公开(公告)号：US08112392B1

公开(公告)日：2012-02-07

申请号：US12371116

申请日：2009-02-13

Applicant: Karl Bunnell ,  Randall R. Cook ,  Jeremy Hurren

Inventor： Karl Bunnell ,  Randall R. Cook ,  Jeremy Hurren

IPC: G06F7/00

CPC classification number: G06F17/30233 ,  G06F9/45558

Abstract: A method may include identifying a virtualized application that has a read-only virtualization sublayer and a read-write virtualization sublayer. The read-only virtualization sublayer may represent a base state of the virtualized application and the read-write virtualization sublayer may be configured to store changes to the base state of the virtualized application. The method may also include determining a first difference between the read-only virtualization sublayer and the read-write virtualization sublayer at a first point in time and using the first difference between the read-only virtualization sublayer and the read-write virtualization sublayer to create a first snapshot that represents a state of the virtualized application at the first point in time. Various other methods, systems, and computer-readable media are also disclosed.

Abstract translation: 一种方法可以包括识别具有只读虚拟化子层和读写虚拟化子层的虚拟化应用。 只读虚拟化子层可以表示虚拟应用的基本状态，并且读写虚拟化子层可以被配置为存储对虚拟应用的基本状态的改变。 该方法还可以包括在第一时间点确定只读虚拟化子层和读写虚拟化子层之间的第一差异，并使用只读虚拟化子层和读写虚拟化子层之间的第一个差异来创建 表示第一时间点的虚拟化应用程序状态的第一个快照。 还公开了各种其它方法，系统和计算机可读介质。

公开(公告)号：US08302108B1

公开(公告)日：2012-10-30

申请号：US11960706

申请日：2007-12-20

Applicant: Jeremy Hurren ,  Randall R. Cook

Inventor： Jeremy Hurren ,  Randall R. Cook

IPC: G06F3/00 ,  G06F9/44 ,  G06F9/46 ,  G06F13/00

CPC classification number: G06F9/445 ,  G06F8/61 ,  G06F9/44568 ,  G06F9/45504

Abstract: The disclosure is directed to feature based software virtualization. In one example, a first virtual sub-layer associated with a first feature set of a software package is virtually installed to a computing device. The first feature set includes a first subset of features associated with the software package. The first virtual sub-layer is enabled to activate the first feature set. A second virtual sub-layer associated with a second feature set of the software package is virtually installed to the computing device. The second feature set includes a second subset of the features associated with the software package. The second virtual sub-layer is enabled to activate the second feature set. In certain embodiments, a first fee is charged for the first feature set and a second fee is charged for the second feature set.

Abstract translation: 本公开涉及基于特征的软件虚拟化。 在一个示例中，与软件包的第一特征集相关联的第一虚拟子层虚拟地安装到计算设备。 第一特征集包括与软件包相关联的特征的第一子集。 启用第一个虚拟子层激活第一个功能集。 与软件包的第二特征集相关联的第二虚拟子层虚拟地安装到计算设备。 第二特征集包括与软件包相关联的特征的第二子集。 启用第二虚拟子层激活第二个特征集。 在某些实施例中，针对第一特征集收取第一费用，并且为第二特征集收取第二费用。

公开(公告)号：US08225316B1

公开(公告)日：2012-07-17

申请号：US12369512

申请日：2009-02-11

Applicant: Karl Bunnell ,  Randall R. Cook ,  Jeremy Hurren

Inventor： Karl Bunnell ,  Randall R. Cook ,  Jeremy Hurren

IPC: G06F9/455 ,  G06F9/46

CPC classification number: G06F8/658 ,  G06F9/45558

Abstract: A method may include identifying a first version of a virtualized application. The first version of the virtualized application may include a first read-only virtualization sublayer, and the first read-only virtualization sublayer may provide a base state of the first version of the virtualized application. The method may also include identifying a second version of the virtualized application. The second version of the virtualized application may include a second read-only virtualization sublayer, which may provide a base state of the second version of the virtualized application. The method may further include determining a difference between the first read-only virtualization sublayer and the second read-only virtualization sublayer and using the difference to create a patch configured to update an instance of the first version of the virtualized application to an instance of the second version of the virtualized application. Various other methods, systems, and computer-readable media are also disclosed.

Abstract translation: 方法可以包括识别虚拟化应用的第一版本。 虚拟化应用的第一版本可以包括第一只读虚拟化子层，并且第一只读虚拟化子层可以提供虚拟化应用的第一版本的基本状态。 该方法还可以包括识别虚拟化应用的第二版本。 虚拟化应用的第二版本可以包括第二只读虚拟化子层，其可以提供虚拟化应用的第二版本的基本状态。 该方法还可以包括确定第一只读虚拟化子层和第二只读虚拟化子层之间的差异，并且使用该差异来创建配置成将虚拟化应用的第一版本的实例更新为实例的补丁 虚拟化应用程序的第二个版本。 还公开了各种其它方法，系统和计算机可读介质。

公开(公告)号：US08032556B1

公开(公告)日：2011-10-04

申请号：US12044633

申请日：2008-03-07

Applicant: Randall R. Cook ,  Jeremy Hurren

Inventor： Randall R. Cook ,  Jeremy Hurren

IPC: G06F17/30 ,  G06F7/00 ,  G06F3/00

CPC classification number: G06F17/30899

Abstract: Systems and methods for delivery of user profile data are disclosed. An exemplary method includes detecting a request for a full copy of a user profile data package maintained by a user profile data source subsystem, creating an illusion that the request has been fulfilled, and copying on demand a portion of the user profile data package from the source subsystem to a target location for access by a data consuming subsystem. In certain embodiments, the method further includes utilizing the copied portion of the user profile data package for execution of a computing operation, without fully copying the user profile data package from the source subsystem. In certain embodiments, the portion of the user profile data package is streamed from the source subsystem to the target location over a network connection.

Abstract translation: 公开了用于传送用户简档数据的系统和方法。 一种示例性方法包括检测由用户简档数据源子系统维护的用户简档数据包的完整副本的请求，产生已经满足请求的错觉，并且根据需要复制来自用户简档数据包的一部分的用户简档数据包 源子系统到数据消耗子系统访问的目标位置。 在某些实施例中，该方法还包括利用用户简档数据包的复制部分来执行计算操作，而没有从源子系统完全复制用户简档数据包。 在某些实施例中，用户简档数据包的部分通过网络连接从源子系统流传输到目标位置。

公开(公告)号：US08688641B1

公开(公告)日：2014-04-01

申请号：US12058927

申请日：2008-03-31

Applicant: Randall R. Cook ,  Jeremy K. Hurren ,  Jared G. Payne

Inventor： Randall R. Cook ,  Jeremy K. Hurren ,  Jared G. Payne

IPC: G06F7/00 ,  G06F17/00 ,  G06F17/30 ,  G06F12/00

CPC classification number: G06F17/30126

Abstract: A method is proposed. The method includes receiving a file operation request from a process and performing a census of instances of a file applicable to the file operation request to populate a data structure. The data structure including a listing of the instances of the file applicable to the file operation request. The data structure also includes characteristics for a first instance from among the instances of the file applicable to the file operation request, and characteristics for a second instance of a selected file from among the instances of the file applicable to the file operation request. The method also includes eliminating the first instance from among the instances of the file applicable to the file operation request on the basis of a rule associated with properties from a record for the process, and the characteristics for the first instance.

Abstract translation: 提出了一种方法。 该方法包括从进程接收文件操作请求并执行适用于文件操作请求的文件的实例的普查以填充数据结构。 数据结构包括适用于文件操作请求的文件实例的列表。 数据结构还包括适用于文件操作请求的文件的实例中的第一实例的特性，以及可应用于文件操作请求的文件的实例之间的所选文件的第二实例的特性。 该方法还包括基于与来自用于进程的记录的属性相关联的规则以及第一实例的特征，从适用于文件操作请求的文件的实例中删除第一实例。

公开(公告)号：US08490086B1

公开(公告)日：2013-07-16

申请号：US12495420

申请日：2009-06-30

Applicant: Randall R. Cook ,  Kenneth Berryman

Inventor： Randall R. Cook ,  Kenneth Berryman

IPC: G06F9/455 ,  G06F11/00

CPC classification number: G06F9/45558 ,  G06F11/301 ,  G06F11/3051 ,  G06F11/3072 ,  G06F11/3089 ,  G06F21/53 ,  G06F2009/45587

Abstract: A computer-implemented method for filtering input/output communications of guest operating systems may include: 1) identifying a guest operating system running in a virtual machine, 2) creating an input/output filtering layer that resides outside the guest operating system, 3) intercepting, at the input/output filtering layer, an input/output communication involving the guest operating system, and then 4) performing a filtering operation on the input/output communication. Various other methods, systems, and computer-readable media are also disclosed.

Abstract translation: 用于过滤客户操作系统的输入/输出通信的计算机实现的方法可以包括：1）识别在虚拟机中运行的客户操作系统，2）创建驻留在客户操作系统之外的输入/输出过滤层，3） 在输入/输出过滤层处拦截涉及客户操作系统的输入/输出通信，然后4）对输入/输出通信进行滤波操作。 还公开了各种其它方法，系统和计算机可读介质。

公开(公告)号：US08353044B1

公开(公告)日：2013-01-08

申请号：US12147744

申请日：2008-06-27

Applicant: Howard Jones ,  Kevin Unbedacht ,  Randall R. Cook

Inventor： Howard Jones ,  Kevin Unbedacht ,  Randall R. Cook

IPC: H04L29/06

CPC classification number: H04L67/34 ,  H04L63/102 ,  H04L67/125

Abstract: A computer-implemented method for remediation of a computing device attempting to access a network. The method may include detecting that the computing device is attempting to access the network. The method may also include determining that the computing device does not comply with a network-access-control policy of the network. The method may include using a virtualization layer to bring the computing device into compliance with the network-access-control policy. The method may include permitting the computing device to access the network after the computing device is brought into compliance with the network-access-control policy. Various other methods, systems, and computer-readable media are also disclosed.

Abstract translation: 用于修复试图访问网络的计算设备的计算机实现的方法。 该方法可以包括检测计算设备正试图访问网络。 该方法还可以包括确定计算设备不符合网络的网络访问控制策略。 该方法可以包括使用虚拟化层来使计算设备符合网络访问控制策略。 该方法可以包括允许计算设备在计算设备符合网络访问控制策略之后访问网络。 还公开了各种其它方法，系统和计算机可读介质。

公开(公告)号：US20110145806A1

公开(公告)日：2011-06-16

申请号：US12058782

申请日：2008-03-31

Applicant: Randall R. Cook

Inventor： Randall R. Cook

IPC: G06F9/44

CPC classification number: G06F8/67 ,  G06F8/61 ,  G06F8/65 ,  G06F8/656 ,  G06F17/30067

Abstract: The disclosure is directed to dynamic insertion and removal of virtual software sub-layers. In one example, a virtual layer associated with a software application is virtually installed and activated in a computing device. A virtual sub-layer associated with a component of the software application is dynamically inserted in the virtual layer. The virtual layer remains active during the dynamic insertion of the virtual sub-layer. In certain embodiments, a process is executed from the virtual layer, a determination is made as to whether the process launched before or after the insertion of the virtual sub-layer, and the inserted virtual sub-layer is selectively made visible or invisible to the process based on the determination.

Abstract translation: 本公开旨在动态插入和移除虚拟软件子层。 在一个示例中，与计算设备虚拟地安装并激活与软件应用相关联的虚拟层。 与软件应用的组件相关联的虚拟子层被动态地插入到虚拟层中。 虚拟层在动态插入虚拟子层期间保持活动状态。 在某些实施例中，从虚拟层执行处理，确定在虚拟子层的插入之前或之后启动的进程以及插入的虚拟子层是否被选择性地使其可见或不可见 过程基于确定。

公开(公告)号：US6105069A

公开(公告)日：2000-08-15

申请号：US970069

申请日：1997-11-13

Applicant: Nicholas Huston Franklin ,  Bill Guy Bodine ,  Randall R. Cook ,  Calvin R. Gaisford ,  Matthew G. Brooks ,  Carla M. Heesch ,  Kelly E. Sonderegger

Inventor： Nicholas Huston Franklin ,  Bill Guy Bodine ,  Randall R. Cook ,  Calvin R. Gaisford ,  Matthew G. Brooks ,  Carla M. Heesch ,  Kelly E. Sonderegger

IPC: G06F1/00 ,  G06F21/00 ,  G06F15/173 ,  G06F17/00

CPC classification number: G06F21/6218 ,  G06F21/10 ,  G06F21/121 ,  G06F21/53 ,  G06F2221/2135 ,  G06F2221/2141

Abstract: A directory services system includes a resource object, such as an application object for accessing a resource associated with the resource object. Attributes of the resource object contain licensing control information. The licensing attributes may be used by executables to control access by a user to properly licensed instances of a resource corresponding to the resource object. Also, a utility may be provided to manage the licensing attributes in the resource object. A licensing function may thus control a resource, via its resource object in the directory services database. Licensing maybe easily implemented by setting a new disabling attribute in the object.

Abstract translation: 目录服务系统包括资源对象，例如用于访问与资源对象相关联的资源的应用对象。 资源对象的属性包含许可控制信息。 可执行文件可以使用许可属性来控制用户对与资源对象相对应的资源的适当许可的实例的访问。 另外，可以提供一个实用程序来管理资源对象中的许可属性。 因此许可功能可以通过目录服务数据库中的资源对象来控制资源。 许可可以通过在对象中设置一个新的禁用属性来轻松实现。

公开(公告)号：US09100246B1

公开(公告)日：2015-08-04

申请号：US12142549

申请日：2008-06-19

Applicant: Lance TeNgaio ,  Randall R. Cook

Inventor： Lance TeNgaio ,  Randall R. Cook

IPC: G06F15/16 ,  H04L29/08 ,  H04L29/06 ,  G06F9/48

CPC classification number: H04L29/08099 ,  G06F9/45558 ,  G06F9/48 ,  G06F9/545 ,  G06F2009/45562 ,  G06F2009/45575 ,  G06F2209/542 ,  H04L29/06 ,  H04L29/08009 ,  H04L29/08081 ,  H04L29/0809 ,  H04L29/08117 ,  H04L29/08135 ,  H04L29/08144

Abstract: Distributed application virtualization provides for the distribution, configuration and control of multiple application components, layered file systems, and configuration settings that may be applied on top of an operating system of each system configured to work in conjunction with other systems within a single distributed virtualization layer. A distributed software virtualization manager or service handles communication between systems within each distributed virtual layer. One distributed virtualization operation activates components, selected based on user-defined parameters, on systems across the network belonging to a selected distributed virtual application layer. Other virtualization operations, whether local and/or distributed, include capturing file system and configuration activity associated with the detected event and storing data representative of the captured file system and configuration activity to a virtual layer, such as a local or distributed application layer.

Abstract translation: 分布式应用程序虚拟化提供了可分配，配置和控制多个应用程序组件，分层文件系统和配置设置，这些配置设置可以应用于配置为与单个分布式虚拟化层内的其他系统配合工作的每个系统的操作系统之上 。 分布式软件虚拟化管理器或服务处理每个分布式虚拟层内的系统之间的通信。 一个分布式虚拟化操作在属于所选分布式虚拟应用层的网络上的系统上激活基于用户定义的参数选择的组件。 本地和/或分发的其他虚拟化操作包括捕获与检测到的事件相关联的文件系统和配置活动，并将表示所捕获的文件系统和配置活动的数据存储到诸如本地或分布式应用层的虚拟层。