Computing device with developer mode
    1.
    发明授权
    Computing device with developer mode 有权
    具有开发人员模式的计算设备

    公开(公告)号:US08464038B2

    公开(公告)日:2013-06-11

    申请号:US12721202

    申请日:2010-03-10

    摘要: Methods and apparatus for implementing modes of operation of computing device are disclosed. An example apparatus includes a mode-selection input device having a first state and a second state. The example apparatus also includes firmware operably coupled with the mode-selection input device. In the example apparatus, when the mode-selection input device is in the first state, the firmware is configured to cause the computing device to operate in a first mode of operation, a user mode. In the example apparatus, when the mode-selection input device is in the second state, the firmware is configured to cause the computing device to operate in second mode of operation, a developer mode.

    摘要翻译: 公开了实现计算设备运行模式的方法和装置。 示例性装置包括具有第一状态和第二状态的模式选择输入装置。 示例性装置还包括与模式选择输入装置可操作地耦合的固件。 在示例性装置中,当模式选择输入装置处于第一状态时,固件被配置为使计算装置在第一操作模式,用户模式中操作。 在示例性装置中,当模式选择输入装置处于第二状态时,固件被配置为使得计算装置在第二操作模式,开发者模式中操作。

    COMPUTING DEVICE WITH DEVELOPER MODE
    2.
    发明申请
    COMPUTING DEVICE WITH DEVELOPER MODE 有权
    具有开发者模式的计算设备

    公开(公告)号:US20110087870A1

    公开(公告)日:2011-04-14

    申请号:US12721202

    申请日:2010-03-10

    摘要: Methods and apparatus for implementing modes of operation of computing device are disclosed. An example apparatus includes a mode-selection input device having a first state and a second state. The example apparatus also includes firmware operably coupled with the mode-selection input device. In the example apparatus, when the mode-selection input device is in the first state, the firmware is configured to cause the computing device to operate in a first mode of operation, a user mode. In the example apparatus, when the mode-selection input device is in the second state, the firmware is configured to cause the computing device to operate in second mode of operation, a developer mode.

    摘要翻译: 公开了实现计算设备运行模式的方法和装置。 示例性装置包括具有第一状态和第二状态的模式选择输入装置。 示例性装置还包括与模式选择输入装置可操作地耦合的固件。 在示例性装置中,当模式选择输入装置处于第一状态时,固件被配置为使计算装置在第一操作模式,用户模式中操作。 在示例性装置中,当模式选择输入装置处于第二状态时,固件被配置为使得计算装置在第二操作模式,开发者模式中操作。

    Filesystem access for web applications and native code modules
    3.
    发明授权
    Filesystem access for web applications and native code modules 有权
    Web应用程序和本机代码模块的文件系统访问

    公开(公告)号:US08478798B2

    公开(公告)日:2013-07-02

    申请号:US12427208

    申请日:2009-04-21

    IPC分类号: G06F12/00

    CPC分类号: G06F21/6218 G06F21/53

    摘要: One embodiment provides a system that facilitates the execution of a web application. During operation, the system allocates a storage space on one or more storage devices for use by the web application. Next, the system creates, for the web application, a private filesystem comprising a private root directory within the storage space. Finally, the system enables access to the private filesystem for the web application through the private root directory in a manner that does not allow access to a host filesystem associated with the one or more storage devices from the web application.

    摘要翻译: 一个实施例提供了有助于web应用的执行的系统。 在操作期间,系统在一个或多个存储设备上分配存储空间以供Web应用程序使用。 接下来,系统为web应用创建包括存储空间内的私有根目录的私有文件系统。 最后,该系统允许以不允许从web应用程序访问与一个或多个存储设备相关联的主机文件系统的方式通过专用根目录访问web应用的专用文件系统。

    METHOD AND SYSTEM FOR EXECUTING APPLICATIONS USING NATIVE CODE MODULES
    4.
    发明申请
    METHOD AND SYSTEM FOR EXECUTING APPLICATIONS USING NATIVE CODE MODULES 有权
    使用原始代码模块执行应用程序的方法和系统

    公开(公告)号:US20100017461A1

    公开(公告)日:2010-01-21

    申请号:US12266602

    申请日:2008-11-07

    IPC分类号: G06F15/16 G06F11/00

    摘要: Some embodiments provide a system that executes a web application. During operation, the system loads the web application in a web browser and loads a native code module associated with the web application into a secure runtime environment. Next, the system provides input data associated with the web application to the native code module and processes the input data using the native code module to obtain output data. Finally, the system provides the output data to the web application for use by the web application.

    摘要翻译: 一些实施例提供执行web应用的系统。 在操作期间,系统将Web应用程序加载到Web浏览器中,并将与Web应用程序相关联的本地代码模块加载到安全的运行时环境中。 接下来,系统向本地代码模块提供与web应用相关联的输入数据,并使用本地代码模块处理输入数据以获得输出数据。 最后,系统向Web应用程序提供输出数据以供Web应用程序使用。

    WEB-BASED GRAPHICS RENDERING SYSTEM
    5.
    发明申请
    WEB-BASED GRAPHICS RENDERING SYSTEM 有权
    基于WEB的图形渲染系统

    公开(公告)号:US20100013842A1

    公开(公告)日:2010-01-21

    申请号:US12174586

    申请日:2008-07-16

    IPC分类号: G06T15/00

    CPC分类号: G06T1/00 G06T15/005

    摘要: Some embodiments of the present invention provide a system that renders graphics in a computing system that includes a plugin associated with a web browser in the computing system and a web application configured to execute in the web browser. During operation, the web application specifies a graphics model and provides the graphics model to the plugin. Next, the plugin generates a graphics-processing unit (GPU) command stream from the graphics model. Finally, the plugin sends the GPU command stream to a GPU of the computing system, which renders an image corresponding to the graphics model.

    摘要翻译: 本发明的一些实施例提供了一种在计算系统中呈现图形的系统,该系统包括与计算系统中的web浏览器相关联的插件以及被配置为在web浏览器中执行的web应用程序。 在操作过程中,Web应用程序指定一个图形模型,并将该图形模型提供给插件。 接下来,插件从图形模型生成图形处理单元(GPU)命令流。 最后,插件将GPU命令流发送到计算系统的GPU,该GPU呈现对应于图形模型的图像。

    METHOD FOR VALIDATING AN UNTRUSTED NATIVE CODE MODULE
    6.
    发明申请
    METHOD FOR VALIDATING AN UNTRUSTED NATIVE CODE MODULE 有权
    用于验证未被引用的本地代码模块的方法

    公开(公告)号:US20090282477A1

    公开(公告)日:2009-11-12

    申请号:US12117634

    申请日:2008-05-08

    IPC分类号: G06F21/22

    CPC分类号: G06F21/577 G06F21/51

    摘要: A system that validates a native code module. During operation, the system receives a native code module comprised of untrusted native program code. The system validates the native code module by: (1) determining that code in the native code module does not include any restricted instructions and/or does not access restricted features of a computing device; and (2) determining that the instructions in the native code module are aligned along byte boundaries such that a specified set of byte boundaries always contain a valid instruction and control flow instructions have valid targets. The system allows successfully-validated native code modules to execute, and rejects native code modules that fail validation. By validating the native code module, the system facilitates safely executing the native code module in the secure runtime environment on the computing device, thereby achieving native code performance for untrusted program binaries without significant risk of unwanted side effects.

    摘要翻译: 验证本地代码模块的系统。 在操作期间,系统接收由不可信的本地程序代码组成的本地代码模块。 该系统通过以下方式来验证本地代码模块:(1)确定本地代码模块中的代码不包括任何受限制的指令和/或不访问计算设备的受限特征; 和(2)确定本地代码模块中的指令沿着字节边界排列,使得指定的字节边界集合总是包含有效指令,并且控制流指令具有有效目标。 系统允许成功验证的本地代码模块执行,并拒绝验证失败的本机代码模块。 通过验证本地代码模块,系统便于在计算设备上的安全运行时环境中安全执行本地代码模块,从而为不受信任的程序二进制代码执行本机代码性能,而不会产生不必要的副作用。

    Graphics pipeline including combiner stages
    7.
    发明授权
    Graphics pipeline including combiner stages 有权
    图形流水线包括组合器阶段

    公开(公告)号:US06333744B1

    公开(公告)日:2001-12-25

    申请号:US09273975

    申请日:1999-03-22

    IPC分类号: G06T120

    CPC分类号: G06T15/005

    摘要: A graphics pipeline including a rasterizing stage producing diffuse color values; a plurality of texture stages producing texture values defining a particular texture; a combiner stage for combining four of a plurality of selectable input values including diffuse color values, texture values furnished by a plurality of texture stages, and proportions for combination of the selectable input values; the combiner stage being capable of providing a result equivalent to a sum of products of any two sets of input values, and a product of two input values.

    摘要翻译: 包括产生漫射色值的光栅化阶段的图形管线; 多个纹理阶段产生定义特定纹理的纹理值; 组合器级,用于组合多个可选输入值中的四个,包括漫射色值,由多个纹理阶段提供的纹理值,以及用于组合可选择输入值的比例; 组合器级能够提供相当于任意两组输入值的乘积之和的结果,以及两个输入值的乘积。

    Security-Enhanced Web Application Module Translation
    8.
    发明申请
    Security-Enhanced Web Application Module Translation 审中-公开
    安全增强的Web应用程序模块翻译

    公开(公告)号:US20160004858A1

    公开(公告)日:2016-01-07

    申请号:US13049529

    申请日:2011-03-16

    IPC分类号: G06F9/45 G06F21/60

    CPC分类号: G06F21/57 G06F21/10 G06F21/53

    摘要: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for preserving code safety of application code that is received in a portable, instruction-set-neutral format. One aspect of the subject matter described in this specification can be embodied in methods that include the actions of receiving a portable code file that is implemented in an instruction-set-neutral and source code independent format; translating the portable code file into native object code for execution on a particular instruction set architecture; generating a native executable for the particular instruction set architecture using the native object code; and validation the native executable using a trusted validator prior to execution of the native executable.

    摘要翻译: 方法,系统和装置,包括在计算机存储介质上编码的计算机程序,用于保持以便携式,指令中立格式接收的应用代码的代码安全性。 本说明书中描述的主题的一个方面可以体现在包括接收以指令集中立和源代码独立格式实现的便携式代码文件的动作的方法中; 将可移植代码文件转换为本地目标代码以在特定指令集架构上执行; 使用所述本地对象代码为所述特定指令集架构生成本机可执行程序; 并在执行本地可执行文件之前使用受信任的验证器验证本机可执行文件。

    System services for native code modules
    9.
    发明授权
    System services for native code modules 有权
    本地代码模块的系统服务

    公开(公告)号:US08799928B1

    公开(公告)日:2014-08-05

    申请号:US13584622

    申请日:2012-08-13

    IPC分类号: G06F3/00 G06F9/54

    摘要: A system includes a service registry (SR) including respective entries for service modules (SM), each entry including data identifying the respective SM and at least one system service (SS) provided by the respective SM, a secure runtime environment (SRE) to execute a first native code module (NCM) according to a first security policy (SP) that specifies permissions for the first NCM to access a SS, and a discovery service (DS) to receive a request for access to a first SS from the first NCM, examine entries of the SR to identify a first SM that provides the first SS, examine the first SP to determine whether the first SP restricts access to the first SS from the first NCM, and select the first SM to provide the first system service to the first NCM if the first SP does not restrict access to the first SS from the first NCM.

    摘要翻译: 系统包括包括服务模块(SM)的相应条目的服务注册表(SR),每个条目包括标识相应SM的数据和由相应SM提供的至少一个系统服务(SS),安全运行时环境(SRE) 根据指定第一NCM访问SS的许可的第一安全策略(SP)执行第一本地代码模块(NCM);以及发现服务(DS),用于从第一安全策略(SP)接收对第一SS的访问请求 NCM,检查SR的条目以识别提供第一SS的第一SM,检查第一SP以确定第一SP是否从第一NCM限制对第一SS的访问,并且选择第一SM以提供第一系统服务 到第一个NCM,如果第一个SP不限制从第一个NCM访问第一个SS。

    Graphics scenegraph rendering for web applications using native code modules
    10.
    发明授权
    Graphics scenegraph rendering for web applications using native code modules 有权
    使用本机代码模块的Web应用程序的图形场景绘制

    公开(公告)号:US08797337B1

    公开(公告)日:2014-08-05

    申请号:US12497456

    申请日:2009-07-02

    IPC分类号: G06T1/00

    摘要: One embodiment provides a system that facilitates the execution of a web application. During operation, the system loads a native code module that includes a scenegraph renderer into a secure runtime environment. Next, the system uses the scenegraph renderer to create a scenegraph from a graphics model associated with the web application and generate a set of rendering commands from the scenegraph. The system then writes the rendering commands to a command buffer and reads the rendering commands from the command buffer. Finally, the system uses the rendering commands to render, for the web application, an image corresponding to the graphics model by executing the rendering commands using a graphics-processing unit (GPU).

    摘要翻译: 一个实施例提供了有助于web应用的执行的系统。 在操作期间,系统将包含场景渲染器的本地代码模块加载到安全运行时环境中。 接下来,系统使用场景渲染器从与web应用相关联的图形模型创建场景图,并从场景图生成一组渲染命令。 然后,系统将渲染命令写入命令​​缓冲区,并从命令缓冲区读取渲染命令。 最后,系统使用渲染命令,通过使用图形处理单元(GPU)执行渲染命令,为web应用程序呈现与图形模型相对应的图像。