专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2006069315A8 CLIENT ASSISTED FIREWALL CONFIGURATION 审中-公开
标题翻译：客户协助的防火墙配置
公开(公告)号：WO2006069315A8
公开(公告)日：2007-11-01
申请号：PCT/US2005046801
申请日：2005-12-21
申请人： QUALCOMM INC , PADDON MICHAEL , HAWKES PHILIP MICHAEL , ROSE GREGORY GORDON
发明人： PADDON MICHAEL , HAWKES PHILIP MICHAEL , ROSE GREGORY GORDON
IPC分类号： H04L29/06
CPC分类号： H04L41/0803 , H04L63/0227 , H04L63/1441 , H04L67/02 , H04L67/04 , H04L67/34
摘要： Embodiments describe techniques in connection with configuring a firewall and/or reducing network traffic. According to an embodiment is a method for configuring a firewall to reduce unwanted network traffic. The method includes executing a web-server and detecting a passive socket has been created. The method also includes establishing contact with a firewall and requesting the firewall to permit flows directed to the passive socket. According to some embodiments, the method can include closing the web-server and destroying the passive socket. The firewall can be contacted with the destroyed passive socket information and can be sent a request to deny flows directed to the destroyed passive socket. If the passive socket is closed, the method can automatically revoke the request to the firewall to permit flows directed to the passive socket.
摘要翻译：实施例描述了与配置防火墙和/或减少网络流量有关的技术。根据一个实施例，一种用于配置防火墙以减少不必要的网络流量的方法。该方法包括执行web服务器并且已经创建检测到被动套接字。该方法还包括建立与防火墙的联系，并请求防火墙允许流向被动插座的流。根据一些实施例，该方法可以包括关闭web服务器并销毁被动插座。可以将防火墙与被破坏的被动套接字信息联系起来，并且可以发送一个请求以拒绝指向被销毁的被动套接字的流。如果被动套接字关闭，该方法可以自动撤销对防火墙的请求，以允许流向被动插座的流。

2. 发明申请

WO2006029384A3 METHOD, APPARATUS AND SYSTEM FOR MUTUAL AUTHENTICATION WITH MODIFIED MESSAGE AUTHENTICATION CODE 审中-公开
标题翻译：使用修改后的信息验证码进行互相认证的方法，装置和系统
公开(公告)号：WO2006029384A3
公开(公告)日：2006-04-27
申请号：PCT/US2005032349
申请日：2005-09-08
申请人： QUALCOMM INC , SEMPLE JAMES , ROSE GREGORY GORDON , PADDON MICHAEL , HAWKES PHILIP MICHAEL
发明人： SEMPLE JAMES , ROSE GREGORY GORDON , PADDON MICHAEL , HAWKES PHILIP MICHAEL
IPC分类号： H04W12/06 , H04W12/10
CPC分类号： H04W12/06 , H04L63/0869 , H04L63/123 , H04W12/10
摘要： Methods and devices for instructing a subscriber identity module in a cellular communications network to process non-standard authentication information in a standard manner are disclosed. One embodiment of a method comprises receiving a first message authentication code (MAC) and an authentication management field (AMF) at a subscriber identity module as part of an authentication protocol, calculating a second MAC and determining whether the second MAC is equivalent to the first MAC. If the first and second MAC are not equivalent, the SIM calculates a third MAC and determines whether the first MAC is equivalent to the third MAC, and if so, the subscriber identity module processes the AMF in a predefined or standard manner.
摘要翻译：公开了用于指示蜂窝通信网络中的订户身份模块以标准方式处理非标准认证信息的方法和设备。方法的一个实施例包括在用户身份模块处接收第一消息认证码（MAC）和认证管理字段（AMF），作为认证协议的一部分，计算第二MAC并确定第二MAC是否等同于第一MAC 苹果电脑。如果第一和第二MAC不相等，则SIM计算第三MAC并确定第一MAC是否等于第三MAC，如果是，则订户身份模块以预定义或标准方式处理AMF。

3. 发明申请

WO2006086721A2 CONTEXT LIMITED SHARED SECRET 审中-公开
标题翻译：有限公司共享秘密
公开(公告)号：WO2006086721A2
公开(公告)日：2006-08-17
申请号：PCT/US2006004901
申请日：2006-02-10
申请人： QUALCOMM INC , PADDON MICHAEL , ROSE GREGORY GORDON , SEMPLE JAMES , HAWKES PHILIP MICHAEL
发明人： PADDON MICHAEL , ROSE GREGORY GORDON , SEMPLE JAMES , HAWKES PHILIP MICHAEL
IPC分类号： H04L9/08
CPC分类号： H04L9/085
摘要： In a communication system in which two communication entities seek to have a private or confidential communication session, a trust relationship needs first be established. The trust relationship is based on the determination of a shared secret which in turn is generated from contextual information. The contextual information can be derived from the circumstances surrounding the communication session. For example, the contextual information can include topological information, time-based information, and transactional information. The shared secret may be self-generated or received from a third party. In either event, the shared secret may be used as key material for any cryptographic protocol used between the communication entities.
摘要翻译：在两个通信实体寻求私人或机密通信会话的通信系统中，首先需要建立信任关系。信任关系是基于共同的秘密的确定，而这个秘密又是从上下文信息中产生的。上下文信息可以从通信会话周围的情况导出。例如，上下文信息可以包括拓扑信息，基于时间的信息和事务信息。共享密钥可以是自生产的或从第三方接收的。在任一情况下，共享秘密可以用作在通信实体之间使用的任何加密协议的关键材料。

4. 发明申请

WO2008052137A3 COMPOSED MESSAGE AUTHENTICATION CODE 审中-公开
标题翻译：组合信息验证码
公开(公告)号：WO2008052137A3
公开(公告)日：2008-07-17
申请号：PCT/US2007082566
申请日：2007-10-25
申请人： QUALCOMM INC , PADDON MICHAEL , ESCOTT ADRIAN , ROSE GREGORY GORDON , HAWKES PHILIP M
发明人： PADDON MICHAEL , ESCOTT ADRIAN , ROSE GREGORY GORDON , HAWKES PHILIP M
IPC分类号： H04L9/32 , H04L29/06 , H04W12/10
CPC分类号： H04L63/123 , H04L9/3242 , H04L47/36 , H04L2209/60 , H04W12/10
摘要： Prior to transmission, a message is divided into multiple transmission units. A sub-message authentication code is obtained for each of the transmission units. A composed message authentication code is obtained for the whole message based on the sub-message authentication codes of the multiple transmission units. The multiple transmission units and the composed message authentication code are then transmitted. A receiver of the message receives a plurality of transmission units corresponding to the message. A local sub-message authentication code is calculated by the receiver for each transmission unit. A local composed message authentication code is calculated by the receiver based on the local sub-message authentication codes for the plurality of transmission units. The local composed message authentication code is compared to a received composed message authentication code to determine the integrity and/or authenticity of the received message.
摘要翻译：在传输之前，消息被分成多个传输单元。为每个发送单元获得子消息认证码。基于多个发送单元的子消息认证码，为整个消息获得组合消息认证码。然后发送多个发送单元和合成消息认证码。消息的接收者接收对应于消息的多个发送单元。每个传输单元由接收机计算一个本地子消息认证码。基于多个发送单元的本地子消息认证码，接收机计算出本地组合消息认证码。将本地组合消息认证码与接收到的组合消息认证码进行比较，以确定接收到的消息的完整性和/或真实性。

5. 发明申请

WO2006105498A2 MULTISIGNING - A PROTOCOL FOR ROBUST MULTIPLE PARTY DIGITAL SIGNATURES 审中-公开
标题翻译： MULTISIGNING - 用于稳健多方的数字签名的协议
公开(公告)号：WO2006105498A2
公开(公告)日：2006-10-05
申请号：PCT/US2006012361
申请日：2006-03-30
申请人： QUALCOMM INC , GANTMAN ALEXANDER , PEREZ ARAM , ROSE GREGORY GORDON , LUNDBLADE LAURENCE , HOHLFELD MATTHEW , PADDON MICHAEL , MICHAELIS OLIVER , LOPEZ RICARDO JORGE
发明人： GANTMAN ALEXANDER , PEREZ ARAM , ROSE GREGORY GORDON , LUNDBLADE LAURENCE , HOHLFELD MATTHEW , PADDON MICHAEL , MICHAELIS OLIVER , LOPEZ RICARDO JORGE
IPC分类号： H04L9/32
CPC分类号： H04L9/3255 , H04L9/3265 , H04L9/3297 , H04L2209/80
摘要： Embodiments describe a system and/or method for multiple party digital signatures. According to a first aspect a method comprises establishing a first validity range for a first key, establishing a first validity range for at least a second key, and determining if the validity range of the first key overlaps the first validity range of the at least a second key. A certificate is signed with the first validity range of the first key and the first validity range of the at least a second key if the validity ranges overlap. According to another embodiment, signage of the certificate is refused if the first validity range of the first key does not overlap with the first validity range of the at least a second key.
摘要翻译：实施例描述了用于多方数字签名的系统和/或方法。根据第一方面，一种方法包括建立第一密钥的第一有效范围，为至少第二密钥建立第一有效范围，以及确定第一密钥的有效范围是否与至少一个密钥的第一有效范围重叠第二个关键如果有效范围重叠，则证书具有第一密钥的第一有效范围和至少第二密钥的第一有效范围。根据另一实施例，如果第一密钥的第一有效范围不与至少第二密钥的第一有效范围重叠，则拒绝证书的标识。

6. 发明申请

WO2009058428A3 RESYNCHRONIZATION FOR PUSH MESSAGE SECURITY USING SECRET KEYS 审中-公开
标题翻译：用SECRET KEYS重新同步推送消息安全
公开(公告)号：WO2009058428A3
公开(公告)日：2009-09-24
申请号：PCT/US2008066612
申请日：2008-06-11
申请人： QUALCOMM INC , HAWKES PHILIP MICHAEL , WACHTER ANDREAS K , PADDON MICHAEL
发明人： HAWKES PHILIP MICHAEL , WACHTER ANDREAS K , PADDON MICHAEL
IPC分类号： H04L29/06 , H04L9/08 , H04L12/22
CPC分类号： H04L63/068 , H04L9/0894 , H04L9/12 , H04L9/3271 , H04L63/12 , H04L2209/80
摘要： A method for a server to initiate resynchronization with an access terminal, when synchronization has been lost, that cannot be exploited by attackers is provided. The server may provide the access terminal with a secret key that is only known to the access terminal and the server. The access terminal may store the secret key in a secure storage device to prevent the secret key from being hacked. If the server determines that synchronization has been lost, the server may send a resynchronization message to the access terminal with the secret key attached. The access terminal retrieves the stored secret key from the secure memory device and compares it to the secret key attached to the resynchronization message. If there is a match, the access terminal may initiate a secure communication link with the server to reestablish synchronization.
摘要翻译：提供了一种服务器在失去同步时启动与接入终端的再同步的方法，该方法不能被攻击者利用。服务器可以向接入终端提供只有接入终端和服务器已知的密钥。接入终端可以将秘密密钥存储在安全存储设备中以防止秘密密钥被黑客入侵。如果服务器确定同步已经丢失，则服务器可以使用附加的密钥向接入终端发送重新同步消息。接入终端从安全存储器设备中检索存储的密钥并将其与附加到再同步消息的密钥进行比较。如果匹配，则接入终端可以发起与服务器的安全通信链路以重新建立同步。

7. 发明专利

JP2011054179A Efficient classification of network packet 有权
标题翻译：网络分组的高效分类
公开(公告)号：JP2011054179A
公开(公告)日：2011-03-17
申请号：JP2010210843
申请日：2010-09-21
申请人： Qualcomm Inc , クゥアルコム・インコーポレイテッドQualcomm Incorporated
发明人： PADDON MICHAEL , ROSE GREGORY G , HAWKES PHILIP M
IPC分类号： G06F13/00 , G06F17/30 , H04L12/56 , H04L29/06
CPC分类号： H04L63/0227 , H04L63/0263 , H04L63/102
摘要： PROBLEM TO BE SOLVED: To provide a system and/or a method for efficiently classifying network packets.
SOLUTION: The method for efficiently classifying the network packets includes steps for: describing a packet as a feature vector; and mapping the feature vector to a feature space. The method further includes steps for: defining a feature prism; classifying the packet to the feature prism; and deciding whether or not the feature vector matches the feature prism. When the feature vector matches the feature prism, the packet is transferred to a data recipient, when not, the packet is blocked. A device configuration includes: an identification component defining at least one feature of the packet; and a classification component classifying the packet on the basis of at least one characteristic which is defined at least partially.
COPYRIGHT: (C)2011,JPO&INPIT
摘要翻译：要解决的问题：提供用于有效地分类网络分组的系统和/或方法。解决方案：用于有效地分类网络分组的方法包括以下步骤：将分组描述为特征向量; 并将特征向量映射到特征空间。该方法还包括以下步骤：定义特征棱镜; 将包分类到特征棱镜; 并且确定特征向量是否与特征棱镜匹配。当特征向量与特征棱镜匹配时，分组被传送到数据接收者，当不是时，分组被阻塞。设备配置包括：定义分组的至少一个特征的识别组件; 以及分类组件，其基于至少部分地限定的至少一个特征来分类分组。版权所有（C）2011，JPO＆INPIT

8. 发明专利

JP2011188521A Multisigning-protocol for robust multiple party digital signatures 有权
标题翻译：多媒体多媒体数字签名协议
公开(公告)号：JP2011188521A
公开(公告)日：2011-09-22
申请号：JP2011115783
申请日：2011-05-24
申请人： Qualcomm Inc , クゥアルコム・インコーポレイテッドQualcomm Incorporated
发明人： GANTMAN ALEXANDER , PEREZ ARAM , ROSE GREGORY GORDON , LUNDBLADE LAURENCE , HOHLFELD MATTHEW , PADDON MICHAEL , MICHAELIS OLIVER , LOPEZ RICARDO JORGE
IPC分类号： H04L9/32
CPC分类号： H04L9/3255 , H04L9/3265 , H04L9/3297 , H04L2209/80
摘要： PROBLEM TO BE SOLVED: To provide multisigning-protocol for robust multiple party digital signatures.
SOLUTION: Embodiments describe a system and/or method for multiple party digital signatures. According to a first aspect, the method includes: establishing a first validity range for a first key; establishing a first validity range for at least a second key; and determining if the validity range of the first key overlaps the first validity range of at least the second key. A certificate is signed with the first validity range of the first key and the first validity range of at least the second key if the validity ranges overlap. According to another embodiment, signage of the certificate is refused if the first validity range of the first key does not overlap with the first validity range of at least the second key.
COPYRIGHT: (C)2011,JPO&INPIT
摘要翻译：要解决的问题：为强大的多方数字签名提供多协议协议。实施例描述了用于多方数字签名的系统和/或方法。根据第一方面，所述方法包括：建立第一密钥的第一有效范围; 建立至少第二个密钥的第一有效范围; 以及确定所述第一密钥的有效范围是否与至少所述第二密钥的所述第一有效范围重叠。如果有效范围重叠，则证书具有第一密钥的第一有效范围和至少第二密钥的第一有效范围。根据另一实施例，如果第一密钥的第一有效范围与至少第二密钥的第一有效范围不重叠，则拒绝证书的标识。版权所有（C）2011，JPO＆INPIT

9. 发明专利

AT505041T 未知
公开(公告)号：AT505041T
公开(公告)日：2011-04-15
申请号：AT07868582
申请日：2007-10-25
申请人： QUALCOMM INC
发明人： PADDON MICHAEL , ESCOTT ADRIAN , ROSE GREGORY GORDON , HAWKES PHILIP M
IPC分类号： H04W12/10 , H04L29/06
摘要： Prior to transmission, a message is divided into multiple transmission units. A sub-message authentication code is obtained for each of the transmission units. A composed message authentication code is obtained for the whole message based on the sub-message authentication codes of the multiple transmission units. The multiple transmission units and the composed message authentication code are then transmitted. A receiver of the message receives a plurality of transmission units corresponding to the message. A local sub-message authentication code is calculated by the receiver for each transmission unit. A local composed message authentication code is calculated by the receiver based on the local sub-message authentication codes for the plurality of transmission units. The local composed message authentication code is compared to a received composed message authentication code to determine the integrity and/or authenticity of the received message.

10. 发明专利

AT417470T 未知
公开(公告)号：AT417470T
公开(公告)日：2008-12-15
申请号：AT05813278
申请日：2005-09-06
申请人： QUALCOMM INC
发明人： SEMPLE JAMES , ROSE GREGORY GORDON , PADDON MICHAEL , HAWKES PHILIP MICHAEL
IPC分类号： H04W12/02 , H04W12/04 , H04W12/06 , H04W88/02
摘要： A communications system and method of bootstrapping mobile station authentication and establishing a secure encryption key are disclosed. In one embodiment of the communications network, a distinguished random challenge is reserved for generation of a secure encryption key, wherein the distinguished random challenge is not used for authentication of a mobile station. The distinguished random challenge is stored at a mobile station's mobile equipment and used to generate a secure encryption key, and a bootstrapping function in the network uses a normal random challenge to authenticate the mobile station and the distinguished random challenge to generate the secure encryption key.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式