专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08230485B2 Method and system for controlling access privileges for trusted network nodes 失效
标题翻译：用于控制可信网络节点访问权限的方法和系统
公开(公告)号：US08230485B2
公开(公告)日：2012-07-24
申请号：US10941559
申请日：2004-09-15
申请人： Sterling M. Reasor , Ramesh Chinta , Paul J. Leach , John E. Brezak , Eric R. Flo
发明人： Sterling M. Reasor , Ramesh Chinta , Paul J. Leach , John E. Brezak , Eric R. Flo
IPC分类号： G06F7/04
CPC分类号： H04L63/0272 , G06F21/31 , G06F21/41 , G06F21/57 , G06F21/6218 , G06F2221/2141 , G06F2221/2149 , H04L63/0815
摘要： A system and method for controlling access to a computer provides for loose security within a local network while retaining strong security against external access to the network. In one embodiment, a user has access to trusted nodes in a secured group within an unmanaged network, without being required to choose, enter and remember a login password. To establish such a secure blank password or one-click logon account for the user on a computer, a strong random password is generated and stored, and the account is designated as a blank password account. If the device is part of a secured network group, the strong random password is replicated to the other trusted nodes. When a user with a blank password account wishes to log in to a computer, the stored strong random password is retrieved and the user is authenticated.
摘要翻译：用于控制对计算机的访问的系统和方法提供本地网络中的松散安全性，同时保持对网络的外部访问的强大的安全性。在一个实施例中，用户可以访问非托管网络内的安全组中的可信节点，而不需要选择，输入和记住登录密码。要在计算机上为用户建立一个安全的空白密码或一键登录帐户，将生成并存储一个强大的随机密码，并将该帐户指定为空白密码帐户。如果设备是安全网络组的一部分，则强大的随机密码将复制到其他可信节点。当具有空白密码帐户的用户希望登录到计算机时，检索所存储的强随机密码，并对用户进行认证。

2. 发明授权

US07900257B2 Enhanced computer intrusion detection methods and systems 有权
标题翻译：增强的计算机入侵检测方法和系统
公开(公告)号：US07900257B2
公开(公告)日：2011-03-01
申请号：US12475883
申请日：2009-06-01
申请人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
发明人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
IPC分类号： G06F11/00 , G06F7/04 , G06F12/14
CPC分类号： G06F21/31 , G06F2221/2101
摘要： Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.
摘要翻译：提供了改进的入侵检测和/或跟踪方法和系统，用于跨越各种计算设备和网络。例如，某些方法在每个认证/登录过程期间形成基本唯一的审计标识符。一种方法包括识别与认证/登录过程相关联的一个或多个基本上唯一的参数并将其加密以形成至少一个审核标识符，然后可以由认证/登录过程中涉及的每个设备生成和记录。然后可以将生成的审核日志文件与来自其他设备的类似审核日志文件一起审核，以跨多个平台跟踪用户。

3. 发明授权

US07543333B2 Enhanced computer intrusion detection methods and systems 有权
标题翻译：增强的计算机入侵检测方法和系统
公开(公告)号：US07543333B2
公开(公告)日：2009-06-02
申请号：US10118808
申请日：2002-04-08
申请人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
发明人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
IPC分类号： G06F21/06 , G06F21/20 , G06F21/22 , G06F21/24 , G08B23/00 , G06F15/173 , H04K1/00
CPC分类号： G06F21/31 , G06F2221/2101
摘要： Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.
摘要翻译：提供了改进的入侵检测和/或跟踪方法和系统，用于跨越各种计算设备和网络。例如，某些方法在每个认证/登录过程期间形成基本唯一的审计标识符。一种方法包括识别与认证/登录过程相关联的一个或多个基本上唯一的参数并将其加密以形成至少一个审核标识符，然后可以由认证/登录过程中涉及的每个设备生成和记录。然后可以将生成的审核日志文件与来自其他设备的类似审核日志文件一起审核，以跨多个平台跟踪用户。

4. 发明授权

US07308709B1 System and method for managing and authenticating services via service principal names 有权
标题翻译：通过服务主体名称管理和认证服务的系统和方法
公开(公告)号：US07308709B1
公开(公告)日：2007-12-11
申请号：US09560079
申请日：2000-04-27
申请人： John E. Brezak, Jr. , Richard B. Ward , Paul J. Leach , Michael M. Swift
发明人： John E. Brezak, Jr. , Richard B. Ward , Paul J. Leach , Michael M. Swift
IPC分类号： G06F17/00 , H04L9/00
CPC分类号： H04L63/0807 , G06Q20/3674 , H04L63/0407
摘要： A methododology is provided for facilitating authentication of a service. The methodology includes making a request to a first party for authentication of a service, the request including a first alias. A list of aliases associated with the service is then searched enabling a second party making the request to access the service if a match is found between the first alias and at least one alias of the list of aliases.
摘要翻译：提供了一种便于认证服务的方法学。该方法包括向第一方请求服务认证，该请求包括第一别名。然后搜索与服务相关联的别名的列表，使得如果在第一别名和别名列表的至少一个别名之间找到匹配，则允许进行请求的第二方访问该服务。

5. 发明授权

US06427209B1 System and method of user logon in combination with user authentication for network access 有权
标题翻译：用户登录的系统和方法与网络访问的用户认证相结合
公开(公告)号：US06427209B1
公开(公告)日：2002-07-30
申请号：US09549794
申请日：2000-04-14
申请人： John E. Brezak, Jr. , Richard B. Ward , Michael M. Swift , Paul J. Leach
发明人： John E. Brezak, Jr. , Richard B. Ward , Michael M. Swift , Paul J. Leach
IPC分类号： H04L900
CPC分类号： H04L67/306 , G06F21/33 , H04L63/0807 , H04L63/102 , H04L69/329
摘要： A system and method of combined user logon-authentication provides enhanced logon performance by utilizing communications with a network access control server for user authentication to provide user account data required for user logon. When a user logs on a computer, the computer initiates a network access control process with a network access control server for obtaining access to network services, including the computer that the user is logging on. During the access control process, the network access control server authenticates the user and queries a directory service for the account data for the user. The network access control server includes the user account data in one of the communication packets sent to the computer in the network access control process. The computer retrieves the user account data from the communication packet and uses the data to complete the user logon.
摘要翻译：组合用户登录认证的系统和方法通过利用与网络访问控制服务器的通信进行用户认证来提供增强的登录性能，以提供用户登录所需的用户帐户数据。当用户登录计算机时，计算机利用网络访问控制服务器启动网络访问控制过程，以获得对网络服务的访问，包括用户正在登录的计算机。在访问控制过程中，网络访问控制服务器对用户进行身份验证，并向目录服务查询用户的帐户数据。网络访问控制服务器在网络访问控制过程中包括在发送到计算机的通信分组之一中的用户帐户数据。计算机从通信包中检索用户帐户数据，并使用数据完成用户登录。

6. 发明申请

US20090241193A1 Enhanced Computer Intrusion Detection Methods And Systems 有权
标题翻译：增强计算机入侵检测方法与系统
公开(公告)号：US20090241193A1
公开(公告)日：2009-09-24
申请号：US12475883
申请日：2009-06-01
申请人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
发明人： Bhalchandra S. Pandit , Praerit Garg , Richard B. Ward , Paul J. Leach , Scott A. Field , Robert P. Reichel , John E. Brezak
IPC分类号： G06F21/20 , G06F21/22 , G06F21/24 , G08B23/00 , H04K1/00 , G06F15/173 , G06F21/06
CPC分类号： G06F21/31 , G06F2221/2101
摘要： Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.
摘要翻译：提供了改进的入侵检测和/或跟踪方法和系统，用于跨越各种计算设备和网络。例如，某些方法在每个认证/登录过程期间形成基本唯一的审计标识符。一种方法包括识别与认证/登录过程相关联的一个或多个基本上唯一的参数并将其加密以形成至少一个审核标识符，然后可以由认证/登录过程中涉及的每个设备生成和记录。然后可以将生成的审核日志文件与来自其他设备的类似审核日志文件一起审核，以跨多个平台跟踪用户。

7. 发明授权

US06401211B1 System and method of user logon in combination with user authentication for network access 有权
公开(公告)号：US06401211B1
公开(公告)日：2002-06-04
申请号：US09525419
申请日：2000-03-15
申请人： John E. Brezak, Jr. , Richard B. Ward , Michael M. Swift , Paul J. Leach
发明人： John E. Brezak, Jr. , Richard B. Ward , Michael M. Swift , Paul J. Leach
IPC分类号： G06F1100
CPC分类号： H04L67/306 , G06F21/33 , H04L63/0807 , H04L63/102 , H04L69/329
摘要： A system and method of combined user logon-authentication provides enhanced logon performance by utilizing communications with a network access control server for user authentication to provide user account data required for user logon. When a user logs on a computer, the computer initiates a network access control process with a network access control server for obtaining access to network services, including the computer that the user is logging on. During the access control process, the network access control server authenticates the user and queries a directory service for the account data for the user. The network access control server includes the user account data in one of the communication packets sent to the computer in the network access control process. The computer retrieves the user account data from the communication packet and uses the data to complete the user logon.

8. 发明授权

US08996866B2 Unobtrusive assurance of authentic user intent 有权
标题翻译：真实的用户意图不明智的保证
公开(公告)号：US08996866B2
公开(公告)日：2015-03-31
申请号：US12645465
申请日：2009-12-22
申请人： Crispin Cowan , Matthew Z. Tamayo-Rios , Tanmoy Dutta , John Lambert , Paul J. Leach , Scott A. Field , Thomas C. Jones
发明人： Crispin Cowan , Matthew Z. Tamayo-Rios , Tanmoy Dutta , John Lambert , Paul J. Leach , Scott A. Field , Thomas C. Jones
IPC分类号： G06F21/52 , G06F21/62 , G06F21/53
CPC分类号： G06F21/52 , G06F21/53 , G06F21/62
摘要： Computer-executable instructions that are directed to the performance of consequential actions and automatically elevate to execute at a higher privilege level to do so can perform such consequential actions only after user notification. Doing so can enable monitoring processes to avoid presenting duplicative user notification upon detection of such auto-elevation. In addition, prior to presenting user notification, input from the execution environment can be ignored and access to DLLs for performing consequential actions can be avoided. A static analyzer can identify non-conforming computer-executable instructions. A wrapper can be utilized to provide compliance by otherwise unknown or non-conforming computer-executable instructions.
摘要翻译：针对执行相应操作并自动提升以在较高权限级别执行的计算机可执行指令，只有在用户通知后才能执行此类后续操作。这样做可以实现监控过程，以避免在检测到这种自动升高时呈现重复的用户通知。此外，在呈现用户通知之前，可以忽略来自执行环境的输入，并且可以避免对用于执行相继动作的DLL的访问。静态分析仪可以识别不合格的计算机可执行指令。可以使用包装器来提供否则未知或不合格的计算机可执行指令的符合性。

9. 发明授权

US08464319B2 Resource access based on multiple scope levels 有权
公开(公告)号：US08464319B2
公开(公告)日：2013-06-11
申请号：US12684426
申请日：2010-01-08
申请人： Raja P. Perumal , Jeffrey B. Hamblin , Paul J. Leach
发明人： Raja P. Perumal , Jeffrey B. Hamblin , Paul J. Leach
IPC分类号： G06F21/00
CPC分类号： G06F21/30 , G06F21/6218 , G06F2221/2113 , G06F2221/2141
摘要： A scope hierarchy corresponding to a resource to which a type of access is requested is identified, the scope hierarchy including multiple scope levels each of which has an associated access control list. An access control list associated with a lower scope level can further restrict access permitted to the resource by an access control list associated with a higher scope level. Based at least in part on one or more of the access control lists associated with the multiple scope levels, a determination is made as to whether the requested type of access to the resource is permitted.

10. 发明申请

US20130061299A1 DISTRIBUTED COMPUTER SYSTEMS WITH TIME-DEPENDENT CREDENTIALS 有权
公开(公告)号：US20130061299A1
公开(公告)日：2013-03-07
申请号：US13224246
申请日：2011-09-01
申请人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
发明人： Mark Novak , Paul J. Leach , Yi Zeng , Saurav Sinha , K. Michiko Short , Gopinathan Kannan
IPC分类号： G06F21/00
CPC分类号： G06F21/00 , G06F21/34 , H04L63/065 , H04L63/068 , H04L67/10 , H04L2463/121 , H04W12/06
摘要： A distributed system in which time-dependent credentials are supplied by controllers that operate according to different local times. Errors that might arise from the controllers generating inconsistent credentials because of time skew are avoided by identifying credentials generated during transition intervals in which different ones of the controllers may generate different credentials at the same absolute time. During a transition interval, controllers and other devices may use credentials differentially based on the nature of the authentication function. Each controller may periodically renew its credentials based on self-scheduled renewals or based on requests from other devices, such that renewal times are offset by random delays to avoid excessive network traffic. Controllers may determine which credential is valid for any given time, based on a cryptographically secure key associated with that time and information identifying the entity that is associated with that credential.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式