专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20100031021A1 METHOD FOR IMPROVED KEY MANAGEMENT FOR ATMS AND OTHER REMOTE DEVICES 有权
标题翻译：改进主要管理和其他远程设备的方法
公开(公告)号：US20100031021A1
公开(公告)日：2010-02-04
申请号：US11534232
申请日：2006-09-22
申请人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kurt S. Jacobsen , Michael J. Kelly , Mark D. Marik , Jesper Wiese
发明人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kurt S. Jacobsen , Michael J. Kelly , Mark D. Marik , Jesper Wiese
IPC分类号： H04L9/00 , G06F21/00
CPC分类号： H04L9/3242 , H04L9/0637 , H04L9/0822 , H04L9/088 , H04L9/3247 , H04L63/0435 , H04L63/062 , H04L63/0823 , H04L63/123 , H04L63/20
摘要： A method, article, and system for providing an effective implementation of a data structure comprising instructions that are cryptographically protected against alteration or misuse, wherein the instructions further comprise a trusted block that defines specific key management policies that are permitted when an application program employs the trusted block in application programming interface (API) functions to generate or export symmetric cryptographic keys. The trusted block has a number of fields containing rules that provide an ability to limit how the trusted block is used, thereby reducing the risk of the trusted block being employed in unintended ways or with unintended keys.
摘要翻译：一种用于提供数据结构的有效实现的方法，制品和系统，所述数据结构包括密码保护以防止改变或误用的指令，其中所述指令还包括定义在应用程序采用所述应用程序时允许的特定密钥管理策略的可信任块应用程序编程接口（API）中的可信块功能用于生成或导出对称加密密钥。受信任的块具有包含提供限制如何使用受信任块的能力的规则的字段，从而降低以非预期的方式或非预期密钥使用可信块的风险。

22. 发明申请

US20080077794A1 METHOD FOR CONTROLLING SECURITY FUNCTION EXECUTION WITH A FLEXIBLE, ENTENDABLE, AND NON-FORGABLE BLOCK 失效
公开(公告)号：US20080077794A1
公开(公告)日：2008-03-27
申请号：US11534236
申请日：2006-09-22
申请人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kurt S. Jacobsen , Michael J. Kelly , Mark D. Marik , Jesper Wiese
发明人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kurt S. Jacobsen , Michael J. Kelly , Mark D. Marik , Jesper Wiese
IPC分类号： H04N7/16 , H04L9/00 , H04L9/32 , G06F17/30 , G06F7/04 , G06K9/00 , H03M1/68 , H04K1/00
CPC分类号： H04L9/0822 , H04L9/088 , H04L9/3242 , H04L9/3247 , H04L2209/04 , H04L2209/34
摘要： A method, article, and system for providing an effective implementation of data structures, and application programming interface (API) functions that allow secure execution of functions behind a secure boundary. The controlling mechanism is a flexible, extendable, and non-forgeable block that details how values and parameters behind the secure boundary can be changed. The invention allows for one entity to execute a security function that will normally require extensive authorizations or dual or multiple control. The method and system comprise instructions that are cryptographically protected against alteration or misuse, wherein the instructions further comprise a trusted block that defines security policies that are permitted when an application program employs the trusted block in APIs. The trusted block has a number of fields containing rules that provide an ability to limit how the trusted block is used, thereby reducing the risk of the trusted block being employed in unintended ways. This trusted block controls the critical values or parameters behind the secure boundary. Cryptographically secured data structures are provided that allow for breaking up the instructions in the trusted blocks in a number of steps without reducing the level of security. Systems that make use of the trusted block must provide two API functions; one that encapsulates the block under at least dual control, and one that process the instructions or rules in the trusted block. In particular the invention provides a method, article, and system for the effective implementation for securely transferring symmetric encryption keys to remote devices, such as Automated Teller Machines (ATMs), PIN entry devices, and point of sale terminals. It may also be used to exchange symmetric keys with another cryptographic system of any type, such as a Host Security Module (HSM) in a computer server.

23. 发明授权

US08953789B2 Combining key control information in common cryptographic architecture services 有权
标题翻译：将密钥控制信息结合在通用的密码体系结构服务中
公开(公告)号：US08953789B2
公开(公告)日：2015-02-10
申请号：US13150448
申请日：2011-06-01
申请人： Todd W. Arnold , Carsten D. Frehr , Richard V. Kisley
发明人： Todd W. Arnold , Carsten D. Frehr , Richard V. Kisley
IPC分类号： H04L9/00
CPC分类号： H04L9/088 , H04L9/0877 , H04L2209/56
摘要： A system includes a processor configured to perform a method, the method comprising receiving a first key token, second key token and a request to combine the first key token with the second key token, identifying a key type of the first key token and a key type of the second key token, determining whether the key type of the first key token may be combined with the key type of the second key token, combining the first key token with the second key token to create a third key token responsive to determining that the key type of the first key token may be combined with the key type of the second key token, and outputting the third key token.
摘要翻译：系统包括被配置为执行方法的处理器，该方法包括：接收第一密钥令牌，第二密钥令牌和将第一密钥令牌与第二密钥令牌组合的请求，识别第一密钥令牌的密钥类型和密钥类型的第二密钥令牌，确定第一密钥令牌的密钥类型是否可以与第二密钥令牌的密钥类型组合，将第一密钥令牌与第二密钥令牌组合以创建第三密钥令牌，以响应于确定可以将第一密钥令牌的密钥类型与第二密钥令牌的密钥类型组合，并输出第三密钥令牌。

24. 发明授权

US08789210B2 Key usage policies for cryptographic keys 失效
标题翻译：加密密钥的密钥使用策略
公开(公告)号：US08789210B2
公开(公告)日：2014-07-22
申请号：US13100693
申请日：2011-05-04
申请人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Michael J. Kelly , Kenneth B. Kerr , Richard V. Kisley , Eric D. Rossman , Eric B. Smith
发明人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Michael J. Kelly , Kenneth B. Kerr , Richard V. Kisley , Eric D. Rossman , Eric B. Smith
IPC分类号： G06F11/00
CPC分类号： G06F21/602 , H04L9/088 , H04L9/0897
摘要： A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to usage of the key material populating one or more key usage fields that define attributes that limit actions that may be performed with the key material.
摘要翻译：提供了一种用于安全密钥管理的计算机程序产品。计算机程序产品包括可由处理电路读取的有形存储介质，并且存储用于由处理电路执行的用于创建令牌并用密钥材料填充令牌的指令，以及将密钥控制信息绑定到密钥材料的指令。密钥控制信息包括关于填充一个或多个密钥使用字段的密钥材料的使用的信息，所述密钥使用字段定义限制可以用密钥材料执行的动作的属性。

25. 发明申请

US20120237023A1 Secure Key Management 有权
标题翻译：安全密钥管理
公开(公告)号：US20120237023A1
公开(公告)日：2012-09-20
申请号：US13047344
申请日：2011-03-14
申请人： Todd W. Arnold , Elizabeth A. Dames , Thomas J. Dewkett , Carsten D. Frehr , Michael J. Kelly , Kenneth B. Kerr , Richard V. Kisley , Eric D. Rossman , Eric B. Smith
发明人： Todd W. Arnold , Elizabeth A. Dames , Thomas J. Dewkett , Carsten D. Frehr , Michael J. Kelly , Kenneth B. Kerr , Richard V. Kisley , Eric D. Rossman , Eric B. Smith
IPC分类号： H04L9/00
CPC分类号： H04L9/0897
摘要： A system for implementing computer security is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method that includes creating a token and populating a payload section of the token with key material and selecting a wrapping method that specifies how the key material is securely bound to key control information. A structure of the key control information in the token is independent of the wrapping method. Implementing computer security also includes wrapping the key material and binding key control information to the key material in the token. The key control information includes information relating to usage and management of the key material.
摘要翻译：提供了一种实现计算机安全的系统。该系统包括计算机处理器和被配置为在计算机处理器上执行的应用程序，该应用程序实现一种方法，该方法包括使用密钥材料创建令牌和填充令牌的有效载荷部分，并且选择包装方法，该方法指定密钥材料安全地绑定到关键控制信息。令牌中的关键控制信息的结构与包装方法无关。实施计算机安全还包括将密钥材料和密钥控制信息绑定到令牌中的密钥材料。关键控制信息包括与密钥材料的使用和管理有关的信息。

26. 发明申请

US20120185699A1 SPACE-EFFICIENT ENCRYPTION WITH MULTI-BLOCK BINDING 审中-公开
标题翻译：空间有效加密多块绑定
公开(公告)号：US20120185699A1
公开(公告)日：2012-07-19
申请号：US13007267
申请日：2011-01-14
申请人： Todd W. Arnold
发明人： Todd W. Arnold
IPC分类号： G06F12/14
CPC分类号： H04L9/0822
摘要： Exemplary embodiments include an encryption method in a computer system having a processor and a memory operatively coupled to the processor, the method including receiving a cleartext key in the memory, the encryption key having a plurality of segments including segment K1 and segment K2, computing in the processor a hash of the segment K2, truncating in the processor the hash of the segment K2, computing in the processor an exclusive-or, K1′ of the segment K1 and the truncated hash of the segment K2, filling a buffer in the memory with K1′ followed by the segment K2 and encrypting the buffer to generate a wrapped key.
摘要翻译：示例性实施例包括具有处理器和可操作地耦合到处理器的存储器的计算机系统中的加密方法，所述方法包括在存储器中接收明文密钥，加密密钥具有包括段K1和段K2的多个段，计算处理器是段K2的散列，在处理器中截断段K2的散列，在处理器中计算段K1的独占或K1'和段K2的截断散列，填充存储器中的缓冲区与K1'后跟片段K2并对缓冲器进行加密以产生包装密钥。

27. 发明授权

US07779258B2 Method for controlling security function execution with a flexible, extendable, and non-forgable block 失效
标题翻译：用灵活，可扩展和不可阻止的块来控制安全功能执行的方法
公开(公告)号：US07779258B2
公开(公告)日：2010-08-17
申请号：US11534236
申请日：2006-09-22
申请人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kurt S. Jacobsen , Michael J. Kelly , Mark D. Marik , Jesper Wiese
发明人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kurt S. Jacobsen , Michael J. Kelly , Mark D. Marik , Jesper Wiese
IPC分类号： H04N7/16 , H04L9/00 , H04L9/32 , G06F17/30 , G06F7/04 , G06K9/00 , H03M1/68 , H04K1/00
CPC分类号： H04L9/0822 , H04L9/088 , H04L9/3242 , H04L9/3247 , H04L2209/04 , H04L2209/34
摘要： A method, article, and system for providing an effective implementation of data structures, and application programming interface (API) functions that allow secure execution of functions behind a secure boundary. The controlling mechanism is a flexible, extendable, and non-forgeable block that details how values and parameters behind the secure boundary can be changed. The invention allows for one entity to execute a security function that will normally require extensive authorizations or dual or multiple control. The method and system comprise instructions that are cryptographically protected against alteration or misuse, wherein the instructions further comprise a trusted block that defines security policies that are permitted when an application program employs the trusted block in APIs. The trusted block has a number of fields containing rules that provide an ability to limit how the trusted block is used, thereby reducing the risk of the trusted block being employed in unintended ways.
摘要翻译：一种用于提供有效实施数据结构的方法，文章和系统，以及允许安全执行安全边界后面的功能的应用程序编程接口（API）功能。控制机制是一个灵活，可扩展和不可伪造的块，详细介绍了安全边界背后的值和参数如何改变。本发明允许一个实体执行通常需要广泛授权或双重或多重控制的安全功能。所述方法和系统包括密码保护以防止改变或误用的指令，其中所述指令还包括定义在应用程序在API中使用所述可信块时允许的安全策略的可信块。可信块具有包含规则的多个字段，这些规则提供了限制如何使用受信任块的能力，从而降低以非预期的方式使用可信块的风险。

28. 发明授权

US4562076A Chewing gum with coating of thaumatin or monellin and method 失效
标题翻译：口香糖，含有马齿苋或莫奈林的涂层及方法
公开(公告)号：US4562076A
公开(公告)日：1985-12-31
申请号：US556092
申请日：1983-12-01
申请人： Todd W. Arnold , Mansukh M. Patel
发明人： Todd W. Arnold , Mansukh M. Patel
IPC分类号： A23G4/00 , A23G4/10 , A23G4/14 , A23G4/20 , A23L27/00 , A23L27/30 , A23G3/30
CPC分类号： A23G4/14 , A23G4/10 , A23G4/20
摘要： The application of thaumatin or monellin to the surface of a chewing gum composition comprising gum base, sweetener and flavoring provides flavor and sweetness potentiation. The thaumatin or monellin is present in an amount within the range of from about 0.5 to about 100 ppm by weight of the chewing gum composition and is conveniently applied as a rolling compound to the surface of the gum.
摘要翻译：将甜蛋白或蒙奈林应用于包含胶基，甜味剂和调味剂的口香糖组合物的表面提供风味和甜味增强作用。曲马甜或蒙乃宁以口香糖组合物重量的约0.5至约100ppm的范围存在，并且方便地作为滚动化合物施用于胶质表面。

29. 发明授权

US08782397B2 Compact attribute for cryptographically protected messages 失效
标题翻译：密码保护的邮件的紧凑属性
公开(公告)号：US08782397B2
公开(公告)日：2014-07-15
申请号：US12985419
申请日：2011-01-06
申请人： Todd W. Arnold , Phillip H. Griffin
发明人： Todd W. Arnold , Phillip H. Griffin
IPC分类号： H04L9/32
CPC分类号： H04L9/3247 , H04L9/321
摘要： A system and associated method for verifying a signature of a signed message having a compact attribute. Components of the compact attribute of the signed message appear in a predefined order within the compact attribute, and are identified by an object identifier associated with the compact attribute. A processing flag and a security assertion are among the components of the compact message. The processing flag directs rules to process the security assertion. The security assertion is made by an authority trusted by both a sender and a recipient of the signed message. The recipient validates the signature of the signed message based on the processing flag and the security assertion recovered from the compact attribute.
摘要翻译：一种用于验证具有紧凑属性的签名消息的签名的系统和相关联的方法。签名消息的紧凑属性的组件以紧凑属性中的预定义顺序出现，并且由与紧凑属性相关联的对象标识符标识。处理标志和安全断言是紧凑消息的组成部分之一。处理标志指示规则来处理安全断言。安全声明由签名消息的发送者和收件人信任的机构进行。收件人根据处理标志和从compact属性恢复的安全断言来验证签名消息的签名。

30. 发明授权

US08634561B2 Secure key management 失效
标题翻译：安全密钥管理
公开(公告)号：US08634561B2
公开(公告)日：2014-01-21
申请号：US13100354
申请日：2011-05-04
申请人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kenneth B. Kerr , Richard V. Kisley , Michael J. Kelly , Eric D. Rossman , Eric B. Smith
发明人： Todd W. Arnold , Elizabeth A. Dames , Carsten D. Frehr , Kenneth B. Kerr , Richard V. Kisley , Michael J. Kelly , Eric D. Rossman , Eric B. Smith
IPC分类号： G06F21/00
CPC分类号： H04L9/088 , H04L9/0897 , H04L2209/56
摘要： A system for implementing secure key management is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method. The method includes populating a section of information associated with a key, the section being populated with information relating to how the key was created. The method also includes populating the section with information relating to how the key was acquired by a secure module; and binding the section to the key, wherein the key is encrypted.
摘要翻译：提供了一种实现安全密钥管理的系统。该系统包括计算机处理器和被配置为在计算机处理器上执行实施方法的应用的应用。该方法包括填充与密钥相关联的一部分信息，该部分填充与如何创建密钥相关的信息。该方法还包括使用与安全模块如何获取密钥有关的信息来填充该部分; 以及将所述部分绑定到所述密钥，其中所述密钥被加密。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式