专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07251834B2 Filtering a permission set using permission requests associated with a code assembly 有权
标题翻译：使用与代码程序集相关联的权限请求过滤权限集
公开(公告)号：US07251834B2
公开(公告)日：2007-07-31
申请号：US11254839
申请日：2005-10-20
申请人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
发明人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
IPC分类号： G06F7/04 , G06F17/30 , G06K9/00 , H03M1/68 , H04K1/00 , H04L9/00 , H04L9/32
CPC分类号： G06F21/52
摘要： A security policy manager generates a permission grant set for a code assembly received from a resource location. The policy manager can execute in a computer system (e.g., a Web client) in combination with the verification module and class loader of the run-time environment. The permission grant set generated for a code assembly is applied in the run-time call stack to help the system determine whether a given system operation by the code assembly is authorized. A permission request set may also be received in association with the code assembly. The permission request set may include a minimum request set, specifying permissions required by the code assembly to run properly. The permission request set may also include an optional request set, specifying permissions requested by the code assembly to provide an alternative level of functionality. In addition, the permission request set may include a refuse request set, specifying permissions that are not to be granted to the code assembly. The permission requests are used to filter a permission set to generate a permission grant set.
摘要翻译：安全策略管理器为从资源位置接收到的代码集合生成许可权授予集。策略管理器可以与计算机系统（例如，Web客户机）一起在运行时环境的验证模块和类加载器的组合中执行。为代码组合生成的许可授权集合被应用于运行时调用堆栈中，以帮助系统确定代码组件的给定系统操作是否被授权。还可以与代码组合相关联地接收许可请求集合。许可请求集可以包括最小请求集，指定代码组件正确运行所需的权限。许可请求集还可以包括可选的请求集合，指定代码组件请求的许可以提供替代级别的功能。此外，许可请求集合可以包括垃圾请求集合，指定不被授予代码组件的权限。权限请求用于过滤权限集以生成权限授予集。

2. 发明授权

US07310822B2 Filtering a permission set using permission requests associated with a code assembly 有权
公开(公告)号：US07310822B2
公开(公告)日：2007-12-18
申请号：US11272639
申请日：2005-11-14
申请人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
发明人： Brian A. LaMacchia , Loren M. Kohnfelder , Gregory D. Fee , Michael J. Toutonghi
IPC分类号： G06F7/04 , G06F17/30 , G06K9/00 , H03M1/58 , H04K1/00 , H04L9/00 , H04L9/32
CPC分类号： G06F21/52
摘要： A security policy manager generates a permission grant set for a code assembly received from a resource location. The policy manager can execute in a computer system (e.g., a Web client) in combination with the verification module and class loader of the run-time environment. The permission grant set generated for a code assembly is applied in the run-time call stack to help the system determine whether a given system operation by the code assembly is authorized. A permission request set may also be received in association with the code assembly. The permission request set may include a minimum request set, specifying permissions required by the code assembly to run properly. The permission request set may also include an optional request set, specifying permissions requested by the code assembly to provide an alternative level of functionality. In addition, the permission request set may include a refuse request set, specifying permissions that are not to be granted to the code assembly. The permission requests are used to filter a permission set to generate a permission grant set.

6. 发明申请

US20070300285A1 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US20070300285A1
公开(公告)日：2007-12-27
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

7. 发明授权

US08024770B2 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US08024770B2
公开(公告)日：2011-09-20
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00 , H04L9/32 , G06F7/04
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

8. 发明申请

US20080066147A1 Composable Security Policies 审中-公开
标题翻译：可组合的安全策略
公开(公告)号：US20080066147A1
公开(公告)日：2008-03-13
申请号：US11530543
申请日：2006-09-11
申请人： Blair B. Dillaway , Brian A. LaMacchia , Gregory D. Fee
发明人： Blair B. Dillaway , Brian A. LaMacchia , Gregory D. Fee
IPC分类号： G06F17/00
CPC分类号： G06F21/6236 , G06F2221/2101 , G06F2221/2141
摘要： Composable security policies enable multiple authorization policies to be combined into a composed effective authorization policy such that policy authoring rights may be arbitrarily and flexibly delegated. In an example implementation, making an authorization decision based on a composed effective policy is described. In another example implementation, the delegation of policy authoring rights using an assertion in accordance with a security language is described. In yet another example implementation, a security authorization system is described that includes a mechanism enabling an administrator to explicitly grant all or a part of policy authoring rights to another administrator.
摘要翻译：可组合的安全策略使得多个授权策略可以组合成一个有效的授权策略，从而可以任意和灵活地授权策略创作权限。在示例实现中，描述基于组合的有效策略进行授权决定。在另一个示例实施中，描述了使用根据安全语言的断言来授权策略创作权限。在另一个示例实现中，描述了安全授权系统，其包括使得管理员能够向另一个管理员显式地授予策略创作权限的全部或一部分的机制。

9. 发明授权

US08607311B2 Delegation in logic-based access control 有权
标题翻译：基于逻辑的访问控制委托
公开(公告)号：US08607311B2
公开(公告)日：2013-12-10
申请号：US11962761
申请日：2007-12-21
申请人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , John M. Leen , Jason F. Mackay
发明人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , John M. Leen , Jason F. Mackay
IPC分类号： G06F7/04 , G06F17/30 , G06F12/00 , H04L29/06
CPC分类号： G06F21/6218
摘要： Access to a resource may be controlled by a policy, such that a request to access the resource is either granted or denied based on what assertions have been made by various principals. To find the assertions that support a grant of access to the resource, a template may be created that defines the nature of assertions that would cause access to succeed. Assertions may be stored in the form of tokens. The template may be used to search an existing token store to find assertions that have been made, and/or to generate assertions that have not been found in the token store and that would satisfy the template. The assertions in the template may be created by performing an abductive reasoning process on an access query.
摘要翻译：可以通过策略来控制对资源的访问，使得根据各个主体所做的断言来授予或拒绝访问资源的请求。要查找支持资源访问权限的断言，可以创建一个模板，该模板定义了导致访问成功的断言的性质。断言可以以令牌的形式存储。该模板可以用于搜索现有的令牌存储以找到已经做出的断言和/或生成在令牌存储器中尚未发现并且将满足模板的断言。可以通过在访问查询上执行引用推理过程来创建模板中的断言。

10. 发明授权

US08584124B2 Methods and systems for batch processing in an on-demand service environment 有权
标题翻译：在按需服务环境中批量处理的方法和系统
公开(公告)号：US08584124B2
公开(公告)日：2013-11-12
申请号：US13076794
申请日：2011-03-31
申请人： Gregory D. Fee , William J Gallagher
发明人： Gregory D. Fee , William J Gallagher
IPC分类号： G06F9/455 , G06F7/00
CPC分类号： G06F9/466 , G06F9/4843 , G06F2209/5013
摘要： In accordance with embodiments disclosed herein, there are provided mechanisms and methods for batch processing in an on-demand service environment. For example, in one embodiment, mechanisms include receiving a processing request for a multi-tenant database, in which the processing request specifies processing logic and a processing target group within the multi-tenant database. Such an embodiment further includes dividing or chunking the processing target group into a plurality of processing target sub-groups, queuing the processing request with a batch processing queue for the multi-tenant database among a plurality of previously queued processing requests, and releasing each of the plurality of processing target sub-groups for processing in the multi-tenant database via the processing logic at one or more times specified by the batch processing queue.
摘要翻译：根据本文公开的实施例，提供了在按需服务环境中批量处理的机构和方法。例如，在一个实施例中，机制包括接收对多租户数据库的处理请求，其中处理请求指定处理逻辑和多租户数据库内的处理目标组。这样的实施例还包括将处理对象组划分或分块成多个处理对象子组，在多个先前排队的处理请求之间对多租户数据库的批处理队列进行排队处理请求，多个处理目标子组，用于经由处理逻辑在多租户数据库中处理由批处理队列指定的一个或多个时间。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式