The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 03, 2019

Filed:

Jun. 30, 2017
Applicant:

Phoenix Technologies Ltd., Campbell, CA (US);

Inventors:

Kenneth C. Taylor, Kirkland, WA (US);

James L. Mortensen, Lynnwood, WA (US);

Assignee:

Phoenix Technologies Ltd., Pasadena, CA (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/85 (2013.01); G06F 13/28 (2006.01); G06F 13/40 (2006.01); G06F 13/42 (2006.01); G06F 21/56 (2013.01); G06F 21/62 (2013.01); G06F 21/57 (2013.01);
U.S. Cl.
CPC ...
G06F 21/85 (2013.01); G06F 13/28 (2013.01); G06F 13/4068 (2013.01); G06F 13/4282 (2013.01); G06F 21/567 (2013.01); G06F 21/575 (2013.01); G06F 21/6218 (2013.01); G06F 2213/0024 (2013.01); G06F 2213/0026 (2013.01); G06F 2221/2149 (2013.01);
Abstract

Approaches for securing a host machine against security attacks conducted using Direct Memory Access (DMA). Platform firmware does not enable bus mastering during PCI bus enumeration. When the platform firmware determines that an expansion card has been plugged into an expansion card slot of the host machine, the platform firmware determines whether the expansion card slot has been approved by a user of the host machine for permitting Direct Memory Access (DMA) with the host machine. Unless the expansion card slot has been determined to be approved by the user for permitting Direct Memory Access (DMA) with the host machine, the platform firmware does not allow drivers that might enable DMA to connect to the device and does not grant permission to the expansion card slot and any upstream bridges to conduct Direct Memory Access (DMA) with the host machine.


Find Patent Forward Citations

Loading…