利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

56 条记录 (耗时 0.031 秒)

    Flexible, selectable, and fine-grained network trust policies
    21.
    发明授权
    Flexible, selectable, and fine-grained network trust policies 有权
    灵活，可选择和细粒度的网络信任策略

    公开(公告)号：US07353535B2

    公开(公告)日：2008-04-01

    申请号：US10404733

    申请日：2003-03-31

    申请人： Christopher G. Kaler ,  John P. Shewchuk ,  Giovanni M. Della-Libera ,  Praerit Garg ,  Brendan W. Dixon

    发明人： Christopher G. Kaler ,  John P. Shewchuk ,  Giovanni M. Della-Libera ,  Praerit Garg ,  Brendan W. Dixon

    IPC分类号： H04K1/00 ,  H04L9/00

    CPC分类号： G06F21/64

    摘要： A flexible way of expressing trust policies using, for example, XML. Multiple statement types may be expressed for a single authority type. Statement types may include less than all of the statements made by an authority type. Authority types may be defined using any manner interpretable by the computing system using the trust policy. In addition, trust policies may be updated as trust levels change. Even multiple trust policies may be used with reconciliation between the multiple trust policies being accomplished by using the more restrictive trust policy with respect to an assertion.

    摘要翻译： 使用例如XML来表达信任策略的灵活方式。 单个授权类型可以表示多个语句类型。 语句类型可能包括少于由权限类型所做的全部语句。 可以使用使用信任策略的计算系统可解释的任何方式定义权限类型。 此外，信任策略可能随着信任级别的变化而更新。 甚至可以使用多个信任策略，以便通过使用关于断言的更严格的信任策略来实现多个信任策略之间的对帐。

    Verifying measurable aspects associated with a module
    27.
    发明授权
    Verifying measurable aspects associated with a module 失效
    验证与模块相关的可衡量的方面

    公开(公告)号：US07743145B2

    公开(公告)日：2010-06-22

    申请号：US10827474

    申请日：2004-04-19

    申请人： Christopher G. Kaler ,  John P. Shewchuk ,  Bradford H. Lovering ,  Daniel R. Simon

    发明人： Christopher G. Kaler ,  John P. Shewchuk ,  Bradford H. Lovering ,  Daniel R. Simon

    IPC分类号： G06F15/16

    CPC分类号： G06F21/445 ,  G06F2221/2103 ,  G06F2221/2129

    摘要： The present invention extends to validating measurable aspects of computing system. A provider causes a challenge to be issued to the requester, the challenge requesting proof that the requester is appropriately configured to access the resource. The requester accesses information that indicates how the requester is to prove an appropriate configuration for accessing the resource. The requester formulates and sends proof that one or more measurable aspects of the requester's configuration are appropriate. The provider receives proof that one or more measurable aspects of the requester's configuration are appropriate and authorizes the requester to access the resource. Proof of one more measurable aspects of a requester can be used along with other types of authentication to authorize a requester to access a resource of a provider. Solutions to challenges can be pre-computed and stored in a location accessible to a provider.

    摘要翻译： 本发明扩展到验证计算系统的可测量方面。 提供者会向请求者发出一个挑战，质询请求证明请求者被正确地配置为访问资源。 请求者访问指示请求者如何证明访问资源的适当配置的信息。 请求者制定并发送证据，证明请求者配置的一个或多个可衡量的方面是适当的。 提供者收到证据，证明请求者配置的一个或多个可衡量的方面是适当的，并授权请求者访问该资源。 请求者的一个可衡量方面的证明可以与其他类型的认证一起使用，以授权请求者访问提供商的资源。 挑战的解决方案可以预先计算并存储在供应商可访问的位置。

    Distributed threat management
    28.
    发明授权
    Distributed threat management 有权
    分布式威胁管理

    公开(公告)号：US07707637B2

    公开(公告)日：2010-04-27

    申请号：US12058156

    申请日：2008-03-28

    申请人： Christopher G. Kaler ,  Giovanni Moises Della-Libera ,  John P. Shewchuk

    发明人： Christopher G. Kaler ,  Giovanni Moises Della-Libera ,  John P. Shewchuk

    IPC分类号： G06F7/04 ,  G06F11/30 ,  H04L9/00

    CPC分类号： G06F21/554

    摘要： A method and system are provided for managing a security threat in a distributed system. A distributed element of the system detects and reports suspicious activity to a threat management agent. The threat management agent determines whether an attack is taking place and deploys a countermeasure to the attack when the attack is determined to be taking place. Another method and system are also provided for managing a security threat in a distributed system. A threat management agent reviews reported suspicious activity including suspicious activity reported from at least one distributed element of the system, determines, based on the reports, whether a pattern characteristic of an attack occurred, and predicts when a next attack is likely to occur. Deployment of a countermeasure to the predicted next attack is directed in a time window based on when the next attack is predicted to occur.

    摘要翻译： 提供了一种用于管理分布式系统中的安全威胁的方法和系统。 系统的分布式元素会将威胁管理代理的可疑活动检测并报告。 威胁管理代理确定攻击是否发生，并在攻击确定发生时部署对攻击的对策。 还提供另一种方法和系统来管理分布式系统中的安全威胁。 威胁管理代理审查报告了可疑活动，包括从系统的至少一个分布式元素报告的可疑活动，根据报告确定是否发生攻击的模式特征，并预测何时可能发生下一次攻击。 基于预测发生下一次攻击的时间窗口，针对预测的下一次攻击的对策部署。

    Drag and drop creation and editing of a page incorporating scripts
    29.
    发明授权
    Drag and drop creation and editing of a page incorporating scripts 有权
    拖放创建和编辑包含脚本的页面

    公开(公告)号：US07543267B2

    公开(公告)日：2009-06-02

    申请号：US10680238

    申请日：2003-10-08

    申请人： Gregory S. Lindhorst ,  Stephen J. Millet ,  John P. Shewchuk

    发明人： Gregory S. Lindhorst ,  Stephen J. Millet ,  John P. Shewchuk

    IPC分类号： G06F9/44

    CPC分类号： G06F8/34 ,  Y10S715/967

    摘要： An environment for developing clientside/serverside code is disclosed. The environment supports programming in an event-driven paradigm while the execution of the resultant programs are executed in a serial execution paradigm. Through shielding the developer from complex scripting segments, the environment provides the developer with the suggestion that that resultant execution model is event-driven. By treating scripts as later-definable objects, the designing phase of a page may be lessened, as the appropriate codings needed to implement a page are determined at a later date. In one example, the codings may be preliminary set as server side or client side, with the environment later adding the appropriate scripting language to complete the developed page.

    摘要翻译： 公开了开发客户端/服务器端代码的环境。 环境支持事件驱动范例中的编程，而执行结果程序在串行执行范例中执行。 通过将开发人员从复杂的脚本段中屏蔽，环境为开发人员提供了结果执行模型是事件驱动的建议。 通过将脚本作为可定义的对象，可以减少页面的设计阶段，因为在稍后的日期确定实现页面所需的适当编码。 在一个示例中，编码可以被初步设置为服务器端或客户端，随后环境添加适当的脚本语言以完成开发的页面。