METHOD AND SYSTEM FOR EXCHANGING CRYPTOGRAPHIC KEYS WITH AN UNAUTHENTICATED DEVICE
    16.
    发明申请
    METHOD AND SYSTEM FOR EXCHANGING CRYPTOGRAPHIC KEYS WITH AN UNAUTHENTICATED DEVICE 审中-公开
    用未交换装置交换克隆键的方法和系统

    公开(公告)号:US20170078090A1

    公开(公告)日:2017-03-16

    申请号:US14853087

    申请日:2015-09-14

    Applicant: Yahoo! Inc.

    Abstract: The present teaching relates to exchanging a key with a device. In one example, a secret value is generated. A message is transmitted to the device. The message includes information related to the secret value based on which the device is to create a cryptographic key. A visual code displayed on the device is captured. The visual code includes a first piece of information and a second piece of information. A key value is generated based on the first piece of information and the secret value. A test value is calculated based on the key value. It is determined whether the device is securely connected based on the test value.

    Abstract translation: 本教导涉及与设备交换密钥。 在一个示例中,生成秘密值。 消息被传送到设备。 该消息包括与基于该设备创建加密密钥的秘密值相关的信息。 捕获设备上显示的视觉代码。 视觉代码包括第一条信息和第二条信息。 基于第一条信息和秘密值生成键值。 基于键值计算测试值。 根据测试值确定设备是否安全连接。

    Presentation of organized personal and public data using communication mediums
    18.
    发明授权
    Presentation of organized personal and public data using communication mediums 有权
    使用沟通媒介介绍有组织的个人和公共数据

    公开(公告)号:US09584343B2

    公开(公告)日:2017-02-28

    申请号:US12348870

    申请日:2009-01-05

    Abstract: Systems, methods and computer program products for providing information associated with an attachment (e.g., attachment received through an instant message system, online collaboration tool, electronic message and the like). A sidebar may allow a user to view comprehensive profile and content information associated with the attachment using an attachment information viewer. The sidebar also may allow the user to switch between a message attachment information view (e.g., to facilitate browsing of the document or attachment) and a person profile information view (e.g., to facilitate browsing of personal or public data).

    Abstract translation: 用于提供与附件相关联的信息的系统,方法和计算机程序产品(例如,通过即时消息系统接收的附件,在线协作工具,电子消息等)。 侧边栏可以允许用户使用附件信息查看器查看与附件相关联的综合简档和内容信息。 侧边栏还可以允许用户在消息附件信息视图之间切换(例如,以便于浏览文档或附件)和个人简档信息视图(例如,以便于浏览个人或公共数据)。

    DNS wildcard beaconing
    19.
    发明授权
    DNS wildcard beaconing 有权
    DNS通配符信号

    公开(公告)号:US09577919B2

    公开(公告)日:2017-02-21

    申请号:US14191807

    申请日:2014-02-27

    Applicant: Yahoo! Inc.

    Abstract: DNS wildcard beaconing. In one embodiment, for example, a computer-implemented method comprises: receiving a network request from a resolver to resolve a hostname, the network request from the resolver comprising a network address of the resolver, the hostname comprising a unique wildcard portion; storing first data representing an association between at least the unique wildcard portion and the network address of the resolver; receiving a network request from a client for a resource, the network request from the client comprising a network address of the client and at least the unique wildcard portion; storing second data representing an association between at least the unique wildcard portion and the network address of the client; based on the first data and the second data, associating the client with the resolver; and storing third data representing the association between the client and the resolver.

    Abstract translation: DNS通配符信号。 在一个实施例中,例如,计算机实现的方法包括:从解析器接收网络请求以解析主机名,所述解析器的网络请求包括所述解析器的网络地址,所述主机名包括唯一的通配符部分; 存储表示至少所述唯一通配符部分和所述解析器的网络地址之间的关联的第一数据; 从客户端接收资源的网络请求,来自客户端的网络请求包括客户端的网络地址和至少唯一的通配符部分; 存储表示至少所述唯一通配符部分和所述客户端的网络地址之间的关联的第二数据; 基于第一数据和第二数据,将客户端与解析器相关联; 并存储表示客户端和解析器之间的关联的第三数据。

    Third party program integrity and integration control in web-based applications
    20.
    发明授权
    Third party program integrity and integration control in web-based applications 有权
    基于Web的应用程序的第三方程序完整性和集成控制

    公开(公告)号:US09576064B2

    公开(公告)日:2017-02-21

    申请号:US13446381

    申请日:2012-04-13

    Abstract: Disclosed herein are a resource control service, system, method and architecture. A client device's resource access is limited to an approved resource, or resources. A request for a resource is directed to a resource control service that determines whether or not to grant access to the requested resource. Where a determination is made to grant access to the resource, a response is transmitted to the client device, the response redirecting the client device to a second URI for the approved version of the requested resource. The response can be used by the client device request the resource from the location identified in the response.

    Abstract translation: 这里公开了资源控制服务,系统,方法和架构。 客户端设备的资源访问仅限于已批准的资源或资源。 对资源的请求被引导到资源控制服务,其确定是否授权对所请求的资源的访问。 在确定授予对资源的访问的情况下,将响应发送到客户端设备,响应将客户端设备重定向到所请求资源的已批准版本的第二URI。 响应可以由客户端设备从响应中标识的位置请求资源。

Patent Agency Ranking