Efficient retrieval of cryptographic evidence
    2.
    发明授权
    Efficient retrieval of cryptographic evidence 有权
    有效检索加密证据

    公开(公告)号:US07818575B2

    公开(公告)日:2010-10-19

    申请号:US11166884

    申请日:2005-06-24

    IPC分类号: H04L9/32

    摘要: An efficient protocol for retrieving cryptographic evidence may be selected by evaluating a local policy and a number of relevant factors. Furthermore, updated cryptographic evidence may be prefetched during a time period in which there is a low volume of requests for cryptographic evidence. This low volume time period may be defined, approximately, as an overlapping window in which both a first cryptographic evidence publication and a second cryptographic evidence publication are valid.

    摘要翻译: 可以通过评估当地政策和一些相关因素来选择用于检索加密证据的有效协议。 此外,更新的加密证据可以在存在密码证据少量的时间段期间被预取。 这个低容量时间段可以大致定义为其中第一密码证据出版物和第二密码证据出版物都是有效的重叠窗口。

    Updating trusted root certificates on a client computer
    3.
    发明授权
    Updating trusted root certificates on a client computer 有权
    在客户端计算机上更新受信任的根证书

    公开(公告)号:US06816900B1

    公开(公告)日:2004-11-09

    申请号:US09542669

    申请日:2000-04-04

    IPC分类号: G06F15173

    摘要: An update process is used to update root certificates in a root certificate store of a client computer, maintaining the integrity of the existing root certificates as well as any new root certificates. In one embodiment, the root certificate store is updated by adding root certificates to the store, removing root certificates from the store, or modifying usage restrictions of root certificates in the store. A cryptographically signed message including a certificate trust list, as well as any new root certificates to be added to the root certificate store, is accessed by an update root control to update the root certificates in the root certificate store. The update root control verifies the integrity of the message, and thus the integrity of the certificate trust list contained therein. Once such integrity is verified, the update root control proceeds to update the root certificate store in accordance with the information in the certificate trust list. In another embodiment, root certificates in the root certificate store are updated when a World Wide Web web page is accessed by the client. A check is made during the access as to whether the client's root certificate store should be updated (e.g., a new root certificate is needed in order to access the web page). If the store should be updated, then the client is redirected to another web page that hosts the update root control. The update root control executes to update the client's certificate store, and then redirects the client back to the originally requested web page.

    摘要翻译: 更新过程用于更新客户端计算机的根证书库中的根证书,维护现有根证书的完整性以及任何新的根证书。 在一个实施例中,通过向存储添加根证书来更新根证书存储,从商店中移除根证书,或修改存储库中根证书的使用限制。 包含证书信任列表以及要添加到根证书存储区的任何新根证书的加密签名消息由更新根控制器访问,以更新根证书存储库中的根证书。 更新根控制验证消息的完整性,从而验证其中包含的证书信任列表的完整性。 一旦验证完整性,更新根控制就会根据证书信任列表中的信息进行更新根证书存储。 在另一个实施例中,当客户端访问万维网网页时,更新根证书存储库中的根证书。 在访问期间检查客户端的根证书存储是否应该被更新(例如,为了访问网页需要新的根证书)。 如果应该更新商店,那么客户端将重定向到另一个托管更新根控制的网页。 执行更新根控制以更新客户端的证书存储,然后将客户端重定向回原来请求的网页。

    Installing a solution
    5.
    发明授权
    Installing a solution 失效
    安装解决方案

    公开(公告)号:US07925621B2

    公开(公告)日:2011-04-12

    申请号:US12021894

    申请日:2008-01-29

    IPC分类号: G06F17/30

    摘要: Tool(s) enabling installation of a solution are described. These tool(s) may follow appropriate security precautions to contain possibly dangerous code in a data file's solution even when the solution is installed from a local source, such as when a user is offline. These tool(s) determine what level of security is appropriate for a data file's solution based on the original source of the solution. The tool(s) may also and/or instead enable a user to edit a data file without the user having to discover or deploy a solution application governing the data file.

    摘要翻译: 描述了能够安装解决方案的工具。 这些工具可能遵循适当的安全预防措施,以便在数据文件的解决方案中包含可能危险的代码,即使当从本地源安装解决方案时,例如当用户离线时。 这些工具根据原始解决方案确定数据文件解决方案的安全级别。 该工具还可以和/或替代地使用户能够编辑数据文件,而不需要用户发现或部署管理数据文件的解决方案应用程序。

    Rendering an HTML electronic form by applying XSLT to XML using a solution
    6.
    发明授权
    Rendering an HTML electronic form by applying XSLT to XML using a solution 有权
    使用解决方案将XSLT应用于XML,呈现HTML电子表单

    公开(公告)号:US07451392B1

    公开(公告)日:2008-11-11

    申请号:US10723863

    申请日:2003-11-26

    IPC分类号: G06F17/00

    摘要: Instructions are received to open an eXtensible Markup Language (XML) document. The XML document is searched to locate a processing instruction (PI) containing an entity. The entity, by example, can be a href attribute, a URL, a name, or a character string identifying an application that created an HTML electronic form associated with the XML document. A solution is discovered using the entity. The XML document is opened with the solution. The solution includes an XSLT presentation application and an XML schema. The XML document can be inferred from the XML schema and portions of the XML document are logically coupled with fragments of the XML schema. The XSLT presentation application is executing to transform the coupled portions of the XML document into the HTML electronic form containing data-entry fields associated with the coupled portions. Data entered through the data-entry fields can be validated using the solution.

    摘要翻译: 接收到打开可扩展标记语言(XML)文档的说明。 搜索XML文档以定位包含实体的处理指令(PI)。 例如,实体可以是href属性,URL,名称或标识创建与XML文档相关联的HTML电子表单的应用程序的字符串。 使用实体发现解决方案。 解决方案打开XML文档。 该解决方案包括XSLT演示应用程序和XML模式。 XML文档可以从XML模式推断出来,XML文档的部分逻辑上与XML模式的片段相结合。 XSLT演示应用正在执行,以将XML文档的耦合部分转换成包含与耦合部分相关联的数据输入字段的HTML电子表单。 可以使用解决方案验证通过数据输入字段输入的数据。

    Authentication with an untrusted root
    8.
    发明授权
    Authentication with an untrusted root 有权
    使用不受信任的根进行身份验证

    公开(公告)号:US08924714B2

    公开(公告)日:2014-12-30

    申请号:US12163458

    申请日:2008-06-27

    IPC分类号: H04L29/00 H04L9/32 H04L29/06

    摘要: Techniques and systems for authentication with an untrusted root between a client and a server are disclosed. In some aspects, a client may connect to a server. The server and client may initiate a secure connection by exchanging certificates. The server may accept a client certificate having an untrusted root that does not chain up to a root certificate verifiable to the server certificate authority. In further aspects, the server may enable the client to associate an untrusted certificate with an existing account associated with the server. The client certificate may be hardware based or generated in software, and may be issued to the client independent of interactions with the server.

    摘要翻译: 公开了用于与客户机和服务器之间的不可信根的认证的技术和系统。 在某些方面,客户端可以连接到服务器。 服务器和客户端可以通过交换证书来发起安全连接。 服务器可以接受具有不可信根的客户端证书,该根不能链接到可验证到服务器证书颁发机构的根证书。 在另外的方面,服务器可以使客户端能够将不可信证书与与服务器相关联的现有帐户相关联。 客户端证书可以是基于硬件的或者以软件生成的,并且可以独立于与服务器的交互来发送到客户端。

    Rendering an HTML electronic form by applying XSLT to XML using a solution
    9.
    发明授权
    Rendering an HTML electronic form by applying XSLT to XML using a solution 有权
    使用解决方案将XSLT应用于XML,呈现HTML电子表单

    公开(公告)号:US08078960B2

    公开(公告)日:2011-12-13

    申请号:US12249973

    申请日:2008-10-13

    IPC分类号: G06F17/00

    摘要: Instructions are received to open an eXtensible Markup Language (XML) document. The XML document is searched to locate a processing instruction (PI) containing an entity. The entity, by example, can be a href attribute, a URL, a name, or a character string identifying an application that created an HTML electronic form associated with the XML document. A solution is discovered using the entity. The XML document is opened with the solution. The solution includes an XSLT presentation application and an XML schema. The XML document can be inferred from the XML schema and portions of the XML document are logically coupled with fragments of the XML schema. The XSLT presentation application is executing to transform the coupled portions of the XML document into the HTML electronic form containing data-entry fields associated with the coupled portions. Data entered through the data-entry fields can be validated using the solution.

    摘要翻译: 接收到打开可扩展标记语言(XML)文档的说明。 搜索XML文档以定位包含实体的处理指令(PI)。 例如,实体可以是href属性,URL,名称或标识创建与XML文档相关联的HTML电子表单的应用程序的字符串。 使用实体发现解决方案。 解决方案打开XML文档。 该解决方案包括XSLT演示应用程序和XML模式。 XML文档可以从XML模式推断出来,XML文档的部分逻辑上与XML模式的片段相结合。 XSLT演示应用正在执行,以将XML文档的耦合部分转换成包含与耦合部分相关联的数据输入字段的HTML电子表单。 可以使用解决方案验证通过数据输入字段输入的数据。

    Offline editing of XML files using a solution
    10.
    发明授权
    Offline editing of XML files using a solution 失效
    使用解决方案离线编辑XML文件

    公开(公告)号:US07376673B1

    公开(公告)日:2008-05-20

    申请号:US10723862

    申请日:2003-11-26

    IPC分类号: G06F17/30

    摘要: A user can edit an XML data file offline without the user having to discover or deploy a solution for the XML data file. A processing instruction (PI) in the XML data file is read to determine the solution's origin. The PI contains an entity that can be a href attribute that points to a URL, a name, a target having a character string identifying the application that created an electronic form associated with the XML data file, or a href attribute and at least one of a PI version and a product version. Security precautions for executing the solution based on the solution's origin are determined and the solution is silently installed from a source other than the solution's origin within a sandbox enforcing the security precautions. Deployment within a sandbox limits the operations that the solution application can perform.

    摘要翻译: 用户可以离线编辑XML数据文件,无需用户发现或部署XML数据文件的解决方案。 读取XML数据文件中的处理指令(PI)以确定解决方案的来源。 PI包含可以是href属性的实体,其指向URL,名称,具有标识创建与XML数据文件相关联的电子表单的应用的字符串的目标,或href属性,以及href属性中的至少一个 PI版本和产品版本。 确定基于解决方案来源执行解决方案的安全注意事项,并将解决方案从解决方案来源以外的来源安装在实施安全预防措施的沙箱内。 沙箱内的部署限制了解决方案应用程序可以执行的操作。