利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

48 条记录 (耗时 0.016 秒)

    MANAGING CODE ENTITLEMENTS FOR SOFTWARE DEVELOPERS IN SECURE OPERATING ENVIRONMENTS
    1.
    发明申请
    MANAGING CODE ENTITLEMENTS FOR SOFTWARE DEVELOPERS IN SECURE OPERATING ENVIRONMENTS 审中-公开
    管理软件开发商在安全操作环境中的代码执行

    公开(公告)号：US20090249071A1

    公开(公告)日：2009-10-01

    申请号：US12397757

    申请日：2009-03-04

    申请人： Dallas De Atley ,  Heiko Panther ,  Mitchell Adler ,  Simon Cooper ,  Michael Brouwer ,  Matt Reda

    发明人： Dallas De Atley ,  Heiko Panther ,  Mitchell Adler ,  Simon Cooper ,  Michael Brouwer ,  Matt Reda

    IPC分类号： H04L9/32

    CPC分类号： G06F21/6218 ,  G06F2221/2141

    摘要： Systems and methods for managing access to restricted data and system resources in secure operating environments are disclosed. Developer access profiles are issued by trusted authorities to developers which define entitlements that provide limited access to system resources and data on specified computing devices. The developer access profiles allow software developers to write software which accesses parts of the target platform environment which are typically off limits to third party developers.

    摘要翻译： 公开了用于在安全操作环境中管理对受限数据和系统资源的访问的系统和方法。 开发人员访问配置文件由受信任的权限发布给开发人员，这些开发人员定义了对指定计算设备上的系统资源和数据的有限访问权限。 开发人员访问配置文件允许软件开发人员编写访问目标平台环境部分的软件，这些部分通常不受第三方开发人员的限制。

    PROVIDING DEVELOPER ACCESS IN SECURE OPERATING ENVIRONMENTS
    2.
    发明申请
    PROVIDING DEVELOPER ACCESS IN SECURE OPERATING ENVIRONMENTS 审中-公开
    提供安全操作环境中的开发人员访问

    公开(公告)号：US20090228704A1

    公开(公告)日：2009-09-10

    申请号：US12398053

    申请日：2009-03-04

    申请人： Dallas de Atley ,  Heiko Panther ,  Mitchell Adler ,  Simon Cooper ,  Michael Brouwer ,  Matt Reda

    发明人： Dallas de Atley ,  Heiko Panther ,  Mitchell Adler ,  Simon Cooper ,  Michael Brouwer ,  Matt Reda

    IPC分类号： H04L29/06 ,  H04L9/32 ,  G06F9/44 ,  G06F9/45

    CPC分类号： H04L9/3247 ,  G06F8/20 ,  G06F21/57 ,  H04L9/321 ,  H04L9/3263 ,  H04L63/102 ,  H04L63/123 ,  H04L63/126 ,  H04L67/306 ,  H04L2209/805

    摘要： In some embodiments, software developers may obtain development access to a computing device. A software developer may request development access from one or more trusted authorities, such as a manufacturer of the devices, an operating system provider, etc. The request may be approved by a single trusted authority, by at least one of a plurality of trusted authorities, or a combination of several trusted authorities. In order to enable developer access, a trusted authority may create a digital certificate that may be specific to the software developer and the devices and generate a profile that specifies the access rights of the developer on those devices. In addition, the digital certificate may enable the software developer to sign their applications or code so that it may execute on the device in accordance with their profile.

    摘要翻译： 在一些实施例中，软件开发者可以获得对计算设备的开发访问。 软件开发者可以请求来自一个或多个受信任的机构（诸如设备的制造商，操作系统提供商等）的开发访问。该请求可由多个可信管理机构中的至少一个由单个可信管理机构批准 ，或几个受信任的机构的组合。 为了使开发者能够访问，受信任的机构可以创建可能是软件开发人员和设备特有的数字证书，并生成指定开发者在这些设备上的访问权限的简档。 此外，数字证书可以使软件开发人员能够签署他们的应用程序或代码，以便它可以根据其配置文件在设备上执行。

    Methods and systems for archiving and restoring securely installed applications on a computing device
    9.
    发明授权
    Methods and systems for archiving and restoring securely installed applications on a computing device 有权
    在计算设备上归档和恢复安全安装的应用程序的方法和系统

    公开(公告)号：US08880736B2

    公开(公告)日：2014-11-04

    申请号：US12757020

    申请日：2010-04-08

    申请人： Simon Cooper ,  Dallas De Atley

    发明人： Simon Cooper ,  Dallas De Atley

    IPC分类号： G06F15/16 ,  H04L29/06 ,  H04L29/08 ,  G06F21/12

    CPC分类号： G06F8/65 ,  G06F8/71 ,  G06F21/12 ,  G06F2221/2111 ,  G06F2221/2145 ,  H04L29/0854 ,  H04L63/102 ,  H04L63/123 ,  H04W12/06

    摘要： Embodiments of the present disclosure provide methods and systems of backing up applications and their associated data installed on a device, such as a mobile device. In particular, data for a backed-up application is stored on a remote archive host and can be restored to dynamically managed containers of securely installed applications on the device. Upon request, the archive host may provide a package of files to the device. The device may then restore the application based on the contents of the package. The package may comprise all the files needed to install the application including the program code, data, and documents. Alternatively, the package may simply comprise just some of the files, such as just the data or documents for an application. After installation, a secure installer framework may be used to verify the applications and authorize the application's execution on the device.

    摘要翻译： 本公开的实施例提供备份安装在诸如移动设备的设备上的应用及其相关联的数据的方法和系统。 特别地，备份的应用程序的数据存储在远程归档主机上，并可以恢复到设备上安全安装的应用程序的动态管理容器。 根据要求，存档主机可以向设备提供一组文件。 然后，设备可以基于包的内容来恢复应用。 该软件包可以包括安装应用程序所需的所有文件，包括程序代码，数据和文档。 或者，包可以仅仅包括一些文件，例如仅仅是用于应用的数据或文档。 安装后，可以使用安全的安装程序框架来验证应用程序并授权应用程序在设备上的执行。

    Restriction of program process capabilities
    10.
    发明授权
    Restriction of program process capabilities 有权
    限制程序处理能力

    公开(公告)号：US08635663B2

    公开(公告)日：2014-01-21

    申请号：US13591690

    申请日：2012-08-22

    申请人： Simon Cooper ,  Nick Lane-Smith ,  Joshua Osborne

    发明人： Simon Cooper ,  Nick Lane-Smith ,  Joshua Osborne

    IPC分类号： G06F17/00 ,  G06F3/00

    CPC分类号： G06F21/53 ,  G06F21/6281 ,  G06F2221/033 ,  G06F2221/2141 ,  G06F2221/2149

    摘要： This document describes systems and methods for restricting program process capabilities. In some implementations, the capabilities are restricted by limiting the rights or privileges granted to an application. A plurality of rules may be established for a program, or for a group of programs, denying that program the right to take actions which are outside of the actions needed to implement its intended functionality. A security policy is implemented to test actions initiated in response to an application against the rules to enable decisions restricting the possible actions of the program. Embodiments are disclosed which process the majority of decisions regarding actions against a security profile through use of a virtual machine. In some embodiments, the majority of decisions are resolved within the kernel space of an operating system.

    摘要翻译： 本文档描述了限制程序进程能力的系统和方法。 在一些实现中，通过限制授予应用的权限或特权来限制这些能力。 可以为程序或一组程序建立多个规则，拒绝该程序采取超出执行其预期功能所需的动作的动作的权利。 实施安全策略来测试针对规则响应应用程序发起的操作，以便能够限制程序可能的动作的决策。 公开了通过使用虚拟机处理关于针对安全简档的动作的大多数决定的实施例。 在一些实施例中，大多数决定在操作系统的内核空间内被解决。