专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09189649B2 Security model for workflows aggregating third party secure services 有权
标题翻译：聚合第三方安全服务的工作流安全模型
公开(公告)号：US09189649B2
公开(公告)日：2015-11-17
申请号：US12823200
申请日：2010-06-25
申请人： Paula K Austel , Suresh Chari , Francisco Curbera , Matthew J. Duftler , Rania Y. Khalaf , Florian F. Rosenberg
发明人： Paula K Austel , Suresh Chari , Francisco Curbera , Matthew J. Duftler , Rania Y. Khalaf , Florian F. Rosenberg
IPC分类号： H04L29/06 , G06F7/04 , G06F15/16 , G06F17/30 , G06F21/62 , G06F21/33 , G06F9/44 , G06Q10/06 , G06Q10/10 , H04L12/24 , H04L29/08
CPC分类号： G06F21/6236 , G06F8/10 , G06F8/34 , G06F21/33 , G06F2221/2115 , G06Q10/06 , G06Q10/06316 , G06Q10/10 , H04L41/046 , H04L67/10
摘要： A method, system and computer program product for security model for workflows aggregating third party secure services. In one embodiment, a workflow model described in a workflow language is provided and configured to declare security requirements of a composite application integrating protected data from two or more external network resources. The method also incorporates providing an authentication service executing on at least one secure server computer. The authentication service is configured to conduct user authentication and authorization to access the protected data at the external network resources on behalf of the composite application executing on at least one host server computer according to the workflow language.
摘要翻译：一种用于聚合第三方安全服务的工作流安全模型的方法，系统和计算机程序产品。在一个实施例中，以工作流程语言描述的工作流模型被提供并配置为声明组合应用程序的安全性要求，该组合应用程序将来自两个或多个外部网络资源的受保护数据集成。该方法还包括提供在至少一个安全服务器计算机上执行的认证服务。认证服务被配置为进行用户认证和授权以代表根据工作流程语言在至少一个主机服务器计算机上执行的复合应用程序访问外部网络资源上的受保护数据。

2. 发明授权

US08875269B2 User initiated and controlled identity federation establishment and revocation mechanism 有权
标题翻译：用户启动和控制的身份联合身份建立和撤销机制
公开(公告)号：US08875269B2
公开(公告)日：2014-10-28
申请号：US13033029
申请日：2011-02-23
申请人： Paula K. Austel , He Yuan Huang , Michael McIntosh , Bin Wang , Jing Min Xu
发明人： Paula K. Austel , He Yuan Huang , Michael McIntosh , Bin Wang , Jing Min Xu
IPC分类号： G06F7/04 , G06F15/16 , G06F17/30 , H04L29/06 , H04L29/08 , H04L9/32
CPC分类号： H04L9/3234 , H04L9/32 , H04L9/3231 , H04L63/06 , H04L63/08 , H04L63/0815 , H04L63/0823 , H04L63/0869 , H04L67/2814
摘要： A method for single sign-on with established federation includes triggering a single sign-on operation from a first service to a second service, retrieving, by the first service, an associated federation key and pseudo identification for a user agent, generating, by the first service, a token signed with a federation key for the user agent based on the pseudo identification, redirecting, by the first service, the user agent to the second service, wherein the user agent transfers the token to the second service, verifying, by the second service, the token and determining an associated identification in the second service, and returning, by the second service, a resource to the user agent.
摘要翻译：用于具有建立的联合的单点登录的方法包括触发从第一服务到第二服务的单一登录操作，由第一服务检索相关联的联合密钥和用户代理的伪标识，第一服务，基于伪标识的用于用户代理的联合密钥签名的令牌，由第一服务将用户代理重定向到第二服务，其中用户代理将令牌传送到第二服务，通过第二服务，令牌和确定第二服务中的关联标识，并且由第二服务将资源返回给用户代理。

3. 发明授权

US08856382B2 On-boarding services to a cloud environment 有权
标题翻译：对云环境的登机服务
公开(公告)号：US08856382B2
公开(公告)日：2014-10-07
申请号：US13561432
申请日：2012-07-30
申请人： Rahul P. Akolkar , Paula K. Austel , Thomas A. Mikalsen , Isabelle M. Rouvellou , Alla Segal , Hidayatullah H. Shaikh , Ignacio Silva-Lepe , Revathi Subramanian
发明人： Rahul P. Akolkar , Paula K. Austel , Thomas A. Mikalsen , Isabelle M. Rouvellou , Alla Segal , Hidayatullah H. Shaikh , Ignacio Silva-Lepe , Revathi Subramanian
IPC分类号： G06F15/173
CPC分类号： G06F9/5072
摘要： A system in a cloud services environment comprises one or more service offerings, one or more service instances and one or more service support utilities. Each of the one or more service offerings is described by at least one service descriptor. Each of the one or more service instances is obtained from at least one of the one or more service offerings. Each of the one or more service support utilities is customized by at least one service descriptor. A service comprises at least one component and a service descriptor comprises one or more models.
摘要翻译：云服务环境中的系统包括一个或多个服务提供，一个或多个服务实例和一个或多个服务支持实用程序。一个或多个服务提供中的每一个由至少一个服务描述符描述。一个或多个服务实例中的每一个从一个或多个服务提供中的至少一个获得。一个或多个服务支持实用程序中的每一个由至少一个服务描述符定制。服务包括至少一个组件，并且服务描述符包括一个或多个模型。

4. 发明申请

US20080005660A1 METHOD AND SYSTEM FOR DETECTING MOVEMENT OF A SIGNED ELEMENT IN A STRUCTURED DOCUMENT 有权
标题翻译：用于检测结构化文档中的符号元素的运动的方法和系统
公开(公告)号：US20080005660A1
公开(公告)日：2008-01-03
申请号：US11427408
申请日：2006-06-29
申请人： Paula K. Austel , Maryann Hondo , Michael Mclntosh , Anthony J. Nadalin
发明人： Paula K. Austel , Maryann Hondo , Michael Mclntosh , Anthony J. Nadalin
IPC分类号： G06F17/00
CPC分类号： G06F17/30908 , G06F21/64
摘要： A system in which a sending entity creates a structured document and communicates that document to a receiving entity includes a transform to ensure that document elements are not moved during communication. The structured document is typically XML, and the document comprises a root element and a set of one or more child elements. At least one child element is protected, for example, by a digital signature, prior to being positioned within the XML document. This “signed” element includes a sending entity security policy, preferably in the form of a position dependent or absolute path expression. The receiving entity includes a transform that determines whether the signed element is in a given position within the received XML document. Typically, the given position is the position at which the signed element was placed within the structured document by the sending entity. The transform evaluates the data string against a set of one or more ancestor elements of the signed element to determine whether the signed element is in the given position within the received document. If so, the transform preferably outputs the signed element itself. If the transform determines that the signed element has been moved, however, preferably it outputs a given value other than the signed element. The transform is computationally-inefficient because it works by enforcing an intended path (as specified in the position dependent or absolute path expression) from the signed element back up to the XML document root. In effect, the algorithm requires visitation of only the referenced element's ancestors, and not the entire XML tree.
摘要翻译：发送实体创建结构化文档并将该文档传送到接收实体的系统包括转换以确保文档元素在通信期间不被移动。结构化文档通常是XML，并且文档包括根元素和一组一个或多个子元素。至少一个子元素在被定位在XML文档之前被保护，例如通过数字签名。该“签名”元素包括发送实体安全策略，优选地以位置相关或绝对路径表达的形式。接收实体包括一个变换，该变换确定有符号元素是否处于接收的XML文档内的给定位置。通常，给定的位置是发送实体在签名元素放置在结构化文档内的位置。变换根据有符号元素的一个或多个祖先元素的集合来评估数据串，以确定有符号元素是否处于接收到的文档内的给定位置。如果是，变换优选地输出有符号元素本身。然而，如果变换确定有符号元素已被移动，则优选地，它输出除了带符号元素之外的给定值。该转换在计算上是低效的，因为它通过从signed元素备份到XML文档根来强制执行预定的路径（在位置相关或绝对路径表达式中指定）。实际上，该算法只需要访问引用元素的祖先，而不是整个XML树。

5. 发明申请

US20110321131A1 SECURITY MODEL FOR WORKFLOWS AGGREGATING THIRD PARTY SECURE SERVICES 有权
标题翻译：工作安全模式聚集第三方安全服务
公开(公告)号：US20110321131A1
公开(公告)日：2011-12-29
申请号：US12823200
申请日：2010-06-25
申请人： Paula K. Austel , Suresh Chari , Francisco Curbera , Matthew J. Duftler , Rania Y. Khalaf , Florian F. Rosenberg
发明人： Paula K. Austel , Suresh Chari , Francisco Curbera , Matthew J. Duftler , Rania Y. Khalaf , Florian F. Rosenberg
IPC分类号： G06F21/20
CPC分类号： G06F21/6236 , G06F8/10 , G06F8/34 , G06F21/33 , G06F2221/2115 , G06Q10/06 , G06Q10/06316 , G06Q10/10 , H04L41/046 , H04L67/10
摘要： A method, system and computer program product for security model for workflows aggregating third party secure services. In one embodiment, a workflow model described in a workflow language is provided and configured to declare security requirements of a composite application integrating protected data from two or more external network resources. The method also incorporates providing an authentication service executing on at least one secure server computer. The authentication service is configured to conduct user authentication and authorization to access the protected data at the external network resources on behalf of the composite application executing on at least one host server computer according to the workflow language.
摘要翻译：一种用于聚合第三方安全服务的工作流安全模型的方法，系统和计算机程序产品。在一个实施例中，以工作流程语言描述的工作流模型被提供并配置为声明组合应用程序的安全性要求，该组合应用程序将来自两个或多个外部网络资源的受保护数据集成。该方法还包括提供在至少一个安全服务器计算机上执行的认证服务。认证服务被配置为进行用户认证和授权以代表根据工作流程语言在至少一个主机服务器计算机上执行的复合应用程序访问外部网络资源上的受保护数据。

6. 发明授权

US09292619B2 Method and system for detecting movement of a signed element in a structured document 有权
标题翻译：用于检测结构化文档中有符号元素的移动的方法和系统
公开(公告)号：US09292619B2
公开(公告)日：2016-03-22
申请号：US11427408
申请日：2006-06-29
申请人： Paula K. Austel , Maryann Hondo , Michael McIntosh , Anthony J. Nadalin
发明人： Paula K. Austel , Maryann Hondo , Michael McIntosh , Anthony J. Nadalin
IPC分类号： G06F17/00 , G06F17/30 , G06F21/64
CPC分类号： G06F17/30908 , G06F21/64
摘要： A sending entity creates a structured document and communicates it to a receiving entity includes a transform to ensure document elements are not moved during communication. The structured document comprises a root element and a set of child elements. A child element is protected by a digital signature, prior to being positioned within the document. This element includes a sending entity security policy. The receiving entity includes a transform that determines whether the signed element is in a given position within the received document. The transform evaluates the data string against a set of ancestor elements of the signed element to determine whether the signed element is in the given position. If so, the transform preferably outputs the signed element itself. If the transform determines that the signed element has been moved, however, preferably it outputs a given value other than the signed element.
摘要翻译：发送实体创建结构化文档并将其传送到接收实体包括转换以确保文档元素在通信期间不被移动。结构化文档包括根元素和一组子元素。子元素在被放置在文档中之前被数字签名保护。该元素包括发送实体安全策略。接收实体包括一个变换，该变换确定有符号元素是否在接收的文档内的给定位置。该变换根据有符号元素的一组祖先元素来评估数据字符串，以确定有符号元素是否在给定的位置。如果是，变换优选地输出有符号元素本身。然而，如果变换确定有符号元素已被移动，则优选地，它输出除了带符号元素之外的给定值。

7. 发明申请

US20140032764A1 ON-BOARDING SERVICES TO A CLOUD ENVIRONMENT 有权
标题翻译：向云环境提供服务
公开(公告)号：US20140032764A1
公开(公告)日：2014-01-30
申请号：US13561432
申请日：2012-07-30
申请人： Rahul P. Akolkar , Paula K. Austel , Thomas A. Mikalsen , Isabelle M. Rouvellou , Alla Segal , Hidayatullah H. Shaikh , Ignacio Silva-Lepe , Revathi Subramanian
发明人： Rahul P. Akolkar , Paula K. Austel , Thomas A. Mikalsen , Isabelle M. Rouvellou , Alla Segal , Hidayatullah H. Shaikh , Ignacio Silva-Lepe , Revathi Subramanian
IPC分类号： G06F15/173
CPC分类号： G06F9/5072
摘要： A system in a cloud services environment comprises one or more service offerings, one or more service instances and one or more service support utilities. Each of the one or more service offerings is described by at least one service descriptor. Each of the one or more service instances is obtained from at least one of the one or more service offerings. Each of the one or more service support utilities is customized by at least one service descriptor. A service comprises at least one component and a service descriptor comprises one or more models.
摘要翻译：云服务环境中的系统包括一个或多个服务提供，一个或多个服务实例和一个或多个服务支持实用程序。一个或多个服务提供中的每一个由至少一个服务描述符描述。一个或多个服务实例中的每一个从一个或多个服务提供中的至少一个获得。一个或多个服务支持实用程序中的每一个由至少一个服务描述符定制。服务包括至少一个组件，并且服务描述符包括一个或多个模型。

8. 发明申请

US20120216267A1 User Initiated and Controlled Identity Federation Establishment and Revocation Mechanism 有权
标题翻译：用户启动和控制的身份认证联盟建立和撤销机制
公开(公告)号：US20120216267A1
公开(公告)日：2012-08-23
申请号：US13033029
申请日：2011-02-23
申请人： Paula K. Austel , He Yuan Huang , Michael McIntosh , Bin Wang , Jing Min Xu
发明人： Paula K. Austel , He Yuan Huang , Michael McIntosh , Bin Wang , Jing Min Xu
IPC分类号： H04L9/32
CPC分类号： H04L9/3234 , H04L9/32 , H04L9/3231 , H04L63/06 , H04L63/08 , H04L63/0815 , H04L63/0823 , H04L63/0869 , H04L67/2814
摘要： A method for single sign-on with established federation includes triggering a single sign-on operation from a first service to a second service, retrieving, by the first service, an associated federation key and pseudo identification for a user agent, generating, by the first service, a token signed with a federation key for the user agent based on the pseudo identification, redirecting, by the first service, the user agent to the second service, wherein the user agent transfers the token to the second service, verifying, by the second service, the token and determining an associated identification in the second service, and returning, by the second service, a resource to the user agent.
摘要翻译：用于具有建立的联合的单点登录的方法包括触发从第一服务到第二服务的单一登录操作，由第一服务检索相关联的联合密钥和用户代理的伪标识，第一服务，基于伪标识的用于用户代理的联合密钥签名的令牌，由第一服务将用户代理重定向到第二服务，其中用户代理将令牌传送到第二服务，通过第二服务，令牌和确定第二服务中的关联标识，并且由第二服务将资源返回给用户代理。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式