Systems and methods for sharing information
    32.
    发明申请
    Systems and methods for sharing information 审中-公开
    用于共享信息的系统和方法

    公开(公告)号:US20080168051A1

    公开(公告)日:2008-07-10

    申请号:US11650767

    申请日:2007-01-08

    IPC分类号: G06F17/30

    CPC分类号: G06F16/93

    摘要: Techniques are provided for creating and sharing information about arbitrary documents. A primary document is selected and a document content identifier generated based on the content of the primary document. Additional information such as comments, additional documents, reviews and the like are created and/or selected from an information repository. The additional information is associated with the primary document based on the document content identifier of the primary document. A search for information associated with the primary document compares the document content identifier of the primary document to document content identifiers associated with the additional information. Additional information associated with the document content identifiers matching the primary document content identifier is retrieved and displayed to the user.

    摘要翻译: 提供了用于创建和共享关于任意文档的信息的技术。 选择主文档,并根据主文档的内容生成文档内容标识符。 从信息库创建和/或选择诸如注释,附加文档,评论等附加信息。 基于主文档的文档内容标识符,附加信息与主文档相关联。 搜索与主文档相关联的信息将主文档的文档内容标识符与附加信息相关联的文档内容标识符进行比较。 与与主文档内容标识符匹配的文档内容标识符相关联的附加信息被检索并显示给用户。

    PERSONAL DOMAIN CONTROLLER
    34.
    发明申请
    PERSONAL DOMAIN CONTROLLER 有权
    个人域控制器

    公开(公告)号:US20070266164A1

    公开(公告)日:2007-11-15

    申请号:US11383144

    申请日:2006-05-12

    IPC分类号: G06F15/16

    摘要: A method of accessing a data resource identifies the data resource, the data resource accessible through a first device and associated with a resource locator, the first device configured to provide access to the data resource responsive to possession of a whitelisted credential. The method includes receiving a second-device credential from a second device by a personal domain controller, the personal domain controller and the first device within a first trusted relationship and provides, by the personal domain controller, the second-device credential to the first device for whitelisting subject to the first trusted relationship. The method uses, by the second device, the second-device credential to access the data resource responsive to the resource locator.

    摘要翻译: 访问数据资源的方法标识数据资源,数据资源可通过第一设备访问并与资源定位符相关联,第一设备被配置为响应于拥有白名单凭证提供对数据资源的访问。 该方法包括由个人域控制器,个人域控制器和第一信任关系中的第一设备从第二设备接收第二设备凭证,并且由个人域控制器将第二设备凭证提供给第一设备 将白名单列入第一个信任关系。 该方法由第二设备使用第二设备凭证来响应于资源定位器来访问数据资源。

    System and method for establishing temporary and permanent credentials for secure online commerce
    35.
    发明申请
    System and method for establishing temporary and permanent credentials for secure online commerce 有权
    建立用于安全在线商务的临时和永久证书的系统和方法

    公开(公告)号:US20070130617A1

    公开(公告)日:2007-06-07

    申请号:US11293402

    申请日:2005-12-02

    IPC分类号: H04L9/32

    摘要: One embodiment of the present invention provides a system for establishing temporary and permanent credentials for secure remote data access. The system includes a temporary smart card configured to provide a temporary credential for a first device, thereby providing the first device with temporary secure access to a remote data source when the temporary smart card is used with the first device. Additionally, the system includes an enrollment smart card configured to provide a permanent credential for a second device, thereby providing the second device with permanent secure access to the remote data source without presence of the enrollment smart card or the temporary smart card.

    摘要翻译: 本发明的一个实施例提供了一种用于建立用于安全远程数据访问的临时和永久凭证的系统。 该系统包括被配置为为第一设备提供临时证书的临时智能卡,从而当临时智能卡与第一设备一起使用时,向第一设备提供对远程数据源的临时安全访问。 此外,该系统包括被配置为为第二设备提供永久凭证的注册智能卡,从而在不存在注册智能卡或临时智能卡的情况下向第二设备提供对远程数据源的永久安全访问。

    System and method for establishing secondary channels
    36.
    发明申请
    System and method for establishing secondary channels 有权
    建立二级渠道的制度和方法

    公开(公告)号:US20070019806A1

    公开(公告)日:2007-01-25

    申请号:US11528904

    申请日:2006-09-28

    IPC分类号: H04K1/10

    CPC分类号: H04L63/061 H04L63/18

    摘要: A method for establishing a secondary communication channel between at least two computing devices over a network medium through use of a primary channel connects a first computing device with a first telephonic unit and a second computing device with a second telephonic unit. If the two telephonic units are in communication with each other over a primary channel, and communication channels are established between the computing devices and their respective telephonic units, then the first computing device transmits its location information to the second computing device over the primary channel. A connection is then established between the second computing device and the first computing device over a secondary communication channel.

    摘要翻译: 通过使用主信道在网络介质上在至少两个计算设备之间建立辅助通信信道的方法将第一计算设备与第一电话单元和第二计算设备与第二电话单元相连接。 如果两个电话单元在主信道上彼此通信,并且在计算设备和它们各自的电话单元之间建立通信信道,则第一计算设备通过主信道将其位置信息发送到第二计算设备。 然后通过辅助通信信道在第二计算设备和第一计算设备之间建立连接。

    Systems and methods for authenticating communications in a network medium
    37.
    发明申请
    Systems and methods for authenticating communications in a network medium 有权
    用于在网络介质中认证通信的系统和方法

    公开(公告)号:US20060174116A1

    公开(公告)日:2006-08-03

    申请号:US11395274

    申请日:2006-04-03

    IPC分类号: H04L9/00

    摘要: Pre-authentication information of devices is used to securely authenticate arbitrary peer-to-peer ad-hoc interactions. In one embodiment, public key cryptography is used in the main wireless link with location-limited channels being initially used to pre-authenticate devices. Use of public keys in the pre-authentication data allows for the broadening of types of media suitable for use as location-limited channels to include, for example, audio and infrared. Also, it allows a range of key exchange protocols which can be authenticated in this manner to include most public-key-based protocols. As a result, a large range of devices, protocols can be used in various applications. Further, an eavesdropper is forced to mount an active attack on the location-limited channel itself in order to access an ad-hoc exchange. However, this results in the discovery of the eavesdropper.

    摘要翻译: 设备的预认证信息用于安全地验证任意的对等ad-hoc交互。 在一个实施例中,在主无线链路中使用公共密钥密码术,其中最初用于对设备进行预认证的位置限制信道。 在预认证数据中使用公共密钥允许扩展适合用作位置限制信道的媒体的类型,以包括例如音频和红外。 此外,它允许可以以这种方式认证的一系列密钥交换协议,以包括大多数基于公钥密钥的协议。 因此,可以在各种应用中使用大范围的设备协议。 此外,窃听者被迫对位置限制频道本身进行主动攻击,以便访问自组织交换。 然而,这导致窃听者的发现。

    Hardware-supported secure network boot
    38.
    发明申请
    Hardware-supported secure network boot 审中-公开
    硬件支持的安全网络引导

    公开(公告)号:US20060129797A1

    公开(公告)日:2006-06-15

    申请号:US11012513

    申请日:2004-12-15

    IPC分类号: G06F9/24

    CPC分类号: G06F21/575

    摘要: Systems and methods for establishing an authenticated and encrypted network connection in a boot protocol, and specifying the boot image to be loaded by a client, are disclosed. A hardware token or other portable medium, such as a USB drive or device, CD, mini-CD, or floppy diskette, is used to store authentication and/or identification information for a server. A client uses the information on the token to authenticate the network server upon initial connection to the network and request a boot image. Furthermore, the client and server may use the authentication information from the token to establish secure communications and mutually authenticate each other.

    摘要翻译: 公开了用于在引导协议中建立经认证和加密的网络连接以及指定由客户机加载的引导映像的系统和方法。 使用诸如USB驱动器或设备,CD,mini-CD或软盘的硬件令牌或其他便携式介质来存储用于服务器的认证和/或识别信息。 客户端使用令牌上的信息在初始连接到网络并验证启动映像时对网络服务器进行身份验证。 此外,客户端和服务器可以使用来自令牌的认证信息来建立安全通信并相互认证。

    EXTENSIBLE FRAMEWORK FOR COMPATIBILITY TESTING
    39.
    发明申请
    EXTENSIBLE FRAMEWORK FOR COMPATIBILITY TESTING 审中-公开
    可扩展性测试框架

    公开(公告)号:US20110219358A1

    公开(公告)日:2011-09-08

    申请号:US13107685

    申请日:2011-05-13

    申请人: Dirk Balfanz

    发明人: Dirk Balfanz

    IPC分类号: G06F9/44

    CPC分类号: G06F8/436

    摘要: A method of receiving mobile code includes receiving, from a source node, a dependency descriptor describing at least one permitted configuration, each configuration comprising necessary conditions on a destination node to execute mobile code, executing, on the destination node, checker code associated with the conditions described in the dependency descriptor, and, if at least one configuration is compatible, receiving the mobile code at the destination node.

    摘要翻译: 接收移动代码的方法包括从源节点接收描述至少一个允许配置的依赖性描述符,每个配置包括目的地节点上的必要条件以执行移动代码,在目的地节点上执行与 在依赖描述符中描述的条件,并且如果至少一个配置是兼容的,则在目的地节点处接收移动代码。

    Systems and methods for lightweight authentication
    40.
    发明申请
    Systems and methods for lightweight authentication 有权
    用于轻量认证的系统和方法

    公开(公告)号:US20080141361A1

    公开(公告)日:2008-06-12

    申请号:US11637293

    申请日:2006-12-11

    申请人: Dirk Balfanz

    发明人: Dirk Balfanz

    IPC分类号: H04L9/32

    CPC分类号: G06F21/6227 G06F21/35

    摘要: Techniques are provided for the lightweight authentication of a user to an application, a computer or other device. An interaction element such as a stylus, a pen or marker is uniquely identified. The interactive element is associated with a user. The interaction element provides a means for interacting with the application. The proximity of the identification element within the interaction element during data entry operations to the authentication sensor signals the controlled application that the user has been authenticated.

    摘要翻译: 为应用程序,计算机或其他设备的用户轻量级认证提供了技术。 独特地识别诸如触笔,笔或标记的交互元件。 交互式元素与用户相关联。 交互元素提供了与应用程序交互的方法。 在认证传感器的数据输入操作期间,交互元件内的识别元件的接近度向用户已经认证的受控应用发出信号。