Secure mobile wireless device
    1.
    发明授权
    Secure mobile wireless device 有权
    安全移动无线设备

    公开(公告)号:US07882352B2

    公开(公告)日:2011-02-01

    申请号:US10515740

    申请日:2003-05-28

    IPC分类号: H04L29/06

    摘要: A secure mobile wireless device in which executable code to be installed on the device is assigned a set of capabilities which define the protected resource(s) on the device which it can access. Hence, the present invention takes the idea of capabilities (known in the context of defining the capabilities or access privileges of different users in a multi-user system) and applies it to defining the capabilities or access privileges of different native executable code for secure, single-user mobile wireless devices.

    摘要翻译: 将要安装在设备上的可执行代码的安全移动无线设备分配一组能够定义其可以访问的设备上的受保护资源的能力。 因此,本发明考虑到能力(在多用户系统中定义不同用户的能力或访问权限的上下文中已知),并将其应用于定义不同本地可执行代码的能力或访问权限,以确保安全, 单用户移动无线设备。

    Secure mobile wireless device
    2.
    发明申请
    Secure mobile wireless device 有权
    安全移动无线设备

    公开(公告)号:US20060053426A1

    公开(公告)日:2006-03-09

    申请号:US10515740

    申请日:2003-05-28

    IPC分类号: G06F13/00

    摘要: A secure mobile wireless device in which executable code to be installed on the device is assigned a set of capabilities which define the protected resource(s) on the device which it can access. Hence, the present invention takes the idea of capabilities (known in the context of defining the capabilities or access privileges of different users in a multi-user system) and applies it to defining the capabilities or access privileges of different native executable code for secure, single-user mobile wireless devices.

    摘要翻译: 将要安装在设备上的可执行代码的安全移动无线设备分配一组能够定义其可以访问的设备上的受保护资源的能力。 因此,本发明考虑到能力(在多用户系统中定义不同用户的能力或访问权限的上下文中已知),并将其应用于定义不同本地可执行代码的能力或访问权限,以确保安全, 单用户移动无线设备。

    Trusted user interface for a secure mobile wireless device
    3.
    发明申请
    Trusted user interface for a secure mobile wireless device 审中-公开
    用于安全移动无线设备的可信用户界面

    公开(公告)号:US20050166064A1

    公开(公告)日:2005-07-28

    申请号:US10515752

    申请日:2003-05-28

    摘要: A mobile wireless device programmed with software which provides a trusted user interface for the device by allowing the content of a secure screen memory to be modifiable only by authorised applications. Normally, the entire screen memory address is public information, making the entire screen memory fully available to any application; hence, even sensitive dialogs would use screen memory which can in theory be looked at by malicious software, enabling that malicious code to grab PIN data etc. or corrupt a trusted user interface. But with the present invention, unauthorised applications are prevented from accessing the data displayed by the secure frame buffer because they are able to access only the non-secure screen memory. Hence, malicious applications cannot retrieve data from a trusted dialog or compromise that data. Further, as the present invention is a software only solution, it requires no new hardware per se—the only requirement is that components (e.g. a software window server; a video chip etc.) can select content from different parts of screen memory—i.e. secure and non-secure frame buffers.

    摘要翻译: 一种用软件编程的移动无线设备,其通过仅允许授权应用程序允许安全屏幕存储器的内容可修改来为设备提供可信用户界面。 通常,整个屏幕内存地址是公共信息,使整个屏幕内存可以完全适用于任何应用程序; 因此,甚至敏感的对话将使用屏幕存储器,理论上可以通过恶意软件来查看,从而使恶意代码能够抓住PIN数据等或损坏可信用户界面。 但是,利用本发明,由于能够仅访问非安全屏幕存储器,因此防止未经授权的应用访问由安全帧缓冲器显示的数据。 因此,恶意应用程序无法从受信任的对话框中检索数据或妥协该数据。 此外,由于本发明是仅用于软件的解决方案,因此它不需要新的硬件 - 唯一的要求是组件(例如软件窗口服务器,视频芯片等)可以从屏幕存储器的不同部分中选择内容 - 即, 安全和非安全的帧缓冲区。

    Memory Management With Defragmentation In A Computing Device
    4.
    发明申请
    Memory Management With Defragmentation In A Computing Device 审中-公开
    内存管理与计算设备中的碎片整理

    公开(公告)号:US20070294550A1

    公开(公告)日:2007-12-20

    申请号:US10595274

    申请日:2004-09-29

    IPC分类号: G06F1/32 G06F12/00

    CPC分类号: G06F12/023 Y02D10/13

    摘要: Data held in physical memory, such as random access memory, in a computing device is defragmented when a system operating code null thread, which is used for placing the computing device into a reduced power mode when no other thread in the system is ready to run, is scheduled to run.

    摘要翻译: 当系统运行代码为空线程时,在计算设备中的物理存储器(例如随机存取存储器)中保存的数据进行碎片整理,该线程用于在系统中没有其他线程准备运行时将计算设备置于降低功耗模式 ,计划运行。

    METHOD OF OPERATING A COMPUTING DEVICE THROUGH THE USE OF EXTENSIBLE THREAD STATES
    5.
    发明申请
    METHOD OF OPERATING A COMPUTING DEVICE THROUGH THE USE OF EXTENSIBLE THREAD STATES 审中-公开
    通过使用可扩展的螺纹状态来操作计算设备的方法

    公开(公告)号:US20100305936A1

    公开(公告)日:2010-12-02

    申请号:US12063259

    申请日:2006-08-08

    申请人: Dennis May

    发明人: Dennis May

    IPC分类号: G06F9/455

    CPC分类号: G06F9/45537 G06F9/4843

    摘要: A personality layer running above an operating system kernel puts any threads that the personality layer is responsible for into new states which the kernel does not know about. This prevents the kernel from performing operations on a thread which has been placed in one of these new states where these operations are sensitive to state of the thread itself (such as kill, suspend, change priority). Instead, the kernel redirects these thread operations to a handler in the personality layer which then handles the operation. The kernel is thus, in essence, extensible through the use of the added personality layers, and it can therefore be used to run legacy real-time applications written for other real-time operating systems.

    摘要翻译: 在操作系统内核上运行的个性层将个性层负责的任何线程都放入内核不知道的新状态。 这样可以防止内核对已经被放置在这些新状态之一的线程上进行操作,这些操作对线程本身的状态敏感(如kill,suspend,change priority)。 相反,内核将这些线程操作重定向到处理该操作的个性层中的处理程序。 因此,内核本质上可以通过使用附加的个性层进行扩展,因此可以将其用于运行为其他实时操作系统编写的遗留实时应用程序。

    Method and apparatus for handling lightweight strips
    9.
    发明授权
    Method and apparatus for handling lightweight strips 有权
    用于处理轻质条的方法和装置

    公开(公告)号:US06769863B1

    公开(公告)日:2004-08-03

    申请号:US10269008

    申请日:2002-10-09

    IPC分类号: B65G5900

    摘要: Apparatus and method for manipulating lightweight strips in parallel, laterally edge-adjacent array into spaced apart array for processing includes a platen having channels for receiving the strips, and a comb device for translating the strips of alternating channels to form two groups of laterally spaced strips. A pick-and-place conveyor has suction cups to remove each group in unison from the platen and place it on a belt conveyor. Suction holes in the channels selectively retain the groups on the platen. The comb, pick-and-place conveyor, and belt conveyor operate in synchrony and reiteratively to create a continuous stream of spaced apart strips.

    摘要翻译: 用于将轻量级条带平行地操作的横向边缘相邻阵列的装置和方法包括具有用于接收条带的通道的压板,以及用于平移交替通道条的梳状装置,以形成两组横向隔开的条带 。 拾放式输送机具有吸盘,用于将每个组与压板一致地移除并将其放置在带式输送机上。 通道中的吸孔可选择性地保持压板上的组。 梳子,拾放输送机和皮带输送机以同步和重复的方式操作以产生连续的间隔开的条带。

    Real time paged computing device and method of operation
    10.
    发明授权
    Real time paged computing device and method of operation 有权
    实时分页计算设备及操作方法

    公开(公告)号:US08135938B2

    公开(公告)日:2012-03-13

    申请号:US11817386

    申请日:2006-03-01

    IPC分类号: G06F12/10

    CPC分类号: G06F12/126

    摘要: A component of a computing device, such as the kernel of an operating system, is arranged to identify real time processes running on the device and transparently lock the memory owned by such processes to avoid them being paged out. The kernel is also able to inspect all inter-process communications originated by the real time threads running in such processes, in order to ascertain what other processes they invoke, and, if they have the potential to block a real time operation, the kernel is arranged to lock the areas of memory these processes reference. This procedure operates recursively, and ensures that page faults which might affect the operation of any real time process do not occur.

    摘要翻译: 诸如操作系统的内核的计算设备的组件被布置成识别在设备上运行的实时过程,并且透明地锁定由这些过程拥有的存储器,以避免它们被分页。 内核还能够检查在这些进程中运行的实时线程发起的所有进程间通信,以确定它们调用的其他进程,并且如果它们有可能阻止实时操作,则内​​核是 被安排为锁定这些进程参考的内存区域。 此过程以递归方式进行操作,并确保不会发生可能影响任何实时进程操作的页面错误。