专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08572741B2 Providing security for a virtual machine by selectively triggering a host security scan 有权
标题翻译：通过选择性地触发主机安全扫描为虚拟机提供安全性
公开(公告)号：US08572741B2
公开(公告)日：2013-10-29
申请号：US12904686
申请日：2010-10-14
申请人： Constantine P. Sapuntzakis , Burt A. Toma , Phanindra V. R. Ganti , Robert A. Iannucci, Jr. , Prakash Linga
发明人： Constantine P. Sapuntzakis , Burt A. Toma , Phanindra V. R. Ganti , Robert A. Iannucci, Jr. , Prakash Linga
IPC分类号： G06F21/00
CPC分类号： G06F21/52 , G06F21/53 , G06F2221/2105 , G06F2221/2117 , G06F2221/2141 , G06F2221/2149 , H04L63/1433 , H04L63/145
摘要： The disclosed embodiments provide a system that protects an application from malware on a host system. During operation, the system receives a command to commence execution of the application on the host system. In response to the command, the system causes a security scan to be performed on the host system to detect malware, wherein the malware can compromise the security of the application. The system also restricts one or more operations associated with the application until the security scan successfully completes.
摘要翻译：所公开的实施例提供了保护应用免受主机系统上的恶意软件的系统。在操作期间，系统接收到一个命令，以在主机系统上开始执行应用程序。响应于该命令，系统导致在主机系统上执行安全扫描以检测恶意软件，其中恶意软件可能危及应用的安全性。系统还限制与应用程序相关联的一个或多个操作，直到安全扫描成功完成。

2. 发明申请

US20120096550A1 PROVIDING SECURITY FOR A VIRTUAL MACHINE BY SELECTIVELY TRIGGERING A HOST SECURITY SCAN 有权
标题翻译：通过选择性地追踪主机安全扫描为虚拟机提供安全性
公开(公告)号：US20120096550A1
公开(公告)日：2012-04-19
申请号：US12904686
申请日：2010-10-14
申请人： Constantine P. Sapuntzakis , Burt A. Toma , Phanindra V. R. Ganti , Robert A. Iannucci, JR. , Prakash Linga
发明人： Constantine P. Sapuntzakis , Burt A. Toma , Phanindra V. R. Ganti , Robert A. Iannucci, JR. , Prakash Linga
IPC分类号： G06F11/00 , G06F21/22
CPC分类号： G06F21/52 , G06F21/53 , G06F2221/2105 , G06F2221/2117 , G06F2221/2141 , G06F2221/2149 , H04L63/1433 , H04L63/145
摘要： The disclosed embodiments provide a system that protects an application from malware on a host system. During operation, the system receives a command to commence execution of the application on the host system. In response to the command, the system causes a security scan to be performed on the host system to detect malware, wherein the malware can compromise the security of the application. The system also restricts one or more operations associated with the application until the security scan successfully completes.
摘要翻译：所公开的实施例提供了保护应用免受主机系统上的恶意软件的系统。在操作期间，系统接收到一个命令，以在主机系统上开始执行应用程序。响应于该命令，系统导致在主机系统上执行安全扫描以检测恶意软件，其中恶意软件可能危及应用的安全性。系统还限制与应用程序相关联的一个或多个操作，直到安全扫描成功完成。

3. 发明授权

US08589918B1 Multi-platform compatible portable virtual machine player 有权
标题翻译：多平台兼容便携式虚拟机播放器
公开(公告)号：US08589918B1
公开(公告)日：2013-11-19
申请号：US12052708
申请日：2008-03-20
申请人： Constantine P. Sapuntzakis , Monica Sin-Ling Lam
发明人： Constantine P. Sapuntzakis , Monica Sin-Ling Lam
IPC分类号： G06F9/455
CPC分类号： G06F9/4451 , G06F9/44542
摘要： Systems and methods for detecting, selecting and running environments on a host device is provided. In general, in one aspect, a computer implemented method is provided. The computer implemented method includes detecting a device including a plurality of platform specific virtual machine monitors, identifying a virtual machine monitor that is compatible with a specified platform; and enabling a launch of the identified virtual machine monitor on the specified platform. In another aspect, a computer implemented method includes detecting a first device including one or more environments, launching an application on a second device, and using the application to collect a list of stacks, collect a list of environments, and determine environments capable of running on a stack. The method further includes receiving a selection of an environment and a stack, and running the selected environment on the selected stack.
摘要翻译：提供了用于在主机设备上检测，选择和运行环境的系统和方法。通常，在一个方面，提供了一种计算机实现的方法。计算机实现的方法包括检测包括多个平台特定虚拟机监视器的设备，识别与指定平台兼容的虚拟机监视器; 并在指定的平台上启动已识别的虚拟机监视器。在另一方面，一种计算机实现的方法包括：检测包括一个或多个环境的第一设备，在第二设备上启动应用，以及使用应用收集堆栈列表，收集环境列表，以及确定能够运行的环境在堆栈上。该方法还包括接收对环境和堆栈的选择，以及在所选择的堆栈上运行所选择的环境。

4. 发明授权

US06675200B1 Protocol-independent support of remote DMA 有权
标题翻译：远程DMA协议无关支持
公开(公告)号：US06675200B1
公开(公告)日：2004-01-06
申请号：US09569850
申请日：2000-05-10
申请人： David R. Cheriton , Constantine P. Sapuntzakis
发明人： David R. Cheriton , Constantine P. Sapuntzakis
IPC分类号： G06F15167
CPC分类号： H04L67/1097 , H04L69/12 , H04L69/16 , H04L69/161 , H04L69/329
摘要： A remote DMA (RDMA) shim protocol laid atop an existing network data transfer protocol but logically underneath higher level disk and file access protocols specifies the portion of a data packet to be transferred directly into a separate area of memory such as an application layer memory buffer. This RDMA protocol identifies the area of memory into which the data should be delivered, a data ID, data start, data length or end, and flag bits. Option fields added to (or already present in) the transport protocol describe the RDMA transfer. On reception of a packet specifying RDMA, the receiving device delivers the data directly into the correct memory location using the RDMA description data. In some embodiments of the present invention, the RDMA shim protocol is implemented with TCP options specifically introduced to enable RDMA and thus reduce the overhead of transferring and receiving data with a TCP-based protocol such as NFS or HTTP. Use of a TCP option technique enables the construction of simple hardware accelerators to copy data directly from the incoming packet into application memory buffers, thus avoiding expensive copies within the protocol stack. Alternatively, software techniques may be used to perform direct copying to the application memory buffer. The RDMA protocol options thus enable the protocol stack to decrease the number of copies required to perform data transfers, thus lowering overhead costs.
摘要翻译：远程DMA（RDMA）垫片协议放置在现有的网络数据传输协议之上，但逻辑上位于较高级别的磁盘和文件访问协议之下，指定要直接传输到存储器的单独区域（如应用层内存缓冲区）的数据包部分。该RDMA协议标识要传送数据的存储器区域，数据ID，数据开始，数据长度或结束以及标志位。传输协议中添加（或已存在）的选项字段描述RDMA传输。在接收到指定RDMA的分组时，接收设备使用RDMA描述数据将数据直接传送到正确的存储器位置。在本发明的一些实施例中，RDMA垫片协议是通过专门引入以启用RDMA的TCP选项来实现的，从而减少使用基于TCP的协议（例如NFS或HTTP）传送和接收数据的开销。使用TCP选项技术可以构建简单的硬件加速器，以便将数据直接从输入数据包复制到应用程序内存缓冲区中，从而避免协议栈内的昂贵的副本。或者，可以使用软件技术来直接复制到应用存储器缓冲器。因此，RDMA协议选项使协议栈能够减少执行数据传输所需的份数，从而降低开销成本。

5. 发明授权

US09038064B2 Trace assisted prefetching of virtual machines in a distributed system 有权
标题翻译：在分布式系统中跟踪辅助预取虚拟机
公开(公告)号：US09038064B2
公开(公告)日：2015-05-19
申请号：US13306037
申请日：2011-11-29
申请人： John C. Whaley , Wen-Suk Chun , Monica Sin-Ling Lam , Constantine P. Sapuntzakis
发明人： John C. Whaley , Wen-Suk Chun , Monica Sin-Ling Lam , Constantine P. Sapuntzakis
IPC分类号： G06F9/455 , H04L9/32 , G06F21/00 , G06F21/64 , G06F21/53
CPC分类号： G06F21/64 , G06F21/53
摘要： The disclosed implementations are related to trace-assisted prefetching of a virtual machine from a network resource to improve interactive performance of the virtual machine on a host device. Trace patterns can be automatically uploaded to a network resource, which aggregates the patterns, and serves the patterns back to the host device, or a different host device, when the host device downloads a virtual machine for the first time.
摘要翻译：所公开的实现与来自网络资源的虚拟机的追踪辅助预取相关联，以提高主机设备上的虚拟机的交互性能。跟踪模式可以自动上传到网络资源，它会聚合模式，并在主机设备第一次下载虚拟机时，将模式提供给主机设备或不同的主机设备。

6. 发明授权

US08769528B2 Fixed-function consumer-electronics device providing general-computing functions with virtual machines 有权
标题翻译：为虚拟机提供通用计算功能的固定功能的消费电子设备
公开(公告)号：US08769528B2
公开(公告)日：2014-07-01
申请号：US11778629
申请日：2007-07-16
申请人： Monica Sin-Ling Lam , Kelvin Kam-Suen Yue , Won-Suk Chun , Constantine P. Sapuntzakis
发明人： Monica Sin-Ling Lam , Kelvin Kam-Suen Yue , Won-Suk Chun , Constantine P. Sapuntzakis
IPC分类号： G06F9/455 , G06F9/00 , G06F9/24 , G06F9/445
CPC分类号： G06F9/455
摘要： A universal appliance combines the benefits of a fixed-function CE device with the generality of a PC. The universal appliance includes a host environment for supporting fixed functions and virtual machines that can provide general computing capabilities (e.g., a Windows® OS). The user can select fixed functions and virtual machines for operation on the universal appliance. In some implementations, software environments, including the fixed functions and virtual machines, can be delivered by a universal appliance service provider over a network or other communication medium. The software environments for fixed functions and virtual machines can also be delivered by a removable or portable medium (e.g., a USB flash drive, compact disk, media player, mobile phone). Twenty-four hour server functions can be provided with the universal appliance to allow for automatic data backup, remote access to personal data and an Internet telephone that can accept calls 24 hours a day.
摘要翻译：通用设备将固定功能CE设备的优点与PC的一般性结合在一起。通用设备包括用于支持固定功能的主机环境和可以提供通用计算能力的虚拟机（例如，Windows OS）。用户可以选择固定功能和虚拟机进行通用设备的操作。在一些实现中，包括固定功能和虚拟机的软件环境可以由通用设备服务提供商通过网络或其他通信介质来传送。用于固定功能和虚拟机的软件环境也可以由可移动或便携式介质（例如，USB闪存驱动器，光盘，媒体播放器，移动电话）来传送。通用设备可提供二十四小时的服务器功能，以便自动进行数据备份，远程访问个人数据以及可接受24小时全天候通话的互联网电话。

7. 发明申请

US20120072911A1 TRACE ASSISTED PREFETCHING OF VIRTUAL MACHINES IN A DISTRIBUTED SYSTEM 有权
标题翻译：在分布式系统中辅助预览虚拟机
公开(公告)号：US20120072911A1
公开(公告)日：2012-03-22
申请号：US13306037
申请日：2011-11-29
申请人： John C. Whaley , Wen-Suk Chun , Monica Sin-Ling Lam , Constantine P. Sapuntzakis
发明人： John C. Whaley , Wen-Suk Chun , Monica Sin-Ling Lam , Constantine P. Sapuntzakis
IPC分类号： G06F9/455
CPC分类号： G06F21/64 , G06F21/53
摘要： The disclosed implementations are related to trace-assisted prefetching of a virtual machine from a network resource to improve interactive performance of the virtual machine on a host device. Trace patterns can be automatically uploaded to a network resource, which aggregates the patterns, and serves the patterns back to the host device, or a different host device, when the host device downloads a virtual machine for the first time.
摘要翻译：所公开的实现与来自网络资源的虚拟机的追踪辅助预取相关联，以提高主机设备上的虚拟机的交互性能。跟踪模式可以自动上传到网络资源，它会聚合模式，并在主机设备第一次下载虚拟机时，将模式提供给主机设备或不同的主机设备。

8. 发明授权

US07849267B2 Network-extended storage 有权
标题翻译：网络扩展存储
公开(公告)号：US07849267B2
公开(公告)日：2010-12-07
申请号：US11428008
申请日：2006-06-30
申请人： Monica Sin-Ling Lam , Kelvin Yue , Ramesh Chandra , Constantine P. Sapuntzakis , John Whaley , Guy Messalem
发明人： Monica Sin-Ling Lam , Kelvin Yue , Ramesh Chandra , Constantine P. Sapuntzakis , John Whaley , Guy Messalem
IPC分类号： G06F12/00
CPC分类号： G06F17/30067
摘要： Methods and apparatus, including computer program products, for network-extended storage. A portable storage device is coupled to a host computer, and network extension code stored on the portable storage device is invoked. The network extension code is operable to detect a file system write function call generated by an application executing on the host computer, the file system write function call operable to cause data to be written to the portable storage device, and cause the data to be written to the portable storage device based upon the file system write function call. The network extension code is further operable to generate a transmit determination indicative of whether to transmit the data to a network repository, and transmit the data to the network repository based upon the transmit determination.
摘要翻译：方法和设备，包括计算机程序产品，用于网络扩展存储。便携式存储设备耦合到主计算机，并且调用存储在便携式存储设备上的网络扩展代码。网络扩展代码可操作以检测由在主计算机上执行的应用程序生成的文件系统写入功能调用，文件系统写入功能调用可操作以使得数据被写入便携式存储设备，并且使数据被写入基于文件系统写入功能调用到便携式存储设备。网络扩展码进一步可操作以产生指示是否将数据发送到网络存储库的发送确定，并且基于发送确定将数据发送到网络存储库。

9. 发明申请

US20100031348A1 LOCKED-DOWN COMPUTING ENVIRONMENT 有权
标题翻译：锁定计算环境
公开(公告)号：US20100031348A1
公开(公告)日：2010-02-04
申请号：US12534699
申请日：2009-08-03
申请人： Monica Sin-Ling Lam , Constantine P. Sapuntzakis
发明人： Monica Sin-Ling Lam , Constantine P. Sapuntzakis
IPC分类号： H04L9/32 , G06F12/00
CPC分类号： G06F21/53 , G06F2221/2149
摘要： Some embodiments of the present invention provide a system that presents an alternate computing environment on a host computing device. During operation, this system detects the presence of a removable storage device which is in communication with an interface of the host computing device. The system also locates code which implements the alternate computing environment on the removable storage device. Finally, the system runs the code which presents the alternate computing environment through an environment player on the host device, wherein the environment player prevents a user of the alternate computing environment from interacting directly with a native computing environment of the host computing device.
摘要翻译：本发明的一些实施例提供一种在主机计算设备上呈现备用计算环境的系统。在操作期间，该系统检测与主计算设备的接口通信的可移动存储设备的存在。该系统还可以在可移动存储设备上定位实现备用计算环境的代码。最后，系统运行通过主机设备上的环境播放器呈现替代计算环境的代码，其中环境播放器防止替代计算环境的用户直接与主计算设备的本机计算环境进行交互。

10. 发明授权

US07089320B1 Apparatus and methods for combining data 有权
标题翻译：用于组合数据的装置和方法
公开(公告)号：US07089320B1
公开(公告)日：2006-08-08
申请号：US09872989
申请日：2001-06-01
申请人： Daniel C. Biederman , Vivian W. Chiang , Jeffrey P. Chou , Malathy Sethuraman , Constantine P. Sapuntzakis
发明人： Daniel C. Biederman , Vivian W. Chiang , Jeffrey P. Chou , Malathy Sethuraman , Constantine P. Sapuntzakis
IPC分类号： G06F15/16
CPC分类号： H04L12/2854 , H04L69/32
摘要： Disclosed are methods and apparatus for combining data segments. At a combiner node, data segments are received from a first node that are destined for a second node. At the combiner node, the received data segments are combined and buffered with previously buffered data segments from the first node if present until a first condition is met. At the combiner node, at least a portion of the combined data segments are sent to the second node when the first condition is met. The received data segments are combined in the combiner node prior to being sent to the second node so as to reduce processing and/or storage resources consumed by the second node.
摘要翻译：公开了用于组合数据段的方法和装置。在组合器节点处，从目的地为第二节点的第一节点接收数据段。在组合器节点处，接收到的数据段被组合并且与来自第一节点的先前缓冲的数据段一起缓冲，如果存在，直到满足第一条件。在组合器节点处，当满足第一条件时，组合数据段的至少一部分被发送到第二节点。所接收的数据段在被发送到第二节点之前组合在组合器节点中，以便减少由第二节点消耗的处理和/或存储资源。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式