Alan D Ross

US Patent:

7526792, Apr 28, 2009

Filed:

Jun 9, 2004

Appl. No.:

10/865364

Inventors:

Alan D. Ross - Shingle Springs CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

G06F 17/30
H04L 9/00

US Classification:

726 2, 726 1, 726 4, 726 6, 726 11, 726 12, 726 13, 726 14, 726 27, 726 29, 713154, 713166

Abstract:

Methods and apparatuses for integration of authentication and policy compliance enforcement. An enforcement agent may reside on a device. If an access assignment is provided to the device in conjunction with authentication, authorization to use the access granted may be restricted by the enforcement agent. In one embodiment a reduced-access assignment is made by an authenticator.

US Patent:

7561515, Jul 14, 2009

Filed:

Sep 27, 2004

Appl. No.:

10/951393

Inventors:

Alan D. Ross - Shingle Springs CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

G01R 31/08

US Classification:

370232, 370230, 370235, 370229

Abstract:

Traffic flow rate control in a network device. Traffic flow may be permitted/restricted based on the role of a device in a network. The traffic flow may be limited on the basis of packets per time period, the limits to be applied on a per-protocol, per-port, and/or per-packet basis.

US Patent:

7565567, Jul 21, 2009

Filed:

Nov 18, 2005

Appl. No.:

11/282976

Inventors:

Alan D. Ross - Shingle Springs CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

G06F 11/00

US Classification:

714 4, 714 2

Abstract:

System resources can be monitored for error or failure. In the event of a failure, an availability module can fail the system over from the corrupt resource to a backup resource.

US Patent:

7565685, Jul 21, 2009

Filed:

Nov 12, 2005

Appl. No.:

11/271292

Inventors:

Alan D. Ross - Shingle Springs CA, US
Dennis Morgan - Pine Grove CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

H04L 9/00

US Classification:

726 1, 726 22, 713168

Abstract:

Apparatuses and methods provide operating system independent digital rights management. A request can be made for data, which can be monitored by a security module. The security module is independent of a host operating system and manages digital rights for the requested data. Thus, digital rights management occurs outside the context of a host operating system. The security module may classify the data and determine a security policy based on the data classification. Policy may be stored locally or remotely, and may be associated with the data subject to the policy.

US Patent:

7571474, Aug 4, 2009

Filed:

Dec 30, 2004

Appl. No.:

11/026684

Inventors:

Alan D. Ross - Shingle Springs CA, US
Dennis M. Morgan - Pine Grove CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

G06F 11/00

US Classification:

726 22

Abstract:

An aggregation agent may combine and correlate information generated by multiple on-host agents and/or information generated in response to multiple security events. The aggregation agent may transmit the combined information to a security console. The security console may check the identity of the aggregation agent to determine whether to accept the information.

US Patent:

7580701, Aug 25, 2009

Filed:

Dec 27, 2005

Appl. No.:

11/320142

Inventors:

Alan D. Ross - Shingle Springs CA, US
Vincent J. Zimmer - Federal Way WA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

H04M 11/00

US Classification:

455411, 455410, 4554351, 4554352, 4554353

Abstract:

Methods and apparatuses allow for wireless configuration parameters to be passed to a client to enable the client to configure a wireless network interface to connect to a wireless network.

US Patent:

7631354, Dec 8, 2009

Filed:

Dec 30, 2004

Appl. No.:

11/026646

Inventors:

Alan D. Ross - Shingle Springs CA, US
Dennis M. Morgan - Pine Grove CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

G06F 11/00

US Classification:

726 22

Abstract:

An aggregation agent may combine and correlate information generated by multiple on-host agents and/or information generated in response to multiple security events. The aggregation agent may transmit the combined information to a security console. The security console may check the identity of the aggregation agent to determine whether to accept the information. The security console may map information to one or more consoles.

US Patent:

7693838, Apr 6, 2010

Filed:

Nov 12, 2005

Appl. No.:

11/271228

Inventors:

Dennis Morgan - Pine Grove CA, US
Alan D. Ross - Shingle Springs CA, US

Assignee:

Intel Corporation - Santa Clara CA

International Classification:

G06F 17/30
H04L 29/06

US Classification:

707 9, 707 10, 707201, 713161

Abstract:

A security manager receives a request for data that is subject to data security management. The security manager operates independently of a host partition and is not directly accessible or detectable by the host partition. The security manager determines whether to grant or deny access to the requested data based at least in part on a requesting user's authentication credentials. If the data request is approved, a security policy associated with the data is determined. In addition, instructions are sent to a system hypervisor to create a secure partition. The hypervisor loads the requested data and a verified version of an application necessary to access the data into the secure partition creating a secure environment for accessing the data.