专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07251733B2 Method, system and devices for transferring accounting information 有权
标题翻译：会计信息传输的方法，系统和设备
公开(公告)号：US07251733B2
公开(公告)日：2007-07-31
申请号：US10601337
申请日：2003-06-20
申请人： Henry Haverinen , Pekka Laitinen , Nadarajah Asokan
发明人： Henry Haverinen , Pekka Laitinen , Nadarajah Asokan
IPC分类号： G06F1/24
CPC分类号： H04L29/06 , H04L63/10 , H04L63/12 , H04L67/04 , H04L69/329
摘要： A method in a system for transferring accounting information, a system for transferring accounting information, a method in a terminal, a terminal, a method in an Extensible Authentication Protocol (EAP) service authorization server, an EAP service authorization server, a computer program, an Extensible Authentication Protocol response (EAP-response) packet, wherein the method:meters data related to a service used by at least one terminal,provides the metered data as accounting information to at least one Extensible Authentication Protocol (EAP) service authorization server,sends, by means of an Extensible Authentication Protocol request (EAP-request), a service authorization request from the at least one EAP service authorization server to the at least one terminal,digitally signs accounting information, in the at least one terminal,includes, at the at least one terminal, the digitally signed accounting information in an Extensible Authentication Protocol response (EAP-response), andsends the digitally signed accounting information to an AAA-server.
摘要翻译：用于传送会计信息的系统中的方法，用于传送会计信息的系统，终端中的方法，终端，可扩展认证协议（EAP）服务授权服务器中的方法，EAP服务授权服务器，计算机程序，可扩展认证协议响应（EAP-响应）分组，其中所述方法：与由至少一个终端使用的服务有关的计量数据将计量数据作为计费信息提供给至少一个可扩展认证协议（EAP）服务授权服务器，通过可扩展认证协议请求（EAP请求），从所述至少一个EAP服务授权服务器向所述至少一个终端发送对所述至少一个终端中的计费信息进行数字签名的服务授权请求，在至少一个终端，在可扩展认证协议响应（EAP响应）中的数字签名的计费信息，并将数字签名的计费信息发送给AAA服务器。

2. 发明授权

US09300641B2 Method and apparatus for providing bootstrapping procedures in a communication network 有权
公开(公告)号：US09300641B2
公开(公告)日：2016-03-29
申请号：US11352058
申请日：2006-02-10
申请人： Pekka Laitinen , Philip Ginzboorg , Nadarajah Asokan , Gabor Bajko
发明人： Pekka Laitinen , Philip Ginzboorg , Nadarajah Asokan , Gabor Bajko
IPC分类号： H04L29/06 , H04W12/04 , H04W12/06
CPC分类号： H04L63/0892 , G06F9/4416 , H04L9/0844 , H04L63/06 , H04L63/061 , H04L63/0807 , H04L63/083 , H04L63/0876 , H04L63/12 , H04L63/123 , H04L63/166 , H04L2209/80 , H04W12/04 , H04W12/06
摘要： An approach is provided for performing authentication in a communication system. In one embodiment, a key is established with a terminal in a communication network according to a key agreement protocol. The agreed key is tied to an authentication procedure to provide a security association that supports reuse of the key. A master key is generated based on the agreed key. In another embodiment, digest authentication is combined with key exchange parameters (e.g., Diffie-Hellman parameters) in the payload of the digest message, in which a key (e.g., SMEKEY or MN-AAA) is utilized as a password. In yet another embodiment, an authentication algorithm (e.g., Cellular Authentication and Voice Encryption (CAVE)) is employed with a key agreement protocol with conversion functions to support bootstrapping.

3. 发明授权

US07788493B2 Authenticating users 有权
标题翻译：认证用户
公开(公告)号：US07788493B2
公开(公告)日：2010-08-31
申请号：US11060374
申请日：2005-02-17
申请人： Risto Mononen , Nadarajah Asokan , Pekka Laitinen
发明人： Risto Mononen , Nadarajah Asokan , Pekka Laitinen
IPC分类号： H04L9/32
CPC分类号： H04L63/0421 , G06F21/335 , H04L63/0815 , H04L63/0823 , H04L63/083
摘要： A method of authenticating a user seeking access to a service from a service provider in a communication network, the method comprising: allocating to a user a plurality of service-specific identities for accessing respective services; issuing a request from the user, the request identifying the service to be accessed and including a public key of the user; at a certification authority, authenticating the request and issuing a public key certificate for binding the service-specific identity with the public key in the request, and returning the public key certificate to the user.
摘要翻译：一种认证在通信网络中从服务提供商寻求对服务的访问的用户的方法，所述方法包括：向用户分配用于访问相应服务的多个服务特定身份; 从所述用户发出请求，所述请求标识要访问的服务并且包括所述用户的公钥; 在认证机构认证请求，并发出公钥证书，用于在请求中与公钥绑定服务特定身份，并将公开密钥证书返回给用户。

4. 发明申请

US20060182280A1 Method and apparatus for providing bootstrapping procedures in a communication network 有权
标题翻译：在通信网络中提供自举程序的方法和装置
公开(公告)号：US20060182280A1
公开(公告)日：2006-08-17
申请号：US11352058
申请日：2006-02-10
申请人： Pekka Laitinen , Philip Ginzboorg , Nadarajah Asokan , Garbor Bajko
发明人： Pekka Laitinen , Philip Ginzboorg , Nadarajah Asokan , Garbor Bajko
IPC分类号： H04K1/00
CPC分类号： H04L63/0892 , G06F9/4416 , H04L9/0844 , H04L63/06 , H04L63/061 , H04L63/0807 , H04L63/083 , H04L63/0876 , H04L63/12 , H04L63/123 , H04L63/166 , H04L2209/80 , H04W12/04 , H04W12/06
摘要： An approach is provided for performing authentication in a communication system. In one embodiment, a key is established with a terminal in a communication network according to a key agreement protocol. The agreed key is tied to an authentication procedure to provide a security association that supports reuse of the key. A master key is generated based on the agreed key. In another embodiment, digest authentication is combined with key exchange parameters (e.g., Diffie-Hellman parameters) in the payload of the digest message, in which a key (e.g., SMEKEY or MN-AAA) is utilized as a password. In yet another embodiment, an authentication algorithm (e.g., Cellular Authentication and Voice Encryption (CAVE)) is employed with a key agreement protocol with conversion functions to support bootstrapping.
摘要翻译：提供了一种用于在通信系统中执行认证的方法。在一个实施例中，根据密钥协议协议在通信网络中与终端建立密钥。约定的密钥与认证过程相关联，以提供支持密钥重用的安全关联。基于约定的密钥生成主密钥。在另一个实施例中，摘要认证与摘要消息的有效载荷中的密钥交换参数（例如，Diffie-Hellman参数）组合，其中密钥（例如，SMEKEY或MN-AAA）被用作密码。在另一个实施例中，使用具有转换功能的密钥协商协议的认证算法（例如，蜂窝认证和语音加密（CAVE））来支持自举。

5. 发明申请

US20050287990A1 Authenticating users 有权
标题翻译：认证用户
公开(公告)号：US20050287990A1
公开(公告)日：2005-12-29
申请号：US11060374
申请日：2005-02-17
申请人： Risto Mononen , Nadarajah Asokan , Pekka Laitinen
发明人： Risto Mononen , Nadarajah Asokan , Pekka Laitinen
IPC分类号： G06F21/33 , H04L9/00 , H04L29/06
CPC分类号： H04L63/0421 , G06F21/335 , H04L63/0815 , H04L63/0823 , H04L63/083
摘要： A method of authenticating a user seeking access to a service from a service provider in a communication network, the method comprising: allocating to a user a plurality of service-specific identities for accessing respective services; issuing a request from the user, the request identifying the service to be accessed and including a public key of the user; at a certification authority, authenticating the request and issuing a public key certificate for binding the service-specific identity with the public key in the request, and returning the public key certificate to the user.
摘要翻译：一种认证在通信网络中从服务提供商寻求对服务的访问的用户的方法，所述方法包括：向用户分配用于访问相应服务的多个服务特定身份; 从所述用户发出请求，所述请求标识要访问的服务并且包括所述用户的公钥; 在认证机构认证请求，并发出公钥证书，用于在请求中与公钥绑定服务特定身份，并将公开密钥证书返回给用户。

6. 发明申请

US20050216740A1 Method and apparatus for reducing the use of signalling plane in certificate provisioning procedures 审中-公开
标题翻译：用于在证书供应程序中减少信令平面使用的方法和装置
公开(公告)号：US20050216740A1
公开(公告)日：2005-09-29
申请号：US10505256
申请日：2002-02-22
申请人： Pekka Laitinen , Nadarajah Asokan , Risto Kuusela
发明人： Pekka Laitinen , Nadarajah Asokan , Risto Kuusela
IPC分类号： H04L9/32 , H04L29/06 , H04W12/06 , H04K1/00
CPC分类号： G06Q20/3674 , H04L9/3263 , H04L9/3271 , H04L63/0823 , H04L63/18 , H04L2209/56 , H04L2209/80 , H04W12/06
摘要： Method and apparatus for dealing with digital certificate requests in a mobile telecommunications network. A request for a digital certificate is sent from a subscriber to a network element via the network, the request including a first part and a second part. The first part is sent via an authenticated communication channel of the network and the second part is sent via an unprotected communication channel of the network.
摘要翻译：用于在移动电信网络中处理数字证书请求的方法和装置。数字证书的请求经由网络从订户发送到网元，该请求包括第一部分和第二部分。第一部分经由网络的认证通信信道发送，第二部分经由网络的无保护通信信道发送。

7. 发明申请

US20050102501A1 Shared secret usage for bootstrapping 审中-公开
标题翻译：用于引导的共享密钥使用
公开(公告)号：US20050102501A1
公开(公告)日：2005-05-12
申请号：US10760533
申请日：2004-01-21
申请人： Tao Haukka , Pekka Laitinen , Nadarajah Asokan
发明人： Tao Haukka , Pekka Laitinen , Nadarajah Asokan
IPC分类号： H04L9/06 , H04L12/56 , H04L29/06 , H04L29/08 , H04W12/06 , H04W88/02 , H04W88/08 , H04L9/00
CPC分类号： H04W12/06 , H04L29/06 , H04L63/061 , H04L63/08 , H04L63/0815 , H04L67/34 , H04W12/04031 , H04W88/02 , H04W88/08
摘要： A communication system including at least one user equipment and at least one network application functional entity is disclosed. The system further includes a bootstrapping functional entity. The user equipment includes means to transmit a request to push authentication information to at least one network application function. The bootstrapping functional entity includes receiving means for receiving the request from the user equipment, and transmitting means for transmitting the authentication information to the at least one network application function entity. The at least one network application function includes means adapted to receive unsolicited bootstrapping information from the bootstrapping functional entity.
摘要翻译：公开了包括至少一个用户设备和至少一个网络应用功能实体的通信系统。系统还包括自举功能实体。用户设备包括用于发送将认证信息推送到至少一个网络应用功能的请求的装置。引导功能实体包括用于从用户设备接收请求的接收装置和用于将认证信息发送到至少一个网络应用功能实体的发送装置。所述至少一个网络应用功能包括适于从所述引导功能实体接收未经请求的引导信息的装置。

8. 发明授权

US07512796B2 Authentication in a packet data network 有权
标题翻译：分组数据网络中的认证
公开(公告)号：US07512796B2
公开(公告)日：2009-03-31
申请号：US11459719
申请日：2006-07-25
申请人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
发明人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
IPC分类号： H04L9/32 , G06F7/04 , H04N7/173 , H04M1/66 , G06F17/30 , H04K1/00
CPC分类号： H04L63/08 , H04L63/0435 , H04L63/061 , H04L63/0853 , H04L63/0869 , H04L63/162 , H04W12/06
摘要： Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.
摘要翻译：用于将移动节点认证到分组数据网络的认证方法，其中通过使用移动节点的共享秘密和电信网络认证中心来布置移动节点和分组数据网络的共享秘密。在该方法中，移动节点与重播攻击保护器一起将其用户身份发送到分组数据网络。分组数据网络获得认证三元组，使用它们形成会话密钥，并且将回送给移动节点的挑战以及使用会话密钥进行的密码认证。移动节点然后可以使用挑战来形成其余的认证三元组，然后形成会话密钥。使用会话密钥，移动节点可以检查密码验证器的有效性。如果认证器是正确的，则移动节点将使用该会话密钥形成的加密响应发送到分组数据网络，以将其自身认证到分组数据网络。

9. 发明申请

US20070060106A1 AUTHENTICATION IN A PACKET DATA NETWORK 有权
标题翻译：分组数据网络中的认证
公开(公告)号：US20070060106A1
公开(公告)日：2007-03-15
申请号：US11459719
申请日：2006-07-25
申请人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamaki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
发明人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamaki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
IPC分类号： H04M3/16
CPC分类号： H04L63/08 , H04L63/0435 , H04L63/061 , H04L63/0853 , H04L63/0869 , H04L63/162 , H04W12/06
摘要： Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.
摘要翻译：用于将移动节点认证到分组数据网络的认证方法，其中通过使用移动节点的共享秘密和电信网络认证中心来布置移动节点和分组数据网络的共享秘密。在该方法中，移动节点与重播攻击保护器一起将其用户身份发送到分组数据网络。分组数据网络获得认证三元组，使用它们形成会话密钥，并且将回送给移动节点的挑战以及使用会话密钥进行的密码认证。移动节点然后可以使用挑战来形成其余的认证三元组，然后形成会话密钥。使用会话密钥，移动节点可以检查密码验证器的有效性。如果认证器是正确的，则移动节点将使用该会话密钥形成的加密响应发送到分组数据网络，以将其自身认证到分组数据网络。

10. 发明授权

US07107620B2 Authentication in a packet data network 有权
公开(公告)号：US07107620B2
公开(公告)日：2006-09-12
申请号：US09756346
申请日：2001-01-08
申请人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
发明人： Henry Haverinen , Jukka-Pekka Honkanen , Antti Kuikka , Nadarajah Asokan , Patrik Flykt , Juha Ala-Laurila , Jyri Rinnemaa , Timo Takamäki , Raimo Vuonnala , Jan-Erik Ekberg , Tommi Mikkonen , Petri Aalto , Seppo Honkanen
IPC分类号： G06F7/04 , H04L9/00 , H04M1/66 , H04M1/68 , H04M3/16 , H04K1/00
CPC分类号： H04L63/08 , H04L63/0435 , H04L63/061 , H04L63/0853 , H04L63/0869 , H04L63/162 , H04W12/06
摘要： Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication center. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式