专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US07810153B2 Controlling execution of computer applications 有权
标题翻译：控制计算机应用程序的执行
公开(公告)号：US07810153B2
公开(公告)日：2010-10-05
申请号：US11046607
申请日：2005-01-28
申请人： Eric C. Perlin , Klaus U. Schutz , Paul J. Leach , Peter T. Brundrett , Thomas C. Jones
发明人： Eric C. Perlin , Klaus U. Schutz , Paul J. Leach , Peter T. Brundrett , Thomas C. Jones
IPC分类号： G06F7/04 , G06F12/00 , G06F12/14 , G06F13/00 , G06F17/30
CPC分类号： G06F21/62 , G06F21/31 , G06F21/54 , G06F2221/2141
摘要： Systems and methods are described that control attempts made by an application to access data. In one embodiment, the application is associated with a security token that includes an application ID. In operation, the system receives a request, initiated by the application, for access to the data. The system is configured to evaluate the request for access based in part on comparison of the security token and a listing of approved application IDs associated with the data.
摘要翻译：描述了控制由应用访问数据的尝试的系统和方法。在一个实施例中，该应用与包括应用ID的安全令牌相关联。在操作中，系统接收由应用程序发起的用于访问数据的请求。该系统被配置为基于安全令牌的比较和与数据相关联的已批准应用ID的列表来部分地评估访问请求。

22. 发明申请

US20100100953A1 PassThru for Client Authentication 有权
标题翻译： PassThru进行客户端验证
公开(公告)号：US20100100953A1
公开(公告)日：2010-04-22
申请号：US12647327
申请日：2009-12-24
申请人： David R. Mowers , John Banes , Daniel R. Simon , Paul J. Leach
发明人： David R. Mowers , John Banes , Daniel R. Simon , Paul J. Leach
IPC分类号： H04L9/32 , H04L9/00
CPC分类号： H04L63/08 , H04L63/0442 , H04L63/0807 , H04L63/0869 , H04L63/10 , H04L63/12 , H04L63/166 , H04L67/42
摘要： This disclosure pertains generally to client authentication. One aspect of the disclosure relates to a first server for presenting evidence to a Domain Controller (DC) of a first authentication context being submitted from a client to the first server to obtain a delegable credential, wherein the credential can be used to request a second authentication context from that client to a second server. Another aspect relates to the first server providing a pass-thru with evidence to a DC. The evidence relates to a first authentication context being submitted from a client to the first server that it obtained a delegable credential. The pass-thru is used in combination with the credential to request a second authentication context from the client to a second server.
摘要翻译：本公开通常涉及客户端认证。本公开的一个方面涉及一种用于向第一认证上下文的域控制器（DC）呈现证据的第一服务器，该第一认证上下文从客户端提交到第一服务器以获得可委托的证书，其中该凭证可用于请求第二认证上下文认证上下文从该客户端到第二个服务器。另一方面涉及第一台服务器向DC提供证据。证据涉及从客户端向第一服务器提交的第一个身份验证上下文，它获取了一个可委托凭证。通过与凭证组合使用以从客户端请求第二认证上下文到第二服务器。

23. 发明授权

US07617522B2 Authentication and authorization across autonomous network systems 有权
标题翻译：跨自治网络系统的认证和授权
公开(公告)号：US07617522B2
公开(公告)日：2009-11-10
申请号：US11379998
申请日：2006-04-24
申请人： Donald E. Schmidt , Clifford P. Van Dyke , Paul J. Leach , Praerit Garg , Murli D. Satagopan
发明人： Donald E. Schmidt , Clifford P. Van Dyke , Paul J. Leach , Praerit Garg , Murli D. Satagopan
IPC分类号： G06F17/00 , H04K1/00
CPC分类号： H04L63/0815 , H04L63/083
摘要： An enterprise network architecture has a trust link established between two autonomous network systems that enables transitive resource access between network domains of the two network systems. The trust link is defined by data structures maintained by each of the respective network systems. The first network system maintains namespaces that correspond to the second network system and a domain controller in the first network system, or a first network system administrator, indicates whether to trust individual namespaces. An account managed by a domain in the second network system can request authentication via a domain controller in the first network system. The first network system determines from the trust link to communicate the authentication request to the second network system. The first network system also determines from the trust link where to communicate authorization requests when administrators manage group memberships and access control lists.
摘要翻译：企业网络架构具有建立在两个自主网络系统之间的信任链路，能够实现两个网络系统的网络域之间的传递资源访问。信任链接由相应网络系统中的每一个维护的数据结构来定义。第一网络系统维护对应于第二网络系统的命名空间和第一网络系统中的域控制器，或者第一网络系统管理员指示是否信任个体命名空间。由第二网络系统中的域管理的帐户可以通过第一网络系统中的域控制器请求认证。第一网络系统从信任链路确定将认证请求传送到第二网络系统。当管理员管理组成员身份和访问控制列表时，第一个网络系统还从信任链接确定何处传达授权请求。

24. 发明申请

US20080313712A1 TRANSFORMATION OF SEQUENTIAL ACCESS CONTROL LISTS UTILIZING CERTIFICATES 有权
标题翻译：使用证书的顺序访问控制列表的转换
公开(公告)号：US20080313712A1
公开(公告)日：2008-12-18
申请号：US11764034
申请日：2007-06-15
申请人： Carl Melvin Ellison , Paul J. Leach , Butler Wright Lampson , Melissa W. Dunn , Ravindra Nath Pandya , Charles William Kaufman
发明人： Carl Melvin Ellison , Paul J. Leach , Butler Wright Lampson , Melissa W. Dunn , Ravindra Nath Pandya , Charles William Kaufman
IPC分类号： H04L9/32
CPC分类号： H04L63/101 , H04L63/0823
摘要： The subject disclosure pertains to systems and methods that facilitate managing access control utilizing certificates. The systems and methods described herein are directed to mapping an access policy as expressed in an access control list to a set of certificates. The set of certificates can be used to grant access to resources in the manner described by the ACL. The certificates can be distributed to entities for use in obtaining access to resources. Entities can present certificates to resources as evidence of their right to access the resources. The access logic of the sequential ACL can be transformed or mapped to a set of order independent certificates. In particular, each entry, position of the entry in the list and any preceding entries can be analyzed. The analysis can be used to generate order independent certificates that provide access in accordance with the access policy communicated in the ACL.
摘要翻译：本发明涉及利用证书来管理访问控制的系统和方法。本文描述的系统和方法旨在将访问控制列表中表示的访问策略映射到一组证书。该证书集可用于以ACL所描述的方式授予对资源的访问权限。证书可以分发给实体以用于获取资源访问。实体可以向资源提供证书，作为获取资源的权利的证据。顺序ACL的访问逻辑可以转换或映射到一组与订单无关的证书。特别地，可以分析每个条目，列表中的条目的位置和任何前面的条目。该分析可用于生成根据ACL中传达的访问策略提供访问权限的独立凭证。

25. 发明申请

US20070283443A1 Translating role-based access control policy to resource authorization policy 有权
标题翻译：将基于角色的访问控制策略转换为资源授权策略
公开(公告)号：US20070283443A1
公开(公告)日：2007-12-06
申请号：US11443638
申请日：2006-05-30
申请人： Dave McPherson , Muthukrishnan Paramasivam , Paul J. Leach
发明人： Dave McPherson , Muthukrishnan Paramasivam , Paul J. Leach
IPC分类号： H04L9/32 , H04N7/16 , H04L9/00 , G06K9/00 , G06F17/30 , G06F7/04 , H03M1/68 , H04K1/00
CPC分类号： G06F21/6218
摘要： Translation of role-based authoring models for managing RBAC “roles” to resource authorization policy (RAP), such as ACL-based applications, is provided. A generic RBAC system is defined from which mappings to other authorization enforcement mechanism make possible the translation of RBAC “roles” to resource authorization policies applied to resources managed by a resource manager, e.g., a file system resource manager. An implementation is described that uses Windows Authorization Manager as a storage mechanism and object model to manage object types and relationships translated from an RBAC system.
摘要翻译：提供了基于角色的创作模式，用于将RBAC“角色”转换为资源授权策略（RAP），如基于ACL的应用程序。定义了一个通用的RBAC系统，其中与其他授权执行机制的映射使RBAC“角色”能够应用于资源管理器（例如，文件系统资源管理器）管理的资源的资源授权策略成为可能。描述了使用Windows Authorization Manager作为存储机制和对象模型来管理从RBAC系统转换的对象类型和关系的实现。

26. 发明授权

US07062539B2 Using state information in a distributed environment 有权
公开(公告)号：US07062539B2
公开(公告)日：2006-06-13
申请号：US10968731
申请日：2004-10-19
申请人： Paul J. Leach , Chris Kaler , Ferhan Elvanoglu , Mark H. Lucovsky , Shaun D. Pierce
发明人： Paul J. Leach , Chris Kaler , Ferhan Elvanoglu , Mark H. Lucovsky , Shaun D. Pierce
IPC分类号： G06F15/16
CPC分类号： G06F21/6218 , G06F21/6227 , G06F21/6245 , G06Q10/109 , H04L12/1859 , H04L12/1863 , H04L67/02 , H04L67/142 , H04L67/16 , H04L67/2804 , H04L67/288 , H04L67/303 , H04L67/306 , H04L67/325 , H04L67/40 , H04L67/42 , H04L69/329
摘要： Processing a response to a network request using information that was transplanted into the response from a specific portion of the request. A requesting computer system generates an electronic request that includes the specific portion. The requesting computer system then submits the request to a responding computer system, which processes the request to form a response to the request. During processing of the request, the responding system transplants the specific portion of the request to the response. The responding computer system then transmits the response to the request to a processing computer system that processes the request. The processing computer system receives the response and extracts the information from the specific portion of the response. The processing computer system then uses the extracted information to process the request.

27. 发明授权

US06892230B1 Dynamic self-configuration for ad hoc peer networking using mark-up language formated description messages 有权
标题翻译：使用标记语言形成的描述消息的ad hoc对等网络的动态自配置
公开(公告)号：US06892230B1
公开(公告)日：2005-05-10
申请号：US09496318
申请日：2000-02-01
申请人： Ye Gu , Peter S. Ford , Holly Knight , Yaron Y. Goland , Paul J. Leach
发明人： Ye Gu , Peter S. Ford , Holly Knight , Yaron Y. Goland , Paul J. Leach
IPC分类号： H04L12/28 , H04L12/46 , H04L12/56 , H04L29/06 , H04L29/08 , H04L29/12 , G06F15/177
CPC分类号： H04L67/16 , H04L12/2805 , H04L12/2809 , H04L12/2856 , H04L12/2898 , H04L12/4633 , H04L29/12235 , H04L29/1232 , H04L29/12594 , H04L47/2408 , H04L61/2023 , H04L61/2092 , H04L61/303 , H04L67/02 , H04L67/025 , H04L67/125 , H04L67/14 , H04L69/329
摘要： A device control model provides an integrated set of addressing, naming, discovery and description processes that enables automatic, dynamic and ad-hoc self-setup by devices to interoperate with other devices on a network. This permits a computing device when introduced into a network to automatically configure so as to connect and interact with other computing devices available on the network, without a user installation experience and without downloading driver software or persisting a configuration setup for connecting and interacting with such other computing devices. Upon completing interaction with such other devices, the computing device automatically releases the setup for such other devices so as to avoid persistent device configurations that might create a configuration maintenance and management burden.
摘要翻译：设备控制模型提供了一套集成的寻址，命名，发现和描述过程，使设备能够自动，动态和自组织自我设置，以与网络上的其他设备进行互操作。这允许计算设备被引入到网络中以自动配置以便连接并与网络上可用的其他计算设备进行交互，而无需用户安装体验，并且不下载驱动程序软件或者持续配置设置来连接和与这些其他设备进行交互计算设备。在完成与这样的其他设备的交互时，计算设备自动释放这些其他设备的设置，以避免可能产生配置维护和管理负担的持续设备配置。

28. 发明授权

US06324182B1 Pull based, intelligent caching system and method 有权
标题翻译：智能缓存系统和方法
公开(公告)号：US06324182B1
公开(公告)日：2001-11-27
申请号：US09266439
申请日：1999-03-11
申请人： Gregory Burns , Paul J. Leach
发明人： Gregory Burns , Paul J. Leach
IPC分类号： H04L1202
CPC分类号： H04L65/4084 , G06F17/30902 , H04B7/18582 , H04L29/06 , H04L29/06027 , H04L67/2819 , H04L67/2847 , H04L67/2852 , H04L67/325 , H04L69/329
摘要： A network system includes a content provider connected to local service providers via an interactive distribution network, such as the Internet. The local service providers facilitate delivery of the content from the content provider to multiple subscribers. The local service providers schedule delivery of frequently requested content from the content provider prior to a peak time when the subscribers are likely to request the content. The content is downloaded from the content provider during the off-peak hours and cached at the local service providers for serving to the subscribers during the ensuing peak time. In this manner, the frequently requested content is already present at the local service providers and ready to be served to the subscribers before they actually request it. When the content is finally requested, the data is streamed continuously in real-time for just-in-time rendering at the subscribers computer. Another aspect of this invention involves supplementing content delivery over the Internet with delivery of content over a secondary network, such as a broadcast satellite network. The supplemental broadcast link offers additional bandwidth at a fraction of the cost that would be incurred if the local service provider installed additional Internet connections, such as T1 or T3 connections.
摘要翻译：网络系统包括经由诸如因特网的交互式分发网络连接到本地服务提供商的内容提供商。本地服务提供商便于将内容从内容提供商传递到多个订阅者。本地服务提供商在用户可能请求内容的高峰时间之前从内容提供商调度经常请求的内容的传送。在非高峰时段，内容从内容提供商下载，并在随后的高峰时段缓存在本地服务提供商处供服务。以这种方式，频繁请求的内容已经存在于本地服务提供商处，并且在其实际请求之前准备被发送给订户。当最终请求内容时，数据将在用户计算机上实时连续流式传输以便及时呈现。本发明的另一方面涉及通过诸如广播卫星网络的辅助网络上的内容传送来补充因特网上的内容传送。如果本地服务提供商安装了诸如T1或T3连接的其他互联网连接，补充广播链路将以一小部分成本提供额外的带宽。

29. 发明授权

US06275496B1 Content provider for pull based intelligent caching system 有权
公开(公告)号：US06275496B1
公开(公告)日：2001-08-14
申请号：US09260933
申请日：1999-03-02
申请人： Gregory Burns , Paul J. Leach
发明人： Gregory Burns , Paul J. Leach
IPC分类号： H04L1256
CPC分类号： H04L65/4084 , G06F17/30902 , H04B7/18582 , H04L29/06 , H04L29/06027 , H04L67/2819 , H04L67/2847 , H04L67/2852 , H04L67/325 , H04L69/329
摘要： A network system includes a content provider connected to local service providers via an interactive distribution network, such as the Internet. The local service providers facilitate delivery of the content from the content provider to multiple subscribers. The local service providers schedule delivery of frequently requested content from the content provider prior to a peak time when the subscribers are likely to request the content. The content is downloaded from the content provider during the off-peak hours and cached at the local service providers for serving to the subscribers during the ensuing peak time. In this manner, the frequently requested content is already present at the local service providers and ready to be served to the subscribers before they actually request it. When the content is finally requested, the data is streamed continuously in real-time for just-in-time rendering at the subscriber computer. Another aspect of this invention involves supplementing content delivery over the Internet with delivery of content over a secondary network, such as a broadcast satellite network. The supplemental broadcast link offers additional bandwidth at a fraction of the cost that would be incurred if the local service provider installed additional Internet connections, such as T1 or T3 connections.

30. 发明授权

US09118672B2 Back-end constrained delegation model 有权
标题翻译：后端约束委托模型
公开(公告)号：US09118672B2
公开(公告)日：2015-08-25
申请号：US12965445
申请日：2010-12-10
申请人： Mark Fishel Novak , Paul J. Leach , Liqiang Zhu , Paul J. Miller , Alexandru Hanganu , Yi Zeng , Jeremy Dominic Viegas , K. Michiko Short
发明人： Mark Fishel Novak , Paul J. Leach , Liqiang Zhu , Paul J. Miller , Alexandru Hanganu , Yi Zeng , Jeremy Dominic Viegas , K. Michiko Short
IPC分类号： G06F7/04 , H04L29/06 , H04L9/32
CPC分类号： H04L63/0884 , H04L9/3213 , H04L63/0807
摘要： A client can communicate with a middle tier, which can then, in turn, communicate with a back end tier to access information and resources on behalf of the client within the context of a system that can scale well. Each individual back end can establish a policy that defines which computing device can delegate to that back end. That policy can be enforced by a domain controller within the same administrative domain as the particular back end. When a middle tier requests to delegate to a back end, the domain controller to which that request was directed can either apply the policy, or, if the domain controller is in a different domain than the targeted back end, it can direct the middle tier to a domain controller in a different domain and can sign relevant information that the middle tier can utilize when communicating with that different domain controller.
摘要翻译：客户端可以与中间层进行通信，然后可以与后端层进行通信，以便在可以扩展的系统的上下文中代表客户端访问信息和资源。每个单独的后端可以建立一个策略，定义哪个计算设备可以委托给该后端。该策略可以由与特定后端相同的管理域中的域控制器实施。当中间层请求委托给后端时，该请求所针对的域控制器可以应用策略，或者如果域控制器位于与目标后端不同的域中，则可以将中间层到不同域中的域控制器，并且可以签署中间层在与该不同域控制器通信时可以利用的相关信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式