专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20050097362A1 Protected dynamic provisioning of credentials 有权
标题翻译：受保护的凭据的动态配置
公开(公告)号：US20050097362A1
公开(公告)日：2005-05-05
申请号：US10702167
申请日：2003-11-05
申请人： Nancy Winget , Mark Krischer , Ilan Frenkel , Hao Zhou
发明人： Nancy Winget , Mark Krischer , Ilan Frenkel , Hao Zhou
IPC分类号： H04L9/00 , H04L9/08 , H04L29/06
CPC分类号： H04L63/0442 , H04L63/0435 , H04L63/061 , H04L63/0823 , H04L63/162 , H04L63/166
摘要： A method and implementation is disclosed for secure communication between two or more parties. A secure tunnel is established between parties using an encryption algorithm. An authentication process is performed between parties over the secured tunnel. The provisioning of credentials is thereafter performed between parties.
摘要翻译：公开了一种用于两个或多个方之间的安全通信的方法和实现。使用加密算法在各方之间建立安全通道。在安全隧道之间的各方之间执行认证过程。之后在各方之间执行凭证的提供。

2. 发明申请

US20050120213A1 System and method for provisioning and authenticating via a network 审中-公开
标题翻译：通过网络进行配置和认证的系统和方法
公开(公告)号：US20050120213A1
公开(公告)日：2005-06-02
申请号：US10724995
申请日：2003-12-01
申请人： Nancy Winget , Hao Zhou , Mark Krischer , Joseph Salowey , Jeremy Stieglitz , Saar Gillai , Padmanabha Jakkahalli
发明人： Nancy Winget , Hao Zhou , Mark Krischer , Joseph Salowey , Jeremy Stieglitz , Saar Gillai , Padmanabha Jakkahalli
IPC分类号： H04L29/06 , H04L9/00
CPC分类号： H04L63/08 , H04L9/0838 , H04L63/0435 , H04L63/0442 , H04L63/0869 , H04L63/1458 , H04W12/0023 , H04W12/02 , H04W12/08 , H04W12/12
摘要： System architecture and corresponding method for securing communication via a network (e.g. IEEE 802.11) is provided. In accordance with one embodiment, the present system and method protocol, may be suitably configured to achieve mutual authentication by using a shared secret to establish a tunnel used to protect weaker authentication methods (e.g. user names and passwords). The shared secret, referred to in this embodiment as the protected access credential may be advantageously used to mutually authenticate a server and a peer upon securing a tunnel for communication via a network. The present system and method disclosed and claimed herein, in one aspect thereof, comprises the steps of 1) providing a communication implementation between a first and a second party; 2) provisioning a secure credential between the first and the second party; and 3) establishing a secure tunnel between the first and the second party using the secure credential.
摘要翻译：提供了用于通过网络（例如，IEEE 802.11）保护通信的系统架构和相应的方法。根据一个实施例，本系统和方法协议可以被适当地配置为通过使用共享秘密来建立用于保护较弱认证方法（例如，用户名和密码）的隧道来实现相互认证。在本实施例中被称为受保护的访问凭证的共享秘密可以有利地用于在保护用于经由网络进行通信的隧道的相互认证服务器和对等体之间。在本文中公开和要求保护的本系统和方法在其一个方面包括以下步骤：1）提供第一方和第二方之间的通信实现; 2）在第一方和第二方之间提供安全证书; 以及3）使用安全证书在第一方和第二方之间建立安全隧道。

3. 发明授权

US07788480B2 Protected dynamic provisioning of credentials 有权
标题翻译：受保护的凭据的动态配置
公开(公告)号：US07788480B2
公开(公告)日：2010-08-31
申请号：US10702167
申请日：2003-11-05
申请人： Nancy Cam Winget , Mark Krischer , Ilan Frenkel , Hao Zhou
发明人： Nancy Cam Winget , Mark Krischer , Ilan Frenkel , Hao Zhou
IPC分类号： H04L29/06 , G06F15/173 , G06F15/16
CPC分类号： H04L63/0442 , H04L63/0435 , H04L63/061 , H04L63/0823 , H04L63/162 , H04L63/166
摘要： A method and implementation is disclosed for secure communication between two or more parties. A secure tunnel is established between parties using an encryption algorithm. An authentication process is performed between parties over the secured tunnel. The provisioning of credentials is thereafter performed between parties.
摘要翻译：公开了一种用于两个或多个方之间的安全通信的方法和实现。使用加密算法在各方之间建立安全通道。在安全隧道之间的各方之间执行认证过程。之后在各方之间执行凭证的提供。

4. 发明申请

US20060193299A1 Location-based enhancements for wireless intrusion detection 审中-公开
标题翻译：基于位置的无线入侵检测增强功能
公开(公告)号：US20060193299A1
公开(公告)日：2006-08-31
申请号：US11066009
申请日：2005-02-25
申请人： Nancy Winget , Mark Krischer , Timothy Olson , Sheausong Yang
发明人： Nancy Winget , Mark Krischer , Timothy Olson , Sheausong Yang
IPC分类号： H04Q7/24
CPC分类号： H04W12/12 , H04L63/0492 , H04L63/107 , H04L63/1408 , H04L63/1466 , H04W12/06 , H04W40/246 , H04W84/12 , H04W84/18
摘要： In a wireless local area network, a method for detecting the presence of an unauthorized device comprises: detecting the presence of neighboring devices from which management frames can be sent; saving a representation of each neighboring device present; receiving a management frame purporting to be from one of the detected device; determining that the received management frame was sent by an unauthorized device; and indicating the presence of the unauthorized device.
摘要翻译：在无线局域网中，用于检测未授权设备的存在的方法包括：检测可以发送管理帧的相邻设备的存在; 保存存在的每个相邻设备的表示; 接收来自检测到的设备之一的管理帧; 确定所接收的管理帧是由未经授权的设备发送的; 并指示未经授权的设备的存在。

5. 发明申请

US20110113252A1 CONCIERGE REGISTRY AUTHENTICATION SERVICE 审中-公开
标题翻译：协调注册认证服务
公开(公告)号：US20110113252A1
公开(公告)日：2011-05-12
申请号：US12613784
申请日：2009-11-06
申请人： Mark Krischer , James Edward Burns , Nancy Cam-Winget , Esteban Raul Torres
发明人： Mark Krischer , James Edward Burns , Nancy Cam-Winget , Esteban Raul Torres
IPC分类号： H04L9/32
CPC分类号： H04L63/0823 , H04L63/126 , H04W12/12 , H04W48/08 , H04W48/18
摘要： In an example embodiment described herein is an apparatus comprising a transceiver configured to send and receive data, and logic coupled to the transceiver. The logic is configured to determine from a beacon received by the wireless transceiver whether an associated wireless device sending the beacon supports a protocol for advertising available services from the associated wireless device. The logic is configured to send a request for available services from the associated wireless device via the wireless transceiver responsive to determining the associated wireless device supports the protocol. The logic is configured to receive a response to the request via the wireless transceiver, the response comprising a signature. The logic is configured to validate the response by confirming the signature comprises network data cryptographically bound with service data.
摘要翻译：在这里描述的一个示例实施例中，包括被配置为发送和接收数据的收发机和耦合到收发器的逻辑的装置。逻辑被配置为从由无线收发机接收的信标确定发送信标的相关联的无线设备是否支持用于从相关联的无线设备广告可用服务的协议。逻辑被配置为响应于确定相关联的无线设备支持协议，经由无线收发器从相关联的无线设备发送可用服务的请求。逻辑被配置为经由无线收发器接收对请求的响应，响应包括签名。逻辑被配置为通过确认签名包括加密地与服务数据绑定的网络数据来验证响应。

6. 发明申请

US20060014522A1 Method and apparatus to provide inline encryption and decryption for a wireless station via data streaming over a fast network 有权
公开(公告)号：US20060014522A1
公开(公告)日：2006-01-19
申请号：US11198664
申请日：2005-08-05
申请人： Mark Krischer , Philip Ryan , Michael Webb
发明人： Mark Krischer , Philip Ryan , Michael Webb
IPC分类号： H04K1/00
CPC分类号： H04L65/604 , H04L29/06027 , H04L63/0485 , H04L63/06 , H04L63/08 , H04L65/602 , H04L65/607 , H04W12/02 , H04W28/14 , H04W76/10
摘要： A method of wirelessly transmitting or receiving a packet of information, and an apparatus to wirelessly transmit or receive a packet of information. In the case of transmitting, the method includes streaming a data element, including at least some of the contents of the packet, over a network link during transmit time, including encrypting the data element during the streaming in real time prior to the transfer over the network link. In the case of receiving, the method includes streaming a data element, including at least some of the contents of the received packet, over a network link during receive time, including decrypting the data element during the streaming in real time after to the transfer over the network link. The transmitting or receiving is by a station of a wireless network and the streaming is to or from the station from or to a network device coupled to the station by the network link.

7. 发明申请

US20090125981A1 SYSTEM AND METHOD FOR WIRELESS NETWORK AND PHYSICAL SYSTEM INTEGRATION 有权
标题翻译：无线网络和物理系统集成的系统与方法
公开(公告)号：US20090125981A1
公开(公告)日：2009-05-14
申请号：US11939355
申请日：2007-11-13
申请人： Mark Krischer , Simon King
发明人： Mark Krischer , Simon King
IPC分类号： H04L9/00
CPC分类号： H04W12/12 , G08B13/19608 , G08B13/19645 , G08B13/19697 , H04L63/1416 , H04W48/04 , H04W84/12
摘要： In one embodiment, an apparatus includes an intrusion detection arrangement and a location identification arrangement. The intrusion detection arrangement determines when a client without authorization attempts to access a wireless network of which the intrusion detection arrangement is a part. The location identification arrangement identifies at least a first approximate physical location of the client without authorization when the client without authorization attempts to access the wireless network. The location identification arrangement is configured to communicate the first approximate physical location to a surveillance arrangement which monitors the first approximate physical location
摘要翻译：在一个实施例中，一种装置包括入侵检测装置和位置识别装置。入侵检测装置确定客户端何时未经许可尝试访问入侵检测装置是其中的一部分的无线网络。当客户端无权限尝试访问无线网络时，位置识别装置在未经授权的情况下至少识别客户端的第一近似物理位置。位置识别装置被配置为将第一近似物理位置传送到监视第一近似物理位置的监视装置

8. 发明申请

US20080184331A1 Intrusion Prevention System for Wireless Networks 有权
标题翻译：无线网络入侵防御系统
公开(公告)号：US20080184331A1
公开(公告)日：2008-07-31
申请号：US11668206
申请日：2007-01-29
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara
IPC分类号： G06F21/00 , H04L9/00
CPC分类号： H04W12/08 , H04L63/0227 , H04L63/123 , H04L63/1408 , H04W12/02 , H04W84/12
摘要： In one embodiment, a method includes receiving security context information relevant to a connection between a wireless network infrastructure component and a wireless client, wherein the security context information comprises at least, an identification of the wireless client, and wherein the security context information identifies any security protocols associated with the connection; validating the connection based on the security context information; and transmitting the security context information to one or more detector wireless access points.
摘要翻译：在一个实施例中，一种方法包括接收与无线网络基础设施组件和无线客户端之间的连接相关的安全上下文信息，其中所述安全上下文信息至少包括所述无线客户端的标识，并且其中所述安全上下文信息标识任何与连接相关的安全协议; 基于安全上下文信息验证连接; 以及将所述安全上下文信息发送到一个或多个检测器无线接入点。

9. 发明授权

US08627470B2 System and method for wireless network and physical system integration 有权
标题翻译：无线网络和物理系统集成的系统和方法
公开(公告)号：US08627470B2
公开(公告)日：2014-01-07
申请号：US11939355
申请日：2007-11-13
申请人： Mark Krischer , Simon King
发明人： Mark Krischer , Simon King
IPC分类号： G06F11/00 , G08B23/00 , G06F17/30 , G06F15/16 , H04W24/00
CPC分类号： H04W12/12 , G08B13/19608 , G08B13/19645 , G08B13/19697 , H04L63/1416 , H04W48/04 , H04W84/12
摘要： In one embodiment, an apparatus includes an intrusion detection arrangement and a location identification arrangement. The intrusion detection arrangement determines when a client without authorization attempts to access a wireless network of which the intrusion detection arrangement is a part. The location identification arrangement identifies at least a first approximate physical location of the client without authorization when the client without authorization attempts to access the wireless network. The location identification arrangement is configured to communicate the first approximate physical location to a surveillance arrangement which monitors the first approximate physical location.
摘要翻译：在一个实施例中，一种装置包括入侵检测装置和位置识别装置。入侵检测装置确定客户端何时未经许可尝试访问入侵检测装置是其中的一部分的无线网络。当客户端无权限尝试访问无线网络时，位置识别装置在未经授权的情况下至少识别客户端的第一近似物理位置。位置识别装置被配置为将第一近似物理位置传送到监视第一近似物理位置的监视装置。

10. 发明授权

US07882349B2 Insider attack defense for network client validation of network management frames 有权
标题翻译：内部网络攻击防范网络客户端验证网络管理帧
公开(公告)号：US07882349B2
公开(公告)日：2011-02-01
申请号：US11295334
申请日：2005-12-06
申请人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
发明人： Nancy Cam-Winget , Mark Krischer , Robert B. O'Hara, Jr.
IPC分类号： H04L29/06 , H04L9/32 , G06F9/00
CPC分类号： H04L63/061 , H04L63/123 , H04L63/1441 , H04W12/08
摘要： Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.
摘要翻译：用于检测在接入点与其无线客户端之间共享的广播密钥的攻击的方法。在检测到攻击后，将采取行动来对一个或多个安全策略中定义的攻击做出反应。通过检查包含在广播管理帧中的链路消息完整性检查和基础架构管理帧保护（IMFP）消息完整性检查来实现攻击的检测。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式