公开(公告)号：US20070286032A1

公开(公告)日：2007-12-13

申请号：US11724729

申请日：2007-03-16

申请人： Steven Townsend ,  Derrill Williams ,  Neil Jones ,  Stephen Fewings

发明人： Steven Townsend ,  Derrill Williams ,  Neil Jones ,  Stephen Fewings

IPC分类号： G06F17/00

CPC分类号： H04N5/76 ,  G11B19/00 ,  G11B27/105 ,  H04N5/783 ,  H04N5/91

摘要： A computer based digital transcription system employs audio and video inputs of a court proceeding, and stores the digital signals in a memory in the form of distinct file segments of a predetermined time length during each recording session. The computer associates a date and time and a third identifier, such as location, with each distinct file segment. Playback of any desired segment may be effected during recording or at any time afterward; and playback does not interfere with the recording of realtime information.

摘要翻译： 基于计算机的数字转录系统采用法庭程序的音频和视频输入，并且在每个记录会话期间以预定时间长度的不同文件段的形式将数字信号存储在存储器中。 计算机将日期和时间以及第三个标识符（例如位置）与每个不同的文件段相关联。 任何期望的段的播放可以在记录期间或之后的任何时间进行; 并且播放不会干扰实时信息的记录。

公开(公告)号：US07430760B2

公开(公告)日：2008-09-30

申请号：US10729823

申请日：2003-12-05

申请人： Steven Townsend ,  Thomas Fakes

发明人： Steven Townsend ,  Thomas Fakes

IPC分类号： G06F9/00

CPC分类号： H04L63/0227 ,  G06F21/55 ,  H04L63/1408

摘要： A programming interface includes a first group of functions related to communicating a new security policy to multiple security engines. Each of the multiple security engines is configured to replace an existing security policy with the new security policy. The programming interface also includes a second group of functions related to communicating an indication of each security engine's readiness to implement the new security policy.

摘要翻译： 编程接口包括与向多个安全引擎传达新的安全策略相关的第一组功能。 多个安全引擎中的每一个被配置为用新的安全策略替换现有的安全策略。 编程接口还包括与传达每个安全引擎准备实现新的安全策略的指示相关的第二组功能。

公开(公告)号：US20050246522A1

公开(公告)日：2005-11-03

申请号：US10836810

申请日：2004-04-30

申请人： Anders Samuelsson ,  Steven Townsend ,  Thomas Fakes

发明人： Anders Samuelsson ,  Steven Townsend ,  Thomas Fakes

IPC分类号： G06F12/14 ,  G06F21/00

CPC分类号： G06F21/53 ,  G06F2221/2105

摘要： Techniques for securing applications and operating systems are provided. In an embodiment, the system notifies a user that a security enforcement action is being taken even though the condition prompting the action is detected by a security engine that executes in kernel mode. The security engine enforces security policies that help to ensure that a vulnerability of an application or operating system cannot be exploited. In an embodiment, the security system may solicit input from a user relating to a security enforcement action even though the condition prompting the action is detected by a security engine that executes in kernel mode. Security policies may be defined as sets of rules, each having a condition and an action. The security system thus enables kernel mode components to provide notifications to a user or solicit input from the user.

摘要翻译： 提供了用于保护应用程序和操作系统的技术。 在一个实施例中，即使由内核模式执行的安全引擎检测到提示动作的状况，系统也通知用户安全执行动作。 安全引擎执行安全策略，有助于确保无法利用应用程序或操作系统的漏洞。 在一个实施例中，即使由在内核模式中执行的安全引擎检测到提示动作的状况，安全系统也可以向用户寻求与安全执行动作相关的输入。 安全策略可以被定义为规则集合，每个规则具有条件和动作。 因此，安全系统使得内核模式组件能够向用户提供通知或从用户请求输入。

公开(公告)号：US20060021002A1

公开(公告)日：2006-01-26

申请号：US10898463

申请日：2004-07-23

申请人： Steven Townsend ,  Thomas Fakes

发明人： Steven Townsend ,  Thomas Fakes

IPC分类号： H04L9/00

CPC分类号： G06F21/57

摘要： A framework for a security system is described. The framework may be used to track which security engines are available to enforce security policies. A security engine is a software resource that enforces security policies designed to help ensure that a vulnerability of an application or operating system cannot be exploited. The framework may be used to maintain a holistic view of a status of computing devices that a security system is configured to operate with. The framework may enforce security policies uniformly across components of a security system by providing an application program interface. The security system may broker security enforcement events and security policies. By providing these services, the framework presents a unified model for interactions between software components and the security system.

摘要翻译： 描述了安全系统的框架。 该框架可用于跟踪可用于执行安全策略的哪些安全引擎。 安全引擎是一种软件资源，它强制执行旨在帮助确保应用程序或操作系统的漏洞无法利用的安全策略。 该框架可以用于维护安全系统被配置为与之一起操作的计算设备的状态的整体视图。 该框架可以通过提供一个应用程序接口来在安全系统的各个组件之间统一地执行安全策略。 安全系统可以代理安全执行事件和安全策略。 通过提供这些服务，该框架为软件组件和安全系统之间的交互提供了统一的模型。

公开(公告)号：US20060005227A1

公开(公告)日：2006-01-05

申请号：US10882438

申请日：2004-07-01

申请人： Anders Samuelsson ,  Thomas Fakes ,  Arindam Chatterjee ,  Art Shelest ,  Mark Vayman ,  Rajesh Dadhia ,  Saveen Reddy ,  Shirish Koti ,  Steven Townsend

发明人： Anders Samuelsson ,  Thomas Fakes ,  Arindam Chatterjee ,  Art Shelest ,  Mark Vayman ,  Rajesh Dadhia ,  Saveen Reddy ,  Shirish Koti ,  Steven Townsend

IPC分类号： G06F17/00

CPC分类号： G06F21/6218

摘要： Languages for expressing security policies are provided. The languages comprise rules that specify conditions and actions. The rules may be enforced by a security engine when a security enforcement event occurs. The languages support data separation, dynamic evaluation, and ordered rule scope. By separating data from logic, security engines may only need to be updated with a portion of rules that change. With dynamic evaluation, expressions of rules may be evaluated dynamically, such as by querying a database, when a security engine enforces a rule. With ordered rule scope, when a security enforcement event implicates a number of rules simultaneously, the rules may be enforced in a deterministic and logically organized manner.

摘要翻译： 提供表达安全策略的语言。 语言包括指定条件和操作的规则。 当安全执行事件发生时，规则可能由安全引擎执行。 语言支持数据分离，动态评估和有序规则范围。 通过将数据与逻辑分离，安全引擎可能只需要更改一部分更改的规则。 通过动态评估，可以动态地评估规则表达式，例如通过查询数据库，安全引擎执行规则时。 使用有序规则范围，当安全执行事件同时涉及多个规则时，可以以确定性和逻辑上有组织的方式强制执行规则。

公开(公告)号：US07657923B2

公开(公告)日：2010-02-02

申请号：US10898463

申请日：2004-07-23

申请人： Steven Townsend ,  Thomas Fakes

发明人： Steven Townsend ,  Thomas Fakes

IPC分类号： H04L29/06

CPC分类号： G06F21/57

摘要： A framework for a security system is described. The framework may be used to track which security engines are available to enforce security policies. A security engine is a software resource that enforces security policies designed to help ensure that a vulnerability of an application or operating system cannot be exploited. The framework may be used to maintain a holistic view of a status of computing devices that a security system is configured to operate with. The framework may enforce security policies uniformly across components of a security system by providing an application program interface. The security system may broker security enforcement events and security policies. By providing these services, the framework presents a unified model for interactions between software components and the security system.

摘要翻译： 描述了安全系统的框架。 该框架可用于跟踪可用于执行安全策略的哪些安全引擎。 安全引擎是一种软件资源，它强制执行旨在帮助确保应用程序或操作系统的漏洞无法利用的安全策略。 该框架可以用于维护安全系统被配置为与之一起操作的计算设备的状态的整体视图。 该框架可以通过提供一个应用程序接口来在安全系统的各个组件之间统一地执行安全策略。 安全系统可以代理安全执行事件和安全策略。 通过提供这些服务，该框架为软件组件和安全系统之间的交互提供了统一的模型。

公开(公告)号：US07530093B2

公开(公告)日：2009-05-05

申请号：US10836810

申请日：2004-04-30

申请人： Anders Samuelsson ,  Steven Townsend ,  Thomas Fakes

发明人： Anders Samuelsson ,  Steven Townsend ,  Thomas Fakes

IPC分类号： G06F17/00 ,  H04K1/00 ,  H04L9/00

CPC分类号： G06F21/53 ,  G06F2221/2105

摘要： Techniques for securing applications and operating systems are provided. In an embodiment, the system notifies a user that a security enforcement action is being taken even though the condition prompting the action is detected by a security engine that executes in kernel mode. The security engine enforces security policies that help to ensure that a vulnerability of an application or operating system cannot be exploited. In an embodiment, the security system may solicit input from a user relating to a security enforcement action even though the condition prompting the action is detected by a security engine that executes in kernel mode. Security policies may be defined as sets of rules, each having a condition and an action. The security system thus enables kernel mode components to provide notifications to a user or solicit input from the user.

摘要翻译： 提供了用于保护应用程序和操作系统的技术。 在一个实施例中，即使由内核模式执行的安全引擎检测到提示动作的状况，系统也通知用户安全执行动作。 安全引擎执行安全策略，有助于确保无法利用应用程序或操作系统的漏洞。 在一个实施例中，即使由在内核模式中执行的安全引擎检测到提示动作的状况，安全系统也可以向用户寻求与安全执行动作相关的输入。 安全策略可以被定义为规则集合，每个规则具有条件和动作。 因此，安全系统使得内核模式组件能够向用户提供通知或从用户请求输入。

公开(公告)号：US20050125687A1

公开(公告)日：2005-06-09

申请号：US10729823

申请日：2003-12-05

申请人： Steven Townsend ,  Thomas Fakes

发明人： Steven Townsend ,  Thomas Fakes

IPC分类号： G06F21/22 ,  G06F1/00 ,  G06F9/00 ,  G06F9/44 ,  G06F11/00 ,  G06F11/30 ,  G06F12/14 ,  G06F15/00 ,  G06F17/00 ,  G06F21/00 ,  G06F21/20 ,  H04L9/00 ,  H04L9/32 ,  H04L29/06

CPC分类号： H04L63/0227 ,  G06F21/55 ,  H04L63/1408

摘要： A programming interface includes a first group of functions related to communicating a new security policy to multiple security engines. Each of the multiple security engines is configured to replace an existing security policy with the new security policy. The programming interface also includes a second group of functions related to communicating an indication of each security engine's readiness to implement the new security policy.

摘要翻译： 编程接口包括与向多个安全引擎传达新的安全策略相关的第一组功能。 多个安全引擎中的每一个被配置为用新的安全策略替换现有的安全策略。 编程接口还包括与传达每个安全引擎准备实现新的安全策略的指示相关的第二组功能。