利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

48 条记录 (耗时 0.017 秒)

    Restriction of program process capabilities
    11.
    发明授权
    Restriction of program process capabilities 有权
    限制程序处理能力

    公开(公告)号：US08272048B2

    公开(公告)日：2012-09-18

    申请号：US11462680

    申请日：2006-08-04

    申请人： Simon Cooper ,  Nick Lane-Smith ,  Joshua Osborne

    发明人： Simon Cooper ,  Nick Lane-Smith ,  Joshua Osborne

    IPC分类号： G06F7/04 ,  G06F9/46

    CPC分类号： G06F21/53 ,  G06F21/6281 ,  G06F2221/033 ,  G06F2221/2141 ,  G06F2221/2149

    摘要： This document describes systems and methods for restricting program process capabilities. In some implementations, the capabilities are restricted by limiting the rights or privileges granted to an application. A plurality of rules may be established for a program, or for a group of programs, denying that program the right to take actions which are outside of the actions needed to implement its intended functionality. A security policy is implemented to test actions initiated in response to an application against the rules to enable decisions restricting the possible actions of the program. Embodiments are disclosed which process the majority of decisions regarding actions against a security profile through use of a virtual machine. In some embodiments, the majority of decisions are resolved within the kernel space of an operating system.

    摘要翻译： 本文档描述了限制程序进程能力的系统和方法。 在一些实现中，通过限制授予应用的权限或特权来限制这些能力。 可以为程序或一组程序建立多个规则，拒绝该程序采取超出执行其预期功能所需的动作的动作的权利。 实施安全策略来测试针对规则响应应用程序发起的操作，以便能够限制程序可能的动作的决策。 公开了通过使用虚拟机处理关于针对安全简档的动作的大多数决定的实施例。 在一些实施例中，大多数决定在操作系统的内核空间内被解决。

    Methods and Systems for Upgrade and Synchronization of Securely Installed Applications on a Computing Device
    12.
    发明申请
    Methods and Systems for Upgrade and Synchronization of Securely Installed Applications on a Computing Device 有权
    用于在计算设备上升级和同步安全应用程序的方法和系统

    公开(公告)号：US20110010699A1

    公开(公告)日：2011-01-13

    申请号：US12757009

    申请日：2010-04-08

    申请人： Simon Cooper ,  Dallas De Atley

    发明人： Simon Cooper ,  Dallas De Atley

    IPC分类号： G06F9/445 ,  H04L9/32

    CPC分类号： G06F8/65 ,  G06F8/71 ,  G06F21/12 ,  G06F2221/2111 ,  G06F2221/2145 ,  H04L29/0854 ,  H04L63/102 ,  H04L63/123 ,  H04W12/06

    摘要： Embodiments of the present disclosure provide for upgrades and synchronization of applications installed on a device, such as a mobile device. In one embodiment, a device may include applications purchased and downloaded via a content management system. The device maintains a list or database of applications that are authorized for each device. This list is also replicated in a remote cache that is maintained by an archive host. The device may then synchronize and upgrade these applications across multiple platforms, such as one or more computers that can be coupled to the device or the archive host. The archive host allows for files of the application be provided back to the device. Upon installation, the device can then confirm the authorization and identity of the newly installed application.

    摘要翻译： 本公开的实施例提供了安装在诸如移动设备的设备上的应用的升级和同步。 在一个实施例中，设备可以包括经由内容管理系统购买和下载的应用。 设备维护每个设备授权的应用程序的列表或数据库。 该列表也被复制在由归档主机维护的远程缓存中。 然后，设备可以跨多个平台（诸如可以耦合到设备或归档主机的一个或多个计算机）同步和升级这些应用。 归档主机允许将应用程序的文件提供给设备。 安装后，设备可以确认新安装的应用程序的授权和身份。

    SECURE SOFTWARE INSTALLATION
    13.
    发明申请
    SECURE SOFTWARE INSTALLATION 有权
    安全软件安装

    公开(公告)号：US20100312966A1

    公开(公告)日：2010-12-09

    申请号：US12477769

    申请日：2009-06-03

    申请人： Dallas De Atley ,  Simon Cooper

    发明人： Dallas De Atley ,  Simon Cooper

    IPC分类号： G06F9/445 ,  G06F12/08

    CPC分类号： G06F21/53

    摘要： Embodiments of the present disclosure provide methods and systems for securely installing software on a computing device, such as a mobile device. In one embodiment, the device executes an installer that securely installs the software. In order to perform installations securely, the installer configures one or more secure containers for the software and installs the software exclusively in these containers. In some embodiments, the installer randomly determines the identifiers for the containers. These identifiers remain unknown to the software to be installed. Instead, an installation framework maintains the correspondence between an application and its container. Other methods and apparatuses are also described.

    摘要翻译： 本公开的实施例提供了用于在诸如移动设备的计算设备上安全地安装软件的方法和系统。 在一个实施例中，设备执行安全地安装软件的安装程序。 为了安全地执行安装，安装程序为软件配置一个或多个安全容器，并将软件专门安装在这些容器中。 在一些实施例中，安装者随机地确定容器的标识符。 这些标识符对于要安装的软件仍然是未知的。 相反，安装框架保持应用程序与其容器之间的对应关系。 还描述了其它方法和装置。

    METHODS, TECHNIQUES AND SYSTEM FOR MAINTAINING SECURITY ON COMPUTER SYSTEMS
    14.
    发明申请
    METHODS, TECHNIQUES AND SYSTEM FOR MAINTAINING SECURITY ON COMPUTER SYSTEMS 审中-公开
    用于维护计算机系统安全的方法，技术和系统

    公开(公告)号：US20090252323A1

    公开(公告)日：2009-10-08

    申请号：US12414799

    申请日：2009-03-31

    申请人： Simon COOPER

    发明人： Simon COOPER

    IPC分类号： G09C5/00 ,  G06F17/30

    CPC分类号： G06F21/84 ,  G06F21/6218 ,  H04L9/3247 ,  H04L2209/12 ,  H04L2209/34

    摘要： A hardware device that includes a first interface, a second interface, at least one memory unit, a data analyzer circuitry, and decryption circuitry. The first interface receives image information that is sent to a display. The data analyzer circuitry analyzes the image information to detect encrypted image information. The decryption circuitry decrypts the detected encrypted image information to provide the decrypted image information to replace the encrypted image information to provide modified image information. The second interface sends the modified image information to the display so that the display displays a modified image. The at least one memory unit stores at least a portion of at least one out of the image information, the modified image information and at least one decryption key.

    摘要翻译： 一种包括第一接口，第二接口，至少一个存储器单元，数据分析器电路和解密电路的硬件设备。 第一个接口接收发送到显示器的图像信息。 数据分析器电路分析图像信息以检测加密的图像信息。 解密电路解密所检测的加密图像信息，以提供解密的图像信息来代替加密图像信息以提供修改的图像信息。 第二接口将修改的图像信息发送到显示器，使得显示器显示修改的图像。 至少一个存储单元存储图像信息，修改图像信息和至少一个解密密钥中的至少一个的至少一部分。