专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20110078448A1 Short-Lived Certificate Authority Service 有权
标题翻译：短期认证机构服务
公开(公告)号：US20110078448A1
公开(公告)日：2011-03-31
申请号：US12965449
申请日：2010-12-10
申请人： Trevin Chow , Winfred Wong , Yordan Rouskov , Kok Wai Chan , Wei Jiang , Colin Chow , Sanjeev Nagvekar , Matt Sullivan , Kalyan Sayyaparaju , Dilip Pai , Avinash Belur
发明人： Trevin Chow , Winfred Wong , Yordan Rouskov , Kok Wai Chan , Wei Jiang , Colin Chow , Sanjeev Nagvekar , Matt Sullivan , Kalyan Sayyaparaju , Dilip Pai , Avinash Belur
IPC分类号： H04L9/32 , G06F21/00
CPC分类号： H04L9/3213 , H04L9/3263 , H04L51/04 , H04L63/0807 , H04L63/0823 , H04L63/0846 , H04L63/20 , H04L2209/56
摘要： An integrated authentication service is described which may receive a bundled request from one or more clients. One or more of the described techniques may be utilized to provide, in response to a single bundled request, a token for proof of identity and a certificate for establishing secure communications.
摘要翻译：描述了可以从一个或多个客户端接收捆绑请求的集成认证服务。所述技术中的一个或多个可以用于响应于单个捆绑的请求提供用于证明身份的令牌和用于建立安全通信的证书。

12. 发明授权

US07523490B2 Session key security protocol 有权
标题翻译：会话密钥安全协议
公开(公告)号：US07523490B2
公开(公告)日：2009-04-21
申请号：US10146686
申请日：2002-05-15
申请人： Wei-Quiang Michael Guo , John Hal Howard , Kok Wai Chan
发明人： Wei-Quiang Michael Guo , John Hal Howard , Kok Wai Chan
IPC分类号： H04L9/32
CPC分类号： H04L63/0807 , G06F21/33 , G06F21/41 , H04L9/0844 , H04L9/3213 , H04L9/3247 , H04L63/045 , H04L63/0815 , H04L2209/60
摘要： A security protocol for use in a multi-site authentication system. After authenticating a user, an authentication server generates a ticket including information associated with the user. The authentication server encrypts content of the ticket using a symmetric key shared with an affiliate server. The affiliate server has a public key that the authentication server uses to encrypt the shared key. The authentication server has private key for creating a signature on the ticket. The affiliate server decrypts the shared key with its private key and then decrypts the content of the ticket using the decrypted shared key. The affiliate server validates the signature with the authentication server's public key.
摘要翻译：用于多站点认证系统的安全协议。在认证用户之后，认证服务器生成包括与用户相关联的信息的票证。认证服务器使用与会员服务器共享的对称密钥来加密票证的内容。联盟服务器具有认证服务器用于加密共享密钥的公钥。身份验证服务器具有用于在故障单上创建签名的私钥。会员服务器用其私钥解密共享密钥，然后使用解密的共享密钥解密票证的内容。联盟服务器使用身份验证服务器的公钥验证签名。

13. 发明授权

US07437551B2 Public key infrastructure scalability certificate revocation status validation 有权
标题翻译：公钥基础架构可扩展性证书吊销状态验证
公开(公告)号：US07437551B2
公开(公告)日：2008-10-14
申请号：US10817246
申请日：2004-04-02
申请人： Kok Wai Chan , Wei Jiang , Wei-Quiang Michael Guo
发明人： Kok Wai Chan , Wei Jiang , Wei-Quiang Michael Guo
IPC分类号： H04L9/00
CPC分类号： H04L9/3268
摘要： A system and method for retrieving certificate of trust information for a certificate validation process. Fetching servers periodically retrieve certificate revocation lists (CRLs) from servers maintained by various certificate issuers. The revoked certificate data included in the retrieved CRLs are stored in a central database. An authentication server receives a request from a client for access to a secure service and initiates a validation process. The authentication server retrieves revoked certificate data from the central database and compares the retrieved revoked certificate data to certificate of trust information received from the client along with the request. The authentication server denies access to the secure information if the certificate of trust information matches revoked certificate data from the central database, allows access if the certificate of trust information does not match revoked certificate data from the central database.
摘要翻译：用于检索证书验证过程的信任证书信息的系统和方法。获取服务器会定期从由各种证书颁发者维护的服务器中检索证书撤销列表（CRL）。包含在检索的CRL中的撤销的证书数据被存储在中央数据库中。认证服务器从客户端接收对安全服务的访问请求，并启动验证过程。认证服务器从中央数据库检索撤销的证书数据，并将检索到的撤销证书数据与客户端接收的信任证书信息一起与请求进行比较。如果信任证书信息与中央数据库中的撤销证书数据匹配，则认证服务器拒绝对安全信息的访问，如果信任证书信息与中央数据库的撤销证书数据不匹配，则认证服务器允许访问。

14. 发明授权

US07016909B2 Method and system for expansion of recurring calendar events 失效
公开(公告)号：US07016909B2
公开(公告)日：2006-03-21
申请号：US10162322
申请日：2002-06-04
申请人： Kok Wai Chan , Dennis A. Kiilerich
发明人： Kok Wai Chan , Dennis A. Kiilerich
IPC分类号： G06F17/30
CPC分类号： G06Q10/109 , G06Q10/06314 , G06Q50/22 , Y10S707/99931 , Y10S707/99942 , Y10S707/99953
摘要： A system and method for expanding recurring calendar events such that the retrieval of recurring calendar appointments is expedited. A recurring appointment is saved as a data structure including a recurrence pattern. When a recurring appointment is saved by a client that has sufficient processing and memory resources to perform the computations necessary to expand recurring appointments (i.e., a thick client), a background thread is notified. The background thread increases its priority to normal when idle processing capacity is available and calls a routine requesting calendar information for a defined time period. The routine causes the expansion of the data structure into the individual instances of the recurring appointment for a defined time period, and the individual instances are saved for later retrieval. A later query from a client without sufficient processing and memory resources to perform the calculations necessary to expand recurring appointments (i.e., a thin client), therefore, does not require that the expansion computations be performed contemporaneously.

15. 发明授权

US09544147B2 Model based multi-tier authentication 有权
标题翻译：基于模型的多层认证
公开(公告)号：US09544147B2
公开(公告)日：2017-01-10
申请号：US12470656
申请日：2009-05-22
申请人： Yordan I. Rouskov , Wei-Qiang Michael Guo , Orville Charles McDonald , Ramu Movva , Kyle Stapley Young , Kok Wai Chan
发明人： Yordan I. Rouskov , Wei-Qiang Michael Guo , Orville Charles McDonald , Ramu Movva , Kyle Stapley Young , Kok Wai Chan
IPC分类号： G06F21/00 , H04L9/32 , G06F21/42 , H04W12/06
CPC分类号： H04L9/3234 , G06F21/42 , H04L9/3228 , H04L9/3271 , H04L63/105 , H04L63/205 , H04L2209/80 , H04L2463/082 , H04W12/06
摘要： Authentication is widely used to protect consumer data and computing services, such as email, document storage, and online banking. Current authentication models, such as those employed by online identity providers, may have limited options and configurations for authentication schemes. Accordingly, as provided herein, a model based authentication scheme may be configured based upon a policy and/or an authentication mechanism list. The policy may define the target resource, a user, a group the user belongs to, devices used to connect to the target resource, a service owning the target resource, etc. The authentication mechanism list may comprise predefined authentication mechanisms and/or user plug-in authentication mechanisms (e.g., user created authentication mechanism). Once the authentication scheme is configured, it may be enforced upon authentication requests from a user. Feedback may be provided to the user based upon patterns of usage of the target resource.
摘要翻译：认证广泛用于保护消费者数据和计算服务，如电子邮件，文档存储和网络银行。当前的身份验证模型，例如在线身份提供者使用的身份验证模型，可能具有有限的认证方案选项和配置。因此，如本文所提供的，基于模型的认证方案可以基于策略和/或认证机制列表来配置。策略可以定义目标资源，用户，用户所属的组，用于连接到目标资源的设备，拥有目标资源的服务等。认证机制列表可以包括预定义的认证机制和/或用户插件 - 认证机制（例如，用户创建的认证机制）。一旦认证方案被配置，它可以在来自用户的认证请求时被执行。可以基于目标资源的使用模式向用户提供反馈。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式