KEY TREE CONSTRUCTION AND KEY DISTRIBUTION METHOD FOR HIERARCHICAL ROLE-BASED ACCESS CONTROL
    2.
    发明申请
    KEY TREE CONSTRUCTION AND KEY DISTRIBUTION METHOD FOR HIERARCHICAL ROLE-BASED ACCESS CONTROL 有权
    用于基于层次角色访问控制的关键树构造和关键分配方法

    公开(公告)号:US20110150224A1

    公开(公告)日:2011-06-23

    申请号:US12786811

    申请日:2010-05-25

    CPC classification number: H04L9/0836

    Abstract: A key tree construction and key distribution method for hierarchical role-based access control, includes: constructing a key tree including relationships between a hierarchical structure of role groups and data; performing encryption and decryption of data keys and role keys; and generating a key table, in which the data keys required to decrypt encrypted data and the role keys required to decrypt encrypted data keys are stored, with reference to the key tree. Further, the key tree construction and key distribution method for hierarchical role-based access control includes performing management such that a specific role group can obtain a data key by performing decryption based on its own role key by using both the key tree and the key table.

    Abstract translation: 层次化角色访问控制的关键树结构和密钥分配方法,包括:构建一个包括角色组和数据层次结构之间关系的密钥树; 执行数据密钥和角色密钥的加密和解密; 并且生成密钥表,其中参照密钥树存储解密加密数据所需的数据密钥和解密加密数据密钥所需的角色密钥。 此外,层次化的基于角色的访问控制的密钥树构造和密钥分发方法包括执行管理,使得特定角色组可以通过使用密钥树和密钥表两者通过基于其自己的角色密钥执行解密来获得数据密钥 。

    Key tree construction and key distribution method for hierarchical role-based access control
    4.
    发明授权
    Key tree construction and key distribution method for hierarchical role-based access control 有权
    基于层次化角色访问控制的密钥树构建和密钥分发方法

    公开(公告)号:US08447037B2

    公开(公告)日:2013-05-21

    申请号:US12786811

    申请日:2010-05-25

    CPC classification number: H04L9/0836

    Abstract: A key tree construction and key distribution method for hierarchical role-based access control, includes: constructing a key tree including relationships between a hierarchical structure of role groups and data; performing encryption and decryption of data keys and role keys; and generating a key table, in which the data keys required to decrypt encrypted data and the role keys required to decrypt encrypted data keys are stored, with reference to the key tree. Further, the key tree construction and key distribution method for hierarchical role-based access control includes performing management such that a specific role group can obtain a data key by performing decryption based on its own role key by using both the key tree and the key table.

    Abstract translation: 层次化角色访问控制的关键树结构和密钥分配方法,包括:构建一个包括角色组和数据层次结构之间关系的密钥树; 执行数据密钥和角色密钥的加密和解密; 并且生成密钥表,其中参照密钥树存储解密加密数据所需的数据密钥和解密加密数据密钥所需的角色密钥。 此外,层次化的基于角色的访问控制的密钥树构造和密钥分发方法包括执行管理,使得特定角色组可以通过使用密钥树和密钥表两者通过基于其自己的角色密钥执行解密来获得数据密钥 。

    APPARATUS FOR MANAGING IDENTITY DATA AND METHOD THEREOF
    6.
    发明申请
    APPARATUS FOR MANAGING IDENTITY DATA AND METHOD THEREOF 审中-公开
    用于管理身份数据的装置及其方法

    公开(公告)号:US20110202768A1

    公开(公告)日:2011-08-18

    申请号:US13124900

    申请日:2009-12-11

    CPC classification number: G06F21/41 G06F21/6245 G06F21/88

    Abstract: An apparatus and a method for managing identity data are disclosed, which can recover lost or deleted ID data stored in a user terminal and prevent a malicious user to plagiarize a user's ID. The apparatus includes a user ID management device (1), a back-up server (2) and a website system (3). The user ID management device (1) installed in a user's terminal allows ID data to be used on a website. The user ID management device (1) includes an ID management unit (10), a data storing unit (12), a back-up requesting unit (14) and a recovery requesting unit (16). A back-up server (2) backs up and stored ID data from the user ID management device (1). The back-up server includes a data storing unit (20), a back-up processing unit (22), a recovery processing unit (24), a suspension receiving unit (26) and a suspension requesting unit (28). A website system (3) includes a user account management unit (30), a suspension processing unit (32) and a recovery processing unit (34).

    Abstract translation: 公开了一种用于管理身份数据的装置和方法,其可以恢复存储在用户终端中的丢失或删除的ID数据,并防止恶意用户剽窃用户的ID。 该装置包括用户ID管理装置(1),后备服务器(2)和网站系统(3)。 安装在用户终端中的用户ID管理装置(1)允许在网站上使用ID数据。 用户ID管理装置(1)包括ID管理单元(10),数据存储单元(12),备份请求单元(14)和恢复请求单元(16)。 备份服务器(2)备份并存储来自用户ID管理装置(1)的ID数据。 备用服务器包括数据存储单元(20),备份处理单元(22),恢复处理单元(24),暂停接收单元(26)和暂停请求单元(28)。 网站系统(3)包括用户帐户管理单元(30),暂停处理单元(32)和恢复处理单元(34)。

    USER TERMINAL WITH IDENTITY SELECTOR AND METHOD FOR IDENTITY AUTHENTICATION USING IDENTITY SELECTOR OF THE SAME
    7.
    发明申请
    USER TERMINAL WITH IDENTITY SELECTOR AND METHOD FOR IDENTITY AUTHENTICATION USING IDENTITY SELECTOR OF THE SAME 审中-公开
    具有身份识别选择器的用户终端和使用其身份识别者的身份认证方法

    公开(公告)号:US20110023099A1

    公开(公告)日:2011-01-27

    申请号:US12934262

    申请日:2009-03-31

    Abstract: The present invention relates to a user terminal (100) with an identify selector and a method for an identity authentication using the identify selector of the same, in which when a web service makes a request to a web service providing server (300) using a virtual personal identification information issued from an identity authentication server (200), a corresponding user identity is authenticated between the user terminal and the identity authentication server (200) using the identity selector according to the request of the web service providing server (300). The present invention has advantages that it can solve the problem of inputting an ID and password within the range such that the I-PIN or SMAL service protocol is not changed, but the subscribed I-PIN or SAML service providing site cannot be easily copied and a phishing problem by simplifying a log-in process for identity authentication by adding the identity selector.

    Abstract translation: 本发明涉及一种具有标识选择器和使用其识别选择器进行身份认证的方法的用户终端(100),其中,当Web服务向web服务提供服务器(300)请求时,使用 从身份认证服务器(200)发出的虚拟个人识别信息,根据web服务提供服务器(300)的请求,使用身份选择器在用户终端和身份认证服务器(200)之间认证相应的用户身份。 本发明的优点在于可以解决在I-PIN或SMAL业务协议不改变的范围内输入ID和密码的问题,但是不能轻易复制订阅的I-PIN或SAML服务提供站点, 通过添加身份选择器简化用于身份认证的登录过程的网络钓鱼问题。

Patent Agency Ranking