公开(公告)号：US08631123B2

公开(公告)日：2014-01-14

申请号：US13006618

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L63/0236 ,  H04L63/104

摘要： When an operating system process evaluates a rule for an operation being attempted on a logical network port, the operating system process determines whether the target logical port falls within a range of logical ports, and then determines whether the operation is associated with a permitted domain of the range of logical ports. If the operation is a bind operation, then the process attempting to bind to the target port will be allowed to bind if the target port falls within the range and the operation/process is associated with a permitted domain. Otherwise, the binding operation will not be allowed to proceed.

摘要翻译： 当操作系统进程评估在逻辑网络端口上尝试的操作的规则时，操作系统进程确定目标逻辑端口是否落入逻辑端口的范围内，然后确定该操作是否与允许的域 逻辑端口的范围。 如果操作是绑定操作，则如果目标端口在范围内，并且操作/进程与允许的域相关联，则尝试绑定到目标端口的进程将被允许绑定。 否则，将不允许绑定操作继续。

公开(公告)号：US20120185661A1

公开(公告)日：2012-07-19

申请号：US13006626

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F12/02 ,  G06F12/14

CPC分类号： G06F12/1491

摘要： Domains can also be used to control access to physical memory space. Data in a physical memory space that has been used by a process sometimes endures after the process stops using the physical memory space (e.g., the process terminates). In addition, a virtual memory manager may allow processes of different applications to access a same memory space. To prevent exposure of sensitive/confidential data, physical memory spaces can be designated for a specific domain or domains when the physical memory spaces are allocated.

摘要翻译： 域也可用于控制对物理内存空间的访问。 在进程停止使用物理内存空间（例如，进程终止）之后，进程使用的物理内存空间中的数据有时会持续。 此外，虚拟存储器管理器可以允许不同应用的进程访问相同的存储器空间。 为了防止敏感/机密数据的暴露，物理内存空间可以在分配物理内存空间时为特定域或域指定。

公开(公告)号：US20120185581A1

公开(公告)日：2012-07-19

申请号：US13006618

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L63/0236 ,  H04L63/104

摘要： When an operating system process evaluates a rule for an operation being attempted on a logical network port, the operating system process determines whether the target logical port falls within a range of logical ports, and then determines whether the operation is associated with a permitted domain of the range of logical ports. If the operation is a bind operation, then the process attempting to bind to the target port will be allowed to bind if the target port falls within the range and the operation/process is associated with a permitted domain. Otherwise, the binding operation will not be allowed to proceed.

摘要翻译： 当操作系统进程评估在逻辑网络端口上尝试的操作的规则时，操作系统进程确定目标逻辑端口是否落入逻辑端口的范围内，然后确定该操作是否与允许的域 逻辑端口的范围。 如果操作是绑定操作，则如果目标端口在范围内，并且操作/进程与允许的域相关联，则尝试绑定到目标端口的进程将被允许绑定。 否则，将不允许绑定操作继续。

公开(公告)号：US08429191B2

公开(公告)日：2013-04-23

申请号：US13006621

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G07F17/30

CPC分类号： G06F21/6281 ,  G06F2221/2141

摘要： Functionality can be implemented in an operating system to increase the granularity of isolation for objects. A domain can be defined to represent each of different entities (e.g., different departments or work groups). User identifiers and/or user credentials can be associated with the appropriate domain or domains. An administrator can then define a set of rules that govern operation(s) that can be performed on the objects based on the domains. Processes running on a system will inherit the domains of a user account logged into the system. When a process running on the system attempts to perform an operation on an object, an operating system process evaluates the domain isolation rules with an identifier of the object and a domain identifier to determine whether the operation is permitted to proceed.

摘要翻译： 可以在操作系统中实现功能，以增加对象的隔离粒度。 可以定义域以表示不同实体（例如，不同部门或工作组）。 用户标识符和/或用户凭证可以与适当的域或域相关联。 然后，管理员可以定义一组管理基于域的对象执行的操作的规则。 在系统上运行的进程将继承登录系统的用户帐户的域。 当在系统上运行的进程尝试对对象执行操作时，操作系统进程将使用对象的标识符和域标识符来评估域隔离规则，以确定是否允许该操作继续进行。

公开(公告)号：US08832389B2

公开(公告)日：2014-09-09

申请号：US13006626

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F13/00 ,  G06F12/14

CPC分类号： G06F12/1491

摘要： Domains can also be used to control access to physical memory space. Data in a physical memory space that has been used by a process sometimes endures after the process stops using the physical memory space (e.g., the process terminates). In addition, a virtual memory manager may allow processes of different applications to access a same memory space. To prevent exposure of sensitive/confidential data, physical memory spaces can be designated for a specific domain or domains when the physical memory spaces are allocated.

摘要翻译： 域也可用于控制对物理内存空间的访问。 在进程停止使用物理内存空间（例如，进程终止）之后，进程使用的物理内存空间中的数据有时会持续。 此外，虚拟存储器管理器可以允许不同应用的进程访问相同的存储器空间。 为了防止敏感/机密数据的暴露，物理内存空间可以在分配物理内存空间时为特定域或域指定。

公开(公告)号：US08595821B2

公开(公告)日：2013-11-26

申请号：US13006634

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F9/00

CPC分类号： G06F21/6218 ,  G06F2221/2141

摘要： Domains can be used to secure resources of a cluster. An administrator can configure a node of a cluster as a member of a particular domain. Membership in a cluster can be restricted to nodes that are members of the particular domain. When a node generates a cluster message, a kernel process or operating system process of the node will indicate the domain(s) of the node in the cluster message. The cluster message can be a command message to read or write to a storage resource of the cluster. When the cluster storage resource node or node that controls the storage resource receives the command message, the node will examine the command message to ensure the message indicates a domain that aligns with the cluster. If the proper domain is indicated in the command message, then the command message is processed. Otherwise, the command message is denied.

摘要翻译： 可以使用域来保护群集的资源。 管理员可以将集群的节点配置为特定域的成员。 群集中的成员资格可以限制为属于特定域的成员的节点。 当节点生成集群消息时，节点的内核进程或操作系统进程将指示集群消息中节点的域。 集群消息可以是用于读取或写入集群的存储资源的命令消息。 当控制存储资源的集群存储资源节点或节点接收到命令消息时，节点将检查命令消息，以确保消息指示与集群对齐的域。 如果在命令消息中指示了适当的域，则处理命令消息。 否则命令消息被拒绝。

公开(公告)号：US20120185510A1

公开(公告)日：2012-07-19

申请号：US13006621

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyam Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F17/30

CPC分类号： G06F21/6281 ,  G06F2221/2141

摘要： Functionality can be implemented in an operating system to increase the granularity of isolation for objects. A domain can be defined to represent each of different entities (e.g., different departments or work groups). User identifiers and/or user credentials can be associated with the appropriate domain or domains. An administrator can then define a set of rules that govern operation(s) that can be performed on the objects based on the domains. Processes running on a system will inherit the domains of a user account logged into the system. When a process running on the system attempts to perform an operation on an object, an operating system process evaluates the domain isolation rules with an identifier of the object and a domain identifier to determine whether the operation is permitted to proceed.

摘要翻译： 可以在操作系统中实现功能，以增加对象的隔离粒度。 可以定义域以表示不同实体（例如，不同部门或工作组）。 用户标识符和/或用户凭证可以与适当的域或域相关联。 然后，管理员可以定义一组管理基于域的对象执行的操作的规则。 在系统上运行的进程将继承登录系统的用户帐户的域。 当在系统上运行的进程尝试对对象执行操作时，操作系统进程将使用对象的标识符和域标识符来评估域隔离规则，以确定是否允许该操作继续。

公开(公告)号：US20120185930A1

公开(公告)日：2012-07-19

申请号：US13006634

申请日：2011-01-14

申请人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyan Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

发明人： Saurabh Desai ,  George Mathew Koikara ,  Pruthvi Panyan Nataraj ,  Guha Prasad Venkataraman ,  Vidya Ranganathan

IPC分类号： G06F21/00

CPC分类号： G06F21/6218 ,  G06F2221/2141

摘要： Domains can be used to secure resources of a cluster. An administrator can configure a node of a cluster as a member of a particular domain. Membership in a cluster can be restricted to nodes that are members of the particular domain. When a node generates a cluster message, a kernel process or operating system process of the node will indicate the domain(s) of the node in the cluster message. The cluster message can be a command message to read or write to a storage resource of the cluster. When the cluster storage resource node or node that controls the storage resource receives the command message, the node will examine the command message to ensure the message indicates a domain that aligns with the cluster. If the proper domain is indicated in the command message, then the command message is processed. Otherwise, the command message is denied.

摘要翻译： 可以使用域来保护群集的资源。 管理员可以将集群的节点配置为特定域的成员。 群集中的成员资格可以限制为属于特定域的成员的节点。 当节点生成集群消息时，节点的内核进程或操作系统进程将指示集群消息中节点的域。 集群消息可以是用于读取或写入集群的存储资源的命令消息。 当控制存储资源的集群存储资源节点或节点接收到命令消息时，节点将检查命令消息，以确保消息指示与集群对齐的域。 如果在命令消息中指示了适当的域，则处理命令消息。 否则命令消息被拒绝。

公开(公告)号：US20120230118A1

公开(公告)日：2012-09-13

申请号：US13477019

申请日：2012-05-21

申请人： Jeffrey A. Babcock ,  Yuri Mirgorodski ,  Natalia Lavrovskaya ,  Saurabh Desai

发明人： Jeffrey A. Babcock ,  Yuri Mirgorodski ,  Natalia Lavrovskaya ,  Saurabh Desai

IPC分类号： G11C16/10

CPC分类号： H01L21/28273 ,  H01L27/11521 ,  H01L27/11558 ,  H01L29/66825 ,  H01L29/7841 ,  H01L29/7881

摘要： The number of times that a non-volatile memory (NVM) can be programmed and erased is substantially increased by utilizing a localized heating element that anneals the oxide that is damaged by tunneling charge carriers when the NVM is programmed and erased. The program and erase voltages are also reduced when heat from the heating element is applied prior to programming and erasing.

摘要翻译： 可以通过利用局部加热元件来使得非易失性存储器（NVM）被编程和擦除的次数大大增加，所述局部加热元件在NVM被编程和擦除时使隧道电荷载体损坏的氧化物退火。 在编程和擦除之前，加热元件的热​​量时，编程和擦除电压也会降低。

公开(公告)号：US20110152364A1

公开(公告)日：2011-06-23

申请号：US12641635

申请日：2009-12-18

申请人： Kofi A. Bissah ,  Ricardo De Oliveira ,  Saurabh Desai ,  Joseph J. LiBrizzi ,  Thong Ngyuen ,  Shoba Pillai

发明人： Kofi A. Bissah ,  Ricardo De Oliveira ,  Saurabh Desai ,  Joseph J. LiBrizzi ,  Thong Ngyuen ,  Shoba Pillai

IPC分类号： A61K31/21 ,  A61K31/265

CPC分类号： A61Q19/007 ,  A61K8/25 ,  A61K8/37 ,  A61K8/585 ,  A61K8/895 ,  A61L15/20 ,  A61L15/26 ,  A61L15/42 ,  C08L83/04

摘要： Provided are compositions for repelling fluids comprising a volatile liquid carrier, a powder-feel agent and less than 5 weight % of an ester selected from the group consisting of formula I, formula II, formula III, and combinations of two or more thereof: wherein R1, R2, R3, R5, R6, R8 and R9 are independently linear or branched, substituted or unsubstituted, saturated or unsaturated, C3-C22 alkyl or alkenyl groups, R4 is a linear or branched, substituted or unsubstituted, saturated or unsaturated, C3-C22 alkylene or alkenylene moiety, and R7 is a linear or branched, substituted or unsubstituted, saturated or unsaturated C3-22 moiety, the composition being substantially anhydrous. Also provided are methods of improving dryness and/or comfort associated with the intimate area, as well as, kits comprising the composition and an absorbent article.

摘要翻译： 提供了用于排斥流体的组合物，其包含挥发性液体载体，粉末感受剂和小于5重量％的选自式I，式II，式III的酯，以及其两种或多种的组合：其中 R 1，R 2，R 3，R 5，R 6，R 8和R 9独立地是直链或支链的，取代或未取代的饱和或不饱和的C 3 -C 22烷基或链烯基，R 4是直链或支链的，取代或未取代的饱和或不饱和的， C3-C22亚烷基或亚烯基部分，并且R7是直链或支链的取代或未取代的饱和或不饱和的C3-22部分，该组合物基本上是无水的。 还提供了改善与紧密区域相关的干燥和/或舒适性的方法，以及包含该组合物和吸收制品的试剂盒。