公开(公告)号：US20120278476A1

公开(公告)日：2012-11-01

申请号：US13097573

申请日：2011-04-29

申请人： Dakshi Agrawal ,  Jorge Lobo ,  Vasileios Pappas ,  Petros Zerfos

发明人： Dakshi Agrawal ,  Jorge Lobo ,  Vasileios Pappas ,  Petros Zerfos

IPC分类号： G06F15/173

CPC分类号： G06Q50/01 ,  H04L67/2819 ,  H04L67/2857 ,  H04N21/258 ,  H04N21/4331 ,  H04N21/44222 ,  H04N21/4524 ,  H04N21/8586

摘要： Described herein are methods, systems, apparatuses and products for predictive placement of content through network analysis. An aspect provides for intercepting content upload data provided by one or more users indicating content at a network location; ascertaining one or more users predicted to access said content based on said one or more users providing said content upload data; and placing said content to one or more other network locations based on said one or more users predicted to access said content. Other embodiments are disclosed.

摘要翻译： 这里描述了通过网络分析预测性地放置内容的方法，系统，装置和产品。 一方面提供用于拦截由一个或多个用户在网络位置指示内容提供的内容上载数据; 基于提供所述内容上载数据的所述一个或多个用户确定预测访问所述内容的一个或多个用户; 以及基于所述一个或多个预测访问所述内容的用户将所述内容放置到一个或多个其他网络位置。 公开了其他实施例。

公开(公告)号：US20080243856A1

公开(公告)日：2008-10-02

申请号：US12135535

申请日：2008-06-09

申请人： Carole Rhoads Corley ,  Jorge Lobo ,  Lorraine Phyllis Vassberg ,  Xiping Wang

发明人： Carole Rhoads Corley ,  Jorge Lobo ,  Lorraine Phyllis Vassberg ,  Xiping Wang

IPC分类号： G06F17/30

CPC分类号： H04L63/102 ,  G06F21/6209 ,  G06F2221/2141

摘要： Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.

摘要翻译： 提供了一种用于在访问控制系统中由对象提供基于角色的对资源的访问控制的方法和装置。 该系统包括能够与一个或多个主体相关联的一个或多个角色以及多个权限集合。 多个权限集合中的一个或多个与一个或多个角色中的每一个相关联。 该系统还包括多个资源。 多个资源中的一个或多个与一个或多个许可集合中的每一个相关联，并且多个资源中的每一个与一个或多个主体的集合相关联。 给定资源的一个或多个主题的给定主题和给定资源的角色许可关联提供给定资源的访问控制。

公开(公告)号：US20080005115A1

公开(公告)日：2008-01-03

申请号：US11479356

申请日：2006-06-30

申请人： Carole Rhoads Corley ,  Jorge Lobo ,  Lorraine Phyllis Vassberg ,  Xiping Wang

发明人： Carole Rhoads Corley ,  Jorge Lobo ,  Lorraine Phyllis Vassberg ,  Xiping Wang

IPC分类号： G06F17/30

CPC分类号： H04L63/102 ,  G06F21/6209 ,  G06F2221/2141

摘要： Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.

摘要翻译： 提供了一种用于在访问控制系统中由对象提供基于角色的对资源的访问控制的方法和装置。 该系统包括能够与一个或多个主体相关联的一个或多个角色以及多个权限集合。 多个权限集合中的一个或多个与一个或多个角色中的每一个相关联。 该系统还包括多个资源。 多个资源中的一个或多个与一个或多个许可集合中的每一个相关联，并且多个资源中的每一个与一个或多个主体的集合相关联。 给定资源的一个或多个主题的给定主题和给定资源的角色许可关联提供给定资源的访问控制。

公开(公告)号：US09037700B2

公开(公告)日：2015-05-19

申请号：US13097573

申请日：2011-04-29

申请人： Dakshi Agrawal ,  Jorge Lobo ,  Vasileios Pappas ,  Petros Zerfos

发明人： Dakshi Agrawal ,  Jorge Lobo ,  Vasileios Pappas ,  Petros Zerfos

IPC分类号： G06F15/173 ,  G06Q50/00 ,  H04N21/258 ,  H04N21/433 ,  H04N21/442 ,  H04N21/45 ,  H04N21/858

CPC分类号： G06Q50/01 ,  H04L67/2819 ,  H04L67/2857 ,  H04N21/258 ,  H04N21/4331 ,  H04N21/44222 ,  H04N21/4524 ,  H04N21/8586

摘要： Described herein are methods, systems, apparatuses and products for predictive placement of content through network analysis. An aspect provides for intercepting content upload data provided by one or more users indicating content at a network location; ascertaining one or more users predicted to access said content based on said one or more users providing said content upload data; and placing said content to one or more other network locations based on said one or more users predicted to access said content. Other embodiments are disclosed.

摘要翻译： 这里描述了通过网络分析预测性地放置内容的方法，系统，装置和产品。 一方面提供用于拦截由一个或多个用户在网络位置指示内容提供的内容上载数据; 基于提供所述内容上载数据的所述一个或多个用户确定预测访问所述内容的一个或多个用户; 以及基于所述一个或多个预测访问所述内容的用户将所述内容放置到一个或多个其他网络位置。 公开了其他实施例。

公开(公告)号：US08006290B2

公开(公告)日：2011-08-23

申请号：US11330932

申请日：2006-01-12

申请人： Dakshi Agrawal ,  Seraphin B. Calo ,  James R. Giles ,  Kang-Won Lee ,  Mukesh K. Mohania ,  Dinesh Verma ,  Jorge Lobo

发明人： Dakshi Agrawal ,  Seraphin B. Calo ,  James R. Giles ,  Kang-Won Lee ,  Mukesh K. Mohania ,  Dinesh Verma ,  Jorge Lobo

IPC分类号： G06F7/04 ,  G06F7/00

CPC分类号： H04L63/102 ,  G06F21/00

摘要： A system and method for ratifying policies are provided. A method for ratifying a policy in a policy-based decision system comprises: determining if a new policy interacts with an existing policy in the policy-based decision system; and ratifying the new policy to exist in the policy-based decision system.

摘要翻译： 提供了制定和批准政策的方法。 在基于策略的决策系统中批准政策的方法包括：确定新策略是否与基于策略的决策系统中的现有策略相互作用; 并批准在政策性决策体系中存在的新政策。

公开(公告)号：US07680913B2

公开(公告)日：2010-03-16

申请号：US10289146

申请日：2002-11-06

申请人： Randeep Bhatia ,  Jorge Lobo ,  Guda Venkatesh ,  Alan Quayle

发明人： Randeep Bhatia ,  Jorge Lobo ,  Guda Venkatesh ,  Alan Quayle

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： H04W8/18 ,  H04L29/06 ,  H04L47/10 ,  H04L47/14 ,  H04L47/20 ,  H04L67/30 ,  H04L67/306 ,  H04L69/329 ,  H04W88/18

摘要： A method and a system are disclosed for making available telecommunication network resources associated with network subscribers and exposed by a Network Service Gateway (NSG) to clients of the NSG services based on stored subscriber availability preferences. The method and system can be implemented using an availability Policy Server that sits next to or inside of the NSG. The Policy Server interprets the stored availability preferences of subscribers in response to requests for subscriber information. These availability preferences are translated into a low-level policy rule language. The Policy Server implements a policy rule evaluator to evaluate policies written in this language. Policies written in the low-level language are referred to as aPolicies (availability policies). An aPolicy receives as input a stream of events. Based on these events, the aPolicy may decide to take one or more actions. The NSG or clients of the NSG will carry out the execution of the actions.

摘要翻译： 公开了一种方法和系统，用于基于存储的用户可用性偏好，使与网络用户相关联的可用电信网络资源和由网络服务网关（NSG）向NSG服务的客户端公开。 可以使用位于NSG旁边或内部的可用性策略服务器来实现该方法和系统。 响应于用户信息的请求，策略服务器解释订户的存储可用性偏好。 这些可用性偏好被转换为低级策略规则语言。 策略服务器实现策略规则评估器来评估用这种语言编写的策略。 以低级语言编写的政策称为政策（可用性策略）。 aPolicy接收事件流作为输入。 基于这些事件，aPolicy可能决定采取一个或多个操作。 NSG或NSG的客户将执行该操作。

公开(公告)号：US07213068B1

公开(公告)日：2007-05-01

申请号：US09710551

申请日：2000-11-09

申请人： Madhur Kohli ,  Jorge Lobo ,  Shamin A. Naqvi ,  Aashu Virmani

发明人： Madhur Kohli ,  Jorge Lobo ,  Shamin A. Naqvi ,  Aashu Virmani

IPC分类号： G06F15/173 ,  G06F11/00

CPC分类号： H04L41/0893 ,  H04L41/0604 ,  H04L41/508 ,  H04L43/0811 ,  H04L63/20

摘要： A policy management system implements a programmable policy-based approach for managing network elements in a telecommunication network. The policy management system includes one or more policy proxies associated with the network elements and a central policy processing point in communication with the policy proxies. The policy proxies are configured to notify the policy processing point of events occurring in the network. The policy processing point is run-time programmable with one or more policies to process such events and to notify one or more of the policy proxies of actions to be taken in response thereto. The policy proxies implement these actions at the network elements they represent.

摘要翻译： 策略管理系统实现用于管理电信网络中的网络元件的可编程策略方法。 策略管理系统包括与网络元件相关联的一个或多个策略代理以及与策略代理进行通信的中央策略处理点。 策略代理被配置为通知策略处理点发生在网络中的事件。 策略处理点是运行时可编程的，具有一个或多个策略来处理这样的事件，并且通知一个或多个策略代理来响应于该动作而采取的动作。 政策代理人在其代表的网络元素上实施这些行动。

公开(公告)号：US08020191B2

公开(公告)日：2011-09-13

申请号：US11765222

申请日：2007-06-19

申请人： Elisa Bertino ,  Dan Lin ,  Jorge Lobo ,  Prathima Rama Rao

发明人： Elisa Bertino ,  Dan Lin ,  Jorge Lobo ,  Prathima Rama Rao

IPC分类号： G06F17/00 ,  H04L29/06 ,  G06F15/173 ,  G06F3/00 ,  G06F13/00 ,  H04N5/445

CPC分类号： G06F21/604

摘要： A method for determining similarity of two policies includes providing a first policy with n rules and a second policy with m rules, wherein each rule is structured into a plurality of identifiable elements, categorizing the rules in each policy based on an action, for each pair of rules finding those predicates whose attribute names match, computing an attribute similarity score for the attribute values, summing the attribute similarity scores for all pairs to obtain an element similarity score, and computing a rule similarity score for the pair of rules from a weighted sum of said element similarity scores.

摘要翻译： 一种用于确定两个策略的相似性的方法包括：提供具有n个规则的第一策略和具有m个规则的第二策略，其中每个规则被构造成多个可识别元素，基于每个对中的动作对每个策略中的规则进行分类 找到属性名称匹配的谓词，计算属性值的属性相似性得分，对所有对的属性相似性得分进行求和以获得元素相似性得分，以及从加权和计算该对规则的规则相似性得分 的元素相似性得分。

公开(公告)号：US07602893B2

公开(公告)日：2009-10-13

申请号：US10431338

申请日：2003-05-07

申请人： Randeep Bhatia ,  Jorge Lobo ,  Guda Venkatesh

发明人： Randeep Bhatia ,  Jorge Lobo ,  Guda Venkatesh

IPC分类号： H04M3/42 ,  H04L12/16

CPC分类号： H04M3/42374 ,  G06Q10/109 ,  H04M3/56 ,  H04M2201/10 ,  H04M2201/18 ,  H04M2203/2011 ,  H04M2203/5063 ,  H04M2207/18 ,  H04W4/08

摘要： A method and a system for supporting rendezvous based instant group conferencing among mobile users allows a conference originator to initiate and setup instant group conferencing to a set of participants even when the participants may not be immediately available to commit to the conference call at the time of its initiation. All negotiations for obtaining commitments from the participants are performed by the system, thus relieving the originator of the time consuming task of negotiating with the participants. The system automatically decides as to when to actually dial out to the participants to setup the conference call after obtaining commitment from all (or a quorum of) required participants.

摘要翻译： 一种用于在移动用户之间支持基于会合的即时群会议的方法和系统允许会议发起者发起并设置即时组会议到一组参与者，即使当参与者可能不能立即可用于在会议呼叫时提交到电话会议 它的启动。 所有从参与者获得承诺的谈判由系统执行，从而缓解了发起人与参与者谈判的耗时任务。 系统自动决定何时实际拨出给与会者，以便在获得所有参与者（或法定人数）的承诺后设置电话会议。

公开(公告)号：US06687495B2

公开(公告)日：2004-02-03

申请号：US10289169

申请日：2002-11-06

申请人： Randeep Bhatia ,  Jorge Lobo ,  Guda Venkatesh ,  Alan Quayle

发明人： Randeep Bhatia ,  Jorge Lobo ,  Guda Venkatesh ,  Alan Quayle

IPC分类号： H04M342

CPC分类号： H04W60/02 ,  H04L67/24 ,  H04L67/322 ,  H04W4/02 ,  H04W8/10 ,  H04W8/18 ,  H04W8/20 ,  H04W88/16 ,  H04W88/18 ,  H04W92/02 ,  H04W92/24

摘要： A method and a system are disclosed for obtaining the dynamic network state of mobile subscribers, such as subscriber location, presence or other state information. This information, which may be distributed within various core mobile network elements, is obtained via a differentiated network service gateway (DNSG) that interfaces with the mobile network elements in a manner that accommodates the network's operator enforced controls and limitations. The DNSG implements service level agreements (SLAs) that support differentiated quality-of-service (QoS) in terms of accessing the dynamic network state of the mobile subscribers. The consumers (DNSG clients) of the dynamic network state information may include applications that provide communication and transactional services to mobile subscribers based on their network state, and the mobile subscribers themselves. The consumers register with the DNSG for SLAs to obtain a desired QoS that determines the precision and speed at which the network service functions for their exclusive use. The DNSG uses the SLAs to allocate available resources to the consumers and for scheduling queries to the core network elements so as to obtain the network state of the mobile subscribers according to the requirements of the SLAs.

摘要翻译： 公开了一种用于获得移动用户的动态网络状态的方法和系统，诸如用户位置，存在或其他状态信息。 可以分布在各种核心移动网络元件内的这种信息通过与移动网络元件接口的差分网​​络服务网关（DNSG）获得，该网络服务网关以适应网络运营商强制控制和限制的方式。 DNSG实现了在访问移动用户的动态网络状态方面支持差异化服务质量（QoS）的服务水平协议（SLA）。 动态网络状态信息的消费者（DNSG客户端）可以包括基于其网络状态向移动用户提供通信和事务服务的应用以及移动用户本身。 消费者向DNSG注册SLA以获得所需的QoS，以确定网络服务功能用于其专用的精度和速度。 DNSG使用SLA将可用资源分配给消费者，并对核心网元进行调度查询，以便根据SLA的要求获得移动用户的网络状态。