专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09015489B2 Securing passwords against dictionary attacks 有权
标题翻译：保护密码免受字典攻击
公开(公告)号：US09015489B2
公开(公告)日：2015-04-21
申请号：US12755426
申请日：2010-04-07
申请人： Mira Belenkiy , Tolga Acar , Henry Nelson Jerez Morales , Alptekin Kupcu
发明人： Mira Belenkiy , Tolga Acar , Henry Nelson Jerez Morales , Alptekin Kupcu
IPC分类号： G06F21/00 , G06F7/04 , H04L29/06 , H04L9/08 , H04L9/32
CPC分类号： H04L63/0428 , H04L9/0841 , H04L9/3226 , H04L9/3271 , H04L63/06 , H04L63/083 , H04L63/0853
摘要： Described herein are various technologies pertaining to constructions of a password-based authentication protocol that are configured to allow a user to register with and authenticate to an online service without the online service receiving a password or a deterministic function of the password of the user. When registering with an online service, a client computing device establishes a cryptographically strong random secret and stores an encryption of such secret with a data storage device. The storage device also never receives the password or a deterministic function of the password. When the user wishes to authenticate to the online service, the user employs her password to retrieve the encrypted secret from the storage device, decrypts such secret, and utilizes the decrypted secret to answer a cryptographically strong challenge provided to the user by the online service upon the online service receiving a username pertaining to such user.
摘要翻译：这里描述的是涉及基于密码的认证协议的构造的各种技术，其被配置为允许用户在没有在线服务接收密码或用户的密码的确定性功能的情况下向在线服务注册和认证。当在线服务注册时，客户端计算设备建立密码强的随机秘密，并将这种秘密的加密存储在数据存储设备中。存储设备也从不接收密码或密码的确定性功能。当用户希望对在线服务进行身份验证时，用户使用她的密码从存储设备中取回加密的秘密，解密这样的秘密，并利用解密的秘密来回答由在线服务提供给用户的加密强大的挑战，该在线服务接收与该用户有关的用户名。

2. 发明申请

US20110252229A1 SECURING PASSWORDS AGAINST DICTIONARY ATTACKS 有权
标题翻译：安全口令反对字典攻击
公开(公告)号：US20110252229A1
公开(公告)日：2011-10-13
申请号：US12755426
申请日：2010-04-07
申请人： Mira Belenkiy , Tolga Acar , Henry Nelson Jerez Morales , Alptekin Kupcu
发明人： Mira Belenkiy , Tolga Acar , Henry Nelson Jerez Morales , Alptekin Kupcu
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/0428 , H04L9/0841 , H04L9/3226 , H04L9/3271 , H04L63/06 , H04L63/083 , H04L63/0853
摘要： Described herein are various technologies pertaining to constructions of a password-based authentication protocol that are configured to allow a user to register with and authenticate to an online service without the online service receiving a password or a deterministic function of the password of the user. When registering with an online service, a client computing device establishes a cryptographically strong random secret and stores an encryption of such secret with a data storage device. The storage device also never receives the password or a deterministic function of the password. When the user wishes to authenticate to the online service, the user employs her password to retrieve the encrypted secret from the storage device, decrypts such secret, and utilizes the decrypted secret to answer a cryptographically strong challenge provided to the user by the online service upon the online service receiving a username pertaining to such user.
摘要翻译：这里描述的是涉及基于密码的认证协议的构造的各种技术，其被配置为允许用户在没有在线服务接收密码或用户的密码的确定性功能的情况下向在线服务注册和认证。当在线服务注册时，客户端计算设备建立密码强的随机秘密，并将这种秘密的加密存储在数据存储设备中。存储设备也从不接收密码或密码的确定性功能。当用户希望对在线服务进行身份验证时，用户使用她的密码从存储设备中取回加密的秘密，解密这样的秘密，并利用解密的秘密来回答由在线服务提供给用户的加密强大的挑战，该在线服务接收与该用户有关的用户名。

3. 发明授权

US08693689B2 Location brokering for providing security, privacy and services 有权
标题翻译：提供安全，隐私和服务的位置代理
公开(公告)号：US08693689B2
公开(公告)日：2014-04-08
申请号：US12917452
申请日：2010-11-01
申请人： Mira Belenkiy , Henry Nelson Jerez Morales , Thomas Michael Roeder , Matt Dyor
发明人： Mira Belenkiy , Henry Nelson Jerez Morales , Thomas Michael Roeder , Matt Dyor
IPC分类号： H04L29/06
CPC分类号： H04W12/08 , H04L9/0872 , H04L9/14 , H04L2209/80
摘要： Location brokering technique embodiments are presented that employ sensor data captured by a user's mobile device to determine the device's location, encrypt the location data and store it in a database. The location data is encrypted in such a way that it is possible to determine when a user's mobile device is currently in the same vicinity as another user's mobile device who is a member of the same group. However, the actual location and relative mobility or immobility of the users cannot be ascertained except by the users themselves via a decryption procedure or by trusted components. Services are provided can read the stored encrypted location data, processes it to determine if group members are in the same vicinity, and either respond to user queries about the location of other members of a group the user belongs to, or push this information to appropriate users.
摘要翻译：提出了使用由用户的移动设备捕获的传感器数据来确定设备的位置，加密位置数据并将其存储在数据库中的位置代理技术实施例。位置数据被加密，使得可以确定用户的移动设备何时与作为同一组的成员的另一个用户的移动设备相同的附近。然而，用户本身经由解密程序或受信任的组件除外，无法确定用户的实际位置和相对移动性或不动性。提供的服务可以读取存储的加密位置数据，处理它以确定组成员是否在相同的附近，并且响应用户关于用户所属的组的其他成员的位置的查询，或者将该信息推送到适当的位置用户

4. 发明申请

US20120106738A1 LOCATION BROKERING FOR PROVIDING SECURITY, PRIVACY AND SERVICES 有权
标题翻译：提供安全，隐私和服务的位置代理
公开(公告)号：US20120106738A1
公开(公告)日：2012-05-03
申请号：US12917452
申请日：2010-11-01
申请人： Mira Belenkiy , Henry Nelson Jerez Morales , Thomas Michael Roeder , Matt Dyor
发明人： Mira Belenkiy , Henry Nelson Jerez Morales , Thomas Michael Roeder , Matt Dyor
IPC分类号： H04L9/06
CPC分类号： H04W12/08 , H04L9/0872 , H04L9/14 , H04L2209/80
摘要： Location brokering technique embodiments are presented that employ sensor data captured by a user's mobile device to determine the device's location, encrypt the location data and store it in a database. The location data is encrypted in such a way that it is possible to determine when a user's mobile device is currently in the same vicinity as another user's mobile device who is a member of the same group as the first user. However, the actual location and relative mobility or immobility of the users cannot be ascertained except by the users themselves via a decryption procedure or by trusted components. Services are provided can read the stored encrypted location data, processes it to determine if group members are in the same vicinity, and either respond to user queries about the location of other members of a group the user belongs to, or push this information to appropriate users.
摘要翻译：提出了使用由用户的移动设备捕获的传感器数据来确定设备的位置，加密位置数据并将其存储在数据库中的位置代理技术实施例。位置数据被加密，使得可以确定用户的移动设备何时与作为与第一用户相同组的成员的另一个用户的移动设备在同一附近。然而，用户本身经由解密程序或受信任的组件除外，无法确定用户的实际位置和相对移动性或不动性。提供的服务可以读取存储的加密位置数据，处理它以确定组成员是否在相同的附近，并且响应用户关于用户所属的组的其他成员的位置的查询，或者将该信息推送到适当的位置用户

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式