专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09735964B2 Federated realm discovery 有权
公开(公告)号：US09735964B2
公开(公告)日：2017-08-15
申请号：US12141939
申请日：2008-06-19
申请人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
发明人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/0815 , G06F17/30864 , G06F21/41 , G06F21/606 , G06F21/6209 , H04L9/3234 , H04L63/08 , H04L63/0853 , H04L63/101
摘要： A federated realm discovery system within a federation determines a “home” realm associated with a portion of the user's credentials before the user's secret information (such as a password) is passed to a non-home realm. A login user interface accepts a user identifier and, based on the user identifier, can use various methods to identify an account authority service within the federation that can authenticate the user. In one method, a realm list of the user device can be used to direct the login to the appropriate home realm of the user. In another method, an account authority service in a non-home realm can look up the user's home realm and provide realm information directing the user device to login at the home realm.

2. 发明申请

US20090320114A1 FEDERATED REALM DISCOVERY 有权
公开(公告)号：US20090320114A1
公开(公告)日：2009-12-24
申请号：US12141939
申请日：2008-06-19
申请人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
发明人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
IPC分类号： H04L9/32
CPC分类号： H04L63/0815 , G06F17/30864 , G06F21/41 , G06F21/606 , G06F21/6209 , H04L9/3234 , H04L63/08 , H04L63/0853 , H04L63/101
摘要： A federated realm discovery system within a federation determines a “home” realm associated with a portion of the user's credentials before the user's secret information (such as a password) is passed to a non-home realm. A login user interface accepts a user identifier and, based on the user identifier, can use various methods to identify an account authority service within the federation that can authenticate the user. In one method, a realm list of the user device can be used to direct the login to the appropriate home realm of the user. In another method, an account authority service in a non-home realm can look up the user's home realm and provide realm information directing the user device to login at the home realm.

3. 发明授权

US08544074B2 Federated realm discovery 有权
标题翻译：联邦领域发现
公开(公告)号：US08544074B2
公开(公告)日：2013-09-24
申请号：US12141940
申请日：2008-06-19
申请人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
发明人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
IPC分类号： G06F7/04 , G06F15/16 , G06F17/30 , H04L29/06
CPC分类号： H04L63/0815 , G06F17/30864 , G06F21/41 , G06F21/606 , G06F21/6209 , H04L9/3234 , H04L63/08 , H04L63/0853 , H04L63/101
摘要： A federated realm discovery system within a federation determines a “home” realm associated with a portion of the user's credentials before the user's secret information (such as a password) is passed to a non-home realm. A login user interface accepts a user identifier and, based on the user identifier, can use various methods to identify an account authority service within the federation that can authenticate the user. In one method, a realm list of the user device can be used to direct the login to the appropriate home realm of the user. In another method, an account authority service in a non-home realm can look up the user's home realm and provide realm information directing the user device to login at the home realm.
摘要翻译：联盟内的联合领域发现系统在将用户的秘密信息（例如密码）传递到非住宅领域之前确定与用户凭证的一部分相关联的“家庭”领域。登录用户界面接受用户标识符，并且基于用户标识符可以使用各种方法来识别可以验证用户的联盟内的帐户授权服务。在一种方法中，用户设备的领域列表可以用于将登录指向用户的适当的家庭领域。在另一种方法中，非家庭领域的帐户授权服务可以查找用户的家庭领域，并提供指导用户设备在家庭领域登录的领域信息。

4. 发明申请

US20090320116A1 FEDERATED REALM DISCOVERY 有权
标题翻译：联合现实发现
公开(公告)号：US20090320116A1
公开(公告)日：2009-12-24
申请号：US12141940
申请日：2008-06-19
申请人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
发明人： Wei-Qiang Guo , Lynn Ayres , Rui Chen , Sarah Faulkner , Yordan Rouskov
IPC分类号： H04L9/32 , G06F21/00
CPC分类号： H04L63/0815 , G06F17/30864 , G06F21/41 , G06F21/606 , G06F21/6209 , H04L9/3234 , H04L63/08 , H04L63/0853 , H04L63/101
摘要： A federated realm discovery system within a federation determines a “home” realm associated with a portion of the user's credentials before the user's secret information (such as a password) is passed to a non-home realm. A login user interface accepts a user identifier and, based on the user identifier, can use various methods to identify an account authority service within the federation that can authenticate the user. In one method, a realm list of the user device can be used to direct the login to the appropriate home realm of the user. In another method, an account authority service in a non-home realm can look up the user's home realm and provide realm information directing the user device to login at the home realm.
摘要翻译：联盟内的联合领域发现系统在将用户的秘密信息（例如密码）传递到非住宅领域之前确定与用户凭证的一部分相关联的“家庭”领域。登录用户界面接受用户标识符，并且基于用户标识符可以使用各种方法来识别可以验证用户的联盟内的帐户授权服务。在一种方法中，用户设备的领域列表可以用于将登录指向用户的适当的家庭领域。在另一种方法中，非家庭领域的帐户授权服务可以查找用户的家庭领域，并提供指导用户设备在家庭领域登录的领域信息。

5. 发明授权

US08209394B2 Device-specific identity 有权
标题翻译：设备特定身份
公开(公告)号：US08209394B2
公开(公告)日：2012-06-26
申请号：US12131140
申请日：2008-06-02
申请人： Wei-Qiang Guo , Vaishali De , Rui Chen , Yordan Rouskov , Vikas Rajvanshy
发明人： Wei-Qiang Guo , Vaishali De , Rui Chen , Yordan Rouskov , Vikas Rajvanshy
IPC分类号： G06F15/16
CPC分类号： G06F21/73 , G06F2221/2129
摘要： A device identifier (ID) is used across enterprise boundaries. A user can use the device ID to publish a device for sharing with other remote users. The remote users can discover devices that are shared by other users based on device IDs, connect to a selected device, and then verify that they have connected to the correct device based on its device ID. An account authority service may be used to manage the publication and/or discovery of the shared devices and their device IDs.
摘要翻译：跨企业边界使用设备标识符（ID）。用户可以使用设备ID发布设备以与其他远程用户共享。远程用户可以基于设备ID发现其他用户共享的设备，连接到所选设备，然后根据设备ID验证是否连接到正确的设备。可以使用帐户权限服务来管理共享设备及其设备ID的发布和/或发现。

6. 发明申请

US20090254978A1 DELEGATED AUTHENTICATION FOR WEB SERVICES 有权
标题翻译： WEB服务的代理认证
公开(公告)号：US20090254978A1
公开(公告)日：2009-10-08
申请号：US12060869
申请日：2008-04-02
申请人： Yordan Rouskov , Michael Guo , Rui Chen , Kyle Young
发明人： Yordan Rouskov , Michael Guo , Rui Chen , Kyle Young
IPC分类号： H04L9/32 , G06F21/00
CPC分类号： H04L63/102 , G06F21/335 , H04L9/321 , H04L9/3234 , H04L9/3247 , H04L2209/60
摘要： Embodiments of the claimed subject matter provide a method and an apparatus for enabling delegated authentication for web services. Delegated authentication is provided without divulging the information the user requires to complete an authorization procedure of another web service or otherwise subjecting the user to unnecessary risk. Furthermore, delegated authentication is granted for a limited duration and access is subject to further limitations to prevent unnecessary intrusion to the user, the user's data, and the host web service.One embodiment of the claimed subject matter is implemented as a method for enabling delegated authentication to allow a third party service access to protected data on a host service. A user attempting to utilize functionality of a third party website that requests access to the user's data stored on a separate host website is enabled as a delegate with authorization to access the data stored on the host website.
摘要翻译：所要求保护的主题的实施例提供了一种用于启用用于web服务的委托认证的方法和装置。提供委托认证，而不泄露用户需要的信息来完成另一个Web服务的授权过程，或以其他方式使用户受到不必要的风险。此外，委托认证在有限的时间内被授予，并且访问受到进一步的限制，以防止对用户，用户的数据和主机web服务的不必要的入侵。所要求保护的主题的一个实施例被实现为用于使得委托认证允许第三方服务访问主机服务上的受保护数据的方法。尝试利用请求访问存储在单独的主机网站上的用户数据的第三方网站的功能的用户被启用为具有访问存储在主机网站上的数据的授权的代理。

7. 发明授权

US08800003B2 Trusted device-specific authentication 有权
标题翻译：受信任的设备特定身份验证
公开(公告)号：US08800003B2
公开(公告)日：2014-08-05
申请号：US13162834
申请日：2011-06-17
申请人： Wei-Qiang (Michael) Guo , Yordan Rouskov , Rui Chen , Pui-Yin Winfred Wong
发明人： Wei-Qiang (Michael) Guo , Yordan Rouskov , Rui Chen , Pui-Yin Winfred Wong
IPC分类号： G06F21/00 , G06F21/31 , G06F21/32 , G06F21/34
CPC分类号： G06F21/31 , G06F21/32 , G06F21/34 , H04L9/3234 , H04L9/3263 , H04L63/0823 , H04L63/0876 , H04L63/105 , H04L2209/56
摘要： An authentication system combines device credential verification with user credential verification to provide a more robust authentication mechanism that is convenient to the user and effective across enterprise boundaries. In one implementation, user credential verification and device credential verification are combined to provide a convenient two-factor authentication. In this manner, an account authority service or other authentication provider verify both factors and provide a security token in accordance with the security policy of the account network resource the user is intending to access. The level of privilege granted by the target account network resource can vary depending on the number and type of factors verified by the account authority service.
摘要翻译：认证系统将设备凭据验证与用户凭证验证相结合，提供了更加强大的身份验证机制，方便用户，跨企业边界有效。在一个实现中，组合用户凭证验证和设备凭据验证以提供方便的双因素认证。以这种方式，帐户权限服务或其他认证提供者验证两个因素并根据用户打算访问的帐户网络资源的安全策略提供安全令牌。目标帐户网络资源授予的权限级别可以根据帐户权限服务验证的因素的数量和类型而有所不同。

8. 发明授权

US08402508B2 Delegated authentication for web services 有权
标题翻译：授权Web服务的身份验证
公开(公告)号：US08402508B2
公开(公告)日：2013-03-19
申请号：US12060869
申请日：2008-04-02
申请人： Yordan Rouskov , Michael Guo , Rui Chen , Kyle Young
发明人： Yordan Rouskov , Michael Guo , Rui Chen , Kyle Young
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , G06F21/335 , H04L9/321 , H04L9/3234 , H04L9/3247 , H04L2209/60
摘要： Embodiments of the claimed subject matter provide a method and an apparatus for enabling delegated authentication for web services. Delegated authentication is provided without divulging the information the user requires to complete an authorization procedure of another web service or otherwise subjecting the user to unnecessary risk. Furthermore, delegated authentication is granted for a limited duration and access is subject to further limitations to prevent unnecessary intrusion to the user, the user's data, and the host web service.One embodiment of the claimed subject matter is implemented as a method for enabling delegated authentication to allow a third party service access to protected data on a host service. A user attempting to utilize functionality of a third party website that requests access to the user's data stored on a separate host website is enabled as a delegate with authorization to access the data stored on the host website.
摘要翻译：所要求保护的主题的实施例提供了一种用于启用用于web服务的委托认证的方法和装置。提供委托认证，而不泄露用户需要的信息来完成另一个Web服务的授权过程，或以其他方式使用户受到不必要的风险。此外，委托认证在有限的时间内被授予，并且访问受到进一步的限制，以防止对用户，用户的数据和主机web服务的不必要的入侵。所要求保护的主题的一个实施例被实现为用于使得委托认证允许第三方服务访问主机服务上的受保护数据的方法。尝试利用请求访问存储在单独的主机网站上的用户数据的第三方网站的功能的用户被启用为具有访问存储在主机网站上的数据的授权的代理。

9. 发明授权

US07979899B2 Trusted device-specific authentication 有权
标题翻译：受信任的设备特定身份验证
公开(公告)号：US07979899B2
公开(公告)日：2011-07-12
申请号：US12131142
申请日：2008-06-02
申请人： Wei-Qiang (Michael) Guo , Yordan Rouskov , Rui Chen , Pui-Yin Winfred Wong
发明人： Wei-Qiang (Michael) Guo , Yordan Rouskov , Rui Chen , Pui-Yin Winfred Wong
IPC分类号： G06F7/04 , G06F15/16 , G06F17/30 , H04L29/06
CPC分类号： G06F21/31 , G06F21/32 , G06F21/34 , H04L9/3234 , H04L9/3263 , H04L63/0823 , H04L63/0876 , H04L63/105 , H04L2209/56
摘要： An authentication system combines device credential verification with user credential verification to provide a more robust authentication mechanism that is convenient to the user and effective across enterprise boundaries. In one implementation, user credential verification and device credential verification are combined to provide a convenient two-factor authentication. In this manner, an account authority service or other authentication provider verify both factors and provide a security token in accordance with the security policy of the account network resource the user is intending to access. The level of privilege granted by the target account network resource can vary depending on the number and type of factors verified by the account authority service.
摘要翻译：认证系统将设备凭据验证与用户凭证验证相结合，提供了更加强大的身份验证机制，方便用户，跨企业边界有效。在一个实现中，组合用户凭证验证和设备凭证验证以提供方便的双因素认证。以这种方式，帐户权限服务或其他认证提供者验证两个因素并根据用户打算访问的帐户网络资源的安全策略提供安全令牌。目标帐户网络资源授予的权限级别可以根据帐户权限服务验证的因素的数量和类型而有所不同。

10. 发明申请

US20110247055A1 TRUSTED DEVICE-SPECIFIC AUTHENTICATION 有权
标题翻译： TRUSTED DEVICE-Specifici认证
公开(公告)号：US20110247055A1
公开(公告)日：2011-10-06
申请号：US13162834
申请日：2011-06-17
申请人： Wei-Qiang Michael Guo , Yordan Rouskov , Rui Chen , Pui-Yin Winfred Wong
发明人： Wei-Qiang Michael Guo , Yordan Rouskov , Rui Chen , Pui-Yin Winfred Wong
IPC分类号： H04L9/32
CPC分类号： G06F21/31 , G06F21/32 , G06F21/34 , H04L9/3234 , H04L9/3263 , H04L63/0823 , H04L63/0876 , H04L63/105 , H04L2209/56
摘要： An authentication system combines device credential verification with user credential verification to provide a more robust authentication mechanism that is convenient to the user and effective across enterprise boundaries. In one implementation, user credential verification and device credential verification are combined to provide a convenient two-factor authentication. In this manner, an account authority service or other authentication provider verify both factors and provide a security token in accordance with the security policy of the account network resource the user is intending to access. The level of privilege granted by the target account network resource can vary depending on the number and type of factors verified by the account authority service.
摘要翻译：认证系统将设备凭据验证与用户凭证验证相结合，提供了更加强大的身份验证机制，方便用户，跨企业边界有效。在一个实现中，组合用户凭证验证和设备凭证验证以提供方便的双因素认证。以这种方式，帐户权限服务或其他认证提供者验证两个因素并根据用户打算访问的帐户网络资源的安全策略提供安全令牌。目标帐户网络资源授予的权限级别可以根据帐户权限服务验证的因素的数量和类型而有所不同。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式