Gregory Dardyk

US Patent:

20090282474, Nov 12, 2009

Filed:

May 8, 2008

Appl. No.:

12/117650

Inventors:

J. Bradley Chen - Los Gatos CA, US
Matthew T. Harren - Fremont CA, US
Matthew Papakipos - Palo Alto CA, US
David C. Sehr - Cupertino CA, US
Bennet S. Yee - Mountain View CA, US
Gregory Dardyk - Menlo Park CA, US

Assignee:

GOOGLE INC. - Mountain View CA

International Classification:

G06F 21/22

US Classification:

726 21

Abstract:

A system that safely executes a native code module on a computing device. During operation, the system receives the native code module, which is comprised of untrusted native program code expressed using native instructions in the instruction set architecture associated with the computing device. The system then loads the native code module into a secure runtime environment, and proceeds to execute a set of instructions from the native code module in the secure runtime environment. The secure runtime environment enforces code integrity, control-flow integrity, and data integrity for the native code module. Furthermore, the secure runtime environment moderates which resources can be accessed by the native code module on the computing device and/or how these resources can be accessed. By executing the native code module in the secure runtime environment, the system facilitates achieving native code performance for untrusted program code without a significant risk of unwanted side effects.

US Patent:

20130185787, Jul 18, 2013

Filed:

Mar 6, 2013

Appl. No.:

13/787616

Inventors:

J. Bradley Chen - Los Gatos CA, US
Matthew T. Harren - Fremont CA, US
Matthew Papakipos - Palo Alto CA, US
David C. Sehr - Cupertino CA, US
Bennet S. Yee - Mountain View CA, US
Gregory Dardyk - Menlo Park CA, US

International Classification:

G06F 21/53

US Classification:

726 16

Abstract:

A system that safely executes a native code module on a computing device. During operation, the system receives the native code module, which is comprised of untrusted native program code expressed using native instructions in the instruction set architecture associated with the computing device. The system then loads the native code module into a secure runtime environment, and proceeds to execute a set of instructions from the native code module in the secure runtime environment. The secure runtime environment enforces code integrity, control flow integrity, and data integrity for the native code module. Furthermore, the secure runtime environment moderates which resources can be accessed by the native code module on the computing device and/or how these resources can be accessed. By executing the native code module in the secure runtime environment, the system facilitates achieving native code performance for untrusted program code without a significant risk of unwanted side effects.