Remote authorization for operations
    7.
    发明授权
    Remote authorization for operations 失效
    远程授权操作

    公开(公告)号:US08327417B2

    公开(公告)日:2012-12-04

    申请号:US12871163

    申请日:2010-08-30

    IPC分类号: G06F17/00 G06F21/00

    摘要: Techniques for the remote authorization of secure operations are provided. A secure security system restricts access to a secure operation via an access key. An authorization acquisition service obtains the access key on request from the secure security system when an attempt is made to initiate the secure operation. The authorization acquisition service gains access the access key from a secure store via a secret. That is, the secret store is accessible via the secret. The secret is obtained directly or indirectly from a remote authorization principal over a network.

    摘要翻译: 提供了远程授权安全操作的技术。 安全的安全系统通过访问密钥限制对安全操作的访问。 当尝试启动安全操作时,授权获取服务从安全安全系统请求获得访问密钥。 授权获取服务通过秘密从安全商店访问访问密钥。 也就是说,秘密商店可以通过秘密访问。 秘密是通过网络从远程授权主体直接或间接获得的。

    Techniques for dynamically establishing and managing authentication and trust relationships
    8.
    发明授权
    Techniques for dynamically establishing and managing authentication and trust relationships 有权
    用于动态建立和管理身份验证和信任关系的技术

    公开(公告)号:US07552468B2

    公开(公告)日:2009-06-23

    申请号:US11844532

    申请日:2007-08-24

    CPC分类号: H04L63/0815 G06Q40/04

    摘要: Techniques are provided for dynamically establishing and managing authentication and trust relationships. An identity service acquires and evaluates contracts associated with relationships between principals. The contracts permit the identity service to assemble authentication information, aggregated attributes, and aggregated policies which will drive and define the various relationships. That assembled information is consumed by the principals during interactions with one another and constrains those interactions. In some embodiments, the constraints are dynamically modified during on-going interactions between the principals.

    摘要翻译: 提供了动态建立和管理认证和信任关系的技术。 身份服务获取和评估与校长之间关系相关的合同。 合同允许身份服务组合认证信息,聚合属性和聚合策略,以驱动和定义各种关系。 这些组合信息在彼此交互过程中由主体消耗,并限制这些交互。 在一些实施例中,约束在主体之间的持续交互期间被动态修改。

    Policy and attribute based access to a resource
    9.
    发明授权
    Policy and attribute based access to a resource 有权
    对资源的基于策略和属性的访问

    公开(公告)号:US08015301B2

    公开(公告)日:2011-09-06

    申请号:US10676231

    申请日:2003-09-30

    IPC分类号: G06F15/16

    CPC分类号: H04L63/102 H04L63/0807

    摘要: Techniques are provided for controlling access to a resource based on access policies and attributes. A principal issues a request to a service for purposes of accessing a resource. The principal is authenticated and a service contract for the principal, the service, and the resource is generated. The service contract defines resource access policies and attributes which can be permissibly performed by the service on behalf of the principal during a session. Moreover, the session between the service and the resource is controlled by the service contract.

    摘要翻译: 提供了基于访问策略和属性来控制对资源的访问的技术。 主体向服务发出请求以访问资源。 委托人通过身份验证,生成主体,服务和资源的服务合同。 服务合同定义了在会话期间代表主体可以由服务允许地执行的资源访问策略和属性。 此外,服务和资源之间的会话由服务合同控制。

    Techniques for dynamically establishing and managing trust relationships
    10.
    发明授权
    Techniques for dynamically establishing and managing trust relationships 有权
    动态建立和管理信任关系的技术

    公开(公告)号:US07316027B2

    公开(公告)日:2008-01-01

    申请号:US10770677

    申请日:2004-02-03

    IPC分类号: H04L9/00

    摘要: Techniques are provided for dynamically establishing and managing trust relationships. A first principal initially requests a community list. The community list includes identities of one or more second principals with which the first principal can establish trusted relationships with. The community list is associated with a trust specification. The trust specification defines the policies and access rights associated with interactions between the first principal and the second principals during any active trusted relationships. The first principal can dynamically subdivide, manage, and modify entries of the community list and the trust specification, assuming any such modifications are permissible according to global contracts and policies associated with the first principal.

    摘要翻译: 提供了动态建立和管理信任关系的技术。 第一位校长最初要求社区名单。 社区列表包括一个或多个第二主体的身份,第一个主体可以与之建立信任关系。 社区列表与信任规范相关联。 信任规范定义了在任何主动信任关系期间与第一主体和第二主体之间的交互相关联的策略和访问权限。 假设根据与第一主体相关的全球合同和政策允许的任何此类修改,第一委员可以动态细分,管理和修改社区列表和信任规范的条目。