专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07865876B2 Multiple trusted computing environments 有权
标题翻译：多个可信计算环境
公开(公告)号：US07865876B2
公开(公告)日：2011-01-04
申请号：US10175542
申请日：2002-06-18
申请人： Jonathan Griffin , Christopher I. Dalton , Michael Child , Liqun Chen , Andrew Patrick Norman
发明人： Jonathan Griffin , Christopher I. Dalton , Michael Child , Liqun Chen , Andrew Patrick Norman
IPC分类号： G06F9/44 , G06F9/455 , H04L9/32
CPC分类号： G06F21/64 , G06F21/57 , G06F2211/009 , G06F2211/1097 , G06F2221/2101 , G06F2221/2103 , G06F2221/2129 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153
摘要： A computing platform 20 provides multiple computing environments 24 each containing a guest operating system 25 provided by a virtual machine application 26. Optionally, each computing environment 24 is formed in a compartment 220 of a compartmented host operating system 22. A trusted device 213 verifies that the host operating system 22 and each guest operating system 25 operates in a secure and trusted manner by forming integrity metrics which can be interrogated by a user 10. Each computing environment is isolated and secure, and can be verified as trustworthy independent of any other computing environment.
摘要翻译：计算平台20提供多个计算环境24，每个计算环境包含由虚拟机应用程序26提供的客户机操作系统25.可选地，每个计算环境24形成在分隔的主机操作系统22的隔室220中。可信设备213验证主机操作系统22和每个客户操作系统25通过形成可由用户10询问的完整性度量以安全和可靠的方式操作。每个计算环境是隔离和安全的，并且可以被验证为独立于任何其他计算环境。

2. 发明授权

US07159210B2 Performing secure and insecure computing operations in a compartmented operating system 有权
标题翻译：在分隔的操作系统中执行安全和不安全的计算操作
公开(公告)号：US07159210B2
公开(公告)日：2007-01-02
申请号：US10175553
申请日：2002-06-18
申请人： Jonathan Griffin , Christopher I. Dalton
发明人： Jonathan Griffin , Christopher I. Dalton
IPC分类号： G04F9/45 , G04F9/48 , G04F12/00 , G04F9/455
CPC分类号： G06F9/45537
摘要： A process 23 runs directly on a host operating system 22, until the process 23 attempts an operation which can affect security of the host operating system 22 (such as loading a kernel module or using system privileges). A guest operating system 25 is then provided running as a virtual machine session within a compartment 24 of the host operating system 22 and running of the process 23 continues using the guest operating system. Operations of the process 23 which can affect security of the host operating system 22 are instead performed on the guest operating system 25, giving greater security. The guest operating system 25 is only invoked selectively, leading to greater overall efficiency.
摘要翻译：进程23直接在主机操作系统22上运行，直到进程23尝试可能影响主机操作系统22的安全性的操作（诸如加载内核模块或使用系统特权）。然后，客机操作系统25作为虚拟机会话被提供在主机操作系统22的隔间24内，并且进程23的运行继续使用客户机操作系统。替代地，在客户操作系统25上执行可能影响主机操作系统22的安全性的过程23的操作，从而提供更大的安全性。客户操作系统25仅被选择性地调用，导致更高的整体效率。

3. 发明授权

US08230116B2 Resumption of execution of a requested function command 有权
标题翻译：恢复执行所请求的功能命令
公开(公告)号：US08230116B2
公开(公告)日：2012-07-24
申请号：US11070522
申请日：2005-03-02
申请人： Matthew Murray Williamson , Christopher I. Dalton
发明人： Matthew Murray Williamson , Christopher I. Dalton
IPC分类号： G06F3/00
CPC分类号： G06F21/316
摘要： Access to a data processor is controlled by determining if a requested function command conforms to a set of parameters, the set of parameters being derived from previously executed function commands. If the requested function command does not conform to the set of parameters the data processor is controlled to temporarily hold the execution of the requested function commands.
摘要翻译：通过确定所请求的功能命令是否符合一组参数来控制对数据处理器的访问，该参数集是从先前执行的功能命令导出的。如果所请求的功能命令不符合该组参数，则控制数据处理器暂时保持所请求的功能命令的执行。

4. 发明申请

US20110119748A1 VIRTUAL COMPUTING INFRASTRUCTURE 有权
标题翻译：虚拟计算基础设施
公开(公告)号：US20110119748A1
公开(公告)日：2011-05-19
申请号：US11718126
申请日：2005-10-28
申请人： Nigel John Edwards , Christopher I. Dalton
发明人： Nigel John Edwards , Christopher I. Dalton
IPC分类号： G06F21/20 , G06F9/455
CPC分类号： G06F9/5077 , G06F9/45558 , G06F2009/45583
摘要： A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Virtual infrastructures of different users share physical resources but are isolated and have their own management entities. An interface between infrastructures allows controlled relaxation of the isolation, using a gateway between virtual nets, or shared virtual storage devices. This can allow businesses to share data or applications, while maintaining control of security.
摘要翻译：系统具有映射到用于处理，存储和网络通信的物理资源的虚拟覆盖基础设施，虚拟基础设施具有用于处理，存储和网络通信的虚拟实体。不同用户的虚拟基础设施共享物理资源，但是是孤立的，并拥有自己的管理实体。基础架构之间的接口允许使用虚拟网络或共享虚拟存储设备之间的网关来控制放宽隔离。这可以允许企业共享数据或应用程序，同时保持对安全性的控制。

5. 发明授权

US07353531B2 Trusted computing environment 有权
标题翻译：可信计算环境
公开(公告)号：US07353531B2
公开(公告)日：2008-04-01
申请号：US10080477
申请日：2002-02-22
申请人： Richard Brown , Siani Lynne Pearson , Christopher I. Dalton
发明人： Richard Brown , Siani Lynne Pearson , Christopher I. Dalton
IPC分类号： H04L9/00
CPC分类号： H04L63/105 , G06F21/552 , G06F21/57 , G06F21/6218 , G06F2221/2103 , G06F2221/2153 , H04L63/126
摘要： A trusted computing environment 100, wherein each computing device 112 to 118 holds a policy specifying the degree to which it can trust the other devices in the environment 100. The policies are updated by an assessor 110 which receives reports from trusted components 120 in the computing devices 112 to 118 which identify the trustworthiness of the computing devices 112 to 118.
摘要翻译：可信计算环境100，其中每个计算设备112至118保存指定其可以信任环境100中的其他设备的程度的策略。由评估者110更新策略，评估者110从计算设备112至118中的可信组件120接收报告，其识别计算设备112至118的可信赖性。

6. 发明授权

US07908640B2 Data handling apparatus and methods 有权
标题翻译：数据处理装置和方法
公开(公告)号：US07908640B2
公开(公告)日：2011-03-15
申请号：US10765719
申请日：2004-01-26
申请人： Yolanta Beresnevichiene , David Plaquin , Christopher I. Dalton
发明人： Yolanta Beresnevichiene , David Plaquin , Christopher I. Dalton
IPC分类号： G06F7/04 , G06F17/30 , G06F17/00 , G06F11/30 , G06F12/14 , H04L29/06 , H04N7/16 , B41K3/38
CPC分类号： G06F21/6209 , G06F21/52 , G06F21/6281 , G06F2221/2141 , G06F2221/2153
摘要： A data handling apparatus (400) for a computer platform (1) using an operating system executing a process, the apparatus comprising a system call monitor (402) for detecting predetermined system calls, and means (402, 404, 406) for applying a data handling policy to the system call upon a predetermined system call being detected, whereby the data handling policy is applied for all system calls involving the writing of data outside the process. A corresponding method is disclosed.
摘要翻译：一种使用执行处理的操作系统的计算机平台（1）的数据处理装置（400），该装置包括用于检测预定系统呼叫的系统呼叫监视器（402），以及用于应用对系统的数据处理策略在检测到预定的系统呼叫时调用，由此数据处理策略被应用于涉及在进程外部写入数据的所有系统调用。公开了相应的方法。

7. 发明授权

US09633206B2 Demonstrating integrity of a compartment of a compartmented operating system 有权
公开(公告)号：US09633206B2
公开(公告)日：2017-04-25
申请号：US10165840
申请日：2002-06-07
申请人： Christopher I. Dalton
发明人： Christopher I. Dalton
IPC分类号： G06F17/00 , G06F21/57 , G06F21/50
CPC分类号： G06F21/57 , G06F21/50 , G06F2211/009 , G06F2221/2105
摘要： A computing platform 20 runs a compartmented operating system 22 and includes a trusted device 23 for forming an integrity metric which a user can interrogate to confirm integrity of the operating system. Also, the integrity of an individual compartment 24 is verified by examining status information for that compartment including, for example, the identity of any open network connections, the identity of any running processes, and the status of a section of file space allocated to that compartment 24. Hence, the integrity of an individual compartment 24 of the compartmented operating system 22 can be demonstrated.

8. 发明申请

US20120054741A1 USER AUTHENTICATION VIRTUAL MACHINE 有权
标题翻译：用户认证虚拟机
公开(公告)号：US20120054741A1
公开(公告)日：2012-03-01
申请号：US12873197
申请日：2010-08-31
申请人： Valiuddin Y. Ali , Manuel Novoa , Christopher I. Dalton , Boris Balacheff , Shab H. Madina , Lan Wang , Jeffrey C. Parker
发明人： Valiuddin Y. Ali , Manuel Novoa , Christopher I. Dalton , Boris Balacheff , Shab H. Madina , Lan Wang , Jeffrey C. Parker
IPC分类号： G06F9/455 , H04L9/32
CPC分类号： H04L9/3234 , G06F9/45545 , G06F2009/45587 , H04L9/3231
摘要： A computer system includes an authentication service running in a virtual machine. The authentication service uses the hardware components of the computer system in performing a user authentication process and responds to a remote call from another virtual machine by performing the user authentication process and returning a result.
摘要翻译：计算机系统包括在虚拟机中运行的认证服务。验证服务使用计算机系统的硬件组件执行用户认证过程，并通过执行用户认证过程并返回结果来响应来自另一个虚拟机的远程呼叫。

9. 发明授权

US08069450B2 Computer operating system data management 有权
标题翻译：计算机操作系统数据管理
公开(公告)号：US08069450B2
公开(公告)日：2011-11-29
申请号：US10765827
申请日：2004-01-26
申请人： Yolanta Beresnevichiene , David Plaquin , Christopher I. Dalton
发明人： Yolanta Beresnevichiene , David Plaquin , Christopher I. Dalton
IPC分类号： G06F3/00 , G06F9/44 , G06F9/46 , G06F13/00
CPC分类号： G06F21/62 , G06F9/468 , G06F21/52 , G06F21/6209 , G06F2221/2141 , G06F2221/2153
摘要： A method of computer operating system data management comprising the steps of: (a) associating data management information with data input to a process (300); and (b) regulating operating system operations involving the data according to the data management information is provided (310). A computing platform (1) for operating system data management is also provided. Furthermore, a computer program including instructions configured to enable operating system data management, an operating system, and an operating system data management method and apparatus arranged to identify data having data management information associated therewith when that data is read into a memory space are provided.
摘要翻译：一种计算机操作系统数据管理的方法，包括以下步骤：（a）将数据管理信息与输入到过程（300）的数据相关联; 提供（b）根据数据管理信息调整涉及数据的操作系统操作（310）。还提供了用于操作系统数据管理的计算平台（1）。此外，提供了包括被配置为使得操作系统数据管理的指令，操作系统和操作系统数据管理方法和装置的计算机程序，其被配置为当该数据被读入存储器空间时，识别与其相关联的数据管理信息的数据。

10. 发明申请

US20090129385A1 VIRTUAL NETWORK INTERFACE 有权
标题翻译：虚拟网络接口
公开(公告)号：US20090129385A1
公开(公告)日：2009-05-21
申请号：US11575395
申请日：2005-08-03
申请人： Michael John Wray , Christopher I. Dalton
发明人： Michael John Wray , Christopher I. Dalton
IPC分类号： H04L12/28
CPC分类号： H04L12/4633
摘要： A virtual network has network interfaces coupled by a multipoint tunnel (100) through a forwarding network (40), each interface having a forwarding address in an address space of the forwarding network, each network interface having a reconfigurable address mapper (320) for determining a forwarding address for a packet, and encapsulating the packet with its forwarding address so that the forwarding network can forward the data packet transparent to its destination address. This makes the virtual network more agile since changes to the virtual network can be achieved by reconfiguring the corresponding forwarding addresses without needing to set up new tunnels new routing to these different tunnels. The forwarding network need not be aware of the virtual network and so no adaptation of the forwarding network or specialised hardware is needed.
摘要翻译：虚拟网络具有通过转发网络（40）通过多点隧道（100）耦合的网络接口，每个接口在转发网络的地址空间中具有转发地址，每个网络接口具有可重配置地址映射器（320），用于确定分组的转发地址，并用转发地址封装分组，使转发网络能够将数据包转发到目的地址。这使得虚拟网络更加灵活，因为可以通过重新配置相应的转发地址来实现对虚拟网络的更改，而无需为新隧道建立新的路由到这些不同的隧道。转发网络不需要知道虚拟网络，因此不需要转发网络或专用硬件的适配。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式