专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08555054B2 Apparatus and methods for protecting network resources 有权
标题翻译：用于保护网络资源的装置和方法
公开(公告)号：US08555054B2
公开(公告)日：2013-10-08
申请号：US12577684
申请日：2009-10-12
申请人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Simon E. M. Barber , Diana K. Smetters , Jeffrey D. Abramowitz , Andrea Peiro
发明人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Simon E. M. Barber , Diana K. Smetters , Jeffrey D. Abramowitz , Andrea Peiro
IPC分类号： H04L29/06
CPC分类号： H04L63/0823 , G06F21/57 , H04L9/006 , H04L9/3263 , H04L2209/80
摘要： Apparatus and methods are provided for protecting network resources, particularly in association with automatic provisioning of new client devices. A global PKI (Public Key Infrastructure) scheme is rooted at a globally available server. Roots of PKIs for individual organizations also reside at this server or another globally available resource. To enable access to an organization's network, one or more authenticators are deployed, which may be co-located with access points or other network components. After a client device enabler (CDE) and an authenticator perform mutual authentication with certificates issued within the global PKI, the CDE is used to provision a new client device for the organization. After the client is provisioned, it and an authenticator use certificates issued within the per-organization PKI to allow the client access to the network.
摘要翻译：提供了用于保护网络资源的装置和方法，特别是与新的客户端设备的自动配置相关联。全球PKI（公钥基础设施）方案植根于全球可用的服务器。单个组织的PKI的根源也驻留在此服务器或其他全球可用资源。为了访问组织的网络，部署了一个或多个认证器，它们可能与接入点或其他网络组件位于同一位置。在客户端设备启用器（CDE）和认证器与全局PKI中颁发的证书执行相互验证之后，CDE用于为组织设置新的客户端设备。在客户端被配置之后，它和认证者使用在每个组织PKI内颁发的证书来允许客户端访问网络。

2. 发明申请

US20110087882A1 APPARATUS AND METHODS FOR PROTECTING NETWORK RESOURCES 有权
标题翻译：用于保护网络资源的装置和方法
公开(公告)号：US20110087882A1
公开(公告)日：2011-04-14
申请号：US12577684
申请日：2009-10-12
申请人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Simon E. M. Barber , Diana K. Smetters , Jeffrey D. Abramowitz , Andrea Peiro
发明人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Simon E. M. Barber , Diana K. Smetters , Jeffrey D. Abramowitz , Andrea Peiro
IPC分类号： H04L9/32
CPC分类号： H04L63/0823 , G06F21/57 , H04L9/006 , H04L9/3263 , H04L2209/80
摘要： Apparatus and methods are provided for protecting network resources, particularly in association with automatic provisioning of new client devices. A global PKI (Public Key Infrastructure) scheme is rooted at a globally available server. Roots of PKIs for individual organizations also reside at this server or another globally available resource. To enable access to an organization's network, one or more authenticators are deployed, which may be co-located with access points or other network components. After a client device enabler (CDE) and an authenticator perform mutual authentication with certificates issued within the global PKI, the CDE is used to provision a new client device for the organization. After the client is provisioned, it and an authenticator use certificates issued within the per-organization PKI to allow the client access to the network.
摘要翻译：提供了用于保护网络资源的装置和方法，特别是与新的客户端设备的自动配置相关联。全球PKI（公钥基础设施）方案植根于全球可用的服务器。单个组织的PKI的根源也驻留在此服务器或其他全球可用资源。为了访问组织的网络，部署了一个或多个认证器，它们可能与接入点或其他网络组件位于同一位置。在客户端设备启用器（CDE）和认证器与全局PKI中颁发的证书执行相互验证之后，CDE用于为组织设置新的客户端设备。在客户端被配置之后，它和认证者使用在每个组织PKI内颁发的证书来允许客户端访问网络。

3. 发明授权

US08131850B2 Apparatus and methods for managing network resources 有权
标题翻译：用于管理网络资源的装置和方法
公开(公告)号：US08131850B2
公开(公告)日：2012-03-06
申请号：US12577674
申请日：2009-10-12
申请人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Jeffrey D. Abramowitz , Andrea Peiro
发明人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Jeffrey D. Abramowitz , Andrea Peiro
IPC分类号： G06F15/173
CPC分类号： G06Q50/10 , G06Q10/06
摘要： Apparatus and methods are provided for managing network resources. A central unified services and device management framework is operated to simultaneously manage various types of resources on behalf of multiple organizations. Within the framework, a common management layer provides services (e.g., account management, event logging) common to multiple different services and devices. Within a specific management layer, separate subsystems are implemented for different devices or types of devices. The device-specific subsystems invoke device-independent functional modules through primitives exposed by the common management layer. A given organization may establish tiered logical constructs to group resources deployed at different physical locations (e.g., cities, offices) or within different subdivisions of the organizations (e.g., subsidiaries, departments).
摘要翻译：提供了用于管理网络资源的装置和方法。运行中央统一服务和设备管理框架，代表多个组织同时管理各种资源。在该框架内，公共管理层提供对多个不同服务和设备共同的服务（例如，帐户管理，事件记录）。在特定管理层内，为不同设备或类型的设备实现独立的子系统。特定于设备的子系统通过由公共管理层公开的原语来调用与设备无关的功能模块。给定的组织可以建立分层的逻辑结构来组合在不同物理位置（例如，城市，办公室）或组织（例如，子公司，部门）的不同分部内部署的资源。

4. 发明申请

US20110087766A1 APPARATUS AND METHODS FOR MANAGING NETWORK RESOURCES 有权
标题翻译：用于管理网络资源的设备和方法
公开(公告)号：US20110087766A1
公开(公告)日：2011-04-14
申请号：US12577674
申请日：2009-10-12
申请人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Jeffrey D. Abramowitz , Andrea Peiro
发明人： Ted T. Kuo , Li-Jen Wang , Bo-chieh Yang , Jeffrey D. Abramowitz , Andrea Peiro
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： G06Q50/10 , G06Q10/06
摘要： Apparatus and methods are provided for managing network resources. A central unified services and device management framework is operated to simultaneously manage various types of resources on behalf of multiple organizations. Within the framework, a common management layer provides services (e.g., account management, event logging) common to multiple different services and devices. Within a specific management layer, separate subsystems are implemented for different devices or types of devices. The device-specific subsystems invoke device-independent functional modules through primitives exposed by the common management layer. A given organization may establish tiered logical constructs to group resources deployed at different physical locations (e.g., cities, offices) or within different subdivisions of the organizations (e.g., subsidiaries, departments).
摘要翻译：提供了用于管理网络资源的装置和方法。运行中央统一服务和设备管理框架，代表多个组织同时管理各种资源。在该框架内，公共管理层提供对多个不同服务和设备共同的服务（例如，帐户管理，事件记录）。在特定管理层内，为不同设备或类型的设备实现独立的子系统。特定于设备的子系统通过由公共管理层公开的原语来调用与设备无关的功能模块。给定的组织可以建立分层的逻辑结构来组合在不同物理位置（例如，城市，办公室）或组织（例如，子公司，部门）的不同分部内部署的资源。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式