知搜-全球专利检索

  1. 登录
  2. 注册

搜索结果

16 条记录 (耗时 0.015 秒)

    Conversational authentication
    1.
    发明授权
    Conversational authentication 有权

    公开(公告)号：US10659446B2

    公开(公告)日：2020-05-19

    申请号：US15621628

    申请日：2017-06-13

    申请人： salesforce.com, inc.

    发明人： Josh Alexander ,  Seth Holloway ,  Evan Tyler Grim ,  Ian Glazer ,  William Charles Mortimore, Jr.

    IPC分类号： G06F7/04 ,  H04L29/06 ,  H04W12/06

    摘要： Techniques are disclosed relating to contextual authentication across different applications based on user communications. In some embodiments, a user is preauthenticated to certain actions on a second application based on the user's communication via a first application. The user's communication via a first application provides contextual information that may be used to preauthenticate a request to perform an action on the second application. Contextual information may include the user's communication itself and/or communications characteristics that are determined from the user's communications. In some embodiments, the degree of preauthentication progressively increases or decreases with the degree of use on the first application; that is, the user is preauthenticated to greater or fewer portions of an authentication procedure, to perform greater or fewer actions, or to perform actions more or less critical to security, as additional information regarding the user's communication on the first application becomes available. In some embodiments, preauthentication may be revoked as additional contextual information becomes available on the first application.

    Distributed key caching for encrypted keys
    2.
    发明授权
    Distributed key caching for encrypted keys 有权

    公开(公告)号：US11700112B2

    公开(公告)日：2023-07-11

    申请号：US16863402

    申请日：2020-04-30

    申请人： salesforce.com, inc.

    发明人： Alexandre Hersans ,  John Bracken ,  Assaf Ben Gur ,  William Charles Mortimore, Jr. ,  Swaroop Shere

    IPC分类号： H04L9/08 ,  H04L9/14 ,  G06F12/123 ,  G06F12/0813

    CPC分类号： H04L9/0822 ,  G06F12/0813 ,  G06F12/123 ,  H04L9/0894 ,  H04L9/14 ,  G06F2212/60 ,  G06F2212/62

    摘要： Methods, systems, and devices for distributed caching of encrypted encryption keys are described. Some multi-tenant database systems may support encryption of data records. To efficiently handle multiple encryption keys across multiple application servers, the database system may store the encryption keys in a distributed cache accessible by each of the application servers. To securely cache the encryption keys, the database system may encrypt (e.g., wrap) each data encryption key (DEK) using a second encryption key (e.g., a key encryption key (KEK)). The database system may store the DEKs and KEKs in separate caches to further protect the encryption keys. For example, while the encrypted DEKs may be stored in the distributed cache, the KEKs may be stored locally on application servers. The database system may further support “bring your own key” (BYOK) functionality, where a user may upload a tenant secret or tenant-specific encryption key to the database.

    Environment-differentiated named credential instances for development and deployment
    4.
    发明授权
    Environment-differentiated named credential instances for development and deployment 有权

    公开(公告)号：US10298582B2

    公开(公告)日：2019-05-21

    申请号：US15158277

    申请日：2016-05-18

    申请人： salesforce.com, inc.

    发明人： Alexey Syomichev ,  Lawrence Eugenio McAlpin ,  William Charles Mortimore, Jr.

    IPC分类号： G06F21/00 ,  G06F21/31 ,  G06F21/62 ,  H04L29/06 ,  H04L29/08

    摘要： Controlling access to sensitive data can be difficult during an application development effort. A developer may not be authorized to see the data that is to be used by the application. Credentials used in a development environment to access development data can require modification when the application is migrated to a deployed environment. Changing the code in the deployed environment increases risks of change induced incidents. The technology disclosed allows for the creation of a named credential object, where the credentials for different environments are stored, and where the named credential object is called by metadata. This allows the promotion of code from a development environment to a deployed environment without changes to code, and without giving access to sensitive data to the developer.

    Customized user validation
    8.
    发明授权
    Customized user validation 有权

    公开(公告)号：US10021089B2

    公开(公告)日：2018-07-10

    申请号：US14682324

    申请日：2015-04-09

    申请人： salesforce.com, inc.

    发明人： William Charles Mortimore, Jr. ,  Sergio Isaac Koren ,  Paul Anthony Mason ,  Alan Vangpat

    IPC分类号： H04L29/06

    CPC分类号： H04L63/083 ,  H04L63/0838 ,  H04L63/102 ,  H04L2463/082

    摘要： Mechanisms and techniques for customized user validation. A login attempt is received from a remote electronic device with one or more computing devices that provide access to one or more resources. The login attempt is analyzed to determine a profile from a plurality of profiles corresponding to the login attempt. The one or more computing devices support the plurality profiles with each profile having a corresponding flow. The flow corresponding to the profile is performed prior to allowing continuation of the login attempt. The login attempt is continued, via the one or more computing devices, after the flow corresponding to the profile is completed. Access is granted to the one or more resources, via the one or more computing devices, in response to a successful completion of the login attempt.