专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060133615A1 Method and system for using a portable computing device as a smart key device 有权
标题翻译：使用便携式计算设备作为智能钥匙设备的方法和系统
公开(公告)号：US20060133615A1
公开(公告)日：2006-06-22
申请号：US11014067
申请日：2004-12-16
申请人： Steven Bade , Ching-Yun Chao
发明人： Steven Bade , Ching-Yun Chao
IPC分类号： H04L9/00
CPC分类号： G06F21/33 , G06F21/34 , G06F21/445 , H04L9/3265 , H04L9/3273 , H04L2209/56 , H04L2209/805
摘要： A first data processing system, which includes a first cryptographic device, is communicatively coupled with a second data processing system, which includes a second cryptographic device. The cryptographic devices then mutually authenticate themselves. The first cryptographic device stores a private key of a first asymmetric cryptographic key pair and a public key of a second asymmetric cryptographic key pair that is associated with the second data processing system. The second cryptographic device stores a private key of the second asymmetric cryptographic key pair and a public key of the first asymmetric cryptographic key pair that is associated with the first data processing system. In response to successfully performing the mutual authentication operation between the two cryptographic systems, the first data processing system is enabled to invoke sensitive cryptographic functions on the first cryptographic device while the first data processing system remains communicatively coupled with the second data processing system.
摘要翻译：包括第一密码装置的第一数据处理系统与包括第二密码装置的第二数据处理系统通信地耦合。然后密码设备会自己相互认证。第一加密设备存储与第二数据处理系统相关联的第一非对称密码密钥对和第二非对称密码密钥对的公钥的私钥。第二加密设备存储第二非对称密码密钥对的私钥和与第一数据处理系统相关联的第一非对称密码密钥对的公开密钥。响应于成功地执行两个加密系统之间的相互认证操作，第一数据处理系统能够在第一数据处理系统保持与第二数据处理系统通信耦合的同时在第一密码装置上调用敏感的加密功能。

2. 发明申请

US20060136748A1 Method and system for using a compact disk as a smart key device 有权
标题翻译：使用光盘作为智能钥匙装置的方法和系统
公开(公告)号：US20060136748A1
公开(公告)日：2006-06-22
申请号：US11014559
申请日：2004-12-16
申请人： Steven Bade , Ching-Yun Chao
发明人： Steven Bade , Ching-Yun Chao
IPC分类号： G06F12/14
CPC分类号： H04L9/3265 , G06F21/33 , G06F21/34 , G06F21/445 , H04L9/0897 , H04L9/3247 , H04L9/3273 , H04L2209/805
摘要： A data processing system accepts a removable storage media, which becomes electrically engaged with a system unit within the data processing system, after which the removable storage media and the hardware security unit mutually authenticate themselves. The removable storage media stores a private key of a first asymmetric cryptographic key pair and a public key of a second asymmetric cryptographic key pair that is associated with the hardware security unit, and the hardware security unit stores a private key of the second asymmetric cryptographic key pair and a public key of the first asymmetric cryptographic key pair that is associated with the removable storage media. In response to successfully performing the mutual authentication operation between the removable storage media and the hardware security unit, the system unit is enabled to invoke cryptographic functions on the hardware security unit while the removable storage media remains engaged with the system unit.
摘要翻译：数据处理系统接受与数据处理系统内的系统单元电接合的可移动存储介质，之后可拆卸存储介质和硬件安全单元相互认证自身。可移动存储介质存储与硬件安全单元相关联的第一非对称加密密钥对和第二非对称密码密钥对的公钥的私钥，并且硬件安全单元存储第二非对称密码密钥的私钥对和与可移动存储介质相关联的第一非对称加密密钥对的公开密钥。响应于成功地执行可移动存储介质和硬件安全单元之间的相互认证操作，系统单元能够在可移动存储介质保持与系统单元接合的同时在硬件安全单元上调用加密功能。

3. 发明授权

US07454786B2 Method for integrated security roles 失效
标题翻译：集成安全角色的方法
公开(公告)号：US07454786B2
公开(公告)日：2008-11-18
申请号：US10401334
申请日：2003-03-27
申请人： David Yu Chang , Ching-Yun Chao
发明人： David Yu Chang , Ching-Yun Chao
IPC分类号： G06F21/00 , G06F15/173 , H04L9/00
CPC分类号： H04L63/102 , G06F21/6236
摘要： A method for integrated security roles is presented. An upstream application includes one or more role-mapping requirements that correspond to an upstream security role and a downstream security role. The upstream security role is expanded by adding an upstream security role identifier in a downstream application's role-mapping table or by adding upstream user-to-role mappings to a downstream application's role-mapping table. When an upstream security role is expanded, a user assigned to the upstream security role automatically has access to role-mapped downstream applications.
摘要翻译：提出了一种集成安全角色的方法。上游应用程序包括一个或多个对应于上游安全角色和下游安全角色的角色映射要求。通过在下游应用程序的角色映射表中添加上游安全角色标识符，或通过向下游应用程序的角色映射表添加上游用户到角色映射来扩展上游安全角色。当扩展上游安全角色时，分配给上游安全角色的用户可以自动访问角色映射的下游应用程序。

4. 发明授权

US07337318B2 Method and apparatus for preventing rogue implementations of a security-sensitive class interface 失效
标题翻译：防止安全敏感类接口的恶意实现的方法和装置
公开(公告)号：US07337318B2
公开(公告)日：2008-02-26
申请号：US10376113
申请日：2003-02-27
申请人： Peter Daniel Birk , Ching-Yun Chao , Hyen Vui Chung
发明人： Peter Daniel Birk , Ching-Yun Chao , Hyen Vui Chung
IPC分类号： H04L9/00
CPC分类号： G06F21/64
摘要： A method and apparatus for preventing rogue implementations of a security-sensitive class interface are provided. With the method and apparatus, a unique identifier (UID) is created by a server process when the server process is started. Anytime the server process, i.e. a server runtime environment, instantiates a new credential object following start-up of the server process, the encrypted UID is placed into a private field within the new credential object. In addition, the UID is encrypted and stored in a private class of the server runtime environment. A verification class is provided within the server runtime environment which includes one or more methods that receive the credential object as a parameter and return true or false as to the validity of the credential object. These one or more methods determine the validity of the credential object by retrieving the encrypted UID from the private class stored in the server runtime environment, decrypting the UID and comparing it to the decrypted UID stored in the private field of the credential object. If the two UIDs match, a determination is made that the credential object was created by the server runtime environment rather than a rogue application. If the two UIDs do not match, or if there is no UID in the credential object, then a false result will be returned by the verification class.
摘要翻译：提供了用于防止安全敏感类接口的流氓实现的方法和装置。使用该方法和装置，当服务器进程启动时，由服务器进程创建唯一标识符（UID）。服务器进程（即服务器运行时环境）在服务器进程启动后实例化新的凭据对象时，加密的UID将被放置在新凭证对象内的私有字段中。此外，UID被加密并存储在服务器运行时环境的私有类中。在服务器运行时环境中提供了一个验证类，其中包括一个或多个接收凭证对象作为参数的方法，并返回true或false作为证书对象的有效性。这些一个或多个方法通过从存储在服务器运行时环境中的私有类中检索加密的UID来确定凭证对象的有效性，解密UID并将其与存储在证书对象的私有字段中的解密的UID进行比较。如果两个UID匹配，则确定凭据对象是由服务器运行时环境创建的，而不是流氓应用程序。如果两个UID不匹配，或者如果凭证对象中没有UID，那么验证类将返回一个错误的结果。

5. 发明申请

US20080034202A1 METHOD AND APPARATUS FOR PREVENTING ROGUE IMPLEMENTATIONS OF A SECURITY-SENSITIVE CLASS INTERFACE 失效
公开(公告)号：US20080034202A1
公开(公告)日：2008-02-07
申请号：US11867015
申请日：2007-10-04
申请人： Peter Birk , Ching-Yun Chao , Hyen Chung
发明人： Peter Birk , Ching-Yun Chao , Hyen Chung
IPC分类号： H04L9/00
CPC分类号： G06F21/64
摘要： A method and apparatus for preventing rogue implementations of a security-sensitive class interface are provided. With the method and apparatus, a unique identifier (UID) is created by a server process when the server process is started. Anytime the server process, i.e. a server runtime environment, instantiates a new credential object following start-up of the server process, the encrypted UID is placed into a private field within the new credential object. In addition, the UID is encrypted and stored in a private class of the server runtime environment. A verification class is provided within the server runtime environment which includes one or more methods that receive the credential object as a parameter and return true or false as to the validity of the credential object. These one or more methods determine the validity of the credential object by retrieving the encrypted UID from the private class stored in the server runtime environment, decrypting the UID and comparing it to the decrypted UID stored in the private field of the credential object. If the two UIDs match, a determination is made that the credential object was created by the server runtime environment rather than a rogue application. If the two UIDs do not match, or if there is no UID in the credential object, then a false result will be returned by the verification class.

6. 发明申请

US20060020813A1 Dynamic cache lookup based on dynamic data 失效
公开(公告)号：US20060020813A1
公开(公告)日：2006-01-26
申请号：US10881962
申请日：2004-06-30
申请人： Peter Birk , Ching-Yun Chao , Hyen Chung
发明人： Peter Birk , Ching-Yun Chao , Hyen Chung
IPC分类号： H04L9/00
CPC分类号： H04L63/0815 , G06F21/31 , H04L63/083
摘要： A system and method for tracking user security credentials in a distributed computing environment. The security credentials of an authenticated user includes not just his unique user identifier, but also a set of security attributes such as the time of authentication, the location where the user is authenticated (i.e., intranet user v. internet user), the authentication strength, and so on. The security attributes are used in access control decisions. The same user can be given different authorization if he has a different security attribute value. Security credentials may be generated either by WebSphere security code or by third party security provider code. This invention stores the user credentials in a distributed cache and provides a system and method to compute the unique key based on the dynamic security credentials for cache lookup

7. 发明申请

US20060015727A1 Method and apparatus for identifying purpose and behavior of run time security objects using an extensible token framework 有权
公开(公告)号：US20060015727A1
公开(公告)日：2006-01-19
申请号：US10882053
申请日：2004-06-30
申请人： Peter Birk , Ching-Yun Chao , Hyen Chung
发明人： Peter Birk , Ching-Yun Chao , Hyen Chung
IPC分类号： H04L9/00
CPC分类号： H04L63/0281 , H04L63/08 , H04L63/083 , H04L63/104
摘要： An extensible token framework is provided for identifying purpose and behavior of run time security objects. The framework includes a set of marker token interfaces, which extends from a default token interface. A service provider may implement one or more marker token interfaces for a Subject or a thread of execution. A service provider may also implement its own custom marker tokens to perform custom operations. The security infrastructure runtime recognizes behavior and purpose of run time security objects based on the marker or custom marker token interfaces the token implements and handles the security objects accordingly.

8. 发明申请

US20050154898A1 Method and system for protecting master secrets using smart key devices 有权
标题翻译：使用智能钥匙装置保护主机秘密的方法和系统
公开(公告)号：US20050154898A1
公开(公告)日：2005-07-14
申请号：US10753818
申请日：2004-01-08
申请人： Ching-Yun Chao
发明人： Ching-Yun Chao
IPC分类号： G06F21/00 , H04K1/00 , H04L9/32
CPC分类号： G06F21/445 , G06F21/602 , G06F2221/2153 , H04L9/3247 , H04L9/3265 , H04L9/3273 , H04L2209/805
摘要： A data processing system accepts a removable hardware device, which becomes electrically engaged with a system unit within the data processing system, after which the removable hardware device and the hardware security unit mutually authenticate themselves. The removable hardware device stores a private key of a first asymmetric cryptographic key pair and a public key of a second asymmetric cryptographic key pair that is associated with the hardware security unit, and the hardware security unit stores a private key of the second asymmetric cryptographic key pair and a public key of the first asymmetric cryptographic key pair that is associated with the removable hardware device. In response to successfully performing the mutual authentication operation between the removable hardware device and the hardware security unit, the system unit is enabled to invoke cryptographic functions on the hardware security unit while the removable hardware device remains electrically engaged with the system unit.
摘要翻译：数据处理系统接受与数据处理系统内的系统单元电接合的可移动硬件设备，之后可拆卸硬件设备和硬件安全单元相互认证自身。可拆卸硬件设备存储与硬件安全单元相关联的第一非对称加密密钥对和第二非对称密码密钥对的公钥的私钥，并且硬件安全单元存储第二非对称密码密钥的私钥对和与可移除硬件设备相关联的第一非对称加密密钥对的公开密钥。响应于成功地执行可移动硬件设备和硬件安全单元之间的相互认证操作，系统单元能够在硬件安全单元处调用密码功能，同时可拆卸硬件设备保持与系统单元电气接合。

9. 发明授权

US6003075A Enqueuing a configuration change in a network cluster and restore a prior configuration in a back up storage in reverse sequence ordered 失效
标题翻译：在网络集群中启动配置更改，并以反向顺序恢复备份存储中的先前配置
公开(公告)号：US6003075A
公开(公告)日：1999-12-14
申请号：US888550
申请日：1997-07-07
申请人： James W. Arendt , Ching-Yun Chao , Michael David Kistler , Frank Daniel Lawlor , Rodolfo Augusto Mancisidor , Jayashree Ramanathan , Hovey Raymond Strong
发明人： James W. Arendt , Ching-Yun Chao , Michael David Kistler , Frank Daniel Lawlor , Rodolfo Augusto Mancisidor , Jayashree Ramanathan , Hovey Raymond Strong
IPC分类号： G06F11/14 , H01J13/00 , G06F9/445
CPC分类号： G06F11/1415
摘要： Configuration changes are dynamically applied to a cluster multiprocessing system by enqueuing a configuration change event. When the configuration change event is processed, the prior configuration is backed up and each software component applies a relevant portion of a configuration change transaction in an ordered, synchronized manner. Each software component applies its portion of the transaction either by reinitialization or a logged transition operation. If the configuration change transaction fails, the software components roll back the portions, of the configuration change already applied in an ordered, synchronized manner to restore the prior configuration. Multiple events for different configuration changes may be enqueued.
摘要翻译：配置更改通过排队配置更改事件动态应用于群集多处理系统。当处理配置更改事件时，备份先前的配置，并且每个软件组件以有序的同步方式应用配置更改事务的相关部分。每个软件组件通过重新初始化或记录的转换操作来应用事务的部分。如果配置更改事务发生故障，软件组件将以已有规则同步的方式回滚配置更改的部分，以恢复先前的配置。不同配置更改的多个事件可能会排入队列。

10. 发明授权

US5842226A Virtual memory management for a microkernel system with multiple operating systems 失效
标题翻译：具有多个操作系统的微内核系统的虚拟内存管理
公开(公告)号：US5842226A
公开(公告)日：1998-11-24
申请号：US303851
申请日：1994-09-09
申请人： Gary Lee Barton , Ching-Yun Chao , Charles Chuldoo Jung , Freeman Leigh Rawson, III , Hardeep Singh , Guy Gil Sotomayor, Jr.
发明人： Gary Lee Barton , Ching-Yun Chao , Charles Chuldoo Jung , Freeman Leigh Rawson, III , Hardeep Singh , Guy Gil Sotomayor, Jr.
IPC分类号： G06F9/50 , G06F12/08
CPC分类号： G06F9/5016 , G06F12/08
摘要： A personality operating system neutral pager manages the backing store of a microkernel data processing system, by interacting with any one of a variety of personality servers that provide a unique personality interface to a source of data for the system. By partitioning the backing storage management functions performed by the personality neutral pager from those personality unique functions performed by the personality servers, backing space can be flexibly managed in the memory of the microkernel system, independent of the eccentricities in the formats and interfaces imposed by diverse data sources such as magnetic disk drives, optical storage devices, distributed data processing networks, and telecommunications networks.
摘要翻译：个性操作系统中性寻呼机通过与为系统的数据源提供独特的人格接口的各种个性服务器中的任何一个进行交互来管理微内核数据处理系统的后备存储。通过将由个性中性寻呼机执行的后备存储管理功能与由个性服务器执行的个性独特功能分开，可以在微内核系统的存储器中灵活地管理后台空间，而与多种格式和接口中的格式和接口的偏心度无关诸如磁盘驱动器，光存储设备，分布式数据处理网络和电信网络的数据源。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式