Source: http://www.google.cl/patents/US8225378
Timestamp: 2016-07-31 05:24:03
Document Index: 127050734

Matched Legal Cases: ['art 1', 'application No. 07841896', 'application No. 07842186', 'application No. 07842066', 'application No. 2009', 'Application No. 200780033322', 'application No. 200780033359', 'Application No. 200780033359']

Patent US8225378 - Auditing authorization decisions - Google PatentsSearch Images Maps Play YouTube Gmail Drive Calendar More »Sign inPatentsThe auditing of authorization decisions is facilitated by integrating or coupling an audit policy to access control decisions. In an example implementation, an audit policy of an auditing scheme is coupled to a semantic framework of an access control scheme such that the audit policy is specified using...http://www.google.cl/patents/US8225378?utm_source=gb-gplus-sharePatent US8225378 - Auditing authorization decisionsAdvanced Patent SearchPublication numberUS8225378 B2Publication typeGrantApplication numberUS 12/902,892Publication date17 Jul 2012Priority date8 Sep 2006Fee statusPaidAlso published asUS7814534, US20080066146, US20110030038Publication number12902892, 902892, US 8225378 B2, US 8225378B2, US-B2-8225378, US8225378 B2, US8225378B2InventorsBlair B. DillawayOriginal AssigneeMicrosoft CorporationExport CitationBiBTeX, EndNote, RefManPatent Citations (118), Non-Patent Citations (123), Referenced by (2), Classifications (13), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetAuditing authorization decisions
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS486887712 Feb 198819 Sep 1989Fischer Addison MPublic key/signature cryptosystem with enhanced digital signature certificationUS521470213 May 199225 May 1993Fischer Addison MPublic key/signature cryptosystem with enhanced digital signature certificationUS56490994 Jun 199315 Jul 1997Xerox CorporationMethod for delegating access rights through executable access control program without delegating access rights not in a specification to any intermediary nor comprising server securityUS57651533 Jan 19969 Jun 1998International Business Machines CorporationInformation handling system, method, and article of manufacture including object system authorization and registrationUS618910321 Jul 199813 Feb 2001Novell, Inc.Authority delegation with secure operating system queuesUS621623125 Apr 199710 Apr 2001At & T Corp.Specifying security protocols and policy constraints in distributed systemsUS62567348 Oct 19993 Jul 2001At&TMethod and apparatus for compliance checking in a trust management systemUS625674113 Oct 20003 Jul 2001At&T Corp.Specifying security protocols and policy constraints in distributed systemsUS636700917 Dec 19982 Apr 2002International Business Machines CorporationExtending SSL to a multi-tier environment using delegation of authentication and authorityUS648426111 Dec 199819 Nov 2002Cisco Technology, Inc.Graphical network security policy managementUS67791207 Jan 200017 Aug 2004Securify, Inc.Declarative language for specifying a security policyUS689550331 May 200117 May 2005Contentguard Holdings, Inc.Method and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS693153022 Jul 200216 Aug 2005Vormetric, Inc.Secure network file access controller implementing access control and auditingUS697600931 May 200113 Dec 2005Contentguard Holdings, Inc.Method and apparatus for assigning consequential rights to documents and documents having such rightsUS708574117 Jan 20021 Aug 2006Contentguard Holdings, Inc.Method and apparatus for managing digital content usage rightsUS712760510 May 200024 Oct 2006Axalto, Inc.Secure sharing of application methods on a microcontrollerUS716263322 Apr 20059 Jan 2007Contentguard Holdings, Inc.Method and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS72607159 Dec 199921 Aug 2007Koninklijke Philips Electronics N.V.Method and apparatus for revocation list managementUS729013819 Feb 200330 Oct 2007Microsoft CorporationCredentials and digitally signed objectsUS742663528 Jun 200116 Sep 2008Entrust Technologies LimitedBulk certificate lifetime allocation systems, components and methodsUS743742129 Apr 200414 Oct 2008International Business Machines CorporationsCollaborative email with delegable authoritiesUS75063641 Oct 200417 Mar 2009Microsoft CorporationIntegrated access authorizationUS750948911 Mar 200524 Mar 2009Microsoft CorporationFormat-agnostic system and method for issuing certificatesUS751278215 Aug 200231 Mar 2009Microsoft CorporationMethod and system for using a web service licenseUS753326514 Jul 200412 May 2009Microsoft CorporationEstablishment of security contextUS754314026 Feb 20032 Jun 2009Microsoft CorporationRevocation of a certificate and exclusion of other principals in a digital rights management (DRM) system based on a revocation list from a delegated revocation authorityUS76442845 Jan 2010Stuart Gerald StubblebineSpecifying security protocols and policy constraints in distributed systemsUS782319226 Oct 2010Sprint Communications Company L.P.Application-to-application security in enterprise security servicesUS784461030 Nov 2010Google Inc.Delegated authority evaluation systemUS200100186759 Feb 200130 Aug 2001Blaze Matthew A.Method and apparatus for compliance checking in a trust-management systemUS2002008785921 May 20014 Jul 2002Weeks Stephen P.Trust management systems and methodsUS2002010970717 Jan 200215 Aug 2002Guillermo LaoMethod and apparatus for managing digital content usage rightsUS2002018416031 May 20015 Dec 2002Bijan TadayonMethod and apparatus for assigning conditional or consequential rights to documents and documents having such rightsUS2002018451731 May 20015 Dec 2002Bijan TadayonMethod and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS2003008387723 Sep 20021 May 2003Asgent, Inc.Electronic equipment setting information creating method and apparatus, and security policy creating method and associated apparatusUS2003011019221 Mar 200212 Jun 2003Luis ValentePDstudio design system and methodUS20030115292 *24 Oct 200219 Jun 2003Griffin Philip B.System and method for delegated administrationUS200301209556 Jan 200326 Jun 2003Lucent Technologies Inc.Method and apparatus for managing a firewallUS2003014971426 Oct 20017 Aug 2003Fabio CasatiDynamic task assignment in workflowsUS20030225697 *30 May 20024 Dec 2003Microsoft CorporationMethod, system, and apparatus for providing secure access to a digital workUS200302297815 Jun 200211 Dec 2003Fox Barbara LynchCryptographic auditUS20040024764 *18 Jun 20035 Feb 2004Jack HsuAssignment and management of authentication & authorizationUS2004003477015 Aug 200219 Feb 2004Microsoft CorporationMethod and system for using a web service licenseUS2004003477415 Aug 200219 Feb 2004Le Saint Eric F.System and method for privilege delegation and controlUS2004006470730 Sep 20021 Apr 2004Mccann Peter JamesStreamlined service subscription in distributed architecturesUS200400687579 Sep 20038 Apr 2004Heredia Edwin ArturoDigital signatures for digital television applicationsUS2004012295819 Dec 200224 Jun 2004International Business Machines CorporationMethod and system for peer-to-peer authorizationUS2004012315422 Jul 200324 Jun 2004Alan LippmanSystem and method for validating security access across network layer and a local file layerUS2004012839331 Dec 20021 Jul 2004International Business Machines CorporationMethod and system for consolidated sign-off in a heterogeneous federated environmentUS2004012854631 Dec 20021 Jul 2004International Business Machines CorporationMethod and system for attribute exchange in a heterogeneous federated environmentUS2004013935215 Jan 200315 Jul 2004Shewchuk John P.Uniformly representing and transferring security assertion and security response informationUS2004016298519 Feb 200319 Aug 2004Freeman Trevor W.Credentials and digitally signed objectsUS2004018166512 Mar 200416 Sep 2004Houser Daniel D.Trust governance frameworkUS2004022117429 Apr 20034 Nov 2004Eric Le SaintUniform modular framework for a host computer systemUS2004024381121 Apr 20042 Dec 2004France TelecomElectronic signature method with a delegation mechanism, and equipment and programs for implementing the methodUS2004024383528 May 20042 Dec 2004Andreas TerzisMultilayer access control security systemUS2004025011215 Jun 20049 Dec 2004Valente Luis Filipe PereiraDeclarative language for specifying a security policyUS2005001558618 Jul 200320 Jan 2005Brickell Ernie F.Revocation distributionUS2005003381329 Apr 200410 Feb 2005International Business Machines CorporationCollaborative email with delegable authoritiesUS200500553635 Oct 200110 Mar 2005Mather Andrew HarveySystem for storing and retrieving dataUS200500661982 Sep 200424 Mar 2005Gelme Andrew A.Controlling cooperation between objects in a distributed software environmentUS2005007128025 Sep 200331 Mar 2005Convergys Information Management Group, Inc.System and method for federated rights managementUS2005007986630 Sep 200214 Apr 2005Tianwei ChenVerifying check-in authentication by using an access authentication tokenUS200500807669 Oct 200314 Apr 2005Ghatare Sanjay P.Partitioning data access requestsUS200500970607 Jun 20045 May 2005Lee Joo Y.Method for electronic commerce using security token and apparatus thereofUS2005010817630 Apr 200419 May 2005Jarol Scott B.Configurable rules based content item consumptionUS2005013222010 Dec 200316 Jun 2005International Business Machines CorporationFine-grained authorization by authorization table associated with a resourceUS200501383571 Oct 200423 Jun 2005Sony CorporationRendering rights delegation system and methodUS2005018787722 Apr 200525 Aug 2005Contentguard Holding, Inc.Method and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS2005018807220 Feb 200425 Aug 2005Microsoft CorporationPolicy application across multiple nodesUS2005019832620 Feb 20048 Sep 2005Microsoft CorporationInvalid policy detectionUS2005022030427 May 20036 Oct 2005Koninklijke Philips Electronics N.V.Method for authentication between devicesUS2006000501016 Jun 20045 Jan 2006Henrik OlsenIdentification and authentication system and method for a secure data exchangeUS200600052271 Jul 20045 Jan 2006Microsoft CorporationLanguages for expressing security policiesUS2006001572814 Jul 200419 Jan 2006Ballinger Keith WEstablishment of security contextUS2006002666730 Jul 20042 Feb 2006Bhide Manish AGeneric declarative authorization scheme for JavaUS2006004142117 Aug 200423 Feb 2006Contentguard Holdings, Inc.Method and system for processing grammar-based legality expressionsUS2006004192920 Oct 200523 Feb 2006Microsoft CorporationVirtual distributed security systemUS2006004821621 Jul 20042 Mar 2006International Business Machines CorporationMethod and system for enabling federated user lifecycle managementUS20060075469 *1 Oct 20046 Apr 2006Microsoft CorporationIntegrated access authorizationUS2006010152117 Oct 200211 May 2006Shlomo RabinovitchSystem and method for secure usage right management of digital productsUS200601068564 Nov 200418 May 2006International Business Machines CorporationMethod and system for dynamic transform and load of data from a data source defined by metadata into a data store defined by metadataUS2006012981714 Dec 200515 Jun 2006Borneman Christopher ASystems and methods for enabling trust in a federated collaborationUS2006013699016 Dec 200422 Jun 2006Hinton Heather MSpecializing support for a federation relationshipUS2006015639111 Jan 200513 Jul 2006Joseph SaloweyMethod and apparatus providing policy-based revocation of network security credentialsUS2006019569028 Feb 200531 Aug 2006Microsoft CorporationExtendable data-driven system and method for issuing certificatesUS200602006647 Mar 20057 Sep 2006Dave WhiteheadSystem and method for securing information accessible using a plurality of software applicationsUS2006020670711 Mar 200514 Sep 2006Microsoft CorporationFormat-agnostic system and method for issuing certificatesUS2006020692511 Mar 200514 Sep 2006Microsoft CorporationDelegating right to access resource or the like in access management systemUS20060206931 *14 Mar 200514 Sep 2006Microsoft CorporationAccess control policy engine controlling access to resource based on any of multiple received types of security tokensUS200602250553 Mar 20055 Oct 2006Contentguard Holdings, Inc.Method, system, and device for indexing and processing of expressionsUS200602304328 Apr 200512 Oct 2006Microsoft CorporationPolicy algebra and compatibility modelUS200602363821 Apr 200519 Oct 2006Hinton Heather MMethod and system for a runtime user account creation operation within a single-sign-on process in a federated computing environmentUS2006024207527 Apr 200626 Oct 2006Intertrust Technologies Corp.Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing and rights managementUS2006024216221 Apr 200526 Oct 2006Conner Michael HWeb services response templatesUS20060242688 *22 Apr 200526 Oct 2006Microsoft CorporationSupporting statements for credential based access controlUS2006025977613 May 200516 Nov 2006Microsoft CorporationExtensible account authentication systemUS2007000628429 Jun 20054 Jan 2007Research In Motion LimitedSystem and method for privilege management and revocationUS2007004360722 Aug 200522 Feb 2007Raytheon CompanyMethod to incorporate user feedback into planning with explanationUS2007005588725 Oct 20068 Mar 2007Microsoft CorporationDigital Identity ManagementUS2007005601923 Aug 20058 Mar 2007Allen Paul LImplementing access control policies across dissimilar access control platformsUS2007006187214 Sep 200515 Mar 2007Novell, Inc.Attested identitiesUS2007014383519 Dec 200521 Jun 2007Microsoft CorporationSecurity tokens including displayable claimsUS2007016917217 Jan 200619 Jul 2007International Business Machines CorporationMethod and system for memory protection and security using credentialsUS2007019905914 Feb 200523 Aug 2007Masahiro TakehiSystem, method and program for user authentication, and recording medium on which the program is recordedUS200702834112 Jun 20066 Dec 2007Microsoft CorporationAbstracting security policy from, and transforming to, native representations of access check mechanismsUS2007030028521 Jun 200627 Dec 2007Microsoft CorporationTechniques for managing security contextsUS200800661588 Sep 200613 Mar 2008Microsoft CorporationAuthorization Decisions with Principal AttributesUS200800661598 Sep 200613 Mar 2008Microsoft CorporationControlling the Delegation of RightsUS2008006616011 Sep 200613 Mar 2008Microsoft CorporationSecurity Language Expressions for Logic ResolutionUS200800661698 Sep 200613 Mar 2008Microsoft CorporationFact Qualifiers in Security ScenariosUS200800661758 Sep 200613 Mar 2008Microsoft CorporationSecurity Authorization QueriesUS2008009774814 Nov 200524 Apr 2008Haley Systems, Inc.System for Enterprise Knowledge Management and AutomationUS2008012732030 Sep 200529 May 2008Paolo De LutiisMethod and System For Transparently Authenticating a Mobile User to Access Web ServicesUS2008017272124 Feb 200517 Jul 2008Jong Hyouk NohInternet Access Time Control Method Using Authentication AssertionUS2009012602225 Nov 200514 May 2009Nec CorporationMethod and System for Generating Data for Security AssessmentWO2008030876A15 Sep 200713 Mar 2008Microsoft CorporationSecurity authorization queriesWO2008031043A17 Sep 200713 Mar 2008Microsoft CorporationControlling the delegation of rights* Cited by examinerNon-Patent CitationsReference1"ContentGuard", eXtensible rights Markup Language (XrML) 2.0 Specificaton Part II: Core Schema, 2001, available at www.xrml.org.2"OASIS", eXtensible Access Control Markup Language (XACML) Version 2.0 Core Specification, 2005, accessed on Sep. 27, 2006 at <<www.oasis-open.org/committees/xacml/>>, 6 pages.3"OASIS", eXtensible Access Control Markup Language (XACML) Version 2.0 Core Specification, 2005, accessed on Sep. 27, 2006 at >, 6 pages.4"OASIS, Security Assertion Markup Language (SAML)", accessed on Sep. 27, 2006 from <<www.oasis-open.org/committees/security>>, 8 pages.5"OASIS, Security Assertion Markup Language (SAML)", accessed on Sep. 27, 2006 from >, 8 pages.6"RFC 3280—Internet X.409 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", IETF, retrieved on Sep. 22, 2006 from <<http://www.faqs.org/rfcs/rfc3280.html>>, Apr. 2002, 8 pages.7"RFC 3280-Internet X.409 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", IETF, retrieved on Sep. 22, 2006 from >, Apr. 2002, 8 pages.8"Security Assertion Markup Language (SAML) 2.0 Technical Overview", OASIS, Working Draft 01, Jul. 22, 2004, pp. 1-36.9Abadi, "Logic in Access Control," Proceedings 18th Annual IEEE Symposium on Logic in Computer Science, Jun. 22-25, 2003, Ottawa, Ontario, Canada, pp. 228-233.10Advisory Action for U.S. Appl. No. 11/530,427, mailed on Sep. 26, 2011, Blair B. Dillaway, "Variable Expressions in Security Assertions," 4 pages.11Advisory Action for U.S. Appl. No. 11/530,433, mailed on Sep. 27, 2011, Blair B. Dillaway, "Fact Qualifiers in Security Scenarios," 3 pages.12Ardagna, et al., "XML-based Access Control Languages ", retrieved at <<http://seclab.dti.unimi.it/Papers/RI-3.pdf>>, Universita degli Studi di Milano, Italy, pp. 1-14, 2004.13Ardagna, et al., "XML-based Access Control Languages ", retrieved at <<http://seclab.dti.unimi.it/Papers/Ri-3.pdf>>, Universita degli Studi di Milano, Italy, pp. 1-14, Information Security Tech. Report, Jul. 2004.14Ardagna, et al., "XML-based Access Control Languages ", retrieved at >, Universita degli Studi di Milano, Italy, pp. 1-14, 2004.15Ardagna, et al., "XML-based Access Control Languages ", retrieved at >, Universita degli Studi di Milano, Italy, pp. 1-14, Information Security Tech. Report, Jul. 2004.16Becker et al., "SecPAL: Design and Semantics of a Decentralized Authorization Language—Technical Report MSR-TR-2006-120," Sep. 1, 2006, Microsoft Research, Cambridge, UK, retrieved from the Internet at <<http://courses.cs.vt.edu/cs5204/fall10-kafura-NVC/Papers/Security/SecPal-Reference.pdf>> on Dec. 21, 2011, 46 pages.17Becker et al., "SecPAL: Design and Semantics of a Decentralized Authorization Language-Technical Report MSR-TR-2006-120," Sep. 1, 2006, Microsoft Research, Cambridge, UK, retrieved from the Internet at > on Dec. 21, 2011, 46 pages.18Becker, et al., "Cassandra: Distributed Access Control Policies with Tunable Expressiveness", IEEE 5th International Workshop on Policies for Distributed Systems and Networks, 2004, pp. 159-168.19Becker, et al., "Cassandra: Flexible Trust Management, Applied to Electronic Health Records", IEEE Computer Security Foundations Workshop, 2004, pp. 139-154.20Bindings for the OASIS Security Assertion Markup Language (SAML) V2.0, OASIS Standard, Mar. 15, 2005.21Bindings for the OASIS Security Assertion Markup Language (SSML) V2.0, OASIS Standard , Mar. 15, 2005.22Blaze, et al., "Decentralized Trust Management", IEEE Symposium on Security and Privacy, 1996, pp. 164-173.23Blaze, et al., "The Role of Trust Management in Distributed Systems Security", Secure Internet Programming, 1999, pp. 185-210.24Blaze, et al.,"The Role of Trust Management in Distributed Systems Security", Secure Internet Programming, 1999, pp. 185-210.25Cederquist et al., "An Audit Logic for Accountability", IEEE, 2005, pp#1-pp#10.26Chadwick, "An Authorisation Interface for the GRID", In the Proceedings of the E-Science All Hands Meeting, Nottingham, Sep. 2003, 14 pgs.27Chen et al., "Tabled Evaluations with Delaying for General Logic Programs," Journal of the ACM, vol. 43, No. 1, Jan. 1996, pp. 20-74.28ContentGuard, "eXtensibe rights Markup Language (XrML) 2.0 Specification Part 1: Primer," Nov. 20, 2001, pp. 1-39.29Dai et al., "Logic Based Authorization Policy Engineering", 2001, pp#1-pp#9.30Damianou, et al., "Ponder: A Language for Specifying Security and Management Policies for Distributed Systems", retrieved at <<http://www.doc.ic.ac.uk/˜ncd/policies/files/PonderSpec.pdf>>, Imperial College of Science, Technology and Medicine, London, U.K, Oct. 20, 2000, pp. 1-49.31Damianou, et al., "Ponder: A Language for Specifying Security and Management Policies for Distributed Systems", retrieved at >, Imperial College of Science, Technology and Medicine, London, U.K, Oct. 20, 2000, pp. 1-49.32DeTreville, "Binder, A Logic-Based Security Language", IEEE Symposium on Security and Privacy, 2002, pp. 105-113.33Ellison, et al., "RFC 2693—SPKI Certificate Theory", available at <<http://www.ietf.org/rfc/rfc2693.txt>>, accessed on Sep. 27, 2006, 38 pages.34Ellison, et al., "RFC 2693-SPKI Certificate Theory", available at >, accessed on Sep. 27, 2006, 38 pages.35Erdos, et al., "Shibboleth-Architecture", Draft Version 4, Nov. 2001, 39 pgs.36European Office Action mailed Dec. 22, 2011 for European patent application No. 07841896.9, a counterpart foreign application of US patent No. 8,060,931, 4 pages.37Extended European Search Report mailed Jan. 18, 2012 for European patent application No. 07842186.4, 9 pages.38Extended European Search Report mailed Jul. 22, 2011 for European patent application No. 07842066.8, 8 pages.39Farrell et al., "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Open, 2004, Aug. 2004, pp#1-pp#87.40Farrell et al., "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Open, Aug. 2004, pp#1-pp#87.41Final Office Action for U.S. Appl. No. 11/530,427, mailed on Jun. 29, 2011, Blair B. Dillaway, "Variable Expressions in Security Assertions," 23 pages.42Final Office Action for U.S. Appl. No. 11/530,429, mailed on Jul. 8, 2011, Blair B. Dillaway, "Authorization Decisions with Principal Attributes," 23 pages.43Final Office Action for U.S. Appl. No. 11/530,433, mailed on Jul. 8, 2011, Blair B. Dillaway, "Fact Qualifiers in Security Scenarios," 20 pages.44Geuer-Pollmann et al., "Web Services and Web Service Security Standards," Elsevier Advanced Technology Publications, Journal of Information Security Technology Report, Jan. 2005, vol. 10, Issue 1, pp. 15-24.45Haidar et al., "An Extended RBAC Profile of XACML," In the Proceedings of the 3rd ACM Workshop on Secure Web Services, 2006, pp. 13-22.46Hallam-Baker et al., "Web Services Security: SAML Token Profile", OASIS Open, Sep. 23, 2002, pp#1-pp#25.47Hallam-Barker, "Security Assertion Markup Language Straw-man Architecture", VeriSign, 2001, Feb. 16, 2001, pp#1-pp#17.48Halpern, et al., "Using First-Order Logic to Reason About Policies", IEEE Computer Security Foundations Workshop, 2003, available at <<http://arxiv.org/PS—cache/cs/pdf/0601/0601034.pdf>>, pp. 187-201.49Halpern, et al., "Using First-Order Logic to Reason About Policies", IEEE Computer Security Foundations Workshop, 2003, available at >, pp. 187-201.50Hughes et al., "Security Assertion Markup Language (SAML) 2.0 Technical Overview", OASIS, 2004, pp#1-pp#36.51 *J. G. Cederquist et al, "An Audit Logic for Accountability", pp. 1-10, IEEE, 2005.52Japanese Office Action mailed Jan. 24, 2012 for Japanese patent application No. 2009-527617, a counterpart foreign application of U.S. Appl. No. 11/530,556, 14 pages.53Jim, "SD3: A Trust Management System with Certified Evaluation", Proceedings of the 2001 IEEE Symposium on Security and Privacy, 2001, available at <<http://www.research.att.com/~trevor/papers/JimOakland2001.pdf#search=%22%22SD3%3A%20A%20Trust%20Management%20System%20with%20Certified%20Evaluation%22%22>>, pp. 106-115.54Jim, "SD3: A Trust Management System with Certified Evaluation", Proceedings of the 2001 IEEE Symposium on Security and Privacy, 2001, available at <<http://www.research.att.com/˜trevor/papers/JimOakland2001.pdf#search=%22%22SD3%3A%20A%20Trust%20Management%20System%20with%20Certified%20Evaluation%22%22>>, pp. 106-115.55 *John DeTreville, "Binder, a logic-based security language", pp. 1-9, IEEE, 2002.56 *John Hughes et al, Security Assertion Markup Language (SAML) 2.0 Technical Overview, pp. 1-36, OASIS, 2004.57Kagal et al., "Trust-Based Security in Pervasive Computing Environments," IEEE Computer, Dec. 1, 2011, vol. 34, No. 12, pp. 154-157.58Keoh et al., "Towards Flexible Credential Verification in Mobile Ad-hoc Networks", ACM 2002, POMC '02, Oct. 30-31, 2002, pp#58-pp#65.59Lee, et al., "Security Assertion Exchange for the Agent on the Semantic Web", In the Proceedings of the IADIS International Conference WWW/Internet, Madrid, Spain, 2 Volumes, 2004, pp. 302-308 (9 pgs.).60Li, et al. "A Practically Implementable and Tractable Delegation Logic", IEEE Symposium on Security and Privacy, 2000, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/dl—oakland00.pdf>>, pp. 27-42.61Li, et al. "A Practically Implementable and Tractable Delegation Logic", IEEE Symposium on Security and Privacy, 2000, available at >, pp. 27-42.62Li, et al., "Datalog with Constraints: A Foundation for Trust Management Languages", Proc. PADL, 2003, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/cdatalog-pad103.pdf#search=%22%22Datalog%20with% 20Constraints%3A%20A%20Foundation%20For%20Trust%20Management%20Languages%22%22>>, pp. 58-73.63Li, et al., "Datalog with Constraints: A Foundation for Trust Management Languages", Proc. PADL, 2003, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/cdatalog—pad103.pdf#search=%22%22Datalog%20with% 20Constraints%3A%20A%20Foundation%20For%20Trust%20Management%20Languages%22%22>>, pp. 58-73.64Li, et al., "Datalog with Constraints: A Foundation For Trust Management Languages", Proc. PADL, 2003, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/cdatalog-padl03.pdf#search=%22%22Datalog%20with%20Constraints%3A%20A%20Foundation%20For%20Trust%20Management%20Languages%22%22>>, pp. 58-73.65Li, et al., "Datalog with Constraints: A Foundation For Trust Management Languages", Proc. PADL, 2003, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/cdatalog—padl03.pdf#search=%22%22Datalog%20with%20Constraints%3A%20A%20Foundation%20For%20Trust%20Management%20Languages%22%22>>, pp. 58-73.66Li, et al., "Design of a Role-Based Trust Management Framework", Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/rt-oakland02.pdf#search=%22%22Design%20of%20a%20Role-Based%20Trust%20Management%20Framework%22%22>>, pp. 114-130.67Li, et al., "Design of a Role-Based Trust Management Framework", Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/rt—oakland02.pdf#search=%22%22Design%20of%20a%20Role-Based%20Trust%20Management%20Framework%22%22>>, pp. 114-130.68Navarro et al., "Constrained delegation in XML-based Access Control and Digital Right Management Standards", Communication, Network and Information Security 2003, pp#1-pp#6.69Non-Final Office Action for U.S. Appl. No. 11/530,443, mailed on May 26, 2011, Blair B. Dillaway, "Security Assertion Revocation".70Non-Final Office Action for U.S. Appl. No. 11/530,443, mailed on May 26, 2011, Blair B. Dillaway, "Security Assertion Revocation," 15 pages.71Non-Final Office Action for U.S. Appl. No. 11/530,446, mailed on Sep. 15, 2011, Blair B. Dillaway, "Controlling the Delegation of Rights," 30 pages.72Notice of Allowance from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed Apr. 4, 2011, 8 pages.73Notice of Allowance from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed Apr. 4, 2011, Blair Dillaway, "Security Authorization Queries," 8 pages.74Notice of Allowance from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,439, mailed Aug. 23, 2010, 22 pages.75Office Action for U.S. Appl. No. 11/530,564, mailed on Apr. 12, 2011, Moritz Becker, "Security Language Expressions for Logic Resolution".76Office Action for U.S. Appl. No. 11/530,564, mailed on Apr. 12, 2011, Moritz Becker, "Security Language Expressions for Logic Resolution," 8 pages.77Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,427, mailed Mar. 3, 2010, 26 pages.78Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,427, mailed on Aug. 20, 2010, 23 pages.79Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,427, mailed on Dec. 23, 2010, 33 pages.80Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,429, mailed on Aug. 20, 2009, 24 pages.81Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,429, mailed on Jan. 19, 2011, 34 pgs.82Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,429, mailed on Mar. 2, 2010, 21 pages.83Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433 mailed on Jan. 18, 2011, 35 pages.84Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433 mailed on Jan. 18, 2011, Blair B. Dillaway, "Security Assertion Revocation," 35 pages.85Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433, mailed Mar. 1, 2009, 26 pages.86Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433, mailed on Aug. 21, 2009, 24 pages.87Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed May 20, 2010, 35 pages.88Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed Oct. 29, 2010, 31 pages.89Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,439, mailed on Mar. 5, 2010, 32 pages.90Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,443, mailed Dec. 7, 2010, 21 pgs.91Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,443, mailed on Jun. 1, 2010, 30 pages.92Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,446 mailed on Feb. 3, 2011, 35 pages.93Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,446 mailed on Feb. 3, 2011, Blair B. Dillaway, "Controlling the Delegation of Rights," 35 pages.94Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,446, mailed on Feb. 24, 2010, 30 pages.95Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,446, mailed on Jul. 30, 2010, 29 pages.96Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,543, mailed on Dec. 27, 2010, 17 pgs.97Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,543, mailed on Jul. 8, 2010, 12 pages.98Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,556 mailed on Feb. 4, 2011, 8 pages.99Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,556 mailed on Feb. 4, Moritz Becker, "Security Language Translations with Logic Resolution," 2011, 8 pages.100Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,556, mailed on Aug. 23, 2010, 14 pages.101Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,556, mailed on Aug. 23, 2010, 14pages.102Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,564, mailed on Sep. 15, 2010, 17 pages.103 *Peter Chapin et al, "Risk Assessment in Distributed Authorization", pp. 33-41, ACM, 2005.104Pfenning et al., "System Description: Twelf-A Meta-Logical Framework for Deductive Systems", 1999, pp#1-pp#5.105Pfenning et al., "System Description: Twelf—A Meta-Logical Framework for Deductive Systems", 1999, pp#1-pp#5.106Pimlott et al., "Soutei, a Logic-Based Trust-Management System," Functional and Logic Programming, 8th International Symposium, FLOPS 2006 Proceedings, LNCS 3945, Apr. 24-26, 2006, pp. 130-145.107Ribeiro, et al., "SPL: An access control language for security policies with comples constraints", retrieved at <<http://www.gsd.inesc-id.pt/˜cnr/splii.pdf>>, IST/INESC, Portugal, pp. 1-22, 1999.108Ribeiro, et al., "SPL: An access control language for security policies with comples constraints", retrieved at <<http://www.gsd.inesc-id.pt/˜cnr/splii.pdf>>, IST/INESC, Portugal, pp. 1-22.109Ribeiro, et al., "SPL: An access control language for security policies with comples constraints", retrieved at >, IST/INESC, Portugal, pp. 1-22, 1999.110Ribeiro, et al., "SPL: An access control language for security policies with comples constraints", retrieved at >, IST/INESC, Portugal, pp. 1-22.111Rivest, et al., "SDSI—A Simple Distributed Security Infrastructure", available at <<http://theory.lcs.mit.edu/˜rivest/sdsi10.ps>>, Apr. 30, 1996, pp. 1-37.112Rivest, et al., "SDSI-A Simple Distributed Security Infrastructure", available at >, Apr. 30, 1996, pp. 1-37.113Stoller, "Trust Management A Tutorial", Stony Brook University, State University of New York, May 2006, pp#1-pp#118.114Translated Chinese Notice of Grant of Patent Right for Invention mailed Mar. 25, 2011 for Chinese Patent Application No. 200780033322.4 a counterpart foreign application for U.S. Appl. No. 11/530,438, 4 pages.115Translated Chinese Office Action mailed Aug. 25, 2011 for Chinese patent application No. 200780033359.7, a counterpart foreign application of U.S. Appl. No. 11/530,446, 15 pages.116Translated Chinese Office Action mailed Jan. 26, 2011 for Chinese Patent Application No. 200780033359.7, a counterpart foreign application for U.S. Appl. No. 11/530,446.117Upadhyay et al., "Generic Security Service API Version 2: Java Bindings Update: draft-ietf-kitten-rfc2853bis-01.txt," IETF Standard-Working-Draft, Internet Engineering Task Force, IETF, CH, vol. kitten, No. 1, Jan. 27, 2006, 102 pages.118Wainer et al., "A Fine-Grained, Controllable, User-to-User Delegatino Method in RBAC," Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies, SACMAT, Jan. 1, 2005, 8 pages.119Wang et al., "Extending the Security Assertion Markup Language to Support Delegation for Web Services and Grid Services", IEEE Internation Conference on Web Services 2005, Orlando, Fl, Jul. 12-15, 2005, pp#1-pp#8.120Whitehead et al., "By Reason and Authority: A System for Authorization of Proof-Carrying Code", IEEE Computer Secuirty Foundations Workshop (CSFW'04) 2004, pp#1-pp#15.121Wu, et al., "Evaluation of Authorization-Authentication Tools: PERMIS, OASIS, EACML, and SHIBOLETH", Technical Report CS-TR-935, University of Newcastle upon Tyne, 2005.122Wu, et al., "Evaluation of Authorization-Authentication Tools: PERMIS, OASIS, XACML, and SHIBOLETH", Technical Report CS-TR-935, University of Newcastle upon Tyne, 2005.123Yin et al., "A Rule-based Framework for Role0based Constrained Delegation," Proceedings of the 3rd International Conference on Information Security, INFOSECU, Jan. 1, 2004, pp. 186-191.* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS20130317990 *6 May 201328 Nov 2013Institutional Cash Distributors Technology, LlcSecure transaction object creation, propagation and invocationUS20140331058 *6 Sep 20136 Nov 2014Institutional Cash Distributors Technology, LlcEncapsulated security tokens for electronic transactions* Cited by examinerClassifications U.S. Classification726/4, 713/155, 726/2, 726/5, 726/3, 717/117, 713/185, 726/1, 726/14International ClassificationG06F21/00Cooperative ClassificationG06F21/6218, G06F2221/2101European ClassificationG06F21/62BLegal EventsDateCodeEventDescription9 Dec 2014ASAssignmentOwner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034544/0001Effective date: 2014101430 Dec 2015FPAYFee paymentYear of fee payment: 4RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services