专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07624180B2 Mixed enclave operation in a computer network 失效
公开(公告)号：US07624180B2
公开(公告)日：2009-11-24
申请号：US11236957
申请日：2005-09-28
申请人： James M. Holden , Stephen E. Levin , David W. Snow , Mary Snow, legal representative , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
IPC分类号： G06F13/00
CPC分类号： H04L63/0823 , G06F21/31 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , H04L29/06 , H04L63/0218 , H04L63/0428 , H04L63/105 , H04L63/12 , H04L63/126
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.

2. 发明授权

US06643698B2 Mixed enclave operation in a computer network 有权
公开(公告)号：US06643698B2
公开(公告)日：2003-11-04
申请号：US09925079
申请日：2001-08-07
申请人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
IPC分类号： G06F1300
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.

3. 发明申请

US20100064352A1 MIXED ENCLAVE OPERATION IN A COMPUTER NETWORK 审中-公开
标题翻译：计算机网络中的混合加载操作
公开(公告)号：US20100064352A1
公开(公告)日：2010-03-11
申请号：US12618648
申请日：2009-11-13
申请人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
IPC分类号： H04L9/32 , G06F15/16 , G06F21/00
CPC分类号： H04L63/0823 , G06F21/31 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , H04L29/06 , H04L63/0218 , H04L63/0428 , H04L63/105 , H04L63/12 , H04L63/126
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.
摘要翻译：公开了一种计算机网络与使用多级网络安全接口的用户和没有任何网络安全接口的用户的混合飞行操作的方法。网络安全用户选择或网络安全界面自动选择通信是否允许与其他无安全用户通信。在选择混合飞行操作的情况下，网络安全用户识别与其他安全用户或非安全用户进行通信时。与较低安全级别的非安全用户的通信需要将驻留在安全用户身上的数据传送回非安全用户。

4. 发明授权

US06272639B1 Mixed enclave operation in a computer network 失效
标题翻译：计算机网络中的混合飞地运行
公开(公告)号：US06272639B1
公开(公告)日：2001-08-07
申请号：US09127477
申请日：1998-07-31
申请人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , David W. Snow , Edwin H. Wrench
IPC分类号： G06F1130
CPC分类号： H04L29/06 , G06F21/31 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , H04L63/0218 , H04L63/0442 , H04L63/0823 , H04L63/105
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.
摘要翻译：公开了一种计算机网络与使用多级网络安全接口的用户和没有任何网络安全接口的用户的混合飞行操作的方法。网络安全用户选择或网络安全界面自动选择通信是否允许与其他无安全用户通信。在选择混合飞行操作的情况下，网络安全用户识别与其他安全用户或非安全用户进行通信时。与较低安全级别的非安全用户的通信需要将驻留在安全用户身上的数据传送回非安全用户。

5. 发明授权

US07475137B2 Methods of operating portable computerized device with network security 失效
标题翻译：操作具有网络安全性的便携式计算机化设备的方法
公开(公告)号：US07475137B2
公开(公告)日：2009-01-06
申请号：US10877791
申请日：2004-06-25
申请人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A multi-level network security system is disclosed for a computer host device coupled to at least one computer network. The system including a secure network interface Unit (SNIU) contained within a communications stack of the computer device that operates at a user layer communications protocol. The SNIU communicates with other like SNIU devices on the network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein the network may be individually secure or non-secure without compromising security of communications within the global security perimeter. The SNIU includes a host/network interface for receiving messages sent between the computer device and network. The interface operative to convert the received messages to and from a format utilized by the network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to said network interface for identifying and verifying the computer device requesting access to said network. The session manager also for transmitting messages received from the computer device when the message parser determines the association already exists. An association manager coupled to the host/network interface for establishing an association with other like SNIU devices when the message parser determines the association does not exist.
摘要翻译：公开了一种耦合到至少一个计算机网络的计算机主机设备的多级网络安全系统。该系统包括在用户层通信协议下操作的计算机设备的通信栈内的安全网络接口单元（SNIU）。 SNIU通过建立关联来与网络上的其他类似的SNIU设备进行通信，从而为端到端通信创建全局安全边界，并且其中网络可以单独地安全或不安全，而不会影响全局安全性内的通信的安全性周长。

6. 发明授权

US06272538B1 Method and system for establishing a security perimeter in computer networks 失效
标题翻译：在计算机网络中建立安全边界的方法和系统
公开(公告)号：US06272538B1
公开(公告)日：2001-08-07
申请号：US09127280
申请日：1998-07-31
申请人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
IPC分类号： G06F1300
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A multi-level network security system is disclosed for a computer host device coupled to at least one computer network. The system including a secure network interface Unit (SNIU) contained within a communications stack of the computer device that operates at a user layer communications protocol. The SNIU communicates with other like SNIU devices on the network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein the network may be individually secure or non-secure without compromising security of communications within the global security perimeter. The SNIU includes a host/network interface for receiving messages sent between the computer device and network. The interface operative to convert the received messages to and from a format utilized by the network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to said network interface for identifying and verifying the computer device requesting access to said network.
摘要翻译：公开了一种耦合到至少一个计算机网络的计算机主机设备的多级网络安全系统。该系统包括在用户层通信协议下操作的计算机设备的通信栈内的安全网络接口单元（SNIU）。 SNIU通过建立关联来与网络上的其他类似的SNIU设备进行通信，从而为端到端通信创建全局安全边界，并且其中网络可以单独地安全或不安全，而不会影响全局安全性内的通信的安全性周长。 SNIU包括用于接收在计算机设备和网络之间发送的消息的主机/网络接口。该接口可操作以将所接收的消息转换为网络所使用的格式和从该网络使用的格式。用于确定关联是否已经与另一个SNIU设备存在的消息解析器。耦合到所述网络接口的会话管理器，用于识别和验证请求访问所述网络的计算机设备。

7. 发明申请

US20110202758A1 APPARATUS FOR PROVIDING SECURITY OVER UNTRUSTED NETWORKS 失效
标题翻译：用于提供非侵权网络安全的装置
公开(公告)号：US20110202758A1
公开(公告)日：2011-08-18
申请号：US12965606
申请日：2010-12-10
申请人： James M Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
发明人： James M Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
IPC分类号： H04L9/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A network security apparatus adapted to provide for secure communications across data networks, including untrusted networks. In one embodiment, the security apparatus comprises one or more components disposed within the software stack of a computerized device, the components including an association process adapted to establish security associations between devices on the network, and an encryption key generation process adapted to generate one or more encryption keys. In one variant, the keys are specifically for use with temporary or ad hoc security associations. The one or more keys are exchanged according to a key exchange protocol after the device is authenticated or authenticates another device. In one implementation, the device comprises a portable device such as a laptop computer.
摘要翻译：适用于跨数据网络（包括不可信网络）提供安全通信的网络安全装置。在一个实施例中，安全设备包括设置在计算机化设备的软件堆栈内的一个或多个组件，该组件包括适于建立网络上的设备之间的安全关联的关联过程，以及适于生成一个或多个更多加密密钥。在一个变型中，密钥专门用于临时或临时安全关联。在设备认证或认证另一设备后，根据密钥交换协议交换一个或多个密钥。在一个实现中，该设备包括诸如膝上型计算机的便携式设备。

8. 发明申请

US20110197068A1 METHODS FOR PROVIDING SECURITY OVER UNTRUSTED NETWORKS 有权
标题翻译：提供非侵权网络安全的方法
公开(公告)号：US20110197068A1
公开(公告)日：2011-08-11
申请号：US12965646
申请日：2010-12-10
申请人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
IPC分类号： H04L9/32
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： Methods for providing for secure communications across data networks, including untrusted networks. In one embodiment, the method comprises establishing security associations between devices on the network using a digital certificate and key exchange protocol. In one variant, the digital certificate comprises a public encryption key; the recipient of the certificate authenticates the sender using at least the signature, and then generates a cryptographic element (e.g., key), and initialization vector. The key is encrypted and sent back to the originator, where it is decrypted and used to encrypt datagrams sent between the devices. The initialization vector may be used to initialize the encryption algorithm on the receiving device.
摘要翻译：提供跨数据网络（包括不可信网络）的安全通信的方法。在一个实施例中，该方法包括使用数字证书和密钥交换协议在网络上的设备之间建立安全关联。在一个变型中，数字证书包括公共加密密钥; 证书的接收方至少使用签名对发送方进行认证，然后生成加密元素（例如密钥）和初始化向量。密钥被加密并发回到发起方，在那里它被解密并用于加密在设备之间发送的数据报。初始化向量可以用于在接收设备上初始化加密算法。

9. 发明授权

US5832228A System and method for providing multi-level security in computer devices utilized with non-secure networks 失效
标题翻译：用于在与非安全网络一起使用的计算机设备中提供多级安全性的系统和方法
公开(公告)号：US5832228A
公开(公告)日：1998-11-03
申请号：US688543
申请日：1996-07-30
申请人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
IPC分类号： G06F1/00 , G06F21/00 , H04L29/06 , G06F13/00
CPC分类号： H04L63/0218 , G06F21/606 , G06F21/85 , H04L63/105 , H04L63/14 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153
摘要： A multi-level network security system is disclosed for a computer host device coupled to at least one computer network. The system including a secure network interface Unit (SNIU) contained within a communications stack of the computer device that operates at a user layer communications protocol. The SNIU communicates with other like SNIU devices on the network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein the network may be individually secure or non-secure without compromising security of communications within the global security perimeter. The SNIU includes a host/network interface for receiving messages sent between the computer device and network. The interface operative to convert the received messages to and from a format utilized by the network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to said network interface for identifying and verifying the computer device requesting access to said network. The session manager also for transmitting messages received from the computer device when the message parser determines the association already exists. An association manager coupled to the host/network interface for establishing an association with other like SNIU devices when the message parser determines the association does not exist.
摘要翻译：公开了一种耦合到至少一个计算机网络的计算机主机设备的多级网络安全系统。该系统包括在用户层通信协议下操作的计算机设备的通信栈内的安全网络接口单元（SNIU）。 SNIU通过建立关联来与网络上的其他类似的SNIU设备进行通信，从而为端到端通信创建全局安全边界，并且其中网络可以单独地安全或不安全，而不会影响全局安全性内的通信的安全性周长。 SNIU包括用于接收在计算机设备和网络之间发送的消息的主机/网络接口。该接口可操作以将所接收的消息转换为网络所使用的格式和从该网络使用的格式。用于确定关联是否已经与另一个SNIU设备存在的消息解析器。耦合到所述网络接口的会话管理器，用于识别和验证请求访问所述网络的计算机设备。会话管理器还用于在消息解析器确定关联已经存在时发送从计算机设备接收的消息。当消息解析器确定关联不存在时，耦合到主机/网络接口的关联管理器用于建立与其它类似SNIU设备的关联。

10. 发明授权

US06760768B2 Method and system for establishing a security perimeter in computer networks 失效
标题翻译：在计算机网络中建立安全边界的方法和系统
公开(公告)号：US06760768B2
公开(公告)日：2004-07-06
申请号：US09924214
申请日：2001-08-07
申请人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
发明人： James M. Holden , Stephen E. Levin , James O. Nickel , Edwin H. Wrench
IPC分类号： G06F1300
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A multi-level network security system is disclosed for a computer host device coupled to at least one computer network. The system including a secure network interface Unit (SNIU) contained within a communications stack of the computer device that operates at a user layer communications protocol. The SNIU communicates with other like SNIU devices on the network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein the network may be individually secure or non-secure without compromising security of communications within the global security perimeter. The SNIU includes a host/network interface for receiving messages sent between the computer device and network. The interface operative to convert the received messages to and from a format utilized by the network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to said network interface for identifying and verifying the computer device requesting access to said network. The session manager also for transmitting messages received from the computer device when the message parser determines the association already exists. An association manager coupled to the host/network interface for establishing an association with other like SNIU devices when the message parser determines the association does not exist.
摘要翻译：公开了一种耦合到至少一个计算机网络的计算机主机设备的多级网络安全系统。该系统包括在用户层通信协议下操作的计算机设备的通信栈内的安全网络接口单元（SNIU）。 SNIU通过建立关联来与网络上的其他类似的SNIU设备进行通信，从而为端到端通信创建全局安全边界，并且其中网络可以单独地安全或不安全，而不会影响全局安全性内的通信的安全性周长。 SNIU包括用于接收在计算机设备和网络之间发送的消息的主机/网络接口。该接口可操作以将所接收的消息转换为网络所使用的格式和从该网络使用的格式。用于确定关联是否已经与另一个SNIU设备存在的消息解析器。耦合到所述网络接口的会话管理器，用于识别和验证请求访问所述网络的计算机设备。会话管理器还用于在消息解析器确定关联已经存在时发送从计算机设备接收的消息。当消息解析器确定关联不存在时，耦合到主机/网络接口的关联管理器用于建立与其它类似SNIU设备的关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式