专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10963567B2 Speculative side-channel attack mitigations 有权
公开(公告)号：US10963567B2
公开(公告)日：2021-03-30
申请号：US15990230
申请日：2018-05-25
申请人： MICROSOFT TECHNOLOGY LICENSING, LLC
发明人： Kenneth D. Johnson , Jonathan E. Lange
IPC分类号： G06F9/30 , G06F21/56 , G06F9/38 , G06F21/75 , H04L9/00 , G06F21/52
摘要： Preventing the observation of the side effects of mispredicted speculative execution flows using restricted speculation. In an embodiment a microprocessor comprises a register file including a plurality of entries, each entry comprising a value and a flag. The microprocessor (i) sets the flag corresponding to any entry whose value results from a memory load operation that has not yet been retired or cancelled, or results from a calculation that was derived from a register file entry whose corresponding flag was set, and (ii) clears the flag corresponding to any entry when the operation that generated the entry's value is retired. The microprocessor also comprises a memory unit that is configured to hold any memory load operation that uses an address whose value is calculated based on a register file entry whose flag is set, unless all previous instructions have been retired or cancelled.

2. 发明授权

US10901911B2 Faster computer memory access by reducing SLAT fragmentation 有权
公开(公告)号：US10901911B2
公开(公告)日：2021-01-26
申请号：US16198620
申请日：2018-11-21
申请人： Microsoft Technology Licensing, LLC
发明人： Yevgeniy Bak , Mehmet Iyigun , Jonathan E. Lange
IPC分类号： G06F12/10 , G06F12/1009 , G06F9/455
摘要： To increase the speed with which a Second Layer Address Table (SLAT) is traversed, memory having the same access permissions is contiguously arranged such that one or more hierarchical levels of the SLAT need not be referenced, thereby resulting in more efficient SLAT traversal. “Slabs” of memory are established whose memory range is sufficiently large that reference to a hierarchically lower level table can be skipped and a hierarchically higher level table's entries can directly identify relevant memory addresses. Such slabs are aligned to avoid smaller intermediate memory ranges. The loading of code or data into memory is performed based on a next available memory location within a slab having equivalent access permissions, or, if such a slab is not available, or if an existing slab does not have a sufficient quantity of available memory remaining, a new slab with the proper access permissions is established.

3. 发明授权

US10198578B2 Secure privilege level execution and access protection 有权
公开(公告)号：US10198578B2
公开(公告)日：2019-02-05
申请号：US15369874
申请日：2016-12-05
申请人： Microsoft Technology Licensing, LLC
发明人： Jonathan E. Lange , John V. Sell , Ling Tony Chen , Eric O. Mejdrich
IPC分类号： G06F21/55 , G06F12/14 , H04L29/06 , G06F11/10 , G06F12/02
摘要： The subject disclosure is directed towards using one or more of hardware, a hypervisor, and privileged mode code to prevent system mode code from accessing user mode data and/or running user mode code at the system privilege level, or vice-versa. Also described is (in systems with a hypervisor) preventing non-hypervisor code from running in hypervisor mode or accessing hypervisor-only data, or vice-versa. A register maintained by hardware, hypervisor, or system mode code contains data access and execution polices for different chunks of addressable space with respect to which requesting entities (hypervisor mode code, system mode code, user mode code) have access to or can execute code in a given chunk. When a request to execute code or access data with respect to an address is received, the request is processed to determine to which chunk the address corresponds. The policy for that chunk is evaluated to determine whether to allow or deny the request.

4. 发明授权

US09646154B2 Return oriented programming (ROP) attack protection 有权
公开(公告)号：US09646154B2
公开(公告)日：2017-05-09
申请号：US14601122
申请日：2015-01-20
申请人： Microsoft Technology Licensing, LLC
发明人： Ling Tony Chen , Jonathan E. Lange , Greg M. Zaverucha
IPC分类号： G06F21/52 , G06F21/54 , G06F12/14
CPC分类号： G06F21/52 , G06F12/1408 , G06F21/54 , G06F2212/1052 , G06F2221/033
摘要： Return oriented programming (ROP) attack prevention techniques are described. In one or more examples, a method is described of protecting against return oriented programming attacks. The method includes initiating a compute signature hardware instruction of a computing device to compute a signature for a return address and the associated location on the stack the return address is stored and causing storage of the computed signature along with the return address in the stack. The method also includes enforcing that before executing the return instruction using the return address on the stack, initiating a verify signature hardware instruction of the computing device to verify the signature matches the target return address on the stack and responding to successful verification of the signature through execution of the verify signature hardware instruction by the computing device, executing the return instruction to the return address.

5. 发明授权

US11573906B2 Faster computer memory access by reducing SLAT fragmentation 有权
公开(公告)号：US11573906B2
公开(公告)日：2023-02-07
申请号：US17157678
申请日：2021-01-25
申请人： Microsoft Technology Licensing, LLC
发明人： Yevgeniy Bak , Mehmet Iyigun , Jonathan E. Lange
IPC分类号： G06F12/10 , G06F12/1009 , G06F9/455
摘要： To increase the speed with which a Second Layer Address Table (SLAT) is traversed, memory having the same access permissions is contiguously arranged such that one or more hierarchical levels of the SLAT need not be referenced, thereby resulting in more efficient SLAT traversal. “Slabs” of memory are established whose memory range is sufficiently large that reference to a hierarchically lower level table can be skipped and a hierarchically higher level table's entries can directly identify relevant memory addresses. Such slabs are aligned to avoid smaller intermediate memory ranges. The loading of code or data into memory is performed based on a next available memory location within a slab having equivalent access permissions, or, if such a slab is not available, or if an existing slab does not have a sufficient quantity of available memory remaining, a new slab with the proper access permissions is established.

6. 发明申请

US20170193226A1 SECURE PRIVILEGE LEVEL EXECUTION AND ACCESS PROTECTION 审中-公开
公开(公告)号：US20170193226A1
公开(公告)日：2017-07-06
申请号：US15369874
申请日：2016-12-05
申请人： Microsoft Technology Licensing, LLC
发明人： Jonathan E. Lange , John V. Sell , Ling Tony Chen , Eric O. Mejdrich
IPC分类号： G06F21/55 , H04L29/06 , G06F12/14
CPC分类号： G06F21/554 , G06F11/1004 , G06F11/1008 , G06F12/0246 , G06F12/1441 , G06F12/1483 , G06F12/1491 , G06F2212/1032 , G06F2212/1052 , G06F2212/151 , G06F2221/031 , H04L63/10
摘要： The subject disclosure is directed towards using one or more of hardware, a hypervisor, and privileged mode code to prevent system mode code from accessing user mode data and/or running user mode code at the system privilege level, or vice-versa. Also described is (in systems with a hypervisor) preventing non-hypervisor code from running in hypervisor mode or accessing hypervisor-only data, or vice-versa. A register maintained by hardware, hypervisor, or system mode code contains data access and execution polices for different chunks of addressable space with respect to which requesting entities (hypervisor mode code, system mode code, user mode code) have access to or can execute code in a given chunk. When a request to execute code or access data with respect to an address is received, the request is processed to determine to which chunk the address corresponds. The policy for that chunk is evaluated to determine whether to allow or deny the request.

7. 发明申请

US20160171211A1 Return Oriented Programming (ROP) Attack Protection 有权
标题翻译：返回导向编程（ROP）攻击保护
公开(公告)号：US20160171211A1
公开(公告)日：2016-06-16
申请号：US14601122
申请日：2015-01-20
申请人： Microsoft Technology Licensing, LLC
发明人： Ling Tony Chen , Jonathan E. Lange , Greg M. Zaverucha
IPC分类号： G06F21/52 , G06F12/14
CPC分类号： G06F21/52 , G06F12/1408 , G06F21/54 , G06F2212/1052 , G06F2221/033
摘要： Return oriented programming (ROP) attack prevention techniques are described. In one or more examples, a method is described of protecting against return oriented programming attacks. The method includes initiating a compute signature hardware instruction of a computing device to compute a signature for a return address and the associated location on the stack the return address is stored and causing storage of the computed signature along with the return address in the stack. The method also includes enforcing that before executing the return instruction using the return address on the stack, initiating a verify signature hardware instruction of the computing device to verify the signature matches the target return address on the stack and responding to successful verification of the signature through execution of the verify signature hardware instruction by the computing device, executing the return instruction to the return address.
摘要翻译：描述了面向回归的编程（ROP）攻击防范技术。在一个或多个示例中，描述了一种防止面向返回的程序设计攻击的方法。该方法包括启动计算设备的计算签名硬件指令，以计算返回地址的签名和堆栈上的相关位置，返回地址被存储，并且使计算的签名与栈中的返回地址一起存储。该方法还包括在使用堆栈上的返回地址执行返回指令之前执行该方法，启动计算设备的验证签名硬件指令，以验证签名与堆栈上的目标返回地址匹配并响应签名的成功验证由计算设备执行验证签名硬件指令，执行返回指令到返回地址。

8. 发明授权

US11907135B2 Faster computer memory access by reducing SLAT fragmentation 有权
公开(公告)号：US11907135B2
公开(公告)日：2024-02-20
申请号：US18164938
申请日：2023-02-06
申请人： Microsoft Technology Licensing, LLC
发明人： Yevgeniy Bak , Mehmet Iyigun , Jonathan E. Lange
IPC分类号： G06F12/10 , G06F12/1009 , G06F9/455
CPC分类号： G06F12/1009 , G06F9/45558 , G06F2009/45583 , G06F2212/1024 , G06F2212/657
摘要： To increase the speed with which a Second Layer Address Table (SLAT) is traversed, memory having the same access permissions is contiguously arranged such that one or more hierarchical levels of the SLAT need not be referenced, thereby resulting in more efficient SLAT traversal. “Slabs” of memory are established whose memory range is sufficiently large that reference to a hierarchically lower level table can be skipped and a hierarchically higher level table's entries can directly identify relevant memory addresses. Such slabs are aligned to avoid smaller intermediate memory ranges. The loading of code or data into memory is performed based on a next available memory location within a slab having equivalent access permissions, or, if such a slab is not available, or if an existing slab does not have a sufficient quantity of available memory remaining, a new slab with the proper access permissions is established.

9. 发明申请

US20180004531A1 SPLIT CONTROL STACK AND DATA STACK PLATFORM 审中-公开
公开(公告)号：US20180004531A1
公开(公告)日：2018-01-04
申请号：US15199399
申请日：2016-06-30
申请人： Microsoft Technology Licensing, LLC
发明人： Ling Tony Chen , Kenneth D. Johnson , Jonathan E. Lange , Kinshumann , Matthew Miller , Neeraj Singh
IPC分类号： G06F9/38 , G06F3/06 , G06F9/30
CPC分类号： G06F9/3861 , G06F3/0604 , G06F3/0631 , G06F3/0673 , G06F9/30032 , G06F9/30054 , G06F11/28 , G06F21/6227
摘要： In one example, a method includes allocating separate portions of memory for a control stack and a data stack. The method also includes, upon detecting a call instruction, storing a first return address in the control stack and a second return address in the data stack; and upon detecting a return instruction, popping the first return address from the control stack and the second return address from the data stack and raising an exception if the two return addresses do not match. Otherwise, the return instruction returns the first return address. Additionally, the method includes executing an exception handler in response to the return instruction detecting an exception, wherein the exception handler is to pop one or more return addresses from the control stack until the return address on a top of the control stack matches the return address on a top of the data stack.

10. 发明授权

US10439803B2 Secure key management 有权
公开(公告)号：US10439803B2
公开(公告)日：2019-10-08
申请号：US15458627
申请日：2017-03-14
申请人： Microsoft Technology Licensing, LLC
发明人： Jonathan E. Lange
IPC分类号： G06F21/53 , H04L9/08 , G06F21/10 , G06F21/12 , H04L9/32 , G06F9/455 , G06F21/79
摘要： A protected machine. The machine includes an enclave. An enclave includes a protected area of an application address space for which access is prevented for any application code not resident in the enclave itself, except that keys can be provided by one or more management enclaves into the enclave. The machine further includes a management enclave coupled to the enclave. The management enclave is configured to provide a key to the enclave. The management enclave is a protected area of an application address space for which access is prevented for any application code not resident in the management enclave itself.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式