专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2011080069A1 SECURE KERBERIZED ACCESS OF ENCRYPTED FILE SYSTEM 审中-公开
标题翻译：加密文件系统的安全访问
公开(公告)号：WO2011080069A1
公开(公告)日：2011-07-07
申请号：PCT/EP2010/069643
申请日：2010-12-14
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , SHANKAR, Ravi , BANERJEE, Dwip , PUNADIKAR, Sachin, Chandrakant , PATIL, Sandeep, Ramesh
发明人： SHANKAR, Ravi , BANERJEE, Dwip , PUNADIKAR, Sachin, Chandrakant , PATIL, Sandeep, Ramesh
IPC分类号： H04L29/06 , G06F17/30
CPC分类号： H04L9/0822 , G06F21/335 , G06F21/6218 , H04L9/083 , H04L9/3213 , H04L63/0428 , H04L63/06 , H04L63/20
摘要： A file server receives a request from a client to mount an encrypted file system. The file server informs the client that the requested file system is encrypted and, in turn, receives a session ticket from the client that includes a security protocol mounting selection. The file server decrypts the client's user's encrypted private key, and then decrypts the requested encrypted file system using the private key. In turn, the file server sends the decrypted file system to the client over a secure channel, which is based upon the security protocol mounting selection. In one embodiment, a key distribution center server receives a request from the client for the client's user to access the encrypted file system at the file server. The key distribution center server retrieves an intermediate key; includes the intermediate key in a session ticket; and sends the session ticket to the client.
摘要翻译：文件服务器从客户端收到一个装载加密文件系统的请求。文件服务器通知客户端所请求的文件系统被加密，并且从客户端接收包括安全协议安装选择的会话凭证。文件服务器解密客户端用户的加密私钥，然后使用私钥对请求的加密文件系统进行解密。反过来，文件服务器通过基于安全协议安装选择的安全通道将解密的文件系统发送到客户端。在一个实施例中，密钥分配中心服务器从客户端接收客户端用户访问文件服务器上的加密文件系统的请求。密钥分配中心服务器检索中间密钥; 在会议票中包括中间密钥; 并将会话凭证发送给客户端。

2. 发明授权

US08756429B2 Tunable encryption system 失效
标题翻译：可调加密系统
公开(公告)号：US08756429B2
公开(公告)日：2014-06-17
申请号：US12248982
申请日：2008-10-10
申请人： Dwip N. Banerjee, Jr. , Sandeep Ramesh Patil , Punadikar Sachin Chandrakant , Ravi A. Shankar
发明人： Dwip N. Banerjee, Jr. , Sandeep Ramesh Patil , Punadikar Sachin Chandrakant , Ravi A. Shankar
IPC分类号： H04L29/06
CPC分类号： H04L63/0428 , H04L63/0807 , H04L63/105
摘要： A method, programmed medium and system are provided for enabling a user to choose a user-preferred encryption type from among a plurality of encryption types listed in a user's Kerberos configuration file. During the ticket granting process in a Kerberos system, a user is requested to select a preferred encryption type to be used in the Kerberos communication from among encryption types contained in the user's Kerberos configuration file. The user-selected encryption type is then implemented for use in encrypting a session ticket (as well as generating the session key of user requested encryption type) for use by the user machine in communicating securely with an Kerberized application server when being communicated by that particular user. Thus, the system allows different users to simultaneously communicate with the same Kerberized application server using a supported encryption type of the user's own choice.
摘要翻译：提供了一种方法，编程介质和系统，用于使用户能够从用户的Kerberos配置文件中列出的多种加密类型中选择用户优选的加密类型。在Kerberos系统中的故障单授予过程中，请求用户从用户的Kerberos配置文件中包含的加密类型中选择要在Kerberos通信中使用的首选加密类型。用户选择的加密类型然后被实现以用于加密会话票据（以及生成用户请求的加密类型的会话密钥），以供用户机器在由特定的通信系统通信时与Kerberized应用服务器进行安全通信用户。因此，系统允许不同的用户使用用户自己选择的受支持的加密类型同时与相同的Kerberized应用服务器进行通信。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式