公开(公告)号：US20120246470A1

公开(公告)日：2012-09-27

申请号：US13514481

申请日：2011-01-27

申请人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Manabu Maeda ,  Tomoyuki Haga

发明人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Manabu Maeda ,  Tomoyuki Haga

IPC分类号： H04L29/06

CPC分类号： G06F21/51 ,  G06F21/57

摘要： Techniques for protecting memory locations within a stakeholder's engine according to the Multi-Stakeholder Model, and a protocol for remote attestation to a device supporting the Multi-Stakeholder Model that provides extra evidence of the identity of the three actors.

摘要翻译： 用于根据多利益相关者模型保护利益相关者引擎内的记忆位置的技术，以及用于远程认证支持多利益相关者模型的设备的协议，其提供对三个角色的身份的额外证据。

公开(公告)号：US20110173643A1

公开(公告)日：2011-07-14

申请号：US13063103

申请日：2009-10-09

申请人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Hisashi Takayama ,  Takayuki Ito ,  Tomoyuki Haga

发明人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Hisashi Takayama ,  Takayuki Ito ,  Tomoyuki Haga

IPC分类号： G06F9/44

CPC分类号： G06F21/575 ,  G06F2221/2145

摘要： A method to allow programs running within the application space of a device with a secure processor and a trusted computing base to flexibly use certificates that describe the required system state. An information processing device including PSC database (1112), Component and PSC Map (1202), and OS support (1200).

摘要翻译： 允许具有安全处理器和可信计算基础的设备的应用空间内运行的程序灵活地使用描述所需系统状态的证书的方法。 一种包括PSC数据库（1112），组件和PSC映射（1202）和OS支持（1200）的信息处理设备。

公开(公告)号：US20060161733A1

公开(公告)日：2006-07-20

申请号：US11039446

申请日：2005-01-19

申请人： Jeffrey Beckett ,  David Duckman ,  Alexander Nicolson ,  William Qi ,  Michael Jordan

发明人： Jeffrey Beckett ,  David Duckman ,  Alexander Nicolson ,  William Qi ,  Michael Jordan

IPC分类号： G06F12/14 ,  G06F13/28

CPC分类号： G06F13/4059

摘要： The preferred embodiment of present invention is directed to an improved method and system for buffering incoming/unsolicited data received by a host computer that is connected to a network such as a storage area network. Specifically, in a host computer system in which the main memory of the host server maintains a I/O control block command ring, and which a connective port (e.g., a host bus adaptor) is operatively coupled to the main memory for handling I/O commands received by and transmitted from the host server, a host buffer queue (HBQ) is maintained for storing a series of buffer descriptors retrievable by the port for writing incoming/unsolicited data to specific address locations within the main memory. In an alternative embodiment of the present invention, multiple HBQs are maintained for storing buffer entries dedicated to different types and/or lengths of data, where each of the HBQ can be separately configured to contain a selection profile describing the specific type of data for which the HBQ is dedicated to service.

摘要翻译： 本发明的优选实施例涉及一种改进的方法和系统，用于缓冲由连接到诸如存储区域网络的网络的主计算机接收的进入/未经请求的数据。 具体地说，在其中主机服务器的主存储器维护I / O控制块命令环，并且连接端口（例如，主机总线适配器）可操作地耦合到主存储器以用于处理I / O控制块命令环的主计算机系统中， 由主机服务器接收和发送的O命令，主机缓冲器队列（HBQ）被维护，用于存储由端口检索的一系列缓冲器描述符，用于将传入/非请求数据写入主存储器内的特定地址位置。 在本发明的替代实施例中，保持多个HBQ用于存储专用于不同类型和/或数据长度的缓冲器条目，其中HBQ中的每一个可以被单独配置成包含描述特定类型的数据的选择简档， HBQ致力于服务。

公开(公告)号：US08892862B2

公开(公告)日：2014-11-18

申请号：US13375047

申请日：2010-07-01

申请人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Hisashi Takayama ,  Takayuki Ito ,  Tomoyuki Haga ,  Manabu Maeda

发明人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Hisashi Takayama ,  Takayuki Ito ,  Tomoyuki Haga ,  Manabu Maeda

IPC分类号： G06F9/00 ,  G06F21/00 ,  G06F21/57

CPC分类号： G06F21/575 ,  H04L9/3236 ,  H04L63/123 ,  H04W12/10

摘要： A method for executing a predetermined software component which is verifiable against integrity measurements, the method including (i) providing a first mapping from logical identifiers to software component enabled status flags, (ii) providing a second mapping from the logical identifiers and previous software component statuses information to actual integrity measurement certificates containing verification data, (iii) looking up the first mapping for a given logical identifier identifying the predetermined software component to get a status flag indicating whether the predetermined software component is enabled, (iv) if the status flag indicates that the predetermined software component is not enabled, updating a current integrity measurement stored within a disabled integrity measurement certificate, and (v) if the status flag indicates that the predetermined software component is enabled and verification of the predetermined software component is successful, updating a current integrity measurement stored within an integrity measurement certificate.

摘要翻译： 一种用于执行可针对完整性测量验证的预定软件组件的方法，所述方法包括（i）提供从逻辑标识符到启用软件组件的状态标志的第一映射，（ii）从逻辑标识符和先前软件组件提供第二映射 （iii）查找用于识别预定软件组件的给定逻辑标识符的第一映射，以获得指示预定软件组件是否被使能的状态标志，（iv）如果状态标志 指示预定软件组件未被启用，更新存储在禁用完整性测量证书内的当前完整性度量，以及（v）如果状态标志指示预定软件组件被启用并且预定软件组件的验证成功，则更新 当前int 质量测量存储在完整性测量证书中。

公开(公告)号：US08108689B2

公开(公告)日：2012-01-31

申请号：US12091224

申请日：2006-10-27

申请人： Kenneth Alexander Nicolson ,  Rieko Asai ,  Taichi Sato

发明人： Kenneth Alexander Nicolson ,  Rieko Asai ,  Taichi Sato

IPC分类号： G06F21/00

CPC分类号： G06F21/14

摘要： An obfuscation evaluation method which sufficiently evaluates an obfuscation performed on a program. The obfuscation evaluation method includes: a step of executing an obfuscated code module produced by obfuscating an original code module of a program, and generating a trace output file by logging a result of the execution; and a step of identifying the degree of obfuscation of the obfuscated code module by evaluating the trace output file.

摘要翻译： 一种充分评估对程序执行的混淆的混淆评估方法。 混淆评估方法包括：执行通过对程序的原始代码模块进行模糊而产生的模糊化代码模块的步骤，以及通过记录执行结果生成跟踪输出文件; 以及通过评估跟踪输出文件来识别模糊化代码模块的混淆程度的步骤。

公开(公告)号：US20110258352A1

公开(公告)日：2011-10-20

申请号：US12764002

申请日：2010-04-20

申请人： James B. WILLIAMS ,  Shawn Adam Clayton ,  Maria Clara Gutierrez ,  Alexander Nicolson, IV ,  James Winston Smart ,  John Leland Wood ,  David James Duckman ,  Carl John Lindeborg ,  William Irving Leavitt

发明人： James B. WILLIAMS ,  Shawn Adam Clayton ,  Maria Clara Gutierrez ,  Alexander Nicolson, IV ,  James Winston Smart ,  John Leland Wood ,  David James Duckman ,  Carl John Lindeborg ,  William Irving Leavitt

IPC分类号： G06F13/14 ,  G06F13/28 ,  G06F13/20

CPC分类号： G06F13/16 ,  G06F13/385 ,  G06F13/4068 ,  G06F13/4282 ,  Y02D10/14 ,  Y02D10/151

摘要： A system for enabling input/out virtualization for a device is disclosed. In one embodiment, the system includes a plurality of host CPUs; a multi-root switch connected to each of the plurality of host CPUs via respective buses; and an inline PCI virtualizing device connected to the multi-root switch via a front-side bus and the device via a back-side bus, the inline PCI virtualizing device including a plurality sets of registers, each of the plurality sets of registers accessible by a corresponding host CPU of the plurality of host CPUs and implementing functionalities of the device.

摘要翻译： 公开了一种用于启用设备的输入/输出虚拟化的系统。 在一个实施例中，系统包括多个主机CPU; 通过相应总线连接到多个主机CPU中的每一个的多根交换机; 以及通过前端总线和设备经由背面总线连接到多根交换机的在线PCI虚拟化设备，所述在线PCI虚拟化设备包括多组寄存器，所述多组寄存器中的每一组可由 多个主机CPU的对应主机CPU，并实现该设备的功能。

公开(公告)号：US20110185165A1

公开(公告)日：2011-07-28

申请号：US13121770

申请日：2009-10-09

申请人： Tomoyuki Haga ,  Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Takayuki Ito ,  Hisashi Takayama

发明人： Tomoyuki Haga ,  Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Takayuki Ito ,  Hisashi Takayama

IPC分类号： G06F9/24

CPC分类号： G06F21/57

摘要： It is possible to update and re-seal sealed data having a usability condition of matching with predetermined terminal environment information during a secure boot without rebooting a terminal when a program using the sealed data is updated. An information processing terminal (10) has first sealed data (310, 320, 330) respectively having usability conditions (312, 322, 332) of matching with predetermined terminal environment information during a secure boot and second sealed data (340, 350, 360) respectively having usability conditions (342, 352, 362) of matching with terminal environment information upon completion of the secure boot. Upon completion of the secure boot, the second sealed data is unsealed and the first sealed data is resealed using the unsealed data (341, 351, 361).

摘要翻译： 可以在安全引导期间更新和重新密封具有与预定终端环境信息匹配的可用性条件的密封数据，而不使用密封数据的程序更新时重新启动终端。 信息处理终端（10）具有在安全引导期间分别具有与预定终端环境信息匹配的可用性条件（312,322,332）的第一密封数据（310,320,330）和第二密封数据（340,350,360 ）分别具有在安全引导完成时与终端环境信息匹配的可用性条件（342,352,362）。 完成安全启动后，第二密封数据被开封，并且使用未密封的数据（341,351,361）重新密封第一密封数据。

公开(公告)号：US20100318781A1

公开(公告)日：2010-12-16

申请号：US12864589

申请日：2009-01-29

申请人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Hisashi Takayama ,  Takayuki Ito ,  Tomoyuki Haga

发明人： Kenneth Alexander Nicolson ,  Hideki Matsushima ,  Hisashi Takayama ,  Takayuki Ito ,  Tomoyuki Haga

IPC分类号： G06F21/00 ,  G06F9/00

CPC分类号： G06F21/575

摘要： A method to allow a device to boot in a secure fashion, even though some of the components within the secure device's firmware may not be present, not correctly authorized, or not correctly operating.

摘要翻译： 即使安全设备的固件中的某些组件可能不存在，未正确授权或不正确操作，允许设备以安全方式引导的方法。

公开(公告)号：US07644191B2

公开(公告)日：2010-01-05

申请号：US10987429

申请日：2004-11-12

申请人： Alexander Nicolson, IV ,  Gregory John Scherer

发明人： Alexander Nicolson, IV ,  Gregory John Scherer

IPC分类号： G06F3/00

CPC分类号： G06F13/126

摘要： A 32-word command IOCB format is disclosed. A conventional 8-word format is supported, although in both cases 32-word command IOCBs are used. When the conventional 8-word format is used, the host sets the LE bit=1 and writes a conventional 8-word command IOCB into words 0-7 of the 32-word command IOCB. The firmware performs a DMA operation and reads the LE bit. With the LE bit=1, the firmware knows to read only words 0-7. When the new 32-word format is used, the host sets the LE bit=0 and writes a 32-word IOCB command into the 32-word command IOCB, including command and response buffer pointers, one or more data buffer pointers, and perhaps the command buffer. The firmware performs a DMA operation and reads the LE bit. With the LE bit=0, the firmware knows to read all 32 words of the command IOCB.

摘要翻译： 公开了32字命令IOCB格式。 支持常规的8字格式，尽管在这两种情况下都使用32字命令IOCB。 当使用传统的8字格式时，主机设置LE位= 1，并将传统的8字命令IOCB写入32字命令IOCB的字0-7。 固件执行DMA操作并读取LE位。 当LE位= 1时，固件知道只读0-7字。 当使用新的32字格式时，主机设置LE位= 0，并将32字IOCB命令写入32字命令IOCB，包括命令和响应缓冲区指针，一个或多个数据缓冲区指针，也许 命令缓冲区。 固件执行DMA操作并读取LE位。 当LE位= 0时，固件知道读取命令IOCB的所有32个字。

公开(公告)号：US20090307500A1

公开(公告)日：2009-12-10

申请号：US12162706

申请日：2007-02-06

申请人： Taichi Sato ,  Rieko Asai ,  Kenneth Alexander Nicolson

发明人： Taichi Sato ,  Rieko Asai ,  Kenneth Alexander Nicolson

IPC分类号： G06F21/22

CPC分类号： G06F21/14

摘要： A program obfuscator of the present invention divides a target program into a plurality of blocks and determines program instructions allocated according to an input/output relation between the blocks, in order to diffuse and allocate the program instructions for calculating a value of secret information in various places of the program. More specifically, with regard to a variable for calculating the secret information transferred to and from the blocks, a value of the variable when outputted from a block is equalized to a value of the variable when inputted to a next block. A random variable conversion instruction is added to each of the blocks so that a value of the variable when outputted from each block is in a range of a value expected as an input to the next block.

摘要翻译： 本发明的程序混淆器将目标程序划分为多个块，并根据块之间的输入/输出关系确定分配的程序指令，以扩散并分配用于计算各种秘密信息的值的程序指令 程序的地方。 更具体地，关于用于计算传送到块的秘密信息的变量，当从块输出时，变量的值在输入到下一个块时与变量的值相等。 随机变量指令被添加到每个块，使得当从每个块输出时变量的值在期望作为下一个块的输入的值的范围内。