Authenticatable software modules
    1.
    发明申请
    Authenticatable software modules 审中-公开
    可验证的软件模块

    公开(公告)号:US20050188214A1

    公开(公告)日:2005-08-25

    申请号:US10785460

    申请日:2004-02-23

    IPC分类号: G06F21/00 H04L9/00

    CPC分类号: G06F21/52 G06F21/64

    摘要: In various embodiments of the present invention, a first software entity, such as a program, routine, library, or module, authenticates a second software entity by extracting an authentication block from memory, validating the extracted authentication block, and comparing a value stored in the authentication block with a computable or pre-computed authentication value in order to authenticate the second software entity. In certain alternative embodiments, a program can authenticate itself at run-time. Additional embodiments of the present invention include methods for constructing and inserting authentication blocks into software entities to facilitate authentication by the authentication methods that represent embodiments of the present invention.

    摘要翻译: 在本发明的各种实施例中,诸如程序,例程,库或模块的第一软件实体通过从存储器提取认证块来验证第二软件实体,验证所提取的认证块,并将存储在 所述认证块具有可计算或预先计算的认证值,以便认证所述第二软件实体。 在某些替代实施例中,程序可以在运行时自身进行认证。 本发明的另外的实施例包括用于构建和插入认证块到软件实体中以便于通过代表本发明的实施例的认证方法进行认证的方法。

    System and method for time-out management
    2.
    发明申请
    System and method for time-out management 审中-公开
    用于超时管理的系统和方法

    公开(公告)号:US20080013450A1

    公开(公告)日:2008-01-17

    申请号:US11732708

    申请日:2007-04-03

    IPC分类号: H04L12/56

    CPC分类号: G06F16/2477

    摘要: Embodiments of the present invention are directed to computationally efficient timer-queue management. In one embodiment of the present invention, a timer queue is implemented as a circular-timer queue, containing timers, or time-associated data objects, due to expire in a relatively short period of time, and a second queue or list of timers or time-associated data objects, referred to as the “later queue,” containing timers or time-associated data objects due to expire after a period of time longer than the period of time during which the timers or timer-associated data objects on the circular-timer queue are due to expire. At generally regular intervals, as timers or time-associated data objects are removed from the circular-timer queue, timers or time-associated data objects are transferred from the later queue to the circular-timer queue.

    摘要翻译: 本发明的实施例涉及计算上有效的定时器队列管理。 在本发明的一个实施例中,定时器队列被实现为循环定时器队列,其包含定时器或时间相关联的数据对象,由于在相对较短的时间段内到期,并且第二队列或定时器或 被称为“后期队列”的时间相关数据对象包含定时器或与时间有关的数据对象,由于在一段时间之后到期时间长于循环周期内的定时器或定时器相关数据对象的时间段 -timer队列将到期。 以一般的间隔时间,由于定时器或与时间有关的数据对象从循环定时器队列中移除,定时器或与时间相关的数据对象从稍后队列传送到循环定时器队列。

    Method and apparatus for system caller authentication
    3.
    发明授权
    Method and apparatus for system caller authentication 有权
    用于系统呼叫者认证的方法和装置

    公开(公告)号:US07784063B2

    公开(公告)日:2010-08-24

    申请号:US10867048

    申请日:2004-06-14

    IPC分类号: G06F9/44 H04L29/06

    摘要: In various embodiments of the present invention, execution-state transitions occur in a first portion of a system, and a cumulative execution state for each process is maintained by a second portion of the system so that, when a second-portion routine is called, the second-portion routine can determine whether or not the current execution state is suitable for execution of the second-portion routine. In various embodiments, a callpoint log, allocated and maintained for each process, stores the cumulative execution state for the process. In one embodiment, the first portion is an operating system, and the second portion is a secure kernel, with the cumulative execution state used by the secure kernel to prevent unauthorized access by erroneously or maliciously invoked operating-system routines to secure kernel routines. In another embodiment, the cumulative execution state is used as a debugging tool by the second-portion routines to catch errors in the implementation of the first-portion routines.

    摘要翻译: 在本发明的各种实施例中,执行状态转换发生在系统的第一部分中,并且由系统的第二部分维护每个进程的累积执行状态,使得当调用第二部分例程时, 第二部分例程可以确定当前执行状态是否适合执行第二部分例程。 在各种实施例中,为每个进程分配和维护的调用点日志存储该进程的累积执行状态。 在一个实施例中,第一部分是操作系统,并且第二部分是安全内核,其中安全内核使用累积执行状态来防止通过错误或恶意调用的操作系统例程来非法访问以保护内核例程。 在另一个实施例中,累积执行状态被第二部分例程用作调试工具,以捕获第一部分例程的实现中的错误。

    Method and system for data-structure management
    4.
    发明申请
    Method and system for data-structure management 有权
    数据结构管理方法与系统

    公开(公告)号:US20080016216A1

    公开(公告)日:2008-01-17

    申请号:US11732710

    申请日:2007-04-03

    IPC分类号: G06F15/16

    CPC分类号: H04L67/2814 H04L67/325

    摘要: Embodiments of the present invention are directed to computationally efficient methods and systems for managing connection-associated and exchange-associated resources within network proxies. In one embodiment of the present invention, a circular connection-switch queue is employed for allocating, de-allocating, and maintaining connection-based or exchange-based data resources within a proxy. The connection-switch queue includes a free pointer that identifies a next connection-switch queue entry for allocation, and an idle pointer that is incremented continuously or at fixed intervals as timers associated with connection-switch entries expire. In an alternate embodiment, the connection-switch queue includes a free pointer, an idle pointer, and a clear pointer.

    摘要翻译: 本发明的实施例涉及用于管理网络代理内的连接相关联和交换相关资源的计算有效的方法和系统。 在本发明的一个实施例中,采用循环连接 - 切换队列来分配,去分配和维护代理内的基于连接或基于交换的数据资源。 连接切换队列包括标识用于分配的下一个连接交换队列条目的空闲指针,以及随着与连接交换机条目关联的定时器到期而连续或以固定间隔递增的空闲指针。 在替代实施例中,连接切换队列包括空闲指针,空闲指针和清除指针。

    Method and system for managing computational resources
    5.
    发明申请
    Method and system for managing computational resources 有权
    管理计算资源的方法和系统

    公开(公告)号:US20070230477A1

    公开(公告)日:2007-10-04

    申请号:US11397918

    申请日:2006-04-03

    申请人: John Worley

    发明人: John Worley

    IPC分类号: H04L12/56

    摘要: Various embodiments of the present invention are directed to an efficient and flexible method and system for managing a pool of computational resources that can be allocated from a resource pool, used for varying periods of time, and eventually returned to the resource pool. Certain embodiments of the present invention are directed to a method and system for efficiently managing ephemeral ports used for short-duration communications connections. In one embodiment of the present invention, an array of port tables is employed to store and manage a large space of ephemeral protocol ports. Each port table is a circular buffer, each entry of which includes a port number that uniquely identifies a communications port, a sequence number that allows the port to be immediately reallocated, and any other additional protocol-specific information that may be associated with the port. A non-local-port-number portion of a connection address, comprising a remote HP address, a remote port number, and a local IP address, may be hashed to generate a numerical reference to a particular port table within the array, or list, of port tables, and ephemeral ports for the non-local-port-number portion of a connection address are allocated from, and deallocated and returned to, the numerically identified port table.

    摘要翻译: 本发明的各种实施例涉及一种有效和灵活的方法和系统,用于管理可以从不同时间段使用的资源池分配并最终返回到资源池的计算资源池。 本发明的某些实施例涉及用于有效地管理用于短时间通信连接的短暂端口的方法和系统。 在本发明的一个实施例中,使用端口表阵列来存储和管理临时协议端口的大空间。 每个端口表是循环缓冲区,其每个条目包括唯一标识通信端口的端口号,允许端口立即重新分配的序列号以及可能与端口相关联的任何其他附加协议特定信息 。 包括远程HP地址,远程端口号和本地IP地址的连接地址的非本地端口号部分可以被散列以产生对阵列或列表内的特定端口表的数字引用 的端口表和连接地址的非本地端口号部分的临时端口从数字识别的端口表中分配和释放并返回给数字识别的端口表。

    Method and system for caller authentication
    6.
    发明申请
    Method and system for caller authentication 有权
    呼叫方认证方法和系统

    公开(公告)号:US20050166208A1

    公开(公告)日:2005-07-28

    申请号:US10867048

    申请日:2004-06-14

    IPC分类号: G06F9/00 G06F21/00

    摘要: In various embodiments of the present invention, execution-state transitions occur in a first portion of a system, and a cumulative execution state for each process is maintained by a second portion of the system so that, when a second-portion routine is called, the second-portion routine can determine whether or not the current execution state is suitable for execution of the second-portion routine. In various embodiments, a callpoint log, allocated and maintained for each process, stores the cumulative execution state for the process. In one embodiment, the first portion is an operating system, and the second portion is a secure kernel, with the cumulative execution state used by the secure kernel to prevent unauthorized access by erroneously or maliciously invoked operating-system routines to secure kernel routines. In another embodiment, the cumulative execution state is used as a debugging tool by the second-portion routines to catch errors in the implementation of the first-portion routines.

    摘要翻译: 在本发明的各种实施例中,执行状态转换发生在系统的第一部分中,并且由系统的第二部分维护每个进程的累积执行状态,使得当调用第二部分例程时, 第二部分例程可以确定当前执行状态是否适合执行第二部分例程。 在各种实施例中,为每个进程分配和维护的调用点日志存储该进程的累积执行状态。 在一个实施例中,第一部分是操作系统,并且第二部分是安全内核,其中安全内核使用累积执行状态来防止通过错误或恶意调用的操作系统例程来非法访问以保护内核例程。 在另一个实施例中,累积执行状态被第二部分例程用作调试工具,以捕获第一部分例程的实现中的错误。

    Queued, asynchronous communication architecture interface
    7.
    发明申请
    Queued, asynchronous communication architecture interface 审中-公开
    排队,异步通信架构接口

    公开(公告)号:US20060104295A1

    公开(公告)日:2006-05-18

    申请号:US11281838

    申请日:2005-11-16

    IPC分类号: H04L12/56

    摘要: Methods and techniques are provided for implementing a queued, asynchronous application programming interface (API) for network communications. According to one embodiment, the API provides (i) a system abstraction representing a connection between a local machine and a remote machine, and (ii) multiple routines accessible to applications for operating on connections. The connections instantiated by applications based upon the system abstraction are capable of providing full duplex communication channels between their respective local machines and remote machines. The routines define operations and parameters to establish, accept, read, write and close the connections.

    摘要翻译: 提供了用于实现用于网络通信的排队的异步应用编程接口(API)的方法和技术。 根据一个实施例,API提供(i)表示本地机器和远程机器之间的连接的系统抽象,以及(ii)用于在连接上操作的应用可访问的多个例程。 基于系统抽象的由应用程序实例化的连接能够在其各自的本地机器和远程机器之间提供全双工通信信道。 这些例程定义了建立,接受,读取,写入和关闭连接的操作和参数。

    Immediate virtual memory
    8.
    发明申请
    Immediate virtual memory 有权
    即时虚拟内存

    公开(公告)号:US20050172098A1

    公开(公告)日:2005-08-04

    申请号:US10768306

    申请日:2004-01-29

    申请人: John Worley

    发明人: John Worley

    IPC分类号: G06F12/08 G06F12/10

    CPC分类号: G06F12/1036 G06F2212/657

    摘要: Various embodiments of the present invention provide for immediate allocation of virtual memory on behalf of processes running within a computer system. One or more bit flags within each translation indicate whether or not a corresponding virtual memory page is immediate. READ access to immediate virtual memory is satisfied by hardware-supplied or software-supplied values. WRITE access to immediate virtual memory raises an exception to allow an operating system to allocate physical memory for storing values written to the immediate virtual memory by the WRITE access.

    摘要翻译: 本发明的各种实施例提供代表在计算机系统内运行的进程的即时分配虚拟存储器。 每个转换中的一个或多个位标志指示对应的虚拟存储器页面是否立即。 由硬件提供或软件提供的值满足对即时虚拟内存的READ访问。 写入立即虚拟内存的写入会引发异常,以允许操作系统分配物理内存,以通过WRITE访问来存储写入到即时虚拟内存的值。

    Method and system for high performance, multiple-precision multiply-and-add operation
    9.
    发明申请
    Method and system for high performance, multiple-precision multiply-and-add operation 审中-公开
    用于高性能,多精度乘法和加法运算的方法和系统

    公开(公告)号:US20050055394A1

    公开(公告)日:2005-03-10

    申请号:US10659837

    申请日:2003-09-10

    申请人: John Worley

    发明人: John Worley

    IPC分类号: G06F7/38 G06F7/544 G06F9/302

    摘要: A method and system for execution of high performance, multiple-precision multiply-and-add operations that take advantage of native multiply-and-add instruction of modem processors. A careful choice of instruction ordering leads to highly parallelizable groups of instructions, the instructions in each group independent of the results generated by other instructions of the group.

    摘要翻译: 用于执行高性能,多精度乘法和加法运算的方法和系统,利用调制解调器处理器的本地乘法和加法指令。 仔细选择指令排序会导致高度可并行化的指令组,每组中的指令与组中其他指令生成的结果无关。