公开(公告)号：US4639890A

公开(公告)日：1987-01-27

申请号：US567040

申请日：1983-12-30

申请人： Andrew Heilveil ,  Jerry R. VanAken ,  Karl M. Guttag ,  Donald J. Redwine ,  Raymond Pinkham ,  Mark F. Novak

发明人： Andrew Heilveil ,  Jerry R. VanAken ,  Karl M. Guttag ,  Donald J. Redwine ,  Raymond Pinkham ,  Mark F. Novak

IPC分类号： G09G5/391 ,  G09G1/02

CPC分类号： G09G5/391

摘要： In a computer system, an improved memory circuit is provided for accomodating video display circuits with CRT screens having different resolutions. The memory circuit includes a bit-mapped RAM unit or chip having sufficient cells to accomodate any CRT screen intended to be used, and it further includes a serial shift register having a plurality of taps at locations corresponding to different preselected columns of cells in the chip. In the system, provision is included for selecting taps to unload only the portion of the shift register containing the bits of interest, whereby unused portions of the chip may be effectively excluded and the time for transferring data of interest to the CRT screen is reduced.

摘要翻译： 在计算机系统中，提供了一种改进的存储器电路，用于容纳具有不同分辨率的CRT屏幕的视频显示电路。 存储器电路包括具有足够的单元以容纳要使用的任何CRT屏幕的位映射RAM单元或芯片，并且还包括串行移位寄存器，其具有对应于芯片中的不同预选列单元格的位置处的多个抽头 。 在系统中，包括用于选择抽头以仅卸载包含感兴趣的位的移位寄存器的部分的提供，由此可以有效地排除芯片的未使用部分，并且将感兴趣的数据传送到CRT屏幕的时间减少。

公开(公告)号：US09191394B2

公开(公告)日：2015-11-17

申请号：US13368731

申请日：2012-02-08

申请人： Mark F. Novak ,  Andrew J. Layman

发明人： Mark F. Novak ,  Andrew J. Layman

IPC分类号： H04L29/06

CPC分类号： H04L63/102 ,  H04L63/0815 ,  H04L63/083 ,  H04L63/0853 ,  H04L63/0884 ,  H04L2463/102

摘要： Protecting user credentials from a computing device includes establishing a secure session between a computing device and an identity provider (e.g., a Web service). Parameters of the secure session are communicated to a credential service, which renegotiates or resumes the secure session to establish a new secure session between the credential service and the identity provider. User credentials are passed from the credential service to the identity provider via the new secure session, but the computing device does not have the parameters of the new secure session and thus does not have access to the passed user credentials. The credential service then renegotiates or resumes the secure session again to establish an additional secure session between the credential service and the identity provider. Parameters of the additional secure session are communicated to the computing device to allow the computing device to continue communicating securely with the identity provider.

摘要翻译： 保护来自计算设备的用户凭证包括在计算设备和身份提供商（例如，Web服务）之间建立安全会话。 安全会话的参数被传送到凭证服务，该凭证服务重新协商或恢复安全会话以在证书服务和身份提供者之间建立新的安全会话。 用户凭证通过新的安全会话从凭证服务传递给身份提供者，但计算设备不具有新安全会话的参数，因此无法访问所传递的用户凭据。 然后，凭证服务再次重新协商或恢复安全会话，以在凭证服务和身份提供商之间建立额外的安全会话。 附加安全会话的参数被传送到计算设备以允许计算设备继续与身份提供商通信。

公开(公告)号：US08850553B2

公开(公告)日：2014-09-30

申请号：US12209489

申请日：2008-09-12

申请人： Mark F. Novak ,  Daniel Kaminsky

发明人： Mark F. Novak ,  Daniel Kaminsky

IPC分类号： H04L29/06 ,  H04L9/32

CPC分类号： H04L63/08

摘要： Embodiments for performing service binding between a client and a target server are disclosed. In accordance with one embodiment, a clear text client service binding value is received from a client at the target server, the client service binding value is compared to a server service binding value, and a communication channel is formed between the client and the target server when the client service binding value matches the server service binding value.

摘要翻译： 公开了在客户机和目标服务器之间执行服务绑定的实施例。 根据一个实施例，从目标服务器的客户端接收到明文客户端服务绑定值，将客户端服务绑定值与服务器服务绑定值进行比较，并且在客户端与目标服务器之间形成通信信道 当客户端服务绑定值与服务器服务绑定值匹配时。

公开(公告)号：US08782423B2

公开(公告)日：2014-07-15

申请号：US13527439

申请日：2012-06-19

申请人： Mark F. Novak ,  Andrew John Layman ,  Magnus Nyström ,  Stefan Thom

发明人： Mark F. Novak ,  Andrew John Layman ,  Magnus Nyström ,  Stefan Thom

IPC分类号： G06F3/06

CPC分类号： G06F3/0622 ,  G06F21/57 ,  G06F21/602

摘要： A system that includes an account management module configured to maintain protected accounts. For instance, a particular protected account includes a protected data set that is not readable outside of the system, and perhaps not even readable outside of the account. The particular data set corresponds to a particular entity assigned to the particular account and that includes keys corresponding to the particular entity. A security processor uses at least some of the plurality of keys to perform cryptographic processes in response to one or more trusted execution environment commands received from the particular entity.

摘要翻译： 包括配置为维护受保护的帐户的帐户管理模块的系统。 例如，特定受保护的帐户包括在系统之外不可读的受保护的数据集，甚至在帐户之外甚至不可读。 特定数据集对应于分配给特定帐户的特定实体，并且包括与特定实体相对应的密钥。 响应于从特定实体接收到的一个或多个可信执行环境命令，安全处理器使用多个密钥中的至少一些来执行密码处理。

公开(公告)号：US20130339729A1

公开(公告)日：2013-12-19

申请号：US13527439

申请日：2012-06-19

申请人： Mark F. Novak ,  Andrew John Layman ,  Magnus Nyström ,  Stefan Thom

发明人： Mark F. Novak ,  Andrew John Layman ,  Magnus Nyström ,  Stefan Thom

IPC分类号： G06F21/00 ,  G06F1/24 ,  H04L29/06

CPC分类号： G06F3/0622 ,  G06F21/57 ,  G06F21/602

摘要： A system that includes an account management module configured to maintain protected accounts. For instance, a particular protected account includes a protected data set that is not readable outside of the system, and perhaps not even readable outside of the account. The particular data set corresponds to a particular entity assigned to the particular account and that includes keys corresponding to the particular entity. A security processor uses at least some of the plurality of keys to perform cryptographic processes in response to one or more trusted execution environment commands received from the particular entity.

摘要翻译： 包括配置为维护受保护的帐户的帐户管理模块的系统。 例如，特定受保护的帐户包括在系统之外不可读的受保护的数据集，甚至在帐户之外甚至不可读。 特定数据集对应于分配给特定帐户的特定实体，并且包括与特定实体相对应的密钥。 响应于从特定实体接收到的一个或多个可信执行环境命令，安全处理器使用多个密钥中的至少一些来执行密码处理。

公开(公告)号：US20130125199A1

公开(公告)日：2013-05-16

申请号：US13294162

申请日：2011-11-10

申请人： Mark F. Novak ,  Paul Leach ,  Vishal Agarwal ,  David McPherson ,  Sunil Gottumukkala ,  Jignesh Shah ,  Arun K. Nanda ,  Nir Ben Zvi ,  Pranav Kukreja ,  Ramaswamy Ranganathan

发明人： Mark F. Novak ,  Paul Leach ,  Vishal Agarwal ,  David McPherson ,  Sunil Gottumukkala ,  Jignesh Shah ,  Arun K. Nanda ,  Nir Ben Zvi ,  Pranav Kukreja ,  Ramaswamy Ranganathan

IPC分类号： G06F21/00

CPC分类号： G06Q10/04 ,  G06Q50/26

摘要： A policy that governs access to a resource may be tested against real-world access requests before being used to control access to the resource. In one example, access to a resource is governed by a policy, referred to as an effective policy. When the policy is to be modified or replaced, the modification or replacement may become a test policy. When a request is made to access the resource, the request may be evaluated under both the effective policy and the test policy. Whether access is granted is determined under the effective policy, but the decision that would be made under the test policy is noted, and may be logged. If the test policy is determined to behave acceptably when confronted with real-world access requests, then the current effective policy may be replaced with the test policy.

摘要翻译： 管理对资源的访问的策略可以在被用于控制对资源的访问之前被针对真实的访问请求进行测试。 在一个示例中，对资源的访问受政策管辖，被称为有效策略。 当修改或更换策略时，修改或替换可能成为测试策略。 当请求访问资源时，可以根据有效策略和测试策略对请求进行评估。 是否授予访问是根据有效策略确定的，但是将根据测试策略作出的决定被注明，并可能被记录。 如果测试策略在面对现实访问请求时被确定为可接受的行为，则可以用测试策略替换当前的有效策略。

公开(公告)号：US08417962B2

公开(公告)日：2013-04-09

申请号：US12813955

申请日：2010-06-11

申请人： Mark F. Novak ,  Robert Karl Spiger ,  Stefan Thom ,  David J. Linsley ,  Scott A. Field ,  Anil Francis Thomas

发明人： Mark F. Novak ,  Robert Karl Spiger ,  Stefan Thom ,  David J. Linsley ,  Scott A. Field ,  Anil Francis Thomas

IPC分类号： G06F11/30 ,  G06F12/14

CPC分类号： G06F21/575

摘要： Booting a computing device includes executing one or more firmware components followed by a boot loader component. A protection component for the computing device, such as an anti-malware program, is identified and executed as an initial component after executing the boot loader component. One or more boot components are also executed, these one or more boot components including only boot components that have been approved by the protection component. A list of boot components that have been previously approved by the protection component can also be maintained in a tamper-proof manner.

公开(公告)号：US5923340A

公开(公告)日：1999-07-13

申请号：US485540

申请日：1995-06-07

申请人： Karl M. Guttag ,  Michael D. Asal ,  Jerry R. Van Aken ,  Neil Tebbutt ,  Mark F. Novak

发明人： Karl M. Guttag ,  Michael D. Asal ,  Jerry R. Van Aken ,  Neil Tebbutt ,  Mark F. Novak

IPC分类号： G06T1/20 ,  G09G5/393 ,  G06F12/06

CPC分类号： G06T1/20 ,  G09G5/393 ,  G09G2340/10

摘要： The graphics data processor of the present invention offers as a single instruction in its instruction set a draw and advance operation. A first data register stores a set of X and Y coordinates. In a first embodiment, a predetermined color code is stored at the pixel address of a bit mapped display memory indicated by the X and Y coordinates the first data register upon execution of the the draw and advance instruction. The X and Y coordinates stored in the first data register are then advanced by addition of X and Y coordinates stored in a second data register. A second embodiment is similar except that the color code stored at the X and Y coordinates of the first date register is recalled for combining with the predetermined color code and the combined result stored at that pixel location. The predetermined color code is preferrably stored in another data register. By proper selection of the X and Y coordinate data stored in the second data register either the X or the Y coordinate may be altered alone or both may by simultaneously changed. Provision of signed X and Y coordinate values in the second register enables either the X or Y coordinate to be incremented of decremented. This instruction serves to inhance the speed at which a line or computed curve may by drawn in the bit mapped display.

摘要翻译： 本发明的图形数据处理器在其指令集中作为单个指令提供绘图和提前操作。 第一数据寄存器存储一组X和Y坐标。 在第一实施例中，在由X和Y指示的位映射显示存储器的像素地址处存储预定色码，并且在执行绘图和提前指令时对第一数据寄存器进行坐标。 然后通过加上存储在第二数据寄存器中的X和Y坐标来提前存储在第一数据寄存器中的X和Y坐标。 第二实施例是类似的，除了存储在第一日期寄存器的X和Y坐标处的颜色代码被调用以与预定颜色代码组合，并且存储在该像素位置处的组合结果。 预定的颜色代码优选地存储在另一个数据寄存器中。 通过适当选择存储在第二数据寄存器中的X和Y坐标数据，X或Y坐标可以单独改变，或者两者可以同时改变。 在第二个寄存器中提供有符号的X和Y坐标值可以使X或Y坐标递增递减。 该指令用于提高在位映射显示中绘制线或计算曲线的速度。

公开(公告)号：US5437011A

公开(公告)日：1995-07-25

申请号：US191885

申请日：1994-02-04

申请人： Karl M. Guttag ,  Michael D. Asal ,  Jerry R. Van Aken ,  Neil Tebbutt ,  Mark F. Novak

发明人： Karl M. Guttag ,  Michael D. Asal ,  Jerry R. Van Aken ,  Neil Tebbutt ,  Mark F. Novak

IPC分类号： G06T1/20 ,  G09G5/393 ,  G06F15/00

CPC分类号： G06T1/20 ,  G09G5/393 ,  G09G2340/10

摘要： The graphics data processor of the present invention offers as a single instruction in its instruction set a draw and advance operation. A first data register stores a set of X and Y coordinates. In a first embodiment, a predetermined color code is stored at the pixel address of a bit mapped display memory indicated by the X and Y coordinates the first data register upon execution of the draw and advance instruction. The X and Y coordinates stored in the first data register are then advanced by addition of X and Y coordinates stored In a second data register. A second embodiment is similar except that the color code stored at the X and Y coordinates of the first data register is recalled for combining with the predetermined color code and the combined result stored at that pixel location. The predetermined color code is preferably stored in another data register. By proper selection of the X and Y coordinate data stored in the second data register either the X or the Y coordinate may be altered alone or both may be simultaneously changed. Provision of signed X and Y coordinate values in the second register enables either the X or Y coordinate to be incremented or decremented. This instruction serves to enhance the speed at which a line or computed curve may be drawn in the bit mapped display.

摘要翻译： 本发明的图形数据处理器在其指令集中作为单个指令提供绘图和提前操作。 第一数据寄存器存储一组X和Y坐标。 在第一实施例中，在由X和Y指示的位映射显示存储器的像素地址处存储预定色码，并且在执行绘图和提前指令时对第一数据寄存器进行坐标。 然后，存储在第一数据寄存器中的X和Y坐标通过添加存储在第二数据寄存器中的X和Y坐标来提前。 第二实施例是类似的，除了存储在第一数据寄存器的X和Y坐标处的颜色代码被调用以与预定颜色代码组合，并且存储在该像素位置处的组合结果。 预定的颜色代码优选地存储在另一个数据寄存器中。 通过对存储在第二数据寄存器中的X和Y坐标数据的适当选择，可以单独改变X或Y坐标，或者可以同时改变两者。 在第二个寄存器中提供有符号的X和Y坐标值可使X或Y坐标值递增或递减。 该指令用于增强在位映射显示中绘制线或计算曲线的速度。

公开(公告)号：US5294918A

公开(公告)日：1994-03-15

申请号：US748115

申请日：1991-08-21

申请人： Thomas Preston ,  Karl M. Guttag ,  Michael D. Asal ,  Mark F. Novak

发明人： Thomas Preston ,  Karl M. Guttag ,  Michael D. Asal ,  Mark F. Novak

IPC分类号： G09G5/02 ,  G09G1/28 ,  G09G5/04

CPC分类号： G09G5/02

摘要： The present invention presents a process of moving an array of pixel data representing an image to be displayed from a source memory space to a destination memory space. The array of pixel data is arranged in words containing a plurality of individual pixel datum. The process includes transforming each pixel datum in the word fetched from the source memory space to a colorized pixel datum by individually attaching color information to each pixel datum. The transforming occurs substantially in parallel on all of the pixel data in each word. This technique permits storage of commonly used images such as alphanumeric characters of various fonts or icons in a compressed form with one bit per pixel. These images are formed in color using the color expand operation at the time of drawing into the color display memory. Otherwise these images would need to be stored in multiple bit per pixel color form for all desired colors requiring considerable memory for redundant data. This color expanded image may then be combined with the color image stored in a selected part of the display memory and the combined image stored in that selected part of the display memory. Thus monochrome images may be expanded into color images and then combined with color images already in the display in a single operation.

摘要翻译： 本发明提出了将表示要从源存储器空间显示的图像的像素数据的阵列移动到目的地存储空间的处理。 像素数据阵列以包含多个单独像素数据的单词排列。 该过程包括通过将颜色信息单独地附加到每个像素数据来将从源存储器空间获取的单词中的每个像素数据变换为彩色像素数据。 变换基本上平行地发生在每个单词中的所有像素数据上。 这种技术允许以每个像素一位的压缩形式存储常用图像，例如各种字体或图标的字母数字字符。 这些图像在绘制到彩色显示存储器时使用颜色展开操作形成为彩色。 否则，这些图像将需要以多个位的每像素颜色形式存储，以便所有需要大量存储器的冗余数据。 然后，该彩色扩展图像可以与存储在显示存储器的选定部分中的彩色图像和存储在显示存储器的该选定部分中的组合图像组合。 因此，单色图像可以扩展成彩色图像，然后在单一操作中与已经在显示器中的彩色图像组合。