专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08239954B2 Access control based on program properties 有权
标题翻译：基于程序属性的访问控制
公开(公告)号：US08239954B2
公开(公告)日：2012-08-07
申请号：US11745048
申请日：2007-05-07
申请人： Edward P. Wobber , Andrew Birrell , Martin Abadi
发明人： Edward P. Wobber , Andrew Birrell , Martin Abadi
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , G06F21/6218
摘要： A pattern matching access control system determines whether a principal should be granted access to use a resource based on properties of applications comprised by the principal. The principal name may be created when an application is loaded, invokes other applications (or programs) and/or assumes a new role context. Access is provided based on whether, for each application, the publisher is authorized by system policy to grant privilege as requested by the application. When a resource which requires the privilege is requested by a principal, an access control list (ACL) for the resource is expanded with a list of applications that have been authorized through their publisher to assert the privilege. The expanded ACL is compared to the principal name to determine resource access.
摘要翻译：模式匹配访问控制系统基于主体的应用程序的属性确定是否应授予主体访问权限以使用资源。可以在应用程序加载时调用主体名称，调用其他应用程序（或程序）和/或假定新的角色上下文。访问是基于每个应用程序，发布者是否被系统策略授权以根据应用程序请求授予特权来提供访问。当一个委托人请求一个需要该权限的资源时，该资源的访问控制列表（ACL）会被扩展，并通过其发布者授权的应用程序列表来声明该权限。将扩展的ACL与主体名称进行比较以确定资源访问。

2. 发明申请

US20080282354A1 ACCESS CONTROL BASED ON PROGRAM PROPERTIES 有权
标题翻译：基于程序属性的访问控制
公开(公告)号：US20080282354A1
公开(公告)日：2008-11-13
申请号：US11745048
申请日：2007-05-07
申请人： Edward P. Wobber , Andrew Birrell , Martin Abadi
发明人： Edward P. Wobber , Andrew Birrell , Martin Abadi
IPC分类号： H04L9/00
CPC分类号： H04L63/101 , G06F21/6218
摘要： A pattern matching access control system determines whether a principal should be granted access to use a resource based on properties of applications comprised by the principal. The principal name may be created when an application is loaded, invokes other applications (or programs) and/or assumes a new role context. Access is provided based on whether, for each application, the publisher is authorized by system policy to grant privilege as requested by the application. When a resource which requires the privilege is requested by a principal, an access control list (ACL) for the resource is expanded with a list of applications that have been authorized through their publisher to assert the privilege. The expanded ACL is compared to the principal name to determine resource access.
摘要翻译：模式匹配访问控制系统基于主体的应用程序的属性确定是否应授予主体访问权限以使用资源。可以在应用程序加载时调用主体名称，调用其他应用程序（或程序）和/或假定新的角色上下文。访问是基于每个应用程序，发布者是否被系统策略授权以根据应用程序请求授予特权来提供访问。当一个委托人请求一个需要该权限的资源时，该资源的访问控制列表（ACL）会被扩展，并通过其发布者授权的应用程序列表来声明该权限。将扩展的ACL与主体名称进行比较以确定资源访问。

3. 发明授权

US07398349B2 System and methods for an overlay disk and cache using portable flash memory 有权
标题翻译：使用便携式闪存的重叠磁盘和缓存的系统和方法
公开(公告)号：US07398349B2
公开(公告)日：2008-07-08
申请号：US11059124
申请日：2005-02-15
申请人： Andrew Birrell , Edward P. Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
发明人： Andrew Birrell , Edward P. Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
IPC分类号： G06F12/08
CPC分类号： G06F12/0866 , G06F3/061 , G06F3/0656 , G06F3/0664 , G06F3/067 , G06F9/4451 , G06F9/45558 , G06F21/56 , G06F2009/45579 , G06F2212/2022 , G06F2212/2146 , G06F2212/222
摘要： A lifting and shaping system for a bra is disclosed. The system uses lift platforms shaped to fit into the cups of the bra and formed from thin material such as plastic. The lift platforms are attached to the bra toward the center of the bra. Connectors having one end attached to the lift platform and the other end attached to a slide on the shoulder strap adjust the lift of the lift platform when the slide is moved. Flexible shaping members distribute the lift of the lift platforms and maintain the natural shape of the breasts as they are lifted. Smoothing shields ease the movement of the lift platforms and connectors within the cloth confines of the breast cups. The flexible shaping members may also perform some of the functions of a smoothing shield.
摘要翻译：提供了用于读取和写入可以被实现为本地操作系统的磁盘设备或作为虚拟机的虚拟磁盘设备的扇区的系统。例如，用户的计算环境以磁盘映像的形式存储在网络中，其可以是虚拟磁盘映像。虚拟磁盘通过主机驻留的虚拟机监视器（如MICROSOFT VIRTUAL PC R）在主机上实现。便携式存储设备（如闪存设备，缓冲区虚拟磁盘写入和高速缓存读取）大大降低了与远程磁盘访问相关的性能下降。缓存是移动的，以便它可以与用户一起旅行。闪存设备会记住常用的虚拟磁盘内容指纹，以便当涉及到无处不在的静态内容时，可以使用主机的本地磁盘来满足许多常见的磁盘读取。标准的，经常使用的软件映像可能预先分发到主机。 Flash磁盘内容会流回联网的父磁盘映像，以提供自动备份功能，增加了确保闪存驱动器不会溢出的优势。

4. 发明授权

US07480761B2 System and methods for an overlay disk and cache using portable flash memory 有权
标题翻译：使用便携式闪存的重叠磁盘和缓存的系统和方法
公开(公告)号：US07480761B2
公开(公告)日：2009-01-20
申请号：US11032775
申请日：2005-01-10
申请人： Andrew Birrell , Edward P. Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
发明人： Andrew Birrell , Edward P. Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
IPC分类号： G06F12/08 , G06F13/20
CPC分类号： G06F12/0866 , G06F3/061 , G06F3/0656 , G06F3/0664 , G06F3/067 , G06F9/4451 , G06F9/45558 , G06F21/56 , G06F2009/45579 , G06F2212/2022 , G06F2212/2146 , G06F2212/222
摘要： A system is provided for reading and writing sectors which may be realized as either a disk device to the local operating system, or as a virtual disk device to a virtual machine. A user's computing environment is stored in the network in the form of a disk image, which may be a virtual disk image, for example. The virtual disk is realized on host computers through host-resident virtual machine monitors such as MICROSOFT VIRTUAL PC®. Portable memory devices, such as flash devices, buffer virtual disk writes and cache reads, greatly reducing the performance degradation associated with remote disk access. The cache is mobile so that it can be travel with the user. The flash device remembers commonly used virtual disk content fingerprints so that the host machine's local disk can be used to satisfy many common disk reads when ubiquitous static content is involved. Standard, frequently used software images might be distributed in advance to host machines. Flash disk contents are trickled back into the networked parent disk image in order to provide an automatic backup facility, adding the benefit of ensuring that the flash drive doesn't overflow.
摘要翻译：提供了用于读取和写入可以被实现为本地操作系统的磁盘设备或作为虚拟机的虚拟磁盘设备的扇区的系统。例如，用户的计算环境以磁盘映像的形式存储在网络中，其可以是虚拟磁盘映像。虚拟磁盘通过主机驻留的虚拟机监视器（如MICROSOFT VIRTUAL PC（R））在主机上实现。便携式存储设备，如闪存设备，缓冲区虚拟磁盘写入和高速缓存读取，大大降低了与远程磁盘访问相关的性能下降。缓存是移动的，以便它可以与用户一起旅行。闪存设备会记住常用的虚拟磁盘内容指纹，以便当涉及到无处不在的静态内容时，可以使用主机的本地磁盘来满足许多常见的磁盘读取。标准的，经常使用的软件映像可能预先分发到主机。 Flash磁盘内容会流回联网的父磁盘映像，以提供自动备份功能，增加了确保闪存驱动器不会溢出的优势。

5. 发明授权

US07380051B2 System and methods for an overlay disk and cache using portable flash memory 有权
标题翻译：使用便携式闪存的重叠磁盘和缓存的系统和方法
公开(公告)号：US07380051B2
公开(公告)日：2008-05-27
申请号：US11058950
申请日：2005-02-15
申请人： Andrew Birrell , Edward P. Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
发明人： Andrew Birrell , Edward P. Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
IPC分类号： G06F12/14 , G06F12/16 , H04L9/32
CPC分类号： G06F12/0866 , G06F3/061 , G06F3/0656 , G06F3/0664 , G06F3/067 , G06F9/4451 , G06F9/45558 , G06F21/56 , G06F2009/45579 , G06F2212/2022 , G06F2212/2146 , G06F2212/222
摘要： A system is provided for reading and writing sectors which may be realized as either a disk device to the local operating system, or as a virtual disk device to a virtual machine. A user's computing environment is stored in the network in the form of a disk image, which may be a virtual disk image, for example. The virtual disk is realized on host computers through host-resident virtual machine monitors such as MICROSOFT VIRTUAL PC®. Portable memory devices, such as flash devices, buffer virtual disk writes and cache reads, greatly reducing the performance degradation associated with remote disk access. The cache is mobile so that it can be travel with the user. The flash device remembers commonly used virtual disk content fingerprints so that the host machine's local disk can be used to satisfy many common disk reads when ubiquitous static content is involved. Standard, frequently used software images might be distributed in advance to host machines. Flash disk contents are trickled back into the networked parent disk image in order to provide an automatic backup facility, adding the benefit of ensuring that the flash drive doesn't overflow.
摘要翻译：提供了用于读取和写入可以被实现为本地操作系统的磁盘设备或作为虚拟机的虚拟磁盘设备的扇区的系统。例如，用户的计算环境以磁盘映像的形式存储在网络中，其可以是虚拟磁盘映像。虚拟磁盘通过主机驻留的虚拟机监视器（如MICROSOFT VIRTUAL PC（R））在主机上实现。便携式存储设备，如闪存设备，缓冲区虚拟磁盘写入和高速缓存读取，大大降低了与远程磁盘访问相关的性能下降。缓存是移动的，以便它可以与用户一起旅行。闪存设备会记住常用的虚拟磁盘内容指纹，以便当涉及到无处不在的静态内容时，可以使用主机的本地磁盘来满足许多常见的磁盘读取。标准的，经常使用的软件映像可能预先分发到主机。 Flash磁盘内容会流回联网的父磁盘映像，以提供自动备份功能，增加了确保闪存驱动器不会溢出的优势。

6. 发明授权

US5235642A Access control subsystem and method for distributed computer system using locally cached authentication credentials 失效
标题翻译：使用本地缓存认证凭证的分布式计算机系统的访问控制子系统和方法
公开(公告)号：US5235642A
公开(公告)日：1993-08-10
申请号：US917767
申请日：1992-07-21
申请人： Edward Wobber , Martin Abadi , Andrew Birrell , Butler Lampson
发明人： Edward Wobber , Martin Abadi , Andrew Birrell , Butler Lampson
IPC分类号： G06F13/00 , G06F15/16 , G06F15/177 , G06F21/00 , H04L9/32
CPC分类号： G06F21/31 , H04L9/3215 , H04L9/3297 , G06F2211/009 , G06F2221/2141 , G06F2221/2151
摘要： A distributed computer system has a number of computers coupled thereto at distinct nodes. The computer at each node of the distributed system has a trusted computing base that includes an authentication agent for authenticating requests received from principals at other nodes in the system. Requests are transmitted to servers as messages that include a first identifier provided by the requester and a second identifier provided by the authentication agent of the requester node. Each server process is provided with a local cache of authentication data that identifies requesters whose previous request messages have been authenticated. When a request is received, the server checks the request's first and second identifiers against the entries in its local cache. If there is a match, then the request is known to be authentic. Otherwise, the server node's authentication agent is called to obtain authentication credentials from the requester's node to authenticate the request message. The principal identifier of the requester and the received credentials are stored in a local cache by the server node's authentication agent. The server process also stores a record in its local cache indicating that request messages from the specified requester are known to be authentic, thereby expediting the process of authenticating received requests.

7. 发明申请

US20060265759A1 Systems and methods for identifying principals to control access to computing resources 审中-公开
标题翻译：用于识别主体以控制对计算资源的访问的系统和方法
公开(公告)号：US20060265759A1
公开(公告)日：2006-11-23
申请号：US11134760
申请日：2005-05-19
申请人： Andrew Birrell , Edward Wobber , Martin Abadi
发明人： Andrew Birrell , Edward Wobber , Martin Abadi
IPC分类号： H04L9/32
CPC分类号： G06F21/6218
摘要： Systems and methods are provided for resource access control in computer systems. Our approach includes new techniques for composing and authenticating principals in an access control system. Our principals may comprise information that identifies the role of the user of a computer system, the mechanism by which the user was authenticated, and program execution history. Thus, when a principal makes a request, access control determinations can be made based on the principal's identity. Access control lists may provide patterns that are used to recognize principals, thereby ensuring a level of security without enumerating precise identifiers for all of the possible principles that may request a particular resource.
摘要翻译：为计算机系统中的资源访问控制提供了系统和方法。我们的方法包括在访问控制系统中组合和验证主体的新技术。我们的主体可以包括识别计算机系统的用户的角色，用户被认证的机制以及程序执行历史的信息。因此，当委托人发出请求时，可以基于主体的身份进行访问控制确定。访问控制列表可以提供用于识别主体的模式，从而确保安全级别，而不需要列举可能请求特定资源的所有可能原则的精确标识符。

8. 发明申请

US20060265754A1 Systems and methods for pattern matching on principal names to control access to computing resources 有权
标题翻译：用于主体名称上的模式匹配的系统和方法，以控制对计算资源的访问
公开(公告)号：US20060265754A1
公开(公告)日：2006-11-23
申请号：US11133806
申请日：2005-05-19
申请人： Andrew Birrell , Edward Wobber , Martin Abadi
发明人： Andrew Birrell , Edward Wobber , Martin Abadi
IPC分类号： H04N7/16
CPC分类号： G06F21/6218
摘要： Systems and methods are provided for resource access control in computer systems. Our approach includes new techniques for composing and authenticating principals in an access control system. Our principals may comprise information that identifies the role of the user of a computer system, the mechanism by which the user was authenticated, and program execution history. Thus, when a principal makes a request, access control determinations can be made based on the principal's identity. Access control lists may provide patterns that are used to recognize principals, thereby ensuring a level of security without enumerating precise identifiers for all of the possible principles that may request a particular resource.
摘要翻译：为计算机系统中的资源访问控制提供了系统和方法。我们的方法包括在访问控制系统中组合和验证主体的新技术。我们的主体可以包括识别计算机系统的用户的角色，用户被认证的机制以及程序执行历史的信息。因此，当委托人发出请求时，可以基于主体的身份进行访问控制确定。访问控制列表可以提供用于识别主体的模式，从而确保安全级别，而不需要列举可能请求特定资源的所有可能原则的精确标识符。

9. 发明申请

US20070226500A1 Subscription-based computing implemented in hardware of computing device 有权
标题翻译：基于订阅的计算在计算设备的硬件中实现
公开(公告)号：US20070226500A1
公开(公告)日：2007-09-27
申请号：US11388291
申请日：2006-03-24
申请人： Andrew Birrell , Charles Thacker , Michael Isard
发明人： Andrew Birrell , Charles Thacker , Michael Isard
IPC分类号： H04L9/00
CPC分类号： H04L9/3234 , G06F21/121 , H04L9/3247
摘要： A subscription-based computing device has hardware and a subscription enforcer implemented in the hardware. The enforcer has an accumulator that accumulates a usage value as the computing device is being used and an expiration value register that stores an expiration value. The enforcer allows the computing device to operate in a subscription mode without hindrance and with full use when the usage value is less than the stored expiration value, and allows the computing device to operate in an expiration mode with hindrance and without full use when the usage value reaches the stored expiration value to signal that the subscription for the computing device has expired.
摘要翻译：基于订阅的计算设备具有在硬件中实现的硬件和订阅执行器。执行者具有累加器，其在使用计算设备时累积使用值，以及存储过期值的到期值寄存器。执行者允许计算设备在使用值小于存储的到期值的情况下以预定的方式无限制地操作并且充分使用，并且允许计算设备在使用中受到阻碍并且不充分使用的期满模式下操作值达到存储的到期值，以表示计算设备的订阅已经过期。

10. 发明申请

US20060155930A1 System and methods for an overlay disk and cache using portable flash memory 有权
标题翻译：使用便携式闪存的重叠磁盘和缓存的系统和方法
公开(公告)号：US20060155930A1
公开(公告)日：2006-07-13
申请号：US11059124
申请日：2005-02-15
申请人： Andrew Birrell , Edward Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
发明人： Andrew Birrell , Edward Wobber , Muthukaruppan Annamalai , Ulfar Erlingsson
IPC分类号： G06F13/00
CPC分类号： G06F12/0866 , G06F3/061 , G06F3/0656 , G06F3/0664 , G06F3/067 , G06F9/4451 , G06F9/45558 , G06F21/56 , G06F2009/45579 , G06F2212/2022 , G06F2212/2146 , G06F2212/222
摘要： A lifting and shaping system for a bra is disclosed. The system uses lift platforms shaped to fit into the cups of the bra and formed from thin material such as plastic. The lift platforms are attached to the bra toward the center of the bra. Connectors having one end attached to the lift platform and the other end attached to a slide on the shoulder strap adjust the lift of the lift platform when the slide is moved. Flexible shaping members distribute the lift of the lift platforms and maintain the natural shape of the breasts as they are lifted. Smoothing shields ease the movement of the lift platforms and connectors within the cloth confines of the breast cups. The flexible shaping members may also perform some of the functions of a smoothing shield.
摘要翻译：公开了一种用于胸罩的提升和成形系统。该系统使用升降平台，其形状适合于胸罩杯中，并由诸如塑料的薄材料形成。电梯平台将胸罩连接到胸罩的中心。具有一端连接到升降平台的连接器和附接到肩带上的滑块的另一端在滑动件移动时调节升降平台的升程。柔性成形构件分配升降平台的升降机，并在升起时保持乳房的自然形状。平滑屏蔽可以缓解胸前布置的升降平台和连接器的运动。柔性成形构件还可以执行平滑屏蔽的一些功能。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式