专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07389430B2 Method for providing access control to single sign-on computer networks 有权
标题翻译：为单点登录计算机网络提供访问控制的方法
公开(公告)号：US07389430B2
公开(公告)日：2008-06-17
申请号：US10313708
申请日：2002-12-05
申请人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
发明人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
IPC分类号： G06F7/04 , G06F15/16
CPC分类号： H04L63/102 , H04L63/0815
摘要： A method for providing access control to a single sign-on computer network is disclosed. A user is assigned to multiple groups within a computer network. In response to an access request by the user, the computer network determines a group pass count based on a user profile of the user. The group pass count is a number of groups in which the access request meets all their access requirements. The computer network grants the access request if the group pass count is greater than a predetermined high group pass threshold value.
摘要翻译：公开了一种用于向单点登录计算机网络提供访问控制的方法。用户被分配到计算机网络内的多个组。响应于用户的访问请求，计算机网络基于用户的用户简档确定组通过计数。组传递计数是访问请求满足其所有访问要求的一组组。如果组通过计数大于预定的高组通过阈值，则计算机网络授予访问请求。

2. 发明授权

US07702914B2 Method for providing access control to single sign-on computer networks 有权
标题翻译：为单点登录计算机网络提供访问控制的方法
公开(公告)号：US07702914B2
公开(公告)日：2010-04-20
申请号：US12104146
申请日：2008-04-16
申请人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
发明人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
IPC分类号： G06F21/00 , G06F7/04
CPC分类号： H04L63/102 , H04L63/0815
摘要： A method for providing access control to a single sign-on computer network is disclosed. A user is assigned to multiple groups within a computer network. In response to an access request by the user, the computer network determines a group pass count based on a user profile of the user. The group pass count is a number of groups in which the access request meets all their access requirements. The computer network grants the access request if the group pass count is greater than a predetermined high group pass threshold value.
摘要翻译：公开了一种用于向单点登录计算机网络提供访问控制的方法。用户被分配到计算机网络内的多个组。响应于用户的访问请求，计算机网络基于用户的用户简档确定组通过计数。组传递计数是访问请求满足其所有访问要求的一组组。如果组通过计数大于预定的高组通过阈值，则计算机网络授予访问请求。

3. 发明授权

US08229903B2 Suggesting data interpretations and patterns for updating policy documents 失效
标题翻译：建议更新政策文件的数据解释和模式
公开(公告)号：US08229903B2
公开(公告)日：2012-07-24
申请号：US10324514
申请日：2002-12-19
申请人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
发明人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
IPC分类号： G06F7/00 , G06F17/00
CPC分类号： G06F17/3061 , G06Q10/10
摘要： A system and method for utilizing data mining to generate a policy document or to revise theory within a policy document. A data base of unknown events is mined for application to the development of a system management policy document. The results of the data mining of the database of unknown events are automatically incorporated into a policy document, subject to user approval, to produce a new policy document or an updated version of an existing policy document.
摘要翻译：一种利用数据挖掘生成政策文件或在政策文件中修改理论的系统和方法。开发未知事件的数据库以应用于系统管理策略文档的开发。未知事件数据库的数据挖掘的结果将自动并入到政策文件中，并经用户批准，以生成新的策略文档或现有策略文档的更新版本。

4. 发明授权

US07941854B2 Method and system for responding to a computer intrusion 失效
标题翻译：响应计算机入侵的方法和系统
公开(公告)号：US07941854B2
公开(公告)日：2011-05-10
申请号：US10313732
申请日：2002-12-05
申请人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
发明人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
IPC分类号： G06F12/14 , G08B23/00
CPC分类号： H04L63/1408 , G06F21/316 , G06F21/552 , G06F21/554 , G06F21/566 , G06F2221/2101 , H04L63/1458
摘要： A method and system for managing an intrusion on a computer by graphically representing an intrusion pattern of a known past intrusion, and then comparing the intrusion pattern of the known intrusion with a current intrusion. The intrusion pattern may either be based on intrusion events, which are the effects of the intrusion or activities that provide a signature of the type of intrusion, or the intrusion pattern may be based on hardware topology that is affected by the intrusion. The intrusion pattern is graphically displayed with scripted responses, which in a preferred embodiment are presented in pop-up windows associated with each node in the intrusion pattern. Alternatively, the response to the intrusion may be automatic, based on a pre-determined percentage of common features in the intrusion pattern of the known past intrusion and the current intrusion.
摘要翻译：用于通过图形地表示已知过去入侵的入侵模式来管理计算机上的入侵的方法和系统，然后将已知入侵的入侵模式与当前入侵进行比较。入侵模式可以基于入侵事件，这是入侵或提供入侵类型的签名的活动的影响，或者入侵模式可能基于受入侵影响的硬件拓扑。入侵模式以图形方式显示脚本响应，其在优选实施例中以与入侵模式中的每个节点相关联的弹出窗口中呈现。或者，基于已知的过去入侵和当前入侵的入侵模式中的共同特征的预定百分比，对入侵的响应可以是自动的。

5. 发明授权

US07552472B2 Developing and assuring policy documents through a process of refinement and classification 失效
标题翻译：通过细化和分类的过程开发和确保政策文件
公开(公告)号：US07552472B2
公开(公告)日：2009-06-23
申请号：US10324502
申请日：2002-12-19
申请人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
发明人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading
IPC分类号： G06F15/177
CPC分类号： H04L63/1416 , H04L63/20
摘要： A system and method for developing network policy document and assuring up-to-date monitoring and automated refinement and classification of the network policy. The system administrator defines an initial policy document that is provided as the initial symbolic classifier. The classification rules remain in human readable form throughout the process. Network system data is fed through the classifier, which labels the data according to whether a policy constraint is violated. The labels are tagged to the data. The user then reviews the labels to determine whether the classification is satisfactory. If the classification of the data is satisfactory, the label is unaltered; However, if the classification is not satisfactory, the data is re-labeled. The re-labeled data is then introduced into a refinement algorithm, which determines what policy must be modified to correct classification of network events in accordance with the re-labeling. The network administrator then inspects the resulting new policy and modifies it if necessary. An updated classifier replaces the previous classifier.
摘要翻译：一种用于开发网络策略文档并确保最新监控和网络策略的自动细化和分类的系统和方法。系统管理员定义作为初始符号分类器提供的初始策略文档。分类规则在整个过程中保持以人类可读的形式。网络系统数据通过分类器馈送，分类器根据是否违反策略约束来标记数据。标签被标记为数据。用户然后审查标签以确定分类是否令人满意。如果数据分类令人满意，则标签不变; 然而，如果分类不令人满意，则重新标记数据。然后将重新标记的数据引入到细化算法中，该算法确定根据重新标记来确定哪些策略必须被修改以校正网络事件的分类。然后，网络管理员检查生成的新策略，并在必要时对其进行修改。更新的分类器将替换以前的分类器。

6. 发明授权

US07549166B2 Defense mechanism for server farm 有权
标题翻译：服务器场的防御机制
公开(公告)号：US07549166B2
公开(公告)日：2009-06-16
申请号：US10313728
申请日：2002-12-05
申请人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading , Ronald S. Woan , John D. Wolpert , Shawn L. Young
发明人： Paul T. Baffes , John Michael Garrison , Michael Gilfix , Allan Hsu , Tyron Jerrod Stading , Ronald S. Woan , John D. Wolpert , Shawn L. Young
IPC分类号： G06F11/00 , G06F7/04
CPC分类号： G06F21/554 , G06F2221/2127
摘要： A method and system for handling a malicious intrusion to a machine in a networked group of computers. The malicious intrusion is an unauthorized access to the machine, such as a server in a server farm. When the intrusion is detected, the machine is isolated from the rest of the server farm, and the machine is reprovisioned as a decoy system having access to only data that is ersatz or at least non-sensitive. If the intrusion is determined to be non-malicious, then the machine is functionally reconnected to the server farm, and the machine is reprovisioned to a state held before the reprovisioning of the machine as a decoy machine.
摘要翻译：一种用于处理对联网计算机组中的机器的恶意入侵的方法和系统。恶意入侵是对机器的未经授权的访问，例如服务器场中的服务器。当检测到入侵时，机器与服务器场的其余部分隔离，并且机器被重新配置为只能访问ersatz或至少不敏感的数据的诱饵系统。如果入侵被确定为非恶意的，则机器在功能上重新连接到服务器场，并且机器被重新设置为在作为诱饵机器重新配置机器之前所持有的状态。

7. 发明授权

US4920487A Method of up-front load balancing for local memory parallel processors 失效
标题翻译：本地存储器并行处理器的前端负载平衡方法
公开(公告)号：US4920487A
公开(公告)日：1990-04-24
申请号：US283106
申请日：1988-12-12
申请人： Paul T. Baffes
发明人： Paul T. Baffes
IPC分类号： G06F9/50
CPC分类号： G06F9/5016 , G06F9/5066
摘要： In a parallel processing computer system with multiple processing units and shared memory, a method is disclosed for uniformly balancing the aggregate computational load in, and utilizing a minimal memory by, a network having identical computations to be executed at each connection therein. Read-only and read-write memory are subdivided into a plurality of partitions, and the computational load is subdivided into a plurality of process sets, which function like artificial processing units. Said plurality of process sets is iteratively merged and reduced to the number of processing units without exceeding the balance load. Merger is based upon the value of a partition threshold, which is a measure of the memory utilization. The turnaround time and memory savings of the instant method are functions of the number of processing units available and the number of partitions into which memory is subdivided.
摘要翻译：在具有多个处理单元和共享存储器的并行处理计算机系统中，公开了一种统一平衡在每个连接处执行相同计算的网络中的总计算负荷以及利用最小存储器的方法。只读存储器和读写存储器被细分为多个分区，并且计算负载被细分为多个进程集合，其功能类似于人造处理单元。所述多个处理集合被迭代地合并并减少到处理单元的数量而不超过平衡负载。合并是基于分区阈值的值，它是内存利用率的度量。即时方法的周转时间和存储器节省是可用的处理单元的数量和内存被细分的分区的数量的功能。

8. 发明申请

US20080109267A1 ONLINE STARTUP OF AN INNOVATION PROJECT 审中-公开
标题翻译：在线启动创新项目
公开(公告)号：US20080109267A1
公开(公告)日：2008-05-08
申请号：US11555871
申请日：2006-11-02
申请人： Deborah A. DeLosa , Paul T. Baffes , James D. Jamison , Mary M. Keough , Kathleen Purdy , Kathleen M. Walsh
发明人： Deborah A. DeLosa , Paul T. Baffes , James D. Jamison , Mary M. Keough , Kathleen Purdy , Kathleen M. Walsh
IPC分类号： G06Q10/00
CPC分类号： G06Q10/06 , G06Q10/063112 , G06Q10/0637 , G06Q10/06398 , G06Q30/0201
摘要： computer-readable project information is stored in a computing system, such information being obtained from a user at a user computer in response to prompting the user to submit information addressing: (i) a need for a project; (ii) a goal of the project; (iii) a manner in which success of the project will be measured; and (iv) a need for collaboration on the project among participants drawn from outside customary organizational boundaries. To proceed with a project, computer-readable funding information is stored in the computing system which signifies approval of funding for the project. Then, a project definition is generated from at least the computer-readable project information inputted by the user and stored in a first database. Thereafter, information obtained from the stored project definition is displayed to users at user computers for recruiting participants to work on the project.
摘要翻译：计算机可读项目信息被存储在计算系统中，这样的信息是从用户计算机的用户获得的，以响应于提示用户提交信息寻址：（i）对项目的需要; （二）项目目标; （iii）衡量项目成功的方式; 和（iv）在外部习惯组织边界参与者之间需要在项目上进行合作。要进行项目，计算机可读资金信息存储在计算系统中，这意味着项目的资金的批准。然后，从至少由用户输入的计算机可读项目信息生成项目定义并存储在第一数据库中。此后，从存储的项目定义获得的信息显示给用户计算机上的用户，以招募参与者在项目上工作。

9. 发明授权

US06292792B1 System and method for dynamic knowledge generation and distribution 失效
标题翻译：动态知识生成和分配的系统和方法
公开(公告)号：US06292792B1
公开(公告)日：2001-09-18
申请号：US09277861
申请日：1999-03-26
申请人： Paul T. Baffes , Siddarth Subramanian , Shane V. Nugent
发明人： Paul T. Baffes , Siddarth Subramanian , Shane V. Nugent
IPC分类号： G06F1518
CPC分类号： G06N5/022
摘要： A system and method that includes the use of a knowledge delivery computer program stored in computer-readable form on a tangible storage medium for delivering concepts from a configuration data base to a user. An author can create the configuration data base using the knowledge delivery computer program so that the configuration includes a plurality of concepts and, optionally, a plurality of problems associated with the concepts. As the author creates the concepts within the configuration, the knowledge delivery software allows the author to create a taxonomy that defines the relationships between the concepts. The knowledge delivery software can then automatically generate a pedagogy for the configuration based on the configuration taxonomy that defines how the concepts will be delivered to the user. The knowledge delivery software can facilitate the delivery of the content within the configuration to a user according to the pedagogy.
摘要翻译：一种系统和方法，其包括使用存储在有形存储介质上的计算机可读形式的知识传递计算机程序，用于将概念从配置数据库传送到用户。作者可以使用知识传递计算机程序来创建配置数据库，使得配置包括多个概念和可选地与概念相关联的多个问题。当作者在配置中创建概念时，知识传递软件允许作者创建一个定义概念之间关系的分类法。然后，知识传递软件可以根据定义如何将概念传递给用户的配置分类法自动生成用于配置的教学法。知识传递软件可以根据教学法便利将配置内容传递给用户。

10. 发明授权

US5311422A General purpose architecture for intelligent computer-aided training 失效
标题翻译：智能计算机辅助培训的通用架构
公开(公告)号：US5311422A
公开(公告)日：1994-05-10
申请号：US545235
申请日：1990-06-28
申请人： R. Bowen Loftin , Lui Wang , Paul T. Baffes , Grace C. Hua
发明人： R. Bowen Loftin , Lui Wang , Paul T. Baffes , Grace C. Hua
IPC分类号： G09B7/04 , G09B19/16 , G06F15/52
CPC分类号： G09B7/04 , G09B19/165
摘要： A training system for use in a wide variety of training tasks and environments comprising a user interface simulating the same information available to a trainee in the task environment which allows the trainee to assert actions to the system; a domain expert which can use the same information available to the trainee and carry out the same task; a training session manager for evaluating such trainee assertions and providing guidance to the trainee appropriate to his acquired skill level; a trainee model which contains a history and summary of the trainee actions; an intelligent training scenario generator for designing increasingly complex training exercises based on the current skill level and any weaknesses or deficiencies that the trainee has exhibited in previous interactions; and a blackboard that provides a common fact base for communication between the other components of the system. The domain expert contains a list of "mal-rules" which typifies errors usually made by novice trainees. Also, the training session manager comprises "intelligent" error detection and error handling components. The present invention utilizes a rule-based language having a control structure using a specific message passing protocol for tasks which are procedural or step-by-step in structure. The trainee may reach "the solution" by any of a number of alternate valid paths.
摘要翻译：一种用于各种训练任务和环境的训练系统，包括模拟在任务环境中可接受实习者的相同信息的用户界面，其允许受训者向系统断言动作; 领域专家，可以使用与实习者相同的信息，并执行相同的任务; 培训课程经理，用于评估受训人员的主张，并向受训人员提供指导，以适应其获得的技能水平; 一个包含学员行为历史和总结的实习模式; 一个智能培训场景发生器，用于根据当前的技能水平以及受训学员在以前的交互中展示的任何弱点或缺陷来设计越来越复杂的训练练习; 以及为系统的其他组件之间的通信提供通用事实基础的黑板。领域专家包含一些“错误规则”的列表，它们代表通常由新手学员进行的错误。此外，训练会话管理器包括“智能”错误检测和错误处理组件。本发明利用基于规则的语言，其具有使用特定消息传递协议的控制结构，用于在结构上是程序性的或逐步的任务。实习者可以通过任何一些备用有效路径达成“解决方案”。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式