专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09626526B2 Trusted public infrastructure grid cloud 有权
公开(公告)号：US09626526B2
公开(公告)日：2017-04-18
申请号：US13459593
申请日：2012-04-30
申请人： Eitan Hadar , Michael Kletskin , Nir Barak , Amir Jerbi , Yaacov Bezalel
发明人： Eitan Hadar , Michael Kletskin , Nir Barak , Amir Jerbi , Yaacov Bezalel
IPC分类号： G06F17/00 , H04L29/06 , G06F21/62 , H04L29/08
CPC分类号： G06F21/6218 , G06F2221/2113 , H04L63/10 , H04L63/20 , H04L67/10
摘要： Systems and methods of implementing a secured cloud environment allow for design and instantiation of a security policy at the infrastructure level. An example system may comprise a first module to facilitate selecting at least two cloud computing component templates from a cloud computing component catalog. The system may comprise a second module to facilitate defining a connection between the at least two selected cloud computing component templates. The system may comprise a third module to facilitate assigning a security level and a policy to at least one of the at least two selected cloud computing component templates. The system may comprise a fourth module to facilitate building a cloud computing component blueprint.

2. 发明申请

US20130227710A1 SYSTEM AND METHOD FOR SECURING LEASED IMAGES IN A CLOUD ENVIRONMENT 审中-公开
标题翻译：用于在云环境中保护租赁图像的系统和方法
公开(公告)号：US20130227710A1
公开(公告)日：2013-08-29
申请号：US13406036
申请日：2012-02-27
申请人： Nir Barak , Eitan Hadar
发明人： Nir Barak , Eitan Hadar
IPC分类号： G06F21/24
CPC分类号： G06F21/10
摘要： Provided is a system, method, and computer-readable storage medium having one or more computer-readable instructions thereon for providing leased images in cloud computing environments. The method includes monitoring a usage of a leased image provided by a cloud vendor, by a client computing device. A threshold period of time associated with the usage is determined. Whether an access to the leased image should be terminated based upon an expiry of the threshold period of time or based upon a request received from the client computing device is determined. The image is locked based upon whether the access to the leased image should be terminated. An access request received for the locked image is monitored; and access to the locked image is enabled when it is determined that the access request is valid.
摘要翻译：提供了一种系统，方法和计算机可读存储介质，其上具有一个或多个计算机可读指令，用于在云计算环境中提供租用图像。该方法包括由客户端计算设备监视由云供应商提供的租用图像的使用。确定与使用相关联的阈值时间段。基于阈值时间段的到期或基于从客户端计算设备接收到的请求，确定对租用图像的访问是否被终止。基于是否应该终止对租用图像的访问来锁定图像。监视针对锁定图像接收的访问请求; 并且当确定访问请求有效时，启用对锁定图像的访问。

3. 发明授权

US09503475B2 Self-adaptive and proactive virtual machine images adjustment to environmental security risks in a cloud environment 有权
标题翻译：自适应和主动的虚拟机映像调整到云环境中的环境安全风险
公开(公告)号：US09503475B2
公开(公告)日：2016-11-22
申请号：US13585288
申请日：2012-08-14
申请人： Itzhak Fadida , Nir Barak , Eitan Hadar
发明人： Itzhak Fadida , Nir Barak , Eitan Hadar
IPC分类号： G06F21/57 , H04L29/06 , H04L29/08
CPC分类号： H04L63/20 , H04L63/1408 , H04L67/34
摘要： A computer system includes a security coordinator configured to be communicatively coupled to a plurality of managed machines deployed in a same computing environment and managed by an environment manager. The security coordinator is configured to detect a security condition with respect to a first one of the managed machines, and to automatically initiate modification of a second one of the managed machines in the same computing environment responsive to detection of the security condition. The security coordinator is configured to initiate the modification of the second one of the managed machines prior to occurrence of a security condition therein and prior to action by the environment manager with respect to the second one of the managed machines in response to the detected security condition.
摘要翻译：计算机系统包括安全协调器，其被配置为通信地耦合到部署在相同计算环境中并由环境管理器管理的多个被管理机器。安全协调器被配置为检测相对于被管理机器中的第一个的安全状况，并且响应于检测到安全条件，在相同的计算环境中自动发起对被管理机器中的第二个的修改。安全协调器被配置为响应于检测到的安全条件，在其中发生安全条件之前以及环境管理器针对被管理机器中的第二管理机器采取行动之前发起对被管理机器中的第二个的修改。

4. 发明申请

US20140096134A1 SYSTEM AND METHOD FOR ENFORCEMENT OF SECURITY CONTROLS ON VIRTUAL MACHINES THROUGHOUT LIFE CYCLE STATE CHANGES 有权
标题翻译：虚拟机安全控制系统和方法，通过寿命周期更改
公开(公告)号：US20140096134A1
公开(公告)日：2014-04-03
申请号：US13633487
申请日：2012-10-02
申请人： Nir Barak , Amir Jerbi , Eitan Hadar , Michael Kletskin
发明人： Nir Barak , Amir Jerbi , Eitan Hadar , Michael Kletskin
IPC分类号： G06F21/00 , G06F9/455
CPC分类号： G06F9/45558 , G06F21/554 , G06F21/56 , G06F21/566 , G06F2009/45562 , G06F2009/45587 , G06F2221/034
摘要： Systems and methods associated with virtual machine security are described herein. One example method includes instantiating a guest virtual machine in a virtual computing environment. The method also includes installing a life cycle agent on the guest virtual machine, assigning an identifying certificate, a set of policies, and an encryption key to the guest virtual machine, and providing the certificate, policies, and encryption key to the guest virtual machine. The certificate, policies, and encryption key may then be used by the guest virtual machine to authenticate itself within the virtual computing environment and to protect data stored on the guest virtual machine.
摘要翻译：这里描述了与虚拟机安全性相关联的系统和方法。一个示例性方法包括在虚拟计算环境中实例化虚拟机。该方法还包括在客户虚拟机上安装生命周期代理，向客户虚拟机分配识别证书，一组策略和加密密钥，以及向客户虚拟机提供证书，策略和加密密钥。客户虚拟机可以使用证书，策略和加密密钥在虚拟计算环境内对其进行身份验证，并保护存储在客户虚拟机上的数据。

5. 发明申请

US20130227699A1 SYSTEM AND METHOD FOR VIRTUAL IMAGE SECURITY IN A CLOUD ENVIRONMENT 有权
标题翻译：云南环境虚拟图像安全系统与方法
公开(公告)号：US20130227699A1
公开(公告)日：2013-08-29
申请号：US13405973
申请日：2012-02-27
申请人： Nir Barak , Eitan Hadar
发明人： Nir Barak , Eitan Hadar
IPC分类号： G06F21/00 , G06F9/455
CPC分类号： H04L63/101 , G06F9/45558 , G06F9/468 , G06F21/60 , G06F2009/45587 , G06F2009/45595 , H04L63/0823 , H04L63/10 , H04W4/60
摘要： Provided herein are systems and method enabling secure virtual image access in a virtual or cloud computing environment. The systems and methods include assigning a status to indicator to guest virtual machines (virtual images) that provide applications and other services to cloud consumers in the cloud environment. A virtual appliance machine in the cloud environment maintains the status of the guest virtual machines and makes decisions based on the status as to whether to allow access to the guest virtual machines. These decisions are transmitted to local elements on the guest virtual machines, which enforce access control on a local level. In this manner, unauthorized virtual image access is prevented providing increased security and data integrity.
摘要翻译：本文提供的是在虚拟或云计算环境中实现安全虚拟映像访问的系统和方法。系统和方法包括将状态指定给客户虚拟机（虚拟映像），为云环境中的云消费者提供应用程序和其他服务。云环境中的虚拟设备机器维护客户虚拟机的状态，并根据是否允许访问来宾虚拟机的状态进行决策。这些决定被传送到访客虚拟机上的本地元素，这在本地级别上实施访问控制。以这种方式，防止未经授权的虚拟图像访问提供增加的安全性和数据完整性。

6. 发明授权

US08966573B2 Self-generation of virtual machine security clusters 有权
标题翻译：自动生成虚拟机安全集群
公开(公告)号：US08966573B2
公开(公告)日：2015-02-24
申请号：US13554559
申请日：2012-07-20
申请人： Nir Barak , Itzhak Fadida , Eitan Hadar
发明人： Nir Barak , Itzhak Fadida , Eitan Hadar
IPC分类号： G06F21/00
CPC分类号： H04L63/20 , G06F9/45558 , G06F21/53 , G06F2009/45587 , G06F2221/2149
摘要： A method of operating a virtual computing system includes receiving at a security controller security data corresponding to a candidate virtual machine that is proposed to be included in a virtualization environment managed by a virtualization environment manager, comparing the security data of the candidate virtual machine to security data of other virtual machines in the virtualization environment, and in response to the comparison, recommending that the virtualization environment manager exclude the candidate virtual machine from the virtualization environment. Related systems and computer program products are disclosed.
摘要翻译：一种操作虚拟计算系统的方法包括：在安全控制器处接收对应于建议包括在由虚拟化环境管理器管理的虚拟化环境中的候选虚拟机的安全数据，将候选虚拟机的安全数据与安全性进行比较在虚拟化环境中的其他虚拟机的数据，并且响应于比较，建议虚拟化环境管理器将候选虚拟机从虚拟化环境排除。公开了相关系统和计算机程序产品。

7. 发明申请

US20140075494A1 MANAGING SECURITY CLUSTERS IN CLOUD COMPUTING ENVIRONMENTS USING AUTONOMOUS SECURITY RISK NEGOTIATION AGENTS 有权
标题翻译：使用自动安全风险管理代理管理云计算环境中的安全群集
公开(公告)号：US20140075494A1
公开(公告)日：2014-03-13
申请号：US13611519
申请日：2012-09-12
申请人： Itzhak Fadida , Nir Barak , Eitan Hadar
发明人： Itzhak Fadida , Nir Barak , Eitan Hadar
IPC分类号： G06F21/00
CPC分类号： G06F9/45558 , G06F21/53 , G06F2009/45587
摘要： A method includes receiving at a similarity arbitrator information about a security policy of a candidate virtual machine that is proposed to be included in a cluster of virtual machines, comparing the security policy of the candidate virtual machine to the security policies of a plurality of virtual machines in the cluster, and in response to the comparison, recommending that a virtualization environment manager exclude the candidate virtual machine from the cluster or include the candidate virtual machine in the cluster. Related systems and computer program products are also disclosed.
摘要翻译：一种方法包括在相似性仲裁器处接收关于建议包括在虚拟机群中的候选虚拟机的安全策略的信息，将候选虚拟机的安全策略与多个虚拟机的安全策略进行比较并且响应于比较，建议虚拟化环境管理器从群集中排除候选虚拟机或将候选虚拟机包括在群集中。还公开了相关系统和计算机程序产品。

8. 发明申请

US20140026231A1 SELF-GENERATION OF VIRTUAL MACHINE SECURITY CLUSTERS 有权
标题翻译：虚拟机安全群自动生成
公开(公告)号：US20140026231A1
公开(公告)日：2014-01-23
申请号：US13554559
申请日：2012-07-20
申请人： Nir Barak , Itzhak Fadida , Eitan Hadar
发明人： Nir Barak , Itzhak Fadida , Eitan Hadar
IPC分类号： G06F21/00
CPC分类号： H04L63/20 , G06F9/45558 , G06F21/53 , G06F2009/45587 , G06F2221/2149
摘要： A method of operating a virtual computing system includes receiving at a security controller security data corresponding to a candidate virtual machine that is proposed to be included in a virtualization environment managed by a virtualization environment manager, comparing the security data of the candidate virtual machine to security data of other virtual machines in the virtualization environment, and in response to the comparison, recommending that the virtualization environment manager exclude the candidate virtual machine from the virtualization environment. Related systems and computer program products are disclosed.
摘要翻译：一种操作虚拟计算系统的方法包括：在安全控制器处接收对应于建议包括在由虚拟化环境管理器管理的虚拟化环境中的候选虚拟机的安全数据，将候选虚拟机的安全数据与安全性进行比较在虚拟化环境中的其他虚拟机的数据，并且响应于比较，建议虚拟化环境管理器将候选虚拟机从虚拟化环境排除。公开了相关系统和计算机程序产品。

9. 发明授权

US08997173B2 Managing security clusters in cloud computing environments using autonomous security risk negotiation agents 有权
标题翻译：使用自主安全风险谈判代理管理云计算环境中的安全集群
公开(公告)号：US08997173B2
公开(公告)日：2015-03-31
申请号：US13611519
申请日：2012-09-12
申请人： Itzhak Fadida , Nir Barak , Eitan Hadar
发明人： Itzhak Fadida , Nir Barak , Eitan Hadar
IPC分类号： G06F21/00 , G06F9/455 , G06F21/53
CPC分类号： G06F9/45558 , G06F21/53 , G06F2009/45587
摘要： A method includes receiving at a similarity arbitrator information about a security policy of a candidate virtual machine that is proposed to be included in a cluster of virtual machines, comparing the security policy of the candidate virtual machine to the security policies of a plurality of virtual machines in the cluster, and in response to the comparison, recommending that a virtualization environment manager exclude the candidate virtual machine from the cluster or include the candidate virtual machine in the cluster. Related systems and computer program products are also disclosed.
摘要翻译：一种方法包括在相似性仲裁器处接收关于建议包括在虚拟机群中的候选虚拟机的安全策略的信息，将候选虚拟机的安全策略与多个虚拟机的安全策略进行比较并且响应于比较，建议虚拟化环境管理器从群集中排除候选虚拟机或将候选虚拟机包括在群集中。还公开了相关系统和计算机程序产品。

10. 发明授权

US08839447B2 System and method for virtual image security in a cloud environment 有权
标题翻译：云环境中虚拟图像安全的系统和方法
公开(公告)号：US08839447B2
公开(公告)日：2014-09-16
申请号：US13405973
申请日：2012-02-27
申请人： Nir Barak , Eitan Hadar
发明人： Nir Barak , Eitan Hadar
IPC分类号： G06F17/13
CPC分类号： H04L63/101 , G06F9/45558 , G06F9/468 , G06F21/60 , G06F2009/45587 , G06F2009/45595 , H04L63/0823 , H04L63/10 , H04W4/60
摘要： Provided herein are systems and method enabling secure virtual image access in a virtual or cloud computing environment. The systems and methods include assigning a status to indicator to guest virtual machines (virtual images) that provide applications and other services to cloud consumers in the cloud environment. A virtual appliance machine in the cloud environment maintains the status of the guest virtual machines and makes decisions based on the status as to whether to allow access to the guest virtual machines. These decisions are transmitted to local elements on the guest virtual machines, which enforce access control on a local level. In this manner, unauthorized virtual image access is prevented providing increased security and data integrity.
摘要翻译：本文提供的是在虚拟或云计算环境中实现安全虚拟映像访问的系统和方法。系统和方法包括将状态指定给客户虚拟机（虚拟映像），为云环境中的云消费者提供应用程序和其他服务。云环境中的虚拟设备机器维护客户虚拟机的状态，并根据是否允许访问来宾虚拟机的状态进行决策。这些决定被传送到访客虚拟机上的本地元素，这在本地级别上实施访问控制。以这种方式，防止未经授权的虚拟图像访问提供增加的安全性和数据完整性。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式