Intelligent micro-virtual machine scheduling
    3.
    发明授权
    Intelligent micro-virtual machine scheduling 有权
    智能微虚机调度

    公开(公告)号:US09244705B1

    公开(公告)日:2016-01-26

    申请号:US13527542

    申请日:2012-06-19

    IPC分类号: G06F9/46 G06F9/455

    摘要: Programmatically adjusting the operational state of one or more virtual machines based on policy. Resource consumption on a hardware device is monitored. A policy that considers at least a present level of resource consumption and an amount of available resources of the hardware device is consulted. An operational state of a particular virtual machine that resides on the hardware device is changed. The change in operational state may be performed to optimize performance of a virtual machine with which a user is interacting, to enforce behavior constraints upon the virtual machine, or to adjust its execution in view of the available resources on the device.

    摘要翻译: 基于策略以编程方式调整一个或多个虚拟机的运行状态。 监视硬件设备上的资源消耗。 参考至少考虑了目前的资源消耗水平和硬件设备的可用资源量的策略。 驻留在硬件设备上的特定虚拟机的操作状态发生变化。 可以执行操作状态的改变以优化用户正在交互的虚拟机的性能,以强制对虚拟机的行为约束,或者根据设备上的可用资源调整其执行。

    Composing the display of a virtualized web browser
    4.
    发明授权
    Composing the display of a virtualized web browser 有权
    组成虚拟化网页浏览器的显示

    公开(公告)号:US09201850B1

    公开(公告)日:2015-12-01

    申请号:US13526373

    申请日:2012-06-18

    IPC分类号: G06F17/21

    摘要: Approaches for composing the display of a virtualized web browser. A virtualized web browser is instructed to display a web page. The virtualized web browser, in turn, instructs one or more virtual machines to retrieve content for at least a portion of the web page. Each of the one or more virtual machines renders the content retrieved thereby. Upon the virtualized web browser obtaining the rendered screen data content from the one or more virtual machines, the virtualized web browser displays the web page using the rendered content.

    摘要翻译: 组合虚拟化网络浏览器显示的方法。 指示虚拟化网络浏览器显示网页。 反过来,虚拟化web浏览器指示一个或多个虚拟机检索网页的至少一部分的内容。 一个或多个虚拟机中的每一个呈现由其检索的内容。 在虚拟网页浏览器从一个或多个虚拟机获得渲染的屏幕数据内容的情况下,虚拟网页浏览器使用所呈现的内容显示网页。

    Preventing host operating system from inspecting or modifying data received by hardware controller by moving host operating system into a virtual machine after boot up
    5.
    发明授权
    Preventing host operating system from inspecting or modifying data received by hardware controller by moving host operating system into a virtual machine after boot up 有权
    防止主机操作系统检查或修改硬件控制器在启动后将主机操作系统移动到虚拟机中的数据

    公开(公告)号:US09135046B1

    公开(公告)日:2015-09-15

    申请号:US13526769

    申请日:2012-06-19

    申请人: Ian Pratt

    发明人: Ian Pratt

    摘要: Approaches for ensuring the privacy of a controller of a device from a host operating system. A host operating system is prevented from inspecting or modifying data received by a controller of a hardware device. Control of the controller is withdrawn from the host operating system and granted to a hypervisor. A replacement controller for the hardware device is provided to the host operating system. Upon the hypervisor receiving data via the controller, the hypervisor forwards the data to a relevant virtual machine responsible for processing the data. Although the host operating system may operate as if it possessed control of the controller of the hardware device, any malicious code inadvertently residing within the host operating system will be unable to inspect or modify any data received by or sent from the actual controller of the hardware device.

    摘要翻译: 确保主机操作系统的设备控制器隐私的方法。 防止主机操作系统检查或修改由硬件设备的控制器接收的数据。 控制器的控制从主机操作系统中撤销并被授予管理程序。 向主机操作系统提供硬件设备的替换控制器。 当管理程序通过控制器接收数据时,管理程序将数据转发到负责处理数据的相关虚拟机。 虽然主机操作系统可能操作好像拥有对硬件设备的控制器的控制,但是无意中驻留在主机操作系统内的任何恶意代码将不能检查或修改由硬件的实际控制器接收或发送的任何数据 设备。

    Redirection of information from secure virtual machines to unsecure virtual machines
    6.
    发明授权
    Redirection of information from secure virtual machines to unsecure virtual machines 有权
    将信息从安全虚拟机重定向到不安全的虚拟机

    公开(公告)号:US08869300B2

    公开(公告)日:2014-10-21

    申请号:US13103350

    申请日:2011-05-09

    摘要: The present invention is directed towards methods and systems for redirecting an access request to an unsecure virtual machine. A computing device may execute a hypervisor hosting a secure virtual machine and an unsecure virtual machine. A control virtual machine, hosted by a hypervisor executing on the computing device, may intercept a request to access an unsecure resource. The unsecure resource may include one of: a file, an application and an uniform resource locator (URL). The control virtual machine may further determine that the request originates from a secure virtual machine executing on the computing device. The control virtual machine may redirect, responsive to the determination, the request to an unsecure virtual machine executing on the computing device, whereupon the unsecure virtual machine may provide access to the requested unsecure resource.

    摘要翻译: 本发明涉及用于将访问请求重定向到不安全的虚拟机的方法和系统。 计算设备可以执行托管安全虚拟机和不安全虚拟机的管理程序。 由在计算设备上执行的管理程序托管的控制虚拟机可以拦截访问不安全资源的请求。 不安全资源可以包括以下之一:文件,应用程序和统一资源定位符(URL)。 控制虚拟机还可以确定请求源于在计算设备上执行的安全虚拟机。 响应于确定,控制虚拟机可以将请求重定向到在计算设备上执行的不安全的虚拟机,由此不安全的虚拟机可以提供对所请求的不安全资源的访问。

    Transferring files using a virtualized application
    7.
    发明授权
    Transferring files using a virtualized application 有权
    使用虚拟化应用程序传输文件

    公开(公告)号:US08839245B1

    公开(公告)日:2014-09-16

    申请号:US13526354

    申请日:2012-06-18

    IPC分类号: G06F9/455

    摘要: Approaches for transferring a file using a virtualized application. A virtualized application executes within a virtual machine residing on a physical machine. When the virtualized application is instructed to download a file stored external to the physical machine, the virtualized application displays an interface which enables at least a portion of a file system, maintained by a host OS, to be browsed while preventing files stored within the virtual machine to be browsed. Upon the virtualized application receiving input identifying a target location within the file system, the virtualized application stores the file at the target location. The virtualized application may also upload a file stored on the physical machine using an interface which enables at least a portion of a file system of a host OS to be browsed while preventing files in the virtual machine to be browsed.

    摘要翻译: 使用虚拟化应用程序传输文件的方法。 虚拟化应用程序在驻留在物理机器上的虚拟机中执行。 当指示虚拟化应用程序下载存储在物理机外部的文件时,虚拟化应用程序显示一个接口,该接口使得能够浏览由主机OS维护的文件系统的至少一部分,同时防止存储在虚拟机中的文件 机器被浏览。 在虚拟化应用程序接收到识别文件系统中的目标位置的输入时,虚拟应用程序将文件存储在目标位置。 虚拟化应用还可以使用允许在主机OS的文件系统的至少一部分被浏览的同时上传存储在物理机上的文件,同时防止虚拟机中的文件被浏览。

    Safe printing
    8.
    发明授权
    Safe printing 有权
    安全打印

    公开(公告)号:US08719933B1

    公开(公告)日:2014-05-06

    申请号:US13526810

    申请日:2012-06-19

    IPC分类号: G06F21/00

    CPC分类号: G06F21/608

    摘要: Approaches for processing a digital file in a manner designed to minimize exposure of any malicious code contained therein. A digital file resides with a virtual machine. When the virtual machine receives an instruction to print, fax, or email the digital file, the virtual machine creates, from the digital file existing in an original format, a copy of the digital file in a different format within the virtual machine. The different format preserves a visual presentation of the digital file without supporting metadata or file format data structures of the original format. The virtual machine instructs the host OS to print the copy of the digital file, send a facsimile of the copy of the digital file, or email the copy of the digital file. The host OS may consult policy data in determining how to carry out the request vis-à-vis the digital file.

    摘要翻译: 用于以旨在最小化其中包含的任何恶意代码的暴露的方式处理数字文件的方法。 数字文件驻留有虚拟机。 当虚拟机接收到打印,传真或电子邮件数字文件的指令时,虚拟机将以原始格式存在的数字文件以虚拟机内的不同格式创建数字文件的副本。 不同的格式保留了数字文件的可视化呈现,而不支持原始格式的元数据或文件格式数据结构。 虚拟机指示主机OS打印数字文件的副本,发送数字文件副本的传真,或者发送数字文件的副本。 主机操作系统可以在确定如何对数字文件执行请求时查询策略数据。

    Redirection of Information from Secure Virtual Machines to Unsecure Virtual Machines
    9.
    发明申请
    Redirection of Information from Secure Virtual Machines to Unsecure Virtual Machines 有权
    将信息从安全虚拟机重定向到不安全的虚拟机

    公开(公告)号:US20120054744A1

    公开(公告)日:2012-03-01

    申请号:US13103350

    申请日:2011-05-09

    IPC分类号: G06F9/455

    摘要: The present invention is directed towards methods and systems for redirecting an access request to an unsecure virtual machine. A computing device may execute a hypervisor hosting a secure virtual machine and an unsecure virtual machine. A control virtual machine, hosted by a hypervisor executing on the computing device, may intercept a request to access an unsecure resource. The unsecure resource may include one of: a file, an application and an uniform resource locator (URL). The control virtual machine may further determine that the request originates from a secure virtual machine executing on the computing device. The control virtual machine may redirect, responsive to the determination, the request to an unsecure virtual machine executing on the computing device, whereupon the unsecure virtual machine may provide access to the requested unsecure resource.

    摘要翻译: 本发明涉及用于将访问请求重定向到不安全的虚拟机的方法和系统。 计算设备可以执行托管安全虚拟机和不安全虚拟机的管理程序。 由在计算设备上执行的管理程序托管的控制虚拟机可以拦截访问不安全资源的请求。 不安全资源可以包括以下之一:文件,应用程序和统一资源定位符(URL)。 控制虚拟机还可以确定请求源于在计算设备上执行的安全虚拟机。 响应于确定,控制虚拟机可以将请求重定向到在计算设备上执行的不安全的虚拟机,由此不安全的虚拟机可以提供对所请求的不安全资源的访问。

    Synchronizing resources of a virtualized browser

    公开(公告)号:US10095662B1

    公开(公告)日:2018-10-09

    申请号:US13526409

    申请日:2012-06-18

    IPC分类号: G06F17/21

    摘要: Approaches for synchronizing resources of a virtualized web browser. When a virtualized web browser is instructed to display a web page, a host module executing within a host operating instructs retrieves, from each of one or more virtual machines, contents for a portion of the web page. The virtualized web browser assembles the contents and displays the web page. A web browser executing in the host operating system may, but need not, retrieve any of the content displayed thereby. Instead, the content retrieved by the web browser executing in the host operating system may be retrieved by and rendered within a virtual machine. The behavior of the virtualized web browser may be configured using policy data.