ENGERY EFFICIENT MAXIMIZATION OF NETWORK CONNECTIVITY
    1.
    发明申请
    ENGERY EFFICIENT MAXIMIZATION OF NETWORK CONNECTIVITY 有权
    有效地实现网络连接的最大化

    公开(公告)号:US20130223308A1

    公开(公告)日:2013-08-29

    申请号:US13407181

    申请日:2012-02-28

    IPC分类号: H04W52/02

    摘要: The minimization of the amount of power consumed by an electronic device in acquiring or maintaining network connectivity with a network may extend the battery life of the electronic device. When the electronic device has established a communication connection with a wireless access point, the electronic device cycles a network interface controller of the electronic device between a power on state and a power off state without terminating the communication connection. Accordingly, the electronic device powers on a main processor of the electronic device when the network interface controller detects a beacon during the power on state that indicates the wireless access point has a buffered data frame for the electronic device.

    摘要翻译: 电子设备在获取或维护与网络的网络连接方面消耗的功率量的最小化可延长电子设备的电池寿命。 当电子设备已经建立与无线接入点的通信连接时,电子设备在电源接通状态和断电状态之间循环电子设备的网络接口控制器而不终止通信连接。 因此,当在指示无线接入点具有用于电子设备的缓冲数据帧的开机状态期间网络接口控制器检测到信标时,电子设备对电子设备的主处理器供电。

    Attestation protocol for securely booting a guest operating system
    6.
    发明授权
    Attestation protocol for securely booting a guest operating system 有权
    用于安全引导客户机操作系统的认证协议

    公开(公告)号:US08812830B2

    公开(公告)日:2014-08-19

    申请号:US13222379

    申请日:2011-08-31

    摘要: In a cloud computing environment, a production server virtualization stack is minimized to present fewer security vulnerabilities to malicious software running within a guest virtual machine. The minimal virtualization stack includes support for those virtual devices necessary for the operation of a guest operating system, with the code base of those virtual devices further reduced. Further, a dedicated, isolated boot server provides functionality to securely boot a guest operating system. The boot server is isolated through use of an attestation protocol, by which the boot server presents a secret to a network switch to attest that the boot server is operating in a clean mode. The attestation protocol may further employ a secure co-processor to seal the secret, so that it is only accessible when the boot server is operating in the clean mode.

    摘要翻译: 在云计算环境中,最小化生产服务器虚拟化堆栈,以减少在虚拟机中运行的恶意软件的安全漏洞。 最小的虚拟化堆栈包括对客户操作系统的操作所需的那些虚拟设备的支持,这些虚拟设备的代码基础进一步减少。 此外,专用的隔离引导服务器提供安全引导客户机操作系统的功能。 引导服务器通过使用认证协议进行隔离,引导服务器向网络交换机提供秘密,以证明引导服务器以干净的模式运行。 认证协议可以进一步采用安全协处理器来密封秘密,使得仅当引导服务器以干净模式操作时才可访问。

    Protecting Secret State from Memory Attacks
    9.
    发明申请
    Protecting Secret State from Memory Attacks 审中-公开
    保护秘密状态免受记忆攻击

    公开(公告)号:US20140006805A1

    公开(公告)日:2014-01-02

    申请号:US13535578

    申请日:2012-06-28

    IPC分类号: G06F12/14

    摘要: Described is a technology by which classes of memory attacks are prevented, including cold boot attacks, DMA attacks, and bus monitoring attacks. In general, secret state such as an AES key and an AES round block are maintained in on-SoC secure storage, such as a cache. Corresponding cache locations are locked to prevent eviction to unsecure storage. AES tables are accessed only in the on-SoC secure storage, to prevent access patterns from being observed. Also described is securely preparing for an interrupt-based context switch during AES round computations and securely resuming from a context switch without needing to repeat any already completed round or round of computations.

    摘要翻译: 描述了一种防止内存攻击类别的技术,包括冷启动攻击,DMA攻击和总线监视攻击。 通常,诸如AES密钥和AES循环的秘密状态被保持在诸如高速缓存之类的SoC安全存储中。 相应的缓存位置被锁定,以防止驱逐不安全的存储。 AES表只能在on-SoC安全存储中访问,以防止访问模式被观察。 还描述了在AES循环计算期间安全地准备用于基于中断的上下文切换,并且从上下文切换安全地恢复,而不需要重复任何已经完成的一轮或一轮的计算。

    Attestation Protocol for Securely Booting a Guest Operating System
    10.
    发明申请
    Attestation Protocol for Securely Booting a Guest Operating System 有权
    用于安全引导客户机操作系统的认证协议

    公开(公告)号:US20130054948A1

    公开(公告)日:2013-02-28

    申请号:US13222379

    申请日:2011-08-31

    IPC分类号: G06F15/177

    摘要: In a cloud computing environment, a production server virtualization stack is minimized to present fewer security vulnerabilities to malicious software running within a guest virtual machine. The minimal virtualization stack includes support for those virtual devices necessary for the operation of a guest operating system, with the code base of those virtual devices further reduced. Further, a dedicated, isolated boot server provides functionality to securely boot a guest operating system. The boot server is isolated through use of an attestation protocol, by which the boot server presents a secret to a network switch to attest that the boot server is operating in a clean mode. The attestation protocol may further employ a secure co-processor to seal the secret, so that it is only accessible when the boot server is operating in the clean mode.

    摘要翻译: 在云计算环境中,最小化生产服务器虚拟化堆栈,以减少在虚拟机中运行的恶意软件的安全漏洞。 最小的虚拟化堆栈包括对客户操作系统的操作所需的那些虚拟设备的支持,这些虚拟设备的代码基础进一步减少。 此外,专用的隔离引导服务器提供安全引导客户机操作系统的功能。 引导服务器通过使用认证协议进行隔离,引导服务器向网络交换机提供秘密,以证明引导服务器以干净的模式运行。 认证协议可以进一步采用安全协处理器来密封秘密,使得仅当引导服务器以干净模式操作时才可访问。