专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090204690A1 IDENTIFYING A LOCATION OF A SERVER 有权
标题翻译：识别服务器的位置
公开(公告)号：US20090204690A1
公开(公告)日：2009-08-13
申请号：US12367573
申请日：2009-02-09
申请人： Daniel Nikolaus Bauer , Christopher J. Giblin , John G. Rooney
发明人： Daniel Nikolaus Bauer , Christopher J. Giblin , John G. Rooney
IPC分类号： G06F15/16
CPC分类号： H04L63/1441 , H04L63/1483 , H04L67/18 , H04W4/02
摘要： A method for identifying a geographic location of a server. A request is delivered to the server to send back a message via a cellular network; the message of the server is received via a cell of the cellular network; cell location information about the geographic location of the cell that received the message is delivered; the cell location information is used as information about the geographic location of the server.
摘要翻译：一种用于识别服务器的地理位置的方法。向服务器发送请求，通过蜂窝网络发回消息; 经由蜂窝网络的小区接收服务器的消息; 传送关于接收到消息的小区的地理位置的小区位置信息; 小区位置信息被用作关于服务器的地理位置的信息。

2. 发明授权

US08990349B2 Identifying a location of a server 有权
标题翻译：识别服务器的位置
公开(公告)号：US08990349B2
公开(公告)日：2015-03-24
申请号：US12367573
申请日：2009-02-09
申请人： Daniel Nikolaus Bauer , Christopher J. Giblin , John G. Rooney
发明人： Daniel Nikolaus Bauer , Christopher J. Giblin , John G. Rooney
IPC分类号： G06F15/16 , H04L29/06 , H04W4/02 , H04L29/08
CPC分类号： H04L63/1441 , H04L63/1483 , H04L67/18 , H04W4/02
摘要： A method for identifying a geographic location of a server. A request is delivered to the server to send back a message via a cellular network; the message of the server is received via a cell of the cellular network; cell location information about the geographic location of the cell that received the message is delivered; the cell location information is used as information about the geographic location of the server.
摘要翻译：一种用于识别服务器的地理位置的方法。向服务器发送请求，通过蜂窝网络发回消息; 经由蜂窝网络的小区接收服务器的消息; 传送关于接收到消息的小区的地理位置的小区位置信息; 小区位置信息被用作关于服务器的地理位置的信息。

3. 发明授权

US08782173B2 Auditable distribution of a data file 失效
公开(公告)号：US08782173B2
公开(公告)日：2014-07-15
申请号：US13070429
申请日：2011-03-23
申请人： John G. Rooney , Christopher J. Giblin
发明人： John G. Rooney , Christopher J. Giblin
IPC分类号： G06F15/16
CPC分类号： H04L67/10 , H04L67/06
摘要： Auditable data distribution from a server to clients is achieved as follows. The server delivers chunks of a data file, and identifiers of the chunks, to the clients. For each chunk of the data file received by the clients, a digest is generated by the client that received the chunk, using at least a part of the chunk and further data of the client that received the chunk. The further data is known to the server. The client that received this chunk sends the digest to the server, which receives the digest. The server determines an identity of the clink that received the chunk in question, by comparing the digest to the chunks that the server has sent and to the further data known to the server. The server stores the identity of the client that received the chunk.

4. 发明申请

US20110238790A1 Auditable distribution of a data file 失效
标题翻译：可审计的数据文件分发
公开(公告)号：US20110238790A1
公开(公告)日：2011-09-29
申请号：US13070429
申请日：2011-03-23
申请人： John G. Rooney , Christopher J. Giblin
发明人： John G. Rooney , Christopher J. Giblin
IPC分类号： G06F15/16
CPC分类号： H04L67/10 , H04L67/06
摘要： Auditable data distribution from a server to clients is achieved as follows. The server delivers chunks of a data file, and identifiers of the chunks, to the clients. For each chunk of the data file received by the clients, a digest is generated by the client that received the chunk, using at least a part of the chunk and further data of the client that received the chunk. The further data is known to the server. The client that received this chunk sends the digest to the server, which receives the digest. The server determines an identity of the clink that received the chunk in question, by comparing the digest to the chunks that the server has sent and to the further data known to the server. The server stores the identity of the client that received the chunk.
摘要翻译：从服务器到客户端的可审计数据分发实现如下。服务器将数据文件块和块的标识符传递给客户端。对于客户端接收的数据文件的每个块，使用接收块的客户端的至少一部分和其他数据，由接收到块的客户端生成摘要。另外的数据是服务器已知的。收到此块的客户端会将摘要发送到接收摘要的服务器。服务器通过将摘要与服务器发送的块以及服务器已知的其他数据进行比较来确定接收到该块的叮咬的身份。服务器存储收到该块的客户端的身份。

5. 发明申请

US20080271146A1 Identifying a distributed denial of service (DDoS) attack within a network and defending against such an attack 失效
标题翻译：识别网络中的分布式拒绝服务（DDoS）攻击并防范此类攻击
公开(公告)号：US20080271146A1
公开(公告)日：2008-10-30
申请号：US12126976
申请日：2008-05-26
申请人： John G. Rooney , Christopher J. Giblin , Marcel Waldvogel , Paul T. Hurley
发明人： John G. Rooney , Christopher J. Giblin , Marcel Waldvogel , Paul T. Hurley
IPC分类号： G06F21/00
CPC分类号： H04L63/1425 , H04L63/1458 , H04L2463/141
摘要： The invention provides methods, apparatus and systems for detecting distributed denial of service (DDoS) attacks within the Internet by sampling packets at a point or points in Internet backbone connections to determine a packet metric parameter. The packet metric parameter which might comprise the volume of packets received is analysed over selected time intervals with respect to specified geographical locations in which the hosts transmitting the packets are located. The expected behaviour can be employed to identify traffic distortions revealing a DDoS attack. In a complementary aspect, the invention provides a method of authenticating packets at routers in order to elevate the QoS of authenticated packets. This method can be used to block or filter packets and can be used in conjunction with the DDoS attack detection system to defend against DDoS attacks within the Internet in a distributed manner.
摘要翻译：本发明提供了通过在因特网骨干连接点或点采样分组来检测因特网内的分布式拒绝服务（DDoS）攻击的方法，装置和系统，以确定分组度量参数。可以根据发送分组的主机所在的指定地理位置的选定时间间隔分析可能包括接收到的分组量的分组度量参数。可以使用预期的行为来识别暴露DDoS攻击的流量扭曲。在互补的方面，本发明提供了一种在路由器上认证分组的方法，以便提高认证分组的QoS。该方法可用于阻止或过滤报文，并可与DDoS攻击检测系统结合使用，以分布式的方式防范互联网内的DDoS攻击。

6. 发明授权

US07921462B2 Identifying a distributed denial of service (DDOS) attack within a network and defending against such an attack 失效
标题翻译：识别网络中的分布式拒绝服务（DDOS）攻击，并防范此类攻击
公开(公告)号：US07921462B2
公开(公告)日：2011-04-05
申请号：US12126976
申请日：2008-05-26
申请人： John G. Rooney , Christopher J. Giblin , Marcel Waldvogel , Paul T. Hurley
发明人： John G. Rooney , Christopher J. Giblin , Marcel Waldvogel , Paul T. Hurley
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L63/1425 , H04L63/1458 , H04L2463/141
摘要： The invention provides methods, apparatus and systems for detecting distributed denial of service (DDoS) attacks within the Internet by sampling packets at a point or points in Internet backbone connections to determine a packet metric parameter. The packet metric parameter which might comprise the volume of packets received is analyzed over selected time intervals with respect to specified geographical locations in which the hosts transmitting the packets are located. The expected behavior can be employed to identify traffic distortions revealing a DDoS attack. In a complementary aspect, the invention provides a method of authenticating packets at routers in order to elevate the QoS of authenticated packets. This method can be used to block or filter packets and can be used in conjunction with the DDoS attack detection system to defend against DDoS attacks within the Internet in a distributed manner.
摘要翻译：本发明提供了通过在因特网骨干连接点或点采样分组来检测因特网内的分布式拒绝服务（DDoS）攻击的方法，装置和系统，以确定分组度量参数。可以根据发送分组的主机所在的指定地理位置的选定时间间隔分析可能包括接收到的分组量的分组度量参数。可以使用预期的行为来识别暴露DDoS攻击的流量扭曲。在互补的方面，本发明提供了一种在路由器上认证分组的方法，以便提高认证分组的QoS。该方法可用于阻止或过滤报文，并可与DDoS攻击检测系统结合使用，以分布式的方式防范互联网内的DDoS攻击。

7. 发明申请

US20090313136A1 Stateless Methods for Resource Hiding and Access Control Support Based on URI Encryption 审中-公开
标题翻译：基于URI加密的资源隐藏和访问控制支持的无状态方法
公开(公告)号：US20090313136A1
公开(公告)日：2009-12-17
申请号：US12544620
申请日：2009-08-20
申请人： Christopher J. Giblin , Tadeusz J. Pietraszek , James F. Riordan , Chris P. Vanden Berghe
发明人： Christopher J. Giblin , Tadeusz J. Pietraszek , James F. Riordan , Chris P. Vanden Berghe
IPC分类号： G06F15/16 , G06Q30/00
CPC分类号： H04L63/0428 , G06F16/955 , G06F21/602 , G06F21/6218 , G06Q30/0601 , H04L9/00 , H04L63/10 , H04L63/168 , H04L2209/56 , H04L2209/60
摘要： An apparatus and method are disclosed for enabling controlled access to resources at a resource provider server. The invention may encrypt or decrypt a portion of a uniform resource identifier (URI), according to a stateless method for hiding resources and/or providing access control support. Upon receipt of a URI having an encrypted portion, the invention decrypts the encrypted portion using a predetermined key to obtain a decrypted segment, extracts additional information from the decrypted segment and forms a decrypted URI, before the decrypted URI is forwarded to a resource producer server. The invention may also encrypt a URI from a resource provider server before it is sent to a client in response to a client request.
摘要翻译：公开了用于使得能够对资源提供商服务器处的资源进行受控访问的装置和方法。根据用于隐藏资源和/或提供访问控制支持的无状态方法，本发明可以对统一资源标识符（URI）的一部分进行加密或解密。在接收到具有加密部分的URI之后，本发明使用预定密钥解密加密部分以获得解密的段，在解密的URI被转发到资源生成器服务器之前从解密的段中提取附加信息并形成解密的URI 。本发明还可以在资源提供商服务器响应于客户端请求被发送到客户端之前加密URI。

8. 发明授权

US08688591B2 Anonymous separation of duties with credentials 失效
标题翻译：匿名分离职责与凭证
公开(公告)号：US08688591B2
公开(公告)日：2014-04-01
申请号：US12536874
申请日：2009-08-06
申请人： Jan L. Camenisch , Christopher J. Giblin , Thomas R. Gross , Guenter Karjoth
发明人： Jan L. Camenisch , Christopher J. Giblin , Thomas R. Gross , Guenter Karjoth
IPC分类号： G06Q20/00
CPC分类号： G06Q10/00 , G06Q10/063 , G06Q20/383 , G06Q30/018
摘要： A system for anonymous separation of duties with credentials includes an identity provider, the identity provider configured to issue anonymous credentials to a user based on one or more attributes of the user; a service provider, the service provider configured to issue a pseudonym to the user based on the user's anonymous credentials, and to associate the user's pseudonym with a step of an instance of a business process hosted on the service provider, the step being completed by the user; and an auditor, the auditor configured to determine if the completion of the step of the instance of the business process by the user is compliant with a separation of duties policy.
摘要翻译：用于凭借凭证匿名分离职责的系统包括身份提供者，身份提供者被配置为基于用户的一个或多个属性向用户发布匿名凭证; 服务提供商，所述服务提供商被配置为基于所述用户的匿名凭证向所述用户发布假名，并且将所述用户的假名与所述服务提供商上托管的业务流程的实例的步骤相关联，所述步骤由用户; 和审核员，审核员被配置为确定用户完成业务流程实例的步骤是否符合职责分离政策。

9. 发明申请

US20080313469A1 STATELESS METHODS FOR RESOURCE HIDING AND ACCESS CONTROL SUPPORT BASED ON URI ENCRYPTION 审中-公开
标题翻译：基于URI加密的资源隐藏和访问控制支持的无条件方法
公开(公告)号：US20080313469A1
公开(公告)日：2008-12-18
申请号：US12197231
申请日：2008-08-23
申请人： Christopher J. Giblin , Tadeusz J. Pietraszek , James F. Riordan , Chris P. Vanden Berghe
发明人： Christopher J. Giblin , Tadeusz J. Pietraszek , James F. Riordan , Chris P. Vanden Berghe
IPC分类号： H04L9/06
CPC分类号： H04L63/0428 , G06F16/955 , G06F21/602 , G06F21/6218 , G06Q30/0601 , H04L9/00 , H04L63/10 , H04L63/168 , H04L2209/56 , H04L2209/60
摘要： An apparatus and method are disclosed for enabling controlled access to resources at a resource provider server. The invention may encrypt or decrypt a portion of a uniform resource identifier (URI), according to a stateless method for hiding resources and/or providing access control support. Upon receipt of a URI having an encrypted portion, the invention decrypts the encrypted portion using a predetermined key to obtain a decrypted segment, extracts additional information from the decrypted segment and forms a decrypted URI, before the decrypted URI is forwarded to a resource producer server. The invention may also encrypt a URI from a resource provider server before it is sent to a client in response to a client request.
摘要翻译：公开了用于使得能够对资源提供商服务器处的资源进行受控访问的装置和方法。根据用于隐藏资源和/或提供访问控制支持的无状态方法，本发明可以对统一资源标识符（URI）的一部分进行加密或解密。在接收到具有加密部分的URI之后，本发明使用预定密钥解密加密部分以获得解密的段，在解密的URI被转发到资源生成器服务器之前从解密的段中提取附加信息并形成解密的URI 。本发明还可以在资源提供商服务器响应于客户端请求被发送到客户端之前加密URI。

10. 发明申请

US20110035241A1 Anonymous Separation of Duties with Credentials 失效
标题翻译：匿名分离职责与证书
公开(公告)号：US20110035241A1
公开(公告)日：2011-02-10
申请号：US12536874
申请日：2009-08-06
申请人： Jan Camenisch , Christopher J. Giblin , Thomas R. Gross , Guenter Karjoth
发明人： Jan Camenisch , Christopher J. Giblin , Thomas R. Gross , Guenter Karjoth
IPC分类号： G06Q10/00 , G06Q99/00
CPC分类号： G06Q10/00 , G06Q10/063 , G06Q20/383 , G06Q30/018
摘要： A system for anonymous separation of duties with credentials includes an identity provider, the identity provider configured to issue anonymous credentials to a user based on one or more attributes of the user; a service provider, the service provider configured to issue a pseudonym to the user based on the user's anonymous credentials, and to associate the user's pseudonym with a step of an instance of a business process hosted on the service provider, the step being completed by the user; and an auditor, the auditor configured to determine if the completion of the step of the instance of the business process by the user is compliant with a separation of duties policy.
摘要翻译：用于凭借凭证匿名分离职责的系统包括身份提供者，身份提供者被配置为基于用户的一个或多个属性向用户发布匿名凭证; 服务提供商，所述服务提供商被配置为基于所述用户的匿名凭证向所述用户发布假名，并且将所述用户的假名与所述服务提供商上托管的业务流程的实例的步骤相关联，所述步骤由用户; 和审核员，审核员被配置为确定用户完成业务流程实例的步骤是否符合职责分离政策。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式