专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

61. 发明申请

US20090300358A1 METHOD FOR MANAGING NETWORK KEY AND UPDATING SESSION KEY 有权
标题翻译：用于管理网络密钥和更新会话密钥的方法
公开(公告)号：US20090300358A1
公开(公告)日：2009-12-03
申请号：US12442513
申请日：2007-07-17
申请人： Liaojun Pang , Jun Cao , Haibo Tian , Zhenhai Huang , Bianling Zhang
发明人： Liaojun Pang , Jun Cao , Haibo Tian , Zhenhai Huang , Bianling Zhang
IPC分类号： H04L9/32 , H04L9/06
CPC分类号： H04L9/0891 , H04L2209/80 , H04W12/04 , H04W12/10
摘要： A method for managing network key and updating session key is provided. The step of the key management includes: constructing key request group, constructing key negotiation response group, and constructing key negotiation acknowledgement group. The step of multicasting key management method includes multicasting main key negotiation protocol and multicasting session key distribution protocol. The multicasting main key negotiation protocol comprises key updating informs group, constructing encryption key negotiation request group, constructing key negotiation response group and constructing key negotiation acknowledgement group. The multicasting session key distribution protocol comprises multicasting session key request and multicasting session key distribution.
摘要翻译：提供了一种管理网络密钥和更新会话密钥的方法。密钥管理的步骤包括：构建密钥请求组，建立密钥协商响应组，建立密钥协商确认组。组播密钥管理方法的步骤包括组播主密钥协商协议和组播会话密钥分发协议。组播主密钥协商协议包括密钥更新通知组，构建加密密钥协商请求组，建立密钥协商响应组，构建密钥协商确认组。组播会话密钥分发协议包括组播会话密钥请求和组播会话密钥分发。

62. 发明授权

US08966257B2 Method and system for secret communication between nodes 有权
标题翻译：节点之间的秘密通信的方法和系统
公开(公告)号：US08966257B2
公开(公告)日：2015-02-24
申请号：US13516967
申请日：2010-06-02
申请人： Manxia Tie , Jun Cao , Oin Li , Li Ge , Zhenhai Huang
发明人： Manxia Tie , Jun Cao , Oin Li , Li Ge , Zhenhai Huang
IPC分类号： H04L29/06 , H04L9/32 , H04L12/721
CPC分类号： H04L63/0464 , H04L9/0827 , H04L45/26 , H04L63/0435 , H04L63/0471 , H04L63/062 , H04L63/162
摘要： The present invention discloses a method and system for secret communication between nodes in a wired Local Area Network (LAN). The method of secret communication between nodes in the wired LAN includes the following steps: 1) a sharing key is established; 2) the route probe is exchanged; 3) the data communication is classified; 4) the secret communication is processed among the nodes. According to the different communication situations among the nodes, the method of secret communication between nodes provided in the present invention can process the classification and select an appropriate secret communication strategy; compared with per-hop encryption, the calculation load of the exchange equipment is reduced, and the transmission delay of data packets is shortened; compared with the method that inter-station keys are established in pairs of nodes in order to protect the communication secret, the key number is reduced, and the key management is simplified.
摘要翻译：本发明公开了一种用于有线局域网（LAN）中的节点之间的秘密通信的方法和系统。有线局域网节点之间的秘密通信方法包括以下步骤：1）建立共享密钥; 2）交换路由探测器; 3）数据通信分类; 4）节点之间处理秘密通信。根据节点之间不同的通信情况，本发明提供的节点之间的秘密通信方法可以处理分类并选择适当的秘密通信策略; 与每跳加密相比，交换设备的计算负载减少，数据包的传输延迟缩短; 与站间密钥建立成对节点的方法相比，为了保护通信秘密，密钥号码减少，密钥管理简化。

63. 发明申请

US20120300939A1 KEY MANAGEMENT AND NODE AUTHENTICATION METHOD FOR SENSOR NETWORK 有权
标题翻译：传感器网络的主要管理和节点验证方法
公开(公告)号：US20120300939A1
公开(公告)日：2012-11-29
申请号：US13503171
申请日：2010-06-02
申请人： Zhiqiang Du , Jun Cao , Manxia Tie , Zhenhai Huang
发明人： Zhiqiang Du , Jun Cao , Manxia Tie , Zhenhai Huang
IPC分类号： H04L9/08
CPC分类号： H04L63/061 , H04L63/062 , H04L63/08 , H04L63/1441 , H04L67/12 , H04W12/04 , H04W12/06 , H04W84/18
摘要： A key management and node authentication method for a sensor network is disclosed. The method comprises the following steps of: 1) keys pre-distribution: before deploying the network, communication keys for establishing security connection between nodes are pre-distributed to all of nodes by a deployment server. 2) Keys establishment: after deploying the network, a pair key for the security connection is established between nodes, which includes the following steps of: 2.1) establishment of shared keys: the pair key is established between neighbor nodes in which the shared keys are existed; 2.2) path keys establishment: the pair key is established between the nodes in which there is no shared keys but there is a multi-hop security connection. 3) Node identity (ID) authentication: before formally communicating between nodes, the identity is authenticated so as to determine the legality and the validity of the identity of the other. It is possible for effectively resisting attacks such as wiretapping, tampering, and replaying and the like for the network communication, realizing the secret communication between the nodes, effectively saving resources of the nodes of the sensor network, and prolonging the service lift of the sensor network in the method.
摘要翻译：公开了一种用于传感器网络的密钥管理和节点认证方法。该方法包括以下步骤：1）密钥预分发：在部署网络之前，通过部署服务器将节点之间建立安全连接的通信密钥预分配给所有节点。 2）密钥建立：部署网络后，在节点之间建立安全连接对，包括以下步骤：2.1建立共享密钥：在共享密钥的邻居节点之间建立配对密钥存在; 2.2）路径密钥建立：在没有共享密钥的节点之间建立配对密钥，但存在多跳安全连接。 3）节点身份（ID）认证：在节点之间正式通信之前，身份被认证，以确定其他身份的合法性和有效性。有效抵御网络通信窃听，篡改，重放等攻击，实现节点之间的秘密通信，有效节省传感器网络节点的资源，延长传感器的业务提升网络中的方法。

64. 发明申请

US20120278623A1 METHOD AND SYSTEM FOR SECRET COMMUNICATION BETWEEN NODES 有权
标题翻译： NODES之间的秘密通信的方法和系统
公开(公告)号：US20120278623A1
公开(公告)日：2012-11-01
申请号：US13516967
申请日：2010-06-02
申请人： Manxia Tie , Jun Cao , Oin Li , Li Ge , Zhenhai Huang
发明人： Manxia Tie , Jun Cao , Oin Li , Li Ge , Zhenhai Huang
IPC分类号： H04L9/32 , H04L12/56
CPC分类号： H04L63/0464 , H04L9/0827 , H04L45/26 , H04L63/0435 , H04L63/0471 , H04L63/062 , H04L63/162
摘要： The present invention discloses a method and system for secret communication between nodes in a wired Local Area Network (LAN). The method of secret communication between nodes in the wired LAN includes the following steps: 1) a sharing key is established; 2) the route probe is exchanged; 3) the data communication is classified; 4) the secret communication is processed among the nodes. According to the different communication situations among the nodes, the method of secret communication between nodes provided in the present invention can process the classification and select an appropriate secret communication strategy; compared with per-hop encryption, the calculation load of the exchange equipment is reduced, and the transmission delay of data packets is shortened; compared with the method that inter-station keys are established in pairs of nodes in order to protect the communication secret, the key number is reduced, and the key management is simplified.
摘要翻译：本发明公开了一种用于有线局域网（LAN）中的节点之间的秘密通信的方法和系统。有线局域网节点之间的秘密通信方法包括以下步骤：1）建立共享密钥; 2）交换路由探测器; 3）数据通信分类; 4）节点之间处理秘密通信。根据节点之间不同的通信情况，本发明提供的节点之间的秘密通信方法可以处理分类并选择适当的秘密通信策略; 与每跳加密相比，交换设备的计算负载减少，数据包的传输延迟缩短; 与站间密钥建立成对节点的方法相比，为了保护通信秘密，密钥号码减少，密钥管理简化。

65. 发明授权

US08913751B2 Key management and node authentication method for sensor network 有权
标题翻译：传感器网络的密钥管理和节点认证方法
公开(公告)号：US08913751B2
公开(公告)日：2014-12-16
申请号：US13503171
申请日：2010-06-02
申请人： Zhiqiang Du , Jun Cao , Manxia Tie , Zhenhai Huang
发明人： Zhiqiang Du , Jun Cao , Manxia Tie , Zhenhai Huang
IPC分类号： H04L9/08 , H04L29/06 , H04W12/04 , H04W84/18 , H04W12/06 , H04L29/08
CPC分类号： H04L63/061 , H04L63/062 , H04L63/08 , H04L63/1441 , H04L67/12 , H04W12/04 , H04W12/06 , H04W84/18
摘要： A key management and node authentication method for a sensor network is disclosed. The method comprises the following steps of: 1) keys pre-distribution: before deploying the network, communication keys for establishing security connection between nodes are pre-distributed to all of nodes by a deployment server. 2) Keys establishment: after deploying the network, a pair key for the security connection is established between nodes, which includes the following steps of: 2.1) establishment of shared keys: the pair key is established between neighbor nodes in which the shared keys are existed; 2.2) path keys establishment: the pair key is established between the nodes in which there is no shared keys but there is a multi-hop security connection. 3) Node identity (ID) authentication: before formally communicating between nodes, the identity is authenticated so as to determine the legality and the validity of the identity of the other. It is possible for effectively resisting attacks such as wiretapping, tampering, and replaying and the like for the network communication, realizing the secret communication between the nodes, effectively saving resources of the nodes of the sensor network, and prolonging the service lift of the sensor network in the method.
摘要翻译：公开了一种用于传感器网络的密钥管理和节点认证方法。该方法包括以下步骤：1）密钥预分发：在部署网络之前，通过部署服务器将节点之间建立安全连接的通信密钥预分配给所有节点。 2）密钥建立：部署网络后，在节点之间建立安全连接对，包括以下步骤：2.1建立共享密钥：在共享密钥的邻居节点之间建立配对密钥存在; 2.2）路径密钥建立：在没有共享密钥的节点之间建立配对密钥，但存在多跳安全连接。 3）节点身份（ID）认证：在节点之间正式通信之前，身份被认证，以确定其他身份的合法性和有效性。有效抵御网络通信窃听，篡改，重放等攻击，实现节点之间的秘密通信，有效节省传感器网络节点的资源，延长传感器的业务提升网络中的方法。

66. 发明授权

US08713303B2 Method and system for establishing security connection between switch equipments 有权
标题翻译：建立交换机设备之间安全连接的方法和系统
公开(公告)号：US08713303B2
公开(公告)日：2014-04-29
申请号：US13515394
申请日：2010-05-26
申请人： Qin Li , Jun Cao , Li Ge , Manxia Tie , Zhenhai Huang
发明人： Qin Li , Jun Cao , Li Ge , Manxia Tie , Zhenhai Huang
IPC分类号： H04L29/06 , H04K1/00 , H04L9/08 , H04W12/04 , H04L9/32
CPC分类号： H04L9/0838 , H04L12/6418 , H04L63/0428 , H04L63/061 , H04L63/162
摘要： A method and a system for establishing a security connection between switch equipments are disclosed in the present invention. The system includes the first switch equipment and the second switch equipment; the first switch equipment sends the switch key negotiation activation packet and the switch key negotiation response packet to the second switch equipment; the second switch equipment sends the switch key negotiation request packet to the first switch equipment. The embodiments of the present invention provide a security policy for data security transmission between switch equipments by establishing shared switch key between each two switch equipments, thus guaranteeing the confidentiality of the data transmission process between switch equipments in the data link layer. The calculation burden of switch equipment and the delay of the data packets transmitted from the transmission end to the reception end can be reduced and the efficiency of network transmission can be improved.
摘要翻译：在本发明中公开了一种用于在交换机设备之间建立安全连接的方法和系统。该系统包括第一开关设备和第二开关设备; 第一交换机设备向第二交换机设备发送交换机密钥协商激活分组和交换机密钥协商响应分组; 第二交换机设备向第一交换机设备发送交换机密钥协商请求报文。本发明的实施例通过在两个交换机设备之间建立共享切换密钥来提供交换机设备之间数据安全传输的安全策略，从而保证了数据链路层交换机设备之间数据传输过程的机密性。可以减少交换机的计算负担和从发送端到接收端的数据包的延迟，提高网络传输的效率。

67. 发明申请

US20130159706A1 SECRET COMMUNICATION METHOD AND SYSTEM BETWEEN NEIGHBORING USER TERMINALS, TERMINAL, SWITCHING EQUIPMENT 有权
标题翻译：相邻用户终端，终端，切换设备之间的秘密通信方法和系统
公开(公告)号：US20130159706A1
公开(公告)日：2013-06-20
申请号：US13814899
申请日：2011-04-27
申请人： Qin Li , Jun Cao , Manxia Tie , Zhenhai Huang , Zhiqiang Du
发明人： Qin Li , Jun Cao , Manxia Tie , Zhenhai Huang , Zhiqiang Du
IPC分类号： H04L9/08
CPC分类号： H04L9/0816 , H04L9/083 , H04L9/321 , H04L63/06 , H04L2463/062
摘要： The present invention provides a secret communication method, apparatus and system. The method comprises: 1) determining a neighboring encryption switching equipment shared by a first user terminal and a second user terminal, wherein the first user terminal and the second user terminal are neighboring user terminals (1); 2) establishing, by the neighboring encryption switching equipment, an inter-station key for communication between the first user terminal and the second terminal (2); 3) performing data secret communication between the first user terminal and the second terminal by using the inter-station key (3). With the present invention, the neighboring user terminals needing to perform the secret communication can establish the inter-station key without performing identity authentication with each other, and can perform the secret communication with the inter-station key, and thereby the network load is reduced.
摘要翻译：本发明提供一种秘密通信方法，装置和系统。该方法包括：1）确定由第一用户终端和第二用户终端共享的相邻加密交换设备，其中第一用户终端和第二用户终端是相邻的用户终端（1）; 2）由相邻加密交换设备建立用于第一用户终端和第二终端（2）之间的通信的站间密钥; 3）使用站间密钥（3）执行第一用户终端与第二终端之间的数据秘密通信。通过本发明，需要执行秘密通信的相邻用户终端可以建立站间密钥，而不进行彼此的身份认证，并且可以执行与站间密钥的秘密通信，从而减少网络负载。

68. 发明申请

US20130016838A1 MULTICAST KEY NEGOTIATION METHOD SUITABLE FOR GROUP CALLING SYSTEM AND A SYSTEM THEREOF 有权
标题翻译：适用于集团呼叫系统的多媒体关键协商方法及其系统
公开(公告)号：US20130016838A1
公开(公告)日：2013-01-17
申请号：US13637375
申请日：2010-05-12
申请人： Yanan Hu , Jun Cao , Manxia Tie , Zhenhai Huang
发明人： Yanan Hu , Jun Cao , Manxia Tie , Zhenhai Huang
IPC分类号： H04L9/28
CPC分类号： H04W12/04 , H04L12/189 , H04L63/065 , H04W12/10
摘要： The present invention discloses a multicast key negotiation method suitable for group calling system and a system thereof. The method includes that: a user terminal (UT) negotiates about a unicast key with a base station (BS), derives an information encryption key and an integrity verifying key according to the unicast key, and registers a service group identifier that the UT belongs to at the BS; the BS notifies the UT the multicast key of the service group that the UT needs to apply, constructs a multicast key notification packet, and sends it to the UT; after receiving the multicast key notification packet sent by the BS, the UT obtains the multicast key of the service group that the UT needs to apply by decrypting a service group key application list, constructs a multicast key confirmation packet, and sends it to the BS; the BS confirms that the multicast key of the UT service group is built successfully according to the multicast key confirmation packet sent by the UT.
摘要翻译：本发明公开了适用于群呼系统的组播密钥协商方法及其系统。该方法包括：用户终端（UT）与基站（BS）协商关于单播密钥，根据单播密钥导出信息加密密钥和完整性验证密钥，并注册UT所属的服务组标识符到BS; BS向UT通知UT需要应用的业务组的组播密钥，构建组播密钥通知报文，并将其发送给UT; UT收到BS发送的组播密钥通知报文后，通过解密业务组密钥应用列表获取UT需要应用的业务组的组播密钥，构建组播密钥确认报文，并发送给BS ; 根据UT发送的组播密钥确认包，BS确认UT服务组的组播密钥成功建立。

69. 发明申请

US20120254617A1 METHOD AND SYSTEM FOR ESTABLISHING SECURITY CONNECTION BETWEEN SWITCH EQUIPMENTS 有权
标题翻译：用于建立开关设备之间的安全连接的方法和系统
公开(公告)号：US20120254617A1
公开(公告)日：2012-10-04
申请号：US13515394
申请日：2010-05-26
申请人： Qin Li , Jun Cao , Li Ge , Manxia Tie , Zhenhai Huang
发明人： Qin Li , Jun Cao , Li Ge , Manxia Tie , Zhenhai Huang
IPC分类号： H04L9/32
CPC分类号： H04L9/0838 , H04L12/6418 , H04L63/0428 , H04L63/061 , H04L63/162
摘要： A method and a system for establishing a security connection between switch equipments are disclosed in the present invention. The system includes the first switch equipment and the second switch equipment; the first switch equipment sends the switch key negotiation activation packet and the switch key negotiation response packet to the second switch equipment; the second switch equipment sends the switch key negotiation request packet to the first switch equipment. The embodiments of the present invention provide a security policy for data security transmission between switch equipments by establishing shared switch key between each two switch equipments, thus guaranteeing the confidentiality of the data transmission process between switch equipments in the data link layer. The calculation burden of switch equipment and the delay of the data packets transmitted from the transmission end to the reception end can be reduced and the efficiency of network transmission can be improved.
摘要翻译：在本发明中公开了一种用于在交换机设备之间建立安全连接的方法和系统。该系统包括第一开关设备和第二开关设备; 第一交换机设备向第二交换机设备发送交换机密钥协商激活分组和交换机密钥协商响应分组; 第二交换机设备向第一交换机设备发送交换机密钥协商请求报文。本发明的实施例通过在两个交换机设备之间建立共享切换密钥来提供交换机设备之间数据安全传输的安全策略，从而保证了数据链路层交换机设备之间数据传输过程的机密性。可以减少交换机的计算负担和从发送端到接收端的数据包的延迟，提高网络传输的效率。

70. 发明申请

US20120159587A1 METHOD AND SYSTEM FOR PRE-SHARED-KEY-BASED NETWORK SECURITY ACCESS CONTROL 有权
标题翻译：用于基于预先共享密钥的网络安全访问控制的方法和系统
公开(公告)号：US20120159587A1
公开(公告)日：2012-06-21
申请号：US13391526
申请日：2009-12-24
申请人： Li Ge , Jun Cao , Manxia Tie , Qin Li , Zhenhai Huang
发明人： Li Ge , Jun Cao , Manxia Tie , Qin Li , Zhenhai Huang
IPC分类号： G06F21/20
CPC分类号： H04L63/061 , H04L63/0869 , H04L63/20
摘要： A method and system for pre-shared-key-based network access control are disclosed. The method includes the following steps: 1) security policy negotiation is implemented between a REQuester(REQ) and Authentication Access Controller(AAC); 2) identity authentication and uni-cast key negotiation are implemented between REQ and AAC; 3) a group-cast key is notified between REQ and AAC. Applying the method and system, rapid bidirectional authentication can be implemented between a user and network.
摘要翻译：公开了一种基于预共享密钥的网络访问控制的方法和系统。该方法包括以下步骤：1）在REQuester（REQ）和认证接入控制器（AAC）之间实现安全策略协商; 2）在REQ和AAC之间实现身份认证和单播密钥协商; 3）REQ和AAC之间通知组播密钥。应用该方法和系统，可以在用户和网络之间实现快速双向认证。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式