PERTURBATION OF FIELD PROGRAMMABLE GATE ARRAY CODE TO PREVENT SIDE CHANNEL ATTACK
    251.
    发明申请
    PERTURBATION OF FIELD PROGRAMMABLE GATE ARRAY CODE TO PREVENT SIDE CHANNEL ATTACK 有权
    现场可编程门阵列代码防止侧向通道攻击

    公开(公告)号:US20150347760A1

    公开(公告)日:2015-12-03

    申请号:US14295286

    申请日:2014-06-03

    Inventor: Ezekiel Kruglick

    Abstract: Technologies are provided to automatically vary a structure of a netlist computation arranged to configure a field programmable gate array (FPGA). In an example scenario, an FPGA netlist may be received from a client to configure the FPGA. A perturbation generator may be activated in response to a detection of one or more security risk factors associated with the netlist. The netlist may be altered through schemes designed to repair one or more FPGAs. The repair schemes may be used to repair the FPGAs to work around failed cells and failed sub-cells. The perturbation generator may produce a false map of failed cells. The false map may be used to generate different timings and different intermediate values associated with the netlist to generate an alternate netlist. The alternate netlist may be used to configure the FPGA to prevent side channel attacks.

    Abstract translation: 提供了技术来自动地改变布置成配置现场可编程门阵列(FPGA)的网表计算的结构。 在一个示例场景中,可以从客户端接收FPGA网络表以配置FPGA。 扰动发生器可以响应于检测到与网表相关联的一个或多个安全风险因素而被激活。 可以通过设计用于修复一个或多个FPGA的方案来改变网表。 修复方案可用于修复FPGA以解决故障单元和故障子单元。 扰动发生器可能会产生故障单元的虚拟映射。 假映射可用于生成与网表相关联的不同定时和不同中间值,以生成备用网表。 备用网表可用于配置FPGA以防止侧信道攻击。

    Secure system time reporting
    252.
    发明授权
    Secure system time reporting 有权
    安全的系统时间报告

    公开(公告)号:US09195492B2

    公开(公告)日:2015-11-24

    申请号:US13877216

    申请日:2012-10-25

    Abstract: Technologies related to secure system time reporting are generally described. In some examples, responses to some system time requests may be manipulated to prevent leaking information that may be of interest for timing attacks, while responses to other system time requests need not be manipulated. In particular, responses to system time requests that are separated from a previous system time request by a predetermined minimum value, or less, may be manipulated. Responses to system time requests that are separated from a previous system time request by more than the predetermined minimum value need not be manipulated. Furthermore, secure system time reporting may be adaptively deployed to servers in a data center on an as-needed basis.

    Abstract translation: 通常描述与安全系统时间报告相关的技术。 在一些示例中,可以操纵对某些系统时间请求的响应,以防止对于定时攻击可能感兴趣的泄露信息,而不需要操纵对其他系统时间请求的响应。 特别地,可以操纵对与先前系统时间请求分离预定最小值或更小的系统时间请求的响应。 对与先前的系统时间请求分离超过预定最小值的系统时间请求的响应不需要被操纵。 此外,安全系统时间报告可以根据需要自适应地部署到数据中心中的服务器。

    ATLAS GENERATION BASED ON CLIENT VIDEO CONFIGURATION
    253.
    发明申请
    ATLAS GENERATION BASED ON CLIENT VIDEO CONFIGURATION 有权
    基于客户视频配置的ATLAS生成

    公开(公告)号:US20150310642A1

    公开(公告)日:2015-10-29

    申请号:US14413414

    申请日:2014-03-26

    Inventor: Ezekiel Kruglick

    Abstract: Technologies may be provided related to customization and delivery of atlases matched to hardware of a client device in real-time. In some examples, a system according to embodiments may perform an assessment of the target hardware, generate atlases matched to the target hardware, and modify application code to reference graphic assets in their new locations in the modified atlases. An increase in speed of application loading, an increase in speed of resource delivery, a reduction of memory consumption on the client device, and/or an increase in the client device frame rate may be achieved by matching the atlases to attributes of the video hardware.

    Abstract translation: 可以提供与客户端设备的硬件实时匹配的地图集的定制和传递相关的技术。 在一些示例中,根据实施例的系统可以执行对目标硬件的评估,生成与目标硬件匹配的图层,以及修改应用代码以参考修改后的图表中新图形资产。 可以通过将图表匹配到视频硬件的属性来实现应用加载的速度的增加,资源传递的速度的增加,客户端设备上的存储器消耗的减少和/或客户端设备帧速率的增加 。

    User Assembly of Lightweight User Interface for Games
    254.
    发明申请
    User Assembly of Lightweight User Interface for Games 审中-公开
    用户组装游戏的轻量级用户界面

    公开(公告)号:US20150273344A1

    公开(公告)日:2015-10-01

    申请号:US14739443

    申请日:2015-06-15

    Inventor: Ezekiel Kruglick

    Abstract: Technology is described for user assembly of lightweight user interfaces for games, e.g., massively multiplayer online games. The technology can include a set of pre-selectable action modules; an interface element, a messaging element, and a display element for each pre-selectable action module; and a component configured to enable a user to select a subset from the set of pre-selectable action modules. A first subset of the pre-selectable action modules can provide a different user interface than a second subset of the pre-selectable action modules when at least one pre-selectable action module is in the first subset but not the second subset. Action modules may be capable of communicating using a messaging platform with at least one server computing device and relates to a massively multiplayer online gaming system operating at a server computing device.

    Abstract translation: 描述了用于游戏的轻量级用户界面的用户组装技术,例如大型多人在线游戏。 该技术可以包括一组预先选择的动作模块; 接口元件,消息元件和用于每个预先选择的动作模块的显示元件; 以及被配置为使得用户能够从所述一组预先选择的动作模块中选择一个子集的组件。 当至少一个预先选择的动作模块处于第一子集而不是第二子集时,可选择动作模块的第一子集可以提供与预选动作模块的第二子集不同的用户界面。 动作模块可以能够使用消息平台与至少一个服务器计算设备通信,并且涉及在服务器计算设备上操作的大型多人在线游戏系统。

    DATACENTER-BASED HARDWARE ACCELERATOR INTEGRATION
    255.
    发明申请
    DATACENTER-BASED HARDWARE ACCELERATOR INTEGRATION 审中-公开
    基于DATACENTER的硬件加速器集成

    公开(公告)号:US20150261550A1

    公开(公告)日:2015-09-17

    申请号:US14373625

    申请日:2013-08-23

    Inventor: Ezekiel Kruglick

    Abstract: Technologies are generally provided to integrate hardware accelerators in datacenters. In some examples, a datacenter customer may provide a hardware accelerator configuration to be implemented at a datacenter. The hardware accelerator configuration may include, for example, one or more customer accelerator blocks and one or more accelerator blocks. The datacenter may retrieve the accelerator block(s), integrate the accelerator block(s) with the customer accelerator block(s) to form the hardware accelerator, and then implement the hardware accelerator. In other examples, the datacenter may charge the customer for use of the accelerator block(s), but refrain from providing the accelerator block(s) to the customer.

    Abstract translation: 通常提供技术来集成硬件加速器在数据中心。 在一些示例中,数据中心客户可以提供要在数据中心实现的硬件加速器配置。 硬件加速器配置可以包括例如一个或多个客户加速器块和一个或多个加速器块。 数据中心可以检索加速器块,将加速器块与客户加速器块集成以形成硬件加速器,然后实现硬件加速器。 在其他示例中,数据中心可以向客户收取使用加速器块的费用,但是不要向客户提供加速器块。

    VIRTUAL MACHINE SWITCHING BASED ON PROCESSOR POWER STATES
    257.
    发明申请
    VIRTUAL MACHINE SWITCHING BASED ON PROCESSOR POWER STATES 有权
    基于处理器电源的虚拟机切换

    公开(公告)号:US20150227192A1

    公开(公告)日:2015-08-13

    申请号:US14373897

    申请日:2013-09-17

    Inventor: Ezekiel Kruglick

    Abstract: Technologies are generally provided to switch virtual machines based on processor power states. In some examples, a virtual machine manager (VMM) may determine that a processor configured to execute a first virtual machine (VM) is to execute a VM switch, and cause the processor to enter a low-power state and store a first VM state. The VMM, which may be a VM itself, may then replace the stored first VM state with a second VM state and cause the processor to exit the low-power state. When the processor exits the low-power state, it may load the second VM state and execute a second VM.

    Abstract translation: 通常提供技术来基于处理器电源状态来切换虚拟机。 在一些示例中,虚拟机管理器(VMM)可以确定被配置为执行第一虚拟机(VM)的处理器是执行VM切换,并使处理器进入低功率状态并存储第一VM状态 。 可以是VM本身的VMM可以用第二VM状态替换所存储的第一VM状态,并使处理器退出低功率状态。 当处理器退出低功耗状态时,它可以加载第二个VM状态并执行第二个VM。

    UBIQUITOUS COMPUTING (UBICOMP) SERVICE DETECTION BY NETWORK TOMOGRAPHY
    258.
    发明申请
    UBIQUITOUS COMPUTING (UBICOMP) SERVICE DETECTION BY NETWORK TOMOGRAPHY 审中-公开
    UBIQUITOUS计算机(UBICOMP)网络测量服务检测

    公开(公告)号:US20150222508A1

    公开(公告)日:2015-08-06

    申请号:US14350771

    申请日:2013-09-23

    Inventor: Ezekiel Kruglick

    CPC classification number: H04L43/0817 H04L41/0893 H04L41/142 H04L43/026

    Abstract: Technologies are generally described to employ network tomography to detect an uncooperative device and identify services associated with the uncooperative device. In some examples, employing network tomography over a probed network segment between two or more cooperative devices may enable an activity of cooperative and/or any uncooperative device(s) on the network to be profiled. A service finder application may then be executed to compare an activity profile of the uncooperative device against activity profiles of known network devices within an identification database to identify one or more services. Action strategies may then be determined within an action database, and an action may be suggested to enable cooperation and cross-use of the uncooperative device within the network based on recognized services. Example action strategies may include enabling installation of software, prompting of a user to perform an action, and/or arranging for cooperation.

    Abstract translation: 通常将技术描述为采用网络层析成像来检测不合作的装置并识别与不合作装置相关的服务。 在一些示例中,在两个或更多个协作设备之间的探测网络段上采用网络层析成像可以使得能够对网络上的协作和/或任何不合作的设备进行分析。 然后可以执行服务寻找器应用程序,以将不合作设备的活动简档与识别数据库内的已知网络设备的活动简档进行比较,以识别一个或多个服务。 然后可以在动作数据库内确定动作策略,并且可以提出动作以使得能够基于公认的服务在网络内的不合作的设备的协作和交叉使用。 示例性动作策略可以包括实现软件的安装,提示用户执行动作和/或安排合作。

    FAIL-SAFE LICENSING FOR SOFTWARE APPLICATIONS
    259.
    发明申请
    FAIL-SAFE LICENSING FOR SOFTWARE APPLICATIONS 有权
    软件应用失效安全许可

    公开(公告)号:US20150213237A1

    公开(公告)日:2015-07-30

    申请号:US14426157

    申请日:2013-01-22

    Inventor: Ezekiel Kruglick

    CPC classification number: G06F21/105 G06F21/121 G06F2221/0775

    Abstract: Technologies are generally described to provide a fail-safe licensing system. An example system may include a quorum detection module of an instance of a software program configured to query a licensing queue corresponding to the software program for messages to determine a number of active instances of the software program. Based on a comparison of the determined number of active instances and a maximum number of allowed instances of the software program, the quorum detection module may be configured to determine whether the instance of the software program is authorized. In response to a determination that the instance of the software program is authorized, the quorum detection module may generate a unique instance identification tag and post a message to the licensing queue, where the message includes an indication that the instance of the software program is active and an indication of the generated unique instance identification tag.

    Abstract translation: 技术通常被描述为提供故障安全许可系统。 示例系统可以包括软件程序的实例的法定人数检测模块,该软件程序的实例被配置为查询对应于软件程序的许可队列以确定消息的多个活动实例。 基于所确定的活动实例数与所述软件程序允许实例的最大数目的比较,所述法定检测模块可以被配置为确定所述软件程序的实例是否被授权。 响应于确定软件程序的实例被授权,法定人数检测模块可以生成唯一的实例标识标签并将消息发布到许可队列,其中消息包括软件程序的实例是活动的指示 以及所生成的唯一实例识别标签的指示。

Patent Agency Ranking