WO2001044903A3 - Positive information profiling system - Google Patents

Positive information profiling system Download PDF

Info

Publication number
WO2001044903A3
WO2001044903A3 PCT/GB2000/003870 GB0003870W WO0144903A3 WO 2001044903 A3 WO2001044903 A3 WO 2001044903A3 GB 0003870 W GB0003870 W GB 0003870W WO 0144903 A3 WO0144903 A3 WO 0144903A3
Authority
WO
WIPO (PCT)
Prior art keywords
positive
urls
virtual page
extensible
client identifier
Prior art date
Application number
PCT/GB2000/003870
Other languages
French (fr)
Other versions
WO2001044903A2 (en
Inventor
David Robert Wray
David John Blanchfield
Original Assignee
Authoriszor Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from GB0020386A external-priority patent/GB2355323A/en
Application filed by Authoriszor Ltd filed Critical Authoriszor Ltd
Priority to AU2000275469A priority Critical patent/AU2000275469A1/en
Publication of WO2001044903A2 publication Critical patent/WO2001044903A2/en
Publication of WO2001044903A3 publication Critical patent/WO2001044903A3/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/102—Entity profiles
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2127—Bluffing
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2129—Authenticate client device independently of the user
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2149—Restricted operating environment

Abstract

This is a system and method for electronic security over a network which provides positive identification of clients through an extensible positive client identifier (EPCI), and provides data integrity and availability through the use of pseudo-URLs (called PURLs) in conjunction with a virtual page publication system (VPPS), a positive information profiling system (PIPS) and an active security responder, (ASR) at the host. The extensible positive client identifier examines a number of factors associated with a potential requesting user's system and relationships to create a client identification key. The extensible positive client identifier reevaluates itself on every access of every object requested. It silently indicates when a self-check has failed. If a theft or impersonation is detected, it is dealt with by the invention as defined by the entity's security policy. Pseudo URLs - PURLs, appear the same as ordinary URLs, but instead of addresses, define tasks to be performed in response to this request and profile. The invention includes a positive information profiling system (PIPS) which implements account profiles for all content and clients so that pages can be generated and matched to both the data and the requestors. The virtual page publication system VPPS of the invention does not store pages permanently in the root directory of the site but instead creates temporary web pages dynamically containing the level of information resulting from the client identification and PURL evaluation. A virtual page is sent to the requestor and exists only for the time necessary to send it.
PCT/GB2000/003870 2000-08-21 2000-10-06 Positive information profiling system WO2001044903A2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU2000275469A AU2000275469A1 (en) 2000-08-21 2000-10-06 Positive information profiling system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
GB0020386A GB2355323A (en) 1999-10-05 2000-08-21 Information security profile and policy system
GB0020386.9 2000-08-21

Publications (2)

Publication Number Publication Date
WO2001044903A2 WO2001044903A2 (en) 2001-06-21
WO2001044903A3 true WO2001044903A3 (en) 2002-05-02

Family

ID=9897873

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB2000/003870 WO2001044903A2 (en) 2000-08-21 2000-10-06 Positive information profiling system

Country Status (2)

Country Link
AU (1) AU2000275469A1 (en)
WO (1) WO2001044903A2 (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030002668A1 (en) * 2001-06-30 2003-01-02 Gary Graunke Multi-level, multi-dimensional content protections

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5941947A (en) * 1995-08-18 1999-08-24 Microsoft Corporation System and method for controlling access to data entities in a computer network

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5941947A (en) * 1995-08-18 1999-08-24 Microsoft Corporation System and method for controlling access to data entities in a computer network

Also Published As

Publication number Publication date
AU2000275469A1 (en) 2001-06-25
WO2001044903A2 (en) 2001-06-21

Similar Documents

Publication Publication Date Title
GB2360107A (en) Maintaining security in a distributed computer network
GB9808132D0 (en) Workload management in a client/server network with distributed objects
DE60100680D1 (en) Safe and public access device and method
US20080034438A1 (en) Multiple hierarchy access control method
EP1244263A3 (en) Access control method
WO2001059673A3 (en) Method and system for accessing a remote storage area
GB2320344B (en) Virtual environment manager for network computers
WO2005054973A3 (en) Method and system for improving computer network security
WO2007002595A3 (en) Distributed virtual machine architecture
CA2287871A1 (en) Secure document management system
EP1349084A3 (en) File storage system and nas server
EP1701286A3 (en) Delegating right to access resource or the like in access management system or the like
WO2005048029A3 (en) System and method for controlling access to digital content, including streaming media
HK1044645A1 (en) Methods for determining, collecting, and using geographic locations of internet users
BR0103527A (en) Electronic file management system
EP0918282A3 (en) Server and client
EP0886212A3 (en) System and method for remote object invocation
WO2001077775A3 (en) Network content access control
EP1329812A3 (en) Architecture for creating and maintaining virtual servers on a server
CA2343370A1 (en) Root cause analysis in a distributed network management architecture
WO2002069196A3 (en) System for logging on to servers through a portal computer
ATE480822T1 (en) FAILOVER PROCESSING IN A STORAGE SYSTEM
WO2004084003A3 (en) System for accessing patient information
WO1999044133A3 (en) Method and system for deterministic hashes to identify remote methods
WO2006028488A3 (en) Authentication of users and computer systems

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ DE DK DM DZ EE ES FI GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application
REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 69(1) EPC

122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP