专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20130061299A1 DISTRIBUTED COMPUTER SYSTEMS WITH TIME-DEPENDENT CREDENTIALS 有权
公开(公告)号：US20130061299A1
公开(公告)日：2013-03-07
申请号：US13224246
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00
CPC分类号： G06F21/00 , G06F21/34 , H04L63/065 , H04L63/068 , H04L67/10 , H04L2463/121 , H04W12/06
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.

2. 发明授权

US09032492B2 Distributed computer systems with time-dependent credentials 有权
公开(公告)号：US09032492B2
公开(公告)日：2015-05-12
申请号：US13224246
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00 , H04L29/06 , H04W12/06 , H04L9/32 , G06F21/34
CPC分类号： G06F21/00 , G06F21/34 , H04L63/065 , H04L63/068 , H04L67/10 , H04L2463/121 , H04W12/06
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.

3. 发明申请

US20130061301A1 DISTRIBUTED COMPUTER SYSTEMS WITH TIME-DEPENDENT CREDENTIALS 有权
公开(公告)号：US20130061301A1
公开(公告)日：2013-03-07
申请号：US13224257
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00
CPC分类号： H04L63/0846
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.

4. 发明授权

US08640210B2 Distributed computer systems with time-dependent credentials 有权
标题翻译：具有时间依赖凭证的分布式计算机系统
公开(公告)号：US08640210B2
公开(公告)日：2014-01-28
申请号：US13224257
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00 , H04L9/32 , H04L9/00 , H04L29/06 , G06F15/00
CPC分类号： H04L63/0846
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.
摘要翻译：分布式系统，其中根据不同的本地时间操作的控制器提供时间依赖的凭证。通过识别在过渡间隔期间生成的凭证可以避免控制器因产生时间偏差而产生不一致凭据的错误，其中不同的控制器可能会在同一绝对时间产生不同的凭据。在转换间隔期间，控制器和其他设备可以基于认证功能的性质差异地使用凭证。每个控制器可以基于自调度续订或基于来自其他设备的请求来定期更新其凭证，使得更新时间被随机延迟抵消以避免过多的网络流量。控制器可以基于与该时间相关联的加密安全密钥以及识别与该凭证相关联的实体的信息来确定哪个凭证对于任何给定时间是有效的。

5. 发明授权

US09058467B2 Distributed computer systems with time-dependent credentials 有权
标题翻译：具有时间依赖凭证的分布式计算机系统
公开(公告)号：US09058467B2
公开(公告)日：2015-06-16
申请号：US13224255
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00 , H04L29/06 , G06F21/62 , G06F15/16 , H04L9/32
CPC分类号： G06F21/00 , G06F21/6218 , H04L9/32 , H04L63/0846
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.
摘要翻译：分布式系统，其中根据不同的本地时间操作的控制器提供时间依赖的凭证。通过识别在过渡间隔期间生成的凭证可以避免控制器因产生时间偏差而产生不一致凭据的错误，其中不同的控制器可能会在同一绝对时间产生不同的凭据。在转换间隔期间，控制器和其他设备可以基于认证功能的性质差异地使用凭证。每个控制器可以基于自调度续订或基于来自其他设备的请求来定期更新其凭证，使得更新时间被随机延迟抵消以避免过多的网络流量。控制器可以基于与该时间相关联的加密安全密钥以及识别与该凭证相关联的实体的信息来确定哪个凭证对于任何给定时间是有效的。

6. 发明申请

US20130061300A1 DISTRIBUTED COMPUTER SYSTEMS WITH TIME-DEPENDENT CREDENTIALS 有权
标题翻译：具有时间依赖证据的分布式计算机系统
公开(公告)号：US20130061300A1
公开(公告)日：2013-03-07
申请号：US13224255
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00
CPC分类号： G06F21/00 , G06F21/6218 , H04L9/32 , H04L63/0846
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.
摘要翻译：分布式系统，其中根据不同的本地时间操作的控制器提供时间依赖的凭证。通过识别在过渡间隔期间生成的凭证可以避免控制器因产生时间偏差而产生不一致凭据的错误，其中不同的控制器可能会在同一绝对时间产生不同的凭据。在转换间隔期间，控制器和其他设备可以基于认证功能的性质差异地使用凭证。每个控制器可以基于自调度续订或基于来自其他设备的请求来定期更新其凭证，使得更新时间被随机延迟抵消以避免过多的网络流量。控制器可以基于与该时间相关联的加密安全密钥以及识别与该凭证相关联的实体的信息来确定哪个凭证对于任何给定时间是有效的。

7. 发明授权

US09118672B2 Back-end constrained delegation model 有权
标题翻译：后端约束委托模型
公开(公告)号：US09118672B2
公开(公告)日：2015-08-25
申请号：US12965445
申请日：2010-12-10
申请人： Mark Fishel Novak , Paul J. Leach , Liqiang Zhu , Paul J. Miller , Alexandru Hanganu , Yi Zeng , Jeremy Dominic Viegas , K. Michiko Short
发明人： Mark Fishel Novak , Paul J. Leach , Liqiang Zhu , Paul J. Miller , Alexandru Hanganu , Yi Zeng , Jeremy Dominic Viegas , K. Michiko Short
IPC分类号： G06F7/04 , H04L29/06 , H04L9/32
CPC分类号： H04L63/0884 , H04L9/3213 , H04L63/0807
摘要： A client can communicate with a middle tier, which can then, in turn, communicate with a back end tier to access information and resources on behalf of the client within the context of a system that can scale well. Each individual back end can establish a policy that defines which computing device can delegate to that back end. That policy can be enforced by a domain controller within the same administrative domain as the particular back end. When a middle tier requests to delegate to a back end, the domain controller to which that request was directed can either apply the policy, or, if the domain controller is in a different domain than the targeted back end, it can direct the middle tier to a domain controller in a different domain and can sign relevant information that the middle tier can utilize when communicating with that different domain controller.
摘要翻译：客户端可以与中间层进行通信，然后可以与后端层进行通信，以便在可以扩展的系统的上下文中代表客户端访问信息和资源。每个单独的后端可以建立一个策略，定义哪个计算设备可以委托给该后端。该策略可以由与特定后端相同的管理域中的域控制器实施。当中间层请求委托给后端时，该请求所针对的域控制器可以应用策略，或者如果域控制器位于与目标后端不同的域中，则可以将中间层到不同域中的域控制器，并且可以签署中间层在与该不同域控制器通信时可以利用的相关信息。

8. 发明申请

US20120131661A1 BACK-END CONSTRAINED DELEGATION MODEL 有权
标题翻译：后端约束代码模型
公开(公告)号：US20120131661A1
公开(公告)日：2012-05-24
申请号：US12965445
申请日：2010-12-10
申请人： Mark Fishel Novak , Paul J. Leach , Liqiang Zhu , Paul J. Miller , Alexandru Hanganu , Yi Zeng , Jeremy Dominic Viegas , K. Michiko Short
发明人： Mark Fishel Novak , Paul J. Leach , Liqiang Zhu , Paul J. Miller , Alexandru Hanganu , Yi Zeng , Jeremy Dominic Viegas , K. Michiko Short
IPC分类号： G06F15/16
CPC分类号： H04L63/0884 , H04L9/3213 , H04L63/0807
摘要： A client can communicate with a middle tier, which can then, in turn, communicate with a back end tier to access information and resources on behalf of the client within the context of a system that can scale well. Each individual back end can establish a policy that defines which computing device can delegate to that back end. That policy can be enforced by a domain controller within the same administrative domain as the particular back end. When a middle tier requests to delegate to a back end, the domain controller to which that request was directed can either apply the policy, or, if the domain controller is in a different domain than the targeted back end, it can direct the middle tier to a domain controller in a different domain and can sign relevant information that the middle tier can utilize when communicating with that different domain controller.
摘要翻译：客户端可以与中间层进行通信，然后可以与后端层进行通信，以便在可以扩展的系统的上下文中代表客户端访问信息和资源。每个单独的后端可以建立一个策略，定义哪个计算设备可以委托给该后端。该策略可以由与特定后端相同的管理域中的域控制器实施。当中间层请求委托给后端时，该请求所针对的域控制器可以应用策略，或者如果域控制器位于与目标后端不同的域中，则可以将中间层到不同域中的域控制器，并且可以签署中间层在与该不同域控制器通信时可以利用的相关信息。

9. 发明授权

US08996866B2 Unobtrusive assurance of authentic user intent 有权
标题翻译：真实的用户意图不明智的保证
公开(公告)号：US08996866B2
公开(公告)日：2015-03-31
申请号：US12645465
申请日：2009-12-22
申请人： Crispin Cowan , Matthew Z. Tamayo-Rios , Tanmoy Dutta , John Lambert , Paul J. Leach , Scott A. Field , Thomas C. Jones
发明人： Crispin Cowan , Matthew Z. Tamayo-Rios , Tanmoy Dutta , John Lambert , Paul J. Leach , Scott A. Field , Thomas C. Jones
IPC分类号： G06F21/52 , G06F21/62 , G06F21/53
CPC分类号： G06F21/52 , G06F21/53 , G06F21/62
摘要： Computer-executable instructions that are directed to the performance of consequential actions and automatically elevate to execute at a higher privilege level to do so can perform such consequential actions only after user notification. Doing so can enable monitoring processes to avoid presenting duplicative user notification upon detection of such auto-elevation. In addition, prior to presenting user notification, input from the execution environment can be ignored and access to DLLs for performing consequential actions can be avoided. A static analyzer can identify non-conforming computer-executable instructions. A wrapper can be utilized to provide compliance by otherwise unknown or non-conforming computer-executable instructions.
摘要翻译：针对执行相应操作并自动提升以在较高权限级别执行的计算机可执行指令，只有在用户通知后才能执行此类后续操作。这样做可以实现监控过程，以避免在检测到这种自动升高时呈现重复的用户通知。此外，在呈现用户通知之前，可以忽略来自执行环境的输入，并且可以避免对用于执行相继动作的DLL的访问。静态分析仪可以识别不合格的计算机可执行指令。可以使用包装器来提供否则未知或不合格的计算机可执行指令的符合性。

10. 发明授权

US08464319B2 Resource access based on multiple scope levels 有权
公开(公告)号：US08464319B2
公开(公告)日：2013-06-11
申请号：US12684426
申请日：2010-01-08
申请人： Raja P. Perumal , Jeffrey B. Hamblin , Paul J. Leach
发明人： Raja P. Perumal , Jeffrey B. Hamblin , Paul J. Leach
IPC分类号： G06F21/00
CPC分类号： G06F21/30 , G06F21/6218 , G06F2221/2113 , G06F2221/2141
摘要： A scope hierarchy corresponding to a resource to which a type of access is requested is identified, the scope hierarchy including multiple scope levels each of which has an associated access control list. An access control list associated with a lower scope level can further restrict access permitted to the resource by an access control list associated with a higher scope level. Based at least in part on one or more of the access control lists associated with the multiple scope levels, a determination is made as to whether the requested type of access to the resource is permitted.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式