公开(公告)号：US07665126B2

公开(公告)日：2010-02-16

申请号：US10738272

申请日：2003-12-17

申请人： Daniel R. Simon ,  Paramvir Bahl ,  Helen Jiahe Wang

发明人： Daniel R. Simon ,  Paramvir Bahl ,  Helen Jiahe Wang

IPC分类号： G06F7/04 ,  G06F15/16 ,  H04L29/06 ,  G06F17/30

CPC分类号： H04L63/0823 ,  H04W12/06 ,  H04W12/12 ,  H04W40/00 ,  H04W48/16 ,  H04W76/10 ,  H04W88/14 ,  H04W88/18

摘要： In an exemplary method implementation, a method includes: designating a neighborhood administrator; receiving notification of a delinquent router from the designated neighborhood administrator; and excluding the delinquent router responsive to the notification. In an exemplary mesh router implementation, a mesh router is capable of establishing a wireless mesh network with other mesh routers, the mesh router is further capable of designating a neighborhood administrator mesh router; and the mesh router is adapted to exclude another mesh router that is associated with a particular certificate when the particular certificate has been identified as delinquent by the designated neighborhood administrator. mesh router.

摘要翻译： 在示例性方法实现中，一种方法包括：指定邻域管理员; 从指定的邻里管理员接收违规路由器的通知; 并根据通知排除违规路由器。 在示例性网状路由器实现中，网状路由器能够与其他网状路由器建立无线网状网络，网状路由器还能够指定邻域管理员网状路由器; 并且网格路由器适于在特定证书被指定的邻域管理员识别为违规时排除与特定证书相关联的另一网状路由器。 网状路由器。

公开(公告)号：US07489645B2

公开(公告)日：2009-02-10

申请号：US10738802

申请日：2003-12-17

申请人： Daniel R. Simon ,  Paramvir Bahl ,  Helen Jiahe Wang

发明人： Daniel R. Simon ,  Paramvir Bahl ,  Helen Jiahe Wang

IPC分类号： H04L12/28

CPC分类号： H04L63/064 ,  H04L9/006 ,  H04L63/0823 ,  H04W12/06 ,  H04W12/12 ,  H04W40/24 ,  H04W88/14

摘要： An exemplary router performs actions including: receiving at least one certificate from an end device, the at least one certificate issued by another router; ascertaining if the other router is a member of a predetermined neighborhood; determining if the at least one certificate is valid; and if the other router is ascertained to be a member of the predetermined neighborhood and the at least one certificate is determined to be valid, recognizing the end device as privileged. An exemplary mesh router is capable of establishing a wireless mesh network with other mesh routers, the mesh router is further capable of designating a neighborhood administrator mesh router; and the mesh router is adapted to grant privileged status to a particular end device associated with a particular certificate issued by a particular mesh router when the particular mesh router is a member of a neighborhood of the designated neighborhood administrator mesh router.

摘要翻译： 示例性路由器执行动作，包括：从终端设备接收至少一个证书，所述至少一个证书由另一个路由器发出; 确定其他路由器是否是预定邻域的成员; 确定所述至少一个证书是否有效; 并且如果确定其他路由器是预定邻域的成员，并且确定至少一个证书是有效的，则将终端设备识别为特权。 示例性网状路由器能够与其他网状路由器建立无线网状网络，网状路由器还能够指定邻域管理员网状路由器; 并且当特定网状路由器是指定的邻域管理员网关路由器的邻域的成员时，网状路由器适于向与特定网状路由器发布的特定证书相关联的特定终端设备授予特权状态。

公开(公告)号：US20050135268A1

公开(公告)日：2005-06-23

申请号：US10738802

申请日：2003-12-17

申请人： Daniel Simon ,  Paramvir Bahl ,  Helen Jiahe Wang

发明人： Daniel Simon ,  Paramvir Bahl ,  Helen Jiahe Wang

IPC分类号： H04L9/32 ,  H04L12/28 ,  H04L12/56 ,  H04L29/06

CPC分类号： H04L63/064 ,  H04L9/006 ,  H04L63/0823 ,  H04W12/06 ,  H04W12/12 ,  H04W40/24 ,  H04W88/14

摘要： An exemplary router performs actions including: receiving at least one certificate from an end device, the at least one certificate issued by another router; ascertaining if the other router is a member of a predetermined neighborhood; determining if the at least one certificate is valid; and if the other router is ascertained to be a member of the predetermined neighborhood and the at least one certificate is determined to be valid, recognizing the end device as privileged. An exemplary mesh router is capable of establishing a wireless mesh network with other mesh routers, the mesh router is further capable of designating a neighborhood administrator mesh router; and the mesh router is adapted to grant privileged status to a particular end device associated with a particular certificate issued by a particular mesh router when the particular mesh router is a member of a neighborhood of the designated neighborhood administrator mesh router.

摘要翻译： 示例性路由器执行动作，包括：从终端设备接收至少一个证书，所述至少一个证书由另一个路由器发出; 确定其他路由器是否是预定邻域的成员; 确定所述至少一个证书是否有效; 并且如果确定其他路由器是预定邻域的成员，并且确定至少一个证书是有效的，则将终端设备识别为特权。 示例性网状路由器能够与其他网状路由器建立无线网状网络，网状路由器还能够指定邻域管理员网状路由器; 并且当特定网状路由器是指定的邻域管理员网关路由器的邻域的成员时，网状路由器适于向与特定网状路由器发布的特定证书相关联的特定终端设备授予特权状态。

公开(公告)号：US08893268B2

公开(公告)日：2014-11-18

申请号：US13296252

申请日：2011-11-15

申请人： Adrienne Porter Felt ,  Helen Jiahe Wang ,  Alexander Moshchuk

发明人： Adrienne Porter Felt ,  Helen Jiahe Wang ,  Alexander Moshchuk

IPC分类号： G06F9/54 ,  H04L29/06 ,  G06F21/62 ,  G06F21/60

CPC分类号： H04L63/10 ,  G06F21/604 ,  G06F21/6218 ,  G06F2221/2141

摘要： Methods and systems for preventing permission re-delegation among applications are disclosed herein. The method includes accepting a message requesting access to a user-controlled resource from a requester application at a deputy application and reducing a first permissions list of the deputy application to a second permissions list. The second permissions list includes an overlap of permissions between the deputy application and the requester application. Moreover, the method also includes sending the message from the deputy application to a computing system via an application programming interface (API), wherein the computing system is configured to reject the message if the second permissions list of the deputy application does not permit access to the user-controlled resource.

摘要翻译： 本文公开了用于在应用程序之间重新授权的方法和系统。 该方法包括接受在副应用程序中从请求者应用程序请求访问用户控制资源的消息，并将副应用程序的第一权限列表减少到第二许可列表。 第二权限列表包括副应用程序和请求者应用程序之间的权限重叠。 此外，该方法还包括经由应用程序编程接口（API）将消息从副应用程序发送到计算系统，其中，如果副应用程序的第二许可列表不允许访问，则计算系统被配置为拒绝该消息 用户控制的资源。

公开(公告)号：US08341268B2

公开(公告)日：2012-12-25

申请号：US12550293

申请日：2009-08-28

申请人： Helen Jiahe Wang ,  Alexander Moshchuk

发明人： Helen Jiahe Wang ,  Alexander Moshchuk

IPC分类号： G06F15/173

CPC分类号： H04L47/783 ,  G06F9/50

摘要： Techniques for providing resource sharing in a multi-principal browser are described. Resource sharing includes managing a resource for web entity by determining how to divide the resource to share among two or more web entities based at least in part on a Document Object Model (DOM)-recursive resource allocation policy or an application-specified resource allocation policy. A web entity includes a principal instance contending for the resource. The process identifies resource allocation mechanisms from each resource type based at least in part on the DOM-recursive sharing policy or the application-specified resource allocation policy along with the resource type.

摘要翻译： 描述了在多主浏览器中提供资源共享的技术。 资源共享包括至少部分地基于文档对象模型（DOM） - 资源分配策略或应用指定的资源分配策略，通过确定如何划分资源以在两个或多个web实体之间共享来管理web实体的资源 。 网络实体包括竞争资源的主体实例。 该过程至少部分地基于DOM递归共享策略或应用指定的资源分配策略以及资源类型来识别来自每种资源类型的资源分配机制。

公开(公告)号：US20130125210A1

公开(公告)日：2013-05-16

申请号：US13296252

申请日：2011-11-15

申请人： Adrienne Porter Felt ,  Helen Jiahe Wang ,  Alexander Moshchuk

发明人： Adrienne Porter Felt ,  Helen Jiahe Wang ,  Alexander Moshchuk

IPC分类号： G06F21/00

CPC分类号： H04L63/10 ,  G06F21/604 ,  G06F21/6218 ,  G06F2221/2141

摘要： Methods and systems for preventing permission re-delegation among applications are disclosed herein. The method includes accepting a message requesting access to a user-controlled resource from a requester application at a deputy application and reducing a first permissions list of the deputy application to a second permissions list. The second permissions list includes an overlap of permissions between the deputy application and the requester application. Moreover, the method also includes sending the message from the deputy application to a computing system via an application programming interface (API), wherein the computing system is configured to reject the message if the second permissions list of the deputy application does not permit access to the user-controlled resource.

摘要翻译： 本文公开了用于在应用程序之间重新授权的方法和系统。 该方法包括接受在副应用程序中从请求者应用程序请求访问用户控制资源的消息，并将副应用程序的第一权限列表减少到第二许可列表。 第二权限列表包括副应用程序和请求者应用程序之间的权限重叠。 此外，该方法还包括经由应用程序编程接口（API）将消息从副应用程序发送到计算系统，其中，如果副应用程序的第二许可列表不允许访问，则计算系统被配置为拒绝该消息 用户控制的资源。