专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20090271510A1 NETWORK STATE PLATFORM 有权
标题翻译：网络状态平台
公开(公告)号：US20090271510A1
公开(公告)日：2009-10-29
申请号：US12111184
申请日：2008-04-28
申请人： Mudit Goel , Paul G. Mayfield
发明人： Mudit Goel , Paul G. Mayfield
IPC分类号： G06F15/16
CPC分类号： H04L41/0873 , H04L41/0803
摘要： A network state platform for managing a network having a number of network nodes is disclosed. A user provides a policy layer a high level instruction indicative of the desired network performance. The policy layer parses the high level instruction to generate a number of configuration instructions for the network nodes. The network nodes provide data logs of their activity to a data layer that collates the logs into a single entry that is stored, and can be accessed by an observation layer. External applications interface with the observation layer to access the stored data and use this information to generate requests to change portions of the network configuration. These requests are provided to a control layer that converts the requests from the applications to a high level instruction that is then provided to the policy layer to implement.
摘要翻译：公开了一种用于管理具有多个网络节点的网络的网络状态平台。用户向策略层提供指示所需网络性能的高级指令。策略层解析高级指令以生成网络节点的多个配置指令。网络节点将其活动的数据记录提供给将日志整理为存储的单个条目的数据层，并且可以由观察层访问。外部应用程序与观察层接口访问存储的数据，并使用此信息生成更改网络配置部分的请求。这些请求被提供给控制层，该控制层将来自应用的请求转换为高级指令，然后将其提供给策略层以实现。

12. 发明申请

US20080040773A1 Policy isolation for network authentication and authorization 审中-公开
标题翻译：网络认证和授权的策略隔离
公开(公告)号：US20080040773A1
公开(公告)日：2008-02-14
申请号：US11502828
申请日：2006-08-11
申请人： Majdi AlBadarin , Xuemei Bao , Paul G. Mayfield
发明人： Majdi AlBadarin , Xuemei Bao , Paul G. Mayfield
IPC分类号： H04L9/00
CPC分类号： H04L63/08 , H04L63/0892 , H04L63/102
摘要： Authentication, authorization, and accounting (AAA) operations are performed using policies isolated at application and/or network device level. Categorized policies are generated for applications and network access devices, and provided to a policy database associated with an AAA server. A policy engine evaluates requests for access at application or network access device level. The specific policies are indicated using a network access server type attribute within a policy tag included in a packet from the client. If no applicable policy is found, a default policy may be applied. An adaptive UI enables access to the policies based on user credentials.
摘要翻译：使用在应用和/或网络设备级隔离的策略来执行认证，授权和计费（AAA）操作。为应用程序和网络访问设备生成分类策略，并提供给与AAA服务器关联的策略数据库。策略引擎在应用程序或网络访问设备级别评估访问请求。使用来自客户端的数据包中包含的策略标签中的网络访问服务器类型属性指示具体策略。如果没有找到适用的策略，则可以应用默认策略。自适应UI可以根据用户凭据访问策略。

13. 发明授权

US09185091B2 Extensible access control architecture 有权
标题翻译：可扩展访问控制架构
公开(公告)号：US09185091B2
公开(公告)日：2015-11-10
申请号：US13630184
申请日：2012-09-28
申请人： Anthony M. Leibovitz , Mark C. Schurman , Mudit Goel , Paul G. Mayfield , Sudhakar Pasupuleti , Taroon Mandhana , Vivek P. Kamath , Wei Zheng , Xuemei Bao
发明人： Anthony M. Leibovitz , Mark C. Schurman , Mudit Goel , Paul G. Mayfield , Sudhakar Pasupuleti , Taroon Mandhana , Vivek P. Kamath , Wei Zheng , Xuemei Bao
IPC分类号： H04L29/06
CPC分类号： H04L63/0281 , H04L63/08 , H04L63/105 , H04L63/162 , H04L67/42
摘要： Software for managing access control functions in a network. The software includes a host that receives access control commands or information and calls one or more methods. The methods perform access control functions and communicate access control results or messages to be transmitted. The host may be installed in a network peer seeking access to the network or in a server controlling access to the network. When installed in a peer, the host receives commands and exchanges information with a supplicant. When installed in an access control server, the host receives commands and exchanges information with an authenticator. The host has a flexible architecture that enables multiple features, such as allowing the same methods to be used for authentication by multiple supplicants, providing ready integration of third party access control software, simplifying network maintenance by facilitating upgrades of authenticator software and enabling access control functions other than peer authentication.
摘要翻译：用于管理网络中访问控制功能的软件。该软件包括接收访问控制命令或信息并调用一个或多个方法的主机。该方法执行访问控制功能并传送要发送的访问控制结果或消息。主机可以安装在寻求对网络的访问的网络对等体中，或者在控制对网络的访问的服务器中。当安装在对等体中时，主机接收命令并与请求者交换信息。当安装在访问控制服务器中时，主机接收命令并与验证者交换信息。主机具有灵活的架构，可实现多种功能，例如允许将相同的方法用于多个请求者的身份验证，提供第三方访问控制软件的即时集成，通过促进验证器软件升级和启用访问控制功能简化网络维护除了对等认证。

14. 发明授权

US08275989B2 Method of negotiating security parameters and authenticating users interconnected to a network 有权
标题翻译：协商安全参数和认证与网络互连的用户的方法
公开(公告)号：US08275989B2
公开(公告)日：2012-09-25
申请号：US12500381
申请日：2009-07-09
申请人： Christian Huitema , Paul G. Mayfield , Brian D. Swander , Sara Bitan , Daniel R. Simon
发明人： Christian Huitema , Paul G. Mayfield , Brian D. Swander , Sara Bitan , Daniel R. Simon
IPC分类号： H04L29/06
CPC分类号： H04L63/061 , H04L9/0844 , H04L63/0823 , H04L63/164 , H04L63/20
摘要： A method for authenticating and negotiating security parameters among two or more network devices is disclosed. The method has a plurality of modes including a plurality of messages exchanged between the two or more network devices. In a main mode, the two or more network devices establish a secure channel and select security parameters to be used during a quick mode and a user mode. In the quick mode, the two or more computers derive a set of keys to secure data sent according to a security protocol. The optional user mode provides a means of authenticating one or more users associated with the two or more network devices. A portion of the quick mode is conducted during the main mode thereby minimizing the plurality of messages that need to be exchanged between the initiator and the responder.
摘要翻译：公开了一种用于在两个或多个网络设备之间认证和协商安全参数的方法。该方法具有多个模式，包括在两个或多个网络设备之间交换的多个消息。在主模式中，两个或多个网络设备建立安全通道并选择在快速模式和用户模式期间使用的安全参数。在快速模式下，两台或多台计算机派生一组密钥来保护根据安全协议发送的数据。可选的用户模式提供了认证与两个或多个网络设备相关联的一个或多个用户的手段。快速模式的一部分在主模式期间进行，从而最小化需要在启动器和应答器之间交换的多个消息。

15. 发明授权

US08185740B2 Consumer computer health validation 有权
标题翻译：消费者电脑健康验证
公开(公告)号：US08185740B2
公开(公告)日：2012-05-22
申请号：US11728608
申请日：2007-03-26
申请人： Calvin Choon-Hwan Choe , Paul G. Mayfield
发明人： Calvin Choon-Hwan Choe , Paul G. Mayfield
IPC分类号： H04L9/32
CPC分类号： H04L63/145 , G06F21/33 , G06F21/50 , G06F21/577 , H04L63/10 , H04L63/1441
摘要： Consumer computers that are not properly configured for safe access to a web service are protected from damage by controlling access to web services based on the health of the client computer. A client health web service receives health information from the client computer, determines the health status of the consumer computer, and issues a token to the consumer computer indicating its health status. The consumer computer can provide this token to other web services, which in turn may provide access to the consumer computer based on the health status indicated in the token. The client health web service may be operated as a web service specifically to determine the health of consumer computers or may have other functions, including providing access to the Internet. Also, the health information may be proxied to another device, such as a gateway device, that manages interactions with the client health web service.
摘要翻译：未正确配置为安全访问Web服务的消费者计算机通过根据客户端计算机的运行状况控制对Web服务的访问，免受损坏。客户端健康Web服务从客户端计算机接收健康信息，确定消费者计算机的健康状况，并向消费者计算机发出表示其健康状态的令牌。消费者计算机可以将这个令牌提供给其他web服务，其又可以基于令牌中指示的健康状态来提供对消费者计算机的访问。客户端健康Web服务可以作为Web服务来专门用于确定消费者计算机的健康状况，或者可以具有其他功能，包括提供对因特网的访问。此外，健康信息可以被代理到管理与客户端健康web服务的交互的另一设备，例如网关设备。

16. 发明授权

US07793096B2 Network access protection 有权
标题翻译：网络访问保护
公开(公告)号：US07793096B2
公开(公告)日：2010-09-07
申请号：US11395559
申请日：2006-03-31
申请人： Ryan M. Hurst , Ekta H. Manaktala , Paul G. Mayfield , Vivek P. Kamath
发明人： Ryan M. Hurst , Ekta H. Manaktala , Paul G. Mayfield , Vivek P. Kamath
IPC分类号： H04L29/06
CPC分类号： H04L9/3263 , H04L63/0823 , H04L63/20 , H04L2209/88
摘要： A method is provided for use in a computer system including a client and a health registration authority. The health registration authority is configured to accept requests for assertions, and the client has a health state described by at least one health claim. The method may include an act of including an indication of the at least one health claim of the client in a request for an assertion. A second method is provided for use in a computer system comprising a client, an assertion authority, and a plurality of health policies. The method can include an act of including an indication of at least one health policy that the health claim of the client satisfies in an assertion.
摘要翻译：提供了一种在包括客户端和健康注册机构的计算机系统中使用的方法。健康注册机构被配置为接受断言请求，并且客户端具有由至少一个健康声明描述的健康状态。该方法可以包括在请求断言中包括客户端的至少一个健康声明的指示的动作。提供了一种在计算机系统中使用的第二种方法，该计算机系统包括客户端，断言权限以及多个健康策略。该方法可以包括包括在断言中满足客户的健康声明的至少一个健康策略的指示的动作。

17. 发明申请

US20090077648A1 METHOD FOR MANAGING NETWORK FILTER BASED POLICIES 有权
标题翻译：管理基于网络过滤器的方法
公开(公告)号：US20090077648A1
公开(公告)日：2009-03-19
申请号：US12183294
申请日：2008-07-31
申请人： Brian D. Swander , Avnish Kumar Chhabra , Paul G. Mayfield
发明人： Brian D. Swander , Avnish Kumar Chhabra , Paul G. Mayfield
IPC分类号： G06F21/00
CPC分类号： H04L63/0263
摘要： A method and system are provided for adding, removing, and managing a plurality of network policy filters in a network device. Filters are installed in a framework and designated as active or disabled. Each filter has a priority. When a new filter is to be installed into the framework, it is compared to installed filters to determine if a conflict exists. If no conflict exists, the new filter is added as an active filter. If a conflict exists, a higher priority conflicting filter is added as active and a lower priority filter is added as inactive.
摘要翻译：提供了一种用于在网络设备中添加，删除和管理多个网络策略过滤器的方法和系统。过滤器安装在框架中，并指定为活动或禁用。每个过滤器都有优先权。当将新的过滤器安装到框架中时，将其与已安装的过滤器进行比较，以确定是否存在冲突。如果没有冲突，新的过滤器将作为活动过滤器添加。如果存在冲突，则将优先级较高的冲突过滤器添加为活动状态，并将较低优先级的过滤器添加为非活动状态。

18. 发明授权

US07409707B2 Method for managing network filter based policies 有权
标题翻译：基于网络过滤器的策略的方法
公开(公告)号：US07409707B2
公开(公告)日：2008-08-05
申请号：US10456433
申请日：2003-06-06
申请人： Brian D. Swander , Avnish Kumar Chhabra , Paul G. Mayfield
发明人： Brian D. Swander , Avnish Kumar Chhabra , Paul G. Mayfield
IPC分类号： H04L12/56
CPC分类号： H04L63/0263
摘要： A method and system are provided for adding, removing, and managing a plurality of network policy filters in a network device. Filters are installed in a framework and designated as active or disabled. Each filter has a priority. When a new filter is to be installed into the framework, it is compared to installed filters to determine if a conflict exists. If no conflict exists, the new filter is added as an active filter. If a conflict exists, a higher priority conflicting filter is added as active and a lower priority filter is added as inactive.
摘要翻译：提供了一种用于在网络设备中添加，删除和管理多个网络策略过滤器的方法和系统。过滤器安装在框架中，并指定为活动或禁用。每个过滤器都有优先权。当将新的过滤器安装到框架中时，将其与已安装的过滤器进行比较，以确定是否存在冲突。如果没有冲突，新的过滤器将作为活动过滤器添加。如果存在冲突，则将优先级较高的冲突过滤器添加为活动状态，并将较低优先级的过滤器添加为非活动状态。

19. 发明申请

US20070234040A1 Network access protection 有权
标题翻译：网络访问保护
公开(公告)号：US20070234040A1
公开(公告)日：2007-10-04
申请号：US11395559
申请日：2006-03-31
申请人： Ryan M. Hurst , Ekta H. Manaktala , Paul G. Mayfield , Vivek P. Kamath
发明人： Ryan M. Hurst , Ekta H. Manaktala , Paul G. Mayfield , Vivek P. Kamath
IPC分类号： H04L9/00
CPC分类号： H04L9/3263 , H04L63/0823 , H04L63/20 , H04L2209/88
摘要： A method is provided for use in a computer system including a client and a health registration authority. The health registration authority is configured to accept requests for assertions, and the client has a health state described by at least one health claim. The method may include an act of including an indication of the at least one health claim of the client in a request for an assertion. A second method is provided for use in a computer system comprising a client, an assertion authority, and a plurality of health policies. The method can include an act of including an indication of at least one health policy that the health claim of the client satisfies in an assertion.
摘要翻译：提供了一种在包括客户端和健康注册机构的计算机系统中使用的方法。健康注册机构被配置为接受断言请求，并且客户端具有由至少一个健康声明描述的健康状态。该方法可以包括在请求断言中包括客户端的至少一个健康声明的指示的动作。提供了一种在计算机系统中使用的第二种方法，该计算机系统包括客户端，断言权限以及多个健康策略。该方法可以包括包括在断言中满足客户的健康声明的至少一个健康策略的指示的动作。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式