Nothing Special   »   [go: up one dir, main page]

NO20021341L - Autentisering og tilgangskontroll - Google Patents

Autentisering og tilgangskontroll

Info

Publication number
NO20021341L
NO20021341L NO20021341A NO20021341A NO20021341L NO 20021341 L NO20021341 L NO 20021341L NO 20021341 A NO20021341 A NO 20021341A NO 20021341 A NO20021341 A NO 20021341A NO 20021341 L NO20021341 L NO 20021341L
Authority
NO
Norway
Prior art keywords
authentication
access control
general
pki
electronic
Prior art date
Application number
NO20021341A
Other languages
English (en)
Other versions
NO20021341D0 (no
NO318842B1 (no
Inventor
Judith Rosseboe
Jon Oelnes
Original Assignee
Telenor Asa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Telenor Asa filed Critical Telenor Asa
Priority to NO20021341A priority Critical patent/NO318842B1/no
Publication of NO20021341D0 publication Critical patent/NO20021341D0/no
Priority to RU2004130424/09A priority patent/RU2308755C2/ru
Priority to PCT/NO2003/000093 priority patent/WO2003079167A1/en
Priority to CA002479183A priority patent/CA2479183A1/en
Priority to JP2003577102A priority patent/JP2005521279A/ja
Priority to US10/507,131 priority patent/US20050144463A1/en
Priority to AU2003212723A priority patent/AU2003212723B2/en
Priority to CNA038108100A priority patent/CN1745356A/zh
Priority to EP03708750A priority patent/EP1485771A1/en
Publication of NO20021341L publication Critical patent/NO20021341L/no
Publication of NO318842B1 publication Critical patent/NO318842B1/no

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0815Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/41User authentication where a single sign-on provides access to a plurality of computers
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272Virtual private networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823Network architectures or network communication protocols for network security for authentication of entities using certificates
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083Network architectures or network communication protocols for network security for authentication of entities using passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/102Entity profiles
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/16Implementing security features at a particular protocol layer
    • H04L63/166Implementing security features at a particular protocol layer at the transport layer

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer And Data Communications (AREA)
  • Storage Device Security (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

Denne oppfinnelsen omhandler generelt autentisering, autorisering, og tilgangskontroll, og mer spesifikt en metode og et system for generell Public Key Infrastructure basert på autentisering som tillater brukerne å ha kun én elektronisk ID for sikker tilgang til alle tjenester. Systemet beskrevet overgår dagens teknologi ved å tilveiebringe generell, PKI-basert autentisering. Ved å tilby validering og muligens også autoriseringstjenester til andre tjenestetilbydere, kan systemet tilveiebringe en infrastruktur for generell, PKI- basert autentisering, og håndtering av elektroniske 10'er fra i prinsippet enhver utgiver av slike.
NO20021341A 2002-03-18 2002-03-18 Autentisering og tilgangskontroll NO318842B1 (no)

Priority Applications (9)

Application Number Priority Date Filing Date Title
NO20021341A NO318842B1 (no) 2002-03-18 2002-03-18 Autentisering og tilgangskontroll
EP03708750A EP1485771A1 (en) 2002-03-18 2003-03-18 Single sign-on secure service access
JP2003577102A JP2005521279A (ja) 2002-03-18 2003-03-18 セキュア・サービス・アクセス提供システム及び方法
PCT/NO2003/000093 WO2003079167A1 (en) 2002-03-18 2003-03-18 Single sign-on secure service access
CA002479183A CA2479183A1 (en) 2002-03-18 2003-03-18 Single sign-on secure service access
RU2004130424/09A RU2308755C2 (ru) 2002-03-18 2003-03-18 Система и способ предоставления доступа к защищенным услугам с однократным вводом пароля
US10/507,131 US20050144463A1 (en) 2002-03-18 2003-03-18 Single sign-on secure service access
AU2003212723A AU2003212723B2 (en) 2002-03-18 2003-03-18 Single sign-on secure service access
CNA038108100A CN1745356A (zh) 2002-03-18 2003-03-18 单一签名安全服务访问

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
NO20021341A NO318842B1 (no) 2002-03-18 2002-03-18 Autentisering og tilgangskontroll

Publications (3)

Publication Number Publication Date
NO20021341D0 NO20021341D0 (no) 2002-03-18
NO20021341L true NO20021341L (no) 2003-09-19
NO318842B1 NO318842B1 (no) 2005-05-09

Family

ID=19913444

Family Applications (1)

Application Number Title Priority Date Filing Date
NO20021341A NO318842B1 (no) 2002-03-18 2002-03-18 Autentisering og tilgangskontroll

Country Status (9)

Country Link
US (1) US20050144463A1 (no)
EP (1) EP1485771A1 (no)
JP (1) JP2005521279A (no)
CN (1) CN1745356A (no)
AU (1) AU2003212723B2 (no)
CA (1) CA2479183A1 (no)
NO (1) NO318842B1 (no)
RU (1) RU2308755C2 (no)
WO (1) WO2003079167A1 (no)

Families Citing this family (83)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6965999B2 (en) * 1998-05-01 2005-11-15 Microsoft Corporation Intelligent trust management method and system
US7444368B1 (en) * 2000-02-29 2008-10-28 Microsoft Corporation Methods and systems for selecting methodology for authenticating computer systems on a per computer system or per user basis
US7568218B2 (en) * 2002-10-31 2009-07-28 Microsoft Corporation Selective cross-realm authentication
KR100561629B1 (ko) * 2003-12-03 2006-03-20 한국전자통신연구원 보안 정보 통합 관리 시스템 및 그 방법
US8473620B2 (en) * 2003-04-14 2013-06-25 Riverbed Technology, Inc. Interception of a cloud-based communication connection
US7496755B2 (en) * 2003-07-01 2009-02-24 International Business Machines Corporation Method and system for a single-sign-on operation providing grid access and network access
US7536543B1 (en) * 2003-10-09 2009-05-19 Nortel Networks Limited System and method for authentication and authorization using a centralized authority
US7574603B2 (en) 2003-11-14 2009-08-11 Microsoft Corporation Method of negotiating security parameters and authenticating users interconnected to a network
US7966487B2 (en) 2004-01-09 2011-06-21 Corestreet, Ltd. Communication-efficient real time credentials for OCSP and distributed OCSP
US7506369B2 (en) * 2004-05-27 2009-03-17 Microsoft Corporation Secure federation of data communications networks
US7617501B2 (en) 2004-07-09 2009-11-10 Quest Software, Inc. Apparatus, system, and method for managing policies on a computer having a foreign operating system
KR100813791B1 (ko) * 2004-09-30 2008-03-13 주식회사 케이티 유무선 통합서비스 망에서의 개인 이동성을 위한 통합인증 처리 장치 및 그 방법
US7995758B1 (en) * 2004-11-30 2011-08-09 Adobe Systems Incorporated Family of encryption keys
US7676587B2 (en) * 2004-12-14 2010-03-09 Emc Corporation Distributed IP trunking and server clustering for sharing of an IP server address among IP servers
US20060225128A1 (en) * 2005-04-04 2006-10-05 Nokia Corporation Measures for enhancing security in communication systems
US20060294383A1 (en) * 2005-06-28 2006-12-28 Paula Austel Secure data communications in web services
KR100648986B1 (ko) 2005-08-05 2006-11-27 주식회사 비티웍스 전자명함 서비스 시스템 및 방법과 전자명함 인증 장치 및방법과 이를 위한 컴퓨터로 읽을 수 있는 기록 매체
US8438628B2 (en) * 2005-08-10 2013-05-07 Riverbed Technology, Inc. Method and apparatus for split-terminating a secure network connection, with client authentication
US8613071B2 (en) * 2005-08-10 2013-12-17 Riverbed Technology, Inc. Split termination for secure communication protocols
US8478986B2 (en) * 2005-08-10 2013-07-02 Riverbed Technology, Inc. Reducing latency of split-terminated secure communication protocol sessions
US20090083537A1 (en) * 2005-08-10 2009-03-26 Riverbed Technology, Inc. Server configuration selection for ssl interception
US8775586B2 (en) * 2005-09-29 2014-07-08 Avaya Inc. Granting privileges and sharing resources in a telecommunications system
US8701168B2 (en) * 2005-11-21 2014-04-15 Oracle International Corporation Method and apparatus for associating a digital certificate with an enterprise profile
US7904949B2 (en) 2005-12-19 2011-03-08 Quest Software, Inc. Apparatus, systems and methods to provide authentication services to a legacy application
US8087075B2 (en) * 2006-02-13 2011-12-27 Quest Software, Inc. Disconnected credential validation using pre-fetched service tickets
US8782393B1 (en) 2006-03-23 2014-07-15 F5 Networks, Inc. Accessing SSL connection data by a third-party
DE102006018889A1 (de) * 2006-04-18 2007-10-25 Siemens Ag Verfahren zum Beschränken des Zugriffs auf Daten von Gruppenmitgliedern und Gruppenverwaltungsrechner
FI20065288A (fi) * 2006-05-03 2007-11-04 Emillion Oy Autentikointi
US8429712B2 (en) 2006-06-08 2013-04-23 Quest Software, Inc. Centralized user authentication system apparatus and method
US8086710B2 (en) 2006-10-30 2011-12-27 Quest Software, Inc. Identity migration apparatus and method
US7895332B2 (en) 2006-10-30 2011-02-22 Quest Software, Inc. Identity migration system apparatus and method
US20080114987A1 (en) * 2006-10-31 2008-05-15 Novell, Inc. Multiple security access mechanisms for a single identifier
US8572716B2 (en) 2007-04-23 2013-10-29 Microsoft Corporation Integrating operating systems with content offered by web based entities
US8738897B2 (en) * 2007-04-25 2014-05-27 Apple Inc. Single sign-on functionality for secure communications over insecure networks
US9159179B2 (en) * 2007-05-31 2015-10-13 Ricoh Company, Ltd. Common access card security and document security enhancement
KR101393012B1 (ko) * 2007-07-03 2014-05-12 삼성전자주식회사 라이센스 관리 시스템 및 방법
US8595816B2 (en) * 2007-10-19 2013-11-26 Nippon Telegraph And Telephone Corporation User authentication system and method for the same
EP2053531B1 (en) * 2007-10-25 2014-07-30 BlackBerry Limited Authentication certificate management for access to a wireless communication device
US8397077B2 (en) 2007-12-07 2013-03-12 Pistolstar, Inc. Client side authentication redirection
US8156550B2 (en) * 2008-06-20 2012-04-10 Microsoft Corporation Establishing secure data transmission using unsecured E-mail
US8631134B2 (en) * 2008-07-30 2014-01-14 Visa U.S.A. Inc. Network architecture for secure data communications
KR101094577B1 (ko) * 2009-02-27 2011-12-19 주식회사 케이티 인터페이스 서버의 사용자 단말 인증 방법과 그 인터페이스 서버 및 사용자 단말
US8707043B2 (en) * 2009-03-03 2014-04-22 Riverbed Technology, Inc. Split termination of secure communication sessions with mutual certificate-based authentication
US20100241852A1 (en) * 2009-03-20 2010-09-23 Rotem Sela Methods for Producing Products with Certificates and Keys
US20100318791A1 (en) * 2009-06-12 2010-12-16 General Instrument Corporation Certificate status information protocol (csip) proxy and responder
CN101572888B (zh) * 2009-06-18 2012-03-28 浙江大学 移动终端中多服务引擎交叉验证方法
US9608826B2 (en) * 2009-06-29 2017-03-28 Jpmorgan Chase Bank, N.A. System and method for partner key management
US8255984B1 (en) 2009-07-01 2012-08-28 Quest Software, Inc. Single sign-on system for shared resource environments
US8683196B2 (en) * 2009-11-24 2014-03-25 Red Hat, Inc. Token renewal
WO2011078723A1 (ru) * 2009-12-25 2011-06-30 Starodubtsev Valeriy Ivanovich Система заказов и продажи товаров и услуг (варианты), способ предложения к продаже и оформления заказов, способ продажи товаров и услуг
WO2011091051A2 (en) * 2010-01-19 2011-07-28 Visa International Service Association Remote variable authentication processing
US9118485B2 (en) * 2010-02-26 2015-08-25 Red Hat, Inc. Using an OCSP responder as a CRL distribution point
US8700892B2 (en) 2010-03-19 2014-04-15 F5 Networks, Inc. Proxy SSL authentication in split SSL for client-side proxy agent resources with content insertion
US8566468B2 (en) * 2010-05-12 2013-10-22 Alcatel Lucent Extensible data driven message validation
US8854177B2 (en) * 2010-12-02 2014-10-07 Viscount Security Systems Inc. System, method and database for managing permissions to use physical devices and logical assets
US8836470B2 (en) 2010-12-02 2014-09-16 Viscount Security Systems Inc. System and method for interfacing facility access with control
KR20120069361A (ko) * 2010-12-20 2012-06-28 한국전자통신연구원 네트워크 공격 관리 방법 및 시스템, 네트워크 공격 관리를 위한 네트워크 서비스 제공 장치
US9203613B2 (en) 2011-09-29 2015-12-01 Amazon Technologies, Inc. Techniques for client constructed sessions
CN107017984B (zh) * 2011-09-29 2020-09-01 亚马逊技术股份有限公司 基于参数的密钥推导
US8844013B2 (en) * 2011-10-04 2014-09-23 Salesforce.Com, Inc. Providing third party authentication in an on-demand service environment
JP5812797B2 (ja) * 2011-10-14 2015-11-17 キヤノン株式会社 情報処理システム、画像処理装置、制御方法、コンピュータプログラムおよびユーザ装置
US8752203B2 (en) * 2012-06-18 2014-06-10 Lars Reinertsen System for managing computer data security through portable data access security tokens
JP6019839B2 (ja) * 2012-07-09 2016-11-02 沖電気工業株式会社 入力装置及び紙葉類取扱装置
CN103716292A (zh) * 2012-09-29 2014-04-09 西门子公司 一种跨域的单点登录的方法和设备
US9270667B2 (en) * 2012-11-01 2016-02-23 Microsoft Technology Licensing, Llc Utilizing X.509 authentication for single sign-on between disparate servers
US9565211B2 (en) 2013-03-15 2017-02-07 True Ultimate Standards Everywhere, Inc. Managing exchanges of sensitive data
US9864873B2 (en) 2013-03-15 2018-01-09 Trustarc Inc Managing data handling policies
JP5920260B2 (ja) * 2013-03-19 2016-05-18 富士ゼロックス株式会社 通信システム、中継装置及びプログラム
US9419963B2 (en) * 2013-07-02 2016-08-16 Open Text S.A. System and method for controlling access
US10326597B1 (en) 2014-06-27 2019-06-18 Amazon Technologies, Inc. Dynamic response signing capability in a distributed system
RU2610258C2 (ru) * 2014-11-28 2017-02-08 Общество С Ограниченной Ответственностью "Яндекс" Способ (варианты) и система (варианты) анонимной авторизации на сервисе пользователя
US9613204B2 (en) * 2014-12-23 2017-04-04 Document Storage Systems, Inc. Computer readable storage media for legacy integration and methods and systems for utilizing same
US9705859B2 (en) * 2015-12-11 2017-07-11 Amazon Technologies, Inc. Key exchange through partially trusted third party
JP6508067B2 (ja) * 2016-01-14 2019-05-08 株式会社デンソー 車両用データ通信システム
US10116440B1 (en) 2016-08-09 2018-10-30 Amazon Technologies, Inc. Cryptographic key management for imported cryptographic keys
EP3297242B1 (en) * 2016-09-20 2018-09-05 Deutsche Telekom AG A system and a method for providing a user with an access to different services of service providers
RU2693330C2 (ru) * 2017-12-27 2019-07-02 Общество С Ограниченной Ответственностью "Яндекс" Способ и система для авторизации пользователя для выполнения действия в электронном сервисе
CN110362412A (zh) 2018-04-09 2019-10-22 华为技术有限公司 一种服务api调用方法和相关装置
RU2709288C1 (ru) * 2019-03-04 2019-12-17 федеральное государственное казенное военное образовательное учреждение высшего образования "Краснодарское высшее военное училище имени генерала армии С.М. Штеменко" Министерства обороны Российской Федерации Способ защищенного доступа к базе данных
CN112214211B (zh) * 2020-09-25 2023-08-01 华迪计算机集团有限公司 基于soa架构的应用系统集成平台
EP4002756B1 (en) * 2020-11-24 2022-11-02 Axis AB Systems and methods of managing a certificate associated with a component located at a remote location
CN114398612B (zh) * 2021-12-08 2024-05-03 国网辽宁省电力有限公司 一种基于微服务的ict虚拟运营安全接入管控方法
CN115225350B (zh) * 2022-07-01 2024-05-31 浪潮云信息技术股份公司 基于国密证书的政务云加密登录验证方法及存储介质

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7137006B1 (en) * 1999-09-24 2006-11-14 Citicorp Development Center, Inc. Method and system for single sign-on user access to multiple web servers
US5944824A (en) * 1997-04-30 1999-08-31 Mci Communications Corporation System and method for single sign-on to a plurality of network elements
US6182142B1 (en) * 1998-07-10 2001-01-30 Encommerce, Inc. Distributed access management of information resources
CA2400623C (en) * 2000-03-17 2007-03-20 At&T Corp. Web-based single-sign-on authentication mechanism
US6853728B1 (en) * 2000-07-21 2005-02-08 The Directv Group, Inc. Video on demand pay per view services with unmodified conditional access functionality
AU2002212345A1 (en) * 2000-11-09 2002-05-21 International Business Machines Corporation Method and system for web-based cross-domain single-sign-on authentication
US7185364B2 (en) * 2001-03-21 2007-02-27 Oracle International Corporation Access system interface

Also Published As

Publication number Publication date
NO20021341D0 (no) 2002-03-18
AU2003212723A1 (en) 2003-09-29
RU2004130424A (ru) 2005-07-10
JP2005521279A (ja) 2005-07-14
NO318842B1 (no) 2005-05-09
AU2003212723B2 (en) 2007-05-24
US20050144463A1 (en) 2005-06-30
CN1745356A (zh) 2006-03-08
RU2308755C2 (ru) 2007-10-20
WO2003079167A1 (en) 2003-09-25
CA2479183A1 (en) 2003-09-25
EP1485771A1 (en) 2004-12-15

Similar Documents

Publication Publication Date Title
NO20021341L (no) Autentisering og tilgangskontroll
WO2003015370A3 (en) Data certification method and apparatus
NO20023738L (no) Fremgangsmåte til å fastslå autentsiteten ved identiteten til en tjenestebruker og innretning til utförelse av fremgangsmåte
HK1060810A1 (en) System for providing electronic contact information from a central source and method for updating contact information
EP1322088A3 (en) Method and apparatus for centralized processing of hardware tokens for PKI solutions
TWI268688B (en) System and method for acoustic two factor authentication
SG152061A1 (en) Data authentication and provisioning method and system
JP2005530368A5 (no)
MXPA03010476A (es) Sistema y metodo para transmitir informacion reducida de un certificado para realizar operaciones de encriptacion.
WO2004092886A3 (en) Associating software with hardware using cryptography
EP2869231B1 (en) Verification of authenticity of a maintenance means connected to a controller of a passenger transportation/access device of a building and provision and obtainment of a license key for use therein
HK1090998A1 (en) Portable security transaction protocol
WO2005119995A3 (en) Method and apparatus for providing temporary access to a network device
EA200970201A1 (ru) Способ и система для обеспечения специфических для доступа ключей
CA2231082A1 (en) Method and apparatus for storing and controlling access to information
WO2001095068A3 (en) A method for the application of implicit signature schemes
WO2005065134A3 (en) Mobile device and method for providing certificate based cryptography
EP1109351A3 (en) Cryptographic key management
SE0002962D0 (sv) Securing Arbitrary communication services
ATE506797T1 (de) Datenauthentifizierungsverfahren und agent basiertes system
MXPA04012105A (es) Metodo, sistema yterminal para recibir el contenido con acceso autorizado.
WO2001099070A3 (en) An improved method and system for conducting secure payments over a computer network
EP1276066A3 (en) Licensing method and license providing system
AU2002349348A1 (en) Identification of a user of a mobile terminal and generation of an action authorisation
TW200520493A (en) Method and system for authenticating a disc over the internet

Legal Events

Date Code Title Description
MM1K Lapsed by not paying the annual fees