-
公开(公告)号：US20140189775A1
公开(公告)日：2014-07-03
申请号：US13728224
申请日：2012-12-27
申请人： Lloyd Leon Burch , Carolyn B. McClain , Robert Skousen Stilmar , Dipto Chakravarty , Baha Masoud , Michael F. Angelo
发明人： Lloyd Leon Burch , Carolyn B. McClain , Robert Skousen Stilmar , Dipto Chakravarty , Baha Masoud , Michael F. Angelo
IPC分类号： H04L29/06
CPC分类号： H04L63/10 , G01R31/31705 , G06F21/00 , G06F21/606 , H04L63/0428
摘要： Techniques for secure debugging and monitoring are presented. An end user requests a secure token for logging information with a remote service. A secure monitoring and debugging token service provides the secure token. The remote service validates the secure token and configures itself for capturing information and reporting the captured information based on the secure token.
摘要翻译： 介绍了安全调试和监控技术。 终端用户请求一个安全的令牌用远程服务记录信息。 安全的监控和调试令牌服务提供了安全令牌。 远程服务验证安全令牌，并配置自身以捕获信息并基于安全令牌报告捕获的信息。
-
公开(公告)号：US07240201B2
公开(公告)日：2007-07-03
申请号：US10632500
申请日：2003-08-01
CPC分类号： G06F21/31 , H04L9/3236 , H04L9/3247
摘要： The disclosed embodiments relate to method and apparatus for providing computer security system. The method may include calculating a hash value of an operation at an administrative system. The signed hash of the operation may be created in the administrative system. The signed hash may be received at the managed system. The managed system may validate the signed hash by using a stored reference hash. Upon determining if the signed hash is valid, the managed system may execute the operation that corresponds to the signed hash.
摘要翻译： 所公开的实施例涉及用于提供计算机安全系统的方法和装置。 该方法可以包括计算管理系统上的操作的哈希值。 可以在管理系统中创建操作的签名散列。 可以在被管理系统处接收签名的散列。 受管系统可以通过使用存储的引用散列来验证签名的散列。 在确定签名的散列是否有效时，被管理系统可以执行与经签名的散列对应的操作。
-
公开(公告)号：US07073064B1
公开(公告)日：2006-07-04
申请号：US09540697
申请日：2000-03-31
IPC分类号： H04L9/00
CPC分类号： G06F21/575
摘要： A method and apparatus for protecting a computer system. Specifically, a method and system for validating portions of memory at each power-on cycle is described. A Boot Block is used to validate the BIOS, CMOS and NVRAM of a system. The BIOS may also be used to validate the Boot Block, CMOS and NVRAM.
摘要翻译： 一种用于保护计算机系统的方法和装置。 具体地说，描述了在每个通电周期验证存储器部分的方法和系统。 引导块用于验证系统的BIOS，CMOS和NVRAM。 BIOS也可用于验证引导块，CMOS和NVRAM。
-
4.发明授权Computer system having security features for authenticating different components 有权具有用于认证不同组件的安全功能的计算机系统公开(公告)号：US06625729B1
公开(公告)日：2003-09-23
申请号：US09540811
申请日：2000-03-31
IPC分类号： G06F15177
CPC分类号： G06F21/57 , G06F9/4401 , G06F12/1433 , G06F21/575
摘要： A method and apparatus for protecting a computer system. Specifically, a method and system for validating portions of memory at each power-on cycle is described. A Boot Block is used to validate the BIOS, CMOS and NVRAM of a system. The BIOS may also be used to validate the Boot Block, CMOS and NVRAM.
摘要翻译： 一种用于保护计算机系统的方法和装置。 具体地说，描述了在每个通电周期验证存储器部分的方法和系统。 引导块用于验证系统的BIOS，CMOS和NVRAM。 BIOS也可用于验证引导块，CMOS和NVRAM。
-
公开(公告)号：US06502203B2
公开(公告)日：2002-12-31
申请号：US09293587
申请日：1999-04-16
IPC分类号： H02H305
摘要： A method and system of quorum negotiation utilizing power mains. Unlike current systems, this communication is provided as a secondary channel, with the primary channel being a standard network system. By using this technique, if the heartbeat is lost over the primary communication system, the secondary, power-mains system can be used to check the heartbeat to validate whether or not the “lost” system is still in operation. If communication cannot be established over the power mains, it is assumed that the “lost” system is down and should be dropped from any cluster.
摘要翻译： 使用电力供应的法定协商的方法和系统。 与当前系统不同，该通信被提供为辅助信道，主信道是标准网络系统。 通过使用这种技术，如果心跳在主要通信系统上丢失，次级电源系统可用于检查心跳以验证“丢失”系统是否仍在运行。 如果无法通过电源建立通信，则假定“丢失”系统关闭，并应从任何集群中丢弃。
-
6.发明授权Use of biometrics as a methodology for defining components for ECC encryption 有权使用生物识别作为定义ECC加密组件的方法公开(公告)号：US06330674B1
公开(公告)日：2001-12-11
申请号：US09163758
申请日：1998-09-30
申请人： Michael F. Angelo , Drue A. Reeves , Manny Novoa
发明人： Michael F. Angelo , Drue A. Reeves , Manny Novoa
IPC分类号： G06F1130
CPC分类号： G07F7/1016 , H04L9/3066 , H04L9/3231 , H04L9/3234 , H04L2209/805
摘要： A method for defining the elliptic curve for purposes of elliptic curve encryption using biometrics such as a fingerprint to define the elliptic curve equation's coefficients.
摘要翻译： 用于使用生物特征如指纹来定义椭圆曲线以用于椭圆曲线加密的方法来定义椭圆曲线方程的系数。
-
7.发明授权Method for securely communicating remote control commands in a computer network 失效在计算机网络中安全地通信远程控制命令的方法
公开(公告)号：US6119228A
公开(公告)日：2000-09-12
申请号：US916273
申请日：1997-08-22
CPC分类号： H04L41/28 , H04L63/0442 , H04L63/065 , H04L63/123
摘要： A method for providing secure remote control commands in a distributing computer environment. In the preferred embodiment of the invention, a network administrator or network management software creates a shutdown record, including an index or time stamp, for powering down a specified network computer(s). Prior to broadcast over the network, a secure one-way hash function is performed on the shutdown record. The result of the one-way hash function is encrypted using the network administrator's private key, thereby generating a digital signature that can be verified by specially configured network nodes. The digital signature is appended to the original shutdown record prior to broadcast to the network. Upon receiving the broadcast message, the targeted network computer(s) validates the broadcast message by verifying the digital signature of the packet or frame. The validation process is performed by decrypting the hash value representation of the shutdown record using the network administrator's public key. A one-way hash function is also performed on the original shutdown record portion of the received message. If the two values match, the broadcast message is determined to be authentic and the shutdown control code is executed. The invention insures that the shutdown command was neither modified in transit nor originated from an unauthorized source.
摘要翻译： 一种用于在分发计算机环境中提供安全远程控制命令的方法。 在本发明的优选实施例中，网络管理员或网络管理软件创建关闭记录，包括用于断电指定的网络计算机的索引或时间戳。 在通过网络广播之前，对关闭记录执行安全的单向散列函数。 使用网络管理员的私钥对单向散列函数的结果进行加密，从而生成可由特殊配置的网络节点进行验证的数字签名。 数字签名在广播到网络之前附加到原始关闭记录。 在接收到广播消息时，目标网络计算机通过验证分组或帧的数字签名来验证广播消息。 验证过程通过使用网络管理员的公钥解密关闭记录的散列值表示来执行。 还对接收到的消息的原始关闭记录部分执行单向散列函数。 如果两个值相匹配，则确定广播消息是可信的，并且执行关闭控制代码。 本发明确保了关闭命令在传输过程中既未被修改也不是源自未经授权的源。
-
8.发明授权
公开(公告)号：US6116509A
公开(公告)日：2000-09-12
申请号：US115068
申请日：1998-07-14
申请人： Michael F. Angelo , Andrew Brown
发明人： Michael F. Angelo , Andrew Brown
CPC分类号： G06F1/181 , G06F1/183 , G06K7/0013
摘要： The read head portion of a chip card reader is compactly mounted on the rear side of a front device bay faceplate in a computer in a manner permitting a peripheral device, representatively a hard disk drive, to be mounted in the device bay immediately behind the read head. To permit this installation of both the card read head and the peripheral device at the same computer drive bay, the read head is installed on the rear side of the faceplate at an acute angle relative thereto, with the card entry opening in the read head being aligned with a card insertion slot formed in the faceplate and being inclined at the read head installation angle. The electronics associated with the read head are also compactly mounted on the rear side of the faceplate. The angling of the read head relative to the device bay faceplate substantially reduces the rearward projection thereof toward the associated drive bay to an extent permitting the read head to be disposed entirely forwardly of the disk drive within the drive bay.
摘要翻译： 芯片读卡器的读取头部分以允许外围设备（代表性的是硬盘驱动器）安装在设备托架中的紧靠在读取器之后的方式紧凑地安装在计算机的前面设备托架面板的后侧上 头。 为了允许在相同的计算机驱动器托架上安装卡读取头和外围设备，读取头以相对于其的锐角安装在面板的后侧，读取头中的卡片入口为 与形成在面板中的卡插入槽对准，并以读头安装角度倾斜。 与读头相关联的电子仪器也紧凑地安装在面板的后侧。 读头相对于设备舱面板的角度基本上减小了朝向相关联的驱动器托架的向后突出，使得读头完全位于驱动器托架内的盘驱动器的前方。
-
公开(公告)号：US6085299A
公开(公告)日：2000-07-04
申请号：US974734
申请日：1997-11-19
CPC分类号： G06F21/56 , G06F11/004 , G06F21/572 , G06F12/1433 , G06F2211/1097
摘要： A secure start-up system for a computer enables a flash memory to be reset in a secured way. Various operations are carried out to make sure that the reset is an authorized one, and to avoid unauthorized, e.g. virus, infiltration. These operations include multiple tests to avoid the probability of the reset being unauthorized. Any one or more than one of the following can be used. Flashing is only authorized when a special flash enable bit is set in the non-volatile memory. This flash enable bit is reset during every startup cycle. Flashing is only authorized from a cold boot as opposed from a warm boot. This minimizes the possibility of a computer routine authorizing flashing by a software reset. Flashing is only authorized from a floppy. This prevents a virus from writing the flashing routine to the boot sector of a non-removable disc. The user is warned prior to flashing, and asked to confirm. Finally, contents of the flashing routine can be checked using some kind of checking algorithm such as a secure hash algorithm.
摘要翻译： 用于计算机的安全启动系统使得可以以安全的方式重置闪存。 执行各种操作以确保复位是授权的，并且避免未经授权的复位。 病毒，渗透。 这些操作包括多个测试，以避免重置未经授权的可能性。 可以使用以下任何一个或多于一个。 只有在非易失性存储器中设置了特殊闪光使能位时，闪存才被授权。 每个启动周期中，该闪存使能位都被复位。 闪电只能从冷启动授权，而不是热启动。 这样可以最大程度地减少计算机程序授权通过软件重置闪烁的可能性。 闪烁只能从软盘授权。 这样可以防止病毒将闪存例程写入不可移动光盘的引导扇区。 在闪烁之前警告用户，并要求确认。 最后，可以使用诸如安全散列算法的某种检查算法检查闪烁例程的内容。
-
公开(公告)号：US5923754A
公开(公告)日：1999-07-13
申请号：US850729
申请日：1997-05-02
CPC分类号： G11B20/0021 , G11B20/00086 , G11B20/00514 , G11B20/00673 , H04N5/913 , H04N2005/91364
摘要： A method and apparatus for securely transferring an encrypted-data key and a medium key, from a media storage such as a DVD disk to an output device in a computer system, using a randomly generated first secure transfer key generated by a disk drive of the computer system, the first key having a uniqueness factor derived from a phase locked loop circuitry. The first secure transfer key is combined with an output key stored in the output device forming a second secure transfer key. The second secure transfer key is used to encrypt the data key and the medium key to form a third secure transfer key. The third secure transfer key is passed to the output device where the data key and the medium key are decrypted. The data key and the medium key are then used by the output device to decrypt encrypted program data from the disk.
摘要翻译： 一种用于将加密数据密钥和介质密钥从诸如DVD盘的媒体存储器安全地传送到计算机系统中的输出设备的方法和装置，其使用随机生成的第一安全传输密钥 计算机系统，第一个键具有源自锁相环电路的唯一因子。 第一安全传送密钥与存储在输出设备中的输出密钥组合，形成第二安全传输密钥。 第二安全传输密钥用于加密数据密钥和介质密钥以形成第三安全传输密钥。 第三个安全传输密钥被传递到数据密钥和介质密钥被解密的输出设备。 然后，数据密钥和介质密钥由输出设备用于从磁盘解密加密的程序数据。
-
-
-
-
-
-
-
-
-
搜索结果
57 条记录 (耗时 0.022 秒)
