公开(公告)号：US20060193321A1

公开(公告)日：2006-08-31

申请号：US11405174

申请日：2006-04-17

Applicant: Scott Shell ,  Lee Butler

Inventor： Scott Shell ,  Lee Butler

IPC: H04L12/56

CPC classification number: H04L67/26 ,  H04L67/04 ,  H04L67/34 ,  H04W12/02 ,  H04W12/06 ,  H04W28/18

Abstract: Described is a provisioning system for receiving configuration changes to and queries of settings on a mobile device. One implementation includes a router component and a configuration manager component. The router component is responsible for receiving messages delivered to the mobile device and parsing the messages into requests for information. The messages may be delivered in document format, such as in the eXtensible Markup Language (XML) format. The requests may take the form of a request to respond with existing configuration settings, or to set certain configuration settings on the mobile device. The router component is also responsible for authenticating and decrypting the messages. Once properly authenticated and decrypted, the router component passes the message to the configuration manager component. The configuration manager component is responsible for determining what configuration settings are affected by the message and for processing the requests within the message. For example, the configuration manager component may process a request to query a configuration setting by retrieving the requested information from a hardware register or a software registry. The configuration manager component may implement one or more configuration service providers to perform the actual request processing. The configuration manager component may additionally compose a response document to return in the event that a response has been requested in the message. In one implementation, the response may be created by modifying the original message received and returning that message to the router component.

Abstract translation: 描述了用于在移动设备上接收对设置的配置更改和查询的配置系统。 一个实现包括路由器组件和配置管理器组件。 路由器组件负责接收传递到移动设备的消息，并将消息解析为请求信息。 消息可以以文档格式递送，例如可扩展标记语言（XML）格式。 请求可以采取以现有配置设置进行响应的请求的形式，或者在移动设备上设置某些配置设置。 路由器组件还负责认证和解密消息。 一旦正确认证和解密，路由器组件将消息传递给配置管理器组件。 配置管理器组件负责确定哪些配置设置受到消息的影响以及处理消息中的请求。 例如，配置管理器组件可以通过从硬件寄存器或软件注册表检索所请求的信息来处理查询配置设置的请求。 配置管理器组件可以实现一个或多个配置服务提供者来执行实际的请求处理。 在消息中已经请求了响应的情况下，配置管理器组件可以另外组成响应文档以返回。 在一个实现中，响应可以通过修改接收的原始消息并将该消息返回到路由器组件来创建。

公开(公告)号：US20050132372A1

公开(公告)日：2005-06-16

申请号：US10978481

申请日：2004-11-02

Applicant: Garrett Vargas ,  Scott Shell ,  Matthew Taylor

Inventor： Garrett Vargas ,  Scott Shell ,  Matthew Taylor

IPC: G06F1/32 ,  G06F9/48 ,  G06F11/00 ,  G06F11/07 ,  G06F9/46

CPC classification number: G06F9/4825 ,  G06F1/3203 ,  G06F1/329 ,  G06F9/4881 ,  G06F11/0715 ,  G06F11/0757 ,  G06F11/0793 ,  Y02D10/24

Abstract: A system and method is disclosed for synchronizing certain periodic activities and/or processes in a computer system or device. The synchronization allows more efficient use of the computer system's or device's processing capabilities, and may result in conservation of electrical power. In one example embodiment, a periodic scheduler is implemented to periodically verify the continued existence of critical processes operating in the computer system or device. Corrective, or other appropriate, action may be taken in the event of a failure of a critical process. A schedule list, which may be a linked list, may be used to track the periodic processes that are to occur. Upon registration of a critical process, the schedule list may be modified to synchronize the new periodic process with the existing schedule list.

Abstract translation: 公开了用于使计算机系统或设备中的某些周期性活动和/或过程同步的系统和方法。 同步允许更有效地利用计算机系统或设备的处理能力，并且可以导致电力的保护。 在一个示例实施例中，实现周期性调度器以周期性地验证在计算机系统或设备中操作的关键进程的持续存在。 纠正或其他适当的行为可能在关键过程失败的情况下采取。 可以使用可以是链表的调度列表来跟踪要发生的周期性过程。 在注册关键过程之后，可以修改调度列表以使新的周期性过程与现有调度列表同步。

公开(公告)号：US20050125796A1

公开(公告)日：2005-06-09

申请号：US10985916

申请日：2004-11-12

Applicant: Garrett Vargas ,  Scott Shell ,  Matthew Taylor

Inventor： Garrett Vargas ,  Scott Shell ,  Matthew Taylor

IPC: G06F1/32 ,  G06F9/48 ,  G06F11/00 ,  G06F11/07 ,  G06F9/46

CPC classification number: G06F9/4825 ,  G06F1/3203 ,  G06F1/329 ,  G06F9/4881 ,  G06F11/0715 ,  G06F11/0757 ,  G06F11/0793 ,  Y02D10/24

Abstract: A system and method is disclosed for synchronizing certain periodic activities and/or processes in a computer system or device. The synchronization allows more efficient use of the computer system's or device's processing capabilities, and may result in conservation of electrical power. In one example embodiment, a periodic scheduler is implemented to periodically verify the continued existence of critical processes operating in the computer system or device. Corrective, or other appropriate, action may be taken in the event of a failure of a critical process. A schedule list, which may be a linked list, may be used to track the periodic processes that are to occur. Upon registration of a critical process, the schedule list may be modified to synchronize the new periodic process with the existing schedule list.

公开(公告)号：US07509497B2

公开(公告)日：2009-03-24

申请号：US10874830

申请日：2004-06-23

Applicant: George Joy ,  Mukkul Dasgupta ,  Scott Shell ,  Yadhu Gopalan

Inventor： George Joy ,  Mukkul Dasgupta ,  Scott Shell ,  Yadhu Gopalan

IPC: G06F21/00

CPC classification number: G06F21/52 ,  G06F21/54

Abstract: The present invention provides an efficient application oriented security model. Prior to execution, an application is authenticated, and security information associated with the application is retrieved. The security information is then used to generate a token that is attached to the application. The security information may include a principle account associated with the application, a list of group accounts, and a corresponding privilege list.

Abstract translation: 本发明提供了一种有效的面向应用的安全模型。 在执行之前，应用程序被认证，并且检索与该应用程序相关联的安全信息。 然后，安全信息用于生成附加到应用程序的令牌。 安全信息可以包括与应用相关联的原则帐户，组帐户的列表和相应的特权列表。

公开(公告)号：US20060242073A1

公开(公告)日：2006-10-26

申请号：US11111651

申请日：2005-04-21

Applicant: Andrew Padawer ,  Katharine Holdsworth ,  Miguel Claudio ,  Scott Shell ,  William Stelzel

Inventor： Andrew Padawer ,  Katharine Holdsworth ,  Miguel Claudio ,  Scott Shell ,  William Stelzel

IPC: G06F17/60

CPC classification number: G06Q30/06 ,  G06F21/10

Abstract: A pluggable file-based DRM (digital rights management) API (application program interface) layer for applications and engines. The invention defines a pluggable file-based DRM API layer such that mobile operators can choose to use any file-based DRM (FDRM) engine in their final product. An FDRM engine can be content agnostic (e.g., can range from an executable to a media file or ring-tone). In accordance with the invention, an application can become DRM aware by calling the novel file-based DRM APIs. Any FDRM engine can be plugged into the novel API layer such that applications can use the protected content. The API layer of the subject invention can be designed such that applications that are DRM aware by using the file-based DRM API layer can be DRM engine agnostic.

Abstract translation: 用于应用和引擎的可插入文件的DRM（数字版权管理）API（应用程序接口）层。 本发明定义了基于可插入文件的DRM API层，使得移动运营商可以选择在其最终产品中使用任何基于文件的DRM（FDRM）引擎。 FDRM引擎可以是内容不可知的（例如，可以从可执行文件到媒体文件或铃声）。 根据本发明，通过调用基于新颖的基于文件的DRM API，应用可以变得DRM感知。 任何FDRM引擎都可以插入到新颖的API层中，以便应用程序可以使用受保护的内容。 可以设计本发明的API层，使得通过使用基于文件的DRM API层来DRM感知的应用可以是DRM引擎不可知的。

公开(公告)号：US20060072735A1

公开(公告)日：2006-04-06

申请号：US11284481

申请日：2005-11-22

Applicant: Scott Shell ,  Andrew Raffman

Inventor： Scott Shell ,  Andrew Raffman

IPC: H04M7/00

CPC classification number: H04L41/0886 ,  H04W28/18 ,  H04W40/02 ,  H04W48/18

Abstract: Increasing the level of automation when establishing and managing network connections. A connection manager operates between system level APIs and application programs, providing a level of abstraction. When a user wishes to access a remote resource included in destination network, the user simply identifies the remote resource and the connection manager performs the underlying operations. The connection manager relieves users from having to know detailed information about the remote resource and the destination network. When the connection manager receives a request to access a remote resource, connection manager may utilize extensible decision logic to identify a most appropriate connection method for connecting to a destination network. Such decision logic may include comparing prioritized connection requests to local resources available in a local computing device, as well as, comparing connection parameters associated with connection methods. The connection manager may utilize connection service provider modules to establish identified connection methods.

公开(公告)号：US20050132358A1

公开(公告)日：2005-06-16

申请号：US11047208

申请日：2005-01-31

Applicant: Igor Peev ,  Scott Shell ,  Kevin Savage ,  Hung Dang ,  Nicholas Hofmeister

Inventor： Igor Peev ,  Scott Shell ,  Kevin Savage ,  Hung Dang ,  Nicholas Hofmeister

IPC: G06F9/445 ,  G06F11/14

CPC classification number: G06F11/1433 ,  G06F8/62 ,  G06F8/658 ,  Y10S707/99953

Abstract: Installing software using the configuration manager so that the rollback and security features of the configuration manager may be used during the installation process. A mobile computing device accesses files that are to be installed on the mobile computing device, and well as computer-executable instructions that define how the files are to be installed on the mobile computing device. The configuration manager then causes the computer-executable instructions to be executed (e.g., using configuration service providers), and causes a mirroring rollback document to be constructed. If the installation fails, the installation process is reversed by executing the rollback document. The configuration manager may also be used to implement security when executing the installation instructions by checking to determine whether or not execution of each installation instruction is authorized.

Abstract translation: 使用配置管理器安装软件，以便在安装过程中可以使用配置管理器的回滚和安全功能。 移动计算设备访问要安装在移动计算设备上的文件，以及定义如何将文件安装在移动计算设备上的计算机可执行指令。 然后，配置管理器使得执行计算机可执行指令（例如，使用配置服务提供者），并且导致构建镜像回滚文档。 如果安装失败，则通过执行回滚文档来反转安装过程。 配置管理器也可以用于在执行安装指令时通过检查以确定每个安装指令的执行是否被授权来实现安全性。

公开(公告)号：US20050132357A1

公开(公告)日：2005-06-16

申请号：US10837151

申请日：2004-05-01

Applicant: Scott Shell ,  Dominique Fortier ,  Diane Curtis

Inventor： Scott Shell ,  Dominique Fortier ,  Diane Curtis

IPC: G06F21/24 ,  G06F9/445 ,  G06F15/00 ,  G06F21/00 ,  G06F21/22

CPC classification number: G06F21/51 ,  G06F21/121 ,  G06F21/572 ,  G06F21/575 ,  G06F2221/2129

Abstract: Described is a system and method in which a system and method in which a device manufacturer or software image provider controls which devices are allowed to install or to run a software image. An image keying mechanism uses package data and UUID associated with the device or class of devices to key an image. Because the UUID is used in the key, an installer verifier and/or boot-time verifier can ensure that the device is authorized to install and/or run the image. Any package, including existing device packages or the package for which installation is requested can demand that keying be enforced. An installer mechanism checks whether the device is allowed to install the image. A boot-time enforcement mechanism prevents an improperly installed image from operating by halting the boot process if a demanded key is invalid or missing.

Abstract translation: 描述了一种系统和方法，其中设备制造商或软件映像提供者控制哪些设备被允许安装或运行软件映像的系统和方法。 图像键控机构使用与设备或设备类相关联的包数据和UUID来键入图像。 因为在密钥中使用UUID，安装程序验证器和/或引导时验证器可以确保该设备被授权安装和/或运行映像。 任何包，包括现有的设备包或要求安装的包都可以要求强制执行密钥。 安装程序机制检查设备是否允许安装映像。 引导时执行机制通过在请求的密钥无效或丢失时停止启动过程来防止不正确安装的映像的操作。

公开(公告)号：US07930760B2

公开(公告)日：2011-04-19

申请号：US12163372

申请日：2008-06-27

Applicant: Neil Coles ,  Yadhu Gopalan ,  Christopher Jordan ,  Matthew Lyons ,  Andrew Rogers ,  Upender Sandadi ,  Scott Shell ,  Zoheb Vacheri ,  Angelo Vals ,  Sharath Viswanathan ,  Loren M. Kohnfelder

Inventor： Neil Coles ,  Yadhu Gopalan ,  Christopher Jordan ,  Matthew Lyons ,  Andrew Rogers ,  Upender Sandadi ,  Scott Shell ,  Zoheb Vacheri ,  Angelo Vals ,  Sharath Viswanathan ,  Loren M. Kohnfelder

IPC: G06F21/00 ,  G06F21/22

CPC classification number: G06F21/6227 ,  G06F2221/2141

Abstract: This disclosure describes techniques of using a centralized rule database to control the abilities of software processes to perform actions with regard to resources provided by a computer. As described herein, each software process executing in a computer executes within a chamber and each resource provided by the computer is associated with a canonical name that uniquely identifies the resource. Furthermore, the computer stores a set of security rules in a centralized rule database. In addition, this disclosure describes techniques of enforcing the rules stored in the centralized rule database.

Abstract translation: 本公开描述了使用集中规则数据库来控制软件过程对由计算机提供的资源执行动作的能力的技术。 如本文所述，在计算机中执行的每个软件进程在一个室内执行，并且由该计算机提供的每个资源与唯一地标识该资源的规范名称相关联。 此外，计算机将一组安全规则存储在集中规则数据库中。 此外，本公开描述了实施存储在集中式规则数据库中的规则的技术。

公开(公告)号：US20090249436A1

公开(公告)日：2009-10-01

申请号：US12163372

申请日：2008-06-27

Applicant: Neil Coles ,  Yadhu Gopalan ,  Christopher Jordan ,  Matthew Lyons ,  Andrew Rogers ,  Upender Sandadi ,  Scott Shell ,  Zoheb Vacheri ,  Angelo Vals ,  Sharath Viswanathan ,  Loren M. Kohnfelder

Inventor： Neil Coles ,  Yadhu Gopalan ,  Christopher Jordan ,  Matthew Lyons ,  Andrew Rogers ,  Upender Sandadi ,  Scott Shell ,  Zoheb Vacheri ,  Angelo Vals ,  Sharath Viswanathan ,  Loren M. Kohnfelder

IPC: G06F21/00

CPC classification number: G06F21/6227 ,  G06F2221/2141

Abstract: This disclosure describes techniques of using a centralized rule database to control the abilities of software processes to perform actions with regard to resources provided by a computer. As described herein, each software process executing in a computer executes within a chamber and each resource provided by the computer is associated with a canonical name that uniquely identifies the resource. Furthermore, the computer stores a set of security rules in a centralized rule database. In addition, this disclosure describes techniques of enforcing the rules stored in the centralized rule database.

Abstract translation: 本公开描述了使用集中式规则数据库来控制软件过程对由计算机提供的资源执行动作的能力的技术。 如本文所述，在计算机中执行的每个软件进程在一个室内执行，并且由该计算机提供的每个资源与唯一地标识该资源的规范名称相关联。 此外，计算机将一组安全规则存储在集中规则数据库中。 此外，本公开描述了实施存储在集中式规则数据库中的规则的技术。