会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 3. 发明授权
    • System for smart card funds refill
    • 智能卡资金充值系统
    • US5884292A
    • 1999-03-16
    • US57381
    • 1993-05-06
    • Walter J. BakerJoseph L. GargiuloRichard W. Heiden
    • Walter J. BakerJoseph L. GargiuloRichard W. Heiden
    • G07B17/00G07F7/08G07F7/10G07F17/26G06F7/70
    • G07F7/1008G06Q20/341G06Q20/4093G07B17/0008G07B17/00193G07B17/00733G07F17/26G07F7/0866G07F7/1016G07B2017/00096G07B2017/00161G07B2017/00177G07B2017/00282G07B2017/00306G07B2017/00701G07B2017/00758
    • A system for providing items of value, charging the items to a smart card, and for recharging the smart card. The system includes a station for providing the items of value, which may be postal services, and debiting the cost of the items to a smart card; the smart card being charged with funds equivalent data. The station also communicates with a Data Center for recharging the smart card. Users of the system communicate with the data center to request recharge of a particular smart card and in response to an authorized request the data center generates an encrypted authorization message which includes an identification number, the amount of recharge requested, and control data which preferably includes a control sum formed by adding the amounts stored in a descending register, which stores the amount available on the smart card, and an ascending register which stores the total of the amounts by which the card has been charged since initialization. Thus, the authorization message may be used only once. From time-to-time the Data Center transmits authorization messages to each station on the system. When a particular smart card for which an authorization message has been received is connected to a station, the smart card compares the control data with the control data stored on the smart card and if there is a match updates the funds equivalent data in the descending register of the smart card. To provide security against transmission of false authorization messages to a station, the authorization messages are encrypted, preferably using a public key encryption system.
    • 用于提供有价值的系统,将项目充电到智能卡并为智能卡充电。 该系统包括用于提供可能是邮政服务的价值物品的站,以及将物品的费用记入智能卡; 该智能卡正在收取相当数量的资金。 车站还与数据中心进行通信,为智能卡充电。 系统的用户与数据中心通信以请求对特定智能卡的再充电,并且响应于授权请求,数据中心产生加密的授权消息,该加密授权消息包括识别号码,所请求的再充电量以及优选地包括的控制数据 通过添加存储在智能卡中可用量的下降寄存器中存储的数量和存储从初始化起卡被充电的总量的上升寄存器而形成的控制和。 因此,授权消息可以仅使用一次。 数据中心不时向系统上的每个站传送授权消息。 当已经接收到授权消息的特定智能卡被连接到站时,智能卡将控制数据与存储在智能卡上的控制数据进行比较,并且如果存在匹配则更新下行寄存器中的等价数据 的智能卡。 为了提供防止虚假授权消息传输到站的安全性,优选地使用公钥加密系统来加密授权消息。
    • 6. 发明授权
    • System and method for fault tolerant key management
    • 容错密钥管理系统和方法
    • US5621795A
    • 1997-04-15
    • US364323
    • 1994-12-27
    • Walter J. BakerFeliks BatorChunhua Li
    • Walter J. BakerFeliks BatorChunhua Li
    • E05B19/00H04L9/08H04L9/00
    • H04L9/083H04L2209/56
    • A system and method of fault tolerant key management of cryptographic keys includes a key distribution computer and primary and secondary key management computers coupled to the key distribution computer, Primary and secondary server computers are each coupled to the primary and secondary key management computers, One of the primary and secondary key management computers is operational at a time, The operational one of the primary and secondary key management computers writes key data received from the key distribution computer to an archive database in each of the primary and secondary server computers, The method includes the steps of requesting storage of key data by an operational one of the primary and secondary key management computers; monitoring the operational status of each of primary and secondary server computers; writing key data to an archive database in each of the primary and secondary servers that are operational; writing key data to a log file in an operational one of the primary and secondary servers when one of the primary and secondary servers is not operational; monitoring a return to operational status of the non operational one of the primary and secondary servers; and writing to the archive database of the non-operational one of the primary and secondary server computers the key data stored in the log file of the operational one of the primary and secondary server computers.
    • 密钥密钥的容错密钥管理的系统和方法包括密钥分发计算机和耦合到密钥分发计算机的主密钥管理计算机和主密钥管理计算机,主服务器和辅助服务器计算机各自耦合到主密钥管理计算机和辅助密钥管理计算机 主密钥管理计算机和次密钥管理计算机一次可操作,主密钥管理计算机和次密钥管理计算机中的操作一个将从密钥分发计算机接收的密钥数据写入每个主服务器和次服务器计算机中的归档数据库。该方法包括 通过主密钥管理计算机和主密钥管理计算机中的一个操作的请求来存储密钥数据的步骤; 监控主服务器和辅助服务器计算机的运行状态; 将关键数据写入可运行的主服务器和辅助服务器中的归档数据库; 当主服务器和辅助服务器之一不可操作时,将主要数据写入主服务器和辅助服务器中的操作的日志文件; 监测主要和次要服务器之间的非运行状态的恢复运行状态; 以及将主服务器计算机和次服务器计算机中的不可操作的主服务器计算机的不可操作的主服务器计算机的归档数据写入存储在主服务器计算机中的可操作的主服务器计算机的日志文件中的密钥数据。
    • 9. 发明授权
    • Cryptographic key management and validation system
    • 加密密钥管理和验证系统
    • US5812666A
    • 1998-09-22
    • US553812
    • 1995-10-23
    • Walter J. BakerFeliks BatorRobert A. CorderyKevin D. HunterKathryn V. LawtonLouis J. LoglisciSteven J. PaulyLeon A. PintsovFrederick W. Ryan, Jr.Monroe A. Weiant, Jr.Gary M. Heiden
    • Walter J. BakerFeliks BatorRobert A. CorderyKevin D. HunterKathryn V. LawtonLouis J. LoglisciSteven J. PaulyLeon A. PintsovFrederick W. Ryan, Jr.Monroe A. Weiant, Jr.Gary M. Heiden
    • G07B17/00G09C1/00H04L9/08H04L9/10H04L9/06
    • H04L9/083G07B17/00733H04L9/0825H04L9/3213G07B17/0008G07B2017/00846G07B2017/00854G07B2017/00862G07B2017/0087G07B2017/00895G07B2017/00967
    • A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain. The Key Management System installs the master keys in the transaction evidencing device and validates the tokens. The secure boxes include a key generation box for generating, encrypting and signing a master key; a key installation box for receiving, verifying and decrypting the signed master key and for installing the master key into the transaction evidencing device; a key verification box for verifying the installation of the master key in the transaction evidencing device, a token verification box for verifying the tokens, and at least one manufacturing box for generating domain keys and distributing the domain keys among the secure boxes for each of the domains.
    • 一种密钥管理系统,用于生成,分发和管理信息交易系统使用的加密密钥,该信息交易系统采用加密手段来产生信息完整性的证据。 该系统包括可操作地彼此耦合的多个功能不同的安全盒。 每个安全盒都执行密钥生成,密钥安装,密钥验证或令牌验证的功能。 可操作地耦合到安全盒的计算机提供系统控制并促进安全盒之间的通信。 多个单独的逻辑安全域提供用于密钥生成,密钥安装,密钥验证和使用密钥管理功能由域内的交易证明设备产生的令牌的验证的域过程。 分别对应于每个安全域的多个域归档安全可靠地记录每个域的密钥状态记录和主密钥。 密钥管理系统将主密钥安装在事务证明设备中,并验证令牌。 安全盒包括用于生成,加密和签名主密钥的密钥生成盒; 用于接收,验证和解密签名的主密钥并将主密钥安装到交易证明设备中的密钥安装箱; 用于验证主密钥在交易证明设备中的安装的关键验证框,用于验证令牌的令牌验证盒,以及用于生成域密钥的至少一个制造盒,以及在每个的安全盒中分配域密钥 域名
    • 10. 发明授权
    • Method of manufacturing secure boxes in a key management system
    • 在密钥管理系统中制造安全框的方法
    • US5742682A
    • 1998-04-21
    • US551934
    • 1995-10-23
    • Walter J. BakerRobert A. CorderyFrank M. D'IppolitoGary M. HeidenKathyrn V. LawtonSteven J. Pauly
    • Walter J. BakerRobert A. CorderyFrank M. D'IppolitoGary M. HeidenKathyrn V. LawtonSteven J. Pauly
    • G06F12/14G06F1/00G06F21/24G07B17/00G09C1/00H04L9/08H04L9/14H04L9/32H04L9/30G07B17/04
    • H04L9/0825G07B17/00435G07B17/00733H04L9/083H04L9/3213G07B2017/00096G07B2017/00443G07B2017/00887G07B2017/00967
    • A method of manufacturing a secure box in a Key Management System that includes a plurality of functionally distinct secure boxes initializes a first manufacturing box if one does not exist. The method creates in a manufacturing box at least one logical security domain including encryption keys needed to perform Key Management System processes within the domain, and provides a target secure box with the capability to perform at least one Key Management System function from a plurality of functions required by the Key Management System. The method authenticates the target secure box to the manufacturing box, installs a unique secure box identification in the target secure box, and creates at least one logical security domain in the target secure box corresponding to a logical security domain in the manufacturing box. The method sends a command from a Key Management System computer to initialize the target secure box to perform a domain process for at least one of Key Management System functions provided within the target secure box, and initializes the target secure box in each domain process indicated in the command from the Key Management System computer. The method installs in the target secure box the encryption keys required to perform a key generation process within the domain. For example, target secure box may be provided with at least one of a key verification function, a key installation function, a token verification function, a key registration function, or a secure box manufacturing function.
    • 一种在包括多个功能不同的安全盒的密钥管理系统中制造安全盒的方法,如果不存在,初始化第一制造盒。 该方法在制造盒中创建至少一个逻辑安全域,包括在域内执行密钥管理系统进程所需的加密密钥,并且提供具有从多个功能执行至少一个密钥管理系统功能的能力的目标安全盒 密钥管理系统要求。 该方法将目标安全框验证到制造盒,在目标安全盒中安装唯一的安全盒标识,并在与制造盒中逻辑安全域对应的目标安全框中创建至少一个逻辑安全域。 该方法从密钥管理系统计算机发送命令以初始化目标安全盒,以对目标安全框内提供的密钥管理系统功能中的至少一个执行域过程,并在每个域进程中初始化目标安全框 密钥管理系统计算机的命令。 该方法在目标安全框中安装在域内执行密钥生成过程所需的加密密钥。 例如,目标安全箱可以具有密钥验证功能,密钥安装功能,令牌验证功能,密钥登记功能或安全盒制造功能中的至少一个。