专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

WO2003041358A1 PROVIDING LOCATION PRIVACY IN COMMUNICATION NETWORKS 审中-公开
标题翻译：在通信网络中提供位置隐私
公开(公告)号：WO2003041358A1
公开(公告)日：2003-05-15
申请号：PCT/IB2002/004656
申请日：2002-11-07
申请人： NOKIA CORPORATION , LE, Franck , FACCIN, Stefano, M.
发明人： LE, Franck , FACCIN, Stefano, M.
IPC分类号： H04L29/06
CPC分类号： H04W12/02 , H04L29/12009 , H04L61/00 , H04L63/0407 , H04L63/0428 , H04L63/107 , H04W8/065 , H04W8/082 , H04W8/16 , H04W80/00 , H04W80/04
摘要： A method for providing location privacy. A mobile node, identified by its permanent address is addressable by a temporary address. A correspondent node, in communication with the mobile node, always sends its packets to the permanent address. These packets are intercepted by an agent, similar to the mobile IP home agent, which then tunnels these packets to the temporary address. Thereby the mobile node’s temporary address, from which the mobile node’s location can be derived, is not revealed to the correspondent node. For route optimization, a server entity maintaining records of the agents and their positions is introduced which dynamically allocates on per connection basis an agent to a mobile node.
摘要翻译：提供位置隐私的方法。由其永久地址识别的移动节点可通过临时地址寻址。与移动节点通信的通信节点始终将其分组发送到永久地址。这些数据包被代理拦截，类似于移动IP归属代理，然后将这些数据包隧道传送到临时地址。因此，移动节点的移动节点的位置可以从其导出的临时地址不会被显示给对端节点。对于路由优化，引入维护代理及其位置的记录的服务器实体，其基于每个连接将代理动态地分配给移动节点。

12. 发明申请

WO2003007573A1 A MECHANISM TO ALLOW AUTHENTICATION OF SIP CALLS TERMINATED TO A MOBILE NODE 审中-公开
标题翻译：允许将SIP通知终止到移动节点的机制
公开(公告)号：WO2003007573A1
公开(公告)日：2003-01-23
申请号：PCT/IB2002/002718
申请日：2002-07-11
申请人： NOKIA CORPORATION , FACCIN, Stefano , LE, Franck
发明人： FACCIN, Stefano , LE, Franck
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , H04L29/06027 , H04L65/1006 , H04L65/1069 , H04M7/00 , H04M7/0078 , H04W12/06 , H04W48/08
摘要： The invention proposes a method of performing authentication of a subscriber during a subscriber equipment terminated call, comprising the steps of sending a session invitation message (S4, S5) to the subscriber equipment, the session invitation message including authentication information (AuthData1), and performing an authentication procedure in the subscriber equipment by using the authentication information. The invention also proposes a corresponding network system, network control element and subscriber entity.
摘要翻译：本发明提出了一种在用户设备终止呼叫期间对用户进行认证的方法，包括以下步骤：向所述用户设备发送会话邀请消息（S4，S5），所述会话邀请消息包括认证信息（AuthData1），以及执行通过使用认证信息在用户设备中的认证过程。本发明还提出了一种相应的网络系统，网络控制元件和用户实体。

13. 发明申请

WO2002098098A2 METHOD OF COMMUNICATING A FLOW OF DATA PACKETS ACROSS A NETWORK 审中-公开
标题翻译：通过网络传播数据包流的方法
公开(公告)号：WO2002098098A2
公开(公告)日：2002-12-05
申请号：PCT/IB2002/001848
申请日：2002-05-28
申请人： NOKIA CORPORATION , ZHENG, Haihong , LE, Franck , FACCIN, Stefano, M.
发明人： ZHENG, Haihong , LE, Franck , FACCIN, Stefano, M.
IPC分类号： H04L29/00
CPC分类号： H04L69/22
摘要： tA method of communicating a flow of data packets across a network, said network comprising routing means including communication nodes and communication endpoints, wherein a data packet is structured to have a plurality of fields including header fields and payload fields and such a data packet is communicated from endpoint to endpoint via at least one node; the method comprising the steps of generating (S31) a flow identity number for said flow by an originating endpoint of said flow; writing (S32), by said originating endpoint, at least a source address of said flow and a destination address of said flow into header fields of each of data packets belonging to said flow; writing (S32) said flow identity number into a header field of each data packet belonging to said flow which is examined by every routing means along the communication path of said flow, but remains unchanged during the whole communication; and examining (S33) the header fields containing said flow identity number, said source address and said destination address by every (S36) routing means along the communication path of said flow, wherein said flow is uniquely identified by the flow identity number being unique itself, or by combination of said source address and said flow identity number, or by combination of said source address and said destination address and said flow identity number.(Fig. 3)
摘要翻译： tA通过网络传送数据分组流的方法，所述网络包括包括通信节点和通信端点的路由装置，其中数据分组被构造为具有多个字段，包括报头字段和有效载荷字段，并且这样的数据分组被传送通过至少一个节点从端点到端点; 该方法包括以下步骤：由所述流的始发端产生（S31）所述流的流标识号; 由所述始发端点写入（S32）至少将所述流的源地址和所述流的目的地址转换成属于所述流的每个数据分组的报头字段; 将所述流标识号写入（S32），将所述流标识号写入属于所述流的每个数据分组的报头字段，所述报头字段由每个路由装置沿着所述流的通信路径检查，但在整个通信期间保持不变; 以及沿着所述流的通信路径，通过每个（S36）路由装置检查（S33）包含所述流标识号，所述源地址和所述目的地地址的报头字段，其中所述流由唯一标识的唯一标识符，或通过所述源地址和所述流标识号的组合，或通过所述源地址和所述目的地地址和所述流标识号的组合（图3）

14. 发明申请

WO2006021836A1 METHOD AND SYSTEM FOR CONFIGURING FIREWALLS IN THE PRESENCE OF PERFORMANCE ENHANCEMENT PROXIES 审中-公开
标题翻译：在性能增强项目存在下配置防火墙的方法和系统
公开(公告)号：WO2006021836A1
公开(公告)日：2006-03-02
申请号：PCT/IB2005/001749
申请日：2005-06-21
申请人： NOKIA CORPORATION , LE, Franck , LIU, Zhigang, C.
发明人： LE, Franck , LIU, Zhigang, C.
IPC分类号： H04L29/06
CPC分类号： H04L65/1006 , H04L63/0281 , H04L63/029 , H04L65/1016 , H04L65/105 , H04L65/1069 , H04L65/80 , H04L69/329
摘要： Signaling between a terminal equipment (10) and a session server (40) is provided which carries information on an expected media stream to or from the terminal equipment via a middle box (20) for optimizing the performance of data communications between the terminal equipment (10) and a correspondent node (30). On the basis of this information the session server (40) is enabled to create appropriate entries in a security entity (50) provided for the terminal equipment so that the media stream can successfully traverse the middle box (20) and the security entity (50).
摘要翻译：提供终端设备（10）和会话服务器（40）之间的信令，其经由用于优化终端设备（20）之间的数据通信的性能的中间盒（20）将期望媒体流的信息携带到终端设备或从终端设备 10）和通讯节点（30）。基于该信息，会话服务器（40）能够在为终端设备提供的安全实体（50）中创建适当的条目，使得媒体流可以成功地遍历中间盒（20）和安全实体（50））。

15. 发明申请

WO2005117327A2 A SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR UPDATING THE STATES OF A FIREWALL 审中-公开
标题翻译：用于更新防火墙状态的系统，方法和计算机程序产品
公开(公告)号：WO2005117327A2
公开(公告)日：2005-12-08
申请号：PCT/IB2005/001490
申请日：2005-05-27
申请人： NOKIA INC. , LE, Franck , FACCIN, Stefano
发明人： LE, Franck , FACCIN, Stefano
IPC分类号： H04L9/00
CPC分类号： H04L63/0263 , H04L63/029 , H04L63/0823
摘要： The preferred embodiment of the present invention is a method and computer program product that specifies an array of elements to be incorporated into a firewall configuration protocol. When added to the configuration protocol, these added attributes allow the existing packet filtering mechanism to accommodate a terminal device that has moved and received a new IP address in a timely and efficient manner.
摘要翻译：本发明的优选实施例是一种方法和计算机程序产品，其指定要并入到防火墙配置协议中的元素阵列。当添加到配置协议中时，这些添加的属性允许现有的分组过滤机制适应已经移动和接收到新的IP地址的终端设备以及时和有效的方式。

16. 发明申请

WO2002069605A2 METHOD AND SYSTEM FOR DELEGATION OF SECURITY PROCEDURES TO A VISITED DOMAIN 审中-公开
标题翻译：将安全程序视为可视域的方法和系统
公开(公告)号：WO2002069605A2
公开(公告)日：2002-09-06
申请号：PCT/US2002/001830
申请日：2002-01-24
申请人： NOKIA CORPORATION , FACCIN, Stefano
发明人： FACCIN, Stefano , LE, Franck
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , H04L9/083 , H04L9/321 , H04L9/3271 , H04L63/067 , H04L63/0892 , H04L63/107 , H04L63/123 , H04L2209/80 , H04L2463/061 , H04W12/04 , H04W12/06 , H04W36/0038
摘要： A method and system for delegation of security procedures to a second domain. A first key is generated for a mobile node. The first key is stored at the mobile node and at a home domain of the mobile node. The mobile node is moved to the second domain. A request is sent from the second domain to the home domain to authenticate the mobile node. A second key is generated at the home domain using the first key and a random number. The random number and the second key are sent to the second domain. The random number is sent to the mobile node by the second domain. The mobile node generates the second key using the random number and the first key. The second key is used for authentication procedures and/or key derivation procedures between the mobile node and the second domain.
摘要翻译：用于将安全程序委派给第二域的方法和系统。为移动节点生成第一个密钥。第一个密钥存储在移动节点和移动节点的归属域。移动节点被移动到第二域。将请求从第二域发送到归属域以认证移动节点。第二个密钥是使用第一个密钥和随机数在归属域生成的。随机数和第二个密钥被发送到第二个域。该随机数由第二域发送到移动节点。移动节点使用随机数和第一个密钥生成第二个密钥。第二个密钥用于移动节点和第二个域之间的认证过程和/或密钥导出过程。

17. 发明申请

WO2006082507A1 APPARATUS, METHOD AND COMPUTER PROGRAM PRODUCT TO REDUCE TCP FLOODING ATTACKS WHILE CONSERVING WIRELESS NETWORK BANDWIDTH 审中-公开
标题翻译：装置，方法和计算机程序产品，以减少无线网络带宽下的TCP流量攻击
公开(公告)号：WO2006082507A1
公开(公告)日：2006-08-10
申请号：PCT/IB2006/000208
申请日：2006-02-03
申请人： NOKIA CORPORATION , NOKIA, INC. , SWAMI, Yogesh, P. , LE, Franck
发明人： SWAMI, Yogesh, P. , LE, Franck
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , H04W12/12
摘要： A method for operating a firewall includes: in response to the firewall receiving a TCP SYN request packet that is sent towards a first node from a second node, said TCP SYN request packet comprising a sequence value ("seq"), sending to the second node a SYNæACK packet, said SYNæACK packet comprising a seq and an ack_ sequence value ("ack_seq"), where ack_seq of the SYNæACK packet is not equal to the TCP SYN request packet's seq+1; and in response to the firewall receiving a TCP RST packet from the second node, verifying that the seq in the TCP RST packet matches the ack_seq of the SYNæACK packet and, if it does, designating the connection with the second node as an authorized connection.
摘要翻译：一种用于操作防火墙的方法包括：响应于防火墙接收从第二节点向第一节点发送的TCP SYN请求分组，所述TCP SYN请求分组包括序列值（“seq”），发送到第二节点节点SYNACKACK分组，所述SYNACKACK分组包括seq和ack_序列值（“ack_seq”），其中SYNACKACK分组的ack_seq不等于TCP SYN请求分组的seq + 1; 并且响应于防火墙从第二节点接收到TCP RST分组，验证TCP RST分组中的seq与SYNACKACK分组的ack_seq匹配，如果是，则指定与第二节点的连接作为授权连接。

18. 发明申请

WO2006134505A1 METHOD, SYSTEM AND NETWORK ELEMENTS FOR ESTABLISHING MEDIA PROTECTION OVER NETWORKS 审中-公开
标题翻译：用于建立网络媒体保护的方法，系统和网络元素
公开(公告)号：WO2006134505A1
公开(公告)日：2006-12-21
申请号：PCT/IB2006/051558
申请日：2006-05-17
申请人： NOKIA CORPORATION , LE, Franck , CHAN, Tat
发明人： LE, Franck , CHAN, Tat
IPC分类号： H04L29/06 , H04L12/22
CPC分类号： H04L63/0428 , H04L63/0471 , H04L65/1006 , H04L65/1069 , H04W12/02 , H04W12/10
摘要： The invention provides media protection of media flows between a network element such as an end point, for instance a mobile user terminal, and another network element over an access network. When media protection is requested, the network element and an intermediate network element such as media proxy establish a connection providing media protection over the access network. An application layer gateway, ALG, may assist in establishing the connection providing media protection by pushing a security association, SA, to the intermediate network element, so as to enable media protection between the network element and the intermediate network element.
摘要翻译：本发明提供了诸如终端的网络元件（例如，移动用户终端）与接入网络上的另一网络元件之间的媒体流的媒体保护。当请求媒体保护时，网络元件和媒体代理等中间网元建立通过接入网络提供媒体保护的连接。应用层网关ALG可以通过将安全关联SA推送到中间网元来协助建立提供媒体保护的连接，以便能够实现网元和中间网元之间的媒体保护。

19. 发明申请

WO2006085178A1 METHOD, APPARATUS AND COMPUTER PROGRAM PRODUCT ENABLING NEGOTIATION OF FIREWALL FEATURES BY ENDPOINTS 审中-公开
标题翻译：方法，装置和计算机程序产品使用端点启用防火功能的协商
公开(公告)号：WO2006085178A1
公开(公告)日：2006-08-17
申请号：PCT/IB2006/000193
申请日：2006-02-02
申请人： NOKIA CORPORATION , NOKIA, INC. , LE, Franck , SWAMI, Yogesh, Prem , BAJKO, Gabor
发明人： LE, Franck , SWAMI, Yogesh, Prem , BAJKO, Gabor
IPC分类号： H04L12/24 , H04L29/02
CPC分类号： H04L41/28 , H04L63/02 , H04L63/1441 , H04L63/20
摘要： Disclosed are examples of a method, system, devices and nodes to conduct communications between a device coupled to a communication network and a network security enforcement node, such as a firewall. An illustrative method includes, with a device coupled to a network security enforcement node through a communication network, requesting from the network security enforcement node information comprised of at least one of supported and enabled features and, in response to receiving the request, sending information descriptive of at least one of network security enforcement node supported and enabled features. The method may further include requesting by the device that at least one network security enforcement node feature be one of enabled or disabled.
摘要翻译：公开了用于在耦合到通信网络的设备与诸如防火墙的网络安全执行节点之间进行通信的方法，系统，设备和节点的示例。一种说明性方法包括：通过通信网络耦合到网络安全执行节点的设备，从网络请求安全执行节点包括支持和启用的特征中的至少一个的信息，并且响应于接收到请求，发送信息描述至少一个网络安全执行节点支持和启用的功能。该方法还可以包括：由设备请求至少一个网络安全执行节点特征是启用或禁用之一。

20. 发明申请

WO2012145158A1 FILE SEARCHING ON MOBILE DEVICES 审中-公开
标题翻译：文件搜索移动设备
公开(公告)号：WO2012145158A1
公开(公告)日：2012-10-26
申请号：PCT/US2012/031962
申请日：2012-04-03
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION NEW ORCHARD ROAD , AGRAWAL, Dakshi , BRANCH, Joel, W. , LE, Franck , LEE, Sihyung , MOHANIA, Mukesh, K.
发明人： AGRAWAL, Dakshi , BRANCH, Joel, W. , LE, Franck , LEE, Sihyung , MOHANIA, Mukesh, K.
IPC分类号： G06F7/00
CPC分类号： G06F17/301
摘要： Systems and methods are provided for file searching on mobile devices (100). A system (300) includes a user interface (310) and a file query system (320). The user interface (310) is for receiving a user-provided spatio-temporal query (Q1) for use in searching for a particular file. The user-provided spatio-temporal query (Q1 is provided by a user of a mobile device (100). The file query system (320) is for determining information about the particular file responsive to the user-provided spatio-temporal query (Q1), and identifying from the information one or more files as a search result for the particular file.
摘要翻译：提供了用于在移动设备（100）上进行文件搜索的系统和方法。系统（300）包括用户界面（310）和文件查询系统（320）。用户界面（310）用于接收用于搜索特定文件的用户提供的时空查询（Q1）。用户提供的时空查询（Q1由移动设备（100）的用户提供），文件查询系统（320）用于响应于用户提供的时空查询（Q1）来确定关于特定文件的信息），并且从信息中识别一个或多个文件作为特定文件的搜索结果。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式