专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07966489B2 Method and apparatus for selecting an appropriate authentication method on a client 有权
标题翻译：用于在客户机上选择适当认证方法的方法和装置
公开(公告)号：US07966489B2
公开(公告)日：2011-06-21
申请号：US11496903
申请日：2006-08-01
申请人： Nancy Cam-Winget , Hao Zhou , Robert B. O'Hara, Jr. , Patrice R. Calhoun , Jeremy Stieglitz
发明人： Nancy Cam-Winget , Hao Zhou , Robert B. O'Hara, Jr. , Patrice R. Calhoun , Jeremy Stieglitz
IPC分类号： H04L29/06 , G06F17/30
CPC分类号： H04W12/06 , H04L63/162 , H04L63/20 , H04L63/205
摘要： In one embodiment, a method for facilitating authentication and ease the configuration of authentication includes receiving a credential type selection and selecting one or more authentication types based on the credential type selection and one or more policies set by the administrators. The policies can be preconfigured or dynamically pushed or fetched and updated to the client.
摘要翻译：在一个实施例中，用于促进认证和简化认证配置的方法包括接收证书类型选择，并且基于凭证类型选择和由管理员设置的一个或多个策略来选择一个或多个认证类型。可以预先配置或动态地推送或提取策略，并将其更新到客户端。

2. 发明申请

US20080034207A1 Method and apparatus for selecting an appropriate authentication method on a client 有权
标题翻译：用于在客户机上选择适当认证方法的方法和装置
公开(公告)号：US20080034207A1
公开(公告)日：2008-02-07
申请号：US11496903
申请日：2006-08-01
申请人： Nancy Cam-Winget , Hao Zhou , Robert B. O'Hara , Patrice R. Calhoun , Jeremy Stieglitz
发明人： Nancy Cam-Winget , Hao Zhou , Robert B. O'Hara , Patrice R. Calhoun , Jeremy Stieglitz
IPC分类号： H04L9/00
CPC分类号： H04W12/06 , H04L63/162 , H04L63/20 , H04L63/205
摘要： In one embodiment, a method for facilitating authentication and ease the configuration of authentication includes receiving a credential type selection and selecting one or more authentication types based on the credential type selection and one or more policies set by the administrators. The policies can be preconfigured or dynamically pushed or fetched and updated to the client.
摘要翻译：在一个实施例中，用于促进认证和简化认证配置的方法包括接收证书类型选择，并且基于凭证类型选择和由管理员设置的一个或多个策略来选择一个或多个认证类型。可以预先配置或动态地推送或提取策略，并将其更新到客户端。

3. 发明授权

US07602746B2 Method for optimized layer 2 roaming and policy enforcement in a wireless environment 有权
标题翻译：在无线环境中优化第2层漫游和策略实施的方法
公开(公告)号：US07602746B2
公开(公告)日：2009-10-13
申请号：US11315861
申请日：2005-12-21
申请人： Patrice R. Calhoun , Nancy Cam-Winget , Robert B. O'Hara, Jr.
发明人： Patrice R. Calhoun , Nancy Cam-Winget , Robert B. O'Hara, Jr.
IPC分类号： G06F15/00
CPC分类号： H04W28/26 , H04W72/0406 , H04W84/12
摘要： Methods, apparatuses, and systems directed to facilitating the application of pre-allocation policies in a wireless network environment. According to one implementation of the present invention, a central controller, or other control point in a wireless network infrastructure, applies one or more policies that limit the number of resource pre-allocations a given wireless client may establish with one or more wireless access points. In one implementation, the central controller provides a pre-allocation list to a wireless client that is requesting pre-allocation. By limiting a wireless client's ability to pre-allocate resources, the central controller optimally manages the resources of the wireless network. In alternative embodiments, the central controller can terminate pre-allocations between a wireless client and one or more wireless access points to enforce pre-allocation policy on the wireless network infrastructure.
摘要翻译：旨在促进在无线网络环境中应用预分配策略的方法，设备和系统。根据本发明的一个实施方案，无线网络基础设施中的中央控制器或其他控制点应用一个或多个限制给定无线客户端可以与一个或多个无线接入点建立的资源预分配数量的策略。在一个实现中，中央控制器向请求预分配的无线客户端提供预分配列表。通过限制无线客户端预先分配资源的能力，中央控制器优化地管理无线网络的资源。在替代实施例中，中央控制器可以终止无线客户端与一个或多个无线接入点之间的预分配，以在无线网络基础设施上实施预分配策略。

4. 发明授权

US07809354B2 Detecting address spoofing in wireless network environments 有权
标题翻译：在无线网络环境中检测地址欺骗
公开(公告)号：US07809354B2
公开(公告)日：2010-10-05
申请号：US11377151
申请日：2006-03-16
申请人： Patrice R. Calhoun , Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Patrice R. Calhoun , Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： H04M1/66 , H04M1/68 , H04M3/16
CPC分类号： H04W12/12 , H04L63/126 , H04L63/1466 , H04L63/1483 , H04W8/26 , H04W84/12
摘要： Methods, apparatuses and systems directed to detecting address spoofing in wireless networks by, after receiving a wireless management frame, transmitting verification messages to determine whether a given wireless node (e.g., a wireless access point, or wireless client) has legitimately lost its connection state.
摘要翻译：针对无线网络中的地址欺骗检测的方法，装置和系统，在接收到无线管理帧之后，发送验证消息以确定给定的无线节点（例如，无线接入点或无线客户端）是否合法地失去了其连接状态。

5. 发明授权

US07882349B2 Insider attack defense for network client validation of network management frames 有权
标题翻译：内部网络攻击防范网络客户端验证网络管理帧
公开(公告)号：US07882349B2
公开(公告)日：2011-02-01
申请号：US11295334
申请日：2005-12-06
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： H04L29/06 , H04L9/32 , G06F9/00
CPC分类号： H04L63/061 , H04L63/123 , H04L63/1441 , H04W12/08
摘要： Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.
摘要翻译：用于检测在接入点与其无线客户端之间共享的广播密钥的攻击的方法。在检测到攻击后，将采取行动来对一个或多个安全策略中定义的攻击做出反应。通过检查包含在广播管理帧中的链路消息完整性检查和基础架构管理帧保护（IMFP）消息完整性检查来实现攻击的检测。

6. 发明授权

US08713626B2 Network client validation of network management frames 有权
标题翻译：网络客户端验证网络管理帧
公开(公告)号：US08713626B2
公开(公告)日：2014-04-29
申请号：US11295327
申请日：2005-12-06
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： G06F21/00
CPC分类号： H04W12/06 , H04L9/32 , H04L41/00 , H04L63/08 , H04L63/101 , H04L63/12 , H04L63/123 , H04L63/20 , H04W12/10 , H04W12/12 , H04W88/08
摘要： Methods and systems for use in a wireless client that includes one or more wireless network interfaces for communicating with at least one access point wherein the method enables the wireless client to validate the authenticity and integrity of received management frames. The method includes receiving a protected wireless network management frame from an access point verifying a message integrity check (MIC) appended to the protected wireless network management frame. One or more security policies are then conditionally applied based on a failure to verify the MIC.
摘要翻译：一种用于无线客户端的方法和系统，包括用于与至少一个接入点进行通信的一个或多个无线网络接口，其中所述方法使无线客户端能够验证所接收的管理帧的真实性和完整性。该方法包括从验证附加到受保护的无线网络管理帧的消息完整性检查（MIC）的接入点接收受保护的无线网络管理帧。然后基于验证MIC的故障有条件地应用一个或多个安全策略。

7. 发明授权

US08254882B2 Intrusion prevention system for wireless networks 有权
标题翻译：无线网络入侵防御系统
公开(公告)号：US08254882B2
公开(公告)日：2012-08-28
申请号：US11668206
申请日：2007-01-29
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： H04L9/00
CPC分类号： H04W12/08 , H04L63/0227 , H04L63/123 , H04L63/1408 , H04W12/02 , H04W84/12
摘要： In one embodiment, a method includes receiving security context information relevant to a connection between a wireless network infrastructure component and a wireless client, wherein the security context information comprises at least, an identification of the wireless client, and wherein the security context information identifies any security protocols associated with the connection; validating the connection based on the security context information; and transmitting the security context information to one or more detector wireless access points.
摘要翻译：在一个实施例中，一种方法包括接收与无线网络基础设施组件和无线客户端之间的连接相关的安全上下文信息，其中所述安全上下文信息至少包括无线客户端的标识，并且其中所述安全上下文信息标识任何与连接相关的安全协议; 基于安全上下文信息验证连接; 以及将所述安全上下文信息发送到一个或多个检测器无线接入点。

8. 发明申请

US20090327736A1 Insider attack defense for network client validation of network management frames 有权
标题翻译：内部网络攻击防范网络客户端验证网络管理帧
公开(公告)号：US20090327736A1
公开(公告)日：2009-12-31
申请号：US11295334
申请日：2005-12-06
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, JR.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, JR.
IPC分类号： H04L9/00
CPC分类号： H04L63/061 , H04L63/123 , H04L63/1441 , H04W12/08
摘要： Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.
摘要翻译：用于检测在接入点与其无线客户端之间共享的广播密钥的攻击的方法。在检测到攻击后，将采取行动来对一个或多个安全策略中定义的攻击做出反应。通过检查包含在广播管理帧中的链路消息完整性检查和基础架构管理帧保护（IMFP）消息完整性检查来实现攻击的检测。

9. 发明申请

US20080295144A1 Network client validation of network management frames 有权
标题翻译：网络客户端验证网络管理帧
公开(公告)号：US20080295144A1
公开(公告)日：2008-11-27
申请号：US11295327
申请日：2005-12-06
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, JR.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, JR.
IPC分类号： G06F21/22
CPC分类号： H04W12/06 , H04L9/32 , H04L41/00 , H04L63/08 , H04L63/101 , H04L63/12 , H04L63/123 , H04L63/20 , H04W12/10 , H04W12/12 , H04W88/08
摘要： Methods and systems for use in a wireless client that includes one or more wireless network interfaces for communicating with at least one access point wherein the method enables the wireless client to validate the authenticity and integrity of received management frames. The method includes receiving a protected wireless network management frame from an access point verifying a message integrity check (MIC) appended to the protected wireless network management frame. One or more security policies are then conditionally applied based on a failure to verify the MIC.
摘要翻译：一种用于无线客户端的方法和系统，包括用于与至少一个接入点进行通信的一个或多个无线网络接口，其中所述方法使无线客户端能够验证所接收的管理帧的真实性和完整性。该方法包括从验证附加到受保护的无线网络管理帧的消息完整性检查（MIC）的接入点接收受保护的无线网络管理帧。然后基于验证MIC的故障有条件地应用一个或多个安全策略。

10. 发明授权

US07631347B2 System and method for multi-session establishment involving disjoint authentication and authorization servers 有权
标题翻译：涉及不相交认证和授权服务器的多会话建立的系统和方法
公开(公告)号：US07631347B2
公开(公告)日：2009-12-08
申请号：US11283554
申请日：2005-11-18
申请人： Nancy Cam-Winget , Mark Krischer , Jeremy Stieglitz
发明人： Nancy Cam-Winget , Mark Krischer , Jeremy Stieglitz
IPC分类号： G06F7/04
CPC分类号： H04L63/0815 , H04L9/0838 , H04L63/0892 , H04L2209/80 , H04W12/06
摘要： A system and method that supports disjoint authentication server farms and disjoint policy or authorization servers for multi-session establishment. The authentication server has global knowledge of authenticators for additional sessions for a supplicant and can split authentication requests as needed to different authentication servers. The split authentication and authorization requests can be aggregated should the other authentication and authorization servers have the capability to handle multiple requests. In the case of server farms, authentication and implied authorization requests can be split to facilitate load balancing.
摘要翻译：支持不相交的认证服务器场和不相交策略或授权服务器进行多会话建立的系统和方法。认证服务器具有用于请求方的附加会话的认证者的全球知识，并且可以根据需要将认证请求分割到不同的认证服务器。如果其他认证和授权服务器具有处理多个请求的能力，则可以聚合拆分认证和授权请求。在服务器场的情况下，可以拆分认证和隐含的授权请求以便于负载平衡。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式