公开(公告)号：US09191382B1

公开(公告)日：2015-11-17

申请号：US13735556

申请日：2013-01-07

Applicant: Google Inc.

Inventor： Zelidrag Hornung ,  William A. Drewry ,  Sumit Gwalani ,  Christopher Masone

IPC: H04L9/00 ,  H04L29/06

CPC classification number: H04L63/08 ,  G06F21/31 ,  H04L9/3226 ,  H04L29/06755 ,  H04L63/083 ,  H04L63/0861 ,  H04L2463/082 ,  H04L9/32

Abstract: Methods and apparatus for authenticating computing device users are disclosed. An example method includes, providing, on a display device of a computing device, a graphical user interface (GUI) including a user authentication display portion and receiving, from a remote authentication server, visual content and functional content corresponding with the user authentication display portion. The method further includes receiving, via the user authentication display portion, a set of user credentials and communicating the received user credentials to the remote user authentication server. The method still further includes receiving, from the remote user authentication server; an authorization message indicating whether or not authentication of the user credentials was successful. In the event authentication of the set of user credentials was successful, the user is granted access to the computing device. In the event authentication of the set of user credentials was not successful, the user is denied access to the computing device.

Abstract translation: 公开了用于认证计算设备用户的方法和装置。 一种示例性方法包括：在计算设备的显示设备上提供包括用户认证显示部分的图形用户界面（GUI），并从远程认证服务器接收与用户认证显示部分相对应的可视内容和功能内容 。 该方法还包括经由用户认证显示部分接收一组用户凭证并将接收到的用户凭证传送到远程用户认证服务器。 该方法还包括从远程用户认证服务器接收; 指示用户凭证的认证是否成功的授权消息。 在一组用户凭证的认证成功的情况下，用户被授予访问计算设备的权限。 在一组用户凭证的认证不成功的情况下，用户被拒绝访问计算设备。

公开(公告)号：US08997174B1

公开(公告)日：2015-03-31

申请号：US13688129

申请日：2012-11-28

Applicant: Google Inc.

Inventor： Glenn Wilson ,  Sumit Gwalani ,  William A. Drewry ,  Mattias Stefan Nissler ,  Daniel Kenneth Clifford ,  Christopher Masone

IPC: G06F12/14 ,  G06F11/30 ,  H04L9/30 ,  H04L9/32 ,  H04L29/06 ,  G06F21/62

CPC classification number: H04L63/20 ,  G06F21/6218 ,  H04L63/08 ,  H04L63/101

Abstract: Systems and methods for configuring browser policy settings on client computing devices are provided. In some aspects, a method includes receiving login credentials from a client computing device. The client computing device includes a browser. The method also includes transmitting browser policy data associated with the login credentials to the client computing device. The browser policy data identifies browser policy settings to be installed on the browser. The browser policy settings identified by the browser policy data include four or more of: compliance settings, behavioral settings, browser/software applications, permission to access one or more websites, restrictions on accessing one or more websites, read permission in a remote document storage unit accessible via the browser, or write permission in a remote document storage unit accessible via the browser.

Abstract translation: 提供了在客户端计算设备上配置浏览器策略设置的系统和方法。 在一些方面，一种方法包括从客户端计算设备接收登录凭证。 客户端计算设备包括浏览器。 该方法还包括将与登录凭证相关联的浏览器策略数据发送到客户端计算设备。 浏览器策略数据标识要在浏览器上安装的浏览器策略设置。 由浏览器策略数据识别的浏览器策略设置包括以下四个或更多：遵从性设置，行为设置，浏览器/软件应用程序，访问一个或多个网站的权限，访问一个或多个网站的限制，远程文档存储中的读取权限 可通过浏览器访问的单元，或通过浏览器访问的远程文档存储单元的写入权限。

公开(公告)号：US10127384B2

公开(公告)日：2018-11-13

申请号：US15335101

申请日：2016-10-26

Applicant: GOOGLE INC.

Inventor： Gaurav Shah ,  William A. Drewry ,  Randall Spangler ,  Ryan Tabone ,  Sumit Gwalani ,  Luigi Semenzato

IPC: G06F21/57 ,  G06F21/55 ,  G06F21/74 ,  H04L9/32 ,  G06F21/64 ,  H04L9/30

Abstract: Methods and apparatus for verifying a boot process of a computing system are disclosed. An example computer-implemented method includes reading, by a computing system during a boot process, a header section of a read-write portion of firmware of the computing system. The example method further includes generating, using a first cryptographic hash algorithm, a message digest corresponding with the header. The example method also includes decrypting, using a first public-key, an encrypted signature corresponding with the header. The example method still further includes comparing the message digest corresponding with the header and the decrypted signature corresponding with the header. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header match, the example method includes continuing the boot process. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header do not match, the example method includes halting the boot process.