公开(公告)号：US07428306B2

公开(公告)日：2008-09-23

申请号：US11406184

申请日：2006-04-18

申请人： Ufuk Celikkan ,  William C. Conklin ,  Shawn P. Mullen ,  Ravi A. Shankar

发明人： Ufuk Celikkan ,  William C. Conklin ,  Shawn P. Mullen ,  Ravi A. Shankar

IPC分类号： H04L9/14

CPC分类号： G06F21/602 ,  G06F21/6218 ,  H04L9/0637

摘要： An encryption apparatus and method for providing an encrypted file system are provided. The encryption apparatus and method of the illustrative embodiments uses a combination of encryption methodologies so as to reduce the amount of decryption and re-encryption that is necessary to a file in the Encrypted File System in the event that the file needs to be modified. The encryption methodologies are interleaved, or alternated, with regard to each block of plaintext. In one illustrative embodiment, Plaintext Block Chaining (PBC) and Cipher Block Chaining (CBC) encryption methodologies are alternated for encrypting a sequence of blocks of data. The encryption of a block of plaintext is dependent upon the plaintext or a cipher generated for the plaintext of a previous block of data in the sequence of blocks of data so that the encryption is more secure than known Electronic Code Book encryption methodologies.

摘要翻译： 提供了一种用于提供加密文件系统的加密装置和方法。 说明性实施例的加密装置和方法使用加密方法的组合，以便在需要修改文件的情况下减少加密文件系统中的文件所必需的解密和重新加密的量。 关于每个明文块，加密方法被交织或交替。 在一个说明性实施例中，替代了明文块链接（PBC）和密码块链接（CBC）加密方法来加密数据块序列。 明文块的加密取决于明文或为数据块序列中的先前数据块的明文生成的密码，使得加密比已知的电子代码簿加密方法更安全。

公开(公告)号：US20080310624A1

公开(公告)日：2008-12-18

申请号：US12194610

申请日：2008-08-20

申请人： Ufuk Celikkan ,  William C. Conklin ,  Shawn P. Mullen ,  Ravi A. Shankar

发明人： Ufuk Celikkan ,  William C. Conklin ,  Shawn P. Mullen ,  Ravi A. Shankar

IPC分类号： H04L9/06

CPC分类号： G06F21/602 ,  G06F21/6218 ,  H04L9/0637

摘要： An encryption apparatus and method for providing an encrypted file system are provided. The encryption apparatus and method of the illustrative embodiments uses a combination of encryption methodologies so as to reduce the amount of decryption and re-encryption that is necessary to a file in the Encrypted File System in the event that the file needs to be modified. The encryption methodologies are interleaved, or alternated, with regard to each block of plaintext. In one illustrative embodiment, Plaintext Block Chaining (PBC) and Cipher Block Chaining (CBC) encryption methodologies are alternated for encrypting a sequence of blocks of data. The encryption of a block of plaintext is dependent upon the plaintext or a cipher generated for the plaintext of a previous block of data in the sequence of blocks of data so that the encryption is more secure than known Electronic Code Book encryption methodologies.

摘要翻译： 提供了一种用于提供加密文件系统的加密装置和方法。 说明性实施例的加密装置和方法使用加密方法的组合，以便在需要修改文件的情况下减少加密文件系统中的文件所需的解密和重新加密的量。 关于每个明文块，加密方法被交织或交替。 在一个说明性实施例中，替代了明文块链接（PBC）和密码块链接（CBC）加密方法来加密数据块序列。 明文块的加密取决于明文或为数据块序列中的先前数据块的明文生成的密码，使得加密比已知的电子代码簿加密方法更安全。

公开(公告)号：US08107621B2

公开(公告)日：2012-01-31

申请号：US12194610

申请日：2008-08-20

申请人： Ufuk Celikkan ,  William C. Conklin ,  Shawn P. Mullen ,  Ravi A. Shankar

发明人： Ufuk Celikkan ,  William C. Conklin ,  Shawn P. Mullen ,  Ravi A. Shankar

IPC分类号： H04L9/14

CPC分类号： G06F21/602 ,  G06F21/6218 ,  H04L9/0637

摘要： Mechanisms for providing an encrypted file system are provided. The mechanisms use a combination of encryption methodologies so as to reduce the amount of decryption and re-encryption that is necessary to a file in the Encrypted File System in the event that the file needs to be modified. The encryption methodologies are interleaved, or alternated, with regard to each block of plaintext. In one illustrative embodiment, Plaintext Block Chaining (PBC) and Cipher Block Chaining (CBC) encryption methodologies are alternated for encrypting a sequence of blocks of data. The encryption of a block of plaintext is dependent upon the plaintext or a cipher generated for the plaintext of a previous block of data in the sequence of blocks of data so that the encryption is more secure than known Electronic Code Book encryption methodologies.

摘要翻译： 提供了提供加密文件系统的机制。 这些机制使用加密方法的组合，以便在需要修改文件的情况下减少加密文件系统中的文件所需的解密和重新加密的数量。 关于每个明文块，加密方法被交织或交替。 在一个说明性实施例中，替代了明文块链接（PBC）和密码块链接（CBC）加密方法来加密数据块序列。 明文块的加密取决于明文或为数据块序列中的先前数据块的明文生成的密码，使得加密比已知的电子代码簿加密方法更安全。

公开(公告)号：US20070061593A1

公开(公告)日：2007-03-15

申请号：US11227029

申请日：2005-09-15

申请人： Ufuk Celikkan ,  Julianne Haugh

发明人： Ufuk Celikkan ,  Julianne Haugh

IPC分类号： G06F12/14

CPC分类号： H04L63/0442

摘要： Methods, systems, and products are disclosed for sending secured data, the method including encrypting a first portion of a request for computer services to be performed by a downstream node for decryption by a first node, encrypting a second portion of the request for computer services to be performed by a downstream node for decryption by a second node, and passing the request for computer services to a downstream node.

摘要翻译： 公开了用于发送安全数据的方法，系统和产品，所述方法包括加密由下游节点执行的计算机服务的请求的第一部分以供第一节点解密，加密计算机服务请求的第二部分 由下游节点执行以由第二节点进行解密，并将计算机服务请求传递给下游节点。

公开(公告)号：US20070253549A1

公开(公告)日：2007-11-01

申请号：US11406184

申请日：2006-04-18

申请人： Ufuk Celikkan ,  William Conklin ,  Shawn Mullen ,  Ravi Shankar

发明人： Ufuk Celikkan ,  William Conklin ,  Shawn Mullen ,  Ravi Shankar

IPC分类号： H04L9/00

CPC分类号： G06F21/602 ,  G06F21/6218 ,  H04L9/0637

摘要： An encryption apparatus and method for providing an encrypted file system are provided. The encryption apparatus and method of the illustrative embodiments uses a combination of encryption methodologies so as to reduce the amount of decryption and re-encryption that is necessary to a file in the Encrypted File System in the event that the file needs to be modified. The encryption methodologies are interleaved, or alternated, with regard to each block of plaintext. In one illustrative embodiment, Plaintext Block Chaining (PBC) and Cipher Block Chaining (CBC) encryption methodologies are alternated for encrypting a sequence of blocks of data. The encryption of a block of plaintext is dependent upon the plaintext or a cipher generated for the plaintext of a previous block of data in the sequence of blocks of data so that the encryption is more secure than known Electronic Code Book encryption methodologies.

摘要翻译： 提供了一种用于提供加密文件系统的加密装置和方法。 说明性实施例的加密装置和方法使用加密方法的组合，以便在需要修改文件的情况下减少加密文件系统中的文件所需的解密和重新加密的量。 关于每个明文块，加密方法被交织或交替。 在一个说明性实施例中，替代了明文块链接（PBC）和密码块链接（CBC）加密方法来加密数据块序列。 明文块的加密取决于明文或为数据块序列中的先前数据块的明文生成的密码，使得加密比已知的电子代码簿加密方法更安全。

公开(公告)号：US20070079382A1

公开(公告)日：2007-04-05

申请号：US11227025

申请日：2005-09-15

申请人： Ufuk Celikkan ,  Julianne Haugh

发明人： Ufuk Celikkan ,  Julianne Haugh

IPC分类号： H04N7/16

CPC分类号： G06F21/40 ,  G06F21/6218 ,  G06F2221/2115

摘要： Methods, systems, and products are disclosed for authorizing computer services, the method including receiving in an intermediary node a request for computer services to be performed by a downstream node, the request having passed through at least two upstream nodes prior to receipt by the intermediary node; determining whether the credentials of each of the at least two upstream nodes are valid; passing the request to a downstream node if the credentials of each of the at least two upstream nodes are valid; and deprecating the request if the credentials of at least one of the at least two upstream nodes are invalid.

摘要翻译： 公开了用于授权计算机服务的方法，系统和产品，所述方法包括在中间节点中接收由下游节点执行的计算机服务的请求，所述请求在中间人接收之前通过了至少两个上游节点 节点; 确定所述至少两个上游节点中的每一个的凭证是否有效; 如果所述至少两个上游节点中的每一个的凭证有效，则将所述请求传递到下游节点; 以及如果所述至少两个上游节点中的至少一个的凭证是无效的，则废弃所述请求。

公开(公告)号：US20060031224A1

公开(公告)日：2006-02-09

申请号：US10912494

申请日：2004-08-05

申请人： Julianne Haugh ,  Ufuk Celikkan ,  Yantian Lu

发明人： Julianne Haugh ,  Ufuk Celikkan ,  Yantian Lu

IPC分类号： G06F17/30

CPC分类号： G06F16/2471

摘要： A method, system, and computer program product for managing database records with attributes located in multiple registries are disclosed. A data processing system identifies one or more attributes of a record to be accessed from one or more of a plurality of distributed databases, wherein a first attribute among the one or more attributes resides in an unknown database among the plurality of databases and it is known that a second attribute resides in a particular database among the plurality of databases. The data processing system forms a query, which includes a request for the first attribute and a request for the second attribute, and sends the query to the particular database. The data processing system receives a positive response to the query indicating that the particular database contains the first attribute for the record, and in response to receiving the positive response, the data processing system stores an identifier of the particular database in association with the first attribute. The data processing system then accesses the first attribute and the second attribute of the record in the particular database.

摘要翻译： 公开了一种用于管理具有位于多个登记册中的属性的数据库记录的方法，系统和计算机程序产品。 数据处理系统从多个分布式数据库中的一个或多个识别要访问的记录的一个或多个属性，其中所述一个或多个属性中的第一属性驻留在所述多个数据库中的未知数据库中，并且已知 第二属性驻留在多个数据库中的特定数据库中。 数据处理系统形成查询，其包括对第一属性的请求和对第二属性的请求，并将查询发送到特定数据库。 数据处理系统接收对查询的肯定响应，指示特定数据库包含记录的第一属性，并且响应于接收到正响应，数据处理系统与第一属性相关联地存储特定数据库的标识符 。 然后，数据处理系统访问特定数据库中的记录的第一属性和第二属性。