专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08607311B2 Delegation in logic-based access control 有权
标题翻译：基于逻辑的访问控制委托
公开(公告)号：US08607311B2
公开(公告)日：2013-12-10
申请号：US11962761
申请日：2007-12-21
申请人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , John M. Leen , Jason F. Mackay
发明人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , John M. Leen , Jason F. Mackay
IPC分类号： G06F7/04 , G06F17/30 , G06F12/00 , H04L29/06
CPC分类号： G06F21/6218
摘要： Access to a resource may be controlled by a policy, such that a request to access the resource is either granted or denied based on what assertions have been made by various principals. To find the assertions that support a grant of access to the resource, a template may be created that defines the nature of assertions that would cause access to succeed. Assertions may be stored in the form of tokens. The template may be used to search an existing token store to find assertions that have been made, and/or to generate assertions that have not been found in the token store and that would satisfy the template. The assertions in the template may be created by performing an abductive reasoning process on an access query.
摘要翻译：可以通过策略来控制对资源的访问，使得根据各个主体所做的断言来授予或拒绝访问资源的请求。要查找支持资源访问权限的断言，可以创建一个模板，该模板定义了导致访问成功的断言的性质。断言可以以令牌的形式存储。该模板可以用于搜索现有的令牌存储以找到已经做出的断言和/或生成在令牌存储器中尚未发现并且将满足模板的断言。可以通过在访问查询上执行引用推理过程来创建模板中的断言。

2. 发明授权

US08584124B2 Methods and systems for batch processing in an on-demand service environment 有权
标题翻译：在按需服务环境中批量处理的方法和系统
公开(公告)号：US08584124B2
公开(公告)日：2013-11-12
申请号：US13076794
申请日：2011-03-31
申请人： Gregory D. Fee , William J Gallagher
发明人： Gregory D. Fee , William J Gallagher
IPC分类号： G06F9/455 , G06F7/00
CPC分类号： G06F9/466 , G06F9/4843 , G06F2209/5013
摘要： In accordance with embodiments disclosed herein, there are provided mechanisms and methods for batch processing in an on-demand service environment. For example, in one embodiment, mechanisms include receiving a processing request for a multi-tenant database, in which the processing request specifies processing logic and a processing target group within the multi-tenant database. Such an embodiment further includes dividing or chunking the processing target group into a plurality of processing target sub-groups, queuing the processing request with a batch processing queue for the multi-tenant database among a plurality of previously queued processing requests, and releasing each of the plurality of processing target sub-groups for processing in the multi-tenant database via the processing logic at one or more times specified by the batch processing queue.
摘要翻译：根据本文公开的实施例，提供了在按需服务环境中批量处理的机构和方法。例如，在一个实施例中，机制包括接收对多租户数据库的处理请求，其中处理请求指定处理逻辑和多租户数据库内的处理目标组。这样的实施例还包括将处理对象组划分或分块成多个处理对象子组，在多个先前排队的处理请求之间对多租户数据库的批处理队列进行排队处理请求，多个处理目标子组，用于经由处理逻辑在多租户数据库中处理由批处理队列指定的一个或多个时间。

3. 发明授权

US07669238B2 Evidence-based application security 有权
标题翻译：循证应用安全
公开(公告)号：US07669238B2
公开(公告)日：2010-02-23
申请号：US10705756
申请日：2003-11-10
申请人： Gregory D. Fee , Aaron Goldfeder , John M. Hawkins , Jamie L. Cool , Sebastian Lange , Sergey Khorun
发明人： Gregory D. Fee , Aaron Goldfeder , John M. Hawkins , Jamie L. Cool , Sebastian Lange , Sergey Khorun
IPC分类号： H04L9/00
CPC分类号： G06F21/51 , G06F21/53
摘要： Evidence-based application security may be implemented at the application and/or application group levels. A manifest may be provided defining at least one trust condition for the application or application group. A policy manager evaluates application evidence (e.g., an XrML license) for an application or group of applications relative to the manifest. The application is only granted permissions on the computer system if the application evidence indicates that the application is trusted. Similarly, a group of applications are only granted permissions on the computer system if the evidence indicates that the group of applications is trusted. If the application evidence satisfies the at least one trust condition defined by the manifest, the policy manager generates a permission grant set for each code assembly that is a member of the at least one application. Evidence may be further evaluated for code assemblies that are members of the trusted application or application group.
摘要翻译：基于证据的应用程序安全性可以在应用程序和/或应用程序组级别实现。可以提供清单来为应用或应用组定义至少一个信任条件。策略管理员针对相对于清单的应用程序或应用程序组来评估应用程序证据（例如，XrML许可证）。如果应用程序的证据表明应用程序是可信任的，则该应用程序仅被授予计算机系统的权限。类似地，如果证据表明应用程序组是可信任的，则一组应用程序仅被授予计算机系统的权限。如果应用证据满足由清单定义的至少一个信任条件，则策略管理器为作为至少一个应用的成员的每个代码集合生成许可授权集合。可以对作为可信应用程序或应用程序组成员的代码程序集进一步评估证据。

4. 发明申请

US20130013577A1 METHODS AND SYSTEMS FOR BATCH PROCESSING IN AN ON-DEMAND SERVICE ENVIRONMENT 有权
标题翻译：在需求服务环境中进行批处理的方法和系统
公开(公告)号：US20130013577A1
公开(公告)日：2013-01-10
申请号：US13620147
申请日：2012-09-14
申请人： Gregory D. Fee , William J. Gallagher
发明人： Gregory D. Fee , William J. Gallagher
IPC分类号： G06F17/30
CPC分类号： G06F9/466 , G06F9/4843 , G06F2209/5013
摘要： In accordance with embodiments disclosed herein, there are provided mechanisms and methods for batch processing in an on-demand service environment. For example, in one embodiment, mechanisms include receiving a processing request for a multi-tenant database, in which the processing request specifies processing logic and a processing target group within the multi-tenant database. Such an embodiment further includes dividing or chunking the processing target group into a plurality of processing target sub-groups, queuing the processing request with a batch processing queue for the multi-tenant database among a plurality of previously queued processing requests, and releasing each of the plurality of processing target sub-groups for processing in the multi-tenant database via the processing logic at one or more times specified by the batch processing queue.
摘要翻译：根据本文公开的实施例，提供了在按需服务环境中批量处理的机构和方法。例如，在一个实施例中，机制包括接收对多租户数据库的处理请求，其中处理请求指定处理逻辑和多租户数据库内的处理目标组。这样的实施例还包括将处理对象组划分或分块成多个处理对象子组，在多个先前排队的处理请求之间对多租户数据库的批处理队列进行排队处理请求，多个处理目标子组，用于经由处理逻辑在多租户数据库中处理由批处理队列指定的一个或多个时间。

5. 发明申请

US20110265066A1 METHODS AND SYSTEMS FOR EVALUATING BYTECODE IN AN ON-DEMAND SERVICE ENVIRONMENT INCLUDING TRANSLATION OF APEX TO BYTECODE 有权
标题翻译：在需求服务环境中评估副产品的方法和系统，包括将APEX转换为BYTECODE
公开(公告)号：US20110265066A1
公开(公告)日：2011-10-27
申请号：US13091347
申请日：2011-04-21
申请人： Gregory D. Fee , William J. Gallagher
发明人： Gregory D. Fee , William J. Gallagher
IPC分类号： G06F9/45
CPC分类号： G06F8/41 , G06F9/5027 , G06F12/0811 , G06F12/0866 , G06F12/0875 , G06F17/30132 , G06F17/30424 , G06F2209/549 , G06F2212/45 , G06F2212/465
摘要： Techniques and mechanisms for conversion of code of a first type to bytecode. Apex provides various unique characteristics. When converting to bytecode, these characteristics are handled to provide bytecode functionality. Some of the unique characteristics of Apex include Autoboxing, SOQL, Properties, Comparisons, Modifiers, Code coverage mechanisms and Sharing mechanisms.
摘要翻译：将第一类代码转换为字节码的技术和机制。 Apex提供各种独特的特征。当转换为字节码时，处理这些特性以提供字节码功能。 Apex的一些独特特征包括Autoboxing，SOQL，属性，比较，修改器，代码覆盖机制和共享机制。

6. 发明授权

US07647629B2 Hosted code runtime protection 有权
标题翻译：托管代码运行时保护
公开(公告)号：US07647629B2
公开(公告)日：2010-01-12
申请号：US10772205
申请日：2004-02-03
申请人： Christopher W. Brumme , Sebastian Lange , Gregory D. Fee , Michael Gashler , Mahesh Prakriya
发明人： Christopher W. Brumme , Sebastian Lange , Gregory D. Fee , Michael Gashler , Mahesh Prakriya
IPC分类号： G06F7/04 , G06F12/00 , G06F12/14 , G06F13/00 , G06F17/30 , G11C7/00
CPC分类号： G06F9/468
摘要： A host operating in a managed environment intercepts a call from a managed caller to a particular callee and determines whether the call is permissible according to the host's prior configuration of a plurality of callees. The particular callee, which provides access to a resource that the host can be protecting, can have been previously configured by the host to always allow the call to be made, to never allow the call to be made, or to allow the call to be made based upon the degree to which the host trusts the managed caller.
摘要翻译：在受管环境中操作的主机拦截来自被管理的呼叫者到特定被叫方的呼叫，并根据主机先前配置多个被呼叫者确定该呼叫是否被允许。提供对主机可以保护的资源的访问的特定被叫方可以先前由主机配置，以始终允许进行呼叫，从不允许进行呼叫，或允许呼叫成为基于主机信任被管理的呼叫者的程度。

7. 发明申请

US20090165110A1 DELEGATION IN LOGIC-BASED ACCESS CONTROL 有权
标题翻译：基于逻辑的访问控制的代表
公开(公告)号：US20090165110A1
公开(公告)日：2009-06-25
申请号：US11962761
申请日：2007-12-21
申请人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , John M. Leen , Jason F. Mackay
发明人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , John M. Leen , Jason F. Mackay
IPC分类号： G06F21/20
CPC分类号： G06F21/6218
摘要： Access to a resource may be controlled by a policy, such that a request to access the resource is either granted or denied based on what assertions have been made by various principals. To find the assertions that support a grant of access to the resource, a template may be created that defines the nature of assertions that would cause access to succeed. Assertions may be stored in the form of tokens. The template may be used to search an existing token store to find assertions that have been made, and/or to generate assertions that have not been found in the token store and that would satisfy the template. The assertions in the template may be created by performing an abductive reasoning process on an access query.
摘要翻译：可以通过策略来控制对资源的访问，使得根据各个主体所做的断言来授予或拒绝访问资源的请求。要查找支持资源访问权限的断言，可以创建一个模板，该模板定义了导致访问成功的断言的性质。断言可以以令牌的形式存储。该模板可以用于搜索现有的令牌存储以找到已经做出的断言和/或生成在令牌存储器中尚未发现并且将满足模板的断言。可以通过在访问查询上执行引用推理过程来创建模板中的断言。

8. 发明申请

US20070300285A1 Techniques for managing security contexts 有权
标题翻译：管理安全上下文的技术
公开(公告)号：US20070300285A1
公开(公告)日：2007-12-27
申请号：US11471905
申请日：2006-06-21
申请人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
发明人： Gregory D. Fee , Brian A. LaMacchia , Blair Dillaway
IPC分类号： H04L9/00
CPC分类号： G06F21/52
摘要： Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.
摘要翻译：可以描述用于管理安全上下文的技术。装置可以包括处理器和安全管理模块。安全管理模块可以为多个并发线程形成合并的安全上下文，其中一个线程取决于来自其他线程的多个以前的操作。描述和要求保护其他实施例。

9. 发明授权

US08984009B2 Methods and systems for utilizing bytecode in an on-demand service environment including providing multi-tenant runtime environments and systems 有权
标题翻译：在按需服务环境中使用字节码的方法和系统，包括提供多租户运行时环境和系统
公开(公告)号：US08984009B2
公开(公告)日：2015-03-17
申请号：US13091353
申请日：2011-04-21
申请人： Gregory D. Fee , William J. Gallagher
发明人： Gregory D. Fee , William J. Gallagher
IPC分类号： G06F17/30 , G06F7/00 , G06F9/50 , G06F12/08
CPC分类号： G06F8/41 , G06F9/5027 , G06F12/0811 , G06F12/0866 , G06F12/0875 , G06F17/30132 , G06F17/30424 , G06F2209/549 , G06F2212/45 , G06F2212/465
摘要： Execution of code in a multitenant runtime environment. A request to execute code corresponding to a tenant identifier (ID) is received in a multitenant environment. The multitenant database stores data for multiple client entities each identified by a tenant ID having one of one or more users associated with the tenant ID. Users of each of multiple client entities can only access data identified by a tenant ID associated with the respective client entity. The multitenant database is a hosted database provided by an entity separate from the client entities, and provides on-demand database service to the client entities. Source code corresponding to the code to be executed is retrieved from a multitenant database. The retrieved source code is compiled. The compiled code is executed in the multitenant runtime environment. The memory used by the compiled code is freed in response to completion of the execution of the compiled code.
摘要翻译：执行多租户运行时环境中的代码。在多租户环境中接收到执行与租户标识符（ID）相对应的代码的请求。多租户数据库存储多个客户端实体的数据，每个客户实体各自由具有与租户ID相关联的一个或多个用户中的一个的租户ID标识。多个客户实体中的每一个的用户只能访问与相应的客户端实体相关联的租户ID所识别的数据。多租户数据库是由与客户实体分离的实体提供的托管数据库，并为客户端实体提供按需数据库服务。从多租户数据库检索与要执行的代码相对应的源代码。检索的源代码被编译。编译代码在多租户运行时环境中执行。编译代码使用的内存将被释放，以响应编译代码的执行完成。

10. 发明授权

US08839344B2 Access policy analysis 有权
标题翻译：访问策略分析
公开(公告)号：US08839344B2
公开(公告)日：2014-09-16
申请号：US12021299
申请日：2008-01-28
申请人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , Jason F. Mackay , Jason Hogg , John M. Leen
发明人： Moritz Y. Becker , Blair B. Dillaway , Gregory D. Fee , Jason F. Mackay , Jason Hogg , John M. Leen
IPC分类号： G06F17/00 , H04L29/06 , G06F7/04 , G06F17/30
CPC分类号： G06F21/552
摘要： Software tools assist an access-policy analyst or creator to debug and/or author access policies. An access request contains a query that evaluates to either true or false depending on whether access is to be allowed. Abduction may be used to generate assumptions that, if true, would cause the access request to be true. The tool may perform analysis on the generated assumptions, such as: comparing the assumptions with tokens to detect errors in the tokens or to suggest changes to the tokens that would cause the query to be satisfied, or comparing the assumptions to a meta-policy. The tool may allow an analysis, policy author, or other person to interactively walk through assumptions in order to see the implications of the access policy.
摘要翻译：软件工具可帮助访问策略分析师或创建者调试和/或创建访问策略。访问请求包含一个查询，其计算结果为true或false，具体取决于是否允许访问。绑架可用于产生假设，如果为真，将导致访问请求为真。该工具可以对生成的假设执行分析，例如：将假设与令牌进行比较，以检测令牌中的错误，或者建议对令牌进行更改以使查询得到满足，或将假设与元政策进行比较。该工具可能允许分析，策略作者或其他人以交互方式通过假设来查看访问策略的含义。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式