-
公开(公告)号:US20200014741A1
公开(公告)日:2020-01-09
申请号:US16503230
申请日:2019-07-03
Applicant: Samsung Electronics Co., Ltd.
Inventor: Khaled ElWazeer , Ivan Getta , Myungsu Cha , Ahmed M. Azab , Rohan Bhutkar , Guruprasad Ganesh , Wenbo Shen , Ruowen Wang , Junyong Choi
Abstract: This disclosure relates to an electronic device including a memory and at least one processor coupled to the memory. The at least one processor is configured to execute a daemon process in one of a container or a host operating system, wherein the daemon process is configured to manage data transfer between the container and the host operating system, create, via the daemon process, an inter-process communication (IPC) channel between the container and the host operating system, receive incoming audio data, and buffer the incoming audio data to the IPC channel.
-
公开(公告)号:US20190155727A1
公开(公告)日:2019-05-23
申请号:US16107652
申请日:2018-08-21
Applicant: Samsung Electronics Co., Ltd
Inventor: Ivan Getta , Sudhi Herle , Ahmed M. Azab , Rohan Bhutkar , Guruprasad Ganesh , Wenbo Shen
Abstract: A method for implementing a shared memory buffer includes at an apparatus comprising a processor and a physical memory, running a host environment with a host virtual memory. The method further includes running a guest environment with a guest virtual memory, performing, by the host environment, an allocation of a frame buffer in the physical memory, and mapping the allocated frame buffer into the host virtual memory. Additionally, the method includes passing a handle of the allocated frame buffer to the guest environment and performing a mapping of the allocated frame buffer into the guest virtual memory, the mapping based on the handle of the allocated frame buffer.
-
公开(公告)号:US11042398B2
公开(公告)日:2021-06-22
申请号:US16504075
申请日:2019-07-05
Applicant: Samsung Electronics Co., Ltd.
Inventor: Guruprasad Ganesh , Sudhi Herle , Ahmed M. Azab , Rohan Bhutkar , Ivan Getta , Xun Chen , Wenbo Shen , Ruowen Wang , Haining Chen , Khaled Elwazeer , Mengmeng Li , Peng Ning , Hyungseok Yu , Myungsu Cha , Kyungsun Lee , Se Young Choi , Yurak Choe , Yong Shin , Kyoung-Joong Shin , Donguk Seo , Junyong Choi
Abstract: A method for operating an electronic device, the method including spawning a name space tool (NST) as part of a boot process of a host OS, wherein the NST is a process with a plurality of root privileges of the host OS. The method further includes spawning, by the NST, a container for a guest OS, wherein the container for the guest OS is mapped to a dedicated domain in the host OS, and dropping, by the NST, a root privilege of the host OS in response to spawning the container for the guest OS.
-
公开(公告)号:US10686776B2
公开(公告)日:2020-06-16
申请号:US15584892
申请日:2017-05-02
Applicant: Samsung Electronics Co., Ltd
Inventor: Peng Ning , Yueh-Hsun Lin , Stephen E. McLaughlin , Michael C. Grace , Ahmed M. Azab , Rohan Bhutkar , Yong Choi
Abstract: A connected device includes an application processor, a secure element, and a control module. The application processor is configured to receive a control command from an electronic device. The secure element is connected between the application processor and a control module and is configured to authenticate the control command. The control module is configured to receive the control command when the control command is authenticated by the secure element, execute the control command to activate at least one function of the connected device, and transmit a response to the electronic device.
-
公开(公告)号:US20200042366A1
公开(公告)日:2020-02-06
申请号:US16524771
申请日:2019-07-29
Applicant: Samsung Electronics Co., Ltd.
Inventor: Guruprasad Ganesh , Ahmed M. Azab , Rohan Bhutkar , Haining Chen , Ruowen Wang , Xun Chen , Donguk Seo , Kyoung-Joong Shin
Abstract: This disclosure relates to an electronic device including a memory and at least one processor coupled to the memory. The at least one processor is configured to identify a device change event in a host operating system, wherein the host operating system includes a host namespace, switch from the host namespace to a container namespace of a container, and update the container with information based on the device change event.
-
公开(公告)号:US11656924B2
公开(公告)日:2023-05-23
申请号:US16524771
申请日:2019-07-29
Applicant: Samsung Electronics Co., Ltd.
Inventor: Guruprasad Ganesh , Ahmed M. Azab , Rohan Bhutkar , Haining Chen , Ruowen Wang , Xun Chen , Donguk Seo , Kyoung-Joong Shin
CPC classification number: G06F9/545 , G06F9/45545 , G06F21/6218 , H04L67/34
Abstract: An electronic device includes a memory and at least one processor coupled to the memory. The at least one processor is configured to identify a device change event in a host operating system, wherein the host operating system includes a host namespace, switch from the host namespace to a container namespace of a container, and update the container with information based on the device change event.
-
公开(公告)号:US20190342298A1
公开(公告)日:2019-11-07
申请号:US16399865
申请日:2019-04-30
Applicant: Samsung Electronics Co., Ltd.
Inventor: Haining Chen , Xun Chen , Khaled ElWazeer , Ahmed M. Azab , David Thomson , Ruowen Wang , Wei Yang , Peng Ning
IPC: H04L29/06
Abstract: A method of providing continuous user authentication for resource access control includes launching a continuous authentication service at a boot time of a first device, wherein the first device includes a processor, a memory, and one or more sensors configured to collect authentication information. Additionally, the method includes receiving authentication information comprising one or more of explicit authentication information or implicit authentication information, and receiving a request for access to a resource of the first device. Further, the method includes the operations of determining, by the continuous authentication service, a current value of a security state, the current value of the security state based in part on a time interval between a receipt time of the authentication information and a current time and controlling access to the resource based on the current value of the security state.
-
公开(公告)号:US20200012511A1
公开(公告)日:2020-01-09
申请号:US16504075
申请日:2019-07-05
Applicant: Samsung Electronics Co., Ltd.
Inventor: Guruprasad Ganesh , Sudhi Herle , Ahmed M. Azab , Rohan Bhutkar , Ivan Getta , Xun Chen , Wenbo Shen , Ruowen Wang , Haining Chen , Khaled Elwazeer , Mengmeng Li , Peng Ning , Hyungseok Yu , Myungsu Cha , Kyungsun Lee , Se Young Choi , Yurak Choe , Yong Shin , Kyoung-Joong Shin , Donguk Seo , Junyong Choi
Abstract: A method for operating an electronic device, the method including spawning a name space tool (NST) as part of a boot process of a host OS, wherein the NST is a process with a plurality of root privileges of the host OS. The method further includes spawning, by the NST, a container for a guest OS, wherein the container for the guest OS is mapped to a dedicated domain in the host OS, and dropping, by the NST, a root privilege of the host OS in response to spawning the container for the guest OS.
-
公开(公告)号:US10019583B2
公开(公告)日:2018-07-10
申请号:US15089376
申请日:2016-04-01
Applicant: Samsung Electronics Co., Ltd.
Inventor: Kirk R. Swidowski , Ahmed M. Azab
IPC: G06F21/60 , G06F12/10 , G06F9/455 , G06F12/1009 , G06F12/109
CPC classification number: G06F21/60 , G06F9/45558 , G06F12/1009 , G06F12/109 , G06F2009/45583 , G06F2212/1052 , G06F2212/151 , G06F2212/152 , G06F2212/651 , Y02D10/13
Abstract: A Protected Walk-based Shadow Paging (PWSP) method includes storing a multiple level first stage (S1) page tables structure in second stage (S2) page tables. The method includes: when an S1 page table in an S2 page table entry is marked with a writable attribute: (i) permitting an operating system (OS) to write to the S1 page table, (ii) blocking a memory management unit (MMU) from reading the S1 page table for translation, and (iii) in response, verifying the S1 page table for translation and changing the marking of the S1 page table in the S2 page table entry to a read-only attribute, enabling the MMU to subsequently read the S1 page table. The method further includes: when the S1 page table in the S2 page table entry is marked with the read-only attribute: (i) permitting the OS to read the S1 page table for translating from a virtual address to an intermediate physical address, (ii) blocking the OS from writing to the S1 page table, and (iii) in response to blocking the OS, updating the S1 page table and changing the marking of the S1 page table in the S2 page table entry to the device memory attribute, enabling the OS to write to the S1 page table. Blocking the MMU from reading the S1 page table for translation may include generating a device memory permissions fault, and blocking the OS from writing to the S1 page table may include generating a read-only prefetch permissions fault.
-
公开(公告)号:US20170286694A1
公开(公告)日:2017-10-05
申请号:US15089376
申请日:2016-04-01
Applicant: Samsung Electronics Co., Ltd.
Inventor: Kirk R. Swidowski , Ahmed M. Azab
CPC classification number: G06F21/60 , G06F9/45558 , G06F12/1009 , G06F12/109 , G06F2009/45583 , G06F2212/1052 , G06F2212/151 , G06F2212/152 , G06F2212/651
Abstract: PWSP method includes storing a multiple level page tables structure in second stage page tables (S2). The method includes: when an S2 entry is marked with a writable attribute: (i) permitting an operating system (OS) to write to S1, (ii) blocking an MMU from reading the S1 for translation, and (iii) in response, verifying the S1 for translation and changing the marking of the S2 entry to read-only attribute, enabling the MMU to subsequently read the S1. The method includes: when the S2 entry is marked with the read-only attribute: (i) permitting the OS to read the S1 for translating from a virtual address to an intermediate physical address, (ii) blocking the OS from writing to the S1, and (iii) in response to blocking the OS, updating the S1 and changing the marking of the S2 entry to the device memory attribute, enabling the OS to write to the S1.
-
-
-
-
-
-
-
-
-