专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008076760A2 DISTRIBUTED AUTHENTICATION, AUTHORIZATION AND ACCOUNTING 审中-公开
标题翻译：分销认证，授权和会计
公开(公告)号：WO2008076760A2
公开(公告)日：2008-06-26
申请号：PCT/US2007/087259
申请日：2007-12-12
申请人： IDENTITY ENGINES, INC. , CONVERY, Sean, J. , PEARCE, Andrew , THUSOO, Ashish , CHUA, Roy, L.
发明人： CONVERY, Sean, J. , PEARCE, Andrew , THUSOO, Ashish , CHUA, Roy, L.
IPC分类号： G06F21/24
CPC分类号： H04L63/08 , H04L63/0823 , H04L63/083 , H04L63/0892 , H04L63/104 , H04L63/20
摘要： In some embodiments, computer systems (22, 42, 512, 532, 552), storage mediums, and methods are provided for controlling a connecting device's (60, 70) access to a plurality (10) of computer networks. In other embodiments, the provided computer systems (22, 42, 512, 532, 552), storage mediums, and methods may provide for authentication, authorization, and accounting of connecting devices (60, 70) connecting to a plurality (10) of computer networks. In other embodiments, the provided computer systems (22, 42, 512, 532, 552), storage mediums, and methods may provide for the distribution of authentication routing data and authorization policies among a plurality (10) of computer networks. In yet other embodiments, the provided computer systems (22, 42, 512, 532, 552), storage mediums, and methods may provide for the distribution of accounting among a plurality (10) of computer networks.
摘要翻译：在一些实施例中，提供了计算机系统（22,42,512,532,552），存储介质和方法，用于控制连接设备（60,70）访问多个（10个）计算机网络。在其他实施例中，所提供的计算机系统（22,42,512,532,552），存储介质和方法可以提供连接到多个（10）的计算机系统的连接设备（60,70）的认证，授权和计费计算机网络。在其他实施例中，所提供的计算机系统（22,42,512,532,552），存储介质和方法可以在多个（10个）计算机网络之间提供认证路由数据和授权策略的分发。在其他实施例中，所提供的计算机系统（22,42,512,532,552），存储介质和方法可以提供在多个（10个）计算机网络中的计费分配。

2. 发明申请

WO2008076760A3 DISTRIBUTED AUTHENTICATION, AUTHORIZATION AND ACCOUNTING 审中-公开
标题翻译：分销认证，授权和会计
公开(公告)号：WO2008076760A3
公开(公告)日：2009-04-16
申请号：PCT/US2007087259
申请日：2007-12-12
申请人： IDENTITY ENGINES INC , CONVERY SEAN J , PEARCE ANDREW , THUSOO ASHISH , CHUA ROY L
发明人： CONVERY SEAN J , PEARCE ANDREW , THUSOO ASHISH , CHUA ROY L
IPC分类号： G06F7/04
CPC分类号： H04L63/08 , H04L63/0823 , H04L63/083 , H04L63/0892 , H04L63/104 , H04L63/20
摘要： In some embodiments, computer systems (22, 42, 512, 532, 552), storage mediums, and methods are provided for controlling a connecting device's (60, 70) access to a plurality (10) of computer networks. In other embodiments, the provided computer systems (22, 42, 512, 532, 552), storage mediums, and methods may provide for authentication, authorization, and accounting of connecting devices (60, 70) connecting to a plurality (10) of computer networks. In other embodiments, the provided computer systems (22, 42, 512, 532, 552), storage mediums, and methods may provide for the distribution of authentication routing data and authorization policies among a plurality (10) of computer networks. In yet other embodiments, the provided computer systems (22, 42, 512, 532, 552), storage mediums, and methods may provide for the distribution of accounting among a plurality (10) of computer networks.
摘要翻译：在一些实施例中，提供了计算机系统（22,42,512,532,552），存储介质和方法，用于控制连接设备（60,70）访问多个（10个）计算机网络。在其他实施例中，所提供的计算机系统（22,42,512,532,552），存储介质和方法可以提供连接到多个（10）的计算机系统的连接设备（60,70）的认证，授权和计费计算机网络。在其他实施例中，所提供的计算机系统（22,42,512,532,552），存储介质和方法可以在多个（10个）计算机网络之间提供认证路由数据和授权策略的分发。在其他实施例中，所提供的计算机系统（22,42,512,532,552），存储介质和方法可以提供在多个（10个）计算机网络中的计费分配。

3. 发明申请

WO2007106687A3 ROLE AWARE NETWORK SECURITY ENFORCEMENT 审中-公开
标题翻译：角色网络安全执行
公开(公告)号：WO2007106687A3
公开(公告)日：2008-10-30
申请号：PCT/US2007063458
申请日：2007-03-07
申请人： CISCO TECH INC , CONVERY SEAN , ORAN DAVID R , RIVERS JAMES , SCHNIZLEIN JOHN , DROMS RALPH , STAPP MARK
发明人： CONVERY SEAN , ORAN DAVID R , RIVERS JAMES , SCHNIZLEIN JOHN , DROMS RALPH , STAPP MARK
IPC分类号： G06F9/00 , G06F11/30
CPC分类号： H04L63/0263 , H04L29/12301 , H04L61/2076 , H04L63/0236 , H04L63/101 , H04L63/102 , H04L63/20 , H04W12/08
摘要： Generating a binding between a source address and one or more roles of a user (102) accessing the network (108) and distributing the binding to a filter node (140). The source address is currently assigned to the device (104). The binding may be generated by one or more nodes on an ingress path used during authentication of the user (102). The binding may be distributed to the filter node (140) on demand or without any request from the filter node (140). Responsive to a determination that the user (102) is associated with a new source address, a new binding is generated to associate a now source address with the one or more roles for the user. The new binding distributed to the filter node (140). Another aspect is a method of enforcing a role based security policy at a filter node (140), using bindings of source addresses to roles.
摘要翻译：生成源地址与访问网络（108）的用户（102）的一个或多个角色之间的绑定，并将绑定分发到过滤器节点（140）。源地址当前被分配给设备（104）。绑定可以由在用户（102）的认证期间使用的入口路径上的一个或多个节点生成。可以根据需要或不经过来自过滤器节点（140）的任何请求将绑定分发到过滤器节点（140）。响应于用户（102）与新的源地址相关联的确定，生成新的绑定以将现在的源地址与用户的一个或多个角色相关联。分配给过滤器节点（140）的新绑定。另一方面是使用源地址到角色的绑定来在过滤器节点（140）上实施基于角色的安全策略的方法。

4. 发明申请

WO2007106687A2 ROLE AWARE NETWORK SECURITY ENFORCEMENT 审中-公开
标题翻译：角色网络安全执行
公开(公告)号：WO2007106687A2
公开(公告)日：2007-09-20
申请号：PCT/US2007/063458
申请日：2007-03-07
申请人： CISCO TECHNOLOGY, INC., ET AL. , CONVERY, Sean , ORAN, David, R. , RIVERS, James , SCHNIZLEIN, John , DROMS, Ralph , STAPP, Mark
发明人： CONVERY, Sean , ORAN, David, R. , RIVERS, James , SCHNIZLEIN, John , DROMS, Ralph , STAPP, Mark
IPC分类号： H04L9/00
CPC分类号： H04L63/0263 , H04L29/12301 , H04L61/2076 , H04L63/0236 , H04L63/101 , H04L63/102 , H04L63/20 , H04W12/08
摘要： Generating a binding between a source address and one or more roles of a user accessing the network and distributing the binding to a filter node. The source address is currently assigned to the device. The binding may be generated by one or more nodes on an ingress path used during authentication of the user. The binding may be distributed to the filter node on demand or without any request from the filter node. Responsive to a determination that the user is associated with a new source address, a new binding is generated to associate a new source address with the one or more roles for the user. The new binding is distributed to the filter node. Another aspect is a method of enforcing a role based security policy at a filter node, using bindings of source addresses to roles.
摘要翻译：在源地址和访问网络的用户的一个或多个角色之间生成绑定，并将绑定分发到过滤器节点。源地址当前分配给设备。绑定可以由用户认证期间使用的入口路径上的一个或多个节点生成。绑定可以根据需要分配到过滤节点，也可以不经过过滤器节点的任何请求。响应于确定用户与新的源地址相关联，生成新的绑定以将新的源地址与用户的一个或多个角色相关联。新的绑定被分发到过滤器节点。另一方面是在过滤器节点上使用源地址绑定到角色来实施基于角色的安全策略的方法。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式