公开(公告)号：US06453467B2

公开(公告)日：2002-09-17

申请号：US09726609

申请日：2000-12-01

申请人： Peter W. Madany ,  Richard Tuck ,  Nedim Fresko

发明人： Peter W. Madany ,  Richard Tuck ,  Nedim Fresko

IPC分类号： G06F944

CPC分类号： G06F9/445 ,  G06F8/54

摘要： A linkage editor executing at a server receives instructions for packaging software components that are required for program execution at a client. The linkage editor generates an output file by iteratively analyzing the program for references to other software components and extracting those components from their parent classes. The linkage editor sends the completed output file to an interface task, which transmits it to the client.

摘要翻译： 在服务器上执行的连接编辑器接收用于打包在客户端执行程序所需的软件组件的指令。 链接编辑器通过迭代地分析程序来引用其他软件组件并从其父类中提取这些组件来生成输出文件。 链接编辑器将完成的输出文件发送到接口任务，将其发送给客户端。

公开(公告)号：US06493870B1

公开(公告)日：2002-12-10

申请号：US09044900

申请日：1998-03-20

申请人： Peter W. Madany ,  Richard Tuck ,  Nedim Fresko ,  Hania Gajewska

发明人： Peter W. Madany ,  Richard Tuck ,  Nedim Fresko ,  Hania Gajewska

IPC分类号： G06F944

CPC分类号： G06F9/44521

摘要： A task executing at a server receives a request to package program code for remote execution on a client, and determines the software components that already reside at the client. The task uses this information to formulate a set of instructions to another task that creates the package. The created package is transmitted to the client, and program execution begins.

摘要翻译： 在服务器上执行的任务接收用于在客户机上包装用于远程执行的程序代码的请求，并且确定已经驻留在客户端的软件组件。 该任务使用此信息为创建包的另一个任务制定一组指令。 创建的包被传送到客户端，程序执行开始。

公开(公告)号：US06199196B1

公开(公告)日：2001-03-06

申请号：US09044904

申请日：1998-03-20

申请人： Peter W. Madany ,  Richard Tuck ,  Nedim Fresko

发明人： Peter W. Madany ,  Richard Tuck ,  Nedim Fresko

IPC分类号： G06F945

CPC分类号： G06F9/445 ,  G06F8/54

摘要： A linkage editor executing at a server receives instructions for packaging software components that are required for program execution at a client. The linkage editor generates an output file by iteratively analyzing the program for references to other software components and extracting those components from their parent classes. The linkage editor sends the completed output file to an interface task, which transmits it to the client.

摘要翻译： 在服务器上执行的连接编辑器接收用于打包在客户端执行程序所需的软件组件的指令。 链接编辑器通过迭代地分析程序来引用其他软件组件并从其父类中提取这些组件来生成输出文件。 链接编辑器将完成的输出文件发送到接口任务，将其发送给客户端。

公开(公告)号：US06530080B2

公开(公告)日：2003-03-04

申请号：US09356589

申请日：1999-07-19

申请人： Nedim Fresko ,  Richard Tuck

发明人： Nedim Fresko ,  Richard Tuck

IPC分类号： G06F944

CPC分类号： G06F9/44563 ,  Y10S707/99931 ,  Y10S707/99937

摘要： A method and apparatus for pre-processing and packaging class files. Embodiments remove duplicate information elements from a set of class files to reduce the size of individual class files and to prevent redundant resolution of the information elements. Memory allocation requirements are determined in advance for the set of classes as a whole to reduce the complexity of memory allocation when the set of classes are loaded. The class files are stored in a single package for efficient storage, transfer and processing as a unit. In an embodiment, a pre-processor examines each class file in a set of class files to locate duplicate information in the form of redundant constants contained in a constant pool. The duplicate constant is placed in a separate shared table, and all occurrences of the constant are removed from the respective constant pools of the individual class files. During pre-processing, memory allocation requirements are determined for each class file, and used to determine a total allocation requirement for the set of class files. The shared table, the memory allocation requirements and the reduced class files are packaged as a unit in a multi-class file.

摘要翻译： 一种用于预处理和打包类文件的方法和装置。 实施例从一组类文件中删除重复的信息元素，以减少单个类文件的大小并防止信息元素的冗余解析。 对于整个类的集合来说，预先确定存储器分配要求，以减少当该类集合被加载时存储器分配的复杂性。 类文件存储在单个包中，用于作为一个单元进行高效的存储，传输和处理。 在一个实施例中，预处理器检查一组类文件中的每个类文件，以以包含在常量池中的冗余常数的形式定位重复信息。 复制常量放置在单独的共享表中，并且常量的所有出现将从各个类文件的相应常量池中删除。 在预处理期间，为每个类文件确定内存分配要求，并用于确定该类文件集合的总分配要求。 共享表，内存分配要求和简化类文件作为一个单元打包在一个多类文件中。

公开(公告)号：US5966702A

公开(公告)日：1999-10-12

申请号：US961874

申请日：1997-10-31

申请人： Nedim Fresko ,  Richard Tuck

发明人： Nedim Fresko ,  Richard Tuck

IPC分类号： G06F9/445 ,  G06F9/54 ,  G06F17/30

CPC分类号： G06F9/44563 ,  Y10S707/99931 ,  Y10S707/99937

摘要： A method and apparatus for pre-processing and packaging class files. Embodiments remove duplicate information elements from a set of class files to reduce the size of individual class files and to prevent redundant resolution of the information elements. Memory allocation requirements are determined in advance for the set of classes as a whole to reduce the complexity of memory allocation when the set of classes are loaded. The class files are stored in a single package for efficient storage, transfer and processing as a unit. In an embodiment, a pre-processor examines each class file in a set of class files to locate duplicate information in the form of redundant constants contained in a constant pool. The duplicate constant is placed in a separate shared table, and all occurrences of the constant are removed from the respective constant pools of the individual class files. During pre-processing, memory allocation requirements are determined for each class file, and used to determine a total allocation requirement for the set of class files. The shared table, the memory allocation requirements and the reduced class files are packaged as a unit in a multi-class file.

公开(公告)号：US08943601B1

公开(公告)日：2015-01-27

申请号：US11408127

申请日：2006-04-20

申请人： Roman A. Zelov ,  Alexey S. Popov ,  Vladimir V. Sizikov ,  Nedim Fresko ,  Roger S. Riggs

发明人： Roman A. Zelov ,  Alexey S. Popov ,  Vladimir V. Sizikov ,  Nedim Fresko ,  Roger S. Riggs

IPC分类号： G06F7/04 ,  G06F21/10 ,  G11B20/00

CPC分类号： G06F21/10 ,  G06F21/6236 ,  G11B20/00086

摘要： One embodiment of the present invention provides a system that executes an application designed for one application framework in a different application framework. First, the system receives an application designed to operate in the first application framework. The system determines a first set of security permissions used by the application in the first application framework, and maps these security permissions into a second set of security permissions associated with the second application framework. The system then configures the second application framework to provide the second set of security permissions. These steps allow the application to execute transparently in the second application framework with substantially similar security behavior as in the first application framework.

摘要翻译： 本发明的一个实施例提供一种在不同的应用框架中执行为一个应用框架设计的应用的系统。 首先，系统接收设计为在第一应用框架中运行的应用程序。 系统确定应用程序在第一个应用程序框架中使用的第一组安全权限，并将这些安全权限映射到与第二个应用程序框架相关联的第二组安全权限。 然后系统配置第二个应用程序框架以提供第二组安全权限。 这些步骤允许应用程序在第二应用程序框架中透明地执行与第一应用程序框架中具有基本相似的安全性行为。

公开(公告)号：US08769250B2

公开(公告)日：2014-07-01

申请号：US12554595

申请日：2009-09-04

申请人： Nedim Fresko ,  Dean R. Long ,  Jiangli Zhou

发明人： Nedim Fresko ,  Dean R. Long ,  Jiangli Zhou

IPC分类号： G06F9/00

CPC分类号： G06F12/145 ,  G06F11/3636 ,  G06F12/109 ,  G06F2212/1012 ,  G06F2212/656

摘要： In general, the invention relates to a method. The method includes receiving notification, which includes context information, of a trap. The method further includes accessing, based at least partially upon the context information, a particular instruction that caused the trap, determining, based at least partially upon the context information, a particular address that is to be accessed by the particular instruction, updating a set of log information to indicate accessing of the particular address, causing subsequent accesses of the particular address to not give rise to a trap, after causing subsequent accesses of the particular address to not give rise to a trap, accessing the particular address, after accessing the particular address, causing subsequent accesses of the particular address to give rise to a trap, and causing the particular instruction to not be executed.

摘要翻译： 通常，本发明涉及一种方法。 该方法包括接收陷阱的通知，其包括上下文信息。 该方法还包括至少部分地基于上下文信息访问引起陷阱的特定指令，至少部分地基于上下文信息确定特定指令要访问的特定地址，更新集合 的日志信息以指示特定地址的访问，导致特定地址的后续访问不引起陷阱，在使特定地址的后续访问不引起陷阱，访问特定地址之后，在访问特定地址之后 特定地址，引起特定地址的后续访问以产生陷阱，并使特定指令不被执行。

公开(公告)号：US08104085B2

公开(公告)日：2012-01-24

申请号：US10877410

申请日：2004-06-24

申请人： Nedim Fresko ,  Richard D. Tuck ,  Dean R. E. Long

发明人： Nedim Fresko ,  Richard D. Tuck ,  Dean R. E. Long

IPC分类号： G06F12/00 ,  G06F12/14 ,  G06F13/00 ,  G06F9/44

CPC分类号： G06F9/445

摘要： A hybrid system is provided. The system includes a computing device implementing a first application execution environment (AEE) and a second AEE. The first AEE is configured to be isolated from the second AEE. The first software application associated with the first AEE is configured to be processed on the first AEE such that the first software application is denied direct access to the second AEE. A second software application associated with the second AEE is configured to be processed on the second AEE such that the second software application is denied direct access to the first AEE.

摘要翻译： 提供混合系统。 该系统包括实现第一应用执行环境（AEE）和第二AEE的计算设备。 第一个AEE配置为与第二个AEE隔离。 与第一AEE相关联的第一软件应用被配置为在第一AEE处理，使得第一软件应用被拒绝直接访问第二AEE。 与第二AEE相关联的第二软件应用被配置为在第二AEE上进行处理，使得第二软件应用被拒绝直接访问第一AEE。

公开(公告)号：US20110145358A1

公开(公告)日：2011-06-16

申请号：US12974748

申请日：2010-12-21

申请人： Erez Landau ,  Dean R. E. Long ,  Nedim Fresko

发明人： Erez Landau ,  Dean R. E. Long ,  Nedim Fresko

IPC分类号： G06F15/167 ,  G06F12/08

CPC分类号： G06F9/44563

摘要： Techniques are disclosed for sharing programmatic modules among isolated virtual machines. A master JVM process loads data from a programmatic module, storing certain elements of that data into its private memory region, and storing other elements of that data into a “read-only” area of a shareable memory region. The master JVM process copies loaded data from its private memory region into a “read/write” area of the shareable memory region. Instead of re-loading the data from the programmatic module, other JVM processes map to the read-only area and also copy the loaded data from the read/write area into their own private memory regions. The private memory areas of all of the JVM processes begin at the same virtual memory address, so references between read-only data and copied data are preserved correctly. As a result, multiple JVM processes start up faster, and memory is conserved by avoiding the redundant storage of shareable data.

摘要翻译： 公开了用于在隔离的虚拟机之间共享程序化模块的技术。 主JVM进程从编程模块加载数据，将该数据的某些元素存储到其专用存储器区域中，并将该数据的其他元素存储到可共享存储器区域的“只读”区域中。 主JVM进程将加载的数据从其专用存储器区域复制到可共享内存区域的“读/写”区域。 代替从编程模块重新加载数据，其他JVM进程映射到只读区域，并将加载的数据从读/写区域复制到其自己的专用存储器区域中。 所有JVM进程的专用内存区域都从同一个虚拟内存地址开始，因此只读数据和复制的数据之间的引用被正确保存。 因此，多个JVM进程启动速度更快，并且通过避免可共享数据的冗余存储来节省内存。

公开(公告)号：US07647586B2

公开(公告)日：2010-01-12

申请号：US10918131

申请日：2004-08-13

申请人： Dean R. E. Long ,  Christopher J. Plummer ,  Nedim Fresko

发明人： Dean R. E. Long ,  Christopher J. Plummer ,  Nedim Fresko

IPC分类号： G06F9/44 ,  G06F9/45

CPC分类号： G06F9/45504 ,  G06F11/3644

摘要： A system and method for providing exceptional flow control in protected code through watchpoints is described. Code is generated. The generated code includes a sequence of normal operations and is subject to protection against copying during execution of the generated code. Execution points within the generated code are identified. A watchpoint corresponding to each of the execution points is set. An exception handler associated with each watchpoint is defined and includes operations exceptional to the normal operations sequence that are performed upon a triggering of each watchpoint during execution of the generated code.

摘要翻译： 描述了通过观察点在保护代码中提供异常流控制的系统和方法。 代码生成。 生成的代码包括正常操作的顺序，并且在执行生成的代码期间受到保护以防止复制。 识别生成代码内的执行点。 设置与各执行点对应的观察点。 定义与每个观察点相关联的异常处理程序，并且包括在执行生成的代码期间触发每个观察点时执行的正常操作序列的操作异常。