Microsoft Technology Licensing, LLC

Other

Bryan M Willman

Paul England

Marcus Peinado

Kenneth D Ray

Eric P Traut

Rene Antonio Vega

Matthew Douglas Hendel

Forrest Curtis Foltz

Adrian J Oney

Paul Cador Roberts

Michael Alfred Aday

Christine M Chew

Mark Joseph Zbikowski

Keith Stuart Kaplan

Alan Geller

John Charles Dunn

Thekkthalackal Varugis Kurien

Andrew John Thornton

Chad E Verbowski

Glen T Slick

Adam D Barr

Sean Selitrennikoff

Sadagopan Rajaram

John E Paff

Rajen J Shah

Michael David Marr

Robert Victor Welland

Brian LaMacchia

David Benson Cross

John D DeTreville

Blair Brewster Dillaway

Nathan T Lewis

David Rudolph Wooten

Yuqun Chen

John D Vert

Jamie Hunter

David O Hovel

John Te-Jui Sheu

Idan Avraham

James G Letwin

Varugis Kurien

Pierre Jacomet

William Gifford Holt

Alan R Whitney

Laura Posey Benofsky

Leslie Helena Johnson

Madeline Jinx Bryant

Mark E Paley

Derek Norman LaSalle

Lonnie Dean McMichael

Selena Wilson

Dan Alvin Hinsley

Rita Mang Chee Wong

J Gordon Letwin

The various embodiments described below are directed to providing authenticated and confidential messaging from software executing on a host (e.g. a secure software application or security kernel) to and from I/O devices operating on a USB bus. The embodiments can protect against attacks that are levied by software executing on a host computer. In some embodiments, a secure functional component or module is provided and can use encryption techniques to provide protection against observation and manipulation of USB data. In other embodiments, USB data can be protected through techniques that do not utilized (or are not required to utilize) encryption techniques. In accordance with these embodiments, USB devices can be designated as 'secure' and, hence, data sent over the USB to and from such designated devices can be provided into protected memory. Memory indirection techniques can be utilized to ensure that data to and from secure devices is protected.

Methods and systems for protecting data in USB systems

Efficient power management of a system with virtual machines is disclosed. In particular, such efficient power management may enable coordination of system-wide power changes with virtual machines. Additionally, such efficient power management may enable coherent power changes in a system with a virtual machine monitor. Furthermore, such efficient power management may enable dynamic control and communication of power state changes.

Efficient power management of a system with virtual machines

A method of assessing risk in an electronic transaction involves assignment of quality attributes to cryptographic identities presented in a digital transaction. The quality assignment supports assessment of risk in the transaction. The evaluation of risk in the transaction is made by assessing machine readable attributes of the digital identities along with transaction details. The digital identity attributes may be constructed using extensions of existing standards. A guarantee against risk of loss may be obtained by procuring insurance on the transaction before execution. Third party insurers may analyze the risk of loss in a transaction by assessing the attributes of digital identities along with transaction details and may provide a requestor with an insurance premium quote. Based on the value of the quote, the transaction participants may decide whether or not to execute the transaction.

System and method for assigning quality to cryptographaic identities used in a digital transaction

System and method for assigning quality to cryptographic identities used in a digital transaction

A method and apparatus for measuring a distance are disclosed. A measuring device includes a timer, a counter, an optical emitter, an optical receiver, and a distance computing element. In one embodiment, the timer provides a sequence of signals and the counter counts pulses in a loop. The loop includes an electrical path and an optical path. While an optical emitter such as a laser can emit outgoing beams, an optical receiver such as a photodiode receives return beams from the reflective surface. The reflective surface reflects the return beam in accordance with the outgoing beam. The distance computing element measures a distance in response to the outgoing and return beams.

Method and apparatus for distance measurement using optical beam

Techniques are disclosed to provide security for graphical user interface elements being displayed in a system having a host operating system and a high assurance operating system. Graphical user interface elements associated with the high-assurance operating system may be prevented from being obscured and from any partial transparency. Additionally, a piece of secret information may be stored and displayed by graphical user interface elements associated with the high-assurance operating system. Coordinating certain elements of the graphical user interface elements associated with the high assurance operating system also helps to identify legitimate elements associated with the high assurance operating system. Public title information may be furnished to a host operating system windowing system to identify a window owned by a process running on a high-assurance operating system. Private title information associated with the same window may be used in the high assurance operating system.

Providing a graphical user interface in a system with a high-assurance execution environment

Plural guest operating systems run on a computer, where a security kernel enforces a policy of isolation among the guest operating systems. An exclusion vector defines a set of pages that cannot be accessed by direct memory access (DMA) devices. The security kernel enforces an isolation policy by causing certain pages to be excluded from direct access. Thus, device drivers in guest operating systems are permitted to control DMA devices directly without virtualization of those devices, while each guest is prevented from using DMA devices to access pages that the guest is not permitted to access under the policy.

Enforcing isolation among plural operating systems

Techniques are disclosed to support hosting of a first operating system by a second operating system, where the first system provides at least some of the infrastructure for the second system. A facility is provided whereby the second system can receive data from the first system without the first system being able to modify that data. The second system may use the first system's scheduler by creating shadow threads and synchronization objects known to the first system, while the second system makes the final decision as to whether a thread runs. Separate memory may be allocated to both systems at boot time, or dynamically during their operation. The techniques herein may be used to protect the second system from actions arising in the first system. Preferably, the interaction between the first and second systems is facilitated by a security monitor, which assists in protecting the second system from the first.

System for isolating first computing environment from second execution environment while sharing resources by copying data from first portion to second portion of memory

A memory controller prevents CPUs and other I/O bus masters from accessing memory during a code (for example, trusted core) initialization process. The memory controller resets CPUs in the computer and allows a CPU to begin accessing memory at a particular location (identified to the CPU by the memory controller). Once an initialization process has been executed by that CPU, the code is operational and any other CPUs are allowed to access memory (after being reset), as are any other bus masters (subject to any controls imposed by the initiated code).

Method and system for allowing code to be securely initialized in a computer

Access to an authentication image may be protected so that only authenticated processes have access to the image. The image can be displayed to authenticate a User Interface (UI) to a computer user. The image indicates the UI can be trusted. If the image is not displayed, it may be that an application UI is 'spoofed' to trick a user into providing sensitive information. Additionally, a large variety of different images can be used as authentication images, so spoofing one image be recognized by most users. A set of original images may be provided, along with image modification processes which can generate a large number of variations. Techniques for authenticating UIs in a virtual machine context are provided. A secure attention sequence is also provided, which allows users to test whether processes running on a computer are authenticated.

Systems and methods for determining if applications executing on a computer system are trusted

A mechanism for protected operating system boot that prevents rogue components from being loaded with the operating system, and thus prevents divulgence of the system key under inappropriate circumstances. After a portion of the machine startup procedure has occurred, the operating system loader is run, the loader is validated, and a correct machine state is either verified to exist and/or created. Once the loader has been verified to be a legitimate loader, and the machine state under which it is running is verified to be correct, the loader's future behavior is known to protect against the loading of rogue components that could cause divulgence of the system key. With the loader's behavior being known to be safe for the system key, the validator may unseal the system key and provides it to the loader.

System and method for protected operating system boot using state validation

A data storage resource is identifiable by physical addresses, and optionally by a virtual address. A policy defines which resources are accessible and which resources are not accessible. A request to access a resource is allowed if access to the resource is permitted by the policy, and if carrying out the access will not cause virtual addresses to be assigned to resources to which the policy disallows access. Since resources to which access is disallowed do not have virtual addresses, certain types of access requests that identify a resource by a virtual address can be allowed without consulting the policy.

Using limits on address translation to control access to an addressable entity

Growing community of inventors

Kirkland, WA, United States of America

Bryan M Willman