-
公开(公告)号:US09344432B2
公开(公告)日:2016-05-17
申请号:US12822724
申请日:2010-06-24
申请人: Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
发明人: Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
CPC分类号: H04L63/102 , G06F21/33 , G06F21/41 , H04L63/0807 , H04L63/0823 , H04L63/10 , H04L63/107 , H04L63/164
摘要: Embodiments of the invention provide techniques for basing access control decisions at the network layer at least in part on information provided in claims, which may describe attributes of a computer requesting access, one or more resources to which access is requested, the user, the circumstances surrounding the requested access, and/or other information. The information may be evaluated based on one or more access control policies, which may be pre-set or dynamically generated, and used in making a decision whether to grant or deny the computer access to the specified resource(s).
摘要翻译: 本发明的实施例提供了至少部分地基于在权利要求中提供的信息来在网络层基础访问控制决策的技术,其可以描述请求访问的计算机的属性,请求访问的一个或多个资源,用户,情况 围绕所请求的访问,和/或其他信息。 可以基于可以被预先设置或动态生成的一个或多个访问控制策略来评估信息,并且用于做出是否授予或拒绝计算机对指定资源的访问的决定。
-
2.
公开(公告)号:US08918856B2
公开(公告)日:2014-12-23
申请号:US12822745
申请日:2010-06-24
申请人: Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
发明人: Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
CPC分类号: H04L63/102 , H04L63/164
摘要: Embodiments of the invention provide a trusted intermediary for use in a system in which access control decisions may be based at least in part on information provided in claims. The intermediary may request claims on behalf of a network resource to which access is requested, and submit the claims for a decision whether to grant or deny access. The decision may be based at least in part on one or more access control policies, which may be pre-set or dynamically generated. Because the intermediary requests the claims and submits the claims for an access control decision, the network resource (e.g., a server application) need not be configured to process claims information.
摘要翻译: 本发明的实施例提供了一种在系统中使用的可信中介,其中访问控制决定可以至少部分地基于权利要求中提供的信息。 中介人可以代表要求访问的网络资源请求索赔,并提交索赔以作决定是否授予或拒绝访问。 该决定可以至少部分地基于可以被预先设置或动态生成的一个或多个访问控制策略。 因为中介请求权并提交用于访问控制决定的权利要求,所以不需要将网络资源(例如,服务器应用)配置为处理权利要求信息。
-
3.
公开(公告)号:US20110321152A1
公开(公告)日:2011-12-29
申请号:US12822745
申请日:2010-06-24
申请人: Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
发明人: Yair Tor , Eugene (John) Neystadt , Patrik Schnell , Oleg Ananiev , Arthur Zavalkovsky , Daniel Rose
CPC分类号: H04L63/102 , H04L63/164
摘要: Embodiments of the invention provide a trusted intermediary for use in a system in which access control decisions may be based at least in part on information provided in claims. The intermediary may request claims on behalf of a network resource to which access is requested, and submit the claims for a decision whether to grant or deny access. The decision may be based at least in part on one or more access control policies, which may be pre-set or dynamically generated. Because the intermediary requests the claims and submits the claims for an access control decision, the network resource (e.g., a server application) need not be configured to process claims information.
摘要翻译: 本发明的实施例提供了一种在系统中使用的可信中介,其中访问控制决定可以至少部分地基于权利要求中提供的信息。 中介人可以代表要求访问的网络资源请求索赔,并提交索赔以作决定是否授予或拒绝访问。 该决定可以至少部分地基于可以被预先设置或动态生成的一个或多个访问控制策略。 因为中介请求权并提交用于访问控制决定的权利要求,所以不需要将网络资源(例如,服务器应用)配置为处理权利要求信息。
-
公开(公告)号:US20110321130A1
公开(公告)日:2011-12-29
申请号:US12822724
申请日:2010-06-24
申请人: Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
发明人: Yair Tor , Daniel Rose , Eugene (John) Neystadt , Patrik Schnell , Moshe Sapir , Oleg Ananiev , Arthur Zavalkovsky , Anat Eyal
IPC分类号: G06F21/20
CPC分类号: H04L63/102 , G06F21/33 , G06F21/41 , H04L63/0807 , H04L63/0823 , H04L63/10 , H04L63/107 , H04L63/164
摘要: Embodiments of the invention provide techniques for basing access control decisions at the network layer at least in part on information provided in claims, which may describe attributes of a computer requesting access, one or more resources to which access is requested, the user, the circumstances surrounding the requested access, and/or other information. The information may be evaluated based on one or more access control policies, which may be pre-set or dynamically generated, and used in making a decision whether to grant or deny the computer access to the specified resource(s).
摘要翻译: 本发明的实施例提供了至少部分地基于在权利要求中提供的信息来在网络层基础访问控制决策的技术,其可以描述请求访问的计算机的属性,请求访问的一个或多个资源,用户,情况 围绕所请求的访问,和/或其他信息。 可以基于可以被预先设置或动态生成的一个或多个访问控制策略来评估信息,并且用于做出是否授予或拒绝计算机对指定资源的访问的决定。
-
公开(公告)号:US08769306B1
公开(公告)日:2014-07-01
申请号:US13604581
申请日:2012-09-05
申请人: Lei Li , Pankaj Sethi , Patrik Schnell , Wesley Shawn Davis , Joshua B. Barnard
发明人: Lei Li , Pankaj Sethi , Patrik Schnell , Wesley Shawn Davis , Joshua B. Barnard
IPC分类号: G06F21/10
CPC分类号: G06F21/602 , G06F21/10 , G06F2221/07 , H04L9/0631 , H04L63/0428
摘要: Disclosed are various embodiments for generating encrypted media content items as well as decrypting encrypted media content items. A content type is embedded in an initialization vector corresponding to an encrypted sample. Upon decryption of encrypted content, the content type is identified and an action taken based upon the detected content type.
摘要翻译: 公开了用于生成加密的媒体内容项目以及解密加密的媒体内容项目的各种实施例。 内容类型嵌入在与加密样本对应的初始化向量中。 在解密加密内容之后,识别内容类型,并根据检测到的内容类型进行动作。
-
公开(公告)号:US08661552B2
公开(公告)日:2014-02-25
申请号:US11823572
申请日:2007-06-28
CPC分类号: G06F21/121 , G06F21/10 , G06F21/6209 , G06F21/74
摘要: Various embodiments utilize hardware-enforced boundaries to provide various aspects of digital rights management or DRM in an open computing environment. Against the backdrop of these hardware-enforced boundaries, DRM provisioning techniques are employed to provision such things as keys and DRM software code in a secure and robust way. Further, at least some embodiments utilize secure time provisioning techniques to provision time to the computing environment, as well as techniques that provide for tamper-resistant storage.
摘要翻译: 各种实施例利用硬件实施的边界来在开放式计算环境中提供数字版权管理或DRM的各个方面。 在这些硬件实施的边界的背景下,采用DRM配置技术以安全和鲁棒的方式提供诸如密钥和DRM软件代码的东西。 此外,至少一些实施例利用安全时间供应技术来为计算环境提供时间,以及提供防篡改存储的技术。
-
公开(公告)号:US08646096B2
公开(公告)日:2014-02-04
申请号:US11823594
申请日:2007-06-28
IPC分类号: H04L29/06
CPC分类号: G06F21/10 , G06F2221/2151
摘要: Various embodiments utilize hardware-enforced boundaries to provide various aspects of digital rights management or DRM in an open computing environment. Against the backdrop of these hardware-enforced boundaries, DRM provisioning techniques are employed to provision such things as keys and DRM software code in a secure and robust way. Further, at least some embodiments utilize secure time provisioning techniques to provision time to the computing environment, as well as techniques that provide for robustly secure storage.
摘要翻译: 各种实施例利用硬件实施的边界来在开放式计算环境中提供数字版权管理或DRM的各个方面。 在这些硬件实施的边界的背景下,采用DRM配置技术以安全和鲁棒的方式提供诸如密钥和DRM软件代码的东西。 此外,至少一些实施例利用安全时间供应技术来为计算环境提供时间,以及提供鲁棒安全存储的技术。
-
公开(公告)号:US20090327702A1
公开(公告)日:2009-12-31
申请号:US12163681
申请日:2008-06-27
申请人: Patrik Schnell
发明人: Patrik Schnell
CPC分类号: H04L9/0894 , G06F21/10 , G06F2221/0753 , H04L2209/603
摘要: A key escrow service is described. In embodiment(s), the key escrow service maintains an escrow license that includes an escrow content key that is associated with protected media content which is distributed from a content distributor to a media device. A content key that is associated with the protected media content can be received from the content distributor, and the content key can then be encrypted with a public escrow key to generate the escrow content key. The escrow license can be generated to include the escrow content key, and the escrow content key can then be communicated back to the content distributor that provides a digital rights management (DRM) license to the media device. The DRM license can include both the escrow content key and the content key encrypted with a public key that corresponds to the media device.
摘要翻译: 描述密钥托管服务。 在实施例中,密钥托管服务维护托管许可证,其包括与从内容分发者分发到媒体设备的受保护媒体内容相关联的托管内容密钥。 可以从内容分发器接收与受保护的媒体内容相关联的内容密钥,然后可以用公共托管密钥加密内容密钥以生成托管内容密钥。 可以生成托管许可证以包括托管内容密钥,然后可以将托管内容密钥传送回向媒体设备提供数字权限管理(DRM)许可证的内容分发者。 DRM许可证可以包括托管内容密钥和用与媒体设备对应的公开密钥加密的内容密钥。
-
公开(公告)号:US20080255994A1
公开(公告)日:2008-10-16
申请号:US11734694
申请日:2007-04-12
申请人: Patrik Schnell , Clifford P. Strom , Adrian J. Oney , Mark L. Beaubien , Kedamath A. Dubhashi , Alexandre V. Grigorovitch , Anand Paka , Satvir Randhawa
发明人: Patrik Schnell , Clifford P. Strom , Adrian J. Oney , Mark L. Beaubien , Kedamath A. Dubhashi , Alexandre V. Grigorovitch , Anand Paka , Satvir Randhawa
摘要: Techniques enable creation of a preview license for digital content. In some instances, the preview license indicates that it allows a content-consuming device to consume less than all of the content. This preview license may create a list specifying multiple portions of the digital content that the content-consuming device may consume. These techniques may also present to a device user an offer to purchase rights to consume all of the digital content after consumption of the preview-licensed portion(s). In other instances, a content server may embed the preview license into a content package that contains the digital content, allowing the server to distribute the package to multiple devices. In still other instances, the preview license may be bound to a domain rather than to individual devices. This allows member devices to share the digital content and the preview license, such that each member device may enjoy the preview experience.
摘要翻译: 技术能够为数字内容创建预览许可。 在某些情况下,预览许可证表示允许内容消耗设备消耗的内容少于所有内容。 该预览许可证可以创建指定内容消费设备可能消耗的数字内容的多个部分的列表。 这些技术还可以向设备用户提供购买在消费预览许可部分之后消费所有数字内容的权利的提议。 在其他情况下,内容服务器可以将预览许可嵌入到包含数字内容的内容包中,允许服务器将包分发到多个设备。 在其他情况下,预览许可证可能会绑定到域而不是单个设备。 这允许成员设备共享数字内容和预览许可,使得每个成员设备可以享受预览体验。
-
公开(公告)号:US09805374B2
公开(公告)日:2017-10-31
申请号:US11734694
申请日:2007-04-12
申请人: Patrik Schnell , Clifford P. Strom , Adrian J Oney , Mark L. Beaubien , Kedarnath A. Dubhashi , Alexandre V. Grigorovitch , Anand Paka , Satvir Randhawa
发明人: Patrik Schnell , Clifford P. Strom , Adrian J Oney , Mark L. Beaubien , Kedarnath A. Dubhashi , Alexandre V. Grigorovitch , Anand Paka , Satvir Randhawa
摘要: Techniques enable creation of a preview license for digital content. In some instances, the preview license indicates that it allows a content-consuming device to consume less than all of the content. This preview license may create a list specifying multiple portions of the digital content that the content-consuming device may consume. These techniques may also present to a device user an offer to purchase rights to consume all of the digital content after consumption of the preview-licensed portion(s). In other instances, a content server may embed the preview license into a content package that contains the digital content, allowing the server to distribute the package to multiple devices. In still other instances, the preview license may be bound to a domain rather than to individual devices. This allows member devices to share the digital content and the preview license, such that each member device may enjoy the preview experience.
-
-
-
-
-
-
-
-
-