专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06192472B1 Method and apparatus for the secure distributed storage and retrieval of information 失效
标题翻译：用于安全分布式存储和检索信息的方法和装置
公开(公告)号：US06192472B1
公开(公告)日：2001-02-20
申请号：US09338797
申请日：1999-06-23
申请人： Juan Alberto Garay , Rosario Gennaro , Charanjit Singh Jutla , Tal D. Rabin
发明人： Juan Alberto Garay , Rosario Gennaro , Charanjit Singh Jutla , Tal D. Rabin
IPC分类号： G06F1300
CPC分类号： H04L9/302 , H04L9/085 , H04L9/3257 , Y10S707/99953
摘要： A solution to the general problem of Secure Storage and Retrieval of Information (SSRI) guarantees that also the process of storing the information is correct even when some processors fail. A user interacts with the storage system by depositing a file and receiving a proof that the deposit was correctly executed. The user interacts with a single distinguished processor called the gateway. The mechanism enables storage in the presence of both inactive and maliciously active faults, while maintaining (asymptotical) space optimailty. This mechanism is enhanced with the added requirement of confidentiality of information; i.e., that a collusion of processors should not be able to learn anything about the information. Also, in this case space optimality is preserved.
摘要翻译：安全存储和信息检索（SSRI）的一般问题的解决方案保证即使某些处理器出现故障，存储信息的过程也是正确的。用户通过存放文件和接收证明表明存款被正确执行，与存储系统进行交互。用户与称为网关的单个不同的处理器进行交互。在保持（渐近）空间优化的同时，该机制可以在存在无效和恶意活动故障的情况下进行存储。随着信息机密性的增加，这种机制得到加强; 即处理器串通不应该能够了解有关信息的任何内容。此外，在这种情况下，空间最优性得以保留。

2. 发明授权

US5991414A Method and apparatus for the secure distributed storage and retrieval of information 失效
标题翻译：用于安全分布式存储和检索信息的方法和装置
公开(公告)号：US5991414A
公开(公告)日：1999-11-23
申请号：US928982
申请日：1997-09-12
申请人： Juan Alberto Garay , Rosario Gennaro , Charanjit Singh Jutla , Tal D. Rabin
发明人： Juan Alberto Garay , Rosario Gennaro , Charanjit Singh Jutla , Tal D. Rabin
IPC分类号： H04L9/30 , H04L9/00
CPC分类号： H04L9/302 , H04L9/085 , H04L9/3257 , Y10S707/99953
摘要： A solution to the general problem of Secure Storage and Retrieval of Information (SSRI) guarantees that also the process of storing the information is correct even when some processors fail. A user interacts with the storage system by depositing a file and receiving a proof that the deposit was correctly executed. The user interacts with a single distinguished processor called the gateway. The mechanism enables storage in the presence of both inactive and maliciously active faults, while maintaining (asymptotical) space optimailty. This mechanism is enhanced with the added requirement of confidentiality of information; i.e., that a collusion of processors should not be able to learn anything about the information. Also, in this case space optimality is preserved.
摘要翻译：安全存储和信息检索（SSRI）的一般问题的解决方案保证即使某些处理器出现故障，存储信息的过程也是正确的。用户通过存放文件和接收证明表明存款被正确执行，与存储系统进行交互。用户与称为网关的单个不同的处理器进行交互。在保持（渐近）空间优化的同时，机制可以在存在无效和恶意活动故障的情况下进行存储。随着信息机密性的增加，这种机制得到加强; 即处理器串通不应该能够了解有关信息的任何内容。此外，在这种情况下，空间最优性得以保留。

3. 发明授权

US5999625A Method for electronic payment system with issuer control 失效
标题翻译：具有发行人控制权的电子支付系统方法
公开(公告)号：US5999625A
公开(公告)日：1999-12-07
申请号：US807167
申请日：1997-02-27
申请人： Mihir Bellare , Juan Alberto Garay , Charanjit Singh Jutla , Marcel Mordechay Yung
发明人： Mihir Bellare , Juan Alberto Garay , Charanjit Singh Jutla , Marcel Mordechay Yung
IPC分类号： H04L9/32 , G06Q20/06 , G06Q20/08 , G06Q20/10 , G06Q20/22 , G06Q20/26 , G06Q20/36 , G06Q20/38 , G07F7/08 , G09C1/00 , H04L9/00
CPC分类号： G06Q20/10 , G06Q20/06 , G06Q20/0855 , G06Q20/26 , G06Q20/29 , G06Q20/3678 , G06Q20/382 , G06Q20/3821 , G06Q20/385
摘要： A cryptographic method implemented on an electronic communication network interconnecting a plurality of terminals represents funds in a way that is secure at the issuer and secure when funds move from payer to payee and back to the issuer. The cryptographic method mints, issues, pays and redeems funds when transactions are done over the network with the flow and transaction of funds being controlled by an issuer. The method implements electronic money acquisition, transfer of money between users in an unrestricted way and in a way where fraud is impossible cryptographically, and redemption of electronic money to correct real money bank accounts. Funds are handled so that their representation enables the issuer to treat the representation as a physical monetary instrument equivalent to notes or coins.
摘要翻译：在连接多个终端的电子通信网络上实施的加密方法以资金从发行人转移到收款人并返回给发行人的方式代表发行人的安全的方式。密码，问题，支付和赎回资金，当通过网络进行交易时，资金的流动和交易由发行人控制。该方法实行电子货币收购，以不受限制的方式在用户之间转移货币，并以密码方式进行欺诈的方式，以及赎回电子货币以纠正真正的货币银行账户。处理资金，使其发行人能够将代表处理为相当于票据或硬币的实体货币工具。

4. 发明授权

US06963982B1 Method and apparatus for application-independent end-to-end security in shared-link access networks 有权
标题翻译：共享链路接入网络中与应用无关的端到端安全性的方法和装置
公开(公告)号：US06963982B1
公开(公告)日：2005-11-08
申请号：US09698978
申请日：2000-10-27
申请人： Jose′ C. Brustoloni , Juan Alberto Garay
发明人： Jose′ C. Brustoloni , Juan Alberto Garay
IPC分类号： H04L9/00 , H04L29/06 , H04L29/12
CPC分类号： H04L29/12009 , H04L29/12377 , H04L29/12462 , H04L29/125 , H04L29/12556 , H04L61/2517 , H04L61/255 , H04L61/2564 , H04L61/2585 , H04L63/029 , H04L63/164
摘要： Clients that are connected on a private network and which are assigned a private IP address that is not routable on the Internet can connect to the Internet through a router/server that includes a network address translator (NAT). For outgoing packets, the NAT translates the client's private source IP address and generalized port number (GPN) to the NAT's global IP address and GPN. For incoming packets sent to the NAT's global IP address and GPN, the NAT translates the global destination IP address and GPN to the client's private IP address and GPN. For protocols which cannot be directly supported by the NAT, such as those in the IPSec security protocol suite, the NAT is extended by creating in the NAT's translation table an entry that associates, for a specific unsupported protocol, a client's private IP address and GPN, the NAT's global IP address and GPN, and a foreign address on the Internet, that is valid until a specified or default expiration time. Outgoing packets from the client to that foreign address and incoming packets from that foreign address to the NAT's global IP address and GPN are translated according to the entry until the entry expires. In associations with these translations to outgoing and incoming packets, the client implements any Application Layer Gateway (ALG) that would otherwise be implemented at the NAT. Further, at the client, outgoing packets are modified before being transmitted so as to pre-compensate for the effects of the translations. Incoming packets at the client from the NAT are similarly modified so as to post-compensate for the effects of the translations. For the IPSec protocol, these modification include adjusting the checksum in the TCP or UDP header to account for IP address and TCP or UDP port number translations.
摘要翻译：连接在专用网络上且被分配了Internet上不可路由的私有IP地址的客户端可以通过包含网络地址转换器（NAT）的路由器/服务器连接到Internet。对于出站数据包，NAT将客户端的私有IP地址和广义端口号（GPN）转换为NAT的全局IP地址和GPN。对于发送到NAT的全局IP地址和GPN的传入数据包，NAT将全局目标IP地址和GPN转换为客户端的私有IP地址和GPN。对于NAT不能直接支持的协议（如IPSec安全协议套件中的协议），通过在NAT的转换表中创建一个条目来扩展NAT，对于特定的不支持的协议，客户端的私有IP地址和GPN ，NAT的全球IP地址和GPN以及互联网上的外部地址，直到指定或默认的到期时间才有效。从客户端到该外部地址的传出数据包以及从该外部地址到NAT的全局IP地址和GPN的传入数据包将根据条目进行转换，直到条目到期为止。在将这些转换与传出和传入的数据包相关联时，客户端将实现否则将在NAT处实现的任何应用层网关（ALG）。此外，在客户端，传出的数据包被修改，然后被传输，以便预先补偿翻译的效果。来自NAT的客户端的传入数据包也进行了类似的修改，以补偿翻译的效果。对于IPSec协议，这些修改包括调整TCP或UDP报头中的校验和，以考虑IP地址和TCP或UDP端口号转换。

5. 发明授权

US06886103B1 Method and apparatus for extending network address translation for unsupported protocols 失效
标题翻译：用于扩展不支持协议的网络地址转换的方法和装置
公开(公告)号：US06886103B1
公开(公告)日：2005-04-26
申请号：US09698973
申请日：2000-10-27
申请人： Jose C. Brustoloni , Juan Alberto Garay
发明人： Jose C. Brustoloni , Juan Alberto Garay
IPC分类号： H04L9/00 , H04L29/06 , H04L29/12
CPC分类号： H04L29/12009 , H04L29/12377 , H04L29/12462 , H04L29/125 , H04L29/12556 , H04L29/12924 , H04L61/2517 , H04L61/255 , H04L61/2564 , H04L61/2585 , H04L61/6063 , H04L63/0428 , H04L63/164
摘要： Clients that are connected on a private network and which are assigned a private IP address that is not routable on the Internet can connect to the Internet through a router/server that includes a network address translator (NAT). For outgoing packets, the NAT translates the client's private source IP address and generalized port number (GPN) to the NAT's global IP address and GPN. For incoming packets sent to the NAT's global IP address and GPN, the NAT translates the global destination IP address and GPN to the client's private IP address and GPN. For protocols which cannot be directly supported by the NAT, such as those in the IPSec security protocol suite, the NAT is extended by creating in the NAT's translation table an entry that associates, for a specific unsupported protocol, a client's private IP address and GPN, the NAT's global IP address and GPN, and a foreign address on the Internet, that is valid until a specified or default expiration time. Outgoing packets from the client to that foreign address and incoming packets from that foreign address to the NAT's global IP address and GPN are translated according to the entry until the entry expires. In associations with these translations to outgoing and incoming packets, the client implements any Application Layer Gateway (ALG) that would otherwise be implemented at the NAT. Further, at the client, outgoing packets are modified before being transmitted so as to pre-compensate for the effects of the translations. Incoming packets at the client from the NAT are similarly modified so as to post-compensate for the effects of the translations. For the IPSec protocol, these modification include adjusting the checksum in the TCP or UDP header to account for IP address and TCP or UDP port number translations.
摘要翻译：连接在专用网络上且被分配了Internet上不可路由的私有IP地址的客户端可以通过包含网络地址转换器（NAT）的路由器/服务器连接到Internet。对于出站数据包，NAT将客户端的私有IP地址和广义端口号（GPN）转换为NAT的全局IP地址和GPN。对于发送到NAT的全局IP地址和GPN的传入数据包，NAT将全局目标IP地址和GPN转换为客户端的私有IP地址和GPN。对于NAT不能直接支持的协议（如IPSec安全协议套件中的协议），通过在NAT的转换表中创建一个条目来扩展NAT，对于特定的不支持的协议，客户端的私有IP地址和GPN ，NAT的全球IP地址和GPN以及互联网上的外部地址，直到指定或默认的到期时间才有效。从客户端到该外部地址的传出数据包以及从该外部地址到NAT的全局IP地址和GPN的传入数据包将根据条目进行转换，直到条目到期为止。在将这些转换与传出和传入的数据包相关联时，客户端将实现否则将在NAT处实现的任何应用层网关（ALG）。此外，在客户端，传出的数据包被修改，然后被传输，以便预先补偿翻译的效果。来自NAT的客户端的传入数据包也进行了类似的修改，以补偿翻译的效果。对于IPSec协议，这些修改包括调整TCP或UDP报头中的校验和，以考虑IP地址和TCP或UDP端口号转换。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式