Securing data set images
    1.
    发明授权
    Securing data set images 有权
    保护数据集图像

    公开(公告)号:US07921304B2

    公开(公告)日:2011-04-05

    申请号:US11294977

    申请日:2005-12-06

    IPC分类号: G06F21/24

    CPC分类号: G06F21/6209 H04L9/0827

    摘要: Accessing a data set with secret and non-secret data. A method includes accessing a data set image. The data set image comprises secret data. The data set image is derived from an authorized data set associated with a master key that authorizes access to the secret data. The master key is not provided with the data set image. The method further comprises restoring the data set image to a computing system to create a degraded data set. Data in the degraded data set other than the secret data is accessed without restoring the master key.

    摘要翻译: 访问具有秘密和非秘密数据的数据集。 一种方法包括访问数据集图像。 数据集图像包括秘密数据。 数据集图像从授权访问秘密数据的主密钥相关联的授权数据集导出。 主密钥没有提供数据集图像。 该方法还包括将数据集映像恢复到计算系统以创建劣化数据集。 在不恢复主密钥的情况下访问除秘密数据之外的劣化数据集中的数据。

    SECURE SEED MEDIA
    2.
    发明申请
    SECURE SEED MEDIA 有权
    安全种植媒体

    公开(公告)号:US20110126027A1

    公开(公告)日:2011-05-26

    申请号:US13015018

    申请日:2011-01-27

    IPC分类号: G06F21/24

    CPC分类号: G06F21/6209 H04L9/0827

    摘要: Accessing a data set with secret and non-secret data. A method includes accessing a data set image. The data set image comprises secret data. The data set image is derived from an authorized data set associated with a master key that authorizes access to the secret data. The master key is not provided with the data set image. The method further comprises restoring the data set image to a computing system to create a degraded data set. Data in the degraded data set other than the secret data is accessed without restoring the master key.

    摘要翻译: 访问具有秘密和非秘密数据的数据集。 一种方法包括访问数据集图像。 数据集图像包括秘密数据。 数据集图像从授权访问秘密数据的主密钥相关联的授权数据集导出。 主密钥没有提供数据集图像。 该方法还包括将数据集映像恢复到计算系统以创建劣化数据集。 在不恢复主密钥的情况下访问除秘密数据之外的劣化数据集中的数据。

    Secure seed media
    3.
    发明授权
    Secure seed media 有权
    安全种子媒体

    公开(公告)号:US08316455B2

    公开(公告)日:2012-11-20

    申请号:US13015018

    申请日:2011-01-27

    IPC分类号: H04L29/06

    CPC分类号: G06F21/6209 H04L9/0827

    摘要: Accessing a data set with secret and non-secret data. A method includes accessing a data set image. The data set image comprises secret data. The data set image is derived from an authorized data set associated with a master key that authorizes access to the secret data. The master key is not provided with the data set image. The method further comprises restoring the data set image to a computing system to create a degraded data set. Data in the degraded data set other than the secret data is accessed without restoring the master key.

    摘要翻译: 访问具有秘密和非秘密数据的数据集。 一种方法包括访问数据集图像。 数据集图像包括秘密数据。 数据集图像从授权访问秘密数据的主密钥相关联的授权数据集导出。 主密钥没有提供数据集图像。 该方法还包括将数据集映像恢复到计算系统以创建劣化数据集。 在不恢复主密钥的情况下访问除秘密数据之外的劣化数据集中的数据。

    Next site for distributed service connections
    4.
    发明授权
    Next site for distributed service connections 有权
    下一个站点用于分布式服务连接

    公开(公告)号:US07606937B2

    公开(公告)日:2009-10-20

    申请号:US11292771

    申请日:2005-12-02

    IPC分类号: G06F15/173

    摘要: Registering a client with a distributed service. A method may be practiced, for example, in a network computing environment including a client at a local site and a number of distributed services at a number of remote sites. The method includes pinging one or more distributed services at one or more remote sites. A message is received from a distributed service from among the one or more distributed services. The message specifies an optimal remote site. The method further includes registering with a distributed service at the optimal remote site.

    摘要翻译: 使用分布式服务注册客户端。 可以例如在网络计算环境中实施一种方法,所述网络计算环境包括在本地站点处的客户端以及在多个远程站点处的多个分布式服务。 该方法包括在一个或多个远程站点ping一个或多个分布式服务。 从一个或多个分布式服务中的分布式服务接收到消息。 该消息指定最佳的远程站点。 该方法还包括在最佳远程站点处对分布式服务进行注册。

    Secure Key Distribution to Internet Clients
    5.
    发明申请
    Secure Key Distribution to Internet Clients 有权
    安全密钥分发给Internet客户端

    公开(公告)号:US20090265772A1

    公开(公告)日:2009-10-22

    申请号:US12104425

    申请日:2008-04-16

    IPC分类号: G06F21/20 H04L9/08

    摘要: A server may bridge between a wide area network, such as the Internet, and a local area network and may process authentication requests from clients on the wide area network. The server may filter the requests to enable specific types of requests to pass, and may forward the requests to a credential server within the local area network and pass any responses back to the client. The server may be configured with some or all of a set of domain services objects, but such objects may be stored in a read only format. The server may further contain a minimum of or no sensitive data such that, if compromised, an attacker may gain little advantage. The client may request evidence of authentication available to devices within the local area network and may use the evidence of authentication to access services made available to the wide area network.

    摘要翻译: 服务器可以在广域网(例如因特网)和局域网之间桥接,并且可以处理来自广域网上的客户端的认证请求。 服务器可以过滤请求以允许特定类型的请求通过,并且可以将请求转发到局域网内的凭证服务器,并将任何响应传回客户端。 服务器可以配置有一些域服务对象的一些或全部,但是这些对象可以以只读格式存储。 服务器还可以包含最少或不存在敏感数据,使得如果受到攻击,则攻击者可能获得很少的优势。 客户端可以请求可用于局域网内的设备的认证证据,并且可以使用认证证据来访问可用于广域网的服务。

    Secure key distribution to internet clients
    6.
    发明授权
    Secure key distribution to internet clients 有权
    安全的密钥分发给互联网客户端

    公开(公告)号:US08074264B2

    公开(公告)日:2011-12-06

    申请号:US12104425

    申请日:2008-04-16

    IPC分类号: H04L9/32 H04L9/00 G06F17/30

    摘要: A server may bridge between a wide area network, such as the Internet, and a local area network and may process authentication requests from clients on the wide area network. The server may filter the requests to enable specific types of requests to pass, and may forward the requests to a credential server within the local area network and pass any responses back to the client. The server may be configured with some or all of a set of domain services objects, but such objects may be stored in a read only format. The server may further contain a minimum of or no sensitive data such that, if compromised, an attacker may gain little advantage. The client may request evidence of authentication available to devices within the local area network and may use the evidence of authentication to access services made available to the wide area network.

    摘要翻译: 服务器可以在广域网(例如因特网)和局域网之间桥接,并且可以处理来自广域网上的客户端的认证请求。 服务器可以过滤请求以允许特定类型的请求通过,并且可以将请求转发到局域网内的凭证服务器,并将任何响应传回客户端。 服务器可以配置有一些域服务对象的一些或全部,但是这些对象可以以只读格式存储。 服务器还可以包含最少或不存在敏感数据,使得如果受到攻击,则攻击者可能获得很少的优势。 客户端可以请求可用于局域网内的设备的认证证据,并且可以使用认证证据来访问可用于广域网的服务。

    Authentication server auditing of clients using cache provisioning
    7.
    发明申请
    Authentication server auditing of clients using cache provisioning 审中-公开
    身份验证服务器使用缓存配置审核客户端

    公开(公告)号:US20080098120A1

    公开(公告)日:2008-04-24

    申请号:US11585739

    申请日:2006-10-23

    IPC分类号: G06F15/16

    摘要: Sharing resources on a network include, for example, a domain controller hierarchy scheme, which is used in some implementations to organize and share both secure and non-secure resources in an efficient manner. Using authentication information can be used to architect a trustworthy system to divulging sensitive client data (such as user/computer passwords) to a host system. The sensitive client data can be released to the host system when a client establishes a relationship having a degree of trust with the host.

    摘要翻译: 在网络上共享资源包括例如域控制器层次结构方案,其在一些实现中用于以有效的方式组织和共享安全和非安全资源。 使用身份验证信息可用于构建可靠的系统,以将敏感的客户端数据(如用户/计算机密码)泄漏给主机系统。 当客户端建立与主机具有一定程度的信任关系时,敏感的客户端数据可以被释放到主机系统。