KR20140097274A - 보안 자원에 대한 애플리케이션 액세스를 허가하는 기법 - Google Patents

보안 자원에 대한 애플리케이션 액세스를 허가하는 기법 Download PDF

Info

Publication number
KR20140097274A
KR20140097274A KR20147014809A KR20147014809A KR20140097274A KR 20140097274 A KR20140097274 A KR 20140097274A KR 20147014809 A KR20147014809 A KR 20147014809A KR 20147014809 A KR20147014809 A KR 20147014809A KR 20140097274 A KR20140097274 A KR 20140097274A
Authority
KR
South Korea
Prior art keywords
application
request
user
permission
computer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
KR20147014809A
Other languages
English (en)
Korean (ko)
Inventor
로버트 맥키 하워드
티터스 콘스탄틴 미론
윌리엄 데이비드 테일러
샤오펭 쥬
이레이 아이딘
벤카테쉬 비라라가반
Original Assignee
마이크로소프트 코포레이션
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 마이크로소프트 코포레이션 filed Critical 마이크로소프트 코포레이션
Publication of KR20140097274A publication Critical patent/KR20140097274A/ko
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)
  • Exchange Systems With Centralized Control (AREA)
KR20147014809A 2011-12-01 2012-11-21 보안 자원에 대한 애플리케이션 액세스를 허가하는 기법 Withdrawn KR20140097274A (ko)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US13/308,572 US9015807B2 (en) 2011-12-01 2011-12-01 Authorizing application access to secure resources
US13/308,572 2011-12-01
PCT/US2012/066167 WO2013081921A2 (en) 2011-12-01 2012-11-21 Authorizing application access to secure resources

Publications (1)

Publication Number Publication Date
KR20140097274A true KR20140097274A (ko) 2014-08-06

Family

ID=47696939

Family Applications (1)

Application Number Title Priority Date Filing Date
KR20147014809A Withdrawn KR20140097274A (ko) 2011-12-01 2012-11-21 보안 자원에 대한 애플리케이션 액세스를 허가하는 기법

Country Status (6)

Country Link
US (1) US9015807B2 (enExample)
EP (1) EP2786297B1 (enExample)
JP (1) JP6050374B2 (enExample)
KR (1) KR20140097274A (enExample)
CN (1) CN102938043B (enExample)
WO (1) WO2013081921A2 (enExample)

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9003556B2 (en) * 2013-02-28 2015-04-07 Facebook, Inc. Techniques for in-app user data authorization
JP2014191627A (ja) * 2013-03-27 2014-10-06 Fujitsu Ltd 端末装置、情報提供方法及び情報提供プログラム
US9276928B2 (en) 2013-06-15 2016-03-01 Microsoft Corporation Sending session tokens through passive clients
CN104954330B (zh) * 2014-03-27 2018-03-16 华为软件技术有限公司 一种对数据资源进行访问的方法、装置和系统
US10069832B2 (en) * 2014-11-14 2018-09-04 Google Llc Ephemeral applications
US10341342B2 (en) * 2015-02-05 2019-07-02 Carrier Corporation Configuration data based fingerprinting for access to a resource
US10102216B2 (en) * 2015-04-21 2018-10-16 Google Llc System for associating related digital assets
US11503035B2 (en) * 2017-04-10 2022-11-15 The University Of Memphis Research Foundation Multi-user permission strategy to access sensitive information
US9836596B2 (en) 2015-07-08 2017-12-05 Google Inc. Methods and systems for controlling permission requests for applications on a computing device
EP3320424B1 (en) * 2015-07-09 2021-10-20 Sensoriant, Inc. Method and system for creating adaptive user interfaces using user provided and controlled data
CN107103245B (zh) * 2016-02-23 2022-08-02 中兴通讯股份有限公司 文件的权限管理方法及装置
WO2018160687A1 (en) * 2017-03-01 2018-09-07 Carrier Corporation A framework for access provisioning in physical access control systems
EP3751812B1 (en) * 2019-06-10 2022-10-26 Nokia Technologies Oy Resource access

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6233684B1 (en) 1997-02-28 2001-05-15 Contenaguard Holdings, Inc. System for controlling the distribution and use of rendered digital works through watermaking
JPH11272769A (ja) * 1998-03-19 1999-10-08 Toshiba Corp 電子伝票承認機能を備えたコンピュータシステム及び電子伝票承認プログラムを記憶した記憶媒体
JP4177957B2 (ja) * 2000-03-22 2008-11-05 日立オムロンターミナルソリューションズ株式会社 アクセス制御システム
US7257815B2 (en) 2001-09-05 2007-08-14 Microsoft Corporation Methods and system of managing concurrent access to multiple resources
US7191469B2 (en) * 2002-05-13 2007-03-13 Green Border Technologies Methods and systems for providing a secure application environment using derived user accounts
US9621538B2 (en) 2002-07-10 2017-04-11 Hewlett-Packard Development Company, L.P. Secure resource access in a distributed environment
DE10324189A1 (de) 2003-05-28 2004-12-16 Robert Bosch Gmbh Verfahren zur Steuerung des Zugriffs auf eine Ressource einer Applikation in einer Datenverarbeitungseinrichtung
FR2856865A1 (fr) 2003-06-25 2004-12-31 France Telecom Attribution d'une autorisation d'acces a une ressource
US7650644B2 (en) 2003-11-25 2010-01-19 Sap Aktiengesellschaft Object-based access control
US7721328B2 (en) 2004-10-01 2010-05-18 Salesforce.Com Inc. Application identity design
JP4628149B2 (ja) 2005-03-14 2011-02-09 株式会社エヌ・ティ・ティ・ドコモ アクセス制御装置及びアクセス制御方法
WO2007043659A1 (ja) * 2005-10-13 2007-04-19 Ntt Docomo, Inc. 携帯端末、アクセス制御管理装置及びアクセス制御管理方法
JP5090790B2 (ja) * 2006-06-07 2012-12-05 株式会社リコー 機器、ライセンス管理方法、ライセンス管理プログラム、及びライセンス管理システム
US7885900B1 (en) 2006-10-31 2011-02-08 Polaris Solutions, LLC Grant management system and method
US8856859B2 (en) 2007-02-06 2014-10-07 Blackberry Limited System and method for setting application permissions
US8387152B2 (en) 2008-06-27 2013-02-26 Microsoft Corporation Attested content protection
US20100242097A1 (en) * 2009-03-20 2010-09-23 Wavemarket, Inc. System and method for managing application program access to a protected resource residing on a mobile device
US20130036455A1 (en) * 2010-01-25 2013-02-07 Nokia Siemens Networks Oy Method for controlling acess to resources
CN101794366B (zh) 2010-01-26 2012-10-03 恒生电子股份有限公司 一种核心业务系统访问权限控制方法和设备
CN102238007A (zh) * 2010-04-20 2011-11-09 阿里巴巴集团控股有限公司 第三方应用获得用户的会话令牌的方法、装置及系统
CN102200922B (zh) * 2011-04-06 2013-12-11 宇龙计算机通信科技(深圳)有限公司 应用程序安装方法和终端
US8646100B2 (en) * 2011-06-03 2014-02-04 Apple Inc. Method for executing an application in a restricted operating environment

Also Published As

Publication number Publication date
WO2013081921A3 (en) 2013-07-25
US20130145427A1 (en) 2013-06-06
WO2013081921A2 (en) 2013-06-06
CN102938043A (zh) 2013-02-20
EP2786297A4 (en) 2015-08-26
EP2786297B1 (en) 2019-04-24
JP2015505391A (ja) 2015-02-19
US9015807B2 (en) 2015-04-21
CN102938043B (zh) 2016-12-21
JP6050374B2 (ja) 2016-12-21
EP2786297A2 (en) 2014-10-08

Similar Documents

Publication Publication Date Title
EP2786297B1 (en) Authorizing application access to secure resources
US7669238B2 (en) Evidence-based application security
US10951661B1 (en) Secure programming interface hierarchies
US8474012B2 (en) Progressive consent
KR102862779B1 (ko) 제3-자 데이터 집계 서비스들을 통한 콘텐츠 제어
US7131143B1 (en) Evaluating initially untrusted evidence in an evidence-based security policy manager
CN102685089B (zh) 用于企业应用的可信设备声明的方法和客户机设备
US9418213B1 (en) Delegated permissions in a distributed electronic environment
JP5066578B2 (ja) レピュテーションベースの許可決定
US9466051B1 (en) Funding access in a distributed electronic environment
US9712542B1 (en) Permissions decisions in a service provider environment
US8776255B2 (en) Claims-aware role-based access control
US12401694B1 (en) Method and system for modifying and validating API requests
US8667578B2 (en) Web management authorization and delegation framework
US20150341368A1 (en) Authorized delegation of permissions
US12135813B2 (en) Managing privilege delegation on a computer device
US20140344903A1 (en) Authorization framework
JP2012138078A (ja) クラウド・コンピューティング環境に保管されたデータに関するきめ細かい任意アクセス制御の有効化のための方法、システム、およびコンピュータ・プログラム
US8819766B2 (en) Domain-based isolation and access control on dynamic objects
KR20080008335A (ko) 자격증명 기반 액세스 컨트롤을 위한 지원 명령문
TW201636840A (zh) 資源選擇性取用權提供技術
US11494479B2 (en) Authenticated component permissions framework
US12038734B2 (en) Managing access for a manufacturing system
CN102404315B (zh) 作为服务的可信设备声明
Liu et al. XML based X. 509 authorization in CERNET Grid

Legal Events

Date Code Title Description
PA0105 International application

Patent event date: 20140530

Patent event code: PA01051R01D

Comment text: International Patent Application

PG1501 Laying open of application
N231 Notification of change of applicant
PN2301 Change of applicant

Patent event date: 20150715

Comment text: Notification of Change of Applicant

Patent event code: PN23011R01D

PC1203 Withdrawal of no request for examination
WITN Application deemed withdrawn, e.g. because no request for examination was filed or no examination fee was paid