Method and apparatus for controlling access to local storage devices
    1.
    发明授权
    Method and apparatus for controlling access to local storage devices 有权
    用于控制对本地存储设备的访问的方法和装置

    公开(公告)号:US09202087B2

    公开(公告)日:2015-12-01

    申请号:US11554832

    申请日:2006-10-31

    IPC分类号: G06F12/00 G06F21/78

    CPC分类号: G06F21/78

    摘要: An approach is provided for controlling access to local storage medium. A request is detected from an operating system for accessing a local storage medium. An intermediary agent selectively grants access to the local storage medium according to an access policy, wherein the intermediary agent is distinct from the operating system.

    摘要翻译: 提供了一种用于控制对本地存储介质的访问的方法。 从用于访问本地存储介质的操作系统检测到请求。 中介代理根据访问策略选择性地授予对本地存储介质的访问,其中中介代理与操作系统不同。

    Cryptographically scrubbable storage device
    2.
    发明授权
    Cryptographically scrubbable storage device 有权
    密码擦除存储设备

    公开(公告)号:US08458491B1

    公开(公告)日:2013-06-04

    申请号:US12821275

    申请日:2010-06-23

    IPC分类号: G06F11/30

    摘要: A cryptographically scrubbable disk performs erasure of a cryptographic key covering a body of data to render the body of data unintelligible. A scrub controller interfaced between a computing appliance and a storage volume generates a scrub key and encrypts each block of data written to the storage volume using the scrub key. Data read commands decrypt using the same key. The scrub controller is an electronically separate conduit having independent memory and power, thus the scrub key remains within the scrub controller and unexposed, and is thus inaccessible via the processor of the computing appliance. The scrub key remains in the scrub controller such that the scrub key never leaves the scrub controller and is also inaccessible to retrieval since the scrub controller does not share memory or access with the computer and is thus electronically separate from the supported computing appliance.

    摘要翻译: 密码擦除磁盘执行覆盖数据体的加密密钥的擦除,使数据体无法理解。 在计算设备和存储卷之间接口的擦洗控制器生成擦除密钥,并使用擦除密钥对写入存储卷的每个数据块进行加密。 数据读取命令使用相同的密钥进行解密。 擦洗控制器是具有独立存储器和功率的电子分离管道,因此擦洗钥匙保持在洗涤控制器内并且未暴露,并且因此通过计算设备的处理器无法访问。 洗刷钥匙保留在洗涤控制器中,使得擦洗钥匙不会离开洗涤控制器,并且由于洗涤控制器不与计算机共享存储器或访问并且因此与所支持的计算设备电子地分离,因此也不能进行检索。

    METHOD AND APPARATUS FOR CONTROLLING ACCESS TO LOCAL STORAGE DEVICES
    3.
    发明申请
    METHOD AND APPARATUS FOR CONTROLLING ACCESS TO LOCAL STORAGE DEVICES 有权
    用于控制对本地存储设备的访问的方法和装置

    公开(公告)号:US20080104694A1

    公开(公告)日:2008-05-01

    申请号:US11554832

    申请日:2006-10-31

    IPC分类号: H04L9/32

    CPC分类号: G06F21/78

    摘要: An approach is provided for controlling access to local storage medium. A request is detected from an operating system for accessing a local storage medium. An intermediary agent selectively grants access to the local storage medium according to an access policy, wherein the intermediary agent is distinct from the operating system.

    摘要翻译: 提供了一种用于控制对本地存储介质的访问的方法。 从用于访问本地存储介质的操作系统检测到请求。 中介代理根据访问策略选择性地授予对本地存储介质的访问,其中中介代理与操作系统不同。

    Anti-wikileaks USB/CD device
    4.
    发明授权
    Anti-wikileaks USB/CD device 有权
    反Wikileaks USB / CD设备

    公开(公告)号:US09361483B2

    公开(公告)日:2016-06-07

    申请号:US13545816

    申请日:2012-07-10

    IPC分类号: G06F21/78 G06F21/10 H04L9/08

    CPC分类号: G06F21/78 G06F21/10 H04L9/08

    摘要: A method for encrypting and storing data on a removable medium includes: obtaining a medium key uniquely associated with the removable medium; encrypting the data using the medium key to generate encrypted data; and writing the encrypted data onto the removable medium.

    摘要翻译: 一种用于在可移除介质上加密和存储数据的方法包括:获得与所述可移除介质唯一相关联的介质密钥; 使用中密钥加密数据以生成加密数据; 并将加密的数据写入到可移除介质上。

    ANTI-WIKILEAKS USB/CD DEVICE
    5.
    发明申请
    ANTI-WIKILEAKS USB/CD DEVICE 有权
    防静电USB / CD设备

    公开(公告)号:US20140019775A1

    公开(公告)日:2014-01-16

    申请号:US13545816

    申请日:2012-07-10

    IPC分类号: G06F21/24

    CPC分类号: G06F21/78 G06F21/10 H04L9/08

    摘要: A method for encrypting and storing data on a removable medium includes: obtaining a medium key uniquely associated with the removable medium; encrypting the data using the medium key to generate encrypted data; and writing the encrypted data onto the removable medium

    摘要翻译: 一种用于在可移除介质上加密和存储数据的方法包括:获得与所述可移除介质唯一相关联的介质密钥; 使用中密钥加密数据以生成加密数据; 并将加密的数据写入到可移除介质上

    METHOD AND SYSTEM FOR PROVIDING NETWORK ENFORCED ACCESS CONTROL
    6.
    发明申请
    METHOD AND SYSTEM FOR PROVIDING NETWORK ENFORCED ACCESS CONTROL 审中-公开
    提供网络强制访问控制的方法和系统

    公开(公告)号:US20080148340A1

    公开(公告)日:2008-06-19

    申请号:US11554881

    申请日:2006-10-31

    IPC分类号: H04L9/00 G06F15/173

    CPC分类号: H04L63/0227 H04L63/105

    摘要: An approach is provided for controlling access to network resources. A metric (e.g. a voucher) is received corresponding to a policy for accessing a resource within a network. Rating of a user is updated based on the received metric. An access level is granted for accessing the resource to the user based on the rating.

    摘要翻译: 提供了一种控制对网络资源的访问的方法。 接收对应于用于访问网络内的资源的策略的度量(例如,凭单)。 基于接收到的度量来更新用户的等级。 基于评级,授予访问权限给用户的访问级别。

    Method, computer program product, and device for network reconnaissance flow identification
    7.
    发明授权
    Method, computer program product, and device for network reconnaissance flow identification 有权
    方法,计算机程序产品和网络侦察流识别装置

    公开(公告)号:US09015300B2

    公开(公告)日:2015-04-21

    申请号:US11551453

    申请日:2006-10-20

    IPC分类号: G06F15/173 H04L29/06

    摘要: A method, computer program product, and device for detecting a reconnaissance of a network through the identification of the information flowing from the network to external sources are provided. The method may include monitoring the information flowing from the network to external sources in order to identify what properties may have been revealed to a potential attacker. The method may include monitoring a response of the network to an inquiry from an external source, determining potential properties of the network that may have been revealed from the response, storing the potential properties in a data repository, and determining a possible reconnaissance of the network based on the properties stored in the data repository. Determining the potential properties of the network revealed by the response may include comparing the response to one or more information templates. Each information template may be associated with one or more properties of the network.

    摘要翻译: 提供了一种通过识别从网络到外部源的信息来检测网络的侦察的方法,计算机程序产品和设备。 该方法可以包括监视从网络流向外部源的信息,以便识别可能向潜在攻击者显示什么属性。 该方法可以包括监视网络对来自外部源的查询的响应,确定可能已经从响应中揭示的网络的潜在属性,将潜在属性存储在数据存储库中,以及确定网络的可能侦察 基于存储在数据存储库中的属性。 确定由响应显示的网络的潜在属性可以包括将响应与一个或多个信息模板进行比较。 每个信息模板可以与网络的一个或多个属性相关联。

    Method and system of providing digital video remodulation
    8.
    发明授权
    Method and system of providing digital video remodulation 有权
    提供数字视频再调制的方法和系统

    公开(公告)号:US08418212B2

    公开(公告)日:2013-04-09

    申请号:US11694165

    申请日:2007-03-30

    IPC分类号: H04N7/18

    摘要: An approach is provided for distributing video signals. A digital video feed is received at a media distributor that includes a plurality of decoders and a corresponding plurality of modulators, wherein the digital video feed includes a plurality of video channels. The decoders decode the digital video feed to output analog video signals. The modulators modulate the analog video signals; and a combiner combines the outputs of the modulators to generate a channelized video signal.

    摘要翻译: 提供了一种用于分发视频信号的方法。 在包括多个解码器和对应的多个调制器的媒体分发器处接收数字视频馈送,其中数字视频馈送包括多个视频信道。 解码器解码数字视频馈送以输出模拟视频信号。 调制器调制模拟视频信号; 并且组合器组合调制器的输出以产生信道化视频信号。

    Method and system for providing image processing to track digital information
    9.
    发明授权
    Method and system for providing image processing to track digital information 有权
    用于提供图像处理以跟踪数字信息的方法和系统

    公开(公告)号:US08316238B2

    公开(公告)日:2012-11-20

    申请号:US11552757

    申请日:2006-10-25

    IPC分类号: H04L9/32

    CPC分类号: G06F17/30017 G06F17/30864

    摘要: An approach for tracking documents using image processing is disclosed. Auxiliary information corresponding to compressed digital information is extracted. The auxiliary information is used to output text lines, which undergo a hash function (e.g., checksum operation). In this manner, individual hash values are generated, as well as an overall hash value of the entire file of text lines. A reference set of hash values are maintained to identify other compressed digital information.

    摘要翻译: 公开了一种使用图像处理跟踪文档的方法。 提取与压缩数字信息对应的辅助信息。 辅助信息用于输出经历散列函数(例如,校验和运算)的文本行。 以这种方式,生成单个哈希值,以及文本行的整个文件的整体哈希值。 保持参考的散列值集合以识别其他压缩的数字信息。

    METHOD, COMPUTER PROGRAM PRODUCT, AND DEVICE FOR NETWORK RECONNAISSANCE FLOW IDENTIFICATION
    10.
    发明申请
    METHOD, COMPUTER PROGRAM PRODUCT, AND DEVICE FOR NETWORK RECONNAISSANCE FLOW IDENTIFICATION 有权
    方法,计算机程序产品和用于网络重新识别流程识别的设备

    公开(公告)号:US20080147792A1

    公开(公告)日:2008-06-19

    申请号:US11551453

    申请日:2006-10-20

    IPC分类号: G06F15/16

    摘要: A method, computer program product, and device for detecting a reconnaissance of a network through the identification of the information flowing from the network to external sources are provided. The method may include monitoring the information flowing from the network to external sources in order to identify what properties may have been revealed to a potential attacker. The method may include monitoring a response of the network to an inquiry from an external source, determining potential properties of the network that may have been revealed from the response, storing the potential properties in a data repository, and determining a possible reconnaissance of the network based on the properties stored in the data repository. Determining the potential properties of the network revealed by the response may include comparing the response to one or more information templates. Each information template may be associated with one or more properties of the network.

    摘要翻译: 提供了一种通过识别从网络到外部源的信息来检测网络的侦察的方法,计算机程序产品和设备。 该方法可以包括监视从网络流向外部源的信息,以便识别可能向潜在攻击者显示什么属性。 该方法可以包括监视网络对来自外部源的查询的响应,确定可能已经从响应中揭示的网络的潜在属性,将潜在属性存储在数据存储库中,以及确定网络的可能侦察 基于存储在数据存储库中的属性。 确定由响应显示的网络的潜在属性可以包括将响应与一个或多个信息模板进行比较。 每个信息模板可以与网络的一个或多个属性相关联。