专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2007068717A1 METHOD AND SYSTEM FOR EXTERNALIZING HTTP SECURITY MESSAGE HANDLING WITH MACRO SUPPORT 审中-公开
标题翻译：使用宏支持来排除HTTP安全消息处理的方法和系统
公开(公告)号：WO2007068717A1
公开(公告)日：2007-06-21
申请号：PCT/EP2006/069654
申请日：2006-12-13
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HARMON, Benjamin, Brewer , HINTON, Heather, Maria , MILMAN, Ivan, Matthew , MORAN, Anthony, Scott , VANDENWAUVER, Mark
发明人： HARMON, Benjamin, Brewer , HINTON, Heather, Maria , MILMAN, Ivan, Matthew , MORAN, Anthony, Scott , VANDENWAUVER, Mark
IPC分类号： H04L29/08 , G06F17/30
CPC分类号： H04L67/2814
摘要： A method for externalizing message handling within a data processing system is presented. A request (412) to access a resource (406) is received at a first server (404) from a client (402). In response to determining at the first server that processing of the request requires a message to be sent to the client, a redirect message (416) is generated that contains an operation code that corresponds to message handling functionality at a second server (418) for the message to be sent to the client. A configurable macro is evaluated to determine an evaluated macro, and the evaluated macro is inserted into the redirect message. The redirect message is then sent from the first server to the second server via the client. The second server extracts the operation code from the redirect message and invokes the message handling functionality that corresponds to the extracted operation code. The second server extracts the evaluated macro from the redirect message and employs the evaluated macro at the second server as an input parameter for the message handling functionality.
摘要翻译：提出了一种在数据处理系统内外部化消息处理的方法。从客户机（402）在第一服务器（404）处接收到访问资源（406）的请求（412）。响应于在第一服务器处确定处理请求需要将消息发送到客户端，生成重定向消息（416），其包含与第二服务器（418）处的消息处理功能相对应的操作代码，用于该消息将发送给客户端。评估可配置宏以确定评估的宏，并将评估的宏插入到重定向消息中。然后，重定向消息经由客户端从第一服务器发送到第二服务器。第二个服务器从重定向消息中提取操作代码，并调用与提取的操作代码相对应的消息处理功能。第二个服务器从重定向消息中提取评估的宏，并在第二个服务器上使用评估的宏作为消息处理功能的输入参数。

2. 发明申请

WO2007068716A1 METHOD, APPARATUS AND PROGRAM PRODUCTS FOR CUSTOM AUTHENTICATION OF A PRINCIPAL IN A FEDERATION BY AN IDENTITY PROVIDER 审中-公开
标题翻译：方法，设备和程序产品，用于自动认证由身份申明人联合的主要原则
公开(公告)号：WO2007068716A1
公开(公告)日：2007-06-21
申请号：PCT/EP2006/069652
申请日：2006-12-13
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , MORAN, Anthony, Scott
发明人： HINTON, Heather, Maria , MORAN, Anthony, Scott
IPC分类号： H04L29/06 , H04L29/08
CPC分类号： H04L63/0815 , H04L63/0884 , H04L63/102 , H04L67/14
摘要： Methods, systems, and computer program products are disclosed that give entities flexibility to implement custom authentication methods of other entities for authentication of a principal in a federation by authenticating the principal by an identity provider according to a service provider's authentication policy and recording in session data of the identity provider an authentication credential satisfying the service provider's authentication policy. Authentication of a principal in a federation is also carried out by authenticating the principal by the identity provider according to an identity provider's authentication policy. Authentication of a principal in a federation is further carried out by receiving in the identity provider an authentication request from the service provider, the authentication request specifying the service provider's authentication policy.
摘要翻译：公开了方法，系统和计算机程序产品，其给予实体灵活性，以实现其他实体的定制认证方法，以通过身份提供者根据服务提供商的认证策略认证主体并在会话数据中进行记录来实现联盟中的主体的认证身份提供商的身份验证凭证满足服务提供商的身份验证策略。通过身份提供者根据身份提供商的身份验证策略对主体进行身份认证，也可以对联盟中的主体进行身份验证。进一步通过在身份提供者中接收来自服务提供者的认证请求，指定服务提供商的认证策略的认证请求来进行联盟中的主体的认证。

3. 发明申请

WO2006008306A1 METHOD AND SYSTEM FOR FEDERATED PROVISIONING 审中-公开
标题翻译：联邦提供方法与系统
公开(公告)号：WO2006008306A1
公开(公告)日：2006-01-26
申请号：PCT/EP2005/053516
申请日：2005-07-20
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , TURNER, Brian, James , MORAN, Anthony, Scott , WEEDENI, Shane , GLAZER, Ian, Michael , BRAY, Gavin, George , RAGHAVAN, Venkat
发明人： HINTON, Heather, Maria , TURNER, Brian, James , MORAN, Anthony, Scott , WEEDENI, Shane , GLAZER, Ian, Michael , BRAY, Gavin, George , RAGHAVAN, Venkat
IPC分类号： G06F1/00
CPC分类号： H04L63/0815 , G06F21/41 , H04L63/0407
摘要： A method and a system are presented in which federated domains interact within a federated environment. Domains within a federation can initiate federated single-sign-on operations for a user at other federated domains. A point-of-contact server within a domain relies upon a trust proxy within the domain to manage trust relationships between the domain and the federation. Trust proxies interpret assertions from other federated domains as necessary. Trust proxies may have a trust relationship with one or more trust brokers, and a trust proxy may rely upon a trust broker for assistance in interpreting assertions. When a user is provisioned at a particular federated domain, the federated domain can provision the user to other federated domains within the federated environment. A provision operation may include creating or deleting an account for a user, pushing updated user account information including attributes, and requesting updates on account information including attributes.
摘要翻译：提出了一种方法和系统，其中联合域在联合环境中相互作用。联盟内的域可以为其他联盟域的用户启动联合单点登录操作。域内的联络点服务器依赖于域内的信任代理来管理域和联盟之间的信任关系。信任代理根据需要解释其他联盟域的断言。信托代理可能与一个或多个信托经纪人有信任关系，信托代理可以依靠信托代理人来解释断言。当用户在特定联盟域中配置时，联盟域可以将用户配置到联合环境中的其他联合域。提供操作可以包括创建或删除用户的帐户，推送包括属性的更新的用户帐户信息，以及请求包括属性的帐户信息的更新。

4. 发明申请

WO2007068715A1 METHOD AND SYSTEM FOR EXTENDING AUTHENTICATION METHODS 审中-公开
标题翻译：用于扩展认证方法的方法和系统
公开(公告)号：WO2007068715A1
公开(公告)日：2007-06-21
申请号：PCT/EP2006/069651
申请日：2006-12-13
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HARMON, Benjamin, Brewer , HINTON, Heather, Maria , MORAN, Anthony, Scott
发明人： HARMON, Benjamin, Brewer , HINTON, Heather, Maria , MORAN, Anthony, Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , H04L63/0815
摘要： A method is presented for managing authentication credentials for a user. A session management server performs session management with respect to the user for a domain that includes a protected resource. The session management server receives a request to access the protected resource, which requires authentication credentials that have been generated for a first type of authentication context. In response to determining that authentication credentials for the user have been generated for a second type of authentication context, the session management server sends to an authentication proxy server a first message that contains the authentication credentials for the user and an indicator for the first type of authentication context. The session management server subsequently receives a second message that contains updated authentication credentials for the user that indicate that the updated authentication credentials have been generated for the first type of authentication context.
摘要翻译：呈现用于管理用户的认证凭证的方法。会话管理服务器针对包含受保护资源的域对用户执行会话管理。会话管理服务器接收访问受保护资源的请求，该请求需要为第一类型的认证上下文生成的认证凭证。为了响应于确定用于第二类型的认证上下文的用户的认证凭证，会话管理服务器向认证代理服务器发送包含用户的认证凭证的第一消息和用于第一类型的认证凭证的指示符认证上下文。会话管理服务器随后接收第二消息，该第二消息包含用于指示为第一类型的认证上下文生成了更新的认证凭证的用户的更新认证证书。

5. 发明申请

WO2006008290A2 METHOD AND APPARATUS FOR PROVIDING FEDERATED FUNCTIONALITY WITHIN A DATA PROCESSING SYSTEM 审中-公开
标题翻译：在数据处理系统内提供联合功能的方法和装置
公开(公告)号：WO2006008290A2
公开(公告)日：2006-01-26
申请号：PCT/EP2005/053461
申请日：2005-07-18
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , FALOLA, Dolapo, Martin , MORAN, Anthony, Scott , WARDROP, Patrick, Ryan
发明人： HINTON, Heather, Maria , FALOLA, Dolapo, Martin , MORAN, Anthony, Scott , WARDROP, Patrick, Ryan
IPC分类号： G06F9/40
CPC分类号： H04L63/166 , H04L63/0281 , H04L63/08 , H04L63/0815 , H04L63/0884
摘要： A method and an apparatus are presented for providing federated functionality within a data processing system. An incoming first request is received at point-of-contact functionality. In response to a determination that information derived from the received request requires processing by federated user lifecycle management functionality, the derived information is sent from the point-of-contact functionality to the federated user lifecycle management functionality.
摘要翻译：介绍了用于在数据处理系统内提供联合功能的方法和设备。在接触点功能处接收到第一个请求。响应于从接收到的请求导出的信息需要联合用户生命周期管理功能的处理的确定，将派生信息从联系点功能发送到联合用户生命周期管理功能。

6. 发明申请

WO2006103176A1 METHOD FOR A RUNTIME USER ACCOUNT CREATION OPERATION 审中-公开
标题翻译：运行用户帐户创建操作的方法
公开(公告)号：WO2006103176A1
公开(公告)日：2006-10-05
申请号：PCT/EP2006/060762
申请日：2006-03-15
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , MILMAN, Ivan, Matthew , RAGHAVAN, Venkat , WEEDEN, Shane, Bradley
发明人： HINTON, Heather, Maria , MILMAN, Ivan, Matthew , RAGHAVAN, Venkat , WEEDEN, Shane, Bradley
IPC分类号： G06F21/20
CPC分类号： H04L63/0815 , G06F21/41
摘要： A method, system, apparatus, and computer program product are presented to support computing systems of different enterprises that interact within a federated computing environment. Federated single-sign-on operations can be initiated at the computing systems of federation partners on behalf of a user even though the user has not established a user account at a federation partner prior to the initiation of the single-sign-on operation. For example, an identity provider can initiate a single-sign-on operation at a service provider while attempting to obtain access to a controlled resource on behalf of a user. When the service provider recognizes that it does not have a linked user account for the user that allows for a single-sign-on operation with the identity provider, the service provider creates a local user account. The service provider can also pull user attributes from the identity provider as necessary to perform the user account creation operation.
摘要翻译：提出了一种方法，系统，装置和计算机程序产品，以支持在联合计算环境内交互的不同企业的计算系统。即使用户在单点登录操作开始之前尚未在联盟伙伴上建立用户帐户，也可以代表用户在联盟伙伴的计算系统上启动联合单点登录操作。例如，身份提供者可以尝试在代表用户获得受控资源的访问的情况下，在服务提供商处启动单点登录操作。当服务提供商认识到它不具有用于允许与身份提供商进行单点登录操作的用户的链接用户帐户时，服务提供商创建本地用户帐户。服务提供商还可以根据需要从身份提供者提取用户属性，以执行用户帐户创建操作。

7. 发明申请

WO2008046888A2 METHOD AND SYSTEM FOR SYNCHRONIZED POLICY CONTROL IN A WEB SERVICES ENVIRONMENT 审中-公开
标题翻译： WEB服务环境中同步策略控制的方法与系统
公开(公告)号：WO2008046888A2
公开(公告)日：2008-04-24
申请号：PCT/EP2007/061161
申请日：2007-10-18
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , MILMAN, Ivan, Matthew
发明人： HINTON, Heather, Maria , MILMAN, Ivan, Matthew
IPC分类号： G06F21/24 , H04L29/06
CPC分类号： H04L63/20 , H04L63/101
摘要： Policy controls for Web service resource objects in a hierarchical resource space are loosely coupled so that policy changes are applied and enforced across the objects. This technique ensures that different policies are not applied unintentionally to the same resource (for example, one at the Web services entry level, and the other at the resource level). By synchronizing the object in the manner described, neither the entity that deploys the applicat ion nor the security administrator need to be aware of the differences between the various types of requests that occur within a Web services environment. In a representative embodiment, resource objects are linked within a hierarchical resource space to provide synchronized policy control, where the policy is an audit policy, a quality-of-service (QoS) policy, a service level agreement (SLA) policy, a governance policy, a compliance policy, a patch management/vulnerability management policy, a user management policy, or a rights management policy.
摘要翻译：分层资源空间中的Web服务资源对象的策略控制松散耦合，以便跨对象应用和强制执行策略更改。这种技术可以确保不同意的资源（例如，在Web服务条目级别，资源级另一个）上不同的策略。通过以所描述的方式同步对象，部署应用程序的实体和安全管理员都不需要了解Web服务环境中发生的各种类型的请求之间的差异。在代表性的实施例中，资源对象在分层资源空间内链接以提供同步的策略控制，其中策略是审计策略，服务质量（QoS）策略，服务水平协议（SLA）策略，治理策略，合规策略，补丁管理/漏洞管理策略，用户管理策略或权限管理策略。

8. 发明申请

WO2011080082A2 BUSINESS PROCESS ENABLEMENT FOR IDENTITY MANAGEMENT 审中-公开
标题翻译：身份管理业务流程应用
公开(公告)号：WO2011080082A2
公开(公告)日：2011-07-07
申请号：PCT/EP2010/069819
申请日：2010-12-15
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , RAGHAVAN, Venkat , MUPPIDI, Sridhar , PLUNKETT, Casey
发明人： HINTON, Heather, Maria , RAGHAVAN, Venkat , MUPPIDI, Sridhar , PLUNKETT, Casey
IPC分类号： G06F9/46
CPC分类号： G06F9/541 , G06F9/468

9. 发明申请

WO2009050058A1 BROWSER-BASED LOGOFF 审中-公开
标题翻译：基于浏览器的LOGOFF
公开(公告)号：WO2009050058A1
公开(公告)日：2009-04-23
申请号：PCT/EP2008/063369
申请日：2008-10-07
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , MUPPIDI, Sridhar
发明人： HINTON, Heather, Maria , MUPPIDI, Sridhar
IPC分类号： G06F17/30
CPC分类号： G06F17/30899 , H04L67/02 , H04L67/14 , H04L67/143
摘要： A apparatus is provided with a logout enablement function that traps a browser or page shutdown request and prevents that request from completing until the browser (or page) has logged out from one or more current server-side application sessions. The logout enablement function ensures that server-side resources that have been invoked for a given session are released before the web browser can be shutdown. The function is implemented as native browser code, a web page applet, a Java server page, a script, a control associated with the browser, and a browser plug-in.
摘要翻译：设备具有注销启用功能，其捕获浏览器或页面关闭请求，并且在浏览器（或页面）已从一个或多个当前服务器端应用程序会话注销之前阻止该请求完成。注销启用功能确保在Web浏览器可以关闭之前已释放为给定会话调用的服务器端资源。该功能实现为本地浏览器代码，网页小程序，Java服务器页面，脚本，与浏览器相关联的控件和浏览器插件。

10. 发明申请

WO2012004185A1 RESOURCE ACCESS MANAGEMENT 审中-公开
标题翻译：资源访问管理
公开(公告)号：WO2012004185A1
公开(公告)日：2012-01-12
申请号：PCT/EP2011/061015
申请日：2011-06-30
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , HINTON, Heather, Maria , BADE, Steven , LINTON, Jeb , RODRIGUEZ, Peter
发明人： HINTON, Heather, Maria , BADE, Steven , LINTON, Jeb , RODRIGUEZ, Peter
IPC分类号： H04L29/06
CPC分类号： H04L63/0815 , H04L9/3228
摘要： A method to enable access to resources hosted in a compute cloud begins upon receiving a registration request to initiate a user's registration to use resources hosted in the compute cloud. During a registration process initiated by receipt of the registration request, a federated single sign-on (F-SSO) request is received. The F-SSO request includes an assertion (e.g., an HTTP-based SAML assertion) having authentication data (e.g., an SSH public key, a CIFS username, etc.) for use to enable direct user access to a resource hosted in the compute cloud. Upon validation of the assertion, the authentication data is deployed within the cloud to enable direct user access to the compute cloud resource using the authentication data.
摘要翻译：能够访问计算云中托管的资源的方法从接收到注册请求开始，以启动用户注册以使用计算云中托管的资源。在通过接收注册请求发起的注册过程中，接收到联合单点登录（F-SSO）请求。 F-SSO请求包括具有认证数据（例如，SSH公钥，CIFS用户名等）的断言（例如，基于HTTP的SAML断言），用于使直接用户能够访问计算机中托管的资源云。在确认断言之后，将认证数据部署在云中，以使用身份验证数据可以直接访问计算云资源。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式