专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20100275008A1 METHOD AND APPARATUS FOR SECURE PACKET TRANSMISSION 审中-公开
标题翻译：用于安全分组传输的方法和装置
公开(公告)号：US20100275008A1
公开(公告)日：2010-10-28
申请号：US12731220
申请日：2010-03-25
申请人： LARRY MURRILL
发明人： LARRY MURRILL
IPC分类号： H04L29/06
CPC分类号： H04L63/164 , H04L29/12339 , H04L61/2503 , H04L63/20
摘要： A source endpoint includes a security association database; a processing device and an interface operatively coupled to: receive a first packet requiring security processing; retrieve from the first packet a destination endpoint data address for a destination endpoint that is to receive the first packet; determine an address translation; apply the address translation to the retrieved destination endpoint data address to generate a destination endpoint security address, and create an entry in a storage device, wherein the entry corresponds only to the destination endpoint and comprises the generated destination endpoint security address and a set of security parameters. The source endpoint further indexes the storage device to obtain the security parameters for security processing of the first packet to generate a secured first packet; and sends the secured first packet to the destination endpoint.
摘要翻译：源端点包括安全关联数据库; 处理设备和操作地耦合到：接收需要安全处理的第一分组的接口; 从第一分组检索将要接收第一分组的目的地端点的目的地端点数据地址; 确定地址转换; 将地址转换应用于所检索的目的地端点数据地址以生成目的地端点安全地址，并在存储设备中创建条目，其中该条目仅对应于目的地端点，并且包括生成的目的地端点安全地址和一组安全性参数。源端点进一步索引存储设备以获得用于第一分组的安全处理的安全参数以生成安全的第一分组; 并将安全的第一个分组发送到目标端点。

2. 发明授权

US08059817B2 Method and apparatus for encrypted communications using IPsec keys 有权
标题翻译：使用IPsec密钥进行加密通信的方法和装置
公开(公告)号：US08059817B2
公开(公告)日：2011-11-15
申请号：US11765085
申请日：2007-06-19
申请人： Chris A. Kruegel , Michael W. Bright , Dipendra M. Chowdhary , Thomas J. Senese , Timothy G. Woodward , Larry Murrill
发明人： Chris A. Kruegel , Michael W. Bright , Dipendra M. Chowdhary , Thomas J. Senese , Timothy G. Woodward , Larry Murrill
IPC分类号： H04L9/00 , H04L9/32 , G06F7/04
CPC分类号： H04L63/0428 , H04L9/083 , H04L9/0894 , H04L63/0485 , H04L63/062 , H04L63/164 , H04L2209/80 , H04L2463/061
摘要： Disclosed is a method for encrypted communications. A first IPsec endpoint selects a security association (SA) from a security association database (SAD) by using a selector and then extracts an indexing parameter from SA. The indexing parameter is used to determine an active key location from a key storage database (KSD). Data packets are then encrypted using a key from the active key location. The first IPsec endpoint also forms a security parameter index (SPI) in a header of the data packet by using a keyID from the active key location and transmits the encrypted data packet with the header indicating the SPI to a second IPsec endpoint.
摘要翻译：公开了一种用于加密通信的方法。第一个IPsec端点通过使用选择器从安全关联数据库（SAD）中选择安全关联（SA），然后从SA提取索引参数。索引参数用于从密钥存储数据库（KSD）确定活动密钥位置。然后使用活动密钥位置的密钥对数据包进行加密。第一IPsec端点还通过使用来自活动密钥位置的密钥ID在数据包的报头中形成安全参数索引（SPI），并将具有指示SPI的标题的加密数据包发送到第二IPsec端点。

3. 发明授权

US08401195B2 Method of automatically populating a list of managed secure communications group members 有权
标题翻译：自动填充受管理的安全通信组成员列表的方法
公开(公告)号：US08401195B2
公开(公告)日：2013-03-19
申请号：US12234828
申请日：2008-09-22
申请人： Kenneth C. Fuchs , Larry Murrill
发明人： Kenneth C. Fuchs , Larry Murrill
IPC分类号： H04L9/00 , H04L9/08 , H04L29/06 , H04L9/32 , G06F21/00
CPC分类号： H04L9/0833 , H04L63/065 , H04L2209/80 , H04W12/04
摘要： Methods of automatically populating a secure group list in a key variable loader and of providing keys to a secure group are presented. After a user selects a secure group and encryption algorithm using inputs of the loader, the loader provides a group identifier and corresponding key for the group. The group identifier, encryption algorithm, and key are transmitted to a portable communication device over a physical connection between the two while a device identifier of the communication device is transmitted concurrently to the loader. The key variable loader automatically populates a stored list of subscribers of the group with the device identifier. When it is desired to transmit a new key to all of or fewer than all of the subscribers, one of the subscribers is connected with the loader and used to wirelessly transmit a new key to the remaining subscribers.
摘要翻译：呈现在密钥变量加载器中自动填充安全组列表并向安全组提供密钥的方法。在用户使用加载器的输入选择安全组和加密算法之后，加载器为组提供组标识符和相应的密钥。通过两者之间的物理连接将组标识符，加密算法和密钥发送到便携式通信设备，同时将通信设备的设备标识符同时发送到加载器。密钥变量加载器使用设备标识符自动填充存储的用户列表。当希望将新密钥发送到全部或少于所有订户时，其中一个订户与加载器连接，并用于向剩余订户无线传输新密钥。

4. 发明申请

US20100074446A1 METHOD OF AUTOMATICALLY POPULATING A LIST OF MANAGED SECURE COMMUNICATIONS GROUP MEMBERS 有权
标题翻译：自动人口管理安全通信小组成员名单的方法
公开(公告)号：US20100074446A1
公开(公告)日：2010-03-25
申请号：US12234828
申请日：2008-09-22
申请人： KENNETH C. FUCHS , LARRY MURRILL
发明人： KENNETH C. FUCHS , LARRY MURRILL
IPC分类号： H04L9/08
CPC分类号： H04L9/0833 , H04L63/065 , H04L2209/80 , H04W12/04
摘要： Methods of automatically populating a secure group list in a key variable loader and of providing keys to a secure group are presented. After a user selects a secure group and encryption algorithm using inputs of the loader, the loader provides a group identifier and corresponding key for the group. The group identifier, encryption algorithm, and key are transmitted to a portable communication device over a physical connection between the two while a device identifier of the communication device is transmitted concurrently to the loader. The key variable loader automatically populates a stored list of subscribers of the group with the device identifier. When it is desired to transmit a new key to all of or fewer than all of the subscribers, one of the subscribers is connected with the loader and used to wirelessly transmit a new key to the remaining subscribers.
摘要翻译：呈现在密钥变量加载器中自动填充安全组列表并向安全组提供密钥的方法。在用户使用加载器的输入选择安全组和加密算法之后，加载器为组提供组标识符和相应的密钥。通过两者之间的物理连接将组标识符，加密算法和密钥发送到便携式通信设备，同时将通信设备的设备标识符同时发送到加载器。密钥变量加载器使用设备标识符自动填充存储的用户列表。当希望将新密钥发送到全部或少于所有订户时，其中一个订户与加载器连接，并用于向其余订户无线传送新密钥。

5. 发明申请

US20080019525A1 METHOD AND APPARATUS FOR ENCRYPTED COMMUNICATIONS USING IPSEC KEYS 有权
标题翻译：使用IPSEC KEYS加密通信的方法和设备
公开(公告)号：US20080019525A1
公开(公告)日：2008-01-24
申请号：US11765085
申请日：2007-06-19
申请人： CHRIS KRUEGEL , MICHAEL BRIGHT , DIPENDRA CHOWDHARY , THOMAS SENESE , TIMOTHY WOODWARD , LARRY MURRILL
发明人： CHRIS KRUEGEL , MICHAEL BRIGHT , DIPENDRA CHOWDHARY , THOMAS SENESE , TIMOTHY WOODWARD , LARRY MURRILL
IPC分类号： H04K1/00
CPC分类号： H04L63/0428 , H04L9/083 , H04L9/0894 , H04L63/0485 , H04L63/062 , H04L63/164 , H04L2209/80 , H04L2463/061
摘要： Disclosed is a method for encrypted communications. A first IPsec endpoint selects a security association (SA) from a security association database (SAD) by using a selector and then extracts an indexing parameter from SA. The indexing parameter is used to determine an active key location from a key storage database (KSD). Data packets are then encrypted using a key from the active key location. The first IPsec endpoint also forms a security parameter index (SPI) in a header of the data packet by using a keyID from the active key location and transmits the encrypted data packet with the header indicating the SPI to a second IPsec endpoint.
摘要翻译：公开了一种用于加密通信的方法。第一个IPsec端点通过使用选择器从安全关联数据库（SAD）中选择安全关联（SA），然后从SA提取索引参数。索引参数用于从密钥存储数据库（KSD）确定活动密钥位置。然后使用活动密钥位置的密钥对数据包进行加密。第一IPsec端点还通过使用来自活动密钥位置的密钥ID在数据包的报头中形成安全参数索引（SPI），并将具有指示SPI的标题的加密数据包发送到第二IPsec端点。

6. 发明申请

US20100165839A1 ANTI-REPLAY METHOD FOR UNICAST AND MULTICAST IPSEC 审中-公开
标题翻译：用于UNICAST和MULTICAST IPSEC的反复制方法
公开(公告)号：US20100165839A1
公开(公告)日：2010-07-01
申请号：US12345160
申请日：2008-12-29
申请人： THOMAS J. SENESE , MICHAEL W. BRIGHT , DIPENDRA M. CHOWDHARY , CHRIS A. KRUEGEL , LARRY MURRILL , TIMOTHY G. WOODWARD
发明人： THOMAS J. SENESE , MICHAEL W. BRIGHT , DIPENDRA M. CHOWDHARY , CHRIS A. KRUEGEL , LARRY MURRILL , TIMOTHY G. WOODWARD
IPC分类号： H04L12/26
CPC分类号： H04W28/06 , H04L43/106 , H04L43/16 , H04L63/0272 , H04L63/164 , H04L67/2842 , H04L69/28
摘要： A method for managing a packet in a communication system between two or more endpoints, a sender and one or more recipients, comprises receiving a first packet comprising a source identifier that uniquely identifies a sender of the first packet and a current source time assigned to the first packet by the sender, determining a received time for the first packet, retrieving a cached source time assigned by the sender to a second packet that was received prior to receiving the first packet, and determining whether to discard or process the first packet based on the current source time, the received time, and the cached source time. The current source time, the received time, and the cached time, in addition to predetermined parameters such as a maximum age and an anti-replay window allows a recipient to determine whether to process or discard a packet.
摘要翻译：一种用于管理两个或多个端点之间的通信系统中的分组的方法，发送方和一个或多个接收者，包括：接收第一分组，其包括唯一地标识所述第一分组的发送者的源标识符和分配给所述第一分组的当前源时间由发送方确定第一分组，确定接收到的第一分组的时间，将发送方分配的高速缓存的源时间检索到在接收第一分组之前接收的第二分组，以及基于是否丢弃或处理第一分组当前源时间，接收时间和缓存的源时间。除了诸如最大年龄和反重播窗口的预定参数之外，当前源时间，接收时间和缓存时间允许接收者确定是处理还是丢弃分组。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式