要： A security scheme provides security to one or more self-contained operating environment instances executing on a computer. The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of the one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environment and processes running on the computer outside of the self-contained operating environments.
摘要翻译：安全方案为在计算机上执行的一个或多个自包含的操作环境实例提供安全性。安全方案可以包括实现可由监督过程等控制的一组安全应用。所述一组安全应用程序和监督过程可以在计算机的主机系统上操作，其还可以提供用于执行一个或多个独立操作环境的平台。安全性方案保护在独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。

2. 发明授权

US07409719B2 Computer security management, such as in a virtual machine or hardened operating system 有权
标题翻译：计算机安全管理，如虚拟机或硬化操作系统
公开(公告)号：US07409719B2
公开(公告)日：2008-08-05
申请号：US11019094
申请日：2004-12-21
申请人： Benjamin Armstrong , Paul England , Scott A. Field , Jason Garms , Michael Kramer , Kenneth D. Ray
发明人： Benjamin Armstrong , Paul England , Scott A. Field , Jason Garms , Michael Kramer , Kenneth D. Ray
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/56 , G06F21/566
摘要： A security scheme provides security to one or more self-contained operating environment instances executing on a computer. The security scheme may include implementing a set of security applications that may be controlled by a supervisory process, or the like. Both the set of security applications and the supervisory process may operate on a host system of the computer, which may also provide a platform for execution of the one or more self-contained operating environments. The security scheme protects processes running in the one or more self-contained operating environment and processes running on the computer outside of the self-contained operating environments.
摘要翻译：安全方案为在计算机上执行的一个或多个自包含的操作环境实例提供安全性。安全方案可以包括实现可由监督过程等控制的一组安全应用。所述一组安全应用程序和监督过程可以在计算机的主机系统上操作，其还可以提供用于执行一个或多个独立操作环境的平台。安全性方案保护在独立操作环境中运行的进程和在独立操作环境之外的计算机上运行的进程。

3. 发明申请

US20060230451A1 Systems and methods for verifying trust of executable files 有权
公开(公告)号：US20060230451A1
公开(公告)日：2006-10-12
申请号：US11100770
申请日：2005-04-07
申请人： Michael Kramer , Kenneth Ray , Paul England , Scott Field , Jonathan Schwartz
发明人： Michael Kramer , Kenneth Ray , Paul England , Scott Field , Jonathan Schwartz
IPC分类号： G06F12/14
CPC分类号： G06F21/51 , G06F21/56
摘要： Systems and methods for validating integrity of an executable file are described. In one aspect, the systems and methods determine that an executable file is being introduced into a path of execution. The executable file is then automatically evaluated in view of multiple malware checks to detect if the executable file represents a type of malware. The multiple malware checks are integrated into an operating system trust verification process along the path of execution.

4. 发明申请

US20060200863A1 On-access scan of memory for malware 有权
标题翻译：恶意软件的内存访问扫描
公开(公告)号：US20060200863A1
公开(公告)日：2006-09-07
申请号：US11070468
申请日：2005-03-01
申请人： Kenneth Ray , Michael Kramer , Paul England , Scott Field
发明人： Kenneth Ray , Michael Kramer , Paul England , Scott Field
IPC分类号： G06F12/14
CPC分类号： G06F12/145 , G06F21/562
摘要： The present invention provides a system, method, and computer-readable medium for identifying malware that is loaded in the memory of a computing device. Software routines implemented by the present invention track the state of pages loaded in memory using page table access bits available from a central processing unit. A page in memory may be in a state that is “unsafe” or potentially infected with malware. In this instance, the present invention calls a scan engine to search a page for malware before information on the page is executed.
摘要翻译：本发明提供一种用于识别加载到计算设备的存储器中的恶意软件的系统，方法和计算机可读介质。由本发明实现的软件程序使用从中央处理单元获得的页表访问位来跟踪加载在存储器中的页的状态。内存中的页面可能处于“不安全”或可能感染恶意软件的状态。在这种情况下，本发明在页面上的信息被执行之前，调用扫描引擎来搜索页面中的恶意软件。

5. 发明申请

US20060288238A1 Enabling bits sealed to an enforceably-isolated environment 有权
公开(公告)号：US20060288238A1
公开(公告)日：2006-12-21
申请号：US11155071
申请日：2005-06-16
申请人： Kenneth Ray , Paul England , Peter Biddle
发明人： Kenneth Ray , Paul England , Peter Biddle
IPC分类号： G06F12/14
CPC分类号： G06F21/53 , G06F21/10 , G06F2221/2149
摘要： Prevention of unpermitted use of enabling bits is achieved by sealing the enabling bits to an environment in such a way that the bits can only be unsealed by or from the environment, and by using an isolation mechanism to isolate the environment from other environments on the machine on which the environment operates. The environment is trusted not to use the enabling bits except in accordance with a set of rules governing the bits. The enabling bits may be a decryption key for DRM-protected content, and the rules may be a license governing the use of that content. Trust that the enabling bits will not be misused is established by trusting the environment not to use the enabling bits contrary to the rules, trusting the isolation mechanism to isolate the environment, and trusting the unsealing mechanism only to unseal the bits for the environment.

6. 发明申请

US20060248587A1 Disposable red partitions 有权
标题翻译：一次性红色分区
公开(公告)号：US20060248587A1
公开(公告)日：2006-11-02
申请号：US11118062
申请日：2005-04-29
申请人： Kenneth Ray , Paul England , Nathan Lewis , Michael Marr
发明人： Kenneth Ray , Paul England , Nathan Lewis , Michael Marr
IPC分类号： G06F12/14
CPC分类号： G06F21/575 , G06F21/57
摘要： A system and method are provided, whereby data that is easily re-created is separated from data that is not easily re-created, such that the easily re-created data can be disposed of based on a variety of events and the not easily re-created data can be kept in its original state. In one aspect of the invention, such easily re-created data is disposed of based on a “panic button” being pushed by a computer system user, such as when a user becomes aware that some malware has infected the computer system. In other aspects of the invention, such data is disposed of every time the computer system boots up, or detects via its anti-virus program that some malware is present. In other aspects of the invention, the easily re-created data can be rolled back or rolled forward without affecting the non-easily re-created data.
摘要翻译：提供了一种系统和方法，由此容易重新创建的数据与不容易重新创建的数据分离，使得可以基于各种事件来处理容易重新创建的数据，并且不容易地重新生成处理的数据可以保持原来的状态。在本发明的一个方面中，基于由计算机系统用户推送的“紧急按钮”（例如当用户意识到某些恶意软件已经感染了计算机系统时）来处理这样容易重新创建的数据。在本发明的其他方面，每当计算机系统启动时处理这样的数据，或者通过其防病毒程序来检测存在一些恶意软件。在本发明的其它方面，容易重新创建的数据可以回滚或滚动，而不影响不容易重新创建的数据。

7. 发明申请

US20060161790A1 Systems and methods for controlling access to data on a computer with a secure boot process 有权
公开(公告)号：US20060161790A1
公开(公告)日：2006-07-20
申请号：US11036415
申请日：2005-01-14
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Schwartz , Kenneth Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Schwartz , Kenneth Ray , Jonathan Schwartz
IPC分类号： G06F12/14
CPC分类号： G06F21/575 , G06F21/78
摘要： Systems and methods for controlling access to data on a computer with a secure boot process can provide a highly efficient mechanism for preventing future access to encrypted digital resources. This may be advantageous in a range of scenarios, for example where a computer is sold and assurance is desired that no stray private data remains on the hard disk. Data resources, for example all data associated with one or more particular hard disk partitions, may be encrypted. The decryption key may be available through a secure boot process. By erasing, altering, or otherwise disabling a secret, such as a decryption key or a process that obtains a decryption key, the data formerly accessible using such secret becomes inaccessible.

8. 发明申请

US20050125548A1 Securely identifying an executable to a trust-determining entity 有权
标题翻译：安全地识别信任确定实体的可执行文件
公开(公告)号：US20050125548A1
公开(公告)日：2005-06-09
申请号：US10692224
申请日：2003-10-23
申请人： Paul England , Anshul Dhir , Thekkthalackal Kurien , Kenneth Ray
发明人： Paul England , Anshul Dhir , Thekkthalackal Kurien , Kenneth Ray
IPC分类号： G06F21/24 , G06F1/00 , G06F3/14 , G06F9/06 , G06F9/50 , G06F12/14 , G06F15/00 , G06F15/16 , G06F21/00 , G06F21/22 , G06K19/073 , G09C1/00 , H04L9/32
CPC分类号： G06F21/62
摘要： A resource is obtained from a resource provider (RP) for a resource requester (RR) operating on a computing device. The RR has an identity descriptor (id) associated therewith, where the id including security-related information specifying an environment in which the RR operates. A code identity (code-ID) is calculated corresponding to and based on the loaded RR and loaded id. The RP verifies that the calculated code-ID in a request for the resource matches one of one or more valid code-IDs for the identified RR to conclude that the RR and id can be trusted, and the RP responds to the forwarded request by providing the requested resource to the RR.
摘要翻译：从用于在计算设备上操作的资源请求者（RR）的资源提供者（RP）获得资源。 RR具有与其相关联的身份描述符（id），其中id包括指定RR操作的环境的安全相关信息。代码标识（代码ID）是根据加载的RR和加载的id来计算的。 RP验证在资源请求中计算出的代码ID与所识别的RR的一个或多个有效代码ID中的一个匹配，以得出可以信任的RR和ID，并且RP通过提供转发的请求来响应转发的请求向RR请求的资源。

9. 发明申请

US20050091661A1 Integration of high-assurance features into an application through application factoring 有权
标题翻译：通过应用程序保理将高保证功能集成到应用程序中
公开(公告)号：US20050091661A1
公开(公告)日：2005-04-28
申请号：US10693749
申请日：2003-10-24
申请人： Thekkthalackal Kurien , Kenneth Ray , Marcus Peinado , Paul England
发明人： Thekkthalackal Kurien , Kenneth Ray , Marcus Peinado , Paul England
IPC分类号： G06F21/24 , G06F1/00 , G06F3/00 , G06F9/44 , G06F9/45 , G06F9/46 , G06F12/14 , G06F15/76 , G06F17/00 , G06F21/00 , G06F21/22
CPC分类号： G06F21/53
摘要： Application factoring or partitioning is used to integrate secure features into a conventional application. An application's functionality is partitioned into two sets according to whether a given action does, or does not, involve the handling of sensitive data. Separate software objects (processors) are created to perform these two sets of actions. A trusted processor handles secure data and runs in a high-assurance environment. When another processor encounters secure data, that data is sent to the trusted processor. The data is wrapped in such a way that allows it to be routed to the trusted processor, and prevents the data from being deciphered by any entity other than the trusted processor. An infrastructure is provided that wraps objects, routes them to the correct processor, and allows their integrity to be attested through a chain of trust leading back to base component that is known to be trustworthy.
摘要翻译：应用因子分解或分区用于将安全特征集成到常规应用中。应用程序的功能根据给定操作是否涉及敏感数据的处理而分为两组。创建独立的软件对象（处理器）来执行这两组操作。值得信赖的处理器处理安全数据并在高保证环境中运行。当另一个处理器遇到安全数据时，该数据被发送到可信处理器。以允许将数据路由到可信处理器的方式包装数据，并且防止数据被除可信处理器之外的任何实体解密。提供了一个基础设施，用于包装对象，将它们路由到正确的处理器，并通过一系列信任来验证其完整性，并将其引导回已知可靠的基础组件。

10. 发明申请

US20060161769A1 Systems and methods for boot recovery in a secure boot process on a computer with a hardware security module 有权
公开(公告)号：US20060161769A1
公开(公告)日：2006-07-20
申请号：US11035715
申请日：2005-01-14
申请人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Schwartz , Kenneth Ray , Jonathan Schwartz
发明人： Jamie Hunter , Paul England , Russell Humphries , Stefan Thom , James Schwartz , Kenneth Ray , Jonathan Schwartz
IPC分类号： H04L9/00
CPC分类号： G06F21/575 , G06F2221/2101
摘要： Systems and methods are provided for maintaining and updating a secure boot process on a computer with a trusted platform module (TPM). A boot process may be maintained by inspecting a log of TPM activity, determining data that prevented a secret to unseal, and returning the data to an original state. In situations where this type of recovery is not workable, techniques for authenticating a user may be used, allowing the authenticated user to bypass the security features of the boot process and reseal the boot secrets to platform configuration register (PCR) values that may have changed. Finally, a secure boot process may be upgraded by migrating TPM sealed secrets to a temporary storage location, updating one or more aspects of a secure boot process, and resealing the secrets to the resulting new platform configuration. Other advantages and features of the invention are described below.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式