专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2007047183A2 SYSTEMS AND METHODS FOR FACILITATING DISTRIBUTED AUTHENTICATION 审中-公开
标题翻译：促进分发认证的制度和方法
公开(公告)号：WO2007047183A2
公开(公告)日：2007-04-26
申请号：PCT/US2006/039308
申请日：2006-10-06
申请人： CITRIX SYSTEMS, INC. , HALLS, David , MAYERS, Chris
发明人： HALLS, David , MAYERS, Chris
CPC分类号： H04L63/0815 , G06F21/33 , H04L63/0218 , H04L63/0407 , H04L63/0807
摘要： A method for facilitating distributed authentication includes the step of requesting, by a user of a client machine residing in a first domain, access to a resource residing in a second domain. The client machine authenticates the user to an intermediate machine. The intermediate machine impersonates the client machine. The intermediate machine impersonating the client machine requests access to the second domain from a domain controller residing in the second domain. The domain controller authorizes the requested access, responsive to a determination that the impersonated client machine is trusted for delegation. The domain controller transmits to an application server residing in the second domain, authentication data associated with the impersonated client machine. The application server transmits, to the intermediate machine, a launch ticket uniquely identifying a logon token. The client machine provides, to the application server, the launch ticket to access the resource residing in the second domain.
摘要翻译：用于促进分布式认证的方法包括由驻留在第一域中的客户端机器的用户请求对驻留在第二域中的资源的访问的步骤。客户端机器将用户认证到中间机器。中间机器模拟客户端机器。模拟客户端机器的中间机器请求从驻留在第二域中的域控制器访问第二域。响应于确定模拟的客户端计算机被信任进行授权，域控制器授权请求的访问。域控制器向驻留在第二域中的应用服务器发送与模拟客户机相关联的认证数据。应用服务器向中间机发送唯一标识登录令牌的发射机。客户机向应用服务器提供发送票以访问驻留在第二域中的资源。

2. 发明申请

WO2011081935A3 METHODS AND SYSTEMS FOR COMMUNICATING BETWEEN TRUSTED AND NON-TRUSTED VIRTUAL MACHINES 审中-公开
标题翻译：有害信号和非信号虚拟机之间的通信方法与系统
公开(公告)号：WO2011081935A3
公开(公告)日：2011-10-20
申请号：PCT/US2010060309
申请日：2010-12-14
申请人： CITRIX SYSTEMS INC , PRATT IAN , GUYADER JEAN , HANQUEZ VINCENT , MCKENZIE JAMES , PHILIPSON ROSS , SMITH STEVEN , NARASIMHAN KAMALA , HALLS DAVID , VAN DER LINDEN ROB
发明人： PRATT IAN , GUYADER JEAN , HANQUEZ VINCENT , MCKENZIE JAMES , PHILIPSON ROSS , SMITH STEVEN , NARASIMHAN KAMALA , HALLS DAVID , VAN DER LINDEN ROB
IPC分类号： G06F15/16 , G06F13/14
CPC分类号： G06F9/45533 , G06F9/45558 , G06F21/31 , G06F21/53 , G06F21/554 , G06F21/556 , G06F21/57 , G06F21/629 , G06F21/79 , G06F21/83 , G06F21/84 , G06F21/85 , G06F2009/45575 , G06F2009/45579 , G06F2009/45587 , G06F2221/2101 , G06F2221/2107 , G06F2221/2115 , G06F2221/2143 , G06F2221/2147 , G06F2221/2149 , H04L63/20
摘要： The methods and systems described herein provide for establishing a secure communication channel between a non-trusted virtual machine and a trusted virtual machine, in a computing device executing a hypervisor hosting the trusted virtual machine, the non-trusted virtual machine, and a third virtual machine. The method includes writing, by a non-trusted virtual machine, a first string of data to a region of memory of the computing device. The method also includes detecting, by a trusted virtual machine, the first string of data written to the region of memory. The method further includes establishing a communication channel between the trusted virtual machine and the non-trusted virtual machine by locking, by the trusted virtual machine and responsive to the detection, the region of memory for the duration of the communication to prevent a third virtual machine from accessing the region of memory.
摘要翻译：本文描述的方法和系统提供在执行托管可信虚拟机的管理程序的计算设备中，在不可信虚拟机和可信虚拟机之间建立安全通信信道，不可信虚拟机和第三虚拟机机。该方法包括由不可信虚拟机将第一数据串写入计算设备的存储器区域。该方法还包括由可信虚拟机检测写入存储器区域的第一数据串。该方法还包括通过可信虚拟机锁定可信虚拟机和不可信虚拟机之间的通信信道，并响应于检测在通信期间的存储器区域，以防止第三虚拟机从访问内存区域。

3. 发明申请

WO2011081935A2 METHODS AND SYSTEMS FOR COMMUNICATING BETWEEN TRUSTED AND NON-TRUSTED VIRTUAL MACHINES 审中-公开
标题翻译：用于在可信和不可信虚拟机之间进行通信的方法和系统
公开(公告)号：WO2011081935A2
公开(公告)日：2011-07-07
申请号：PCT/US2010/060309
申请日：2010-12-14
申请人： CITRIX SYSTEMS, INC. , PRATT, Ian , GUYADER, Jean , HANQUEZ, Vincent , MCKENZIE, James , PHILIPSON, Ross , SMITH, Steven , NARASIMHAN, Kamala , HALLS, David , VAN DER LINDEN, Rob
发明人： PRATT, Ian , GUYADER, Jean , HANQUEZ, Vincent , MCKENZIE, James , PHILIPSON, Ross , SMITH, Steven , NARASIMHAN, Kamala , HALLS, David , VAN DER LINDEN, Rob
IPC分类号： G06F15/16 , G06F13/14
CPC分类号： G06F9/45533 , G06F9/45558 , G06F21/31 , G06F21/53 , G06F21/554 , G06F21/556 , G06F21/57 , G06F21/629 , G06F21/79 , G06F21/83 , G06F21/84 , G06F21/85 , G06F2009/45575 , G06F2009/45579 , G06F2009/45587 , G06F2221/2101 , G06F2221/2107 , G06F2221/2115 , G06F2221/2143 , G06F2221/2147 , G06F2221/2149 , H04L63/20
摘要： The methods and systems described herein provide for establishing a secure communication channel between a non-trusted virtual machine and a trusted virtual machine, in a computing device executing a hypervisor hosting the trusted virtual machine, the non-trusted virtual machine, and a third virtual machine. The method includes writing, by a non-trusted virtual machine, a first string of data to a region of memory of the computing device. The method also includes detecting, by a trusted virtual machine, the first string of data written to the region of memory. The method further includes establishing a communication channel between the trusted virtual machine and the non-trusted virtual machine by locking, by the trusted virtual machine and responsive to the detection, the region of memory for the duration of the communication to prevent a third virtual machine from accessing the region of memory.
摘要翻译：这里描述的方法和系统用于在执行托管可信虚拟机的管理程序的计算设备中建立不可信虚拟机与可信虚拟机之间的安全通信信道，可信虚拟机和第三个虚拟机。该方法包括由不可信虚拟机将第一串数据写入计算设备的存储器的区域。该方法还包括由可信虚拟机检测写入存储器区域的第一数据串。该方法还包括通过由可信虚拟机和响应于该检测来锁定该通信持续时间的存储器区域来防止第三虚拟机在可信虚拟机与不可信虚拟机之间建立通信信道访问内存区域。

4. 发明申请

WO2007047183A3 SYSTEMS AND METHODS FOR FACILITATING DISTRIBUTED AUTHENTICATION 审中-公开
标题翻译：用于促进分布式认证的系统和方法
公开(公告)号：WO2007047183A3
公开(公告)日：2007-08-23
申请号：PCT/US2006039308
申请日：2006-10-06
申请人： CITRIX SYSTEMS INC , HALLS DAVID , MAYERS CHRIS
发明人： HALLS DAVID , MAYERS CHRIS
IPC分类号： G06F21/20
CPC分类号： H04L63/0815 , G06F21/33 , H04L63/0218 , H04L63/0407 , H04L63/0807
摘要： A method for facilitating distributed authentication includes the step of requesting, by a user of a client machine residing in a first domain, access to a resource residing in a second domain. The client machine authenticates the user to an intermediate machine. The intermediate machine impersonates the client machine. The intermediate machine impersonating the client machine requests access to the second domain from a domain controller residing in the second domain. The domain controller authorizes the requested access, responsive to a determination that the impersonated client machine is trusted for delegation. The domain controller transmits to an application server residing in the second domain, authentication data associated with the impersonated client machine. The application server transmits, to the intermediate machine, a launch ticket uniquely identifying a logon token. The client machine provides, to the application server, the launch ticket to access the resource residing in the second domain.
摘要翻译：一种用于促进分布式认证的方法包括以下步骤：由驻留在第一域中的客户机的用户请求对驻留在第二域中的资源的访问。客户端机器将用户认证到中间机器。中间机器模拟客户端机器。模拟客户端机器的中间机器请求从驻留在第二个域中的域控制器访问第二个域。响应于确定模拟的客户机被委托进行委托，域控制器授权所请求的访问。域控制器向驻留在第二域中的应用服务器发送与被冒充客户端机器相关联的认证数据。应用服务器向中间机发送唯一标识登录令牌的启动票。客户端机器向应用程序服务器提供启动票据以访问驻留在第二个域中的资源。

5. 发明申请

WO2005055026A1 METHODS AND APPARATUS FOR REMOTE AUTHENTICATION IN A SERVER-BASED COMPUTING SYSTEM 审中-公开
标题翻译：在基于服务器的计算系统中远程认证的方法和设备
公开(公告)号：WO2005055026A1
公开(公告)日：2005-06-16
申请号：PCT/US2004/041187
申请日：2004-11-23
申请人： CITRIX SYSTEMS, INC. , INNES, Andrew , MAYERS, Chris , HALLS, David , WATERHOUSE, Simon
发明人： INNES, Andrew , MAYERS, Chris , HALLS, David , WATERHOUSE, Simon
IPC分类号： G06F1/00
CPC分类号： G06F21/31 , G06F21/33 , G06F21/41 , G06F2221/2115 , H04L63/08 , H04L63/0846 , H04L63/0853 , H04L63/0861
摘要： A method and apparatus for remotely authenticating a user to a server in a server-based computing environment. A client computing device receives user credentials and generates user authentication data based upon the received credentials. The client computing device transmits the generated user authentication data to a server computing device. The server computing device authenticates the user responsive to the transmitted user authentication data.
摘要翻译：一种用于在基于服务器的计算环境中将服务器远程认证给用户的方法和装置。客户端计算设备接收用户凭证，并根据接收到的凭证生成用户认证数据。客户端计算设备将生成的用户认证数据发送到服务器计算设备。服务器计算设备响应于所发送的用户认证数据来认证用户。

6. 发明申请

WO2010127365A1 SYSTEMS AND METHODS FOR ESTABLISHING A CLOUD BRIDGE BETWEEN VIRTUAL STORAGE RESOURCES 审中-公开
标题翻译：在虚拟存储资源之间建立云桥的系统和方法
公开(公告)号：WO2010127365A1
公开(公告)日：2010-11-04
申请号：PCT/US2010/033442
申请日：2010-05-03
申请人： CITRIX SYSTEMS, INC. , VAN DER LINDEN, Rob , HALLS, David , WATERHOUSE, Simon , BENOIT, Peter, H.
发明人： VAN DER LINDEN, Rob , HALLS, David , WATERHOUSE, Simon , BENOIT, Peter, H.
IPC分类号： G06F9/50 , H04L29/08 , G06F3/06
CPC分类号： H04L47/70 , G06F9/5077 , H04L63/20 , H04L67/1097 , H04L69/08
摘要： Methods and systems for establishing a cloud bridge between two virtual storage resources and for transmitting data from one first virtual storage resource to the other virtual storage resource. The system can include a first virtual storage resource or cloud, and a storage delivery management service that executes on a computer and within the first virtual storage resource. The storage delivery management service can receive user credentials of a user that identify a storage adapter. Upon receiving the user credentials, the storage delivery management service can invoke the storage adapter which executes an interface that identifies a second virtual storage resource and includes an interface translation file. The storage delivery management service accesses the second virtual storage resource and establishes a cloud bridge with the second virtual storage resource using information obtained from the second virtual storage resource and information translated by the storage adapter using the interface translation file.
摘要翻译：用于在两个虚拟存储资源之间建立云桥并将数据从一个第一虚拟存储资源传输到另一个虚拟存储资源的方法和系统。该系统可以包括第一虚拟存储资源或云，以及在计算机上和第一虚拟存储资源内执行的存储传递管理服务。存储传送管理服务可以接收识别存储适配器的用户的用户凭证。在接收到用户凭据之后，存储传送管理服务可以调用执行识别第二虚拟存储资源并且包括接口转换文件的接口的存储适配器。存储传送管理服务访问第二虚拟存储资源，并使用从第二虚拟存储资源获得的信息和使用接口转换文件由存储适配器翻译的信息，与第二虚拟存储资源建立云桥。

7. 发明申请

WO2005055025A1 METHODS AND APPARATUS FOR REMOTE AUTHENTICATION IN A SERVER-BASED 审中-公开
标题翻译：基于服务器远程认证的方法和设备
公开(公告)号：WO2005055025A1
公开(公告)日：2005-06-16
申请号：PCT/US2004/039442
申请日：2004-11-23
申请人： CITRIX SYSTEMS, INC. , INNES, Andrew , MAYERS, Chris , HALLS, David , WATERHOUSE, Simon
发明人： INNES, Andrew , MAYERS, Chris , HALLS, David , WATERHOUSE, Simon
IPC分类号： G06F1/00
CPC分类号： G06F21/31 , G06F21/33 , G06F21/41 , G06F2221/2115 , H04L63/08 , H04L63/0846 , H04L63/0853 , H04L63/0861
摘要： A method and apparatus for remotely authenticating a user to a server in a server-based computing environment. A client computing device receives user credentials and generates user authentication data based upon the received credentials. The client computing device transmits the generated user authentication data to a server computing device. The server computing device authenticates the user responsive to the transmitted user authentication data. The server computing device generates new user authentication data based on the transmitted user authentication data. The server computing device transmits to a second server the new user authentication data. The second server authenticates the user, responsive to the received user authentication data.
摘要翻译：一种用于在基于服务器的计算环境中将用户远程认证给服务器的方法和装置。客户端计算设备接收用户凭证，并根据接收的凭证生成用户认证数据。客户端计算设备将生成的用户认证数据发送到服务器计算设备。服务器计算设备响应于所发送的用户认证数据来认证用户。服务器计算设备基于发送的用户认证数据生成新的用户认证数据。服务器计算设备向第二服务器发送新的用户认证数据。响应于所接收的用户认证数据，第二服务器认证用户。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式