专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07992198B2 Unified authentication for web method platforms 有权
标题翻译： Web方法平台的统一认证
公开(公告)号：US07992198B2
公开(公告)日：2011-08-02
申请号：US11855364
申请日：2007-09-14
申请人： Brian J. Guarraci , Christopher C. White , Niels Thomas Ferguson , Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan
发明人： Brian J. Guarraci , Christopher C. White , Niels Thomas Ferguson , Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan
IPC分类号： G06F7/04 , G06F15/16 , G06F17/30 , G06F21/00 , H04L29/06 , H04L9/32 , G06F15/173
CPC分类号： H04L63/08 , H04L9/3234 , H04L9/3242 , H04L2209/42
摘要： An authentication mechanism is provided for a web method platform that allows homogeneous access for different types of clients according to a bootstrapping procedure utilized to establish the session. Different clients can be assigned different levels of trust based in part on the bootstrapping procedure and/or information provided during the procedure. The bootstrapping procedure can produce a token that is used by the clients in subsequent requests to provide previous authentication or state information to the platform. The token can comprise a shared secret used to ensure integrity of communications in some cases, and the token can be opaque to the client. Tokens can expire and require a client to re-bootstrap to provide higher levels of authentication protection, and tokens can be shared among a plurality of application servers to facilitate effective handling of requests in a farmed environment.
摘要翻译：为Web方法平台提供了一种认证机制，该平台允许根据用于建立会话的自举程序对不同类型的客户端进行均匀访问。部分基于过程中提供的引导过程和/或信息，可以为不同的客户端分配不同级别的信任。引导过程可以产生客户端在后续请求中向平台提供以前的身份验证或状态信息的令牌。令牌可以包括用于在某些情况下确保通信的完整性的共享秘密，并且令牌对于客户端可以是不透明的。令牌可以到期并要求客户端重新引导以提供更高级别的身份验证保护，并且可以在多个应用服务器之间共享令牌，以便于在养殖环境中有效地处理请求。

2. 发明申请

US20080256616A1 UNIFIED AUTHENTICATION FOR WEB METHOD PLATFORMS 有权
标题翻译：统一认证WEB方法平台
公开(公告)号：US20080256616A1
公开(公告)日：2008-10-16
申请号：US11855364
申请日：2007-09-14
申请人： Brian J. Guarraci , Christopher C. White , Niels Thomas Ferguson , Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan
发明人： Brian J. Guarraci , Christopher C. White , Niels Thomas Ferguson , Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan
IPC分类号： H04L9/32
CPC分类号： H04L63/08 , H04L9/3234 , H04L9/3242 , H04L2209/42
摘要： An authentication mechanism is provided for a web method platform that allows homogeneous access for different types of clients according to a bootstrapping procedure utilized to establish the session. Different clients can be assigned different levels of trust based in part on the bootstrapping procedure and/or information provided during the procedure. The bootstrapping procedure can produce a token that is used by the clients in subsequent requests to provide previous authentication or state information to the platform. The token can comprise a shared secret used to ensure integrity of communications in some cases, and the token can be opaque to the client. Tokens can expire and require a client to re-bootstrap to provide higher levels of authentication protection, and tokens can be shared among a plurality of application servers to facilitate effective handling of requests in a farmed environment.
摘要翻译：为Web方法平台提供了一种认证机制，该平台允许根据用于建立会话的自举程序对不同类型的客户端进行均匀访问。部分基于过程中提供的引导过程和/或信息，可以为不同的客户端分配不同级别的信任。引导过程可以产生客户端在后续请求中向平台提供以前的身份验证或状态信息的令牌。令牌可以包括用于在某些情况下确保通信的完整性的共享秘密，并且令牌对于客户端可以是不透明的。令牌可以到期并要求客户端重新引导以提供更高级别的身份验证保护，并且可以在多个应用服务器之间共享令牌，以便于在养殖环境中有效地处理请求。

3. 发明申请

US20080256643A1 MULTIPLE ENTITY AUTHORIZATION MODEL 有权
标题翻译：多个实体授权模型
公开(公告)号：US20080256643A1
公开(公告)日：2008-10-16
申请号：US11855251
申请日：2007-09-14
申请人： Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan , Brian J. Guarraci , Christopher C. White
发明人： Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan , Brian J. Guarraci , Christopher C. White
IPC分类号： G06F21/22
CPC分类号： G06F21/629
摘要： An authorization framework is provided that protects data records in a platform, such as a service-based platform, by requiring multiple level entities to be authorized with respect to the data records. For example, the data records can have an associated owner user that can grant access to other users with respect to the data. Additionally, however, the user can also grant access to certain applications that access the platform such that the data records can be initially closed for a user requiring the user to explicitly grant desired access to applications and/or users. In this regard, applications can be forbidden from accessing the data, even on behalf of the user, unless expressly authorized to do so by the user. Thus, the user can make informed decisions regarding who is to have access to its data.
摘要翻译：提供授权框架，通过要求相对于数据记录授权多级实体来保护平台（诸如基于服务的平台）中的数据记录。例如，数据记录可以具有相关联的所有者用户，其可以授予对于数据对其他用户的访问。然而，此外，用户还可以授予对访问平台的特定应用的访问，使得可以为要求用户明确授予对应用和/或用户的期望访问的用户最初关闭数据记录。在这方面，除非用户明确授权，否则即使是代表用户，也可以禁止应用程序访问数据。因此，用户可以做出关于谁将访问其数据的知情决定。

4. 发明授权

US08327456B2 Multiple entity authorization model 有权
标题翻译：多实体授权模型
公开(公告)号：US08327456B2
公开(公告)日：2012-12-04
申请号：US11855251
申请日：2007-09-14
申请人： Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan , Brian J. Guarraci , Christopher C. White
发明人： Jeffrey Dick Jones , Sean Patrick Nolan , Johnson T. Apacible , Vijay Varadan , Brian J. Guarraci , Christopher C. White
IPC分类号： G06F7/04 , G06F17/30 , G06F17/00 , G06F15/16 , G06F12/00 , G06F12/14 , G06F13/00 , H04N7/16 , H04L29/06 , G11C7/00 , G06Q50/00
CPC分类号： G06F21/629
摘要： An authorization framework is provided that protects data records in a platform, such as a service-based platform, by requiring multiple level entities to be authorized with respect to the data records. For example, the data records can have an associated owner user that can grant access to other users with respect to the data. Additionally, however, the user can also grant access to certain applications that access the platform such that the data records can be initially closed for a user requiring the user to explicitly grant desired access to applications and/or users. In this regard, applications can be forbidden from accessing the data, even on behalf of the user, unless expressly authorized to do so by the user. Thus, the user can make informed decisions regarding who is to have access to its data.
摘要翻译：提供授权框架，通过要求相对于数据记录授权多级实体来保护平台（诸如基于服务的平台）中的数据记录。例如，数据记录可以具有相关联的所有者用户，其可以授予对于数据对其他用户的访问。然而，此外，用户还可以授予对访问平台的特定应用的访问，使得可以为要求用户明确授予对应用和/或用户的期望访问的用户最初关闭数据记录。在这方面，除非用户明确授权，否则即使是代表用户，也可以禁止应用程序访问数据。因此，用户可以做出关于谁将访问其数据的知情决定。

5. 发明申请

US20090307488A1 HEALTH KEYSET MANAGEMENT 失效
标题翻译：健康科学管理
公开(公告)号：US20090307488A1
公开(公告)日：2009-12-10
申请号：US11860016
申请日：2007-09-24
申请人： Brian J. Guarraci , Christopher C. White , Johnson T. Apacible
发明人： Brian J. Guarraci , Christopher C. White , Johnson T. Apacible
IPC分类号： H04L9/32 , H04L9/08
CPC分类号： H04L9/083
摘要： Systems and methodologies that facilitate delegation of keyset management to a platform presenting a centralized health-related data repository are provided. Effectively, a central keyset manager is provided that generates, manages and distributes key material to client applications and servers deploying the platform. Thus, communications with the platform storing sensitive health-related data can be secured without incurring the costs associated with implementing and enforcing policies associated with key generation and expiration among a plurality of servers and client applications. Additionally, the innovation can scale keyset management to meet short term demand needs.
摘要翻译：提供了有助于将密钥集管理委托给呈现集中的健康相关数据存储库的平台的系统和方法。实际上，提供了一个中央密钥集管理器，可以生成，管理和分发密钥材料给客户端应用程序和部署平台的服务器。因此，可以确保与存储敏感的健康相关数据的平台的通信，而不会产生与多个服务器和客户端应用程序中的密钥生成和到期相关联的实施和执行策略相关联的成本。此外，创新可以扩展密钥集管理以满足短期需求。

6. 发明授权

US08661249B2 Health keyset management 失效
标题翻译：健康密钥集管理
公开(公告)号：US08661249B2
公开(公告)日：2014-02-25
申请号：US11860016
申请日：2007-09-24
申请人： Brian J. Guarraci , Christopher C. White , Johnson T. Apacible
发明人： Brian J. Guarraci , Christopher C. White , Johnson T. Apacible
IPC分类号： H04L29/06
CPC分类号： H04L9/083
摘要： Systems and methodologies that facilitate delegation of keyset management to a platform presenting a centralized health-related data repository are provided. Effectively, a central keyset manager is provided that generates, manages and distributes key material to client applications and servers deploying the platform. Thus, communications with the platform storing sensitive health-related data can be secured without incurring the costs associated with implementing and enforcing policies associated with key generation and expiration among a plurality of servers and client applications. Additionally, the innovation can scale keyset management to meet short term demand needs.
摘要翻译：提供了有助于将密钥集管理委托给呈现集中的健康相关数据存储库的平台的系统和方法。实际上，提供了一个中央密钥集管理器，可以生成，管理和分发密钥材料给客户端应用程序和部署平台的服务器。因此，可以确保与存储敏感的健康相关数据的平台的通信，而不会产生与多个服务器和客户端应用程序中的密钥生成和到期相关联的实施和执行策略相关联的成本。此外，创新可以扩展密钥集管理以满足短期需求。

7. 发明申请

US20080244335A1 Protecting memory operations involving zero byte allocations 有权
标题翻译：保护涉及零字节分配的存储器操作
公开(公告)号：US20080244335A1
公开(公告)日：2008-10-02
申请号：US11731262
申请日：2007-03-29
申请人： Thomas S. Coon , Michael R. Marcelais , Christopher C. White
发明人： Thomas S. Coon , Michael R. Marcelais , Christopher C. White
IPC分类号： G06F11/00
CPC分类号： G06F12/1416 , G06F12/0223 , G06F12/023
摘要： Applications are protected from being exposed to exploits and instabilities due to memory operations involving zero byte allocations. Memory operations involving a zero byte allocation are handled by a zero byte memory manager. When an application requests a zero byte allocation, a pointer to a protected part of memory is returned such that when the application attempts to read and/or write to the location the program flow is interrupted.
摘要翻译：由于涉及零字节分配的内存操作，应用程序受到保护，不会受到利用和不稳定的影响。涉及零字节分配的存储器操作由零字节存储器管理器处理。当应用程序请求零字节分配时，将返回指向受保护部分内存的指针，以便当应用程序尝试读取和/或写入程序流中断时。

8. 发明授权

US07797743B2 File conversion in restricted process 有权
标题翻译：限制进程中的文件转换
公开(公告)号：US07797743B2
公开(公告)日：2010-09-14
申请号：US11679068
申请日：2007-02-26
申请人： Ambrose T. Treacy , Maithili V. Dandige , Eric Fox , Robert A. Little , Christopher C. White , David LeBlanc , Benjamin J. Bunker , Aaron E. Erlandson
发明人： Ambrose T. Treacy , Maithili V. Dandige , Eric Fox , Robert A. Little , Christopher C. White , David LeBlanc , Benjamin J. Bunker , Aaron E. Erlandson
IPC分类号： G06F11/00 , H04L9/00 , G06F12/14
CPC分类号： G06F21/53 , G06F21/566 , G06F21/568 , G06F2221/2141 , G06F2221/2149
摘要： Embodiments are described for removing malicious code from a file in a first file format by converting the file into a converted file of a second file format. In embodiments, converting the file eliminates malicious code embedded within the file from being stored in the converted file. The conversion is performed within a restricted computer process that has restricted privileges limiting its access to an operating system and an underlying computer system. As a result, even if malicious code embedded within the file executes while the file is being converted into the converted file, the damage to a computer system is mitigated because of the limited privileges provided to the restricted process.
摘要翻译：描述了通过将文件转换为第二文件格式的转换文件来从第一文件格式的文件中去除恶意代码的实施例。在实施例中，转换文件消除嵌入在文件内的恶意代码被存储在转换的文件中。这种转换是在受限制的计算机进程中执行的，该程序具有限制权限，限制了对操作系统和底层计算机系统的访问。因此，即使在文件被转换成转换文件的同时执行文件中嵌入的恶意代码，由于提供给受限制的进程的特权受到限制，因此减轻了计算机系统的损坏。

9. 发明授权

US07814288B2 Protecting memory operations involving zero byte allocations 有权
标题翻译：保护涉及零字节分配的存储器操作
公开(公告)号：US07814288B2
公开(公告)日：2010-10-12
申请号：US11731262
申请日：2007-03-29
申请人： Thomas S. Coon , Michael R. Marcelais , Christopher C. White
发明人： Thomas S. Coon , Michael R. Marcelais , Christopher C. White
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28 , G06F11/00
CPC分类号： G06F12/1416 , G06F12/0223 , G06F12/023
摘要： Applications are protected from being exposed to exploits and instabilities due to memory operations involving zero byte allocations. Memory operations involving a zero byte allocation are handled by a zero byte memory manager. When an application requests a zero byte allocation, a pointer to a protected part of memory is returned such that when the application attempts to read and/or write to the location the program flow is interrupted.
摘要翻译：由于涉及零字节分配的内存操作，应用程序受到保护，不会受到利用和不稳定的影响。涉及零字节分配的存储器操作由零字节存储器管理器处理。当应用程序请求零字节分配时，将返回指向受保护的内存部分的指针，以便当应用程序尝试读取和/或写入程序流中断时。

10. 发明申请

US20120151557A1 Progressive Consent 有权
标题翻译：进步同意
公开(公告)号：US20120151557A1
公开(公告)日：2012-06-14
申请号：US12964758
申请日：2010-12-10
申请人： Muzammil Ahmed , Prashant Agrawal , Christopher C. White
发明人： Muzammil Ahmed , Prashant Agrawal , Christopher C. White
IPC分类号： G06F17/30 , G06F3/048
CPC分类号： G06Q50/18 , G06F21/604 , G06F21/6218 , G06Q10/10
摘要： A consent management system is described which manages an entity's consent to consume application functionality on a per-feature level of granularity. To perform this task, the consent management system maintains consent information which describes a plurality of use conditions associated with the features of the application functionality. In one case, the consent information has a hierarchical data structure that identifies a hierarchy of application features. In operation, the consent management system accesses the content information whenever an entity seeks to access a particular application feature; it grants or denies access to the feature based on the consent information. The consent management system also includes a consent maintenance module that allows an administrator (or other entity) to cancel or modify any use condition in the consent information.
摘要翻译：描述了同意管理系统，其管理实体在每个特征级别上消费应用功能的同意。为了执行该任务，同意管理系统维护描述与应用功能的特征相关联的多个使用条件的同意信息。在一种情况下，同意信息具有标识应用特征层级的分层数据结构。在操作中，当实体寻求访问特定应用特征时，同意管理系统访问内容信息; 它根据同意信息授予或拒绝访问该功能。同意管理系统还包括同意维护模块，允许管理员（或其他实体）取消或修改同意信息中的任何使用条件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式