专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US08132073B1 Distributed storage system with enhanced security 有权
标题翻译：具有增强安全性的分布式存储系统
公开(公告)号：US08132073B1
公开(公告)日：2012-03-06
申请号：US12495189
申请日：2009-06-30
申请人： Kevin D. Bowers , Ari Juels , Alina Oprea
发明人： Kevin D. Bowers , Ari Juels , Alina Oprea
IPC分类号： H03M13/00
CPC分类号： H03M13/3761 , G06F21/6227 , H03M13/1515 , H04L9/085 , H04L9/0894 , H04L9/3242 , H04L9/3271
摘要： A client device or other processing device separates a file into blocks and distributes the blocks across multiple servers for storage. In one aspect, subsets of the blocks are allocated to respective primary servers, a code of a first type is applied to the subsets of the blocks to expand the subsets by generating one or more additional blocks for each subset, and the expanded subsets of the blocks are stored on the respective primary servers. A code of a second type is applied to groups of blocks each including one block from each of the expanded subsets to expand the groups by generating one or more additional blocks for each group, and the one or more additional blocks for each expanded group are stored on respective secondary servers. The first and second codes are advantageously configured to provide security against an adversary that is able to corrupt all of the servers over multiple periods of time but fewer than all of the servers within any particular one of the periods of time.
摘要翻译：客户端设备或其他处理设备将文件分成块并将块分布在多个服务器上进行存储。在一个方面，将块的子集分配给相应的主服务器，将第一类型的代码应用于块的子集，以通过为每个子集生成一个或多个附加块来扩展子集，并且扩展子集块存储在相应的主服务器上。第二类型的代码被应用于每个包括来自每个扩展子集的一个块的块组，以通过为每个组生成一个或多个附加块来扩展组，并且存储每个扩展组的一个或多个附加块在相应的辅助服务器上。有利地，第一和第二代码被配置为提供抵御对手的安全性，所述对手能够在多个时间段内破坏所有服务器，但是比所述时间段内的任何特定时间段内的所有服务器更少。

12. 发明申请

US20150242616A1 Credential recovery with the assistance of trusted entities 有权
标题翻译：在信任实体的协助下进行凭证恢复
公开(公告)号：US20150242616A1
公开(公告)日：2015-08-27
申请号：US14190195
申请日：2014-02-26
申请人： Alina Oprea , Kevin D. Bowers , Nikolaos Triandopoulos , Ting-Fang Yen , Ari Juels
发明人： Alina Oprea , Kevin D. Bowers , Nikolaos Triandopoulos , Ting-Fang Yen , Ari Juels
IPC分类号： G06F21/44
CPC分类号： G06F21/445 , G06F21/32 , G06F21/34 , G06F2221/2113 , G06F2221/2131
摘要： There is disclosed a method for use in credential recovery. In one exemplary embodiment, the method comprises determining a policy that requires at least one trusted entity to verify the identity of a first entity in order to facilitate credential recovery. The method also comprises receiving at least one communication that confirms verification of the identity of the first entity by at least one trusted entity. The method further comprises permitting credential recovery based on the received verification.
摘要翻译：公开了用于证书恢复的方法。在一个示例性实施例中，该方法包括确定需要至少一个可信实体来验证第一实体的身份以便于凭证恢复的策略。该方法还包括接收由至少一个可信实体验证第一实体的身份的至少一个通信。该方法还包括基于所接收的验证允许凭证恢复。

13. 发明授权

US08984384B1 Distributed storage system with efficient handling of file updates 有权
标题翻译：具有高效处理文件更新的分布式存储系统
公开(公告)号：US08984384B1
公开(公告)日：2015-03-17
申请号：US12827097
申请日：2010-06-30
申请人： Ari Juels , Kevin D. Bowers , Alina Oprea
发明人： Ari Juels , Kevin D. Bowers , Alina Oprea
IPC分类号： G06F21/62 , H04L29/08
CPC分类号： G06F21/6218 , G06F21/64 , H04L67/1097
摘要： A client device or other processing device comprises a file encoding module, with the file encoding module being configured to separate a file into a plurality of sets of file blocks, to assign sets of the file blocks to respective ones of a plurality of servers, to define a plurality of parity groups each comprising a different subset of the plurality of servers, to assign, for each of the servers, each of its file blocks to at least one of the defined parity groups, and to compute one or more parity blocks for each of the parity groups. The file blocks are stored on their associated servers, and the parity blocks computed for each of the parity groups are stored on respective ones of the servers other than those within that parity group. Such an arrangement advantageously ensures that only a limited number of parity block recomputations are required in response to file block updates.
摘要翻译：客户端设备或其他处理设备包括文件编码模块，文件编码模块被配置为将文件分离成多组文件块，以将多个文件块的集合分配给多个服务器中的相应的服务器，定义多个奇偶校验组，每个奇偶校验组包括多个服务器的不同子集，为每个服务器将其每个文件块分配给所定义的奇偶校验组中的至少一个，并计算一个或多个奇偶校验块用于每个奇偶校验组。文件块存储在其相关联的服务器上，并且为每个奇偶校验组计算的奇偶校验块存储在除了该奇偶校验组内的那些服务器之外的相应服务器上。这种安排有利地确保了响应于文件块更新仅需要有限数量的奇偶校验块重新计算。

14. 发明授权

US08813234B1 Graph-based approach to deterring persistent security threats 有权
标题翻译：以图为基础的方法来阻止持续的安全威胁
公开(公告)号：US08813234B1
公开(公告)日：2014-08-19
申请号：US13171759
申请日：2011-06-29
申请人： Kevin D. Bowers , Marten E. van Dijk , Ari Juels , Alina M. Oprea , Ronald L. Rivest , Nikolaos Triandopoulos
发明人： Kevin D. Bowers , Marten E. van Dijk , Ari Juels , Alina M. Oprea , Ronald L. Rivest , Nikolaos Triandopoulos
IPC分类号： G06F21/00
CPC分类号： G06F21/552 , H04L63/1408 , H04L63/1441 , H04L63/20
摘要： A processing device comprises a processor coupled to a memory and implements a graph-based approach to protection of a system comprising information technology infrastructure from a persistent security threat. Attack-escalation states of the persistent security threat are assigned to respective nodes in a graph, and defensive costs for preventing transitions between pairs of the nodes are assigned to respective edges in the graph. A minimum cut of the graph is computed, and a defensive strategy is determined based on the minimum cut. The system comprising information technology infrastructure subject to the persistent security threat is configured in accordance with the defensive strategy in order to deter the persistent security threat.
摘要翻译：处理设备包括处理器，其耦合到存储器并且实现基于图的方法以保护包括信息技术基础设施的系统免受持久的安全威胁。持续性安全威胁的攻击升级状态被分配给图中的相应节点，并且用于防止节点对之间的转换的防御成本被分配给图中的相应边缘。计算图的最小值，并根据最小值确定防御策略。包含受到持续安全威胁的信息技术基础架构的系统是根据防御策略配置的，以便阻止持续的安全威胁。

15. 发明授权

US08752146B1 Providing authentication codes which include token codes and biometric factors 有权
标题翻译：提供包括令牌代码和生物特征因子的认证码
公开(公告)号：US08752146B1
公开(公告)日：2014-06-10
申请号：US13434280
申请日：2012-03-29
申请人： Marten van Dijk , Kevin D. Bowers , Samuel Curry , Sean P. Doyle , Nikolaos Triandopoulos , Riaz Zolfonoon
发明人： Marten van Dijk , Kevin D. Bowers , Samuel Curry , Sean P. Doyle , Nikolaos Triandopoulos , Riaz Zolfonoon
IPC分类号： G06F21/00 , H04L29/06 , H04L9/32 , H04L9/08 , G06F21/32
CPC分类号： H04L63/0861 , G06F21/32 , G06F21/43 , H04L9/3215 , H04L9/3228 , H04L9/3231 , H04L63/0838 , H04L63/18
摘要： A technique provides authentication codes to authenticate a user to an authentication server. The technique involves generating, by an electronic apparatus (e.g., a smart phone, a tablet, a laptop, etc.), token codes from a cryptographic key. The technique further involves obtaining biometric measurements from a user, and outputting composite passcodes as the authentication codes. The composite passcodes include the token codes and biometric factors based on the biometric measurements. Additionally, the token codes and the biometric factors of the composite passcodes operate as authentication inputs to user authentication operations performed by the authentication server. In some arrangements, the biometric factors are results of facial recognition (e.g., via a camera), voice recognition (e.g., via a microphone), gate recognition (e.g., via an accelerometer), touch recognition and/or typing recognition (e.g., via a touchscreen or keyboard), combinations thereof, etc.
摘要翻译：一种技术提供认证码以将用户认证给认证服务器。该技术涉及通过电子设备（例如，智能电话，平板电脑，笔记本电脑等）从加密密钥生成令牌代码。该技术还涉及从用户获取生物测量，并输出复合密码作为认证码。复合密码包括基于生物特征测量的令牌代码和生物特征因子。此外，复合密码的令牌代码和生物特征因子作为认证服务器执行的用户认证操作的认证输入。在一些布置中，生物特征因子是面部识别（例如，经由相机），语音识别（例如，经由麦克风），门识别（例如，经由加速度计），触摸识别和/或打字识别（例如，通过触摸屏或键盘），其组合等

16. 发明授权

US08381062B1 Proof of retrievability for archived files 有权
标题翻译：归档文件的可检索性证明
公开(公告)号：US08381062B1
公开(公告)日：2013-02-19
申请号：US12115145
申请日：2008-05-05
申请人： Ari Juels , Burton S. Kaliski, Jr. , Kevin D. Bowers , Alina M. Oprea
发明人： Ari Juels , Burton S. Kaliski, Jr. , Kevin D. Bowers , Alina M. Oprea
IPC分类号： G06F11/00
CPC分类号： G06F21/602 , G06F11/10 , G06F21/64 , H04L9/3221 , H04L63/123 , H04L63/126
摘要： A proof of retrievability (POR) mechanism is applicable to a file for providing assurances of file possession to a requesting client by transmitting only a portion of the entire file. The client compares or examines validation values returned from predetermined validation segments of the file with previously computed validation attributes for assessing the existence of the file. Since the archive server does not have access to the validation function prior to the request, or challenge, from the client, the archive server cannot anticipate the validation values expected from the validation function. Further, since the validation segments from which the validation attributes, and hence the validation values were derived, are also unknown to the server, the server cannot anticipate which portions of the file will be employed for validation.
摘要翻译：可检索性（POR）机制的证明适用于通过传送整个文件的一部分来向请求客户端提供文件拥有保证的文件。客户端比较或检查从文件的预定验证段返回的验证值与先前计算的验证属性，以评估文件的存在。由于存档服务器在请求之前无法访问验证函数，或者从客户端询问，归档服务器无法预期验证函数预期的验证值。此外，由于从其导出验证属性以及因此导出验证值的验证段对于服务器而言也是未知的，所以服务器不能预期该文件的哪些部分将用于验证。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式