VIRTUALIZATION OF FILE SYSTEM ENCRYPTION
    1.
    发明申请
    VIRTUALIZATION OF FILE SYSTEM ENCRYPTION 有权
    文件系统加密的虚拟化

    公开(公告)号:US20080165957A1

    公开(公告)日:2008-07-10

    申请号:US11621800

    申请日:2007-01-10

    IPC分类号: H04L9/00 G06F12/14

    CPC分类号: G06F21/6218 G06F2221/2107

    摘要: A computer implemented method, apparatus, and computer program product for using a virtual file system to encrypt files. The process registers a plurality of file systems on a data processing system with the virtual file system. The virtual file system is enabled to encrypt files without intervention from any file system in the plurality of file systems. The virtual file system identifies whether a file on a given file system is an encrypted file using a map file associated with the given file system. In response to identifying the file as an encrypted file, the virtual file system encrypts all data written to the file in accordance with encryption specifications in the map file.

    摘要翻译: 一种用于使用虚拟文件系统加密文件的计算机实现的方法,装置和计算机程序产品。 该过程使用虚拟文件系统在数据处理系统上注册多个文件系统。 启用虚拟文件系统来加密文件,而不需要在多个文件系统中的任何文件系统的干预。 虚拟文件系统识别给定文件系统上的文件是否是使用与给定文件系统相关联的映射文件的加密文件。 响应于将文件识别为加密文件,虚拟文件​​系统根据地图文件中的加密规范加密写入文件的所有数据。

    Virtualization of file system encryption
    2.
    发明授权
    Virtualization of file system encryption 有权
    虚拟化文件系统加密

    公开(公告)号:US07908476B2

    公开(公告)日:2011-03-15

    申请号:US11621800

    申请日:2007-01-10

    IPC分类号: H04L29/06 G06F9/00 G06F12/00

    CPC分类号: G06F21/6218 G06F2221/2107

    摘要: A computer implemented method, apparatus, and computer program product for using a virtual file system to encrypt files. The process registers a plurality of file systems on a data processing system with the virtual file system. The virtual file system is enabled to encrypt files without intervention from any file system in the plurality of file systems. The virtual file system identifies whether a file on a given file system is an encrypted file using a map file associated with the given file system. In response to identifying the file as an encrypted file, the virtual file system encrypts all data written to the file in accordance with encryption specifications in the map file.

    摘要翻译: 一种用于使用虚拟文件系统加密文件的计算机实现的方法,装置和计算机程序产品。 该过程使用虚拟文件系统在数据处理系统上注册多个文件系统。 启用虚拟文件系统来加密文件,而不需要在多个文件系统中的任何文件系统的干预。 虚拟文件系统识别给定文件系统上的文件是否是使用与给定文件系统相关联的映射文件的加密文件。 响应于将文件识别为加密文件,虚拟文件​​系统根据地图文件中的加密规范加密写入文件的所有数据。

    System and computer program product for dynamically resizing file systems
    3.
    发明授权
    System and computer program product for dynamically resizing file systems 有权
    用于动态调整文件系统大小的系统和计算机程序产品

    公开(公告)号:US08402245B2

    公开(公告)日:2013-03-19

    申请号:US13353424

    申请日:2012-01-19

    IPC分类号: G06F12/00

    CPC分类号: G06F17/30147 G06F17/30233

    摘要: Methods (100), systems (300) and computer program products are disclosed for uninterrupted execution of an application program (110). The method (100) comprises: receiving a write operation call to a native file system from an application program (110) being executed on an operating system; and dynamically allocating (120, 122) free data blocks to the native file system from at least one other file system in a group of file systems until completion of execution of the application program (110) thereby completing the write operation call. The group of file systems is configured to allow sharing of free data blocks amongst the group of file systems.

    摘要翻译: 公开了用于应用程序(110)的不间断执行的方法(100),系统(300)和计算机程序产品。 方法(100)包括:从在操作系统上执行的应用程序(110)接收对本机文件系统的写操作调用; 以及从一组文件系统中的至少一个其他文件系统动态地将空闲数据块(120,122)自由分配给本地文件系统,直到完成应用程序(110)的执行,从而完成写操作调用。 文件系统组被配置为允许在文件系统组之间共享空闲数据块。

    System and computer program product for dynamically resizing file systems
    4.
    发明授权
    System and computer program product for dynamically resizing file systems 有权
    用于动态调整文件系统大小的系统和计算机程序产品

    公开(公告)号:US08140807B2

    公开(公告)日:2012-03-20

    申请号:US12031818

    申请日:2008-02-15

    IPC分类号: G06F12/00

    CPC分类号: G06F17/30147 G06F17/30233

    摘要: Methods (100), systems (300) and computer program products are disclosed for uninterrupted execution of an application program (110). The method (100) comprises: receiving a write operation call to a native file system from an application program (110) being executed on an operating system; and dynamically allocating (120, 122) free data blocks to the native file system from at least one other file system in a group of file systems until completion of execution of the application program (110) thereby completing the write operation call. The group of file systems is configured to allow sharing of free data blocks amongst the group of file systems.

    摘要翻译: 公开了用于应用程序(110)的不间断执行的方法(100),系统(300)和计算机程序产品。 方法(100)包括:从在操作系统上执行的应用程序(110)接收对本机文件系统的写操作调用; 以及从一组文件系统中的至少一个其他文件系统动态地将空闲数据块(120,122)自由分配给本地文件系统,直到完成应用程序(110)的执行,从而完成写操作调用。 文件系统组被配置为允许在文件系统组之间共享空闲数据块。

    METHOD FOR DYNAMICALLY RESIZING FILE SYSTEMS
    5.
    发明申请
    METHOD FOR DYNAMICALLY RESIZING FILE SYSTEMS 审中-公开
    用于动态校正文件系统的方法

    公开(公告)号:US20090210647A1

    公开(公告)日:2009-08-20

    申请号:US12031778

    申请日:2008-02-15

    IPC分类号: G06F12/00

    CPC分类号: G06F16/1737 G06F16/188

    摘要: Methods (100), systems (300) and computer program products are disclosed for uninterrupted execution of an application program (110). The method (100) comprises: receiving a write operation call to a native file system from an application program (110) being executed on an operating system; and dynamically allocating (120, 122) free data blocks to the native file system from at least one other file system in a group of file systems until completion of execution of the application program (110) thereby completing the write operation call. The group of file systems is configured to allow sharing of free data blocks amongst the group of file systems.

    摘要翻译: 公开了用于应用程序(110)的不间断执行的方法(100),系统(300)和计算机程序产品。 方法(100)包括:从在操作系统上执行的应用程序(110)接收对本机文件系统的写操作调用; 以及从一组文件系统中的至少一个其他文件系统动态地将空闲数据块(120,122)自由分配给本地文件系统,直到完成应用程序(110)的执行,从而完成写操作调用。 文件系统组被配置为允许在文件系统组之间共享空闲数据块。

    SYSTEM AND COMPUTER PROGRAM PRODUCT FOR DYNAMICALLY RESIZING FILE SYSTEMS
    6.
    发明申请
    SYSTEM AND COMPUTER PROGRAM PRODUCT FOR DYNAMICALLY RESIZING FILE SYSTEMS 有权
    用于动态调整文件系统的系统和计算机程序产品

    公开(公告)号:US20090210648A1

    公开(公告)日:2009-08-20

    申请号:US12031818

    申请日:2008-02-15

    IPC分类号: G06F12/00

    CPC分类号: G06F17/30147 G06F17/30233

    摘要: Methods (100), systems (300) and computer program products are disclosed for uninterrupted execution of an application program (110). The method (100) comprises: receiving a write operation call to a native file system from an application program (110) being executed on an operating system; and dynamically allocating (120, 122) free data blocks to the native file system from at least one other file system in a group of file systems until completion of execution of the application program (110) thereby completing the write operation call. The group of file systems is configured to allow sharing of free data blocks amongst the group of file systems.

    摘要翻译: 公开了用于应用程序(110)的不间断执行的方法(100),系统(300)和计算机程序产品。 方法(100)包括:从在操作系统上执行的应用程序(110)接收对本机文件系统的写操作调用; 以及从一组文件系统中的至少一个其他文件系统动态地将空闲数据块(120,122)自由分配给本地文件系统,直到完成应用程序(110)的执行,从而完成写操作调用。 文件系统组被配置为允许在文件系统组之间共享空闲数据块。

    SYSTEM AND COMPUTER PROGRAM PRODUCT FOR DYNAMICALLY RESIZING FILE SYSTEMS
    7.
    发明申请
    SYSTEM AND COMPUTER PROGRAM PRODUCT FOR DYNAMICALLY RESIZING FILE SYSTEMS 有权
    用于动态调整文件系统的系统和计算机程序产品

    公开(公告)号:US20120124108A1

    公开(公告)日:2012-05-17

    申请号:US13353424

    申请日:2012-01-19

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30147 G06F17/30233

    摘要: Methods (100), systems (300) and computer program products are disclosed for uninterrupted execution of an application program (110). The method (100) comprises: receiving a write operation call to a native file system from an application program (110) being executed on an operating system; and dynamically allocating (120, 122) free data blocks to the native file system from at least one other file system in a group of file systems until completion of execution of the application program (110) thereby completing the write operation call. The group of file systems is configured to allow sharing of free data blocks amongst the group of file systems.

    摘要翻译: 公开了用于应用程序(110)的不间断执行的方法(100),系统(300)和计算机程序产品。 方法(100)包括:从在操作系统上执行的应用程序(110)接收对本机文件系统的写操作调用; 以及从一组文件系统中的至少一个其他文件系统动态地将空闲数据块(120,122)自由分配给本地文件系统,直到完成应用程序(110)的执行,从而完成写操作调用。 文件系统组被配置为允许在文件系统组之间共享空闲数据块。

    Providing programming support to debuggers
    8.
    发明授权
    Providing programming support to debuggers 有权
    为调试器提供编程支持

    公开(公告)号:US08826244B2

    公开(公告)日:2014-09-02

    申请号:US13431391

    申请日:2012-03-27

    CPC分类号: G06F11/3644

    摘要: Method for providing programming support to a debugger are disclosed. The method includes defining at least one debugger programming statement, and instructing the debugger to execute the at least one debugger programming statement which modifies a least a portion of the computer program during execution of the computer program without recompiling the computer program. The debugger may be instructed to execute the at least one debugger programming statement at a specified position of the computer program. The at least one debugger programming statement may include a delete instruction that instructs the debugger to prevent one or more programming statements at a specified position in the computer program from being executed. The debugger may be instructed to execute the at least one debugger programming statement instead of one or more programming statements at a specified position in the computer program without recompiling the computer program.

    摘要翻译: 公开了一种向调试器提供编程支持的方法。 该方法包括定义至少一个调试器编程语句,并且指示调试器执行至少一个调试器编程语句,其在执行计算机程序期间修改计算机程序的至少一部分而不重新编译计算机程序。 可以指示调试器在计算机程序的指定位置执行至少一个调试器编程语句。 所述至少一个调试器编程语句可以包括指令调试器防止在计算机程序中的指定位置处的一个或多个编程语句被执行的删除指令。 可以指示调试器在计算机程序中的指定位置执行至少一个调试器编程语句而不是一个或多个编程语句,而不重新编译计算机程序。

    DOMAIN BASED USER MAPPING OF OBJECTS
    9.
    发明申请
    DOMAIN BASED USER MAPPING OF OBJECTS 审中-公开
    基于域的用户映射对象

    公开(公告)号:US20130046720A1

    公开(公告)日:2013-02-21

    申请号:US13212024

    申请日:2011-08-17

    IPC分类号: G06N5/02

    CPC分类号: G06N5/02

    摘要: According to one aspect of the present disclosure, a method and technique for domain based user mapping of objects is disclosed. The method includes: responsive to determining that an operation is being attempted on an object identified with an object identifier, determining a domain identifier associated with a user attempting the operation; determining whether the operation can proceed on the object based on domain isolation rules, the domain isolation rules indicating rules for allowing or disallowing operations to proceed on objects based on object identifiers and domain identifiers; responsive to determining that the operation on the object can proceed based on the domain isolation rules, accessing user mapping rules that map specified users allowed to perform a specified operation to a specified object; and determining whether the operation can proceed on the object by the user based on the user mapping rules.

    摘要翻译: 根据本公开的一个方面,公开了一种用于对象的基于域的用户映射的方法和技术。 该方法包括:响应于确定对由对象标识符标识的对象正在尝试操作,确定与尝试该操作的用户相关联的域标识符; 确定操作是否可以基于域隔离规则对对象进行,域隔离规则指示允许或不允许基于对象标识符和域标识符对对象进行操作的规则; 响应于基于域隔离规则确定对对象的操作可以进行,访问允许对指定对象执行指定操作的指定用户的用户映射规则; 以及基于所述用户映射规则确定所述操作是否可以由所述用户对所述对象进行。

    Managing Memory
    10.
    发明申请
    Managing Memory 失效
    管理记忆

    公开(公告)号:US20110125812A1

    公开(公告)日:2011-05-26

    申请号:US12623738

    申请日:2009-11-23

    IPC分类号: G06F12/02 G06F12/00

    CPC分类号: G06F12/0284 G06F9/45537

    摘要: Methods, systems, and products for managing memory. In one general embodiment, the method includes assigning an isolated virtual heap in a global kernel heap of a global operating system environment to each of a plurality of isolated virtual operating system environments operating in a global operating system environment; and in response to an invocation of kernel heap memory allocation from one of the isolated virtual operating system environments, dynamically allocating memory to the invoking isolated virtual operating system environment from the virtual kernel heap assigned to the invoking isolated virtual operating system environment. The method may also include running the plurality of isolated virtual operating system environments in the global operating system environment. The plurality of isolated virtual operating system environments may share a single common kernel. The isolated virtual operating system environments may run under the same operating system image.

    摘要翻译: 用于管理内存的方法,系统和产品。 在一个一般实施例中,该方法包括将全局操作系统环境的全局内核堆中的隔离的虚拟堆分配给在全局操作系统环境中操作的多个孤立的虚拟操作系统环境中的每一个; 并且响应于从隔离的虚拟操作系统环境之一调用内核堆内存分配,从分配给调用的隔离虚拟操作系统环境的虚拟内核堆中动态地将内存分配给调用的隔离虚拟操作系统环境。 该方法还可以包括在全局操作系统环境中运行多个隔离的虚拟操作系统环境。 多个隔离的虚拟操作系统环境可以共享单个公共内核。 隔离的虚拟操作系统环境可以在相同的操作系统映像下运行。