-
公开(公告)号：US08566915B2
公开(公告)日：2013-10-22
申请号：US12910411
申请日：2010-10-22
IPC分类号： H04L29/06
CPC分类号： H04L9/3234 , H04L63/062 , H04L63/0815 , H04L63/105 , H04L63/166 , H04L67/02
摘要： Techniques for mixed-mode authentication are described. In one or more embodiments, an authentication service may be implemented to selectively configure and issue authentication tokens based upon an optional secure mode that enables enhanced security. Clients may be provided with an option to choose between an insecure mode and a secure mode for authentications. Based on this choice, tokens may be configured to include an indication of whether the secure mode is disabled or enabled. When secure mode is disabled, an insecure token valid for both secure sites and other sites is issued to a client when the client is authenticated. When the optional secure mode is enabled, both secure and insecure tokens are provided to the client. The authentication services and/or other services may be configured to reject an insecure token when secure mode is enabled to prevent unauthorized use of a stolen token to access secure resources.
摘要翻译： 描述混合模式认证的技术。 在一个或多个实施例中，可以实现认证服务以基于能够增强安全性的可选安全模式来选择性地配置和发布认证令牌。 可以向客户提供在不安全模式和用于认证的安全模式之间进行选择的选项。 基于该选择，令牌可以被配置为包括是否禁用或启用安全模式的指示。 当禁用安全模式时，当客户端进行身份验证时，会向客户端发出对安全站点和其他站点有效的不安全令牌。 当启用可选的安全模式时，将向客户端提供安全和不安全的令牌。 认证服务和/或其他服务可以被配置为当启用安全模式以防止未授权使用被盗令牌来访问安全资源时拒绝不安全令牌。
-
公开(公告)号：US20120084641A1
公开(公告)日：2012-04-05
申请号：US12895286
申请日：2010-09-30
申请人： Wook Jin Chung , Gupta Garuda , Spencer Wong Low , Chad Steven Estes , William Winter , David Immanuel Millet , Tomoko Kwan , Philip Edward Hiatt , Rahul Sudhir Kumar
发明人： Wook Jin Chung , Gupta Garuda , Spencer Wong Low , Chad Steven Estes , William Winter , David Immanuel Millet , Tomoko Kwan , Philip Edward Hiatt , Rahul Sudhir Kumar
IPC分类号： G06F17/00
CPC分类号： G06F17/30893 , G06F17/3089 , G06Q30/0241
摘要： One or more techniques and/or systems are disclosed for rendering online ads on a webpage. A first inter-frame communication channel is created, which comprises a first communication channel between a first cross-domain frame and a host page, such as the webpage. The first cross-domain frame comprises content from a domain that is different than that of the host page domain. A second inter-frame communication channel is created comprising a second communication channel between the first cross-domain frame and a second cross-domain frame in the host page.
摘要翻译： 公开了一种或多种技术和/或系统来在网页上呈现在线广告。 创建第一帧间通信信道，其包括第一跨域帧和诸如网页的主机页之间的第一通信信道。 第一跨域框架包括来自不同于主机页面域的域的内容。 创建第二帧间通信信道，其包括主机页面中的第一跨域帧和第二跨域帧之间的第二通信信道。
-
公开(公告)号：US20120102553A1
公开(公告)日：2012-04-26
申请号：US12910411
申请日：2010-10-22
CPC分类号： H04L9/3234 , H04L63/062 , H04L63/0815 , H04L63/105 , H04L63/166 , H04L67/02
摘要： Techniques for mixed-mode authentication are described. In one or more embodiments, an authentication service may be implemented to selectively configure and issue authentication tokens based upon an optional secure mode that enables enhanced security. Clients may be provided with an option to choose between an insecure mode and a secure mode for authentications. Based on this choice, tokens may be configured to include an indication of whether the secure mode is disabled or enabled. When secure mode is disabled, an insecure token valid for both secure sites and other sites is issued to a client when the client is authenticated. When the optional secure mode is enabled, both secure and insecure tokens are provided to the client. The authentication services and/or other services may be configured to reject an insecure token when secure mode is enabled to prevent unauthorized use of a stolen token to access secure resources.
摘要翻译： 描述混合模式认证的技术。 在一个或多个实施例中，可以实现认证服务以基于能够增强安全性的可选安全模式来选择性地配置和发布认证令牌。 可以向客户提供在不安全模式和用于认证的安全模式之间进行选择的选项。 基于该选择，令牌可以被配置为包括是否禁用或启用安全模式的指示。 当禁用安全模式时，当客户端进行身份验证时，会向客户端发出对安全站点和其他站点有效的不安全令牌。 当启用可选的安全模式时，将向客户端提供安全和不安全的令牌。 认证服务和/或其他服务可以被配置为当启用安全模式以防止未授权使用被盗令牌来访问安全资源时拒绝不安全令牌。
-
公开(公告)号：US07584458B2
公开(公告)日：2009-09-01
申请号：US10679254
申请日：2003-10-02
申请人： Manuvir Das , Manuel Alfred Fahndrich , Ramanathan Venkatapathy , Daniel W. Weise , William Hunter Hudson , Sameet Harishanker Agarwal , William Hiroaki Shihara , Hannes Ruescher , Spencer Wong Low , F. Soner Terek
发明人： Manuvir Das , Manuel Alfred Fahndrich , Ramanathan Venkatapathy , Daniel W. Weise , William Hunter Hudson , Sameet Harishanker Agarwal , William Hiroaki Shihara , Hannes Ruescher , Spencer Wong Low , F. Soner Terek
CPC分类号： G06F11/328 , G06F11/3624
摘要： Techniques and tools for implementing a source code annotation language are described. In one aspect, keywords are added to a function interface to define a contract for the function independent of function call context. In another aspect, annotations are inserted at global variables, formal parameters, return values, or user-defined types. The annotations include, for example, properties and qualifiers. A property can indicate, for example, a characteristic of a buffer. In another aspect, an annotation indicates that a value has usability properties sufficient to allow a function to rely on the value, where the usability properties depend on value type.
摘要翻译： 描述用于实现源代码注释语言的技术和工具。 在一个方面，将关键字添加到功能界面中以定义与功能调用上下文无关的功能的契约。 在另一方面，注释被插入到全局变量，形式参数，返回值或用户定义的类型中。 注释包括例如属性和限定符。 属性可以指示例如缓冲器的特性。 另一方面，注释表示一个值具有足够的可用性属性，以允许函数依赖该值，其中可用性属性取决于值类型。
-
公开(公告)号：US08332821B2
公开(公告)日：2012-12-11
申请号：US12410482
申请日：2009-03-25
IPC分类号： G06F9/44
CPC分类号： G06F11/3688
摘要： A system that facilitates detecting security flaws in a web site that receives and transmits untrusted content is described herein. The system includes a receiver component that receives test content that corresponds to a field on a web page that, when the web site is online, is configured to receive user-generated content, wherein the test content includes non-malicious data. An encoder component encodes each character of the test content regardless of form or content of the test content to generate encoded content. A display component displays encoded content and non-encoded content of the web page to a tester on a computer screen, wherein the display component causes the encoded content to be displayed in a visually distinct manner from the non-encoded content.
摘要翻译： 本文描述了一种便于检测接收和发送不可信内容的网站中的安全漏洞的系统。 所述系统包括接收器组件，其接收对应于网页上的字段的测试内容，所述测试内容当所述网站在线时被配置为接收用户生成的内容，其中所述测试内容包括非恶意数据。 编码器组件对测试内容的每个字符进行编码，而不管测试内容的形式或内容如何，以生成编码的内容。 显示组件将网页的编码内容和非编码内容显示在计算机屏幕上的测试者，其中显示组件使经编码的内容以与视频不同的方式从非编码内容显示。
-
公开(公告)号：US09558289B2
公开(公告)日：2017-01-31
申请号：US12895286
申请日：2010-09-30
申请人： Wook Jin Chung , Gupta Garuda , Spencer Wong Low , Chad Steven Estes , William Winter , David Immanuel Millet , Tomoko Kwan , Philip Edward Hiatt , Rahul Sudhir Kumar
发明人： Wook Jin Chung , Gupta Garuda , Spencer Wong Low , Chad Steven Estes , William Winter , David Immanuel Millet , Tomoko Kwan , Philip Edward Hiatt , Rahul Sudhir Kumar
CPC分类号： G06F17/30893 , G06F17/3089 , G06Q30/0241
摘要： One or more techniques and/or systems are disclosed for rendering online ads on a webpage. A first inter-frame communication channel is created, which comprises a first communication channel between a first cross-domain frame and a host page, such as the webpage. The first cross-domain frame comprises content from a domain that is different than that of the host page domain. A second inter-frame communication channel is created comprising a second communication channel between the first cross-domain frame and a second cross-domain frame in the host page.
摘要翻译： 公开了一种或多种技术和/或系统来在网页上呈现在线广告。 创建第一帧间通信信道，其包括第一跨域帧和诸如网页的主机页之间的第一通信信道。 第一跨域框架包括来自不同于主机页面域的域的内容。 创建第二帧间通信信道，其包括主机页面中的第一跨域帧和第二跨域帧之间的第二通信信道。
-
公开(公告)号：US20100251216A1
公开(公告)日：2010-09-30
申请号：US12410482
申请日：2009-03-25
IPC分类号： G06F9/44
CPC分类号： G06F11/3688
摘要： A system that facilitates detecting security flaws in a web site that receives and transmits untrusted content is described herein. The system includes a receiver component that receives test content that corresponds to a field on a web page that, when the web site is online, is configured to receive user-generated content, wherein the test content includes non-malicious data. An encoder component encodes each character of the test content regardless of form or content of the test content to generate encoded content. A display component displays encoded content and non-encoded content of the web page to a tester on a computer screen, wherein the display component causes the encoded content to be displayed in a visually distinct manner from the non-encoded content.
摘要翻译： 本文描述了一种便于检测接收和发送不可信内容的网站中的安全漏洞的系统。 所述系统包括接收器组件，其接收对应于网页上的字段的测试内容，所述测试内容当所述网站在线时被配置为接收用户生成的内容，其中所述测试内容包括非恶意数据。 编码器组件对测试内容的每个字符进行编码，而不管测试内容的形式或内容如何，以生成编码的内容。 显示组件将网页的编码内容和非编码内容显示在计算机屏幕上的测试者，其中显示组件使经编码的内容以与视频不同的方式从非编码内容显示。
-
-
-
-
-
-
搜索结果
7 条记录 (耗时 0.012 秒)