Michael Robert Dilger

US Patent:

7620980, Nov 17, 2009

Filed:

Jul 21, 1999

Appl. No.:

09/357726

Inventors:

David L. Wood - Louisville CO, US
Michael B. Dilger - Redwood City CA, US
Thomas Pratt - Superior CO, US
Derk Norton - Louisville CO, US
Stan D. Shurygailo - Boulder CO, US

Assignee:

Sun Microsystems, Inc. - Santa Clara CA

International Classification:

G06F 17/00
H04L 9/00
G06F 17/28

US Classification:

726 14, 713153, 713168, 715239

Abstract:

A secure data broker has been developed, which provides a restricted message based data exchange between a client application and a secured information resource by allowing registered or verified messages to be brokered across a security barrier. In some configurations, both requests and responses are validated and brokered across the security barrier. In other configuration, either requests or responses are validated. To support validation, messages are formatted in accordance with a predefined message specification for at least part of a transaction path between a client application and an information resource accessed by the client application.

US Patent:

6691232, Feb 10, 2004

Filed:

Aug 5, 1999

Appl. No.:

09/368504

Inventors:

David L. Wood - Louisville CO
Thomas Pratt - Superior CO
Michael B. Dilger - Redwood City CA
Derk Norton - Louisville CO
Yunas Nadiadi - Pinner Middx, GB

Assignee:

Sun Microsystems, Inc. - Santa Clara CA

International Classification:

G06F 127

US Classification:

713201, 713200

Abstract:

By including environment information in a security policy, a security architecture advantageously allows temporal, locational, connection type and/or client capabilities-related information to affect the sufficiency of a given credential type (and associated authentication scheme) for access to a particular information resource. In some configurations, time of access, originating location (physical or network) and/or connection type form a risk profile that can be factored into credential type sufficiency. In some configurations, changing environmental parameters may cause a previously sufficient credential to become insufficient. Alternatively, an authenticated credential previously insufficient for access at a given trust level may be sufficient based on a changed or more fully parameterized session environment. In some configurations, the use of session tracking facilites (e. g. , the information content of session tokens) can be tailored to environmental parameters (e. g.