专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US08312157B2 Implicit authentication 有权
标题翻译：隐式认证
公开(公告)号：US08312157B2
公开(公告)日：2012-11-13
申请号：US12504159
申请日：2009-07-16
申请人： Bjorn Markus Jakobsson , Mark J. Grandcolas , Philippe J. P. Golle , Richard Chow , Runting Shi
发明人： Bjorn Markus Jakobsson , Mark J. Grandcolas , Philippe J. P. Golle , Richard Chow , Runting Shi
IPC分类号： G06F15/16
CPC分类号： H04L63/102 , G06F21/316 , H04L63/0892 , H04L67/22 , H04L67/306
摘要： Embodiments of the present disclosure provide a method and system for implicitly authenticating a user to access controlled resources. The system receives a request to access the controlled resources. The system then determines a user behavior score based on a user behavior model, and recent contextual data about the user. The user behavior score facilitates identifying a level of consistency between one or more recent user events and a past user behavior pattern. The recent contextual data, which comprise a plurality of data streams, are collected from one or more user devices without prompting the user to perform an action explicitly associated with authentication. The plurality of data streams provide basis for determining the user behavior score, but a data stream alone provides insufficient basis for the determination of the user behavior score. The system also provides the user behavior score to an access controller of the controlled resource.
摘要翻译：本公开的实施例提供了用于隐含地认证用户以访问受控资源的方法和系统。系统接收到访问受控资源的请求。系统然后基于用户行为模型和关于用户的最近的上下文数据来确定用户行为得分。用户行为分数有助于识别一个或多个最近用户事件与过去的用户行为模式之间的一致性水平。包括多个数据流的最近的上下文数据从一个或多个用户设备收集，而不提示用户执行明确地与认证相关联的动作。多个数据流提供用于确定用户行为得分的基础，但单独的数据流为确定用户行为得分提供了不足的基础。该系统还向受控资源的访问控制器提供用户行为得分。

12. 发明授权

US08312073B2 CAPTCHA-free throttling 有权
标题翻译：无CAPTCHA调节
公开(公告)号：US08312073B2
公开(公告)日：2012-11-13
申请号：US12535202
申请日：2009-08-04
申请人： Bjorn Markus Jakobsson
发明人： Bjorn Markus Jakobsson
IPC分类号： G06F15/16
CPC分类号： H04L63/10 , H04L63/168
摘要： One embodiment provides a system that throttles access to a web resource. During operation, a throttle server receives a request to access the web resource. The request is associated with a computing device used by a user and is redirected from a server providing the web resource. The throttle server then determines whether the computing device has previously accessed a restricted resource different from the web resource corresponding to the request based on the presence or absence of a unique mark associated with the computing device. Based on the determination, the throttle server subsequently generates a response indicating whether the computing device meets a predetermined requirement for accessing the web resource, and sends the response to the server providing the web resource, thereby facilitating access throttling to the web resource.
摘要翻译：一个实施例提供了一种限制对web资源的访问的系统。在操作期间，节流服务器接收到访问网络资源的请求。该请求与用户使用的计算设备相关联，并且从提供Web资源的服务器重定向。然后，节流服务器基于与计算设备相关联的唯一标记的存在或不存在，确定计算设备是否先前已经访问了与该请求相对应的web资源不同的受限资源。基于该确定，节流服务器随后产生指示计算设备是否满足访问web资源的预定要求的响应，并且将响应发送到提供Web资源的服务器，从而便于访问限制web资源。

13. 发明申请

US20120284783A1 PASSWORD CHECK BY DECOMPOSING PASSWORD 有权
标题翻译：密码检查通过解密密码
公开(公告)号：US20120284783A1
公开(公告)日：2012-11-08
申请号：US13460378
申请日：2012-04-30
申请人： Bjorn Markus Jakobsson
发明人： Bjorn Markus Jakobsson
IPC分类号： G06F21/00
CPC分类号： G06F21/46 , A61B90/37 , A61B2090/3735 , G01B9/02044 , G01B9/02083 , G01B9/02089 , G01B9/02091 , G06F21/00
摘要： A proposed password is decomposed into basic components to determine and score transitions between the basic components and create a password score that measures the strength of the proposed password based on rules, such as concatenation, insertion, and replacement. The proposed password is scored against all known words, such as when a user is first asked to create a password for an account or access. The proposed password can also be scored against one or more previous passwords for the user, such as when the user is asked to change the user's previous password, to determine similarity between the two passwords.
摘要翻译：提出的密码被分解为基本组件以确定和评估基本组件之间的转换，并创建密码分数，以基于诸如连接，插入和替换的规则来测量所提出的密码的强度。所提出的密码对所有已知的字进行打分，例如当用户首次被要求为帐户或访问创建密码时。提出的密码还可以针对用户的一个或多个先前的密码进行打分，诸如当用户被要求改变用户之前的密码时，以确定两个密码之间的相似性。

14. 发明授权

US08219810B2 Method and system for facilitating throttling of interpolation-based authentication 有权
标题翻译：用于促进基于插值的认证的调节的方法和系统
公开(公告)号：US08219810B2
公开(公告)日：2012-07-10
申请号：US12618385
申请日：2009-11-13
申请人： Bjorn Markus Jakobsson
发明人： Bjorn Markus Jakobsson
IPC分类号： H04L9/32 , H04K1/00
CPC分类号： H04L9/3271 , H04L9/3013 , H04L9/3252 , H04L2209/04
摘要： One embodiment provides a system that facilitates throttling of interpolation-based authentication at a client. During operation, the system receives data points encrypted with a public key associated with a throttle server. The system then applies offsets to the data points, wherein a respective offset for a data point is associated with a user input. The system blinds the offset data points, and sends to the throttle server the blinded offset data points, thereby allowing the throttle server to perform an interpolation on the blinded offset data points and maintain a count of interpolation attempts from the client. Subsequently, the system receives from the throttle server an evaluation point based at least on the interpolation. In response, the system unblinds the evaluation point, and uses the unblinded evaluation point as a secret for a subsequent authentication process.
摘要翻译：一个实施例提供了一种有利于在客户端对基于插值的认证进行节流的系统。在操作期间，系统接收用与节流服务器相关联的公钥加密的数据点。系统然后将偏移应用于数据点，其中数据点的相应偏移量与用户输入相关联。该系统对偏移数据点进行遮挡，并向节流服务器发送盲偏移数据点，从而允许节流服务器在盲偏移数据点上执行插值，并维护来自客户端的插值尝试次数。随后，系统至少基于内插从节流服务器接收评估点。作为响应，系统解除评估点的盲目性，并将未盲点的评估点用作后续身份验证过程的秘密。

15. 发明申请

US20120110634A1 AUTOMATIC PIN CREATION USING PASSWORD 有权
标题翻译：使用密码自动创建引脚
公开(公告)号：US20120110634A1
公开(公告)日：2012-05-03
申请号：US13281273
申请日：2011-10-25
申请人： Bjorn Markus Jakobsson
发明人： Bjorn Markus Jakobsson
IPC分类号： G06F21/00
CPC分类号： G06F21/31 , G06F21/46
摘要： A PIN is automatically generated based on at least one rule when the user enters a password through a user device. In one example, the PIN is a truncated version of the password where each character in the truncated version is mapped onto a number. The mapping can be a truncation at the beginning or end of the password, or the mapping can be with any pattern or sequence of characters in the password. This PIN generation may be transparent to the user, such that the user may not even know the PIN was generated when the password was entered. When the user attempts to access restricted content, the user may enter the PIN instead of the password, where the user may be notified of the rule used to generate the PIN so that the user will know the PIN by knowing the password.
摘要翻译：当用户通过用户设备输入密码时，基于至少一个规则自动生成PIN。在一个示例中，PIN是密码的截断版本，其中截断版本中的每个字符都映射到一个数字上。该映射可以是密码开头或结尾处的截断，或者映射可以是密码中的任何模式或字符序列。该PIN生成对于用户可能是透明的，使得用户甚至可能不知道在输入密码时生成了PIN码。当用户尝试访问受限制的内容时，用户可以输入PIN而不是密码，其中可以向用户通知用于生成PIN的规则，以便用户通过知道密码来知道PIN。

16. 发明授权

US08086866B2 Methods and apparatus for efficient computation of one-way chains in cryptographic applications 有权
标题翻译：用于密码应用中单向链的有效计算的方法和装置
公开(公告)号：US08086866B2
公开(公告)日：2011-12-27
申请号：US12131404
申请日：2008-06-02
申请人： Bjorn Markus Jakobsson
发明人： Bjorn Markus Jakobsson
IPC分类号： H04L9/00
CPC分类号： G06F21/602 , H04L9/3236 , H04L2209/38
摘要： Techniques are disclosed for efficient computation of consecutive values of one-way chains and other one-way graphs in cryptographic applications. The one-way chain or graph may be a chain of length s having positions i=1, 2, . . . s each having a corresponding value νi associated therewith, wherein the value νi is given by νi=h(νi+1), for a given hash function or other one-way function h. An initial distribution of helper values may be stored for the one-way chain of length s, e.g., at positions given by i=2j for 0≦j≦log2 s. A given one of the output values νi at a current position in the one-way chain may be computed utilizing a first helper value previously stored for another position in the one-way chain between the current position and an endpoint of the chain. After computation of the given output value, the positions of the helper values are adjusted so as to facilitate computation of subsequent output values. Advantageously, a storage-computation product associated with generation of the output values of the one-way chain has a complexity O((log s)2).
摘要翻译：公开了用于在加密应用中有效计算单向链和其他单向图的连续值的技术。单向链或图可以是具有位置i = 1,2的长度s的链。。。 s与每个具有相应值＆ngr; i相关联，其中对于给定的散列函数或其他单向函数h，值＆ngr; i由＆ngr; i = h（＆ngr; i + 1）给出。对于长度为s的单向链，可以存储辅助值的初始分布，例如，对于0＆nlE; j＆nlE; log 2 s，在由i = 2j给出的位置处存储辅助值的初始分布。单向链中当前位置处的输出值＆ngr; i中的给定值之一可以利用先前存储在当前位置和链路端点之间的单向链中的另一位置的第一辅助值来计算。在计算给定输出值之后，调整帮助值的位置，以便于后续输出值的计算。有利地，与生成单向链的输出值相关联的存储计算产品具有复杂度O（（log s）2）。

17. 发明申请

US20110314426A1 RISK-BASED ALERTS 审中-公开
标题翻译：基于风险的警报
公开(公告)号：US20110314426A1
公开(公告)日：2011-12-22
申请号：US12818168
申请日：2010-06-18
申请人： Bjorn Markus Jakobsson , Philippe J.P. Golle
发明人： Bjorn Markus Jakobsson , Philippe J.P. Golle
IPC分类号： G06F3/033
CPC分类号： G06F3/04883 , G06F3/0481
摘要： Some embodiments provide a system that facilitates use of a computer system. During operation, the system obtains notification of a risk associated with a user action on the computer system. Next, the system generates an alert within a user interface based at least on a severity of the risk. The alert may include a set of user-interface elements representing an effect of the user action. The system then receives a response to the alert from a user of the computer system. The response may include a dragging of a first of the user-interface elements in one or more directions to a second of the user-interface elements. Finally, the system processes the user action based at least on the response.
摘要翻译：一些实施例提供了便于使用计算机系统的系统。在运行期间，系统获得与计算机系统上的用户动作相关联的风险的通知。接下来，系统至少基于风险的严重性在用户界面内生成警报。警报可以包括表示用户动作的效果的一组用户界面元素。然后，系统从计算机系统的用户接收对该警报的响应。响应可以包括将一个或多个方向中的第一用户界面元素拖动到用户界面元素中的第二个。最后，系统至少基于响应处理用户操作。

18. 发明申请

US20110016534A1 IMPLICIT AUTHENTICATION 有权
标题翻译：隐含认证
公开(公告)号：US20110016534A1
公开(公告)日：2011-01-20
申请号：US12504159
申请日：2009-07-16
申请人： Bjorn Markus Jakobsson , Mark J. Grandcolas , Philippe J. P. Golle , Richard Chow , Runting Shi
发明人： Bjorn Markus Jakobsson , Mark J. Grandcolas , Philippe J. P. Golle , Richard Chow , Runting Shi
IPC分类号： H04L9/32
CPC分类号： H04L63/102 , G06F21/316 , H04L63/0892 , H04L67/22 , H04L67/306
摘要： Embodiments of the present disclosure provide a method and system for implicitly authenticating a user to access controlled resources. The system receives a request to access the controlled resources. The system then determines a user behavior score based on a user behavior model, and recent contextual data about the user. The user behavior score facilitates identifying a level of consistency between one or more recent user events and a past user behavior pattern. The recent contextual data, which comprise a plurality of data streams, are collected from one or more user devices without prompting the user to perform an action explicitly associated with authentication. The plurality of data streams provide basis for determining the user behavior score, but a data stream alone provides insufficient basis for the determination of the user behavior score. The system also provides the user behavior score to an access controller of the controlled resource.
摘要翻译：本公开的实施例提供了用于隐含地认证用户以访问受控资源的方法和系统。系统接收到访问受控资源的请求。系统然后基于用户行为模型和关于用户的最近的上下文数据来确定用户行为得分。用户行为分数有助于识别一个或多个最近用户事件与过去的用户行为模式之间的一致性水平。包括多个数据流的最近的上下文数据从一个或多个用户设备收集，而不提示用户执行明确地与认证相关联的动作。多个数据流提供用于确定用户行为得分的基础，但单独的数据流为确定用户行为得分提供了不足的基础。该系统还向受控资源的访问控制器提供用户行为得分。

19. 发明授权

US07366911B2 Methods and apparatus for computationally-efficient generation of secure digital signatures 有权
标题翻译：用于计算高效生成安全数字签名的方法和装置
公开(公告)号：US07366911B2
公开(公告)日：2008-04-29
申请号：US10014763
申请日：2001-12-11
申请人： Juan A. Garay , Bjorn Markus Jakobsson
发明人： Juan A. Garay , Bjorn Markus Jakobsson
IPC分类号： H04L9/00
CPC分类号： H04L9/3247 , H04L2209/805
摘要： Methods and apparatus are disclosed for generation of secure and efficient digital signatures in an information processing system. The system includes one or more user devices, a signing aid or other intermediary device, and a verifier. A given user device has associated therewith key pairs (s, p) and (s′, p′) corresponding to respective first and second digital signature protocols. As part of a setup process, an agreement relating to the public keys p and p′ is signed by both the user device and the intermediary device, and the resulting twice-signed agreement is stored by both the user device and the intermediary device. A first digital signature s1 is then generated on a message m or a hash h(m) thereof in the user device using the secret key s′ and is sent to the verifier. The verifier in turn sends s1 to the intermediary, and the intermediary checks that s1 is a valid digital signature for the user device. If s1 is valid, the intermediary device generates a second digital signature s2 on m or h(m) using the secret key s, and s2 is returned to the verifier as a signature generated by the user device. The intermediary may be configured to wait a predetermined delay period between checking that s1 is a valid signature and generating s2, such that a user may contact the intermediary device and upon providing an access code thereto direct the intermediary device not to generate s2.
摘要翻译：公开了用于在信息处理系统中产生安全且高效的数字签名的方法和装置。系统包括一个或多个用户设备，签名协助或其他中间设备以及验证者。给定用户设备已经与对应于相应的第一和第二数字签名协议的密钥对（s，p）和（s'，p'）相关联。作为设置处理的一部分，由用户设备和中间设备签署与公钥p和p'有关的协议，并且由用户设备和中间设备两者存储所得到的双签协议。然后使用秘密密钥s'在用户设备的消息m或其哈希h（m）上生成第一数字签名s 1，并将其发送给验证者。验证者又将s 1发送给中间人，并且中间人检查s 1是用户设备的有效数字签名。如果s 1有效，则中间设备使用秘密密钥s在m或h（m）上生成第二数字签名s 2，并且s 2作为用户设备生成的签名返回给验证者。中介可以被配置为在检查s 1是有效签名并生成s 2之间等待预定的延迟周期，使得用户可以联系中间设备，并且在提供访问代码时，指示中间设备不生成s 2 。

20. 发明授权

US07035403B2 Encryption method and apparatus with escrow guarantees 有权
公开(公告)号：US07035403B2
公开(公告)日：2006-04-25
申请号：US09781476
申请日：2001-02-12
申请人： Bjorn Markus Jakobsson
发明人： Bjorn Markus Jakobsson
IPC分类号： H04L9/32
CPC分类号： H04L9/3218 , H04L9/0894 , H04L9/3263 , H04L2209/80
摘要： A message to be transmitted through a network is encrypted such that the resulting encrypted message has associated therewith a proof of correctness indicating that the message is of a type that allows decryption by one or more escrow authorities. Each of at least a subset of the servers of the network includes a module for checking the proof of correctness if the corresponding encrypted message passes through the corresponding server in being transmitted from a sender to a recipient through the network. The encrypted message is therefore transmitted through the network to the recipient such that in traversing the network the proof of correctness associated with the encrypted message is checked by a designated check module of at least one server of the network. If the check of the proof of correctness indicates that the proof is invalid, the module of the server performing the check may direct that the encrypted message be discarded.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式