专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090300605A1 VIRTUAL COMPUTING INFRASTRUCTURE 有权
标题翻译：虚拟计算基础设施
公开(公告)号：US20090300605A1
公开(公告)日：2009-12-03
申请号：US11718196
申请日：2005-10-28
申请人： Nigel John Edwards , Adrian Baldwin , Patrick Goldsack , Antonio Lain
发明人： Nigel John Edwards , Adrian Baldwin , Patrick Goldsack , Antonio Lain
IPC分类号： G06F9/455 , G06F9/50
CPC分类号： G06F9/5077 , G06F9/45558 , G06F2009/45562 , G06F2009/45575
摘要： A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Each virtual infrastructure can be passivated by suspending applications, stopping operating systems, and storing state, to enable later reactivation. This is simpler for a complete virtual infrastructure than for groups of virtual entities and physical entities. It enables cloned virtual infrastructure to be created for testing, upgrading or sharing without risk to the parent. On failure, reversion to a previous working clone is feasible.
摘要翻译：系统具有映射到用于处理，存储和网络通信的物理资源的虚拟覆盖基础设施，虚拟基础设施具有用于处理，存储和网络通信的虚拟实体。每个虚拟基础设施可以通过挂起应用程序，停止操作系统和存储状态来钝化，以便稍后重新启动。与虚拟实体和物理实体的组相比，这对于完整的虚拟基础设施来说更简单。它可以创建克隆的虚拟基础架构，用于测试，升级或共享，而不会对父级造成风险。失败后，回复到以前的工作克隆是可行的。

2. 发明授权

US07444666B2 Multi-domain authorization and authentication 有权
标题翻译：多域授权和认证
公开(公告)号：US07444666B2
公开(公告)日：2008-10-28
申请号：US10202816
申请日：2002-07-25
申请人： Nigel John Edwards , Jason Rouault
发明人： Nigel John Edwards , Jason Rouault
IPC分类号： H04L9/00 , G06F17/00 , H04K1/00
CPC分类号： H04L63/102 , H04L63/0815
摘要： A method of multi-domain authorization/authentication on a computer network comprises: a user making a request to a policy enforcement point of a computer for access to information on the computer; providing a location address for a user's authorization and/or authentication information, a policy decision point of the service on the computer network then verifying the authorization/authentication information; and the user being given access by the PEP to the information or the service requested, if the request is accepted, wherein the user's authorization/authentication and/or further information is located on a meta policy decision point (MPDP).
摘要翻译：一种在计算机网络上进行多域授权/认证的方法包括：用户向计算机的策略执行点发出请求以访问计算机上的信息; 提供用户的授权和/或认证信息的位置地址，计算机网络上的服务的策略决策点，然后验证授权/认证信息; 并且如果所述请求被接受，则所述用户被所述PEP访问所述信息或所请求的服务，其中所述用户的授权/认证和/或其他信息位于元策略决策点（MPDP）。

3. 发明申请

US20090241108A1 VIRTUAL COMPUTING INFRASTRUCTURE 有权
标题翻译：虚拟计算基础设施
公开(公告)号：US20090241108A1
公开(公告)日：2009-09-24
申请号：US11718122
申请日：2005-10-28
申请人： Nigel John Edwards , Patrick Goldsack , Antonio Lain , Adrian John Baldwin
发明人： Nigel John Edwards , Patrick Goldsack , Antonio Lain , Adrian John Baldwin
IPC分类号： G06F9/455
CPC分类号： H04L63/10 , G06F9/45533 , G06F9/45558 , G06F21/604
摘要： A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Virtual infrastructures of different users share physical resources but are isolated. Each infrastructure has its own infrastructure controller to create and configure the infrastructure. It has a user accessible part (CFC) for configuration of that user's infrastructure, and a user inaccessible part (UFC) able to access the mapping and the physical resources. This increases user control to ease system administration, while maintaining security by limiting access to the mapping.
摘要翻译：系统具有映射到用于处理，存储和网络通信的物理资源的虚拟覆盖基础设施，虚拟基础设施具有用于处理，存储和网络通信的虚拟实体。不同用户的虚拟基础架构共享物理资源，但是是孤立的。每个基础设施都有自己的基础设施控制器来创建和配置基础架构。它具有用于配置该用户基础设施的用户可访问部分（CFC），以及能够访问映射和物理资源的用户无法访问的部分（UFC）。这增加了用户控制以简化系统管理，同时通过限制对映射的访问来保持安全性。

4. 发明申请

US20110119748A1 VIRTUAL COMPUTING INFRASTRUCTURE 有权
标题翻译：虚拟计算基础设施
公开(公告)号：US20110119748A1
公开(公告)日：2011-05-19
申请号：US11718126
申请日：2005-10-28
申请人： Nigel John Edwards , Christopher I. Dalton
发明人： Nigel John Edwards , Christopher I. Dalton
IPC分类号： G06F21/20 , G06F9/455
CPC分类号： G06F9/5077 , G06F9/45558 , G06F2009/45583
摘要： A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Virtual infrastructures of different users share physical resources but are isolated and have their own management entities. An interface between infrastructures allows controlled relaxation of the isolation, using a gateway between virtual nets, or shared virtual storage devices. This can allow businesses to share data or applications, while maintaining control of security.
摘要翻译：系统具有映射到用于处理，存储和网络通信的物理资源的虚拟覆盖基础设施，虚拟基础设施具有用于处理，存储和网络通信的虚拟实体。不同用户的虚拟基础设施共享物理资源，但是是孤立的，并拥有自己的管理实体。基础架构之间的接口允许使用虚拟网络或共享虚拟存储设备之间的网关来控制放宽隔离。这可以允许企业共享数据或应用程序，同时保持对安全性的控制。

5. 发明授权

US06981265B1 Object gateway for securely forwarding messages between networks 失效
标题翻译：用于在网络之间安全转发消息的对象网关
公开(公告)号：US06981265B1
公开(公告)日：2005-12-27
申请号：US09555465
申请日：1998-12-04
申请人： Robert Thomas Owen Rees , Nigel John Edwards
发明人： Robert Thomas Owen Rees , Nigel John Edwards
IPC分类号： G06F9/46 , H04L29/06 , H04L29/08
CPC分类号： H04L63/02 , G06F9/548 , H04L29/06 , H04L63/0218 , H04L63/0236 , H04L63/0245 , H04L63/0281 , H04L63/029 , H04L63/10 , H04L63/102 , H04L63/104 , H04L63/168 , H04L67/10 , H04L67/16 , H04L67/2804 , H04L67/2814 , H04L67/2819 , H04L67/2823 , H04L67/42 , H04L69/329
摘要： A network gateway (1005) is described, wherein an object invocation (1020) containing an embedded object reference (1025), which points to a further object (1002), is modified on passing through the gateway. The gateway validates the object invocation and enacts a number of security tests thereon before forwarding it on. In preferred embodiments, the embedded object reference is replaced by an object reference (1035) to a gateway proxy specifically for the further object (1002). The replacement object reference (1035) also includes enough information that the original object reference (1025) can be recovered. The gateway proxy is generated on or after receipt of the invocation (1020). In the event the further object (1002), which was the subject of the object reference, is itself invoked, the invocation is directed to the gateway proxy, which in turn recovers the original object reference and forwards the invocation on to the further object (1002).
摘要翻译：描述网络网关（1005），其中在通过网关时修改包含指向另一个对象（1002）的嵌入对象引用（1025）的对象调用（1020）。该网关验证对象调用，并在发送对象之前对其进行一些安全测试。在优选实施例中，嵌入对象引用被对象引用（1035）替换为专门用于另外的对象（1002）的网关代理。替换对象引用（1035）还包括可以恢复原始对象引用（1025）的足够信息。网关代理在接收到调用之后或之后生成（1020）。在作为对象引用的主题的另外的对象（1002）本身被调用的情况下，调用被引导到网关代理，网关代理又恢复原始对象引用并将调用转发到另外的对象（ 1002）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式