专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20050154913A1 Method and apparatus for handling user identities under single sign-on services 有权
标题翻译：在单点登录服务下处理用户身份的方法和装置
公开(公告)号：US20050154913A1
公开(公告)日：2005-07-14
申请号：US10504954
申请日：2003-02-28
申请人： Luis Barriga , Avelina Pardo-Blazquez , John Walker , Jesus-Angel de Gregorio
发明人： Luis Barriga , Avelina Pardo-Blazquez , John Walker , Jesus-Angel de Gregorio
IPC分类号： H04L9/32 , G06F1/00 , G06F15/00 , G06F21/00 , G06F21/20 , H04L9/00 , H04L29/06 , H04L29/08 , H04W12/06
CPC分类号： H04L63/0815 , G06F21/33 , G06F21/41 , G06F2221/2115 , H04L63/0884 , H04L67/04 , H04L67/1002 , H04L67/16 , H04W12/06
摘要： An apparatus and method for providing Single Sign-On services to a user when accessing a selected Service Provider from a plurality of Service Providers. An Authentication Provider authenticates the user at with a user-identity, provides the user with a token as proof of the authentication, and assigns a temporary alias-identity to the user for use when the user accesses the selected Service Provider. The Authentication Provider and the selected Service Provider link the assigned alias-identity and the user-identity to identify the user at respective sites. The user accesses the selected Service Provider by presenting the token along with a local user-identity valid for the selected Service Provider. When the user attempts a subsequent access at the selected Service Provider, the user is identified by the shared alias-identity, if the user allowed permanent linking. If the user did not allow permanent linking, the process is repeated for each subsequent access.
摘要翻译：一种用于在从多个服务提供商访问所选服务提供商时向用户提供单点登录服务的装置和方法。认证提供者以用户身份认证用户，向用户提供令牌作为认证的证明，并且向用户分配临时别名身份以供用户访问所选择的服务提供商时使用。认证提供者和所选择的服务提供商链接所分配的别名身份和用户身份以识别相应站点处的用户。用户通过呈现令牌以及对所选服务提供商有效的本地用户身份来访问所选择的服务提供商。当用户尝试在所选服务提供商处的后续访问时，如果用户允许永久链接，则该用户被共享的别名标识。如果用户不允许永久链接，则对每个后续访问重复该过程。

2. 发明授权

US07221935B2 System, method and apparatus for federated single sign-on services 有权
标题翻译：用于联合单点登录服务的系统，方法和装置
公开(公告)号：US07221935B2
公开(公告)日：2007-05-22
申请号：US10176471
申请日：2002-06-19
申请人： Luis Barriga-Caceres , Jesus Angel de Gregorio-Rodriguez , Avelina Pardo-Blazquez , John Michael Walker-Pina
发明人： Luis Barriga-Caceres , Jesus Angel de Gregorio-Rodriguez , Avelina Pardo-Blazquez , John Michael Walker-Pina
IPC分类号： H04M3/42 , H04Q7/22 , H04Q7/38
CPC分类号： H04L63/0815 , G06F21/33 , G06F21/41 , G06F2221/2115 , H04L63/0884 , H04L67/04 , H04L67/1002 , H04L67/16 , H04W12/06
摘要： The advent of new and sophisticated web services provided by Service Providers to users, services that individually require authentication of user and authorization of access, brings the needs for a new service to facilitate such authentication and access, a service referred to as Single Sign-On (SSO). The basic principle behind SSO is that users are authenticated once at a particular level, and then access all their subscribed services accepting that level of authentication.The present invention provides a system, method and apparatus wherein a cellular Federation of mobile network operators becomes an SSO authentication authority for subscribers of this Federation accessing Service Providers having such agreement with a mobile network operator of the Federation. In accordance with this invention, mobile network operators can leverage their operator-subscriber trust relationship in order to act as SSO authentication authority for those subscribers accessing Service Providers in a service domain other than the mobile network domain.
摘要翻译：服务提供商向用户提供的新颖复杂的Web服务的出现，单独要求用户认证和授权授权的服务带来了新服务的需求，促进了这种认证和访问，称为单点登录（SSO）。 SSO背后的基本原理是用户在特定级别进行一次身份验证，然后访问接受该级别身份验证的所有订阅服务。本发明提供了一种系统，方法和装置，其中移动网络运营商的蜂窝联盟成为该联盟的用户的SSO认证授权，访问与联盟的移动网络运营商达成一致的服务提供商。根据本发明，移动网络运营商可以利用其运营商 - 用户信任关系，以便为那些在移动网络域之外的服务域中访问服务提供商的用户充当SSO认证授权。

3. 发明授权

US07296290B2 Method and apparatus for handling user identities under single sign-on services 有权
标题翻译：在单点登录服务下处理用户身份的方法和装置
公开(公告)号：US07296290B2
公开(公告)日：2007-11-13
申请号：US10504954
申请日：2003-02-28
申请人： Luis Barriga , Avelina Pardo-Blazquez , John Michael Walker , Jesus-Angel de Gregorio
发明人： Luis Barriga , Avelina Pardo-Blazquez , John Michael Walker , Jesus-Angel de Gregorio
IPC分类号： H04L29/00
CPC分类号： H04L63/0815 , G06F21/33 , G06F21/41 , G06F2221/2115 , H04L63/0884 , H04L67/04 , H04L67/1002 , H04L67/16 , H04W12/06
摘要： An apparatus and method for providing Single Sign-On services to a user when accessing a selected Service Provider from a plurality of Service Providers. An Authentication Provider authenticates the user at with a user-identity, provides the user with a token as proof of the authentication, and assigns a temporary alias-identity to the user for use when the user accesses the selected Service Provider. The Authentication Provider and the selected Service Provider link the assigned alias-identity and the user-identity to identify the user at respective sites. The user accesses the selected Service Provider by presenting the token along with a local user-identity valid for the selected Service Provider. When the user attempts a subsequent access at the selected Service Provider, the user is identified by the shared alias-identity, if the user allowed permanent linking. If the user did not allow permanent linking, the process is repeated for each subsequent access.
摘要翻译：一种用于在从多个服务提供商访问所选服务提供商时向用户提供单点登录服务的装置和方法。认证提供者以用户身份认证用户，向用户提供令牌作为认证的证明，并且向用户分配临时别名身份以供用户访问所选择的服务提供商时使用。认证提供者和所选择的服务提供商链接所分配的别名身份和用户身份以识别相应站点处的用户。用户通过呈现令牌以及对所选服务提供商有效的本地用户身份来访问所选择的服务提供商。当用户尝试在所选服务提供商处的后续访问时，如果用户允许永久链接，则该用户被共享的别名标识。如果用户不允许永久链接，则对每个后续访问重复该过程。

4. 发明申请

US20070184819A1 SYSTEM, METHOD AND APPARATUS FOR FEDERATED SINGLE SIGN-ON SERVICES 审中-公开
标题翻译：联合单点登录服务的系统，方法和装置
公开(公告)号：US20070184819A1
公开(公告)日：2007-08-09
申请号：US11737390
申请日：2007-04-19
申请人： Luis Barriga-Caceres , Jesus Angel de Gregorio-Rodriguez , Avelina Pardo-Blazquez , John Michael Walker-Pina
发明人： Luis Barriga-Caceres , Jesus Angel de Gregorio-Rodriguez , Avelina Pardo-Blazquez , John Michael Walker-Pina
IPC分类号： H04M1/66
CPC分类号： H04L63/0815 , G06F21/33 , G06F21/41 , G06F2221/2115 , H04L63/0884 , H04L67/04 , H04L67/1002 , H04L67/16 , H04W12/06
摘要： The advent of new and sophisticated web services provided by Service Providers to users, services that individually require authentication of user and authorization of access, brings the needs for a new service to facilitate such authentication and access, a service referred to as Single Sign-On (SSO). The basic principle behind SSO is that users are authenticated once at a particular level, and then access all their subscribed services accepting that level of authentication. The present invention provides a system, method and apparatus wherein a cellular Federation of mobile network operators becomes an SSO authentication authority for subscribers of this Federation accessing Service Providers having such agreement with a mobile network operator of the Federation. In accordance with this invention, mobile network operators can leverage their operator-subscriber trust relationship in order to act as SSO authentication authority for those subscribers accessing Service Providers in a service domain other than the mobile network domain.
摘要翻译：服务提供商向用户提供的新颖复杂的Web服务的出现，单独要求用户认证和授权授权的服务带来了新服务的需求，促进了这种认证和访问，称为单点登录（SSO）。 SSO背后的基本原理是用户在特定级别进行一次身份验证，然后访问接受该级别身份验证的所有订阅服务。本发明提供了一种系统，方法和装置，其中移动网络运营商的蜂窝联盟成为该联盟的用户的SSO认证授权，访问与联盟的移动网络运营商达成一致的服务提供商。根据本发明，移动网络运营商可以利用其运营商 - 用户信任关系，以便为那些在移动网络域之外的服务域中访问服务提供商的用户充当SSO认证授权。

5. 发明申请

US20070127495A1 Single sign-on for users of a packet radio network roaming in a multinational operator network 审中-公开
标题翻译：在跨国运营商网络中漫游的分组无线电网络的用户的单点登录
公开(公告)号：US20070127495A1
公开(公告)日：2007-06-07
申请号：US10541934
申请日：2003-01-10
申请人： Jesus-Angel de Gregorio , Luis Bariga-Caceres , Avelina Pardo-Blazquez , John Walker-Pina
发明人： Jesus-Angel de Gregorio , Luis Bariga-Caceres , Avelina Pardo-Blazquez , John Walker-Pina
IPC分类号： H04L12/56
CPC分类号： H04L63/0815 , H04L63/0892 , H04W8/06 , H04W12/06
摘要： The invention provides a system and a method basically oriented for providing Single Sign-On services for a user roaming in a packet radio network of a Multinational Mobile Network Operator that includes a federation of National Network Operators, one of these National Network Operators holding the user's subscription. In particular, the telecommunications system includes a number of Service Providers having service agreements with the Multinational Mobile Network Operator federation for offering Single Sign-On services to subscribers of any National Network Operator included in the federation.
摘要翻译：本发明提供了一种系统和方法，该系统和方法基本上是为了在跨国移动网络运营商的分组无线电网络中漫游的用户提供单一登录服务，其包括国家网络运营商联盟，这些国家网络运营商中的一个持有用户的订阅。特别地，电信系统包括与多国移动网络运营商联盟具有服务协议的多个服务提供商，用于向联盟中包括的任何国家网络运营商的订户提供单点登录服务。

6. 发明申请

US20070130343A1 Means and method for generating a unique user's identity for use between different domains 审中-公开
标题翻译：用于生成不同域之间使用的唯一用户身份的方法和方法
公开(公告)号：US20070130343A1
公开(公告)日：2007-06-07
申请号：US10595247
申请日：2003-09-30
申请人： Avelina Pardo-Blazquez , Miguel Carretero Gomez , John Walker , Miguel-Angel Monjas-Llorente , Jesus-Angel de-Gregorio-Rodriguez
发明人： Avelina Pardo-Blazquez , Miguel Carretero Gomez , John Walker , Miguel-Angel Monjas-Llorente , Jesus-Angel de-Gregorio-Rodriguez
IPC分类号： G06F15/16
CPC分类号： H04L29/12122 , H04L61/1547 , H04L63/0407 , H04L63/0807 , H04L63/0815 , H04L63/168
摘要： Mobile operators presently offer services on behalf of service providers where such services are really carried out for the users. Mobile operators act as identity providers in this scenario, wherein service provider and identity provider share a unique identity to identify each particular user accessing a number of services. As the number of users accessing these services, and the number of services offered from different service providers increase, the storage required at the operator's network for such amount of user's identities becomes a problem. To overcome this and other problems, the present invention provides an identity Generator device arranged to generate a user's service indicator to identify the user between the service provider and the identity provider, the user's service indicator comprising a master user's identifier for identification of the user at the identity provider, and a service identifier indicating the services to be accessed at a given service provider.
摘要翻译：移动运营商目前代表服务提供商提供服务，这些服务真正用于用户。移动运营商在这种情况下作为身份提供商，其中服务提供商和身份提供商共享独特的身份以识别访问多个服务的每个特定用户。随着访问这些服务的用户数量以及从不同服务提供商提供的服务数量的增加，运营商网络所需的这种用户身份数量的存储成为一个问题。为了克服这个和其他问题，本发明提供了一种身份发生器装置，其被配置为生成用户的服务指示符以识别服务提供商和身份提供者之间的用户，该用户的服务指示符包括主用户的标识符，用于在身份提供商和指示在给定服务提供商处要访问的服务的服务标识符。

7. 发明授权

US08452872B2 Method, apparatus and computer program for enforcing policy across associated sessions taking into account a total usage quota for associated user 有权
标题翻译：在相关联的会话中执行策略的方法，设备和计算机程序，同时考虑到相关用户的总使用配额
公开(公告)号：US08452872B2
公开(公告)日：2013-05-28
申请号：US13384919
申请日：2009-08-18
申请人： Fabian Castro Castro , Avelina Pardo-Blazquez
发明人： Fabian Castro Castro , Avelina Pardo-Blazquez
IPC分类号： G06F15/173
CPC分类号： H04L12/14 , H04L12/1403 , H04M15/00 , H04M15/66 , H04W4/24
摘要： A server configured to provide a policy decision point for a packet-based communication network. The server comprises a user account manager for maintaining and/or determining, for each of a plurality of users, an available total usage quota and a set of registered, linked connection identifiers. A request handler is provided for receiving from a policy enforcement point, a request for allocation of a quota in respect of a packet session associated with a specified connection identifier. A quota determiner responds to receipt of a quota request by determining a quota for said packet session taking into account the total usage quota for the associated user and any currently ongoing sessions associated with other connection identifiers belonging to the same set as said specified connection identifier. A responder is provided for sending the determined quota to said policy enforcement point.
摘要翻译：被配置为为基于分组的通信网络提供策略决策点的服务器。服务器包括用户帐户管理器，用于为多个用户中的每一个维护和/或确定可用的总使用配额和一组已注册的链接的连接标识符。提供了一个请求处理程序，用于从策略执行点接收关于与指定连接标识符相关联的分组会话的配额分配请求。考虑到属于与所述指定的连接标识符相同集合的其他连接标识符相关联的关联用户的总使用限额以及任何当前进行中的会话，确定所述分组会话的配额，配额确定器响应接收配额请求。响应者被提供用于将确定的配额发送到所述策略执行点。

8. 发明授权

US07836484B2 Method and apparatus for providing access to an identity service 有权
标题翻译：用于提供对身份服务的访问的方法和装置
公开(公告)号：US07836484B2
公开(公告)日：2010-11-16
申请号：US11568965
申请日：2004-05-11
申请人： Avelina Pardo-Blazquez , Fuencisla Garcia Azorero , Maria Esther Bas Sanchez
发明人： Avelina Pardo-Blazquez , Fuencisla Garcia Azorero , Maria Esther Bas Sanchez
IPC分类号： G06F17/30
CPC分类号： H04L67/16 , H04L29/06
摘要： Method, apparatus and computer program for providing access to identity services of users. A Discovery Service DS server (100) stores for a set of users references (RO1A,ROnB) of identity services (IDSRV-A,IDSRV-B) available for them and usable to contact respectively with the Service Providers SPs (120,130) hosting each of said identity services. For a given identity service not yet registered for a given user, the DS server selects a SP (140) that is able to provide it, and stores a new resource offering (RO2X) that corresponds to the registration of said identity service. For selecting the appropriate SP, the DS server can check a service capability storage (103-2,301) that comprises information about what identity service(s) can be provided by a given SP, and which can be dynamically updated from SPs with the identity services they respectively support. The DS server can contact the user to collect SP preferences and/or service data.
摘要翻译：用于提供对用户身份服务的访问的方法，装置和计算机程序。发现服务DS服务器（100）存储可用于其的身份服务（IDSRV-A，IDSRV-B）的一组用户引用（RO1A，ROnB），并且可用于分别与托管每个的服务提供商SP（120,130）的身份服务。对于尚未向给定用户注册的给定身份服务，DS服务器选择能够提供给它的SP（140），并且存储与所述身份服务的注册相对应的新的资源提供（RO2X）。为了选择适当的SP，DS服务器可以检查服务能力存储（103-2,301），其包括关于给定SP可以提供什么身份服务的信息，并且可以从具有身份服务的SP动态地更新SP 他们分别支持。 DS服务器可以联系用户收集SP偏好和/或服务数据。

9. 发明授权

US09245285B2 Collection controller for influencing service to a user station 有权
标题翻译：用于影响用户站服务的收集控制器
公开(公告)号：US09245285B2
公开(公告)日：2016-01-26
申请号：US12306836
申请日：2006-06-28
申请人： Justus Petersson , Avelina Pardo-Blazquez , Victor Manuel Avila Gonzalez , Paulus Karremans
发明人： Justus Petersson , Avelina Pardo-Blazquez , Victor Manuel Avila Gonzalez , Paulus Karremans
IPC分类号： G06F17/30 , G06F21/00 , G06Q30/04 , H04L12/66 , H04M15/00 , H04L29/08 , H04W4/24
CPC分类号： G06Q30/04 , H04L12/66 , H04L67/14 , H04L67/306 , H04M15/00 , H04W4/24
摘要： A content provider provides a content provider and service identification to a collection controller. The collection controller retrieves content provider and service specific service provision characteristics from a user subscription database and sets these service provision characteristics as a filter in a service provision control device to be used in the provision of a service from the content provider to the user equipment. Thus, the content provider, through the retrieved content server & service related characteristics from the user subscriber database, can influence the charging and transmission policies used by service provision control device for providing the service.
摘要翻译：内容提供商向收集控制器提供内容提供商和服务标识。收集控制器从用户订阅数据库检索内容提供商和服务特定服务提供特征，并将这些服务提供特性设置为服务提供控制设备中的过滤器，以用于从内容提供商向用户设备提供服务。因此，通过从用户订户数据库检索的内容服务器和服务相关特征，内容提供商可以影响服务提供控制设备用于提供服务的收费和传输策略。

10. 发明授权

US09106541B2 Token-based correlation of control sessions for policy and charging control of a data session through a NAT 有权
标题翻译：基于令牌的通过NAT进行数据会话策略和计费控制会话的关联
公开(公告)号：US09106541B2
公开(公告)日：2015-08-11
申请号：US13133568
申请日：2008-12-10
申请人： Avelina Pardo-Blazquez , Susana Fernandez Alonso , Belen Pancorbo Marcos
发明人： Avelina Pardo-Blazquez , Susana Fernandez Alonso , Belen Pancorbo Marcos
IPC分类号： H04L12/26 , H04L12/721 , H04L12/841 , H04L12/24 , H04L12/14 , H04L29/12 , H04L29/06
CPC分类号： H04L67/146 , H04L12/14 , H04L12/1407 , H04L12/1428 , H04L29/12386 , H04L41/0893 , H04L43/04 , H04L61/2521 , H04L63/0245 , H04L65/1016 , H04L67/10
摘要： A method of handling packets sent across a packet switched network comprising a policy server acting as a policy and charging rules function. The method comprises providing a first set of policy rules at said policy server, and installing these from the policy server into an access gateway over a first service control session. These policy rules cause packets belonging to a given IP session to be diverted by the access gateway to a network address translator. At the network address translator, an IP source address of said packets is translated into a translated IP source address identifying a deep packet inspection node. The network address translator forwards the packets to the deep packet inspection node configured to perform deep packet inspection of IP packets.
摘要翻译：一种处理通过分组交换网络发送的分组的方法，包括作为策略和计费规则功能的策略服务器。该方法包括在所述策略服务器处提供第一组策略规则，并且通过第一服务控制会话将它们从策略服务器安装到接入网关中。这些策略规则使得属于给定IP会话的分组由接入网关转发到网络地址转换器。在网络地址转换器中，将所述分组的IP源地址转换为标识深度分组检查节点的转换的IP源地址。网络地址转换器将报文转发给深度报文检测节点，配置为对IP报文进行深度报文检测。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式