Source: http://www.google.com/patents/US8201215?dq=RE38,104
Timestamp: 2015-05-04 08:42:30
Document Index: 420280545

Matched Legal Cases: ['application No. 200780033359', 'application No. 07842066', 'application No. 201110162110', 'application No. 07841896', 'application No. 07842186', 'application No. 07842066', 'Application No. 200780033322', 'application No. 2007800333591', 'Application No. 200780033359', 'application No. 2009', 'application No. 11530556']

Patent US8201215 - Controlling the delegation of rights - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsThe delegation of rights may be controlled in a number of manners. In an example implementation, a delegation authority assertion is formulated with a delegator principle, a delegatee principal, a verb phrase, a resource, and a delagation-directive verb. In another example implementation, a delegation...http://www.google.com/patents/US8201215?utm_source=gb-gplus-sharePatent US8201215 - Controlling the delegation of rightsAdvanced Patent SearchPublication numberUS8201215 B2Publication typeGrantApplication numberUS 11/530,446Publication dateJun 12, 2012Filing dateSep 8, 2006Priority dateSep 8, 2006Also published asCA2657406A1, CA2657406C, CN101512962A, EP2067299A1, EP2067299A4, US20080066159, WO2008031043A1Publication number11530446, 530446, US 8201215 B2, US 8201215B2, US-B2-8201215, US8201215 B2, US8201215B2InventorsBlair B. Dillaway, Moritz Y. Becker, Andrew D. Gordon, Cedric FournetOriginal AssigneeMicrosoft CorporationExport CitationBiBTeX, EndNote, RefManPatent Citations (119), Non-Patent Citations (107), Referenced by (2), Classifications (11), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetControlling the delegation of rights
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS4868877 *Feb 12, 1988Sep 19, 1989Fischer Addison MPublic key/signature cryptosystem with enhanced digital signature certificationUS5214702 *May 13, 1992May 25, 1993Fischer Addison MPublic key/signature cryptosystem with enhanced digital signature certificationUS5649099 *Jun 4, 1993Jul 15, 1997Xerox CorporationMethod for delegating access rights through executable access control program without delegating access rights not in a specification to any intermediary nor comprising server securityUS5765153Jan 3, 1996Jun 9, 1998International Business Machines CorporationInformation handling system, method, and article of manufacture including object system authorization and registrationUS6189103Jul 21, 1998Feb 13, 2001Novell, Inc.Authority delegation with secure operating system queuesUS6216231 *Apr 25, 1997Apr 10, 2001At & T Corp.Specifying security protocols and policy constraints in distributed systemsUS6256734Oct 8, 1999Jul 3, 2001At&TMethod and apparatus for compliance checking in a trust management systemUS6256741 *Oct 13, 2000Jul 3, 2001At&T Corp.Specifying security protocols and policy constraints in distributed systemsUS6367009 *Dec 17, 1998Apr 2, 2002International Business Machines CorporationExtending SSL to a multi-tier environment using delegation of authentication and authorityUS6484261Dec 11, 1998Nov 19, 2002Cisco Technology, Inc.Graphical network security policy managementUS6779120Jan 7, 2000Aug 17, 2004Securify, Inc.Declarative language for specifying a security policyUS6895503 *May 31, 2001May 17, 2005Contentguard Holdings, Inc.Method and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS6931530Jul 22, 2002Aug 16, 2005Vormetric, Inc.Secure network file access controller implementing access control and auditingUS6976009 *May 31, 2001Dec 13, 2005Contentguard Holdings, Inc.Method and apparatus for assigning consequential rights to documents and documents having such rightsUS7085741 *Jan 17, 2002Aug 1, 2006Contentguard Holdings, Inc.Method and apparatus for managing digital content usage rightsUS7127605 *May 10, 2000Oct 24, 2006Axalto, Inc.Secure sharing of application methods on a microcontrollerUS7162633 *Apr 22, 2005Jan 9, 2007Contentguard Holdings, Inc.Method and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS7260715Dec 9, 1999Aug 21, 2007Koninklijke Philips Electronics N.V.Method and apparatus for revocation list managementUS7290138Feb 19, 2003Oct 30, 2007Microsoft CorporationCredentials and digitally signed objectsUS7426635Jun 28, 2001Sep 16, 2008Entrust Technologies LimitedBulk certificate lifetime allocation systems, components and methodsUS7437421 *Apr 29, 2004Oct 14, 2008International Business Machines CorporationsCollaborative email with delegable authoritiesUS7506364Oct 1, 2004Mar 17, 2009Microsoft CorporationIntegrated access authorizationUS7509489Mar 11, 2005Mar 24, 2009Microsoft CorporationFormat-agnostic system and method for issuing certificatesUS7512782 *Aug 15, 2002Mar 31, 2009Microsoft CorporationMethod and system for using a web service licenseUS7533265Jul 14, 2004May 12, 2009Microsoft CorporationEstablishment of security contextUS7543140 *Feb 26, 2003Jun 2, 2009Microsoft CorporationRevocation of a certificate and exclusion of other principals in a digital rights management (DRM) system based on a revocation list from a delegated revocation authorityUS7644284 *Apr 24, 2001Jan 5, 2010Stuart Gerald StubblebineSpecifying security protocols and policy constraints in distributed systemsUS7823192Apr 1, 2004Oct 26, 2010Sprint Communications Company L.P.Application-to-application security in enterprise security servicesUS7844610May 25, 2004Nov 30, 2010Google Inc.Delegated authority evaluation systemUS20010018675Feb 9, 2001Aug 30, 2001Blaze Matthew A.Method and apparatus for compliance checking in a trust-management systemUS20020087859May 21, 2001Jul 4, 2002Weeks Stephen P.Trust management systems and methodsUS20020109707 *Jan 17, 2002Aug 15, 2002Guillermo LaoMethod and apparatus for managing digital content usage rightsUS20020184160 *May 31, 2001Dec 5, 2002Bijan TadayonMethod and apparatus for assigning conditional or consequential rights to documents and documents having such rightsUS20020184517 *May 31, 2001Dec 5, 2002Bijan TadayonMethod and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS20030083877Sep 23, 2002May 1, 2003Asgent, Inc.Electronic equipment setting information creating method and apparatus, and security policy creating method and associated apparatusUS20030110192Mar 21, 2002Jun 12, 2003Luis ValentePDstudio design system and methodUS20030115292Oct 24, 2002Jun 19, 2003Griffin Philip B.System and method for delegated administrationUS20030120955Jan 6, 2003Jun 26, 2003Lucent Technologies Inc.Method and apparatus for managing a firewallUS20030149714Oct 26, 2001Aug 7, 2003Fabio CasatiDynamic task assignment in workflowsUS20030225697May 30, 2002Dec 4, 2003Microsoft CorporationMethod, system, and apparatus for providing secure access to a digital workUS20030229781Jun 5, 2002Dec 11, 2003Fox Barbara LynchCryptographic auditUS20040024764Jun 18, 2003Feb 5, 2004Jack HsuAssignment and management of authentication & authorizationUS20040034770 *Aug 15, 2002Feb 19, 2004Microsoft CorporationMethod and system for using a web service licenseUS20040034774 *Aug 15, 2002Feb 19, 2004Le Saint Eric F.System and method for privilege delegation and controlUS20040064707Sep 30, 2002Apr 1, 2004Mccann Peter JamesStreamlined service subscription in distributed architecturesUS20040068757 *Sep 9, 2003Apr 8, 2004Heredia Edwin ArturoDigital signatures for digital television applicationsUS20040122958Dec 19, 2002Jun 24, 2004International Business Machines CorporationMethod and system for peer-to-peer authorizationUS20040123154Jul 22, 2003Jun 24, 2004Alan LippmanSystem and method for validating security access across network layer and a local file layerUS20040128393Dec 31, 2002Jul 1, 2004International Business Machines CorporationMethod and system for consolidated sign-off in a heterogeneous federated environmentUS20040128546Dec 31, 2002Jul 1, 2004International Business Machines CorporationMethod and system for attribute exchange in a heterogeneous federated environmentUS20040139352Jan 15, 2003Jul 15, 2004Shewchuk John P.Uniformly representing and transferring security assertion and security response informationUS20040162985Feb 19, 2003Aug 19, 2004Freeman Trevor W.Credentials and digitally signed objectsUS20040181665Mar 12, 2004Sep 16, 2004Houser Daniel D.Trust governance frameworkUS20040221174Apr 29, 2003Nov 4, 2004Eric Le SaintUniform modular framework for a host computer systemUS20040243811Apr 21, 2004Dec 2, 2004France TelecomElectronic signature method with a delegation mechanism, and equipment and programs for implementing the methodUS20040243835May 28, 2004Dec 2, 2004Andreas TerzisMultilayer access control security systemUS20040250112Jun 15, 2004Dec 9, 2004Valente Luis Filipe PereiraDeclarative language for specifying a security policyUS20050015586Jul 18, 2003Jan 20, 2005Brickell Ernie F.Revocation distributionUS20050033813 *Apr 29, 2004Feb 10, 2005International Business Machines CorporationCollaborative email with delegable authoritiesUS20050055363Oct 5, 2001Mar 10, 2005Mather Andrew HarveySystem for storing and retrieving dataUS20050066198Sep 2, 2004Mar 24, 2005Gelme Andrew A.Controlling cooperation between objects in a distributed software environmentUS20050071280 *Sep 25, 2003Mar 31, 2005Convergys Information Management Group, Inc.System and method for federated rights managementUS20050079866Sep 30, 2002Apr 14, 2005Tianwei ChenVerifying check-in authentication by using an access authentication tokenUS20050080766Oct 9, 2003Apr 14, 2005Ghatare Sanjay P.Partitioning data access requestsUS20050097060Jun 7, 2004May 5, 2005Lee Joo Y.Method for electronic commerce using security token and apparatus thereofUS20050108176Apr 30, 2004May 19, 2005Jarol Scott B.Configurable rules based content item consumptionUS20050132220Dec 10, 2003Jun 16, 2005International Business Machines CorporationFine-grained authorization by authorization table associated with a resourceUS20050138357Oct 1, 2004Jun 23, 2005Sony CorporationRendering rights delegation system and methodUS20050187877 *Apr 22, 2005Aug 25, 2005Contentguard Holding, Inc.Method and apparatus for hierarchical assignment of rights to documents and documents having such rightsUS20050188072Feb 20, 2004Aug 25, 2005Microsoft CorporationPolicy application across multiple nodesUS20050198326Feb 20, 2004Sep 8, 2005Microsoft CorporationInvalid policy detectionUS20050220304May 27, 2003Oct 6, 2005Koninklijke Philips Electronics N.V.Method for authentication between devicesUS20060005010Jun 16, 2004Jan 5, 2006Henrik OlsenIdentification and authentication system and method for a secure data exchangeUS20060005227Jul 1, 2004Jan 5, 2006Microsoft CorporationLanguages for expressing security policiesUS20060015728Jul 14, 2004Jan 19, 2006Ballinger Keith WEstablishment of security contextUS20060026667Jul 30, 2004Feb 2, 2006Bhide Manish AGeneric declarative authorization scheme for JavaUS20060041421Aug 17, 2004Feb 23, 2006Contentguard Holdings, Inc.Method and system for processing grammar-based legality expressionsUS20060041929Oct 20, 2005Feb 23, 2006Microsoft CorporationVirtual distributed security systemUS20060048216Jul 21, 2004Mar 2, 2006International Business Machines CorporationMethod and system for enabling federated user lifecycle managementUS20060075469Oct 1, 2004Apr 6, 2006Microsoft CorporationIntegrated access authorizationUS20060101521 *Oct 17, 2002May 11, 2006Shlomo RabinovitchSystem and method for secure usage right management of digital productsUS20060106856Nov 4, 2004May 18, 2006International Business Machines CorporationMethod and system for dynamic transform and load of data from a data source defined by metadata into a data store defined by metadataUS20060129817Dec 14, 2005Jun 15, 2006Borneman Christopher ASystems and methods for enabling trust in a federated collaborationUS20060136990Dec 16, 2004Jun 22, 2006Hinton Heather MSpecializing support for a federation relationshipUS20060156391Jan 11, 2005Jul 13, 2006Joseph SaloweyMethod and apparatus providing policy-based revocation of network security credentialsUS20060195690Feb 28, 2005Aug 31, 2006Microsoft CorporationExtendable data-driven system and method for issuing certificatesUS20060200664Mar 7, 2005Sep 7, 2006Dave WhiteheadSystem and method for securing information accessible using a plurality of software applicationsUS20060206707Mar 11, 2005Sep 14, 2006Microsoft CorporationFormat-agnostic system and method for issuing certificatesUS20060206925 *Mar 11, 2005Sep 14, 2006Microsoft CorporationDelegating right to access resource or the like in access management systemUS20060206931Mar 14, 2005Sep 14, 2006Microsoft CorporationAccess control policy engine controlling access to resource based on any of multiple received types of security tokensUS20060225055Mar 3, 2005Oct 5, 2006Contentguard Holdings, Inc.Method, system, and device for indexing and processing of expressionsUS20060230432Apr 8, 2005Oct 12, 2006Microsoft CorporationPolicy algebra and compatibility modelUS20060236382Apr 1, 2005Oct 19, 2006Hinton Heather MMethod and system for a runtime user account creation operation within a single-sign-on process in a federated computing environmentUS20060242075 *Apr 27, 2006Oct 26, 2006Intertrust Technologies Corp.Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing and rights managementUS20060242162Apr 21, 2005Oct 26, 2006Conner Michael HWeb services response templatesUS20060242688Apr 22, 2005Oct 26, 2006Microsoft CorporationSupporting statements for credential based access controlUS20060259776May 13, 2005Nov 16, 2006Microsoft CorporationExtensible account authentication systemUS20070006284Jun 29, 2005Jan 4, 2007Research In Motion LimitedSystem and method for privilege management and revocationUS20070043607Aug 22, 2005Feb 22, 2007Raytheon CompanyMethod to incorporate user feedback into planning with explanationUS20070055887Oct 25, 2006Mar 8, 2007Microsoft CorporationDigital Identity ManagementUS20070056019Aug 23, 2005Mar 8, 2007Allen Paul LImplementing access control policies across dissimilar access control platformsUS20070061872Sep 14, 2005Mar 15, 2007Novell, Inc.Attested identitiesUS20070143835Dec 19, 2005Jun 21, 2007Microsoft CorporationSecurity tokens including displayable claimsUS20070169172Jan 17, 2006Jul 19, 2007International Business Machines CorporationMethod and system for memory protection and security using credentialsUS20070199059Feb 14, 2005Aug 23, 2007Masahiro TakehiSystem, method and program for user authentication, and recording medium on which the program is recordedUS20070283411Jun 2, 2006Dec 6, 2007Microsoft CorporationAbstracting security policy from, and transforming to, native representations of access check mechanismsUS20070300285Jun 21, 2006Dec 27, 2007Microsoft CorporationTechniques for managing security contextsUS20080066158Sep 8, 2006Mar 13, 2008Microsoft CorporationAuthorization Decisions with Principal AttributesUS20080066159Sep 8, 2006Mar 13, 2008Microsoft CorporationControlling the Delegation of RightsUS20080066160Sep 11, 2006Mar 13, 2008Microsoft CorporationSecurity Language Expressions for Logic ResolutionUS20080066169Sep 8, 2006Mar 13, 2008Microsoft CorporationFact Qualifiers in Security ScenariosUS20080066175Sep 8, 2006Mar 13, 2008Microsoft CorporationSecurity Authorization QueriesUS20080097748Nov 14, 2005Apr 24, 2008Haley Systems, Inc.System for Enterprise Knowledge Management and AutomationUS20080127320Sep 30, 2005May 29, 2008Paolo De LutiisMethod and System For Transparently Authenticating a Mobile User to Access Web ServicesUS20080172721Feb 24, 2005Jul 17, 2008Jong Hyouk NohInternet Access Time Control Method Using Authentication AssertionUS20090126022 *Nov 25, 2005May 14, 2009Nec CorporationMethod and System for Generating Data for Security AssessmentWO2000056027A1Mar 15, 2000Sep 21, 2000Texar Software CorpComputer security systemWO2008030876A1Sep 5, 2007Mar 13, 2008Microsoft CorpSecurity authorization queriesWO2008031043A1Sep 7, 2007Mar 13, 2008Microsoft CorpControlling the delegation of rights* Cited by examinerNon-Patent CitationsReference1 *"eXtensible rights Markup Language (XrML) 2.0 Specification," Part I-Part IV, ContentGuard, Nov. 20, 2001, 144 pages.2"eXtensible rights Markup Language (XrML) 2.0 Specificaton Part II: Core Schema", ContentGuard, available at > Nov. 20, 2001, 46 pages.3"OASIS", eXtensible Access Control Markup Language (XACML) Version 2.0 Core Specification, 2005, accessed on Sep. 27, 2006 at >, 6 pages.4"OASIS", Security Assertion Markup Language (SAML), accessed on Sep. 27, 2006 from >, 8 pages.5"RFC 3280-Internet X.409 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", IETF, retrieved on Sep. 22, 2006 from >, Apr. 2002, 8 pages.6"Security Assertion Markup Language (SAML) 2.0 Technical Overview", OASIS, Working Draft 01, Jul. 22, 2004, pp. 1-36.7"eXtensible rights Markup Language (XrML) 2.0 Specificaton Part II: Core Schema", ContentGuard, available at <<www.xrml.org>> Nov. 20, 2001, 46 pages.8"OASIS", eXtensible Access Control Markup Language (XACML) Version 2.0 Core Specification, 2005, accessed on Sep. 27, 2006 at <<www.oasis-open.org/committees/xacml/>>, 6 pages.9"OASIS", Security Assertion Markup Language (SAML), accessed on Sep. 27, 2006 from <<www.oasis-open.org/committees/security>>, 8 pages.10"RFC 3280�Internet X.409 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", IETF, retrieved on Sep. 22, 2006 from <<http://www.faqs.org/rfcs/rfc3280.html>>, Apr. 2002, 8 pages.11Abadi, "Logic in Access Control", Proceedings 18th Annual IEEE Symposium on Logic in Computer Science, Jun. 22-25, 2003, Ottawa, Ontario, Canada, pp. 228-233.12Advisory Action for U.S. Appl. No. 11/530,427, mailed on Sep. 26, 2011, Blair B. Dillaway, "Variable Expressions in Security Assertions", 4 pgs.13Advisory Action for U.S. Appl. No. 11/530,433, mailed on Sep. 27, 2011, Blair B. Dillaway, "Fact Qualifiers in Security Scenarios", 3 pgs.14Ardagna, et al., "XML-based Access Control Languages", Universita degli Studi di Milano, Italy, available at >, pp. 1-14.15Ardagna, et al., "XML-based Access Control Languages", Universita degli Studi di Milano, Italy, available at <<http://seclab.dti.unimi.it/Papers/RI-3.pdf>>, pp. 1-14.16Becker, at al., "Cassandra: Flexible Trust Management, Applied to Electronic Health Records", IEEE Computer Security Foundations Workshop, 2004, pp. 139-154.17Becker, et al., "Cassandra: Distributed Access Control Policies with Tunable Expressiveness", IEEE 5th International Workshop on Policies for Distributed Systems and Networks, 2004, pp. 159-168.18Becker, et al., "SecPAL: Design and Semantics of a Decentralized Authorization Language-Technical Report MSR-TR-2006-120", Sep. 1, 2006, Microsoft Research, Cambridge, UK, retrieved from the Internet at http://courses.cs.vt.edu/cs5204/fall10-kafura-NVC/Papers/Security/SecPal-Reference.pdf on Dec. 21, 2011, 46 pgs.19Becker, et al., "SecPAL: Design and Semantics of a Decentralized Authorization Language�Technical Report MSR-TR-2006-120", Sep. 1, 2006, Microsoft Research, Cambridge, UK, retrieved from the Internet at http://courses.cs.vt.edu/cs5204/fall10-kafura-NVC/Papers/Security/SecPal-Reference.pdf on Dec. 21, 2011, 46 pgs.20Bindings for the OASIS Security Assertion Markup Language (SAML) V2.0, OASIS Standard , Mar. 15, 2005.21Blaze, et al., "Decentralized Trust Management", IEEE Symposium on Security and Privacy, 1996, pp. 164-173.22Blaze, et al., "The Role of Trust Management in Distributed Systems Security", Secure Internet Programming, 1999, pp. 185-210.23Cederquist et al., "An Audit Logic for Accountability", IEEE, 2005, pp. #1-pp. #10.24Chadwick, "An Authorisation Interface for the GRID", In the Proceedings of the E-Science All Hands Meeting, Nottingham, Sep. 2003, 14 pgs.25Chapin, et al., "Risk Assessment in Distributed Authorization", In the Proceedings of the 2005 ACM Workshop on Formal Methods in Security Engineering, 2005, pp. 33-42.26Chen, et al., "Tabled Evaluations with Delaying for General Logic Programs", Journal of the ACM, vol. 43, No. 1, Jan. 1996, pp. 20-74.27Chinese Office Action mailed Apr. 5, 2012 for Chinese patent application No. 200780033359.7, a counterpart foreign application of U.S. Appl. No. 11/530,446, 9 pages.28Dai et al., "Logic Based Authorization Policy Engineering", 2001, pp. #1-pp. #9.29Damianou, et al., "Ponder: A Language for Specifying Security and Management Policies for Distributed Systems", Imperial College of Science, Technology and Medicine, London, U.K, Oct. 20, 2000, available at >, pp. 1-49.30Damianou, et al., "Ponder: A Language for Specifying Security and Management Policies for Distributed Systems", Imperial College of Science, Technology and Medicine, London, U.K, Oct. 20, 2000, available at <<http://www.doc.ic.ac.uk/�ncd/policies/files/PonderSpec.pdf>>, pp. 1-49.31DeTreville, "Binder, a Logic-Based Security Language", IEEE Computer Society, In the Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002, 10 pgs.32DeTreville, "Binder, A Logic-Based Security Language", IEEE Symposium on Security and Privacy, 2002, pp. 105-113.33Ellison, et al., "RFC 2693-SPKI Certificate Theory", available at <<http://www.ietf.org/rfc/rfc2693.txt, accessed on Sep. 27, 2006, 38 pages.34Ellison, et al., "RFC 2693�SPKI Certificate Theory", available at <<http://www.ietf.org/rfc/rfc2693.txt, accessed on Sep. 27, 2006, 38 pages.35Erdos, et al., "Shibboleth-Architecture", Draft Version 4, Nov. 2001, 39 pgs.36European Office Action mailed, 2012 for European patent application No. 07842066.8, a counterpart foreign application of U.S. Appl. No. 11/530,446, 5 pages.37Farrell et al., "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Open, 2004, Aug. 2004, pp. #1-pp. #87.38Final Office Action for U.S. Appl. No. 11/530,427, mailed on Jun. 29, 2011, Blair B. Dillaway, "Variable Expressions in Security Assertions".39Final Office Action for U.S. Appl. No. 11/530,429, mailed on Jul. 8, 2011, Blair B. Dillaway, "Authorization Decisions with Principal Attributes".40Final Office Action for U.S. Appl. No. 11/530,433, mailed on Jul. 8, 2011, Blair B. Dillaway, "Fact Qualifiers in Security Scenarios".41 *Geuer-Pollmann et al., "Web Services and Web Service Security Standards," Information Security Technical Report, 2005, pp. 16-23.42 *Haidar et al., "An Extended RBAC Profile of XACML," ACM, Nov. 2006, pp. 13-20.43Hallam-Baker et al., "Web Services Security: SAML Token Profile", OASIS Open, Sep. 23, 2002, pp. #1-pp. #25.44Hallam-Barker, "Security Assertion Markup Language Straw-man Architecture", VeriSign, 2001, Feb. 16, 2001, pp. #1-pp. #17.45Halpern, et al., "Using First-Order Logic to Reason About Policies", IEEE Computer Security Foundations Workshop, 2003, available at >, pp. 187-201.46Halpern, et al., "Using First-Order Logic to Reason About Policies", IEEE Computer Security Foundations Workshop, 2003, available at <<http://arxiv.org/PS�cache/cs/pdf/0601/0601034.pdf>>, pp. 187-201.47Hughs et al., "Security Assertion Markup Language (SAML) 2.0 Technical Overview", OASIS, 2004, pp. #1-pp. #36.48Jim, "SD3: A Trust Management System with Certified Evaluation", Proceedings of the 2001 IEEE Symposium on Security and Privacy, 2001, available at <<http://www.research.att.com/~trevor/papers/JimOakland2001.pdf#search=%22%22SD3%3A%20A%20Trust%20Management%20System%20with%20Certified%20Evaluation%22%22>>, pp. 106-115.49Jim, "SD3: A Trust Management System with Certified Evaluation", Proceedings of the 2001 IEEE Symposium on Security and Privacy, 2001, available at <<http://www.research.att.com/�trevor/papers/JimOakland2001.pdf#search=%22%22SD3%3A%20A%20Trust%20Management%20System%20with%20Certified%20Evaluation%22%22>>, pp. 106-115.50Kagal, et al., "Trust-Based Security in Pervasive Computing Environments", IEEE Computer, Dec. 1, 2011, vol. 34, No. 12, pp. 154-157.51Keoh et al., "Towards Flexible Credential Verification in Mobile Ad-hoc Networks", ACM 2002, POMC '02, Oct. 30-31, 2002, pp. #58-pp. #65.52Lee, et al., "Security Assertion Exchange for the Agent on the Semantic Web", In the Proceedings of the IADIS International Conference WWW/Internet, Madrid, Spain, 2 Volumes, 2004, pp. 302-308 (9 pgs.).53Li, et al., "A Practically Implementable and Tractable Delegation Logic", IEEE Symposium on Security and Privacy, 2000, available at >, pp. 27-42.54Li, et al., "Datalog with Constraints: A Foundation for Trust Management Languages", Proc. PADL, 2003, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/cdatalog-padl03.pdf#search=%22%22Datalog%20with%20Constraints%3A%20A%20Foundation%20For%20Trust%20Management%20Languages%22%22>>, pp. 58-73.55Li, et al., "Design of a Role-Based Trust Management Framework", Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/rt-oakland02.pdf#search=%22%22Design%20of%20a%20Role-Based%20Trust%20Management%20Framework%22%22>>, pp. 114-130.56Li, et al., "A Practically Implementable and Tractable Delegation Logic", IEEE Symposium on Security and Privacy, 2000, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/dl�oakland00.pdf>>, pp. 27-42.57Li, et al., "Datalog with Constraints: A Foundation for Trust Management Languages", Proc. PADL, 2003, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/cdatalog�padl03.pdf#search=%22%22Datalog%20with%20Constraints%3A%20A%20Foundation%20For%20Trust%20Management%20Languages%22%22>>, pp. 58-73.58Li, et al., "Design of a Role-Based Trust Management Framework", Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002, available at <<http://www.cs.purdue.edu/homes/ninghui/papers/rt�oakland02.pdf#search=%22%22Design%20of%20a%20Role-Based%20Trust%20Management%20Framework%22%22>>, pp. 114-130.59Navarro et al., "Constrained Delegation in XML-based Access Control and Digital Right Management Standards", Communication, Network and Information Security 2003, pp. #1-pp. #6.60Non-Final Office Action for U.S. Appl. No. 11/530,443, mailed on May 26, 2011, Blair B. Dillaway, "Security Assertion Revocation".61Notice of Allowance from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed Apr. 4, 2011, 8 pages.62Notice of Allowance from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,439, mailed Aug. 23, 2010, 22 pages.63Office Action for U.S. Appl. No. 11/530,564, mailed on Apr. 12, 2011, Moritz Becker, "Security Language Expressions for Logic Resolution".64Office Action for U.S. Appl. No. 12/902,892, mailed on Aug. 5, 2011, Blair B. Dillaway, "Auditing Authorization Decisions".65Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,427, mailed Mar. 3, 2010, 26 pages.66Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,427, mailed on Aug. 20, 2010, 23 pages.67Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,427, mailed on Dec. 23, 2010, 33 pages.68Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,429, mailed on Aug. 20, 2009, 24 pages.69Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,429, mailed on Jan. 19, 2011, 34 pgs.70Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,429, mailed on Mar. 2, 2010, 21 pages.71Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433 mailed on Jan. 18, 2011, 35 pages.72Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433, mailed Mar. 1, 2009, 26 pages.73Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,433, mailed on Aug. 21, 2009, 24 pages.74Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed May 20, 2010, 35 pages.75Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,438, mailed Oct. 29, 2010, 31 pages.76Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,439, mailed on Mar. 5, 2010, 32 pages.77Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,443, mailed Dec. 7, 2010, 21 pgs.78Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,443, mailed on Jun. 1, 2010, 30 pages.79Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,446 mailed on Feb. 3, 2011, 35 pages.80Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,543, mailed on Dec. 27, 2010, 17 pgs.81Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,543, mailed on Jul. 8, 2010, 12 pages.82Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,556 mailed on Feb. 4, 2011, 8 pages.83Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,556, mailed on Aug. 23, 2010, 14 pages.84Office Action from the U.S. Patent and Trademark Office for U.S. Appl. No. 11/530,564, mailed on Sep. 15, 2010, 17 pages.85PCT Search Report for Applicaiotn No. PCT/US2007/077898, mailed on Feb. 5, 2008, 10 pgs.86PCT Search Report for Application No. PCT/US2007/078081, mailed on Jan. 22, 2008, 10 pgs.87Pfenning et al., "System Description: Twelf- A Meta-Logical Framework for Deductive Systems", 1999, pp. #1-pp. #5.88Pimlott, et al., "Soutei, a Logic-Based Trust-Management System", Functional and Logic Programming, 8th International Symposium, FLOPS 2006 Proceedings, LNCS 3945, Apr. 24-26, 2006, pp. 130-145.89Ribeiro, et al., "SPL: An access control language for security policies with comples constraints", retrieved at >, IST/INESC, Portugal, pp. 1-22.90Ribeiro, et al., "SPL: An access control language for security policies with comples constraints", retrieved at <<http://www.gsd.inesc-id.pt/�cnr/splii.pdf>>, IST/INESC, Portugal, pp. 1-22.91Rivest, et al., "SDSI-A Simple Distributed Security Infrastructure", available at >, Apr. 30, 1996, pp. 1-37.92Rivest, et al., "SDSI�A Simple Distributed Security Infrastructure", available at <<http://theory.lcs.mit.edu/�rivest/sdsi10.ps>>, Apr. 30, 1996, pp. 1-37.93 *Scott D. Stoller, "Trust Management a Tutorial," May 2006, Stony Brook University, pp. 19-20.94The Chinese Office Action mailed Jan. 30, 2012 for Chinese patent application No. 201110162110.4, a counterpart foreign application of US patent No. 8,060,931, 6 pages.95The European Office Action mailed Dec. 22, 2011 for European patent application No. 07841896.9, a counterpart foreign application of US patent No. 8060931, 4 pages.96The Extended European Search Report mailed Jan. 18, 2012 for European patent application No. 07842186.4, 9 pages.97The Extended European Search Report mailed Jul. 22, 2011 for European patent application No. 07842066.8.98Translated Chinese Notice of Grant of Patent Right for Invention mailed Mar. 25, 2011 for Chinese Patent Application No. 200780033322.4 a counterpart foreign application for U.S. Appl. No. 11/530,438, 4 pages.99Translated Chinese Office Action mailed Aug. 25, 2011 for Chinese patent application No. 2007800333591, a counterpart foreign application of U.S. Appl. No. 11/530,446, 15 pages.100Translated Chinese Office Action mailed Jan. 26, 2011 for Chinese Patent Application No. 200780033359.7, a counterpart foreign application for U.S. Appl. No. 11/530,446, 8 pages.101Translated Japanese Office Action mailed Jan. 24, 2012 for Japanese patent application No. 2009-527617, a counterpart foreign application of US patent application No. 11530556, 14 pages.102Upadhyay, et al., "Generic Security Service API Version 2: Java Bindings Update: draft-ietf-kitten-rfc2853bis-01.txt", IETF Standard-Working-Draft, Internet Engineering Task Force, IETF, CH, vol. kitten, No. 1, Jan. 27, 2006.103Wainer, et al., "A Fine-Grained, Controllable, User-to-User Delegatino Method in RBAC", Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies, SACMAT, Jan. 1, 2005, p. 59.104Wang et al., "Extending the Security Assertion Markup Language to Support Delegation for Web Services and Grid Services", IEEE International Conference on Web Services 2005, Orlando, Fl, Jul. 12-15, 2005, pp. #1-pp. #8.105Whitehead et al., "By Reason and Authority: A System for Authorization of Proof-Carrying Code", IEEE Computer Secuirty Foundations Workshop (CSFW'04) 2004, pp. #1-pp. #15.106Wu, et al., "Evaluation of Authorization-Authentication Tools: PERMIS, OASIS, XACML, and SHIBOLETH", Technical Report CS-TR-935, University of Newcastle upon Tyne, 2005.107Yin, et al., "A Rule-based Framework for Role-based Constrained Delegation", Proceedings of the 3rd International Conference on Information Security, INFOSECU, Jan. 1, 2004, p. 186.* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS8321915 *Mar 31, 2008Nov 27, 2012Amazon Technologies, Inc.Control of access to mass storage systemUS9003193Feb 17, 2013Apr 7, 2015Institute For Information IndustryElectronic apparatus for delegation management and delegation management methods thereof* Cited by examinerClassifications U.S. Classification726/2, 726/9, 726/20, 726/4, 713/182, 726/26International ClassificationG06F17/30, H04L29/06Cooperative ClassificationG06F2221/2145, G06F21/62European ClassificationG06F21/62Legal EventsDateCodeEventDescriptionDec 9, 2014ASAssignmentOwner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034542/0001Effective date: 20141014Dec 5, 2006ASAssignmentOwner name: MICROSOFT CORPORATION, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:DILLAWAY, BLAIR B.;BECKER, MORITZ Y.;GORDON, ANDREW D.;AND OTHERS;REEL/FRAME:018607/0294;SIGNING DATES FROM 20061017 TO 20061025Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:DILLAWAY, BLAIR B.;BECKER, MORITZ Y.;GORDON, ANDREW D.;AND OTHERS;SIGNING DATES FROM 20061017 TO 20061025;REEL/FRAME:018607/0294Owner name: MICROSOFT CORPORATION, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:DILLAWAY, BLAIR B.;BECKER, MORITZ Y.;GORDON, ANDREW D.;AND OTHERS;SIGNING DATES FROM 20061017 TO 20061025;REEL/FRAME:018607/0294RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services