1. An image based bar code scanner having a cashier side and a customer side, the image based bar code scanner comprising:
an imaging device for capturing an image of a bar code presented by a cashier within a cashier field of view on the cashier side;
a rotating multifaceted mirrored spinner for reflecting an image of the bar code, with the rotating spinner being positioned and oriented such that a field of view of the scanner encompasses images of the bar code reflected by the spinner to the imaging device and such that the rotation of the mirror acts to provide the imaging device with a changing field of view, wherein the field of view of the scanner is changed to a customer side field of view and the imaging device then captures an image from the customer side.
2. The image based scanner of claim 1, further comprising one or more sets of fixed mirrors positioned and oriented such the fields of view of the imaging device are positioned and oriented such that the rotation of the spinner causes the field of view of the scanner to shift between a vertical scan window and a horizontal scan window on the cashier side.
3. The image based bar code scanner of claim 1, further comprising an illuminator directing an illumination beam such that the beam is reflected from the spinner to illuminate the field of view of the scanner.
4. The image based bar code scanner of claim 1 further comprising:
a customer presentation window; and
a detector to detect an item presented by a customer at the customer presentation window.
5. The image based bar code scanner of claim 4 further comprising:
an actuator to move a mirror arrangement; and
a controller to drive the actuator in response to detection of the item presented by the customer to switch the field of view to the customer side.
6. The image based bar code scanner of claim 1 wherein the customer side field of view includes a bottom of a customer cart on the customer side.
7. The image based bar code scanner of claim 6 wherein the imaging device captures video of the bottom of the customer cart and provides that video to a cashier display.
8. The image based bar code scanner of claim 1 further comprising:
a cashier actuated mechanical actuator for manually switching from the cashier field of view to the customer side field of view.
9. A method of image based bar code scanning utilizing a bar code scanner comprising the steps of:
activating a rotating mirrored spinner so that a field of view of the bar code image scanner encompasses images of a first bar code reflected by the spinner to the imaging device, the bar code being presented by a cashier on a cashier side of the bar code scanner; and
changing the field of view of the bar code image scanner to encompass a second bar code presented by a customer at a customer presentation window on the customer side.
10. The method of claim 9, wherein the cashier field of view of the bar code image scanner shifts with the rotation of the spinner between a horizontal scan window and a vertical scan window.
11. The method of claim 9, further comprising directing an illumination beam such that the beam is reflected from the rotating spinner so as to illuminate the fields of view of the bar code image scanner.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. At least one non-transitory computer-readable medium having a plurality of instructions that, in response to execution of the instructions by one or more processing devices of an apparatus, cause the apparatus to:
operate a virtual machine manager, wherein the virtual machine manager is to regulate access to and protect different portions of an application of a virtual machine that resides in different portions of a physical memory of the apparatus by selective employment of different views with different permissions to map guest physical memory of the virtual machine to host physical memory of the apparatus.
2. The at least one non-transitory computer-readable medium of claim 1, wherein the different views are implemented using extended page tables.
3. The at least one non-transitory computer-readable medium of claim 1, wherein the virtual machine manager is to:
determine that a portion of the application in a portion of the physical memory that is inaccessible under a current view is to be accessed; and
selectively employ another view that permits access to the portion of the application based on whether instructions being executed or to be executed to access the portion of the application are malicious.
4. The at least one non-transitory computer-readable medium of claim 3, wherein the virtual machine manager is to compare the instructions being executed or to be executed to access the portion of the application to known malicious instructions.
5. The at least one non-transitory computer-readable medium of claim 3, wherein the virtual machine manager is to store in a log an indication of whether the another view was selectively employed.
6. The at least one non-transitory computer-readable medium of claim 3, wherein the virtual machine manager is to notify an anti-malware agent of the virtual machine when the instructions being executed or to be executed to access the portion of the application violate access permissions associated with the portion of the application.
7. A system, comprising:
physical memory; and
virtual machine manager logic, coupled with the physical memory, to map guest physical memory of a virtual machine operated by the processor to the host physical memory;
wherein the virtual machine manager logic is to use one of at least a first view and a second view to map guest physical memory of the virtual machine to the host physical memory, with the first view to permit access to a first portion of an application to be executed in the virtual machine in a first portion of the physical memory, but to limit or prohibit access to a second portion of the application in a second portion of the physical memory, and the second view to limit or prohibit access to the first portion of the application, but permit access to the second portion of the application.
8. The system of claim 7, wherein the virtual machine manager logic is to determine whether computer code being executed or to be executed to access the second portion of the application is malicious.
9. The system of claim 8, wherein the virtual machine manager logic is to compare computer code being executed or to be executed to access the portion of the application to known malicious or white listed computer code.
10. The system of claim 7, further comprising:
anti-malware agent logic to:
lock portions of the application in the guest physical memory;
create the first and second guest physical memory views for the application; and
provide, the virtual machine manager, respective associations between the application and the first and second views.
11. The system of claim 10, wherein the anti-malware agent logic is executable within the virtual machine in accordance with a first privilege level of the system, and the application is executable within the virtual machine in accordance with a second privilege level of the system that provides fewer privileges than the first privilege level.
12. The system of claim 10, wherein the first and second privilege levels are hardware privilege levels of the apparatus.
13. The system of claim 7, wherein the first and second views are implemented using extended page tables.
14. A method, comprising:
employing, by a virtual machine manager of a computing device, a first view with a first set of permissions to map guest physical memory of a virtual machine to host physical memory of the computing device; and
employing, by the virtual machine manager of the computing device, a second view with a second set of permissions different from the first set of permissions to map the guest physical memory of the virtual machine to the host physical memory of the computing device.
15. The method of claim 14, wherein the first and second views are implemented using extended page tables.
16. The method of claim 14, further comprising:
determining, by the virtual machine manager of the computing device prior to employing the second view, that a portion of an application of the virtual machine residing in a portion of the physical memory that is inaccessible under a current view is to be accessed;
wherein the second view permits access to the portion of the application, and wherein employing the second view is in response to a determination that instructions being executed or to be executed to access the portion of the application are not malicious.
17. The method of claim 16, further comprising:
comparing, by the virtual machine manager of the computing device, the instructions being executed or to be executed to access the portion of the application to known malicious instructions.
18. The method of claim 16, further comprising:
storing in a log, by the virtual machine manager of the computing device, an indication that the second view was employed.
19. The method of claim 16, further comprising:
notifying, by the virtual machine manager of the computing device, an anti-malware agent of the virtual machine when the instructions being executed or to be executed to access the portion of the application violate access permissions associated with the portion of the application.
20. The method of claim 19, wherein the anti-malware agent executes in accordance with a first privilege level of the computing device, and the application of the virtual machine executes in accordance with a second privilege level of the computing device that provides fewer privileges than the first privilege level.