Patents by Inventor Christoph H. Hofmann

Christoph H. Hofmann has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Data processing system including explicit and generic grants of action authorization
    Patent number: 8631476
    Abstract: A method of determining whether to authorize a user of a computer system to perform an action in the computer system is described. Besides the explicit authorization grants, a new, more secure semantics is defined where only unassigned users or actions are granted generically. For example, if an access control list for an action is not empty, a user may be authorized to perform the action only if the user is a member of the access control list for the action. If the access control list for the action is empty, the user may be authorized to perform the action only if the user is not a member of any access control list of a group of access control lists.
    Type: Grant
    Filed: March 31, 2005
    Date of Patent: January 14, 2014
    Assignee: SAP AG
    Inventor: Christoph H. Hofmann
  • System and method to send a message using multiple authentication mechanisms
    Patent number: 8321678
    Abstract: A system may include a sender computing system to transmit first authentication data in association with a message, the first authentication data conforming to a first authentication mechanism, and to transmit second authentication data in association with the message, the second authentication data conforming to a second authentication mechanism. The system may also include a component to receive the first authentication data in association with the message from the sender computing system, and to receive the second authentication data in association with the message from the sender computing system.
    Type: Grant
    Filed: October 17, 2006
    Date of Patent: November 27, 2012
    Assignee: SAP AG
    Inventors: Christoph H. Hofmann, Martijn De Boer
  • Propagation of principal authentication data in a mediated communication scenario
    Patent number: 8316422
    Abstract: A system may include a sender computing system, an intermediary component, and a receiver computing system. The sender computing system may transmit first authentication data and second authentication data, and the intermediary component may receive the first authentication data and second authentication data from the sender computing system, perform an authentication action based on the second authentication data, and transmit the first authentication data. The receiver computing system may receive the first authentication data.
    Type: Grant
    Filed: October 17, 2006
    Date of Patent: November 20, 2012
    Assignee: SAP AG
    Inventors: Christoph H. Hofmann, Martijn De Boer
  • Propagation of authentication data in an intermediary service component
    Patent number: 8302160
    Abstract: A system may include a sender computing system, an intermediary service component, and a receiver computing system. The sender computing system may transmit a message and authentication data, and the intermediary service component may receive the message and the authentication data from the sender computing system, process the message, and transmit the authentication data and the processed message. The receiver computing system may receive the authentication data and the processed message.
    Type: Grant
    Filed: October 17, 2006
    Date of Patent: October 30, 2012
    Assignee: SAP AG
    Inventors: Christoph H. Hofmann, Martijn De Boer
  • System and method to send a message using multiple authentication mechanisms
    Publication number: 20080091950
    Abstract: A system may include a sender computing system to transmit first authentication data in association with a message, the first authentication data conforming to a first authentication mechanism, and to transmit second authentication data in association with the message, the second authentication data conforming to a second authentication mechanism. The system may also include a component to receive the first authentication data in association with the message from the sender computing system, and to receive the second authentication data in association with the message from the sender computing system.
    Type: Application
    Filed: October 17, 2006
    Publication date: April 17, 2008
    Inventors: Christoph H. Hofmann, Martijn De Boer
  • Propagation of principal authentication data in a mediated communication scenario
    Publication number: 20080091948
    Abstract: A system may include a sender computing system, an intermediary component, and a receiver computing system. The sender computing system may transmit first authentication data and second authentication data, and the intermediary component may receive the first authentication data and second authentication data from the sender computing system, perform an authentication action based on the second authentication data, and transmit the first authentication data. The receiver computing system may receive the first authentication data.
    Type: Application
    Filed: October 17, 2006
    Publication date: April 17, 2008
    Inventors: Christoph H. Hofmann, Martijn De Boer
  • Propagation of authentication data in an intermediary service component
    Publication number: 20080091949
    Abstract: A system may include a sender computing system, an intermediary service component, and a receiver computing system. The sender computing system may transmit a message and authentication data, and the intermediary service component may receive the message and the authentication data from the sender computing system, process the message, and transmit the authentication data and the processed message. The receiver computing system may receive the authentication data and the processed message.
    Type: Application
    Filed: October 17, 2006
    Publication date: April 17, 2008
    Inventors: Christoph H. Hofmann, Martijn De Boer