-
1.发明授权Method to verify the integrity of components on a trusted platform using integrity database services 有权使用完整性数据库服务验证可信平台上组件的完整性的方法公开(公告)号：US08266676B2
公开(公告)日：2012-09-11
申请号：US11608742
申请日：2006-12-08
申请人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
发明人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
IPC分类号： H04L29/06
CPC分类号： H04L63/1433 , H04L63/0823 , H04L63/0876
摘要： A client platform can be verified prior to being granted access to a resource or service on a network by validating individual hardware and software components of the client platform. Digests are generated for the components of the client platform. The digests can be collected into an integrity report. An authenticator entity receives the integrity report and compares the digests with digests stored in either a local signature database, a global signature database in an integrity authority, or both. Alternatively, the digests can be collected and stored on a portable digest-collector dongle. Once digests are either validated or invalidated, an overall integrity/trust score can be generated. She overall integrity/trust score can be used to determine whether the client platform should be granted access to the resource on the network using a policy.
摘要翻译： 客户端平台可以在通过验证客户端平台的各个硬件和软件组件被授予访问网络上的资源或服务之前进行验证。 为客户端平台的组件生成摘要。 摘要可以收集到完整性报告中。 验证器实体接收完整性报告，并将摘要与存储在本地签名数据库，完整性权限中的全局签名数据库或两者中的摘要进行比较。 或者，可以将消化集合收集并存储在便携式摘要收集器加密狗上。 一旦摘要被验证或无效，就可以生成总体完整性/信任分数。 她的整体完整性/信任度可用于确定客户端平台是否应授予使用策略访问网络上的资源。
-
2.发明授权Method and apparatus to establish routes based on the trust scores of routers within an IP routing domain 有权基于IP路由域内路由器的信任评分建立路由的方法和装置公开(公告)号：US08139588B2
公开(公告)日：2012-03-20
申请号：US12777114
申请日：2010-05-10
申请人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
发明人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
IPC分类号： H04L12/28
CPC分类号： H04W12/12 , H04L63/08 , H04L63/0823 , H04L63/0876 , H04L63/1433 , H04W12/06
摘要： A router includes a management module and a routing module. The routing module can be used to route data around a network. The management module can be used to manage the operation of the routing module, including generating an integrity report for the router, which can be used to generate a trust report for the router. The trust report can include an integrity/trust score for the router. The management module can control the routing module via a secure control interface.
摘要翻译： 路由器包括管理模块和路由模块。 路由模块可用于围绕网络路由数据。 管理模块可用于管理路由模块的操作，包括生成路由器的完整性报告，可用于为路由器生成信任报告。 信任报告可以包括路由器的完整性/信任分数。 管理模块可以通过安全控制界面控制路由模块。
-
3.发明申请METHOD AND APPARATUS TO ESTABLISH ROUTES BASED ON THE TRUST SCORES OF ROUTERS WITHIN AN IP ROUTING DOMAIN 有权基于IP路由域中的路由器的信任级别建立路由的方法和装置公开(公告)号：US20100218236A1
公开(公告)日：2010-08-26
申请号：US12777114
申请日：2010-05-10
申请人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
发明人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
CPC分类号： H04W12/12 , H04L63/08 , H04L63/0823 , H04L63/0876 , H04L63/1433 , H04W12/06
摘要： A router includes a management module and a routing module. The routing module can be used to route data around a network. The management module can be used to manage the operation of the routing module, including generating an integrity report for the router, which can be used to generate a trust report for the router. The trust report can include an integrity/trust score for the router. The management module can control the routing module via a secure control interface.
摘要翻译： 路由器包括管理模块和路由模块。 路由模块可用于围绕网络路由数据。 管理模块可用于管理路由模块的操作，包括生成路由器的完整性报告，可用于为路由器生成信任报告。 信任报告可以包括路由器的完整性/信任分数。 管理模块可以通过安全控制界面控制路由模块。
-
4.发明授权Method and apparatus to establish routes based on the trust scores of routers within an IP routing domain 失效基于IP路由域内路由器的信任评分建立路由的方法和装置公开(公告)号：US07733804B2
公开(公告)日：2010-06-08
申请号：US11624001
申请日：2007-01-17
申请人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
发明人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
IPC分类号： H04L12/28
CPC分类号： H04W12/12 , H04L63/08 , H04L63/0823 , H04L63/0876 , H04L63/1433 , H04W12/06
摘要： A router includes a management module and a routing module. The routing module can be used to route data around a network. The management module can be used to manage the operation of the routing module, including generating an integrity report for the router, which can be used to generate a trust report for the router. The trust report can include an integrity/trust score for the router. The management module can control the routing module via a secure control interface.
摘要翻译： 路由器包括管理模块和路由模块。 路由模块可用于围绕网络路由数据。 管理模块可用于管理路由模块的操作，包括生成路由器的完整性报告，可用于为路由器生成信任报告。 信任报告可以包括路由器的完整性/信任分数。 管理模块可以通过安全控制界面控制路由模块。
-
5.发明授权Method and system to issue trust score certificates for networked devices using a trust scoring service 有权使用信任评分服务为联网设备发布信任评分证书的方法和系统公开(公告)号：US08327131B1
公开(公告)日：2012-12-04
申请号：US11776498
申请日：2007-07-11
申请人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
发明人： Thomas Parasu Hardjono , David Maurits Bleckmann , William Wyatt Starnes , Bradley Douglas Andersen
IPC分类号： H04L9/32
CPC分类号： H04L63/1433 , H04L63/0823 , H04L63/0876 , H04L63/126
摘要： A target machine can be verified prior to being granted access to a resource on a network by interrogating and analyzing digests of various elements of the target machine. The digests can be collected into an integrity report and provided to a Trust Scoring Service. The Trust Scoring Service receives the integrity report and compares the digests with signatures stored in a signature database. A trust score certificate can then be issued to the target machine. The Trust Scoring Service can include a Score Evaluation Server which can interact with a Kerberos Authentication Server and a Ticket Granting Server to embed a trust score within a Kerberos Ticket to enforce a richer set of access policies. The integrity of a web server can be verified and a Trust Score Certificate Logo can be displayed on a corresponding home page of a merchant. By clicking on the Trust Score Certificate Logo, a user can verify the integrity of the merchant's web servers prior to completing a transaction with the merchant.
摘要翻译： 在通过询问和分析目标机器的各种元素的摘要之前，可以验证目标机器被授权访问网络上的资源。 摘要可以收集到完整性报告中，并提供给信任评分服务。 信任评分服务接收完整性报告，并将消息与存储在签名数据库中的签名进行比较。 然后可以向目标机器发出信任分数证书。 信任评分服务可以包括评分评估服务器，它可以与Kerberos身份验证服务器和授权服务器进行交互，以将信任分数嵌入到Kerberos Ticket中，以执行更丰富的访问策略。 可以验证Web服务器的完整性，并可以在商家的相应主页上显示信任分数证书徽标。 通过点击信任评分证书徽标，用户可以在与商家完成交易之前验证商家的网络服务器的完整性。
-
6.发明申请METHOD TO CONTROL ACCESS BETWEEN NETWORK ENDPOINTS BASED ON TRUST SCORES CALCULATED FROM INFORMATION SYSTEM COMPONENT ANALYSIS 有权基于从信息系统组件分析计算的信任度分析网络终端之间访问的方法公开(公告)号：US20110078452A1
公开(公告)日：2011-03-31
申请号：US12963486
申请日：2010-12-08
CPC分类号： H04L63/105 , G06F21/57
摘要： Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
摘要翻译： 为计算机系统中的模块生成签名。 签名可以组装成一个完整性日志。 将签名与完整性验证器中的数据库中的签名进行比较。 一旦签名被验证或无效，就可以生成信任分数。 然后可以使用信任分数来确定计算机系统是否应被授予对使用策略的资源的访问。
-
公开(公告)号：US08429412B2
公开(公告)日：2013-04-23
申请号：US12963486
申请日：2010-12-08
CPC分类号： H04L63/105 , G06F21/57
摘要： Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
-
8.发明授权Method to control access between network endpoints based on trust scores calculated from information system component analysis 有权基于从信息系统组件分析计算的信任分数来控制网络端点之间的访问的方法公开(公告)号：US07487358B2
公开(公告)日：2009-02-03
申请号：US11832781
申请日：2007-08-02
CPC分类号： H04L63/105 , G06F21/57
摘要： Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
摘要翻译： 为计算机系统中的模块生成签名。 签名可以组装成一个完整性日志。 将签名与完整性验证器中的数据库中的签名进行比较。 一旦签名被验证或无效，就可以生成信任分数。 然后可以使用信任分数来确定计算机系统是否应被授予对使用策略的资源的访问。
-
9.发明授权Method to control access between network endpoints based on trust scores calculated from information system component analysis 有权基于从信息系统组件分析计算的信任分数来控制网络端点之间的访问的方法公开(公告)号：US07904727B2
公开(公告)日：2011-03-08
申请号：US12363945
申请日：2009-02-02
CPC分类号： H04L63/105 , G06F21/57
摘要： Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
摘要翻译： 为计算机系统中的模块生成签名。 签名可以组装成一个完整性日志。 将签名与完整性验证器中的数据库中的签名进行比较。 一旦签名被验证或无效，就可以生成信任分数。 然后可以使用信任分数来确定计算机系统是否应被授予对使用策略的资源的访问。
-
10.发明申请METHOD TO CONTROL ACCESS BETWEEN NETWORK ENDPOINTS BASED ON TRUST SCORES CALCULATED FROM INFORMATION SYSTEM COMPONENT ANALYSIS 有权基于从信息系统组件分析计算的信任度分析网络终端之间访问的方法公开(公告)号：US20090144813A1
公开(公告)日：2009-06-04
申请号：US12363945
申请日：2009-02-02
CPC分类号： H04L63/105 , G06F21/57
摘要： Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
摘要翻译： 为计算机系统中的模块生成签名。 签名可以组装成一个完整性日志。 将签名与完整性验证器中的数据库中的签名进行比较。 一旦签名被验证或无效，就可以生成信任分数。 然后可以使用信任分数来确定计算机系统是否应被授予对使用策略的资源的访问。
-
-
-
-
-
-
-
-
-
搜索结果
11 条记录 (耗时 0.025 秒)
