利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

27 条记录 (耗时 0.042 秒)

    Cross assembly call interception
    1.
    发明授权
    Cross assembly call interception 有权
    交叉汇编呼叫截取

    公开(公告)号：US07770202B2

    公开(公告)日：2010-08-03

    申请号：US10771653

    申请日：2004-02-03

    申请人： Christopher W. Brumme ,  Vance Morrison ,  Sebastian Lange ,  Gregory D. Fee ,  Dario Russi ,  Simon Jeremy Hall ,  Mahesh Prakriya ,  Brian F. Sullivan

    发明人： Christopher W. Brumme ,  Vance Morrison ,  Sebastian Lange ,  Gregory D. Fee ,  Dario Russi ,  Simon Jeremy Hall ,  Mahesh Prakriya ,  Brian F. Sullivan

    IPC分类号： G06F17/00 ,  H04L29/06

    CPC分类号： H04L63/102 ,  G06F9/468 ,  G06F21/52 ,  G06F21/62 ,  H04L63/101

    摘要： A host intercepts calls between two executables and determines whether the calls are permissible according to the host's security model which can be identify based, such as user identity based—for instance, mapping access rights within a specific data base user context to database object access. Such an identity security model differs from a common language runtime security model where managed code uses Code Access Security to prevent managed assemblies from performing certain operations. Managed assemblies registered with the host are host objects from the host's perspective for which access rights can be defined via security rules, such as are defined for individual user identities. A host can decide access between managed executables based on the host's identity based access rules by trapping any cross assembly calls and deciding whether such calls should proceed or be blocked from taking place based on the corresponding identity security settings.

    摘要翻译： 主机拦截两个可执行文件之间的调用，并根据主机的可以识别的安全模型（例如基于用户身份的特定数据库用户上下文中将访问权限映射到数据库对象访问）来确定是否允许呼叫。 这种身份安全模型与公共语言运行时安全模型不同，托管代码使用代码访问安全性来防止托管程序集执行某些操作。 与主机注册的托管程序集是主机视角的主机对象，可以通过安全规则定义访问权限，例如为各个用户身份定义的对象。 主机可以基于主机的基于身份的访问规则来决定托管的可执行文件之间的访问，通过捕获任何交叉程序集调用，并根据相应的身份安全设置来确定这些呼叫是应该继续还是被阻止发生。

    Hosted code runtime protection
    2.
    发明授权
    Hosted code runtime protection 有权
    托管代码运行时保护

    公开(公告)号：US07647629B2

    公开(公告)日：2010-01-12

    申请号：US10772205

    申请日：2004-02-03

    申请人： Christopher W. Brumme ,  Sebastian Lange ,  Gregory D. Fee ,  Michael Gashler ,  Mahesh Prakriya

    发明人： Christopher W. Brumme ,  Sebastian Lange ,  Gregory D. Fee ,  Michael Gashler ,  Mahesh Prakriya

    IPC分类号： G06F7/04 ,  G06F12/00 ,  G06F12/14 ,  G06F13/00 ,  G06F17/30 ,  G11C7/00

    CPC分类号： G06F9/468

    摘要： A host operating in a managed environment intercepts a call from a managed caller to a particular callee and determines whether the call is permissible according to the host's prior configuration of a plurality of callees. The particular callee, which provides access to a resource that the host can be protecting, can have been previously configured by the host to always allow the call to be made, to never allow the call to be made, or to allow the call to be made based upon the degree to which the host trusts the managed caller.

    摘要翻译： 在受管环境中操作的主机拦截来自被管理的呼叫者到特定被叫方的呼叫，并根据主机先前配置多个被呼叫者确定该呼叫是否被允许。 提供对主机可以保护的资源的访问的特定被叫方可以先前由主机配置，以始终允许进行呼叫，从不允许进行呼叫，或允许呼叫成为 基于主机信任被管理的呼叫者的程度。

    Cross assembly call interception
    3.
    发明申请
    Cross assembly call interception 有权
    交叉汇编呼叫截取

    公开(公告)号：US20050172133A1

    公开(公告)日：2005-08-04

    申请号：US10771653

    申请日：2004-02-03

    申请人： Christopher Brumme ,  Vance Morrison ,  Sebastian Lange ,  Gregory Fee ,  Dario Russi ,  Simon Hall ,  Mahesh Prakriya ,  Brian Sullivan

    发明人： Christopher Brumme ,  Vance Morrison ,  Sebastian Lange ,  Gregory Fee ,  Dario Russi ,  Simon Hall ,  Mahesh Prakriya ,  Brian Sullivan

    IPC分类号： G06F9/46 ,  G06F21/00 ,  H04K1/00 ,  H04L29/06

    CPC分类号： H04L63/102 ,  G06F9/468 ,  G06F21/52 ,  G06F21/62 ,  H04L63/101

    摘要： A host intercepts calls between two executables and determines whether the calls are permissible according to the host's security model which can be identify based, such as user identity based—for instance, mapping access rights within a specific data base user context to database object access. Such an identity security model differs from a common language runtime security model where managed code uses Code Access Security to prevent managed assemblies from performing certain operations. Managed assemblies registered with the host are host objects from the host's perspective for which access rights can be defined via security rules, such as are defined for individual user identities. A host can decide access between managed executables based on the host's identity based access rules by trapping any cross assembly calls and deciding whether such calls should proceed or be blocked from taking place based on the corresponding identity security settings.

    摘要翻译： 主机拦截两个可执行文件之间的调用，并根据主机的可以识别的安全模型（例如基于用户身份的特定数据库用户上下文中将访问权限映射到数据库对象访问）来确定是否允许呼叫。 这种身份安全模型与公共语言运行时安全模型不同，托管代码使用代码访问安全性来防止托管程序集执行某些操作。 与主机注册的托管程序集是主机视角的主机对象，可以通过安全规则定义访问权限，例如为各个用户身份定义的对象。 主机可以基于主机的基于身份的访问规则来决定托管的可执行文件之间的访问，通过捕获任何交叉程序集调用，并根据相应的身份安全设置来确定这些呼叫是应该继续还是被阻止发生。

    Hosted code runtime protection
    10.
    发明申请
    Hosted code runtime protection 有权
    托管代码运行时保护

    公开(公告)号：US20050172286A1

    公开(公告)日：2005-08-04

    申请号：US10772205

    申请日：2004-02-03

    申请人： Christopher Brumme ,  Sebastian Lange ,  Gregory Fee ,  Michael Gashler ,  Mahesh Prakriya

    发明人： Christopher Brumme ,  Sebastian Lange ,  Gregory Fee ,  Michael Gashler ,  Mahesh Prakriya

    IPC分类号： G06F9/455 ,  G06F9/46

    CPC分类号： G06F9/468

    摘要： A host operating in a managed environment intercepts a call from a managed caller to a particular callee and determines whether the call is permissible according to the host's prior configuration of a plurality of callees. The particular callee, which provides access to a resource that the host can be protecting, can have been previously configured by the host to always allow the call to be made, to never allow the call to be made, or to allow the call to be made based upon the degree to which the host trusts the managed caller.

    摘要翻译： 在受管环境中操作的主机拦截来自被管理的呼叫者到特定被叫方的呼叫，并根据主机先前配置多个被呼叫者确定该呼叫是否被允许。 提供对主机可以保护的资源的访问的特定被叫方可以先前由主机配置，以始终允许进行呼叫，从不允许进行呼叫，或允许呼叫成为 基于主机信任被管理的呼叫者的程度。