公开(公告)号：US06678822B1

公开(公告)日：2004-01-13

申请号：US08937864

申请日：1997-09-25

申请人： John Frederick Morar ,  David Michael Chess ,  Jeffrey Owen Kephart ,  Morton Gregory Swimmer ,  Steve Richard White

发明人： John Frederick Morar ,  David Michael Chess ,  Jeffrey Owen Kephart ,  Morton Gregory Swimmer ,  Steve Richard White

IPC分类号： H04L900

CPC分类号： H04L63/105 ,  G06Q10/0875 ,  G06Q20/105 ,  H04L63/0428 ,  H04L63/1441

摘要： A method for operating a data processing system of a type that includes a first data processing entity located within a trusted environment and a second data processing entity located within an untrusted environment. The method includes a first step, executed at the first data processing entity, of operating a first software agent for detecting a presence of an information container of interest and for producing a modified information container by automatically identifying and at least one of removing, masking, or replacing at least one predetermined type of restricted or private information in the information container. A second step of the method transports the modified information container from the first data processing entity to the second data processing entity for further processing. The further processing may entail an analysis of the modified information container to locate and/or identify an undesirable software entity, such as a computer virus.

摘要翻译： 一种用于操作数据处理系统的方法，所述数据处理系统包括位于可信环境内的第一数据处理实体和位于不可信环境内的第二数据处理实体。 该方法包括在第一数据处理实体中执行的第一步骤，操作第一软件代理，用于检测感兴趣的信息容器的存在，并通过自动识别和删除，屏蔽， 或者在信息容器中替换至少一种预定类型的限制或私人信息。 该方法的第二步将经修改的信息容器从第一数据处理实体传送到第二数据处理实体，用于进一步处理。 进一步的处理可能需要对修改的信息容器的分析以定位和/或识别不期望的软件实体，例如计算机病毒。

公开(公告)号：US06772346B1

公开(公告)日：2004-08-03

申请号：US09356770

申请日：1999-07-16

申请人： David Michael Chess ,  Jeffrey Owen Kephart ,  John Frederick Morar ,  Edward John Pring ,  Steve Richard White

发明人： David Michael Chess ,  Jeffrey Owen Kephart ,  John Frederick Morar ,  Edward John Pring ,  Steve Richard White

IPC分类号： G06F1130

CPC分类号： H04L63/145 ,  H04L63/0227

摘要： In a network-connected distributed system including nodes through which digital data flow, one or more of the nodes adapted to process the digital data, a method for efficiently managing the transmission of units of digital data from node to node, includes the steps of receiving, at one of the one or more nodes, units of digital data first transmitted by an originating node; filtering out sufficiently processed units of the digital data based on filtering information; transmitting, to the originating node and/or other nodes, filtered results relating to the sufficiently processed units; queuing, for processing at other nodes, unfiltered units of the digital data which are not filtered out; and updating the filtering information according to results of automatic processing performed in and received from the one of the one or more nodes and/or other nodes in the system.

摘要翻译： 在包括数字数据流的节点的网络连接的分布式系统中，适于处理数字数据的一个或多个节点，用于有效地管理从节点到节点的数字数据单元的传输的方法包括以下步骤： 在所述一个或多个节点中的一个节点处，由始发节点首先发送的数字数据单元; 基于过滤信息过滤出数字数据的充分处理的单元; 向所述始发节点和/或其他节点发送与所述充分处理的单元相关的滤波结果; 排队，用于在其他节点处处理，未过滤的数字数据的未过滤单元; 以及根据在所述系统中的一个或多个节点和/或其他节点中的一个执行并在其中接收的自动处理的结果来更新所述过滤信息。

公开(公告)号：US06560632B1

公开(公告)日：2003-05-06

申请号：US09356183

申请日：1999-07-16

申请人： David Michael Chess ,  Jeffrey Owen Kephart ,  John Frederick Morar ,  Edward John Pring ,  Steve Richard White

发明人： David Michael Chess ,  Jeffrey Owen Kephart ,  John Frederick Morar ,  Edward John Pring ,  Steve Richard White

IPC分类号： G06F1516

CPC分类号： H04L67/06 ,  H04L29/06 ,  H04L67/10 ,  H04L69/329

摘要： In a network-connected distributed system including nodes through which digital data flow, one or more of the nodes adapted to process the digital data, a method for efficiently managing the transmission of units of digital data from node to node includes the steps of receiving, at one of the one or more nodes, units of digital data first transmitted by an originating node; queuing, for processing at other nodes, one or more units of the digital data; prioritizing the queued units of digital data for transmission to a next node based on prioritizing information; and updating the prioritizing information according to results of processing performed in and received from the one of the one or more nodes and/or other nodes in the system.

摘要翻译： 在包括数字数据流的节点的网络连接的分布式系统中，适于处理数字数据的一个或多个节点，用于有效管理数字数据单元从节点到节点的传输的方法包括以下步骤： 在一个或多个节点中的一个节点处，由始发节点首先发送的数字数据单元; 排队，用于在其他节点处处理数字数据的一个或多个单元; 基于优先化信息来优先排列的数字数据单元以传输到下一个节点; 以及根据在所述系统中的所述一个或多个节点和/或其他节点中的一个节点执行并在其中接收的处理结果来更新所述优先级信息。

公开(公告)号：US06279128B1

公开(公告)日：2001-08-21

申请号：US08366281

申请日：1994-12-29

申请人： William Carlisle Arnold ,  Jehoshua Bruck ,  Jeffrey Owen Kephart ,  Gregory Bret Sorkin ,  Steve Richard White ,  David Michael Chess ,  Charles Edwin Cox ,  Myron Dale Flickner

发明人： William Carlisle Arnold ,  Jehoshua Bruck ,  Jeffrey Owen Kephart ,  Gregory Bret Sorkin ,  Steve Richard White ,  David Michael Chess ,  Charles Edwin Cox ,  Myron Dale Flickner

IPC分类号： H02H305

CPC分类号： G06F21/567 ,  G06F11/106

摘要： A system for continuous monitoring and autonomous detection of patterns in the main memory subsystem of a computer system. The invention can be embodied as an extension to existing memory scrubbing hardware to permit stored code pattern analysis and identification during the autonomous transparent memory scrubbing process. A library of stored target signatures is provided to which code signatures are compared during analysis. Code signatures may be derived directly from the memory subsystem data pattern or may be indirectly and more efficiently derived from the error correction code (ECC) string associated with the stored data pattern. This invention is directly applicable to computer virus detection and neutralization systems.

摘要翻译： 一种用于连续监测和自动检测计算机系统的主存储子系统中的模式的系统。 本发明可以被实现为对现有存储器擦除硬件的扩展，以允许在自主透明存储器擦除过程期间存储的代码模式分析和识别。 提供存储的目标签名库，以便在分析期间对代码签名进行比较。 代码签名可以直接从存储器子系统数据模式导出，或者可以间接且更有效地从与所存储的数据模式相关联的纠错码（ECC）字符串中导出。 本发明直接适用于计算机病毒检测和中和系统。

公开(公告)号：US07051277B2

公开(公告)日：2006-05-23

申请号：US09061706

申请日：1998-04-17

申请人： Jeffrey Owen Kephart ,  Richard Brian Segal ,  Steve Richard White

发明人： Jeffrey Owen Kephart ,  Richard Brian Segal ,  Steve Richard White

IPC分类号： G06F15/00 ,  G06F17/21

CPC分类号： G06F17/30707 ,  Y10S707/99931 ,  Y10S707/99933 ,  Y10S707/99945

摘要： A method of assisting a user with the task of categorizing a received electronic document into a collection includes the steps of classifying the document to obtain one or more most likely categorical labels; displaying, to the user, a representation of the one or more most likely categorical labels; receiving data, from the user, representative of a selected categorical label; and labeling the document within the collection with the selected categorical label. The electronic document can include an electronic mail message, a web page bookmark, an audio file or a video file.

摘要翻译： 一种帮助用户将接收到的电子文档分类到集合中的任务的方法包括对文档进行分类以获得一个或多个最可能的分类标签的步骤; 向用户显示一个或多个最可能的分类标签的表示; 从用户接收所选分类标签的代表的数据; 并使用所选的分类标签在集合中标记文档。 电子文档可以包括电子邮件消息，网页书签，音频文件或视频文件。

公开(公告)号：US08434077B2

公开(公告)日：2013-04-30

申请号：US11874494

申请日：2007-10-18

申请人： David Michael Chess ,  Daniel Manuel Dias ,  James Edwin Hanson ,  Giovanni Pacifici ,  Hidayatullah Habeebullah Shaikh ,  Steve Richard White ,  Jian Yin

发明人： David Michael Chess ,  Daniel Manuel Dias ,  James Edwin Hanson ,  Giovanni Pacifici ,  Hidayatullah Habeebullah Shaikh ,  Steve Richard White ,  Jian Yin

IPC分类号： G06F9/44

CPC分类号： G06F9/455 ,  G06F8/65

摘要： Upgrading a multi-tiered application is provided. In response to receiving a request to upgrade a multi-tiered application, wherein components of the multi-tiered application are deployed across a plurality of virtual machines, an appropriate integrated patch is selected for the upgrade. The selected integrated patch includes an integrated set of patches for the components of the multi-tiered application, state update data, and order constraints. The components of the multi-tiered application specified in the selected integrated patch are upgraded by using the integrated set of patches and order constraints. In addition, the state of the components of the multi-tiered application are updated by using the state update data. Then, the updated state of the multi-tiered application is saved to storage.

摘要翻译： 提供升级多层应用程序。 响应于接收到升级多层应用的请求，其中多层应用的组件跨越多个虚拟机部署，选择适当的集成补丁来进行升级。 所选择的集成补丁包括用于多层应用程序的组件，状态更新数据和顺序约束的一组集成补丁。 通过使用集成的补丁和顺序约束来升级所选集成补丁中指定的多层应用程序的组件。 另外，通过使用状态更新数据来更新多层应用的组件的状态。 然后，将多层应用程序的更新状态保存到存储。

公开(公告)号：US20090106748A1

公开(公告)日：2009-04-23

申请号：US11874494

申请日：2007-10-18

申请人： David Michael Chess ,  Daniel Manuel Dias ,  James Edwin Hanson ,  Giovanni Pacifici ,  Hidayatullah Habeebullah Shaikh ,  Steve Richard White ,  Jian Yin

发明人： David Michael Chess ,  Daniel Manuel Dias ,  James Edwin Hanson ,  Giovanni Pacifici ,  Hidayatullah Habeebullah Shaikh ,  Steve Richard White ,  Jian Yin

IPC分类号： G06F9/44

CPC分类号： G06F9/455 ,  G06F8/65

摘要： A system for upgrading a multi-tiered application. In response to receiving a request to upgrade a multi-tiered application, wherein components of the multi-tiered application are deployed across a plurality of virtual machines, an appropriate integrated patch is selected for the upgrade. The selected integrated patch includes an integrated set of patches for the components of the multi-tiered application, state update data, and order constraints. The components of the multi-tiered application specified in the selected integrated patch are upgraded by using the integrated set of patches and order constraints. In addition, the state of the components of the multi-tiered application are updated by using the state update data. Then, the updated state of the multi-tiered application is saved to storage.

摘要翻译： 用于升级多层应用程序的系统。 响应于接收到升级多层应用的请求，其中多层应用的组件跨越多个虚拟机部署，选择适当的集成补丁以进行升级。 所选择的集成补丁包括用于多层应用程序的组件，状态更新数据和顺序约束的一组集成补丁。 通过使用集成的补丁和顺序约束来升级所选集成补丁中指定的多层应用程序的组件。 另外，通过使用状态更新数据来更新多层应用的组件的状态。 然后，将多层应用程序的更新状态保存到存储。

公开(公告)号：US5802592A

公开(公告)日：1998-09-01

申请号：US656626

申请日：1996-05-31

申请人： David M. Chess ,  Gregory Bret Sorkin ,  Steve Richard White

发明人： David M. Chess ,  Gregory Bret Sorkin ,  Steve Richard White

IPC分类号： G06F1/00 ,  G06F9/445 ,  G06F11/10 ,  G06F21/00 ,  G06F12/14 ,  G06F11/30 ,  G06F12/16

CPC分类号： G06F11/1004 ,  G06F21/572 ,  G06F21/64 ,  G06F9/4401 ,  G06F2201/83 ,  G06F2211/008 ,  G06F2211/1097

摘要： A system and method for verifying the integrity of a computer system's BIOS programs stored in alterable read only memory (such as FLASH ROM), and preventing malicious alteration thereof. The system and method regularly check the contents of the alterable read only memory using a digital signature encrypted by means of an asymmetrical key cryptosystem.

摘要翻译： 一种用于验证存储在可更改的只读存储器（例如FLASH ROM）中的计算机系统的BIOS程序的完整性并防止其恶意改变的系统和方法。 系统和方法使用通过非对称密钥密码系统加密的数字签名来定期检查可更改的只读存储器的内容。

公开(公告)号：US07216343B2

公开(公告)日：2007-05-08

申请号：US10252868

申请日：2002-09-20

申请人： Rajarshi Das ,  Edwin Richie Lassettre ,  Alla Segal ,  Ian Nicholas Whalley ,  Steve Richard White

发明人： Rajarshi Das ,  Edwin Richie Lassettre ,  Alla Segal ,  Ian Nicholas Whalley ,  Steve Richard White

IPC分类号： G06F9/44

CPC分类号： G06F8/65 ,  G06F11/1433 ,  G06F11/3672

摘要： A method, apparatus, and computer instructions for updating a software component. A determination is made as to whether to update the software component. The software component is updated to form an updated software component in response to a determination to update the software component. The updated software component is automatically tested. A corrective action is performed in response to a failure in testing of the updated component.

摘要翻译： 一种用于更新软件组件的方法，装置和计算机指令。 确定是否更新软件组件。 响应于确定更新软件组件，更新软件组件以形成更新的软件组件。 更新的软件组件将自动测试。 响应于更新的组件的测试失败，执行纠正措施。

公开(公告)号：US09058438B2

公开(公告)日：2015-06-16

申请号：US11741859

申请日：2007-04-30

申请人： Dakshi Agrawal ,  Chatschik Bisdikian ,  Seraphin Bernard Calo ,  Murthy V. Devarakonda ,  David Alson George ,  Sandeep K. Gopisetty ,  Kang-Won Lee ,  Konstantinos Magoutis ,  Ramani Ranjan Routray ,  Gauri Shah ,  Chung-hao Tan ,  Norbert George Vogl ,  Kaladhar Voruganti ,  Steve Richard White

发明人： Dakshi Agrawal ,  Chatschik Bisdikian ,  Seraphin Bernard Calo ,  Murthy V. Devarakonda ,  David Alson George ,  Sandeep K. Gopisetty ,  Kang-Won Lee ,  Konstantinos Magoutis ,  Ramani Ranjan Routray ,  Gauri Shah ,  Chung-hao Tan ,  Norbert George Vogl ,  Kaladhar Voruganti ,  Steve Richard White

IPC分类号： G06F9/44 ,  G06F17/50

CPC分类号： G06F17/50

摘要： Techniques for automatically designing an application-requirement based configuration for a distributed computing system are provided. One or more application-level templates are obtained, wherein the one or more templates are representative of one or more requirements associated with one or more applications. Using the one or more application-level templates, one or more logical flows are created. The one or more logical flows are then used to generate one or more system-level configuration plans of the distributed computing system.

摘要翻译： 提供了一种用于为分布式计算系统自动设计基于应用需求的配置的技术。 获得一个或多个应用级模板，其中所述一个或多个模板代表与一个或多个应用相关联的一个或多个需求。 使用一个或多个应用程序级模板，创建一个或多个逻辑流。 然后使用一个或多个逻辑流来生成分布式计算系统的一个或多个系统级配置计划。