专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20050033980A1 Projection of trustworthiness from a trusted environment to an untrusted environment 有权
标题翻译：从可信环境到不受信任的环境的可信赖性的投射
公开(公告)号：US20050033980A1
公开(公告)日：2005-02-10
申请号：US10638199
申请日：2003-08-07
申请人： Bryan Willman , Paul England , Kenneth Ray , Keith Kaplan , Varugis Kurien , Michael Marr
发明人： Bryan Willman , Paul England , Kenneth Ray , Keith Kaplan , Varugis Kurien , Michael Marr
IPC分类号： G06F21/22 , G06F9/46 , G06F11/30 , G06F15/00 , G06F21/00
CPC分类号： G06F21/552 , G06F21/57
摘要： In a single machine that has entities running in an untrusted environment and entities running in a trusted environment, the trustworthiness of the entities in the trusted environment is projected to the entities in the untrusted environment. This is applicable, for example, to Microsoft®'s Next Generation Secure Computing Base (NGSCB), where a regular operating system (e.g., the Windows® operating system) hosts a secure operating system (e.g., the nexus).
摘要翻译：在具有在不受信任的环境中运行的实体的单个机器以及在可信环境中运行的实体的情况下，可信环境中的实体的可信度将投影到不受信任的环境中的实体。这适用于例如Microsoft（R）的下一代安全计算基础（NGSCB），其中常规操作系统（例如Windows（R）操作系统））承载安全操作系统（例如，连接）。

2. 发明授权

US07530103B2 Projection of trustworthiness from a trusted environment to an untrusted environment 有权
标题翻译：从可信环境到不受信任的环境的可信赖性的投射
公开(公告)号：US07530103B2
公开(公告)日：2009-05-05
申请号：US10638199
申请日：2003-08-07
申请人： Bryan Mark Willman , Paul England , Kenneth D. Ray , Keith Kaplan , Varugis Kurien , Michael David Marr
发明人： Bryan Mark Willman , Paul England , Kenneth D. Ray , Keith Kaplan , Varugis Kurien , Michael David Marr
IPC分类号： G06F7/04 , H04L9/00 , G06F11/30
CPC分类号： G06F21/552 , G06F21/57
摘要： In a single machine that has entities running in an untrusted environment and entities running in a trusted environment, the trustworthiness of the entities in the trusted environment is projected to the entities in the untrusted environment. This is applicable, for example, to Microsoft®'s Next Generation Secure Computing Base (NGSCB), where a regular operating system (e.g., the Windows® operating system) hosts a secure operating system (e.g., the nexus).
摘要翻译：在具有在不受信任的环境中运行的实体的单个机器以及在可信环境中运行的实体的情况下，可信环境中的实体的可信度将投影到不受信任的环境中的实体。这适用于例如Microsoft（R）的下一代安全计算基础（NGSCB），其中常规操作系统（例如Windows（R）操作系统））承载安全操作系统（例如，连接）。

3. 发明申请

US20110252483A1 Reputation-Based Authorization Decisions 审中-公开
标题翻译：基于声望的授权决策
公开(公告)号：US20110252483A1
公开(公告)日：2011-10-13
申请号：US13165504
申请日：2011-06-21
申请人： David Cross , Scott Field , Varugis Kurien
发明人： David Cross , Scott Field , Varugis Kurien
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , G06F21/6218 , G06Q10/06
摘要： This document describes tools capable of receiving reputation metadata effective to enable better decision making about whether or not to authorize operations. The tools may build a reputation value from this reputation metadata and, based on this value and an authorization rule, better decide whether or not to authorize an operation requested by some program, application, or other actor.
摘要翻译：本文档描述了能够接收信誉元数据的工具，有效地使得能够更好地决定是否授权操作。这些工具可以从这个信誉元数据中构建一个信誉值，并且根据这个值和一个授权规则，更好地决定是否授权一些程序，应用程序或者其他actor请求的操作。

4. 发明申请

US20100154026A1 AUTOMATED SOFTWARE RESTRICTION POLICY RULE GENERATION 有权
标题翻译：自动软件限制政策规则生成
公开(公告)号：US20100154026A1
公开(公告)日：2010-06-17
申请号：US12335549
申请日：2008-12-16
申请人： Arindam Chatterjee , Varugis Kurien , Bental Tagor , Sanjeev Dwivedi
发明人： Arindam Chatterjee , Varugis Kurien , Bental Tagor , Sanjeev Dwivedi
IPC分类号： H04L9/00 , G06F17/00
CPC分类号： G06F21/126 , G06F9/445 , G06F2221/2101
摘要： Software restriction policy rules can be automatically generated by parsing through a specified metadata source and generating the rules in accordance with indicated preferences. Metadata sources can include storage locations, such as folders, in which case rules for each executable file in the folder can be generated. Metadata sources can also include trusted publisher stores, installation logs, difference files, and other like data sources. Indicated preferences can select from among rules based on the publisher, for files that are signed, or rules based on hashes or path information for unsigned files. In generating rules to prevent the execution of specified files, if an optimized set of rules is desired, a check can be made to determine if an exception to an existing rule can be generated instead of a new rule. The automated parsing of the indicated metadata source can provide for both completeness and correctness.
摘要翻译：软件限制策略规则可以通过解析指定的元数据源并根据指定的偏好生成规则来自动生成。元数据源可以包括存储位置，例如文件夹，在这种情况下，可以生成文件夹中每个可执行文件的规则。元数据源还可以包括可信的发布商存储，安装日志，差异文件和其他类似的数据源。指示的首选项可以基于发布者的规则，对于已签名的文件，或基于散列的规则或未签名文件的路径信息进行选择。在生成规则以防止执行指定文件时，如果需要优化的一组规则，则可以进行检查以确定是否可以生成现有规则的异常而不是新规则。指定的元数据源的自动解析可以提供完整性和正确性。

5. 发明授权

US07991902B2 Reputation-based authorization decisions 有权
标题翻译：基于声望的授权决定
公开(公告)号：US07991902B2
公开(公告)日：2011-08-02
申请号：US11608757
申请日：2006-12-08
申请人： David Cross , Scott Field , Varugis Kurien
发明人： David Cross , Scott Field , Varugis Kurien
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L63/102 , G06F21/6218 , G06Q10/06
摘要： This document describes tools capable of receiving reputation metadata effective to enable better decision making about whether or not to authorize operations. The tools may build a reputation value from this reputation metadata and, based on this value and an authorization rule, better decide whether or not to authorize an operation requested by some program, application, or other actor.
摘要翻译：本文档描述了能够接收信誉元数据的工具，有效地使得能够更好地决定是否授权操作。这些工具可以从这个信誉元数据中构建一个信誉值，并且根据这个值和一个授权规则，更好地决定是否授权一些程序，应用程序或者其他actor请求的操作。

6. 发明申请

US20080141366A1 Reputation-Based Authorization Decisions 有权
标题翻译：基于声望的授权决策
公开(公告)号：US20080141366A1
公开(公告)日：2008-06-12
申请号：US11608757
申请日：2006-12-08
申请人： David Cross , Scott Field , Varugis Kurien
发明人： David Cross , Scott Field , Varugis Kurien
IPC分类号： H04L9/32
CPC分类号： H04L63/102 , G06F21/6218 , G06Q10/06
摘要： This document describes tools capable of receiving reputation metadata effective to enable better decision making about whether or not to authorize operations. The tools may build a reputation value from this reputation metadata and, based on this value and an authorization rule, better decide whether or not to authorize an operation requested by some program, application, or other actor.
摘要翻译：本文档描述了能够接收信誉元数据的工具，有效地使得能够更好地决定是否授权操作。这些工具可以从这个信誉元数据中构建一个信誉值，并且根据这个值和一个授权规则，更好地决定是否授权一些程序，应用程序或者其他actor请求的操作。

7. 发明授权

US08543799B2 Client authentication during network boot 有权
公开(公告)号：US08543799B2
公开(公告)日：2013-09-24
申请号：US12113952
申请日：2008-05-02
申请人： Christopher McCarron , Varugis Kurien
发明人： Christopher McCarron , Varugis Kurien
IPC分类号： H04L29/06
CPC分类号： G06F9/4416 , G06F3/0622 , G06F3/0659 , G06F3/067 , G06F12/1408 , G06F21/30 , G06F21/305 , G06F2212/1052 , H04L9/30 , H04L9/32 , H04L9/3215 , H04L9/3271 , H04L63/0428 , H04L63/0869 , H04L67/10 , H04L2209/127 , H04L2209/80
摘要： A secure mechanism for performing a network boot sequence and provisioning a remote device may use a private key of a public key/private key encryption mechanism to generate a command by a server and have the command executed by the device. The command may be used to verify the authenticity of the remote device, and may be used to establish ownership of the device. After authenticity and, in some cases ownership is established, bootable software may be downloaded and executed. The remote device may be provisioned with software applications. One mechanism for performing the initial encrypted commands is through a Trusted Platform Module. In many embodiments, the public key for the initial encrypted communication may be provided through a trusted second channel.

8. 发明授权

US08332909B2 Automated software restriction policy rule generation 有权
标题翻译：自动软件限制策略规则生成
公开(公告)号：US08332909B2
公开(公告)日：2012-12-11
申请号：US12335549
申请日：2008-12-16
申请人： Arindam Chatterjee , Varugis Kurien , Bental Tagor , Sanjeev Dwivedi
发明人： Arindam Chatterjee , Varugis Kurien , Bental Tagor , Sanjeev Dwivedi
IPC分类号： H04L29/06 , G06F7/04 , G06F17/00 , G06F17/30
CPC分类号： G06F21/126 , G06F9/445 , G06F2221/2101
摘要： Software restriction policy rules can be automatically generated by parsing through a specified metadata source and generating the rules in accordance with indicated preferences. Metadata sources can include storage locations, such as folders, in which case rules for each executable file in the folder can be generated. Metadata sources can also include trusted publisher stores, installation logs, difference files, and other like data sources. Indicated preferences can select from among rules based on the publisher, for files that are signed, or rules based on hashes or path information for unsigned files. In generating rules to prevent the execution of specified files, if an optimized set of rules is desired, a check can be made to determine if an exception to an existing rule can be generated instead of a new rule. The automated parsing of the indicated metadata source can provide for both completeness and correctness.
摘要翻译：软件限制策略规则可以通过解析指定的元数据源并根据指定的偏好生成规则来自动生成。元数据源可以包括存储位置，例如文件夹，在这种情况下，可以生成文件夹中每个可执行文件的规则。元数据源还可以包括可信的发布商存储，安装日志，差异文件和其他类似的数据源。指示的首选项可以基于发布者的规则，对于已签名的文件，或基于散列的规则或未签名文件的路径信息进行选择。在生成规则以防止执行指定文件时，如果需要优化的一组规则，则可以进行检查以确定是否可以生成现有规则的异常而不是新规则。指定的元数据源的自动解析可以提供完整性和正确性。

9. 发明申请

US20090276620A1 Client authentication during network boot 有权
标题翻译：网络引导期间的客户端认证
公开(公告)号：US20090276620A1
公开(公告)日：2009-11-05
申请号：US12113952
申请日：2008-05-02
申请人： Christopher McCarron , Varugis Kurien
发明人： Christopher McCarron , Varugis Kurien
IPC分类号： H04L9/32 , H04L9/08 , H04L9/30
CPC分类号： G06F9/4416 , G06F3/0622 , G06F3/0659 , G06F3/067 , G06F12/1408 , G06F21/30 , G06F21/305 , G06F2212/1052 , H04L9/30 , H04L9/32 , H04L9/3215 , H04L9/3271 , H04L63/0428 , H04L63/0869 , H04L67/10 , H04L2209/127 , H04L2209/80
摘要： A secure mechanism for performing a network boot sequence and provisioning a remote device may use a private key of a public key/private key encryption mechanism to generate a command by a server and have the command executed by the device. The command may be used to verify the authenticity of the remote device, and may be used to establish ownership of the device. After authenticity and, in some cases ownership is established, bootable software may be downloaded and executed. The remote device may be provisioned with software applications. One mechanism for performing the initial encrypted commands is through a Trusted Platform Module. In many embodiments, the public key for the initial encrypted communication may be provided through a trusted second channel.
摘要翻译：用于执行网络引导序列和配置远程设备的安全机制可以使用公钥/专用密钥加密机制的专用密钥来生成服务器的命令，并且由设备执行命令。该命令可用于验证远程设备的真实性，并且可以用于建立设备的所有权。在真实性之后，在某些情况下，建立所有权，可以下载并执行可引导软件。可以向远程设备提供软件应用程序。执行初始加密命令的一种机制是通过可信平台模块。在许多实施例中，用于初始加密通信的公共密钥可以通过可信赖的第二信道来提供。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式