专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

EP2973190A2 POLICY BASED DATA PROTECTION 审中-公开
标题翻译： DIRECTIVE数据保护
公开(公告)号：EP2973190A2
公开(公告)日：2016-01-20
申请号：EP14718186.1
申请日：2014-03-14
申请人： Telefonaktiebolaget L M Ericsson (Publ)
发明人： XING, Bo , SCHAEFER, Christian
IPC分类号： G06F21/62
CPC分类号： H04L63/20 , G06F17/30589 , G06F21/6227 , G06F2221/2141 , H04L63/105
摘要： A method and system for protecting resources stored in a data store, wherein the different resources are protectable on the basis of different policies defined for each of the respective resources and structured in a hierarchical manner. The method allows the different resources to be protected with a variable granularity, by defining policies such that the most fine-grained of the policies defined for a specific resource is dynamically applicable for that resource when executing a request involving that resource.

2. 发明申请

WO2014142742A2 POLICY BASED DATA PROTECTION 审中-公开
标题翻译：基于策略的数据保护
公开(公告)号：WO2014142742A2
公开(公告)日：2014-09-18
申请号：PCT/SE2014/050315
申请日：2014-03-14
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL)
发明人： XING, Bo , SCHAEFER, Christian
IPC分类号： G06F21/62
CPC分类号： H04L63/20 , G06F17/30589 , G06F21/6227 , G06F2221/2141 , H04L63/105
摘要： A method and system for protecting resources stored in a data store, wherein the different resources are protectable on the basis of different policies defined for each of the respective resources and structured in a hierarchical manner. The method allows the different resources to be protected with a variable granularity, by defining policies such that the most fine-grained of the policies defined for a specific resource is dynamically applicable for that resource when executing a request involving that resource.
摘要翻译：一种用于保护存储在数据存储中的资源的方法和系统，其中，基于针对各个资源中的每个资源定义的并且以分层方式构建的不同策略来保护不同的资源。该方法允许通过定义策略来保护不同的资源，通过定义策略，以便在执行涉及该资源的请求时为特定资源定义的最细粒度的策略动态地适用于该资源。

3. 发明申请

WO2016039676A1 PRE-PROCESSING OF USER DATA 审中-公开
标题翻译：用户数据的预处理
公开(公告)号：WO2016039676A1
公开(公告)日：2016-03-17
申请号：PCT/SE2014/051053
申请日：2014-09-11
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL)
发明人： CHENG, Yi , SCHAEFER, Christian
IPC分类号： G06F17/00
CPC分类号： H04L63/10 , H04L63/20
摘要： There is provided a method for policy based pre-processing of user data. The method is performed by a pre-processing node. The method comprises receiving a request from a job management node for a client to access a set of user data. The request comprises an identity of an application. The method comprises acquiring a policy for the application based on the identity. The method comprises determining a modified set of user data from the set of user data based on the policy. The method comprises providing a reference to the modified set of user data to the job management node.
摘要翻译：提供了一种用于基于策略的用户数据预处理的方法。该方法由预处理节点执行。该方法包括从作业管理节点接收客户端访问一组用户数据的请求。请求包括应用程序的身份。该方法包括基于身份获取应用的策略。该方法包括基于策略从该组用户数据确定修改的用户数据集合。该方法包括向修改的用户数据集提供对作业管理节点的引用。

4. 发明申请

WO2015034407A1 PERFORMING AN OPERATION ON A DATA STORAGE 审中-公开
标题翻译：在数据存储中执行操作
公开(公告)号：WO2015034407A1
公开(公告)日：2015-03-12
申请号：PCT/SE2013/051042
申请日：2013-09-09
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL)
发明人： NÄSLUND, Mats , SCHAEFER, Christian
IPC分类号： G06F21/62
CPC分类号： G06F21/62 , G06F17/30312
摘要： A method of performing an operation on a data storage(101) for storing data being encrypted with a key K D associated with an owner (102) of the data is provided. The method comprises deriving, for each authorized client C j , a first key K C j and a second key K Tj , providing the client C j with the first key K Cj and providing a Trusted Third Party (TTP)(104) with the second key K Tj . The method further comprises, at a Policy Enforcement Point (PEP)(103), receiving(401) a request for performing the operation on the data storage from a client Ck (105) of the authorized clients, acquiring(401) a first key K Ck from the client C k , acquiring(404–406) a second key K Tk from the TTP, deriving(407) the key K D from the first key K Ck and the second key K Tk , and performing(408–411) the operation on the data storage using the derived key K D . The disclosed trust model is based on a two-part secret sharing involving the clients and the TTP.
摘要翻译：提供了一种对数据存储器（101）进行操作的方法，用于存储用与数据所有者（102）相关联的密钥KD加密的数据。该方法包括为每个授权的客户端Cj导出第一密钥K Cj和第二密钥KTj，向客户端Cj提供第一密钥KCj，并向第二密钥KTj提供受信任的第三方（TTP）（104）。该方法还包括在策略执行点（PEP）（103）处，接收（401）从授权客户端的客户机Ck（105）对数据存储执行操作的请求，获取（401）第一密钥来自客户Ck的KCK从TTP获取（404-406）第二密钥KTk，从第一密钥KCk和第二密钥KTk导出（407）密钥KD，并且对数据执行（408-411）操作存储使用派生密钥KD。所披露的信任模式是基于涉及客户端和TTP的两部分秘密共享。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式