-
公开(公告)号：US08296828B2
公开(公告)日：2012-10-23
申请号：US12335995
申请日：2008-12-16
申请人： Javier Dalzell , Saji Varkey , Kaushik Raj
发明人： Javier Dalzell , Saji Varkey , Kaushik Raj
IPC分类号： G06F21/00
CPC分类号： H04L63/08 , G06F21/41 , H04L9/3213 , H04L9/3271 , H04L63/0807 , H04L63/0815 , H04L2209/76 , H04L2209/80
摘要： Claim based identities are transformed to a set of credentials and securely stored in a secure data store using a number of encryption schemes. The credentials are then used to authenticate applications requiring specific credential types. For each call to the secure store system, a client application may provide a claims token issued by a trusted source, which is used to search for corresponding credentials in the secure data store if the credentials have been created previously for the user.
摘要翻译： 基于权利要求的身份被转换为一组凭证，并使用许多加密方案安全地存储在安全数据存储中。 然后，凭据用于验证需要特定凭据类型的应用程序。 对于对安全存储系统的每次呼叫，客户端应用程序可以提供由可信源发出的权利要求令牌，用于在安全数据存储器中搜索相应凭证，如果先前为用户创建了凭证。
-
公开(公告)号：US20100154041A1
公开(公告)日：2010-06-17
申请号：US12335995
申请日：2008-12-16
申请人： Javier Dalzell , Saji Varkey , Kaushik Raj
发明人： Javier Dalzell , Saji Varkey , Kaushik Raj
CPC分类号： H04L63/08 , G06F21/41 , H04L9/3213 , H04L9/3271 , H04L63/0807 , H04L63/0815 , H04L2209/76 , H04L2209/80
摘要： Claim based identities are transformed to a set of credentials and securely stored in a secure data store using a number of encryption schemes. The credentials are then used to authenticate applications requiring specific credential types. For each call to the secure store system, a client application may provide a claims token issued by a trusted source, which is used to search for corresponding credentials in the secure data store if the credentials have been created previously for the user.
摘要翻译： 基于权利要求的身份被转换为一组凭证，并使用许多加密方案安全地存储在安全数据存储中。 然后，凭据用于验证需要特定凭据类型的应用程序。 对于对安全存储系统的每次呼叫，客户端应用程序可以提供由可信源发出的权利要求令牌，用于在安全数据存储器中搜索相应凭证，如果先前为用户创建了凭证。
-
公开(公告)号：US08689004B2
公开(公告)日：2014-04-01
申请号：US12969007
申请日：2010-12-15
申请人： Javier Dalzell , Bryant Fong , Sarat Chandra Subramaniam , Christian Roy , Sadia Sharmin , Benoit Schmitlin , Venkatesh Veeraraghavan
发明人： Javier Dalzell , Bryant Fong , Sarat Chandra Subramaniam , Christian Roy , Sadia Sharmin , Benoit Schmitlin , Venkatesh Veeraraghavan
IPC分类号： H04L29/06
CPC分类号： G06F9/44526 , G06F21/335
摘要： A server system receives and installs multiple claim provider plug-ins. Each of the claim provider plug-ins implements the same software interface. However, each of the claim provider plug-ins can provide claims that assert different things. Claims provided by the claim provider plug-ins can be used to control access of users to a resource.
摘要翻译： 服务器系统接收并安装多个索赔提供程序插件。 每个声明提供程序插件都实现相同的软件界面。 但是，每个声明提供程序插件都可以提供断言不同内容的声明。 声明提供程序插件提供的声明可用于控制用户访问资源的访问。
-
4.发明申请公开(公告)号：US20120159601A1
公开(公告)日：2012-06-21
申请号：US12968823
申请日：2010-12-15
IPC分类号： G06F21/00
CPC分类号： G06F21/335
摘要： A server system sends a first credential request to a passive requestor at a client device. After sending the first credential request, the server system receives a credential for a user of the client device. If the credential is valid, the server system can provide the passive requestor with access to a resource provided by the server system. After providing the passive requestor with access to the resource, the server system provides an active requestor at the client device with access to the resource without sending a second credential request to the active requestor. Consequently, it may not be necessary for a user of the client device to provide credentials twice in order for the passive requestor and the active requestor to access the resource.
摘要翻译： 服务器系统向客户端设备的被动请求者发送第一个凭证请求。 在发送第一凭证请求之后，服务器系统接收客户端设备的用户的证书。 如果凭证有效，则服务器系统可以向被动请求者提供对服务器系统提供的资源的访问。 在向被动请求者提供对资源的访问之后，服务器系统在客户端设备处提供对资源的访问，而不向主动请求者发送第二凭证请求。 因此，客户端设备的用户可能不需要两次提供凭证，以便被动请求者和主动请求者访问该资源。
-
公开(公告)号：US08990896B2
公开(公告)日：2015-03-24
申请号：US12144880
申请日：2008-06-24
申请人： Venkatesh Veeraraghavan , Javier Dalzell , Benoit Schmitlin , Ambrose T. Treacy , Bryant Fong , Christian Roy
发明人： Venkatesh Veeraraghavan , Javier Dalzell , Benoit Schmitlin , Ambrose T. Treacy , Bryant Fong , Christian Roy
CPC分类号： H04L63/08 , G06F21/335
摘要： An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.
摘要翻译： 用于为网络环境中的逻辑对象提供访问控制的可扩展机制。 安全经纪人能够动态地注册一个或多个权利要求提供者，每个权利要求提供者可以断言关于逻辑对象的一个或多个权利要求。 索赔提供者可能是专门建立的，或可能是暴露数据或业务规则以供使用的第三方应用程序。 在原始声明被宣告后，索赔可能会被附加的索赔提供者所扩大。 权利要求的适用性可以在索赔提供者注册时或者当用户请求颁发安全令牌时限制范围。
-
6.发明授权公开(公告)号：US08370914B2
公开(公告)日：2013-02-05
申请号：US12968823
申请日：2010-12-15
IPC分类号： G06F21/00
CPC分类号： G06F21/335
摘要： A server system sends a first credential request to a passive requestor at a client device. After sending the first credential request, the server system receives a credential for a user of the client device. If the credential is valid, the server system can provide the passive requestor with access to a resource provided by the server system. After providing the passive requestor with access to the resource, the server system provides an active requestor at the client device with access to the resource without sending a second credential request to the active requestor. Consequently, it may not be necessary for a user of the client device to provide credentials twice in order for the passive requestor and the active requestor to access the resource.
摘要翻译： 服务器系统向客户端设备的被动请求者发送第一个凭证请求。 在发送第一凭证请求之后，服务器系统接收客户端设备的用户的证书。 如果凭证有效，则服务器系统可以向被动请求者提供对服务器系统提供的资源的访问。 在向被动请求者提供对资源的访问之后，服务器系统在客户端设备处提供对资源的访问，而不向主动请求者发送第二凭证请求。 因此，客户端设备的用户可能不需要两次提供凭证，以便被动请求者和主动请求者访问该资源。
-
公开(公告)号：US20120117609A1
公开(公告)日：2012-05-10
申请号：US12969007
申请日：2010-12-15
申请人： Javier Dalzell , Bryant Fong , Sarat Chandra Subramaniam , Christian Roy , Sadia Sharmin , Benoit Schmitlin , Venkatesh Veeraraghavan
发明人： Javier Dalzell , Bryant Fong , Sarat Chandra Subramaniam , Christian Roy , Sadia Sharmin , Benoit Schmitlin , Venkatesh Veeraraghavan
CPC分类号： G06F9/44526 , G06F21/335
摘要： A server system receives and installs multiple claim provider plug-ins. Each of the claim provider plug-ins implements the same software interface. However, each of the claim provider plug-ins can provide claims that assert different things. Claims provided by the claim provider plug-ins can be used to control access of users to a resource.
摘要翻译： 服务器系统接收并安装多个索赔提供程序插件。 每个声明提供程序插件都实现相同的软件界面。 但是，每个声明提供程序插件都可以提供断言不同内容的声明。 声明提供程序插件提供的声明可用于控制用户访问资源的访问。
-
公开(公告)号：US08850550B2
公开(公告)日：2014-09-30
申请号：US12953379
申请日：2010-11-23
申请人： Javier Dalzell , Alexander Hopmann , Huy Nguyen
发明人： Javier Dalzell , Alexander Hopmann , Huy Nguyen
CPC分类号： G06F21/335 , G06F2221/2141 , G06F2221/2145 , G06F2221/2149 , H04L9/3213 , H04L63/062 , H04L63/0815 , H04L63/168
摘要： A security token service generates a security token for a user that is associated with a client and stores the full security token within a memory. The security token includes an identity claim that represents the identity of the generated security token. Instead of passing the entire security token back to the client, the identity claim is returned to the client. For each request the client makes to the service, the client passes the identity claim in the request instead of the full security token having all of the claims. The identity claim is much smaller then the full security token. When a computing device receives the identity claim within the request from the user, the identity claim is used to access the full security token that is stored in memory.
摘要翻译： 安全令牌服务为与客户端相关联的用户生成安全令牌，并将完整的安全令牌存储在内存中。 安全令牌包括一个身份声明，代表生成的安全令牌的身份。 而不是将整个安全性令牌传递回客户端，而是将身份声明返回给客户端。 对于客户端对服务的每个请求，客户端在请求中传递身份声明，而不是具有所有权利要求的完整安全令牌。 身份声明比完整的安全令牌小得多。 当计算设备在来自用户的请求中接收到身份声明时，身份声明用于访问存储在存储器中的完整安全性令牌。
-
公开(公告)号：US20120131660A1
公开(公告)日：2012-05-24
申请号：US12953379
申请日：2010-11-23
申请人： Javier Dalzell , Alexander Hopmann , Huy Nguyen
发明人： Javier Dalzell , Alexander Hopmann , Huy Nguyen
CPC分类号： G06F21/335 , G06F2221/2141 , G06F2221/2145 , G06F2221/2149 , H04L9/3213 , H04L63/062 , H04L63/0815 , H04L63/168
摘要： A security token service generates a security token for a user that is associated with a client and stores the full security token within a memory. The security token includes an identity claim that represents the identity of the generated security token. Instead of passing the entire security token back to the client, the identity claim is returned to the client. For each request the client makes to the service, the client passes the identity claim in the request instead of the full security token having all of the claims. The identity claim is much smaller then the full security token. When a computing device receives the identity claim within the request from the user, the identity claim is used to access the full security token that is stored in memory.
摘要翻译： 安全令牌服务为与客户端相关联的用户生成安全令牌，并将完整的安全令牌存储在内存中。 安全令牌包括一个身份声明，代表生成的安全令牌的身份。 而不是将整个安全性令牌传递回客户端，而是将身份声明返回给客户端。 对于客户端对服务的每个请求，客户端在请求中传递身份声明，而不是具有所有权利要求的完整安全令牌。 身份声明比完整的安全令牌小得多。 当计算设备在来自用户的请求中接收到身份声明时，身份声明用于访问存储在存储器中的完整安全性令牌。
-
公开(公告)号：US20090320103A1
公开(公告)日：2009-12-24
申请号：US12144880
申请日：2008-06-24
申请人： Venkatesh Veeraraghavan , Javier Dalzell , Benoit Schmitlin , Ambrose T. Treacy , Bryant Fong , Christian Roy
发明人： Venkatesh Veeraraghavan , Javier Dalzell , Benoit Schmitlin , Ambrose T. Treacy , Bryant Fong , Christian Roy
IPC分类号： G06F21/20
CPC分类号： H04L63/08 , G06F21/335
摘要： An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.
摘要翻译： 用于为网络环境中的逻辑对象提供访问控制的可扩展机制。 安全经纪人能够动态地注册一个或多个权利要求提供者，每个权利要求提供者可以断言关于逻辑对象的一个或多个权利要求。 索赔提供者可能是专门建立的，或可能是暴露数据或业务规则以供使用的第三方应用程序。 在原始声明被宣告后，索赔可能会被附加的索赔提供者所扩大。 权利要求的适用性可以在索赔提供者注册时或者当用户请求颁发安全令牌时限制范围。
-
-
-
-
-
-
-
-
-
搜索结果
10 条记录 (耗时 0.021 秒)
