专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20080280593A1 Protecting Caller Function from Undesired Access by Callee Function 有权
标题翻译：保护来电者功能不受管道功能的不理想访问
公开(公告)号：US20080280593A1
公开(公告)日：2008-11-13
申请号：US11770067
申请日：2007-06-28
申请人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
发明人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
IPC分类号： H04M1/66
CPC分类号： G06F21/52 , G06F9/4486
摘要： Disclosed is a method for restricting access of a first code of a plurality of codes and data of a first function from a second function. Thee method comprises calling the second function by the first function, addresses of the plurality of data may be stored in a stack page and colored in a first color (102). The method comprises performing access control check in a transition page for verifying whether the first function has permission to call the second function (104). Further the method comprises protecting the first code from the second function by coloring the data and/or addresses in a second color (106). Furthermore, the method comprises executing the second function by pushing addresses of the second function on the stack page, the addresses of the second function colored in a third color (108) and unprotecting the first code by coloring the addresses of the first code in the first color (110).
摘要翻译：公开了一种用于从第二功能限制多个代码的第一代码和第一函数的数据的访问的方法。该方法包括通过第一功能调用第二功能，多个数据的地址可以被存储在堆栈页面中并以第一颜色（102）着色。该方法包括在转换页面中执行访问控制检查，以验证第一功能是否具有调用第二功能的权限（104）。此外，该方法包括通过使第二颜色（106）中的数据和/或地址着色来保护第一代码免受第二功能。此外，该方法包括通过在堆栈页面上推动第二函数的地址来执行第二函数，第二函数的地址以第三颜色（108）着色，并且通过着色第一代码中的第一代码的地址来对第一代码进行保护第一颜色（110）。

2. 发明申请

US20080022065A1 Dynamically sharing a stack between different code segments 失效
标题翻译：在不同代码段之间动态共享堆栈
公开(公告)号：US20080022065A1
公开(公告)日：2008-01-24
申请号：US11490824
申请日：2006-07-21
申请人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
发明人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
IPC分类号： G06F12/00
CPC分类号： G06F12/1475 , G06F12/145
摘要： In one embodiment, the present invention includes a method for receiving a request from a caller code portion of a first color to color at least a portion of a stack with a second color, determining if the request is valid, and if so remapping the stack portion from a first mapping colored with the first color to a second mapping colored with the second color. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括一种方法，用于从第一颜色的呼叫者代码部分接收请求以对具有第二颜色的堆栈的至少一部分进行着色，确定请求是否有效，以及如果重新映射堆栈从具有第一颜色的第一映射部分到第二颜色的第二映射。描述和要求保护其他实施例。

3. 发明授权

US08261065B2 Protecting caller function from undesired access by callee function 有权
标题翻译：保护来电功能免受被叫功能的不期望的访问
公开(公告)号：US08261065B2
公开(公告)日：2012-09-04
申请号：US11770067
申请日：2007-06-28
申请人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
发明人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
IPC分类号： G06F21/00
CPC分类号： G06F21/52 , G06F9/4486
摘要： Disclosed is a method for restricting access of a first code of a plurality of codes and data of a first function from a second function. Thee method comprises calling the second function by the first function, addresses of the plurality of data may be stored in a stack page and colored in a first color (102). The method comprises performing access control check in a transition page for verifying whether the first function has permission to call the second function (104). Further the method comprises protecting the first code from the second function by coloring the data and/or addresses in a second color (106). Furthermore, the method comprises executing the second function by pushing addresses of the second function on the stack page, the addresses of the second function colored in a third color (108) and unprotecting the first code by coloring the addresses of the first code in the first color (110).
摘要翻译：公开了一种用于从第二功能限制多个代码的第一代码和第一函数的数据的访问的方法。该方法包括通过第一功能调用第二功能，多个数据的地址可以被存储在堆栈页面中并以第一颜色（102）着色。该方法包括在转换页面中执行访问控制检查，以验证第一功能是否具有调用第二功能的权限（104）。此外，该方法包括通过使第二颜色（106）中的数据和/或地址着色来保护第一代码免受第二功能。此外，该方法包括通过在堆栈页面上推动第二函数的地址来执行第二函数，第二函数的地址以第三颜色（108）着色，并且通过着色第一代码中的第一代码的地址来对第一代码进行保护第一颜色（110）。

4. 发明申请

US20080282358A1 Protecting Caller Function from Undesired Access by Callee Function 有权
标题翻译：保护来电者功能不受管道功能的不理想访问
公开(公告)号：US20080282358A1
公开(公告)日：2008-11-13
申请号：US11745399
申请日：2007-05-07
申请人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
发明人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
IPC分类号： G06F21/22 , G06F15/00
CPC分类号： G06F21/629 , G06F2221/2141
摘要： Disclosed is a method for restricting access of a first code of a plurality of codes of a first function from a second function. Thee method comprises calling the second function by the first function, addresses of the plurality of codes are stored in a stack page and colored in a first color (102). The method comprises performing access control check in a transition page for verifying whether the first function has permission to call the second function (104). Further the method comprises protecting the first code from the second function by coloring the addresses in a second color (106). Furthermore, the method comprises executing the second function by pushing addresses of the second function on the stack page, the addresses of the second function colored in a third color (108) and unprotecting the first code by coloring the addresses of the first code in the first color (110).
摘要翻译：公开了一种用于从第二功能限制第一功能的多个代码的第一代码的访问的方法。该方法包括通过第一功能调用第二函数，多个代码的地址被存储在堆栈页中并以第一颜色（102）着色。该方法包括在转换页面中执行访问控制检查，以验证第一功能是否具有调用第二功能的权限（104）。此外，该方法包括通过着色第二颜色（106）中的地址来保护第一代码免受第二功能。此外，该方法包括通过在堆栈页面上推动第二函数的地址来执行第二函数，第二函数的地址以第三颜色（108）着色，并且通过着色第一代码中的第一代码的地址来对第一代码进行保护第一颜色（110）。

5. 发明授权

US08645704B2 Protecting caller function from undesired access by callee function 有权
标题翻译：保护来电功能免受被叫功能的不期望的访问
公开(公告)号：US08645704B2
公开(公告)日：2014-02-04
申请号：US11745399
申请日：2007-05-07
申请人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
发明人： Uday Savagaonkar , David Durham , Ravi Sahita , Subhash Gutti
IPC分类号： G06F21/00
CPC分类号： G06F21/629 , G06F2221/2141
摘要： Disclosed is a method for restricting access of a first code of a plurality of codes of a first function from a second function. The method comprises calling the second function by the first function, addresses of the plurality of codes are stored in a stack page and colored in a first color (102). The method comprises performing access control check in a transition page for verifying whether the first function has permission to call the second function (104). Further the method comprises protecting the first code from the second function by coloring the addresses in a second color (106). Furthermore, the method comprises executing the second function by pushing addresses of the second function on the stack page, the addresses of the second function colored in a third color (108) and unprotecting the first code by coloring the addresses of the first code in the first color (110).
摘要翻译：公开了一种用于从第二功能限制第一功能的多个代码的第一代码的访问的方法。该方法包括通过第一功能调用第二功能，将多个代码的地址存储在堆栈页面中并以第一颜色（102）着色。该方法包括在转换页面中执行访问控制检查，以验证第一功能是否具有调用第二功能的权限（104）。此外，该方法包括通过着色第二颜色（106）中的地址来保护第一代码免受第二功能。此外，该方法包括通过在堆栈页面上推动第二函数的地址来执行第二函数，第二函数的地址以第三颜色（108）着色，并且通过着色第一代码中的第一代码的地址来对第一代码进行保护第一颜色（110）。

6. 发明授权

US07512768B2 Dynamically sharing a stack between different code segments 失效
标题翻译：在不同代码段之间动态共享堆栈
公开(公告)号：US07512768B2
公开(公告)日：2009-03-31
申请号：US11490824
申请日：2006-07-21
申请人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
发明人： Subhash Gutti , Uday Savagaonkar , Ravi Sahita , David Durham
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28 , G06F9/26 , G06F9/34
CPC分类号： G06F12/1475 , G06F12/145
摘要： In one embodiment, the present invention includes a method for receiving a request from a caller code portion of a first color to color at least a portion of a stack with a second color, determining if the request is valid, and if so remapping the stack portion from a first mapping colored with the first color to a second mapping colored with the second color. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，本发明包括一种方法，用于从第一颜色的呼叫者代码部分接收请求以对具有第二颜色的堆栈的至少一部分进行着色，确定请求是否有效，以及如果重新映射堆栈从具有第一颜色的第一映射部分到第二颜色的第二映射。描述和要求保护其他实施例。

7. 发明授权

US08839237B2 Method and apparatus for tamper resistant communication in a virtualization enabled platform 有权
标题翻译：用于在虚拟化使能平台中进行防篡改通信的方法和装置
公开(公告)号：US08839237B2
公开(公告)日：2014-09-16
申请号：US11968062
申请日：2007-12-31
申请人： Ravi Sahita , Uday Savagaonkar , Subhash Gutti
发明人： Ravi Sahita , Uday Savagaonkar , Subhash Gutti
IPC分类号： G06F9/455 , G06F21/55 , G06F21/56
CPC分类号： G06F9/45533 , G06F9/45558 , G06F21/554 , G06F21/556 , G06F21/566 , G06F2009/45587
摘要： A method to communicate information between components in a virtualization enabled platform. In one embodiment, a component exchanges data via a communication page which only integrity protected components can access. In another embodiment, an integrity protected communication broker exchanges data from a communication page of one component to another communication page of another component.
摘要翻译：一种在虚拟化支持的平台中的组件之间传递信息的方法。在一个实施例中，组件经由只有完整性保护组件可以访问的通信页面来交换数据。在另一个实施例中，完整性保护的通信代理将数据从一个组件的通信页面交换到另一个组件的另一个通信页面。

8. 发明申请

US20090172663A1 METHOD AND APPARATUS FOR TAMPER RESISTANT COMMUNICATION IN A VIRTUALIZATION ENABLED PLATFORM 有权
标题翻译：虚拟化启动平台中防篡改通信的方法与装置
公开(公告)号：US20090172663A1
公开(公告)日：2009-07-02
申请号：US11968062
申请日：2007-12-31
申请人： Ravi Sahita , Uday Savagaonkar , Subhash Gutti
发明人： Ravi Sahita , Uday Savagaonkar , Subhash Gutti
IPC分类号： G06F9/455
CPC分类号： G06F9/45533 , G06F9/45558 , G06F21/554 , G06F21/556 , G06F21/566 , G06F2009/45587
摘要： A method to communicate information between components in a virtualization enabled platform. In one embodiment, a component exchanges data via a communication page which only integrity protected components can access. In another embodiment, an integrity protected communication broker exchanges data from a communication page of one component to another communication page of another component.
摘要翻译：一种在虚拟化支持的平台中的组件之间传递信息的方法。在一个实施例中，组件经由只有完整性保护组件可以访问的通信页面来交换数据。在另一个实施例中，完整性保护的通信代理将数据从一个组件的通信页面交换到另一个组件的另一个通信页面。

9. 发明授权

US08341369B2 Providing protected access to critical memory regions 有权
标题翻译：提供对关键内存区域的保护访问
公开(公告)号：US08341369B2
公开(公告)日：2012-12-25
申请号：US13336913
申请日：2011-12-23
申请人： Uday Savagaonkar , Travis T. Schluessler , Hormuzd Khosravi , Ravi Sahita , Gayathri Nagabhushan , David Durham
发明人： Uday Savagaonkar , Travis T. Schluessler , Hormuzd Khosravi , Ravi Sahita , Gayathri Nagabhushan , David Durham
IPC分类号： G06F12/00
CPC分类号： G06F12/145
摘要： In accordance with disclosed embodiments, there are provided methods, systems, and apparatuses for implementing hardware of a virtualized processor based system detecting a specified type of memory access to an identified region of memory and in response to the detecting generating an interrupt for a virtual machine monitor (VMM) of the virtualized processor based system.
摘要翻译：根据所公开的实施例，提供了用于实现基于虚拟处理器的系统的硬件的方法，系统和装置，该系统检测对所识别的存储器区域的指定类型的存储器访问，并且响应于该检测产生虚拟机的中断基于虚拟化处理器的系统的监视器（VMM）。

10. 发明授权

US08316211B2 Generating multiple address space identifiers per virtual machine to switch between protected micro-contexts 失效
标题翻译：为每个虚拟机生成多个地址空间标识符，以便在受保护的微上下文之间切换
公开(公告)号：US08316211B2
公开(公告)日：2012-11-20
申请号：US12165640
申请日：2008-06-30
申请人： Uday Savagaonkar , Madhavan Parthasarathy , Ravi Sahita , David Durham
发明人： Uday Savagaonkar , Madhavan Parthasarathy , Ravi Sahita , David Durham
IPC分类号： G06F12/00
CPC分类号： G06F12/1027 , G06F12/145
摘要： Embodiments of an invention for generating multiple address space identifiers per virtual machine to switch between protected micro-contexts are disclosed. In one embodiment, an apparatus includes privileged mode logic, an interface, and memory management logic. The privileged mode logic is to transfer control of the processor among a plurality of virtual machines. The interface is to perform a transaction to fetch information from a memory. The memory management logic is to translate an untranslated address to a memory address. The memory management logic includes a storage location, a series of translation stages, determination logic, and a translation lookaside buffer. The storage location is to store an address of a data structure for the first translation stage. Each of the translation stages includes translation logic to find an entry in a data structure based on a portion of the untranslated address. Each entry is to store an address of a different data structure for the first translation stage, an address of a data structure for a successive translation stage, or the physical address. The determination logic is to determine whether an entry is storing an address of a different data structure for the first translation stage. The translation lookaside buffer is to store translations. Each translation lookaside buffer entry includes an address source identifiers. Each address source identifier is to identify a unique micro-context. Each address source identifier is based on a virtual partition identifier. At least two of the of virtual partition identifiers are associated with one of the virtual machines.
摘要翻译：公开了用于在每个虚拟机之间生成多个地址空间标识符以在受保护的微上下文之间切换的发明的实施例。在一个实施例中，装置包括特权模式逻辑，接口和存储器管理逻辑。特权模式逻辑是在多个虚拟机之间传送处理器的控制。该接口是执行一个事务来从内存中获取信息。存储器管理逻辑将非翻译地址转换为存储器地址。存储器管理逻辑包括存储位置，一系列翻译级，确定逻辑和翻译后备缓冲器。存储位置是存储用于第一翻译阶段的数据结构的地址。每个翻译阶段包括翻译逻辑，以基于未翻译地址的一部分在数据结构中找到条目。每个条目是存储用于第一翻译阶段的不同数据结构的地址，用于连续翻译阶段的数据结构的地址或物理地址。确定逻辑是确定条目是否存储用于第一翻译阶段的不同数据结构的地址。翻译后备缓冲区用于存储翻译。每个翻译后备缓冲器条目包括地址源标识符。每个地址源标识符是识别唯一的微观上下文。每个地址源标识符都是基于虚拟分区标识符。至少两个虚拟分区标识符与一个虚拟机相关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式