Emc Corporation

Emc IP Holding Company LLC

Other

University of North Carolina at Chapel Hill

John P Field

Stephen Glen Graham

Thomas R Maguire

David Ohsie

Vijay Ganti

Ari Juels

Burton S Kaliski, Jr

Alina Oprea

Mark A O'Connell

Magnus Nyström

Rossen P Dimitrov

Edgar J St Pierre

Ram Viswanathan

Matthew L Troutman

Michael Kendrick Reiter

Cornelia R Davis

Robert M Polansky

James Townsend

Yinqian Zhang

Prashant J Dongale

Vijayanand Bharadwaj

Paul T Burke

Rowland Griffin

Chuanjun Wang

Example embodiments of the present invention provide a method, an apparatus, and a computer program product for authenticating a request from a first domain to access a resource in a second domain according to credentials in the first domain. The method includes receiving, from the first domain, an assertion in the second domain and generating, according to the assertion, a token configured to be redeemed by a client in the first domain to access the resource in the second domain. The token then may be provided to the first domain.

Method and apparatus for federated identity and authentication services

A distributed security information and event management system comprises a centralized portion and a plurality of remote portions, with the remote portions being implemented in respective applications within information technology infrastructure. Each of the remote portions comprises one or more remote components inserted into the corresponding application. At least a subset of the remote components of the remote portion are configured for interaction with one or more corresponding centralized components of the centralized portion of the system. The remote components may each be configured to process one or more specified eXtensible Access Control Markup Language (XACML) Obligations or other constructs.

Distributed security information and event management system with application-injected remote components

A processing device comprises a processor coupled to a memory and implements an obligation management system for information technology infrastructure, with the obligation management system being configured to process a plurality of obligations on behalf of a relying party to verify implementation of corresponding controls in information technology infrastructure of a claimant. A given one of the obligations has an associated obligation fulfiller that is inserted or otherwise deployed as a component within the information technology infrastructure of the claimant and is configured to provide evidence of the implementation of one or more of the controls responsive to an obligation assertion so as to establish an associated trust aspect of the claimant. The information technology infrastructure may comprise distributed virtual infrastructure of a cloud service provider. The claimant may comprise the cloud service provider and the relying party may comprise a tenant of the cloud service provider.

Verification of controls in information technology infrastructure via obligation assertion

An information processing system comprises one or more processing devices of at least one processing platform. In one embodiment, the system comprises cloud infrastructure that is configured to validate an externally-generated security token issued to a user, to extract one or more claims from the validated externally-generated security token, and to create a session object to hold the extracted claim or claims. The cloud infrastructure issues an internally-generated security token based on the session object that allows the user to be identified to a protected resource. The internally-generated security token is validated in conjunction with a request from the user for access to the protected resource, and information associated with at least one extracted claim is selectively released responsive to validation of the internally-generated security token. Access of the user to the protected resource is granted or denied based on the selectively-released information.

Privacy-preserving user attribute release and session management

Information technology infrastructure comprises a computing environment shared by multiple tenants of a service provider, and a secure assessment environment separate from the shared computing environment. An evidence collection module associated with the shared computing environment collects compliance evidence from the shared computing environment for storage in the secure assessment environment. A tenant assessment interface to the secure assessment environment is provided, through which the tenants can access the compliance evidence as stored in the secure assessment environment in a manner that does not undermine security of the shared computing environment. The compliance evidence may include, for example, information sufficient to allow a tenant to verify that the shared computing environment is configured in accordance with a specified security policy. In an illustrative embodiment, the information technology infrastructure comprises cloud infrastructure of a cloud service provider and the shared computing environment comprises a cloud computing environment.

Secure tenant assessment of information technology infrastructure

Cloud infrastructure of a cloud service provider comprises a processing platform implementing a security policy enforcement framework. The security policy enforcement framework comprises a policy analyzer that is configured to identify at least one security policy associated with at least one tenant of the cloud service provider, to analyze the security policy against configuration information characterizing the cloud infrastructure of the cloud service provider, and to control execution of one or more applications of said at least one tenant within the cloud infrastructure in accordance with the security policy, based at least in part on one or more results of the analysis of the security policy. The security policy enforcement framework may be implemented in a platform-as-a-service (PaaS) layer of the cloud infrastructure, and may comprise a runtime controller, an operating system controller, a hypervisor controller and a PaaS controller.

Security policy enforcement framework for cloud-based information processing systems

A system, method, and apparatus for representing an information topology on a computer, wherein the represented information topology comprises a plurality of information nodes and a plurality of states, representing a set of polices on the computer, wherein each policy expresses one or more requirements applied to the plurality of information nodes, and assessing compliance of the represented information topology by determining on the computer whether the plurality of states meet the requirements expressed in the plurality of policies.

System for assessment of policy compliance of an arbitrary information topology

A multimedia device or other type of processing device comprises a memory, a processor coupled to the memory, and playback circuitry coupled to the processor. In one aspect, the processor is operative to control the storage in the memory of at least one multimedia file containing a one-time password or other type of password, where the password is generated externally to the processing device, and to control the playback of the multimedia file via the playback circuitry to make the password apparent to or otherwise accessible to an associated user or other entity. The multimedia file may comprise, for example, an audio file, with the password being presented to the user in an audible form upon playback of the audio file. As another example, the multimedia file may comprise a video file, with the password being presented to the user in a visible form upon playback of the video file.

Password presentation for multimedia devices

Sound insulation core material is made by melt-blowing a polypropylene resin having a hydroxystearamide wax additive to produce a fibrous mass having improved loft. The core material is encased between outer layers of spun-bond polyethylene fibers by longitudinal seams and transverse seams to form a product suitable for use in dishwashers.

Method of making sound insulation with high loft

Growing community of inventors

Chatham, NJ, United States of America

John P Field