公开(公告)号：US07886353B2

公开(公告)日：2011-02-08

申请号：US11090547

申请日：2005-03-25

申请人： Idan Avraham ,  John C. Dunn ,  Constantyn Koeman ,  Mark Williams ,  David R. Wooten

发明人： Idan Avraham ,  John C. Dunn ,  Constantyn Koeman ,  Mark Williams ,  David R. Wooten

IPC分类号： G06F9/00 ,  G06F15/16

CPC分类号： G06F13/102 ,  G06F21/53 ,  G06F21/85 ,  G06F2213/0042

摘要： Systems and methods for enabling trusted software to monitor and control USB traffic associated with a security extension of a host controller and devices in a USB topology is disclosed. A host controller proxy receives USB-related data from a host controller driver, determines whether the data is of a security interest, and if so, sends the data to a driver for a security extension executing in the trusted execution environment. Likewise, after software executing in the trusted execution environment evaluates and appropriately addresses data sent by the HCD proxy or data retrieved from a hardware security extension, the HCD proxy receives data from the trusted execution environment for further dissemination.

摘要翻译： 公开了用于使可信软件监视和控制与主机控制器和USB拓扑中的设备的安全扩展相关联的USB流量的系统和方法。 主机控制器代理从主机控制器驱动器接收USB相关数据，确定数据是否具有安全关注，如果是，则将数据发送到驱动程序，以在可信执行环境中执行安全扩展。 类似地，在可信执行环境中执行软件后，对HCD代理发送的数据进行评估并适当地处理从硬件安全扩展检索的数据，HCD代理从可信执行环境接收数据以进一步传播。

公开(公告)号：US06973512B1

公开(公告)日：2005-12-06

申请号：US09947722

申请日：2001-09-06

申请人： Constantyn Koeman

发明人： Constantyn Koeman

IPC分类号： G06F3/00 ,  G06F13/00 ,  G06F13/10

CPC分类号： G06F13/102 ,  G06F9/4411

摘要： An adaptive driver and method is presented for communicating between an operating system of a computer and various peripheral devices connected to the computer via a peripheral bus. Operating characteristics and input/output characteristics of the peripheral device and all intervening hardware devices placed between the operating system and the peripheral device are noted in a linked set of data fields, i.e., a driver stack. Serialized data transfers are coordinated using the driver stack, and each request for a data transfer is submitted to the stack in the form of an input/output request packet (IRP). Unlike conventional practice, in which IRPs must be pre-defined and hard-coded to conform to the characteristics of a particular peripheral device, the adaptive driver derives the device characteristics from data structures maintained by the operating system and constructs IRPs accordingly. Thus, a driver embodying the method presented herein is capable of supporting a variety of dissimilar USB peripherals, requiring substantially no modification of the driver software.

摘要翻译： 提出了一种自适应驱动器和方法，用于在计算机的操作系统和经由外围总线连接到计算机的各种外围设备之间进行通信。 设置在操作系统和外围设备之间的外围设备和所有中间硬件设备的操作特性和输入/输出特性在链接的一组数据字段（即驱动器堆栈）中被记录。 使用驱动程序堆栈协调序列化数据传输，并且每个请求数据传输都以输入/输出请求数据包（IRP）的形式提交给堆栈。 不同于传统做法，其中IRP必须被预定义和硬编码以符合特定外围设备的特性，自适应驱动器从由操作系统维护的数据结构中导出设备特征并相应地构造IRP。 因此，体现本文提出的方法的驱动器能够支持各种不同的USB外围设备，从而基本上不需要修改驱动程序软件。

公开(公告)号：US20060218409A1

公开(公告)日：2006-09-28

申请号：US11090547

申请日：2005-03-25

申请人： Idan Avraham ,  John Dunn ,  Constantyn Koeman ,  Mark Williams ,  David Wooten

发明人： Idan Avraham ,  John Dunn ,  Constantyn Koeman ,  Mark Williams ,  David Wooten

IPC分类号： G06F12/14

CPC分类号： G06F13/102 ,  G06F21/53 ,  G06F21/85 ,  G06F2213/0042

摘要： Systems and methods for enabling trusted software to monitor and control USB traffic associated with a security extension of a host controller and devices in a USB topology is disclosed. A host controller proxy receives USB-related data from a host controller driver, determines whether the data is of a security interest, and if so, sends the data to a driver for a security extension executing in the trusted execution environment. Likewise, after software executing in the trusted execution environment evaluates and appropriately addresses data sent by the HCD proxy or data retrieved from a hardware security extension, the HCD proxy receives data from the trusted execution environment for further dissemination.

摘要翻译： 公开了用于使可信软件监视和控制与主机控制器和USB拓扑中的设备的安全扩展相关联的USB流量的系统和方法。 主机控制器代理从主机控制器驱动器接收USB相关数据，确定数据是否具有安全关注，如果是，则将数据发送给驱动程序，以在可信执行环境中执行安全扩展。 类似地，在可信执行环境中执行软件后，对HCD代理发送的数据进行评估并适当地处理从硬件安全扩展检索的数据，HCD代理从可信执行环境接收数据以进一步传播。