专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US07581096B2 Method, apparatus, and program product for automatically provisioning secure network elements 有权
标题翻译：用于自动配置安全网元的方法，设备和程序产品
公开(公告)号：US07581096B2
公开(公告)日：2009-08-25
申请号：US10656494
申请日：2003-09-05
申请人： Dirk Balfanz , Diana K. Smetters , Paul Joseph Stewart , Glenn E. Durfee , Rebecca E. Grinter , Hao-Chi Wong
发明人： Dirk Balfanz , Diana K. Smetters , Paul Joseph Stewart , Glenn E. Durfee , Rebecca E. Grinter , Hao-Chi Wong
IPC分类号： H04L9/32
CPC分类号： H04L63/065 , H04L12/1822 , H04L29/06 , H04L63/0492 , H04L63/0853 , H04L67/12 , H04L69/329 , H04W12/06
摘要： We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure—an instant PKI. This technology can be used in a wide variety of applications including wired and wireless networks, secure sensor networks (such as medical networks), emergency alert networks, as well as simply and automatically provisioning network devices whether secure or not.
摘要翻译：我们提供的技术允许外行电脑用户简单地创建，配置和维护安全的基础设施 - 即时PKI。该技术可用于各种应用，包括有线和无线网络，安全传感器网络（例如医疗网络），紧急警报网络，以及简单和自动地为网络设备提供安全性。

32. 发明申请

US20080229110A1 FAST AUTHENTICATION OVER SLOW CHANNELS 有权
标题翻译：快速认证超慢通道
公开(公告)号：US20080229110A1
公开(公告)日：2008-09-18
申请号：US11686771
申请日：2007-03-15
申请人： Dirk Balfanz , Phillipe J. Golle , Diana K. Smetters , Glenn E. Durfee
发明人： Dirk Balfanz , Phillipe J. Golle , Diana K. Smetters , Glenn E. Durfee
IPC分类号： H04L9/00
CPC分类号： H04L9/3236 , H04L9/3263 , H04L63/061 , H04L63/12 , H04L63/18
摘要： A method of providing secure communications over a network includes receiving, at a receiving computer, a public key of a sending computer, and a hash of a sending random number over a first communication channel, transmitting, from the receiving computer, a public key of the receiving computer and a receiving random number provided by the receiving computer over the first communication channel, and receiving, at the receiving computer, the sending random number provided by the sending computer over the first communication channel.
摘要翻译：一种通过网络提供安全通信的方法包括在接收计算机处接收发送计算机的公共密钥以及在第一通信信道上发送随机数的散列，从接收计算机发送公共密钥所述接收计算机和由所述接收计算机通过所述第一通信信道提供的接收随机数，以及在所述接收计算机处接收由所述发送计算机通过所述第一通信信道提供的发送随机数。

33. 发明申请

US20080141361A1 Systems and methods for lightweight authentication 有权
标题翻译：用于轻量认证的系统和方法
公开(公告)号：US20080141361A1
公开(公告)日：2008-06-12
申请号：US11637293
申请日：2006-12-11
申请人： Dirk Balfanz
发明人： Dirk Balfanz
IPC分类号： H04L9/32
CPC分类号： G06F21/6227 , G06F21/35
摘要： Techniques are provided for the lightweight authentication of a user to an application, a computer or other device. An interaction element such as a stylus, a pen or marker is uniquely identified. The interactive element is associated with a user. The interaction element provides a means for interacting with the application. The proximity of the identification element within the interaction element during data entry operations to the authentication sensor signals the controlled application that the user has been authenticated.
摘要翻译：为应用程序，计算机或其他设备的用户轻量级认证提供了技术。独特地识别诸如触笔，笔或标记的交互元件。交互式元素与用户相关联。交互元素提供了与应用程序交互的方法。在认证传感器的数据输入操作期间，交互元件内的识别元件的接近度向用户已经认证的受控应用发出信号。

34. 发明申请

US20070277240A1 Posture-based data protection 有权
标题翻译：基于姿态的数据保护
公开(公告)号：US20070277240A1
公开(公告)日：2007-11-29
申请号：US11439817
申请日：2006-05-24
申请人： Glenn E. Durfee , Dirk Balfanz , Diana K. Smetters , Paul J. Stewart
发明人： Glenn E. Durfee , Dirk Balfanz , Diana K. Smetters , Paul J. Stewart
IPC分类号： G06F12/14
CPC分类号： G06F21/6209 , G06F21/577 , G06F2221/2143
摘要： One embodiment of the present invention provides a system that facilitates access to encrypted data on a computing device based on a security-posture of the computing device. During operation, the system assesses the security-posture of the computing device upon which the encrypted data is stored. If the assessed security-posture meets specified criteria, the system provides the computing device with a key which enables the computing device to access the encrypted data.
摘要翻译：本发明的一个实施例提供了一种系统，其基于计算设备的安全姿势便于访问计算设备上的加密数据。在操作期间，系统评估存储加密数据的计算设备的安全状态。如果评估的安全性状态满足指定的标准，则系统向计算设备提供使得计算设备能够访问加密数据的密钥。

35. 发明申请

US20050125669A1 Method and apparatus for using a secure credential infrastructure to access vehicle components 失效
标题翻译：用于使用安全凭证基础设施来访问车辆部件的方法和装置
公开(公告)号：US20050125669A1
公开(公告)日：2005-06-09
申请号：US10837323
申请日：2004-04-30
申请人： Paul Stewart , Diana Smetters , Rebecca Grinter , Dirk Balfanz , Glenn Durfee , Hao-Chi Wong
发明人： Paul Stewart , Diana Smetters , Rebecca Grinter , Dirk Balfanz , Glenn Durfee , Hao-Chi Wong
IPC分类号： H04K1/00 , H04L9/00 , H04L29/06 , H04L29/08
CPC分类号： H04L67/125 , H04L63/0492 , H04L63/061 , H04L63/0823 , H04L63/12 , H04W12/04
摘要： We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure—an instant PKI. This technology can be used in a wide variety of applications including enabling secure communications to components of a vehicle, and enabling secure communications between the vehicle and associated infrastructure.
摘要翻译：我们提供的技术允许外行电脑用户简单地创建，配置和维护安全的基础设施 - 即时PKI。该技术可用于各种应用，包括实现与车辆组件的安全通信，以及实现车辆与相关基础设施之间的安全通信。

36. 发明申请

US20050100166A1 Systems and methods for authenticating communications in a network medium 审中-公开
标题翻译：用于在网络介质中认证通信的系统和方法
公开(公告)号：US20050100166A1
公开(公告)日：2005-05-12
申请号：US10703437
申请日：2003-11-10
申请人： Diana Smetters , Kenneth Conley , Bryan Pendleton , Glenn Durfee , Steve Cousins , Dirk Balfanz , Hadar Shemtov
发明人： Diana Smetters , Kenneth Conley , Bryan Pendleton , Glenn Durfee , Steve Cousins , Dirk Balfanz , Hadar Shemtov
IPC分类号： G09C1/00 , B23C5/10 , H04L9/32 , H04L29/06 , H04L9/00 , G06F11/30
CPC分类号： H04L63/08 , H04L63/0492 , H04L63/065 , H04L63/12
摘要： A location-limited channel is implemented using physical exchanges of physical tokens. The physical tokens are implemented using writeable or re-writeable storage media. Location-limited channels, when used to implement pre-authentication protocols, provide demonstrative identification and authenticity. A group originator loads pre-authentication information and a network location from a communication device onto the location-limited physical token channel. The location-limited physical token channel is passed to another participant, who copies the originator's pre-authentication information and location onto that participant's communication device. That participant then adds that participant's own pre-authentication information and network location onto the location-limited physical token channel. This is repeated until the last participant passes the location-limited physical token channel back to the group originator. The originator thus has pre-authentication information and network locations for all other participants. The originator establishes secure communications with each participant based on the originator' and that participant's shared information.
摘要翻译：使用物理令牌的物理交换来实现位置限制信道。物理令牌使用可写或可重写的存储介质实现。位置限制通道用于实现预认证协议时，提供说明性识别和真实性。组发起者将来自通信设备的预认证信息和网络位置加载到位置限制的物理令牌信道上。位置限制物理令牌信道被传递给另一个参与者，他们将发起者的预认证信息和位置复制到该参与者的通信设备上。然后，该参与者将该参与者自己的预认证信息和网络位置添加到位置有限的物理令牌信道上。这是重复的，直到最后一个参与者将位置限制的物理令牌通道返回到组发起者。因此，发起者具有所有其他参与者的预认证信息和网络位置。发起人根据发起人和参与者的共享信息建立与每个参与者的安全通信。

37. 发明授权

US09325696B1 System and method for authenticating to a participating website using locally stored credentials 有权
标题翻译：使用本地存储凭证向参与网站进行身份验证的系统和方法
公开(公告)号：US09325696B1
公开(公告)日：2016-04-26
申请号：US13363338
申请日：2012-01-31
申请人： Dirk Balfanz , Michael K. Fleming , Doru Costin Manolache
发明人： Dirk Balfanz , Michael K. Fleming , Doru Costin Manolache
IPC分类号： H04L29/06
CPC分类号： H04L63/0815
摘要： A system and method is disclosed for authenticating a user using locally stored credentials. A website is configured to provide, to a web browser, a login page, including header information which informs the web browser that the website may accept an automatic login. In response to receiving, from the web browser, credential information and a request to login to the website, a login token having an expiration time is generated by an authentication server and returned to the web browser. The web browser provides the login token to an authentication address associated with the website, before the expiration time, to automatically login to the website.
摘要翻译：公开了一种用于使用本地存储的凭证来验证用户的系统和方法。网站被配置为向网络浏览器提供登录页面，其包括通知网页浏览器网站可以接受自动登录的头信息。响应于从网络浏览器接收凭证信息和登录到网站的请求，具有到期时间的登录令牌由认证服务器生成并返回到网络浏览器。 Web浏览器在到期时间之前提供与网站相关联的认证地址的登录令牌，以自动登录到网站。

38. 发明授权

US08515389B2 Method, apparatus, and program product for provisioning secure wireless sensors 有权
标题翻译：用于提供安全无线传感器的方法，装置和程序产品
公开(公告)号：US08515389B2
公开(公告)日：2013-08-20
申请号：US13026665
申请日：2011-02-14
申请人： Diana K. Smetters , Dirk Balfanz , Glenn E. Durfee , Rebecca E. Grinter , Paul J. Stewart , Hao-Chi Wong
发明人： Diana K. Smetters , Dirk Balfanz , Glenn E. Durfee , Rebecca E. Grinter , Paul J. Stewart , Hao-Chi Wong
IPC分类号： H04M1/66
CPC分类号： H04L63/062 , A61B5/0002 , A61B5/117 , G06F19/00 , G08C17/00 , H04L63/0442 , H04L63/0492 , H04L63/18 , H04W12/04 , H04W76/10 , H04W84/18
摘要： We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure—an instant PKI. This technology can be used in a wide variety of applications including wired and wireless networks, secure sensor networks (such as medical networks), emergency alert networks, as well as simply and automatically provisioning network devices whether secure or not.
摘要翻译：我们提供的技术允许外行电脑用户简单地创建，配置和维护安全的基础设施 - 即时PKI。该技术可用于各种应用，包括有线和无线网络，安全传感器网络（例如医疗网络），紧急警报网络，以及简单和自动地为网络设备提供安全性。

39. 发明授权

US08156337B2 Systems and methods for authenticating communications in a network medium 有权
标题翻译：用于在网络介质中认证通信的系统和方法
公开(公告)号：US08156337B2
公开(公告)日：2012-04-10
申请号：US11395274
申请日：2006-04-03
申请人： Dirk Balfanz , Cristina Lopes , Diana Smetters , Paul Stewart , Hao-Chi Wong
发明人： Dirk Balfanz , Cristina Lopes , Diana Smetters , Paul Stewart , Hao-Chi Wong
IPC分类号： H04L9/32
CPC分类号： H04L63/18 , G06F21/43 , G06F21/445 , G06F2221/2111 , H04L9/0844 , H04L63/0492 , H04L63/065 , H04L67/34 , H04L69/16 , H04L69/162 , H04L69/168 , H04L69/329 , H04L2209/805 , H04W12/06 , H04W84/18
摘要： Pre-authentication information of devices is used to securely authenticate arbitrary peer-to-peer ad-hoc interactions. In one embodiment, public key cryptography is used in the main wireless link with location-limited channels being initially used to pre-authenticate devices. Use of public keys in the pre-authentication data allows for the broadening of types of media suitable for use as location-limited channels to include, for example, audio and infrared. Also, it allows a range of key exchange protocols which can be authenticated in this manner to include most public-key-based protocols. As a result, a large range of devices, protocols can be used in various applications. Further, an eavesdropper is forced to mount an active attack on the location-limited channel itself in order to access an ad-hoc exchange. However, this results in the discovery of the eavesdropper.
摘要翻译：设备的预认证信息用于安全地验证任意的对等ad-hoc交互。在一个实施例中，在主无线链路中使用公共密钥密码术，其中最初用于对设备进行预认证的位置限制信道。在预认证数据中使用公共密钥允许扩展适合用作位置限制信道的媒体的类型，以包括例如音频和红外。此外，它允许可以以这种方式认证的一系列密钥交换协议，以包括大多数基于公钥密钥的协议。因此，可以在各种应用中使用大范围的设备协议。此外，窃听者被迫对位置限制频道本身进行主动攻击，以便访问自组织交换。然而，这导致窃听者的发现。

40. 发明授权

US08023654B2 Securing multimedia network communication 有权
标题翻译：保护多媒体网络通信
公开(公告)号：US08023654B2
公开(公告)日：2011-09-20
申请号：US11612001
申请日：2006-12-18
申请人： Paul J. Stewart , Dirk Balfanz , Glenn E. Durfee , Diana K. Smetters
发明人： Paul J. Stewart , Dirk Balfanz , Glenn E. Durfee , Diana K. Smetters
IPC分类号： H04L29/00
CPC分类号： H04K1/00 , H04L9/3215 , H04L63/14 , H04L63/1466 , H04M7/123
摘要： A method for securing human to human communication over a network includes receiving, by a first computer, an incoming authenticated data stream from a second computer over a first communication channel, the incoming authenticated data stream having been computed using an incoming digital experiential data stream and a first imprint, and extracting the first imprint from the incoming authenticated data stream. The incoming authenticated data stream is then presented for sensory experience by a human. An outgoing digital experiential data stream is then input and the method computes a second imprint associated with the first computer and computes an outgoing authenticated data stream using the outgoing digital experiential data stream and the second imprint. A second communication channel is then secured from the first computer to the second computer using the first imprint, the second communication channel suitable for sending the outgoing authenticated data stream to the second computer.
摘要翻译：一种通过网络确保人类通信的方法包括由第一计算机通过第一通信信道从第二计算机接收传入的经认证的数据流，已经使用输入的数字体验数据流计算了传入的认证数据流，第一印记，并且从传入的认证数据流中提取第一印记。然后将传入的认证数据流呈现给人类的感官体验。然后输入输出的数字经验数据流，并且该方法计算与第一计算机相关联的第二印记，并使用输出数字体验数据流和第二印记计算输出认证数据流。然后使用第一印记从第一计算机将第二通信信道保护到第二计算机，第二通信信道适于将出站认证数据流发送到第二计算机。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式