Method and system for managing bandwidth on a master-slave bus
    1.
    发明授权
    Method and system for managing bandwidth on a master-slave bus 有权
    在主从总线上管理带宽的方法和系统

    公开(公告)号:US06898654B1

    公开(公告)日:2005-05-24

    申请号:US09364220

    申请日:1999-07-29

    IPC分类号: G06F13/14 G06F13/38

    CPC分类号: G06F13/387

    摘要: A method for rebalancing bandwidth allocations to peripheral and other devices, particularly for isochronous communications, connected to a computer system via a bus in order to accommodate bandwidth requirements of a newly added device or newly launched application is described. The method is particularly useful in the context of buses such as the Universal Serial Bus (USB) and the IEEE 1394 bus (FireWire) which allow a plurality of devices to be connected to a computer system and even be powered by the bus. The method utilizes a Policy to identify preferred configurations and, furthermore, extends the USB and other standards to specify devices that can dynamically respond to commands to change their bandwidth to another setting.

    摘要翻译: 描述了为了适应新添加的设备或新启动的应用的带宽需求而通过总线连接到计算机系统的外围设备和其他设备特别是同步通信的带宽分配的再平衡方法。 该方法在诸如通用串行总线(USB)和IEEE 1394总线(FireWire)的总线的上下文中是特别有用的,其允许多个设备连接到计算机系统,甚至由总线供电。 该方法利用策略来识别优选配置,此外,还扩展了USB和其他标准,以指定可以动态响应命令以将其带宽改变为另一设置的设备。

    Methods and systems for protecting data in USB systems
    2.
    发明授权
    Methods and systems for protecting data in USB systems 有权
    在USB系统中保护数据的方法和系统

    公开(公告)号:US07478235B2

    公开(公告)日:2009-01-13

    申请号:US10187259

    申请日:2002-06-28

    IPC分类号: H04L9/00 H04L9/32 G06F11/30

    摘要: The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.

    摘要翻译: 下面描述的各种实施例旨在从在USB总线上操作的I / O设备到主机(例如安全软件应用或安全内核)上执行的软件提供经认证和保密的消息传递。 这些实施例可以防止在主计算机上执行的软件所征收的攻击。 在一些实施例中,提供了安全的功能部件或模块,并且可以使用加密技术来提供对USB数据的观察和操纵的保护。 在其他实施例中,USB数据可以通过不被利用(或不需要利用)加密技术的技术来保护。 根据这些实施例,USB设备可以被指定为“安全”,因此,可以通过USB向这些指定设备发送和从这些指定设备发送的数据提供到受保护的存储器中。 可以利用内存间接技术来确保进出安全设备的数据受到保护。

    Specifying extended configuration descriptor information in a USB device
    3.
    发明授权
    Specifying extended configuration descriptor information in a USB device 有权
    在USB设备中指定扩展配置描述符信息

    公开(公告)号:US07093031B2

    公开(公告)日:2006-08-15

    申请号:US10970426

    申请日:2004-10-21

    IPC分类号: G06F3/00

    CPC分类号: G06F9/4411

    摘要: Systems and methods for specifying extended configuration descriptor information in a Universal Serial Bus (USB) device are described. In one aspect, an extended configuration descriptor is provided in firmware of a USB device. The extended configuration descriptor includes a set of non-standard class codes. Responsive to receiving a host-specific device request, the USB device communicates the extended configuration descriptor to a requestor.

    摘要翻译: 描述了在通用串行总线(USB)设备中指定扩展配置描述符信息的系统和方法。 在一个方面,在USB设备的固件中提供扩展配置描述符。 扩展配置描述符包括一组非标准类代码。 响应于接收主机专用设备请求,USB设备将扩展配置描述符传送给请求者。

    Methods and Systems for Protecting Data in USB Systems
    4.
    发明申请
    Methods and Systems for Protecting Data in USB Systems 审中-公开
    USB系统数据保护方法与系统

    公开(公告)号:US20090313397A1

    公开(公告)日:2009-12-17

    申请号:US12348487

    申请日:2009-01-05

    IPC分类号: G06F13/28

    摘要: The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as “secure” and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.

    摘要翻译: 下面描述的各种实施例旨在从在USB总线上操作的I / O设备到主机(例如安全软件应用或安全内核)上执行的软件提供经认证和保密的消息传递。 这些实施例可以防止在主计算机上执行的软件所征收的攻击。 在一些实施例中,提供了安全的功能部件或模块,并且可以使用加密技术来提供对USB数据的观察和操纵的保护。 在其他实施例中,USB数据可以通过不被利用(或不需要利用)加密技术的技术来保护。 根据这些实施例,USB设备可以被指定为“安全”,因此,可以通过USB向这些指定设备发送和从这些指定设备发送的数据提供到受保护的存储器中。 可以利用内存间接技术来确保进出安全设备的数据受到保护。

    System and method to specify extended configuration descriptor information in USB devices
    5.
    发明授权
    System and method to specify extended configuration descriptor information in USB devices 有权
    在USB设备中指定扩展配置描述符信息的系统和方法

    公开(公告)号:US06832273B2

    公开(公告)日:2004-12-14

    申请号:US09745404

    申请日:2000-12-21

    IPC分类号: G06F300

    CPC分类号: G06F9/4411

    摘要: The following system and procedure for specifying an extended configuration descriptor includes a USB device that responds to device requests from a host. In response to receiving a host-specific device request that specifies a predetermined index, the USB device returns an extended configuration descriptor to the requester. The extended configuration descriptor includes information that can be used by the requestor to control the USB device. When the USB device is a composite device, the extended configuration descriptor includes function information corresponding to a plurality of sub-devices. Each function comprises one or more interfaces.

    摘要翻译: 用于指定扩展配置描述符的以下系统和过程包括响应来自主机的设备请求的USB设备。 响应于接收到指定预定索引的主机专用设备请求,USB设备向请求者返回扩展配置描述符。 扩展配置描述符包括请求者可以用来控制USB设备的信息。 当USB设备是复合设备时,扩展配置描述符包括对应于多个子设备的功能信息。 每个功能包括一个或多个接口。

    Method and system for recovering a failed device on a master-slave bus
    6.
    发明授权
    Method and system for recovering a failed device on a master-slave bus 有权
    在主从总线上恢复故障设备的方法和系统

    公开(公告)号:US06735720B1

    公开(公告)日:2004-05-11

    申请号:US09584554

    申请日:2000-05-31

    IPC分类号: G06F1100

    摘要: The invention described in the instant application provides for a failure-recovery module, which permits automatic investigation of possible reasons for the failure and takes corrective action in a manner transparent to the user. The failure-recovery module, which is a software module, is useful in evaluating a device connected to a master-slave bus to determine whether it has failed. In the event the device is still connected to the master-slave bus but is non-responsive, the failure-recovery module resets the device, e.g., by turning off the power to the affected device and rebooting the device with a cold start. The failure-recovery module diagnoses the failure of a device by determining if the device is still connected to the master-slave bus. Then, the failure-recovery module sets a flag to mark the device as having failed while disabling access to devices downstream of the failed device. If the failure-recovery module is unable to execute successfully, it assumes that the failure causing condition still exists. In some embodiments this results in rescheduling the execution of the failure-recovery module while in other embodiments a general failure may be declared or the failed device left in its disconnected state. On the other hand, if the failure-recovery module executes successfully, the affected device is reinitialized and the flags marking it as failed are cleared with access to the device being restored. Subsequently, downstream devices are reinitialized and resources, if available, allocated to them along with enumeration of the devices.

    摘要翻译: 本申请中描述的发明提供了故障恢复模块,其允许自动调查故障的可能原因,并以对用户透明的方式采取纠正措施。 作为软件模块的故障恢复模块在评估连接到主从总线的设备以确定其是否失败时很有用。 如果设备仍然连接到主从总线但不响应,则故障恢复模块会重置设备,例如,通过关闭受影响设备的电源并重新启动设备,并启动冷启动。 故障恢复模块通过确定设备是否仍然连接到主从总线来诊断设备的故障。 然后,故障恢复模块设置一个标志,以将设备标记为已失败,同时禁用对故障设备下游设备的访问。 如果故障恢复模块无法成功执行,则假定故障原因仍然存在。 在一些实施例中,这导致重新安排故障恢复模块的执行,而在其他实施例中可以声明一般故障或者故障设备处于其断开状态。 另一方面,如果故障恢复模块成功执行,则受影响的设备将被重新初始化,标记为失败的标志将被清除,并访问正在还原的设备。 随后,重新初始化下游设备,并将资源(如果有的话)与设备的枚举一起分配给它们。

    Host-specified USB device requests
    7.
    发明授权
    Host-specified USB device requests 有权
    主机指定的USB设备请求

    公开(公告)号:US06484219B1

    公开(公告)日:2002-11-19

    申请号:US09498056

    申请日:2000-02-04

    IPC分类号: G06F1342

    CPC分类号: G06F13/426

    摘要: A USB device is configured to support a non-USB-defined device request that is specific to an application program or operating system. The device request is supported by using a device-specific or vendor-specific request code, which is allowed to vary from device to device. To determine the proper request code, the host performs a GET_DESCRIPTOR device request, specifying a predetermined string descriptor. The requested string descriptor designates the request code to be used in the non-USB-defined device request.

    摘要翻译: USB设备被配置为支持特定于应用程序或操作系统的非USB定义的设备请求。 通过使用特定于设备或供应商的请求代码支持设备请求,允许其在设备之间变化。 为了确定正确的请求代码,主机执行GET_DESCRIPTOR设备请求,指定预定的字符串描述符。 请求的字符串描述符指定要在非USB定义的设备请求中使用的请求代码。

    Automatic protocol migration when upgrading operating systems
    8.
    发明授权
    Automatic protocol migration when upgrading operating systems 有权
    升级操作系统时的自动协议迁移

    公开(公告)号:US07694030B2

    公开(公告)日:2010-04-06

    申请号:US10931674

    申请日:2004-09-01

    IPC分类号: G06F3/00

    CPC分类号: H04L69/18

    摘要: Automatic protocol migration when upgrading operating systems includes checking, after upgrading at least a portion of an operating system of a host device, whether a new driver supporting enhanced functionality for a portable device is now available, where a driver supporting base functionality would have been previously used for communicating with the portable device. If such a new driver supporting enhanced functionality for the portable device is now available, then the host device installs the new driver supporting enhanced functionality for the portable device.

    摘要翻译: 升级操作系统时的自动协议迁移包括在升级主机设备的操作系统的至少一部分之后检查支持便携式设备的增强功能的新驱动程序是否可用,其中支持基本功能的驱动程序以前 用于与便携式设备进行通信。 如果现在可以使用支持便携式设备的增强功能的新驱动程序,则主机设备安装支持便携式设备的增强功能的新驱动程序。

    Accessing a USB host controller security extension using a HCD proxy
    9.
    发明授权
    Accessing a USB host controller security extension using a HCD proxy 有权
    使用HCD代理访问USB主机控制器安全扩展

    公开(公告)号:US07886353B2

    公开(公告)日:2011-02-08

    申请号:US11090547

    申请日:2005-03-25

    IPC分类号: G06F9/00 G06F15/16

    摘要: Systems and methods for enabling trusted software to monitor and control USB traffic associated with a security extension of a host controller and devices in a USB topology is disclosed. A host controller proxy receives USB-related data from a host controller driver, determines whether the data is of a security interest, and if so, sends the data to a driver for a security extension executing in the trusted execution environment. Likewise, after software executing in the trusted execution environment evaluates and appropriately addresses data sent by the HCD proxy or data retrieved from a hardware security extension, the HCD proxy receives data from the trusted execution environment for further dissemination.

    摘要翻译: 公开了用于使可信软件监视和控制与主机控制器和USB拓扑中的设备的安全扩展相关联的USB流量的系统和方法。 主机控制器代理从主机控制器驱动器接收USB相关数据,确定数据是否具有安全关注,如果是,则将数据发送到驱动程序,以在可信执行环境中执行安全扩展。 类似地,在可信执行环境中执行软件后,对HCD代理发送的数据进行评估并适当地处理从硬件安全扩展检索的数据,HCD代理从可信执行环境接收数据以进一步传播。

    Safe mode operation for portable devices supporting multiple protocols
    10.
    发明授权
    Safe mode operation for portable devices supporting multiple protocols 有权
    支持多种协议的便携式设备的安全模式操作

    公开(公告)号:US07493420B2

    公开(公告)日:2009-02-17

    申请号:US10931783

    申请日:2004-09-01

    IPC分类号: G06F3/00

    CPC分类号: H04L69/18

    摘要: Safe mode operation for portable devices supporting multiple protocols includes a portable device that supports multiple protocols, such as a base functionality protocol and an enhanced functionality protocol, reporting to a host device that the portable device supports only a single protocol (e.g., the base functionality protocol). This single protocol will be used for subsequent communication between the host device and the portable device. This reporting to the host device that the portable device supports only a single protocol can be triggered, for example, by an appropriate button(s) on the portable device being pressed when the portable device is powered on.

    摘要翻译: 支持多种协议的便携式设备的安全模式操作包括支持诸如基本功能协议和增强功能协议的多种协议的便携式设备,向主机设备报告便携式设备仅支持单个协议(例如,基本功能 协议)。 该单一协议将用于主机设备和便携式设备之间的后续通信。 例如,便携式设备仅支持单个协议的主机设备的这种报告可以通过在便携式设备通电时被按下的便携式设备上的适当按钮来触发。