专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06985958B2 Messaging infrastructure for identity-centric data access 失效
公开(公告)号：US06985958B2
公开(公告)日：2006-01-10
申请号：US10003754
申请日：2001-10-22
申请人： Mark Lucovsky , Shaun D. Pierce , Alexander T. Weinert , Michael G. Burner , Richard B. Ward , Paul J. Leach , George M. Moore , Arthur Zwiegincew , Vivek Gundotra , Robert M. Hyman , Jonathan D. Pincus , Daniel R. Simon
发明人： Mark Lucovsky , Shaun D. Pierce , Alexander T. Weinert , Michael G. Burner , Richard B. Ward , Paul J. Leach , George M. Moore , Arthur Zwiegincew , Vivek Gundotra , Robert M. Hyman , Jonathan D. Pincus , Daniel R. Simon
IPC分类号： G06F13/00
CPC分类号： H04L63/101 , G06F21/6218 , G06F21/6227 , G06F21/6245 , G06Q10/109 , H04L12/1859 , H04L12/1863 , H04L29/06 , H04L63/104 , H04L63/123 , H04L63/1425 , H04L67/02 , H04L67/16 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329
摘要： A messaging data structure for accessing data in an identity-centric manner. An identity may be a user, a group of users, or an organization. Instead of data being maintained on an application-by-application basis, the data associated with a particular identity is stored by one or more data services accessible by many applications. The data is stored in accordance with a schema that is recognized by a number of different applications and the data service. The messaging data structure includes fields that identify the target data object to be operated upon using an identity field, a schema field, and an instance identifier field. In addition, the desired operation is specified. Thus, the target data object is operated on in an identity-centric manner.

2. 发明授权

US07136859B2 Accessing heterogeneous data in a standardized manner 有权
公开(公告)号：US07136859B2
公开(公告)日：2006-11-14
申请号：US10003753
申请日：2001-10-22
申请人： Mark Lucovsky , Shaun D. Pierce , Alexander T. Weinert , Michael G. Burner , Richard B. Ward , Paul J. Leach , George M. Moore , Arthur Zwiegincew , Robert M. Hyman , Jonathan D. Pincus , Daniel R. Simon
发明人： Mark Lucovsky , Shaun D. Pierce , Alexander T. Weinert , Michael G. Burner , Richard B. Ward , Paul J. Leach , George M. Moore , Arthur Zwiegincew , Robert M. Hyman , Jonathan D. Pincus , Daniel R. Simon
IPC分类号： G06F7/00 , G06F17/30
CPC分类号： H04L67/16 , G06F17/3061 , G06F17/30908 , G06F21/6218 , G06F21/6227 , G06F21/6245 , G06Q10/109 , H04L12/1859 , H04L12/1863 , H04L29/06 , H04L63/101 , H04L67/02 , H04L67/28 , H04L67/2819 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329 , Y10S707/99944
摘要： Directly operating on data structures in a generic manner regardless of the type of data structure being operated upon and without requiring dedicated executable code for manipulating data structures of the particular data type. A common set of commands (e.g., insert, delete, replace, update, query) are recognized that may be used to operate on data structures of a number of different data types. A navigation module accesses a request to execute one of the common command methods on at least an identified portion of an identified data structure. Then, the navigation module accesses a navigation assistance module to access a set of rules associated with the particular data type, the set of rules allowing the navigation module to find the portion of the data structure that is to be operated on. If appropriate, the command operation is then executed on the identified portion of the data structure.

3. 发明授权

US07284271B2 Authorizing a requesting entity to operate upon data structures 有权
标题翻译：授权请求实体对数据结构进行操作
公开(公告)号：US07284271B2
公开(公告)日：2007-10-16
申请号：US10003767
申请日：2001-10-22
申请人： Mark Lucovsky , Shaun D. Pierce , Michael G. Burner , Richard B. Ward , Paul J. Leach , George M. Moore , Arthur Zwiegincew , Robert M. Hyman , Jonathan D. Pincus , Daniel R. Simon
发明人： Mark Lucovsky , Shaun D. Pierce , Michael G. Burner , Richard B. Ward , Paul J. Leach , George M. Moore , Arthur Zwiegincew , Robert M. Hyman , Jonathan D. Pincus , Daniel R. Simon
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： H04L63/101 , G06F21/6218 , G06F21/6227 , G06F21/6245 , G06Q10/109 , H04L12/1859 , H04L12/1863 , H04L29/06 , H04L63/08 , H04L63/1425 , H04L67/02 , H04L67/16 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329
摘要： Authorizing a requesting entity to have a service perform a particular action in a manner that is at least partially independent of the underlying target data structure. An authorization station maintains a number of role templates that each define basic access permissions with respect to a number of command methods. The authorization station also maintains a number of role definitions that each define access permissions for specific requesting entities by using one or more of the role templates. When the authorization station receives a request from the requesting entity, the authorization station then identifies the appropriate role definition. Using this role definition, the authorization station determines access permissions for the requesting entity with respect to the requested action.
摘要翻译：授权请求实体使服务以至少部分独立于基础目标数据结构的方式执行特定动作。授权站维护多个角色模板，每个角色模板定义关于多个命令方法的基本访问权限。授权站还维护多个角色定义，每个角色定义通过使用一个或多个角色模板定义特定请求实体的访问权限。当授权站从请求实体接收到请求时，授权站然后识别适当的角色定义。使用该角色定义，授权站根据所请求的动作确定请求实体的访问权限。

4. 发明授权

US07305548B2 Using atomic messaging to increase the security of transferring data across a network 有权
标题翻译：使用原子信息来增加通过网络传输数据的安全性
公开(公告)号：US07305548B2
公开(公告)日：2007-12-04
申请号：US10277382
申请日：2002-10-22
申请人： Shaun D. Pierce , Mark H. Lucovsky , Shaun D. Cox , Richard B. Ward , Paul J. Leach
发明人： Shaun D. Pierce , Mark H. Lucovsky , Shaun D. Cox , Richard B. Ward , Paul J. Leach
IPC分类号： H04L9/00
CPC分类号： H04L63/0428 , G06F21/606 , H04L63/061 , H04L63/062 , H04L63/0823
摘要： A client sends a request to an authentication server requesting access to a service at an application server. The authentication server returns a token containing an encrypted version of a session key that was encrypted using a secret shared between the authentication server and the application server. The client encrypts application data using a corresponding unencrypted version of the session key and text-encodes both the encrypted application data and the encrypted version of the session key. The text-encoded application and text-encoded encrypted version of the session key are both included in a message and sent to the application server. The application server decrypts the encrypted version of the session key using the shared secret so as to reveal the unencrypted version of the session key. The application server then decrypts the encrypted application data using the revealed unencrypted version of the session key.
摘要翻译：客户端向请求访问应用服务器上的服务的认证服务器发送请求。身份验证服务器返回一个令牌，该令牌包含使用身份验证服务器和应用程序服务器之间共享的秘密加密的会话密钥的加密版本。客户端使用会话密钥的对应的未加密版本加密应用数据，并对加密的应用数据和会话密钥的加密版本进行文本编码。会话密钥的文本编码应用程序和文本编码加密版本都包含在消息中并发送到应用程序服务器。应用服务器使用共享密钥对会话密钥的加密版本进行解密，以显示会话密钥的未加密版本。然后，应用服务器使用所揭示的会话密钥的未加密版本来解密加密的应用数据。

5. 发明授权

US07062539B2 Using state information in a distributed environment 有权
公开(公告)号：US07062539B2
公开(公告)日：2006-06-13
申请号：US10968731
申请日：2004-10-19
申请人： Paul J. Leach , Chris Kaler , Ferhan Elvanoglu , Mark H. Lucovsky , Shaun D. Pierce
发明人： Paul J. Leach , Chris Kaler , Ferhan Elvanoglu , Mark H. Lucovsky , Shaun D. Pierce
IPC分类号： G06F15/16
CPC分类号： G06F21/6218 , G06F21/6227 , G06F21/6245 , G06Q10/109 , H04L12/1859 , H04L12/1863 , H04L67/02 , H04L67/142 , H04L67/16 , H04L67/2804 , H04L67/288 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329
摘要： Processing a response to a network request using information that was transplanted into the response from a specific portion of the request. A requesting computer system generates an electronic request that includes the specific portion. The requesting computer system then submits the request to a responding computer system, which processes the request to form a response to the request. During processing of the request, the responding system transplants the specific portion of the request to the response. The responding computer system then transmits the response to the request to a processing computer system that processes the request. The processing computer system receives the response and extracts the information from the specific portion of the response. The processing computer system then uses the extracted information to process the request.

6. 发明授权

US06823369B2 Using state information in requests that are transmitted in a distributed network environment 有权
标题翻译：在分布式网络环境中发送的请求中使用状态信息
公开(公告)号：US06823369B2
公开(公告)日：2004-11-23
申请号：US10099577
申请日：2002-03-14
申请人： Paul J. Leach , Chris Kaler , Ferhan Elvanoglu , Mark H. Lucovsky , Shaun D Pierce
发明人： Paul J. Leach , Chris Kaler , Ferhan Elvanoglu , Mark H. Lucovsky , Shaun D Pierce
IPC分类号： G06F1516
CPC分类号： G06F21/6218 , G06F21/6227 , G06F21/6245 , G06Q10/109 , H04L12/1859 , H04L12/1863 , H04L67/02 , H04L67/142 , H04L67/16 , H04L67/2804 , H04L67/288 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329
摘要： Processing a response to a network request using information that was transplanted into the response from a specific portion of the request. A requesting computer system generates an electronic request that includes the specific portion. The requesting computer system then submits the request to a responding computer system, which processes the request to form a response to the request. During processing of the request, the responding system transplants the specific portion of the request to the response. The responding computer system then transmits the response to the request to a processing computer system that processes the request. The processing computer system receives the response and extracts the information from the specific portion of the response. The processing computer system then uses the extracted information to process the request.
摘要翻译：使用从请求的特定部分移植到响应中的信息来处理对网络请求的响应。请求计算机系统生成包括特定部分的电子请求。请求计算机系统然后将请求提交给响应的计算机系统，该系统处理请求以形成对请求的响应。在处理请求期间，响应系统将请求的特定部分移植到响应。响应的计算机系统然后将响应发送到处理请求的处理计算机系统。处理计算机系统从响应的特定部分接收响应并提取信息。处理计算机系统然后使用所提取的信息来处理请求。

7. 发明授权

US07900257B2 Enhanced computer intrusion detection methods and systems 有权
标题翻译：增强的计算机入侵检测方法和系统
公开(公告)号：US07900257B2
公开(公告)日：2011-03-01
申请号：US12475883
申请日：2009-06-01
申请人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
发明人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
IPC分类号： G06F11/00 , G06F7/04 , G06F12/14
CPC分类号： G06F21/31 , G06F2221/2101
摘要： Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.
摘要翻译：提供了改进的入侵检测和/或跟踪方法和系统，用于跨越各种计算设备和网络。例如，某些方法在每个认证/登录过程期间形成基本唯一的审计标识符。一种方法包括识别与认证/登录过程相关联的一个或多个基本上唯一的参数并将其加密以形成至少一个审核标识符，然后可以由认证/登录过程中涉及的每个设备生成和记录。然后可以将生成的审核日志文件与来自其他设备的类似审核日志文件一起审核，以跨多个平台跟踪用户。

8. 发明授权

US07971230B2 System and methods providing enhanced security model 有权
标题翻译：系统和方法提供增强的安全模型
公开(公告)号：US07971230B2
公开(公告)日：2011-06-28
申请号：US11830680
申请日：2007-07-30
申请人： Sameet H. Agarwal , Balan Sethu Raman , Sanjay Anand , Paul J. Leach , Richard B. Ward
发明人： Sameet H. Agarwal , Balan Sethu Raman , Sanjay Anand , Paul J. Leach , Richard B. Ward
IPC分类号： G06F17/30
CPC分类号： G06F21/6218 , G06F2221/2141 , G06F2221/2145 , Y10S707/99931 , Y10S707/99939
摘要： The present invention relates to a system and methodology to facilitate security for data items residing within (or associated with) a hierarchical database or storage structure. A database security system is provided having a hierarchical data structure associated with one or more data items. The system includes a security component that applies a security policy to the data items from a global location or region associated with a database. Various components and processes are employed to enable explicit and/or inherited security properties to be received by and propagated to the data items depending on the type of data structure encountered or processed.
摘要翻译：本发明涉及一种促进位于分层数据库或存储结构内（或与之相关联的）数据项的安全性的系统和方法。提供了具有与一个或多个数据项相关联的分层数据结构的数据库安全系统。该系统包括将安全策略应用于与数据库相关联的全球位置或区域的数据项的安全组件。采用各种组件和过程来使显式和/或继承的安全属性由数据项接收和传播到数据项，这取决于遇到或处理的数据结构的类型。

9. 发明授权

US07664724B2 Schema-based services for identity-based data access 有权
标题翻译：基于身份的数据访问的基于模式的服务
公开(公告)号：US07664724B2
公开(公告)日：2010-02-16
申请号：US11276655
申请日：2006-03-09
申请人： Mark H. Lucovsky , Shaun Douglas Pierce , Ramu Movva , Jagadeesh Kalki , David Benjamin Auerbach , Peter Sewall Ford , Yun-Qi Yuan , Yi-Wen Guu , Samuel John George , William Raymond Hoffman , Jay Christopher Jacobs , Paul Andrew Steckler , Walter C. Hsueh , Kendall D. Keil , Burra Gopal , Steven D. White , Paul J. Leach , Richard B. Ward , Philip Michael Smoot , Lijiang Fang , Michael B. Taylor , Suresh Kannan , Winnie C. Wu
发明人： Mark H. Lucovsky , Shaun Douglas Pierce , Ramu Movva , Jagadeesh Kalki , David Benjamin Auerbach , Peter Sewall Ford , Yun-Qi Yuan , Yi-Wen Guu , Samuel John George , William Raymond Hoffman , Jay Christopher Jacobs , Paul Andrew Steckler , Walter C. Hsueh , Kendall D. Keil , Burra Gopal , Steven D. White , Paul J. Leach , Richard B. Ward , Philip Michael Smoot , Lijiang Fang , Michael B. Taylor , Suresh Kannan , Winnie C. Wu
IPC分类号： G06F17/30
CPC分类号： G06Q10/109 , G06F21/335 , G06F21/6218 , G06F21/6227 , G06F21/6236 , G06F21/6245 , G06F21/6272 , G06F21/629 , G06F2221/2115 , G06F2221/2117 , G06F2221/2119 , G06F2221/2141 , G06F2221/2149 , H04L29/06 , H04L63/10 , H04L63/102 , H04L67/02 , H04L67/16 , H04L67/28 , H04L67/2819 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329 , Y10S707/99931 , Y10S707/99939 , Y10S707/99942 , Y10S707/99943
摘要： A schema-based service for Internet access to per-user services data, wherein access to data is based on each user's identity. The service includes a schema that defines rules and a structure for each user's data, and also includes methods that provide access to the data in a defined way. The services schema thus corresponds to a logical document containing the data for each user. The user manipulates (e.g., reads or writes) data in the logical document by data access requests through defined methods. In one implementation, the services schemas are arranged as XML documents, and the services provide methods that control access to the data based on the requesting user's identification, defined role and scope for that role. In this way, data can be accessed by its owner, and shared to an extent determined by the owner.
摘要翻译：用于因特网访问每用户服务数据的基于模式的服务，其中对数据的访问基于每个用户的身份。该服务包括定义每个用户数据的规则和结构的模式，并且还包括以定义的方式提供对数据的访问的方法。因此，服务模式对应于包含每个用户的数据的逻辑文档。用户通过定义的方法通过数据访问请求来操纵（例如，读或写）逻辑文档中的数据。在一个实现中，服务模式被排列为XML文档，并且服务提供了基于请求用户的标识，该角色的定义角色和范围来控制对数据的访问的方法。以这种方式，数据可由其所有者访问，并由所有者确定的程度共享。

10. 发明授权

US07543333B2 Enhanced computer intrusion detection methods and systems 有权
标题翻译：增强的计算机入侵检测方法和系统
公开(公告)号：US07543333B2
公开(公告)日：2009-06-02
申请号：US10118808
申请日：2002-04-08
申请人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
发明人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
IPC分类号： G06F21/06 , G06F21/20 , G06F21/22 , G06F21/24 , G08B23/00 , G06F15/173 , H04K1/00
CPC分类号： G06F21/31 , G06F2221/2101
摘要： Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.
摘要翻译：提供了改进的入侵检测和/或跟踪方法和系统，用于跨越各种计算设备和网络。例如，某些方法在每个认证/登录过程期间形成基本唯一的审计标识符。一种方法包括识别与认证/登录过程相关联的一个或多个基本上唯一的参数并将其加密以形成至少一个审核标识符，然后可以由认证/登录过程中涉及的每个设备生成和记录。然后可以将生成的审核日志文件与来自其他设备的类似审核日志文件一起审核，以跨多个平台跟踪用户。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式