专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08024770B2 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US08024770B2
公开(公告)日：2011-09-20
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00 , H04L9/32 , G06F7/04
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

2. 发明申请

US20060206925A1 Delegating right to access resource or the like in access management system 有权
标题翻译：在访问管理系统中授权访问资源等
公开(公告)号：US20060206925A1
公开(公告)日：2006-09-14
申请号：US11077574
申请日：2005-03-11
申请人： Blair Dillaway , Brian LaMacchia , Muthukrishnan Paramasivam , Charles Rose , Ravindra Pandya
发明人： Blair Dillaway , Brian LaMacchia , Muthukrishnan Paramasivam , Charles Rose , Ravindra Pandya
IPC分类号： H04L9/32
CPC分类号： G06F21/62 , G06F21/33 , G06F2221/2145
摘要： A resource of a first organization provides access thereto to a requestor of a second organization. A first administrator of the first organization issues a first credential to a second administrator of the second organization, including policy that the second administrator may issue a second credential to the requestor on behalf of the first administrator. The second administrator issues the second credential to the requester, including the issued first credential. The requestor requests access from the resource and includes the issued first and second credentials. The resource validates that the issued first credential ties the first administrator to the second administrator, and that the issued second credential ties the second administrator to the requester. The resource thus knows that the request is based on rights delegated from the first administrator to the requester by way of the second administrator.
摘要翻译：第一组织的资源提供对第二组织的请求者的访问。第一个组织的第一个管理员向第二个组织的第二个管理员颁发第一个凭据，包括第二个管理员可以代表第一个管理员向请求者发出第二个凭证的策略。第二个管理员向请求者发出第二个凭证，包括发出的第一个凭证。请求者请求从资源的访问，并且包括发出的第一和第二凭证。该资源验证所发出的第一个凭证将第一个管理员与第二个管理员相关联，并且发出的第二个凭证将第二个管理员与请求者联系起来。因此，该资源知道该请求基于通过第二管理员从第一管理员委派给请求者的权限。

3. 发明授权

US06810479B1 System and method for configuring and managing resources on a multi-purpose integrated circuit card using a personal computer 失效
标题翻译：使用个人计算机在多用途集成电路卡上配置和管理资源的系统和方法
公开(公告)号：US06810479B1
公开(公告)日：2004-10-26
申请号：US09492882
申请日：2000-01-26
申请人： Doug Barlow , Blair Dillaway , Barbara Fox , Terry Lipscomb , Terrence Spies
发明人： Doug Barlow , Blair Dillaway , Barbara Fox , Terry Lipscomb , Terrence Spies
IPC分类号： H04K100
CPC分类号： G07F7/1008 , G06Q20/105 , G06Q20/341 , G06Q20/3552 , G06Q20/35765 , G06Q20/367 , G06Q20/3672 , G06Q20/40
摘要： A computerized system offers a uniform platform for conducting electronic transactions in multiple different environments. The system includes a portable, multi-purpose, integrated circuit (IC) card and complimentary computer software which enables access and management of resources maintained on the IC card. The software runs on a user's personal computer, empowering the user to initialize the IC card, configure the card with the resources that the user wants to maintain on the card, and to manage those resources. The software enables the user to generate private/public key pairs and establish or change passcodes for access to the card resources. The IC card itself provides the electronic vehicle for securely transporting the user's private keys and certificates without exposing them in plaintext form. The IC card is designed with enough processing capabilities to perform rudimentary cryptographic functions so that the private keys may be employed for signing or encryption without ever being released from the card.
摘要翻译：计算机化系统提供统一的平台，用于在多个不同环境中进行电子交易。该系统包括便携式，多功能集成电路（IC）卡和免费的计算机软件，其能够访问和管理在IC卡上维护的资源。该软件在用户的个人计算机上运行，使用户能够初始化IC卡，使用用户希望在卡上维护的资源来配置该卡并管理这些资源。该软件使用户能够生成私钥/公开密钥对，并建立或修改访问卡资源的密码。 IC卡本身提供用于安全地传送用户私钥和证书的电子车辆，而不以明文形式暴露它们。 IC卡设计有足够的处理能力来执行基本的加密功能，使得私钥可以被用于签名或加密，而不会从卡中释放。

4. 发明申请

US20060206712A1 Long-life digital certification for publishing long-life digital content or the like in content rights management system or the like 有权
公开(公告)号：US20060206712A1
公开(公告)日：2006-09-14
申请号：US11077051
申请日：2005-03-10
申请人： Blair Dillaway , Brian LaMacchia , John Manferdelli , Muthukrishnan Paramasivam
发明人： Blair Dillaway , Brian LaMacchia , John Manferdelli , Muthukrishnan Paramasivam
IPC分类号： H04L9/00
CPC分类号： H04L9/3265 , H04L9/3247 , H04L2209/60 , H04L2209/68
摘要： A digital certificate is employed to produce a digital signature for a digital construct. In the digital certificate is set forth a certificate validity period defining for the digital certificate a time period during which the digital certificate is to be honored as valid for producing digital signatures, and a signature validity period defining for each digital signature produced based on the digital certificate a time period during which the digital signature is to be honored as valid.

5. 发明申请

US20070300285A1 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US20070300285A1
公开(公告)日：2007-12-27
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

6. 发明授权

US07366918B2 Configuring and managing resources on a multi-purpose integrated circuit card using a personal computer 有权
标题翻译：使用个人计算机配置和管理多用途集成电路卡上的资源
公开(公告)号：US07366918B2
公开(公告)日：2008-04-29
申请号：US10845690
申请日：2004-05-14
申请人： Doug Barlow , Blair Dillaway , Barbara Fox , Terry Lipscomb , Terrence Spies
发明人： Doug Barlow , Blair Dillaway , Barbara Fox , Terry Lipscomb , Terrence Spies
IPC分类号： G06F11/30 , G06F12/14 , H04L9/32 , H04L9/00 , H04N7/16 , G06F15/16 , G06F17/30
CPC分类号： G07F7/1008 , G06Q20/105 , G06Q20/341 , G06Q20/3552 , G06Q20/35765 , G06Q20/367 , G06Q20/3672 , G06Q20/40
摘要： The systems and methods provide for configuring and managing resources on a multi-purpose IC card. In one aspect, a user interface (UI) for an application is presented on a display device. A user is enabled via at least one graphical dialog screen of the UI to configure a communicatively coupled IC card. Management of one or more resources on the IC card is facilitated via at least one graphical dialog screen of the UI.
摘要翻译：这些系统和方法提供了在多功能IC卡上配置和管理资源。在一个方面，用于应用的用户界面（UI）被呈现在显示设备上。经由UI的至少一个图形对话屏幕启用用户以配置通信耦合的IC卡。通过UI的至少一个图形对话屏来促进IC卡上的一个或多个资源的管理。

7. 发明申请

US20060206931A1 Access control policy engine controlling access to resource based on any of multiple received types of security tokens 有权
标题翻译：访问控制策略引擎基于多种接收到的安全令牌中的任何一种来控制对资源的访问
公开(公告)号：US20060206931A1
公开(公告)日：2006-09-14
申请号：US11080806
申请日：2005-03-14
申请人： Blair Dillaway , John Manferdelli , Shawn Woods
发明人： Blair Dillaway , John Manferdelli , Shawn Woods
IPC分类号： H04L9/32
CPC分类号： H04L63/102 , G06F21/6218 , H04L63/0823
摘要： An access control policy engine associated with a resource determines whether to allow a request to access same. The engine receives the request with an security token, retrieves the token determines a type thereof, and maps access decision information in the token to a common format as at least one security claim setting forth adequate information to determine a right of the requestor. Thereafter, the engine retrieves a set of rules for accessing the resource, applies the rules to the security claims to determine whether to allow the request from the requestor, and if the request is to be allowed, provides the requestor access to the resource in accordance with the request and the rights of the requestor as determined based on the security claims.
摘要翻译：与资源相关联的访问控制策略引擎确定是否允许请求访问它。引擎使用安全令牌接收请求，检索令牌确定其类型，并将令牌中的访问决策信息映射到通用格式作为至少一个安全权利要求，其中提供足够的信息以确定请求者的权利。此后，引擎检索用于访问资源的一组规则，将规则应用于安全声明以确定是否允许来自请求者的请求，并且如果请求被允许，则根据请求提供对资源的请求者访问请求者的请求和权利根据担保权利要求确定。

8. 发明申请

US20050132202A1 Attesting to establish trust between computer entities 有权
标题翻译：证明在计算机实体之间建立信任
公开(公告)号：US20050132202A1
公开(公告)日：2005-06-16
申请号：US10734028
申请日：2003-12-11
申请人： Blair Dillaway , Paul England , Marcus Peinado
发明人： Blair Dillaway , Paul England , Marcus Peinado
IPC分类号： H04L9/08 , H04L9/32 , H04L9/00
CPC分类号： H04L9/0825 , H04L9/3226 , H04L9/3247 , H04L9/3265 , H04L2209/56
摘要： To establish trust between first and second entities, the first entity sends an attestation message to the second entity, including a code ID, relevant data, a digital signature based on the code ID and data, and a certificate chain. The second entity verifies the signature and decides whether to in fact enter into a trust-based relationship with the first entity based on the code ID and the data in the attestation message. Upon so deciding, the second entity sends a trust message to the first entity, including a secret to be shared between the first and second entities. The first entity obtains the shared secret in the trust message and employs the shared secret to exchange information with the second entity.
摘要翻译：为了在第一和第二实体之间建立信任，第一实体向第二实体发送认证消息，包括代码ID，相关数据，基于代码ID和数据的数字签名以及证书链。第二实体验证签名，并且基于代码ID和认证消息中的数据来确定是否实际上与第一实体进行基于信任的关系。在这样确定的情况下，第二实体向第一实体发送信任消息，包括要在第一和第二实体之间共享的秘密。第一实体获取信任消息中的共享密钥，并使用共享密钥与第二实体交换信息。

9. 发明授权

US6038551A System and method for configuring and managing resources on a multi-purpose integrated circuit card using a personal computer 失效
标题翻译：使用个人计算机在多用途集成电路卡上配置和管理资源的系统和方法
公开(公告)号：US6038551A
公开(公告)日：2000-03-14
申请号：US647199
申请日：1996-03-11
申请人： Doug Barlow , Blair Dillaway , Barbara Fox , Terry Lipscomb , Terrence Spies
发明人： Doug Barlow , Blair Dillaway , Barbara Fox , Terry Lipscomb , Terrence Spies
IPC分类号： G07F7/10 , G06F17/60
CPC分类号： G07F7/1008 , G06Q20/105 , G06Q20/341 , G06Q20/3552 , G06Q20/35765 , G06Q20/367 , G06Q20/3672 , G06Q20/40
摘要： A computerized system offers a uniform platform for conducting electronic transactions in multiple different environments. The system includes a portable, multi-purpose, integrated circuit (IC) card and complimentary computer software which enables access and management of resources maintained on the IC card. The software runs on a user's personal computer, empowering the user to initialize the IC card, configure the card with the resources that the user wants to maintain on the card, and to manage those resources. The software enables the user to generate private/public key pairs and establish or change passcodes for access to the card resources. The IC card itself provides the electronic vehicle for securely transporting the user's private keys and certificates without exposing them in plaintext form. The IC card is designed with enough processing capabilities to perform rudimentary cryptographic functions so that the private keys may be employed for signing or encryption without ever being released from the card.
摘要翻译：计算机化系统提供统一的平台，用于在多个不同环境中进行电子交易。该系统包括便携式，多功能集成电路（IC）卡和免费的计算机软件，其能够访问和管理在IC卡上维护的资源。该软件在用户的个人计算机上运行，使用户能够初始化IC卡，使用用户想要维护在卡上的资源来配置卡，并管理这些资源。该软件使用户能够生成私钥/公开密钥对，并建立或修改访问卡资源的密码。 IC卡本身提供用于安全地传送用户私钥和证书的电子车辆，而不以明文形式暴露它们。 IC卡设计有足够的处理能力来执行基本的加密功能，使得私钥可以被用于签名或加密，而不会从卡中释放。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式