利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

29 条记录 (耗时 0.033 秒)

    Automated management of virtual machines to process untrusted data based on client policy information
    5.
    发明授权
    Automated management of virtual machines to process untrusted data based on client policy information 有权
    根据客户端策略信息自动管理虚拟机以处理不受信任的数据

    公开(公告)号：US08752047B2

    公开(公告)日：2014-06-10

    申请号：US13223091

    申请日：2011-08-31

    申请人： Gaurav Banga ,  Kiran Bondalapati ,  Ian Pratt ,  Vikram Kapoor

    发明人： Gaurav Banga ,  Kiran Bondalapati ,  Ian Pratt ,  Vikram Kapoor

    IPC分类号： G06F9/455 ,  G06F9/44 ,  G06F21/00

    CPC分类号： G06F9/45533 ,  G06F9/45558 ,  G06F9/5077 ,  G06F21/53 ,  G06F2009/45587

    摘要： Approaches for transferring data to a client by safely receiving the data in or more virtual machines. In response to the client determining that digital content, originating from an external source, is to be received or processed by the client, the client identifies, without human intervention, one or more virtual machines, executing or to be executed on the client, into which the digital content is to be stored. In doing so, the client may consult policy data to determine a placement policy, a containment policy, and a persistence policy for any virtual machine to receive the digital content. In this way, digital content, such as executable code or interpreted data, of unknown trustworthiness may be safely received by the client without the possibility of any malicious code therein from affecting any undesirable consequence upon the client.

    摘要翻译： 通过在或多个虚拟机中安全接收数据来将数据传输到客户端的方法。 响应于客户端确定来自外部源的数字内容将被客户端接收或处理，客户端在没有人为干预的情况下识别一个或多个虚拟机，在客户机上执行或执行， 数字内容将被存储。 在这样做时，客户端可以查询策略数据以确定放置策略，收容策略和任何虚拟机接收数字内容的持久性策略。 以这种方式，客户端可以安全地接收到具有未知可信度的数字内容，例如可执行代码或解释数据，而不存在任何恶意代码在客户端上不会产生任何不良后果的可能性。

    APPROACHES FOR SECURING AN INTERNET ENDPOINT USING FINE-GRAINED OPERATING SYSTEM VIRTUALIZATION
    6.
    发明申请
    APPROACHES FOR SECURING AN INTERNET ENDPOINT USING FINE-GRAINED OPERATING SYSTEM VIRTUALIZATION 有权
    使用精细操作系统虚拟化来保护互联网端点的方法

    公开(公告)号：US20110296412A1

    公开(公告)日：2011-12-01

    申请号：US13115354

    申请日：2011-05-25

    申请人： Gaurav Banga ,  Ian Pratt ,  Kiran Bondalapati ,  Vikram Kapoor

    发明人： Gaurav Banga ,  Ian Pratt ,  Kiran Bondalapati ,  Vikram Kapoor

    IPC分类号： G06F9/455

    CPC分类号： G06F9/5077 ,  G06F9/45545 ,  G06F9/5027 ,  G06F2009/45562 ,  G06F2009/45587 ,  G06F2209/5018

    摘要： Approaches for executing untrusted software on a client without compromising the client using micro-virtualization to execute untrusted software in isolated contexts. A template for instantiating a virtual machine on a client is identified in response to receiving a request to execute an application. After the template is identified, without human intervention, a virtual machine is instantiated, using the template, in which the application is to be executed. The template may be selected from a plurality of templates based on the nature of the request, as each template describe characteristics of a virtual machine suitable for a different type of activity. Selected resources such as files are displayed to the virtual machines according to user and organization policies and controls. When the client determines that the application has ceased to execute, the client ceases execution of the virtual machine without human intervention.

    摘要翻译： 在客户端上执行不受信任的软件的方法，而不会在使用微型虚拟化的情况下使用独立的上下文来执行不受信任的软件。 响应于接收到执行应用的请求，识别用于在客户机上实例化虚拟机的模板。 在模板被识别之后，没有人为干预，就会使用要在其中执行应用程序的模板来实例化一个虚拟机。 可以基于请求的性质从多个模板中选择模板，因为每个模板描述适合于不同类型活动的虚拟机的特征。 所选资源（如文件）将根据用户和组织策略和控件显示给虚拟机。 当客户端确定应用程序已停止执行时，客户端将在不进行人为干预的情况下停止执行虚拟机。

    Synchronizing resources of a virtualized browser
    7.
    发明授权
    Synchronizing resources of a virtualized browser 有权

    公开(公告)号：US10095662B1

    公开(公告)日：2018-10-09

    申请号：US13526409

    申请日：2012-06-18

    申请人： Kiran Bondalapati ,  Vikram Kapoor ,  Prakash Buddhiraja ,  Gaurav Banga ,  Ian Pratt

    发明人： Kiran Bondalapati ,  Vikram Kapoor ,  Prakash Buddhiraja ,  Gaurav Banga ,  Ian Pratt

    IPC分类号： G06F17/21

    摘要： Approaches for synchronizing resources of a virtualized web browser. When a virtualized web browser is instructed to display a web page, a host module executing within a host operating instructs retrieves, from each of one or more virtual machines, contents for a portion of the web page. The virtualized web browser assembles the contents and displays the web page. A web browser executing in the host operating system may, but need not, retrieve any of the content displayed thereby. Instead, the content retrieved by the web browser executing in the host operating system may be retrieved by and rendered within a virtual machine. The behavior of the virtualized web browser may be configured using policy data.

    Intelligent micro-virtual machine scheduling
    10.
    发明授权
    Intelligent micro-virtual machine scheduling 有权
    智能微虚机调度

    公开(公告)号：US09244705B1

    公开(公告)日：2016-01-26

    申请号：US13527542

    申请日：2012-06-19

    申请人： Kiran Bondalapati ,  Gaurav Banga ,  Vikram Kapoor ,  Ian Pratt

    发明人： Kiran Bondalapati ,  Gaurav Banga ,  Vikram Kapoor ,  Ian Pratt

    IPC分类号： G06F9/46 ,  G06F9/455

    CPC分类号： G06F9/45504 ,  G06F9/45545 ,  G06F9/45558 ,  G06F9/5027 ,  G06F9/5077 ,  G06F2009/45562 ,  G06F2009/45587 ,  G06F2209/5018

    摘要： Programmatically adjusting the operational state of one or more virtual machines based on policy. Resource consumption on a hardware device is monitored. A policy that considers at least a present level of resource consumption and an amount of available resources of the hardware device is consulted. An operational state of a particular virtual machine that resides on the hardware device is changed. The change in operational state may be performed to optimize performance of a virtual machine with which a user is interacting, to enforce behavior constraints upon the virtual machine, or to adjust its execution in view of the available resources on the device.

    摘要翻译： 基于策略以编程方式调整一个或多个虚拟机的运行状态。 监视硬件设备上的资源消耗。 参考至少考虑了目前的资源消耗水平和硬件设备的可用资源量的策略。 驻留在硬件设备上的特定虚拟机的操作状态发生变化。 可以执行操作状态的改变以优化用户正在交互的虚拟机的性能，以强制对虚拟机的行为约束，或者根据设备上的可用资源调整其执行。