专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US07984291B2 Method for distributing certificates in a communication system 有权
标题翻译：在通信系统中分发证书的方法
公开(公告)号：US07984291B2
公开(公告)日：2011-07-19
申请号：US11350087
申请日：2006-02-09
申请人： Pasi Eronen , Nadarajah Asokan , Shreekanth Lakshmeshwar
发明人： Pasi Eronen , Nadarajah Asokan , Shreekanth Lakshmeshwar
IPC分类号： H04L29/06 , H04W4/00 , H04W36/00
CPC分类号： H04L63/061 , H04L63/08 , H04L63/0823 , H04L63/0892 , H04L63/12 , H04L63/162 , H04L63/164 , H04L2463/081 , H04W12/04 , H04W12/10
摘要： The invention relates to a method for delivering certificates in a communication system using Extensible Authentication Protocol (EAP). The identity of a mobile node is sent to a gateway from which the identity is sent to a network entity. In the network entity is selected at least one first certificate based on information relating to the mobile node. In the network entity is signed the at least one first certificate using a master key. The at least one first certificate is provided from the network entity to the mobile node.
摘要翻译：本发明涉及一种使用可扩展认证协议（EAP）在通信系统中传送证书的方法。将移动节点的身份发送到网关，从该网关将身份发送到网络实体。在网络实体中，基于与移动节点有关的信息来选择至少一个第一证书。在网络实体中使用主密钥对至少一个第一证书进行签名。从网络实体向移动节点提供至少一个第一证书。

32. 发明授权

US07920706B2 Method and system for managing cryptographic keys 有权
标题翻译：管理加密密钥的方法和系统
公开(公告)号：US07920706B2
公开(公告)日：2011-04-05
申请号：US10696495
申请日：2003-10-28
申请人： Nadarajah Asokan , Niemi Valtteri
发明人： Nadarajah Asokan , Niemi Valtteri
IPC分类号： H04L9/00
CPC分类号： H04L9/0866 , H04L9/0894 , H04L2209/60 , H04L2209/80
摘要： A key management of cryptographic keys has a data package including one or more cryptographic keys that are transferred to a personal device 100 from a secure processing point 150 of a device assembly line in order to store device specific cryptographic keys in the personal device 100. In response to the transferred data package, a backup data package is received by the secure processing point 150 from the personal device 100, which backup data package is the data package encrypted with a unique secret chip key stored in a tamper-resistant secret storage 125 of a chip 110 included in the personal device 100. The secure processing point 150 is arranged to store the backup data package, together with an associated unique chip identifier read from the personal device 100, in a permanent, public database 170.
摘要翻译：加密密钥的密钥管理具有包括从设备装配线的安全处理点150传送到个人设备100的一个或多个加密密钥的数据包，以便将设备专用加密密钥存储在个人设备100中。响应于所传送的数据包，安全处理点150从个人设备100接收备份数据包，该备份数据包是使用存储在防篡改秘密存储器125中的唯一秘密芯片密钥加密的数据包包括在个人设备100中的芯片110.安全处理点150被布置为将备份数据包与从个人设备100读取的相关联的唯一芯片标识符一起存储在永久的公共数据库170中。

33. 发明授权

US07913086B2 Method for remote message attestation in a communication system 有权
标题翻译：在通信系统中远程消息认证的方法
公开(公告)号：US07913086B2
公开(公告)日：2011-03-22
申请号：US11812635
申请日：2007-06-20
申请人： Kari Timo Juhani Kostiainen , Nadarajah Asokan
发明人： Kari Timo Juhani Kostiainen , Nadarajah Asokan
IPC分类号： H04L29/06
CPC分类号： H04L63/123 , G06F21/57 , H04L9/0877 , H04L9/3234
摘要： The invention relates to a method for remote attestation. In the method is created a first asymmetric key pair in a trusted platform module in an electronic device. A first public key and software platform state information are certified with an attestation identity key associated with the trusted platform module to produce a first certificate. A second asymmetric key pair is produced in an application within the electronic device. The second public key is certified with said first secret key to produce a second certificate. A message is signed with the second secret key to provide a message signature in the first electronic device. The message and the message signature, software platform state information, the first certificate and the second certificate are sent to a second electronic device.
摘要翻译：本发明涉及一种用于远程认证的方法。在该方法中，在电子设备中的可信平台模块中创建第一非对称密钥对。第一个公钥和软件平台状态信息通过与可信平台模块相关联的认证身份密钥进行认证，以生成第一个证书。在电子设备内的应用中产生第二非对称密钥对。第二个公钥通过第一个密钥进行认证，产生第二个证书。用第二密钥签名消息以在第一电子设备中提供消息签名。将消息和消息签名，软件平台状态信息，第一证书和第二证书发送到第二电子设备。

34. 发明申请

US20100266128A1 CREDENTIAL PROVISIONING 有权
标题翻译：资格认证
公开(公告)号：US20100266128A1
公开(公告)日：2010-10-21
申请号：US12738616
申请日：2007-10-16
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Aarne Rantala , Markku Kylanpaa
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Aarne Rantala , Markku Kylanpaa
IPC分类号： H04L9/08
CPC分类号： H04L63/0853 , H04L9/0833 , H04L9/3271 , H04L63/06 , H04W12/04
摘要： Disclosed is a method in a provisioning apparatus. The method comprises obtaining a family key, a family key defining a family; submitting the family key to a security element in a secure manner (2-2); using the family key for securing credential data; submitting said secured credential data to the security element (2-4); using the family key for binding an application to the family; and submitting said binding to the security element (2-5). Also a method in a related security element and related apparatuses, systems and computer programs are disclosed.
摘要翻译：公开了一种供应装置中的方法。该方法包括获得家庭密钥，定义家庭的家庭密钥; 以安全的方式将家庭密钥提交给安全要素（2-2）; 使用家庭密钥来确保凭证数据; 将所述安全凭证数据提交给安全元件（2-4）; 使用家庭密钥将申请绑定到家庭; 并将所述绑定提交给安全元件（2-5）。还公开了相关安全元件和相关装置，系统和计算机程序中的方法。

35. 发明授权

US07788493B2 Authenticating users 有权
标题翻译：认证用户
公开(公告)号：US07788493B2
公开(公告)日：2010-08-31
申请号：US11060374
申请日：2005-02-17
申请人： Risto Mononen , Nadarajah Asokan , Pekka Laitinen
发明人： Risto Mononen , Nadarajah Asokan , Pekka Laitinen
IPC分类号： H04L9/32
CPC分类号： H04L63/0421 , G06F21/335 , H04L63/0815 , H04L63/0823 , H04L63/083
摘要： A method of authenticating a user seeking access to a service from a service provider in a communication network, the method comprising: allocating to a user a plurality of service-specific identities for accessing respective services; issuing a request from the user, the request identifying the service to be accessed and including a public key of the user; at a certification authority, authenticating the request and issuing a public key certificate for binding the service-specific identity with the public key in the request, and returning the public key certificate to the user.
摘要翻译：一种认证在通信网络中从服务提供商寻求对服务的访问的用户的方法，所述方法包括：向用户分配用于访问相应服务的多个服务特定身份; 从所述用户发出请求，所述请求标识要访问的服务并且包括所述用户的公钥; 在认证机构认证请求，并发出公钥证书，用于在请求中与公钥绑定服务特定身份，并将公开密钥证书返回给用户。

36. 发明授权

US07529929B2 System and method for dynamically enforcing digital rights management rules 有权
标题翻译：动态执行数字版权管理规则的系统和方法
公开(公告)号：US07529929B2
公开(公告)日：2009-05-05
申请号：US10161082
申请日：2002-05-30
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Jorma Stenman , Jaakko Teinila
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Jorma Stenman , Jaakko Teinila
IPC分类号： H04L9/00 , H04L29/00 , H04L29/08 , H04L29/12
CPC分类号： H04L63/08 , G06F21/10 , G06Q20/3674 , H04L63/102 , H04L2463/101
摘要： A system and method for enforcing digital rights management (DRM) rules in a terminal, even when the requesting rendering application is already operating. Content, which may be encrypted, is received at the terminal and securely stored. On-demand authorization is effected for the rendering application that is requesting access to the content, using secure communications between a DRM engine within the terminal and an operating system within the terminal that is augmented with a security manager adapted to engage in such secure communications. If the rendering application is found to be authorized, the DRM rules are applied to determine whether the rendering application may access the content, and if so, the content is made available to the rendering application.
摘要翻译：一种用于在终端中执行数字权限管理（DRM）规则的系统和方法，即使当请求的呈现应用程序已经在运行时。可以加密的内容在终端处被接收并被安全地存储。对正在请求访问内容的呈现应用程序进行按需授权，使用终端内的DRM引擎与终端内的操作系统之间的安全通信，所述操作系统用适于参与这种安全通信的安全管理器来增强。如果发现渲染应用程序被授权，则应用DRM规则来确定呈现应用程序是否可以访问该内容，如果是，那么该内容可用于呈现应用程序。

37. 发明授权

US07207060B2 Method, system and computer program product for secure ticketing in a communications device 有权
标题翻译：用于通信设备中安全票务的方法，系统和计算机程序产品
公开(公告)号：US07207060B2
公开(公告)日：2007-04-17
申请号：US10051249
申请日：2002-01-22
申请人： Olli Immonen , Nadarajah Asokan , Panu S. Markkanen
发明人： Olli Immonen , Nadarajah Asokan , Panu S. Markkanen
IPC分类号： G06F7/04 , G06F7/58 , G06F15/16 , H04L9/00
CPC分类号： G07F7/1008 , G06Q20/04 , G06Q20/045 , G06Q20/1235 , G06Q20/341 , G06Q20/346 , G06Q20/35765 , G06Q20/3823 , G07F7/082 , G07F7/1083 , H04M2250/14
摘要： Method, system and computer program product for secure ticketing in a communications device. In particular, the method, system and computer program product utilizes cryptography and an external, read-write security element to securely transmit and store critical data utilized by users of a communications device. Using the present invention, third-parties can prevent the fraudulent use of third-party services without detection.
摘要翻译：用于通信设备中安全票务的方法，系统和计算机程序产品。特别地，方法，系统和计算机程序产品利用加密和外部读写安全元件来安全地传送和存储由通信设备的用户使用的关键数据。使用本发明，第三方可以防止在不检测的情况下欺骗性地使用第三方服务。

38. 发明授权

US07149895B1 Personal device, terminal, server and methods for establishing a trustworthy connection between a user and a terminal 有权
标题翻译：用于在用户和终端之间建立可靠连接的个人设备，终端，服务器和方法
公开(公告)号：US07149895B1
公开(公告)日：2006-12-12
申请号：US09496065
申请日：2000-02-01
申请人： Nadarajah Asokan , Herve C. Debar , Michael Steiner , Michael Waidner
发明人： Nadarajah Asokan , Herve C. Debar , Michael Steiner , Michael Waidner
IPC分类号： H04L9/00 , H04K1/00 , H04K1/10 , G06F7/04 , G06F17/30 , G06K9/00 , H04N7/167
CPC分类号： G06F21/34 , G06F21/305 , G06F21/335 , G06F2221/2103 , G06Q20/341 , G06Q20/3674 , G06Q20/40975 , G07F7/1008 , H04L63/0442 , H04L63/0853 , H04L63/18
摘要： The invention is related to a system which allows a user to authenticate unknown terminals. The invention uses a first authentication step wherein the terminal authenticates itself to a server. Depending on whether the personal device has its own output means, such as a loudspeaker or a screen, the final message, whether the terminal can be trusted or not, can be output on the personal device or on the terminal itself. In the case where the device has no output means of its own, this message can originate in the device and be transmitted from there to the terminal. The user can input authentication information into his personal device, which can then be fully or partially transmitted to the terminal. In the end, the terminal may use the transmitted information to give out the authenticity output message. After the first authentication step follows a second authentication step, wherein the server authenticates itself to the personal device, if there is one. Upon success of both authentication steps, the authenticity output message can be given to the user.
摘要翻译：本发明涉及允许用户认证未知终端的系统。本发明使用第一认证步骤，其中终端向服务器认证自身。根据个人设备是否具有其自己的输出装置，例如扬声器或屏幕，可以在个人设备或终端本身上输出终端是否可信任的最终消息。在设备没有自己的输出装置的情况下，该消息可以发起在设备中并从那里发送到终端。用户可以将认证信息输入到他的个人设备中，然后可将其全部或部分地传送到终端。最后，终端可以使用发送的信息来给出真实性输出消息。在第一认证步骤遵循第二认证步骤之后，其中服务器向个人设备认证自身，如果有的话。当两个认证步骤成功时，可以向用户提供真实性输出消息。

39. 发明申请

US20060253703A1 Method for distributing certificates in a communication system 有权
标题翻译：在通信系统中分发证书的方法
公开(公告)号：US20060253703A1
公开(公告)日：2006-11-09
申请号：US11350087
申请日：2006-02-09
申请人： Pasi Eronen , Nadarajah Asokan , Shreekanth Lakshmeshwar
发明人： Pasi Eronen , Nadarajah Asokan , Shreekanth Lakshmeshwar
IPC分类号： H04L9/00
CPC分类号： H04L63/061 , H04L63/08 , H04L63/0823 , H04L63/0892 , H04L63/12 , H04L63/162 , H04L63/164 , H04L2463/081 , H04W12/04 , H04W12/10
摘要： The invention relates to a method a method for delivering certificates in a communication system using Extensible Authentication Protocol (EAP). The identity of a mobile node is sent to a gateway from which the identity is sent to a network entity. In the network entity is selected at least one first certificate based on information relating to the mobile node. In the network entity is signed the at least one first certificate using a master key. The at least one first certificate is provided from the network entity to the mobile node.
摘要翻译：本发明涉及一种使用可扩展认证协议（EAP）在通信系统中传送证书的方法。将移动节点的身份发送到网关，从该网关将身份发送到网络实体。在网络实体中，基于与移动节点有关的信息来选择至少一个第一证书。在网络实体中使用主密钥对至少一个第一证书进行签名。从网络实体向移动节点提供至少一个第一证书。

40. 发明申请

US20050177577A1 Accessing data on remote storage servers 审中-公开
标题翻译：访问远程存储服务器上的数据
公开(公告)号：US20050177577A1
公开(公告)日：2005-08-11
申请号：US10769467
申请日：2004-01-30
申请人： Nadarajah Asokan , Tapio Suihko
发明人： Nadarajah Asokan , Tapio Suihko
IPC分类号： G06F7/00 , G06F17/30
CPC分类号： G06F16/10 , H04W4/18 , H04W74/00 , H04W88/16
摘要： This invention describes a methodology for accessing data on a legacy file server (or a remote storage server) by a communication device (e.g., a mobile device or a mobile phone) using an access gateway, wherein said communication device cannot support the legacy file system protocol. The basic idea of the invention is to provide an access gateway that functions as an application-level protocol translator in a situation when the communication device cannot support the legacy file system protocol for entering the legacy file server.
摘要翻译：本发明描述了一种使用接入网关由通信设备（例如，移动设备或移动电话）访问遗留文件服务器（或远程存储服务器）上的数据的方法，其中所述通信设备不能支持传统文件系统协议。本发明的基本思想是提供一种在通信设备不能支持传统文件系统协议进入旧文件服务器的情况下用作应用级协议转换器的接入网关。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式