专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08707409B2 Method and apparatus for providing trusted single sign-on access to applications and internet-based services 有权
标题翻译：用于提供对应用程序和基于互联网的服务的可信单点登录访问的方法和装置
公开(公告)号：US08707409B2
公开(公告)日：2014-04-22
申请号：US11843517
申请日：2007-08-22
申请人： Yogendra C. Shah , Inhyok Cha , Alexander Reznik
发明人： Yogendra C. Shah , Inhyok Cha , Alexander Reznik
IPC分类号： G06F7/04
CPC分类号： H04L63/0442 , G06F21/41 , H04L63/0815 , H04L63/083 , H04L63/0884
摘要： A method and apparatus for password management and single sign-on (SSO) access based on trusted computing (TC) technology. The methods implement the Trusted Computing Group (TCG)'s trusted platform module (TPM), which interacts with both proxy SSO unit and web-accessing applications to provide a secure, trusted mechanism to generate, store, and retrieve passwords and SSO credentials. The various embodiments of the present invention allow a user to hop securely and transparently from one site to another that belong to a pre-identified group of sites, after signing on just once to a secured proxy residing at the user's device.
摘要翻译：一种基于可信计算（TC）技术的密码管理和单点登录（SSO）访问的方法和装置。该方法实施了可信计算组（TCG）的可信平台模块（TPM），该平台模块与代理SSO单元和Web访问应用程序进行交互，以提供安全可靠的机制来生成，存储和检索密码和SSO凭据。本发明的各种实施例允许用户在仅驻留在用户设备上的安全代理器一次登录之后，从属于预先识别的站点组的一个站点到另一站点安全地和透明地跳转。

2. 发明申请

US20120281831A1 Method and System for Enhancing Crytographic Capabilities of a Wireless Device Using Broadcasted Random Noise 有权
标题翻译：使用广播随机噪声提高无线设备的凝视能力的方法和系统
公开(公告)号：US20120281831A1
公开(公告)日：2012-11-08
申请号：US13548803
申请日：2012-07-13
申请人： Alexander Reznik , Alain C. Briancon , Yevgeniy Dodis , Yogendra C. Shah , Chunxuan Ye , Robert A. DiFazio , Inhyok Cha
发明人： Alexander Reznik , Alain C. Briancon , Yevgeniy Dodis , Yogendra C. Shah , Chunxuan Ye , Robert A. DiFazio , Inhyok Cha
IPC分类号： H04L9/00
CPC分类号： H04W12/04 , H04L9/065 , H04L9/0869 , H04L9/0875 , H04L63/0457 , H04L2209/08 , H04L2209/80 , H04W12/02
摘要： A secret stream of bits begins by receiving a public random stream contained in a wireless communication signal at a transmit/receive unit. The public random stream is sampled and specific bits are extracted according to a shared common secret. These extracted bits are used to create a longer secret stream. The shared common secret may be generated using JRNSO techniques, or provided to the transmit/receive units prior to the communication session. Alternatively, one of the transmit/receive unit is assumed to be more powerful than any potential eavesdropper. In this situation, the powerful transmit/receive unit may broadcast and store a public random stream. The weaker transmit/receive unit selects select random bits of the broadcast for creating a key. The weaker transmit/receive unit sends the powerful transmit/receive unit the selected bit numbers, and powerful transmit/receive unit uses the random numbers to produce the key created by the weaker transmit/receive unit.
摘要翻译：秘密的比特流开始于在发送/接收单元处接收包含在无线通信信号中的公共随机流。公共随机流被采样，并且根据共享的公共秘密提取特定位。这些提取的比特用于创建更长的秘密流。可以使用JRNSO技术生成共享公用秘密，或者在通信会话之前提供给发送/接收单元。或者，假设发射/接收单元之一比任何潜在的窃听者更强大。在这种情况下，强大的发送/接收单元可以广播和存储公共随机流。较弱的发送/接收单元选择用于创建密钥的广播的选择随机比特。较弱的发射/接收单元发送强大的发射/接收单元所选择的位号，强大的发射/接收单元使用随机数产生由较弱发射/接收单元产生的密钥。

3. 发明授权

US08634558B2 Method and system for enhancing crytographic capabilities of a wireless device using broadcasted random noise 有权
标题翻译：使用广播随机噪声增强无线设备的crytographic能力的方法和系统
公开(公告)号：US08634558B2
公开(公告)日：2014-01-21
申请号：US13548803
申请日：2012-07-13
申请人： Alexander Reznik , Alain C. Briancon , Yevgeniy Dodis , Yogendra C. Shah , Chunxuan Ye , Robert A. DiFazio , Inhyok Cha
发明人： Alexander Reznik , Alain C. Briancon , Yevgeniy Dodis , Yogendra C. Shah , Chunxuan Ye , Robert A. DiFazio , Inhyok Cha
IPC分类号： H04L29/06
CPC分类号： H04W12/04 , H04L9/065 , H04L9/0869 , H04L9/0875 , H04L63/0457 , H04L2209/08 , H04L2209/80 , H04W12/02
摘要： A secret stream of bits begins by receiving a public random stream contained in a wireless communication signal at a transmit/receive unit. The public random stream is sampled and specific bits are extracted according to a shared common secret. These extracted bits are used to create a longer secret stream. The shared common secret may be generated using JRNSO techniques, or provided to the transmit/receive units prior to the communication session. Alternatively, one of the transmit/receive unit is assumed to be more powerful than any potential eavesdropper. In this situation, the powerful transmit/receive unit may broadcast and store a public random stream. The weaker transmit/receive unit selects select random bits of the broadcast for creating a key. The weaker transmit/receive unit sends the powerful transmit/receive unit the selected bit numbers, and powerful transmit/receive unit uses the random numbers to produce the key created by the weaker transmit/receive unit.
摘要翻译：秘密的比特流开始于在发送/接收单元处接收包含在无线通信信号中的公共随机流。公共随机流被采样，并且根据共享的公共秘密提取特定位。这些提取的比特用于创建更长的秘密流。可以使用JRNSO技术生成共享公用秘密，或者在通信会话之前提供给发送/接收单元。或者，假设发射/接收单元之一比任何潜在的窃听者更强大。在这种情况下，强大的发送/接收单元可以广播和存储公共随机流。较弱的发送/接收单元选择用于创建密钥的广播的选择随机比特。较弱的发射/接收单元发送强大的发射/接收单元所选择的位号，强大的发射/接收单元使用随机数产生由较弱发射/接收单元产生的密钥。

4. 发明授权

US08254574B2 Method and system for enhancing cryptographic capabilities of a wireless device using broadcasted random noise 有权
标题翻译：使用广播随机噪声增强无线设备的加密能力的方法和系统
公开(公告)号：US08254574B2
公开(公告)日：2012-08-28
申请号：US11871683
申请日：2007-10-12
申请人： Alexander Reznik , Alain C. Briancon , Yevgeniy Dodis , Yogendra C. Shah , Chunxuan Ye , Robert A. DiFazio , Inhyok Cha
发明人： Alexander Reznik , Alain C. Briancon , Yevgeniy Dodis , Yogendra C. Shah , Chunxuan Ye , Robert A. DiFazio , Inhyok Cha
IPC分类号： H04L29/06
CPC分类号： H04W12/04 , H04L9/065 , H04L9/0869 , H04L9/0875 , H04L63/0457 , H04L2209/08 , H04L2209/80 , H04W12/02
摘要： A secret stream of bits begins by receiving a public random stream contained in a wireless communication signal at a transmit/receive unit. The public random stream is sampled and specific bits are extracted according to a shared common secret. These extracted bits are used to create a longer secret stream. The shared common secret may be generated using JRNSO techniques, or provided to the transmit/receive units prior to the communication session. Alternatively, one of the transmit/receive unit is assumed to be more powerful than any potential eavesdropper. In this situation, the powerful transmit/receive unit may broadcast and store a public random stream. The weaker transmit/receive unit selects select random bits of the broadcast for creating a key. The weaker transmit/receive unit sends the powerful transmit/receive unit the selected bit numbers, and powerful transmit/receive unit uses the random numbers to produce the key created by the weaker transmit/receive unit.
摘要翻译：秘密的比特流开始于在发送/接收单元处接收包含在无线通信信号中的公共随机流。公共随机流被采样，并且根据共享的公共秘密提取特定位。这些提取的比特用于创建更长的秘密流。可以使用JRNSO技术生成共享公用秘密，或者在通信会话之前提供给发送/接收单元。或者，假设发射/接收单元之一比任何潜在的窃听者更强大。在这种情况下，强大的发送/接收单元可以广播和存储公共随机流。较弱的发送/接收单元选择用于创建密钥的广播的选择随机比特。较弱的发射/接收单元发送强大的发射/接收单元所选择的位号，强大的发射/接收单元使用随机数产生由较弱发射/接收单元产生的密钥。

5. 发明授权

US08914674B2 Device validation, distress indication, and remediation 有权
标题翻译：设备验证，遇险指示和修复
公开(公告)号：US08914674B2
公开(公告)日：2014-12-16
申请号：US13289154
申请日：2011-11-04
申请人： Yogendra C. Shah , Lawrence Case , Dolores F. Howry , Inhyok Cha , Andreas Leicher , Andreas Schmidt
发明人： Yogendra C. Shah , Lawrence Case , Dolores F. Howry , Inhyok Cha , Andreas Leicher , Andreas Schmidt
IPC分类号： G06F11/00 , H04W12/10 , G06F21/10 , G06F21/57
CPC分类号： G06F11/0709 , G06F11/0751 , G06F11/079 , G06F11/0793 , G06F11/08 , G06F21/10 , G06F21/575 , G06F2221/2103 , G06F2221/2111 , H04L63/123 , H04M1/24 , H04W8/22 , H04W12/10 , H04W24/02
摘要： A wireless communications device may be configured to perform integrity checking and interrogation with a network entity to isolate a portion of a failed component on the wireless network device for remediation. Once an integrity failure is determined on a component of the device, the device may identify a functionality associated with the component and indicate the failed functionality to the network entity. Both the wireless network device and the network entity may identify the failed functionality and/or failed component using a component-to-functionality map. After receiving an indication of an integrity failure at the device, the network entity may determine that one or more additional iterations of integrity checking may be performed at the device to narrow the scope of the integrity failure on the failed component. Once the integrity failure is isolated, the network entity may remediate a portion of the failed component on the wireless communications device.
摘要翻译：无线通信设备可以被配置为执行与网络实体的完整性检查和询问，以隔离无线网络设备上的故障组件的一部分以进行修复。一旦在设备的组件上确定完整性故障，则设备可以识别与组件相关联的功能并且向网络实体指示失败的功能。无线网络设备和网络实体都可以使用组件到功能映射来识别故障功能和/或故障组件。在接收到设备上的完整性故障的指示之后，网络实体可以确定可以在设备处执行完整性检查的一个或多个附加迭代以缩小故障组件上的完整性故障的范围。一旦完整性故障被隔离，则网络实体可以修复无线通信设备上的故障组件的一部分。

6. 发明授权

US08630620B2 Method and apparatus for securing location information and access control using the location information 有权
标题翻译：使用位置信息来保护位置信息和访问控制的方法和装置
公开(公告)号：US08630620B2
公开(公告)日：2014-01-14
申请号：US12019755
申请日：2008-01-25
申请人： Inhyok Cha , Yogendra C. Shah , Chunxuan Ye
发明人： Inhyok Cha , Yogendra C. Shah , Chunxuan Ye
IPC分类号： H04M3/16 , H04M1/00 , H04B1/38 , H04W24/00 , H04K1/00 , H04L9/32
CPC分类号： H04W12/08 , H04L63/04 , H04L63/102 , H04L63/107 , H04W8/08 , H04W12/02 , H04W12/10
摘要： A method and apparatus for securing location information and access control using the location information are disclosed. A wireless transmit/receive unit (WTRU) includes a location sensing entity and a subscriber identity module (SIM). The location sensing entity generates location information of the WTRU and the location information is embedded in a message in an SIM. A trusted processing module in the WTRU verifies integrity of the location information. The trusted processing module may be on the SIM. The location information may be physical location information or contextual location-related information. The trusted processing module is configured to cryptographically secure and bind the location information to the WTRU, and verify trust metrics of an external entity prior to granting an access to the location information or accepting information from the external entity. The trusted processing module may be a trusted computing group (TCG) trusted platform module (TPM) or mobile trusted module (MTM). The location information may be used for an authentication purpose or access control. The location information may be combined with time information.
摘要翻译：公开了一种使用位置信息来保护位置信息和访问控制的方法和装置。无线发射/接收单元（WTRU）包括位置感测实体和用户识别模块（SIM）。位置感测实体生成WTRU的位置信息，并且将位置信息嵌入在SIM中的消息中。 WTRU中的可信处理模块验证位置信息的完整性。可信处理模块可以在SIM上。位置信息可以是物理位置信息或上下文位置相关信息。可信处理模块被配置为将位置信息密码地安全地绑定到WTRU，并且在授予对位置信息的访问或接受来自外部实体的信息之前验证外部实体的信任度量。可信处理模块可以是可信计算组（TCG）可信平台模块（TPM）或移动可信模块（MTM）。位置信息可以用于认证目的或访问控制。位置信息可以与时间信息组合。

7. 发明申请

US20120246481A1 VIRTUAL SUBSCRIBER IDENTITY MODULE 有权
标题翻译：虚拟订阅者身份识别模块
公开(公告)号：US20120246481A1
公开(公告)日：2012-09-27
申请号：US13487748
申请日：2012-06-04
申请人： Louis J. Guccione , Andreas U. Schmidt , Nicolai Kuntze , Michael Kasper , Yogendra C. Shah , Inhyok Cha
发明人： Louis J. Guccione , Andreas U. Schmidt , Nicolai Kuntze , Michael Kasper , Yogendra C. Shah , Inhyok Cha
IPC分类号： H04L9/32
CPC分类号： H04L9/321 , H04L63/0853 , H04W8/265 , H04W12/06
摘要： A mobile trusted platform (MTP) configured to provide virtual subscriber identify module (vSIM) services is disclosed. In one embodiment, the MTP includes: a device manufacturer-trusted subsystem (TSS-DM) configured to store and provide credentials related to a manufacturer of the MTP; a mobile network operator—trusted subsystem (MNO-TSS) configured to store and provide credentials related to a mobile network operator (MNO); and a device user/owner—trusted subsystem (TSS-DO/TSS-U) configured to store and provide credentials related to user of the MTP. The TSS-MNO includes a vSIM core services unit, configured to store, provide and process credential information relating to the MNO. The TSS-DO/TSS-U includes a vSIM management unit, configured to store, provide and process credential information relating to the user/owner of the MTP. The TSS-DO/TSS-U and the TSS-MNO communicate through a trusted vSIM service.
摘要翻译：公开了一种被配置为提供虚拟用户识别模块（vSIM）服务的移动信任平台（MTP）。在一个实施例中，MTP包括：被配置为存储和提供与MTP的制造商有关的凭证的设备制造商信任子系统（TSS-DM）; 被配置为存储和提供与移动网络运营商（MNO）相关的凭证的移动网络运营商信任子系统（MNO-TSS）; 以及被配置为存储和提供与MTP的用户相关的凭证的设备用户/所有者信任的子系统（TSS-DO / TSS-U）。 TSS-MNO包括一个vSIM核心服务单元，用于存储，提供和处理与MNO有关的凭证信息。 TSS-DO / TSS-U包括一个vSIM管理单元，用于存储，提供和处理与MTP的用户/所有者有关的凭证信息。 TSS-DO / TSS-U和TSS-MNO通过可信的vSIM服务进行通信。

8. 发明申请

US20120023568A1 Method and Apparatus for Trusted Federated Identity Management and Data Access Authorization 有权
标题翻译：用于可信联合身份管理和数据访问授权的方法和装置
公开(公告)号：US20120023568A1
公开(公告)日：2012-01-26
申请号：US13011558
申请日：2011-01-21
申请人： Inhyok Cha , Andreas Schmidt , Andreas Leicher , Yogendra C. Shah
发明人： Inhyok Cha , Andreas Schmidt , Andreas Leicher , Yogendra C. Shah
IPC分类号： H04W12/06
CPC分类号： H04W12/06 , G06F21/335 , G06F21/57 , G06F2221/2115 , H04L63/0807 , H04L2463/121
摘要： Systems, methods, and instrumentalities are disclosed that may provide for integration of trusted OpenID (TOpenID) with OpenID. The authentication may be accomplished, in part, via communications between a trusted ticket server on a UE and a network application function. The UE may retrieve platform validation data (e.g., from a trusted platform module on the UE). The UE may receive a platform verification in response to the platform validation data. The platform verification may indicate that the network application function has verified the platform validation data and the user. The platform verification may indicate that the platform validation data matches a previously generated reference value.
摘要翻译：公开了可以提供可信OpenID（TOpenID）与OpenID的集成的系统，方法和工具。认证可以部分地通过UE上的信任票据服务器和网络应用功能之间的通信来实现。 UE可以检索平台验证数据（例如，从UE上的可信平台模块）。 UE可以响应于平台验证数据而接收平台验证。平台验证可以指示网络应用功能已经验证了平台验证数据和用户。平台验证可以指示平台验证数据与先前生成的参考值相匹配。

9. 发明申请

US20110041003A1 METHOD AND APPARATUS FOR H(e)NB INTEGRITY VERIFICATION AND VALIDATION 有权
标题翻译： H（e）NB的完整性验证和验证的方法和装置
公开(公告)号：US20110041003A1
公开(公告)日：2011-02-17
申请号：US12718572
申请日：2010-03-05
申请人： Sudhir B. Pattar , Inhyok Cha , Andreas U. Schmidt , Andreas Leicher , Yogendra C. Shah , Dolores F. Howry , David G. Greiner , Lawrence L. Case , Michael V. Meyerstein , Louis J. Guccione
发明人： Sudhir B. Pattar , Inhyok Cha , Andreas U. Schmidt , Andreas Leicher , Yogendra C. Shah , Dolores F. Howry , David G. Greiner , Lawrence L. Case , Michael V. Meyerstein , Louis J. Guccione
IPC分类号： H04L9/32 , G06F21/20 , G06F11/07 , G06F11/20
CPC分类号： H04L41/0869 , H04L41/0654 , H04L41/0681 , H04L63/123 , H04L63/166 , H04W12/10 , H04W84/045
摘要： An apparatus and method for providing home evolved node-B (H(e)NB) integrity verification and validation using autonomous validation and semi-autonomous validation is disclosed herein.
摘要翻译：本文公开了一种使用自主验证和半自主验证来提供家庭演进节点B（H（e）NB）完整性验证和验证的装置和方法。

10. 发明申请

US20100125732A1 HOME NODE-B APPARATUS AND SECURITY PROTOCOLS 有权
标题翻译：首页节点B设备和安全协议
公开(公告)号：US20100125732A1
公开(公告)日：2010-05-20
申请号：US12563392
申请日：2009-09-21
申请人： Inhyok Cha , Yogendra C. Shah , Andreas U. Schmidt
发明人： Inhyok Cha , Yogendra C. Shah , Andreas U. Schmidt
IPC分类号： H04L29/06 , H04L9/00
CPC分类号： H04W12/06 , H04L63/107 , H04L63/162 , H04L63/205 , H04W88/08
摘要： A Home Node B or Home evolved Node B (HN(e)B) apparatus and methods are disclosed. The HN(e)B includes a Trusted Environment (TrE) and interfaces including unprotected interfaces, cryptographically protected interfaces, and hardware protected interfaces. The H(e)NB includes security/authentication protocols for communication between the H(e)NB and external network elements, including a Security Gateway (SGW).
摘要翻译：家庭节点B或家庭演进节点B（HN（e）B）设备和方法被公开。 HN（e）B包括可信环境（TrE）和包括未受保护的接口，密码保护接口和硬件保护接口的接口。 H（e）NB包括用于H（e）NB与外部网络元件之间的通信的安全/认证协议，包括安全网关（SGW）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式