利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

5 条记录 (耗时 0.015 秒)

    Controlling access to resources in a network
    1.
    发明授权
    Controlling access to resources in a network 有权
    控制对网络资源的访问

    公开(公告)号：US09436820B1

    公开(公告)日：2016-09-06

    申请号：US10909755

    申请日：2004-08-02

    申请人： Robert E. Gleichauf ,  Susan E. Thomson ,  Dany J. Rochefort ,  Joseph A. Salowey ,  Hao Zhou ,  Fan Wu ,  Venkateswara Rao Yarlagadda ,  Russell E. Rice

    发明人： Robert E. Gleichauf ,  Susan E. Thomson ,  Dany J. Rochefort ,  Joseph A. Salowey ,  Hao Zhou ,  Fan Wu ,  Venkateswara Rao Yarlagadda ,  Russell E. Rice

    IPC分类号： G06F15/16 ,  G06F21/50 ,  H04L29/06

    CPC分类号： G06F21/50 ,  G06F21/577 ,  H04L63/02 ,  H04L63/08 ,  H04L63/20

    摘要： A computerized device transmits an access request to a data communications device of a network in an attempt to access network resources within the network. The data communications device, in response and in real-time, transmits a challenge request to the computerized device that directs the computerized device to retrieve configuration, or posture, credentials associated with the computerized device. A policy server receives the challenge response and, based upon a real-time analysis of the posture credentials of the computerized device, determines a security state of the computerized device and either provides some level or denies the computerized device access to the network resources based upon the analysis of posture. The data communications device detects the real-time security state of the computerized device prior to providing the computerized device with controlled access to the network resources, thereby limiting vulnerable computerized devices from accessing the network resources and minimizing the risk that the network resources receive or transmit malware.

    摘要翻译： 计算机化设备向网络的数据通信设备发送访问请求，以试图访问网络内的网络资源。 数据通信设备作为响应并且实时地向计算机化设备发送质询请求，该计算机化设备指导计算机化设备检索与计算机化设备相关联的配置或姿势凭据。 策略服务器接收挑战响应，并且基于对计算机化设备的姿态凭证的实时分析来确定计算机化设备的安全状态，并且基于以下方式提供一些级别或拒绝计算机化设备对网络资源的访问 姿势分析。 在向计算机化设备提供对网络资源的受控访问之前，数据通信设备检测计算机化设备的实时安全状态，从而限制易受攻击的计算机化设备访问网络资源并最小化网络资源接收或传输的风险 恶意软件

    802.1X authentication technique for shared media
    5.
    发明授权
    802.1X authentication technique for shared media 有权
    共享媒体的802.1X认证技术

    公开(公告)号：US07624431B2

    公开(公告)日：2009-11-24

    申请号：US10728302

    申请日：2003-12-04

    申请人： Brian Francis Cox ,  Bruce McMurdo ,  Venkateswara Rao Yarlagadda

    发明人： Brian Francis Cox ,  Bruce McMurdo ,  Venkateswara Rao Yarlagadda

    IPC分类号： G06F7/04 ,  H04L9/32 ,  H04K1/00

    CPC分类号： H04L63/0236 ,  H04L63/0272

    摘要： The present invention provides a technique for securely implementing port-based authentication on a shared media port in an intermediate node, such as a router. To that end, the invention provides enhanced port-based network access control that includes client-based control at the shared media port. Unlike previous implementations, the port does not permit multiple client nodes to access a trusted subnetwork as soon as a user at any one of those nodes is authenticated by the subnetwork. Instead, port-based authentication is performed for every client node that attempts to access the trusted subnetwork through the shared media port. As such, access to the trusted subnetwork is not compromised by unauthenticated client nodes that “piggy-back” over the shared media port after a user at another client node has been authenticated by the trusted subnetwork.

    摘要翻译： 本发明提供了一种用于在中间节点（例如路由器）中的共享媒体端口上安全地实现基于端口的认证的技术。 为此，本发明提供了增强的基于端口的网络访问控制，其包括在共享媒体端口处的基于客户端的控制。 与以前的实现不同，一旦这些节点中的任何一个的用户被子网络认证，该端口不允许多个客户机节点访问受信任的子网络。 相反，对于尝试通过共享媒体端口访问受信任子网络的每个客户端节点执行基于端口的身份验证。 因此，在受信任的子网络认证另一个客户端节点的用户之后，通过共享媒体端口“捎带”的未经身份验证的客户机节点不会访问受信任子网络。