专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09418219B2 Inter-process message security 有权
标题翻译：进程间消息安全
公开(公告)号：US09418219B2
公开(公告)日：2016-08-16
申请号：US12101243
申请日：2008-04-11
申请人： Avinashreddy Bathula , Jimmy Alexander , Keith C. Bentley , Neil L. Coles , Brian Hudson , Matthew G. Lyons , John Mark Miller , Andrew M. Rogers , Upender R. Sandadi , Scott R. Shell , Jon Vincent
发明人： Avinashreddy Bathula , Jimmy Alexander , Keith C. Bentley , Neil L. Coles , Brian Hudson , Matthew G. Lyons , John Mark Miller , Andrew M. Rogers , Upender R. Sandadi , Scott R. Shell , Jon Vincent
IPC分类号： G06F17/00 , G06F21/53 , G06F21/55 , G06F9/46 , G06F21/54 , G06F21/52
CPC分类号： G06F21/53 , G06F9/468 , G06F21/52 , G06F21/54 , G06F21/556
摘要： An inter-process messaging security management may be provided. A message comprising an operation to be performed may be sent from a process operating in a process chamber to a second process operating in another chamber. Before the message is allowed to be delivered, the validity of the operation contained in the message may be verified and a security policy may be examined to determine whether the message is permitted to be sent from the first process to the second process. If the security policy permits the second process to execute the operation requested by the first process, the message may be delivered to the second process. If the operation is not permitted, the message may not be delivered and an error message may be returned to the first process.
摘要翻译：可以提供进程间消息传递安全管理。包括要执行的操作的消息可以从在处理室中操作的处理程序发送到在另一个室中操作的第二处理。在允许发送消息之前，可以验证消息中包含的操作的有效性，并且可以检查安全策略以确定消息是否允许从第一进程发送到第二进程。如果安全策略允许第二进程执行第一进程请求的操作，则该消息可以被传送到第二进程。如果不允许操作，则可能不会传递该消息，并且可能会向第一个进程返回错误消息。

2. 发明申请

US20090260052A1 Inter-Process Message Security 有权
标题翻译：进程间消息安全
公开(公告)号：US20090260052A1
公开(公告)日：2009-10-15
申请号：US12101243
申请日：2008-04-11
申请人： Avinashreddy Bathula , Jimmy Alexander , Keith C. Bentley , Neil L. Coles , Brian Hudson , Matthew G. Lyons , John Mark Miller , Andrew M. Rogers , Upender R. Sandadi , Scott R. Shell , Jon Vincent
发明人： Avinashreddy Bathula , Jimmy Alexander , Keith C. Bentley , Neil L. Coles , Brian Hudson , Matthew G. Lyons , John Mark Miller , Andrew M. Rogers , Upender R. Sandadi , Scott R. Shell , Jon Vincent
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F9/468 , G06F21/52 , G06F21/54 , G06F21/556
摘要： An inter-process messaging security management may be provided. A message comprising an operation to be performed may be sent from a process operating in a process chamber to a second process operating in another chamber. Before the message is allowed to be delivered, the validity of the operation contained in the message may be verified and a security policy may be examined to determine whether the message is permitted to be sent from the first process to the second process. If the security policy permits the second process to execute the operation requested by the first process, the message may be delivered to the second process. If the operation is not permitted, the message may not be delivered and an error message may be returned to the first process.
摘要翻译：可以提供进程间消息传递安全管理。包括要执行的操作的消息可以从在处理室中操作的处理程序发送到在另一个室中操作的第二处理。在允许发送消息之前，可以验证消息中包含的操作的有效性，并且可以检查安全策略以确定消息是否允许从第一进程发送到第二进程。如果安全策略允许第二进程执行第一进程请求的操作，则该消息可以被传送到第二进程。如果不允许操作，则可能不会传递消息，并可能会向第一个进程返回错误消息。

3. 发明申请

US20090320089A1 POLICY-BASED USER BROKERED AUTHORIZATION 审中-公开
标题翻译：基于策略的用户授权授权
公开(公告)号：US20090320089A1
公开(公告)日：2009-12-24
申请号：US12143666
申请日：2008-06-20
申请人： Matthew G. Lyons , Scott R. Shell , Yadhu N. Gopalan , Neil R. Coles , John S. Camilleri , Loren Kohnfelder , Andrew M. Rogers , Sha Viswanathan
发明人： Matthew G. Lyons , Scott R. Shell , Yadhu N. Gopalan , Neil R. Coles , John S. Camilleri , Loren Kohnfelder , Andrew M. Rogers , Sha Viswanathan
IPC分类号： G06F21/20
CPC分类号： G06F21/57
摘要： A User Brokered Authorization (UBA) mechanism for policy decisions in a computing device is provided. The authorization mechanism interacts with an authorization layer of the computing device's operating system and enables a determination of whether an authorization decision can be made programmatically or by end user decision based on generalized device policy.
摘要翻译：提供了一种用于计算设备中策略决策的用户代理授权（UBA）机制。授权机制与计算设备的操作系统的授权层交互，并且能够基于通用设备策略确定授权决策是可编程地还是通过最终用户决定。

4. 发明申请

US20090328180A1 Granting Least Privilege Access For Computing Processes 失效
标题翻译：为计算过程授予最低权限
公开(公告)号：US20090328180A1
公开(公告)日：2009-12-31
申请号：US12163164
申请日：2008-06-27
申请人： Neil Laurence Coles , Scott Randall Shell , Upender Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
发明人： Neil Laurence Coles , Scott Randall Shell , Upender Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
IPC分类号： H04L9/32 , G06F21/20
CPC分类号： G06F21/6281 , G06F9/468 , G06F2221/2145
摘要： Embodiments provide a security infrastructure that may be configured to run on top of an existing operating system to control what resources can be accessed by an applications and what APIs an application can call. Security decisions are made by taking into account both the current thread's identity and the current thread's call chain context to enable minimal privilege by default. The current thread context is captured and a copy of it is created to be used to perform security checks asynchronously. Every thread in the system has an associated identity. To obtain access to a particular resource, all the callers on the current thread are analyzed to make sure that each caller and thread has access to that resource. Only when each caller and thread has access to that resource is the caller given access to that resource.
摘要翻译：实施例提供了可被配置为在现有操作系统之上运行以控制应用程序可以访问哪些资源以及应用程序可以调用哪些API的安全基础设施。通过考虑当前线程的身份和当前线程的调用链上下文来进行安全性决策，以在默认情况下实现最小权限。捕获当前线程上下文，并创建其副本以用于异步执行安全检查。系统中的每个线程都有一个关联的身份。为了获得对特定资源的访问，分析当前线程上的所有调用者，以确保每个调用者和线程都可以访问该资源。只有当每个调用者和线程都能访问该资源时，调用者才能访问该资源。

5. 发明授权

US08640244B2 Declared origin policy 有权
标题翻译：宣布起源政策
公开(公告)号：US08640244B2
公开(公告)日：2014-01-28
申请号：US12147696
申请日：2008-06-27
申请人： Matthew G. Lyons , Randal J. Ramig , Anil Dhawan
发明人： Matthew G. Lyons , Randal J. Ramig , Anil Dhawan
IPC分类号： G06F21/00
CPC分类号： G06F21/52
摘要： A declared origin policy may be provided. First a plurality of records comprising addresses that an application is allowed to access may be received. The received plurality of records may be placed in a manifest. Then, a request containing an address may be received and compared to the plurality of records in the manifest. Access to the address may be allowed when one of the plurality of records in the manifest matches the address or when an ambiguity is encountered as to whether the one of the plurality of records in the manifest matches the address. Access to the address may be denied when none of the plurality of records in the manifest matches the address. Moreover, any request to change any of the plurality of records in the manifest may be denied when the application is updated, uninstalled, or reinstalled.
摘要翻译：可以提供宣布的起源政策。首先，可以接收包括应用被允许访问的地址的多个记录。所接收的多个记录可以被放置在清单中。然后，可以接收包含地址的请求并将其与清单中的多个记录进行比较。当清单中的多个记录中的一个与地址匹配时，或当遇到关于清单中的多个记录中的一个与该地址匹配的歧义时，可以允许访问该地址。清单中的多个记录中没有一个与地址匹配时，可能会拒绝对地址的访问。此外，当应用程序被更新，卸载或重新安装时，可以拒绝更改清单中的多个记录中的任何一个的任何请求。

6. 发明授权

US08397290B2 Granting least privilege access for computing processes 失效
标题翻译：为计算过程授予最少权限访问权限
公开(公告)号：US08397290B2
公开(公告)日：2013-03-12
申请号：US12163164
申请日：2008-06-27
申请人： Neil Laurence Coles , Scott Randall Shell , Upender Reddy Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
发明人： Neil Laurence Coles , Scott Randall Shell , Upender Reddy Sandadi , Angelo Renato Vals , Matthew G. Lyons , Christopher Ross Jordan , Andrew Rogers , Yadhu Gopalan , Bor-Ming Hsieh
IPC分类号： G06F21/00
CPC分类号： G06F21/6281 , G06F9/468 , G06F2221/2145
摘要： Embodiments provide a security infrastructure that may be configured to run on top of an existing operating system to control what resources can be accessed by an applications and what APIs an application can call. Security decisions are made by taking into account both the current thread's identity and the current thread's call chain context to enable minimal privilege by default. The current thread context is captured and a copy of it is created to be used to perform security checks asynchronously. Every thread in the system has an associated identity. To obtain access to a particular resource, all the callers on the current thread are analyzed to make sure that each caller and thread has access to that resource. Only when each caller and thread has access to that resource is the caller given access to that resource.
摘要翻译：实施例提供了可被配置为在现有操作系统之上运行以控制应用程序可以访问哪些资源以及应用程序可以调用哪些API的安全基础设施。通过考虑当前线程的身份和当前线程的调用链上下文来进行安全性决策，以在默认情况下实现最小权限。捕获当前线程上下文，并创建其副本以用于异步执行安全检查。系统中的每个线程都有一个关联的身份。为了获得对特定资源的访问，分析当前线程上的所有调用者，以确保每个调用者和线程都可以访问该资源。只有当每个调用者和线程都能访问该资源时，调用者才能访问该资源。

7. 发明申请

US20090328235A1 Declared Origin Policy 有权
标题翻译：宣称原产地政策
公开(公告)号：US20090328235A1
公开(公告)日：2009-12-31
申请号：US12147696
申请日：2008-06-27
申请人： Matthew G. Lyons , Randal J. Ramig , Anil Dhawan
发明人： Matthew G. Lyons , Randal J. Ramig , Anil Dhawan
IPC分类号： G06F21/00
CPC分类号： G06F21/52
摘要： A declared origin policy may be provided. First a plurality of records comprising addresses that an application is allowed to access may be received. The received plurality of records may be placed in a manifest. Then, a request containing an address may be received and compared to the plurality of records in the manifest. Access to the address may be allowed when one of the plurality of records in the manifest matches the address or when an ambiguity is encountered as to whether the one of the plurality of records in the manifest matches the address. Access to the address may be denied when none of the plurality of records in the manifest matches the address. Moreover, any request to change any of the plurality of records in the manifest may be denied when the application is updated, uninstalled, or reinstalled.
摘要翻译：可以提供宣布的起源政策。首先，可以接收包括应用被允许访问的地址的多个记录。所接收的多个记录可以被放置在清单中。然后，可以接收包含地址的请求并将其与清单中的多个记录进行比较。当清单中的多个记录中的一个与地址匹配时，或当遇到关于清单中的多个记录中的一个与该地址匹配的歧义时，可以允许访问该地址。清单中的多个记录中没有一个与地址匹配时，可能会拒绝对地址的访问。此外，当应用程序被更新，卸载或重新安装时，可以拒绝更改清单中的多个记录中的任何一个的任何请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式