专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

71. 发明申请

WO2004032557A1 SECURITY AND PRIVACY ENHANCEMENTS FOR SECURITY DEVICES 审中-公开
标题翻译：安全设备的安全和隐私增强
公开(公告)号：WO2004032557A1
公开(公告)日：2004-04-15
申请号：PCT/SE2003/001461
申请日：2003-09-17
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , NÄSLUND, Mats , NORRMAN, Karl , GOLDBECK-LÖWE, Tomas
发明人： NÄSLUND, Mats , NORRMAN, Karl , GOLDBECK-LÖWE, Tomas
IPC分类号： H04Q7/38
CPC分类号： H04L63/0853 , H04L9/0844 , H04L9/3234 , H04L9/3271 , H04L12/06 , H04L2209/80 , H04W12/06 , H04W12/12 , H04W74/00
摘要： The invention generally relates to a tamper-resistant security device, such as a subscriber identity module or equivalent, which has an AKA (Authentication and Key Agreement) module for performing an AKA process with a security key stored in the device, as well as means for external communication. The idea according to the invention is to provide the tamper-resistant security device with an application adapted for cooperating with the AKA module and means for interfacing the AKA module and the application. The application cooperating with the AKA module is preferably a security and/or privacy enhancing application. The application is advantageously a software application implemented in an application environment of the security device. For increased security, the security device may also be adapted to detect whether it is operated in its normal secure environment or a foreign less secure environment, and set access rights to resident files or commands that could expose the AKA process or corresponding parameters accordingly.
摘要翻译：本发明总体上涉及一种防篡改安全装置，例如订户身份模块或等同物，其具有用于使用存储在该装置中的安全密钥执行AKA过程的AKA（认证和密钥协商）模块，以及装置用于外部沟通。根据本发明的想法是为防篡改安全设备提供适于与AKA模块协作的应用和用于与AKA模块和应用程序进行接口的装置。与AKA模块协作的应用优选地是安全和/或隐私增强应用。该应用有利地是在安全设备的应用环境中实现的软件应用。为了增加安全性，安全设备还可以适应于检测其是否在其正常安全环境或外部较不安全的环境中操作，并且设置对可能暴露AKA过程的驻留文件或命令或相应参数的访问权限。

72. 发明申请

WO2004017664A1 ROBUST AND FLEXIBLE DIGITAL RIGHTS MANAGEMENT INVOLVING A TAMPER-RESISTANT IDENTITY MODULE 审中-公开
标题翻译：涉及防篡改身份识别模块的强大而灵活的数字权限管理
公开(公告)号：WO2004017664A1
公开(公告)日：2004-02-26
申请号：PCT/SE2002/002432
申请日：2002-12-19
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , NÄSLUND, Mats , NORRMAN, Karl
发明人： NÄSLUND, Mats , NORRMAN, Karl
IPC分类号： H04Q7/38
CPC分类号： H04L63/0428 , G06F21/10 , G06F2221/0711 , G06F2221/2115 , G06F2221/2129 , G06F2221/2135 , G06F2221/2137 , G06F2221/2153 , H04L63/08 , H04L63/0807 , H04L63/0823 , H04L63/0853 , H04L63/0869 , H04L2463/101 , H04W8/22 , H04W12/04 , H04W12/06
摘要： The invention relates to digital rights management, and proposes the implementation of a DRM agent (125) into a tamper-resistant identity module (120) adapted for engagement with a client system (100), such as a mobile phone or a computer system. The DRM agent (125) is generally implemented with functionality for enabling usage, such as rendering or execution, of protected digital content provided to the client system from a content provider. In general, the DRM agent (125) includes functionality for cryptographic processing of DRM metadata associated with the digital content to be rendered. In a particularly advantageous realization, the DRM agent is implemented as an application in the application environment of the identity module. The DRM application can be preprogrammed into the application environment, or securely downloaded from a trusted party associated with the identity module. The invention also relates to a distributed DRM module, with communication between distributed DRM agents (125, 135) based on usage-device specific key information.
摘要翻译：本发明涉及数字版权管理，并且提出将DRM代理（125）实现到适用于与例如移动电话或计算机系统的客户端系统（100）接合的防篡改身份模块（120）中。 DRM代理（125）通常用功能来实现，用于使得能够从内容提供商提供给客户端系统的受保护的数字内容的使用，诸如呈现或执行。通常，DRM代理（125）包括用于与要呈现的数字内容相关联的DRM元数据的密码处理的功能。在特别有利的实现中，DRM代理被实现为身份模块的应用环境中的应用。 DRM应用可以被预编程到应用环境中，或者从与身份模块相关联的可信方安全地下载。本发明还涉及一种基于使用设备特定密钥信息的分布式DRM代理（125,135）之间的通信的分布式DRM模块。

73. 发明申请

WO2002084980A1 METHOD AND NETWORK FOR DELIVERING STREAMING DATA 审中-公开
标题翻译：提供数据流的方法和网络
公开(公告)号：WO2002084980A1
公开(公告)日：2002-10-24
申请号：PCT/SE2002/000721
申请日：2002-04-10
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , LINDHOLM, Fredrik , BLOM, Rolf , NORRMAN, Karl , SELANDER, Göran , NÄSLUND, Mats
发明人： LINDHOLM, Fredrik , BLOM, Rolf , NORRMAN, Karl , SELANDER, Göran , NÄSLUND, Mats
IPC分类号： H04L29/06
CPC分类号： H04L63/0442 , G06F21/10 , G06F2221/0737 , G06F2221/0797 , H04L29/06027 , H04L63/0807 , H04L65/4084 , H04L65/607 , H04L65/608 , H04L67/14
摘要： In a procedure for delivering streaming media, a Client (1) first requests the media from an Order Server (3). The Order Server authenticates the Client and sends a ticket to the Client. Then, the Client sends the ticket to a Streaming Server (5). The Streaming Server checks theticket for validity and if found valid encrypts the streaming data using a standardized real-time protocol such as the SRTP and transmits the encrypted data to the Client. The Client receivesthe data and decrypts them. Copyrighted material adapted to streaming can be securely delivered to the Client. The robust protocol used is very well suited for in particular wireless clients and similar devices having a low capacity such as cellular telephones and PDAs.
摘要翻译：在递送流媒体的过程中，客户端（1）首先从订单服务器（3）请求媒体。订单服务器对客户端进行身份验证，并向客户端发送故障单。然后，客户端将该票发送到流服务器（5）。流媒体服务器检查电子邮件的有效性，如果发现有效使用标准化的实时协议（如SRTP）对流数据进行加密，并将加密的数据发送给客户端。客户接收数据并对其进行解密。适用于流媒体的版权材料可以安全地传递给客户端。所使用的鲁棒协议非常适合于特定的无线客户端和具有低容量的类似设备，例如蜂窝电话和PDA。

74. 发明申请

WO2010021577A1 METHOD AND APPARATUS FOR AVOIDING UNWANTED DATA PACKETS 审中-公开
标题翻译：避免无数据包的方法和装置
公开(公告)号：WO2010021577A1
公开(公告)日：2010-02-25
申请号：PCT/SE2008/050954
申请日：2008-08-22
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , CSÁSZÁR, András , NÄSLUND, Mats , WESTBERG, Lars , MAGNUSSON, Lars
发明人： CSÁSZÁR, András , NÄSLUND, Mats , WESTBERG, Lars , MAGNUSSON, Lars
IPC分类号： H04L12/56 , H04L9/08
CPC分类号： H04L45/00 , H04L9/083 , H04L29/12066 , H04L29/12207 , H04L45/50 , H04L61/1511 , H04L61/20 , H04L63/08 , H04L63/14
摘要： Method and apparatus for controlling transmission of data packets in a packet-switched network. When a first end-host (A) sends an address query to a DNS system (300) for a second end-host, the DNS system responds by providing a sender key created from a destination key registered for the second end-host, if the first end-host is authorised to send packets to the second end-host. Thereby, the first end- host, if authorised, is able to get across data packets to the second end-host by attaching a sender tag (TAG) generated from the sender key, as ingress tag to each transmitted data packet. A router (302) in the network matches an ingress tag in a received packet with entries in a forwarding table and sends out the packet on an output port (X) according to a matching entry. Otherwise, the router discards the packet if no matching entry is found in the table.
摘要翻译：用于控制分组交换网络中数据分组传输的方法和装置。当第一终端主机（A）向第二终端主机的DNS系统（300）发送地址查询时，DNS系统通过提供从为第二终端主机注册的目的地密钥创建的发送者密钥进行响应，如果第一个终端主机被授权将数据包发送到第二个终端主机。因此，如果被授权，则第一终端主机能够通过将从发送方密钥生成的发送者标签（TAG）作为入口标签附加到每个发送的数据分组来跨越数据分组到达第二终端主机。网络中的路由器（302）将接收到的分组中的入口标签与转发表中的条目匹配，并根据匹配条目在输出端口（X）上发送分组。否则，如果表中没有匹配的条目，路由器将丢弃该数据包。

75. 发明申请

WO2009153072A1 SENDING SECURE MEDIA STREAMS 审中-公开
标题翻译：发送安全媒体流
公开(公告)号：WO2009153072A1
公开(公告)日：2009-12-23
申请号：PCT/EP2009/052078
申请日：2009-02-20
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , BLOM, Rolf , CHENG, Yi , MATTSSON, John , NÄSLUND, Mats , NORRMAN, Karl
发明人： BLOM, Rolf , CHENG, Yi , MATTSSON, John , NÄSLUND, Mats , NORRMAN, Karl
IPC分类号： H04L29/06
CPC分类号： H04L65/605 , H04L63/0428 , H04L65/608
摘要： A method and apparatus for sending a first secured media stream having a payload via an intermediate node. The intermediate node receives from a sender the first secured media stream. An end-to-end context identifier and a hop-by-hop context identifier are determined for the first secured media stream, where the hop-by-hop context identifier relates to the intermediate node and the end-to-end identifier relates to the sender. A second secured media stream is generated, which includes at least the payload of the first secured media stream and the context identifiers to identify the first secured media stream. The second secured media stream is sent to a receiving node, and the context identifiers are also sent to the receiving node. The context identifiers are usable by the receiving node to recover the first secured media stream.
摘要翻译：一种用于通过中间节点发送具有有效载荷的第一安全媒体流的方法和装置。中间节点从发送器接收第一安全媒体流。针对第一安全媒体流确定端到端上下文标识符和逐跳上下文标识符，其中逐跳上下文标识符与中间节点相关，并且端到端标识符与发件人。生成第二安全媒体流，其包括至少第一安全媒体流的有效载荷和上下文标识符以识别第一安全媒体流。第二安全媒体流被发送到接收节点，并且上下文标识符也被发送到接收节点。上下文标识符可由接收节点使用以恢复第一安全媒体流。

76. 发明申请

WO2009047113A1 APPARATUS FOR RECONFIGURATION OF A TECHNICAL SYSTEM BASED ON SECURITY ANALYSIS AND A CORRESPONDING TECHNICAL DECISION SUPPORT SYSTEM AND COMPUTER PROGRAM PRODUCT 审中-公开
标题翻译：基于安全分析的技术系统重新配置的设备和相应的技术决策支持系统和计算机程序产品
公开(公告)号：WO2009047113A1
公开(公告)日：2009-04-16
申请号：PCT/EP2008/062667
申请日：2008-09-23
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , NORRMAN, Karl , CEDERBERG, Jonathan , NÄSLUND, Mats
发明人： NORRMAN, Karl , CEDERBERG, Jonathan , NÄSLUND, Mats
IPC分类号： G06F21/00 , G06N5/00 , G06Q10/00
CPC分类号： G06Q10/06 , G06F21/577
摘要： The invention relates to an apparatus for analyzing and reconfiguring a technical system (2) with respect to security, as well as a corresponding decision support system and computer program product. A graph constructor (20) provides, based on technical information about the system (2) received via an input interface (10), a representation of potential attacks in a directed graph of attack nodes. A system/countermeasure analysis unit (30) ranks different sets of countermeasures to enable a selected set of countermeasures to be taken to improve security. The analysis unit (30) performs the following procedure for each set of countermeasures: i) logically apply the set of countermeasures to attacks in the directed graph, and ii) determine a rank of the applied set of countermeasures based on the effectiveness of the countermeasures with respect to the reduction of the risk of attacks. An output and/or control unit (40) may then provide appropriate control signaling and/or effectuate appropriate control actions for reconfiguration of the technical system (2).
摘要翻译：本发明涉及一种用于分析和重新配置关于安全性的技术系统（2）的装置，以及相应的决策支持系统和计算机程序产品。图形构造器（20）基于通过输入接口（10）接收的关于系统（2）的技术信息，提供攻击节点的有向图中的潜在攻击的表示。系统/对策分析单元（30）排列不同的对策组以使得能够采取所选择的一组对策来提高安全性。分析单元（30）对每组对策执行以下过程：i）在有向图中逻辑应用攻击对策，ii）根据对策的有效性确定所应用的一套对策的等级关于减少攻击的风险。然后，输出和/或控制单元（40）可以为技术系统（2）的重新配置提供适当的控制信令和/或实现适当的控制动作。

77. 发明申请

WO2008156392A1 SECURITY FOR SOFTWARE DEFINED RADIO TERMINALS 审中-公开
标题翻译：软件定义无线电终端的安全
公开(公告)号：WO2008156392A1
公开(公告)日：2008-12-24
申请号：PCT/SE2007/050428
申请日：2007-06-18
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , NÄSLUND, Mats , KALLIN, Harald , ALMGREN, Magnus , SELANDER, Göran
发明人： NÄSLUND, Mats , KALLIN, Harald , ALMGREN, Magnus , SELANDER, Göran
IPC分类号： G06F21/24
CPC分类号： H04W12/10 , H04L9/06 , H04L9/08 , H04L9/32 , H04L63/12 , H04L63/123 , H04L2463/061 , H04W12/04 , H04W88/02
摘要： A module (2) for integrity protection of messages transmitted from a mobile software defined radio (SDR) terminal (1), the module provided with a confined cryptographic key K and arranged to receive loaded SDR-code. The module derives an integrity protecting key Rk from at least said cryptographic key K, and provides a periodic integrity protection on-line of generated messages using said key integrity protecting key Rk, and the integrity of said messages is verified by an integrity checking node (10) of the access network.
摘要翻译：一种用于对从移动软件定义的无线电（SDR）终端（1）发送的消息的完整性保护的模块（2），所述模块提供有密闭密码密钥K并且被布置成接收加载的SDR码。该模块从至少所述加密密钥K导出完整性保护密钥Rk，并使用所述密钥完整性保护密钥Rk在线生成的消息提供周期性完整性保护，并且所述消息的完整性由完整性检查节点 10）的接入网络。

78. 发明申请

WO2008147302A1 METHOD AND APPARATUS FOR PROTECTING THE ROUTING OF DATA PACKETS 审中-公开
标题翻译：保护数据包路由的方法和装置
公开(公告)号：WO2008147302A1
公开(公告)日：2008-12-04
申请号：PCT/SE2008/050538
申请日：2008-05-09
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , CZÁSZÁR, András , WESTBERG, Lars , NÄSLUND, Mats
发明人： CZÁSZÁR, András , WESTBERG, Lars , NÄSLUND, Mats
IPC分类号： H04L29/12 , H04L29/06 , H04L9/00
CPC分类号： H04L45/00 , H04L29/12066 , H04L61/1511 , H04L63/0428 , H04L63/08 , H04L69/22
摘要： Method and apparatus for protecting the routing of data packets in a packet data network. When a first end-host (A) sends an address query to a DNS server system (302) regarding a second end-host, the DNS server system responds by providing a destination parameter (TAG) containing an encrypted destination address associated with the second end-host. Thereby, the first end-host is able to get across data packets to the second end-host by attaching the destination parameter (TAG) to each transmitted data packet. A router (300) in the packet data network admits a received packet if a destination parameter (TAG) is attached to the packet including a valid destination address encrypted by a key dependent on a distributed master encryption key. Otherwise, the router discards the packet ifno such valid destination address can be derived from the packet by applying decryption to the destination parameter.
摘要翻译：用于保护分组数据网络中的数据分组的路由的方法和装置。当第一终端主机（A）向DNS服务器系统（302）发送关于第二终端主机的地址查询时，DNS服务器系统通过提供包含与第二终端主机相关联的加密目的地地址的目的地参数（TAG）进行响应端主机。因此，通过将目的地参数（TAG）附加到每个发送的数据分组，第一终端主机能够跨数据分组到达第二终端主机。如果目的地参数（TAG）附加到包括由依赖于分布式主加密密钥的密钥加密的有效目的地地址的分组，则分组数据网络中的路由器（300）承认接收到的分组。否则，如果通过向目的参数应用解密，路由器将丢弃该分组，如果不能从分组导出这样的有效目的地址。

79. 发明申请

WO2008080637A1 METHOD AND APPARATUS FOR DETERMINING AN AUTHENTICATION PROCEDURE 审中-公开
标题翻译：用于确定认证程序的方法和装置
公开(公告)号：WO2008080637A1
公开(公告)日：2008-07-10
申请号：PCT/EP2007/050097
申请日：2007-01-04
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , WALKER, John Michael , NÄSLUND, Mats
发明人： WALKER, John Michael , NÄSLUND, Mats
IPC分类号： H04L29/06 , H04Q7/38 , H04L12/28
CPC分类号： H04L63/20 , H04L63/0892 , H04W12/04 , H04W12/06 , H04W84/00
摘要： A server for managing the authentication of clients that are subscribers of a home domain within which the server is located, the server comprising means for determining whether a client that is attached to a visited domain is to be authenticated by the home domain or by said visited domain, and for signalling the result to said visited domain.
摘要翻译：一种用于管理作为服务器所在的归属域的订户的客户端的认证的服务器，所述服务器包括用于确定附接到被访问域的客户端是否将被所述归属域或所述被访问者认证的装置域，并将结果用信号通知所述访问域。

80. 发明申请

WO2007062688A1 KEY MANAGEMENT 审中-公开
标题翻译：主要管理
公开(公告)号：WO2007062688A1
公开(公告)日：2007-06-07
申请号：PCT/EP2005/056381
申请日：2005-12-01
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , NÄSLUND, Mats
发明人： NÄSLUND, Mats
IPC分类号： H04L9/08
CPC分类号： H04L9/0891 , H04L9/14 , H04L63/06 , H04L2209/805 , H04W12/04 , H04W84/18
摘要： The present invention relates to arrangements and methods for generating keys for cryptographic processing of communication between a first communication unit (200) and a second communication unit (300). The first communication unit (200) and second communication unit (300) are adapted to obtain knowledge about a secret function, wherein the first communication unit comprises: -means for selecting a value z (210), means for calculating the secret function as a function of the selected value z (220) means for processing data with the calculated secret function (230), and means for transmitting the processed data in association with the selected z to the second communication unit (240), wherein the secret function is selected from a set of functions that are almost k-wise independent.
摘要翻译：本发明涉及用于生成用于第一通信单元（200）和第二通信单元（300）之间的通信的密码处理的密钥的配置和方法。第一通信单元（200）和第二通信单元（300）适于获得关于秘密功能的知识，其中第一通信单元包括： - 用于选择值z（210）的方法，用于计算秘密功能的装置所选择的值z（220）的功能用于处理具有计算的秘密功能的数据（230），以及用于将与所选择的z相关联的处理数据发送到第二通信单元（240）的装置，其中选择秘密功能从一组功能几乎是独立的。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式