专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US07882349B2 Insider attack defense for network client validation of network management frames 有权
标题翻译：内部网络攻击防范网络客户端验证网络管理帧
公开(公告)号：US07882349B2
公开(公告)日：2011-02-01
申请号：US11295334
申请日：2005-12-06
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： H04L29/06 , H04L9/32 , G06F9/00
CPC分类号： H04L63/061 , H04L63/123 , H04L63/1441 , H04W12/08
摘要： Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.
摘要翻译：用于检测在接入点与其无线客户端之间共享的广播密钥的攻击的方法。在检测到攻击后，将采取行动来对一个或多个安全策略中定义的攻击做出反应。通过检查包含在广播管理帧中的链路消息完整性检查和基础架构管理帧保护（IMFP）消息完整性检查来实现攻击的检测。

12. 发明授权

US07835371B2 Method and apparatus to provide data streaming over a network connection in a wireless MAC processor 有权
标题翻译：通过无线MAC处理器中的网络连接提供数据流的方法和装置
公开(公告)号：US07835371B2
公开(公告)日：2010-11-16
申请号：US11218125
申请日：2005-09-01
申请人： Mark Krischer , Philip J. Ryan , Michael J. Webb
发明人： Mark Krischer , Philip J. Ryan , Michael J. Webb
IPC分类号： H04W4/00 , H04L12/28 , G10L21/00 , G06F3/00
CPC分类号： H04L49/90 , H04L12/4633 , H04L47/14 , H04L49/9021 , H04L63/0428 , H04L63/062 , H04L69/32 , H04L69/324 , H04W12/02
摘要： A method of wirelessly transmitting or receiving a packet of information, and an apparatus to wirelessly transmit or receive a packet of information. In the case of transmitting, the method includes streaming a data element, including at least some of the contents of the packet, over a network link during transmit time. In the case of receiving, the method includes streaming a data element, including at least some of the contents of the received packet, over a network link during receive time. The transmitting or receiving is by a station of a wireless network and the streaming is to or from the station from or to a network device coupled to the station by the network link.
摘要翻译：一种无线发送或接收信息分组的方法，以及用于无线地发送或接收信息分组的装置。在发送的情况下，该方法包括在发送时间期间通过网络链路流式传输包括分组的至少一些内容的数据元素。在接收的情况下，该方法包括在接收时间期间通过网络链路流式传输包括所接收分组的至少一些内容的数据元素。由无线网络的站发送或接收，并且通过网络链路从流或从站耦合到站的流传输到或来自站。

13. 发明授权

US07788480B2 Protected dynamic provisioning of credentials 有权
标题翻译：受保护的凭据的动态配置
公开(公告)号：US07788480B2
公开(公告)日：2010-08-31
申请号：US10702167
申请日：2003-11-05
申请人： Nancy Cam Winget , Mark Krischer , Ilan Frenkel , Hao Zhou
发明人： Nancy Cam Winget , Mark Krischer , Ilan Frenkel , Hao Zhou
IPC分类号： H04L29/06 , G06F15/173 , G06F15/16
CPC分类号： H04L63/0442 , H04L63/0435 , H04L63/061 , H04L63/0823 , H04L63/162 , H04L63/166
摘要： A method and implementation is disclosed for secure communication between two or more parties. A secure tunnel is established between parties using an encryption algorithm. An authentication process is performed between parties over the secured tunnel. The provisioning of credentials is thereafter performed between parties.
摘要翻译：公开了一种用于两个或多个方之间的安全通信的方法和实现。使用加密算法在各方之间建立安全通道。在安全隧道之间的各方之间执行认证过程。之后在各方之间执行凭证的提供。

14. 发明授权

US07457620B2 Off-channel beacons in a wireless network 有权
标题翻译：无线网络中的离线信标
公开(公告)号：US07457620B2
公开(公告)日：2008-11-25
申请号：US11182206
申请日：2005-07-15
申请人： Alex C. K. Lam , Brian Hart , Mark Krischer , David Sheldon Stephenson
发明人： Alex C. K. Lam , Brian Hart , Mark Krischer , David Sheldon Stephenson
IPC分类号： H04Q7/00
CPC分类号： H04W48/10 , H04W84/12
摘要： A method, apparatus, and software containing computer readable code to implement the method implemented in a first wireless device. The method includes, for a particular network identifier active in a wireless network, transmitting frames configured to advertise the infrastructure network of the particular network identifier. The transmitting of off-channel beacons is in a provided channel different than the channel in which the access point of the infrastructure wireless of the particular network identifier transmits beacon frames. The transmitting of off-channel beacons further is at a rate higher than the beacon rate frame at which the access point of the infrastructure wireless of the particular network identifier transmits beacon frames.
摘要翻译：一种包含用于实现在第一无线设备中实现的方法的计算机可读代码的方法，装置和软件。该方法包括：对于在无线网络中活动的特定网络标识符，发送被配置为通告该特定网络标识符的基础设施网络的帧。离线信标的发送处于与特定网络标识符的基础设施无线接入点发送信标帧的信道不同的提供信道中。进一步发送离开信道信标的速率高于特定网络标识符的基础设施无线接入点发送信标帧的信标速率帧的速率。

15. 发明申请

US20070014267A1 Off-channel beacons in a wireless network 有权
标题翻译：无线网络中的离线信标
公开(公告)号：US20070014267A1
公开(公告)日：2007-01-18
申请号：US11182206
申请日：2005-07-15
申请人： Alex Lam , Brian Hart , Mark Krischer , David Stephenson
发明人： Alex Lam , Brian Hart , Mark Krischer , David Stephenson
IPC分类号： H04Q7/24
CPC分类号： H04W48/10 , H04W84/12
摘要： A method, apparatus, and software containing computer readable code to implement the method implemented in a first wireless device. The method includes, for a particular network identifier active in a wireless network, transmitting frames configured to advertise the infrastructure network of the particular network identifier. The transmitting of off-channel beacons is in a provided channel different than the channel in which the access point of the infrastructure wireless of the particular network identifier transmits beacon frames. The transmitting of off-channel beacons further is at a rate higher than the beacon rate frame at which the access point of the infrastructure wireless of the particular network identifier transmits beacon frames.
摘要翻译：一种包含用于实现在第一无线设备中实现的方法的计算机可读代码的方法，装置和软件。该方法包括：对于在无线网络中活动的特定网络标识符，发送被配置为通告该特定网络标识符的基础设施网络的帧。离线信标的发送处于与特定网络标识符的基础设施无线接入点发送信标帧的信道不同的提供信道中。进一步发送离开信道信标的速率高于特定网络标识符的基础设施无线接入点发送信标帧的信标速率帧的速率。

16. 发明申请

US20060236383A1 System and method for multi-session establishment involving disjoint authentication and authorization servers 有权
公开(公告)号：US20060236383A1
公开(公告)日：2006-10-19
申请号：US11283554
申请日：2005-11-18
申请人： Nancy Cam-Winset , Mark Krischer , Jeremy Stieglitz
发明人： Nancy Cam-Winset , Mark Krischer , Jeremy Stieglitz
IPC分类号： G06F17/30
CPC分类号： H04L63/0815 , H04L9/0838 , H04L63/0892 , H04L2209/80 , H04W12/06
摘要： A system and method that supports disjoint authentication server farms and disjoint policy or authorization servers for multi-session establishment. The authentication server has global knowledge of authenticators for additional sessions for a supplicant and can split authentication requests as needed to different authentication servers. The split authentication and authorization requests can be aggregated should the other authentication and authorization servers have the capability to handle multiple requests. In the case of server farms, authentication and implied authorization requests can be split to facilitate load balancing.

17. 发明授权

US06954450B2 Method and apparatus to provide data streaming over a network connection in a wireless MAC processor 失效
标题翻译：通过无线MAC处理器中的网络连接提供数据流的方法和装置
公开(公告)号：US06954450B2
公开(公告)日：2005-10-11
申请号：US10724559
申请日：2003-11-26
申请人： Mark Krischer , Philip J. Ryan , Michael J. Webb
发明人： Mark Krischer , Philip J. Ryan , Michael J. Webb
IPC分类号： H04L12/28 , H04L12/46 , H04L12/56 , H04L29/06 , H04L29/08 , H04W12/02 , H04Q7/24 , H04J3/16
CPC分类号： H04L49/90 , H04L12/4633 , H04L47/14 , H04L49/9021 , H04L63/0428 , H04L63/062 , H04L69/32 , H04L69/324 , H04W12/02
摘要： A method of wirelessly transmitting or receiving a packet of information, and an apparatus to wirelessly transmit or receive a packet of information. In the case of transmitting, the method includes streaming a data element, including at least some of the contents of the packet, over a network link during transmit time. In the case of receiving, the method includes streaming a data element, including at least some of the contents of the received packet, over a network link during receive time. The transmitting or receiving is by a station of a wireless network and the streaming is to or from the station from or to a network device coupled to the station by the network link.
摘要翻译：一种无线发送或接收信息分组的方法，以及用于无线地发送或接收信息分组的装置。在发送的情况下，该方法包括在发送时间期间通过网络链路流式传输包括分组的至少一些内容的数据元素。在接收的情况下，该方法包括在接收时间期间通过网络链路流式传输包括所接收分组的至少一些内容的数据元素。由无线网络的站发送或接收，并且通过网络链路从流或从站耦合到站的流传输到或来自站。

18. 发明授权

US07809354B2 Detecting address spoofing in wireless network environments 有权
标题翻译：在无线网络环境中检测地址欺骗
公开(公告)号：US07809354B2
公开(公告)日：2010-10-05
申请号：US11377151
申请日：2006-03-16
申请人： Patrice R. Calhoun , Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Patrice R. Calhoun , Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： H04M1/66 , H04M1/68 , H04M3/16
CPC分类号： H04W12/12 , H04L63/126 , H04L63/1466 , H04L63/1483 , H04W8/26 , H04W84/12
摘要： Methods, apparatuses and systems directed to detecting address spoofing in wireless networks by, after receiving a wireless management frame, transmitting verification messages to determine whether a given wireless node (e.g., a wireless access point, or wireless client) has legitimately lost its connection state.
摘要翻译：针对无线网络中的地址欺骗检测的方法，装置和系统，在接收到无线管理帧之后，发送验证消息以确定给定的无线节点（例如，无线接入点或无线客户端）是否合法地失去了其连接状态。

19. 发明申请

US20090235077A1 NETWORK INFRASTRUCTURE VALIDATION OF NETWORK MANAGEMENT FRAMES 有权
标题翻译：网络管理框架的网络基础设施验证
公开(公告)号：US20090235077A1
公开(公告)日：2009-09-17
申请号：US12430375
申请日：2009-04-27
申请人： Nancy Cam Winget , Mark Krischer , Sheausong Yang , Ajit Sanzgiri , Timothy Olson , Pauline Shuen
发明人： Nancy Cam Winget , Mark Krischer , Sheausong Yang , Ajit Sanzgiri , Timothy Olson , Pauline Shuen
IPC分类号： H04L9/32 , G06F21/20 , H04W4/00
CPC分类号： H04W12/04 , H04L41/00 , H04L63/062 , H04L63/08 , H04L63/083 , H04L63/123 , H04L63/126 , H04L63/1408 , H04W12/10 , H04W12/12 , H04W84/12 , H04W88/08
摘要： A detection-based defense to a wireless network. Elements of the infrastructure, e.g., access points or scanning-only access points, detect intruders by detecting spoofed frames, such as from rogue access points. Access points include a signature, such as a message integrity check, with their management frames in a manner that enables neighboring access points to be able to validate the management frames, and to detect spoofed frames. When a neighboring access point receives a management frame, obtains a key for the access point sending the frame, and validates the management frame using the key.
摘要翻译：基于检测的无线网络防御。基础设施的元件，例如接入点或仅扫描接入点，通过检测欺骗性帧（例如从流氓接入点）来检测入侵者。接入点包括诸如消息完整性检查之类的签名，以及其管理帧的方式使得相邻接入点能够验证管理帧，并且检测被欺骗的帧。当相邻接入点接收到管理帧时，获取发送帧的接入点的密钥，并使用密钥验证管理帧。

20. 发明授权

US07562224B2 System and method for multi-session establishment for a single device 有权
标题翻译：用于单个设备的多会话建立的系统和方法
公开(公告)号：US07562224B2
公开(公告)日：2009-07-14
申请号：US11098253
申请日：2005-04-04
申请人： Mark Krischer , Nancy Cam Winget
发明人： Mark Krischer , Nancy Cam Winget
IPC分类号： H04L29/06 , H04L9/14
CPC分类号： H04L63/0815 , H04L67/14
摘要： A system and method that allows a device to complete a single complete authentication sequence to a AAA server resulting in as many secure sessions required for the different applications or subsystems determined by the client's identity and the AAA server's policy. As the device is authenticated, it is determined where there are other sessions for the device. The sessions are established by generating unique new keying material that is passed to each session. This can be accomplished by (a) the authenticator or AAA server issuing the keys and distributing them to both the supplicant and applications (via their authenticators); or (b) authenticator or the AAA server mutually generating the session unique keys with the supplicant that are then distributed to the applications (via their authenticators).
摘要翻译：一种允许设备完成到AAA服务器的单个完整认证序列的系统和方法，从而产生由客户机身份和AAA服务器策略确定的不同应用或子系统所需的安全会话数量。当设备进行身份验证时，确定设备的其他会话位置。会话通过生成传递给每个会话的唯一新的密钥材料来建立。这可以通过（a）认证者或AAA服务器发出密钥并将其分发给请求者和应用程序（通过其认证者）来实现; 或者（b）认证者或AAA服务器与请求者相互产生会话唯一密钥，然后分发给应用程序（通过其认证者）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式