Security perimeter
    1.
    发明授权
    Security perimeter 有权
    安全周界

    公开(公告)号:US09575903B2

    公开(公告)日:2017-02-21

    申请号:US13136666

    申请日:2011-08-04

    Abstract: Embodiments of memory devices, computer systems, security apparatus, data handling systems, and the like, and associated methods facilitate security in a system incorporating the concept of a security perimeter which combines cryptographic and physical security. The memory device can comprise a memory operable to store information communicated with a processor, and a logic operable to create at least one cryptographic security perimeter enclosing at least one selected region of the memory and operable to manage information communication between the processor and the at least one selected region of the memory.

    Abstract translation: 存储设备,计算机系统,安全设备,数据处理系统等的实施例以及相关联的方法有助于系统中的安全性,该系统结合了加密和物理安全性的安全周界的概念。 存储器设备可以包括可操作以存储与处理器通信的信息的存储器,以及可操作用于创建至少一个包围存储器的至少一个选定区域的密码安全周界的逻辑,并可操作以管理处理器与至少 一个选择的记忆区域。

    Instruction set adapted for security risk monitoring
    5.
    发明授权
    Instruction set adapted for security risk monitoring 有权
    适用于安全风险监控的指令集

    公开(公告)号:US08955111B2

    公开(公告)日:2015-02-10

    申请号:US13200547

    申请日:2011-09-24

    CPC classification number: G06F21/577 G06F21/552

    Abstract: A processor is adapted to manage security risk by updating and monitoring a taint storage element in response to receipt of taint indicators, and responding to predetermined taint conditions detecting by the monitoring. The processor can be operable to execute instructions of a defined instruction set architecture and comprises an instruction of the instruction set architecture operable to access data from a source and operable to receive a taint indicator indicative of potential security risk associated with the data. The processor can further comprise a taint storage element operable for updating in response to receipt of the taint indicator and logic. The logic can be operable to update the taint storage element, process the taint storage element, determine a security risk condition based on the processing of the taint storage element, and respond to the security risk condition.

    Abstract translation: 处理器适于通过响应于接收到污点指示器而更新和监视污染存储元件以及响应由监视检测到的预定污点状况来管理安全风险。 处理器可操作以执行定义的指令集架构的指令,并且包括可操作以从源访问数据并且可操作以接收指示与数据相关联的潜在安全风险的污点指示符的指令集结构的指令。 该处理器可以进一步包括一个可用于响应于接收到该污点指示符和逻辑而进行更新的污物存储元件。 逻辑可以用于更新污染存储元件,处理污染存储元件,基于污染存储元件的处理来确定安全风险状况,并响应安全风险状况。

    Scheduling threads based on priority utilizing entitlement vectors, weight and usage level
    6.
    发明授权
    Scheduling threads based on priority utilizing entitlement vectors, weight and usage level 有权
    基于优先级调度线程,利用授权向量,权重和使用级别

    公开(公告)号:US08813085B2

    公开(公告)日:2014-08-19

    申请号:US13317826

    申请日:2011-10-28

    CPC classification number: G06F9/4881 G06F2209/485

    Abstract: An embodiment or embodiments of an information handling apparatus can use an entitlement vector to simultaneously manage and activate entitlement of objects and processes to various resources independently from one another. An information handling apparatus can comprise an entitlement vector operable to specify resources used by at least one object of a plurality of object. The information handling apparatus can further comprise a scheduler operable to schedule a plurality of threads based at least partly on entitlement as specified by the entitlement vector.

    Abstract translation: 信息处理设备的一个或多个实施例可以使用授权向量来独立地彼此管理和激活对象和过程对各种资源的授权。 信息处理装置可以包括可用于指定由多个对象的至少一个对象使用的资源的授权向量。 信息处理装置还可以包括调度器,其可操作以至少部分地基于授权向量所指定的授权来调度多个线程。

    Entitlement vector with resource and/or capabilities fields
    9.
    发明申请
    Entitlement vector with resource and/or capabilities fields 有权
    具有资源和/或能力领域的权利向量

    公开(公告)号:US20130111491A1

    公开(公告)日:2013-05-02

    申请号:US13317834

    申请日:2011-10-28

    Abstract: An embodiment or embodiments of an information handling apparatus are adapted to facilitate resource allocation using an entitlement vector comprising multiple fields that are respectively directed to multiple different resources or capabilities. In illustrative embodiments, an information handling apparatus can comprise an entitlement vector configured with a plurality of bit fields at least partly corresponding to a plurality of resources and operable to specify the resources used by at least one object of a plurality of a plurality of objects. The information handling apparatus can further comprise logic operable to allocate the resources to the at least one object based on entitlement as specified by the entitlement vector.

    Abstract translation: 信息处理装置的实施例或实施例适于使用包括分别针对多个不同资源或能力的多个字段的授权向量促进资源分配。 在说明性实施例中,信息处理设备可以包括配置有至少部分对应于多个资源的多个位域的授权向量,并且可操作以指定由多个对象中的至少一个对象使用的资源。 信息处理装置还可以包括可操作以基于授权向量所指定的授权将资源分配给至少一个对象的逻辑。

Patent Agency Ranking