专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07194438B2 Electronic payment schemes in a mobile environment for short-range transactions 有权
标题翻译：在短期交易的移动环境中的电子支付方案
公开(公告)号：US07194438B2
公开(公告)日：2007-03-20
申请号：US10785025
申请日：2004-02-25
申请人： Sampo Sovio , Jan-Erik Ekberg , Nadarajah Asokan , Pekka Lahtinen
发明人： Sampo Sovio , Jan-Erik Ekberg , Nadarajah Asokan , Pekka Lahtinen
IPC分类号： G06Q99/00 , H04K1/00 , H04L9/00
CPC分类号： G07F7/1008 , G06Q20/20 , G06Q20/327 , G06Q20/3278 , G06Q20/341 , G06Q20/382 , G06Q20/3827 , G06Q20/388 , G07F7/0886 , H04M15/68 , H04M2215/0196
摘要： A short-range transaction system enables a user to conduct transactions with a self-service terminal in a user-friendly environment without using currency. The user carries a portable smart card, which interacts with a mobile phone. After authentication via an RFID connection, the device MAC address and a security key (K) are imprinted in the card. In operation, the user waves the smart card past the self-service terminal and activates an RFID connection. The terminal sends the card a random number. The card returns the MAC address and a result (RES) computed using the hash value and the security key. The terminal using the MAC address and security key establishes a secure connection with the device. The terminal downloads the user's transaction interface from the device and displays the user interface at the self-service terminal. The user completes a transaction at the terminal via the user interface.
摘要翻译：短距离交易系统使用户能够在不使用货币的情况下在用户友好的环境中与自助终端进行交易。用户携带便携式智能卡，其与移动电话交互。通过RFID连接认证后，设备的MAC地址和安全密钥（K）被印在卡中。在操作中，用户通过自助终端来移动智能卡并激活RFID连接。终端发送卡片随机数。卡返回MAC地址和使用哈希值和安全密钥计算的结果（RES）。使用MAC地址和安全密钥的终端建立与设备的安全连接。终端从设备下载用户的交易界面，并在自助终端显示用户界面。用户通过用户界面在终端完成事务。

2. 发明申请

US20050187882A1 Electronic payment schemes in a mobile environment for short-range transactions 有权
标题翻译：在短期交易的移动环境中的电子支付方案
公开(公告)号：US20050187882A1
公开(公告)日：2005-08-25
申请号：US10785025
申请日：2004-02-25
申请人： Sampo Sovio , Jan-Erik Ekberg , Nadarajah Asokan , Pekka Lahtinen
发明人： Sampo Sovio , Jan-Erik Ekberg , Nadarajah Asokan , Pekka Lahtinen
IPC分类号： G06F1/00 , G06Q20/00 , G07F7/10 , H04L9/00 , H04L29/06
CPC分类号： G07F7/1008 , G06Q20/20 , G06Q20/327 , G06Q20/3278 , G06Q20/341 , G06Q20/382 , G06Q20/3827 , G06Q20/388 , G07F7/0886 , H04M15/68 , H04M2215/0196
摘要： A short-range transaction system enables a user to conduct transactions with a self-service terminal in a user-friendly environment without using currency. The user carries a portable smart card, which interacts with a mobile phone. After authentication via an RFID connection, the device MAC address and a security key (K) are imprinted in the card. In operation, the user waves the smart card past the self-service terminal and activates an RFID connection. The terminal sends the card a random number. The card returns the MAC address and a result (RES) computed using the hash value and the security key. The terminal using the MAC address and security key establishes a secure connection with the device. The terminal downloads the user's transaction interface from the device and displays the user interface at the self-service terminal. The user completes a transaction at the terminal via the user interface.
摘要翻译：短距离交易系统使用户能够在不使用货币的情况下在用户友好的环境中与自助终端进行交易。用户携带便携式智能卡，其与移动电话交互。通过RFID连接认证后，设备的MAC地址和安全密钥（K）被印在卡中。在操作中，用户通过自助终端来移动智能卡并激活RFID连接。终端发送卡片随机数。卡返回MAC地址和使用哈希值和安全密钥计算的结果（RES）。使用MAC地址和安全密钥的终端建立与设备的安全连接。终端从设备下载用户的交易界面，并在自助终端显示用户界面。用户通过用户界面在终端完成事务。

3. 发明授权

US08532304B2 Administration of wireless local area networks 有权
标题翻译：无线局域网管理
公开(公告)号：US08532304B2
公开(公告)日：2013-09-10
申请号：US11169328
申请日：2005-06-29
申请人： Nadarajah Asokan , Philip Ginzboorg , Seamus Moloney , Kari Ti. Kostiainen , Sampo Sovio , Jan-Erik Ekberg , Jari Takala
发明人： Nadarajah Asokan , Philip Ginzboorg , Seamus Moloney , Kari Ti. Kostiainen , Sampo Sovio , Jan-Erik Ekberg , Jari Takala
IPC分类号： H04L29/06
CPC分类号： H04W12/04 , H04L9/0838 , H04L9/3215 , H04L63/065 , H04L63/18 , H04L2209/80 , H04W12/06 , H04W48/20 , H04W84/12 , H04W88/08
摘要： Methods and systems for managing access to a wireless local area network are provided. A wireless access point (AP) may use a unified approach that utilizes an out-of-band channel to communicate authentication key and network address information to a guest device, and utilizes an in-band channel to establish communications with the guest device, and also provides support for in-band setup on all devices. The ability to use out-of-band where possible provides for an increase to security and usability, and the possibility of delegating access from one device to another. The unified approach thereby also provides easy management of guest access to the WLAN.
摘要翻译：提供了用于管理对无线局域网的访问的方法和系统。无线接入点（AP）可以使用利用带外信道将认证密钥和网络地址信息传送到来宾设备的统一方法，并且利用带内信道来建立与来宾设备的通信，以及还支持所有设备上的带内设置。在可能的情况下使用带外的能力提高了安全性和可用性，以及将访问权限从一个设备委派给另一个设备的可能性。因此，统一的方法也可以方便地管理访客访问WLAN。

4. 发明申请

US20060251256A1 Administration of wireless local area networks 有权
公开(公告)号：US20060251256A1
公开(公告)日：2006-11-09
申请号：US11169328
申请日：2005-06-29
申请人： Nadarajah Asokan , Philip Ginzboorg , Seamus Moloney , Kari Kostiainen , Sampo Sovio , Jan-Erik Ekberg , Jari Takala
发明人： Nadarajah Asokan , Philip Ginzboorg , Seamus Moloney , Kari Kostiainen , Sampo Sovio , Jan-Erik Ekberg , Jari Takala
IPC分类号： H04K1/00
CPC分类号： H04W12/04 , H04L9/0838 , H04L9/3215 , H04L63/065 , H04L63/18 , H04L2209/80 , H04W12/06 , H04W48/20 , H04W84/12 , H04W88/08
摘要： Methods and systems for managing access to a wireless local area network are provided. A wireless access point (AP) may use a unified approach that utilizes an out-of-band channel to communicate authentication key and network address information to a guest device, and utilizes an in-band channel to establish communications with the guest device, and also provides support for in-band setup on all devices. The ability to use out-of-band where possible provides for an increase to security and usability, and the possibility of delegating access from one device to another. The unified approach thereby also provides easy management of guest access to the WLAN.

5. 发明申请

US20050059379A1 Method of initializing and using a security association for middleware based on physical proximity 有权
标题翻译：基于物理接近度初始化和使用中间件安全关联的方法
公开(公告)号：US20050059379A1
公开(公告)日：2005-03-17
申请号：US10784215
申请日：2004-02-24
申请人： Sampo Sovio , Philip Ginzboorg , Jan-Erik Ekberg
发明人： Sampo Sovio , Philip Ginzboorg , Jan-Erik Ekberg
IPC分类号： G06F11/30 , G06F12/14 , H04L9/00 , H04L9/32 , H04L12/56 , H04L29/06 , H04L29/08 , H04M1/66 , H04M1/68 , H04M3/16
CPC分类号： H04L67/16 , H04L63/0492 , H04L63/08 , H04L67/04 , H04L67/14 , H04W12/04 , H04W12/06 , H04W28/18 , H04W76/10 , H04W84/18
摘要： A computer system, method, and computer program product for controlling data communication in an ad-hoc network that connects a wireless device and a nearby wireless device. The method stores an application directory, determines a priority for each entry in the application directory, identifies a selected entry based on the priority, and examines the attributes and security parameters associated with the selected entry. When the security parameters indicate to use a secure connection, the method establishes a security association to support the data communication by querying a database for an existing security association that will satisfy the security parameters. When the query is successful, the method reuses the existing security association. When the query is unsuccessful, the method creates a new security association by establishing a privileged side channel to the nearby wireless device, negotiating the new security association over the privileged side channel, and storing the new security association.
摘要翻译：一种用于控制连接无线设备和附近无线设备的自组织网络中的数据通信的计算机系统，方法和计算机程序产品。方法存储应用程序目录，确定应用程序目录中每个条目的优先级，根据优先级识别所选择的条目，并检查与所选条目相关联的属性和安全参数。当安全参数指示使用安全连接时，该方法建立安全关联，以通过查询数据库来满足安全参数的现有安全关联来支持数据通信。当查询成功时，该方法重用现有的安全关联。当查询不成功时，该方法通过向附近的无线设备建立特权侧信道，通过特权侧信道协商新的安全关联以及存储新的安全关联来创建新的安全关联。

6. 发明授权

US07545941B2 Method of initializing and using a security association for middleware based on physical proximity 有权
标题翻译：基于物理接近度初始化和使用中间件安全关联的方法
公开(公告)号：US07545941B2
公开(公告)日：2009-06-09
申请号：US10784215
申请日：2004-02-24
申请人： Sampo Sovio , Philip Ginzboorg , Jan-Erik Ekberg
发明人： Sampo Sovio , Philip Ginzboorg , Jan-Erik Ekberg
IPC分类号： G06F17/00 , G06F17/30
CPC分类号： H04L67/16 , H04L63/0492 , H04L63/08 , H04L67/04 , H04L67/14 , H04W12/04 , H04W12/06 , H04W28/18 , H04W76/10 , H04W84/18
摘要： A computer system, method, and computer program product for controlling data communication in an ad-hoc network that connects a wireless device and a nearby wireless device. The method stores an application directory, determines a priority for each entry in the application directory, identifies a selected entry based on the priority, and examines the attributes and security parameters associated with the selected entry. When the security parameters indicate to use a secure connection, the method establishes a security association to support the data communication by querying a database for an existing security association that will satisfy the security parameters. When the query is successful, the method reuses the existing security association. When the query is unsuccessful, the method creates a new security association by establishing a privileged side channel to the nearby wireless device, negotiating the new security association over the privileged side channel, and storing the new security association.
摘要翻译：一种用于控制连接无线设备和附近无线设备的自组织网络中的数据通信的计算机系统，方法和计算机程序产品。方法存储应用程序目录，确定应用程序目录中每个条目的优先级，根据优先级识别所选择的条目，并检查与所选条目相关联的属性和安全参数。当安全参数指示使用安全连接时，该方法建立安全关联，以通过查询数据库来满足安全参数的现有安全关联来支持数据通信。当查询成功时，该方法重用现有的安全关联。当查询不成功时，该方法通过向附近的无线设备建立特权侧信道，通过特权侧信道协商新的安全关联以及存储新的安全关联来创建新的安全关联。

7. 发明授权

US09171187B2 Implementation of an integrity-protected secure storage 有权
标题翻译：实施完整性保护的安全存储
公开(公告)号：US09171187B2
公开(公告)日：2015-10-27
申请号：US11128676
申请日：2005-05-13
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Lauri Paatero
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Lauri Paatero
IPC分类号： G06F21/78 , G06F21/71 , G06F21/62
CPC分类号： H04L63/0428 , G06F21/606 , G06F21/62 , G06F21/71 , G06F21/78 , G06F21/79 , G06Q20/341 , G06Q20/3576 , G06Q20/40975 , G07F7/1008 , H04L9/0833 , H04L9/0838 , H04L9/0891 , H04L67/1097 , H04L2209/12 , H04L2209/603 , H04L2209/80
摘要： An internal but not integrated security token is provided for a device which includes a first integrated circuitry including a secure processor. The security token is provided by a second integrated circuitry separate from the first circuitry. The second integrated circuitry includes a secure non-volatile storage. The secure processor communicates information to the second circuitry in a secure manner for the secure information to be securely stored in the secure non-volatile storage, and the second integrated circuitry communicates information stored in its secure non-volatile storage to the secure processor in a secure manner. Communications is secured by means of cryptography. The first integrated circuitry and the second integrated circuitry are internal parts of the device. An initialization method for distributing a secure key to be shared between the circuitries and to be used in cryptography is also disclosed.
摘要翻译：为包括包括安全处理器的第一集成电路的设备提供内部但未集成的安全令牌。安全令牌由与第一电路分开的第二集成电路提供。第二集成电路包括安全的非易失性存储器。安全处理器以安全的方式将信息传送到第二电路，以将安全信息安全地存储在安全的非易失性存储器中，并且第二集成电路将存储在其安全非易失性存储器中的信息传送到安全处理器安全的方式。通信是通过密码保护的。第一集成电路和第二集成电路是器件的内部部件。还公开了一种用于分发要在电路之间共享并将用于密码学中的安全密钥的初始化方法。

8. 发明申请

US20120311315A1 Method and Apparatus to Reset Platform Configuration Register in Mobile Trusted Module 有权
标题翻译：移动可信任模块中重置平台配置寄存器的方法和装置
公开(公告)号：US20120311315A1
公开(公告)日：2012-12-06
申请号：US13578955
申请日：2011-02-14
申请人： Jan-Erik Ekberg , Nadarajah Asokan , Kari Kostiainen
发明人： Jan-Erik Ekberg , Nadarajah Asokan , Kari Kostiainen
IPC分类号： G06F15/177
CPC分类号： G06F21/57
摘要： In accordance with the exemplary embodiments of the invention there is at least a method, apparatus, and executable program of computer instructions to perform the operations of establishing and initializing a set of platform configuration registers, where a first subset of platform configuration registers is defined as being non-resettable, and a second subset of platform configuration registers is defined as being resettable, storing initial boot-up system state information in one or more non-resettable platform configuration registers, dynamically resetting (2) a value of a platform configuration register identified by a reference integrity metric to reflect a measurement value provided by the reference integrity metric, and responding to an attestation request (0) with an attestation response (5) including dynamic information from the platform configuration register that was reset and system state information from a non-resettable platform configuration register.
摘要翻译：根据本发明的示例性实施例，至少有一种计算机指令的方法，装置和可执行程序，用于执行建立和初始化一组平台配置寄存器的操作，其中平台配置寄存器的第一子集被定义为不可复位，并且平台配置寄存器的第二子集被定义为可重置，将初始启动系统状态信息存储在一个或多个不可重置的平台配置寄存器中，动态地重置（2）平台配置寄存器的值由参考完整性度量标识，以反映由参考完整性度量提供的测量值，以及响应具有认证响应（5）的认证请求（5），该证明响应（5）包括来自重置的平台配置寄存器的动态信息，以及来自一个不可重置的平台配置寄存器。

9. 发明申请

US20110093938A1 METHODS, APPARATUSES, AND COMPUTER PROGRAM PRODUCTS FOR BOOTSTRAPPING DEVICE AND USER AUTHENTICATION 有权
标题翻译：用于启动设备和用户认证的方法，设备和计算机程序产品
公开(公告)号：US20110093938A1
公开(公告)日：2011-04-21
申请号：US12123135
申请日：2008-05-19
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Antti Kiiveri , Olli Muukka
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Antti Kiiveri , Olli Muukka
IPC分类号： H04L9/32
CPC分类号： H04L63/061 , G06F21/31 , H04L9/3263 , H04L63/0815 , H04L63/0823 , H04L2209/80
摘要： An apparatus may include a processor configured to receive a security certificate request from a remote device comprising a public key of the remote device and an authentication credential based upon a legacy authentication mechanism of the remote device. The processor may be further configured to validate the received authentication credential in accordance with the legacy authentication mechanism. The processor may be additionally configured to generate a security certificate for the public key. The processor may be further configured to provide the generated security certificate to the remote device
摘要翻译：设备可以包括处理器，其被配置为从包括远程设备的公开密钥的远程设备接收安全证书请求，以及基于远程设备的遗留认证机制的认证证书。处理器还可以被配置为根据传统认证机制来验证所接收的认证证书。处理器可以被额外地配置为生成用于公钥的安全证书。处理器可以被进一步配置为向远程设备提供生成的安全证书

10. 发明授权

US10374799B2 Method and apparatus for identity based ticketing 有权
公开(公告)号：US10374799B2
公开(公告)日：2019-08-06
申请号：US14111007
申请日：2011-04-13
申请人： Sandeep Tamrakar , Jan-Erik Ekberg , Jukka Virtanen , Nadarajah Asokan
发明人： Sandeep Tamrakar , Jan-Erik Ekberg , Jukka Virtanen , Nadarajah Asokan
IPC分类号： G06Q20/38 , H04L9/14 , G06F21/33 , G06Q20/04 , G06Q20/32 , G06Q20/40 , G07B15/02 , H04L9/30
摘要： A method, apparatus, system and computer program where an apparatus stores user specific credentials, receives a certificate via the communication interface from a certificate authority and stores the certificate in the memory. The apparatus further stores a private key and a public key in the memory and attempts authenticating of the apparatus to a ticket reader for accessing a service, by transmission of one or more messages, wherein the messages contain an authenticator that has at least one of the following: the certificate or its cryptographic derivative; one or more data items contained by the certificate or a cryptographic derivative thereof. The messages are prepared such that the public key is not recoverable from outside of the authenticator.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式