CONTINUOUS MULTI-FACTOR AUTHENTICATION
    1.
    发明申请
    CONTINUOUS MULTI-FACTOR AUTHENTICATION 有权
    连续多因素认证

    公开(公告)号:US20160127351A1

    公开(公告)日:2016-05-05

    申请号:US14129443

    申请日:2013-06-27

    Abstract: Technologies for continuously authenticating a user via multiple authentication factors include a computing device for generating a continuous authentication assertion indicating that continuous authentication of a user is being monitored, sending the continuous authentication assertion to a key distribution center server, and requesting and receiving an initial ticket from the key distribution center server. Such technologies may also include requesting a service ticket from the key distribution center server for accessing a service provider server, receiving a service ticket from the key distribution center server including the continuous authentication assertion, requesting access to the service provider server with the service ticket including the continuous authentication assertion, and accessing the service provider server in response to the continuous authentication assertion being verified.

    Abstract translation: 用于经由多个认证因素连续认证用户的技术包括:计算设备,用于生成指示正在监视用户的连续认证的连续认证断言,向密钥分发中心服务器发送连续认证断言,以及请求和接收初始票证 从密钥分发中心服务器。 这样的技术还可以包括从密钥分发中心服务器请求服务票据以访问服务提供商服务器,从密钥分发中心服务器接收包括持续认证断言的服务票据,请求对服务提供商服务器的访问,服务票据包括 连续认证断言,以及响应于正在验证的连续认证断言而访问服务提供商服务器。

    TECHNIQUES FOR DISTRIBUTED OPERATION OF SECURE CONTROLLERS

    公开(公告)号:US20220382526A1

    公开(公告)日:2022-12-01

    申请号:US17885509

    申请日:2022-08-10

    Abstract: Various embodiments are generally directed to techniques for supporting the distributed execution of a task routine among multiple secure controllers incorporated into multiple computing devices. An apparatus includes a first processor component and first secure controller of a first computing device, where the first secure controller includes: a selection component to select the first secure controller or a second secure controller of a second computing device to compile a task routine based on a comparison of required resources to compile the task routine and available resources of the first secure controller; and a compiling component to compile the task routine into a first version of compiled routine for execution within the first secure controller by the first processor component and a second version for execution within the second secure controller by a second processor component in response to selection of the first secure controller. Other embodiments are described and claimed.

    EDGE COMPUTING OVER DISAGGREGATED RADIO ACCESS NETWORK FUNCTIONS

    公开(公告)号:US20220232423A1

    公开(公告)日:2022-07-21

    申请号:US17704658

    申请日:2022-03-25

    Abstract: The present disclosure describes edge computing over disaggregated radio access network (RAN) infrastructure through dynamic edge data extraction. Edge data is extracted at intermediate stages of RAN processing, provided to edge compute functions, and inserted back into the RAN processing pipeline. These mechanisms allow for the processing of edge data traffic much closer to the data source than existing approaches, which decreases the overall latency and delay. Additionally, these mechanisms do not require changes to already existing network protocols, allowing for non-complex adoption and implementation.

    TECHNOLOGIES FOR PROVIDING EFFICIENT MIGRATION OF SERVICES AT A CLOUD EDGE

    公开(公告)号:US20210103481A1

    公开(公告)日:2021-04-08

    申请号:US16969728

    申请日:2018-06-29

    Abstract: Technologies for providing efficient migration of services include a server device. The server device includes compute engine circuitry to execute a set of services on behalf of a terminal device and migration accelerator circuitry. The migration accelerator circuitry is to determine whether execution of the services is to be migrated from an edge station in which the present server device is located to a second edge station in which a second server device is located, determine a prioritization of the services executed by the server device, and send, in response to a determination that the services are to be migrated and as a function of the determined prioritization, data utilized by each service to the second server device of the second edge station to migrate the services. Other embodiments are also described and claimed.

    TECHNOLOGIES FOR HYBRID FIELD-PROGRAMMABLE GATE ARRAYAPPLICATION-SPECIFIC INTEGRATED CIRCUIT CODE ACCELERATION

    公开(公告)号:US20200233717A1

    公开(公告)日:2020-07-23

    申请号:US15755216

    申请日:2017-03-28

    Abstract: Technologies for hybrid acceleration of code include a computing device (100) having a processor (120), a field-programmable gate array (FPGA) (130), and an application-specific integrated circuit (ASIC) (132). The computing device (100) offloads a service request, such as a cryptographic request or a packet processing request, to the FPGA (130). The FPGA (130) performs one or more algorithmic tasks of an algorithm to perform the service request. The FPGA (130) determines one or more primitive tasks associated with an algorithm task and encapsulates each primitive task in a buffer that is accessible by the ASIC (132). The ASIC (132) performs the primitive tasks in response to encapsulation in the buffer, and the FPGA (130) returns results of the algorithm. The primitive operations may include cryptographic primitives such as modular exponentiation, modular multiplicative inverse, and modular multiplication. The results may be returned to the processor (120) or a network interface controller of the computing device (100).

    MECHANISM FOR FACILITATING DYNAMIC CONTEXT-BASED ACCESS CONTROL OF RESOURCES
    6.
    发明申请
    MECHANISM FOR FACILITATING DYNAMIC CONTEXT-BASED ACCESS CONTROL OF RESOURCES 审中-公开
    促进动态基于上下文的资源访问控制机制

    公开(公告)号:US20170012983A1

    公开(公告)日:2017-01-12

    申请号:US15098524

    申请日:2016-04-14

    Abstract: A mechanism is described for facilitating context-based access control of resources for according to one embodiment. A method of embodiments, as described herein, includes receiving a first request to access a resource of a plurality of resources. The first request may be associated with one or more contexts corresponding to a user placing the first request at a computing device. The method may further include evaluating the one or more contexts. The evaluation of the one or more contexts may include matching the one or more contexts with one or more access policies associated with the requested resource. The method may further include accepting the first request if the one or more contexts satisfy at least one of the access policies.

    Abstract translation: 描述了一种用于促进根据一个实施例的资源的基于上下文的访问控制的机制。 如本文所述的实施例的方法包括接收访问多个资源的资源的第一请求。 第一请求可以与对应于在计算设备处放置第一请求的用户相关联的一个或多个上下文相关联。 该方法还可以包括评估一个或多个上下文。 一个或多个上下文的评估可以包括将一个或多个上下文与与所请求的资源相关联的一个或多个访问策略进行匹配。 该方法还可以包括:如果一个或多个上下文满足访问策略中的至少一个,则接受第一请求。

    Concept for an Attestation Recommendation Service

    公开(公告)号:US20240223369A1

    公开(公告)日:2024-07-04

    申请号:US18393676

    申请日:2023-12-22

    CPC classification number: H04L9/321 G06F21/6245

    Abstract: Various examples relate to a concept for an attestation recommendation service. An apparatus comprises interface circuitry, machine-readable instructions, and processor circuitry to execute the machine-readable instructions to provide an attestation recommendation service, by obtaining, from a requester, information on a first proposed set of attributes to be used for attestation of the requester by an attestation verification service, determining, based on the information on the first proposed set of attributes and based on a desired privacy score of the requester, a second proposed set of attributes to be used for the attestation, and providing information to the requester, the information comprising the second proposed set of attributes.

    TECHNOLOGIES FOR SUPPORTING MULTIPLE DIGITAL RIGHTS MANAGEMENT PROTOCOLS ON A CLIENT DEVICE

    公开(公告)号:US20170318016A1

    公开(公告)日:2017-11-02

    申请号:US15653125

    申请日:2017-07-18

    CPC classification number: H04L63/10 G06F21/10 G06F2221/0708 H04L67/42

    Abstract: Technologies for supporting and implementing multiple digital rights management protocols on a client device are described. In some embodiments, the technologies include a client device having an architectural enclave which may function to identify one of a plurality of digital rights management protocols for protecting digital information to be received from a content provider or a sensor. The architectural enclave select a preexisting secure information processing environment (SIPE) to process said digital information, if a preexisting SIPE supporting the DRM protocol is present on the client. If a preexisting SIPE supporting the DRM protocol is not present on the client, the architectural enclave may general a new SIPE that supports the DRM protocol on the client. Transmission of the digital information may then be directed to the selected preexisting SIPE or the new SIPE, as appropriate.

Patent Agency Ranking