-
公开(公告)号：US08984621B2
公开(公告)日：2015-03-17
申请号：US12714452
申请日：2010-02-27
CPC分类号： H04L63/08 , G06F9/455 , G06F9/45533 , G06F21/33 , G06F21/53 , G06F2221/2149 , H04L63/0272 , H04L63/10 , H04L67/10
摘要： Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).
摘要翻译： 提供了对虚拟环境进行安全访问管理的技术。 为了建立虚拟机（VM），用户认证到门户。 门户与云服务器和身份服务器进行交互以验证用户，获取虚拟机的互联网协议（IP）地址和端口号，并获取安全令牌。 然后，用户与安全套接字层虚拟专用网（SSL VPN）服务器交互，以与VM建立SSL VPN会话。 SSL VPN服务器还通过身份服务器对令牌进行身份验证，并获取动态策略，以在用户与VM（由云端服务器管理的虚拟机）之间的SSL VPN会话期间执行。
-
公开(公告)号：US20110296486A1
公开(公告)日：2011-12-01
申请号：US12787727
申请日：2010-05-26
CPC分类号： H04L63/0807 , H04L29/12066 , H04L29/12113 , H04L61/1511 , H04L61/1541 , H04L63/0272 , H04L67/08 , H04L67/16 , H04L67/38
摘要： Apparatus, systems, and methods may operate to authenticate a desktop client to an identity service (IS), to receive a request, from an application, at the IS via the desktop client for a virtual service internet protocol (IP) address associated with a service. The IS may operate to build a routing token that includes an original physical IP address associated with the service when a policy associated with the IS permits access to the service by a user identity associated with the desktop client. After the routing token is validated, the application may be connected to the service via the desktop client. The application may comprise an e-mail application or a remote control application, such as a virtual network computing (VNC) application. Additional apparatus, systems, and methods are disclosed.
摘要翻译： 装置，系统和方法可以操作以将身份服务（IS）的桌面客户端认证为从IS应用程序经由桌面客户端接收与一个虚拟服务网际协议（IP）地址相关联的虚拟服务网际协议（IP）地址的请求 服务。 当与IS相关联的策略允许通过与桌面客户端相关联的用户身份访问服务时，IS可以操作以构建包括与服务相关联的原始物理IP地址的路由令牌。 在验证路由令牌之后，应用程序可能通过桌面客户端连接到服务。 应用可以包括电子邮件应用或诸如虚拟网络计算（VNC）应用的远程控制应用。 公开了附加装置，系统和方法。
-
公开(公告)号：US08831993B2
公开(公告)日：2014-09-09
申请号：US12728115
申请日：2010-03-19
CPC分类号： H04L63/10 , G06F9/45533 , G06F9/45558 , G06F9/468 , G06F9/5077 , G06F21/53 , G06F2009/45587 , G06F2009/45595 , G06F2212/151 , H04L9/3247 , H04L29/06612 , H04L29/08468 , H04L29/08846 , H04L63/08 , H04L63/20
摘要： Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).
摘要翻译： 提供了共享虚拟机（VM）资源的技术。 创建VM内资源的相对位置; 当主体在运行时请求访问资源时，相对位置会动态地解析为特定的物理位置。 主体位于与虚拟机相关的环境之外。 在主体和资源（位于VM环境中的资源）之间允许连接之前，认证和访问限制将针对主体发出的请求动态执行。
-
4.发明申请TECHNIQUES FOR NON REPUDIATION OF STORAGE IN CLOUD OR SHARED STORAGE ENVIRONMENTS 有权无法在云存储或共享存储环境中存储的技术公开(公告)号：US20120297183A1
公开(公告)日：2012-11-22
申请号：US13108094
申请日：2011-05-16
IPC分类号： H04L9/32
CPC分类号： H04L9/0894 , H04L9/3247 , H04L63/08 , H04L63/126
摘要： Techniques for non-repudiation of storage in cloud or shared storage environments are provided. A unique signature is generated within a cloud or shared storage environment for each file of the storage tenant that accesses the cloud or shared storage environment. Each signature is stored as part of the file system and every time a file is accessed that signature is verified. When a file is updated, the signature is updated as well to reflect the file update.
摘要翻译： 提供了在云或共享存储环境中不可否认存储的技术。 在云或共享存储环境中为访问云或共享存储环境的存储租户的每个文件生成唯一的签名。 每个签名作为文件系统的一部分存储，并且每次访问该文件时，签名都被验证。 更新文件时，还会更新签名以反映文件更新。
-
公开(公告)号：US08301876B2
公开(公告)日：2012-10-30
申请号：US12121843
申请日：2008-05-16
IPC分类号： H04L29/06
CPC分类号： H04L63/1466 , H04L63/08 , H04L63/168
摘要： Techniques for secure network communication are provided. Credentials for a user along with a transparently generated secret are sent to a resource that the user desires to establish a secure communication session with. After successful authentication of the user, an initial sequence number for a first transaction of the session is set on a client of the user. Thereafter, with each transaction of the session the client supplies a new and unique sequence number to a server of the resource and uses the secret to encode and validate that transaction. The server of the resource does not permit any transaction that includes an invalid or previously used sequence number.
摘要翻译： 提供了用于安全网络通信的技术。 将用户的凭证以及透明生成的秘密发送到用户希望与之建立安全通信会话的资源。 在用户成功认证之后，在用户的客户端上设置用于会话的第一事务的初始序列号。 此后，对于会话的每个事务，客户端向资源的服务器提供新的和唯一的序列号，并使用秘密对该事务进行编码和验证。 资源的服务器不允许包含无效或先前使用的序列号的任何事务。
-
6.发明授权Techniques for non repudiation of storage in cloud or shared storage environments 有权在云或共享存储环境中不可否认存储的技术公开(公告)号：US08544070B2
公开(公告)日：2013-09-24
申请号：US13108094
申请日：2011-05-16
IPC分类号： G06F7/04
CPC分类号： H04L9/0894 , H04L9/3247 , H04L63/08 , H04L63/126
摘要： Techniques for non-repudiation of storage in cloud or shared storage environments are provided. A unique signature is generated within a cloud or shared storage environment for each file of the storage tenant that accesses the cloud or shared storage environment. Each signature is stored as part of the file system and every time a file is accessed that signature is verified. When a file is updated, the signature is updated as well to reflect the file update.
摘要翻译： 提供了在云或共享存储环境中不可否认存储的技术。 在云或共享存储环境中为访问云或共享存储环境的存储租户的每个文件生成唯一的签名。 每个签名作为文件系统的一部分存储，并且每次访问该文件时，签名都被验证。 更新文件时，还会更新签名以反映文件更新。
-
公开(公告)号：US08474009B2
公开(公告)日：2013-06-25
申请号：US12787727
申请日：2010-05-26
IPC分类号： H04L29/06
CPC分类号： H04L63/0807 , H04L29/12066 , H04L29/12113 , H04L61/1511 , H04L61/1541 , H04L63/0272 , H04L67/08 , H04L67/16 , H04L67/38
摘要： Apparatus, systems, and methods may operate to authenticate a desktop client to an identity service (IS), to receive a request, from an application, at the IS via the desktop client for a virtual service internet protocol (IP) address associated with a service. The IS may operate to build a routing token that includes an original physical IP address associated with the service when a policy associated with the IS permits access to the service by a user identity associated with the desktop client. After the routing token is validated, the application may be connected to the service via the desktop client. The application may comprise an e-mail application or a remote control application, such as a virtual network computing (VNC) application. Additional apparatus, systems, and methods are disclosed.
摘要翻译： 装置，系统和方法可以操作以将身份服务（IS）的桌面客户端认证为从IS应用程序经由桌面客户端接收与一个虚拟服务网际协议（IP）地址相关联的虚拟服务网际协议（IP）地址的请求 服务。 当与IS相关联的策略允许通过与桌面客户端相关联的用户身份访问服务时，IS可以操作以构建包括与服务相关联的原始物理IP地址的路由令牌。 在验证路由令牌之后，应用程序可能通过桌面客户端连接到服务。 应用可以包括电子邮件应用或诸如虚拟网络计算（VNC）应用的远程控制应用。 公开了附加装置，系统和方法。
-
公开(公告)号：US20090319776A1
公开(公告)日：2009-12-24
申请号：US12121843
申请日：2008-05-16
IPC分类号： H04L9/32
CPC分类号： H04L63/1466 , H04L63/08 , H04L63/168
摘要： Techniques for secure network communication are provided. Credentials for a user along with a transparently generated secret are sent to a resource that the user desires to establish a secure communication session with. After successful authentication of the user, an initial sequence number for a first transaction of the session is set on a client of the user. Thereafter, with each transaction of the session the client supplies a new and unique sequence number to a server of the resource and uses the secret to encode and validate that transaction. The server of the resource does not permit any transaction that includes an invalid or previously used sequence number.
摘要翻译： 提供了用于安全网络通信的技术。 将用户的凭证以及透明生成的秘密发送到用户希望与之建立安全通信会话的资源。 在用户成功认证之后，在用户的客户端上设置用于会话的第一事务的初始序列号。 此后，对于会话的每个事务，客户端向资源的服务器提供新的和唯一的序列号，并使用秘密对该事务进行编码和验证。 资源的服务器不允许包含无效或先前使用的序列号的任何事务。
-
公开(公告)号：US20110231840A1
公开(公告)日：2011-09-22
申请号：US12728115
申请日：2010-03-19
CPC分类号： H04L63/10 , G06F9/45533 , G06F9/45558 , G06F9/468 , G06F9/5077 , G06F21/53 , G06F2009/45587 , G06F2009/45595 , G06F2212/151 , H04L9/3247 , H04L29/06612 , H04L29/08468 , H04L29/08846 , H04L63/08 , H04L63/20
摘要： Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).
摘要翻译： 提供了共享虚拟机（VM）资源的技术。 创建VM内资源的相对位置; 当主体在运行时请求访问资源时，相对位置会动态地解析为特定的物理位置。 主体位于与虚拟机相关的环境之外。 在主体和资源（位于VM环境中的资源）之间允许连接之前，认证和访问限制将针对主体发出的请求动态执行。
-
公开(公告)号：US20110214176A1
公开(公告)日：2011-09-01
申请号：US12714452
申请日：2010-02-27
CPC分类号： H04L63/08 , G06F9/455 , G06F9/45533 , G06F21/33 , G06F21/53 , G06F2221/2149 , H04L63/0272 , H04L63/10 , H04L67/10
摘要： Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).
摘要翻译： 提供了对虚拟环境进行安全访问管理的技术。 为了建立虚拟机（VM），用户认证到门户。 门户与云服务器和身份服务器进行交互以验证用户，获取虚拟机的互联网协议（IP）地址和端口号，并获取安全令牌。 然后，用户与安全套接字层虚拟专用网（SSL VPN）服务器交互，以与VM建立SSL VPN会话。 SSL VPN服务器还通过身份服务器对令牌进行身份验证，并获取动态策略，以在用户与VM（由云端服务器管理的虚拟机）之间的SSL VPN会话期间执行。
-
-
-
-
-
-
-
-
-
搜索结果
146 条记录 (耗时 0.029 秒)
