公开(公告)号：US08839236B2

公开(公告)日：2014-09-16

申请号：US11696271

申请日：2007-04-04

申请人： Todd L. Carpenter ,  William J. Westerinen ,  Thomas G. Phillips ,  Curt Andrew Steeb ,  Zhangwei Xu ,  Alexander Frank

发明人： Todd L. Carpenter ,  William J. Westerinen ,  Thomas G. Phillips ,  Curt Andrew Steeb ,  Zhangwei Xu ,  Alexander Frank

IPC分类号： G06F9/455

CPC分类号： G06F9/45558 ,  G06F21/53 ,  G06F21/575 ,  G06F2009/45587

摘要： A virtual machine monitor provides a trusted operating environment for a software usage metering application when a qualified virtual machine monitor is loaded as part of trusted boot and when all other programs and operating systems run in containers managed by the virtual machine monitor. The virtual machine monitor may also host a locking application for limiting the functionality of the computer if contractual terms of use are not met. Both the metering and locking applications run at a higher privilege level than ring 0, at the same level as the virtual machine monitor.

摘要翻译： 当合格的虚拟机监视器作为可信引导的一部分加载时，以及所有其他程序和操作系统在虚拟机监视器管理的容器中运行时，虚拟机监视器为软件使用计量应用程序提供可信赖的操作环境。 如果不符合合同使用条款，虚拟机监视器还可以承载用于限制计算机的功能的锁定应用程序。 计量和锁定应用程序都以与环0相同的级别运行，处于与虚拟机监视器相同的级别。

公开(公告)号：US20120266478A1

公开(公告)日：2012-10-25

申请号：US13448590

申请日：2012-04-17

申请人： Alexander Frank ,  Marc Oliver Tiemann ,  Martin Heumann

发明人： Alexander Frank ,  Marc Oliver Tiemann ,  Martin Heumann

IPC分类号： G01D5/347 ,  B23K20/04 ,  B23P17/04

CPC分类号： G01D5/20 ,  G01D5/2013 ,  Y10T29/49826

摘要： A method a scale having an inductively scannable graduation, the scale including a sequence of graduation elements disposed in a measuring direction and a layer stack including a succession of metal layers. The succession of metal layers includes a ferromagnetic metal carrier layer and a graduation layer that forms the sequence of graduation elements. The carrier layer is disposed between the graduation layer and a metal substrate, and the metal substrate is dimensioned to definitively determine mechanical properties of the layer stack.

摘要翻译： 一种具有感应可扫描刻度的刻度的方法，所述刻度包括在测量方向上设置的刻度元件序列和包括一系列金属层的层叠层。 金属层的连续包括铁磁金属载体层和形成刻度元件序列的刻度层。 载体层设置在刻度层和金属基底之间，并且金属基底的尺寸被确定为确定层叠层的机械性能。

公开(公告)号：US08249854B2

公开(公告)日：2012-08-21

申请号：US11137894

申请日：2005-05-26

申请人： Egor Nikitin ,  Alexander Frank ,  Yannis Dosios

发明人： Egor Nikitin ,  Alexander Frank ,  Yannis Dosios

IPC分类号： G06F17/28 ,  G06F12/10

CPC分类号： G06F17/289

摘要： A method and apparatus provide for performing language translation by obtaining a selection of a language preference for presentation of text and/or speech on an electronic device. When data is received that includes content in a language other than the preferred language, a decision whether translation is required may be reached by analyzing the context of the language or metadata associated with the language, such as. HTML tags, or language data included in a particular protocol, e.g. HTTP headers. A selection may be made of billing level, determined at least in part by the languages involved, desired accuracy, latency and volume of translation. If necessary, the data may be routed to a translation host or service before final presentation.

摘要翻译： 一种方法和装置，用于通过获得在电子设备上呈现文本和/或语音的语言偏好的选择来执行语言翻译。 当接收到包含不同于首选语言的语言的内容的数据时，可以通过分析与该语言相关联的语言或元数据的上下文来达成是否需要翻译的决定。 HTML标签或特定协议中包括的语言数据，例如 HTTP标头 可以选择可以至少部分地由所涉及的语言确定的计费水平，期望的准确性，延迟和翻译量。 如果需要，可以在最终呈现之前将数据路由到翻译主机或服务。

公开(公告)号：US08112798B2

公开(公告)日：2012-02-07

申请号：US11418710

申请日：2006-05-05

申请人： Alexander Frank ,  Curt A. Steeb ,  Zhangwei Xu

发明人： Alexander Frank ,  Curt A. Steeb ,  Zhangwei Xu

IPC分类号： G06F12/14

CPC分类号： G06F11/0751 ,  G06F11/0706

摘要： Described is an independent computation environment that is built into one or more hardware components of a computer system, wherein the independent computation environment hosts a logic that measures the health of other software code that executes in memory. Examples of ways to measure health include performing a mathematical computation such as a computing a hash/digital signature on the software code in the memory, and/or evaluating statistical information related to the execution of the code and/or the code's being loaded into memory. By executing the logic in an independent computation environment, the health of software code may be measured against policy/metadata in a tamper-proof or tamper-resistant environment. When the software code measurement does not comply with the policy, some action may be taken action to penalize the computer system.

摘要翻译： 描述了内置在计算机系统的一个或多个硬件组件中的独立计算环境，其中独立计算环境承载测量在存储器中执行的其他软件代码的健康状况的逻辑。 衡量健康的方法的示例包括执行诸如在存储器中的软件代码上计算散列/数字签名的数学计算，和/或评估与代码的执行相关的统计信息和/或被加载到存储器中的代码 。 通过在独立的计算环境中执行逻辑，可以根据防篡改或防篡改环境中的策略/元数据来衡量软件代码的健康状况。 当软件代码测量不符合该策略时，可采取一些行动来惩罚计算机系统。

公开(公告)号：US07979721B2

公开(公告)日：2011-07-12

申请号：US11612436

申请日：2006-12-18

申请人： William J. Westerinen ,  Todd L. Carpenter ,  Alexander Frank ,  Shon Schmidt ,  Stephen Richard Drake ,  David James Foster ,  Tse-Ching James Yu

发明人： William J. Westerinen ,  Todd L. Carpenter ,  Alexander Frank ,  Shon Schmidt ,  Stephen Richard Drake ,  David James Foster ,  Tse-Ching James Yu

IPC分类号： G06F11/30 ,  G06F17/00 ,  G06F1/00

CPC分类号： H05K1/0275 ,  G06F21/86 ,  H05K1/141 ,  H05K3/3436 ,  H05K2201/049 ,  H05K2201/10545 ,  H05K2201/10674

摘要： A pay-per-use computer, or other electronic device that uses local security, may use a security module or other circuit for monitoring and enforcement of a usage policy. To help prevent physical attacks on the security module, or the circuit board near the security module, a second circuit may be mounted over the security module to help prevent access to the security module. Both circuits may be mounted on a interposer and the interposer mounted to the circuit board, creating a stack including the first circuit, the interposer, the security module, and a main PC board. When the PC board includes dense signal traces under the security module a three dimensional envelope is created around the security module. When the first circuit is a high value circuit, such as a Northbridge, the risk/reward of attacking the security module is increased substantially and may deter all but the most determined hackers.

摘要翻译： 使用计费器的计算机或使用本地安全的其他电子设备可以使用安全模块或其他电路来监视和执行使用策略。 为了防止对安全模块或安全模块附近的电路板的物理攻击，可以在安全模块上安装第二电路，以帮助防止访问安全模块。 两个电路可以安装在插入器上，并且插入器安装到电路板，产生包括第一电路，插入器，安全模块和主PC板的堆叠。 当PC板在安全模块下面包含密集的信号迹线时，将在安全模块周围创建三维信封。 当第一个电路是诸如北桥的高价值电路时，攻击安全模块的风险/报酬大大增加，并且可能阻止除了最确定的黑客之外的所有电路。

公开(公告)号：US07657450B2

公开(公告)日：2010-02-02

申请号：US09733522

申请日：2000-12-08

申请人： Neta J. Amit ,  Alexander Frank

发明人： Neta J. Amit ,  Alexander Frank

IPC分类号： G06F9/44 ,  G06F17/50 ,  G06Q10/00 ,  G06Q30/00

CPC分类号： G06F9/542 ,  G06F9/485 ,  G06F11/3466 ,  G06F2209/544 ,  G06F2209/546 ,  G06Q10/06316 ,  G06Q10/10 ,  Y02P90/86

摘要： A trigger engine and infrastructure for event registration and handling that is reliable, secure and scalable. Transactional authenticated and/or encrypted messages (e.g., via MSMQ) are used to transport events across each server. A stable recovery mechanism is provided wherein the recovery path is nearly identical to the normal path. A trigger engine may concentrate multiple similar requests into a single base request for event notification, and upon receipt of the base event, access tables maintained in the trigger engine to track which client registered for which type of notification. In this manner, only the base event request is registered remotely, reducing the number of events that need to be communicated to remote servers. Identical event requests from clients may also be concentrated into a base event request, and events distributed to those clients when appropriate. Duplicate base event requests are blocked locally and thus only the first such one ever reaches the remote server. The trigger engines are capable of combining events in a complex manner, such as to notify a client only when a combination of time events, job events and/or other events have occurred, thus being suitable for use in a batch system.

摘要翻译： 用于事件注册和处理的触发引擎和基础设施，是可靠，安全和可扩展的。 事务认证和/或加密的消息（例如，经由MSMQ）用于跨每个服务器传输事件。 提供了一种稳定的恢复机制，其中恢复路径几乎与正常路径相同。 触发引擎可以将多个类似的请求集中到用于事件通知的单个基本请求中，并且在接收到基本事件时，维护在触发引擎中的访问表来跟踪哪个客户端注册了哪种类型的通知。 以这种方式，只有基本事件请求被远程注册，减少了需要传送到远程服务器的事件数量。 来自客户端的相同事件请求也可能集中在基本事件请求中，并且适当时分发给这些客户端的事件。 重复的基本事件请求在本地被阻止，因此只有第一个这样的请求到达远程服务器。 触发引擎能够以复杂的方式组合事件，例如仅当发生时间事件，作业事件和/或其他事件的组合时才通知客户端，因此适合于在批处理系统中使用。

公开(公告)号：US07406446B2

公开(公告)日：2008-07-29

申请号：US11074500

申请日：2005-03-08

申请人： Alexander Frank ,  William J. Westerinen

发明人： Alexander Frank ,  William J. Westerinen

IPC分类号： H04K1/00 ,  H04L9/00 ,  G06F1/00 ,  H04N7/167

CPC分类号： G06F21/84 ,  G06F2221/2105 ,  G06F2221/2135 ,  G06F2221/2137 ,  G06Q30/04 ,  G06Q30/06

摘要： A computer is adapted for use in different operating modes by configuring an output controller, such as a graphics processing unit, to screen output signals prior to presenting them to the output device. A secure environment in the output controller verifies a digital signature or a hash of the output signal to determine whether the output signal is compatible with the current mode of operation. Thus only authorized output signals are presented when the computer is operating in a limited function mode, such as when metered usage time is expired. The apparatus and method also disclose similar output signal screening for determining whether the computer should be returned from a standby, or no-metering, mode to an active, or metered mode.

摘要翻译： 计算机适于在不同的操作模式中使用，通过配置诸如图形处理单元之类的输出控制器，以在将输出信号呈现给输出设备之前进行屏幕输出。 输出控制器中的安全环境验证输出信号的数字签名或散列，以确定输出信号是否与当前操作模式兼容。 因此，当计算机以有限的功能模式操作时，例如当计量使用时间到期时，仅呈现授权的输出信号。 该装置和方法还公开了类似的输出信号筛选，用于确定计算机是否应该从备用或无计量模式返回到活动或计量模式。

公开(公告)号：US20080109867A1

公开(公告)日：2008-05-08

申请号：US11557461

申请日：2006-11-07

申请人： Ruston John David Panabaker ,  Eric Horvitz ,  Alexander Frank ,  Scott C. Forbes

发明人： Ruston John David Panabaker ,  Eric Horvitz ,  Alexander Frank ,  Scott C. Forbes

IPC分类号： G06F21/00

CPC分类号： H04W12/08 ,  H04L63/102 ,  H04W4/029 ,  H04W4/12 ,  H04W12/00503 ,  H04W12/06

摘要： A method and apparatus is provided for coordinating devices in a federated network of devices. A server may determine policies for coordinating the devices and may send messages to devices in the federated network for providing a service. The policies for providing the service among the federated devices may be based on properties of the devices or relative locations of the devices. For example, the federated devices may provide media data and control of the media data to a user. Provision of the media data and/or control of the media data may change from one device to another in the federated network based on policies from the server.

摘要翻译： 提供了一种用于协调设备联合网络中的设备的方法和装置。 服务器可以确定用于协调设备的策略，并且可以向联合网络中的设备发送消息以提供服务。 在联合设备之间提供服务的策略可以基于设备的属性或设备的相对位置。 例如，联合设备可以向用户提供媒体数据和媒体数据的控制。 基于来自服务器的策略，提供媒体数据和/或媒体数据的控制可以在联合网络中从一个设备改变到另一个设备。

公开(公告)号：US07360253B2

公开(公告)日：2008-04-15

申请号：US11021021

申请日：2004-12-23

申请人： Alexander Frank ,  Paul England

发明人： Alexander Frank ,  Paul England

IPC分类号： G08B29/00

CPC分类号： G06F21/57 ,  H04L9/3234 ,  H04L9/3247 ,  H04L2209/56 ,  H04L2209/80

摘要： A computer may be secured from attack by including a trusted environment used to verify a known monitor. The monitor may be used to determine a state of the computer for compliance to a set of conditions. The conditions may relate to terms of use, such as credits available for pay-per-use, or that the computer is running certain software, such as virus protection, or that unauthorized peripherals are not attached, or that a required token is present. The monitor may send a signal directly or through the trusted environment to a watchdog circuit. The watchdog circuit disrupts the use of the computer when the signal is not received in a given timeout period.

摘要翻译： 可以通过包括用于验证已知监视器的可信环境来保护计算机免受攻击。 监视器可以用于确定计算机的状态以符合一组条件。 条件可能与使用条款有关，例如可用于每次使用付费的信用额，或者计算机正在运行某些软件，例如病毒防护，或者未附加未授权的外围设备，或者存在所需的令牌。 监视器可以直接或通过可信环境发送信号到看门狗电路。 当给定的超时时间内没有收到信号时，看门狗电路会中断计算机的使用。

公开(公告)号：US20070106682A1

公开(公告)日：2007-05-10

申请号：US11424487

申请日：2006-06-15

申请人： Alexander Frank

发明人： Alexander Frank

IPC分类号： G06F7/00

CPC分类号： G06F21/57 ,  G06F21/55

摘要： In an implementation, an independent computation environment is contained at least in part in one or more hardware components of a computing device. A policy engine is maintained within the independent computation environment that is executable to examine metadata related to another module and manage execution of the other module in relation to one or more memory addresses and/or data registers of the computing device that are referenced by the metadata.

摘要翻译： 在实现中，独立的计算环境至少部分地包含在计算设备的一个或多个硬件组件中。 在可独立计算环境内维护策略引擎，该环境可执行以检查与另一个模块相关的元数据，并管理由元数据引用的计算设备的一个或多个存储器地址和/或数据寄存器的执行。 。