公开(公告)号：US20140006760A1

公开(公告)日：2014-01-02

申请号：US13536859

申请日：2012-06-28

申请人： Daniel Nemiroff ,  Paul J. Thadikaran ,  Andrew H. Gafken ,  Purushottam Goel ,  Nicholas D. Triantafillou ,  Paritosh Saxena ,  Debra Cablao

发明人： Daniel Nemiroff ,  Paul J. Thadikaran ,  Andrew H. Gafken ,  Purushottam Goel ,  Nicholas D. Triantafillou ,  Paritosh Saxena ,  Debra Cablao

IPC分类号： G06F15/177 ,  H04L9/32

CPC分类号： G06F21/577 ,  G06F9/4401 ,  G06F21/554 ,  G06F21/561 ,  G06F21/575 ,  G06F21/6218 ,  G06F21/64 ,  G06F2221/033 ,  H04L9/3247

摘要： Embodiments of techniques and systems for out-of-band verification of host OS components are described. In embodiments, a out-of-band host OS boot sequence verification system (“BSVS”) may access system memory without detection by a host OS process, or “out of band.” The BSVS may access host OS components in the system memory and may generate signatures from memory footprints of the host OS components. These signatures may then be compared to trusted signatures to verify integrity of the host OS components. In embodiments, this verification may be performed during a boot of a host OS or on demand. In embodiments, the trusted signatures may be pre-stored by the BSVS before a boot; in some embodiments, the trusted signatures may be previously-computed and then stored by the BSVS. Other embodiments may be described and claimed.

摘要翻译： 描述用于主机OS组件的带外验证的技术和系统的实施例。 在实施例中，带外主机OS引导序列验证系统（“BSVS”）可以在主机OS进程或“带外”的检测的情况下访问系统存储器。 BSVS可以访问系统存储器中的主机OS组件，并且可以从主机OS组件的内存占用中产生签名。 然后可以将这些签名与可信签名进行比较以验证主机OS组件的完整性。 在实施例中，可以在主机OS的引导期间或者根据需要执行该验证。 在实施例中，信任签名可以在引导之前被BSVS预先存储; 在一些实施例中，可信任签名可以被预先计算，然后由BSVS存储。 可以描述和要求保护其他实施例。

公开(公告)号：US20080320263A1

公开(公告)日：2008-12-25

申请号：US11765853

申请日：2007-06-20

申请人： Daniel Nemiroff ,  Howard Hebert

发明人： Daniel Nemiroff ,  Howard Hebert

IPC分类号： G06F12/14

CPC分类号： G06F21/6209 ,  G06F21/64

摘要： According to some embodiments, a method for providing encryption, integrity, and anti-replay protection of data in a fault tolerant manner is disclosed. A data blob and an anti-replay table blob are copied to a temporary storage region in a non-volatile memory. In an atomic operation, a status indicator is set and a monotonic counter is incremented after the data blob and the anti-replay table blob are copied to the temporary storage region. If a fault occurs while the status indicator is set, the data blob and the anti-replay table blob may be recovered from the temporary storage region.

摘要翻译： 根据一些实施例，公开了以容错方式提供数据的加密，完整性和反重放保护的方法。 数据块和反重放表blob被复制到非易失性存储器中的临时存储区域。 在原子操作中，在将数据块和反重放表blob复制到临时存储区域之后，设置状态指示符并且单调计数器递增。 如果在状态指示器设置时出现故障，则可以从临时存储区域恢复数据块和防重放表blob。

公开(公告)号：US07266711B2

公开(公告)日：2007-09-04

申请号：US10716046

申请日：2003-11-17

申请人： Francis R. Corrado ,  Daniel Nemiroff

发明人： Francis R. Corrado ,  Daniel Nemiroff

IPC分类号： G06F1/26

CPC分类号： G06F1/3268 ,  G06F1/3203 ,  G06F11/1096 ,  Y02D10/154

摘要： In one embodiment, a method is provided that may include, if a change in configuration of storage occurs during one mode of operation of a device, storing, in the storage, data indicative, at least in part, of resulting configuration of the storage resulting after the change. The device may have a relatively lower power consumption rate while the device is operating in the one mode of operation compared to a relatively higher power consumption rate that the device may have while the device is operating in another mode of operation. Of course, many modifications, variations, and alternatives are possible without departing from this embodiment.

摘要翻译： 在一个实施例中，提供了一种方法，其可以包括，如果在设备的一个操作模式期间发生存储器配置的改变，则在存储器中存储至少部分地指示存储结果的结果配置的数据 改变之后。 与设备在另一操作模式下操作时可能具有的相对较高的功率消耗速率相比，该设备可以具有相对较低的功率消耗速率，同时该设备在一种操作模式下操作。 当然，在不偏离本实施例的情况下，可以进行许多修改，变化和替代。

公开(公告)号：US07222135B2

公开(公告)日：2007-05-22

申请号：US10747922

申请日：2003-12-29

申请人： Francis R. Corrado ,  Daniel Nemiroff

发明人： Francis R. Corrado ,  Daniel Nemiroff

IPC分类号： G06F17/30

CPC分类号： G06F3/0647 ,  G06F3/0613 ,  G06F3/0689 ,  Y10S707/914 ,  Y10S707/99952

摘要： Provided are a method, system, and program for managing data migration from one data organization type to another. In one embodiment, a migration manager defers writing progress indicators to reduce data write operations during the migration process. In one embodiment, progress indicators are written to configuration areas of disk drives when a condition is met. One example of a condition is the expiration of a time period since the last progress indicator was written. Another example of a condition is an overlap between the destination of a unit of data being migrated and the source of the unit of data. Yet another example is an overlap between the destination of a unit of data and a portion of the data source which has been copied but a progress indicator has not yet been written covering the data source portion.

摘要翻译： 提供了一种用于管理从一种数据组织类型到另一种数据组织类型的数据迁移的方法，系统和程序。 在一个实施例中，迁移管理器延迟写入进度指示符以减​​少迁移过程期间的数据写入操作。 在一个实施例中，当满足条件时，将进度指示器写入磁盘驱动器的配置区域。 条件的一个例子是自写入最后一个进度指示器以来的时间段到期。 条件的另一个例子是被迁移的数据单元的目的地与数据单元的源之间的重叠。 又一示例是数据单元的目的地与已被复制的数据源的一部分之间的重叠，但进度指示符尚未被写入覆盖数据源部分。

公开(公告)号：US20050108586A1

公开(公告)日：2005-05-19

申请号：US10716046

申请日：2003-11-17

申请人： Francis Corrado ,  Daniel Nemiroff

发明人： Francis Corrado ,  Daniel Nemiroff

IPC分类号： G06F1/32

CPC分类号： G06F1/3268 ,  G06F1/3203 ,  G06F11/1096 ,  Y02D10/154

摘要： In one embodiment, a method is provided that may include, if a change in configuration of storage occurs during one mode of operation of a device, storing, in the storage, data indicative, at least in part, of resulting configuration of the storage resulting after the change. The device may have a relatively lower power consumption rate while the device is operating in the one mode of operation compared to a relatively higher power consumption rate that the device may have while the device is operating in another mode of operation. Of course, many modifications, variations, and alternatives are possible without departing from this embodiment.

摘要翻译： 在一个实施例中，提供了一种方法，其可以包括，如果在设备的一个操作模式期间发生存储器配置的改变，则在存储器中存储至少部分地指示存储结果的结果配置的数据 改变之后。 与设备在另一操作模式下操作时可能具有的相对较高的功率消耗速率相比，该设备可以具有相对较低的功率消耗速率，同时该设备在一种操作模式下操作。 当然，在不偏离本实施例的情况下，可以进行许多修改，变化和替代。