Method and apparatus for improving computer security
    1.
    发明申请
    Method and apparatus for improving computer security 审中-公开
    提高计算机安全性的方法和装置

    公开(公告)号:US20060090085A1

    公开(公告)日:2006-04-27

    申请号:US10971258

    申请日:2004-10-23

    IPC分类号: G06F12/14

    CPC分类号: G06F21/86 G06F2221/2143

    摘要: Indicating when the cover for a computer chassis has been opened is disclosed. A computer of an embodiment of the invention includes a chassis and a basic input/output system (BIOS), or another type of firmware. The chassis has an openable cover, and circuitry indicating when the openable cover has been opened. The BIOS has a non-volatile memory in which a flag is set when the circuitry indicates that the openable cover has been opened. The computer may further include always-on circuitry, such as time-of-day and real-time clock circuitry, to which the circuitry indicating when the openable cover has been opened is electrically connected. The computer may also include one or more encryption and/or signing modules that encrypt and/or sign data according to one or more keys. The keys are rendered invalid when the cover of the chassis has been opened.

    摘要翻译: 指出计算机机壳盖何时已打开。 本发明实施例的计算机包括底盘和基本输入/输出系统(BIOS)或其他类型的固件。 机箱具有可打开的盖子,电路指示何时打开盖子。 BIOS具有非易失性存储器,当电路指示可打开的盖已经打开时,其中标志被置位。 计算机可以进一步包括始终在线的电路,例如时间和实时时钟电路,电路指示何时可打开的盖已经被打开。 计算机还可以包括根据一个或多个密钥加密和/或签署数据的一个或多个加密和/或签名模块。 当机箱的盖子打开时,钥匙将无效。

    Method and Apparatus for Maintaining Data Integrity When Switching Between Different Data Protection Methods
    2.
    发明申请
    Method and Apparatus for Maintaining Data Integrity When Switching Between Different Data Protection Methods 审中-公开
    在不同的数据保护方法之间切换时保持数据完整性的方法和装置

    公开(公告)号:US20070271468A1

    公开(公告)日:2007-11-22

    申请号:US11381767

    申请日:2006-05-05

    IPC分类号: G06F12/14

    CPC分类号: G06F11/1004

    摘要: A method and apparatus are provided for maintaining data integrity when switching between data protection methods. Data and a first protection type information are received. A second protection type information is generated. After generating the second protection type information, the data is checked using the first protection type information. An error indication is generated when the first protection type information check fails.

    摘要翻译: 提供了一种在数据保护方法之间切换时保持数据完整性的方法和装置。 接收数据和第一保护类型信息。 生成第二保护类型信息。 在生成第二保护类型信息之后,使用第一保护类型信息检查数据。 当第一保护类型信息检查失败时,生成错误指示。

    Utilizing hardware transactional approach to execute code after initially utilizing software locking by employing pseudo-transactions
    3.
    发明申请
    Utilizing hardware transactional approach to execute code after initially utilizing software locking by employing pseudo-transactions 审中-公开
    在最初利用伪交易软件锁定后,利用硬件事务处理方式执行代码

    公开(公告)号:US20070198521A1

    公开(公告)日:2007-08-23

    申请号:US11738502

    申请日:2007-04-22

    申请人: Paul McKenney

    发明人: Paul McKenney

    IPC分类号: G06F17/30

    摘要: Utilizing a hardware transactional approach to execute a code section by employing pseudo-transactions, after initially utilizing software locking, is disclosed. A method is disclosed that utilizes a software approach to locking memory to execute a code section relating to memory. The software approach employs a pseudo-transaction to determine whether a hardware approach to transactional memory to execute the threshold would have been successful. Where the hardware approach to transactional memory to execute the code section satisfies a threshold based on success of at least the pseudo-transaction, the method subsequently utilizes the hardware approach to execute the code section. The hardware approach may include starting a transaction inclusive of the code section, conditionally executing the transaction, and, upon successfully completing the transaction, committing execution of the transaction to the memory to which the code section relates.

    摘要翻译: 在最初利用软件锁定之后,利用硬件事务方法来执行伪代码执行代码段。 公开了一种利用软件方法锁定存储器来执行与存储器相关的代码部分的方法。 软件方法采用伪事务来确定执行阈值的事务内存的硬件方法是否已经成功。 在执行代码段的事务存储器的硬件​​方法基于至少伪事务的成功来满足阈值的情况下,该方法随后利用硬件方法来执行代码段。 硬件方法可以包括开始包括代码段的事务,有条件地执行事务,并且在成功完成事务之后,将事务的执行提交到与代码段相关的存储器。

    Atomic renaming and moving of data files while permitting lock-free look-ups
    4.
    发明申请
    Atomic renaming and moving of data files while permitting lock-free look-ups 失效
    在允许无锁查询的同时重新命名和移动数据文件

    公开(公告)号:US20070198520A1

    公开(公告)日:2007-08-23

    申请号:US11738501

    申请日:2007-04-22

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30067

    摘要: Atomic renaming and moving of data files, while permitting lock-free look-ups to the data files, is disclosed. A temporary record may be created within a hash chain encompassing a record for a data file and corresponding to a location of the data file within a computer file system. The temporary record is linked within the hash chain so that the temporary record points to the same records to which the record for the data file points. The record for the data file is renamed with a new name, and/or moved to a new location within the computer file system, and the temporary record is removed from the hash chain. Before the temporary record is removed, look-ups of the data file resolve to the temporary record, the temporary record causing the look-ups to wait until the record for the data file has been renamed and/or moved and the temporary record removed.

    摘要翻译: 公开了原始重命名和移动数据文件,同时允许对数据文件进行无锁查找。 可以在包含数据文件的记录并且对应于计算机文件系统内的数据文件的位置的散列链内创建临时记录。 临时记录在散列链中链接,以便临时记录指向数据文件记录指向的相同记录。 数据文件的记录用新名称重命名,和/或移动到计算机文件系统中的新位置,临时记录从哈希链中删除。 在删除临时记录之前,数据文件的查找将解析为临时记录,导致查找的临时记录等待直到数据文件的记录已被重命名和/或移动,并删除临时记录。

    Realtime-safe read copy update with per-processor read/write locks
    5.
    发明申请
    Realtime-safe read copy update with per-processor read/write locks 有权
    实时安全阅读复制更新与每处理器读/写锁

    公开(公告)号:US20070101071A1

    公开(公告)日:2007-05-03

    申请号:US11264580

    申请日:2005-11-01

    申请人: Paul McKenney

    发明人: Paul McKenney

    IPC分类号: G06F12/14

    CPC分类号: G06F9/526 G06F2209/523

    摘要: A technique for realtime-safe detection of a grace period for deferring the destruction of a shared data element until pre-existing references to the data element have been removed. A per-processor read/write lock is established for each of one or more processors. When reading a shared data element at a processor, the processor's read/write lock is acquired for reading, the shared data element is referenced, and the read/write lock that was acquired for reading is released. When starting a new grace period, all of the read/write locks are acquired for writing, a new grace period is started, and all of the read/write locks are released.

    摘要翻译: 实时安全检测宽限期延迟破坏共享数据元素的技术直到已经删除对数据元素的引用。 针对一个或多个处理器中的每一个建立每处理器读/写锁。 当处理器读取共享数据元素时,获取处理器的读/写锁定用于读取,引用共享数据元素,并释放为获取读取而获取的读/写锁。 当开始一个新的宽限期时,所有的读取/写入锁都是为写入而获取的,一个新的宽限期开始,所有的读/写锁都被释放。

    Enhancement of real-time operating system functionality using a hypervisor
    6.
    发明申请
    Enhancement of real-time operating system functionality using a hypervisor 审中-公开
    使用管理程序增强实时操作系统功能

    公开(公告)号:US20050251806A1

    公开(公告)日:2005-11-10

    申请号:US10842281

    申请日:2004-05-10

    IPC分类号: G06F9/455 G06F9/46 G06F9/48

    摘要: A system, method and computer program product for enhancing a real-time operating system (RTOS) with functionality normally associated with a general purpose operating system (GPOS). A hypervisor that is adapted to perform a real-time scheduling function supports concurrent execution of an RTOS and a GPOS on a system of shared hardware resources. The RTOS or its applications can utilize services provided by the GPOS. Such services may include one or more of file system organization, network communication, network management, database management, security, user-interface support and others. To enhance operational robustness and security, the hypervisor can be placed in read-only storage while maintaining the ability to update scheduling mechanisms. A programmable policy manager that is maintained in read-write storage can be used to dictate scheduling policy changes to the hypervisor as required to accommodate current needs.

    摘要翻译: 一种用于增强具有通常与通用操作系统(GPOS)相关联的功能的实时操作系统(RTOS)的系统,方法和计算机程序产品。 适用于执行实时调度功能的虚拟机管理程序支持共享硬件资源系统上的RTOS和GPOS的并发执行。 RTOS或其应用程序可以利用GPOS提供的服务。 这样的服务可以包括文件系统组织,网络通信,网络管理,数据库管理,安全性,用户界面支持等中的一个或多个。 为了增强运营的鲁棒性和安全性,管理程序可以放置在只读存储中,同时保持更新调度机制的能力。 维护在读写存储器中的可编程策略管理器可用于根据需要来规定对管理程序的调度策略更改以适应当前需求。

    ATOMICALLY MOVING LIST ELEMENTS BETWEEN LISTS USING READ-COPY UPDATE
    7.
    发明申请
    ATOMICALLY MOVING LIST ELEMENTS BETWEEN LISTS USING READ-COPY UPDATE 失效
    使用阅读复制更新列表之间移动列表元素

    公开(公告)号:US20080033952A1

    公开(公告)日:2008-02-07

    申请号:US11870668

    申请日:2007-10-11

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30958

    摘要: A system, method and computer program product for atomically moving a shared list element from a first list location to a second list location includes inserting a placeholder element at the second list location to signify to readers that a move operation is underway, removing the shared list element from the first list location, re-identifying the list element to reflect its move from the first list location to the second list location, inserting it at the second list location and unlinking the placeholder element. A deferred removal of the placeholder element is performed following a period in which readers can no longer maintain references thereto. A method, system and computer program product are additionally provided for performing a lookup of a target list element that is subject to being atomically moved from a first list to a second list.

    摘要翻译: 用于将共享列表元素从第一列表位置原子地移动到第二列表位置的系统,方法和计算机程序产品包括在第二列表位置插入占位符元素以向读者指示正在进行移动操作,删除共享列表 元素从第一列表位置重新识别列表元素以反映其从第一列表位置移动到第二列表位置,将其插入到第二列表位置并取消链接占位符元素。 延迟删除占位符元素是在阅读器不再保留对其的引用的时间段之后执行的。 另外提供了一种方法,系统和计算机程序产品,用于执行将被从第一列表原子地移动到第二列表的目标列表元素的查找。

    Adapting RCU for Real-Time Operating System Usage
    9.
    发明申请
    Adapting RCU for Real-Time Operating System Usage 失效
    适应RCU实时操作系统使用

    公开(公告)号:US20070266209A1

    公开(公告)日:2007-11-15

    申请号:US11778691

    申请日:2007-07-17

    IPC分类号: G06F12/00

    CPC分类号: G06F9/5016

    摘要: A system and method is provided to support immediate freeing of a designated element from memory. Following a process of designating an element for removal from a data-structure, conditional limitations are used to determine if immediate freeing of the element from memory is available. The conditional limitations include determining that the instruction originates from a uniprocessor computer system. In addition, the conditional limitations include a determination as to whether a call_rcu primitive or synchronize_kernel primitive may be omitted, or whether the computer implemented instruction is operating in an interrupt handler. If the conditional limitations are met, the designated element may be immediately freed from memory.

    摘要翻译: 提供了一种系统和方法来支持从存储器中立即释放指定元素。 在指定用于从数据结构中移除的元素的过程之后,使用条件限制来确定元素是否从存储器中立即释放。 条件限制包括确定该指令源于单处理器计算机系统。 此外,条件限制包括关于是否可以省略call_rcu原语或synchronize_kernel原语,或者计算机实现的指令是否在中断处理程序中操作的确定。 如果满足条件限制,则可以立即将指定的元素从内存中释放出来。

    Using vector processors to accelerate cache lookups
    10.
    发明申请
    Using vector processors to accelerate cache lookups 失效
    使用向量处理器来加速缓存查找

    公开(公告)号:US20060288151A1

    公开(公告)日:2006-12-21

    申请号:US11153048

    申请日:2005-06-15

    申请人: Paul McKenney

    发明人: Paul McKenney

    IPC分类号: G06F12/08 G06F12/00

    CPC分类号: G06F12/1063

    摘要: Typical embodiments of the present invention maintain the cache metadata in arrays, and use vector instructions to process the array elements in parallel. The cache metadata comprises virtual tags corresponding to main memory addresses and physical addresses corresponding to cache memory addresses. The virtual tags and physical addresses may be interleaved in a single array in the cache memory. Alternately, virtual tags and physical addresses may be maintained in corresponding separate arrays. A roving pointer may be used to identify the next block to be ejected from the cache memory.

    摘要翻译: 本发明的典型实施例将高速缓存元数据保持在数组中,并且使用向量指令并行处理数组元素。 高速缓存元数据包括对应于主存储器地址的虚拟标签和对应于高速缓冲存储器地址的物理地址。 虚拟标签和物理地址可以在高速缓冲存储器中的单个阵列中交错。 或者,可以将虚拟标签和物理地址保持在相应的单独的阵列中。 漫游指针可用于标识要从高速缓冲存储器弹出的下一个块。