专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060059359A1 Method and system for controlling access privileges for trusted network nodes 失效
标题翻译：用于控制可信网络节点访问权限的方法和系统
公开(公告)号：US20060059359A1
公开(公告)日：2006-03-16
申请号：US10941559
申请日：2004-09-15
申请人： Sterling Reasor , Ramesh Chinta , Paul Leach , John Brezak , Eric Flo
发明人： Sterling Reasor , Ramesh Chinta , Paul Leach , John Brezak , Eric Flo
IPC分类号： H04L9/00
CPC分类号： H04L63/0272 , G06F21/31 , G06F21/41 , G06F21/57 , G06F21/6218 , G06F2221/2141 , G06F2221/2149 , H04L63/0815
摘要： A system and method for controlling access to a computer provides for loose security within a local network while retaining strong security against external access to the network. In one embodiment, a user has access to trusted nodes in a secured group within an unmanaged network, without being required to choose, enter and remember a login password. To establish such a secure blank password or one-click logon account for the user on a computer, a strong random password is generated and stored, and the account is designated as a blank password account. If the device is part of a secured network group, the strong random password is replicated to the other trusted nodes. When a user with a blank password account wishes to log in to a computer, the stored strong random password is retrieved and the user is authenticated.
摘要翻译：用于控制对计算机的访问的系统和方法提供本地网络中的松散安全性，同时保持对网络的外部访问的强大的安全性。在一个实施例中，用户可以访问非托管网络内的安全组中的可信节点，而不需要选择，输入和记住登录密码。要在计算机上为用户建立一个安全的空白密码或一键登录帐户，将生成并存储一个强大的随机密码，并将该帐户指定为空白密码帐户。如果设备是安全网络组的一部分，则强大的随机密码将复制到其他可信节点。当具有空白密码帐户的用户希望登录到计算机时，检索所存储的强随机密码，并对用户进行认证。

2. 发明授权

US09047477B2 Distributed key encryption in servers 有权
标题翻译：服务器中的分布式密钥加密
公开(公告)号：US09047477B2
公开(公告)日：2015-06-02
申请号：US12471474
申请日：2009-05-26
申请人： Fabian Nunez-Tejerina , Jeffrey B. Kay , Robert C. Fruth , Naveen A. Palavalli , Ramesh Chinta , Tolga Acar
发明人： Fabian Nunez-Tejerina , Jeffrey B. Kay , Robert C. Fruth , Naveen A. Palavalli , Ramesh Chinta , Tolga Acar
IPC分类号： H04L9/00 , G06F21/62 , H04L9/32 , H04L29/06
CPC分类号： G06F21/6209 , H04L9/006 , H04L9/3263 , H04L63/0823
摘要： Architecture that stores specific passwords on behalf of users, and encrypts the passwords using encryption keys managed by a distributed key management system. The encryption keys are stored in a directory service (e.g., hierarchical) in an area that is inaccessible by selected entities (e.g., administrative users) having superior permissions such as supervisory administrators, but accessible to the account components that need to access the unencrypted passwords. The distributed key management system makes the encryption key stored in the directory service available to all hardware/software components that need the key to encrypt or decrypt the passwords.
摘要翻译：代表用户存储特定密码的体系结构，并使用由分布式密钥管理系统管理的加密密钥加密密码。加密密钥存储在具有诸如监督管理员等优越许可的选定实体（例如，管理用户）无法访问的区域中的目录服务（例如，分级）中，但是对于需要访问未加密密码的帐户组件可访问。分布式密钥管理系统使存储在目录服务中的加密密钥可用于需要密钥的所有硬件/软件组件来加密或解密密码。

3. 发明申请

US20070294699A1 CONDITIONALLY RESERVING RESOURCES IN AN OPERATING SYSTEM 审中-公开
标题翻译：在运行系统中有条件地保留资源
公开(公告)号：US20070294699A1
公开(公告)日：2007-12-20
申请号：US11424681
申请日：2006-06-16
申请人： Pradeep Bahl , Narasimha Rao S. S. Nagampalli , Ramesh Chinta
发明人： Pradeep Bahl , Narasimha Rao S. S. Nagampalli , Ramesh Chinta
IPC分类号： G06F9/46
CPC分类号： G06F9/5027 , G06F21/52 , G06F21/62 , G06F2209/5014
摘要： A facility is provided for conditionally reserving resources in an operating system. In various embodiments, the facility receives an indication of a conditional reservation declarator that identifies at least a resource, an action, a condition, and a principal. The conditional reservation declarator can specify a directive that corresponds to the identified resource, action, condition, and principal. The facility configures itself to apply the specified directive in relation to the identified action and resource when the principal attempts to perform the identified action in relation to the identified resource and the condition is met. The facility can apply the specified directive when it determines that the principal is attempting to perform the identified action on the identified resource when the condition is met.
摘要翻译：提供了一种在操作系统中有条件地保留资源的设施。在各种实施例中，设施接收标识至少资源，动作，条件和委托人的条件保留声明符的指示。条件保留声明符可以指定与所标识的资源，动作，条件和主体相对应的指令。当主体尝试执行与识别的资源相关的已识别动作并满足条件时，该工具将自身配置为应用与所识别的动作和资源有关的指定指令。当该条件确定主体正在尝试在满足条件时对所标识的资源执行已识别的操作时，该工具可以应用指定的指令。

4. 发明申请

US20070162909A1 Reserving resources in an operating system 审中-公开
标题翻译：在操作系统中预留资源
公开(公告)号：US20070162909A1
公开(公告)日：2007-07-12
申请号：US11329984
申请日：2006-01-11
申请人： Pradeep Bahl , Narasimha Nagampalli , Ramesh Chinta
发明人： Pradeep Bahl , Narasimha Nagampalli , Ramesh Chinta
IPC分类号： G06F9/46
CPC分类号： G06F21/554 , G06F9/468 , G06F21/6218
摘要： Techniques for reserving resources in an operating system are provided. The techniques include receiving an indication of an authorization setting specifying a directive and identifying at least a resource, an action, and a principal, configuring to apply the specified directive in relation to the identified action and resource when the principal attempts to perform the identified action in relation to the indicated resource, determining that the principal is attempting to perform the identified action on the identified resource, and applying the specified directive. The techniques function whether or not the resources or principals exist when the resources are reserved.
摘要翻译：提供了在操作系统中预留资源的技术。这些技术包括接收指定指令的授权设置的指示，并且至少识别资源，动作和委托人，配置为当主体试图执行所识别的动作时，针对所标识的动作和资源应用所指定的指令相对于所指示的资源，确定主体正在尝试对所标识的资源执行所识别的动作，并应用指定的指令。当资源被保留时，该技术是否存在资源或主体。

5. 发明授权

US09191397B2 Extension model for improved parsing and describing protocols 有权
标题翻译：扩展模型，用于改进解析和描述协议
公开(公告)号：US09191397B2
公开(公告)日：2015-11-17
申请号：US12147895
申请日：2008-06-27
申请人： Ramesh Chinta , Crystal Li , Vladimir Lifliand , Narasimha Rao S. S. Nagampalli
发明人： Ramesh Chinta , Crystal Li , Vladimir Lifliand , Narasimha Rao S. S. Nagampalli
IPC分类号： G06F15/173 , H04L29/06 , H04L12/26
CPC分类号： H04L63/1408 , H04L43/18 , H04L69/03
摘要： Described is a technology by which an engine parses data based upon modules arranged in a tree-like model structure. Only those modules that meet a condition with respect to the data are invoked for processing the data. Each child module specifies a parent module and specifies a condition for when the parent is to invoke the child module. As a module processes the data, if a child module's specified condition is met, it invokes the corresponding child module, (which in turn may invoke a lower child if its condition is met, and so on). When the data corresponds to protocols, the model facilitates protocol layering. A top level parent may represent one protocol (e.g., TCP), a child beneath may represent a lower-layer protocol (e.g., HTTP), whose children may handle certain types of HTTP commands, or correspond to a signature that the child module is programmed to detect.
摘要翻译：描述了一种基于布置在树状模型结构中的模块来分析数据的技术。仅调用满足数据条件的模块才能处理数据。每个子模块指定一个父模块，并指定父级何时调用子模块的条件。作为一个模块处理数据，如果满足子模块的指定条件，它将调用相应的子模块（如果满足其条件，则该模块又可以调用下一个子级别，等等）。当数据对应于协议时，该模型便于协议分层。顶级父级可以表示一个协议（例如，TCP），下面的小孩可以表示较低层协议（例如，HTTP），其小孩可以处理某些类型的HTTP命令，或对应于子模块所在的签名编程检测。

6. 发明申请

US20090328154A1 ISOLATION OF SERVICES OR PROCESSES USING CREDENTIAL MANAGED ACCOUNTS 有权
标题翻译：使用经授权管理的账户分离服务或流程
公开(公告)号：US20090328154A1
公开(公告)日：2009-12-31
申请号：US12146344
申请日：2008-06-25
申请人： Scott A. Field , Ramesh Chinta , Liqiang Zhu , Umit Akkus , Siddharth Bhai , Gopinathan Kannan , James J. Simmons , Qi Cao , Paul Miller , Ryan Fairfax , Alexandru Hanganu
发明人： Scott A. Field , Ramesh Chinta , Liqiang Zhu , Umit Akkus , Siddharth Bhai , Gopinathan Kannan , James J. Simmons , Qi Cao , Paul Miller , Ryan Fairfax , Alexandru Hanganu
IPC分类号： H04L9/32
CPC分类号： G06F21/46
摘要： This disclosure describes methods, systems, and application programming interfaces for creating a credential managed account. This disclosure describes creating a new password managed account, defining the password managed account, wherein the password managed account is to access a service on a managed computing device, identifying the password managed account for a lifecycle, and automatically managing the password managed account by updating and changing a password for the password managed account on a periodic basis.
摘要翻译：本公开描述了用于创建凭证管理帐户的方法，系统和应用程序编程接口。本公开描述了创建新的密码管理帐户，定义密码管理帐户，其中密码管理帐户将访问受管计算设备上的服务，识别生命周期中的密码管理帐户，以及通过更新来自动管理密码管理帐户并定期更改密码管理帐户的密码。

7. 发明授权

US07603708B2 Securing network services using network action control lists 有权
标题翻译：使用网络动作控制列表保护网络服务
公开(公告)号：US07603708B2
公开(公告)日：2009-10-13
申请号：US11181376
申请日：2005-07-13
申请人： Pradeep Bahl , Ramesh Chinta , Narasimha Rao S. S. Nagampalli , Scott A Field
发明人： Pradeep Bahl , Ramesh Chinta , Narasimha Rao S. S. Nagampalli , Scott A Field
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L63/1441 , H04L63/101
摘要： A computer system having secured network services is presented. The computer system comprises a processor, a memory, and a network action processing module. The network action processing module processes network actions from one or more network services executing on the computer system. The computer system is further configured to execute at least network service performing network actions in conjunction with the network action processing module. Upon receiving a network action from a network service, the network action processing module determines whether the network action is a valid network action according to a network action control list. If the network action is determined to not be a valid network action, the network action is blocked. Alternatively, if the network action is determined to be a valid network action, the network action is permitted to be completed.
摘要翻译：提出了一种具有安全网络服务的计算机系统。计算机系统包括处理器，存储器和网络动作处理模块。网络动作处理模块处理来自在计算机系统上执行的一个或多个网络服务的网络动作。该计算机系统进一步被配置为至少执行网络服务，与网络动作处理模块一起执行网络动作。网络动作处理模块从网络服务接收到网络动作后，根据网络动作控制列表判断网络动作是否为有效的网络动作。如果网络动作被确定为不是有效的网络动作，则网络动作被阻止。或者，如果网络动作被确定为有效的网络动作，则允许网络动作被完成。

8. 发明申请

US20070101335A1 Identifying separate threads executing within a single process 有权
标题翻译：识别单个进程中执行的单独线程
公开(公告)号：US20070101335A1
公开(公告)日：2007-05-03
申请号：US11266506
申请日：2005-11-03
申请人： Narasimha Nagampalli , Pradeep Bahl , Ramesh Chinta
发明人： Narasimha Nagampalli , Pradeep Bahl , Ramesh Chinta
IPC分类号： G06F9/46
CPC分类号： G06F9/4843 , G06F9/5027 , G06F2209/5018
摘要： A computer-readable medium bearing computer-executable instructions which, when executed on a computer, carry out a method for handling a request for an operating system service is presented. The method comprises receiving a request for execution of an operating system service. The corresponding operating system service is then identified. A unique service identifier that corresponds to the requested operating system service is obtained. A service thread is generated, the thread being associated with an executing process. Storage associated with the service thread is initialized with the unique service identifier. Thereafter, the execution of the service thread is initiated.
摘要翻译：一种具有计算机可执行指令的计算机可读介质，其在计算机上执行时执行用于处理对操作系统服务的请求的方法。该方法包括接收执行操作系统服务的请求。然后识别相应的操作系统服务。获得与所请求的操作系统服务相对应的唯一服务标识符。生成服务线程，线程与执行进程相关联。与服务线程相关联的存储将使用唯一的服务标识符初始化。此后，启动服务线程的执行。

9. 发明授权

US09501635B2 Isolation of services or processes using credential managed accounts 有权
标题翻译：使用凭据管理帐户隔离服务或进程
公开(公告)号：US09501635B2
公开(公告)日：2016-11-22
申请号：US12146344
申请日：2008-06-25
申请人： Ramesh Chinta , Scott A. Field , Liqiang Zhu , Umit Akkus , Siddharth Bhai , Gopinathan Kannan , James J Simmons , Qi Cao , Paul Miller , Ryan Fairfax , Alexandru Hanganu
发明人： Ramesh Chinta , Scott A. Field , Liqiang Zhu , Umit Akkus , Siddharth Bhai , Gopinathan Kannan , James J Simmons , Qi Cao , Paul Miller , Ryan Fairfax , Alexandru Hanganu
IPC分类号： H04L29/06 , G06F21/46
CPC分类号： G06F21/46
摘要： This disclosure describes methods, systems, and application programming interfaces for creating a credential managed account. This disclosure describes creating a new password managed account, defining the password managed account, wherein the password managed account is to access a service on a managed computing device, identifying the password managed account for a lifecycle, and automatically managing the password managed account by updating and changing a password for the password managed account on a periodic basis.
摘要翻译：本公开描述了用于创建凭证管理帐户的方法，系统和应用程序编程接口。本公开描述了创建新的密码管理帐户，定义密码管理帐户，其中密码管理帐户将访问受管计算设备上的服务，识别生命周期中的密码管理帐户，以及通过更新来自动管理密码管理帐户并定期更改密码管理帐户的密码。

10. 发明授权

US08230485B2 Method and system for controlling access privileges for trusted network nodes 失效
标题翻译：用于控制可信网络节点访问权限的方法和系统
公开(公告)号：US08230485B2
公开(公告)日：2012-07-24
申请号：US10941559
申请日：2004-09-15
申请人： Sterling M. Reasor , Ramesh Chinta , Paul J. Leach , John E. Brezak , Eric R. Flo
发明人： Sterling M. Reasor , Ramesh Chinta , Paul J. Leach , John E. Brezak , Eric R. Flo
IPC分类号： G06F7/04
CPC分类号： H04L63/0272 , G06F21/31 , G06F21/41 , G06F21/57 , G06F21/6218 , G06F2221/2141 , G06F2221/2149 , H04L63/0815
摘要： A system and method for controlling access to a computer provides for loose security within a local network while retaining strong security against external access to the network. In one embodiment, a user has access to trusted nodes in a secured group within an unmanaged network, without being required to choose, enter and remember a login password. To establish such a secure blank password or one-click logon account for the user on a computer, a strong random password is generated and stored, and the account is designated as a blank password account. If the device is part of a secured network group, the strong random password is replicated to the other trusted nodes. When a user with a blank password account wishes to log in to a computer, the stored strong random password is retrieved and the user is authenticated.
摘要翻译：用于控制对计算机的访问的系统和方法提供本地网络中的松散安全性，同时保持对网络的外部访问的强大的安全性。在一个实施例中，用户可以访问非托管网络内的安全组中的可信节点，而不需要选择，输入和记住登录密码。要在计算机上为用户建立一个安全的空白密码或一键登录帐户，将生成并存储一个强大的随机密码，并将该帐户指定为空白密码帐户。如果设备是安全网络组的一部分，则强大的随机密码将复制到其他可信节点。当具有空白密码帐户的用户希望登录到计算机时，检索所存储的强随机密码，并对用户进行认证。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式