专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090158036A1 PROTECTED COMPUTING ENVIRONMENT 有权
标题翻译：保护计算环境
公开(公告)号：US20090158036A1
公开(公告)日：2009-06-18
申请号：US12390505
申请日：2009-02-23
申请人： Sumedh N. Barde , Jonathan D. Schwartz , Reid Joseph Kuhn , Alexandre Vicktorovich Grigorovitch , Kirt A. Debique , Chabd B. Knowlton , James M. Alkove , Geoffery T. Dunbar , Michael J. Grier , Ming Ma , Chaitanya D. Upadhyay , Adil Ahmed Sherwani , Arun Upadhyaya Kishan
发明人： Sumedh N. Barde , Jonathan D. Schwartz , Reid Joseph Kuhn , Alexandre Vicktorovich Grigorovitch , Kirt A. Debique , Chabd B. Knowlton , James M. Alkove , Geoffery T. Dunbar , Michael J. Grier , Ming Ma , Chaitanya D. Upadhyay , Adil Ahmed Sherwani , Arun Upadhyaya Kishan
IPC分类号： H04L9/00
CPC分类号： G06F21/10 , G06F21/57 , G06F2221/0735 , H04L9/3247 , H04L9/3263 , H04L2209/603
摘要： A method of establishing a protected environment within a computing device including validating a kernel component loaded into a kernel of the computing device, establishing a security state for the kernel based on the validation, creating a secure process and loading a software component into the secure process, periodically checking the security state of the kernel, and notifying the secure process when the security state of the kernel has changed.
摘要翻译：一种在计算设备内建立受保护环境的方法，包括验证加载到计算设备的内核中的内核组件，基于验证建立内核的安全状态，创建安全过程并将软件组件加载到安全过程中定期检查内核的安全状态，并在内核的安全状态发生变化时通知安全进程。

2. 发明授权

US09189605B2 Protected computing environment 有权
标题翻译：受保护的计算环境
公开(公告)号：US09189605B2
公开(公告)日：2015-11-17
申请号：US12390505
申请日：2009-02-23
申请人： Sumedh N. Barde , Jonathan D. Schwartz , Reid Joseph Kuhn , Alexandre Vicktorovich Grigorovitch , Kirt A. Debique , Chadd B. Knowlton , James M. Alkove , Geoffrey T. Dunbar , Michael J. Grier , Ming Ma , Chaitanya D. Upadhyay , Adil Ahmed Sherwani , Arun Upadhyaya Kishan
发明人： Sumedh N. Barde , Jonathan D. Schwartz , Reid Joseph Kuhn , Alexandre Vicktorovich Grigorovitch , Kirt A. Debique , Chadd B. Knowlton , James M. Alkove , Geoffrey T. Dunbar , Michael J. Grier , Ming Ma , Chaitanya D. Upadhyay , Adil Ahmed Sherwani , Arun Upadhyaya Kishan
IPC分类号： G06F21/00 , G06F21/10 , G06F21/57 , H04L9/32
CPC分类号： G06F21/10 , G06F21/57 , G06F2221/0735 , H04L9/3247 , H04L9/3263 , H04L2209/603
摘要： A method of establishing a protected environment within a computing device including validating a kernel component loaded into a kernel of the computing device, establishing a security state for the kernel based on the validation, creating a secure process and loading a software component into the secure process, periodically checking the security state of the kernel, and notifying the secure process when the security state of the kernel has changed.
摘要翻译：一种在计算设备内建立受保护环境的方法，包括验证加载到计算设备的内核中的内核组件，基于验证建立内核的安全状态，创建安全过程并将软件组件加载到安全过程中定期检查内核的安全状态，并在内核的安全状态发生变化时通知安全进程。

3. 发明授权

US07577848B2 Systems and methods for validating executable file integrity using partial image hashes 有权
标题翻译：使用部分图像散列来验证可执行文件完整性的系统和方法
公开(公告)号：US07577848B2
公开(公告)日：2009-08-18
申请号：US11037566
申请日：2005-01-18
申请人： Jonathan D. Schwartz , Yu Lin Sie , Philip Joseph Hallin
发明人： Jonathan D. Schwartz , Yu Lin Sie , Philip Joseph Hallin
IPC分类号： G06F11/30
CPC分类号： G06F21/52 , G06F21/64
摘要： Systems and methods for validating integrity of an executable file are described. In one aspect, multiple partial image hashes are generated, the combination of which represent a digest of an entire executable file. Subsequent to loading the executable file on a computing device, a request to page a portion of the executable file into memory for execution is intercepted. Responsive to intercepting the request, and prior to paging the portion into memory for execution, a validation hash of the portion is computed. The validation hash is compared to a partial hash of the multiple partial image hashes to determine code integrity of the portion. The partial hash represents a same code segment as the portion.
摘要翻译：描述用于验证可执行文件的完整性的系统和方法。在一个方面，生成多个部分图像散列，其组合表示整个可执行文件的摘要。在将可执行文件加载到计算设备之后，将可执行文件的一部分页面的请求存储到存储器中以供执行被拦截。响应于截取请求，并且在将该部分分配到存储器中以执行之前，计算该部分的验证散列。将验证散列与多个部分图像散列的部分散列进行比较，以确定部分的代码完整性。部分散列表示与该部分相同的代码段。

4. 发明申请

US20120174210A1 Trusted Communications With Child Processes 有权
标题翻译：与子进程的可信通信
公开(公告)号：US20120174210A1
公开(公告)日：2012-07-05
申请号：US13419972
申请日：2012-03-14
申请人： Kedarnath Atmaram Dubhashi , Jonathan D. Schwartz , Sambavi Muthukrishnan , Simon Skaria
发明人： Kedarnath Atmaram Dubhashi , Jonathan D. Schwartz , Sambavi Muthukrishnan , Simon Skaria
IPC分类号： G06F21/22
CPC分类号： G06F9/547
摘要： A method to identify a child process to a parent process in an operating system includes obtaining a token and login identifier from the operating system. The parent process creates a remote procedure call communications endpoint to communicate with the child process. Thereafter, a child process is spawned by the parent process. A child-initiated request to communicate with the parent process is then received by the parent process. In order to verify the identity of the child-initiated request, the parent process impersonates the child process and receives as identifier that identifies the requestor child process. The requestor process identifier and the spawned child identifier are compared. Based on the comparison, the parent process responds to the child-initiated request. In another embodiment, process identifiers are used by the parent process to verify the identity of a child process the requests communication with the parent process.
摘要翻译：在操作系统中识别父进程的子进程的方法包括从操作系统获取令牌和登录标识符。父进程创建远程过程调用通信端点以与子进程通信。此后，子进程由父进程产生。父进程接收到与父进程进行通信的子发起请求。为了验证子发起请求的身份，父进程模拟子进程，并接收标识请求者子进程的标识符。比较请求者进程标识符和产生的子标识符。基于比较，父进程响应子发起的请求。在另一个实施例中，父进程使用进程标识符来验证请求与父进程的通信的子进程的身份。

5. 发明授权

US07832004B2 Secure privilege elevation by way of secure desktop on computing device 有权
标题翻译：通过计算设备上的安全桌面的安全特权提升
公开(公告)号：US07832004B2
公开(公告)日：2010-11-09
申请号：US11502813
申请日：2006-08-10
申请人： Jonathan D. Schwartz , Eric C. Perlin , James H. Hong , Stephen F. Scallen , Sermet Iskin
发明人： Jonathan D. Schwartz , Eric C. Perlin , James H. Hong , Stephen F. Scallen , Sermet Iskin
IPC分类号： G06F12/00
CPC分类号： G06F21/74
摘要： A computing device has a user desktop on which a relatively less-secure user application is executed and a secure desktop elevated from the user desktop on which a relatively more-secure secure application is executed upon a request thereto from the user application. To securely collect information from a user at the computer device with regard to the secure application at the secure desktop, an access interface is securely executed on the secure desktop and is visually presented in conjunction with the requesting user application of the user desktop such that the access interface is visually coupled to the requesting user application and is visually perceived by the user along with such requesting user application.
摘要翻译：计算设备具有在其上执行相对较不安全的用户应用程序的用户桌面，并且从用户桌面升级的安全桌面，在用户桌面上，根据用户应用程序的请求，执行相对更安全的安全应用程序。为了安全地收集来自计算机设备的用户在安全桌面上的安全应用的信息，在安全桌面上安全地执行访问接口，并且与用户桌面的请求用户应用程序可视地呈现，使得访问接口可视地耦合到请求用户应用，并且与用户应用一起被用户视觉上感知。

6. 发明申请

US20090328134A1 LICENSING PROTECTED CONTENT TO APPLICATION SETS 有权
标题翻译：许可保护内容到应用程序集
公开(公告)号：US20090328134A1
公开(公告)日：2009-12-31
申请号：US12163548
申请日：2008-06-27
申请人： Kenneth D. Ray , Pankaj M. Kamat , Charles W. Kaufman , Paul J. Leach , William R. Tipton , Andrew Herron , Krassimir E. Karamifilov , Duncan G. Bryce , Jonathan D. Schwartz , Matthew C. Setzer , John McDowell
发明人： Kenneth D. Ray , Pankaj M. Kamat , Charles W. Kaufman , Paul J. Leach , William R. Tipton , Andrew Herron , Krassimir E. Karamifilov , Duncan G. Bryce , Jonathan D. Schwartz , Matthew C. Setzer , John McDowell
IPC分类号： G06F17/00
CPC分类号： G06F21/105
摘要： The present invention extends to methods, systems, and computer program products for licensing protected content to application sets. Embodiments of the invention permit a local machine to increase its participation in authorizing access to protected content. For example, an operating system within an appropriate computing environment is permitted to determine if an application is authorized to access protected content. Thus, the application is relieved from having to store a publishing license. Further, authorization decisions are partially distributed, easing the resource burden on a protection server. Accordingly, embodiments of the invention can facilitate more robust and efficient authorization decisions when access to protected content is requested.
摘要翻译：本发明扩展到用于将受保护内容授权给应用集的方法，系统和计算机程序产品。本发明的实施例允许本地机器增加其对授权对受保护内容的访问的参与。例如，允许在适当的计算环境内的操作系统来确定应用程序是否被授权访问受保护的内容。因此，应用程序不必存储发布许可证。此外，授权决定部分分配，减轻了保护服务器的资源负担。因此，当请求访问受保护内容时，本发明的实施例可以促进更强大和有效的授权决定。

7. 发明授权

US08225390B2 Licensing protected content to application sets 有权
标题翻译：许可保护内容到应用程序集
公开(公告)号：US08225390B2
公开(公告)日：2012-07-17
申请号：US12163548
申请日：2008-06-27
申请人： Kenneth D. Ray , Pankaj M. Kamat , Charles W. Kaufman , Paul J. Leach , William R. Tipton , Andrew Herron , Krassimir E. Karamfilov , Duncan G. Bryce , Jonathan D. Schwartz , Matthew C. Setzer , John McDowell
发明人： Kenneth D. Ray , Pankaj M. Kamat , Charles W. Kaufman , Paul J. Leach , William R. Tipton , Andrew Herron , Krassimir E. Karamfilov , Duncan G. Bryce , Jonathan D. Schwartz , Matthew C. Setzer , John McDowell
IPC分类号： G06F21/00
CPC分类号： G06F21/105
摘要： The present invention extends to methods, systems, and computer program products for licensing protected content to application sets. Embodiments of the invention permit a local machine to increase its participation in authorizing access to protected content. For example, an operating system within an appropriate computing environment is permitted to determine if an application is authorized to access protected content. Thus, the application is relieved from having to store a publishing license. Further, authorization decisions are partially distributed, easing the resource burden on a protection server. Accordingly, embodiments of the invention can facilitate more robust and efficient authorization decisions when access to protected content is requested.
摘要翻译：本发明扩展到用于将受保护内容授权给应用集的方法，系统和计算机程序产品。本发明的实施例允许本地机器增加其对授权对受保护内容的访问的参与。例如，允许在适当的计算环境内的操作系统来确定应用程序是否被授权访问受保护的内容。因此，应用程序不必存储发布许可证。此外，授权决定部分分配，减轻了保护服务器的资源负担。因此，当请求访问受保护内容时，本发明的实施例可以促进更强大和有效的授权决定。

8. 发明授权

US08161544B2 Trusted communications with child processes 有权
标题翻译：与子进程的可信通信
公开(公告)号：US08161544B2
公开(公告)日：2012-04-17
申请号：US11488979
申请日：2006-07-19
申请人： Kedarnath Atmaram Dubhashi , Jonathan D. Schwartz , Sambavi Muthukrishnan , Simon Skaria
发明人： Kedarnath Atmaram Dubhashi , Jonathan D. Schwartz , Sambavi Muthukrishnan , Simon Skaria
IPC分类号： G06F21/00
CPC分类号： G06F9/547
摘要： A method to identify a child process to a parent process in an operating system includes obtaining a token and login identifier from the operating system. The parent process creates a remote procedure call communications endpoint to communicate with the child process. Thereafter, a child process is spawned by the parent process. A child-initiated request to communicate with the parent process is then received by the parent process. In order to verify the identity of the child-initiated request, the parent process impersonates the child process and receives as identifier that identifies the requestor child process. The requestor process identifier and the spawned child identifier are compared. Based on the comparison, the parent process responds to the child-initiated request. In another embodiment, process identifiers are used by the parent process to verify the identity of a child process the requests communication with the parent process.
摘要翻译：在操作系统中识别父进程的子进程的方法包括从操作系统获取令牌和登录标识符。父进程创建远程过程调用通信端点以与子进程通信。此后，子进程由父进程产生。父进程接收到与父进程进行通信的子发起请求。为了验证子发起请求的身份，父进程模拟子进程，并接收标识请求者子进程的标识符。比较请求者进程标识符和产生的子标识符。基于比较，父进程响应子发起的请求。在另一个实施例中，父进程使用进程标识符来验证请求与父进程的通信的子进程的身份。

9. 发明授权

US08943579B2 Trusted communications with child processes 有权
标题翻译：与子进程的可信通信
公开(公告)号：US08943579B2
公开(公告)日：2015-01-27
申请号：US13419972
申请日：2012-03-14
申请人： Kedarnath Atmaram Dubhashi , Jonathan D. Schwartz , Sambavi Muthukrishnan , Simon Skaria
发明人： Kedarnath Atmaram Dubhashi , Jonathan D. Schwartz , Sambavi Muthukrishnan , Simon Skaria
IPC分类号： H04L29/06 , G06F9/54
CPC分类号： G06F9/547
摘要： A method to identify a child process to a parent process in an operating system includes obtaining a token and login identifier from the operating system. The parent process creates a remote procedure call communications endpoint to communicate with the child process. Thereafter, a child process is spawned by the parent process. A child-initiated request to communicate with the parent process is then received by the parent process. In order to verify the identity of the child-initiated request, the parent process impersonates the child process and receives as identifier that identifies the requestor child process. The requestor process identifier and the spawned child identifier are compared. Based on the comparison, the parent process responds to the child-initiated request. In another embodiment, process identifiers are used by the parent process to verify the identity of a child process the requests communication with the parent process.
摘要翻译：在操作系统中识别父进程的子进程的方法包括从操作系统获取令牌和登录标识符。父进程创建远程过程调用通信端点以与子进程通信。此后，子进程由父进程产生。父进程接收到与父进程进行通信的子发起请求。为了验证子发起请求的身份，父进程模拟子进程，并接收标识请求者子进程的标识符。比较请求者进程标识符和产生的子标识符。基于比较，父进程响应子发起的请求。在另一个实施例中，父进程使用进程标识符来验证请求与父进程的通信的子进程的身份。

10. 发明授权

US07490352B2 Systems and methods for verifying trust of executable files 有权
标题翻译：用于验证可执行文件信任的系统和方法
公开(公告)号：US07490352B2
公开(公告)日：2009-02-10
申请号：US11100770
申请日：2005-04-07
申请人： Michael Kramer , Kenneth D. Ray , Paul England , Scott A. Field , Jonathan D. Schwartz
发明人： Michael Kramer , Kenneth D. Ray , Paul England , Scott A. Field , Jonathan D. Schwartz
IPC分类号： G06F21/22 , G06F21/00 , G06F12/14
CPC分类号： G06F21/51 , G06F21/56
摘要： Systems and methods for validating integrity of an executable file are described. In one aspect, the systems and methods determine that an executable file is being introduced into a path of execution. The executable file is then automatically evaluated in view of multiple malware checks to detect if the executable file represents a type of malware. The multiple malware checks are integrated into an operating system trust verification process along the path of execution.
摘要翻译：描述用于验证可执行文件的完整性的系统和方法。在一个方面，系统和方法确定可执行文件正被引入到执行的路径中。然后，根据多个恶意软件检查自动评估可执行文件，以检测可执行文件是否代表一种恶意软件。多个恶意软件检查被集成到沿着执行路径的操作系统信任验证过程中。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式