-
1.发明授权System for providing security in a network comprising computerized devices 有权用于在包括计算机化设备的网络中提供安全性的系统公开(公告)号：US07917631B2
公开(公告)日：2011-03-29
申请号：US11776424
申请日：2007-07-11
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A system useful within a network and adapted to provide communication security. In one embodiment, the network comprises an untrusted network, and the system includes network security apparatus adapted to create security associations between devices on the network, including mutual authentication. Traffic between the associated devices may be encrypted for e.g., data confidentiality and integrity protection. In one variant, the network security apparatus comprises a software entity disposed at least partly within the software stack of the devices. The associated devices may be for example fixed or portable, and may also act as a gateway to other networks (including the Internet). The portable devices may be untrusted (e.g., have an untrusted operating system).
摘要翻译： 一种在网络内有用并适于提供通信安全性的系统。 在一个实施例中，网络包括不可信网络，并且该系统包括适于在网络上的设备之间创建安全关联的网络安全设备，包括相互认证。 可以对相关设备之间的业务进行加密，例如数据机密性和完整性保护。 在一个变型中，网络安全设备包括至少部分地设置在设备的软件堆栈内的软件实体。 相关联的设备可以是固定的或便携式的，并且还可以充当到其他网络（包括因特网）的网关。 便携式设备可能不受信任（例如，具有不可信操作系统）。
-
2.发明授权System for providing security in a network comprising communications devices 有权用于在包括通信设备的网络中提供安全性的系统公开(公告)号：US07904565B2
公开(公告)日：2011-03-08
申请号：US11776421
申请日：2007-07-11
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A system for providing communications security and authentication to a plurality of computerized devices is disclosed. In one embodiment, the system is useful with an untrusted network, and comprises security apparatus adapted to create associations with a plurality of security devices on the network. Traffic between the associated devices may be encrypted and residue-protected for e.g., data confidentiality and integrity protection. In one variant, the security apparatus of the system comprises a software entity disposed at least partly within the software stack of a host. A security card may also be used as part of the security apparatus system. The computerized devices of the system may be untrusted (e.g., have an untrusted operating system) and also be physically unsecure.
摘要翻译： 公开了一种用于向多个计算机化设备提供通信安全和认证的系统。 在一个实施例中，该系统对于不可信网络是有用的，并且包括适于与网络上的多个安全设备建立关联的安全设备。 相关设备之间的业务可以被加密和残留保护，例如数据机密性和完整性保护。 在一个变型中，系统的安全装置包括至少部分地设置在主机的软件堆栈内的软件实体。 安全卡也可以用作安全装置系统的一部分。 系统的计算机化设备可能是不受信任的（例如，具有不可信操作系统），并且也是物理上不安全的。
-
公开(公告)号：US06993582B2
公开(公告)日：2006-01-31
申请号：US10691058
申请日：2003-10-21
IPC分类号： G06F13/00
CPC分类号： H04L63/0823 , G06F21/31 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , H04L29/06 , H04L63/0218 , H04L63/0428 , H04L63/105 , H04L63/12 , H04L63/126
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.
-
公开(公告)号：US06643698B2
公开(公告)日：2003-11-04
申请号：US09925079
申请日：2001-08-07
IPC分类号： G06F1300
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.
-
5.发明授权公开(公告)号：US06272538B1
公开(公告)日：2001-08-07
申请号：US09127280
申请日：1998-07-31
IPC分类号： G06F1300
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A multi-level network security system is disclosed for a computer host device coupled to at least one computer network. The system including a secure network interface Unit (SNIU) contained within a communications stack of the computer device that operates at a user layer communications protocol. The SNIU communicates with other like SNIU devices on the network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein the network may be individually secure or non-secure without compromising security of communications within the global security perimeter. The SNIU includes a host/network interface for receiving messages sent between the computer device and network. The interface operative to convert the received messages to and from a format utilized by the network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to said network interface for identifying and verifying the computer device requesting access to said network.
摘要翻译： 公开了一种耦合到至少一个计算机网络的计算机主机设备的多级网络安全系统。 该系统包括在用户层通信协议下操作的计算机设备的通信栈内的安全网络接口单元（SNIU）。 SNIU通过建立关联来与网络上的其他类似的SNIU设备进行通信，从而为端到端通信创建全局安全边界，并且其中网络可以单独地安全或不安全，而不会影响全局安全性内的通信的安全性 周长。 SNIU包括用于接收在计算机设备和网络之间发送的消息的主机/网络接口。 该接口可操作以将所接收的消息转换为网络所使用的格式和从该网络使用的格式。 用于确定关联是否已经与另一个SNIU设备存在的消息解析器。 耦合到所述网络接口的会话管理器，用于识别和验证请求访问所述网络的计算机设备。
-
6.发明授权Mixed enclave operation in a computer network with multi-level network security 失效具有多层网络安全性的计算机网络中的混合飞地运行
公开(公告)号：US5828832A
公开(公告)日：1998-10-27
申请号：US688524
申请日：1996-07-30
CPC分类号： H04L63/0442 , G06F21/31 , H04L29/06 , H04L63/0823 , H04L63/105 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , H04L63/0218
摘要： A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.
摘要翻译： 公开了一种计算机网络与使用多级网络安全接口的用户和没有任何网络安全接口的用户的混合飞行操作的方法。 网络安全用户选择或网络安全界面自动选择通信是否允许与其他无安全用户通信。 在选择混合飞行操作的情况下，网络安全用户识别与其他安全用户或非安全用户进行通信时。 与较低安全级别的非安全用户的通信需要将驻留在安全用户身上的数据传送回非安全用户。
-
公开(公告)号：US5802178A
公开(公告)日：1998-09-01
申请号：US688525
申请日：1996-07-30
CPC分类号： H04L63/0218 , G06F21/34 , G06F21/57 , H04L63/0272 , H04L63/0428 , H04L63/12 , H04L63/162 , G06F2211/005
摘要： A multi-level security device is disclosed for providing security between a user and at least one computer network, wherein the user is selected from the group consisting of a host computer and at least a second network. A secure network interface Unit (SNIU) that operates at a user layer communications protocol, which communicates with other like SNIU devices by establishing an association at a session layer of a communication stack in order to create a global security perimeter for end-to-end communications. The SNIU includes a host/network interface for receiving messages sent between the user and the at least one network, which is operative to convert the received messages to and from a format utilized by the at least one network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to the interface for identifying and verifying the user requesting access to the network. The session manager also for transmitting the messages received from the user when the message parser determines the association already exists. An association manager coupled to the interface for establishing an association with other like SNIU devices when the message parser determines the association does not exist.
摘要翻译： 公开了一种用于在用户和至少一个计算机网络之间提供安全性的多级安全设备，其中，所述用户从由主计算机和至少第二网络组成的组中选择。 一种安全网络接口单元（SNIU），其在用户层通信协议上操作，该协议通过在通信栈的会话层建立关联来与其它类似的SNIU设备进行通信，以便为端对端创建全局安全边界 通讯。 SNIU包括用于接收在用户与至少一个网络之间发送的消息的主机/网络接口，其用于将所接收的消息转换为和从所述至少一个网络所使用的格式转换。 用于确定关联是否已经与另一个SNIU设备存在的消息解析器。 耦合到接口的会话管理器，用于识别和验证请求访问网络的用户。 会话管理器还用于当消息解析器确定关联已经存在时发送从用户接收的消息。 当消息解析器确定关联不存在时，耦合到该接口的关联管理器用于与其它类似的SNIU设备建立关联。
-
公开(公告)号：US08346925B2
公开(公告)日：2013-01-01
申请号：US12965606
申请日：2010-12-10
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A network security apparatus adapted to provide for secure communications across data networks, including untrusted networks. In one embodiment, the security apparatus comprises one or more components disposed within the software stack of a computerized device, the components including an association process adapted to establish security associations between devices on the network, and an encryption key generation process adapted to generate one or more encryption keys. In one variant, the keys are specifically for use with temporary or ad hoc security associations. The one or more keys are exchanged according to a key exchange protocol after the device is authenticated or authenticates another device. In one implementation, the device comprises a portable device such as a laptop computer.
摘要翻译： 适用于跨数据网络（包括不可信网络）提供安全通信的网络安全装置。 在一个实施例中，安全设备包括设置在计算机化设备的软件堆栈内的一个或多个组件，该组件包括适于建立网络上的设备之间的安全关联的关联过程，以及适于生成一个或多个 更多加密密钥。 在一个变型中，密钥专门用于临时或临时安全关联。 在设备认证或认证另一设备后，根据密钥交换协议交换一个或多个密钥。 在一个实现中，该设备包括诸如膝上型计算机的便携式设备。
-
9.发明授权Methods of operating a portable communications device with enhanced security 有权操作具有增强的安全性的便携式通信设备的方法公开(公告)号：US08028067B2
公开(公告)日：2011-09-27
申请号：US11776396
申请日：2007-07-11
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： Methods of operating a portable communications device so as to provide communications security and user identification and authentication. In one embodiment, the method comprises placing the device in communication with an untrusted network, and using its security apparatus for creating associations with one or more security devices on the network. Traffic between the associated devices may be encrypted and protected for e.g., data confidentiality and integrity protection. In one variant, the security apparatus comprises a software entity disposed at least partly within the software stack of a host, and a removable security card. The portable device may be untrusted (e.g., have an untrusted operating system) and also be physically unsecure.
摘要翻译： 操作便携式通信设备以提供通信安全性和用户识别和认证的方法。 在一个实施例中，该方法包括将设备与不可信网络进行通信，并且使用其安全设备来创建与网络上的一个或多个安全设备的关联。 相关设备之间的业务可以被加密和保护，例如数据机密性和完整性保护。 在一个变型中，安全装置包括至少部分地设置在主机的软件堆栈内的软件实体和可拆卸的安全卡。 便携式设备可能是不受信任的（例如，具有不可信操作系统），并且也是物理上不安全的。
-
10.发明授权公开(公告)号：US07827291B2
公开(公告)日：2010-11-02
申请号：US11776413
申请日：2007-07-11
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , G06F21/31 , G06F21/606 , G06F21/85 , G06F2211/001 , G06F2211/005 , G06F2211/007 , G06F2211/009 , G06F2221/2101 , G06F2221/2141 , G06F2221/2149 , G06F2221/2153 , H04L9/3247 , H04L9/3268 , H04L9/3273 , H04L29/06 , H04L63/02 , H04L63/0218 , H04L63/0442 , H04L63/0869 , H04L63/101 , H04L63/105 , H04L63/126 , H04L63/14 , H04L67/141 , H04L67/2814 , H04L2209/76 , H04W12/06
摘要： A system adapted to provide communication security between computerized devices in, for example, an ad hoc or temporary networked environment. In one embodiment, the network comprises an untrusted network, and the system includes network security apparatus adapted to create security associations between devices on the network, including mutual authentication. Traffic between the associated devices may be encrypted for e.g., data confidentiality and integrity protection. In one variant, the network security apparatus comprises a software entity disposed at least partly within the software stack of the devices. The associated devices may be for example fixed or portable, and may be untrusted (e.g., have an untrusted operating system).
摘要翻译： 一种适于在例如临时或临时网络环境中的计算机化设备之间提供通信安全性的系统。 在一个实施例中，网络包括不可信网络，并且该系统包括适于在网络上的设备之间创建安全关联的网络安全设备，包括相互认证。 可以对相关设备之间的业务进行加密，例如数据机密性和完整性保护。 在一个变型中，网络安全设备包括至少部分地设置在设备的软件堆栈内的软件实体。 相关联的设备可以是例如固定的或便携式的，并且可以是不可信的（例如，具有不可信的操作系统）。
-
-
-
-
-
-
-
-
-
搜索结果
29 条记录 (耗时 0.029 秒)
