CLIENT-SERVER OPAQUE TOKEN PASSING APPARATUS AND METHOD
    2.
    发明申请
    CLIENT-SERVER OPAQUE TOKEN PASSING APPARATUS AND METHOD 有权
    客户服务器OPAQUE TOKEN PASSING APPARATUS和方法

    公开(公告)号:US20090037725A1

    公开(公告)日:2009-02-05

    申请号:US12169496

    申请日:2008-07-08

    IPC分类号: H04L9/06

    摘要: In the computer client-server context, typically used in the Internet for communicating between a central server and user computers (clients), a method is provided for token passing which enhances security for client-server communications. The token passing is opaque, that is tokens as generated by the client and server are different and can be generated only by one or the other but can be verified by the other. This approach allows the server to remain stateless, since all state information is maintained at the client side. This operates to authenticate the client to the server and vice versa to defeat hacking attacks, that is, penetrations intended to obtain confidential information. The token as passed includes encrypted values including encrypted random numbers generated separately by the client and server, and authentication values based on the random numbers and other verification data generated using cryptographic techniques.

    摘要翻译: 在计算机客户端 - 服务器上下文中,通常在因特网中用于在中央服务器和用户计算机(客户端)之间进行通信,提供了用于令牌传递的方法,其增强了客户机 - 服务器通信的安全性。 令牌传递是不透明的,即客户端和服务器生成的令牌是不同的,只能由一个或另一个生成,但可以由另一个验证。 这种方法允许服务器保持无状态,因为所有状态信息都保留在客户端。 这样做可以将客户端验证到服务器,反之亦然,以打败黑客攻击,即用于获取机密信息的渗透。 传递的令牌包括加密值,包括由客户端和服务器单独生成的加密随机数,以及基于使用加密技术生成的随机数和其他验证数据的认证值。

    User interface for selection from media collection
    4.
    发明授权
    User interface for selection from media collection 有权
    用于从媒体收集中选择的用户界面

    公开(公告)号:US08230360B2

    公开(公告)日:2012-07-24

    申请号:US12014050

    申请日:2008-01-14

    IPC分类号: G06F3/048

    摘要: Among other things, techniques and systems are disclosed for providing a graphical user interface (GUI) to user. A system includes a content source and a GUI communicatively connected to the content source. The GUI includes a user input area to receive user input and a display area to display available content items from the content source based on the received user input. The display area includes a presentation of the available content arranged in one or more rows. Each row includes a user selectable area to display at least one visual indication that represents one or more of the available content items. Each row includes a holding area to display another visual indication that represents other available content items not displayed in the user selectable area. The display area includes highlighting positioned over one of the available content items.

    摘要翻译: 除其他之外,公开了用于向用户提供图形用户界面(GUI)的技术和系统。 系统包括内容源和通信地连接到内容源的GUI。 GUI包括用于接收用户输入的用户输入区域和用于基于接收到的用户输入从内容源显示可用内容项目的显示区域。 显示区域包括以一行或多行排列的可用内容的呈现。 每行包括用户可选区域,以显示表示一个或多个可用内容项目的至少一个视觉指示。 每行包括一个保持区域,用于显示代表在用户可选区域中未显示的其他可用内容项目的另一视觉指示。 显示区域包括位于可用内容项之上的突出显示。

    User Interface for Selection from Media Collection
    5.
    发明申请
    User Interface for Selection from Media Collection 有权
    用于从媒体收集中选择的用户界面

    公开(公告)号:US20090177989A1

    公开(公告)日:2009-07-09

    申请号:US12014050

    申请日:2008-01-14

    IPC分类号: G06F3/048

    摘要: Among other things, techniques and systems are disclosed for providing a graphical user interface (GUI) to user. A system includes a content source and a GUI communicatively connected to the content source. The GUI includes a user input area to receive user input and a display area to display available content items from the content source based on the received user input. The display area includes a presentation of the available content arranged in one or more rows. Each row includes a user selectable area to display at least one visual indication that represents one or more of the available content items. Each row includes a holding area to display another visual indication that represents other available content items not displayed in the user selectable area. The display area includes highlighting positioned over one of the available content items.

    摘要翻译: 除其他之外,公开了用于向用户提供图形用户界面(GUI)的技术和系统。 系统包括内容源和通信地连接到内容源的GUI。 GUI包括用于接收用户输入的用户输入区域和用于基于接收到的用户输入从内容源显示可用内容项目的显示区域。 显示区域包括以一行或多行排列的可用内容的呈现。 每行包括用户可选区域,以显示表示一个或多个可用内容项目的至少一个视觉指示。 每行包括一个保持区域,用于显示代表在用户可选区域中未显示的其他可用内容项目的另一视觉指示。 显示区域包括位于可用内容项之上的突出显示。

    Client-server opaque token passing apparatus and method
    7.
    发明授权
    Client-server opaque token passing apparatus and method 有权
    客户端 - 服务器不透明的令牌传递设备和方法

    公开(公告)号:US08185942B2

    公开(公告)日:2012-05-22

    申请号:US12169496

    申请日:2008-07-08

    IPC分类号: G06F7/04

    摘要: In the computer client-server context, typically used in the Internet for communicating between a central server and user computers (clients), a method is provided for token passing which enhances security for client-server communications. The token passing is opaque, that is tokens as generated by the client and server are different and can be generated only by one or the other but can be verified by the other. This approach allows the server to remain stateless, since all state information is maintained at the client side. This operates to authenticate the client to the server and vice versa to defeat hacking attacks, that is, penetrations intended to obtain confidential information. The token as passed includes encrypted values including encrypted random numbers generated separately by the client and server, and authentication values based on the random numbers and other verification data generated using cryptographic techniques.

    摘要翻译: 在计算机客户端 - 服务器上下文中,通常在因特网中用于在中央服务器和用户计算机(客户端)之间进行通信,提供了用于令牌传递的方法,其增强了客户机 - 服务器通信的安全性。 令牌传递是不透明的,即客户端和服务器生成的令牌是不同的,只能由一个或另一个生成,但可以由另一个验证。 这种方法允许服务器保持无状态,因为所有状态信息都保留在客户端。 这样做可以将客户端验证到服务器,反之亦然,以打败黑客攻击,即用于获取机密信息的渗透。 传递的令牌包括加密值,包括由客户端和服务器单独生成的加密随机数,以及基于使用加密技术生成的随机数和其他验证数据的认证值。