专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08650404B2 Communication protocol for secure communications systems 有权
标题翻译：用于安全通信系统的通信协议
公开(公告)号：US08650404B2
公开(公告)日：2014-02-11
申请号：US13406610
申请日：2012-02-28
申请人： Thomas J. Senese , Helen Y. Hoselton , Obaid Shahab
发明人： Thomas J. Senese , Helen Y. Hoselton , Obaid Shahab
IPC分类号： H04L29/00
CPC分类号： H04L63/123 , H04L9/0822 , H04L9/0891 , H04L9/3242 , H04L9/3247 , H04L2209/80 , H04W12/10
摘要： A method and apparatus for authenticating a key management message within a secure communication system is provided herein. During operation, a digital signature for message authentication of a Project 25 Key Management Message (KMM) is utilized. In particular, the digital signature will be used to authenticate the KMM in scenarios where there is no Message Authentication Code (MAC). The MAC will be utilized to authenticate the KMM when available. Because authentication of KMMs take place, even when no MAC is available, it becomes increasingly more difficult to tamper or spoof the delivery of encryption keys.
摘要翻译：本文提供了一种在安全通信系统内验证密钥管理消息的方法和装置。在操作期间，利用了一个用于项目25密钥管理消息（KMM）的消息认证的数字签名。特别地，在不存在消息认证码（MAC）的情况下，数字签名将用于认证KMM。当可用时，MAC将用于认证KMM。由于KMM的认证发生，即使没有MAC可用，变得越来越难以篡改或欺骗加密密钥的传送。

2. 发明授权

US09143321B2 Communication protocol for secure communications systems 有权
标题翻译：用于安全通信系统的通信协议
公开(公告)号：US09143321B2
公开(公告)日：2015-09-22
申请号：US13416468
申请日：2012-03-09
申请人： Thomas J. Senese , Helen Y. Hoselton , Obaid Shahab
发明人： Thomas J. Senese , Helen Y. Hoselton , Obaid Shahab
IPC分类号： H04L9/08 , H04W12/04 , H04L29/06 , H04W84/08 , H04W12/02
CPC分类号： H04L9/0822 , H04L9/0825 , H04L63/0442 , H04L2463/062 , H04W12/02 , H04W12/04 , H04W84/08
摘要： A method and apparatus for transmitting encryption keys in a secure communication system is provided herein. During rekeying of a device, a key encryption key (KEK) is utilized to wrap (encrypt) the traffic encryption key (TEK) when the KEK is available to the device. If unavailable, the TEK will be wrapped using public key encryption with the recipient device's public key. The receiving device will then be able to unwrap the TEK using public key decryption with its own private key. Because TEKs are always transmitted in a secure manner, secure and efficient rekeying of devices on foreign networks can occur.
摘要翻译：本发明提供一种用于在安全通信系统中发送加密密钥的方法和装置。在设备的密钥更新期间，当KEK可用于设备时，利用密钥加密密钥（KEK）来包裹（加密）流量加密密钥（TEK）。如果不可用，TEK将使用公钥加密与收件人设备的公钥进行包装。接收设备将能够使用其自己的私钥使用公钥解密来解开TEK。由于TEK始终以安全的方式传输，因此可能会发生外部网络上设备的安全高效的密钥密钥。

3. 发明授权

US08861482B2 Method and apparatus for providing application service between a first protocol and a second protocol 有权
标题翻译：用于在第一协议和第二协议之间提供应用服务的方法和装置
公开(公告)号：US08861482B2
公开(公告)日：2014-10-14
申请号：US12570835
申请日：2009-09-30
申请人： Dennis R. Newkirk , Richard J. Bitter , Leslie G. Gustafson , Chris A. Kruegel , Obaid Shahab , Ryan P. Ziolko
发明人： Dennis R. Newkirk , Richard J. Bitter , Leslie G. Gustafson , Chris A. Kruegel , Obaid Shahab , Ryan P. Ziolko
IPC分类号： H04W80/00 , H04W84/00 , H04J3/24 , H04L29/06 , H04W12/04 , H04B7/216 , H04W84/08
CPC分类号： H04W12/04 , H04L69/08 , H04L69/18 , H04W84/08
摘要： Application service is provided for a subscriber unit (SU), employing a first protocol, in a communication network employing a second protocol. The method includes receiving a CAI OTAR message from the SU. The CAI OTAR message includes at least a key management message (KMM) and a CAI header of the SU. The method then includes determining that the first protocol employed by the SU is different from the second protocol associated with the communication network based on the received CAI OTAR message. The method further includes creating a key management message (KMM) preamble, associated with the second protocol, based on at least one of the CAI header and configuration information of the SU, and creating a data link independent (DLI) OTAR message associated with the second protocol. The DLI OTAR message includes the received KMM. The method finally includes encapsulating the DLI OTAR message with the created KMM preamble, and sending the encapsulated DLI OTAR message to a key management facility (KMF) unit operating at a second protocol.
摘要翻译：在采用第二协议的通信网络中，为采用第一协议的用户单元（SU）提供应用服务。该方法包括从SU接收CAI OTAR消息。 CAI OTAR消息至少包括SU的密钥管理消息（KMM）和CAI头。该方法然后包括基于所接收的CAI OTAR消息来确定SU使用的第一协议不同于与通信网络相关联的第二协议。所述方法还包括基于所述SU的所述CAI头部和配置信息中的至少一个，创建与所述第二协议相关联的密钥管理消息（KMM）前导码，以及创建与所述第二协议相关联的数据链路无关（DLI）OTAR消息第二个协议。 DLI OTAR消息包括接收到的KMM。该方法最终包括用所创建的KMM前导码封装DLI OTAR消息，并将封装的DLI OTAR消息发送到以第二协议操作的密钥管理设备（KMF）单元。

4. 发明申请

US20110075614A1 METHOD AND APPARATUS FOR PROVIDING APPLICATION SERVICE BETWEEN A FIRST PROTOCOL AND A SECOND PROTOCOL 有权
标题翻译： “第一个协议”和“第二个协议”之间提供应用程序服务的方法和装置
公开(公告)号：US20110075614A1
公开(公告)日：2011-03-31
申请号：US12570835
申请日：2009-09-30
申请人： Dennis R. Newkirk , Richard J. Bitter , Leslie G. Gustafson , Chris A. Kruegel , Obaid Shahab , Ryan P. Ziolko
发明人： Dennis R. Newkirk , Richard J. Bitter , Leslie G. Gustafson , Chris A. Kruegel , Obaid Shahab , Ryan P. Ziolko
IPC分类号： H04W80/00 , H04W84/00 , H04J3/24
CPC分类号： H04W12/04 , H04L69/08 , H04L69/18 , H04W84/08
摘要： Application service is provided for a subscriber unit (SU), employing a first protocol, in a communication network employing a second protocol. The method includes receiving a CAI OTAR message from the SU. The CAI OTAR message includes at least a key management message (KMM) and a CAI header of the SU. The method then includes determining that the first protocol employed by the SU is different from the second protocol associated with the communication network based on the received CAI OTAR message. The method further includes creating a key management message (KMM) preamble, associated with the second protocol, based on at least one of the CAI header and configuration information of the SU, and creating a data link independent (DLI) OTAR message associated with the second protocol. The DLI OTAR message includes the received KMM. The method finally includes encapsulating the DLI OTAR message with the created KMM preamble, and sending the encapsulated DLI OTAR message to a key management facility (KMF) unit operating at a second protocol.
摘要翻译：在采用第二协议的通信网络中，为采用第一协议的用户单元（SU）提供应用服务。该方法包括从SU接收CAI OTAR消息。 CAI OTAR消息至少包括SU的密钥管理消息（KMM）和CAI头。该方法然后包括基于所接收的CAI OTAR消息来确定SU使用的第一协议不同于与通信网络相关联的第二协议。所述方法还包括：基于所述SU的CAI头部和配置信息中的至少一个，创建与所述第二协议相关联的密钥管理消息（KMM）前同步码，以及创建与所述第二协议相关联的数据链路无关（DLI）OTAR消息第二个协议。 DLI OTAR消息包括接收到的KMM。该方法最终包括用所创建的KMM前导码封装DLI OTAR消息，并将封装的DLI OTAR消息发送到以第二协议操作的密钥管理设备（KMF）单元。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式