-
公开(公告)号：US07334254B1
公开(公告)日：2008-02-19
申请号：US10631984
申请日：2003-07-31
CPC分类号： H04L63/105 , H04L63/08
摘要： A system for controlling access to computing resources within an enterprise. The system can consist of a web server and a web security agent controlling access to URLs, a security gatekeeper and an access server controlling access to APIs, and a core security framework used by both the web server and web security agent and the security gatekeeper and access server to store security data and policies and make security decisions. The access server can be a SOAP server. The core security framework can consist of a policy store, a data store, and a policy server, where the data store can be a relational database or a directory. A session token can be attached to an approved request for access to an API and can provide access to the API for the duration of a session.
摘要翻译： 用于控制对企业内计算资源的访问的系统。 该系统可以由web服务器和控制对URL的访问的web安全代理，安全网守和控制对API的访问的访问服务器组成，以及由Web服务器和web安全代理以及安全网守使用的核心安全框架，以及 访问服务器来存储安全数据和策略，并进行安全决策。 访问服务器可以是一个SOAP服务器。 核心安全框架可以由策略存储，数据存储和策略服务器组成，其中数据存储可以是关系数据库或目录。 会话令牌可以附加到对API的访问的批准请求，并且可以在会话期间提供对API的访问。
-
公开(公告)号：US07194767B1
公开(公告)日：2007-03-20
申请号：US10185920
申请日：2002-06-28
CPC分类号： H04L63/0209 , H04L63/0272
摘要： A screened subnet for interconnecting an intranet to the Internet includes first and second subnets. A first firewall provides a first level of protection to a portion of the first subnet and to the second subnet while a second firewall provides a second level of protection to the second subnet. A secured utility VLAN provides utility services for the portion of the first subnet and/or the second subnet. The secured utility VLAN is coupled to the screened subnet such that it enjoys an additional level of protection relative to the subnets and/or the portion thereof which it serves. In various embodiments thereof, the screened subnet is configured to include a single, shared, secured utility VLAN for servicing both the portion of the first subnet and the second subnet, or a pair of discrete secured utility VLANs for respectively servicing the portion of the first subnet and the second subnet.
摘要翻译： 用于将内部网互连到互联网的屏蔽子网包括第一和第二子网。 第一防火墙为第一子网和第二子网的一部分提供第一级保护，而第二防火墙为第二子网提供第二级保护。 安全实用VLAN为第一个子网和/或第二个子网的部分提供实用程序服务。 安全的实用VLAN耦合到被筛选的子网，使得它相对于子网和/或其所服务的部分具有额外的保护级别。 在其各种实施例中，被筛选的子网被配置为包括用于服务第一子网和第二子网的一部分的一个单独的，共享的，安全的实用VLAN，或一对离散的安全公用VLAN，用于分别维护第一子网 子网和第二个子网。
-
3.发明授权公开(公告)号：US07496762B1
公开(公告)日：2009-02-24
申请号：US10960536
申请日：2004-10-07
IPC分类号： H04L9/32
CPC分类号： H04L63/104 , H04L63/0272 , H04L63/105 , H04L63/30
摘要： A security architecture for telecommunications services is provided that includes a first and second user interfaces, a first and second web servers, a service broker, application servers, and data stores. The first user interface is for enterprise users to access an enterprise. The first web server communicates with the first user interface. The application servers run enterprise applications which communicate with the data stores. A customer data is stored on a first portion of one of the data stores and a government data is stored on a second portion. The second user interface is for access to an enterprise by government users. The second web server communicates with the second user interface. The service broker receives requests from the second web server related to the government data and authorizes the enterprise applications to access the government data stored on the second portion of one of the data stores.
摘要翻译： 提供了用于电信服务的安全架构，其包括第一和第二用户界面，第一和第二web服务器，服务代理，应用服务器和数据存储。 第一个用户界面用于企业用户访问企业。 第一个Web服务器与第一个用户界面进行通信。 应用服务器运行与数据存储进行通信的企业应用程序。 客户数据存储在数据存储之一的第一部分上，政府数据被存储在第二部分上。 第二个用户界面是由政府用户访问企业。 第二网络服务器与第二用户界面进行通信。 服务代理从第二网络服务器接收与政府数据相关的请求，并授权企业应用访问存储在其中一个数据存储区的第二部分上的政府数据。
-
4.发明授权Computer system having an authentication and/or authorization routing service and a CORBA-compliant interceptor for monitoring the same 失效具有认证和/或授权路由服务的计算机系统和用于监视它的CORBA兼容拦截器公开(公告)号：US07437732B1
公开(公告)日：2008-10-14
申请号：US11009469
申请日：2004-12-10
CPC分类号： H04L69/40 , H04L41/0233 , H04L43/00 , H04L63/08 , H04L63/1425 , H04L67/42
摘要： A CORBA-compliant computer network includes a registration server on which an AAR service resides, a registry database and an ORB which couples the registry server to the registry database. A CORBA-compliant interceptor residing on the ORB intercepts each message, generated by the AAR service, invoking the registry database and each message, generated by the registry database, responding to the invocation message generated by the service of the client server. The interceptor selects information useful in determining the cause of a failed usage of the service residing in the client server from each intercepted invocation and response messages, writes the selected information to a data store residing in the client server and then re-invokes the intercepted invocation and response messages. In the event of a network failure, the data written to the data store may be reviewed to obtain useful information regarding the network failure.
摘要翻译： 符合CORBA的计算机网络包括AAR服务所在的注册服务器，注册表数据库和将注册表服务器耦合到注册表数据库的ORB。 驻留在ORB上的CORBA兼容拦截器拦截由AAR服务生成的每个消息，调用由注册表数据库生成的注册表数据库和每个消息，响应由客户端服务器的服务生成的调用消息。 拦截器选择有用的信息，用于确定从每个拦截的调用和响应消息中驻留在客户端服务器中的服务的失效使用的原因，将选定的信息写入驻留在客户端服务器中的数据存储，然后重新调用拦截的调用 和响应消息。 在发生网络故障的情况下，可能会审查写入数据存储区的数据，以获取有关网络故障的有用信息。
-
公开(公告)号：US07263717B1
公开(公告)日：2007-08-28
申请号：US10738244
申请日：2003-12-17
CPC分类号： H04L63/08 , H04L63/102 , Y10S707/99939
摘要： A system and method for bridging requests for access to resources between requestors in a distributed network and an authenticator servicing the distributed network is provided. The bridging mechanism has security features including a naming service for machine authentication and machine process rules to authorize what process machines can perform. The security proxy bridge intercepts an access request, and checks the IP address for machine authentication as well as the machine process rules and if both verifications are successful, the bridge then forwards the request for access to the authenticator. The security proxy framework utilizes a data structure that provides a method for storing selected security information stored as data records supporting an authentication and authorization system for users to access resources on multiple components of a distributed network supporting multiple business units of an enterprise. Primary authentication information stored herein includes general user information, security, and contact information.
摘要翻译： 提供了一种用于桥接在分布式网络中的请求者之间访问资源的请求的系统和方法以及服务于分布式网络的认证器。 桥接机制具有安全功能，包括机器认证的命名服务和机器过程规则，以授权什么过程机器可以执行。 安全代理网桥拦截访问请求，并检查机器认证的IP地址以及机器进程规则，并且如果两个验证都成功，则桥接器将转发请求以访问验证方。 安全代理框架利用提供一种存储选择的安全信息的方法的数据结构，该安全信息被存储为支持认证和授权系统的数据记录，用于访问支持企业多个业务单元的分布式网络的多个组件上的资源。 此处存储的主验证信息包括一般用户信息，安全性和联系人信息。
-
公开(公告)号：US08042160B1
公开(公告)日：2011-10-18
申请号：US11473184
申请日：2006-06-22
CPC分类号： H04L63/102 , G06F21/6218
摘要： A computer implemented method of identity management for application access. The method includes identifying access enabling information for users. The access enabling information related to users of a first enterprise network to enable the users to access applications on a second enterprise network. The method includes obtaining the identified access enabling information from the first enterprise network, and storing the access enabling information in an identity data store. The method also includes provisioning the access enabling information from the identity data store to one or more applications on the second enterprise network to enable the users of the first enterprise network to access the one or more applications on the second enterprise network.
摘要翻译： 一种用于应用程序访问的计算机实现的身份管理方法。 该方法包括识别用户的访问使能信息。 访问启用与第一企业网络的用户相关的信息，以使得用户能够访问第二企业网络上的应用。 该方法包括获得来自第一企业网络的所识别的访问使能信息，以及将访问允许信息存储在身份数据存储器中。 该方法还包括将来自身份数据存储的访问使信息提供给第二企业网络上的一个或多个应用，以使第一企业网络的用户能够访问第二企业网络上的一个或多个应用。
-
公开(公告)号：US07571473B1
公开(公告)日：2009-08-04
申请号：US11149923
申请日：2005-06-10
IPC分类号： G06F17/30
CPC分类号： G06F21/41
摘要： A system is for identity management is provided. The system includes an identity management data store, a human resources input, an application registration component, and a security component. The identity management data store stores identity-related information for a user of an application. The identity-related information is mapped within the identity management data store to role information for the user of the application. The human resources input provisions the identity management data store with the identity-related information. The application registration component facilitates the application to provision the identity management data store with the role information for the user of the application. The security component authenticates the user and authorizes the user for access to the application based on the identity-related information. The security component retrieves the role information mapped to the identity-related information and delivers the role information to the application.
摘要翻译： 提供了一种用于身份管理的系统。 该系统包括身份管理数据存储，人力资源输入，应用注册组件和安全组件。 身份管理数据存储存储用于应用的用户的身份相关信息。 身份相关信息在身份管理数据存储中映射到应用程序用户的角色信息。 人力资源输入为身份管理数据存储提供身份相关信息。 应用注册组件便于应用向身份管理数据存储提供用于应用的用户的角色信息。 安全组件认证用户，并根据身份相关信息授权用户访问应用程序。 安全组件检索映射到身份相关信息的角色信息，并将角色信息传递给应用程序。
-
8.发明授权Computer system having an authentication and/or authorization routing service and a CORBA-compliant interceptor for monitoring the same 失效具有认证和/或授权路由服务的计算机系统和用于监视它的CORBA兼容拦截器公开(公告)号：US06839708B1
公开(公告)日：2005-01-04
申请号：US10083430
申请日：2002-02-26
CPC分类号： H04L69/40 , H04L41/0233 , H04L43/00 , H04L63/08 , H04L63/1425 , H04L67/42
摘要： A CORBA-compliant computer network includes a registration server on which an AAR service resides, a registry database and an ORB which couples the registry server to the registry database. A CORBA-compliant interceptor residing on the ORB intercepts each message, generated by the AAR service, invoking the registry database and each message, generated by the registry database, responding to the invocation message generated by the service of the client server. The interceptor selects information useful in determining the cause of a failed usage of the service residing in the client server from each intercepted invocation and response messages, writes the selected information to a data store residing in the client server and then re-invokes the intercepted invocation and response messages. In the event of a network failure, the data written to the data store may be reviewed to obtain useful information regarding the network failure.
摘要翻译： 符合CORBA的计算机网络包括AAR服务所在的注册服务器，注册表数据库和将注册表服务器耦合到注册表数据库的ORB。 驻留在ORB上的CORBA兼容拦截器拦截由AAR服务生成的每个消息，调用由注册表数据库生成的注册表数据库和每个消息，响应由客户端服务器的服务生成的调用消息。 拦截器选择有用的信息，用于确定从每个拦截的调用和响应消息中驻留在客户端服务器中的服务的失效使用的原因，将选定的信息写入驻留在客户端服务器中的数据存储，然后重新调用拦截的调用 和响应消息。 在发生网络故障的情况下，可能会审查写入数据存储区的数据，以获取有关网络故障的有用信息。
-
-
-
-
-
-
-
搜索结果
8 条记录 (耗时 0.019 秒)
