专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08762707B2 Authorization, authentication and accounting protocols in multicast content distribution networks 有权
标题翻译：组播内容分发网络中的授权，认证和计费协议
公开(公告)号：US08762707B2
公开(公告)日：2014-06-24
申请号：US12460114
申请日：2009-07-14
申请人： Thomas J. Killian , Mark W. Altom , Juan A. Garay , Douglas Nortz , David J. Segelstein
发明人： Thomas J. Killian , Mark W. Altom , Juan A. Garay , Douglas Nortz , David J. Segelstein
IPC分类号： H04L9/00
CPC分类号： H04L9/3213 , H04L9/0825 , H04L12/185 , H04L2209/60
摘要： An end user computer is assigned a multicast content distribution group by a network service intelligence platform. The network service intelligence platform authenticates a token sent by the user and signed by a third part content controller, and provides the user with credentials for joining the group. The credentials include an authorization key as well as identifications of the user and the requested content. The credentials are encrypted and authenticated by the third party content controller. The user includes the encrypted and authenticated credentials in a join request sent to a network resource, such as an edge router. After verifying the credentials, the network resource adds the end user computer to the multicast group.
摘要翻译：最终用户计算机由网络服务智能平台分配给多播内容分发组。网络服务智能平台认证由用户发送并由第三方内容控制器签名的令牌，为用户提供加入组的凭据。凭证包括授权密钥以及用户的标识和所请求的内容。证书由第三方内容控制器加密和认证。用户在发送到诸如边缘路由器的网络资源的加入请求中包括加密和认证的凭证。验证凭据后，网络资源将最终用户计算机添加到组播组。

2. 发明授权

US08452984B2 Message authentication code pre-computation with applications to secure memory 有权
标题翻译：消息认证代码预先计算与应用程序以保护内存
公开(公告)号：US08452984B2
公开(公告)日：2013-05-28
申请号：US12229987
申请日：2008-08-28
申请人： Juan A. Garay , Vladimir Kolesnikov , Hubert Rae McLellan
发明人： Juan A. Garay , Vladimir Kolesnikov , Hubert Rae McLellan
IPC分类号： G06F11/30
CPC分类号： G06F21/71 , H04L9/0631 , H04L9/0643 , H04L9/3242
摘要： A method comprising the steps of creating a random permutation of data from a data input by executing at least one of a Pseudo-Random Permutation (PRP) and a Pseudo-Random Function (PRF), creating a first data block by combining the random permutation of data with a received second data block and executing an ε-differentially uniform function on the result of the combination, XORing the result of the ε-DU function evaluation with a secret key, and reducing the first data block to a first message authentication code.
摘要翻译：一种方法，包括以下步骤：通过执行伪随机置换（PRP）和伪随机函数（PRF）中的至少一个来创建来自数据输入的数据的随机置换，通过组合随机排列来创建第一数据块的数据与所接收的第二数据块并且对所述组合的结果执行ε-差分均匀的函数，使用秘密密钥对所述epsilon-DU功能评估的结果进行异或，并将所述第一数据块减少到第一消息认证码。

3. 发明申请

US20120011007A1 Mobile Payment Using DTMF Signaling 审中-公开
标题翻译：使用DTMF信令进行移动支付
公开(公告)号：US20120011007A1
公开(公告)日：2012-01-12
申请号：US12831951
申请日：2010-07-07
申请人： Charles Douglas Blewett , Megan Blewett , Juan A. Garay , Vincent C. Grosso , Robert C. Haarde , Thomas Killian , Simon Urbanek , Eric Cheung
发明人： Charles Douglas Blewett , Megan Blewett , Juan A. Garay , Vincent C. Grosso , Robert C. Haarde , Thomas Killian , Simon Urbanek , Eric Cheung
IPC分类号： G06Q20/00 , G10L17/00 , H04L12/56 , G06F17/30
CPC分类号： G06Q20/20 , G06Q20/3272
摘要： Systems and methods are disclosed for mobile payment using dual-tone multi-frequency (DTMF) signals. A mobile device equipped with at least a speaker and an input is used to connect to a server on the mobile network. Upon authentication of a user of the mobile device, the server generates the payment key, translates the key to DTMF signals, and plays the DTMF signals over the speaker of the mobile device. The user holds the mobile device speaker close to a microphone of a DTMF scanner at a POS terminal. The DTMF scanner includes logic that extracts the payment key from the DTMF signals, and the POS terminal uses the payment key to bill the user. The POS terminal transmits the bill with the payment key to the server on the network. The server ensures that the key is active, and debits an account for the user based on the amount presented in the bill. The key is de-activated after a specified time period or one use, whichever occurs first.
摘要翻译：公开了使用双音多频（DTMF）信号的移动支付的系统和方法。配备有至少扬声器和输入的移动设备用于连接到移动网络上的服务器。在对移动设备的用户进行认证时，服务器生成支付密钥，将密钥转换为DTMF信号，并通过移动设备的扬声器播放DTMF信号。用户将移动设备扬声器保持在POS终端处的DTMF扫描器的麦克风附近。 DTMF扫描器包括从DTMF信号中提取支付密钥的逻辑，POS终端使用支付密钥向用户收费。 POS终端将支付密钥的账单发送到网络上的服务器。服务器确保密钥是活动的，并根据帐单中显示的金额为用户借记帐户。密钥在指定的时间段或一次使用后取消激活，以先到者为准。

4. 发明申请

US20110016307A1 Authorization, authentication and accounting protocols in multicast content distribution networks 有权
标题翻译：组播内容分发网络中的授权，认证和计费协议
公开(公告)号：US20110016307A1
公开(公告)日：2011-01-20
申请号：US12460114
申请日：2009-07-14
申请人： Thomas J. Killian , Mark W. Altom , Juan A. Garay , Douglas Nortz , David J. Segelstein
发明人： Thomas J. Killian , Mark W. Altom , Juan A. Garay , Douglas Nortz , David J. Segelstein
IPC分类号： H04L9/00 , H04L29/06
CPC分类号： H04L9/3213 , H04L9/0825 , H04L12/185 , H04L2209/60
摘要： An end user computer is assigned a multicast content distribution group by a network service intelligence platform. The network service intelligence platform authenticates a token sent by the user and signed by a third part content controller, and provides the user with credentials for joining the group. The credentials include an authorization key as well as identifications of the user and the requested content. The credentials are encrypted and authenticated by the third party content controller. The user includes the encrypted and authenticated credentials in a join request sent to a network resource, such as an edge router. After verifying the credentials, the network resource adds the end user computer to the multicast group.
摘要翻译：最终用户计算机由网络服务智能平台分配给多播内容分发组。网络服务智能平台认证由用户发送并由第三方内容控制器签名的令牌，为用户提供加入组的凭据。凭证包括授权密钥以及用户的标识和所请求的内容。证书由第三方内容控制器加密和认证。用户在发送到诸如边缘路由器的网络资源的加入请求中包括加密和认证的凭证。验证凭据后，网络资源将最终用户计算机添加到组播组。

5. 发明授权

US07412055B2 Method and system for fair exchange of user information 有权
标题翻译：公平交换用户信息的方法和系统
公开(公告)号：US07412055B2
公开(公告)日：2008-08-12
申请号：US10611771
申请日：2003-06-30
申请人： Juan A. Garay , Carl B. Pomerance
发明人： Juan A. Garay , Carl B. Pomerance
IPC分类号： H04L9/00
CPC分类号： G06Q20/382 , H04L9/0819 , H04L9/3033 , H04L9/3247 , H04L2209/16 , H04L2209/56
摘要： A method and system for a fair exchange of user information over a network is disclosed. The method comprises the steps of: transmitting over the network the user information encoded in association with a hidden value selected as one of a plurality of values distributed in a sequence wherein a difference between adjacent ones of said values increases and decreases symmetrically about one of the values of a known order; transmitting over said network a first set of the values and a last value in the sequence, wherein the values in said first set have increasing differences between adjacent ones of the values; and transmitting, individually, and in response to receipt of the other user's values, the remaining values in said sequence.
摘要翻译：公开了一种通过网络公平交换用户信息的方法和系统。该方法包括以下步骤：通过网络传输用户信息，该用户信息与被选择为以下列顺序分布的多个值中的一个值相关联的隐藏值进行编码，其中相邻的所述值之间的差值对称地增加，并且关于已知订单的价值; 通过所述网络发送所述值的第一组和所述序列中的最后值，其中所述第一组中的值在相邻值之间具有增加的差异; 并且单独地并且响应于接收到其他用户的值而发送所述序列中的剩余值。

6. 发明授权

US07023998B2 Cryptographic key processing and storage 有权
公开(公告)号：US07023998B2
公开(公告)日：2006-04-04
申请号：US09823042
申请日：2001-03-30
申请人： Juan A. Garay , Bjorn M. Jakobsson , David M. Kristol , Semyon B. Mizikovsky
发明人： Juan A. Garay , Bjorn M. Jakobsson , David M. Kristol , Semyon B. Mizikovsky
IPC分类号： H04L9/00
CPC分类号： G06F21/602 , G06F2221/2107 , H04L9/0827 , H04L9/0891 , H04L2209/60
摘要： A method and apparatus enhancing the security of an encrypted cryptographic key by storing its key re-transforming information in a decryption store that is separate from a cryptographic key store, which stores the encrypted cryptographic key, from which accessing circuitry is able to access the encrypted cryptographic key. The cryptographic key store may be a disk drive of a computer, the decryption store may be a network access card installed in that computer or a mobile terminal coupled to that computer, and the accessing circuitry may be the computer's controller. Decryption of the encrypted cryptographic key is carried out in the decryption store, as is the subsequent encryption or decryption using the decrypted cryptographic key. The accessing circuitry communicates with the decryption store exclusively via a predetermined interface, where the interface does not allow the accessing circuitry access to the cryptographic key and to at least a portion of the key re-transforming information from the decryption store. Thus, the encrypted cryptographic key can be stored relatively insecurely; while the security of the cryptographic key is maintained at a very high level because there is no native capability for the computer to randomly read information from the network access card or the mobile terminal.

7. 发明授权

US06839436B1 Method for providing long-lived broadcast encrypton 有权
标题翻译：提供长寿播放加密的方法
公开(公告)号：US06839436B1
公开(公告)日：2005-01-04
申请号：US09688490
申请日：2000-10-16
申请人： Juan A. Garay , Jessica N. Staddon , Avishai Wool
发明人： Juan A. Garay , Jessica N. Staddon , Avishai Wool
IPC分类号： H04L9/08 , H04L9/00 , H04K1/00
CPC分类号： H04L9/0891 , H04L9/083 , H04L2209/601
摘要： A long-lived broadcast encryption method that adapts to the presence of compromised keys and continues to broadcast securely to privileged sets of users over time. In one aspect, a method for providing long-lived broadcast encryption comprises the steps of: allocating, to each of a plurality of subscribers, a corresponding set of subscriber keys; broadcasting encrypted content to the plurality of subscribers using a set of broadcast keys, wherein the encrypted content is decoded by a given subscriber using the subscriber's corresponding set of subscriber keys; modifying the set of broadcast keys, which are used for broadcasting encrypted content, by excluding compromised subscriber keys; and updating a set of subscriber keys corresponding to at least one subscriber when the at least one subscriber's set of subscriber keys comprises an amount of active keys that falls below a first predetermined threshold. In a long-lived broadcast encryption scheme, for any positive fraction β, a plurality of parameter values may be selected, a priori, in such a way to ensure that a steady state is achieved wherein, at most β of the total number of issued cards need to be replaced in a given recarding session.
摘要翻译：一种长寿命的广播加密方法，适应存在受损密钥，并随着时间的推移继续安全地广播到特权用户组。一方面，一种用于提供长寿命广播加密的方法包括以下步骤：向多个用户中的每一个分配相应的一组用户密钥; 使用一组广播密钥将加密的内容广播到所述多个订户，其中所述加密的内容由给定的订户使用订户的相应订户密钥集进行解码; 通过排除受损的用户密钥来修改用于广播加密内容的广播密钥集合; 以及当所述至少一个用户的订户密钥组包括低于第一预定阈值的活动密钥的量时，更新与至少一个订户对应的一组订户密钥。在长寿命的广播加密方案中，对于任何正分数β，可以先验地选择多个参数值，以确保实现稳定状态的方式，其中最多发布的总数为β 需要在给定的罢工会议中更换卡片。

8. 发明授权

US5598529A Computer system resilient to a wide class of failures 失效
标题翻译：计算机系统适应各种各样的故障
公开(公告)号：US5598529A
公开(公告)日：1997-01-28
申请号：US416594
申请日：1995-04-03
申请人： Juan A. Garay , Kenneth J. Perry
发明人： Juan A. Garay , Kenneth J. Perry
IPC分类号： G06F11/18 , G06F11/00 , G06F15/16 , G06F11/34
CPC分类号： G06F11/182
摘要： This invention includes a consensus protocol, a broadcast protocol and a fault tolerant computer system created by using the two protocols together in combination. The protocols and system use the minimum number of processors to create a system tolerant of concurrent processor crash and byzantine failures. The protocols are subject to certain validity conditions. The system in the state of consensus is guaranteed to have all non-faulty processors in agreement as to what action the system should take. The system and protocols can tolerate up to t total number of processor failures, no more than b of which may fail in the byzantine mode.
摘要翻译：本发明包括共同协议，广播协议和通过组合使用两个协议而创建的容错计算机系统。协议和系统使用最少数量的处理器来创建容错并发处理器崩溃和拜占庭故障的系统。协议受到某些有效性条件的约束。协调一致的制度保证所有无故障的处理器对于系统应采取的行动达成一致。系统和协议可以容忍最多达到总处理器故障数量，其中不超过b的拜占庭模式可能会失败。

9. 发明申请

US20130097682A1 Authentication Techniques Utilizing a Computing Device 有权
标题翻译：使用计算设备的认证技术
公开(公告)号：US20130097682A1
公开(公告)日：2013-04-18
申请号：US13272926
申请日：2011-10-13
申请人： Ilija Zeljkovic , Robert J. Andres , Jerry Birkes , Alton W. Drake, II , Juan A. Garay , Brian Novack , Amanda Joy Stent , Gary A. Toretti , Jay Wilpon , James Whitescarver
发明人： Ilija Zeljkovic , Robert J. Andres , Jerry Birkes , Alton W. Drake, II , Juan A. Garay , Brian Novack , Amanda Joy Stent , Gary A. Toretti , Jay Wilpon , James Whitescarver
IPC分类号： G06F7/04 , H04L9/32 , G06F15/16
CPC分类号： H04L63/0884 , G06F3/167 , H04L9/3231 , H04L9/3234 , H04L63/0861
摘要： A pre-registration procedure is utilized to create a user profile for a user of a multi-factor authentication (“MFA”) service. A client application installation procedure is utilized to install a client application on a computing device that is to be utilized as an authentication factor for the MFA service. A computing device enrollment procedure is utilized to enroll the computing device on which the client application was installed for the MFA service. A voice enrollment procedure is utilized to create a voice print for the user of the computing device that is to be utilized as an authentication factor for the MFA service. An authentication procedure is utilized to provide multi-factor authenticated access to a service, such as an online service that provides access to sensitive account information.
摘要翻译：使用预注册过程来为多因素认证（“MFA”）服务的用户创建用户简档。使用客户端应用程序安装程序在要用作MFA服务的认证因素的计算设备上安装客户端应用程序。使用计算设备注册过程来注册安装了MFA服务的客户端应用的计算设备。语音注册过程被用于为要被用作MFA服务的认证因子的计算设备的用户创建语音打印。使用认证过程来为诸如提供对敏感帐户信息的访问的在线服务等服务提供多因素认证访问。

10. 发明申请

US20110185174A1 System and Method for Providing a One-Time Key for Identification 有权
标题翻译：提供识别一次性密钥的系统和方法
公开(公告)号：US20110185174A1
公开(公告)日：2011-07-28
申请号：US12695599
申请日：2010-01-28
申请人： Charles D. Blewett , Megan M. Blewett , Juan A. Garay , Robert C. Haarde , Thomas Killian , Yitzhak H. Mandelbaum , Simon Urbanek
发明人： Charles D. Blewett , Megan M. Blewett , Juan A. Garay , Robert C. Haarde , Thomas Killian , Yitzhak H. Mandelbaum , Simon Urbanek
IPC分类号： H04L9/32
CPC分类号： H04L63/0838 , H04L9/083 , H04L9/0869 , H04L9/321 , H04L9/3228 , H04L63/067 , H04L63/08 , H04L2209/805 , H04W12/04 , H04W12/06
摘要： A server includes a key generator and an authenticator. The key generator is configured to receive a request for a first key from a worker device, to create the first key that is associated with a worker, and to transmit the first key to the worker device. The authenticator is in communication with the key generator, the authenticator is configured to receive a second key and identification details from a customer device, to transmit the identification details to the worker device, to receive acknowledgment of the identification details from the worker device, and to authenticate the second key and the identification details with the customer device.
摘要翻译：服务器包括密钥生成器和认证器。密钥生成器被配置为从工作设备接收对第一密钥的请求，以创建与工作者相关联的第一密钥，并将第一密钥发送到工作设备。认证器与密钥生成器通信，认证器被配置为从客户设备接收第二密钥和标识细节，将标识详细信息发送到工作设备，以从工作设备接收识别细节的确认，以及与客户设备验证第二个密钥和识别详细信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式