专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09344432B2 Network layer claims based access control 有权
标题翻译：网络层声明访问控制
公开(公告)号：US09344432B2
公开(公告)日：2016-05-17
申请号：US12822724
申请日：2010-06-24
申请人： Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
发明人： Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
IPC分类号： H04L29/06 , G06F15/16 , G06F21/33 , G06F21/41
CPC分类号： H04L63/102 , G06F21/33 , G06F21/41 , H04L63/0807 , H04L63/0823 , H04L63/10 , H04L63/107 , H04L63/164
摘要： Embodiments of the invention provide techniques for basing access control decisions at the network layer at least in part on information provided in claims, which may describe attributes of a computer requesting access, one or more resources to which access is requested, the user, the circumstances surrounding the requested access, and/or other information. The information may be evaluated based on one or more access control policies, which may be pre-set or dynamically generated, and used in making a decision whether to grant or deny the computer access to the specified resource(s).
摘要翻译：本发明的实施例提供了至少部分地基于在权利要求中提供的信息来在网络层基础访问控制决策的技术，其可以描述请求访问的计算机的属性，请求访问的一个或多个资源，用户，情况围绕所请求的访问，和/或其他信息。可以基于可以被预先设置或动态生成的一个或多个访问控制策略来评估信息，并且用于做出是否授予或拒绝计算机对指定资源的访问的决定。

2. 发明申请

US20110321130A1 NETWORK LAYER CLAIMS BASED ACCESS CONTROL 有权
标题翻译：基于网络层次的访问控制
公开(公告)号：US20110321130A1
公开(公告)日：2011-12-29
申请号：US12822724
申请日：2010-06-24
申请人： Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
发明人： Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
IPC分类号： G06F21/20
CPC分类号： H04L63/102 , G06F21/33 , G06F21/41 , H04L63/0807 , H04L63/0823 , H04L63/10 , H04L63/107 , H04L63/164
摘要： Embodiments of the invention provide techniques for basing access control decisions at the network layer at least in part on information provided in claims, which may describe attributes of a computer requesting access, one or more resources to which access is requested, the user, the circumstances surrounding the requested access, and/or other information. The information may be evaluated based on one or more access control policies, which may be pre-set or dynamically generated, and used in making a decision whether to grant or deny the computer access to the specified resource(s).
摘要翻译：本发明的实施例提供了至少部分地基于在权利要求中提供的信息来在网络层基础访问控制决策的技术，其可以描述请求访问的计算机的属性，请求访问的一个或多个资源，用户，情况围绕所请求的访问，和/或其他信息。可以基于可以被预先设置或动态生成的一个或多个访问控制策略来评估信息，并且用于做出是否授予或拒绝计算机对指定资源的访问的决定。

3. 发明授权

US08918856B2 Trusted intermediary for network layer claims-enabled access control 有权
标题翻译：支持网络层声明的访问控制的可信中介
公开(公告)号：US08918856B2
公开(公告)日：2014-12-23
申请号：US12822745
申请日：2010-06-24
申请人： Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
发明人： Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
IPC分类号： G06F21/00 , H04L29/06
CPC分类号： H04L63/102 , H04L63/164
摘要： Embodiments of the invention provide a trusted intermediary for use in a system in which access control decisions may be based at least in part on information provided in claims. The intermediary may request claims on behalf of a network resource to which access is requested, and submit the claims for a decision whether to grant or deny access. The decision may be based at least in part on one or more access control policies, which may be pre-set or dynamically generated. Because the intermediary requests the claims and submits the claims for an access control decision, the network resource (e.g., a server application) need not be configured to process claims information.
摘要翻译：本发明的实施例提供了一种在系统中使用的可信中介，其中访问控制决定可以至少部分地基于权利要求中提供的信息。中介人可以代表要求访问的网络资源请求索赔，并提交索赔以作决定是否授予或拒绝访问。该决定可以至少部分地基于可以被预先设置或动态生成的一个或多个访问控制策略。因为中介请求权并提交用于访问控制决定的权利要求，所以不需要将网络资源（例如，服务器应用）配置为处理权利要求信息。

4. 发明申请

US20110321152A1 TRUSTED INTERMEDIARY FOR NETWORK LAYER CLAIMS-ENABLED ACCESS CONTROL 有权
标题翻译：用于网络层的可信中介器允许访问控制
公开(公告)号：US20110321152A1
公开(公告)日：2011-12-29
申请号：US12822745
申请日：2010-06-24
申请人： Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
发明人： Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
IPC分类号： G06F21/20 , G06F15/16
CPC分类号： H04L63/102 , H04L63/164
摘要： Embodiments of the invention provide a trusted intermediary for use in a system in which access control decisions may be based at least in part on information provided in claims. The intermediary may request claims on behalf of a network resource to which access is requested, and submit the claims for a decision whether to grant or deny access. The decision may be based at least in part on one or more access control policies, which may be pre-set or dynamically generated. Because the intermediary requests the claims and submits the claims for an access control decision, the network resource (e.g., a server application) need not be configured to process claims information.
摘要翻译：本发明的实施例提供了一种在系统中使用的可信中介，其中访问控制决定可以至少部分地基于权利要求中提供的信息。中介人可以代表要求访问的网络资源请求索赔，并提交索赔以作决定是否授予或拒绝访问。该决定可以至少部分地基于可以被预先设置或动态生成的一个或多个访问控制策略。因为中介请求权并提交用于访问控制决定的权利要求，所以不需要将网络资源（例如，服务器应用）配置为处理权利要求信息。

5. 发明申请

US20090132812A1 METHOD AND APPARATUS FOR VERIFYING REVOCATION STATUS OF A DIGITAL CERTIFICATE 有权
标题翻译：用于验证数字证书的撤销状态的方法和装置
公开(公告)号：US20090132812A1
公开(公告)日：2009-05-21
申请号：US12356777
申请日：2009-01-21
申请人： Alexey Kobozev , Arthur Zavalkovsky , Ilan Frenkel
发明人： Alexey Kobozev , Arthur Zavalkovsky , Ilan Frenkel
IPC分类号： H04L9/00
CPC分类号： H04L9/3263 , H04L2209/805
摘要： Verifying revocation status of a digital certificate is provided in part by a receiver verifying a security certificate for a sender. In an embodiment, an approach comprises receiving a first security certificate associated with the sender and storing the security certificate in a location accessible to the receiver; updating the first security certificate in the location accessible to the receiver if the first security certificate is changed or revoked; receiving a second security certificate from the sender when identity of the sender needs to be verified; comparing the second security certificate to the first security certificate; and confirming the sender's identity only if the second security certificate matches the first security certificate for the sender.
摘要翻译：验证数字证书的撤销状态部分由验证发件人的安全证书的接收方提供。在一个实施例中，一种方法包括接收与发送者相关联的第一安全证书，并将安全证书存储在接收者可访问的位置; 如果第一安全证书被更改或撤销，则在接收者可访问的位置更新第一安全证书; 当发送方的身份需要被验证时，从发送方接收第二个安全证书; 将第二安全证书与第一安全证书进行比较; 并且仅当第二安全证书与发送者的第一安全证书匹配时才确认发件人的身份。

6. 发明授权

US07500100B1 Method and apparatus for verifying revocation status of a digital certificate 有权
标题翻译：验证数字证书撤销状态的方法和装置
公开(公告)号：US07500100B1
公开(公告)日：2009-03-03
申请号：US10660413
申请日：2003-09-10
申请人： Alexey Kobozev , Arthur Zavalkovsky , Ilan Frenkel
发明人： Alexey Kobozev , Arthur Zavalkovsky , Ilan Frenkel
IPC分类号： H04L9/00
CPC分类号： H04L9/3263 , H04L2209/805
摘要： A method and apparatus for verifying revocation status of a digital certificate is provided. The invention operates in part by a receiver verifying a security certificate for a sender. In various embodiments the steps to accomplish this include receiving a first security certificate associated with the sender and storing the security certificate in a location accessible to the receiver; updating the first security certificate in the location accessible to the receiver if the first security certificate is changed or revoked; receiving a second security certificate from the sender when identity of the sender needs to be verified; comparing the second security certificate to the first security certificate; and confirming the sender's identity only if the second security certificate matches the first security certificate for the sender.
摘要翻译：提供一种用于验证数字证书的撤销状态的方法和装置。本发明部分地由验证发送者的安全证书的接收者进行操作。在各种实施例中，完成这一步骤的步骤包括：接收与发送者相关联的第一安全证书，并将安全证书存储在接收者可访问的位置; 如果第一安全证书被更改或撤销，则更新接收者可访问的位置中的第一安全证书; 当发送方的身份需要被验证时，从发送方接收第二个安全证书; 将第二安全证书与第一安全证书进行比较; 并且仅当第二安全证书与发送者的第一安全证书匹配时才确认发件人的身份。

7. 发明授权

US07336960B2 Method and apparatus for balancing wireless access based on centralized information 有权
标题翻译：基于集中式信息平衡无线接入的方法和装置
公开(公告)号：US07336960B2
公开(公告)日：2008-02-26
申请号：US10974418
申请日：2004-10-26
申请人： Arthur Zavalkovsky , Jeremy Stieglitz , Ami Schieber
发明人： Arthur Zavalkovsky , Jeremy Stieglitz , Ami Schieber
IPC分类号： H04Q7/20
CPC分类号： H04W48/02 , H04L63/20 , H04W12/06 , H04W12/08
摘要： A method and apparatus for managing and balancing wireless access based on centralized information is provided. A request to provide service to a wireless client is received from a first access node in a plurality of access node. An access policy, applicable to the first access node, is selected from a plurality of stored policies. The stored policies may include a variety of rules, such as how many or which wireless clients may be serviced by an access node. A centralized manager, such as an AAA server, may perform the selection of the access policy. A determination is made as to whether to allow the first access node to provide service to the wireless client based on the selected access policy. A message that instructs the first access node whether to provide or deny service to the wireless client is transmitted to the first access node.
摘要翻译：提供了一种基于集中式信息管理和平衡无线接入的方法和装置。从多个接入节点中的第一接入节点接收向无线客户端提供业务的请求。从多个存储的策略中选择适用于第一接入节点的接入策略。存储的策略可以包括各种规则，诸如可以由接入节点服务多少个或哪些无线客户端。诸如AAA服务器的集中管理器可以执行访问策略的选择。确定是否允许第一接入节点基于所选择的接入策略向无线客户端提供服务。指示第一接入节点是否向无线客户端提供或拒绝服务的消息被发送到第一接入节点。

8. 发明授权

US07027410B2 Method and apparatus for maintaining consistent per-hop forwarding behavior in a network using network-wide per-hop behavior definitions 有权
标题翻译：使用网络范围的每跳行为定义在网络中维护一致的每跳转发行为的方法和装置
公开(公告)号：US07027410B2
公开(公告)日：2006-04-11
申请号：US10938242
申请日：2004-09-09
申请人： Arthur Zavalkovsky , Nitsan Elfassy , Ron Cohen
发明人： Arthur Zavalkovsky , Nitsan Elfassy , Ron Cohen
IPC分类号： G01R31/08
CPC分类号： H04L47/10 , H04L41/0893 , H04L47/17 , H04L47/20 , H04L47/2408 , H04L47/2458 , H04L47/30 , H04L47/36
摘要： A method, apparatus, and computer-readable medium configured for maintaining consistent per-hop packet forwarding behavior among a plurality of network devices in a network within a Differentiated Services (DS) domain are disclosed. In one aspect, a method involves creating and storing a network-wide PHB definition that associates a PHB with a DS code point (DSCP) value, and with a set of parameters that define the bandwidth and buffer resources allocated to the PHBs on all interfaces of network devices within the DS domain. A mapping of each of the PHBs in the network-wide PHB definition to one or more queues of the network devices is determined. Drain size and queue size values are determined for each of the queues to which PHBs are mapped. A mapping of each of the PHBs to a threshold value associated with the queues is determined. Parameters of fragmentation and interleave mechanisms are determined. Network device configuration parameter values based on the mappings, the drain size, and the queue size, etc. are sent to each of the network devices within the DS domain. As a result, consistent PHB is achieved throughout a network using abstract definitions of PHBs.
摘要翻译：公开了一种配置用于在区分服务（DS）域内的网络中的多个网络设备之间维持一致的每跳包转发行为的方法，装置和计算机可读介质。在一个方面，一种方法涉及创建和存储将PHB与DS代码点（DSCP）值相关联的全网PHB定义，以及定义在所有接口上分配给PHB的带宽和缓冲器资源的一组参数的DS域内的网络设备。确定网络范围PHB定义中的每个PHB与网络设备的一个或多个队列的映射。为PHB映射到的每个队列确定排水大小和排队大小值。确定每个PHB到与队列相关联的阈值的映射。确定碎片和交织机制的参数。基于映射，排水大小和队列大小等的网络设备配置参数值被发送到DS域内的每个网络设备。因此，使用PHB的抽象定义，在整个网络中实现了一致的PHB。

9. 发明授权

US06839327B1 Method and apparatus for maintaining consistent per-hop forwarding behavior in a network using network-wide per-hop behavior definitions 有权
标题翻译：使用网络范围的每跳行为定义在网络中维护一致的每跳转发行为的方法和装置
公开(公告)号：US06839327B1
公开(公告)日：2005-01-04
申请号：US09753034
申请日：2000-12-28
申请人： Arthur Zavalkovsky , Nitsan Elfassy , Ron Cohen
发明人： Arthur Zavalkovsky , Nitsan Elfassy , Ron Cohen
IPC分类号： G01R31/08 , G06F11/00 , G08C15/00 , H04J3/14 , H04L12/24 , H04L12/26 , H04L12/56
CPC分类号： H04L47/10 , H04L41/0893 , H04L47/17 , H04L47/20 , H04L47/2408 , H04L47/2458 , H04L47/30 , H04L47/36
摘要： A method, apparatus, and computer-readable medium configured for maintaining consistent per-hop packet forwarding behavior among a plurality of network devices in a network within a Differentiated Services (DS) domain are disclosed. In one aspect, a method involves creating and storing a network-wide PHB definition that associates a PHB with a DS code point (DSCP) value, and with a set of parameters that define the bandwidth and buffer resources allocated to the PHBs on all interfaces of network devices within the DS domain. A mapping of each of the PHBs in the network-wide PHB definition to one or more queues of the network devices is determined. Drain size and queue size values are determined for each of the queues to which PHBs are mapped. A mapping of each of the PHBs to a threshold value associated with the queues is determined. Parameters of fragmentation and interleave mechanisms are determined. Network device configuration parameter values based on the mappings, the drain size, and the queue size, etc. are sent to each of the network devices within the DS domain. As a result, consistent PHB is achieved throughout a network using abstract definitions of PHBs.

10. 发明授权

US07716721B2 Method and apparatus for re-authentication of a computing device using cached state 有权
标题翻译：使用高速缓存状态重新认证计算设备的方法和装置
公开(公告)号：US07716721B2
公开(公告)日：2010-05-11
申请号：US11253960
申请日：2005-10-18
申请人： Arthur Zavalkovsky , Alexey Kobozev , Joseph Salowey , Ilan Frenkel
发明人： Arthur Zavalkovsky , Alexey Kobozev , Joseph Salowey , Ilan Frenkel
IPC分类号： H04L29/00 , H04L29/02
CPC分类号： H04L9/321 , H04L9/3273 , H04L63/0815 , H04L63/166 , H04L2209/80 , H04W12/06
摘要： Automatically re-authenticating a computing device seeking access to a network or a resource. A method comprises forwarding a request received from the computing device to an authentication device to enable the authentication device to authenticate the computing device using a full-authentication mechanism. State information related to authenticating the computing device is created from authenticating the computing device. The state information is received and stored. For example, an authenticator device that forwarded the initial authentication request from the computing device to the authentication device receives and stores the state information. The computing device is re-authenticated using the stored state information without again contacting the authentication device.
摘要翻译：自动重新认证计算设备寻求对网络或资源的访问。一种方法包括将从计算设备接收的请求转发到认证设备，以使认证设备能够使用完全认证机制认证计算设备。通过验证计算设备创建与认证计算设备相关的状态信息。接收并存储状态信息。例如，将初始认证请求从计算装置转发到认证装置的认证装置接收并存储状态信息。使用所存储的状态信息重新认证计算设备，而不再与认证设备联系。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式