专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20050027985A1 Internet protocol telephony security architecture 有权
标题翻译：互联网协议电话安全架构
公开(公告)号：US20050027985A1
公开(公告)日：2005-02-03
申请号：US10893047
申请日：2004-07-15
申请人： Eric Sprunk , Paul Moroney , Alexander Medvinsky , Steven Anderson , Jonathan Fellows
发明人： Eric Sprunk , Paul Moroney , Alexander Medvinsky , Steven Anderson , Jonathan Fellows
IPC分类号： G06F1/00 , G06F12/14 , G06F21/00 , H04L9/32 , H04L29/06 , H04L12/16
CPC分类号： H04L29/06027 , G06F12/1408 , G06F21/606 , G06F2207/7219 , G06F2211/008 , G06F2221/2129 , H04L9/083 , H04L9/0841 , H04L9/3213 , H04L9/3263 , H04L63/0435 , H04L63/0442 , H04L63/061 , H04L63/062 , H04L63/0807 , H04L63/12 , H04L65/1043
摘要： A secure Internet Protocol (IP) telephony system, apparatus, and methods are disclosed. Communications over an IP telephony system can be secured by securing communications to and from a Cable Telephony Adapter (CTA). The system can include one or more CTAs, network servers, servers configured as signaling controllers, key distribution centers (KDC), and can include gateways that couple the IP telephony system to a Public Switched Telephone Network (PSTN). Each CTA can be configured as secure hardware and can be configured with multiple encryption keys that are used to communicate signaling or bearer channel communications. The KDC can be configured to periodically distribute symmetric encryption keys to secure communications between devices that have been provisioned to operate in the system and signaling controllers. The secure devices, such as the CTA, can communicate with other secure devices by establishing signaling and bearer channels that are encrypted with session specific symmetric keys derived from a symmetric key distributed by a signaling controller.
摘要翻译：公开了一种安全的因特网协议（IP）电话系统，装置和方法。通过IP电话系统的通信可以通过保护与有线电话适配器（CTA）的通信来保护。该系统可以包括一个或多个CTA，网络服务器，配置为信令控制器的服务器，密钥分配中心（KDC），并且可以包括将IP电话系统耦合到公共交换电话网络（PSTN）的网关。每个CTA都可以配置为安全硬件，并且可以配置多个用于通信信令或承载信道通信的加密密钥。 KDC可以被配置为周期性地分配对称加密密钥以保护已经被提供以在系统和信令控制器中操作的设备之间的通信。诸如CTA之类的安全设备可以通过建立用由信令控制器分配的对称密钥导出的会话专用对称密钥加密的信令和承载信道来与其他安全设备进行通信。

2. 发明申请

US20060059342A1 System and method for providing authorized access to digital content 有权
标题翻译：提供授权访问数字内容的系统和方法
公开(公告)号：US20060059342A1
公开(公告)日：2006-03-16
申请号：US11228180
申请日：2005-09-16
申请人： Alexander Medvinsky , Paul Moroney , Eric Sprunk , Petr Peterka
发明人： Alexander Medvinsky , Paul Moroney , Eric Sprunk , Petr Peterka
IPC分类号： H04L9/00
CPC分类号： H04L9/0825 , G11B20/0021 , G11B20/00731 , H04L9/0822 , H04L9/083 , H04L2209/603 , H04N21/26606 , H04N21/26613 , H04N21/4181 , H04N21/63345 , H04N21/8355
摘要： Described herein are embodiments that provide an approach to cryptographic key management for a digital rights management (DRM) architecture that includes multiple levels of key management for minimizing bandwidth usage while maximizing security for the DRM architecture. In one embodiment, there is provided a data structure for cryptographic key management that includes a public/private key pair and three additional layers of symmetric keys for authorizing access to a plurality of contents.
摘要翻译：这里描述的是提供用于数字版权管理（DRM）架构的加密密钥管理的方法的实施例，其包括用于最小化带宽使用的多级密钥管理，同时最大化DRM架构的安全性。在一个实施例中，提供了一种用于加密密钥管理的数据结构，其包括用于授权访问多个内容的公钥/私钥对和三个对称密钥层。

3. 发明授权

US07404082B2 System and method for providing authorized access to digital content 有权
标题翻译：提供授权访问数字内容的系统和方法
公开(公告)号：US07404082B2
公开(公告)日：2008-07-22
申请号：US11228180
申请日：2005-09-16
申请人： Alexander Medvinsky , Paul Moroney , Eric Sprunk , Petr Peterka
发明人： Alexander Medvinsky , Paul Moroney , Eric Sprunk , Petr Peterka
IPC分类号： H04L9/00
CPC分类号： H04L9/0825 , G11B20/0021 , G11B20/00731 , H04L9/0822 , H04L9/083 , H04L2209/603 , H04N21/26606 , H04N21/26613 , H04N21/4181 , H04N21/63345 , H04N21/8355
摘要： Described herein are embodiments that provide an approach to cryptographic key management for a digital rights management (DRM) architecture that includes multiple levels of key management for minimizing bandwidth usage while maximizing security for the DRM architecture. In one embodiment, there is provided a data structure for cryptographic key management that includes a public/private key pair and three additional layers of symmetric keys for authorizing access to a plurality of contents.
摘要翻译：这里描述的是提供用于数字版权管理（DRM）架构的加密密钥管理的方法的实施例，其包括用于最小化带宽使用的多级密钥管理，同时最大化DRM架构的安全性。在一个实施例中，提供了一种用于加密密钥管理的数据结构，其包括用于授权访问多个内容的公钥/私钥对和三个对称密钥层。

4. 发明授权

US07243366B2 Key management protocol and authentication system for secure internet protocol rights management architecture 有权
标题翻译：用于安全互联网协议权限管理架构的密钥管理协议和认证系统
公开(公告)号：US07243366B2
公开(公告)日：2007-07-10
申请号：US10092347
申请日：2002-03-04
申请人： Alexander Medvinsky , Petr Peterka , Paul Moroney , Eric Sprunk
发明人： Alexander Medvinsky , Petr Peterka , Paul Moroney , Eric Sprunk
IPC分类号： G06F17/30 , G06F7/04 , G06K9/00 , H04L9/32 , H04L9/00
CPC分类号： H04L63/04 , G06Q20/367 , H04L63/062 , H04L63/08 , H04L2463/101
摘要： A digital rights management architecture for securely delivering content to authorized consumers. The architecture includes a content provider and a consumer system for requesting content from the content provider. The content provider generates a session rights object having purchase options selected by the consumer. A KDC thereafter provides authorization data to the consumer system. Also, a caching server is provided for comparing the purchase options with the authorization data. The caching server forwards the requested content to the consumer system if the purchase options match the authorization data. Note that the caching server employs real time streaming for securely forwarding the encrypted content, and the requested content is encrypted for forwarding to the consumer system. Further, the caching server and the consumer system exchange encrypted control messages (and authenticated) for supporting transfer of the requested content. In this manner, all interfaces between components are protected by encryption and/authenticated.
摘要翻译：数字版权管理架构，用于将权限安全地传递给授权消费者。该架构包括内容提供商和用于从内容提供商请求内容的消费者系统。内容提供商生成具有由消费者选择的购买选项的会话权限对象。 KDC此后向消费者系统提供授权数据。此外，还提供了一个缓存服务器，用于将购买选项与授权数据进行比较。如果购买选项与授权数据匹配，则缓存服务器将所请求的内容转发到消费者系统。请注意，缓存服务器采用实时流式传输安全地转发加密的内容，并且所请求的内容被加密以转发到消费者系统。此外，缓存服务器和消费者系统交换加密的控制消息（并被认证）以支持所请求的内容的传送。以这种方式，组件之间的所有接口都受到加密和/或认证的保护。

5. 发明授权

US08973025B2 Method and system for providing security within multiple set-top boxes assigned for a single customer 有权
标题翻译：在为单个客户分配的多个机顶盒中提供安全性的方法和系统
公开(公告)号：US08973025B2
公开(公告)日：2015-03-03
申请号：US13287576
申请日：2011-11-02
申请人： Paul Moroney , Scott Contini , Eric Sprunk , Allen James Anderson
发明人： Paul Moroney , Scott Contini , Eric Sprunk , Allen James Anderson
IPC分类号： H04N7/16 , H04N7/167 , H04N21/436 , H04N21/418 , H04N21/45 , H04N21/4367 , H04N21/442 , H04N21/4623
CPC分类号： H04N21/43615 , H04N7/162 , H04N7/163 , H04N7/165 , H04N7/1675 , H04N21/4181 , H04N21/4367 , H04N21/44227 , H04N21/4532 , H04N21/4623
摘要： Two or more set-top boxes are installed in a household. A communications link, preferably a physical link, is provided between or among the set-top boxes. One of the boxes is designated as a “master” box while the other box or boxes are “slaves.” The slave box will use the communications link to communicate in a secured and encrypted manner with the master box. If that communication is severed, e.g., if an attempt is made to move the slave box to another household to provide unauthorized service in that household, the slave box will stop working when it can no longer communicate with the master box.
摘要翻译：家庭中安装了两个或更多的机顶盒。在机顶盒之间或之间提供通信链路，优选物理链路。其中一个框被指定为“主”框，而其他框或框是“从站”。从框将使用通信链路以安全和加密的方式与主框进行通信。如果该通信被切断，例如，如果试图将从属盒移动到另一家庭以在该家庭中提供未经授权的服务，则当它不再能够与主盒通信时，从属盒将停止工作。

6. 发明申请

US20120110612A1 Method and System for Providing Security within Multiple Set-Top Boxes Assigned for a Single Customer 有权
标题翻译：为单个客户分配的多个机顶盒提供安全的方法和系统
公开(公告)号：US20120110612A1
公开(公告)日：2012-05-03
申请号：US13287576
申请日：2011-11-02
申请人： Paul Moroney , Scott Contini , Eric Sprunk , Allen James Anderson
发明人： Paul Moroney , Scott Contini , Eric Sprunk , Allen James Anderson
IPC分类号： H04N21/25 , H04N21/2665
CPC分类号： H04N21/43615 , H04N7/162 , H04N7/163 , H04N7/165 , H04N7/1675 , H04N21/4181 , H04N21/4367 , H04N21/44227 , H04N21/4532 , H04N21/4623
摘要： Two or more set-top boxes are installed in a household. A communications link, preferably a physical link, is provided between or among the set-top boxes. One of the boxes is designated as a “master” box while the other box or boxes are “slaves.” The slave box will use the communications link to communicate in a secured and encrypted manner with the master box. If that communication is severed, e.g., if an attempt is made to move the slave box to another household to provide unauthorized service in that household, the slave box will stop working when it can no longer communicate with the master box.
摘要翻译：一个家庭安装了两个或更多的机顶盒。在机顶盒之间或之间提供通信链路，优选物理链路。其中一个框被指定为“主”框，而其他框或框是“从站”。从框将使用通信链路以安全和加密的方式与主框进行通信。如果该通信被切断，例如，如果试图将从属盒移动到另一家庭以在该家庭中提供未经授权的服务，则当它不再能够与主盒通信时，从属盒将停止工作。

7. 发明授权

US08068610B2 Method and system for providing security within multiple set-top boxes assigned for a single customer 有权
标题翻译：在为单个客户分配的多个机顶盒中提供安全性的方法和系统
公开(公告)号：US08068610B2
公开(公告)日：2011-11-29
申请号：US10301092
申请日：2002-11-20
申请人： Paul Moroney , Scott Contini , Eric Sprunk , Allen James Anderson
发明人： Paul Moroney , Scott Contini , Eric Sprunk , Allen James Anderson
IPC分类号： H04L9/00 , H04N7/173 , H04N7/16
CPC分类号： H04N21/43615 , H04N7/162 , H04N7/163 , H04N7/165 , H04N7/1675 , H04N21/4181 , H04N21/4367 , H04N21/44227 , H04N21/4532 , H04N21/4623
摘要： Two or more set-top boxes are installed in a household. A communications link, preferably a physical link, is provided between or among the set-top boxes. One of the boxes is designated as a “master” box while the other box or boxes are “slaves.” The slave box will use the communications link to communicate in a secured and encrypted manner with the master box. If that communication is severed, e.g., if an attempt is made to move the slave box to another household to provide unauthorized service in that household, the slave box will stop working when it can no longer communicate with the master box.
摘要翻译：家庭中安装了两个或更多的机顶盒。在机顶盒之间或之间提供通信链路，优选物理链路。其中一个框被指定为“主”框，而其他框或框是“从站”。从框将使用通信链路以安全和加密的方式与主框进行通信。如果该通信被切断，例如，如果试图将从属盒移动到另一家庭以在该家庭中提供未经授权的服务，则当它不再能够与主盒通信时，从属盒将停止工作。

8. 发明申请

US20050071640A1 Method and apparatus for authenticating data 审中-公开
标题翻译：用于认证数据的方法和装置
公开(公告)号：US20050071640A1
公开(公告)日：2005-03-31
申请号：US10796712
申请日：2004-03-09
申请人： Eric Sprunk , Paul Moroney
发明人： Eric Sprunk , Paul Moroney
IPC分类号： H04L9/08 , H04L9/32 , H04L9/00
CPC分类号： H04L9/14 , H04L9/0894 , H04L9/3236 , H04L2209/603
摘要： A method for authenticating a string of data stored remotely from the processor. A bifurcated hash routine can be utilized to provide a check root along with a putative new root for a revised string of data. The check root can be compared with the previously determined initial root. If the check root matches the initial root, the new root is accepted in view of the fact that it was computed concurrently with the check root.
摘要翻译：一种用于认证从处理器远程存储的数据串的方法。可以使用分叉哈希例程来为经修改的数据串提供检查根和推定的新根。检查根可以与先前确定的初始根进行比较。如果检查根与初始根匹配，则根据与检查根同时计算的事实，新的根被接受。

9. 发明授权

US5754659A Generation of cryptographic signatures using hash keys 失效
标题翻译：使用散列键生成加密签名
公开(公告)号：US5754659A
公开(公告)日：1998-05-19
申请号：US577922
申请日：1995-12-22
申请人： Eric Sprunk , Paul Moroney , Brant Candelore
发明人： Eric Sprunk , Paul Moroney , Brant Candelore
IPC分类号： G09C1/00 , H04B7/15 , H04L9/32 , H04L9/30
CPC分类号： H04L9/3242 , H04L9/3247 , H04L2209/12 , H04L2209/38 , H04L2209/56
摘要： A method and apparatus are provided for generating a digital signature that authenticates information of a plurality of different information groups. Information from each group is hashed to produce a separate hash key for each group authenticating the information in that group. Particular combinations of the hash keys are hashed together to produce at least one combined hash key. Each of the hash keys is ultimately combined in a predetermined order with all other hash keys via the combined hash keys to produce the digital signature in a manner that authenticates the information of all of the information groups. The digital signature is reproducible without access to all of the information groups authenticated thereby. Instead, information from a first information group is provided together with a set of hash keys and combined hash keys embodying authenticated information from the other groups. The hash key for the first information group is produced locally and combined with the other hash keys and/or combined hash keys in order to reproduce the digital signature.
摘要翻译：提供了一种方法和装置，用于产生认证多个不同信息组的信息的数字签名。来自每个组的信息被散列以产生用于认证该组中的信息的每个组的单独的散列密钥。哈希密钥的特定组合被散列在一起以产生至少一个组合的散列密钥。每个散列密钥最终通过组合的散列密钥以预定顺序与所有其他散列密钥组合，以便以认证所有信息组的信息的方式产生数字签名。数字签名是可重复的，无需访问由此认证的所有信息组。相反，来自第一信息组的信息与体现来自其他组的认证信息的一组散列密钥和组合散列密钥一起提供。用于第一信息组的散列密钥本地产生并与其它散列密钥和/或组合散列密钥组合以便再现数字签名。

10. 发明授权

US5606616A Cryptographic apparatus with double feedforward hash function 失效
标题翻译：具有双前馈散列函数的加密装置
公开(公告)号：US5606616A
公开(公告)日：1997-02-25
申请号：US497880
申请日：1995-07-03
申请人： Eric Sprunk , Paul Moroney , Candace Anderson
发明人： Eric Sprunk , Paul Moroney , Candace Anderson
IPC分类号： G09C1/00 , H04L9/06 , H04L9/18 , H04L9/00
CPC分类号： H04L9/0643 , H04L2209/125
摘要： Apparatus is provided for authenticating information using a double feedforward hash function to provide complementarity in the implementation of an encryption algorithm. A cryptographic processor has a first input for receiving plaintext, a second input for receiving a key and an output for outputting ciphertext generated by cryptographically processing the plaintext and key. A first circuit element is responsive to the ciphertext and plaintext for outputting a first ciphertext derivative. A second circuit element is responsive to at least a portion of the first ciphertext derivative and the key for outputting a second ciphertext derivative. The first and second circuit elements can be XOR gates. Alternatively, these elements can be provided using lookup tables. Subsequent cryptographic processor stages can be provided having a first input for receiving second plaintext, a second input for receiving the second ciphertext derivative as a key, and an output for outputting second ciphertext generated by cryptographically processing the second plaintext and the second ciphertext derivative. In an illustrated embodiment, the cryptographic processor is a DES processor.
摘要翻译：提供了用于使用双前馈散列函数来认证信息的装置，以在实现加密算法中提供互补性。密码处理器具有用于接收明文的第一输入，用于接收密钥的第二输入和用于输出通过密码处理明文和密钥产生的密文的输出。第一电路元件响应密文和明文输出第一密文导数。第二电路元件响应于第一密文导数的至少一部分和用于输出第二密文导数的密钥。第一和第二电路元件可以是异或门。或者，可以使用查找表来提供这些元素。可以提供后续的加密处理器级，其具有用于接收第二明文的第一输入，用于接收第二密文导数作为键的第二输入，以及用于输出通过密码处理第二明文和第二密文导数而生成的第二密文的输出。在所示实施例中，密码处理器是DES处理器。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式