公开(公告)号：US20140304763A1

公开(公告)日：2014-10-09

申请号：US13205514

申请日：2011-08-08

申请人： Magnus H. Ma ,  Rajesh K. Gwalani

发明人： Magnus H. Ma ,  Rajesh K. Gwalani

IPC分类号： G06F21/00 ,  H04L9/00

CPC分类号： H04L63/0263 ,  H04L29/06965 ,  H04L63/02 ,  H04L63/168 ,  H04L63/20

摘要： Exemplary embodiments involve a computing system requesting and receiving a socket policy file from a policy file server via a secure socket connection, identifying that the security policy requires communicating with a content server via a secure socket connection, and communicating with the content server via a second secure socket connection. The socket policy file specifies a security policy governing socket connections to a content server over a transport protocol layer. Additional embodiments involve requesting a socket policy file via a non-secure socket connection, receiving (via the non-secure socket connection) a placeholder socket policy file requiring requests for socket policy files to be communicated via a secure socket connection, establishing a secure socket connection with the policy file server, and submitting a request for the socket policy file to the policy file server via the secure socket connection.

摘要翻译： 示例性实施例涉及计算系统，其经由安全套接字连接从策略文件服务器请求并接收套接字策略文件，识别安全策略需要经由安全套接字连接与内容服务器进行通信，并且经由第二 安全的套接字连接。 套接字策略文件指定通过传输协议层管理与内容服务器的套接字连接的安全策略。 另外的实施例涉及经由非安全套接字连接来请求套接字策略文件，通过安全套接字连接接收（经由非安全套接字连接）占位符套接字策略文件，该占位符套接字策略文件需要对套接字策略文件进行请求，以建立安全套接字 与策略文件服务器的连接，并通过安全套接字连接向策略文件服务器提交套接字策略文件的请求。

公开(公告)号：US08973089B2

公开(公告)日：2015-03-03

申请号：US13205514

申请日：2011-08-08

申请人： Magnus H. Ma ,  Rajesh K. Gwalani

发明人： Magnus H. Ma ,  Rajesh K. Gwalani

IPC分类号： H04L29/06 ,  G06F21/00

CPC分类号： H04L63/0263 ,  H04L29/06965 ,  H04L63/02 ,  H04L63/168 ,  H04L63/20

摘要： Exemplary embodiments involve a computing system requesting and receiving a socket policy file from a policy file server via a secure socket connection, identifying that the security policy requires communicating with a content server via a secure socket connection, and communicating with the content server via a second secure socket connection. The socket policy file specifies a security policy governing socket connections to a content server over a transport protocol layer. Additional embodiments involve requesting a socket policy file via a non-secure socket connection, receiving (via the non-secure socket connection) a placeholder socket policy file requiring requests for socket policy files to be communicated via a secure socket connection, establishing a secure socket connection with the policy file server, and submitting a request for the socket policy file to the policy file server via the secure socket connection.

摘要翻译： 示例性实施例涉及计算系统，其经由安全套接字连接从策略文件服务器请求并接收套接字策略文件，识别安全策略需要经由安全套接字连接与内容服务器进行通信，并且经由第二 安全的套接字连接。 套接字策略文件指定通过传输协议层管理与内容服务器的套接字连接的安全策略。 另外的实施例涉及经由非安全套接字连接来请求套接字策略文件，通过安全套接字连接接收（经由非安全套接字连接）占位符套接字策略文件，该占位符套接字策略文件需要对套接字策略文件进行请求，以建立安全套接字 与策略文件服务器的连接，并通过安全套接字连接向策略文件服务器提交套接字策略文件的请求。

公开(公告)号：US08561208B2

公开(公告)日：2013-10-15

申请号：US13212996

申请日：2011-08-18

申请人： Jim D. Corbett ,  Oliver Goldman ,  Rajesh K. Gwalani ,  Robert O. Kwon ,  John Joseph Moyer ,  Michael Brian Orr ,  Peleus Uhley

发明人： Jim D. Corbett ,  Oliver Goldman ,  Rajesh K. Gwalani ,  Robert O. Kwon ,  John Joseph Moyer ,  Michael Brian Orr ,  Peleus Uhley

IPC分类号： G06F21/20 ,  G06F21/22

CPC分类号： G06F21/53 ,  G06F2221/032

摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for handling secure user interface content. In one aspect, a method includes receiving, at a data processing apparatus, content over a communication network from a computing system separate from the data processing apparatus; determining that the received content is authentic secure content; retrieving information stored at the data processing apparatus and previously selected by a user for purposes of securing user interface content; rendering the received content, to a display of the data processing apparatus, as a user interface with a visual wrapper, where the visual wrapper includes the retrieved information, visually separates the user interface from other visual elements on the display, and includes an indication that the user interface is secure; and processing input received through the user interface.

摘要翻译： 方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于处理安全的用户界面内容。 一方面，一种方法包括：在数据处理装置处，从与所述数据处理装置分开的计算系统通过通信网络接收内容; 确定所接收的内容是真实的安全内容; 为了确保用户界面内容的目的，检索存储在数据处理装置中并且由用户先前选择的信息; 将所接收的内容呈现为数据处理设备的显示器，作为具有视觉包装器的用户界面，其中视觉包装器包括检索到的信息，将用户界面与显示器上的其他视觉元素可视地分离，并且包括： 用户界面安全; 并处理通过用户界面接收的输入。

公开(公告)号：US20130167243A1

公开(公告)日：2013-06-27

申请号：US13212996

申请日：2011-08-18

申请人： Jim D. Corbett ,  Oliver Goldman ,  Rajesh K. Gwalani ,  Robert O. Kwon ,  John Joseph Moyer ,  Michael Brian Orr ,  Peleus Uhley

发明人： Jim D. Corbett ,  Oliver Goldman ,  Rajesh K. Gwalani ,  Robert O. Kwon ,  John Joseph Moyer ,  Michael Brian Orr ,  Peleus Uhley

IPC分类号： G06F21/00 ,  G06F21/20

CPC分类号： G06F21/53 ,  G06F2221/032

摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for handing secure user interface content. In one aspect, a method includes receiving, at a data processing apparatus, content over a communication network from a computing system separate from the data processing apparatus; determining that the received content is authentic secure content; retrieving information stored at the data processing apparatus and previously selected by a user for purposes of securing user interface content; rendering the received content, to a display of the data processing apparatus, as a user interface with a visual wrapper, where the visual wrapper includes the retrieved information, visually separates the user interface from other visual elements on the display, and includes an indication that the user interface is secure; and processing input received through the user interface.

摘要翻译： 方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于处理安全的用户界面内容。 一方面，一种方法包括：在数据处理装置处，从与所述数据处理装置分开的计算系统通过通信网络接收内容; 确定所接收的内容是真实的安全内容; 为了确保用户界面内容的目的，检索存储在数据处理装置中并且由用户先前选择的信息; 将所接收的内容呈现为数据处理设备的显示器，作为具有视觉包装器的用户界面，其中视觉包装器包括检索到的信息，将用户界面与显示器上的其他视觉元素可视地分开，并且包括： 用户界面安全; 并处理通过用户界面接收的输入。