KR101132148B1 - 키 관리 프로토콜에 권한부여의 클라이언트 승인을 제공하기 위한 시스템 및 방법 - Google Patents
키 관리 프로토콜에 권한부여의 클라이언트 승인을 제공하기 위한 시스템 및 방법 Download PDFInfo
- Publication number
- KR101132148B1 KR101132148B1 KR1020047012068A KR20047012068A KR101132148B1 KR 101132148 B1 KR101132148 B1 KR 101132148B1 KR 1020047012068 A KR1020047012068 A KR 1020047012068A KR 20047012068 A KR20047012068 A KR 20047012068A KR 101132148 B1 KR101132148 B1 KR 101132148B1
- Authority
- KR
- South Korea
- Prior art keywords
- client
- ticket
- copy
- authorization data
- content
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Lifetime
Links
- 238000013475 authorization Methods 0.000 title claims abstract description 173
- 238000000034 method Methods 0.000 title claims abstract description 52
- 238000012795 verification Methods 0.000 title description 3
- 230000004044 response Effects 0.000 claims description 35
- 238000004891 communication Methods 0.000 claims description 8
- 230000008569 process Effects 0.000 description 27
- 238000010586 diagram Methods 0.000 description 10
- 238000012545 processing Methods 0.000 description 7
- 239000000284 extract Substances 0.000 description 6
- 238000007726 management method Methods 0.000 description 6
- 230000008859 change Effects 0.000 description 4
- 230000008901 benefit Effects 0.000 description 3
- 230000006399 behavior Effects 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 238000012790 confirmation Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Storage Device Security (AREA)
- Communication Control (AREA)
- Computer And Data Communications (AREA)
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US10/067,446 | 2002-02-04 | ||
| US10/067,446 US7231663B2 (en) | 2002-02-04 | 2002-02-04 | System and method for providing key management protocol with client verification of authorization |
| PCT/US2003/000084 WO2003067801A2 (en) | 2002-02-04 | 2003-01-02 | Key management with client verification of authorization |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| KR20040101219A KR20040101219A (ko) | 2004-12-02 |
| KR101132148B1 true KR101132148B1 (ko) | 2012-04-03 |
Family
ID=27658851
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| KR1020047012068A Expired - Lifetime KR101132148B1 (ko) | 2002-02-04 | 2003-01-02 | 키 관리 프로토콜에 권한부여의 클라이언트 승인을 제공하기 위한 시스템 및 방법 |
Country Status (10)
| Country | Link |
|---|---|
| US (1) | US7231663B2 (enExample) |
| EP (1) | EP1486025B1 (enExample) |
| JP (1) | JP4674044B2 (enExample) |
| KR (1) | KR101132148B1 (enExample) |
| CN (1) | CN1640092A (enExample) |
| AT (1) | ATE530973T1 (enExample) |
| AU (1) | AU2003207444A1 (enExample) |
| CA (1) | CA2475150C (enExample) |
| MX (1) | MXPA04007547A (enExample) |
| WO (1) | WO2003067801A2 (enExample) |
Families Citing this family (45)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7853983B2 (en) * | 2002-07-29 | 2010-12-14 | Bea Systems, Inc. | Communicating data from a data producer to a data receiver |
| US7900247B2 (en) | 2005-03-14 | 2011-03-01 | Microsoft Corporation | Trusted third party authentication for web services |
| US7937753B2 (en) * | 2005-03-25 | 2011-05-03 | Microsoft Corporation | Method and apparatus for distributed information management |
| EP1833222A1 (en) * | 2006-03-10 | 2007-09-12 | Abb Research Ltd. | Access control protocol for embedded devices |
| US8185576B2 (en) | 2006-03-14 | 2012-05-22 | Altnet, Inc. | Filter for a distributed network |
| CN101051898B (zh) * | 2006-04-05 | 2010-04-21 | 华为技术有限公司 | 无线网络端到端通信认证方法及其装置 |
| US8161164B2 (en) * | 2006-04-28 | 2012-04-17 | Microsoft Corporation | Authorizing service requests in multi-tiered applications |
| JP5464794B2 (ja) * | 2006-07-24 | 2014-04-09 | コニカミノルタ株式会社 | ネットワーク管理方法およびネットワーク管理システム |
| JP4983165B2 (ja) * | 2006-09-05 | 2012-07-25 | ソニー株式会社 | 通信システムおよび通信方法、情報処理装置および方法、デバイス、プログラム、並びに記録媒体 |
| US20080098120A1 (en) * | 2006-10-23 | 2008-04-24 | Microsoft Corporation | Authentication server auditing of clients using cache provisioning |
| EP1965558B1 (en) * | 2007-03-01 | 2011-10-19 | Mitsubishi Electric Corporation | Method, apparatuses and computer program product for robust digest authentication using two types of nonce values |
| JP4448167B2 (ja) * | 2007-12-28 | 2010-04-07 | フェリカネットワークス株式会社 | 通信デバイス、リモートサーバおよび端末装置 |
| CN101436930A (zh) * | 2007-11-16 | 2009-05-20 | 华为技术有限公司 | 一种密钥分发的方法、系统和设备 |
| JP4470071B2 (ja) * | 2008-03-03 | 2010-06-02 | フェリカネットワークス株式会社 | カード発行システム、カード発行サーバ、カード発行方法およびプログラム |
| US8621598B2 (en) * | 2008-03-12 | 2013-12-31 | Intuit Inc. | Method and apparatus for securely invoking a rest API |
| US8462954B2 (en) * | 2008-05-30 | 2013-06-11 | Motorola Mobility Llc | Content encryption using at least one content pre-key |
| US8548467B2 (en) | 2008-09-12 | 2013-10-01 | Qualcomm Incorporated | Ticket-based configuration parameters validation |
| US8862872B2 (en) * | 2008-09-12 | 2014-10-14 | Qualcomm Incorporated | Ticket-based spectrum authorization and access control |
| US9148335B2 (en) * | 2008-09-30 | 2015-09-29 | Qualcomm Incorporated | Third party validation of internet protocol addresses |
| US9436763B1 (en) * | 2010-04-06 | 2016-09-06 | Facebook, Inc. | Infrastructure enabling intelligent execution and crawling of a web application |
| US9432373B2 (en) | 2010-04-23 | 2016-08-30 | Apple Inc. | One step security system in a network storage system |
| CA2830285C (en) * | 2011-03-18 | 2016-11-08 | Blackberry Limited | Keyed pv signatures |
| WO2012130727A1 (en) * | 2011-03-29 | 2012-10-04 | Inventio Ag | Distribution of premises access information |
| US10333711B2 (en) * | 2011-06-17 | 2019-06-25 | Microsoft Technology Licensing, Llc | Controlling access to protected objects |
| US9026784B2 (en) * | 2012-01-26 | 2015-05-05 | Mcafee, Inc. | System and method for innovative management of transport layer security session tickets in a network environment |
| US9137235B2 (en) * | 2012-03-23 | 2015-09-15 | Cloudpath Networks, Inc. | System and method for providing a certificate based on list membeship |
| CN104468074A (zh) * | 2013-09-18 | 2015-03-25 | 北京三星通信技术研究有限公司 | 应用程序之间认证的方法及设备 |
| US9729538B2 (en) * | 2014-09-01 | 2017-08-08 | Microsoft Israel Research And Development (2002) Ltd | System, method and process for detecting advanced and targeted attacks with the recoupling of kerberos authentication and authorization |
| CN104836802B (zh) * | 2015-04-24 | 2018-04-06 | 深圳墨麟科技股份有限公司 | 基于登陆服务器的登陆链接方法及系统 |
| EP3258375A1 (en) * | 2015-05-07 | 2017-12-20 | Cyber-Ark Software Ltd. | Systems and methods for detecting and reacting to malicious activity in computer networks |
| US11057364B2 (en) * | 2015-06-15 | 2021-07-06 | Airwatch Llc | Single sign-on for managed mobile devices |
| US10171447B2 (en) | 2015-06-15 | 2019-01-01 | Airwatch Llc | Single sign-on for unmanaged mobile devices |
| US10944738B2 (en) | 2015-06-15 | 2021-03-09 | Airwatch, Llc. | Single sign-on for managed mobile devices using kerberos |
| US10812464B2 (en) | 2015-06-15 | 2020-10-20 | Airwatch Llc | Single sign-on for managed mobile devices |
| ES2828948T3 (es) * | 2015-07-02 | 2021-05-28 | Telefonica Cibersecurity & Cloud Tech S L U | Método, sistema y productos de programa informático para posibilitar de forma segura una funcionalidad en - red a lo largo de sesiones de datos cifradas |
| US9762563B2 (en) | 2015-10-14 | 2017-09-12 | FullArmor Corporation | Resource access system and method |
| US9509684B1 (en) * | 2015-10-14 | 2016-11-29 | FullArmor Corporation | System and method for resource access with identity impersonation |
| US9450944B1 (en) | 2015-10-14 | 2016-09-20 | FullArmor Corporation | System and method for pass-through authentication |
| US11063753B2 (en) | 2019-03-20 | 2021-07-13 | Arris Enterprises Llc | Secure distribution of device key sets over a network |
| JP7395938B2 (ja) * | 2019-10-09 | 2023-12-12 | 富士フイルムビジネスイノベーション株式会社 | 情報処理装置、情報処理システム及びプログラム |
| CN113037477A (zh) * | 2021-03-08 | 2021-06-25 | 北京工业大学 | 一种基于Intel SGX的Kerberos安全增强方法 |
| GB2607289A (en) * | 2021-05-28 | 2022-12-07 | Mastercard International Inc | Data management and encryption in a distributed computing system |
| CN113922952B (zh) * | 2021-09-30 | 2024-03-01 | 恒众创美(深圳)发展合伙企业(有限合伙) | 访问请求响应方法、装置、计算机设备和存储介质 |
| US20250080534A1 (en) * | 2023-08-28 | 2025-03-06 | International Business Machines Corporation | Command to provide shared confidential data |
| CN120856474A (zh) * | 2025-09-22 | 2025-10-28 | 天翼视联科技股份有限公司 | 基于消息队列遥测传输协议的访问认证方法及系统 |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5757920A (en) * | 1994-07-18 | 1998-05-26 | Microsoft Corporation | Logon certification |
Family Cites Families (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2519390B2 (ja) | 1992-09-11 | 1996-07-31 | インターナショナル・ビジネス・マシーンズ・コーポレイション | デ―タ通信方法及び装置 |
| US5590199A (en) | 1993-10-12 | 1996-12-31 | The Mitre Corporation | Electronic information network user authentication and authorization system |
| US5455953A (en) | 1993-11-03 | 1995-10-03 | Wang Laboratories, Inc. | Authorization system for obtaining in single step both identification and access rights of client to server directly from encrypted authorization ticket |
| US6301661B1 (en) | 1997-02-12 | 2001-10-09 | Verizon Labortories Inc. | Enhanced security for applications employing downloadable executable content |
| JP2000010930A (ja) * | 1998-06-24 | 2000-01-14 | Hitachi Ltd | ネットワークシステムでのアクセス制御方法 |
| US7340600B1 (en) * | 2000-01-14 | 2008-03-04 | Hewlett-Packard Development Company, L.P. | Authorization infrastructure based on public key cryptography |
| US6993652B2 (en) * | 2001-10-05 | 2006-01-31 | General Instrument Corporation | Method and system for providing client privacy when requesting content from a public server |
-
2002
- 2002-02-04 US US10/067,446 patent/US7231663B2/en not_active Expired - Lifetime
-
2003
- 2003-01-02 CA CA2475150A patent/CA2475150C/en not_active Expired - Lifetime
- 2003-01-02 EP EP03705651A patent/EP1486025B1/en not_active Expired - Lifetime
- 2003-01-02 AT AT03705651T patent/ATE530973T1/de not_active IP Right Cessation
- 2003-01-02 MX MXPA04007547A patent/MXPA04007547A/es active IP Right Grant
- 2003-01-02 CN CNA038045613A patent/CN1640092A/zh active Pending
- 2003-01-02 JP JP2003567021A patent/JP4674044B2/ja not_active Expired - Lifetime
- 2003-01-02 AU AU2003207444A patent/AU2003207444A1/en not_active Abandoned
- 2003-01-02 KR KR1020047012068A patent/KR101132148B1/ko not_active Expired - Lifetime
- 2003-01-02 WO PCT/US2003/000084 patent/WO2003067801A2/en not_active Ceased
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5757920A (en) * | 1994-07-18 | 1998-05-26 | Microsoft Corporation | Logon certification |
Also Published As
| Publication number | Publication date |
|---|---|
| AU2003207444A1 (en) | 2003-09-02 |
| JP4674044B2 (ja) | 2011-04-20 |
| AU2003207444A8 (en) | 2003-09-02 |
| ATE530973T1 (de) | 2011-11-15 |
| CA2475150A1 (en) | 2003-08-14 |
| MXPA04007547A (es) | 2004-11-10 |
| CA2475150C (en) | 2013-03-26 |
| US7231663B2 (en) | 2007-06-12 |
| WO2003067801A3 (en) | 2004-10-14 |
| US20030149871A1 (en) | 2003-08-07 |
| CN1640092A (zh) | 2005-07-13 |
| JP2005517347A (ja) | 2005-06-09 |
| EP1486025B1 (en) | 2011-10-26 |
| EP1486025A2 (en) | 2004-12-15 |
| EP1486025A4 (en) | 2005-08-03 |
| KR20040101219A (ko) | 2004-12-02 |
| WO2003067801A2 (en) | 2003-08-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR101132148B1 (ko) | 키 관리 프로토콜에 권한부여의 클라이언트 승인을 제공하기 위한 시스템 및 방법 | |
| US6993652B2 (en) | Method and system for providing client privacy when requesting content from a public server | |
| CA2475216C (en) | Method and system for providing third party authentification of authorization | |
| US7610617B2 (en) | Authentication system for networked computer applications | |
| US8306228B2 (en) | Universal secure messaging for cryptographic modules | |
| CN100546244C (zh) | 因特网上用于安全内容递送的密钥管理协议与认证系统 | |
| US20030188156A1 (en) | Using authentication certificates for authorization | |
| EP1249983A2 (en) | Methods and arrangements for protecting information in forwarded authentication messages | |
| CN113886781B (zh) | 基于区块链的多重认证加密方法、系统、电子设备及介质 | |
| JPH05298174A (ja) | 遠隔ファイルアクセスシステム | |
| WO2005055516A1 (en) | Method and apparatus for data certification by a plurality of users using a single key pair |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PA0105 | International application |
Patent event date: 20040804 Patent event code: PA01051R01D Comment text: International Patent Application |
|
| PG1501 | Laying open of application | ||
| A201 | Request for examination | ||
| PA0201 | Request for examination |
Patent event code: PA02012R01D Patent event date: 20080102 Comment text: Request for Examination of Application |
|
| E902 | Notification of reason for refusal | ||
| PE0902 | Notice of grounds for rejection |
Comment text: Notification of reason for refusal Patent event date: 20100129 Patent event code: PE09021S01D |
|
| E902 | Notification of reason for refusal | ||
| PE0902 | Notice of grounds for rejection |
Comment text: Notification of reason for refusal Patent event date: 20101202 Patent event code: PE09021S01D |
|
| E701 | Decision to grant or registration of patent right | ||
| PE0701 | Decision of registration |
Patent event code: PE07011S01D Comment text: Decision to Grant Registration Patent event date: 20111230 |
|
| GRNT | Written decision to grant | ||
| PR0701 | Registration of establishment |
Comment text: Registration of Establishment Patent event date: 20120326 Patent event code: PR07011E01D |
|
| PR1002 | Payment of registration fee |
Payment date: 20120327 End annual number: 3 Start annual number: 1 |
|
| PG1601 | Publication of registration | ||
| FPAY | Annual fee payment |
Payment date: 20150309 Year of fee payment: 4 |
|
| PR1001 | Payment of annual fee |
Payment date: 20150309 Start annual number: 4 End annual number: 4 |
|
| FPAY | Annual fee payment |
Payment date: 20160310 Year of fee payment: 5 |
|
| PR1001 | Payment of annual fee |
Payment date: 20160310 Start annual number: 5 End annual number: 5 |
|
| FPAY | Annual fee payment |
Payment date: 20170317 Year of fee payment: 6 |
|
| PR1001 | Payment of annual fee |
Payment date: 20170317 Start annual number: 6 End annual number: 6 |
|
| FPAY | Annual fee payment |
Payment date: 20180309 Year of fee payment: 7 |
|
| PR1001 | Payment of annual fee |
Payment date: 20180309 Start annual number: 7 End annual number: 7 |
|
| FPAY | Annual fee payment |
Payment date: 20190314 Year of fee payment: 8 |
|
| PR1001 | Payment of annual fee |
Payment date: 20190314 Start annual number: 8 End annual number: 8 |
|
| FPAY | Annual fee payment |
Payment date: 20200313 Year of fee payment: 9 |
|
| PR1001 | Payment of annual fee |
Payment date: 20200313 Start annual number: 9 End annual number: 9 |
|
| PR1001 | Payment of annual fee |
Payment date: 20210317 Start annual number: 10 End annual number: 10 |
|
| PC1801 | Expiration of term |
Termination date: 20230702 Termination category: Expiration of duration |