专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070060106A1 AUTHENTICATION IN A PACKET DATA NETWORK 有权
标题翻译：分组数据网络中的认证
公开(公告)号：US20070060106A1
公开(公告)日：2007-03-15
申请号：US11459719
申请日：2006-07-25
申请人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamaki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
发明人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamaki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
IPC分类号： H04M3/16
CPC分类号： H04L63/08 , H04L63/0435 , H04L63/061 , H04L63/0853 , H04L63/0869 , H04L63/162 , H04W12/06
摘要： Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.
摘要翻译：用于将移动节点认证到分组数据网络的认证方法，其中通过使用移动节点的共享秘密和电信网络认证中心来布置移动节点和分组数据网络的共享秘密。在该方法中，移动节点与重播攻击保护器一起将其用户身份发送到分组数据网络。分组数据网络获得认证三元组，使用它们形成会话密钥，并且将回送给移动节点的挑战以及使用会话密钥进行的密码认证。移动节点然后可以使用挑战来形成其余的认证三元组，然后形成会话密钥。使用会话密钥，移动节点可以检查密码验证器的有效性。如果认证器是正确的，则移动节点将使用该会话密钥形成的加密响应发送到分组数据网络，以将其自身认证到分组数据网络。

2. 发明授权

US07512796B2 Authentication in a packet data network 有权
标题翻译：分组数据网络中的认证
公开(公告)号：US07512796B2
公开(公告)日：2009-03-31
申请号：US11459719
申请日：2006-07-25
申请人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
发明人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
IPC分类号： H04L9/32 , G06F7/04 , H04N7/173 , H04M1/66 , G06F17/30 , H04K1/00
CPC分类号： H04L63/08 , H04L63/0435 , H04L63/061 , H04L63/0853 , H04L63/0869 , H04L63/162 , H04W12/06
摘要： Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.
摘要翻译：用于将移动节点认证到分组数据网络的认证方法，其中通过使用移动节点的共享秘密和电信网络认证中心来布置移动节点和分组数据网络的共享秘密。在该方法中，移动节点与重播攻击保护器一起将其用户身份发送到分组数据网络。分组数据网络获得认证三元组，使用它们形成会话密钥，并且将回送给移动节点的挑战以及使用会话密钥进行的密码认证。移动节点然后可以使用挑战来形成其余的认证三元组，然后形成会话密钥。使用会话密钥，移动节点可以检查密码验证器的有效性。如果认证器是正确的，则移动节点将使用该会话密钥形成的加密响应发送到分组数据网络，以将其自身认证到分组数据网络。

3. 发明授权

US07107620B2 Authentication in a packet data network 有权
公开(公告)号：US07107620B2
公开(公告)日：2006-09-12
申请号：US09756346
申请日：2001-01-08
申请人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
发明人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
IPC分类号： G06F7/04 , H04L9/00 , H04M1/66 , H04M1/68 , H04M3/16 , H04K1/00
CPC分类号： H04L63/08 , H04L63/0435 , H04L63/061 , H04L63/0853 , H04L63/0869 , H04L63/162 , H04W12/06
摘要： Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication center. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

4. 发明授权

US06704789B1 SIM based authentication mechanism for DHCPv4/v6 messages 有权
标题翻译：基于SIM卡的DHCPv4 / v6消息认证机制
公开(公告)号：US06704789B1
公开(公告)日：2004-03-09
申请号：US09564635
申请日：2000-05-03
申请人： Juha Ala-Laurila , Patrik Flykt , Nadarajah Asokan
发明人： Juha Ala-Laurila , Patrik Flykt , Nadarajah Asokan
IPC分类号： G06F1516
CPC分类号： H04L63/0853 , H04L61/2015 , H04L63/164 , H04W12/06
摘要： The invention is a method of providing a user (12) a terminal network address (14) in a first network (16) through which the user communicates with a data network (18) and authenticating connection of the user to the first network. The invention includes transmitting to at least one server in the first network a request to obtain the terminal network address in the first network to provide connection of the user to the data network and an identification of the user in a second network (20) through which the user communicates to the first network; transmitting the identification of the user to the second network; transmitting from the second network to the first network authentication information of the user stored in the second network associated with the identification of the user; transmitting from the first network to the user at least one advertisement of the terminal network address and information within the authentication information; and processing the received at least one advertisement and the received information within the authentication information and determining if the authentication information is correct.
摘要翻译：本发明是一种在第一网络（16）中提供用户（12）终端网络地址（14）的方法，用户通过该终端网络地址与数据网络（18）进行通信，并且认证用户与第一网络的连接。本发明包括向第一网络中的至少一个服务器发送获得第一网络中的终端网络地址以提供用户到数据网络的连接的请求，以及在第二网络（20）中的用户的标识，通过该第二网络用户与第一网络进行通信; 将所述用户的标识发送到所述第二网络; 从所述第二网络发送到存储在与所述用户的所述标识相关联的所述第二网络中的用户的所述第一网络认证信息; 从所述第一网络向所述用户发送所述终端网络地址和所述认证信息内的信息的至少一个广告; 以及处理接收到的至少一个广告和接收到的信息，并确定认证信息是否正确。

5. 发明授权

US10374799B2 Method and apparatus for identity based ticketing 有权
公开(公告)号：US10374799B2
公开(公告)日：2019-08-06
申请号：US14111007
申请日：2011-04-13
申请人： Sandeep Tamrakar , Jan-Erik Ekberg , Jukka Virtanen , Nadarajah Asokan
发明人： Sandeep Tamrakar , Jan-Erik Ekberg , Jukka Virtanen , Nadarajah Asokan
IPC分类号： G06Q20/38 , H04L9/14 , G06F21/33 , G06Q20/04 , G06Q20/32 , G06Q20/40 , G07B15/02 , H04L9/30
摘要： A method, apparatus, system and computer program where an apparatus stores user specific credentials, receives a certificate via the communication interface from a certificate authority and stores the certificate in the memory. The apparatus further stores a private key and a public key in the memory and attempts authenticating of the apparatus to a ticket reader for accessing a service, by transmission of one or more messages, wherein the messages contain an authenticator that has at least one of the following: the certificate or its cryptographic derivative; one or more data items contained by the certificate or a cryptographic derivative thereof. The messages are prepared such that the public key is not recoverable from outside of the authenticator.

6. 发明申请

US20140298016A1 METHOD AND APPARATUS FOR IDENTITY BASED TICKETING 审中-公开
标题翻译：基于身份识别的方法和装置
公开(公告)号：US20140298016A1
公开(公告)日：2014-10-02
申请号：US14111007
申请日：2011-04-13
申请人： Jan-Erik Ekberg , Sandeep Tamrakar , Jukka Virtanen , Nadarajah Asokan
发明人： Jan-Erik Ekberg , Sandeep Tamrakar , Jukka Virtanen , Nadarajah Asokan
IPC分类号： H04L9/14 , H04L9/30
CPC分类号： H04L9/14 , G06F21/335 , G06Q20/0457 , G06Q20/3278 , G06Q20/38215 , G06Q20/40975 , G07B15/02 , H04L9/30 , H04L2209/24
摘要： A method, apparatus, system and computer program where an apparatus stores user specific credentials, receives a certificate via the communication interface from a certificate authority and stores the certificate in the memory. The apparatus further stores a private key and a public key in the memory and attempts authenticating of the apparatus to a ticket reader for accessing a service, by transmission of one or more messages, wherein the messages contain an authenticator that has at least one of the following: the certificate or its cryptographic derivative; one or more data items contained by the certificate or a cryptographic derivative thereof. The messages are prepared such that the public key is not recoverable from outside of the authenticator.
摘要翻译：一种装置存储用户特定凭证的方法，装置，系统和计算机程序，经由通信接口从证书机构接收证书并将证书存储在存储器中。该设备还将私有密钥和公共密钥存储在存储器中，并尝试通过发送一个或多个消息来向售票机读取器认证该设备以访问服务，其中消息包含认证器，该认证器具有至少一个以下：证书或其加密衍生物; 由证书或其加密派生物包含的一个或多个数据项。消息准备好使得公钥不能从认证者的外面恢复。

7. 发明申请

US20100266128A1 CREDENTIAL PROVISIONING 有权
标题翻译：资格认证
公开(公告)号：US20100266128A1
公开(公告)日：2010-10-21
申请号：US12738616
申请日：2007-10-16
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Aarne Rantala , Markku Kylanpaa
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Aarne Rantala , Markku Kylanpaa
IPC分类号： H04L9/08
CPC分类号： H04L63/0853 , H04L9/0833 , H04L9/3271 , H04L63/06 , H04W12/04
摘要： Disclosed is a method in a provisioning apparatus. The method comprises obtaining a family key, a family key defining a family; submitting the family key to a security element in a secure manner (2-2); using the family key for securing credential data; submitting said secured credential data to the security element (2-4); using the family key for binding an application to the family; and submitting said binding to the security element (2-5). Also a method in a related security element and related apparatuses, systems and computer programs are disclosed.
摘要翻译：公开了一种供应装置中的方法。该方法包括获得家庭密钥，定义家庭的家庭密钥; 以安全的方式将家庭密钥提交给安全要素（2-2）; 使用家庭密钥来确保凭证数据; 将所述安全凭证数据提交给安全元件（2-4）; 使用家庭密钥将申请绑定到家庭; 并将所述绑定提交给安全元件（2-5）。还公开了相关安全元件和相关装置，系统和计算机程序中的方法。

8. 发明授权

US07529929B2 System and method for dynamically enforcing digital rights management rules 有权
标题翻译：动态执行数字版权管理规则的系统和方法
公开(公告)号：US07529929B2
公开(公告)日：2009-05-05
申请号：US10161082
申请日：2002-05-30
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Jorma Stenman , Jaakko Teinila
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Jorma Stenman , Jaakko Teinila
IPC分类号： H04L9/00 , H04L29/00 , H04L29/08 , H04L29/12
CPC分类号： H04L63/08 , G06F21/10 , G06Q20/3674 , H04L63/102 , H04L2463/101
摘要： A system and method for enforcing digital rights management (DRM) rules in a terminal, even when the requesting rendering application is already operating. Content, which may be encrypted, is received at the terminal and securely stored. On-demand authorization is effected for the rendering application that is requesting access to the content, using secure communications between a DRM engine within the terminal and an operating system within the terminal that is augmented with a security manager adapted to engage in such secure communications. If the rendering application is found to be authorized, the DRM rules are applied to determine whether the rendering application may access the content, and if so, the content is made available to the rendering application.
摘要翻译：一种用于在终端中执行数字权限管理（DRM）规则的系统和方法，即使当请求的呈现应用程序已经在运行时。可以加密的内容在终端处被接收并被安全地存储。对正在请求访问内容的呈现应用程序进行按需授权，使用终端内的DRM引擎与终端内的操作系统之间的安全通信，所述操作系统用适于参与这种安全通信的安全管理器来增强。如果发现渲染应用程序被授权，则应用DRM规则来确定呈现应用程序是否可以访问该内容，如果是，那么该内容可用于呈现应用程序。

9. 发明授权

US09171187B2 Implementation of an integrity-protected secure storage 有权
标题翻译：实施完整性保护的安全存储
公开(公告)号：US09171187B2
公开(公告)日：2015-10-27
申请号：US11128676
申请日：2005-05-13
申请人： Nadarajah Asokan , Jan-Erik Ekberg , Lauri Paatero
发明人： Nadarajah Asokan , Jan-Erik Ekberg , Lauri Paatero
IPC分类号： G06F21/78 , G06F21/71 , G06F21/62
CPC分类号： H04L63/0428 , G06F21/606 , G06F21/62 , G06F21/71 , G06F21/78 , G06F21/79 , G06Q20/341 , G06Q20/3576 , G06Q20/40975 , G07F7/1008 , H04L9/0833 , H04L9/0838 , H04L9/0891 , H04L67/1097 , H04L2209/12 , H04L2209/603 , H04L2209/80
摘要： An internal but not integrated security token is provided for a device which includes a first integrated circuitry including a secure processor. The security token is provided by a second integrated circuitry separate from the first circuitry. The second integrated circuitry includes a secure non-volatile storage. The secure processor communicates information to the second circuitry in a secure manner for the secure information to be securely stored in the secure non-volatile storage, and the second integrated circuitry communicates information stored in its secure non-volatile storage to the secure processor in a secure manner. Communications is secured by means of cryptography. The first integrated circuitry and the second integrated circuitry are internal parts of the device. An initialization method for distributing a secure key to be shared between the circuitries and to be used in cryptography is also disclosed.
摘要翻译：为包括包括安全处理器的第一集成电路的设备提供内部但未集成的安全令牌。安全令牌由与第一电路分开的第二集成电路提供。第二集成电路包括安全的非易失性存储器。安全处理器以安全的方式将信息传送到第二电路，以将安全信息安全地存储在安全的非易失性存储器中，并且第二集成电路将存储在其安全非易失性存储器中的信息传送到安全处理器安全的方式。通信是通过密码保护的。第一集成电路和第二集成电路是器件的内部部件。还公开了一种用于分发要在电路之间共享并将用于密码学中的安全密钥的初始化方法。

10. 发明申请

US20120311315A1 Method and Apparatus to Reset Platform Configuration Register in Mobile Trusted Module 有权
标题翻译：移动可信任模块中重置平台配置寄存器的方法和装置
公开(公告)号：US20120311315A1
公开(公告)日：2012-12-06
申请号：US13578955
申请日：2011-02-14
申请人： Jan-Erik Ekberg , Nadarajah Asokan , Kari Kostiainen
发明人： Jan-Erik Ekberg , Nadarajah Asokan , Kari Kostiainen
IPC分类号： G06F15/177
CPC分类号： G06F21/57
摘要： In accordance with the exemplary embodiments of the invention there is at least a method, apparatus, and executable program of computer instructions to perform the operations of establishing and initializing a set of platform configuration registers, where a first subset of platform configuration registers is defined as being non-resettable, and a second subset of platform configuration registers is defined as being resettable, storing initial boot-up system state information in one or more non-resettable platform configuration registers, dynamically resetting (2) a value of a platform configuration register identified by a reference integrity metric to reflect a measurement value provided by the reference integrity metric, and responding to an attestation request (0) with an attestation response (5) including dynamic information from the platform configuration register that was reset and system state information from a non-resettable platform configuration register.
摘要翻译：根据本发明的示例性实施例，至少有一种计算机指令的方法，装置和可执行程序，用于执行建立和初始化一组平台配置寄存器的操作，其中平台配置寄存器的第一子集被定义为不可复位，并且平台配置寄存器的第二子集被定义为可重置，将初始启动系统状态信息存储在一个或多个不可重置的平台配置寄存器中，动态地重置（2）平台配置寄存器的值由参考完整性度量标识，以反映由参考完整性度量提供的测量值，以及响应具有认证响应（5）的认证请求（5），该证明响应（5）包括来自重置的平台配置寄存器的动态信息，以及来自一个不可重置的平台配置寄存器。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式