System and method for protecting configuration settings in distributed text-based configuration files
    8.
    发明授权
    System and method for protecting configuration settings in distributed text-based configuration files 有权
    用于保护分布式文本配置文件中配置设置的系统和方法

    公开(公告)号:US07543145B2

    公开(公告)日:2009-06-02

    申请号:US11072733

    申请日:2005-03-03

    摘要: System and methods for protecting sensitive data stored in a text-based configuration file. In a web server application, data associated with sensitive information such as connection information for a remote database may be stored within a configuration file and accessed whenever a request for information from that database is received. To prevent unwanted access to remote database, the portion of the configuration file with sensitive information is encrypted. A decryption provider selected by the requesting server or client application decrypts the sensitive data using the decryption key, retrieves protected data from the remote database, and the configuration server provides a response based on the sensitive data protecting access to the remote database. The encryption/decryption process is transparent to the web server application consuming the configuration.

    摘要翻译: 用于保护存储在基于文本的配置文件中的敏感数据的系统和方法。 在Web服务器应用中,与诸如远程数据库的连接信息的敏感信息相关联的数据可以被存储在配置文件中,并且每当接收到来自该数据库的信息的请求时被访问。 为了防止不必要的访问远程数据库,具有敏感信息的配置文件的部分被加密。 由请求服务器或客户端应用程序选择的解密提供者使用解密密钥解密敏感数据,从远程数据库检索受保护的数据,配置服务器根据保护对远程数据库的访问的敏感数据提供响应。 加密/解密过程对于消耗配置的Web服务器应用程序是透明的。

    System and method for asynchronous processing in page lifecycle
    9.
    发明授权
    System and method for asynchronous processing in page lifecycle 有权
    页面生命周期中用于异步处理的系统和方法

    公开(公告)号:US08429655B2

    公开(公告)日:2013-04-23

    申请号:US11117886

    申请日:2005-04-29

    IPC分类号: G06F9/46

    摘要: System and methods for asynchronous processing within a web page lifecycle, enabling web page developers to integrate asynchronous work within the web page implementation that can store state inside the page and is applied to requests to the particular page. Handlers initiate event-based or task-based asynchronous operations without keeping a dedicated thread while waiting for a response. The thread is returned to a pool of available threads upon initiation of the process. Results are received on other threads and provided to the page before rendering. Timeout errors are also provided, if a particular result is not received within specified period. The events are delivered in a serial manner so that the page developer uses request instance data without explicit synchronization. This makes a high-scale, asynchronous processing model less complex and more accessible to developers accustomed to web scripting, which is traditionally synchronous.

    摘要翻译: Web页面生命周期中用于异步处理的系统和方法,使网页开发人员可以将网页实现中的异步工作集成到网页实现中,该页面实现可以存储页面内的状态,并应用于对特定页面的请求。 处理程序启动基于事件或基于任务的异步操作,而不保留专用线程等待响应。 线程在开始进程时返回到可用线程池。 在其他线程上收到结果,并在呈现之前提供给页面。 如果在特定时间段内没有收到特定的结果,也会提供超时错误。 事件以串行方式传送,以便页面开发人员在没有显式同步的情况下使用请求实例数据。 这使得大规模的异步处理模型不太复杂,并且对于习惯于传统上是同步的web脚本的开发人员更容易访问。

    Peer assembly inspection
    10.
    发明授权
    Peer assembly inspection 有权
    同行组装检查

    公开(公告)号:US07634806B2

    公开(公告)日:2009-12-15

    申请号:US10157118

    申请日:2002-05-30

    IPC分类号: G06F11/00 H04L29/06 G06F12/00

    CPC分类号: H04L63/101 G06F21/52

    摘要: A method and system for preventing undesired behaviors by executable code modules in a peer-to-peer computer system are provided. When a code module is received, an assembly inspection module queries a blacklist for the received code module. When the received code module is found on the blacklist, the computer system prevents execution of the received code module. Each peer includes an assembly inspection module. When the received code module is not found on the blacklist, the assembly inspection module inspects the received executable code module, prior to execution, to determine whether the code module can perform any undesired behaviors. If so, the received code module is added to the blacklist and prevented from executing.

    摘要翻译: 提供了一种用于防止对等计算机系统中的可执行代码模块的不期望行为的方法和系统。 当接收到代码模块时,装配检查模块向黑名单查询接收到的代码模块。 当在黑名单上找到接收的代码模块时,计算机系统阻止执行所接收的代码模块。 每个对等体包括组装检查模块。 当在黑名单上找不到接收到的代码模块时,装配检查模块在执行之前检查接收到的可执行代码模块,以确定代码模块是否可以执行任何不需要的行为。 如果是这样,接收到的代码模块被添加到黑名单并被阻止执行。