专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

US20240137747A1 PROVIDING AND MANAGING MOBILE NETWORK OPERATOR PROFILES 审中-公开
公开(公告)号：US20240137747A1
公开(公告)日：2024-04-25
申请号：US18277530
申请日：2022-02-15
申请人： Irdeto B.V.
发明人： Sheng-Bo XU
IPC分类号： H04W8/20 , H04W12/0431 , H04W12/069
CPC分类号： H04W8/205 , H04W12/0431 , H04W12/069
摘要： There is described a method, at a server system, of providing a mobile network operator (MNO) profile to a client device. The client device has a SIM software application stored thereon so as to provide the client device with a secured software implementation of SIM card functionality. The method comprises: (a) based on a unique identifier of the client device, identifying a unique key, KSIM, of the SIM software application stored on the client device; (b) based on an MNO associated with the client device, identifying an unused MNO profile associated with the MNO; (c) encrypting the identified MNO profile so as to provide an encrypted MNO profile, wherein the encrypting comprises encrypting at least part of the identified MNO profile using KSIM; (d) generating an MNO profile download message comprising the encrypted MNO profile and the unique identifier of the client device; and (e) broadcasting the MNO profile download message over a broadcast network so as to enable the client device to access the MNO profile download message. There is also described a related method at a client device, as well as related computer programs and computer-readable media.

2. 发明公开

US20240095593A1 MACHINE LEARNING MODEL PROTECTION 审中-公开
公开(公告)号：US20240095593A1
公开(公告)日：2024-03-21
申请号：US18368209
申请日：2023-09-14
申请人： Irdeto B.V.
发明人： Robert DURAND , Philip EISEN , Thomas HICKIE
IPC分类号： G06N20/00
CPC分类号： G06N20/00
摘要： A machine learning model protection method comprising: generating, based on a set of parameters that define a machine learning model, an item of software which, when executed by one or more processors, provides an implementation for the machine learning model; and applying one or more software protection techniques to the item of software.

3. 发明公开

US20240045952A1 PROTECTION OF NEURAL NETWORKS AGAINST CLONING ATTACKS 审中-公开
公开(公告)号：US20240045952A1
公开(公告)日：2024-02-08
申请号：US18227589
申请日：2023-07-28
申请人： Irdeto B.V.
发明人： Peter ROELSE
IPC分类号： G06F21/55
CPC分类号： G06F21/554
摘要： A method of protecting an implementation of a neural network against a cloning attack, the neural network configured to generate a result based on an input sample from a predetermined domain of possible samples, the neural network trained to provide functionality corresponding to a subset of the domain, wherein the method comprises: receiving, from a user, a plurality of queries having a corresponding query sample from the domain and, for each query, performing a first test to determine whether or not the corresponding query sample is a member of the subset; performing a second test to identify whether the user is performing a cloning attack against the neural network, wherein the second test identifies that the user is performing a cloning attack against the neural network if a number of queries from the plurality of queries for which the corresponding query sample is determined to not be a member of the subset exceeds a first threshold value; and in response to the second test identifying that the user is performing a cloning attack against the neural network, performing one or more countermeasures for the cloning attack.

4. 发明公开

US20230367704A1 FUZZY TESTING A SOFTWARE SYSTEM 审中-公开
公开(公告)号：US20230367704A1
公开(公告)日：2023-11-16
申请号：US18144949
申请日：2023-05-09
申请人： Irdeto B.V.
发明人： Martin Soukup , Daniel Murdock , Lama Moukahal , Mohammad Zulkernine
IPC分类号： G06F11/36
CPC分类号： G06F11/3688 , G06F11/3644 , G06F11/3692
摘要： A method for a testing system to perform fuzzy testing of a software system, wherein the software system comprises a plurality of callable units and is arranged to receive input for the software system to process, the method comprising: determining, for each callable unit of the plurality of callable units, based on one or more security vulnerability metrics, a target number of times that callable unit is to be tested; initializing a ranked plurality of queues, each queue for storing one or more seeds, said initializing comprising storing one or more initial seeds in a corresponding queue of the ranked plurality of queues; performing a sequence of tests, wherein performing each test comprises: obtaining a seed from the highest ranked non-empty queue; performing a mutation process on the obtained seed to generate a test seed, wherein the mutation process is configured, at least in part, by mutation guidance information; providing the test seed as input to the software system for the software system to process; and evaluating the processing of the test seed by the software system to generate a result for the test; wherein each queue in the ranked plurality of queues has an associated seed addition criterion and wherein performing each test comprises either (a) adding the test seed to the highest ranked queue in the ranked plurality of queues for which the test seed meets the seed addition criterion associated with that queue; or (b) discarding the test seed if the test seed does not meet the seed addition criterion associated with any of the queues in the ranked plurality of queues; wherein the seed addition criteria are configured so that, if processing of a first test seed by the software system involves execution of, or an execution path approaching, a callable unit of interest and if processing of a second test seed by the software system does not involve execution of, or an execution path approaching, a callable unit of interest, then the queue to which the first test seed is added is of higher rank than the queue to which the second test seed is added, wherein a callable unit is a callable unit of interest if the current number of tests that have resulted in execution of that callable unit is less than the target number of times that callable unit is to be tested.

5. 发明授权

US11675880B2 Securing webpages, webapps and applications 有权
公开(公告)号：US11675880B2
公开(公告)日：2023-06-13
申请号：US17089848
申请日：2020-11-05
申请人： IRDETO B.V.
发明人： Benjamin Geoffrey Gidley , Catherine Chambers , Yaser Eftekhari Roozbehani , Yegui Cai , Yuan Xiang Gu
IPC分类号： G06F21/12 , G06F21/54 , G06F21/55 , G06F21/16 , H04L9/32 , G06F21/62
CPC分类号： G06F21/128 , G06F21/16 , G06F21/54 , G06F21/554 , G06F21/6245 , H04L9/3271 , H04L2209/16 , H04L2209/608
摘要： A method for securing a webpage or a webapp processed by a browser executing on a client system, the method comprising the browser executing an instance of white-box protected code, wherein execution of the instance of white-box protected code causes the client system to: generate a message comprising message data for use by a control system to perform one or more security tests, the control system communicably connected to the client system via a network; send the message to the control system to enable the control system to perform the one or more security tests using the message data; receive a response from the control system based, at least in part, on the message; and process the response.

6. 发明授权

US11599651B2 Data protection 有权
公开(公告)号：US11599651B2
公开(公告)日：2023-03-07
申请号：US16623424
申请日：2018-07-05
申请人： IRDETO B.V.
发明人： Peter Williams , Andrew Williams , Colin Hutchings
IPC分类号： G06F21/64 , G06F21/62 , G06F11/10
摘要： A computer-implemented method, in which an access request in relation to data is received. There is Error Correcting Code (ECC) data relating to the data, and the ECC data is configured to enable correction of multiple-bit errors spanning up to a predetermined number of consecutive bits of the data. The ECC data is configured to enable correction of multiple-bit errors spanning up to a predetermined number of consecutive bits of the data. A first integrity verification verifies the integrity of at least the data. If the first integrity verification procedure fails, an error analysis procedure is performed based on the data and the ECC data. Responsive to generation of corrected data by the error analysis procedure, a second integrity verification verifies the integrity of the corrected data. If the second integrity verification is successful, the access request is allowed using the corrected data.

7. 发明授权

US11514159B2 Method and system for preventing and detecting security threats 有权
公开(公告)号：US11514159B2
公开(公告)日：2022-11-29
申请号：US17546707
申请日：2021-12-09
申请人： IRDETO B.V.
发明人： Ron Vandergeest
IPC分类号： G06F21/55 , G06F21/54
摘要： A system and method is provided for implementing platform security on a consumer electronic device having an open development platform. The device is of the type which includes an abstraction layer operable between device hardware and application software. A secured software agent is provided for embedding within the abstraction layer forming the operating system. The secured software agent is configured to limit access to the abstraction layer by either blocking loadable kernel modules from loading, blocking writing to the system call table or blocking requests to attach debug utilities to certified applications or kernel components.

8. 发明申请

US20220171697A1 FUZZY TESTING A SOFTWARE SYSTEM 有权
公开(公告)号：US20220171697A1
公开(公告)日：2022-06-02
申请号：US17191791
申请日：2021-03-04
申请人： IRDETO B.V.
发明人： Lama MOUKAHAL , Mohammad ZULKERNINE
IPC分类号： G06F11/36 , G06F21/54 , G06N5/04
摘要： A method of fuzzy testing a software system, wherein the software system comprises a plurality of callable units and is arranged to receive input for the software system to process, the method comprising: determining, for each callable unit of the plurality of callable units, based on one or more security vulnerability metrics, a target number of times that callable unit is to be tested; initializing a ranked plurality of queues, each queue for storing one or more seeds, said initializing comprising storing one or more initial seeds in a corresponding queue of the ranked plurality of queues; performing a sequence of tests, wherein performing each test comprises: obtaining a seed from the highest ranked non-empty queue; performing a mutation process on the obtained seed to generate a test seed; providing the test seed as input to the software system for the software system to process; and evaluating the processing of the test seed by the software system to generate a result for the test; wherein each queue in the ranked plurality of queues has an associated seed addition criterion and wherein performing each test comprises either (a) adding the test seed to the highest ranked queue in the ranked plurality of queues for which the test seed meets the seed addition criterion associated with that queue; or (b) discarding the test seed if the test seed does not meet the seed addition criterion associated with any of the queues in the ranked plurality of queues; wherein the seed addition criteria are configured so that, if processing of a first test seed by the software system involves execution of, or an execution path approaching, a callable unit of interest and if processing of a second test seed by the software system does not involve execution of, or an execution path approaching, a callable unit of interest, then the queue to which the first test seed is added is of higher rank than the queue to which the second test seed is added, wherein a callable unit is a callable unit of interest if the current number of tests that have resulted in execution of that callable unit is less than the target number of times that callable unit is to be tested.

9. 发明授权

US11316898B2 Method and apparatus for policy-based management of assets 有权
公开(公告)号：US11316898B2
公开(公告)日：2022-04-26
申请号：US16022020
申请日：2018-06-28
申请人： IRDETO B.V.
发明人： Yaser Eftekhari Roozbehani , Clifford Liem
IPC分类号： H04L29/06 , H04L9/08 , H04L9/30 , H04L9/32 , H04W12/08 , H04W12/60
摘要： A method and system for managing shared use of an asset. An asset device and an owner device accomplish an initial setup procedure to register the owner with the asset. One or more secure policies are then sent from the owner device, or another device authorized to create policies, to one or more user devices. The policies express user conditions and limitations for using the asset. Subsequently, the user device transmits the secure policy to the asset device. Once the policy has been transferred from the user device to the asset device, user associated with the user device can request use of the asset and will be granted the requested use if the requested use is permitted by the policy.

10. 发明授权

US11263316B2 Securing software routines 有权
公开(公告)号：US11263316B2
公开(公告)日：2022-03-01
申请号：US16545925
申请日：2019-08-20
申请人： IRDETO B.V.
发明人： Yaser Eftekhari Roozbehani
IPC分类号： G06F21/12 , G06F21/54 , G06F21/56 , G06F21/57 , G06F21/14
摘要： A method of securing a software routine implemented in a software instance executing in an execution environment, the method comprising: initializing a code block of the software instance with a reference to the software routine by storing the reference such that the stored reference is inaccessible to code outside of the code block; and returning a reference to the code block, the reference to the code block used by the software instance outside of the code block to invoke the software routine; wherein the code block is configured to: (a) invoke the software routine using the stored reference, and, (b) after a predetermined number of invocations of the software routine by the code block, modify the stored reference so as to prevent further invocation of the software routine by the code block.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式