-
公开(公告)号:US20130238894A1
公开(公告)日:2013-09-12
申请号:US13870438
申请日:2013-04-25
申请人: SYMANTEC CORPORATION
发明人: Barry Ferg , Gary Krall , David M'Raihi , Nicolas Popp
IPC分类号: H04L29/06
CPC分类号: H04L63/08 , H04L9/321 , H04L9/3271
摘要: In a centralized credential management system, website credentials are stored in a vault storage at a vault. The website credentials are encrypted based upon a key not available to the vault and are for authenticating a user to a third party website. Through a client, a user authenticates to the vault and retrieves the encrypted website credentials and parameters and code for properly injecting the credentials into a website authentication form. The website credentials are decrypted at the client and injected into the authentication form using the parameters and code.
摘要翻译: 在集中式凭证管理系统中,网站凭据存储在保管库中的保管库存储中。 网站凭据基于文件库不可用的密钥进行加密,用于向第三方网站认证用户。 通过客户端,用户对文件库进行身份验证,并检索加密的网站凭据和参数以及将证书正确注入网站验证表单的代码。 网站凭据在客户端解密,并使用参数和代码注入认证表单。
-
公开(公告)号:US20170195429A1
公开(公告)日:2017-07-06
申请号:US15041040
申请日:2016-02-11
申请人: Symantec Corporation
发明人: Prasad Bokare , Gary Krall , Nicolas Popp , Kunal Agarwal , Tushar Goyal , Srinath Venkataramani
IPC分类号: H04L29/08
CPC分类号: H04L63/0815 , H04L67/12
摘要: The disclosed computer-implemented method for facilitating single sign-on for multiple devices may include (1) establishing a login session for a user account, (2) in response to establishing the login session, providing, to a device associated with the user account, a session token for the user account, (3) receiving, from at least one client, a request to access resources associated with the user account, (4) determining that the associated device possesses the session token for the user account, and (5) in response to determining that the associated device possesses the session token, providing, to the client, access to the resources associated with the user account. Various other methods, systems, and computer-readable media are also disclosed.
-
公开(公告)号:US20130269042A1
公开(公告)日:2013-10-10
申请号:US13908881
申请日:2013-06-03
申请人: Symantec Corporation
发明人: Gary Krall , Barry Ferg , David M'Raihi
IPC分类号: H04L29/06
CPC分类号: H04L63/10 , H04L29/12066 , H04L61/1511 , H04L63/0823 , H04L63/1433
摘要: A method of providing web site verification information to a user can include receiving a DNS query including a host name and a seal verification site name, parsing the DNS query, and extracting the host name from the DNS query. The method also can include accessing a DNS zone file including a list of Trust Services customers and determining if the host name is associated with a Trust Services customer in the list of Trust Services customers. The method further can include transmitting a positive identifier to the requester if the host name is associated with a Trust Services customer and transmitting a negative identifier to the requester if the host name is not associated with a Trust Services customer. In a specific embodiment, the Trust Services include issuance of digital certificates.
摘要翻译: 向用户提供网站验证信息的方法可以包括接收包括主机名和密封验证站点名称的DNS查询,解析DNS查询以及从DNS查询中提取主机名。 该方法还可以包括访问包括信任服务客户列表的DNS区域文件,并确定主机名是否与信任服务客户列表中的信任服务客户相关联。 如果主机名与信任服务客户相关联并且如果主机名不与信任服务客户相关联则将否定标识符发送给请求者,该方法还可以包括向请求者发送肯定标识符。 在具体实施例中,信任服务包括发行数字证书。
-
公开(公告)号:US09712532B2
公开(公告)日:2017-07-18
申请号:US13908881
申请日:2013-06-03
申请人: Symantec Corporation
发明人: Gary Krall , Barry Ferg , David M'Raihi , Nicolas Popp
CPC分类号: H04L63/10 , H04L29/12066 , H04L61/1511 , H04L63/0823 , H04L63/1433
摘要: A method of providing web site verification information to a user can include receiving a DNS query including a host name and a seal verification site name, parsing the DNS query, and extracting the host name from the DNS query. The method also can include accessing a DNS zone file including a list of Trust Services customers and determining if the host name is associated with a Trust Services customer in the list of Trust Services customers. The method further can include transmitting a positive identifier to the requester if the host name is associated with a Trust Services customer and transmitting a negative identifier to the requester if the host name is not associated with a Trust Services customer. In a specific embodiment, the Trust Services include issuance of digital certificates.
-
公开(公告)号:US09026788B2
公开(公告)日:2015-05-05
申请号:US13870438
申请日:2013-04-25
申请人: Symantec Corporation
发明人: Barry Ferg , Gary Krall , David M'Raihi , Nicolas Popp
CPC分类号: H04L63/08 , H04L9/321 , H04L9/3271
摘要: In a centralized credential management system, website credentials are stored in a vault storage at a vault. The website credentials are encrypted based upon a key not available to the vault and are for authenticating a user to a third party website. Through a client, a user authenticates to the vault and retrieves the encrypted website credentials and parameters and code for properly injecting the credentials into a website authentication form. The website credentials are decrypted at the client and injected into the authentication form using the parameters and code.
摘要翻译: 在集中式凭证管理系统中,网站凭据存储在保管库中的保管库存储中。 网站凭据基于文件库不可用的密钥进行加密,并用于向第三方网站认证用户。 通过客户端,用户对文件库进行身份验证,并检索加密的网站凭据和参数以及将证书正确注入网站验证表单的代码。 网站凭据在客户端解密,并使用参数和代码注入认证表单。
-
公开(公告)号:US10326733B2
公开(公告)日:2019-06-18
申请号:US15041040
申请日:2016-02-11
申请人: Symantec Corporation
发明人: Prasad Bokare , Gary Krall , Nicolas Popp , Kunal Agarwal , Tushar Goyal , Srinath Venkataramani
摘要: The disclosed computer-implemented method for facilitating single sign-on for multiple devices may include (1) establishing a login session for a user account, (2) in response to establishing the login session, providing, to a device associated with the user account, a session token for the user account, (3) receiving, from at least one client, a request to access resources associated with the user account, (4) determining that the associated device possesses the session token for the user account, and (5) in response to determining that the associated device possesses the session token, providing, to the client, access to the resources associated with the user account. Various other methods, systems, and computer-readable media are also disclosed.
-
-
-
-
-