专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09197630B2 Automated certificate management 有权
标题翻译：自动证书管理
公开(公告)号：US09197630B2
公开(公告)日：2015-11-24
申请号：US12719853
申请日：2010-03-08
申请人： Tariq Sharif , Colin H. Brace , Nakul Garg
发明人： Tariq Sharif , Colin H. Brace , Nakul Garg
IPC分类号： H04L29/06 , G06F21/33
CPC分类号： H04L63/0823 , G06F21/33 , G06F2221/2107 , G06F2221/2149 , G06F2221/2151 , H04L63/0428 , H04L63/061 , H04L63/102 , H04L2463/061
摘要： A certificate management system provides automated management of certificate lifecycles and certificate distribution. Rather than depend upon an administrator to manually distribute and manage certificates, the system self-generates certificates, distributes the certificates to appropriate servers or other parties, and transitions from old certificates to new certificates in a well-defined manner that avoids breaking functionality. After generating one or more certificates, the system securely shares certificates in a way that parties that use them can find the new certificates without an administrator manually distributing the certificates. When it is time to update certificates, the system generates new certificates and shares the new certificates in a similar way. During a transition period, the system provides a protocol by which both old and new certificates can be used to perform authenticated access to resources, so that the transition from an old to a new certificate does not break services.
摘要翻译：证书管理系统提供证书生命周期和证书分发的自动化管理。系统不依赖于管理员来手动分发和管理证书，而是自行生成证书，将证书分发到适当的服务器或其他方，并以明确定义的方式将旧证书转换为新证书，从而避免破坏功能。在生成一个或多个证书之后，系统以使用它们的各方可以在没有管理员手动分发证书的情况下找到新证书的方式安全地共享证书。在更新证书的时候，系统会以类似的方式生成新证书并共享新的证书。在过渡期间，系统提供了一种协议，通过该协议可以使用旧证书和新证书来执行对资源的认证访问，以便从旧证书到新证书的转换不会中断服务。

2. 发明申请

US20110219227A1 AUTOMATED CERTIFICATE MANAGEMENT 有权
标题翻译：自动认证管理
公开(公告)号：US20110219227A1
公开(公告)日：2011-09-08
申请号：US12719853
申请日：2010-03-08
申请人： Tariq Sharif , Colin H. Brace , Nakul Garg
发明人： Tariq Sharif , Colin H. Brace , Nakul Garg
IPC分类号： H04L29/06
CPC分类号： H04L63/0823 , G06F21/33 , G06F2221/2107 , G06F2221/2149 , G06F2221/2151 , H04L63/0428 , H04L63/061 , H04L63/102 , H04L2463/061
摘要： A certificate management system provides automated management of certificate lifecycles and certificate distribution. Rather than depend upon an administrator to manually distribute and manage certificates, the system self-generates certificates, distributes the certificates to appropriate servers or other parties, and transitions from old certificates to new certificates in a well-defined manner that avoids breaking functionality. After generating one or more certificates, the system securely shares certificates in a way that parties that use them can find the new certificates without an administrator manually distributing the certificates. When it is time to update certificates, the system generates new certificates and shares the new certificates in a similar way. During a transition period, the system provides a protocol by which both old and new certificates can be used to perform authenticated access to resources, so that the transition from an old to a new certificate does not break services.
摘要翻译：证书管理系统提供证书生命周期和证书分发的自动化管理。系统不依赖于管理员来手动分发和管理证书，而是自行生成证书，将证书分发到适当的服务器或其他方，并以明确定义的方式将旧证书转换为新证书，从而避免破坏功能。在生成一个或多个证书之后，系统以使用它们的各方可以在没有管理员手动分发证书的情况下找到新证书的方式安全地共享证书。在更新证书的时候，系统会以类似的方式生成新证书并共享新的证书。在过渡期间，系统提供了一种协议，通过该协议可以使用旧证书和新证书来执行对资源的认证访问，以便从旧证书到新证书的转换不会中断服务。

3. 发明授权

US07921304B2 Securing data set images 有权
标题翻译：保护数据集图像
公开(公告)号：US07921304B2
公开(公告)日：2011-04-05
申请号：US11294977
申请日：2005-12-06
申请人： Colin H. Brace , Nathan D. Muggli , William B. Lees , William J. Whalen
发明人： Colin H. Brace , Nathan D. Muggli , William B. Lees , William J. Whalen
IPC分类号： G06F21/24
CPC分类号： G06F21/6209 , H04L9/0827
摘要： Accessing a data set with secret and non-secret data. A method includes accessing a data set image. The data set image comprises secret data. The data set image is derived from an authorized data set associated with a master key that authorizes access to the secret data. The master key is not provided with the data set image. The method further comprises restoring the data set image to a computing system to create a degraded data set. Data in the degraded data set other than the secret data is accessed without restoring the master key.
摘要翻译：访问具有秘密和非秘密数据的数据集。一种方法包括访问数据集图像。数据集图像包括秘密数据。数据集图像从授权访问秘密数据的主密钥相关联的授权数据集导出。主密钥没有提供数据集图像。该方法还包括将数据集映像恢复到计算系统以创建劣化数据集。在不恢复主密钥的情况下访问除秘密数据之外的劣化数据集中的数据。

4. 发明授权

US08407767B2 Provisioning of digital identity representations 有权
标题翻译：提供数字身份证明
公开(公告)号：US08407767B2
公开(公告)日：2013-03-26
申请号：US11856636
申请日：2007-09-17
申请人： Vijay K. Gajjala , Colin H. Brace , Derek T. Del Conte , Arun K. Nanda , Stuart L. S. Kwan , Rashmi Raj , Vijayavani Nori
发明人： Vijay K. Gajjala , Colin H. Brace , Derek T. Del Conte , Arun K. Nanda , Stuart L. S. Kwan , Rashmi Raj , Vijayavani Nori
IPC分类号： H04L29/06
CPC分类号： H04L63/0815 , G06F21/33 , G06F21/42 , H04L63/104
摘要： A system and method for provisioning digital identity representations (“DIRs”) uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. Various methods are provided for creating new DIRs, requesting DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.
摘要翻译：用于提供数字身份表示（DIR）的系统和方法使用各种技术和结构来简化管理，提高准确性并减少数字身份提供系统的不一致性。提供了各种方法来创建新的DIR，请求DIR，通知主体可用的DIR，并批准发布新的DIR。

5. 发明申请

US20080178272A1 PROVISIONING OF DIGITAL IDENTITY REPRESENTATIONS 有权
标题翻译：提供数字识别代表
公开(公告)号：US20080178272A1
公开(公告)日：2008-07-24
申请号：US11856636
申请日：2007-09-17
申请人： Vijay K. Gajjala , Colin H. Brace , Derek T. Del Conte , Arun K. Nanda , Stuart L.S. Kwan , Rashmi Raj , Vijayavani Nori
发明人： Vijay K. Gajjala , Colin H. Brace , Derek T. Del Conte , Arun K. Nanda , Stuart L.S. Kwan , Rashmi Raj , Vijayavani Nori
IPC分类号： G06F7/04
CPC分类号： H04L63/0815 , G06F21/33 , G06F21/42 , H04L63/104
摘要： A system and method for provisioning digital identity representations (“DIRs”) uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. Various methods are provided for creating new DIRs, requesting DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.
摘要翻译：用于提供数字身份表示（“DIR”）的系统和方法使用各种技术和结构来简化管理，增加准确性并减少数字身份提供系统的不一致性。提供了各种方法来创建新的DIR，请求DIR，通知主体可用的DIR，并批准发布新的DIR。

6. 发明授权

US08087072B2 Provisioning of digital identity representations 有权
标题翻译：提供数字身份证明
公开(公告)号：US08087072B2
公开(公告)日：2011-12-27
申请号：US11856617
申请日：2007-09-17
申请人： Vijay K. Gajjala , Colin H. Brace , Derek T. Del Conte , Kim Cameron , Arun K. Nanda , Hervey O. Wilson , Stuart L. S. Kwan , Rashmi Raj , Vijayavani Nori
发明人： Vijay K. Gajjala , Colin H. Brace , Derek T. Del Conte , Kim Cameron , Arun K. Nanda , Hervey O. Wilson , Stuart L. S. Kwan , Rashmi Raj , Vijayavani Nori
IPC分类号： G06F21/20 , H04L9/32
CPC分类号： G06F21/33 , H04L9/3213 , H04L63/08 , H04L63/102 , H04L2209/56 , H04L2209/80
摘要： A system and method for provisioning digital identity representations (“DIRs”) uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. A system is provided using a common identity data store for both DIR issuance and identity token issuance, decreasing synchronization issues. Various methods are provided for creating new DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.
摘要翻译：用于提供数字身份表示（“DIR”）的系统和方法使用各种技术和结构来简化管理，增加准确性并减少数字身份提供系统的不一致性。使用公共标识数据存储来提供系统以用于DIR发行和身份令牌发行，从而减少同步问题。提供了各种方法来创建新的DIR，通知可用DIR的主体，并批准发布新的DIR。

7. 发明授权

US06457011B1 Method of updating a shared database in a computer network 有权
标题翻译：在计算机网络中更新共享数据库的方法
公开(公告)号：US06457011B1
公开(公告)日：2002-09-24
申请号：US09359510
申请日：1999-07-23
申请人： Colin H. Brace , Donald J. Hacherl , Jeffrey B. Parham
发明人： Colin H. Brace , Donald J. Hacherl , Jeffrey B. Parham
IPC分类号： G06F1730
CPC分类号： G06F17/30575
摘要： A Knowledge Consistency Checker (KCC) that periodically executes on each server of the computer network is provided. The KCC interacts with a data structure contained within a copy of a database located on each server, and with a replication program that executes on each server when called by the KCC. The data structure contains a list of server objects representing the servers in the network. Associated with each server objects is a list or replication objects that describe how the server is obtain a copy of a change to the database. Each replication object represents a server other than the server with which it is associated. The KCC uses the replication objects to inform the replication program from which servers to periodically request an update to the database and to the data structure. Thus, while each KCC is only responsible for creating the objects required for its own server, the replication topology of the entire network is provided to every server in the network by the periodic requests.
摘要翻译：提供了在计算机网络的每个服务器上定期执行的知识一致性检查器（KCC）。 KCC与包含在每个服务器上的数据库副本中的数据结构进行交互，并且与由KCC调用时在每个服务器上执行的复制程序进行交互。数据结构包含表示网络中的服务器的服务器对象的列表。与每个服务器对象相关联的是复制对象的列表，描述了服务器如何获取对数据库的更改的副本。每个复制对象表示与其关联的服务器以外的服务器。 KCC使用复制对象通知复制程序，哪些服务器周期性地请求更新数据库和数据结构。因此，虽然每个KCC仅负责创建其自己的服务器所需的对象，但是通过定期请求将整个网络的复制拓扑提供给网络中的每个服务器。

8. 发明申请

US20110126027A1 SECURE SEED MEDIA 有权
标题翻译：安全种植媒体
公开(公告)号：US20110126027A1
公开(公告)日：2011-05-26
申请号：US13015018
申请日：2011-01-27
申请人： Colin H. Brace , Nathan D. Muggli , William B. Lees , William J. Whalen
发明人： Colin H. Brace , Nathan D. Muggli , William B. Lees , William J. Whalen
IPC分类号： G06F21/24
CPC分类号： G06F21/6209 , H04L9/0827
摘要： Accessing a data set with secret and non-secret data. A method includes accessing a data set image. The data set image comprises secret data. The data set image is derived from an authorized data set associated with a master key that authorizes access to the secret data. The master key is not provided with the data set image. The method further comprises restoring the data set image to a computing system to create a degraded data set. Data in the degraded data set other than the secret data is accessed without restoring the master key.
摘要翻译：访问具有秘密和非秘密数据的数据集。一种方法包括访问数据集图像。数据集图像包括秘密数据。数据集图像从授权访问秘密数据的主密钥相关联的授权数据集导出。主密钥没有提供数据集图像。该方法还包括将数据集映像恢复到计算系统以创建劣化数据集。在不恢复主密钥的情况下访问除秘密数据之外的劣化数据集中的数据。

9. 发明申请

US20090307744A1 AUTOMATING TRUST ESTABLISHMENT AND TRUST MANAGEMENT FOR IDENTITY FEDERATION 审中-公开
标题翻译：自动化信托建立和信任管理的身份联合
公开(公告)号：US20090307744A1
公开(公告)日：2009-12-10
申请号：US12135570
申请日：2008-06-09
申请人： Arun K. Nanda , Matthew F. Steele , Danver W. Hartop , Sriram Vasudevan , Edward P. Johns , Colin H. Brace , Vijay K. Gajjala
发明人： Arun K. Nanda , Matthew F. Steele , Danver W. Hartop , Sriram Vasudevan , Edward P. Johns , Colin H. Brace , Vijay K. Gajjala
IPC分类号： G06F17/00
CPC分类号： H04L63/0807 , G06F21/335 , G06F2221/2101 , H04L63/20
摘要： A federated identity verification system includes an identity provider that provides security tokens ultimately to one or more relying parties for access by the client to services at a relying party. Specifically, the relying party can validate the security token from an identity provider (whether directly or via a client) when verifying that the received security token conforms to security configuration data previously exchanged with the identity provider. To establish the trust relationship, the identity provider and one or more relying parties exchange security configuration information through an agreed-to communication channel. The security configuration information indicates the settings that the other party needs to use for establishing, maintaining, and/or monitoring the trust relationship. The communication channel allows both parties to flexibly and continually synchronize changes to security configurations, and thus maintain, change, or end the trust relationship automatically, as desired.
摘要翻译：联合身份验证系统包括身份提供者，该身份提供者最终向一个或多个依赖方提供安全令牌，以供客户端访问依赖方的服务。具体来说，依赖方可以在验证接收到的安全令牌符合先前与身份提供者交换的安全配置数据时，从身份提供者（无论是直接访问还是通过客户端）验证安全令牌。为了建立信任关系，身份提供商和一个或多个依赖方通过协商的通信渠道交换安全配置信息。安全配置信息指示对方需要用于建立，维护和/或监视信任关系的设置。通信通道允许双方灵活地并且连续地将改变同步到安全配置，从而根据需要自动维护，改变或结束信任关系。

10. 发明申请

US20080178271A1 PROVISIONING OF DIGITAL IDENTITY REPRESENTATIONS 有权
标题翻译：提供数字识别代表
公开(公告)号：US20080178271A1
公开(公告)日：2008-07-24
申请号：US11856617
申请日：2007-09-17
申请人： Vijay K Gajjala , Colin H. Brace , Derek T. Del Conte , Kim Cameron , Arun K. Nanda , Hervey O. Wilson , Stuart L.S. Kwan , Rashmi Raj , Vijayavani Nori
发明人： Vijay K Gajjala , Colin H. Brace , Derek T. Del Conte , Kim Cameron , Arun K. Nanda , Hervey O. Wilson , Stuart L.S. Kwan , Rashmi Raj , Vijayavani Nori
IPC分类号： G06F7/04
CPC分类号： G06F21/33 , H04L9/3213 , H04L63/08 , H04L63/102 , H04L2209/56 , H04L2209/80
摘要： A system and method for provisioning digital identity representations (“DIRs”) uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. A system is provided using a common identity data store for both DIR issuance and identity token issuance, decreasing synchronization issues. Various methods are provided for creating new DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.
摘要翻译：用于提供数字身份表示（“DIR”）的系统和方法使用各种技术和结构来简化管理，增加准确性并减少数字身份提供系统的不一致性。使用公共标识数据存储来提供系统以用于DIR发行和身份令牌发行，从而减少同步问题。提供了各种方法来创建新的DIR，通知可用DIR的主体，并批准发布新的DIR。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式