专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

111. 发明申请

WO2010021577A1 METHOD AND APPARATUS FOR AVOIDING UNWANTED DATA PACKETS 审中-公开
标题翻译：避免无数据包的方法和装置
公开(公告)号：WO2010021577A1
公开(公告)日：2010-02-25
申请号：PCT/SE2008/050954
申请日：2008-08-22
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , CSÁSZÁR, András , NÄSLUND, Mats , WESTBERG, Lars , MAGNUSSON, Lars
发明人： CSÁSZÁR, András , NÄSLUND, Mats , WESTBERG, Lars , MAGNUSSON, Lars
IPC分类号： H04L12/56 , H04L9/08
CPC分类号： H04L45/00 , H04L9/083 , H04L29/12066 , H04L29/12207 , H04L45/50 , H04L61/1511 , H04L61/20 , H04L63/08 , H04L63/14
摘要： Method and apparatus for controlling transmission of data packets in a packet-switched network. When a first end-host (A) sends an address query to a DNS system (300) for a second end-host, the DNS system responds by providing a sender key created from a destination key registered for the second end-host, if the first end-host is authorised to send packets to the second end-host. Thereby, the first end- host, if authorised, is able to get across data packets to the second end-host by attaching a sender tag (TAG) generated from the sender key, as ingress tag to each transmitted data packet. A router (302) in the network matches an ingress tag in a received packet with entries in a forwarding table and sends out the packet on an output port (X) according to a matching entry. Otherwise, the router discards the packet if no matching entry is found in the table.
摘要翻译：用于控制分组交换网络中数据分组传输的方法和装置。当第一终端主机（A）向第二终端主机的DNS系统（300）发送地址查询时，DNS系统通过提供从为第二终端主机注册的目的地密钥创建的发送者密钥进行响应，如果第一个终端主机被授权将数据包发送到第二个终端主机。因此，如果被授权，则第一终端主机能够通过将从发送方密钥生成的发送者标签（TAG）作为入口标签附加到每个发送的数据分组来跨越数据分组到达第二终端主机。网络中的路由器（302）将接收到的分组中的入口标签与转发表中的条目匹配，并根据匹配条目在输出端口（X）上发送分组。否则，如果表中没有匹配的条目，路由器将丢弃该数据包。

112. 发明申请

WO2008147302A1 METHOD AND APPARATUS FOR PROTECTING THE ROUTING OF DATA PACKETS 审中-公开
标题翻译：保护数据包路由的方法和装置
公开(公告)号：WO2008147302A1
公开(公告)日：2008-12-04
申请号：PCT/SE2008/050538
申请日：2008-05-09
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , CZÁSZÁR, András , WESTBERG, Lars , NÄSLUND, Mats
发明人： CZÁSZÁR, András , WESTBERG, Lars , NÄSLUND, Mats
IPC分类号： H04L29/12 , H04L29/06 , H04L9/00
CPC分类号： H04L45/00 , H04L29/12066 , H04L61/1511 , H04L63/0428 , H04L63/08 , H04L69/22
摘要： Method and apparatus for protecting the routing of data packets in a packet data network. When a first end-host (A) sends an address query to a DNS server system (302) regarding a second end-host, the DNS server system responds by providing a destination parameter (TAG) containing an encrypted destination address associated with the second end-host. Thereby, the first end-host is able to get across data packets to the second end-host by attaching the destination parameter (TAG) to each transmitted data packet. A router (300) in the packet data network admits a received packet if a destination parameter (TAG) is attached to the packet including a valid destination address encrypted by a key dependent on a distributed master encryption key. Otherwise, the router discards the packet ifno such valid destination address can be derived from the packet by applying decryption to the destination parameter.
摘要翻译：用于保护分组数据网络中的数据分组的路由的方法和装置。当第一终端主机（A）向DNS服务器系统（302）发送关于第二终端主机的地址查询时，DNS服务器系统通过提供包含与第二终端主机相关联的加密目的地地址的目的地参数（TAG）进行响应端主机。因此，通过将目的地参数（TAG）附加到每个发送的数据分组，第一终端主机能够跨数据分组到达第二终端主机。如果目的地参数（TAG）附加到包括由依赖于分布式主加密密钥的密钥加密的有效目的地地址的分组，则分组数据网络中的路由器（300）承认接收到的分组。否则，如果通过向目的参数应用解密，路由器将丢弃该分组，如果不能从分组导出这样的有效目的地址。

113. 发明申请

WO2008080637A1 METHOD AND APPARATUS FOR DETERMINING AN AUTHENTICATION PROCEDURE 审中-公开
标题翻译：用于确定认证程序的方法和装置
公开(公告)号：WO2008080637A1
公开(公告)日：2008-07-10
申请号：PCT/EP2007/050097
申请日：2007-01-04
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , WALKER, John Michael , NÄSLUND, Mats
发明人： WALKER, John Michael , NÄSLUND, Mats
IPC分类号： H04L29/06 , H04Q7/38 , H04L12/28
CPC分类号： H04L63/20 , H04L63/0892 , H04W12/04 , H04W12/06 , H04W84/00
摘要： A server for managing the authentication of clients that are subscribers of a home domain within which the server is located, the server comprising means for determining whether a client that is attached to a visited domain is to be authenticated by the home domain or by said visited domain, and for signalling the result to said visited domain.
摘要翻译：一种用于管理作为服务器所在的归属域的订户的客户端的认证的服务器，所述服务器包括用于确定附接到被访问域的客户端是否将被所述归属域或所述被访问者认证的装置域，并将结果用信号通知所述访问域。

114. 发明申请

WO2007062688A1 KEY MANAGEMENT 审中-公开
标题翻译：主要管理
公开(公告)号：WO2007062688A1
公开(公告)日：2007-06-07
申请号：PCT/EP2005/056381
申请日：2005-12-01
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , NÄSLUND, Mats
发明人： NÄSLUND, Mats
IPC分类号： H04L9/08
CPC分类号： H04L9/0891 , H04L9/14 , H04L63/06 , H04L2209/805 , H04W12/04 , H04W84/18
摘要： The present invention relates to arrangements and methods for generating keys for cryptographic processing of communication between a first communication unit (200) and a second communication unit (300). The first communication unit (200) and second communication unit (300) are adapted to obtain knowledge about a secret function, wherein the first communication unit comprises: -means for selecting a value z (210), means for calculating the secret function as a function of the selected value z (220) means for processing data with the calculated secret function (230), and means for transmitting the processed data in association with the selected z to the second communication unit (240), wherein the secret function is selected from a set of functions that are almost k-wise independent.
摘要翻译：本发明涉及用于生成用于第一通信单元（200）和第二通信单元（300）之间的通信的密码处理的密钥的配置和方法。第一通信单元（200）和第二通信单元（300）适于获得关于秘密功能的知识，其中第一通信单元包括： - 用于选择值z（210）的方法，用于计算秘密功能的装置所选择的值z（220）的功能用于处理具有计算的秘密功能的数据（230），以及用于将与所选择的z相关联的处理数据发送到第二通信单元（240）的装置，其中选择秘密功能从一组功能几乎是独立的。

115. 发明申请

WO2006084895A3 METHOD AND APPARATUS FOR ENSURING PRIVACY IN COMMUNICATIONS BETWEEN PARTIES USING PAIRING FUNCTIONS 审中-公开
公开(公告)号：WO2006084895A3
公开(公告)日：2006-08-17
申请号：PCT/EP2006/050840
申请日：2006-02-10
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , NIKANDER, Pekka , ARKKO, Jari , NÄSLUND, Mats
发明人： NIKANDER, Pekka , ARKKO, Jari , NÄSLUND, Mats
IPC分类号： H04L9/30 , H04Q7/32 , H04Q7/38
摘要： A method of improving privacy by hiding, in an ordered sequence of messages M[x(1), D(1)], M[x(2), D(2)], etc, communicated between a first and at least one second party sharing a key k, metadata x(i) descriptive of message processing, wherein D(i) denotes payload data. The method comprises the first and the second party agreeing on a pseudo random mapping depending on a shared key k, F k , mapping at least x(i) to y(i), and the first party modifying the messages by replacing x(i) by y(i) in each message M(x(i), D(i)). The first party then transmits the modified messages maintaining their original order, and on reception of a message M(y(m), D), the second party uses a mapping G k to retrieve position m of received value and the original value x(m).

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式