公开(公告)号：US08707405B2

公开(公告)日：2014-04-22

申请号：US13348466

申请日：2012-01-11

申请人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Michael Craig Thompson ,  Michael Dettlaff Christopher

发明人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Michael Craig Thompson ,  Michael Dettlaff Christopher

IPC分类号： H04L29/06

CPC分类号： G06F21/335

摘要： A method for selectively refreshing group membership for an identifier associated with an authenticated user. The identifier represents an application server security context, and it is generated to enable a user credential associated with the authenticated user to be persisted. Following such authentication, the client is provided with a time-bounded, renewable security token. The method begins by configuring an option whether group membership information is refreshed during renewal of an expired security token. During renewal of an expired security token, the method determines whether the option is set. If so, an attempt is made to refresh information. This attempt performs a set of checks to verify certain conditions. If these checks are valid, the identifier is refreshed and the security token renewed with updated group membership information. If any check is not valid, the identifier is refreshed and the security token renewed with existing information.

摘要翻译： 一种用于选择性地刷新与认证用户相关联的标识符的组成员资格的方法。 标识符表示应用服务器安全上下文，并且生成该标识符以使与被认证用户相关联的用户凭证被持久化。 在这种认证之后，客户端被提供有时间限制的可再生安全令牌。 该方法从配置选项开始，在更新期满的安全令牌期间是否刷新组成员身份信息。 在更新过期的安全令牌期间，该方法确定该选项是否设置。 如果是这样，尝试刷新信息。 此尝试执行一组检查以验证某些条件。 如果这些检查有效，则刷新标识符，并使用更新的组成员信息更新安全令牌。 如果任何检查无效，则刷新标识符，并使用现有信息更新安全令牌。

公开(公告)号：US20130179952A1

公开(公告)日：2013-07-11

申请号：US13348466

申请日：2012-01-11

申请人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Michael Craig Thompson ,  Christopher Michael Dettlaff

发明人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Michael Craig Thompson ,  Christopher Michael Dettlaff

IPC分类号： G06F21/00

CPC分类号： G06F21/335

摘要： A method for selectively refreshing group membership for an identifier associated with an authenticated user. The identifier represents an application server security context, and it is generated to enable a user credential associated with the authenticated user to be persisted. Following such authentication, the client is provided with a time-bounded, renewable security token. The method begins by configuring an option whether group membership information is refreshed during renewal of an expired security token. During renewal of an expired security token, the method determines whether the option is set. If so, an attempt is made to refresh information. This attempt performs a set of checks to verify certain conditions. If these checks are valid, the identifier is refreshed and the security token renewed with updated group membership information. If any check is not valid, the identifier is refreshed and the security token renewed with existing information.

摘要翻译： 一种用于选择性地刷新与认证用户相关联的标识符的组成员资格的方法。 标识符表示应用服务器安全上下文，并且生成该标识符以使与被认证用户相关联的用户凭证被持久化。 在这种认证之后，客户端被提供有时间限制的可再生安全令牌。 该方法从配置选项开始，在更新期满的安全令牌期间是否刷新组成员身份信息。 在更新过期的安全令牌期间，该方法确定该选项是否设置。 如果是这样，尝试刷新信息。 此尝试执行一组检查以验证某些条件。 如果这些检查有效，则刷新标识符，并使用更新的组成员信息更新安全令牌。 如果任何检查无效，则刷新标识符，并使用现有信息更新安全令牌。

公开(公告)号：US08645679B2

公开(公告)日：2014-02-04

申请号：US13162744

申请日：2011-06-17

申请人： Elisa Ferracane ,  Paul William Bennett ,  William J. O'Donnell ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson ,  Maxim Avery Moldenhauer

发明人： Elisa Ferracane ,  Paul William Bennett ,  William J. O'Donnell ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson ,  Maxim Avery Moldenhauer

IPC分类号： H04L29/06

CPC分类号： H04L67/02 ,  G06F21/53 ,  G06F21/54 ,  H04L63/168 ,  H04L63/20

摘要： A method is described for merging security constraints associated with an application when using security annotations. The application comprises one or more servlets, such as a Java servlet. During application deployment, a list of role names is generated by merging static security constraints, for example, identified in a deployment descriptor, and in a static security annotation that defines a list containing the names of authorized roles for a servlet. Later, during application runtime in an application server, security constraints are retrieved from a plurality of sources, including both dynamic and static security annotations. Using the list of role names and the security constraints retrieved, a set of merged security constraints having a defined and proper order of precedence is generated. In particular, preferably one or more dynamic security annotations are first merged with one or more static security annotations to generate a set of runtime constraints. The security constraints from the deployment descriptor are then merged with the set of runtime constraints and the list of roles to generate the set of merged security constraints. These merged security constraints are then applied to process a request being handled by the application server.

摘要翻译： 描述了一种用于在使用安全注释时合并与应用程序相关联的安全约束的方法。 应用程序包含一个或多个servlet，例如Java servlet。 在应用程序部署期间，通过合并静态安全约束（例如在部署描述符中标识的静态安全约束）和定义包含servlet授权角色名称的静态安全注释来生成角色名称列表。 之后，在应用程序服务器的应用程序运行期间，从多个源（包括动态和静态安全注释）检索安全约束。 使用角色名称列表和检索到的安全约束，生成一组具有定义和正确优先顺序的合并安全约束。 特别地，优选地，首先将一个或多个动态安全注释与一个或多个静态安全注释合并以生成一组运行时约束。 然后，部署描述符的安全约束与运行时约束集合和角色列表合并，以生成一组合并的安全约束。 然后将这些合并的安全约束应用于处理由应用程序服务器处理的请求。

公开(公告)号：US20120317633A1

公开(公告)日：2012-12-13

申请号：US13157633

申请日：2011-06-10

申请人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson

发明人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson

IPC分类号： G06F21/00

CPC分类号： G06F21/84 ,  G06F21/305 ,  G06F21/604 ,  G06F2221/2115 ,  G06F2221/2117 ,  G06F2221/2119 ,  H04L63/0807 ,  H04L63/0815 ,  H04L63/101

摘要： A method for dynamically assigning a displayable realm name begins upon receipt of an authentication request to an application, such as a web application, being executed by an application server. In response, a determination is made whether an application realm name has been set in a configuration file associated with the application. If not, a custom display property is then evaluated. If the custom display property is set true, a realm name associated with an active authentication mechanism is retrieved and provided for display in an authentication panel. If the custom display property is set false, a default string is provided for display in the authentication panel. In this manner, an application server administrator can control what realm name is displayed to an end user in the event an application developer has not specified the realm name in the application configuration.

摘要翻译： 一种用于动态分配可显示领域名称的方法，在接收到由应用服务器执行的应用程序（如Web应用程序）的认证请求开始。 作为响应，确定在与应用相关联的配置文件中是否设置了应用程序域名。 如果没有，则会自定义显示属性。 如果自定义显示属性设置为true，则检索与活动身份验证机制相关联的领域名称，并提供以在身份验证面板中显示。 如果自定义显示属性设置为false，则提供默认字符串以在身份验证面板中显示。 以这种方式，应用程序服务器管理员可以在应用程序开发人员未在应用程序配置中指定领域名称的情况下控制向最终用户显示哪个领域名称。

公开(公告)号：US08938791B2

公开(公告)日：2015-01-20

申请号：US13157633

申请日：2011-06-10

申请人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson

发明人： William J. O'Donnell ,  Paul William Bennett ,  Elisa Ferracane ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson

IPC分类号： G06F21/00 ,  G06F21/84 ,  G06F21/30 ,  G06F21/60 ,  H04L29/06

CPC分类号： G06F21/84 ,  G06F21/305 ,  G06F21/604 ,  G06F2221/2115 ,  G06F2221/2117 ,  G06F2221/2119 ,  H04L63/0807 ,  H04L63/0815 ,  H04L63/101

摘要： A method for dynamically assigning a displayable realm name begins upon receipt of an authentication request to an application, such as a web application, being executed by an application server. In response, a determination is made whether an application realm name has been set in a configuration file associated with the application. If not, a custom display property is then evaluated. If the custom display property is set true, a realm name associated with an active authentication mechanism is retrieved and provided for display in an authentication panel. If the custom display property is set false, a default string is provided for display in the authentication panel. In this manner, an application server administrator can control what realm name is displayed to an end user in the event an application developer has not specified the realm name in the application configuration.

摘要翻译： 一种用于动态分配可显示领域名称的方法，在接收到由应用服务器执行的应用程序（如Web应用程序）的认证请求开始。 作为响应，确定在与应用相关联的配置文件中是否设置了应用程序域名。 如果没有，则会自定义显示属性。 如果自定义显示属性设置为true，则检索与活动身份验证机制相关联的领域名称，并提供以在身份验证面板中显示。 如果自定义显示属性设置为false，则提供默认字符串以在身份验证面板中显示。 以这种方式，应用程序服务器管理员可以在应用程序开发人员未在应用程序配置中指定领域名称的情况下控制向最终用户显示哪个领域名称。

公开(公告)号：US20120324528A1

公开(公告)日：2012-12-20

申请号：US13162744

申请日：2011-06-17

申请人： Elisa Ferracane ,  Paul William Bennett ,  William J. O'Donnell ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson ,  Maxim Avery Moldenhauer

发明人： Elisa Ferracane ,  Paul William Bennett ,  William J. O'Donnell ,  Ajay Reddy Karkala ,  Ut Van Le ,  Michael Craig Thompson ,  Maxim Avery Moldenhauer

IPC分类号： G06F17/00

CPC分类号： H04L67/02 ,  G06F21/53 ,  G06F21/54 ,  H04L63/168 ,  H04L63/20

摘要： A method is described for merging security constraints associated with an application when using security annotations. The application comprises one or more servlets, such as a Java servlet. During application deployment, a list of role names is generated by merging static security constraints, for example, identified in a deployment descriptor, and in a static security annotation that defines a list containing the names of authorized roles for a servlet. Later, during application runtime in an application server, security constraints are retrieved from a plurality of sources, including both dynamic and static security annotations. Using the list of role names and the security constraints retrieved, a set of merged security constraints having a defined and proper order of precedence is generated. In particular, preferably one or more dynamic security annotations are first merged with one or more static security annotations to generate a set of runtime constraints. The security constraints from the deployment descriptor are then merged with the set of runtime constraints and the list of roles to generate the set of merged security constraints. These merged security constraints are then applied to process a request being handled by the application server.

摘要翻译： 描述了一种用于在使用安全注释时合并与应用程序相关联的安全约束的方法。 应用程序包含一个或多个servlet，例如Java servlet。 在应用程序部署期间，通过合并静态安全约束（例如在部署描述符中标识的静态安全约束）和定义包含servlet授权角色名称的静态安全注释来生成角色名称列表。 之后，在应用程序服务器的应用程序运行期间，从多个源（包括动态和静态安全注释）检索安全约束。 使用角色名称列表和检索到的安全约束，生成一组具有定义和正确优先顺序的合并安全约束。 特别地，优选地，首先将一个或多个动态安全注释与一个或多个静态安全注释合并以生成一组运行时约束。 然后，部署描述符的安全约束与运行时约束集合和角色列表合并，以生成一组合并的安全约束。 然后将这些合并的安全约束应用于处理由应用程序服务器处理的请求。

公开(公告)号：US5764229A

公开(公告)日：1998-06-09

申请号：US647131

申请日：1996-05-09

申请人： Paul William Bennett

发明人： Paul William Bennett

IPC分类号： G06F3/14 ,  G06F3/033 ,  G06F3/048 ,  G06T15/40 ,  G09G5/14 ,  G06F3/00

CPC分类号： G06F3/0481 ,  G09G5/14 ,  G06F2203/04804

摘要： A method of and system for implementing dynamic translucent windows in a graphical user interface. Each translucent window has associated therewith a foreground buffer and a background buffer. Whenever a translucent window is updated, the system, starting with the lowest z-order updated translucent window, combines the updated translucent window's foreground and background buffers into a translucent image. If the translucent image is in a clip region, the system displays the portion of the translucent image in the clip region and turns off the update marker. If the translucent image is in a deferred clip region, the system copies the portion of the translucent image in any deferred clip region into the background buffer or buffers of the translucent window or windows that define the deferred clip region and marks the translucent window updated. The system then goes to the next lowest z-order updated translucent window and repeats the process until the topmost window is reached, thereby to propagate the translucency effect up through the stack of windows.

摘要翻译： 用于在图形用户界面中实现动态半透明窗口的方法和系统。 每个半透明窗口都与前景缓冲区和后台缓冲区相关联。 每当更新半透明窗口时，从最低的z阶更新的半透明窗口开始，系统将更新的半透明窗口的前景和后台缓冲区组合成半透明图像。 如果半透明图像位于剪辑区域中，系统会在剪辑区域中显示半透明图像的部分，并关闭更新标记。 如果半透明图像位于延迟剪辑区域中，系统将任何延迟剪辑区域中的半透明图像的部分复制到定义延迟剪辑区域并标记更新的半透明窗口的半透明窗口或窗口的后台缓冲区或缓冲区中。 然后，系统进入下一个最低z阶更新的半透明窗口，并重复该过程，直到达到最上面的窗口，从而通过窗口堆叠传播半透明效果。