专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20100262832A1 ENTITY BIDIRECTIONAL AUTHENTICATION METHOD AND SYSTEM 有权
标题翻译：实体双向认证方法与系统
公开(公告)号：US20100262832A1
公开(公告)日：2010-10-14
申请号：US12808049
申请日：2008-12-09
申请人： Manxia Tie , Jun Cao , Zhenhai Huang , Xiaolong Lai
发明人： Manxia Tie , Jun Cao , Zhenhai Huang , Xiaolong Lai
IPC分类号： H04L9/32
CPC分类号： H04L9/321 , H04L9/3247
摘要： An entity bidirectional authentication method and system, the method involves: the first entity sends the first message; the second entity sends the second message to the credible third party after receiving the said first message; the said credible third party returns the third message after receiving the second message; the said second entity sends the fourth message after receiving the third message and verifying it; the said first entity receives the said fourth message and verifies it, completes the authentication. Compared with the conventional authentication mechanism, the invention defines an on-line retrieval and authentication mechanism of a public key, realizes the centralized management for it, simplifies the operating condition of the protocol, and facilitates the application and implement.
摘要翻译：一种实体双向认证方法和系统，该方法涉及：第一实体发送第一消息; 第二实体在接收到所述第一消息之后将第二消息发送到可信第三方; 所述可信第三方在接收到第二消息后返回第三消息; 所述第二实体在接收到第三消息并验证之后发送第四消息; 所述第一实体接收所述第四消息并对其进行验证，从而完成认证。与常规认证机制相比，本发明定义了公钥的在线检索和认证机制，实现了集中管理，简化了协议的工作状态，便于应用和实现。

12. 发明授权

US08819778B2 Method and system for switching station in centralized WLAN when WPI is performed by access controller 有权
标题翻译： WPI由接入控制器执行时，集中式WLAN切换站的方法和系统
公开(公告)号：US08819778B2
公开(公告)日：2014-08-26
申请号：US13320469
申请日：2009-12-07
申请人： Zhiqiang Du , Jun Cao , Manxia Tie , Xiaolong Lai , Zhenhai Huang
发明人： Zhiqiang Du , Jun Cao , Manxia Tie , Xiaolong Lai , Zhenhai Huang
IPC分类号： H04L29/06 , H04W12/06
CPC分类号： H04W36/0038 , H04L41/0803 , H04L63/205 , H04W12/06 , H04W92/12
摘要： The embodiment of the present invention relates to a method and a system for switching station in centralized wireless local area network (WLAN) when the WLAN privacy infrastructure (WPI) is performed by an access controller (AC). The method includes: step 1: the station re-associates with the AC through the destination wireless terminal point (WTP); step 2: the AC informs the associated WTP to delete the station; step 3: the AC informs the destination WTP to join the station. The invention implements the operation of joining station and deleting station between the AC and the WTP based on the control and provisioning of wireless access points protocol (CAPWAP) control message during the process of switching station. Therefore, the invention can quickly and safely implement the station switching among the WTPs under the same AC.
摘要翻译：本发明的实施例涉及一种当WLAN隐私基础设施（WPI）由接入控制器（AC）执行时，在集中式无线局域网（WLAN）中切换台站的方法和系统。该方法包括：步骤1：站通过目的无线终端（WTP）与AC重新关联; 步骤2：AC通知相关的WTP删除站; 步骤3：AC通知目的地WTP加入车站。本发明基于在交换台处理过程中的无线接入点协议（CAPWAP）控制消息的控制和提供，实现了加入站和删除站之间的AC和WTP的操作。因此，本发明可以在同一AC下的WTP之间快速，安全地实现站切换。

13. 发明授权

US08417955B2 Entity bidirectional authentication method and system 有权
标题翻译：实体双向认证方式和系统
公开(公告)号：US08417955B2
公开(公告)日：2013-04-09
申请号：US12808049
申请日：2008-12-09
申请人： Manxia Tie , Jun Cao , Zhenhai Huang , Xiaolong Lai
发明人： Manxia Tie , Jun Cao , Zhenhai Huang , Xiaolong Lai
IPC分类号： H04L29/06
CPC分类号： H04L9/321 , H04L9/3247
摘要： An entity bidirectional authentication method and system, the method involves: the first entity sends the first message; the second entity sends the second message to the credible third party after receiving the said first message; the said credible third party returns the third message after receiving the second message; the said second entity sends the fourth message after receiving the third message and verifying it; the said first entity receives the said fourth message and verifies it, completes the authentication. Compared with the conventional authentication mechanism, the invention defines an on-line retrieval and authentication mechanism of a public key, realizes the centralized management for it, simplifies the operating condition of the protocol, and facilitates the application and implement.
摘要翻译：一种实体双向认证方法和系统，该方法涉及：第一实体发送第一消息; 第二实体在接收到所述第一消息之后将第二消息发送到可信第三方; 所述可信第三方在接收到第二消息后返回第三消息; 所述第二实体在接收到第三消息并验证之后发送第四消息; 所述第一实体接收所述第四消息并对其进行验证，从而完成认证。与常规认证机制相比，本发明定义了公钥的在线检索和认证机制，实现了集中管理，简化了协议的工作状态，便于应用和实现。

14. 发明申请

US20120151554A1 SECURITY ACCESS CONTROL METHOD AND SYSTEM FOR WIRED LOCAL AREA NETWORK 有权
标题翻译：用于有线局域网的安全访问控制方法和系统
公开(公告)号：US20120151554A1
公开(公告)日：2012-06-14
申请号：US13391051
申请日：2009-12-23
申请人： Manxia Tie , Jun Cao , Li Ge , Xiaolong Lai , Zhenhai Huang , Qin Li , Zhiqiang Du
发明人： Manxia Tie , Jun Cao , Li Ge , Xiaolong Lai , Zhenhai Huang , Qin Li , Zhiqiang Du
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L63/061 , H04L63/0823 , H04L63/205
摘要： The present invention relates to a security access control method and system for wired local area network, the method includes the following steps: 1) a requester (REQ) negotiates the security policy with an authentication access controller (AAC); 2) the requester (REQ) and the authentication access controller (AAC) authenticate the identity; 3) the requester (REQ) negotiates the key with the authentication access controller (AAC). The direct identity authentication between the user and the network access control device is realized by the present invention; the negotiation and the dynamic update of the session key for the link layer data protection are realized; a variety of network architectures such as the enterprise network, the telecommunication network are supported; the scalability is good, the multiple authentication methods are supported; the authentication protocols with different security levels are supported, the requirements of the various subscribers are satisfied; the sub-modules of the protocol are independent, flexible, and easy to be accepted or rejected.
摘要翻译：本发明涉及有线局域网的安全访问控制方法和系统，该方法包括以下步骤：1）请求者（REQ）与认证接入控制器（AAC）协商安全策略; 2）请求者（REQ）和认证访问控制器（AAC）认证身份; 3）请求者（REQ）与认证接入控制器（AAC）协商密钥。用户和网络访问控制设备之间的直接身份认证是通过本发明实现的; 实现了链路层数据保护的会话密钥的协商和动态更新; 支持企业网络，电信网络等各种网络架构; 可扩展性好，支持多种认证方式; 支持不同安全级别的认证协议，满足各种用户的要求; 协议的子模块是独立的，灵活的，易于被接受或拒绝。

15. 发明申请

US20120054831A1 METHOD AND SYSTEM FOR SWITCHING STATION IN CENTRALIZED WLAN WHEN WPI IS PERFORMED BY ACCESS CONTROLLER 有权
标题翻译：用于在WPI由访问控制器执行的中央WLAN中切换站的方法和系统
公开(公告)号：US20120054831A1
公开(公告)日：2012-03-01
申请号：US13320469
申请日：2009-12-07
申请人： Zhiqiang Du , Jun Cao , Manxia Tie , Xiaolong Lai , Zhenhai Huang
发明人： Zhiqiang Du , Jun Cao , Manxia Tie , Xiaolong Lai , Zhenhai Huang
IPC分类号： H04W12/06 , H04W48/00 , H04W72/04
CPC分类号： H04W36/0038 , H04L41/0803 , H04L63/205 , H04W12/06 , H04W92/12
摘要： The embodiment of the present invention relates to a method and a system for switching station in centralized wireless local area network (WLAN) when the WLAN privacy infrastructure (WPI) is performed by an access controller (AC). The method includes: step 1: the station re-associates with the AC through the destination wireless terminal point (WTP); step 2: the AC informs the associated WTP to delete the station; step 3: the AC informs the destination WTP to join the station. The invention implements the operation of joining station and deleting station between the AC and the WTP based on the control and provisioning of wireless access points protocol (CAPWAP) control message during the process of switching station. Therefore, the invention can quickly and safely implement the station switching among the WTPs under the same AC.
摘要翻译：本发明的实施例涉及一种当WLAN隐私基础设施（WPI）由接入控制器（AC）执行时，在集中式无线局域网（WLAN）中切换台站的方法和系统。该方法包括：步骤1：站通过目的无线终端（WTP）与AC重新关联; 步骤2：AC通知相关的WTP删除站; 步骤3：AC通知目的地WTP加入车站。本发明基于在交换台处理过程中的无线接入点协议（CAPWAP）控制消息的控制和提供，实现了加入站和删除站之间的AC和WTP的操作。因此，本发明可以在同一AC下的WTP之间快速，安全地实现站切换。

16. 发明申请

US20110314286A1 ACCESS AUTHENTICATION METHOD APPLYING TO IBSS NETWORK 有权
标题翻译：应用于IBSS网络的访问认证方法
公开(公告)号：US20110314286A1
公开(公告)日：2011-12-22
申请号：US12740082
申请日：2008-10-30
申请人： Manxia Tie , Jun Cao , Xiaolong Lai , Jiandong Li , Liaojun Pang , Zhenhai Huang
发明人： Manxia Tie , Jun Cao , Xiaolong Lai , Jiandong Li , Liaojun Pang , Zhenhai Huang
IPC分类号： H04L9/08 , G06F15/16
CPC分类号： H04W12/06 , H04L63/1466 , H04L63/162 , H04W12/04 , H04W84/12
摘要： An access authentication method applying to IBSS network involves the following steps of: 1) performing authentication role configuration for network entities; 2) authenticating an authentication entity and a request entity that have been performed the authentication role configuration via an authentication protocol; and 3) after finishing the authentication, the authentication entity and the request entity perform the key negotiation, wherein, the message integrity check field and protocol synchronization lock-in field are added in a key negotiation message. The access authentication method applying to IBSS network provided by the invention has the advantages of the better safeness and the higher execution efficiency.
摘要翻译：适用于IBSS网络的接入认证方法包括以下步骤：1）对网络实体进行认证角色配置; 2）通过认证协议认证已经执行认证角色配置的认证实体和请求实体; 和3）认证完成后，认证实体和请求实体进行密钥协商，其中消息完整性检查字段和协议同步锁定字段被添加到密钥协商消息中。适用于本发明提供的IBSS网络的接入认证方法具有安全性更高，执行效率更高的优点。

17. 发明申请

US20110252239A1 METHOD FOR PROTECTING THE FIRST MESSAGE OF SECURITY PROTOCOL 有权
标题翻译：保护安全协议第一信息的方法
公开(公告)号：US20110252239A1
公开(公告)日：2011-10-13
申请号：US13140632
申请日：2009-12-07
申请人： Xiaolong Lai , Jun Cao , Yuelei Xiao , Manxia Tie , Zhenhai Huang , Bianlin Zhang , Yanan Hu
发明人： Xiaolong Lai , Jun Cao , Yuelei Xiao , Manxia Tie , Zhenhai Huang , Bianlin Zhang , Yanan Hu
IPC分类号： H04L9/32
CPC分类号： H04W12/10 , H04L9/0838 , H04L9/3242 , H04L9/3273 , H04L63/123 , H04L2209/80
摘要： The present invention provides a method for protecting the first message of a security protocol and the method includes the following steps: 1) initialization step; 2) the initiating side sends the first message; 3) the responding side receives the first message. The method for protecting the first message of the security protocol provided by the present invention can implement that: 1) Pre-Shared Master Key (PSMK), which is shared by the initiating side and responding side, and the security parameter in the first message are bound by using computation function of Message Integrality Code (MIC) or Message Authentication Code (MAC), and thus the fabrication attack of the first message in the security protocol is avoided effectively; 2) during computing the MIC or MAC of the first message, only PSMK and the security parameter of the first message are selected to be computed, and thus the computation load of the initiating side and the responding side is effectively reduced and the computation resource is saved.
摘要翻译：本发明提供一种保护安全协议的第一消息的方法，该方法包括以下步骤：1）初始化步骤; 2）发起方发送第一个消息; 3）响应端接收第一条消息。用于保护本发明提供的安全协议的第一消息的方法可以实现：1）由发起端和响应侧共享的预共享主密钥（PSMK）和第一消息中的安全参数通过使用消息完整性代码（MIC）或消息认证码（MAC）的计算功能来限制，从而有效地避免了安全协议中的第一消息的制造攻击; 2）在计算第一个消息的MIC或MAC期间，仅选择PSMK和第一个消息的安全参数进行计算，从而有效减少发起方和响应方的计算负载，计算资源为保存

18. 发明授权

US08855018B2 Method for realizing convergent WAPI network architecture with split MAC mode 有权
标题翻译：用分割MAC模式实现融合WAPI网络架构的方法
公开(公告)号：US08855018B2
公开(公告)日：2014-10-07
申请号：US13203643
申请日：2009-12-14
申请人： Manxia Tie , Jun Cao , Zhiqiang Du , Xiaolong Lai , Li Ge , Zhenhai Huang
发明人： Manxia Tie , Jun Cao , Zhiqiang Du , Xiaolong Lai , Li Ge , Zhenhai Huang
IPC分类号： H04L12/28 , H04W12/06 , H04W12/04 , H04W84/12
CPC分类号： H04W12/06 , H04W12/04 , H04W84/12
摘要： A method for realizing a convergent Wireless Local Area Networks (WLAN) Authentication and Privacy Infrastructure (WAPI) network architecture with a split Medium Access Control (MAC) mode involves the steps: a split MAC mode for realizing WLAN Privacy Infrastructure (WPI) by a wireless terminal point is constructed through separating the MAC function and the WAPI function of the wireless access point apart to the wireless terminal point and an access controller; integration of a WAPI and a convergent WLAN network system architecture is realized under the split MAC mode that the wireless terminal point realizes WPI; the association connection process is performed among a station point, a wireless terminal point and an access controller; the process for announcing the start of performing the WLAN Authentication Infrastructure (WAI) protocol between the access controller and the wireless terminal point is performed; the process for performing the WAI protocol between the station point and the access controller is performed; the process for announcing the end of performing the WAI protocol between the access controller and the wireless terminal point is performed; the secret communication process is performed between the wireless terminal point and the station by using WPI.
摘要翻译：用于实现具有分离式媒体接入控制（MAC）模式的融合无线局域网（WLAN）认证和隐私基础设施（WAPI）网络架构的方法包括以下步骤：用于通过以下方式实现WLAN隐私基础设施（WPI）的分割MAC模式无线终端通过将无线接入点的MAC功能和WAPI功能分离到无线终端点和接入控制器来构建; 在无线终端实现WPI的分割MAC模式下实现WAPI和融合WLAN网络系统架构的集成; 在站点，无线终端点和访问控制器之间执行关联连接处理; 执行在接入控制器和无线终端点之间通知执行WLAN认证基础设施（WAI）协议的开始的过程; 执行在站点和访问控制器之间执行WAI协议的过程; 执行用于在接入控制器和无线终端点之间通知执行WAI协议的结束的过程; 通过使用WPI在无线终端点和站之间执行秘密通信处理。

19. 发明授权

US08732464B2 Bidirectional entity authentication method with introduction of online third party 有权
标题翻译：双向实体认证方法，引入在线第三方
公开(公告)号：US08732464B2
公开(公告)日：2014-05-20
申请号：US13392899
申请日：2009-12-29
申请人： Xiaolong Lai , Jun Cao , Manxia Tie , Yuelei Xiao , Zhenhai Huang
发明人： Xiaolong Lai , Jun Cao , Manxia Tie , Yuelei Xiao , Zhenhai Huang
IPC分类号： H04L9/32
CPC分类号： H04L9/3213 , H04L9/3263
摘要： An entity bidirectional authentication method by introducing an online third party includes the following steps: 1) an entity B sends a message 1 to an entity A; 2) the entity A sends a message 2 to a trusted third party TP; 3) the trusted third party TP verifies the validities of the entity A and the entity B; 4) after verifying the validities of the entity A and the entity B, the trusted third party TP returns a message 3 to the entity A; 5) the entity A sends a message 4 to the entity B; 6) after receiving the message 4, the entity B performs the verification to complete the authentication for the entity A; 7) the entity B sends a message 5 to the entity A; 8) after receiving the message 5, the entity A performs the verification to complete the authentication for the entity B.
摘要翻译：通过引入在线第三方的实体双向认证方法包括以下步骤：1）实体B向实体A发送消息1; 2）实体A向可信第三方TP发送消息2; 3）可信第三方TP验证实体A和实体B的有效性; 4）验证实体A和实体B的有效性后，可信第三方TP向实体A返回消息3; 5）实体A向实体B发送消息4; 6）接收到消息4后，实体B进行验证，完成实体A的认证; 7）实体B向实体A发送消息5; 8）接收到消息5后，实体A进行验证，完成实体B的认证。

20. 发明授权

US08625801B2 Authentication associated suite discovery and negotiation method 有权
标题翻译：认证相关套件发现和协商方法
公开(公告)号：US08625801B2
公开(公告)日：2014-01-07
申请号：US13133890
申请日：2009-12-08
申请人： Yanan Hu , Jun Cao , Yuelei Xiao , Manxia Tie , Zhenhai Huang , Xiaolong Lai
发明人： Yanan Hu , Jun Cao , Yuelei Xiao , Manxia Tie , Zhenhai Huang , Xiaolong Lai
IPC分类号： H04W12/06 , H04W12/04 , H04L9/32
CPC分类号： H04W12/04 , H04W12/06
摘要： An authentication associated suite discovery and negotiation method for ultra wide band network. The method includes the following steps of: 1) adding a pairwise temporal key PTK establishment IE and a group temporal key GTK distribution IE in an information element IE list of an initiator and a responder, and setting a corresponding information element identifier ID, and 2) an authentication associated process based on the authentication associated suite discovery and negotiation method. The authentication associated suite discovery and negotiation method for ultra wide band network provided by the present invention can provide the discovery and negotiation functions of a security solution to the network so as to satisfy all kinds of application requirements better when multiple pairwise temporal key PTK establishing plans or multiple group temporal key GTK distributing plans co-exist.
摘要翻译：用于超宽带网络的认证相关套件发现和协商方法。该方法包括以下步骤：1）在发起者和应答者的信息元素IE列表中添加成对的时间密钥PTK建立IE和组时间密钥GTK分布IE，并设置相应的信息元素标识符ID，2 ）基于认证相关套件发现和协商方法的认证关联过程。本发明提供的用于超宽带网络的认证相关套件发现和协商方法可以向网络提供安全解决方案的发现和协商功能，以便在多对成对临时密钥PTK建立计划时更好地满足各种应用需求或多组时态密钥GTK分发计划并存。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式