Information security – Access control or authentication – Network
Reexamination Certificate
1999-07-21
2009-11-17
Barron, Jr., Gilberto (Department: 2131)
Information security
Access control or authentication
Network
C713S153000, C713S168000, C715S239000
Reexamination Certificate
active
07620980
ABSTRACT:
A secure data broker has been developed, which provides a restricted message based data exchange between a client application and a secured information resource by allowing registered or verified messages to be brokered across a security barrier. In some configurations, both requests and responses are validated and brokered across the security barrier. In other configuration, either requests or responses are validated. To support validation, messages are formatted in accordance with a predefined message specification for at least part of a transaction path between a client application and an information resource accessed by the client application.
REFERENCES:
patent: 5602918 (1997-02-01), Chen et al.
patent: 5710883 (1998-01-01), Hong et al.
patent: 5710889 (1998-01-01), Clark et al.
patent: 5781729 (1998-07-01), Baker et al.
patent: 5790812 (1998-08-01), Frohmuller et al.
patent: 5805803 (1998-09-01), Birrell et al.
patent: 5815665 (1998-09-01), Teper et al.
patent: 5826014 (1998-10-01), Coley et al.
patent: 5835726 (1998-11-01), Shwed et al.
patent: 5870549 (1999-02-01), Bobo, II
patent: 5875296 (1999-02-01), Shi et al.
patent: 5905856 (1999-05-01), Ottensooser
patent: 5999625 (1999-12-01), Bellare et al.
patent: 6012098 (2000-01-01), Bayeh et al.
patent: 6092202 (2000-07-01), Veil et al.
patent: 6094657 (2000-07-01), Hailpern et al.
patent: 6115744 (2000-09-01), Robins et al.
patent: 6122666 (2000-09-01), Beurket et al.
patent: 6266666 (2001-07-01), Ireland et al.
patent: 6289461 (2001-09-01), Dixon
patent: 6442603 (2002-08-01), Borella
patent: 6466971 (2002-10-01), Humpleman et al.
patent: 6507856 (2003-01-01), Chen et al.
patent: 6542515 (2003-04-01), Kumar et al.
patent: 6549906 (2003-04-01), Austin et al.
patent: 2434223 (2007-07-01), None
patent: 96/42041 (1996-12-01), None
patent: 98/25373 (1998-06-01), None
patent: 98/57247 (1998-12-01), None
patent: WO 2006101402 (2006-09-01), None
Schneier, Bruce, Applied Cryptography, 1996, John Wiley & Sons Inc., Second Edition, p. 2.
Loh et al, Design and Implementation of an XML Firewall, 2006, IEEE, pp. 1147-1150.
Matthew Fuchs, Adapting Web services in a heterogeneous environment, 2004, IEEE, pp. 656-664.
Polivy et al, Authenticating distributed data using Web services and XML signatures, 2002, ACM, pp. 80-89.
Jessica Heasley, Securing XML data, 2004, ACM, pp. 112-114.
“X/Open Single Sign-On Service (XSSO)—Pluggable Authentication Modules,”Open Group Preliminary Specification, P702 ISBN 1-85912-144-6, Jun. 1997, 140 pages.
“Kerberos: An Authentication Service for Computer Networks,” USC/ISI Technical Report No. ISI/RS-94-399, 1994,IEEE Communications Magazine, vol. 32, No. 9, pp. 33-38, Sep. 1994, http:/
ii.isi.edu/publications/kerberos-neuman-tso.html, 12 pages.
“A White Paper on Authentication and Access Management Issues in Cross-organizational Use of Networked Information Resources,” Clifford Lynch, editor,Coalition for Networked Information, Apr. 14, 1998, http://www.cni.org/projects/authentication/authentication-wp.html, 28 pages.
“AutoSecure SSO, The single-point information security solution for heterogeneous environments,”Platinum Technology Brochure, downloaded May 3, 1999, http://www.platinum.com/products/brochure/sm/autosso/ssobroch.htm, 5 pages.
D. Davis and R. Swick, “Workstation Services and Kerberos Authentication at Project Athena,”MIT Laboratory for Computer Science Technical Memorandum #424, Mar. 17, 1989, 12 pages.
Don Davis, “Kerberos Plus RSA for World Wide Web Security,”Proc. 1st USENIX Workshop on Electronic Commerce, NYC, Aug. 3, 1995, 4 pages.
D. Geer and D. Davis, “Token-Mediated Certification and Electronic Commerce,”Proc. 2nd USENIX Workshop on Electronic Commerce, Oakland, CA, Nov. 1996, 11 pages.
“Enterprise Single Sign-On, Definitions and Approaches,”Platinum Technology White Paper, downloaded May 3, 1999, http://www.platinum.com/products/wp/wp—sso.htm, 7 pages.
“How Does Patrol CGI Server Work?” BMC Software, Houston, TX, downloaded Apr. 20, 1999, http://www.bmc.com/cgiserver/info/how—itworks.html, 3 pages.
“How to Develop a Network Security Policy, An Overview of Internetworking Site Security,”Sun Microsystems White Paper, Palo Alto, CA, downloaded Apr. 20, 1999, http://www.sun.com/security/sec.policy.wp.html, 23 pages.
“Kerberos and 3rd Party Authentication,” Version 2.1—Mar. 26, 1994,SecurityDynamics White Paper, Bedford, MA, http://www.securitydynamics.com/products/whitepaper/kerberos.html, 8 pages.
Mastering Security on the Internet for Competitive Advantage, Sun Microsystems, Palo Alto, CA, Aug. 1997, 47 pages.
Ari Medvinsky et al., “Public Key Utilizing Tickets for Application Servers (PKTAPP),”Cybersafe Corporation Internet-Draft, Common Authentication Technology Working Group, Issaquah, WA, Mar. 1998, http://www.ietf.org/internet-drafts/draft-ietf-cat-pktapp-01.txt, 6 pages.
“Optimizing Internet/Intranet Services with Patrol CGI Server,”BMC Software White Paper, Houston, TX, downloaded Apr. 20, 1999, http://www.bmc.com/cgiserver/info/cgawp/html. 15 pages.
“Platinum AutoSecure Single Sign On (AutoSecure SSO),”Platinum Fact Sheet, downloaded May 3, 1999, http://www.platinum.com/products/factsht/assso—fs.htm, 3 pages.
“Products Application Server,”Art Technology Group Product Overview Developer Workbench, downloaded Apr. 21, 1999, http://www.atg.com/products/das/das—main.html?didframe=true, 4 pages.
“TrustBroker™ Security Server, The Only Multi-Mechanism Authentication Server,” CyberSafe Corporation, Issaquah, WA, 1999, 2 pages.
Hubbard, S. D. et al., “Firewalling the Net” BT Technology Journal, BT Laboratories, GB, vol. 15, No. 2, Apr. 1997, XP000703560, ISSN: 1358-3948, pp. 94-106.
Doty, Ted, “A Firewall Overview”, ConneXions, vol. 9, No. 7, Jul. 1, 1995, XP00056423, ISSN: 0894-5926, pp. 20-23.
Dilger Michael B.
Norton Derk
Pratt Thomas
Shurygailo Stan D.
Wood David L.
Barron Jr. Gilberto
Brooks & Kushman P.C.
Moorthy Aravind K
Sun Microsystems Inc.
LandOfFree
Secure data broker does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Secure data broker, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Secure data broker will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4104861