专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070156765A1 Method and apparatus for presentation of a security-focused repository with a party-focused repository 失效
标题翻译：以聚会为中心的存储库呈现以安全为中心的存储库的方法和装置
公开(公告)号：US20070156765A1
公开(公告)日：2007-07-05
申请号：US11323749
申请日：2005-12-30
申请人： Mark Hubbard , David Kuehr-McLaren , Govindaraj Sampathkumar , Janette Wong
发明人： Mark Hubbard , David Kuehr-McLaren , Govindaraj Sampathkumar , Janette Wong
IPC分类号： G06F17/30
CPC分类号： G06F17/30557
摘要： An abstraction layer associates a party-focused object, a security-focused object, or both, with an abstraction object. The party-focused object has a property. The property is presented in the abstraction object defined by the mapping schema. The abstraction layer converts a set of repository objects to at least one abstraction object.
摘要翻译：一个抽象层将一个聚焦对象，一个以安全为中心的对象或两者与一个抽象对象相关联。以聚会为重点的对象具有属性。该属性显示在由映射模式定义的抽象对象中。抽象层将一组存储库对象转换为至少一个抽象对象。

2. 发明申请

US20050138061A1 Automatic policy generation based on role entitlements and identity attributes 失效
标题翻译：基于角色授权和身份属性自动生成策略
公开(公告)号：US20050138061A1
公开(公告)日：2005-06-23
申请号：US10741708
申请日：2003-12-19
申请人： David Kuehr-McLaren , Pratik Gupta , Govindaraj Sampathkumar , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
发明人： David Kuehr-McLaren , Pratik Gupta , Govindaraj Sampathkumar , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
IPC分类号： G06F17/00
CPC分类号： G06F17/00 , G06F17/30 , G06Q10/00 , G06Q10/06 , G06Q10/10 , Y10S707/99939
摘要： Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.
摘要翻译：将自动生成定义要分配给加入角色的新身份的权利的策略。自动策略将新身份分配给角色中预定数量的身份共同拥有的权利，这些身份可能是所有角色身份。条件政策建议将新身份分配给与非授权属性与新身份的非授权属性最接近的角色身份相关联的非共同所有权利。这可以通过迭代通过将非共同所有权利与每个角色身份的非授权属性进行映射的向量来自动确定，比较新身份的非授权属性以找到最接近的匹配。然后，建议将该身份的非共同所有权利分配给新身份，并经批准。

3. 发明申请

US20050138420A1 Automatic role hierarchy generation and inheritance discovery 审中-公开
标题翻译：自动角色层次生成和继承发现
公开(公告)号：US20050138420A1
公开(公告)日：2005-06-23
申请号：US10741904
申请日：2003-12-19
申请人： Govindaraj Sampathkumar , Pratik Gupta , David Kuehr-McLaren , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
发明人： Govindaraj Sampathkumar , Pratik Gupta , David Kuehr-McLaren , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
IPC分类号： H04L9/00
CPC分类号： G06Q10/10 , G06F21/604 , G06F21/6218 , G06F2221/2145
摘要： A role hierarchy is automatically generated by hierarchically ranking roles in a role based control system, each role including a plurality of identities having attributes. Iteratively at each hierarchical level: each non-cohesive role (wherein, in this case, at least one attribute is not possessed by every identity in the role) is replaced, at the same hierarchical level, by a cohesive role formed by grouping identities having at least one common attribute. The remaining identities are clustered into children roles based on attributes other than the common attribute, and the children roles are added to the role hierarchy at a hierarchical level below the cohesive role. If no common attribute exists in the non-cohesive role, the role is clustered into two or more new roles based on all the attributes in the role, and the non-cohesive role is replaced with the new roles at the same hierarchical level.
摘要翻译：通过在基于角色的控制系统中对角色进行分级排序自动生成角色层次结构，每个角色包括具有属性的多个身份。迭代地在每个层次级别：每个非凝聚的角色（其中，在这种情况下，角色中的每个身份不具有至少一个属性）在相同的层次上由通过将身份分组至少有一个共同的属性。剩余的身份基于公共属性以外的属性聚类成儿童角色，并且儿童角色被添加到角色层次结构中，层级低于凝聚角色。如果非凝聚角色中不存在共同属性，则该角色将基于角色中的所有属性聚集到两个或多个新角色中，并且将非相关角色替换为同一层次级别的新角色。

4. 发明申请

US20050138419A1 Automated role discovery 审中-公开
标题翻译：自动角色发现
公开(公告)号：US20050138419A1
公开(公告)日：2005-06-23
申请号：US10741634
申请日：2003-12-19
申请人： Pratik Gupta , Govindaraj Sampathkumar , David Kuehr-McLaren , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
发明人： Pratik Gupta , Govindaraj Sampathkumar , David Kuehr-McLaren , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
IPC分类号： G06F11/30 , H04L9/32
CPC分类号： G06F21/6218
摘要： An automated, bottom-up role discovery method for a role based control system includes automatically extracting identities and attributes from data sources and automatically clustering the identities based on the attributes to form recommended roles. The recommended roles may be modified by intervention of an administrator. Additionally, the recommended roles may be aggregated by defining the role definition as an attribute of each constituent identity, and re-clustering the identities to generate refined roles. The recommended, modified, and/or refined roles may then be utilized in a role based control system, such as a role based access control system. Periodically performing the role discovery process provides a means to audit a role based access control system.
摘要翻译：用于基于角色的控制系统的自动化的自下而上角色发现方法包括自动从数据源提取身份和属性，并根据属性自动聚类身份以形成推荐角色。推荐的角色可以通过管理员的干预来修改。另外，推荐的角色可以通过将角色定义定义为每个组成标识的属性来进行聚合，并重新聚集身份以生成精细角色。然后，可以在基于角色的控制系统（例如基于角色的访问控制系统）中使用推荐的，修改的和/或细化的角色。定期执行角色发现过程提供了一种审核基于角色的访问控制系统的方法。

5. 发明申请

US20080016104A1 Automatic Policy Generation Based on Role Entitlements and Identity Attributes 有权
标题翻译：基于角色权利和身份属性的自动策略生成
公开(公告)号：US20080016104A1
公开(公告)日：2008-01-17
申请号：US11780956
申请日：2007-07-20
申请人： David Kuehr-McLaren , Pratik Gupta , Govindaraj Sampathkumar , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
发明人： David Kuehr-McLaren , Pratik Gupta , Govindaraj Sampathkumar , Vincent Williams , Sharon Cutcher , Sumit Taank , Brian Stube , Hari Shankar
IPC分类号： G06F17/00
CPC分类号： G06F17/00 , G06F17/30 , G06Q10/00 , G06Q10/06 , G06Q10/10 , Y10S707/99939
摘要： Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.
摘要翻译：将自动生成定义要分配给加入角色的新身份的权利的策略。自动策略将新身份分配给角色中预定数量的身份共同拥有的权利，这些身份可能是所有角色身份。条件政策建议将新身份分配给与非授权属性与新身份的非授权属性最接近的角色身份相关联的非共同所有权利。这可以通过迭代通过将非共同所有权利与每个角色身份的非授权属性进行映射的向量来自动确定，比较新身份的非授权属性以找到最接近的匹配。然后，建议将该身份的非共同所有权利分配给新身份，并经批准。

6. 发明申请

US20050102155A1 Method, system, and computer program product for digital verification of collected privacy policies in electronic transactions 有权
标题翻译：方法，系统和计算机程序产品，用于电子交易中收集的隐私政策的数字验证
公开(公告)号：US20050102155A1
公开(公告)日：2005-05-12
申请号：US10706334
申请日：2003-11-12
申请人： David Kuehr-McLaren , Martin Presler-Marshall , Calvin Powers , Timothy Shoriak , John Walczyk
发明人： David Kuehr-McLaren , Martin Presler-Marshall , Calvin Powers , Timothy Shoriak , John Walczyk
IPC分类号： G06F15/00 , G06F21/20 , G06Q10/00 , H04L9/32 , G06F17/60
CPC分类号： G06Q30/06 , G06F21/645 , G06Q30/0601
摘要： Parties involved in transacting business in an E-marketplace (E-marketplace participants) each identify and submit to the E-marketplace their P3P policy and/or other relevant characteristics related to their privacy policy needs (those that they adhere to, referred to as “privacy policies”; those that they require, referred to as “privacy preferences”, or both). Submitted with the privacy policy is a digital signature that is tied to the owner of the web objects to which the privacy policy pertains. Using a digital signature assures the integrity of the privacy policy since it travels with the privacy policy and thus refers back to the original sender of the policy rather than the middleman (the E-marketplace), and if the document (the privacy policy) to which it is attached has been tampered with, the digital signature will be invalidated.
摘要翻译：参与电子市场交易业务的各方（电子市场参与者）都会识别并向电子商务提交其P3P政策和/或与其隐私政策需求相关的其他相关特征（他们所遵守的相关特性，简称为 “隐私政策”;他们需要的，被称为“隐私偏好”，或两者兼而有之）。使用隐私政策提交的是与隐私政策所属的Web对象的所有者绑定的数字签名。使用数字签名确保隐私政策的完整性，因为它与隐私政策一起旅行，从而指向政策的原始发件人，而不是中间人（电子市场），如果文件（隐私政策）为它附带的东西已经被篡改，数字签名将被无效。

7. 发明授权

US06920556B2 Methods, systems and computer program products for multi-packet message authentication for secured SSL-based communication sessions 失效
标题翻译：用于安全的基于SSL的通信会话的多分组消息认证的方法，系统和计算机程序产品
公开(公告)号：US06920556B2
公开(公告)日：2005-07-19
申请号：US09909709
申请日：2001-07-20
申请人： David Kuehr-McLaren , Timothy G. Shoriak
发明人： David Kuehr-McLaren , Timothy G. Shoriak
IPC分类号： H04L29/06 , H04L9/00
CPC分类号： H04L63/04 , H04L63/08
摘要： Methods, systems and computer program products are provided of message authentication for an SSL-based protocol connection between a source device and a destination device. A group message authentication code (MAC) is generated based on a plurality of communication packets. Each of the communication packets has at least one data record. The plurality of communication packets is transmitted using the SSL-based protocol connection along with the generated group MAC. Individual ones of the plurality of communication packets do not include an associated packet MAC as transmitted. A data record count to a next group MAC may be transmitted before transmitting the data records corresponding to the data record count and transmitting the next group MAC. The data records of the communication packets may be pre-encrypted and transmitted using the SSL-based protocol connection to encrypt the group MAC but not the data records. Receiver side methods, systems and computer program products are also provided.
摘要翻译：提供了方法，系统和计算机程序产品，用于在源设备和目标设备之间的基于SSL的协议连接的消息认证。基于多个通信分组生成组消息认证码（MAC）。每个通信分组具有至少一个数据记录。使用基于SSL的协议连接以及所生成的组MAC来发送多个通信分组。多个通信分组中的各个不包括所发送的相关联的分组MAC。在发送对应于数据记录计数的数据记录并发送下一个组MAC之前，可以发送对下一个组MAC的数据记录计数。可以使用基于SSL的协议连接对通信分组的数据记录进行预加密和传输，以加密组MAC而不是数据记录。还提供接收机方法，系统和计算机程序产品。

8. 发明申请

US20050102195A1 Method, system, and computer program product for identifying and implementing collected privacy policies as aggregate privacy policies in electronic transactions 失效
标题翻译：方法，系统和计算机程序产品，用于识别和实施收集的隐私政策作为电子交易中的总体隐私政策
公开(公告)号：US20050102195A1
公开(公告)日：2005-05-12
申请号：US10706465
申请日：2003-11-12
申请人： David Kuehr-McLaren , Martin Presler-Marshall , Calvin Powers , Timothy Shoriak , John Walczyk
发明人： David Kuehr-McLaren , Martin Presler-Marshall , Calvin Powers , Timothy Shoriak , John Walczyk
IPC分类号： G06Q30/00 , G06Q40/00 , G06F17/60
CPC分类号： G06Q40/04 , G06Q30/0605 , G06Q30/0609 , G06Q50/188
摘要： Parties involved in transacting business in an E-marketplace (E-marketplace participants) each identify and submit to the E-marketplace relevant characteristics related to their privacy policy needs. When it is determined that two or more participants are collaborating in a transaction (e.g., a supplier and a shipper; two suppliers; three buyers), the privacy policies of the collaborative group are aggregated to produce a single policy that represents the primary policies of the collaborative transaction being presented by the collaborative group.
摘要翻译：在电子市场（电子市场参与者）中进行业务交易的各方都会识别并提交电子市场与其隐私政策需求相关的相关特征。当确定两个或多个参与者在交易中进行合作（例如，供应商和托运人;两个供应商;三个买方）时，协作组的隐私政策被汇总以产生一个单一的政策，代表主要政策合作交易由合作组提出。

9. 发明授权

US07694329B2 Secure delegation using public key authentication 失效
公开(公告)号：US07694329B2
公开(公告)日：2010-04-06
申请号：US12186420
申请日：2008-08-05
申请人： John R. McGarvey , David Kuehr-McLaren
发明人： John R. McGarvey , David Kuehr-McLaren
IPC分类号： H04L9/12 , H04L9/32 , G06F7/04 , G06F15/16 , H04L9/30
CPC分类号： H04L63/0823 , H04L9/3213 , H04L9/3247 , H04L9/3263 , H04L63/166 , H04L2209/56
摘要： A client is impersonalized to a plurality of servers using a middle-tier server. A common nonce associated with each of the plurality of servers is obtained and the common nonce is provided to the client. The common nonce signed by the client is received at the middle-tier server and provided as a signature for transactions from the client to the plurality of servers so as to authenticate the client to the plurality of servers.

10. 发明申请

US20090055916A1 SECURE DELEGATION USING PUBLIC KEY AUTHENTICATION 失效
公开(公告)号：US20090055916A1
公开(公告)日：2009-02-26
申请号：US12186426
申请日：2008-08-05
申请人： John R. McGarvey , David Kuehr-McLaren
发明人： John R. McGarvey , David Kuehr-McLaren
IPC分类号： H04L9/12 , H04L9/30 , H04L9/32 , G06F15/16 , G06F7/04
CPC分类号： H04L63/0823 , H04L9/3213 , H04L9/3247 , H04L9/3263 , H04L63/166 , H04L2209/56
摘要： A client is impersonalized to a plurality of servers using a middle-tier server. A common nonce associated with each of the plurality of servers is obtained and the common nonce is provided to the client. The common nonce signed by the client is received at the middle-tier server and provided as a signature for transactions from the client to the plurality of servers so as to authenticate the client to the plurality of servers.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式