公开(公告)号：US08590037B2

公开(公告)日：2013-11-19

申请号：US12342965

申请日：2008-12-23

申请人： Ahmet Altay ,  Haluk Kent Tanik ,  Robert Chin-Tse Chang ,  Xian Jun Liu ,  Oktay Rasizade ,  Po Yuan

发明人： Ahmet Altay ,  Haluk Kent Tanik ,  Robert Chin-Tse Chang ,  Xian Jun Liu ,  Oktay Rasizade ,  Po Yuan

IPC分类号： H04L29/06

CPC分类号： G06F21/335 ,  H04L9/321 ,  H04L9/3271 ,  H04L63/0823 ,  H04L2209/80 ,  H04W12/06

摘要： A method and system of controlling access to a hardware or software feature provided by a host is disclosed. An application seeking authorization to access a feature transmits a credential and an index to a host agent within the host. The index is associated with the requested feature. The host agent reads credential validation data from a storage location corresponding to the index in a non-volatile storage device in communication with the host. The validity of the credential is determined based on the credential validation data, and an authorization is transmitted if the credential is valid. A third party can control the outcome of the validity determination by sending an instruction to the host to replace the credential validation data with invalid data that causes the validity test to fail. The third party can also control the non-volatile storage device data used by the application to calculate the credential.

摘要翻译： 公开了一种控制由主机提供的硬件或软件特征的访问的方法和系统。 寻求授权以访问功能的应用程序向主机中的主机代理发送凭证和索引。 索引与请求的功能相关联。 主机代理从与主机通信的非易失性存储设备中的索引对应的存储位置读取凭证验证数据。 基于证书验证数据确定凭证的有效性，并且如果凭证有效则传送授权。 第三方可以通过向主机发送指令来替换凭证验证数据，使无效数据导致有效性测试失败来控制有效性确定的结果。 第三方还可以控制应用程序使用的非易失性存储设备数据来计算凭证。

公开(公告)号：US08146153B2

公开(公告)日：2012-03-27

申请号：US11967641

申请日：2007-12-31

申请人： Po Yuan ,  Javier Cañis Robles ,  Mei Yan ,  Fabrice Jogand-Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

发明人： Po Yuan ,  Javier Cañis Robles ,  Mei Yan ,  Fabrice Jogand-Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

IPC分类号： G06F21/00 ,  H04M1/66

CPC分类号： G06Q20/3574 ,  G06F21/77 ,  G06F21/79 ,  G06F2221/2113 ,  G06F2221/2153 ,  G06Q20/35765 ,  G07F7/1008 ,  H04W12/08

摘要： In order to create and access a secure storage account in a non-volatile memory device, an account identification value is calculated. A memory identification value is read from a first non-volatile memory device. The memory identification value and the account identification value are transmitted to a second non-volatile memory device, and a calculated credential is received. A command is transmitted to create a secure storage account in the first non-volatile memory device, where the command contains the credential and the account identification value. To access the account, a sequence is transmitted, containing the account identification value and a value based on the credential. A secure storage system contains a first non-volatile memory device that stores a memory identification value and contains a secure partition accessible using a credential, a second non-volatile memory device that can compute the credential, and a host adapted to create and access the secure partition.

摘要翻译： 为了在非易失性存储设备中创建和访问安全存储帐户，计算帐户识别值。 从第一非易失性存储器件读取存储器识别值。 存储器识别值和帐户识别值被发送到第二非易失性存储器件，并且接收计算的凭​​证。 发送命令以在第一非易失性存储器设备中创建安全存储帐户，其中命令包含凭证和帐户标识值。 要访问帐户，将传输一个序列，其中包含帐户标识值和基于凭证的值。 安全存储系统包含第一非易失性存储器设备，其存储存储器标识值并且包含使用凭证可访问的安全分区，可以计算证书的第二非易失性存储器设备，以及适于创建和访问的主机 安全分区。

公开(公告)号：US20100306152A1

公开(公告)日：2010-12-02

申请号：US12472929

申请日：2009-05-27

申请人： Ahmet Altay ,  Po Yuan ,  Junzhi Wang ,  Haluk Kent Tanik

发明人： Ahmet Altay ,  Po Yuan ,  Junzhi Wang ,  Haluk Kent Tanik

IPC分类号： G06F17/00

CPC分类号： G11B27/105 ,  G11B27/3027 ,  G11B27/36 ,  G11B2220/17 ,  G11B2220/61 ,  H04N21/2541 ,  H04N21/8166 ,  H04N21/835 ,  H04N21/8355

摘要： The embodiments described herein generally relate to a method and host device for enforcing a rule associated with a media file. In one embodiment, an observer module determines that a media player is attempting to play a media file. Before allowing the media player to play the media file, the observer module determines if the media file is associated with a rule that specifies an action to be taken if a playback event is detected. If it is determined that the media file is associated with a rule, the observer module observes playback of the media file to detect if the playback event specified in the rule occurred and takes the action specified in the rule if the playback event is detected.

摘要翻译： 本文描述的实施例通常涉及用于实施与媒体文件相关联的规则的方法和主机设备。 在一个实施例中，观察者模块确定媒体播放器正尝试播放媒体文件。 在允许媒体播放器播放媒体文件之前，观察者模块确定媒体文件是否与指定如果检测到重放事件时要采取的动作的规则相关联。 如果确定媒体文件与规则相关联，则观察器模块观察媒体文件的回放，以检测规则中指定的播放事件是否发生，并且如果检测到重放事件，则采取规则中指定的动作。

公开(公告)号：US20100162370A1

公开(公告)日：2010-06-24

申请号：US12342965

申请日：2008-12-23

申请人： Ahmet Altay ,  Haluk Kent Tanik ,  Robert Chin-Tse Chang ,  Xian Jun Liu ,  Oktay Rasizade ,  Po Yuan

发明人： Ahmet Altay ,  Haluk Kent Tanik ,  Robert Chin-Tse Chang ,  Xian Jun Liu ,  Oktay Rasizade ,  Po Yuan

IPC分类号： H04L9/32 ,  H04M3/00

CPC分类号： G06F21/335 ,  H04L9/321 ,  H04L9/3271 ,  H04L63/0823 ,  H04L2209/80 ,  H04W12/06

摘要： A method and system of controlling access to a hardware or software feature provided by a host is disclosed. An application seeking authorization to access a feature transmits a credential and an index to a host agent within the host. The index is associated with the requested feature. The host agent reads credential validation data from a storage location corresponding to the index in a non-volatile storage device in communication with the host. The validity of the credential is determined based on the credential validation data, and an authorization is transmitted if the credential is valid. A third party can control the outcome of the validity determination by sending an instruction to the host to replace the credential validation data with invalid data that causes the validity test to fail. The third party can also control the non-volatile storage device data used by the application to calculate the credential.

摘要翻译： 公开了一种控制由主机提供的硬件或软件特征的访问的方法和系统。 寻求授权以访问功能的应用程序向主机中的主机代理发送凭证和索引。 索引与请求的功能相关联。 主机代理从与主机通信的非易失性存储设备中的索引对应的存储位置读取凭证验证数据。 基于证书验证数据确定凭证的有效性，并且如果凭证有效则传送授权。 第三方可以通过向主机发送指令来替换凭证验证数据，使无效数据导致有效性测试失败来控制有效性确定的结果。 第三方还可以控制应用程序使用的非易失性存储设备数据来计算凭证。

公开(公告)号：US20120151576A1

公开(公告)日：2012-06-14

申请号：US13401250

申请日：2012-02-21

申请人： Po Yuan ,  Javier Cañis Robles ,  Mei Yan ,  Fabrice Jogand-Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

发明人： Po Yuan ,  Javier Cañis Robles ,  Mei Yan ,  Fabrice Jogand-Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

IPC分类号： G06F21/00

CPC分类号： G06Q20/3574 ,  G06F21/77 ,  G06F21/79 ,  G06F2221/2113 ,  G06F2221/2153 ,  G06Q20/35765 ,  G07F7/1008 ,  H04W12/08

摘要： In order to create and access a secure storage account in a non-volatile memory device, an account identification value is calculated. A memory identification value is read from a first non-volatile memory device. The memory identification value and the account identification value are transmitted to a second non-volatile memory device, and a calculated credential is received. A command is transmitted to create a secure storage account in the first non-volatile memory device, where the command contains the credential and the account identification value. To access the account, a sequence is transmitted, containing the account identification value and a value based on the credential. A secure storage system contains a first non-volatile memory device that stores a memory identification value and contains a secure partition accessible using a credential, a second non-volatile memory device that can compute the credential, and a host adapted to create and access the secure partition.

摘要翻译： 为了在非易失性存储设备中创建和访问安全存储帐户，计算帐户识别值。 从第一非易失性存储器件读取存储器识别值。 存储器识别值和帐户识别值被发送到第二非易失性存储器件，并且接收计算的凭​​证。 发送命令以在第一非易失性存储器设备中创建安全存储帐户，其中命令包含凭证和帐户标识值。 要访问帐户，将传输一个序列，其中包含帐户标识值和基于凭证的值。 安全存储系统包含第一非易失性存储器设备，其存储存储器标识值并且包含使用凭证可访问的安全分区，可以计算证书的第二非易失性存储器设备，以及适于创建和访问的主机 安全分区。

公开(公告)号：US20090172809A1

公开(公告)日：2009-07-02

申请号：US11967641

申请日：2007-12-31

申请人： Po Yuan ,  Javier Canis Robles ,  Mei Yan ,  Fabrice Jogand Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

发明人： Po Yuan ,  Javier Canis Robles ,  Mei Yan ,  Fabrice Jogand Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

IPC分类号： G06F7/04

CPC分类号： G06Q20/3574 ,  G06F21/77 ,  G06F21/79 ,  G06F2221/2113 ,  G06F2221/2153 ,  G06Q20/35765 ,  G07F7/1008 ,  H04W12/08

摘要： In order to create and access a secure storage account in a non-volatile memory device, an account identification value is calculated. A memory identification value is read from a first non-volatile memory device. The memory identification value and the account identification value are transmitted to a second non-volatile memory device, and a calculated credential is received. A command is transmitted to create a secure storage account in the first non-volatile memory device, where the command contains the credential and the account identification value. To access the account, a sequence is transmitted, containing the account identification value and a value based on the credential. A secure storage system contains a first non-volatile memory device that stores a memory identification value and contains a secure partition accessible using a credential, a second non-volatile memory device that can compute the credential, and a host adapted to create and access the secure partition.

摘要翻译： 为了在非易失性存储设备中创建和访问安全存储帐户，计算帐户识别值。 从第一非易失性存储器件读取存储器识别值。 存储器识别值和帐户识别值被发送到第二非易失性存储器件，并且接收计算的凭​​证。 发送命令以在第一非易失性存储器设备中创建安全存储帐户，其中命令包含凭证和帐户标识值。 要访问帐户，将传输一个序列，其中包含帐户标识值和基于凭证的值。 安全存储系统包含第一非易失性存储器设备，其存储存储器标识值并且包含使用凭证可访问的安全分区，可以计算证书的第二非易失性存储器设备，以及适于创建和访问的主机 安全分区。

公开(公告)号：US08997214B2

公开(公告)日：2015-03-31

申请号：US13401250

申请日：2012-02-21

申请人： Po Yuan ,  Javier Canis Robles ,  Mei Yan ,  Fabrice Jogand-Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

发明人： Po Yuan ,  Javier Canis Robles ,  Mei Yan ,  Fabrice Jogand-Coulomb ,  Ahmet Altay ,  Bahman Qawami ,  Patricia Dwyer ,  Robert Chin-Tse Chang ,  Oktay Rasizade ,  Farshid Sabet-Sharghi

IPC分类号： G06F21/00 ,  G07F7/10 ,  G06Q20/34 ,  G06F21/79 ,  G06F21/77

CPC分类号： G06Q20/3574 ,  G06F21/77 ,  G06F21/79 ,  G06F2221/2113 ,  G06F2221/2153 ,  G06Q20/35765 ,  G07F7/1008 ,  H04W12/08

摘要： In order to create and access a secure storage account in a non-volatile memory device, an account identification value is calculated. A memory identification value is read from a first non-volatile memory device. The memory identification value and the account identification value are transmitted to a second non-volatile memory device, and a calculated credential is received. A command is transmitted to create a secure storage account in the first non-volatile memory device, where the command contains the credential and the account identification value. To access the account, a sequence is transmitted, containing the account identification value and a value based on the credential. A secure storage system contains a first non-volatile memory device that stores a memory identification value and contains a secure partition accessible using a credential, a second non-volatile memory device that can compute the credential, and a host adapted to create and access the secure partition.

摘要翻译： 为了在非易失性存储设备中创建和访问安全存储帐户，计算帐户识别值。 从第一非易失性存储器件读取存储器识别值。 存储器识别值和帐户识别值被发送到第二非易失性存储器件，并且接收计算的凭​​证。 发送命令以在第一非易失性存储器设备中创建安全存储帐户，其中命令包含凭证和帐户标识值。 要访问帐户，将传输一个序列，其中包含帐户标识值和基于凭证的值。 安全存储系统包含第一非易失性存储器设备，其存储存储器标识值并且包含使用凭证可访问的安全分区，可以计算证书的第二非易失性存储器设备，以及适于创建和访问的主机 安全分区。

公开(公告)号：US08244663B2

公开(公告)日：2012-08-14

申请号：US12472929

申请日：2009-05-27

申请人： Ahmet Altay ,  Po Yuan ,  Junzhi Wang ,  Haluk Kent Tanik

发明人： Ahmet Altay ,  Po Yuan ,  Junzhi Wang ,  Haluk Kent Tanik

IPC分类号： G06F17/00 ,  G06N5/02

CPC分类号： G11B27/105 ,  G11B27/3027 ,  G11B27/36 ,  G11B2220/17 ,  G11B2220/61 ,  H04N21/2541 ,  H04N21/8166 ,  H04N21/835 ,  H04N21/8355

摘要： The embodiments described herein generally relate to a method and host device for enforcing a rule associated with a media file. In one embodiment, an observer module determines that a media player is attempting to play a media file. Before allowing the media player to play the media file, the observer module determines if the media file is associated with a rule that specifies an action to be taken if a playback event is detected. If it is determined that the media file is associated with a rule, the observer module observes playback of the media file to detect if the playback event specified in the rule occurred and takes the action specified in the rule if the playback event is detected.

摘要翻译： 本文描述的实施例通常涉及用于实施与媒体文件相关联的规则的方法和主机设备。 在一个实施例中，观察者模块确定媒体播放器正尝试播放媒体文件。 在允许媒体播放器播放媒体文件之前，观察者模块确定媒体文件是否与指定如果检测到重放事件时要采取的动作的规则相关联。 如果确定媒体文件与规则相关联，则观察者模块观察媒体文件的回放，以检测规则中指定的播放事件是否发生，并且如果检测到重放事件，则采取规则中指定的动作。