专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

4. 发明授权

US07251834B2 Filtering a permission set using permission requests associated with a code assembly 有权
标题翻译：使用与代码程序集相关联的权限请求过滤权限集
公开(公告)号：US07251834B2
公开(公告)日：2007-07-31
申请号：US11254839
申请日：2005-10-20
申请人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
发明人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
IPC分类号： G06F7/04 , G06F17/30 , G06K9/00 , H03M1/68 , H04K1/00 , H04L9/00 , H04L9/32
CPC分类号： G06F21/52
摘要： A security policy manager generates a permission grant set for a code assembly received from a resource location. The policy manager can execute in a computer system (e.g., a Web client) in combination with the verification module and class loader of the run-time environment. The permission grant set generated for a code assembly is applied in the run-time call stack to help the system determine whether a given system operation by the code assembly is authorized. A permission request set may also be received in association with the code assembly. The permission request set may include a minimum request set, specifying permissions required by the code assembly to run properly. The permission request set may also include an optional request set, specifying permissions requested by the code assembly to provide an alternative level of functionality. In addition, the permission request set may include a refuse request set, specifying permissions that are not to be granted to the code assembly. The permission requests are used to filter a permission set to generate a permission grant set.
摘要翻译：安全策略管理器为从资源位置接收到的代码集合生成许可权授予集。策略管理器可以与计算机系统（例如，Web客户机）一起在运行时环境的验证模块和类加载器的组合中执行。为代码组合生成的许可授权集合被应用于运行时调用堆栈中，以帮助系统确定代码组件的给定系统操作是否被授权。还可以与代码组合相关联地接收许可请求集合。许可请求集可以包括最小请求集，指定代码组件正确运行所需的权限。许可请求集还可以包括可选的请求集合，指定代码组件请求的许可以提供替代级别的功能。此外，许可请求集合可以包括垃圾请求集合，指定不被授予代码组件的权限。权限请求用于过滤权限集以生成权限授予集。

5. 发明授权

US07310822B2 Filtering a permission set using permission requests associated with a code assembly 有权
公开(公告)号：US07310822B2
公开(公告)日：2007-12-18
申请号：US11272639
申请日：2005-11-14
申请人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
发明人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
IPC分类号： G06F7/04 , G06F17/30 , G06K9/00 , H03M1/58 , H04K1/00 , H04L9/00 , H04L9/32
CPC分类号： G06F21/52
摘要： A security policy manager generates a permission grant set for a code assembly received from a resource location. The policy manager can execute in a computer system (e.g., a Web client) in combination with the verification module and class loader of the run-time environment. The permission grant set generated for a code assembly is applied in the run-time call stack to help the system determine whether a given system operation by the code assembly is authorized. A permission request set may also be received in association with the code assembly. The permission request set may include a minimum request set, specifying permissions required by the code assembly to run properly. The permission request set may also include an optional request set, specifying permissions requested by the code assembly to provide an alternative level of functionality. In addition, the permission request set may include a refuse request set, specifying permissions that are not to be granted to the code assembly. The permission requests are used to filter a permission set to generate a permission grant set.

6. 发明授权

US07647629B2 Hosted code runtime protection 有权
标题翻译：托管代码运行时保护
公开(公告)号：US07647629B2
公开(公告)日：2010-01-12
申请号：US10772205
申请日：2004-02-03
申请人： Christopher W. Brumme , Sebastian Lange , Gregory D. Fee , Michael Gashler , Mahesh Prakriya
发明人： Christopher W. Brumme , Sebastian Lange , Gregory D. Fee , Michael Gashler , Mahesh Prakriya
IPC分类号： G06F7/04 , G06F12/00 , G06F12/14 , G06F13/00 , G06F17/30 , G11C7/00
CPC分类号： G06F9/468
摘要： A host operating in a managed environment intercepts a call from a managed caller to a particular callee and determines whether the call is permissible according to the host's prior configuration of a plurality of callees. The particular callee, which provides access to a resource that the host can be protecting, can have been previously configured by the host to always allow the call to be made, to never allow the call to be made, or to allow the call to be made based upon the degree to which the host trusts the managed caller.
摘要翻译：在受管环境中操作的主机拦截来自被管理的呼叫者到特定被叫方的呼叫，并根据主机先前配置多个被呼叫者确定该呼叫是否被允许。提供对主机可以保护的资源的访问的特定被叫方可以先前由主机配置，以始终允许进行呼叫，从不允许进行呼叫，或允许呼叫成为基于主机信任被管理的呼叫者的程度。

7. 发明申请

US20070300285A1 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US20070300285A1
公开(公告)日：2007-12-27
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

8. 发明授权

US08024770B2 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US08024770B2
公开(公告)日：2011-09-20
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00 , H04L9/32 , G06F7/04
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

9. 发明授权

US08245270B2 Resource based dynamic security authorization 有权
标题翻译：基于资源的动态安全授权
公开(公告)号：US08245270B2
公开(公告)日：2012-08-14
申请号：US11217748
申请日：2005-09-01
申请人： Jeffrey M. Cooperstein , Aaron R. Goldfeder , Gregory D. Fee , John M. Hawkins , Venkatraman Kudallur
发明人： Jeffrey M. Cooperstein , Aaron R. Goldfeder , Gregory D. Fee , John M. Hawkins , Venkatraman Kudallur
IPC分类号： G06F21/00
CPC分类号： G06F21/53
摘要： Access to a resource by sandboxed code is dynamically authorized by a client security system based on a resource based policy. A sandboxed application running on a client is granted access to a resource based on a resource based policy despite denial of the access based on a static policy associated with the client security system. The granting of access coincides with the determination that the threat to a user or the user's information is not increased should the access be granted.
摘要翻译：通过沙盒代码访问资源由客户端安全系统基于资源的策略动态授权。在客户机上运行的沙盒应用程序被授予对基于资源的策略的资源访问，尽管基于与客户端安全系统相关联的静态策略拒绝访问。准予访问与确定对用户的威胁或用户的信息没有增加的确定是一致的。

10. 发明授权

US07770202B2 Cross assembly call interception 有权
标题翻译：交叉汇编呼叫截取
公开(公告)号：US07770202B2
公开(公告)日：2010-08-03
申请号：US10771653
申请日：2004-02-03
申请人： Christopher W. Brumme , Vance Morrison , Sebastian Lange , Gregory D. Fee , Dario Russi , Simon Jeremy Hall , Mahesh Prakriya , Brian F. Sullivan
发明人： Christopher W. Brumme , Vance Morrison , Sebastian Lange , Gregory D. Fee , Dario Russi , Simon Jeremy Hall , Mahesh Prakriya , Brian F. Sullivan
IPC分类号： G06F17/00 , H04L29/06
CPC分类号： H04L63/102 , G06F9/468 , G06F21/52 , G06F21/62 , H04L63/101
摘要： A host intercepts calls between two executables and determines whether the calls are permissible according to the host's security model which can be identify based, such as user identity based—for instance, mapping access rights within a specific data base user context to database object access. Such an identity security model differs from a common language runtime security model where managed code uses Code Access Security to prevent managed assemblies from performing certain operations. Managed assemblies registered with the host are host objects from the host's perspective for which access rights can be defined via security rules, such as are defined for individual user identities. A host can decide access between managed executables based on the host's identity based access rules by trapping any cross assembly calls and deciding whether such calls should proceed or be blocked from taking place based on the corresponding identity security settings.
摘要翻译：主机拦截两个可执行文件之间的调用，并根据主机的可以识别的安全模型（例如基于用户身份的特定数据库用户上下文中将访问权限映射到数据库对象访问）来确定是否允许呼叫。这种身份安全模型与公共语言运行时安全模型不同，托管代码使用代码访问安全性来防止托管程序集执行某些操作。与主机注册的托管程序集是主机视角的主机对象，可以通过安全规则定义访问权限，例如为各个用户身份定义的对象。主机可以基于主机的基于身份的访问规则来决定托管的可执行文件之间的访问，通过捕获任何交叉程序集调用，并根据相应的身份安全设置来确定这些呼叫是应该继续还是被阻止发生。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式