专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2011091375A1 METHOD AND APPARATUS FOR SECURING WIRELESS RELAY NODES 审中-公开
标题翻译：用于安全无线继电器的方法和装置
公开(公告)号：WO2011091375A1
公开(公告)日：2011-07-28
申请号：PCT/US2011/022279
申请日：2011-01-24
申请人： QUALCOMM INCORPORATED , ESCOTT, Adrian , PALANIGOUNDER, Anand , ULUPINAR, Fatih , ROSENBERG, Brian M.
发明人： ESCOTT, Adrian , PALANIGOUNDER, Anand , ULUPINAR, Fatih , ROSENBERG, Brian M.
IPC分类号： H04B7/26 , H04W12/06 , H04W16/26
CPC分类号： H04B7/155 , H04B7/2606 , H04L63/0428 , H04L63/164 , H04W12/06 , H04W16/26
摘要： In order to mitigate the security risk posed by the insertion of a relay node within a communication network, both device authentication and subscriber authentication are performed on the relay node. Device and subscriber authentication may be bound together so that a relay node is granted access to operate within the network only if both device and subscriber authentication are successful. Additionally, a communication network (or authentication node) may further verify that a subscriber identifier (received as part of subscriber authentication) is associated with the corresponding device type (identified by the device identifier in the corresponding device authentication) as part of the subscriber authentication process.
摘要翻译：为了减轻在通信网络内插入中继节点带来的安全隐患，在中继节点上进行设备认证和用户认证。设备和用户认证可以绑定在一起，以便只有在设备和用户认证都成功的情况下，中继节点被授权才能在网络内操作。另外，作为用户认证的一部分，通信网络（或认证节点）可以进一步验证用户标识符（作为用户认证的一部分接收）与对应的设备类型（由相应的设备认证中的设备标识符标识）相关联处理。

2. 发明申请

WO2011133912A3 METHOD AND APPARATUS FOR NETWORK PERSONALIZATION OF SUBSCRIBER DEVICES 审中-公开
公开(公告)号：WO2011133912A3
公开(公告)日：2011-10-27
申请号：PCT/US2011/033642
申请日：2011-04-22
申请人： QUALCOMM INCORPORATED , ESCOTT, Adrian Edward , PALANIGOUNDER, Anand , ROSENBERG, Brian M.
发明人： ESCOTT, Adrian Edward , PALANIGOUNDER, Anand , ROSENBERG, Brian M.
IPC分类号： H04L29/06 , H04W12/06
摘要： A method and apparatus are provided for a subsidizing service provider entity to personalize a subscriber device to ensure the subscriber device cannot be used in a network of a different service provider entity. As the service provider entity subsidizes the subscriber device, it desires to ensure that subscriber device is personalized such that the subscriber device may operate only in its network and not a network of a different service provider entity. The subscriber device is pre-configured with a plurality of provider-specific and/or unassociated root certificates by the manufacturer of the subscriber device. A communication service is established between the service provider entity and the subscriber device allowing for the mutual authentication of the subscriber device and the service provider entity. After mutual authentication, the service provider entity sends a command to the subscriber device to disable/delete some/all root certificates that are unassociated with the service provider entity.

3. 发明申请

WO2011159948A2 APPARATUS AND METHOD FOR TRANSITIONING ENHANCED SECURITY CONTEXT FROM A UTRAN/GERAN-BASED SERVING NETWORK TO AN E-UTRAN-BASED SERVING NETWORK 审中-公开
标题翻译：用于将基于UTRAN / GERAN的服务网络的增强安全性背景转换为基于E-UTRAN的服务网络的装置和方法
公开(公告)号：WO2011159948A2
公开(公告)日：2011-12-22
申请号：PCT/US2011/040773
申请日：2011-06-16
申请人： QUALCOMM Incorporated , ESCOTT, Adrian Edward , PALANIGOUNDER, Anand
发明人： ESCOTT, Adrian Edward , PALANIGOUNDER, Anand
IPC分类号： H04W12/04
CPC分类号： H04W12/04 , H04L9/08 , H04L63/06 , H04W36/0038
摘要： Disclosed is a method for transitioning an enhanced security context from a UTRAN/GERAN-based serving network to an E-UTRAN-based serving network. In the method, the remote station the remote station generates first and second session keys, in accordance with the enhanced security context, using a first enhanced security context root key associated with a UTRAN/GERAN-based serving network and a first information element. The remote station receives a first message from the E-UTRAN-based serving network. The first message signals to the remote station to generate a second enhanced security context root key for use with the E-UTRAN-based serving network. The remote station generates, in response to the first message, the second enhanced security context root key from the first enhanced security context root key using the s first and second session keys as inputs. The remote station protects wireless communications, on the E-UTRAN-based serving network, based on the second enhanced security context root key.
摘要翻译：公开了一种用于将增强的安全上下文从基于UTRAN / GERAN的服务网络转换到基于E-UTRAN的服务网络的方法。在该方法中，远程站使用与基于UTRAN / GERAN的服务网络和第一信息元素相关联的第一增强型安全上下文根密钥，根据增强的安全上下文生成第一和第二会话密钥。远程站从基于E-UTRAN的服务网络接收第一消息。第一消息向远程站发信号以产生用于与基于E-UTRAN的服务网络一起使用的第二增强安全上下文根密钥。响应于第一消息，远程站使用第一和第二会话密钥作为输入，从第一增强安全上下文根密钥生成第二增强安全上下文根密钥。远程站基于第二增强安全上下文根密钥来保护基于E-UTRAN的服务网络上的无线通信。

4. 发明申请

WO2010151895A1 SYSTEMS, APPARATUS AND METHODS TO FACILITATE HANDOVER SECURITY 审中-公开
标题翻译：系统，装置和方法来加强切换安全
公开(公告)号：WO2010151895A1
公开(公告)日：2010-12-29
申请号：PCT/US2010/040254
申请日：2010-06-28
申请人： QUALCOMM Incorporated , ESCOTT, Adrian Edward , PALANIGOUNDER, Anand , SONG, Osok
发明人： ESCOTT, Adrian Edward , PALANIGOUNDER, Anand , SONG, Osok
IPC分类号： H04W12/04 , H04W36/14
CPC分类号： H04W12/04 , H04L9/0872 , H04L2209/80 , H04L2463/061 , H04W36/0038 , H04W36/14 , H04W84/045
摘要： Systems, methods and apparatus for facilitating handover security are provided. In some embodiments, the method can include deriving a key value for handover from a GERAN/UTRAN system to an E-UTRAN system using a first input value. The method can also include deriving a key value for a connection establishment using a second input value, wherein the first input value is different from the second input value and is different from input values derived subsequent to the second input value, and wherein the first input value, the second input value and the input values derived subsequent to the second input value are configured to be input to a same key derivation function configured to output a key for use between a network entity and user equipment.
摘要翻译：提供了便于切换安全的系统，方法和装置。在一些实施例中，该方法可以包括使用第一输入值导出从GERAN / UTRAN系统切换到E-UTRAN系统的密钥值。该方法还可以包括使用第二输入值导出连接建立的密钥值，其中第一输入值不同于第二输入值，并且不同于在第二输入值之后导出的输入值，并且其中第一输入将第二输入值和在第二输入值之后导出的输入值配置为输入到配置为输出用于网络实体和用户设备之间的密钥的相同密钥导出功能。

5. 发明申请

WO2011159952A1 METHOD AND APPARATUS FOR BINDING SUBSCRIBER AUTHENTICATION AND DEVICE AUTHENTICATION IN COMMUNICATION SYSTEMS 审中-公开
标题翻译：用于在通信系统中绑定订阅者认证和设备认证的方法和装置
公开(公告)号：WO2011159952A1
公开(公告)日：2011-12-22
申请号：PCT/US2011/040777
申请日：2011-06-16
申请人： QUALCOMM INCORPORATED , ESCOTT, Adrian Edward , PALANIGOUNDER, Anand
发明人： ESCOTT, Adrian Edward , PALANIGOUNDER, Anand
IPC分类号： H04W12/04 , H04L29/06
CPC分类号： H04L9/0816 , H04L9/0838 , H04L9/0844 , H04L9/32 , H04L9/3271 , H04L9/3273 , H04L63/061 , H04L63/0823 , H04L63/0853 , H04L2463/061 , H04L2463/082 , H04W12/04 , H04W12/06 , H04W88/02
摘要： An authentication method is provided between a device (e.g., a client device or access terminal) and a network entity. A removable storage device may be coupled to the device and stores a subscriber-specific key that may be used for subscriber authentication. A secure storage device may be coupled to the device and stores a device-specific key used for device authentication. Subscriber authentication may be performed between the device and a network entity. Device authentication may also be performed of the device with the network entity. A security key may then be generated that binds the subscriber authentication and the device authentication. The security key may be used to secure communications between the device and a serving network.
摘要翻译：在设备（例如，客户端设备或接入终端）与网络实体之间提供认证方法。可移动存储设备可以耦合到设备并且存储可以用于用户认证的用户专用密钥。安全存储设备可以耦合到设备并存储用于设备认证的设备专用密钥。可以在设备和网络实体之间执行用户认证。还可以使用网络实体对设备执行设备认证。然后可以生成绑定用户认证和设备认证的安全密钥。安全密钥可以用于保护设备和服务网络之间的通信。

6. 发明申请

WO2011130681A1 APPARATUS AND METHOD FOR TRANSITIONING FROM A SERVING NETWORK NODE THAT SUPPORTS AN ENHANCED SECURITY CONTEXT TO A LEGACY SERVING NETWORK NODE 审中-公开
标题翻译：从支持安全性的服务网络节点进行转换的装置和方法，提供一个提供服务的网络节点
公开(公告)号：WO2011130681A1
公开(公告)日：2011-10-20
申请号：PCT/US2011/032754
申请日：2011-04-15
申请人： QUALCOMM Incorporated , ESCOTT, Adrian, Edward , PALANIGOUNDER, Anand
发明人： ESCOTT, Adrian, Edward , PALANIGOUNDER, Anand
IPC分类号： H04W36/00 , H04W12/04
CPC分类号： H04W12/04 , H04L9/14 , H04L2209/24 , H04W36/0038
摘要： Disclosed is a method for transitioning a remote station from a current serving network node having an enhanced security context to a new serving network node. In the method, the remote station provides at least one legacy key, and generates at least one session key based on an information element associated with the enhanced security context. The remote station forwards a first message having the information element to the new serving network node. The remote station receives a second message, from the new serving network node, having a response based on either the legacy key or the session key. The remote station determines that the new serving network node does not support the enhanced security context if the response of the second message is based on the legacy key. Accordingly, the remote station protects communications based on the legacy key upon determining that the enhanced security context is not supported.
摘要翻译：公开了一种用于将远程站从具有增强的安全上下文的当前服务网络节点转换到新的服务网络节点的方法。在该方法中，远程站提供至少一个遗留密钥，并且基于与增强的安全上下文相关联的信息元素生成至少一个会话密钥。远程站将具有信息元素的第一消息转发到新的服务网络节点。远程站从新的服务网络节点接收具有基于传统密钥或会话密钥的响应的第二消息。如果第二消息的响应基于传统密钥，则远程站确定新的服务网络节点不支持增强的安全上下文。因此，当确定不支持增强的安全上下文时，远程站保护基于传统密钥的通信。

7. 发明申请

WO2009048888A2 PROVISIONING COMMUNICATION NODES 审中-公开
标题翻译：提供通讯声明
公开(公告)号：WO2009048888A2
公开(公告)日：2009-04-16
申请号：PCT/US2008/079113
申请日：2008-10-07
申请人： QUALCOMM INCORPORATED , GUPTA, Rajarshi , PALANIGOUNDER, Anand , ULUPINAR, Fatih , HORN, Gavin B. , AGASHE, Parag A. , CHEN, Jen Mei , DESHPANDE, Manoj M. , BALASUBRAMANIAN, Srinivasan , NANDA, Sanjiv , SONG, Osok
发明人： GUPTA, Rajarshi , PALANIGOUNDER, Anand , ULUPINAR, Fatih , HORN, Gavin B. , AGASHE, Parag A. , CHEN, Jen Mei , DESHPANDE, Manoj M. , BALASUBRAMANIAN, Srinivasan , NANDA, Sanjiv , SONG, Osok
IPC分类号： H04L29/06 , H04W12/08
CPC分类号： H04W48/08 , H04L63/104 , H04W8/26 , H04W12/06 , H04W12/08 , H04W48/02 , H04W48/14 , H04W84/045
摘要： Provisioning and access control for communication nodes involves assigning identifiers to sets of nodes where the identifiers may be used to control access to restricted access nodes that provide certain services only to certain defined sets of nodes. In some aspects provisioning a node may involve providing a unique identifier for sets of one or more nodes such as restricted access points and access terminals that are authorized to receive service from the restricted access points. Access control may be provided by operation of a restricted access point and/or a network node. In some aspects, provisioning a node involves providing a preferred roaming list for the node. In some aspects, a node may be provisioned with a preferred roaming list through the use of a bootstrap beacon.
摘要翻译：通信节点的配置和访问控制涉及将标识符分配给节点组，其中可以使用标识符来控制对仅向某些定义的节点组提供某些服务的受限访问节点的访问。在一些方面中，提供节点可以包括为被授权从受限访问点接收服务的一个或多个节点（例如受限接入点和接入终端）的集合提供唯一标识符。可以通过受限访问点和/或网络节点的操作来提供访问控制。在一些方面，提供节点涉及为节点提供优选的漫游列表。在一些方面，可以通过使用引导信标来为节点提供优选的漫游列表。

8. 发明申请

WO2009048887A1 ACCESS MANAGEMENT FOR WIRELESS COMMUNICATION 审中-公开
标题翻译：无线通信访问管理
公开(公告)号：WO2009048887A1
公开(公告)日：2009-04-16
申请号：PCT/US2008/079112
申请日：2008-10-07
申请人： QUALCOMM Incorporated , GUPTA, Rajarshi , PALANIGOUNDER, Anand , ULUPINAR, Fatih , HORN, Gavin, B. , AGASHE, Parag, A. , CHEN, Jen Mei , DESHPANDE, Manoj, M. , BALASUBRAMANIAN, Srinivasan , NANDA, Sanjiv , SONG, Osok
发明人： GUPTA, Rajarshi , PALANIGOUNDER, Anand , ULUPINAR, Fatih , HORN, Gavin, B. , AGASHE, Parag, A. , CHEN, Jen Mei , DESHPANDE, Manoj, M. , BALASUBRAMANIAN, Srinivasan , NANDA, Sanjiv , SONG, Osok
IPC分类号： H04L29/06 , H04W12/08
CPC分类号： H04W48/08 , H04L63/104 , H04W8/26 , H04W12/06 , H04W12/08 , H04W48/02 , H04W48/14 , H04W84/045
摘要： Provisioning and access control for communication nodes involves assigning identifiers to sets of nodes where the identifiers may be used to control access to restricted access nodes that provide certain services only to certain defined sets of nodes. In some aspects provisioning a node may involve providing a unique identifier for sets of one or more nodes such as restricted access points and access terminals that are authorized to receive service from the restricted access points. Access control may be provided by operation of a restricted access point and/or a network node. In some aspects, provisioning a node involves providing a preferred roaming list for the node. In some aspects, a node may be provisioned with a preferred roaming list through the use of a bootstrap beacon.
摘要翻译：通信节点的配置和访问控制涉及将标识符分配给节点组，其中可以使用标识符来控制对仅向某些定义的节点组提供某些服务的受限访问节点的访问。在一些方面中，提供节点可以包括为被授权从受限访问点接收服务的一个或多个节点（例如受限接入点和接入终端）的集合提供唯一标识符。可以通过受限访问点和/或网络节点的操作来提供访问控制。在一些方面，提供节点涉及为节点提供优选的漫游列表。在一些方面，可以通过使用引导信标来为节点提供优选的漫游列表。

9. 发明申请

WO2011130682A3 APPARATUS AND METHOD FOR SIGNALING ENHANCED SECURITY CONTEXT FOR SESSION ENCRYPTION AND INTEGRITY KEYS 审中-公开
公开(公告)号：WO2011130682A3
公开(公告)日：2011-10-20
申请号：PCT/US2011/032755
申请日：2011-04-15
申请人： QUALCOMM Incorporated , ESCOTT, Adrian Edward , PALANIGOUNDER, Anand
发明人： ESCOTT, Adrian Edward , PALANIGOUNDER, Anand
IPC分类号： H04W12/04 , H04L29/06
摘要： Disclosed is a method for establishing an enhanced security context between a remote station and a serving network. In the method, the remote station forwards a first message to the serving network, wherein the first message includes an information element signaling that the remote station supports an enhanced security context. The remote station generates at least one session key, in accordance with the enhanced security context, using the information element. The remote station receives, in response to the first message, a second message having an indication that the serving network supports the enhanced security context. The remote station, in response to the second message, has wireless communications protected by the at least one session key.

10. 发明申请

WO2009048889A3 ACCESS TERMINAL CONFIGURATION AND ACCESS CONTROL 审中-公开
公开(公告)号：WO2009048889A3
公开(公告)日：2009-04-16
申请号：PCT/US2008/079114
申请日：2008-10-07
申请人： QUALCOMM INCORPORATED , GUPTA, Rajarshi , PALANIGOUNDER, Anand , ULUPINAR, Fatih , HORN, Gavin B. , AGASHE, Parag A. , CHEN, Jen Mei , DESHPANDE, Manoj M. , BALASUBRAMANIAN, Srinivasan , NANDA, Sanjiv , SONG, Osok
发明人： GUPTA, Rajarshi , PALANIGOUNDER, Anand , ULUPINAR, Fatih , HORN, Gavin B. , AGASHE, Parag A. , CHEN, Jen Mei , DESHPANDE, Manoj M. , BALASUBRAMANIAN, Srinivasan , NANDA, Sanjiv , SONG, Osok
IPC分类号： H04W48/08 , H04W48/14
摘要： Provisioning and access control for communication nodes involves assigning identifiers to sets of nodes where the identifiers may be used to control access to restricted access nodes that provide certain services only to certain defined sets of nodes. In some aspects provisioning a node may involve providing a unique identifier for sets of one or more nodes such as restricted access points and access terminals that are authorized to receive service from the restricted access points. Access control may be provided by operation of a restricted access point and/or a network node. In some aspects, provisioning a node involves providing a preferred roaming list for the node. In some aspects, a node may be provisioned with a preferred roaming list through the use of a bootstrap beacon.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式