Authenticating computed results in a public distributed computing environment
    11.
    发明授权
    Authenticating computed results in a public distributed computing environment 有权
    在公共分布式计算环境中验证计算结果

    公开(公告)号:US07827596B2

    公开(公告)日:2010-11-02

    申请号:US11212006

    申请日:2005-08-25

    申请人: Larry Wayne Loen

    发明人: Larry Wayne Loen

    IPC分类号: G06F21/00 H04L9/32

    CPC分类号: H04L63/12

    摘要: An apparatus and method authenticate computed results in a public distributed computing environment without the need for fully recomputing the results. The work unit is operated on by client code that computes one or more partial results along with the completed result. When the results are returned to the server, the server may decide to have a trusted computer system process the same work unit to compute the partial result according to a defined acceptance policy. In addition, the work unit name, user identity and current date are encrypted using a time-sensitive key. Should the server detect a problem with the results (e.g., decrypted work unit name does not match, recomputed partial result does not match), the results may be rejected according to a defined rejection policy. In this manner, it becomes very difficult to fool a server into thinking a work unit has been processed when it has not.

    摘要翻译: 设备和方法在公共分布式计算环境中验证计算结果,而不需要完全重新计算结果。 工作单元由客户端代码操作,该代码计算一个或多个部分结果以及完成的结果。 当结果返回到服务器时,服务器可以决定让受信任的计算机系统处理相同的工作单元以根据定义的接受策略来计算部分结果。 此外,使用时间敏感键加密工作单位名称,用户身份和当前日期。 如果服务器检测到结果有问题(例如,解密的工作单元名称不匹配,重新计算的部分结果不匹配),则结果可能会根据定义的排除策略被拒绝。 以这种方式,很难愚弄服务器,以至于当没有工作单元被处理时。

    Safe strength reduction for Java synchronized procedures
    12.
    发明授权
    Safe strength reduction for Java synchronized procedures 失效
    Java同步程序的安全强度降低

    公开(公告)号:US06542891B1

    公开(公告)日:2003-04-01

    申请号:US09240559

    申请日:1999-01-29

    IPC分类号: G06F1200

    CPC分类号: G06F9/52 Y10S707/99938

    摘要: The present invention is a computer implemented method and system for minimizing contention for a shared resource between a plurality of processes executing computer instructions that are associated with said shared resource. The method analyzes at least one of said processes of computer instructions and determines whether at least one of said processes modifies said shared resource. If at least one of said processes does not modify said shared resource, the method controls access to said shared resource by at least one said process.

    摘要翻译: 本发明是一种计算机实现的方法和系统,用于最小化执行与所述共享资源相关联的计算机指令的多个进程之间的共享资源的争用。 该方法分析计算机指令的所述过程中的至少一个,并且确定所述进程中的至少一个是否修改所述共享资源。 如果至少一个所述进程不修改所述共享资源,则该方法通过至少一个所述进程来控制对所述共享资源的访问。

    Single-level store computer incorporating process-local address translation data structures
    13.
    发明授权
    Single-level store computer incorporating process-local address translation data structures 失效
    包含进程本地地址转换数据结构的单级存储计算机

    公开(公告)号:US06430667B1

    公开(公告)日:2002-08-06

    申请号:US09548949

    申请日:2000-04-13

    申请人: Larry Wayne Loen

    发明人: Larry Wayne Loen

    IPC分类号: G06F1210

    摘要: An apparatus, program product, and method perform address translation on a process-local, rather than system-wide, basis in a single-level store virtual memory management system using a plurality of process-local address translation data structures that are individually associated with particular software processes executing on a computer. By performing address translation on a process-by-process basis, many of the security concerns associated with system-wide address translation, e.g., attempting to access a virtual address for memory that has not been allocated for the associated process, are significantly reduced from the standpoint of accessing an address translation data structure, since it can be presumed that all of the information in a process-local address translation data structure was previously authorized for the process when added to the data structure. Relatively simpler and faster security checks can then be performed in association with accessing a process-local address translation data structure to minimize the processing delays associated with such accesses. In addition, with such a configuration, any additional security issues can be handled in additional fault handling processing that is executed less frequently than accesses to address translation data structures, such that such additional security processing has a reduced impact on system performance.

    摘要翻译: 设备,程序产品和方法在单级存储虚拟存储器管理系统中使用多个进程本地地址转换数据结构在进程本地而不是系统范围内执行地址转换,所述多个进程本地地址转换数据结构与 在计算机上执行的特定软件进程。 通过在逐个进程的基础上执行地址转换,与系统范围的地址转换相关联的许多安全问题,例如尝试访问尚未为相关联的进程分配的存储器的虚拟地址,显着地从 访问地址转换数据结构的观点,因为可以认为,当加入到数据结构中时,过程本地地址转换数据结构中的所有信息先前被授权用于该过程。 然后可以与访问进程本地地址转换数据结构相关联地执行相对简单和更快的安全检查,以最小化与这种访问相关联的处理延迟。 此外,通过这样的配置,可以在比对地址转换数据结构的访问频率更低的附加故障处理处理中处理任何附加的安全问题,使得这样的附加安全处理对系统性能的影响减小。