专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06895439B2 Authentication and protection for IP application protocols based on 3GPP IMS procedures 有权
标题翻译：基于3GPP IMS程序的IP应用协议的认证和保护
公开(公告)号：US06895439B2
公开(公告)日：2005-05-17
申请号：US10401976
申请日：2003-03-31
申请人： Markus Isomäki , Jose Costa-Requena , Atte Länsisalmi , Valtteri Niemi , Aki Niemi , Tao Haukka , Gabor Bajko , Tommi Viitanen
发明人： Markus Isomäki , Jose Costa-Requena , Atte Länsisalmi , Valtteri Niemi , Aki Niemi , Tao Haukka , Gabor Bajko , Tommi Viitanen
IPC分类号： H04L29/06 , H04L29/08 , G06F15/16 , G06F15/173 , H04L9/00
CPC分类号： H04L63/0281 , H04L63/061 , H04L63/08 , H04L65/1016 , H04L67/306 , H04W12/06 , H04W80/08
摘要： The present invention is a system and method which provides authentication for data services for at least one UE (12) using common authentication information based upon information stored in a HSS (16) of a home network (20) of the at least one UE for multiple protocols. At least one proxy server (18) stores authentication information for each of the protocols which may be used to provide data services to the at least one UE. Authentication of the protocols available to the least one UE uses the authentication information stored at the at least one proxy server obtained from the protocol used in the home network of the at least one UE.
摘要翻译：本发明是一种系统和方法，其基于存储在至少一个UE的归属网络（20）的HSS（16）中的信息，使用公共认证信息为至少一个UE（12）提供数据服务的认证，用于多个协议。至少一个代理服务器（18）存储可用于向至少一个UE提供数据服务的每个协议的认证信息。至少一个UE可用的协议的认证使用存储在从至少一个UE的归属网络中使用的协议获得的至少一个代理服务器上的认证信息。

2. 发明申请

US20050068935A1 Method of communication 有权
标题翻译：沟通方法
公开(公告)号：US20050068935A1
公开(公告)日：2005-03-31
申请号：US10813402
申请日：2004-03-31
申请人： Gabor Bajko , Aki Niemi , Valtteri Niemi
发明人： Gabor Bajko , Aki Niemi , Valtteri Niemi
IPC分类号： H04L12/56 , H04L29/06 , H04L29/12 , H04W8/26 , H04W12/00 , H04W92/02
CPC分类号： H04L29/12103 , H04L61/1535 , H04L63/04 , H04L63/061 , H04L63/08 , H04L63/164 , H04W8/26 , H04W92/02
摘要： A method of communication between a calling party in a first network and a called party in a second network is disclosed. The method comprises determining in the first network an address associated with the called party. The method also comprises determining, based on the address, if the called party is in a trusted network, and controlling the communication between the called party and the calling party in dependence on if the called party is in a trusted network.
摘要翻译：公开了第一网络中的主叫方与第二网络中的被叫方之间的通信方法。该方法包括在第一网络中确定与被叫方相关联的地址。该方法还包括基于该地址确定被叫方是否在可信网络中，以及根据被叫方是否在可信网络中来控制被叫方与主叫方之间的通信。

3. 发明申请

US20050249219A1 Handling of identities in a trust domain of an IP network 有权
标题翻译：处理IP网络的信任域中的身份
公开(公告)号：US20050249219A1
公开(公告)日：2005-11-10
申请号：US11120206
申请日：2005-05-03
申请人： Gabor Bajko , Miguel Garcia-Martin , Valtteri Niemi , Tao Haukka
发明人： Gabor Bajko , Miguel Garcia-Martin , Valtteri Niemi , Tao Haukka
IPC分类号： H04L9/32 , H04L12/56 , H04L29/06 , H04L29/08
CPC分类号： H04L63/0414 , H04L29/06027 , H04L63/0428 , H04L63/0823 , H04L63/166 , H04L65/1006 , H04L65/1016 , H04L67/14
摘要： A method for handling user identity and privacy, wherein a first Session Initiation Protocol (SIP) proxy is about to forward a SIP request to a next SIP proxy includes the step of determining whether Transport Layer Security (TLS) is supported in a hop to a next SIP proxy. When TLS is supported, the method includes establishing a TLS connection to the hop to the next SIP proxy, requesting a certificate from the next SIP proxy, receiving the certificate, verifying the certificate and trustworthiness of a network of the next SIP proxy and retaining identity information when the certificate and the trustworthiness of the network is verified. When TLS is not supported, or when the certificate is not verified, or when the trustworthiness of the network is not verified, the identity information is removed. Thereafter, the SIP request is forwarded over the TLS connection.
摘要翻译：一种用于处理用户身份和隐私的方法，其中第一会话发起协议（SIP）代理即将向下一个SIP代理转发SIP请求包括确定传输层安全性（TLS）是否被支持到跳转到下一个SIP代理。当支持TLS时，该方法包括建立到下一个SIP代理的跳转的TLS连接，从下一个SIP代理请求证书，接收证书，验证下一个SIP代理的网络的证书和可信赖性以及保留身份当证书和网络的可信赖性被验证时的信息。当不支持TLS，或当证书未被验证，或当网络的可信赖性未被验证时，身份信息被删除。此后，SIP请求通过TLS连接转发。

4. 发明授权

US08045540B2 Handling of identities in a trust domain of an IP network 有权
标题翻译：处理IP网络的信任域中的身份
公开(公告)号：US08045540B2
公开(公告)日：2011-10-25
申请号：US11120206
申请日：2005-05-03
申请人： Gabor Bajko , Miguel A. Garcia-Martin , Valtteri Niemi , Tao Haukka
发明人： Gabor Bajko , Miguel A. Garcia-Martin , Valtteri Niemi , Tao Haukka
IPC分类号： H04L12/66
CPC分类号： H04L63/0414 , H04L29/06027 , H04L63/0428 , H04L63/0823 , H04L63/166 , H04L65/1006 , H04L65/1016 , H04L67/14
摘要： A method for handling user identity and privacy, wherein a first Session Initiation Protocol (SIP) proxy is about to forward a SIP request to a next SIP proxy includes the step of determining whether Transport Layer Security (TLS) is supported in a hop to a next SIP proxy. When TLS is supported, the method includes establishing a TLS connection to the hop to the next SIP proxy, requesting a certificate from the next SIP proxy, receiving the certificate, verifying the certificate and trustworthiness of a network of the next SIP proxy and retaining identity information when the certificate and the trustworthiness of the network is verified. When TLS is not supported, or when the certificate is not verified, or when the trustworthiness of the network is not verified, the identity information is removed. Thereafter, the SIP request is forwarded over the TLS connection.
摘要翻译：一种用于处理用户身份和隐私的方法，其中第一会话发起协议（SIP）代理即将向下一个SIP代理转发SIP请求包括确定传输层安全性（TLS）是否被支持到跳转到下一个SIP代理。当支持TLS时，该方法包括建立到下一个SIP代理的跳转的TLS连接，从下一个SIP代理请求证书，接收证书，验证下一个SIP代理的网络的证书和可信赖性以及保留身份当证书和网络的可信赖性被验证时的信息。当不支持TLS，或当证书未被验证，或当网络的可信赖性未被验证时，身份信息被删除。此后，SIP请求通过TLS连接转发。

5. 发明授权

US07843948B2 Method of communication 有权
标题翻译：沟通方法
公开(公告)号：US07843948B2
公开(公告)日：2010-11-30
申请号：US10813402
申请日：2004-03-31
申请人： Gábor Bajko , Aki Niemi , Valtteri Niemi
发明人： Gábor Bajko , Aki Niemi , Valtteri Niemi
IPC分类号： H04L12/28
CPC分类号： H04L29/12103 , H04L61/1535 , H04L63/04 , H04L63/061 , H04L63/08 , H04L63/164 , H04W8/26 , H04W92/02
摘要： A method of communication between a calling party in a first network and a called party in a second network is disclosed. The method comprises determining in the first network an address associated with the called party. The method also comprises determining, based on the address, if the called party is in a trusted network, and controlling the communication between the called party and the calling party in dependence on if the called party is in a trusted network.
摘要翻译：公开了第一网络中的主叫方与第二网络中的被叫方之间的通信方法。该方法包括在第一网络中确定与被叫方相关联的地址。该方法还包括基于该地址确定被叫方是否在可信网络中，以及根据被叫方是否在可信网络中来控制被叫方与主叫方之间的通信。

6. 发明授权

US07224800B1 System and method for authentication of a roaming subscriber 失效
标题翻译：用于漫游用户认证的系统和方法
公开(公告)号：US07224800B1
公开(公告)日：2007-05-29
申请号：US10181617
申请日：2000-11-28
申请人： Patrik Flykt , Valtteri Niemi , Jaakko Rajaniemi , Aki Niemi
发明人： Patrik Flykt , Valtteri Niemi , Jaakko Rajaniemi , Aki Niemi
IPC分类号： H04K1/00
CPC分类号： H04L65/1073 , H04L63/0869 , H04L63/12 , H04L65/1016 , H04W12/06 , H04W12/10
摘要： A network system is proposed comprising a first network control element in a visited network, a second network control element in a home network and a communication device (UE) associated to a subscriber, wherein the first network control element is adapted to perform a first authentication (A9) of a roaming subscriber requesting authentication, and the second network control element is adapted to perform a second authentication (A11) of the same subscriber. By this measure, both network control elements are able to verify that the authentication was performed correctly. Also a corresponding method is proposed.
摘要翻译：提出了一种网络系统，其包括访问网络中的第一网络控制元件，归属网络中的第二网络控制元件和与订户相关联的通信设备（UE），其中第一网络控制元件适于执行第一认证（A 9），并且所述第二网络控制元件适于执行同一用户的第二认证（A 11）。通过此措施，两个网络控制元素都能够验证身份验证是否正确执行。还提出了相应的方法。

7. 发明授权

US09554271B2 Generating keys for protection in next generation mobile networks 有权
标题翻译：生成下一代移动网络中的保护密钥
公开(公告)号：US09554271B2
公开(公告)日：2017-01-24
申请号：US11976045
申请日：2007-10-19
申请人： Changhong Li , Dajiang Zhang , Mika P. Hietala , Valtteri Niemi
发明人： Changhong Li , Dajiang Zhang , Mika P. Hietala , Valtteri Niemi
IPC分类号： H04L9/32 , H04W12/06 , H04L29/06 , H04W12/04
CPC分类号： H04W12/06 , H04L63/062 , H04L63/0869 , H04W12/04
摘要： A set of associated keys for an authentication process to be performed in a second network is calculated based on a random value used in an authentication process of a first network.
摘要翻译：基于在第一网络的认证处理中使用的随机值来计算用于在第二网络中执行的认证处理的一组关联密钥。

8. 发明授权

US08155319B2 Counter initialization, particularly for radio frames 有权
标题翻译：计数器初始化，特别是无线电帧
公开(公告)号：US08155319B2
公开(公告)日：2012-04-10
申请号：US12500510
申请日：2009-07-09
申请人： Jukka Vialén , Valtteri Niemi
发明人： Jukka Vialén , Valtteri Niemi
IPC分类号： H04L29/06
CPC分类号： H04W12/06 , H04W12/02
摘要： A method for protecting traffic in a radio access network connected to at least two core networks. The method comprises maintaining a corenetwork-specific authentication protocol and a radio-bearer-specific ciphering process, and generating, for each ciphering process, a count parameter comprising a cyclical sequence number and a hyperframe number (HFN) which is incremented each time the cyclical sequence number completes one cycle. For each core network or authentication protocol, a first radio bearer of a session is initialized with a HFN exceeding the highest HFN used during the previous session. When a new radio bearer is established, the mobile station selects the highest HFN used during the session for the core network in question, increments it and uses it for initializing the count parameter for the new radio bearer. At the end of a session, the mobile station stores at least part of the highest HFN used during the session.
摘要翻译：一种用于保护连接到至少两个核心网络的无线电接入网络中的业务的方法。该方法包括维护核心网特定认证协议和无线电承载特定加密过程，并且为每个加密过程生成包括循环序列号和超帧号（HFN）的计数参数，每次循环序列号完成一个周期。对于每个核心网络或认证协议，会话的第一无线电承载以超过前一会话期间使用的最高HFN的HFN被初始化。当建立新的无线电承载时，移动台选择用于所讨论的核心网的会话期间使用的最高HFN，将其增加并用于初始化新的无线承载的计数参数。在会话结束时，移动台存储在会话期间使用的最高HFN的至少一部分。

9. 发明授权

US07577256B2 Counter initialization, particularly for radio frames 有权
标题翻译：计数器初始化，特别是无线电帧
公开(公告)号：US07577256B2
公开(公告)日：2009-08-18
申请号：US11855208
申请日：2007-09-14
申请人： Jukka Vialen , Valtteri Niemi
发明人： Jukka Vialen , Valtteri Niemi
IPC分类号： H04K1/00
CPC分类号： H04W12/06 , H04W12/02
摘要： A method for protecting traffic in a radio access network connected to at least two core networks. The method comprises maintaining a core-network-specific authentication protocol and a radio-bearer-specific ciphering process, and generating, for each ciphering process, a count parameter comprising a cyclical sequence number and a hyperframe number (HFN) which is incremented each time the cyclical sequence number completes one cycle. For each core network or authentication protocol, a first radio bearer of a session is initialized with a HFN exceeding the highest HFN used during the previous session. When a new radio bearer is established, the mobile station selects the highest HFN used during the session for the core network in question, increments it and uses it for initializing the count parameter for the new radio bearer. At the end of a session, the mobile station stores at least part of the highest HFN used during the session.
摘要翻译：一种用于保护连接到至少两个核心网络的无线电接入网络中的业务的方法。该方法包括维护核心网特定认证协议和无线电承载特定加密过程，并为每个加密过程生成包括循环序列号和超帧号（HFN）的计数参数，每个时间间隔增加循环序列号完成一个周期。对于每个核心网络或认证协议，会话的第一无线电承载以超过前一会话期间使用的最高HFN的HFN被初始化。当建立新的无线电承载时，移动台选择用于所讨论的核心网的会话期间使用的最高HFN，将其增加并用于初始化新的无线承载的计数参数。在会话结束时，移动台存储在会话期间使用的最高HFN的至少一部分。

10. 发明授权

US07526642B2 Controlling delivery of certificates in a mobile communication system 有权
标题翻译：控制移动通信系统中证书的传送
公开(公告)号：US07526642B2
公开(公告)日：2009-04-28
申请号：US10338885
申请日：2003-01-09
申请人： Tuija Hurtta , Nadarajah Asokan , Philip Ginzboorg , Valtteri Niemi , Miikka Poikselkä , Timo M. Rantalainen
发明人： Tuija Hurtta , Nadarajah Asokan , Philip Ginzboorg , Valtteri Niemi , Miikka Poikselkä , Timo M. Rantalainen
IPC分类号： H04L9/00 , H04K1/00 , H04M1/66
CPC分类号： H04L63/0823 , H04L63/0892 , H04W12/06 , H04W12/08
摘要： In order to enable a home network operator to also control the issuing of certificates to a roaming subscriber, first information indicating whether or not it is allowed to issue a certificate to the subscriber is maintained in the subscription information. The first information is checked in response to a subscriber's certificate request received from the subscriber and the certificate is generated and delivered to the subscriber only if certificate issuance is allowed.
摘要翻译：为了使家庭网络运营商能够控制向漫游用户发放证书，指示是否允许向用户发放证书的第一信息被保留在订阅信息中。响应于从用户接收到的订户的证书请求来检查第一信息，并且只有在允许证书颁发时才生成证书并将其传送给订户。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式