专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07023998B2 Cryptographic key processing and storage 有权
公开(公告)号：US07023998B2
公开(公告)日：2006-04-04
申请号：US09823042
申请日：2001-03-30
申请人： Juan A. Garay , Bjorn M. Jakobsson , David M. Kristol , Semyon B. Mizikovsky
发明人： Juan A. Garay , Bjorn M. Jakobsson , David M. Kristol , Semyon B. Mizikovsky
IPC分类号： H04L9/00
CPC分类号： G06F21/602 , G06F2221/2107 , H04L9/0827 , H04L9/0891 , H04L2209/60
摘要： A method and apparatus enhancing the security of an encrypted cryptographic key by storing its key re-transforming information in a decryption store that is separate from a cryptographic key store, which stores the encrypted cryptographic key, from which accessing circuitry is able to access the encrypted cryptographic key. The cryptographic key store may be a disk drive of a computer, the decryption store may be a network access card installed in that computer or a mobile terminal coupled to that computer, and the accessing circuitry may be the computer's controller. Decryption of the encrypted cryptographic key is carried out in the decryption store, as is the subsequent encryption or decryption using the decrypted cryptographic key. The accessing circuitry communicates with the decryption store exclusively via a predetermined interface, where the interface does not allow the accessing circuitry access to the cryptographic key and to at least a portion of the key re-transforming information from the decryption store. Thus, the encrypted cryptographic key can be stored relatively insecurely; while the security of the cryptographic key is maintained at a very high level because there is no native capability for the computer to randomly read information from the network access card or the mobile terminal.

2. 发明授权

US08774411B2 Session key generation and distribution with multiple security associations per protocol instance 有权
标题翻译：每个协议实例具有多个安全关联的会话密钥生成和分发
公开(公告)号：US08774411B2
公开(公告)日：2014-07-08
申请号：US12474764
申请日：2009-05-29
申请人： Violeta Cakulev , Semyon B. Mizikovsky , Ganapathy S. Sundaram
发明人： Violeta Cakulev , Semyon B. Mizikovsky , Ganapathy S. Sundaram
IPC分类号： H04K1/00 , H04L9/08 , H04L29/06 , H04W12/08
CPC分类号： H04L9/0819 , H04L9/0844 , H04L63/0428 , H04L2209/80 , H04W12/08
摘要： A single instance of a session key generation protocol is executed in a manner that generates a plurality of security associations between user equipment and a first network element of a communication system. In one aspect, a first one of the security associations is utilized to secure data sent between the user equipment and the first network element in an ongoing communication. In conjunction with a handoff of the ongoing communication from the first network element to a second network element of the communication system, another one of the security associations is selected, and the other selected security association is utilized to secure data sent between the user equipment and the second network element in the ongoing communication. The security associations may comprise respective sets of session keys derived from a single pairwise master key.
摘要翻译：执行会话密钥生成协议的单个实例，以便在用户设备和通信系统的第一网络元件之间生成多个安全关联。在一个方面，安全关联中的第一个被用于在正在进行的通信中保护在用户设备和第一网络元件之间发送的数据。结合从第一网络元件到通信系统的第二网络元件的正在进行的通信的切换，选择另一个安全关联，并且使用另一个选择的安全关联来保护在用户设备和正在进行的通信中的第二个网络元素。安全关联可以包括从单个成对主密钥导出的各组会话密钥。

3. 发明授权

US08230212B2 Method of indexing security keys for mobile internet protocol authentication 有权
标题翻译：索引移动互联网协议认证安全密钥的方法
公开(公告)号：US08230212B2
公开(公告)日：2012-07-24
申请号：US11740152
申请日：2007-04-25
申请人： Peretz M. Feder , Semyon B. Mizikovsky
发明人： Peretz M. Feder , Semyon B. Mizikovsky
IPC分类号： H04L29/06
CPC分类号： H04L9/321 , H04L63/0892 , H04L2209/76 , H04L2209/80 , H04W12/04 , H04W12/06 , H04W80/04
摘要： The present invention provides a method involving a mobile node, a home agent, and an authentication server in a wireless communication system. The method includes generating, at the authentication server, a first security key that indicates a secure association between the home agent and the mobile node based on a second security key that indicates a secure association between the mobile node and the authentication server. The method also includes generating, at the authentication server, at least one first index associated with the first security key. The first index is also generated by the mobile node. The method also includes storing, at the authentication server, the first index and the first security key.
摘要翻译：本发明提供一种在无线通信系统中涉及移动节点，归属代理和认证服务器的方法。该方法包括在认证服务器处基于指示移动节点和认证服务器之间的安全关联的第二安全密钥，生成指示归属代理和移动节点之间的安全关联的第一安全密钥。该方法还包括在认证服务器处生成与第一安全密钥相关联的至少一个第一索引。第一个索引也是由移动节点生成的。该方法还包括在认证服务器处存储第一索引和第一安全密钥。

4. 发明授权

US08189544B2 Method of creating security associations in mobile IP networks 有权
标题翻译：在移动IP网络中创建安全关联的方法
公开(公告)号：US08189544B2
公开(公告)日：2012-05-29
申请号：US11474591
申请日：2006-06-26
申请人： Peter James McCann , Semyon B. Mizikovsky , Ganapathy Subramanian Sundaram
发明人： Peter James McCann , Semyon B. Mizikovsky , Ganapathy Subramanian Sundaram
IPC分类号： H04W4/00
CPC分类号： H04L63/0428 , H04L63/061 , H04L63/062 , H04W12/04 , H04W80/04
摘要： A key distribution scheme is provided, which is useful for establishing, distributing, and maintaining security associations in a Mobile IP network. An authentication server performs an initial validation of a new session and generates a root key which it delivers to the initial access gateway and to the home agent. The initial access gateway and the home agent each independently compute a derivative key available only to themselves. The initial access gateway, acting as proxy for the mobile station, uses the derivative key to sign the Mobile IP registration or binding update transactions, and sends the signed registration or binding update to the home agent for validation. Once the session is established between the mobile station and the home agent, the access gateways act as proxies on behalf of the mobile station to maintain the session mobility. In handoff, the new access gateway acquires the root key as part of the transferred session context. The new access gateway, acting as proxy for the mobile station, computes a new derivative key from the root key and uses it to sign a binding update.
摘要翻译：提供了一种密钥分配方案，对于在移动IP网络中建立，分发和维护安全关联是有用的。认证服务器执行新会话的初始验证，并生成一个根密钥，该密钥将传递给初始接入网关和归属代理。初始接入网关和归属代理各自独立地计算可用于其自身的导数密钥。作为移动台的代理的初始接入网关使用派生密钥对移动IP注册或绑定更新事务进行签名，并将签名的注册或绑定更新发送到归属代理进行验证。一旦在移动台和归属代理之间建立了会话，则接入网关代表移动台充当代理以维持会话移动性。在切换中，新的接入网关获取根密钥作为传送的会话上下文的一部分。新的接入网关作为移动台的代理，从根密钥计算新的派生密钥，并使用它来签署绑定更新。

5. 发明申请

US20080137853A1 METHOD OF PROVIDING FRESH KEYS FOR MESSAGE AUTHENTICATION 有权
标题翻译：提供消息认证的新鲜方法
公开(公告)号：US20080137853A1
公开(公告)日：2008-06-12
申请号：US11682516
申请日：2007-03-06
申请人： Semyon B. Mizikovsky , Robert J. Rance
发明人： Semyon B. Mizikovsky , Robert J. Rance
IPC分类号： H04K1/00
CPC分类号： H04L63/0876 , H04L9/0631 , H04L9/0836 , H04L9/0844 , H04L9/3242 , H04L63/061 , H04L2209/80
摘要： The present invention provides a method of operating a mobile unit in a wireless communication system. Embodiments of the method may include providing access request message(s) including information indicative of a first counter and a message authentication code formed using a first key. The first key is derived from a second key and the first counter. The second key is derived from a third key established for a security session between the mobile unit and an authenticator. The first counter is incremented in response to each access request provided by the mobile unit.
摘要翻译：本发明提供一种在无线通信系统中操作移动单元的方法。该方法的实施例可以包括提供包括指示第一计数器的信息和使用第一密钥形成的消息认证码的访问请求消息。第一个键是从第二个键和第一个计数器派生出来的。第二个密钥是从为移动单元和认证者之间的安全会话建立的第三个密钥导出的。响应于由移动单元提供的每个访问请求，第一个计数器递增。

6. 发明申请

US20070297377A1 Method of creating security associations in mobile IP networks 有权
标题翻译：在移动IP网络中创建安全关联的方法
公开(公告)号：US20070297377A1
公开(公告)日：2007-12-27
申请号：US11474591
申请日：2006-06-26
申请人： Peter James McCann , Semyon B. Mizikovsky , Ganapathy Subramanian Sundaram
发明人： Peter James McCann , Semyon B. Mizikovsky , Ganapathy Subramanian Sundaram
IPC分类号： H04Q7/24
CPC分类号： H04L63/0428 , H04L63/061 , H04L63/062 , H04W12/04 , H04W80/04
摘要： A key distribution scheme is provided, which is useful for establishing, distributing, and maintaining security associations in a Mobile IP network. An authentication server performs an initial validation of a new session and generates a root key which it delivers to the initial access gateway and to the home agent. The initial access gateway and the home agent each independently compute a derivative key available only to themselves. The initial access gateway, acting as proxy for the mobile station, uses the derivative key to sign the Mobile IP registration or binding update transactions, and sends the signed registration or binding update to the home agent for validation. Once the session is established between the mobile station and the home agent, the access gateways act as proxies on behalf of the mobile station to maintain the session mobility. In handoff, the new access gateway acquires the root key as part of the transferred session context. The new access gateway, acting as proxy for the mobile station, computes a new derivative key from the root key and uses it to sign a binding update.
摘要翻译：提供了一种密钥分配方案，对于在移动IP网络中建立，分发和维护安全关联是有用的。认证服务器执行新会话的初始验证，并生成一个根密钥，该密钥将传递给初始接入网关和归属代理。初始接入网关和归属代理各自独立地计算可用于其自身的导数密钥。作为移动台的代理的初始接入网关使用派生密钥对移动IP注册或绑定更新事务进行签名，并将签名的注册或绑定更新发送到归属代理进行验证。一旦在移动台和归属代理之间建立了会话，则接入网关代表移动台充当代理以维持会话移动性。在切换中，新的接入网关获取根密钥作为传送的会话上下文的一部分。新的接入网关作为移动台的代理，从根密钥计算新的派生密钥，并使用它来签署绑定更新。

7. 发明授权

US06941142B2 Wireless service redirection signaling based on protocol revision 失效
标题翻译：基于协议修订的无线业务重定向信令
公开(公告)号：US06941142B2
公开(公告)日：2005-09-06
申请号：US10095625
申请日：2002-03-12
申请人： Gabriela Maria Abramovici , Michael Dwayne Chambers , Yuen-Yin L. Koo , Semyon B. Mizikovsky
发明人： Gabriela Maria Abramovici , Michael Dwayne Chambers , Yuen-Yin L. Koo , Semyon B. Mizikovsky
IPC分类号： H04B7/216 , H04Q3/00 , H04W48/06 , H04W48/18 , H04Q7/20 , H04M3/00
CPC分类号： H04W48/18 , H04W48/06
摘要： A selective Global Service Redirection mechanism allows a service provider, for instance, to instruct only CDMA2000 (MOB_P_REV=6) mobiles to access specific carrier that is deployed to support advanced services known as 3G services. In another embodiment, data-only CDMA2000 mobiles are instructed to access specific carrier that is optimized to support high speed data services. Additionally, data-only CDMA2000 mobiles may be instructed to access a specific carrier that is optimized to support high speed data services. Pre-CDMA2000 mobiles (MOB_P_REV
摘要翻译：选择性全球服务重定向机制允许服务提供商例如仅指示CDMA2000（MOB_P_REV = 6）移动台访问被部署以支持被称为3G服务的高级服务的特定运营商。在另一个实施例中，仅数据的CDMA2000移动台被指示访问被优化以支持高速数据服务的特定载波。此外，可以指示仅数据的CDMA2000移动台访问被优化以支持高速数据服务的特定载波。 CDMA2000手机（MOB_P_REV <6）被传统的全球服务重定向消息重定向到另一个载波，而CDMA2000手机（MOB_P_REV = <6）被指示忽略该重定向。

8. 发明授权

US5983115A Geographic based method for selecting a wireless communications service provider 失效
标题翻译：用于选择无线通信服务提供商的基于地理的方法
公开(公告)号：US5983115A
公开(公告)日：1999-11-09
申请号：US696196
申请日：1996-08-13
申请人： Semyon B. Mizikovsky
发明人： Semyon B. Mizikovsky
IPC分类号： H04W4/02 , H04W8/18 , H04W48/18 , H04W60/00 , H04Q7/00
CPC分类号： H04W48/18 , H04W4/02 , H04W60/00 , H04W8/183
摘要： A communication device locates a wireless service provider in a multi-service provider environment using a stored list of preferred service providers, the list has a plurality of uniquely identified sublists, each sublist is associated with a different geographic area and identifies a more preferred service provider and a less preferred service provider. Information received from an initial service provider is used to select a sublist from the plurality of sublists. A preferred service provider is selected by registering with an available service provider having a highest preference of available service providers as specified in the selected sublist.
摘要翻译：通信设备使用存储的优选服务提供商的列表将无线服务提供商定位在多服务提供商环境中，该列表具有多个唯一标识的子列表，每个子列表与不同的地理区域相关联并且标识更优选的服务提供者和不太优选的服务提供商。从初始服务提供商接收的信息用于从多个子列表中选择一个子列表。通过向具有在所选子列表中指定的可用服务提供商的最高偏好的可用服务提供商进行注册来选择优选服务提供商。

9. 发明授权

US08923811B2 Methods and apparatuses for dynamic management of security associations in a wireless network 有权
标题翻译：无线网络中安全关联的动态管理方法和装置
公开(公告)号：US08923811B2
公开(公告)日：2014-12-30
申请号：US12076176
申请日：2008-03-14
申请人： Peretz Moshe Feder , Semyon B. Mizikovsky
发明人： Peretz Moshe Feder , Semyon B. Mizikovsky
IPC分类号： H04M1/66 , H04W4/00 , H04L12/66 , H04L12/28 , H04L29/06 , H04L9/32 , H04W12/04 , H04W84/12
CPC分类号： H04L63/062 , H04L63/068 , H04W12/04 , H04W84/12
摘要： Methods for dynamic management of security associations in a network are provided. According to one method, a security key management entity determines whether to apply a new security key as an active security key based on an existing active security key. Each of the new security key and the existing active security key are associated with a same home agent, and the existing active security key serves as a basis for an existing security association between the home agent and at least one other network element.
摘要翻译：提供了网络中安全关联的动态管理方法。根据一种方法，安全密钥管理实体基于现有的主动安全密钥来确定是否应用新的安全密钥作为主动安全密钥。新的安全密钥和现有的主动安全密钥中的每个与相同的归属代理相关联，并且现有的主动安全密钥用作归属代理和至少一个其他网络元件之间的现有安全关联的基础。

10. 发明授权

US08826376B2 Communication of session-specific information to user equipment from an access network 有权
标题翻译：会话特定信息从接入网络传送给用户设备
公开(公告)号：US08826376B2
公开(公告)日：2014-09-02
申请号：US12401287
申请日：2009-03-10
申请人： Violeta Cakulev , Semyon B. Mizikovsky , Christopher Francis Mooney
发明人： Violeta Cakulev , Semyon B. Mizikovsky , Christopher Francis Mooney
IPC分类号： G06F21/00 , H04L29/06
CPC分类号： H04W12/06 , H04W76/10
摘要： In conjunction with establishment of a session between an access network and user equipment of a communication system, session-specific information is transmitted from the access network to the user equipment. The session-specific information transmitted from the access network to the user equipment comprises information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the system. For example, the session-specific information transmitted from the access network to the user equipment may comprise an identifier of a gateway coupled between the access network and the authentication server.
摘要翻译：结合在通信系统的接入网络和用户设备之间的会话的建立，会话专用信息从接入网络发送到用户设备。从接入网向用户设备发送的会话特定信息包括在用户设备与系统的认证服务器之间进行的认证协议中使用的信息。例如，从接入网络发送到用户设备的特定于会话的信息可以包括耦合在接入网络和认证服务器之间的网关的标识符。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式