Dynamic execution prevention to inhibit return-oriented programming
    5.
    发明授权
    Dynamic execution prevention to inhibit return-oriented programming 有权
    动态执行预防以禁止面向回归的编程

    公开(公告)号:US08776223B2

    公开(公告)日:2014-07-08

    申请号:US13351006

    申请日:2012-01-16

    IPC分类号: G06F21/00

    CPC分类号: G06F21/54

    摘要: A method, apparatus, and/or system for execution prevention is provided. A state indicator for a first subset of a plurality of memory pages of executable code in a memory device is set to a non-executable state. A state indicator for a second subset of the plurality of memory pages is set to an executable state, where the second subset of the plurality of memory pages includes indirection stubs to functions in the first subset of the plurality of memory pages. Upon execution of an application, a function call is directed to a corresponding indirection stub in the second subset of the plurality of memory pages which modifies the state indicator for a corresponding function in the first subset of the plurality of memory pages prior to directing execution of the called function from the first subset of the plurality of memory pages.

    摘要翻译: 提供了用于执行预防的方法,装置和/或系统。 用于存储器设备中的可执行代码的多个存储器页的第一子集的状态指示符被设置为不可执行状态。 多个存储器页的第二子集的状态指示符被设置为可执行状态,其中多个存储器页的第二子集包括多个存储器页的第一子集中的功能的间接存根。 在执行应用程序时,将功能调用定向到多个存储器页面的第二子集中的对应的间接存根,其在指导执行之前修改多个存储器页的第一子集中的相应功能的状态指示符 来自多个存储器页的第一子集的被调用函数。

    Authentication of access terminal identities in roaming networks
    6.
    发明授权
    Authentication of access terminal identities in roaming networks 有权
    漫游网络中接入终端身份认证

    公开(公告)号:US09112905B2

    公开(公告)日:2015-08-18

    申请号:US13243185

    申请日:2011-09-23

    摘要: Various methods of authenticating an access terminal are presented in the case where the access terminal is roaming within a visited network. An access terminal sends a device authentication message to a visited validation server or a home validation server, where the device authentication message includes an access terminal identifier and authentication data generated at least in part using the validation key. In some embodiments, the authentication data may include a digital signature by a validation key associated with the access terminal identifier. Such a signature can be authenticated by either the visited validation server or the home validation server. In other embodiments, the authentication data may include an access terminal authentication token sent to the visited validation server. The visited validation server can authenticate the device authentication message by comparing the access terminal authentication token with an access terminal authentication token obtained from the home validation server.

    摘要翻译: 在接入终端在被访问网络内漫游的情况下,呈现鉴别接入终端的各种方法。 接入终端向被访问的验证服务器或家庭验证服务器发送设备认证消息,其中设备认证消息包括接入终端标识符和至少部分地使用验证密钥生成的认证数据。 在一些实施例中,认证数据可以包括通过与接入终端标识符相关联的验证密钥的数字签名。 访问验证服务器或归属验证服务器可以对这样的签名进行身份验证。 在其他实施例中,认证数据可以包括发送到访问验证服务器的接入终端认证令牌。 所访问的验证服务器可以通过将接入终端认证令牌与从家庭验证服务器获得的接入终端认证令牌进行比较来认证设备认证消息。

    DYNAMIC EXECUTION PREVENTION TO INHIBIT RETURN-ORIENTED PROGRAMMING
    8.
    发明申请
    DYNAMIC EXECUTION PREVENTION TO INHIBIT RETURN-ORIENTED PROGRAMMING 有权
    动态执行防止禁止面向方面的编程

    公开(公告)号:US20130185792A1

    公开(公告)日:2013-07-18

    申请号:US13351006

    申请日:2012-01-16

    IPC分类号: G06F21/00

    CPC分类号: G06F21/54

    摘要: A method, apparatus, and/or system for execution prevention is provided. A state indicator for a first subset of a plurality of memory pages of executable code in a memory device is set to a non-executable state. A state indicator for a second subset of the plurality of memory pages is set to an executable state, where the second subset of the plurality of memory pages includes indirection stubs to functions in the first subset of the plurality of memory pages. Upon execution of an application, a function call is directed to a corresponding indirection stub in the second subset of the plurality of memory pages which modifies the state indicator for a corresponding function in the first subset of the plurality of memory pages prior to directing execution of the called function from the first subset of the plurality of memory pages.

    摘要翻译: 提供了用于执行预防的方法,装置和/或系统。 用于存储器设备中的可执行代码的多个存储器页的第一子集的状态指示符被设置为不可执行状态。 多个存储器页的第二子集的状态指示符被设置为可执行状态,其中多个存储器页的第二子集包括多个存储器页的第一子集中的功能的间接存根。 在执行应用程序时,将功能调用定向到多个存储器页面的第二子集中的对应的间接存根,其在指导执行之前修改多个存储器页的第一子集中的相应功能的状态指示符 来自多个存储器页的第一子集的被调用函数。

    Facilitating access control in peer-to-peer overlay networks
    9.
    发明授权
    Facilitating access control in peer-to-peer overlay networks 有权
    促进对等覆盖网络中的访问控制

    公开(公告)号:US08880880B2

    公开(公告)日:2014-11-04

    申请号:US13194812

    申请日:2011-07-29

    IPC分类号: H04L29/06 H04L29/08

    摘要: Methods and apparatuses are provided for facilitating access controls for digital objects stored within a peer-to-peer overlay network. A privacy-preserving method is provided for matching identities between a first peer node and a second peer node in a peer-to-peer network. Such identity matching may be used, for example, to ascertain whether the first peer node should provide access to certain digital object stored in the peer-to-peer overlay network. Rather than providing its identities in an unprotected format, the second peer may provide its identities to the first peer node in a concealed representation so as to prevent the first peer from learning about non-matching identities. Such concealed representation may be a data structure that cryptographically conceals one or more identities of the second peer node or a user of the second peer node within a shared data space of the data structure.

    摘要翻译: 提供了方法和装置,以便于存储在对等覆盖网络内的数字对象的访问控制。 提供了一种隐私保护方法,用于匹配对等网络中的第一对等节点和第二对​​等节点之间的身份。 例如,可以使用这种身份匹配来确定第一对等节点是否应提供对存储在对等覆盖网络中的某些数字对象的访问。 第二对等体可以以不受保护的格式提供其身份,而不是以隐藏的表示形式向第一对等节点提供其身份,以防止第一对等体学习不匹配的身份。 这种隐藏的表示可以是在数据结构的共享数据空间内加密地隐藏第二对等节点或第二对等节点的用户的一个或多个身份的数据结构。

    GENDER DETECTION IN MOBILE PHONES
    10.
    发明申请
    GENDER DETECTION IN MOBILE PHONES 有权
    移动电话中的性别检测

    公开(公告)号:US20110153317A1

    公开(公告)日:2011-06-23

    申请号:US12645831

    申请日:2009-12-23

    申请人: Yinian Mao Gene Marsh

    发明人: Yinian Mao Gene Marsh

    IPC分类号: G10L11/06 G10L17/00 G10L11/04

    摘要: An apparatus for wireless communications includes a processing system. The processing system is configured to receive an input sound stream of a user, split the input sound stream into a plurality of frames, classify each of the frames as one selected from the group consisting of a non-speech frame and a speech frame, determine a pitch of each of the frames in a subset of the speech frames, and identify a gender of the user from the determined pitch. To determine the pitch, the processing system is configured to filter the speech frames to compute an error signal, compute an autocorrelation of the error signal, find a maximum autocorrelation value, and set the pitch to an index of the maximum autocorrelation value.

    摘要翻译: 一种用于无线通信的装置包括处理系统。 处理系统被配置为接收用户的输入声音流,将输入声音流分割成多个帧,将每个帧分类为从由非语音帧和语音帧组成的组中选择的一个,确定 在语音帧的子集中的每个帧的音高,并且从所确定的音调识别用户的性别。 为了确定音调,处理系统被配置为过滤语音帧以计算误差信号,计算误差信号的自相关,找到最大自相关值,并将音高设置为最大自相关值的索引。