Policy enforcement in a secure data file delivery system
    1.
    发明授权
    Policy enforcement in a secure data file delivery system 有权
    安全数据文件传递系统中的策略执行

    公开(公告)号:US09578059B2

    公开(公告)日:2017-02-21

    申请号:US13481549

    申请日:2012-05-25

    IPC分类号: H04L29/06 H04L29/08

    摘要: A server interacts with a sender to form a package which can include one or more attached data files to be sent to one or more recipients, and the server applies a policy established by a policy authority of the sender to the package. Since the server both forms the package through interaction with the sender and applies the policy, violations of the policy by the package can be brought to the sender's attention during an interactive session with the sender and before encryption of all or part of the package. As a result, the sender is educated regarding the policy of the sender's policy authority, and the sender can modify the package immediately to comport with the policy. The server delivers the package to intended recipients by sending notification to each recipient and including package identification data, e.g., a URL by which the package can be retrieved.

    摘要翻译: 服务器与发送者进行交互以形成可以包括要发送给一个或多个收件人的一个或多个附加数据文件的包,并且服务器将由发送者的策略机构建立的策略应用于包。 由于服务器通过与发送者的交互形式构成包,并且应用该策略,所以在与发送者的交互式会话期间以及在对所有或部分包进行加密之前,该包可能会引起发包方的注意。 因此,发件人对发件人的政策权限的政策进行了教育,发件人可以立即修改包,以符合政策。 该服务器通过向每个收件人发送通知并且包括包标识数据(例如,可以通过该URL检索包的URL)来将包发送给预期的收件人。

    Sender driven certification enrollment system
    2.
    发明授权
    Sender driven certification enrollment system 失效
    发件人推动认证注册系统

    公开(公告)号:US06651166B1

    公开(公告)日:2003-11-18

    申请号:US09057966

    申请日:1998-04-09

    IPC分类号: H04L900

    摘要: A sender driven certificate enrollment system and methods of its use are provided, in which a sender controls the generation of a digital certificate that is used to encrypt and send a document to a recipient in a secure manner. The sender compares previously stored recipient information to gathered information from the recipient. If the information matches, the sender transfers key generation software to the recipient, which produces the digital certificate, comprising a public and private key pair. The sender can then use the public key to encrypt and send the document to the recipient, wherein the recipient can use the matching private key to decrypt the document.

    摘要翻译: 提供了发送者驱动的证书注册系统及其使用方法,其中发送者控制用于以安全的方式将文档加密和发送给接收者的数字证书的生成。 发件人将先前存储的收件人信息与收件人收集的信息进行比较。 如果信息匹配,则发送者将密钥生成软件传送到生成数字证书的接收者,该数字证书包括公钥和私钥对。 然后,发送者可以使用公共密钥加密并将文档发送给接收者,其中接收者可以使用匹配的私钥来解密文档。

    Method and system for binary data firewall delivery
    3.
    发明授权
    Method and system for binary data firewall delivery 失效
    二进制数据防火墙传送的方法和系统

    公开(公告)号:US06502191B1

    公开(公告)日:2002-12-31

    申请号:US08800864

    申请日:1997-02-14

    IPC分类号: G06F1130

    摘要: A method and system sends documents from a desktop computer inside an intranet through a series of firewalls and/or proxy servers to a server residing on the Internet. A computer in an intranet system protected by a firewall or proxy server uses a software application to access the Internet. The software also encodes binary data to be sent as text. This binary data may be subdivided into smaller text packets. The text packets are sent, using HTTP, to a server outside the firewall, which has been configured to accept such text packets. The server converts the text packets back to the original binary data representation. The binary data, once resident on the internet server, can then be forwarded directly to other internet servers, internet desktop computers, printers, or fax machines.

    摘要翻译: 方法和系统通过一系列防火墙和/或代理服务器将文档从Intranet内的台式计算机发送到驻留在Internet上的服务器。 由防火墙或代理服务器保护的内部网系统中的计算机使用软件应用程序访问Internet。 该软件还将二进制数据编码为文本发送。 该二进制数据可以被细分为较小的文本分组。 文本数据包使用HTTP发送到防火墙外部的服务器,该服务器已配置为接受这样的文本数据包。 服务器将文本包转换回原始的二进制数据表示。 一旦居住在互联网服务器上的二进制数据可以直接转发到其他互联网服务器,互联网台式电脑,打印机或传真机。

    Solicited authentication of a specific user
    4.
    发明授权
    Solicited authentication of a specific user 有权
    特定用户的请求认证

    公开(公告)号:US08661509B2

    公开(公告)日:2014-02-25

    申请号:US13560986

    申请日:2012-07-27

    IPC分类号: H04L9/32

    CPC分类号: H04L51/08 H04L51/24 H04L63/08

    摘要: Secure web-based messaging according to a “push” paradigm is augmented by specific, intended recipient authentication. In particular, a document can be sent to a specified, intended recipient through the Web using e-mail recipient notification, and the recipient is authenticated prior to delivering the document to the recipient. Such authentication prevents a cracker from snooping a delivery notification e-mail message and retrieving the document prior to retrieval by the true intended recipient. In addition, such authentication of the recipient is driven by the sender such that prior participation by the recipient in the messaging system according to the present invention is required.

    摘要翻译: 根据“推”模式的安全的基于Web的消息传递是通过特定的,预期的接收者认证来增强的。 特别地,可以通过使用电子邮件收件人通知的Web将文档发送到指定的预期收件人,并且在将文档发送给接收者之前将接收者进行身份验证。 这种认证防止破解者窥探传送通知电子邮件消息,并在真正意图接收者检索之前检索文档。 此外,接收者的这种认证由发送者驱动,使得接收者在根据本发明的消息收发系统中事先参与需要。

    Solicited authentication of a specific user

    公开(公告)号:US06725381B1

    公开(公告)日:2004-04-20

    申请号:US09387444

    申请日:1999-08-31

    IPC分类号: H04L2906

    CPC分类号: H04L51/08 H04L51/24 H04L63/08

    摘要: Secure web-based messaging according to a “push” paradigm is augmented by specific, intended recipient authentication. In particular, a document can be sent to a specified, intended recipient through the Web using e-mail recipient notification, and the recipient is authenticated prior to delivering the document to the recipient. Such authentication prevents a cracker from snooping a delivery notification e-mail message and retrieving the document prior to retrieval by the true intended recipient. In addition, such authentication of the recipient is driven by the sender such that prior participation by the recipient in the messaging system according to the present invention is required.

    Method and apparatus for delivering documents over an electronic network
    6.
    发明授权
    Method and apparatus for delivering documents over an electronic network 失效
    用于通过电子网络传送文件的方法和装置

    公开(公告)号:US06385655B1

    公开(公告)日:2002-05-07

    申请号:US08957986

    申请日:1997-10-02

    IPC分类号: G06F15177

    摘要: A method and apparatus are provided for securely delivering documents over an electronic network while preserving document formatting. The invention also provides security that restricts access to the system to an authorized user. A document is sent from a sending computer to a dedicated server, using a send client application. The document is specified for delivery within the send client application, or by clicking and dragging the document onto an appropriate window or icon on the sending computer desktop, or is specified from within a document authoring application. A dedicated server stores the document and forwards an electronic notification to a receiving device. The stored document is downloaded from the dedicated server, using a receive client application, in response to the notification. The receive client application permits the recipient to receive, view, print, and/or manipulate the document. The dedicated server is preferably managed by a configuration user interface having an HTML interface for sending, tracking, accessing account information, managing billings, and managing mail distribution lists. The send client application allows a user to specify document delivery parameters. The parameters may be stored for later modification and/or use.

    摘要翻译: 提供了一种方法和装置,用于通过电子网络安全地传送文件,同时保留文档格式。 本发明还提供了将授权用户对系统的访问限制的安全性。 使用发送客户端应用程序将文档从发送计算机发送到专用服务器。 该文档被指定用于在发送客户端应用程序内传送,或通过单击并将文档拖动到发送计算机桌面上的适当窗口或图标上,或者从文档创作应用程序中指定。 专用服务器存储文档并将电子通知转发给接收设备。 存储的文档是从专用服务器下载的,使用接收客户端应用程序响应该通知。 接收客户端应用程序允许收件人接收,查看,打印和/或操纵文档。 专用服务器最好由具有用于发送,跟踪,访问帐户信息,管理账单和管理邮件分发列表的HTML接口的配置用户界面来管理。 发送客户端应用程序允许用户指定文档传递参数。 可以存储参数以供稍后修改和/或使用。

    Distributed dynamic document conversion server
    7.
    发明授权
    Distributed dynamic document conversion server 失效
    分布式动态文档转换服务器

    公开(公告)号:US06119137A

    公开(公告)日:2000-09-12

    申请号:US792171

    申请日:1997-01-30

    摘要: A document delivery server dynamically customizes the format of a document to be delivered, based on the capabilities of the recipient and the type of document to be delivered. The server enables transparent delivery of formatted documents, regardless of the capabilities of the recipient. For example, the recipient platform could be a desktop computer, a network computer, a printer, a fax machine, or a personal digital assistant. The server attempts to maintain the information contained in the document in a high level representation and defers the decision of when to convert to a lower level representation, thereby maximizing the potential set of options and function at each step in the delivery process.

    摘要翻译: 文档传送服务器根据接收方的功能和要传送的文档类型,动态自定义要传送的文档的格式。 无论接收方的功能如何,服务器都能透明地传送格式化的文档。 例如,接收者平台可以是台式计算机,网络计算机,打印机,传真机或个人数字助理。 服务器尝试以高级表示方式维护文档中包含的信息,并且将决定何时转换为较低级别的表示,从而最大限度地提高了交付过程中每个步骤的潜在选项和功能。

    SOLICITED AUTHENTICATION OF A SPECIFIC USER
    8.
    发明申请
    SOLICITED AUTHENTICATION OF A SPECIFIC USER 有权
    特定用户的有效认证

    公开(公告)号:US20130138747A1

    公开(公告)日:2013-05-30

    申请号:US13560986

    申请日:2012-07-27

    IPC分类号: H04L12/58

    CPC分类号: H04L51/08 H04L51/24 H04L63/08

    摘要: Secure web-based messaging according to a “push” paradigm is augmented by specific, intended recipient authentication. In particular, a document can be sent to a specified, intended recipient through the Web using e-mail recipient notification, and the recipient is authenticated prior to delivering the document to the recipient. Such authentication prevents a cracker from snooping a delivery notification e-mail message and retrieving the document prior to retrieval by the true intended recipient. In addition, such authentication of the recipient is driven by the sender such that prior participation by the recipient in the messaging system according to the present invention is required.

    摘要翻译: 根据“推”模式的安全的基于Web的消息传递是通过特定的,预期的接收者认证来增强的。 特别地,可以通过使用电子邮件收件人通知的Web将文档发送到指定的预期收件人,并且在将文档发送给接收者之前将接收者进行身份验证。 这种认证防止破解者窥探传送通知电子邮件消息,并在真正意图接收者检索之前检索文档。 此外,接收者的这种认证由发送者驱动,使得接收者在根据本发明的消息收发系统中事先参与需要。

    Solicited authentication of a specific user
    9.
    发明授权
    Solicited authentication of a specific user 有权
    特定用户的请求认证

    公开(公告)号:US08234690B2

    公开(公告)日:2012-07-31

    申请号:US12098321

    申请日:2008-04-04

    IPC分类号: H04L9/32

    CPC分类号: H04L51/08 H04L51/24 H04L63/08

    摘要: Secure web-based messaging according to a “push” paradigm is augmented by specific, intended recipient authentication. In particular, a document can be sent to a specified, intended recipient through the Web using e-mail recipient notification, and the recipient is authenticated prior to delivering the document to the recipient. Such authentication prevents a cracker from snooping a delivery notification e-mail message and retrieving the document prior to retrieval by the true intended recipient. In addition, such authentication of the recipient is driven by the sender such that prior participation by the recipient in the messaging system according to the present invention is required.

    摘要翻译: 根据“推”模式的安全的基于Web的消息传递是通过特定的,预期的接收者认证来增强的。 特别地,可以通过使用电子邮件收件人通知的Web将文档发送到指定的预期收件人,并且在将文档发送给接收者之前将接收者进行身份验证。 这种认证防止破解者窥探传送通知电子邮件消息,并在真正意图接收者检索之前检索文档。 此外,接收者的这种认证由发送者驱动,使得接收者在根据本发明的消息收发系统中事先参与需要。

    Policy enforcement in a secure data file delivery system
    10.
    发明授权
    Policy enforcement in a secure data file delivery system 有权
    安全数据文件传递系统中的策略执行

    公开(公告)号:US08196183B2

    公开(公告)日:2012-06-05

    申请号:US10790901

    申请日:2004-03-01

    IPC分类号: G06F21/00

    摘要: A server interacts with a sender to form a package which can include one or more attached data files to be sent to one or more recipients, and the server applies a policy established by a policy authority of the sender to the package. Since the sever both forms the package through interaction with the sender and applies the policy, any violations of the policy by the package can be brought to the sender's attention during an interactive session with the sender and before encryption of all or part of the package. As a result, the sender is educated regarding the policy of the sender's policy authority, and the sender can modify the package immediately to comport with the policy. The server delivers the package to the one or more intended recipients by sending notification to each recipient and including in such notification package identification data, e.g., a URL by which the package can be retrieved. The policy of the policy authority can be specified as a list of associations between one or more conditions and one or more actions to be carried out upon satisfaction of the associated conditions.

    摘要翻译: 服务器与发送者进行交互以形成可以包括要发送给一个或多个收件人的一个或多个附加数据文件的包,并且服务器将由发送者的策略机构建立的策略应用于包。 由于服务器通过与发送方的交互形式形成包,并且应用策略,所以在与发送者的交互式会话期间以及所有或部分包的加密之前,可以使包的策略的任何违反被发送者注意。 因此,发件人对发件人的政策权限的政策进行了教育,发件人可以立即修改包,以符合政策。 该服务器通过向每个接收者发送通知并且在该通知包中包括标识数据,例如可以检索该包的URL来将包发送给一个或多个预期收件人。 政策当局的政策可以被指定为一个或多个条件之间的关联清单,以及在满足相关条件时要执行的一项或多项行动。