专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07900242B2 Modular authentication and authorization scheme for internet protocol 有权
标题翻译：互联网协议的模块化认证和授权方案
公开(公告)号：US07900242B2
公开(公告)日：2011-03-01
申请号：US10192753
申请日：2002-07-09
申请人： Jari T. Malinen , Timothy J. Kniveton , Henry Haverinen
发明人： Jari T. Malinen , Timothy J. Kniveton , Henry Haverinen
IPC分类号： H04L29/06 , H04L29/00 , H04L29/02
CPC分类号： H04L63/062 , H04L9/3234 , H04L9/3271 , H04L63/0853 , H04L63/0892 , H04L69/16 , H04L69/167 , H04L2209/76 , H04L2209/80 , H04W12/04 , H04W12/06 , H04W80/04
摘要： A system and method for three-party authentication and authorization. The system includes an authorizer that authorizes requestors, a client that makes a request, and a local attendant that provides a conduit through which messages between the client and the authorizer pass. The authorizer, the client, and a peer on which the requested resource may be accessed are each in separate domains. A domain is defined as a set of one or more entities such that if the set includes more than one entity, a connection between any two of the entities in the set can be secured by static credentials that are known by each of the two entities. A subscriber identity module (SIM) may be used to generate a copy of a key for the client to be used in accessing a requested resource.
摘要翻译：一种用于三方认证和授权的系统和方法。该系统包括授权请求者的授权者，提出请求的客户端以及提供客户机和授权者之间的消息通过的管道的本地话务员。请求的资源可以访问的授权者，客户端和对等体各自在不同的域中。域被定义为一个或多个实体的集合，使得如果集合包括多于一个实体，则集合中的任何两个实体之间的连接可以由两个实体中的每个实体已知的静态凭证来保护。订户身份模块（SIM）可以用于生成要用于访问所请求资源的客户端的密钥的副本。

2. 发明授权

US08705522B2 Mobile router support for IPv6 有权
标题翻译：移动路由器支持IPv6
公开(公告)号：US08705522B2
公开(公告)日：2014-04-22
申请号：US11907116
申请日：2007-10-09
申请人： Outi Elisa Markki , Timothy J. Kniveton , Jari T. Malinen , Vijay Devarapalli , Charles E. Perkins
发明人： Outi Elisa Markki , Timothy J. Kniveton , Jari T. Malinen , Vijay Devarapalli , Charles E. Perkins
IPC分类号： H04L12/28
CPC分类号： H04W8/04 , H04L69/16 , H04L69/167 , H04W8/26 , H04W60/00 , H04W80/04 , H04W84/005
摘要： A method and system for supporting mobile routers in Internet Protocol version 6 (IPv6) is provided. A mobile router obtains a care-of-address associated with an address configuration. The mobile router registers the care-of-address with a home agent. A bi-directional tunnel is established between the mobile router and the home agent. Packets are then forwarded via the bi-directional tunnel.
摘要翻译：提供了一种在互联网协议版本6（IPv6）中支持移动路由器的方法和系统。移动路由器获得与地址配置相关联的转交地址。移动路由器向归属代理注册转交地址。在移动路由器和归属代理之间建立双向隧道。然后通过双向隧道转发数据包。

3. 发明授权

US08341700B2 Authentication in heterogeneous IP networks 有权
标题翻译：异构IP网络中的认证
公开(公告)号：US08341700B2
公开(公告)日：2012-12-25
申请号：US10960641
申请日：2004-10-08
申请人： Jari T. Malinen , Timothy J. Kniveton , Meghana Sahasrabudhe
发明人： Jari T. Malinen , Timothy J. Kniveton , Meghana Sahasrabudhe
IPC分类号： H04L29/06
CPC分类号： H04W12/08 , G06F21/44 , H04L63/0428 , H04L63/08 , H04L63/0876 , H04L63/0892 , H04W12/02 , H04W12/06 , H04W80/00 , H04W80/04
摘要： The invention proposes a system for authenticating and authorizing network services comprising: a mobile device being adapted to, upon receipt of an information message indicating at least one network access type, determine the network access type, to create a start message containing at least a user identity, and to encapsulate the start message in an authentication message compatible with the access network identified in the information message, and an access controller for reading the encapsulated message from the mobile and forwarding the encapsulated message to an authentication server identified in the encapsulated message. The invention also proposes a corresponding method for authenticating and authorizing network services, and an access control device, a subscriber device and a router device.
摘要翻译：本发明提出了一种用于认证和授权网络服务的系统，包括：移动设备，适于在接收到指示至少一种网络接入类型的信息消息时确定网络接入类型，以创建包含至少一个用户的起始消息身份，并将开始消息封装在与信息消息中标识的接入网络兼容的认证消息中;以及接入控制器，用于从移动台读取封装的消息，并将封装的消息转发到封装消息中标识的认证服务器。本发明还提出了一种用于认证和授权网络服务的相应方法，以及访问控制设备，订户设备和路由器设备。

4. 发明授权

US07298743B2 Mobile router support for IPv6 有权
标题翻译：移动路由器支持IPv6
公开(公告)号：US07298743B2
公开(公告)日：2007-11-20
申请号：US10295014
申请日：2002-11-14
申请人： Outi Elisa Markki , Timothy J. Kniveton , Jari T. Malinen , Vijay Devarapalli , Charles E. Perkins
发明人： Outi Elisa Markki , Timothy J. Kniveton , Jari T. Malinen , Vijay Devarapalli , Charles E. Perkins
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04W8/04 , H04L69/16 , H04L69/167 , H04W8/26 , H04W60/00 , H04W80/04 , H04W84/005
摘要： A method and system for supporting mobile routers in Internet Protocol version 6 (IPv6) is provided. A mobile router obtains a care-of-address associated with an address configuration. The mobile router registers the care-of-address with a home agent. A bi-directional tunnel is established between the mobile router and the home agent. Packets are then forwarded via the bi-directional tunnel.
摘要翻译：提供了一种在互联网协议版本6（IPv6）中支持移动路由器的方法和系统。移动路由器获得与地址配置相关联的转交地址。移动路由器向归属代理注册转交地址。在移动路由器和归属代理之间建立双向隧道。然后通过双向隧道转发数据包。

5. 发明申请

US20130074161A1 AUTHENTICATION IN HETEROGENEOUS IP NETWORKS 有权
标题翻译：异构IP网络中的认证
公开(公告)号：US20130074161A1
公开(公告)日：2013-03-21
申请号：US13679804
申请日：2012-11-16
申请人： Jari T. Malinen , Timothy J. Kniveton , Meghana Sahasrabudhe
发明人： Jari T. Malinen , Timothy J. Kniveton , Meghana Sahasrabudhe
IPC分类号： G06F21/44
CPC分类号： H04W12/08 , G06F21/44 , H04L63/0428 , H04L63/08 , H04L63/0876 , H04L63/0892 , H04W12/02 , H04W12/06 , H04W80/00 , H04W80/04
摘要： The invention proposes a system for authenticating and authorizing network services comprising: a mobile device being adapted to, upon receipt of an information message indicating at least one network access type, determine the network access type, to create a start message containing at least a user identity, and to encapsulate the start message in an authentication message compatible with the access network identified in the information message, and an access controller for reading the encapsulated message from the mobile and forwarding the encapsulated message to an authentication server identified in the encapsulated message. The invention also proposes a corresponding method for authenticating and authorizing network services, and an access control device, a subscriber device and a router device.
摘要翻译：本发明提出了一种用于认证和授权网络服务的系统，包括：移动设备，适于在接收到指示至少一种网络接入类型的信息消息时确定网络接入类型，以创建包含至少一个用户的起始消息身份，并将开始消息封装在与信息消息中标识的接入网络兼容的认证消息中;以及接入控制器，用于从移动台读取封装的消息，并将封装的消息转发到封装消息中标识的认证服务器。本发明还提出了一种用于认证和授权网络服务的相应方法，以及访问控制设备，订户设备和路由器设备。

6. 发明授权

US07142520B1 Method and apparatus for mobile internet protocol regional paging 失效
标题翻译：移动互联网协议区域寻呼的方法和装置
公开(公告)号：US07142520B1
公开(公告)日：2006-11-28
申请号：US09595112
申请日：2000-06-16
申请人： Henry Haverinen , Jari T. Malinen
发明人： Henry Haverinen , Jari T. Malinen
IPC分类号： G08C17/00
CPC分类号： H04W68/00 , H04W48/00 , H04W52/0216 , H04W52/0258 , H04W80/04 , Y02D70/1222
摘要： A mobile internet protocol regional paging network 10 includes a paging foreign agent for handling a regional registration of a mobile node visiting a paging area, which includes internet protocol subnetworks. In operation, the mobile node periodically can provide an idle mode request to the paging foreign agent to enter an idle mode so as to deactivate one or more components for energy-saving purposes and reduce active communication with the mobile internet protocol regional paging network. The invention provides a small and link-layer independent extension to Mobile Internet Protocol with Regional Registrations to support power-constrained operation in the mobile nodes and to reduce routing state information in the visited domain. The extension allows a Mobile Node to enter a power saving Idle Mode during which its location is known with the coarse accuracy defined by a Paging Area. The mobile node and the visited domain may optionally agree on time slots used for Agent Advertisements and paging. The mobile node 14 may include a mobile phone, a pager, or any telecommunications device capable of wireless communicating, including communication over the internet.
摘要翻译：移动互联网协议区域寻呼网络10包括寻呼外部代理，用于处理访问包括因特网协议子网络的寻呼区域的移动节点的区域注册。在操作中，移动节点周期性地可以向寻呼外部代理提供空闲模式请求以进入空闲模式，以便去激活用于节能目的的一个或多个组件，并减少与移动因特网协议区域寻呼网络的主动通信。本发明提供了具有区域注册的移动因特网协议的小的和链路层独立的扩展，以支持移动节点中的功率约束的操作并且减少访问域中的路由状态信息。该扩展允许移动节点进入功率节省空闲模式，在此期间，其位置以分页区域定义的粗略精度已知。移动节点和被访问域可以可选地同意用于代理广告和寻呼的时隙。移动节点14可以包括移动电话，寻呼机或能够进行无线通信的任何电信设备，包括通过互联网的通信。

7. 发明授权

US07085808B2 Method for distinguishing clients in a communication system, a communication system; and a communication device 有权
标题翻译：用于区分通信系统中的客户端的方法，通信系统; 和通信设备
公开(公告)号：US07085808B2
公开(公告)日：2006-08-01
申请号：US09876480
申请日：2001-06-07
申请人： Henry Haverinen , Jari T. Malinen
发明人： Henry Haverinen , Jari T. Malinen
IPC分类号： G06F15/13
CPC分类号： H04L69/08 , Y10S707/99943
摘要： The invention relates to a method for distinguishing clients in a communication system comprising at least one wireless access network and at least one wired access network. The wireless access network comprise means for connecting wireless clients in communication to the wireless access network. Wired access network comprise means for connecting wired clients in communication to the wired access network. Communication system comprise means for communicating between the access network and the wired access network. In the method a resolution request message is transmitted to the communication system indicating a client to be examined, the message is received in at least one other node. A decision whether a resolution reply message is to be transmitted to the communication system is performed on the basis of a resolution reply message.
摘要翻译：本发明涉及一种在包括至少一个无线接入网络和至少一个有线接入网络的通信系统中区分客户机的方法。无线接入网络包括用于将通信中的无线客户端连接到无线接入网络的装置。有线接入网络包括用于将通信中的有线客户端连接到有线接入网络的装置。通信系统包括用于在接入网络和有线接入网络之间进行通信的装置。在该方法中，将解析请求消息发送到指示要检查的客户端的通信系统，该消息在至少一个其他节点中被接收。基于分辨率回复消息来执行将决议答复消息传送到通信系统的决定。

8. 发明授权

US07263087B2 Method and system for adding IP routes to a routing mobile terminal with 3G messages 有权
标题翻译：将IP路由添加到具有3G消息的路由移动终端的方法和系统
公开(公告)号：US07263087B2
公开(公告)日：2007-08-28
申请号：US10350899
申请日：2003-01-24
申请人： Jonne Soininen , Jari T. Malinen
发明人： Jonne Soininen , Jari T. Malinen
IPC分类号： H04Q7/24
CPC分类号： H04W40/248 , H04L45/42 , H04W8/085 , H04W40/02 , H04W40/28 , H04W40/36 , H04W80/04 , H04W88/04 , H04W88/06 , H04W92/02
摘要： The invention is directed to enabling an serving node and a gateway node to be informed of a new route for a new node or sub-network that has become active behind a Mobile Terminal that can also act as a router. When IP level route injection occurs at the Mobile Terminal, a Modify session profile message causes insertion of a new IP address or prefix at a gateway node related to the new route. Also, the gateway node will update the serving node and the Mobile Terminal with information related to the new route or a proposed new route. The Mobile Terminal and the gateway node can share routing information over a dynamic routing protocol. Additionally, the Mobile Terminal and the gateway node can configure static routing information on routes towards each other. The new route can be added with 24.008 and/or GTP messages when initiated on the Mobile Terminal side for either the dynamic or static case.
摘要翻译：本发明旨在使服务节点和网关节点能够被通知新路由，该新路由已经变得活跃在可以充当路由器的移动终端后面的新节点或子网络中。当移动终端发生IP级别路由注入时，修改会话配置文件消息会在与新路由相关的网关节点处插入新的IP地址或前缀。此外，网关节点将使用与新路由或所提出的新路由相关的信息来更新服务节点和移动终端。移动终端和网关节点可以通过动态路由协议共享路由信息。另外，移动终端和网关节点可以在路由上相互配置静态路由信息。新的路由可以在移动终端侧为动态或静态情况下启动时添加24.008和/或GTP消息。

9. 发明申请

US20080256605A1 Localized authorization system in IP networks 审中-公开
标题翻译： IP网络中的本地授权系统
公开(公告)号：US20080256605A1
公开(公告)日：2008-10-16
申请号：US10640307
申请日：2003-08-14
申请人： Jari T. Malinen
发明人： Jari T. Malinen
IPC分类号： G06F21/02
CPC分类号： H04L63/068 , H04L63/08 , H04L63/0853 , H04L63/10 , H04L2463/081 , H04W12/06 , H04W12/08 , H04W36/00 , H04W80/04
摘要： The invention provides a method for bootstrapping a local authorizer of a non-public access network. The local authorizer is arranged for granting access for a client device to the non-public access network. Therefore, the local authorizer includes a credentials database, which is used in authentication and authorization of the client device during access to services or resources of the non-public network. A secret knowledge of the client device is used for generating at least one set of credentials. The bootstrapping method includes the step of uploading the at least one set of credentials to the credentials database of the local authorizer. This upload is performed by the client device at least at first access of the client device to the non-public network. Then the credentials in the credentials database are used for authentication and authorization of the client device during access to the non-public access network.
摘要翻译：本发明提供了一种用于引导非公共接入网络的本地授权器的方法。本地授权者被安排用于向非公共接入网授予客户端设备的访问权限。因此，本地授权者包括凭证数据库，其在访问非公共网络的服务或资源期间用于客户端设备的认证和授权。使用客户端设备的秘密知识来生成至少一组凭证。引导方法包括将至少一组凭证上传到本地授权器的凭证数据库的步骤。客户端设备至少首先将客户端设备访问到非公共网络，执行上传。然后，在访问非公共接入网络期间，凭证数据库中的凭证用于客户端设备的认证和授权。

10. 发明授权

US07444513B2 Authentication in data communication 失效
标题翻译：数据通信中的认证
公开(公告)号：US07444513B2
公开(公告)日：2008-10-28
申请号：US09867049
申请日：2001-05-29
申请人： Kai Nyman , Mikko Olkkonen , Jari T. Malinen
发明人： Kai Nyman , Mikko Olkkonen , Jari T. Malinen
IPC分类号： H04L9/32 , H04L9/00 , H04K1/00
CPC分类号： H04W12/06 , H04L63/0407 , H04L63/0428 , H04L63/067 , H04L63/0823 , H04L63/0853 , H04W12/02
摘要： A client 110 may be authenticated by transmitting or beaming a telecommunication network subscriber's authentication to the client from a device 120, over a wireless link. For example, a GSM telephone 120 may authenticate an electronic book 110 to a content providing service within the Internet. The service verifies the authentication using the subscriber's GSM network operator's Authentication Center 161 to generate an authenticator and the client correspondingly generates a local copy of the authenticator using a GSM SIM over the wireless local link. The authentication is then determined by checking that these authenticators match and thereafter the authenticator can be used as a session key to encrypt data in the service.
摘要翻译：可以通过无线链路从设备120向客户端发送或发送电信网络用户的认证来认证客户端110。例如，GSM电话120可以将互联网内的内容提供服务的电子书110认证。该服务使用用户的GSM网络运营商的认证中心161验证认证，以生成认证者，并且客户端通过无线本地链路相应地使用GSM SIM生成认证者的本地副本。然后通过检查这些验证符匹配来确定认证，此后，认证器可以用作会话密钥来加密服务中的数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式