-
1.发明授权Dynamic access control in a content-based publish/subscribe system with delivery guarantees 失效基于内容的发布/订阅系统中的动态访问控制与交付保证公开(公告)号：US08392961B2
公开(公告)日：2013-03-05
申请号：US12137147
申请日：2008-06-11
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , G06F21/6218 , G06F2221/2105 , G06F2221/2141 , H04L51/00 , H04L67/00
摘要： Improved access control techniques for distributed messaging systems such as content-based publish/subscribe systems are disclosed. For example, a method for providing access control in a content-based publish/subscribe system, wherein messages are delivered from publishing clients to subscribing clients via a plurality of brokers, includes the following steps/operations. One or more changes to an access control policy are specified. An access control version identifier is associated to the one or more changes. The one or more changes are sent to one or more brokers of the plurality of brokers that have a publishing client or a subscribing client associated therewith that is affected by the one or more changes. The access control version identifier associated with the one or more changes is sent to each of the plurality of brokers.
摘要翻译： 公开了用于诸如基于内容的发布/订阅系统之类的分布式消息系统的改进的访问控制技术。 例如，一种用于在基于内容的发布/订阅系统中提供访问控制的方法，其中消息通过多个经纪人从发布客户端传递到订阅客户端包括以下步骤/操作。 指定访问控制策略的一个或多个更改。 访问控制版本标识符与一个或多个更改相关联。 将一个或多个更改发送给多个经纪人的一个或多个经纪人，其具有受一个或多个变化影响的发布客户端或与之相关联的订阅客户端。 将与一个或多个变化相关联的访问控制版本标识符发送给多个经纪人中的每一个。
-
2.发明申请Dynamic Access Control in a Content-Based Publish/Subscribe System with Delivery Guarantees 失效基于内容的发布/订阅系统中的动态访问控制与交付保证公开(公告)号：US20080244696A1
公开(公告)日：2008-10-02
申请号：US12137147
申请日：2008-06-11
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , G06F21/6218 , G06F2221/2105 , G06F2221/2141 , H04L51/00 , H04L67/00
摘要： Improved access control techniques for distributed messaging systems such as content-based publish/subscribe systems are disclosed. For example, a method for providing access control in a content-based publish/subscribe system, wherein messages are delivered from publishing clients to subscribing clients via a plurality of brokers, includes the following steps/operations. One or more changes to an access control policy are specified. An access control version identifier is associated to the one or more changes. The one or more changes are sent to one or more brokers of the plurality of brokers that have a publishing client or a subscribing client associated therewith that is affected by the one or more changes. The access control version identifier associated with the one or more changes is sent to each of the plurality of brokers.
摘要翻译： 公开了用于诸如基于内容的发布/订阅系统之类的分布式消息系统的改进的访问控制技术。 例如，一种用于在基于内容的发布/订阅系统中提供访问控制的方法，其中消息通过多个经纪人从发布客户端传递到订阅客户端包括以下步骤/操作。 指定访问控制策略的一个或多个更改。 访问控制版本标识符与一个或多个更改相关联。 将一个或多个更改发送给多个经纪人的一个或多个经纪人，其具有受一个或多个变化影响的发布客户端或与之相关联的订阅客户端。 将与一个或多个变化相关联的访问控制版本标识符发送给多个经纪人中的每一个。
-
3.发明授权Gapless delivery and durable subscriptions in a content-based publish/subscribe system 失效基于内容的发布/订阅系统中的无缝传递和持久订阅公开(公告)号：US07162524B2
公开(公告)日：2007-01-09
申请号：US10177474
申请日：2002-06-21
申请人： Mark C. Astley , Joshua S. Auerbach , Sumeer K. Bhola , Marc A. Kaplan , Robert E. Strom , Yuanyuan Zhao
发明人： Mark C. Astley , Joshua S. Auerbach , Sumeer K. Bhola , Marc A. Kaplan , Robert E. Strom , Yuanyuan Zhao
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04L67/26 , H04L67/306 , H04L69/329
摘要： A content-based publish/subscribe system for providing gapless message delivery from a publishing client to a subscribing client, the system includes a plurality of brokers operatively coupled to one another via a network. Each of the brokers include at least one processor and are configured as a publisher-hosting broker, a subscriber-hosting broker or an intermediate broker. The subscriber-hosting broker is operatively coupled to the publisher-hosting broker via the network through the intermediate broker. At least a portion of the plurality of brokers are configured so as to eliminate a need for persistent storage of messages at the intermediate broker and to substantially guarantee a gapless delivery of one or more messages transmitted by the publishing client to the subscribing client, even in the presence of a failure in the publish/subscribe system.
摘要翻译： 一种基于内容的发布/订阅系统，用于提供从发布客户端到订阅客户端的无间隙消息传递，该系统包括经由网络可操作地彼此耦合的多个代理。 每个经纪人包括至少一个处理器，并且被配置为发行人托管代理，订户托管代理或中间代理。 订户托管代理通过中间代理经由网络可操作地耦合到发行商托管代理。 多个代理的至少一部分被配置为消除对在中间代理处的消息的持久存储的需要，并且基本上保证发布客户端发送给订阅客户端的一个或多个消息的无间隙传递，即使在 发布/订阅系统中出现故障。
-
4.发明授权Gapless delivery and durable subscriptions in a content-based publish/subscribe system 失效基于内容的发布/订阅系统中的无缝传递和持久订阅公开(公告)号：US07487246B2
公开(公告)日：2009-02-03
申请号：US11479264
申请日：2006-06-30
申请人： Mark C. Astley , Joshua S. Auerbach , Sumeer K. Bhola , Marc A. Kaplan , Robert E. Strom , Yuanyuan Zhao
发明人： Mark C. Astley , Joshua S. Auerbach , Sumeer K. Bhola , Marc A. Kaplan , Robert E. Strom , Yuanyuan Zhao
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04L67/26 , H04L67/306 , H04L69/329
摘要： A content-based publish/subscribe system for providing gapless message delivery from a publishing client to a subscribing client is disclosed. The system includes a plurality of brokers operatively coupled to one another via a network. Each of the brokers include at least one processor and are configured as a publisher-hosting broker, a subscriber-hosting broker or an intermediate broker. The subscriber-hosting broker may be operatively coupled to the publisher-hosting broker via the network through the intermediate broker. At least a portion of the plurality of brokers are configured so as to eliminate a need for persistent storage of messages at the intermediate broker and to substantially guarantee a gapless delivery of one or more messages transmitted by the publishing client to the subscribing client, even in the presence of a failure in the publish/subscribe system.
摘要翻译： 公开了一种基于内容的发布/订阅系统，用于从发布客户端向订阅客户端提供无缝隙的消息传递。 该系统包括经由网络可操作地彼此耦合的多个经纪人。 每个经纪人包括至少一个处理器，并且被配置为发行人托管代理，订户托管代理或中间代理。 订户托管代理可以经由中间代理经由网络可操作地耦合到发行商托管代理。 多个代理的至少一部分被配置为消除对在中间代理处的消息的持久存储的需要，并且基本上保证发布客户端发送给订阅客户端的一个或多个消息的无间隙传递，即使在 发布/订阅系统中出现故障。
-
5.发明授权Mechanism for delivering messages to competing consumers in a point-to-point system 失效在点对点系统中向竞争消费者传递消息的机制公开(公告)号：US07525964B2
公开(公告)日：2009-04-28
申请号：US10980034
申请日：2004-11-03
申请人： Mark C. Astley , Andrew D. J. Banks , Sumeer K. Bhola , Ignacio Silva-Lepe , Michael J. Ward , David Ware
发明人： Mark C. Astley , Andrew D. J. Banks , Sumeer K. Bhola , Ignacio Silva-Lepe , Michael J. Ward , David Ware
IPC分类号： H04L12/24
CPC分类号： H04L67/2814 , H04L67/26 , H04L67/2842 , H04L67/322
摘要： A method, system, and computer program for delivering messages and data to competing consumers. One aspect of the invention includes a message delivery system including a destination messaging engine, one or more receiver messaging engines, and a message pool. The destination messaging engine is configured to distribute data from one or more producers. The receiver messaging engines are configured to request data from the destination messaging engine and transmit the data to one or more consumers. The message pool is configured to store data from the producers, with the destination messaging engine arbitrating data in the message pool among the receiver messaging engines.
摘要翻译： 用于将消息和数据传递给竞争消费者的方法，系统和计算机程序。 本发明的一个方面包括消息传递系统，其包括目的地消息收发引擎，一个或多个接收者消息传递引擎和消息池。 目的地消息传递引擎被配置为从一个或多个生产者分发数据。 接收器消息传递引擎被配置为从目的地消息收发引擎请求数据并将数据发送到一个或多个消费者。 消息池被配置为存储来自生产者的数据，目的地消息收发引擎在接收器消息传递引擎之间对消息池中的数据进行仲裁。
-
6.发明授权Systems and methods for protecting web based applications from cross site request forgery attacks 失效用于保护基于Web的应用程序免受跨站点请求伪造攻击的系统和方法公开(公告)号：US08020193B2
公开(公告)日：2011-09-13
申请号：US12254494
申请日：2008-10-20
CPC分类号： H04L63/1441 , G06F21/335 , G06F21/6218 , H04L67/02
摘要： Computer implemented methods (200) for protecting web based applications (110, 114) from Cross Site Request Forgery (CSRF) attacks. The methods involve (204) classifying each resource offered by a web server application as a CSRF-protected resource or a not-CSRF-protected resource. The methods also involve (214, . . . , 222) performing a user authentication, (224) initializing an authentication-token, and (226) initializing a CSRF protection secret that is used to validate CSRF protection parameters contained in resource identifiers for the resources. The methods further involve (228) performing a server-side rewriting process (300) to add the CSRF protection parameter to the resource identifiers for the resources and/or (230) performing a client-side rewriting process to add the CSRF protection parameter to a resource identifier for a second resource (e.g., a resource created at a client computer (102)).
摘要翻译： 用于保护基于Web的应用程序（110,114）免受跨站点请求伪造（CSRF）攻击的计算机实现的方法（200）。 这些方法涉及（204）将由Web服务器应用提供的每个资源分类为受CSRF保护的资源或不受CSRF保护的资源。 这些方法还涉及执行用户认证的（214，...，222），（224）初始化认证令牌，以及（226）初始化用于验证包含在资源标识符中的CSRF保护参数的CSRF保护机密 资源。 所述方法还包括（228）执行服务器侧重写处理（300）以将CSRF保护参数添加到资源的资源标识符和/或（230）执行客户端重写处理以将CSRF保护参数添加到 用于第二资源的资源标识符（例如，在客户端计算机（102）处创建的资源）。
-
7.发明申请SYSTEMS AND METHODS FOR PROTECTING WEB BASED APPLICATIONS FROM CROSS SITE REQUEST FORGERY ATTACKS 失效保护基于网站的应用程序的系统和方法从交叉点请求伪造攻击公开(公告)号：US20100100927A1
公开(公告)日：2010-04-22
申请号：US12254494
申请日：2008-10-20
CPC分类号： H04L63/1441 , G06F21/335 , G06F21/6218 , H04L67/02
摘要： Computer implemented methods (200) for protecting web based applications (110, 114) from Cross Site Request Forgery (CSRF) attacks. The methods involve (204) classifying each resource offered by a web server application as a CSRF-protected resource or a not-CSRF-protected resource. The methods also involve (214, . . . , 222) performing a user authentication, (224) initializing an authentication-token, and (226) initializing a CSRF protection secret that is used to validate CSRF protection parameters contained in resource identifiers for the resources. The methods further involve (228) performing a server-side rewriting process (300) to add the CSRF protection parameter to the resource identifiers for the resources and/or (230) performing a client-side rewriting process to add the CSRF protection parameter to a resource identifier for a second resource (e.g., a resource created at a client computer (102)).
摘要翻译： 用于保护基于Web的应用程序（110,114）免受跨站点请求伪造（CSRF）攻击的计算机实现的方法（200）。 这些方法涉及（204）将由Web服务器应用提供的每个资源分类为受CSRF保护的资源或不受CSRF保护的资源。 这些方法还涉及执行用户认证的（214，...，222），（224）初始化认证令牌，以及（226）初始化用于验证包含在资源标识符中的CSRF保护参数的CSRF保护机密 资源。 所述方法还包括（228）执行服务器侧重写处理（300）以将CSRF保护参数添加到资源的资源标识符和/或（230）执行客户端重写处理以将CSRF保护参数添加到 用于第二资源的资源标识符（例如，在客户端计算机（102）处创建的资源）。
-
-
-
-
-
-
搜索结果
7 条记录 (耗时 0.017 秒)
