专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09607142B2 Context aware recertification 有权
公开(公告)号：US09607142B2
公开(公告)日：2017-03-28
申请号：US13228811
申请日：2011-09-09
申请人： Manjeri R. Dharmarajan , Kaushal K. Kapadia , Vigneshwarnath Miriyala , Nataraj Nagaratnam , Darshini G. Swamy , Suyesh R. Tiwari
发明人： Manjeri R. Dharmarajan , Kaushal K. Kapadia , Vigneshwarnath Miriyala , Nataraj Nagaratnam , Darshini G. Swamy , Suyesh R. Tiwari
IPC分类号： G06F21/45 , G06F21/57 , H04L29/06
CPC分类号： H04L63/06 , G06F21/45 , G06F21/577 , H04L63/102 , H04L63/104 , H04L63/105
摘要： Mechanisms are provided for facilitating recertification of a user access entitlement. These mechanisms collect, from a system resource of the data processing system, access information representative of accesses of the system resource by a user access entitlement. These mechanisms determine that recertification of the user access entitlement, with regard to the system resource, is to be performed and a pattern of access is determined based on the access information for the user access entitlement. A recertification request graphical user interface is output to a user based on the pattern of access. The graphical user interface includes the pattern of access and one or more graphical user interface elements for receiving a user input specifying acceptance or denial of the recertification of the user access entitlement.

2. 发明申请

US20130304702A1 CONTROLLING ENTERPRISE DATA ON MOBILE DEVICE VIA THE USE OF A TAG INDEX 有权
标题翻译：通过使用标签索引来控制移动设备上的企业数据
公开(公告)号：US20130304702A1
公开(公告)日：2013-11-14
申请号：US13470662
申请日：2012-05-14
申请人： Shalini Kapoor , Palanivel A. Kodeswaran , Sridhar R. Muppidi , Nataraj Nagaratnam , Vikrant Nandakumar
发明人： Shalini Kapoor , Palanivel A. Kodeswaran , Sridhar R. Muppidi , Nataraj Nagaratnam , Vikrant Nandakumar
IPC分类号： G06F17/30
CPC分类号： G06F17/3007 , H04W12/08
摘要： A method, system and computer program product for controlling enterprise data on mobile devices. Data on a mobile device is tagged as being associated with either enterprise data or with personal data. Upon identifying the storage location of the tagged data and the identifier of the application that generated the tagged data, the tag, the storage location of the tagged data and the identifier of the application are stored in an index. A mobile agent residing on the mobile device may be directed by a mobile device management server of the enterprise to perform various actions (e.g., deleting, encrypting, backing-up) on the enterprise data using the index. In this manner, the enterprise has the ability to control their applications and data that resides on employees' mobile devices to ensure that such data is not lost or used in a manner that is contrary to the wishes of the employer.
摘要翻译：一种用于控制移动设备上的企业数据的方法，系统和计算机程序产品。移动设备上的数据被标记为与企业数据或个人数据相关联。在识别标记数据的存储位置和生成标记数据的应用程序的标识符时，标签，标记数据的存储位置和应用程序的标识符被存储在索引中。驻留在移动设备上的移动代理可以由企业的移动设备管理服务器指导，以使用索引对企业数据执行各种动作（例如，删除，加密，备份）。以这种方式，企业有能力控制其驻留在员工移动设备上的应用程序和数据，以确保这些数据不会以违反雇主意愿的方式丢失或使用。

3. 发明授权

US08261329B2 Trust and identity in secure calendar sharing collaboration 失效
标题翻译：信任和身份在安全的日历共享协作
公开(公告)号：US08261329B2
公开(公告)日：2012-09-04
申请号：US12472885
申请日：2009-05-27
申请人： Daniel C. Gurney , Carol A Jones , Anthony J Nadalin , Nataraj Nagaratnam , John J Rawls , Robert L. Yates , Alfred Zollar
发明人： Daniel C. Gurney , Carol A Jones , Anthony J Nadalin , Nataraj Nagaratnam , John J Rawls , Robert L. Yates , Alfred Zollar
IPC分类号： H04L9/32
CPC分类号： G06F21/6245 , G06Q10/109 , G06Q10/1093 , H04L9/321
摘要： In some embodiments, a system includes a database of trust information that internalizes security and trust relationships between a first entity and a second entity in regards to scheduling, and a central trust manager operable to determine from the database of trust information whether a trust relationship exists between a first organization and a second organization, the central trust manager also being operable to provide availability information of a user of the first organization to a second user of the second organization, the central trust manager also being operable to determine whether the second user of the second organization is granted access to requested calendar data and the central trust manager also being operable to provide the requested calendar data.
摘要翻译：在一些实施例中，系统包括内部化关于调度的第一实体和第二实体之间的安全性和信任关系的信任信息的数据库，以及中央信任管理器，可操作以从数据库确定信任信息是否存在信任关系在第一组织和第二组织之间，中央信任管理器还可操作以向第二组织的第二用户提供第一组织的用户的可用性信息，中央信任管理器还可操作以确定第二组织的第二用户是否允许第二组织访问所请求的日历数据，并且中央信任管理器也可操作以提供所请求的日历数据。

4. 发明申请

US20110162034A1 DISCOVERY AND MANAGEMENT OF CONTEXT-BASED ENTITLEMENTS ACROSS LOOSELY-COUPLED ENVIRONMENTS 审中-公开
标题翻译：基于环境友好环境的基于语境的实践的发现与管理
公开(公告)号：US20110162034A1
公开(公告)日：2011-06-30
申请号：US12649421
申请日：2009-12-30
申请人： NATARAJ NAGARATNAM , Anthony Joseph Nadalin
发明人： NATARAJ NAGARATNAM , Anthony Joseph Nadalin
IPC分类号： H04L9/32 , G06F21/22
CPC分类号： G06F21/604
摘要： A method, apparatus and computer program product are provided to model and manage context-based entitlements that govern a user's access to information, applications and systems across a loosely-coupled distributed environment. One such distributed environment is a federated environment, which may span across companies, organizations, and geographical locations and regions. According to one embodiment, an entitlement modeling framework comprises a discovery module and an entitlement generator module. The discovery framework generates a data model for storing information concerning user identity, context, relationships between users, relationships between users and contexts and relationships between contexts. Preferably, the user identity, context, relationships between users, relationships between users and contexts, and relationships between contexts, are stored as attributes in the data model. An entitlement generator generates an entitlement according to the data model, wherein the entitlement (e.g., a user entitlement) is generated according to one or more contexts.
摘要翻译：提供了一种方法，装置和计算机程序产品来建模和管理基于上下文的权限，该权限管理用户对松散耦合的分布式环境中的信息，应用和系统的访问。一个这样的分布式环境是联合环境，可能跨越公司，组织以及地理位置和地区。根据一个实施例，授权建模框架包括发现模块和授权生成器模块。发现框架生成用于存储关于用户身份，上下文，用户之间的关系，用户与上下文之间的关系以及上下文之间的关系的信息的数据模型。优选地，用户身份，上下文，用户之间的关系，用户和上下文之间的关系以及上下文之间的关系被存储为数据模型中的属性。授权生成器根据数据模型生成授权，其中根据一个或多个上下文生成授权（例如，用户授权）。

5. 发明申请

US20100076914A1 CLASSIFICATION AND POLICY MANAGEMENT FOR SOFTWARE COMPONENTS 有权
标题翻译：软件组件的分类和政策管理
公开(公告)号：US20100076914A1
公开(公告)日：2010-03-25
申请号：US12235900
申请日：2008-09-23
申请人： Sridhar R. Muppidi , Nataraj Nagaratnam , Anthony Joseph Nadalin
发明人： Sridhar R. Muppidi , Nataraj Nagaratnam , Anthony Joseph Nadalin
IPC分类号： G06F15/18 , G06N5/02
CPC分类号： G06F21/604
摘要： A method, system, and computer usable program product for classification and policy management for software components are provided in the illustrative embodiments. A metadata associated with an application or component is identified. A mapping determination is made whether the metadata maps to a classification in a set of classifications. A policy that is applicable to the classification is identified and associated with the classification. If the mapping determination is deterministic, the component is assigned to the classification and the policy associated with the classification is associated with the component. If the mapping determination is not deterministic, a user intervention may be necessary, the component may be classified in a default classification, or both. Because of the policy being associated with the classification, associating the policy with the component may occur based on the metadata of the application or component and its resultant classification.
摘要翻译：在说明性实施例中提供了用于软件组件的分类和策略管理的方法，系统和计算机可用程序产品。识别与应用或组件相关联的元数据。做出映射确定是否元数据映射到一组分类中的分类。识别适用于分类的策略并与分类相关联。如果映射确定是确定性的，则将组件分配给分类，并且与分类相关联的策略与组件相关联。如果映射确定不是确定性的，则可能需要用户干预，该组件可以被分类为默认分类，或者两者。由于与分类相关联的策略，将策略与组件相关联可以基于应用或组件的元数据及其结果分类而发生。

6. 发明授权

US07676831B2 Role-based access control management for multiple heterogeneous application components 失效
标题翻译：基于角色的多个异构应用程序组件的访问控制管理
公开(公告)号：US07676831B2
公开(公告)日：2010-03-09
申请号：US11221630
申请日：2005-09-08
申请人： Kathryn H. Britton , Dieter Buehler , Ching-Yun Chao , Timothy J. Hahn , Anthony J. Nadalin , Nataraj Nagaratnam , Yi-Hsiu Wei , ChunHui Yang
发明人： Kathryn H. Britton , Dieter Buehler , Ching-Yun Chao , Timothy J. Hahn , Anthony J. Nadalin , Nataraj Nagaratnam , Yi-Hsiu Wei , ChunHui Yang
IPC分类号： H04L9/32 , H04L9/00 , G06F7/04
CPC分类号： G06F21/6236
摘要： Embodiments of the present invention address deficiencies of the art in respect to access control and provide a method, system and computer program product for access control management for a collection of heterogeneous application components. In a first embodiment, a data processing system for role-based access control management for multiple heterogeneous application components can include at least one business role descriptor associating a business role with multiple, different application roles for corresponding, disparate application components. The system also can include at least one access policy associating a user with the business role. Finally, the system can include policy deployment logic include program code enabled to process the access policy to assign the user to the different application roles in the disparate application components.
摘要翻译：本发明的实施例解决了本领域在访问控制方面的缺陷，并提供了用于异构应用组件的集合的访问控制管理的方法，系统和计算机程序产品。在第一实施例中，用于多个异构应用组件的用于基于角色的访问控制管理的数据处理系统可以包括将业务角色与用于相应的不同应用组件的多个不同应用角色相关联的至少一个业务角色描述符。系统还可以包括将用户与业务角色相关联的至少一个访问策略。最后，系统可以包括策略部署逻辑，包括能够处理访问策略的程序代码，以将用户分配给不同应用程序组件中的不同应用程序角色。

7. 发明申请

US20100043050A1 FEDERATING POLICIES FROM MULTIPLE POLICY PROVIDERS 失效
标题翻译：多个政策提供者的联邦政策
公开(公告)号：US20100043050A1
公开(公告)日：2010-02-18
申请号：US12192769
申请日：2008-08-15
申请人： Anthony J. Nadalin , Nataraj Nagaratnam , Sridhar R. Muppidi
发明人： Anthony J. Nadalin , Nataraj Nagaratnam , Sridhar R. Muppidi
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： H04L63/102 , H04L63/20
摘要： One aspect of the present invention can include a system, a method, a computer program product and an apparatus for federating policies from multiple policy providers. The aspect can identify a set of distinct policy providers, each maintaining at least one policy related to a service or a resource. A federated policy exchange service can be established that has a policy provider plug-in for each of the distinct policy providers. The federated policy exchange service can receive requests for policies from a set of policy requesters. Each request can include a resource_id or a service_id used to uniquely identify the service or resource. The federated policy exchange service can dynamically connect to a set of the policy providers to determine policies applicable to each request. For each request, results from the policy providers can be received and processed to generate a response. The federated policy exchange service can provide the response to each policy requestor responsive in response to each response.
摘要翻译：本发明的一个方面可以包括系统，方法，计算机程序产品和用于从多个策略提供者联合策略的装置。该方面可以识别一组不同的策略提供者，每个策略提供者保持至少一个与服务或资源相关的策略。可以建立联合的策略交换服务，其具有针对每个不同策略提供者的策略提供者插件。联合策略交换服务可以从一组策略请求者接收到策略请求。每个请求可以包括用于唯一标识服务或资源的resource_id或service_id。联合策略交换服务可以动态地连接到一组策略提供者，以确定适用于每个请求的策略。对于每个请求，可以接收和处理策略提供者的结果以产生响应。联合策略交换服务可以响应于每个响应来响应每个策略请求者。

8. 发明申请

US20090171989A1 Identity Data Model Broker 审中-公开
标题翻译：身份数据模型经纪人
公开(公告)号：US20090171989A1
公开(公告)日：2009-07-02
申请号：US11966541
申请日：2007-12-28
申请人： Gregory T. Byrd , Michael Mcintosh , Anthony J. Nadalin , Nataraj Nagaratnam
发明人： Gregory T. Byrd , Michael Mcintosh , Anthony J. Nadalin , Nataraj Nagaratnam
IPC分类号： G06F17/30
CPC分类号： G06F16/25
摘要： A method, system and computer program product for handling identity data from heterogeneous sources utilizes an Identity Data Model Broker (IDMB). The IDMB maps fields between heterogeneous data sources, served by disparate Identity Attribute Service (IdAS) context providers, to establish a normalized data format. Within an IdAS, an abstract data model, which is brokered the IDMB, is created to present a normalized view of the data from the IDMB. When a request for data is received at the IdAS, the requested data is retrieved from appropriate data sources, through respective IdAS context providers, normalized to the abstract data model, and provided to the requester by the IdAS, such that the heterogeneous data sources are shielded from the requester.
摘要翻译：用于处理来自异构源的身份数据的方法，系统和计算机程序产品利用身份数据模型代理（IDMB）。 IDMB映射异构数据源之间的字段，由不同的身份属性服务（IdAS）上下文提供者提供服务，以建立规范化的数据格式。在IdAS中，创建了代理IDMB的抽象数据模型，以呈现来自IDMB的数据的归一化视图。当在IdAS上接收到对数据的请求时，通过相应的IdAS上下文提供者从适当的数据源检索所请求的数据，其被标准化为抽象数据模型，并由IdAS提供给请求者，使得异构数据源是屏蔽了请求者。

9. 发明授权

US07043455B1 Method and apparatus for securing session information of users in a web application server environment 有权
标题翻译：用于在Web应用服务器环境中保护用户的会话信息的方法和装置
公开(公告)号：US07043455B1
公开(公告)日：2006-05-09
申请号：US09627373
申请日：2000-07-28
申请人： Gennaro A. Cuomo , Michael L. Fraenkel , Gabriel Garcia Montero , Nataraj Nagaratnam
发明人： Gennaro A. Cuomo , Michael L. Fraenkel , Gabriel Garcia Montero , Nataraj Nagaratnam
IPC分类号： G06F19/00
CPC分类号： H04L63/08 , G06Q20/3674 , G06Q20/382 , G06Q20/401
摘要： A method and apparatus for securing hypertext transfer protocol sessions authenticates a user's credentials before creating a session. The present invention then associates the session with the credentials. Subsequent requests are submitted with the session ID and the user credentials to be associated with the session. Therefore, an unauthorized user that has obtained a session ID cannot gain access to sensitive content associated with the session without possessing the valid credentials.
摘要翻译：用于保护超文本传输协议会话的方法和装置在创建会话之前认证用户的凭证。然后，本发明将会话与凭证相关联。随后的请求将被提交与会话ID和与会话相关联的用户凭据。因此，获得会话ID的未经授权的用户无法访问与会话相关联的敏感内容，而不拥有有效的凭证。

10. 发明申请

US20050120219A1 Information processing apparatus, a server apparatus, a method of an information processing apparatus, a method of a server apparatus, and an apparatus executable process 有权
标题翻译：信息处理装置，服务器装置，信息处理装置的方法，服务器装置的方法以及装置执行处理
公开(公告)号：US20050120219A1
公开(公告)日：2005-06-02
申请号：US11001817
申请日：2004-12-02
申请人： Seiji Munetoh , Hiroshi Maruyama , Frank Seliger , Nataraj Nagaratnam
发明人： Seiji Munetoh , Hiroshi Maruyama , Frank Seliger , Nataraj Nagaratnam
IPC分类号： G06F12/14 , G06F15/00 , G06F21/00 , G06F21/20 , H04L9/32 , H04L12/24 , H04L29/06
CPC分类号： G06F21/52 , G06F21/57 , H04L63/123
摘要： To provide an information processing apparatus, a server apparatus, a method of an information processing apparatus, a method of a server apparatus, and an apparatus executable program. An information processing apparatus uses signed integrity values unique to software configuration and asserting integrity of initial codes of a networked server. The server apparatus generates keys used for certifying the server apparatus(S810, S820, S830). One of the keys are certified by a third party to generate a digital signature (S840). The digital signature is attached to the integrity values and the signed integrity values are transmitted to the information processing apparatus for allowing the information processing apparatus to have secure services through the network (S850, S860).
摘要翻译：提供信息处理装置，服务器装置，信息处理装置的方法，服务器装置的方法和装置可执行程序。信息处理装置使用对软件配置唯一的有符号的完整性值和断言联网服务器的初始代码的完整性。服务器装置产生用于认证服务器装置的密钥（S 810，S 820，S 830）。其中一个密钥由第三方认证以生成数字签名（S 840）。数字签名附加到完整性值，并且将签名的完整性值发送到信息处理设备，以允许信息处理设备通过网络具有安全服务（S 850，S 860）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式