Information processing device, program developing device, program verifying method, and program product
    1.
    发明授权
    Information processing device, program developing device, program verifying method, and program product 失效
    信息处理装置,程序开发装置,程序验证方法和程序产品

    公开(公告)号:US08683208B2

    公开(公告)日:2014-03-25

    申请号:US13162955

    申请日:2011-06-17

    摘要: According to one embodiment, an information processing device stores a program list and plural types of security functions each defining therein protection attributes for respective arguments related to input and output of data to be protected, and stores function argument protection attributes and dependency relations each of which is defined by a determinant set and a dependent attribute that satisfy a predetermined condition. The device detects a combination of first and second security functions in which integrity of variables included in a determinant set of one dependency relation in the first security function are verified by the second security function, generates a third security function which adds protection attributes that guarantee integrity to variables included in the dependent attribute of the dependency relation in the first security function when verification of the second security function is successful and which outputs the variables, and updates the function argument protection attribute and the dependency relation concomitantly with an addition of the third security function.

    摘要翻译: 根据一个实施例,信息处理装置存储节目列表和多种类型的安全功能,每个安全功能各自定义与要保护的数据的输入和输出相关的参数的保护属性,并且存储功能参数保护属性和依赖关系, 由确定集合和依赖属性来定义,该属性集合和满足预定条件的从属属性。 该设备检测第一和第二安全功能的组合,其中包括在第一安全功能中的一个依赖关系的行列式集合中的变量的完整性由第二安全功能验证,生成第三安全功能,其增加保证完整性的保护属性 对第二安全功能的验证成功并且输出变量的第一安全功能中的依赖关系的从属属性中包含的变量,并且随着第三安全性的添加而更新功能参数保护属性和依赖关系 功能。

    INFORMATION PROCESSING DEVICE, PROGRAM DEVELOPING DEVICE, PROGRAM VERIFYING METHOD, AND PROGRAM PRODUCT
    3.
    发明申请
    INFORMATION PROCESSING DEVICE, PROGRAM DEVELOPING DEVICE, PROGRAM VERIFYING METHOD, AND PROGRAM PRODUCT 失效
    信息处理设备,程序开发设备,程序验证方法和程序产品

    公开(公告)号:US20110296192A1

    公开(公告)日:2011-12-01

    申请号:US13162955

    申请日:2011-06-17

    IPC分类号: H04L9/32 G06F12/14

    摘要: According to one embodiment, an information processing device stores a program list and plural types of security functions each defining therein protection attributes for respective arguments related to input and output of data to be protected, and stores function argument protection attributes and dependency relations each of which is defined by a determinant set and a dependent attribute that satisfy a predetermined condition. The device detects a combination of first and second security functions in which integrity of variables included in a determinant set of one dependency relation in the first security function are verified by the second security function, generates a third security function which adds protection attributes that guarantee integrity to variables included in the dependent attribute of the dependency relation in the first security function when verification of the second security function is successful and which outputs the variables, and updates the function argument protection attribute and the dependency relation concomitantly with an addition of the third security function.

    摘要翻译: 根据一个实施例,信息处理装置存储节目列表和多种类型的安全功能,每个安全功能各自定义与要保护的数据的输入和输出相关的参数的保护属性,并且存储功能参数保护属性和依赖关系, 由确定集合和依赖属性来定义,该属性集合和满足预定条件的从属属性。 该设备检测第一和第二安全功能的组合,其中包括在第一安全功能中的一个依赖关系的行列式集合中的变量的完整性由第二安全功能验证,生成第三安全功能,其增加保证完整性的保护属性 对第二安全功能的验证成功并且输出变量的第一安全功能中的依赖关系的从属属性中包含的变量,并且随着第三安全性的添加而更新功能参数保护属性和依赖关系 功能。

    Computer program product, and information processing apparatus and method
    4.
    发明授权
    Computer program product, and information processing apparatus and method 有权
    计算机程序产品,信息处理设备和方法

    公开(公告)号:US09116741B2

    公开(公告)日:2015-08-25

    申请号:US13585941

    申请日:2012-08-15

    CPC分类号: G06F9/461 G06F21/52

    摘要: According to an embodiment, a computer program product includes a computer-readable medium including program, when executed by a computer, to have a plurality of modules run by the computer. The computer includes a memory having a shared area, which is an area accessible to only those modules which run cooperatively and storing therein execution module identifiers. Each of the modules includes a first operation configured to store, just prior to a switchover of operations to an other module that runs cooperatively, an identifier of the other module as the execution module identifier in the shared area; and a second operation configured to execute, when the execution module identifier stored in the shared area matches with an identifier of own module immediately after a switchover of operations from the other module, a function inside the own module.

    摘要翻译: 根据实施例,计算机程序产品包括计算机可读介质,其包括由计算机执行时具有由计算机运行的多个模块的程序。 计算机包括具有共享区域的存储器,该共享区域是只能协作运行并在其中存储执行模块标识符的那些模块可访问的区域。 每个模块包括第一操作,其被配置为在操作切换到协同运行的其他模块之前存储另一模块的标识符作为共享区域中的执行模块标识符; 以及第二操作,被配置为当存储在所述共享区域中的执行模块标识符与来自所述另一模块的操作的切换之后立即匹配自身模块的标识符时,执行所述自身模块内的功能。

    Memory management device and memory management method
    5.
    发明授权
    Memory management device and memory management method 有权
    内存管理设备和内存管理方法

    公开(公告)号:US08732480B2

    公开(公告)日:2014-05-20

    申请号:US13223753

    申请日:2011-09-01

    IPC分类号: G06F17/30

    摘要: According to an embodiment, a memory management device increments a lower value of a first counter, updates the counter by incrementing an upper value and resetting the lower value when the lower value overflows, increments to update the lower counter value when the upper value is incremented as a result of writing a second data piece having the upper value in common to a memory, recalculates a first secret value calculated using the first counter values and a root secret value in response to the first counter update, writes a first data piece and the first secret value to the memory, and at reading of the first data piece and the first secret value, calculates a second secret value using the updated first counter values and the root secret value, and compares the first secret value with the second secret value to verify the first data piece.

    摘要翻译: 根据实施例,存储器管理装置增加第一计数器的较低值,通过递增上限值来更新计数器,并且当较低值溢出时重新设置较低值,当增加上限值时递增以更新下计数器值 作为将具有上述值的第二数据片共同写入存储器的结果,重新计算响应于第一计数器更新使用第一计数器值和根秘密值计算的第一秘密值,写入第一数据片和 并且在读取第一数据段和第一秘密值时,使用更新的第一计数器值和根秘密值计算第二秘密值,并将第一秘密值与第二秘密值比较, 验证第一个数据。

    Information processing device, program verification method, and recording medium
    6.
    发明授权
    Information processing device, program verification method, and recording medium 有权
    信息处理装置,程序验证方法和记录介质

    公开(公告)号:US08918654B2

    公开(公告)日:2014-12-23

    申请号:US12274024

    申请日:2008-11-19

    IPC分类号: G06F15/16 G06F12/14 G06F21/54

    CPC分类号: G06F12/1416 G06F21/54

    摘要: A first storage unit stores a plurality of security functions each defining a first protection attribute requiring a storage of a value of an argument for input/output of data. A second storage unit stores a program list describing a second protection attribute of a variable indicating a storage area of the data and an executing procedure of a predetermined process. An identifying unit identifies a third protection attribute of an actual argument for input/output of a security function based on the second protection attribute. When a judging unit judges not all of third protection attributes match with first protection attributes, an output unit outputs error information indicating a mismatch of the protection attributes.

    摘要翻译: 第一存储单元存储多个安全功能,每个安全功能定义需要存储数据值以输入/输出数据的第一保护属性。 第二存储单元存储描述指示数据的存储区域的变量的第二保护属性的程序列表和预定处理的执行过程。 识别单元基于第二保护属性识别安全功能的输入/输出的实际参数的第三保护属性。 当判断单元判断不是所有第三保护属性与第一保护属性匹配时,输出单元输出指示保护属性不匹配的错误信息。

    INFORMATION PROCESSING DEVICE, PROGRAM VERIFICATION METHOD, AND RECORDING MEDIUM
    7.
    发明申请
    INFORMATION PROCESSING DEVICE, PROGRAM VERIFICATION METHOD, AND RECORDING MEDIUM 有权
    信息处理设备,程序验证方法和记录介质

    公开(公告)号:US20090138729A1

    公开(公告)日:2009-05-28

    申请号:US12274024

    申请日:2008-11-19

    IPC分类号: G06F12/14

    CPC分类号: G06F12/1416 G06F21/54

    摘要: A first storage unit stores a plurality of security functions each defining a first protection attribute requiring a storage of a value of an argument for input/output of data. A second storage unit stores a program list describing a second protection attribute of a variable indicating a storage area of the data and an executing procedure of a predetermined process. An identifying unit identifies a third protection attribute of an actual argument for input/output of a security function based on the second protection attribute. When a judging unit judges not all of third protection attributes match with first protection attributes, an output unit outputs error information indicating a mismatch of the protection attributes.

    摘要翻译: 第一存储单元存储多个安全功能,每个安全功能定义需要存储数据值以输入/输出数据的第一保护属性。 第二存储单元存储描述指示数据的存储区域的变量的第二保护属性的程序列表和预定处理的执行过程。 识别单元基于第二保护属性识别安全功能的输入/输出的实际参数的第三保护属性。 当判断单元判断不是所有第三保护属性与第一保护属性匹配时,输出单元输出指示保护属性不匹配的错误信息。