专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2009141493A1 METHODS, APPARATUSES, AND COMPUTER PROGRAM PRODUCTS FOR BOOTSTRAPPING DEVICE AND USER AUTHENTICATION 审中-公开
标题翻译：用于启动设备和用户认证的方法，设备和计算机程序产品
公开(公告)号：WO2009141493A1
公开(公告)日：2009-11-26
申请号：PCT/FI2009/050373
申请日：2009-05-08
申请人： NOKIA CORPORATION , ASOKAN, Nadarajah , EKBERG, Jan-Erik , KIIVERI, Antti , MUUKKA, Olli
发明人： ASOKAN, Nadarajah , EKBERG, Jan-Erik , KIIVERI, Antti , MUUKKA, Olli
IPC分类号： H04L29/06 , G06F21/00
CPC分类号： H04L63/061 , G06F21/31 , H04L9/3263 , H04L63/0815 , H04L63/0823 , H04L2209/80
摘要： An apparatus may include a processor configured to receive a security certificate request from a remote device comprising a public key of the remote device and authentication credential based upon a legacy authentication mechanism of the remote device (905). The processor may be further configured to validate the received authentication credential in accordance with the legacy authentication mechanism (910). The processor may be additionally configured to generate a security certificate for the public key (930). The processor may be further configured to provide the generated security certificate to the remote device (940).
摘要翻译：设备可以包括处理器，其被配置为基于远程设备的遗留认证机制（905）从远程设备接收包括远程设备的公开密钥和认证凭证的安全证书请求。处理器还可以被配置为根据传统认证机制验证所接收的认证证书（910）。处理器可以被额外地配置为生成用于公钥的安全证书（930）。处理器可以进一步被配置为向远程设备提供生成的安全证书（940）。

2. 发明申请

WO2011101538A1 METHOD AND APPARATUS TO RESET PLATFORM CONFIGURATION REGISTER IN MOBILE TRUSTED MODULE 审中-公开
标题翻译：复位手机配置模块中的平台配置寄存器的方法和装置
公开(公告)号：WO2011101538A1
公开(公告)日：2011-08-25
申请号：PCT/FI2011/050134
申请日：2011-02-14
申请人： NOKIA CORPORATION , EKBERG, Jan-Erik , ASOKAN, Nadarajah , KOSTIAINEN, Kari
发明人： EKBERG, Jan-Erik , ASOKAN, Nadarajah , KOSTIAINEN, Kari
IPC分类号： G06F21/00
CPC分类号： G06F21/57
摘要： In accordance with the exemplary embodiments of the invention there is at least a method, apparatus, and executable program of computer instructions to perform the operations of establishing and initializing a set of platform configuration registers, where a first subset of platform configuration registers is defined as being non-resettable, and a second subset of platform configuration registers is defined as being resettable, storing initial boot-up system state information in one or more non-resettable platform configuration registers, dynamically resetting (2) a value of a platform configuration register identified by a reference integrity metric to reflect a measurement value provided by the reference integrity metric, and responding to an attestation request (0) with an attestation response (5) including dynamic information from the platform configuration register that was reset and system state information from a non-resettable platform configuration register.
摘要翻译：根据本发明的示例性实施例，至少有一种计算机指令的方法，装置和可执行程序，用于执行建立和初始化一组平台配置寄存器的操作，其中平台配置寄存器的第一子集被定义为不可复位，并且平台配置寄存器的第二子集被定义为可重置，将初始启动系统状态信息存储在一个或多个不可重置的平台配置寄存器中，动态地重置（2）平台配置寄存器的值由参考完整性度量标识，以反映由参考完整性度量提供的测量值，以及响应具有认证响应（5）的认证请求（5），该证明响应（5）包括来自重置的平台配置寄存器的动态信息，以及来自一个不可重置的平台配置寄存器。

3. 发明申请

WO2003005145A3 DIGITAL RIGHTS MANAGEMENT IN A MOBILE COMMUNICATIONS ENVIRONMENT 审中-公开
公开(公告)号：WO2003005145A3
公开(公告)日：2003-01-16
申请号：PCT/IB2002/002591
申请日：2002-07-03
申请人： NOKIA CORPORATION , KONTIO, Markku , SIPPONEN, Juha , YLITALO, Tapio , HURST, Leon , HONGLANG, Zhang , GUSTAFSSON, Patrik , DURAND, Julian , ASOKAN, Nadarajah , EKBERG, Jan-Erik , STENMAN, Jorma , TEINILÄ, Jaakko , LÄHTEENMÄKI, Mika , ALVE, Jukka , KUMAR, Ashwini
发明人： KONTIO, Markku , SIPPONEN, Juha , YLITALO, Tapio , HURST, Leon , HONGLANG, Zhang , GUSTAFSSON, Patrik , DURAND, Julian , ASOKAN, Nadarajah , EKBERG, Jan-Erik , STENMAN, Jorma , TEINILÄ, Jaakko , LÄHTEENMÄKI, Mika , ALVE, Jukka , KUMAR, Ashwini
IPC分类号： G06F17/60
摘要： The invention provides a method, system, and computer program product to control the access, copying, and/or transfer of a digital asset (136) by mobile, wireless devices (100, 140) using a digital voucher (137). The digital voucher (137) references a primary content that contains all of the expression for that particular asset (136) and a secondary content that contains information that can be distilled out as a preview. The information in the primary content can be limited to a specified duration or a specific number of viewings. The author, owner, or possessor of the digital asset (136) specifies the terms and conditions for distribution of the digital asset (136). The digital voucher (137) authorizes the mobile, wireless device (140) to access a specified primary or secondary content that may be located elsewhere in the network. The mobile, wireless device (140) can download a copy of portions or all of the content (136) depending on the terms specified in the voucher (137).

4. 发明申请

WO2011101795A1 METHOD AND APPARATUS TO PROVIDE ATTESTATION WITH PCR REUSE AND EXISTING INFRASTRUCTURE 审中-公开
标题翻译：提供PCR再利用和现有基础设施的方法和设备
公开(公告)号：WO2011101795A1
公开(公告)日：2011-08-25
申请号：PCT/IB2011/050652
申请日：2011-02-16
申请人： NOKIA CORPORATION , ASOKAN, Nadarajah , EKBERG, Jan-Erik , KOSTIAINEN, Kari Timo Juhani
发明人： ASOKAN, Nadarajah , EKBERG, Jan-Erik , KOSTIAINEN, Kari Timo Juhani
IPC分类号： G06F21/00
CPC分类号： G06F21/57 , H04L9/3234 , H04L9/3247 , H04L9/3271
摘要： The exemplary embodiments or the invention provide at least a method, apparatus, and program of computer instructions to perform operations including receiving a challenge from a prover device, reading and saving an old value of a selected platform configuration register, obtaining at least one measurement or property and forming a new platform configuration register value, where the forming includes calculating a cryptographic hash over the old value of the platform configuration register and the obtained at least one measurement or property, triggering, with the trusted software, an attestation by sending a challenge to a trusted platform module/mobile platform module, and sending by the prover device a device certificate, attestation, at least one measurement or property, and old platform configuration register value to the verifier. Further, the exemplary embodiments or the invention teach sending a challenge to a trusted software of a prover device, and receiving by the verifier device a device certificate, attestation, at least one measurement or property, and an old platform configuration register value from the prover device, checking by the verifier device that extending the old platform configuration register value with the at least one measurement or property results in a new platform configuration register value that has been attested, and using the new platform configuration register value in attestation of the prover device.
摘要翻译：示例性实施例或本发明提供至少一种计算机指令的方法，装置和程序，以执行操作，包括从证明器装置接收挑战，读取和保存所选择的平台配置寄存器的旧值，获得至少一个测量或属性并形成新的平台配置寄存器值，其中形成包括计算平台配置寄存器的旧值和所获得的至少一个测量或属性的加密散列，通过发送挑战触发与可信软件的认证到可信任的平台模块/移动平台模块，并且由验证者设备向验证者发送设备证书，认证，至少一个测量或属性以及旧平台配置寄存器值。此外，示例性实施例或本发明教导向认证器设备的可信软件发送挑战，并且由验证器设备从证明器接收设备证书，认证，至少一个测量或属性以及旧平台配置寄存器值设备，由验证者设备检查扩展旧的平台配置寄存器值与至少一个测量或属性导致已经被证明的新的平台配置寄存器值，并且使用新的平台配置寄存器值来证明证明器设备。

5. 发明申请

WO2009050324A1 CREDENTIAL PROVISIONING 审中-公开
标题翻译：资格认证
公开(公告)号：WO2009050324A1
公开(公告)日：2009-04-23
申请号：PCT/FI2007/050555
申请日：2007-10-16
申请人： NOKIA CORPORATION , ASOKAN, Nadarajah , EKBERG, Jan-Erik , KYLÄNPÄÄ, Markku , RANTALA, Aarne
发明人： ASOKAN, Nadarajah , EKBERG, Jan-Erik , KYLÄNPÄÄ, Markku , RANTALA, Aarne
IPC分类号： H04L9/08 , H04L29/06
CPC分类号： H04L63/0853 , H04L9/0833 , H04L9/3271 , H04L63/06 , H04W12/04
摘要： Disclosed is a method in a provisioning apparatus. The method comprises obtaining a family key, a family key defining a family; submitting the family key to a security element in a secure manner (2-2); using the family key for securing credential data; submitting said secured credential data to the security element (2-4); using the family key for binding an application to the family; and submitting said binding to the security element (2-5). Also a method in a related security element and related apparatuses, systems and computer programs are disclosed.
摘要翻译：公开了一种供应装置中的方法。该方法包括获得家庭密钥，定义家庭的家庭密钥; 以安全的方式将家庭密钥提交给安全要素（2-2）; 使用家庭密钥来确保凭证数据; 将所述安全凭证数据提交给安全元件（2-4）; 使用家庭密钥将申请绑定到家庭; 并将所述绑定提交给安全元件（2-5）。还公开了相关安全元件和相关装置，系统和计算机程序中的方法。

6. 发明申请

WO2006120302A1 IMPLEMENTATION OF AN INTEGRITY-PROTECTED SECURE STORAGE 审中-公开
标题翻译：实施全面保障的安全存储
公开(公告)号：WO2006120302A1
公开(公告)日：2006-11-16
申请号：PCT/FI2006/050186
申请日：2006-05-11
申请人： NOKIA CORPORATION , ASOKAN, Nadarajah , EKBERG, Jan-Erik , PAATERO, Lauri
发明人： ASOKAN, Nadarajah , EKBERG, Jan-Erik , PAATERO, Lauri
IPC分类号： G07F7/10 , G06F21/00 , H04L9/00 , G06K19/07
CPC分类号： H04L63/0428 , G06F21/606 , G06F21/62 , G06F21/71 , G06F21/78 , G06F21/79 , G06Q20/341 , G06Q20/3576 , G06Q20/40975 , G07F7/1008 , H04L9/0833 , H04L9/0838 , H04L9/0891 , H04L67/1097 , H04L2209/12 , H04L2209/603 , H04L2209/80
摘要： An internal but not integrated security token is provided for a device which comprises a first integrated circuitry comprising a secure processor. The security token is provided by a second integrated circuitry separate from the first circuitry. The second integrated circuitry comprises a secure non-volatile storage. The secure processor communicates information to the second circuitry in a secure manner for the secure information to be securely stored in the secure non-volatile storage, and the second integrated circuitry communicates information stored in its secure non-volatile storage to the secure processor in a secure manner. Communications is secured by means of cryptography. The first integrated circuitry and the second integrated circuitry are internal parts of the device. An initialization method for distributing a secure key to be shared between the circuitries and to be used in cryptography is also disclosed.
摘要翻译：为包括包括安全处理器的第一集成电路的设备提供内部但未集成的安全令牌。安全令牌由与第一电路分开的第二集成电路提供。第二集成电路包括安全的非易失性存储器。安全处理器以安全的方式将信息传送到第二电路，以将安全信息安全地存储在安全的非易失性存储器中，并且第二集成电路将存储在其安全非易失性存储器中的信息传送到安全处理器安全的方式。通信是通过密码保护的。第一集成电路和第二集成电路是器件的内部部件。还公开了一种用于分发要在电路之间共享并将用于密码学的安全密钥的初始化方法。

7. 发明申请

WO2003005145A2 DIGITAL RIGHTS MANAGEMENT IN A MOBILE COMMUNICATIONS ENVIRONMENT 审中-公开
标题翻译：移动通信环境中的数字权限管理
公开(公告)号：WO2003005145A2
公开(公告)日：2003-01-16
申请号：PCT/IB2002/002591
申请日：2002-07-03
申请人： NOKIA CORPORATION , NOKIA INC. , KONTIO, Markku , SIPPONEN, Juha , YLITALO, Tapio , HURST, Leon , HONGLANG, Zhang , GUSTAFSSON, Patrik , DURAND, Julian , ASOKAN, Nadarajah , EKBERG, Jan-Erik , STENMAN, Jorma , TEINILÄ, Jaakko , LÄHTEENMÄKI, Mika , ALVE, Jukka , KUMAR, Ashwini
发明人： KONTIO, Markku , SIPPONEN, Juha , YLITALO, Tapio , HURST, Leon , HONGLANG, Zhang , GUSTAFSSON, Patrik , DURAND, Julian , ASOKAN, Nadarajah , EKBERG, Jan-Erik , STENMAN, Jorma , TEINILÄ, Jaakko , LÄHTEENMÄKI, Mika , ALVE, Jukka , KUMAR, Ashwini
IPC分类号： G06F
CPC分类号： H04L63/0428 , G06F21/10 , G06F2221/0742 , G06F2221/0766 , G06F2221/2135 , G06F2221/2137 , G06Q20/367 , G06Q20/3674 , H04L9/0838 , H04L9/0894 , H04L63/0823 , H04L63/12 , H04L2209/56 , H04L2209/603 , H04L2209/80 , H04L2463/101 , H04L2463/102 , H04W12/02
摘要： The invention provides a method, system, and computer program product to control the access, copying, and/or transfer of a digital asset by mobile, wireless devices using a digital voucher. The digital voucher references a primary content that contains all of the expression for that particular asset and a secondary content that contains information that can be distilled out as a preview. The information in the primary content can be limited to a specified duration or a specific number of viewings. The author, owner, or possessor of the digital asset specifies the terms and conditions for distribution of the digital asset. The digital voucher authorizes the mobile, wireless device to access a specified primary or secondary content that may be located elsewhere in the network. The mobile, wireless device can download a copy of portions or all of the content depending on the terms specified in the voucher.
摘要翻译：本发明提供一种方法，系统和计算机程序产品，用于通过使用数字凭单的移动无线设备来控制对数字资产的访问，复制和/或传送。数字凭单引用包含该特定资产的所有表达式的主要内容，以及包含可作为预览进行排除的信息的次要内容。主要内容中的信息可以限制在指定的持续时间或特定数量的观看。数字资产的作者，所有者或拥有者规定了数字资产分配的条款和条件。数字凭证授权移动无线设备访问可能位于网络其他地方的指定主要或次要内容。移动无线设备可以根据凭证中指定的条款下载部分或全部内容的副本。

8. 发明申请

WO2006106393A2 ADMINISTRATION OF WIRELESS LOCAL AREA NETWORKS 审中-公开
标题翻译：无线局域网的管理
公开(公告)号：WO2006106393A2
公开(公告)日：2006-10-12
申请号：PCT/IB2006/000695
申请日：2006-03-30
申请人： NOKIA CORPORATION , NOKIA, INC. , ASOKAN, Nadarajah , GINZBOORG, Philip , MOLONEY, Seamus , KOSTIAINEN, Kari, Ti , SOVIO, Sampo , EKBERG, Jan-Erik , TAKALA, Jari
发明人： ASOKAN, Nadarajah , GINZBOORG, Philip , MOLONEY, Seamus , KOSTIAINEN, Kari, Ti , SOVIO, Sampo , EKBERG, Jan-Erik , TAKALA, Jari
IPC分类号： H04L9/32 , H04L9/08 , H04L12/28
CPC分类号： H04W12/04 , H04L9/0838 , H04L9/3215 , H04L63/065 , H04L63/18 , H04L2209/80 , H04W12/06 , H04W48/20 , H04W84/12 , H04W88/08
摘要： Methods and systems for managing access to a wireless local area network are provided. A wireless access point (AP) may use a unified approach that utilizes an out-of-band channel to communicate authentication key and network address information to a guest device, and utilizes an in-band channel to establish communications with the guest device, and also provides support for in-band setup on all devices. The ability to use out-of-band where possible provides for an increase to security and usability, and the possibility of delegating access from one device to another. The unified approach thereby also provides easy management of guest access to the WLAN.
摘要翻译：提供了用于管理对无线局域网的访问的方法和系统。无线接入点（AP）可以使用利用带外信道将认证密钥和网络地址信息传送到来宾设备的统一方法，并且利用带内信道来建立与来宾设备的通信，以及还支持所有设备上的带内设置。在可能的情况下使用带外的能力提高了安全性和可用性，以及将访问权限从一个设备委派给另一个设备的可能性。因此，统一的方法也可以方便地管理访客访问WLAN。

9. 发明申请

WO2005086456A1 ELECTRONIC PAYMENT SCHEMES IN A MOBILE ENVIRONMENT FOR SHORT-RANGE TRANSACTIONS 审中-公开
标题翻译：短期交易移动环境中的电子支付计划
公开(公告)号：WO2005086456A1
公开(公告)日：2005-09-15
申请号：PCT/IB2005/000417
申请日：2005-02-18
申请人： NOKIA CORPORATION , NOKIA INC. , SOVIO, Sampo , EKBERG, Jan-Erik , ASOKAN, Nadarajah , LAHTINEN, Pekka
发明人： SOVIO, Sampo , EKBERG, Jan-Erik , ASOKAN, Nadarajah , LAHTINEN, Pekka
IPC分类号： H04L29/06
CPC分类号： G07F7/1008 , G06Q20/20 , G06Q20/327 , G06Q20/3278 , G06Q20/341 , G06Q20/382 , G06Q20/3827 , G06Q20/388 , G07F7/0886 , H04M15/68 , H04M2215/0196
摘要： A short-range transaction system enables a user to conduct transactions with a self-service terminal in a user-friendly environment without using currency. The user carries a portable smart card, which interacts with a mobile phone. After authentication via an RFID connection, the device MAC address and a security key (K) are imprinted in the card. In operation, the user waves the smart card past the self-service terminal and activates an RFID connection. The terminal sends the card a random number. The card returns the MAC address and a result (RES) computed using the hash value and the security key. The terminal using the MAC address and security key establishes a secure connection with the device. The terminal downloads the user's transaction interface from the device and displays the user interface at the self-service terminal. The user completes a transaction at the terminal via the user interface.
摘要翻译：短距离交易系统使用户能够在不使用货币的情况下在用户友好的环境中与自助终端进行交易。用户携带便携式智能卡，其与移动电话交互。通过RFID连接认证后，设备的MAC地址和安全密钥（K）被印在卡中。在操作中，用户通过自助终端来移动智能卡并激活RFID连接。终端发送卡片随机数。卡返回MAC地址和使用哈希值和安全密钥计算的结果（RES）。使用MAC地址和安全密钥的终端建立与设备的安全连接。终端从设备下载用户的交易界面，并在自助终端显示用户界面。用户通过用户界面在终端完成事务。

10. 发明申请

WO2010109060A1 METHOD AND APPARATUS FOR PROVIDING OFF-LINE PAYMENT TRANSACTIONS WITH MINIMAL DATA TRANSFER 审中-公开
标题翻译：用于提供具有最小数据传输的离线付款交易的方法和装置
公开(公告)号：WO2010109060A1
公开(公告)日：2010-09-30
申请号：PCT/FI2010/050199
申请日：2010-03-16
申请人： NOKIA CORPORATION , ASOKAN, Nadarajah , EKBERG, Jan-Erik
发明人： ASOKAN, Nadarajah , EKBERG, Jan-Erik
IPC分类号： H04L9/32 , G06Q20/00
CPC分类号： G06Q20/322 , G06Q20/32 , G06Q20/3823 , G06Q20/3825
摘要： An approach is provided for facilitating purchases and other transactions using a network capable device but in an off-line manner. Relatively short-lived cryptographic keys and certificates stored on a user device (728) are utilized to minimize the amount of data used during authentication and verification of the transaction (732, 734, 736). Thus, the transaction may be completed without transmission or receiving of information over the network during the transaction.
摘要翻译：提供了一种方法来促进购买和使用具有网络能力的装置的其他交易，但是以离线方式。使用存储在用户设备（728）上的相对短暂的加密密钥和证书来最小化在交易的认证和验证期间使用的数据量（732,734,736）。因此，可以在事务期间通过网络传输或接收信息来完成事务。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式