公开(公告)号：WO2010039887A2

公开(公告)日：2010-04-08

申请号：PCT/US2009/059105

申请日：2009-09-30

Applicant: MICROSOFT CORPORATION

Inventor： OSHINS, Jacob ,  ALLSOP, Brandon ,  THORNTON, Andrew John

IPC: G06F13/14 ,  G06F9/22 ,  G06F21/00 ,  G06F9/44

CPC classification number: G06F9/45558 ,  G06F9/468 ,  G06F9/5077 ,  G06F2009/45579

Abstract: Various aspects are disclosed herein for bounding the behavior of a non-privileged virtual machine that interacts with a device by creating a description of the device which indicates to a privileged authority (1) which operations on the device may have system-wide effects and (2) which operations have effects local to the device. The privileged authority may then permit or deny these actions. The privileged authority may also translate these actions into other actions with benign consequences.

Abstract translation: 这里公开了用于通过创建指示给特权机构（1）的设备的描述来限制与设备交互的非特权虚拟机的行为的各个方面，所述特权机构（1）对设备上的哪些操作 可能具有全系统的影响，以及（2）哪些操作对设备具有本地影响。 特权当局然后可以允许或拒绝这些行为。 特权当局也可能将这些行为转化为其他带来良性后果的行为。

公开(公告)号：EP2335157A2

公开(公告)日：2011-06-22

申请号：EP09818470.8

申请日：2009-09-30

Applicant: Microsoft Corporation

Inventor： OSHINS, Jacob ,  ALLSOP, Brandon ,  THORNTON, Andrew John

IPC: G06F13/14 ,  G06F9/22 ,  G06F21/00 ,  G06F9/44

CPC classification number: G06F9/45558 ,  G06F9/468 ,  G06F9/5077 ,  G06F2009/45579

Abstract: Various aspects are disclosed herein for bounding the behavior of a non-privileged virtual machine that interacts with a device by creating a description of the device which indicates to a privileged authority (1) which operations on the device may have system-wide effects and (2) which operations have effects local to the device. The privileged authority may then permit or deny these actions. The privileged authority may also translate these actions into other actions with benign consequences.