专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09038168B2 Controlling resource access based on resource properties 有权
标题翻译：基于资源属性控制资源访问
公开(公告)号：US09038168B2
公开(公告)日：2015-05-19
申请号：US12622441
申请日：2009-11-20
申请人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
发明人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
IPC分类号： G06F12/14 , G06F21/62
CPC分类号： G06F21/6218 , G06F2221/2141
摘要： Described is a technology by which access to a resource is determined by evaluating a resource label of the resource against a user claim of an access request, according to policy decoupled from the resource. The resource may be a file, and the resource label may be obtained by classifying the file into classification properties, such that a change to the file may change its resource label, thereby changing which users have access to the file. The resource label-based access evaluation may be logically combined with a conventional ACL-based access evaluation to determine whether to grant or deny access to the resource.
摘要翻译：描述了根据从资源分离的策略来评估资源的资源标签以针对访问请求的用户权利要求来确定对资源的访问的技术。资源可以是文件，并且可以通过将文件分类为分类属性来获得资源标签，使得文件的改变可以改变其资源标签，从而改变哪些用户有权访问该文件。基于资源标签的访问评估可以逻辑地与传统的基于ACL的访问评估组合以确定是否授予或拒绝对资源的访问。

2. 发明申请

US20110239293A1 AUDITING ACCESS TO DATA BASED ON RESOURCE PROPERTIES 审中-公开
标题翻译：基于资源特性的数据访问
公开(公告)号：US20110239293A1
公开(公告)日：2011-09-29
申请号：US12730241
申请日：2010-03-24
申请人： Raja Pazhanivel Perumal , Nir Ben-Zvi , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law
发明人： Raja Pazhanivel Perumal , Nir Ben-Zvi , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law
IPC分类号： G06F21/00
CPC分类号： G06F21/552
摘要： Described is a technology, such as implemented in an operating system security system, by which a resource's metadata (e.g., including data properties) is evaluated against an audit rule or audit rules associated with that resource (e.g., object). The audit rule may be associated with all such resources corresponding to a resource manager, and/or by a resource-specific audit rule. When a resource is accessed, each audit rule is processed against the metadata to determine whether to generate an audit event for that rule. The audit rule may be in the form of one or more conditional expressions. Audit events may be maintained and queried to obtain audit information for various usage scenarios.
摘要翻译：描述了一种诸如在操作系统安全系统中实现的技术，通过该技术，资源的元数据（例如，包括数据属性）针对与该资源（例如，对象）相关联的审计规则或审计规则进行评估。审计规则可以与对应于资源管理器的所有这样的资源和/或资源特定的审计规则相关联。访问资源时，会根据元数据对每个审核规则进行处理，以确定是否为该规则生成审核事件。审计规则可以是一个或多个条件表达式的形式。可以维护和查询审计事件以获取各种使用场景的审计信息。

3. 发明申请

US20110126281A1 Controlling Resource Access Based on Resource Properties 有权
标题翻译：基于资源属性控制资源访问
公开(公告)号：US20110126281A1
公开(公告)日：2011-05-26
申请号：US12622441
申请日：2009-11-20
申请人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
发明人： Nir Ben-Zvi , Raja Pazhanivel Perumal , Anders Samuelsson , Jeffrey B. Hamblin , Ran Kalach , Ziquan Li , Matthias H. Wollnik , Clyde Law , Paul Adrian Oltean
IPC分类号： G06F21/00 , G06F12/14
CPC分类号： G06F21/6218 , G06F2221/2141
摘要： Described is a technology by which access to a resource is determined by evaluating a resource label of the resource against a user claim of an access request, according to policy decoupled from the resource. The resource may be a file, and the resource label may be obtained by classifying the file into classification properties, such that a change to the file may change its resource label, thereby changing which users have access to the file. The resource label-based access evaluation may be logically combined with a conventional ACL-based access evaluation to determine whether to grant or deny access to the resource.
摘要翻译：描述了根据从资源分离的策略来评估资源的资源标签以针对访问请求的用户权利要求来确定对资源的访问的技术。资源可以是文件，并且可以通过将文件分类为分类属性来获得资源标签，使得文件的改变可以改变其资源标签，从而改变哪些用户有权访问该文件。基于资源标签的访问评估可以逻辑地与传统的基于ACL的访问评估组合以确定是否授予或拒绝对资源的访问。

4. 发明授权

US08805837B2 Alternate data stream cache for file classification 有权
标题翻译：用于文件分类的备用数据流缓存
公开(公告)号：US08805837B2
公开(公告)日：2014-08-12
申请号：US12605451
申请日：2009-10-26
申请人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
发明人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
IPC分类号： G06F17/30
CPC分类号： G06F17/30115 , G06F17/30598
摘要： Described is caching classification-related metadata for a file in an alternate data stream of that file. When a file is classified (e.g., for data management), the classification properties are cached in association with the file, along with classification-related metadata that indicates the state of the file at the time of caching. The classification-related metadata in the alternate data stream is then useable in determining whether the classification properties are valid and up-to-date when next accessed, or whether the file needs to be reclassified. If the properties are valid and up-to-date, they may be used without requiring the computationally costly steps of reclassification. Also described is using more than one alternate data stream for the cache, and extending the classification-related metadata through a defined extension mechanism.
摘要翻译：描述了该文件的备用数据流中文件的缓存分类相关元数据。当文件被分类（例如，用于数据管理）时，分类属性与文件相关联地缓存，以及指示缓存时文件状态的分类相关元数据。备用数据流中的分类相关元数据可用于确定下次访问时分类属性是否有效和最新，还是文件是否需要重新分类。如果属性是有效和最新的，则可以使用它们，而不需要重新分类的计算上昂贵的步骤。还描述了为缓存使用多于一个备用数据流，并通过定义的扩展机制来扩展与分类有关的元数据。

5. 发明申请

US20110099152A1 ALTERNATE DATA STREAM CACHE FOR FILE CLASSIFICATION 有权
标题翻译：用于文件分类的替代数据流缓存
公开(公告)号：US20110099152A1
公开(公告)日：2011-04-28
申请号：US12605451
申请日：2009-10-26
申请人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
发明人： Clyde Law , Paul Adrian Oltean , Ran Kalach , Nir Ben-Zvi , Matthias H. Wollnik
IPC分类号： G06F17/00 , G06F12/00 , G06F12/08
CPC分类号： G06F17/30115 , G06F17/30598
摘要： Described is caching classification-related metadata for a file in an alternate data stream of that file. When a file is classified (e.g., for data management), the classification properties are cached in association with the file, along with classification-related metadata that indicates the state of the file at the time of caching. The classification-related metadata in the alternate data stream is then useable in determining whether the classification properties are valid and up-to-date when next accessed, or whether the file needs to be reclassified. If the properties are valid and up-to-date, they may be used without requiring the computationally costly steps of reclassification. Also described is using more than one alternate data stream for the cache, and extending the classification-related metadata through a defined extension mechanism.
摘要翻译：描述了该文件的备用数据流中文件的缓存分类相关元数据。当文件被分类（例如，用于数据管理）时，分类属性与文件相关联地缓存，以及指示缓存时文件状态的分类相关元数据。备用数据流中的分类相关元数据可用于确定下次访问时分类属性是否有效和最新，还是文件是否需要重新分类。如果属性是有效和最新的，则可以使用它们，而不需要重新分类的计算上昂贵的步骤。还描述了为缓存使用多于一个备用数据流，并通过定义的扩展机制来扩展与分类有关的元数据。

6. 发明授权

US07523198B2 Integrated testing approach for publish/subscribe network systems 有权
标题翻译：发布/订阅网络系统的集成测试方法
公开(公告)号：US07523198B2
公开(公告)日：2009-04-21
申请号：US11486575
申请日：2006-07-14
申请人： John Wu , Benjamin L. Burnett , Matthias H. Wollnik
发明人： John Wu , Benjamin L. Burnett , Matthias H. Wollnik
IPC分类号： G06F15/173
CPC分类号： H04L43/12 , H04L43/0852 , H04L67/125 , H04L69/02
摘要： The invention is directed to techniques for monitoring and testing publish/subscribe network systems. For example, an enterprise network that has a number of geographically dispersed network devices and interconnected sub-networks may be configured to operate as a publish/subscribe network system in which each of the dispersed network devices sends and receives messages for specific groups of the network devices. The techniques described herein enable data object capture and analysis in the application layer of a publish/subscribe network system using shim adapters. The techniques also enable network packet capture and analysis in the network layer of a publish/subscribe network system. Furthermore, the techniques include integrated analysis of testing results from the application layer and the network layer to determine performance characteristics, such as latency, across both of the layers. In this way, the techniques provide more accurate measurements of performance characteristics in publish/subscribe network systems.
摘要翻译：本发明涉及用于监视和测试发布/订阅网络系统的技术。例如，具有多个地理上分散的网络设备和互连子网络的企业网络可以被配置为作为发布/订阅网络系统来操作，其中每个分散的网络设备发送和接收特定网络组的消息设备。本文描述的技术使得能够在使用垫片适配器的发布/订阅网络系统的应用层中进行数据对象捕获和分析。这些技术还能够在发布/订阅网络系统的网络层中实现网络数据包捕获和分析。此外，这些技术包括从应用层和网络层的测试结果的集成分析，以确定跨两层的性能特征，例如等待时间。以这种方式，这些技术可以在发布/订阅网络系统中提供更准确的性能特征测量。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式