公开(公告)号：US20090260077A1

公开(公告)日：2009-10-15

申请号：US12101166

申请日：2008-04-11

Applicant: Bin Benjamin Zhu ,  Min Feng ,  Aimin Pan ,  Yuan Kong ,  Nathan C. Sherman ,  Hui Fan ,  Rui Guo ,  Josh Benaloh

Inventor： Bin Benjamin Zhu ,  Min Feng ,  Aimin Pan ,  Yuan Kong ,  Nathan C. Sherman ,  Hui Fan ,  Rui Guo ,  Josh Benaloh

IPC: H04L9/32 ,  G06F21/00

CPC classification number: G06F21/34 ,  G06F21/40 ,  G06F21/41 ,  G06F21/46 ,  H04L63/083

Abstract: A security-enhanced login technique that provides a convenient and easy-to-use two factor technique to enhance the security of passwords without requiring any changes on the server side of a client-server network. The technique employs a convenient and easy-to-use two-factor technique to generate strong passwords for Web and other applications. In this technique, a convenient or personal device such as a mouse is used as the other factor besides a user password. A secret stored in the mouse or other personal device is hashed together with the password entered by a user and the server ID, to generate a strong, server-specific password which is used to authenticate the user to the server. This password enhancement operation is carried out inside the personal device.

Abstract translation: 一种安全增强的登录技术，提供了一种方便易用的双因素技术来增强密码的安全性，而不需要在客户端 - 服务器网络的服务器端进行任何更改。 该技术采用方便易用的双因素技术为Web和其他应用程序生成强大的密码。 在这种技术中，除了用户密码之外，还使用诸如鼠标之类的便利的或个人的设备作为另一个因素。 存储在鼠标或其他个人设备中的秘密与用户输入的密码和服务器ID一起被散列，以生成用于向服务器认证用户的强大的服务器专用密码。 该密码增强操作在个人设备内部进行。

公开(公告)号：US20120110433A1

公开(公告)日：2012-05-03

申请号：US12914638

申请日：2010-10-28

Applicant: Aimin Pan ,  Bin Benjamin Zhu ,  Kaimin Zhang ,  Lu Wang

Inventor： Aimin Pan ,  Bin Benjamin Zhu ,  Kaimin Zhang ,  Lu Wang

IPC: G06F17/20

CPC classification number: G06F17/211

Abstract: Methods and systems for parallel Web page processing are usable to parallelize Web page document parsing, Web page layout calculations, Web page style formatting, and Web page script engine processing. Such parallelized parsers may be used to enhance Web page processing and exploit multi-core and multi-processor computing device resources. The parallelized script engine may be used to enhance Web page processing when independent scripting events exist in the Web page document. Additionally, the parallelized layout calculations and style formatting may be used to further enhance Web page processing by allowing multi-core and multi-processor computing devices to take advantage of their parallel processing abilities.

Abstract translation: 用于并行网页处理的方法和系统可用于并行化网页文档解析，网页布局计算，网页样式格式化和网页脚本引擎处理。 这种并行解析器可以用于增强网页处理并利用多核和多处理器计算设备资源。 并行脚本引擎可用于在网页文档中存在独立脚本事件时增强网页处理。 另外，并行布局计算和样式格式可以用于通过允许多核和多处理器计算设备利用其并行处理能力来进一步增强网页处理。

公开(公告)号：US07590519B2

公开(公告)日：2009-09-15

申请号：US11269133

申请日：2005-11-08

Applicant: Shiding Lin ,  Aimin Pan ,  Rui Guo ,  Zheng Zhang

Inventor： Shiding Lin ,  Aimin Pan ,  Rui Guo ,  Zheng Zhang

IPC: G06F9/455

CPC classification number: G06F17/5009

Abstract: Distributed system simulation is enhanced by extending the simulation window. In a described implementation, the simulation window extension is facilitated with a slow message relaxation scheme. For example, especially when the simulation window is extended, slow unscheduled events can arrive at a logical process with a timestamp that is prior to (e.g., less than) the local time of a receiving logical process that is participating in a simulation. To ameliorate issues created by a slow unscheduled message and its corresponding slow unscheduled event, a current logical time of the receiving logical process is substituted for the original timestamp of the slow unscheduled event to transform it into a punctual unscheduled event.

Abstract translation: 通过扩展仿真窗口来增强分布式系统仿真。 在所描述的实现中，通过慢消息松弛方案来促进模拟窗口扩展。 例如，特别是当模拟窗口被扩展时，缓慢的非预定事件可以到达逻辑进程，该时间戳在参与模拟的接收逻辑进程的（例如，小于）本地时间之前。 为了改善缓慢的非计划消息及其相应的缓慢的非调度事件所产生的问题，接收逻辑进程的当前逻辑时间被替换为慢速非预定事件的原始时间戳，以将其转换成准时的非调度事件。

公开(公告)号：US08869109B2

公开(公告)日：2014-10-21

申请号：US12050159

申请日：2008-03-17

Applicant: Aimin Pan ,  Kaimin Zhang ,  Bin Zhu

Inventor： Aimin Pan ,  Kaimin Zhang ,  Bin Zhu

IPC: G06F9/44 ,  G06F9/45 ,  G06F11/00

CPC classification number: G06F8/53

Abstract: A method for disassembling an executable binary (binary). In one implementation, a plurality of potential address references may be identified based on the binary and a plurality of storage addresses containing the binary. A plurality of assembler source code instructions (instructions) may be generated by disassembling the binary. The binary may be disassembled at one or more sequential addresses starting at each of the plurality of potential address references.

Abstract translation: 一种拆卸可执行二进制（二进制）的方法。 在一个实现中，可以基于二进制和多个包含二进制的存储地址来识别多个潜在地址引用。 可以通过拆卸二进制来生成多个汇编源代码指令（指令）。 二进制码可以在从多个潜在地址引用中的每一个开始的一个或多个顺序地址处被分解。

公开(公告)号：US20120260157A1

公开(公告)日：2012-10-11

申请号：US13083835

申请日：2011-04-11

Applicant: Bin Benjamin Zhu ,  Aimin Pan ,  Kaimin Zhang ,  Shipeng Li

Inventor： Bin Benjamin Zhu ,  Aimin Pan ,  Kaimin Zhang ,  Shipeng Li

IPC: G06F15/167 ,  G06F17/00

CPC classification number: H04L67/1095 ,  G06F17/30902 ,  H04L67/2842

Abstract: A cooperative rendering cache browser (CRC-Browser) for a mobile device may cooperatively manage cached content with a proxy server to reduce redundant transmissions of processed Web data. Additionally, the CRC-Browser may provide stateful, thin-client Web browsing to maintain synchronized information about rendering objects of a Web page. Further, the CRC-Browser may cache only stable and/or visible document object model (DOM) elements and communicate a list of IDs of the cached elements to the proxy. Such stateful thin-client browsers may be useful for reducing battery drain, poor responsiveness, and high wireless network costs of mobile Web browsing.

Abstract translation: 用于移动设备的协作呈现缓存浏览器（CRC-Browser）可以与代理服务器协同地管理高速缓存的内容，以减少已处理的Web数据的冗余传输。 另外，CRC浏览器可以提供有状态的瘦客户端Web浏览以维护关于网页的呈现对象的同步信息。 此外，CRC-Browser可以仅缓存稳定和/或可见的文档对象模型（DOM）元素，并将缓存的元素的ID列表传递给代理。 这种有状态的瘦客户机浏览器可能有助于减少电池消耗，响应速度差以及移动网页浏览的高无线网络成本。

公开(公告)号：US20120110437A1

公开(公告)日：2012-05-03

申请号：US12914163

申请日：2010-10-28

Applicant: Aimin Pan ,  Bin Benjamin Zhu ,  Kaimin Zhang ,  Lu Wang

Inventor： Aimin Pan ,  Bin Benjamin Zhu ,  Kaimin Zhang ,  Lu Wang

IPC: G06F17/00

CPC classification number: G06F16/9574

Abstract: Methods and systems for style and/or layout caching of Web content are usable to build reusable style caching trees and cacheable layout calculations. Such style caching trees may be used to avoid recalculating style content of Web pages for document object model (DOM) elements that have not changed. Additionally, the cacheable layout calculations may be used to avoid recalculating the layout content of Web pages that are subsequently accessed.

Abstract translation: Web内容的样式和/或布局缓存的方法和系统可用于构建可重用的样式缓存树和可高速缓存的布局计算。 可以使用这种样式缓存树来避免重新计算未更改的文档对象模型（DOM）元素的网页的样式内容。 此外，可缓存布局计算可用于避免重新计算随后访问的网页的布局内容。

公开(公告)号：US08117660B2

公开(公告)日：2012-02-14

申请号：US12141918

申请日：2008-06-19

Applicant: Aimin Pan ,  Kaimin Zhang ,  Hai Long ,  Bin Benjamin Zhu

Inventor： Aimin Pan ,  Kaimin Zhang ,  Hai Long ,  Bin Benjamin Zhu

IPC: G06F11/00

CPC classification number: G06F21/54

Abstract: A cross-module detection system and method for detecting and monitoring control flow transfers between software modules in a computer system. The system and method detect and monitor control flows entering and exiting the software modules. For a particular module, a checking model is extracted from the binary file of that module. In addition, a relaxed shadow stack is generated. If the module is an original module, meaning that the control flow originated from that module, then the checking model is used to check the validity of the control flow transfer. Otherwise, the relaxed shadow stack is used. An interception module is used to intercept and terminate invalid control flow transfers. If an invalid control flow transfer is detected, then the transfer is terminated. Otherwise, the control flow transfer is allowed to continue.

Abstract translation: 一种用于检测和监视计算机系统中的软件模块之间的控制流传输的交叉模块检测系统和方法。 系统和方法检测和监控进出软件模块的控制流程。 对于特定模块，从该模块的二进制文件中提取检查模型。 另外，产生一个轻松的影子堆栈。 如果模块是原始模块，意味着控制流源自该模块，则使用检查模型来检查控制流传输的有效性。 否则，使用轻松的影子堆栈。 截取模块用于拦截和终止无效控制流传输。 如果检测到无效的控制流传输，则传送终止。 否则，允许控制流传输继续。

公开(公告)号：US20090299875A1

公开(公告)日：2009-12-03

申请号：US12129701

申请日：2008-05-30

Applicant: Bin Zhu ,  Rui Guo ,  Min Feng ,  Aimin Pan

Inventor： Bin Zhu ,  Rui Guo ,  Min Feng ,  Aimin Pan

IPC: G06Q30/00

CPC classification number: G06Q30/06 ,  G06Q30/0601

Abstract: A system for facilitating online shopping that includes one or more content providers of a first domain, one or more online merchants of a second domain, and a framework. Web pages may be aggregated from the content providers. Descriptions of products for sale may be aggregated from the online merchants. The products for sale may be matched with the web pages based on relevancy. A list of descriptions of products that are relevant to each web page may be provided. A shopping cart list may be maintained by the framework. The shopping cart list may facilitate payment for the products for sale selected from different web pages.

Abstract translation: 一种用于促进在线购物的系统，其包括第一域的一个或多个内容提供商，第二域的一个或多个在线商家和框架。 可以从内容提供商聚合网页。 可以从在线商家汇总出售产品的描述。 出售的产品可能会根据相关性与网页匹配。 可以提供与每个网页相关的产品的描述的列表。 框架可以维护购物车列表。 购物车列表可以促进从不同网页选择的销售产品的支付。

公开(公告)号：US20090265760A1

公开(公告)日：2009-10-22

申请号：US12106300

申请日：2008-04-20

Applicant: Bin Benjamin Zhu ,  Rui Guo ,  Min Feng ,  Aimin Pan

Inventor： Bin Benjamin Zhu ,  Rui Guo ,  Min Feng ,  Aimin Pan

IPC: H04L9/32

CPC classification number: G06F21/53 ,  G06F2221/2119 ,  H04L63/10 ,  H04L63/168 ,  H04L67/02

Abstract: A component-oriented web mashup system and method for communicating between component-oriented Web gadgets to facilitate secure Web mashups. Embodiments of the system and method redefine the traditional definition of gadget to mean a Web component having a verifiable controlled communication channel (a CompoWeb gadget). A CompoWeb gadget is created and defined using new HTML tags and global script objects and functions that extend the functions of the browser. CompoWeb gadget content is treated as a component that is isolated from other gadgets and frames by a browser, and only those allowed access can view data and code therein. Called functions of a CompoWeb gadget are run in the callee's environment instead of the caller's environment. This adds security, because all the requesting CompoWeb gadget receives is the run result. Embodiments of the system and method also include delayed binding of CompoWeb gadgets, such that binding is performed at run time.

Abstract translation: 面向组件的Web混搭系统和方法，用于在面向组件的Web小配件之间进行通信，以促进安全的Web混搭。 系统和方法的实施例重新定义了小工具的传统定义，意味着具有可验证的受控通信通道（CompoWeb小工具）的Web组件。 使用新的HTML标签和扩展浏览器功能的全局脚本对象和功能来创建和定义CompoWeb小工具。 CompoWeb小工具内容被视为与浏览器与其他小工具和框架隔离的组件，只有那些允许的访问可以在其中查看数据和代码。 调用CompoWeb小工具的功能是在被调用者的环境中运行，而不是调用者的环境。 这增加了安全性，因为所有请求的CompoWeb小工具都是运行结果。 系统和方法的实施例还包括CompoWeb小工具的延迟绑定，使得在运行时执行绑定。

公开(公告)号：US20090320129A1

公开(公告)日：2009-12-24

申请号：US12141918

申请日：2008-06-19

Applicant: Aimin Pan ,  Kaimin Zhang ,  Hai Long ,  Bin Benjamin Zhu

Inventor： Aimin Pan ,  Kaimin Zhang ,  Hai Long ,  Bin Benjamin Zhu

IPC: G06F12/14

CPC classification number: G06F21/54

Abstract: A cross-module detection system and method for detecting and monitoring control flow transfers between software modules in a computer system. The system and method detect and monitor control flows entering and exiting the software modules. For a particular module, a checking model is extracted from the binary file of that module. In addition, a relaxed shadow stack is generated. If the module is an original module, meaning that the control flow originated from that module, then the checking model is used to check the validity of the control flow transfer. Otherwise, the relaxed shadow stack is used. An interception module is used to intercept and terminate invalid control flow transfers. If an invalid control flow transfer is detected, then the transfer is terminated. Otherwise, the control flow transfer is allowed to continue.

Abstract translation: 一种用于检测和监视计算机系统中的软件模块之间的控制流传输的交叉模块检测系统和方法。 系统和方法检测和监控进出软件模块的控制流程。 对于特定模块，从该模块的二进制文件中提取检查模型。 另外，产生一个轻松的影子堆栈。 如果模块是原始模块，意味着控制流源自该模块，则使用检查模型来检查控制流传输的有效性。 否则，使用轻松的影子堆栈。 截取模块用于拦截和终止无效控制流传输。 如果检测到无效的控制流传输，则传送终止。 否则，允许控制流传输继续。