专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090222792A1 AUTOMATIC MODIFICATION OF EXECUTABLE CODE 有权
标题翻译：自动修改可执行代码
公开(公告)号：US20090222792A1
公开(公告)日：2009-09-03
申请号：US12039486
申请日：2008-02-28
申请人： Vedvyas Shanbhogue , Ravi L. Sahita , Uday R. Savagaonkar
发明人： Vedvyas Shanbhogue , Ravi L. Sahita , Uday R. Savagaonkar
IPC分类号： G06F9/44
CPC分类号： G06F9/4484 , G06F2209/542
摘要： A method for automatically modifying an executable file for a software agent is provided. The method comprises detecting original static entry and exit points in the executable file and generating corresponding transformed points; modifying the executable file by linking the executable file to the integrity services environment and embedding a signed agent manifest; loading the modified executable file into memory and registering a target list with the software agent's hypervisor, wherein the target list provides mappings between protected and active page tables; detecting dynamic entry and exit points in the executable file and generating corresponding transformed points; switching to a protected context, in response to a transformed exit point being invoked, and switching to an active context, in response a transformed entry point being invoked; and de-registering the software agent with the memory protection module, in response to the software agent being unloaded.
摘要翻译：提供了一种用于自动修改软件代理的可执行文件的方法。该方法包括检测可执行文件中的原始静态入口点和出口点，并产生相应的变换点; 通过将可执行文件链接到完整性服务环境并嵌入签名的代理清单来修改可执行文件; 将修改的可执行文件加载到存储器中并且与所述软件代理的管理程序注册目标列表，其中所述目标列表提供受保护页面和活动页面表之间的映射; 检测可执行文件中的动态入口点和出口点，并生成相应的转换点; 响应于被转换的退出点被调用，切换到受保护的上下文，并且响应于被转换的入口点被切换到活动上下文; 以及响应于所述软件代理被卸载，将所述软件代理与所述存储器保护模块取消注册。

2. 发明申请

US20090323941A1 SOFTWARE COPY PROTECTION VIA PROTECTED EXECUTION OF APPLICATIONS 有权
标题翻译：通过受保护的应用程序执行软件复制保护
公开(公告)号：US20090323941A1
公开(公告)日：2009-12-31
申请号：US12165260
申请日：2008-06-30
申请人： Ravi L. Sahita , Uday R. Savagaonkar , Vedvyas Shanbhogue , Ernest F. Brickell
发明人： Ravi L. Sahita , Uday R. Savagaonkar , Vedvyas Shanbhogue , Ernest F. Brickell
IPC分类号： H04L9/00
CPC分类号： G06F21/53 , H04L9/0841 , H04L9/3263 , H04L2209/605
摘要： Methods and apparatus to provide a tamper-resistant environment for software are described. In some embodiments, procedures for verifying whether a software container is utilizing protected memory and is associated with a specific platform are described. Other embodiments are also described.
摘要翻译：描述了为软件提供防篡改环境的方法和设备。在一些实施例中，描述了用于验证软件容器是否正在利用受保护的存储器并且与特定平台相关联的过程。还描述了其它实施例。

3. 发明授权

US08468356B2 Software copy protection via protected execution of applications 有权
标题翻译：通过受保护的应用程序执行软件复制保护
公开(公告)号：US08468356B2
公开(公告)日：2013-06-18
申请号：US12165260
申请日：2008-06-30
申请人： Ravi L. Sahita , Uday R. Savagaonkar , Vedvyas Shanbhogue , Ernest F. Brickell
发明人： Ravi L. Sahita , Uday R. Savagaonkar , Vedvyas Shanbhogue , Ernest F. Brickell
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , H04L9/0841 , H04L9/3263 , H04L2209/605
摘要： Methods and apparatus to provide a tamper-resistant environment for software are described. In some embodiments, procedures for verifying whether a software container is utilizing protected memory and is associated with a specific platform are described. Other embodiments are also described.
摘要翻译：描述了为软件提供防篡改环境的方法和设备。在一些实施例中，描述了用于验证软件容器是否正在利用受保护的存储器并且与特定平台相关联的过程。还描述了其它实施例。

4. 发明申请

US20090241189A1 EFFICIENT HANDLING OF INTERRUPTS IN A COMPUTING ENVIRONMENT 有权
标题翻译：有效处理计算环境中的中断
公开(公告)号：US20090241189A1
公开(公告)日：2009-09-24
申请号：US12050862
申请日：2008-03-18
申请人： Vedvyas Shanbhogue , Uday R. Savagaonkar , Ravi L. Sahita
发明人： Vedvyas Shanbhogue , Uday R. Savagaonkar , Ravi L. Sahita
IPC分类号： G06F12/14
CPC分类号： G06F13/26
摘要： A method for efficiently handling interrupts in a virtual technology environment with integrity services is provided. The method comprises assigning an interrupt to a virtual machine that is running a software agent; suspending the software agent; invoking a protected interrupt handler; copying the interrupt's memory content to a protected location, in response to successfully verifying the integrity of the content; replacing the interrupt's return address with a return address for a protected function; switching from the software agent's protected context to its active context; executing the original interrupt handler; returning control to the protected function to ensure that execution of the software agent resumes safely; switching back to the software agent's protected context, in response to successfully verifying the integrity of the content; and passing control back to the software agent to resume execution.
摘要翻译：提供了一种在完整性服务中有效处理虚拟技术环境中断的方法。该方法包括：向运行软件代理的虚拟机分配中断; 暂停软件代理; 调用受保护的中断处理程序; 响应成功验证内容的完整性，将中断的内存内容复制到受保护的位置; 用保护功能的返回地址替换中断的返回地址; 从软件代理的受保护的上下文切换到其活动上下文; 执行原始中断处理程序; 将控制权返回到受保护的功能，以确保软件代理的执行安全恢复; 响应成功验证内容的完整性，切换回软件代理的受保护的上下文; 并将控制权传回软件代理程序以恢复执行。

5. 发明申请

US20140189326A1 MEMORY MANAGEMENT IN SECURE ENCLAVES 有权
标题翻译：内存管理在安全的包装
公开(公告)号：US20140189326A1
公开(公告)日：2014-07-03
申请号：US13729371
申请日：2012-12-28
申请人： Rebekah Leslie , Carlos V. Rozas , Vincent R. Scarlata , Simon P. Johnson , Uday R. Savagaonkar , Barry E. Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis X. Mckeen , Michael A. Goldsmith , Ilya Alexandrovich , Alex Berenzon , Wesley H. Smith
发明人： Rebekah Leslie , Carlos V. Rozas , Vincent R. Scarlata , Simon P. Johnson , Uday R. Savagaonkar , Barry E. Huntley , Vedvyas Shanbhogue , Ittai Anati , Francis X. Mckeen , Michael A. Goldsmith , Ilya Alexandrovich , Alex Berenzon , Wesley H. Smith
IPC分类号： G06F9/30
CPC分类号： G06F9/3004 , G06F9/30047 , G06F9/30076 , G06F9/44 , G06F12/084 , G06F12/0875 , G06F12/1483 , G06F2212/452
摘要： Embodiments of an invention for memory management in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction and a second instruction. The execution unit is to execute the first instruction, wherein execution of the first instruction includes allocating a page in an enclave page cache to a secure enclave. The execution unit is also to execute the second instruction, wherein execution of the second instruction includes confirming the allocation of the page.
摘要翻译：公开了用于安全飞行器中的存储器管理的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元接收第一指令和第二指令。执行单元执行第一指令，其中第一指令的执行包括将飞地页面缓存中的页面分配到安全飞地。执行单元还执行第二指令，其中第二指令的执行包括确认页的分配。

6. 发明申请

US20140189325A1 PAGING IN SECURE ENCLAVES 有权
标题翻译：寻找安全的包装
公开(公告)号：US20140189325A1
公开(公告)日：2014-07-03
申请号：US13729277
申请日：2012-12-28
申请人： Francis X. Mckeen , Michael A. Goldsmith , Barry E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith , Ittai Anati , Ilya Alexandrovich , Alex Berenzon
发明人： Francis X. Mckeen , Michael A. Goldsmith , Barry E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith , Ittai Anati , Ilya Alexandrovich , Alex Berenzon
IPC分类号： G06F9/30
CPC分类号： G06F12/0804 , G06F9/30047 , G06F12/0875 , G06F12/1408 , G06F2212/1052 , G06F2212/402
摘要： Embodiments of an invention for paging in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction. The execution unit is to execute the first instruction, wherein execution of the first instruction includes evicting a first page from an enclave page cache.
摘要翻译：公开了用于在安全飞行器中寻呼的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。指令单元接收第一条指令。执行单元执行第一指令，其中第一指令的执行包括从飞地页面缓存中逐出第一页。

7. 发明授权

US09189411B2 Logging in secure enclaves 有权
标题翻译：登录安全的飞地
公开(公告)号：US09189411B2
公开(公告)日：2015-11-17
申请号：US13729348
申请日：2012-12-28
申请人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
发明人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
IPC分类号： G06F12/00 , G06F12/08 , G06F12/14
CPC分类号： G06F21/60 , G06F12/0875 , G06F12/14 , G06F12/145 , G06F21/72 , G06F2212/1052 , G06F2212/152 , G06F2212/452
摘要： Embodiments of an invention for logging in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction having an associated enclave page cache address. The execution unit is to execute the instruction without causing a virtual machine exit, wherein execution of the instruction includes logging the instruction and the associated enclave page cache address.
摘要翻译：公开了用于登录安全飞行器的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。该指令单元用于接收具有关联的飞地页面缓存地址的指令。执行单元执行指令而不引起虚拟机退出，其中指令的执行包括记录指令和关联的飞地页面缓存地址。

8. 发明申请

US20150089173A1 SECURE MEMORY REPARTITIONING 有权
标题翻译：安全记忆重写
公开(公告)号：US20150089173A1
公开(公告)日：2015-03-26
申请号：US14034813
申请日：2013-09-24
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , Michael A. Goldsmith , Simon P. Johnson , Rebekah M. Leslie-Hurd , Francis X. McKeen , Gilbert Neiger , Raghunandan Makaram , Carlos V. Rozas , Amy L. Santoni , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith , Ittai Anati , Ilya Alexandrovich
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , Michael A. Goldsmith , Simon P. Johnson , Rebekah M. Leslie-Hurd , Francis X. McKeen , Gilbert Neiger , Raghunandan Makaram , Carlos V. Rozas , Amy L. Santoni , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith , Ittai Anati , Ilya Alexandrovich
IPC分类号： G06F12/14 , G06F12/08
CPC分类号： G06F12/1408 , G06F9/45558 , G06F12/0808 , G06F12/0897 , G06F12/1027 , G06F2009/45587 , G06F2212/1032 , G06F2212/1048 , G06F2212/152
摘要： Secure memory repartitioning technologies are described. A processor includes a processor core and a memory controller coupled between the processor core and main memory. The main memory includes a memory range including a section of convertible pages are convertible to secure pages or non-secure pages. The processor core, in response to a page conversion instruction, is to determine from the instruction a convertible page in the memory range to be converted and convert the convertible page to be at least one of a secure page or a non-secure page. The memory range may also include a hardware reserved section are convertible in response to a section conversion instruction.
摘要翻译：描述了安全的内存重新分区技术。处理器包括耦合在处理器核心和主存储器之间的处理器核心和存储器控制器。主存储器包括一个内存范围，包括可转换页面的一部分可转换为安全页面或非安全页面。响应于页面转换指令的处理器核心是从指令中确定要转换的存储器范围内的可转换页面，并将可转换页面转换为安全页面或非安全页面中的至少一个页面。存储器范围还可以包括可响应于段转换指令而转换的硬件保留部分。

9. 发明授权

US09430384B2 Instructions and logic to provide advanced paging capabilities for secure enclave page caches 有权
标题翻译：为安全的飞地页面缓存提供高级分页功能的说明和逻辑
公开(公告)号：US09430384B2
公开(公告)日：2016-08-30
申请号：US13854107
申请日：2013-03-31
申请人： Carlos V Rozas , Ilya Alexandrovich , Ittai Anati , Alex Berenzon , Michael A Goldsmith , Barry E Huntley , Anton Ivanov , Simon P Johnson , Rebekah M. Leslie-Hurd , Francis X. McKeen , Gilbert Neiger , Rinat Rappoport , Scott Dion Rodgers , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H Smith , William Colin Wood
发明人： Carlos V Rozas , Ilya Alexandrovich , Ittai Anati , Alex Berenzon , Michael A Goldsmith , Barry E Huntley , Anton Ivanov , Simon P Johnson , Rebekah M. Leslie-Hurd , Francis X. McKeen , Gilbert Neiger , Rinat Rappoport , Scott Dion Rodgers , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H Smith , William Colin Wood
IPC分类号： G06F12/08 , G06F12/10
CPC分类号： G06F12/0875 , G06F12/0808 , G06F12/1027 , G06F2212/1016 , G06F2212/402
摘要： Instructions and logic provide advanced paging capabilities for secure enclave page caches. Embodiments include multiple hardware threads or processing cores, a cache to store secure data for a shared page address allocated to a secure enclave accessible by the hardware threads. A decode stage decodes a first instruction specifying said shared page address as an operand, and execution units mark an entry corresponding to an enclave page cache mapping for the shared page address to block creation of a new translation for either of said first or second hardware threads to access the shared page. A second instruction is decoded for execution, the second instruction specifying said secure enclave as an operand, and execution units record hardware threads currently accessing secure data in the enclave page cache corresponding to the secure enclave, and decrement the recorded number of hardware threads when any of the hardware threads exits the secure enclave.
摘要翻译：说明和逻辑为安全的飞地页面缓存提供了高级分页功能。实施例包括多个硬件线程或处理核心，用于存储分配给由硬件线程可访问的安全空间的共享页面地址的安全数据的高速缓存。解码级将指定所述共享页地址的第一指令解码为操作数，并且执行单元标记对应于共享页地址的飞地页高速缓存映射的条目，以阻止所述第一或第二硬件线程中的任一个的新转换的创建访问共享页面。第二指令被解码以执行，第二指令指定所述安全飞地作为操作数，并且执行单元记录当前访问与安全飞地相对应的飞地页面缓存中的安全数据的硬件线程，并且当任何的硬件线程退出安全飞地。

10. 发明申请

US20140189242A1 LOGGING IN SECURE ENCLAVES 有权
标题翻译：登录在安全的包装
公开(公告)号：US20140189242A1
公开(公告)日：2014-07-03
申请号：US13729348
申请日：2012-12-28
申请人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
发明人： Francis X. Mckeen , Michael A. Goldsmith , Barrey E. Huntley , Simon P. Johnson , Rebekah Leslie , Carlos V. Rozas , Uday R. Savagaonkar , Vincent R. Scarlata , Vedvyas Shanbhogue , Wesley H. Smith
IPC分类号： G06F12/08
CPC分类号： G06F21/60 , G06F12/0875 , G06F12/14 , G06F12/145 , G06F21/72 , G06F2212/1052 , G06F2212/152 , G06F2212/452
摘要： Embodiments of an invention for logging in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction having an associated enclave page cache address. The execution unit is to execute the instruction without causing a virtual machine exit, wherein execution of the instruction includes logging the instruction and the associated enclave page cache address.
摘要翻译：公开了用于登录安全飞行器的发明的实施例。在一个实施例中，处理器包括指令单元和执行单元。该指令单元用于接收具有关联的飞地页面缓存地址的指令。执行单元执行指令而不引起虚拟机退出，其中指令的执行包括记录指令和关联的飞地页面缓存地址。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式