专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08196175B2 Self-describing authorization policy for accessing cloud-based resources 有权
标题翻译：用于访问基于云的资源的自我描述授权策略
公开(公告)号：US08196175B2
公开(公告)日：2012-06-05
申请号：US12042637
申请日：2008-03-05
申请人： David R. Reed , Eric S. Fleischman , Abolade Gbadegesin , Dharma Shukla , Nikolay Smolyanskiy , Thomas A. Galvin
发明人： David R. Reed , Eric S. Fleischman , Abolade Gbadegesin , Dharma Shukla , Nikolay Smolyanskiy , Thomas A. Galvin
IPC分类号： G06F17/00
CPC分类号： H04L63/0807 , H04L63/102
摘要： A ticketing system adapted for use with a cloud-based services platform is provided by a ticket-based authorization model in which the authorization requirements for traversing one or more meshes of resources associated with a cloud service are annotated in links included in a resource that refer to other resources. The meshes are thus self-describing with respect to the association among the resources (i.e., the links) as well as the authorization required to access resources. Resource access requires a principal ticket which asserts that a caller at a client (e.g., a security principal representing a device or identity associated with a user) is authenticated, plus zero or more claim tickets. The claim tickets make additional assertions about the caller that the cloud service may use to check that the caller is authorized to access the resource.
摘要翻译：适用于基于云的服务平台的票务系统由基于票据的授权模型提供，其中用于遍历与云服务相关联的一个或多个资源网格的授权要求在包括在引用的资源中的链接中注释到其他资源。因此，网格关于资源（即，链接）之间的关联以及访问资源所需的授权是自描述的。资源访问需要一个主体票据，该票据确认在客户端的呼叫者（例如，表示与用户相关联的设备或身份的安全主体）被认证，加上零个或多个声明券。索赔票据对云端服务可能用来检查呼叫者是否被授权访问资源的呼叫者做出额外的断言。

2. 发明申请

US20090228950A1 SELF-DESCRIBING AUTHORIZATION POLICY FOR ACCESSING CLOUD-BASED RESOURCES 有权
标题翻译：用于访问基于云的资源的自我描述授权政策
公开(公告)号：US20090228950A1
公开(公告)日：2009-09-10
申请号：US12042637
申请日：2008-03-05
申请人： David R. Reed , Eric S. Fleischman , Abolade Gbadegesin , Dharma Shukla , Nikolay Smolyanskiy , Thomas A. Galvin
发明人： David R. Reed , Eric S. Fleischman , Abolade Gbadegesin , Dharma Shukla , Nikolay Smolyanskiy , Thomas A. Galvin
IPC分类号： H04L9/00
CPC分类号： H04L63/0807 , H04L63/102
摘要： A ticketing system adapted for use with a cloud-based services platform is provided by a ticket-based authorization model in which the authorization requirements for traversing one or more meshes of resources associated with a cloud service are annotated in links included in a resource that refer to other resources. The meshes are thus self-describing with respect to the association among the resources (i.e., the links) as well as the authorization required to access resources. Resource access requires a principal ticket which asserts that a caller at a client (e.g., a security principal representing a device or identity associated with a user) is authenticated, plus zero or more claim tickets. The claim tickets make additional assertions about the caller that the cloud service may use to check that the caller is authorized to access the resource.
摘要翻译：适用于基于云的服务平台的票务系统由基于票据的授权模型提供，其中用于遍历与云服务相关联的一个或多个资源网格的授权要求在包括在引用的资源中的链接中注释到其他资源。因此，网格关于资源（即，链接）之间的关联以及访问资源所需的授权是自描述的。资源访问需要一个主体票据，该票据确认在客户端的呼叫者（例如，表示与用户相关联的设备或身份的安全主体）被认证，加上零个或多个声明券。索赔票据对云端服务可能用来检查呼叫者是否被授权访问资源的呼叫者做出额外的断言。

3. 发明授权

US09990184B2 Distributed component model 有权
公开(公告)号：US09990184B2
公开(公告)日：2018-06-05
申请号：US13071982
申请日：2011-03-25
申请人： Dharma Shukla , Akash Jeevan Sagar , Nathan C. Talbert , Muthukaruppan Annamalai , Robert B. Schmidt , Aditya Bhandarkar , Asad Jawahar
发明人： Dharma Shukla , Akash Jeevan Sagar , Nathan C. Talbert , Muthukaruppan Annamalai , Robert B. Schmidt , Aditya Bhandarkar , Asad Jawahar
IPC分类号： G06F9/44
CPC分类号： G06F8/24
摘要： A distributed component model for creating a scalable and available distributed application is disclosed. The distributed component model provides for an application schema to be declaratively defined to include a module having a component. The schema includes a corresponding definition construct in a technology agnostic manner. The corresponding definition construct is declaratively defined to include metadata to control scaling and availability.

4. 发明申请

US20130160115A1 SANDBOXING FOR MULTI-TENANCY 审中-公开
标题翻译：多伦多沙发
公开(公告)号：US20130160115A1
公开(公告)日：2013-06-20
申请号：US13330682
申请日：2011-12-20
申请人： Girish Mittur Venkataramanappa , Mandyam Kishore , Andreas Ulbrich , Aarthi Rajmohan Saravanakumar , Chandra Prasad , Yann Christensen , Dharma Shukla , Amol Kulkarni
发明人： Girish Mittur Venkataramanappa , Mandyam Kishore , Andreas Ulbrich , Aarthi Rajmohan Saravanakumar , Chandra Prasad , Yann Christensen , Dharma Shukla , Amol Kulkarni
IPC分类号： G06F11/00
CPC分类号： G06F9/5011 , G06F11/3409 , G06F21/53 , G06F2201/815 , G06F2201/86 , G06F2201/88 , G06F2209/504 , G06F2221/2149 , Y02D10/22
摘要： Systems and methods according to various embodiments disclose a worker process manager adapted to spawn one or more worker processes on a server and to load an application on each of the worker processes. The worker process manager is adapted to isolate the one or more worker processes from each other and to control resource usage by the worker processes. A resource manager is adapted to detect applications that overuse system resources. The worker process manager is adapted to isolate worker processes and to control resource usage using one or more of the following techniques: least-privilege execution, messaging isolation, credentials isolation, data isolation, network isolation, fair share resource usage, and managed runtime security. Heuristic algorithms are used to detect applications that frequently overuse system resources that are unchargeable and that cause system unresponsiveness.
摘要翻译：根据各种实施例的系统和方法公开了适于在服务器上产生一个或多个工作进程并且在每个工作进程上加载应用程序的工作进程管理器。工作进程管理器适于将一个或多个工作进程彼此隔离并且控制工作进程的资源使用。资源管理器适用于检测过度使用系统资源的应用程序。工作进程管理器适用于使用以下一种或多种技术来隔离工作进程并控制资源使用：最小权限执行，消息传递隔离，凭据隔离，数据隔离，网络隔离，公平共享资源使用以及受管理的运行时安全性。启发式算法用于检测经常过度使用不可充电的系统资源并导致系统无响应的应用程序。

5. 发明授权

US08321503B2 Context-specific network resource addressing model for distributed services 有权
标题翻译：分布式服务的上下文特定网络资源寻址模型
公开(公告)号：US08321503B2
公开(公告)日：2012-11-27
申请号：US12822744
申请日：2010-06-24
申请人： Raymond E. Endres , Nishant Gupta , Karthik Raman , Aditya G. Bhandarkar , Farookh Mohammed , Dharma Shukla
发明人： Raymond E. Endres , Nishant Gupta , Karthik Raman , Aditya G. Bhandarkar , Farookh Mohammed , Dharma Shukla
IPC分类号： G06F15/16
CPC分类号： H04W4/02 , H04L29/12066 , H04L61/1511 , H04W4/18
摘要： A back-end locator service can be utilized to identify a specific computing device, from among multiple computing devices in a domain, that is the most appropriate computing device to handle a particular type of request for data or other resources. The data or resources hosted by the domain can be divided among multiple computing devices. The domain can expose a network-based application program interface where successive requests by a client computing device become more specific as to the data or resources requested. Responses from the computing devices in the domain can, at some point in time, be informed by the back-end locator service and can comprise location-specific resource identifiers. The client computing device can utilize such location specific resource identifiers to direct further communications to the appropriate, specific computing device without having to incur redirection inefficiencies.
摘要翻译：可以利用后端定位器服务来识别来自域中的多个计算设备中的特定计算设备，其是处理数据或其他资源的特定类型的请求的最合适的计算设备。由域托管的数据或资源可以分为多个计算设备。该域可以暴露基于网络的应用程序接口，其中客户端计算设备的连续请求对于所请求的数据或资源变得更具体。在某些时间点，来自域中的计算设备的响应可以由后端定位器服务通知，并且可以包括位置特定的资源标识符。客户端计算设备可以利用这种位置特定的资源标识符来引导进一步的通信到适当的特定的计算设备，而不必引起重定向的低效率。

6. 发明申请

US20100235321A1 PROGRAMMING MODEL FOR SYNCHRONIZING BROWSER CACHES ACROSS DEVICES AND WEB SERVICES 有权
标题翻译：通过设备和WEB服务同步浏览器缓存的编程模型
公开(公告)号：US20100235321A1
公开(公告)日：2010-09-16
申请号：US12402366
申请日：2009-03-11
申请人： Dharma Shukla , Abhay Parasnis , Raymond Enders , Arash Ghanaie-Sichanie , Israel Hilerio , Farookh Mohammed , Aditya Bhandarkar
发明人： Dharma Shukla , Abhay Parasnis , Raymond Enders , Arash Ghanaie-Sichanie , Israel Hilerio , Farookh Mohammed , Aditya Bhandarkar
IPC分类号： G06F17/30
CPC分类号： G06F17/30174 , G06F17/30902 , H04L67/10
摘要： A computer user may use a computing environment comprising a set of computers that respectively feature a web browser having a browser cache containing many types of data objects, including application resources and user-generated data files. However, the contents of a browser cache significantly contribute to the computing environment of a computer, and the computing environments presented by each computer may diverge, providing an inconsistent computing environment. Instead, the contents of browser caches of the computers comprising the computing environment may be synchronized across computers. Additionally, the browser cache may be synchronized with the other data objects of a computing environment (such as relevant portions of the filesystem); the synchronizing may be implemented as an out-of-browser process executing independently of the applications, and even when the browser is not executing; and the synchronization may be exposed through a programmatic access with which web applications may interact.
摘要翻译：计算机用户可以使用包括一组计算机的计算环境，所述计算机组分别具有包括应用资源和用户生成的数据文件的包含许多类型的数据对象的浏览器高速缓存的web浏览器。然而，浏览器缓存的内容显着地有助于计算机的计算环境，并且由每台计算机呈现的计算环境可能会分歧，从而提供不一致的计算环境。相反，包括计算环境的计算机的浏览器高速缓存的内容可以跨计算机同步。此外，浏览器高速缓存可以与计算环境的其他数据对象（诸如文件系统的相关部分）同步; 同步可以被实现为独立于应用程序执行的浏览器外程序，甚至当浏览器不执行时; 并且可以通过与web应用程序可以交互的编程访问来暴露同步。

7. 发明申请

US20100094926A1 DECLARATIVE PROGRAMMING MODEL FOR MODELING AND EXECUTION OF TRIGGERS FOR RESOURCE ORIENTED SYSTEM 有权
标题翻译：用于面向资源系统的触发器建模和执行的声明编程模型
公开(公告)号：US20100094926A1
公开(公告)日：2010-04-15
申请号：US12250637
申请日：2008-10-14
申请人： Dharma Shukla , Aditya Bhandarkar , Ori Amiga , Raymond Endres , Abhay Parasnis
发明人： Dharma Shukla , Aditya Bhandarkar , Ori Amiga , Raymond Endres , Abhay Parasnis
IPC分类号： G06F15/16
CPC分类号： G06F21/6227 , H04L63/10 , H04L63/168
摘要： Data sets of various types may be accessible through a host according to a protocol, such as a RESTful HTTP interface. Various domains may involve domain-specific processes to be executed as pre-triggers or post-triggers of various protocol requests (e.g., an HTTP GET request specifying a Read operation on an access-restricted data set may involve an authorization operations set that verifies the access privileges of the requester.) A host of the data set may be configured to receive a resource script expressing the operations set in a script language, to store the resource script, and to associated it with at least one data set and at least one verb of the protocol. Upon later receiving a protocol request specifying the verb and the resource, the host may then execute the resource script (as a pre-trigger and/or as a post-trigger) in accordance with the business logic of the domain.
摘要翻译：各种类型的数据集可以通过主机根据诸如RESTful HTTP接口的协议来访问。各种领域可以涉及要作为各种协议请求的预触发或后触发来执行的特定于域的进程（例如，指定访问受限数据集上的读取操作的HTTP GET请求可能涉及验证请求者的访问权限。）数据集的主机可以被配置为接收表示以脚本语言设置的操作的资源脚本，以存储资源脚本，并且将其与至少一个数据集和至少一个数据集相关联协议的动词。随后，当接收到指定动词和资源的协议请求时，主机可以根据域的业务逻辑执行资源脚本（作为预触发和/或作为后触发）。

8. 发明申请

US20090241104A1 APPLICATION MANAGEMENT WITHIN DEPLOYABLE OBJECT HIERARCHY 有权
标题翻译：在可分配的对象分层中的应用程序管理
公开(公告)号：US20090241104A1
公开(公告)日：2009-09-24
申请号：US12052550
申请日：2008-03-20
申请人： Ori Amiga , John Macintyre , Dharma Shukla , Junfeng Zhang
发明人： Ori Amiga , John Macintyre , Dharma Shukla , Junfeng Zhang
IPC分类号： G06F9/445
CPC分类号： G06F8/65 , G06F8/71
摘要： The management of applications in a computing environment often involves a significant number of computing operations, such as acquiring the application, deploying data objects in various locations, and configuring the application with respect to the deployed device. Conventional computing environments may provide inadequate support throughout a typical application life cycle, especially for a computing environment distributed across many devices. Instead, the computing environment may be represented in a deployable object hierarchy that may be distributed to various devices. An application management service may therefore be provided to install representations of the application in the object hierarchy, and to support many other aspects of the application life cycle, such as application discovery, sharing, updating, and removal. The devices may therefore provide the applications of the computing environment to the user in a consistent manner with reduced manual management among the devices comprising the computing mesh.
摘要翻译：计算环境中的应用程序的管理通常涉及大量的计算操作，例如获取应用程序，在各种位置部署数据对象，以及针对所部署的设备配置应用程序。传统的计算环境可能在典型的应用程序生命周期中提供不充分的支持，特别是对于分布在许多设备上的计算环境。相反，可以在可以分发到各种设备的可部署对象分层中表示计算环境。因此，可以提供应用管理服务以在对象分层结构中安装应用的表示，并且支持应用程序生命周期的许多其他方面，诸如应用发现，共享，更新和移除。因此，设备可以以包括计算网格的设备之间的减少的手动管理的一致的方式向用户提供计算环境的应用。

9. 发明授权

US07464367B2 Method and system for designing customizable applications and user-interfaces based on user-defined policies and metadata 有权
标题翻译：基于用户定义的策略和元数据设计可定制应用程序和用户界面的方法和系统
公开(公告)号：US07464367B2
公开(公告)日：2008-12-09
申请号：US10619128
申请日：2003-07-14
申请人： Mark N. Wain , Dharma Shukla , Mayank Mehta , David Fong , Aditya Bhandarkar
发明人： Mark N. Wain , Dharma Shukla , Mayank Mehta , David Fong , Aditya Bhandarkar
IPC分类号： G06F9/44 , G06F3/00
CPC分类号： G06F8/34
摘要： The present invention enables a user to build user-interfaces and applications based on a policy that contains metadata. The user can build an application through the user-interface, in which the user-interface and the generated computer-executable instructions are consistent with the policy. A user-interface has a toolbox that indicates the discovered components and a design surface that displays applicable stages. The policy determines the stages, where each stage provides a grouping of components having related tasks. The user selects components from the toolbox so that the selected components are associated with the selected stages on the design surface. After the user has completed building an application, a representation of the application may be compiled in order to generate a set of computer-executable instructions. Moreover, the compiler is coupled to the policy so that the set of computer-executable instructions is consistent with the policy.
摘要翻译：本发明使得用户能够基于包含元数据的策略构建用户界面和应用。用户可以通过用户界面构建应用程序，用户界面和生成的计算机可执行指令与策略一致。用户界面具有指示发现的组件的工具箱和显示适用阶段的设计曲面。该策略确定阶段，每个阶段提供具有相关任务的组件分组。用户从工具箱中选择组件，使所选择的组件与设计表面上的所选阶段相关联。在用户完成构建应用程序之后，可以编译应用程序的表示，以便生成一组计算机可执行指令。而且，编译器被耦合到策略，使得该组计算机可执行指令与该策略一致。

10. 发明申请

US20070234129A1 Asynchronous fault handling in process-centric programs 有权
标题翻译：以过程为中心的程序中的异步故障处理
公开(公告)号：US20070234129A1
公开(公告)日：2007-10-04
申请号：US11393093
申请日：2006-03-30
申请人： Dharma Shukla , Bob Schmidt , Mayank Mehta , Nathan Talbert , Akash Sagar , Karthik Raman
发明人： Dharma Shukla , Bob Schmidt , Mayank Mehta , Nathan Talbert , Akash Sagar , Karthik Raman
IPC分类号： G06F11/00
CPC分类号： G06Q10/06 , G06Q10/0633
摘要： Asynchronous fault handling for a workflow. A state automaton for an activity in the workflow is defined. The state automaton includes at least an executing state, a faulting state, and a closed state and classifies an execution lifetime of the activity. The activity is defined to include work items and includes an execution hierarchy for the work items. Each work item includes an operation for executing a portion of the activity. Each work item is transitioned to the executing state. The included operation of transitioned work items is executed in the executing state. One or more of the transitioned work items are identified in response to the faulting event as a function of the execution hierarchy and the included operation. The faulting event is asynchronously handled by transitioning the one or more identified work items to the faulting state while executing the included operation of the remaining transitioned work items.
摘要翻译：工作流的异步故障处理。定义了工作流中活动的状态自动机。状态自动机至少包括执行状态，故障状态和关闭状态，并对活动的执行寿命进行分类。该活动被定义为包括工作项，并包括工作项的执行层次结构。每个工作项目包括用于执行活动的一部分的操作。每个工作项目都转换到执行状态。在执行状态下执行转移工作项目的包含操作。响应于作为执行层次和所包括的操作的函数的故障事件来识别一个或多个转换的工作项。通过在执行所剩余的已转换工作项目的所包括的操作中将一个或多个识别的工作项目转换到故障状态来异步处理故障事件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式