专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09009777B2 Automatic role activation 有权
标题翻译：自动角色激活
公开(公告)号：US09009777B2
公开(公告)日：2015-04-14
申请号：US11565249
申请日：2006-11-30
申请人： Saurabh Desai , Niteesh Kumar Dubey , Yantian Tom Lu , Ravi A. Shankar , Murali Vaddagiri , Drew Thomas Walters , Xinya Wang
发明人： Saurabh Desai , Niteesh Kumar Dubey , Yantian Tom Lu , Ravi A. Shankar , Murali Vaddagiri , Drew Thomas Walters , Xinya Wang
IPC分类号： G06F21/00 , G06F21/30 , G06F21/62
CPC分类号： G06F21/30 , G06F21/6218
摘要： A method, apparatus, and computer usable program product for automatic activation of roles is provided. When a user initiates an action, a set of roles needed for the action is identified. A set of roles assigned to the user is also identified. From the two sets of roles, all roles that are common to both sets are identified in a subset of roles. Roles in this subset are assigned to the user and are sufficient for the action. One or more roles from this subset of roles is selected for activation depending on system policies in effect. Selected roles are automatically activated without requiring any intervention from the user. Once the selected roles are activated, they can become inactive upon completion of the current action, or remain active for subsequent actions by the user during all or part of a user session. System policies can decide how the roles are selected for activation, and the duration of which the roles remain active once activated.
摘要翻译：提供了一种用于自动激活角色的方法，设备和计算机可用程序产品。当用户发起一个动作时，确定该动作所需的一组角色。还识别分配给用户的一组角色。从两组角色中，两个集合共同的所有角色都在角色的一个子集中标识。该子集中的角色被分配给用户，并且对于该动作是足够的。根据有效的系统策略，选择此角色子集中的一个或多个角色进行激活。所选角色将自动激活，无需用户干预。一旦所选择的角色被激活，它们可以在完成当前动作时变为不活动，或者在用户会话的全部或部分期间对用户的后续动作保持活动状态。系统策略可以决定如何激活角色，激活角色保持活动的持续时间。

2. 发明申请

US20080271139A1 DETERMINATION OF ACCESS CHECKS IN A MIXED ROLE BASED ACCESS CONTROL AND DISCRETIONARY ACCESS CONTROL ENVIRONMENT 失效
标题翻译：基于混合角色的访问控制和离散访问控制环境中的访问检查的确定
公开(公告)号：US20080271139A1
公开(公告)日：2008-10-30
申请号：US11742099
申请日：2007-04-30
申请人： Saurabh Desai , Niteesh Kumar Dubey , Ravi A. Shankar , Drew Thomas Walters
发明人： Saurabh Desai , Niteesh Kumar Dubey , Ravi A. Shankar , Drew Thomas Walters
IPC分类号： H04L9/32
CPC分类号： G06F21/6218
摘要： A computer implemented method, apparatus, and computer program product for access control in a mixed discretionary access control and role based access control environment. In one embodiment, an execution access for a command is determined using a set of role based authorizations for a user invoking the command. In response to a determination that the user invoking the command is authorized based on the set of role based authorizations, a privilege in a set of privileges associated with the command is raised. Raising the privilege in the set of privileges bypasses discretionary access control checks. In response to a determination that the user invoking the command is unauthorized based on the set of role based authorizations, an execution access for the command is determined using a set of discretionary access mode bits associated with the command.
摘要翻译：一种用于混合自由访问控制和基于角色的访问控制环境中的访问控制的计算机实现的方法，装置和计算机程序产品。在一个实施例中，使用调用该命令的用户的一组基于角色的授权来确定命令的执行访问。响应于基于基于角色的授权集合来授权调用该命令的用户的确定，提出与该命令相关联的一组权限中的特权。在权限集中提升权限将绕过自由访问控制检查。响应于基于一组基于角色的授权来确定用户调用命令是未经授权的，使用与该命令相关联的一组自由访问模式位来确定该命令的执行访问。

3. 发明申请

US20080134320A1 METHOD FOR AUTOMATIC ROLE ACTIVATION 有权
标题翻译：自动角度激活方法
公开(公告)号：US20080134320A1
公开(公告)日：2008-06-05
申请号：US11565249
申请日：2006-11-30
申请人： Saurabh Desai , Niteesh Kumar Dubey , Yantian Tom Lu , Ravi A. Shankar , Murali Vaddagiri , Drew Thomas Walters , Xinya Wang
发明人： Saurabh Desai , Niteesh Kumar Dubey , Yantian Tom Lu , Ravi A. Shankar , Murali Vaddagiri , Drew Thomas Walters , Xinya Wang
IPC分类号： H04L9/32
CPC分类号： G06F21/30 , G06F21/6218
摘要： A method, apparatus, and computer usable program product for automatic activation of roles is provided. When a user initiates an action, a set of roles needed for the action is identified. A set of roles assigned to the user is also identified. From the two sets of roles, all roles that are common to both sets are identified in a subset of roles. Roles in this subset are assigned to the user and are sufficient for the action. One or more roles from this subset of roles is selected for activation depending on system policies in effect. Selected roles are automatically activated without requiring any intervention from the user. Once the selected roles are activated, they can become inactive upon completion of the current action, or remain active for subsequent actions by the user during all or part of a user session. System policies can decide how the roles are selected for activation, and the duration of which the roles remain active once activated.
摘要翻译：提供了一种用于自动激活角色的方法，设备和计算机可用程序产品。当用户发起一个动作时，确定该动作所需的一组角色。还识别分配给用户的一组角色。从两组角色中，两个集合共同的所有角色都在角色的一个子集中标识。该子集中的角色被分配给用户，并且对于该动作是足够的。根据有效的系统策略，选择此角色子集中的一个或多个角色进行激活。所选角色将自动激活，无需用户干预。一旦所选择的角色被激活，它们可以在完成当前动作时变为不活动，或者在用户会话的全部或部分期间对用户的后续动作保持活动状态。系统策略可以决定如何激活角色，激活角色保持活动的持续时间。

4. 发明申请

US20080294592A1 FRAMEWORK FOR MANAGING ATTRIBUTES OF OBJECTS 失效
标题翻译：用于管理物体属性的框架
公开(公告)号：US20080294592A1
公开(公告)日：2008-11-27
申请号：US11751571
申请日：2007-05-21
申请人： Saurabh Desai , Niteesh Kumar Dubey , Joefon Jann , Pratap Chandra Pattnaik , Ravi A. Shankar , Murali Vaddagiri
发明人： Saurabh Desai , Niteesh Kumar Dubey , Joefon Jann , Pratap Chandra Pattnaik , Ravi A. Shankar , Murali Vaddagiri
IPC分类号： G06F17/30
CPC分类号： G06F9/468
摘要： A computer implemented method, computer program product, and system for managing objects. Responsive to receiving a find-rule method, and a path-rule table, wherein the path-rule table contains a set of paths, wherein each path references an object, wherein a file system locates the object using the path, and wherein the object has at least one attribute not known to the file system, a path-rule table identifier is created. The path-rule table is associated with the path-rule table identifier to form an associated path-rule table. The find-rule method is associated with the path-rule table identifier to form an associated find-rule method. The path-rule table identifier, the associated path-rule table, and the associated find-rule method are stored. The path-rule table identifier is returned.
摘要翻译：计算机实现的方法，计算机程序产品和用于管理对象的系统。响应于接收查找规则方法和路径规则表，其中所述路径规则表包含一组路径，其中每个路径引用对象，其中文件系统使用所述路径定位所述对象，并且其中所述对象具有文件系统不知道的至少一个属性，创建路径规则表标识符。路径规则表与路径规则表标识符相关联，以形成关联的路径规则表。 find-rule方法与路径规则表标识符相关联，以形成关联的查找规则方法。存储路径规则表标识符，相关联的路径规则表和相关联的查找规则方法。返回路径规则表标识符。

5. 发明授权

US07895435B2 Framework for managing attributes of objects 失效
标题翻译：用于管理对象属性的框架
公开(公告)号：US07895435B2
公开(公告)日：2011-02-22
申请号：US11751571
申请日：2007-05-21
申请人： Saurabh Desai , Niteesh Kumar Dubey , Joefon Jann , Pratap Chandra Pattnaik , Ravi A. Shankar , Murali Vaddagiri
发明人： Saurabh Desai , Niteesh Kumar Dubey , Joefon Jann , Pratap Chandra Pattnaik , Ravi A. Shankar , Murali Vaddagiri
IPC分类号： H04L29/06
CPC分类号： G06F9/468
摘要： A computer implemented method, computer program product, and system for managing objects. Responsive to receiving a find-rule method, and a path-rule table, wherein the path-rule table contains a set of paths, wherein each path references an object, wherein a file system locates the object using the path, and wherein the object has at least one attribute not known to the file system, a path-rule table identifier is created. The path-rule table is associated with the path-rule table identifier to form an associated path-rule table. The find-rule method is associated with the path-rule table identifier to form an associated find-rule method. The path-rule table identifier, the associated path-rule table, and the associated find-rule method are stored. The path-rule table identifier is returned.
摘要翻译：计算机实现的方法，计算机程序产品和用于管理对象的系统。响应于接收查找规则方法和路径规则表，其中所述路径规则表包含一组路径，其中每个路径引用对象，其中文件系统使用所述路径定位所述对象，并且其中所述对象具有文件系统不知道的至少一个属性，创建路径规则表标识符。路径规则表与路径规则表标识符相关联，以形成关联的路径规则表。 find-rule方法与路径规则表标识符相关联，以形成关联的查找规则方法。存储路径规则表标识符，相关联的路径规则表和相关联的查找规则方法。返回路径规则表标识符。

6. 发明申请

US20100043069A1 Authorized Authorization Set in RBAC Model 失效
标题翻译： RBAC模型中的授权授权集
公开(公告)号：US20100043069A1
公开(公告)日：2010-02-18
申请号：US12191644
申请日：2008-08-14
申请人： Ranganathan Vidya , Murali Vaddagiri , Ravi A. Shankar , Saurabh Desai
发明人： Ranganathan Vidya , Murali Vaddagiri , Ravi A. Shankar , Saurabh Desai
IPC分类号： G06F21/00
CPC分类号： G06F9/468 , G06F21/62
摘要： The Authorized Authorization Set System comprising a modified operating system, a command table containing authorized authorization sets, and a modified RBAC security system, eliminates the need for inherited privileges that must be passed to subcommands in order for the command to run. The modified operating system accesses a table containing authorized authorization sets which identify the privileges for all subcommands within a command. When a user is assigned an accessauth for a command, and a sub-command is a privileged sub-command, the privileged sub-command is only run when the accessauth of the sub-command is included in the authorized authorization set of the command.
摘要翻译：授权授权集系统包括修改的操作系统，包含授权授权集的命令表和修改后的RBAC安全系统，不需要传递给子命令的继承权限，以便命令运行。修改的操作系统访问包含授权授权集的表，其中标识命令中所有子命令的权限。当用户被分配了命令的访问权限，子命令是特权子命令时，只有在命令的授权授权集合中包含子命令的访问权限时，才会运行特权子命令。

7. 发明授权

US08756429B2 Tunable encryption system 失效
标题翻译：可调加密系统
公开(公告)号：US08756429B2
公开(公告)日：2014-06-17
申请号：US12248982
申请日：2008-10-10
申请人： Dwip N. Banerjee, Jr. , Sandeep Ramesh Patil , Punadikar Sachin Chandrakant , Ravi A. Shankar
发明人： Dwip N. Banerjee, Jr. , Sandeep Ramesh Patil , Punadikar Sachin Chandrakant , Ravi A. Shankar
IPC分类号： H04L29/06
CPC分类号： H04L63/0428 , H04L63/0807 , H04L63/105
摘要： A method, programmed medium and system are provided for enabling a user to choose a user-preferred encryption type from among a plurality of encryption types listed in a user's Kerberos configuration file. During the ticket granting process in a Kerberos system, a user is requested to select a preferred encryption type to be used in the Kerberos communication from among encryption types contained in the user's Kerberos configuration file. The user-selected encryption type is then implemented for use in encrypting a session ticket (as well as generating the session key of user requested encryption type) for use by the user machine in communicating securely with an Kerberized application server when being communicated by that particular user. Thus, the system allows different users to simultaneously communicate with the same Kerberized application server using a supported encryption type of the user's own choice.
摘要翻译：提供了一种方法，编程介质和系统，用于使用户能够从用户的Kerberos配置文件中列出的多种加密类型中选择用户优选的加密类型。在Kerberos系统中的故障单授予过程中，请求用户从用户的Kerberos配置文件中包含的加密类型中选择要在Kerberos通信中使用的首选加密类型。用户选择的加密类型然后被实现以用于加密会话票据（以及生成用户请求的加密类型的会话密钥），以供用户机器在由特定的通信系统通信时与Kerberized应用服务器进行安全通信用户。因此，系统允许不同的用户使用用户自己选择的受支持的加密类型同时与相同的Kerberized应用服务器进行通信。

8. 发明申请

US20120288096A1 SECURITY KEY DISTRIBUTION IN A CLUSTER 有权
公开(公告)号：US20120288096A1
公开(公告)日：2012-11-15
申请号：US13556398
申请日：2012-07-24
申请人： Jes Kiran Chittigala , Ravi A. Shankar , Vidya Ranganathan
发明人： Jes Kiran Chittigala , Ravi A. Shankar , Vidya Ranganathan
IPC分类号： H04L9/08
CPC分类号： H04L9/0825 , H04L63/045
摘要： Provided are techniques for the fast and reliable distribution of security keys within a cluster of computing devices, or computers. One embodiment provides a method for secure distribution of encryption keys, comprising generating a symmetric key for the encryption of communication among a plurality of nodes of a cluster of nodes; encrypting the symmetric key with a plurality of public keys, each public key corresponding to a particular node of the plurality of modes, to generate a plurality of encrypted symmetric keys; storing the plurality of encrypted symmetric keys in a central repository; and distributing the encrypted symmetric keys to the nodes such that each particular node receives an encrypted symmetric key corresponding to a corresponding public key of the particular node.

9. 发明申请

US20120204028A1 Secure Kerberized Access of Encrypted File System 有权
标题翻译：加密文件系统的安全Kerberized访问
公开(公告)号：US20120204028A1
公开(公告)日：2012-08-09
申请号：US13449925
申请日：2012-04-18
申请人： Dwip N. Banerjee , Sachin Chandrakant Punadikar , Sandeep Ramesh Patil , Ravi A. Shankar
发明人： Dwip N. Banerjee , Sachin Chandrakant Punadikar , Sandeep Ramesh Patil , Ravi A. Shankar
IPC分类号： H04L29/06 , G06F15/16 , H04L9/08 , G06F17/30
CPC分类号： H04L9/0822 , G06F21/335 , G06F21/6218 , H04L9/083 , H04L9/3213 , H04L63/0428 , H04L63/06 , H04L63/20
摘要： A file server receives a request from a client to mount an encrypted file system. The file server informs the client that the requested file system is encrypted and, in turn, receives a session ticket from the client that includes a security protocol mounting selection. The file server decrypts the client's user's encrypted private key, and then decrypts the requested encrypted file system using the private key. In turn, the file server sends the decrypted file system to the client over a secure channel, which is based upon the security protocol mounting selection. In one embodiment, a key distribution center server receives a request from the client for the client's user to access the encrypted file system at the file server. The key distribution center server retrieves an intermediate key; includes the intermediate key in a session ticket; and sends the session ticket to the client.
摘要翻译：文件服务器从客户端收到一个装载加密文件系统的请求。文件服务器通知客户端所请求的文件系统被加密，并且从客户端接收包括安全协议安装选择的会话凭证。文件服务器解密客户端用户的加密私钥，然后使用私钥对请求的加密文件系统进行解密。反过来，文件服务器通过基于安全协议安装选择的安全通道将解密的文件系统发送到客户端。在一个实施例中，密钥分配中心服务器从客户端接收客户端用户访问文件服务器上的加密文件系统的请求。密钥分配中心服务器检索中间密钥; 在会议票中包括中间密钥; 并将会话凭证发送给客户端。

10. 发明申请

US20110154031A1 Secure Kerberized Access of Encrypted File System 有权
标题翻译：加密文件系统的安全Kerberized访问
公开(公告)号：US20110154031A1
公开(公告)日：2011-06-23
申请号：US12643943
申请日：2009-12-21
申请人： Dwip N. Banerjee , Sachin Chandrakant Punadikar , Sandeep Ramesh Patil , Ravi A. Shankar
发明人： Dwip N. Banerjee , Sachin Chandrakant Punadikar , Sandeep Ramesh Patil , Ravi A. Shankar
IPC分类号： H04L29/06 , H04L9/08 , G06F15/16
CPC分类号： H04L9/0822 , G06F21/335 , G06F21/6218 , H04L9/083 , H04L9/3213 , H04L63/0428 , H04L63/06 , H04L63/20
摘要： A file server receives a request from a client to mount an encrypted file system. The file server informs the client that the requested file system is encrypted and, in turn, receives a session ticket from the client that includes a security protocol mounting selection. The file server decrypts the client's user's encrypted private key, and then decrypts the requested encrypted file system using the private key. In turn, the file server sends the decrypted file system to the client over a secure channel, which is based upon the security protocol mounting selection. In one embodiment, a key distribution center server receives a request from the client for the client's user to access the encrypted file system at the file server. The key distribution center server retrieves an intermediate key; includes the intermediate key in a session ticket; and sends the session ticket to the client.
摘要翻译：文件服务器从客户端收到一个装载加密文件系统的请求。文件服务器通知客户端所请求的文件系统被加密，并且从客户端接收包括安全协议安装选择的会话凭证。文件服务器解密客户端用户的加密私钥，然后使用私钥对请求的加密文件系统进行解密。反过来，文件服务器通过基于安全协议安装选择的安全通道将解密的文件系统发送到客户端。在一个实施例中，密钥分配中心服务器从客户端接收客户端用户访问文件服务器上的加密文件系统的请求。密钥分配中心服务器检索中间密钥; 在会议票中包括中间密钥; 并将会话凭证发送给客户端。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式