专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2011081784A1 METHODS TO ENABLE SECURE SELF-PROVISIONING OF SUBSCRIBER UNITS IN A COMMUNICATION SYSTEM 审中-公开
标题翻译：在通信系统中实现安全自订的订户单位的方法
公开(公告)号：WO2011081784A1
公开(公告)日：2011-07-07
申请号：PCT/US2010/059060
申请日：2010-12-06
申请人： MOTOROLA SOLUTIONS, INC. , HIMAWAN, Erwin, , METKE, Anthony R.,
发明人： HIMAWAN, Erwin, , METKE, Anthony R.,
IPC分类号： H04L29/06 , H04L29/08 , H04W12/06 , H04W8/24 , H04L12/24 , G06F21/00
CPC分类号： H04L41/0806 , G06F21/33 , G06F2221/2129 , G06F2221/2141 , H04L9/006 , H04L9/3263 , H04L63/0823 , H04L63/126 , H04L67/34 , H04W4/50 , H04W12/06
摘要： A method to enable remote, secure, self-provisioning of a subscriber unit includes, a security provisioning server (130): receiving, from a subscriber unit, a certificate signing request having subscriber unit configuration trigger data; generating (428) provisioning data for the subscriber unit using the subscriber unit configuration trigger data; and in response to the certificate signing request, providing to the subscriber unit the provisioning data and a subscriber unit certificate having authorization attributes associated with the provisioning data, to enable the self-provisioning of the subscriber unit.
摘要翻译：一种启用用户单元的远程，安全的自配置的方法包括：安全提供服务器（130）：从订户单元接收具有用户单元配置触发数据的证书签名请求; 使用所述订户单元配置触发数据生成（428）所述订户单元的供应数据; 并且响应于所述证书签发请求，向所述订户单元提供所述供应数据和具有与所述供应数据相关联的授权属性的订户单元证书，以使得所述订户单元的自供应。

2. 发明申请

WO2012092096A1 SYSTEM AND METHOD OF PROVISIONING OR MANAGING DEVICE CERTIFICATES IN A COMMUNICATION NETWORK 审中-公开
标题翻译：在通信网络中提供或管理设备证书的系统和方法
公开(公告)号：WO2012092096A1
公开(公告)日：2012-07-05
申请号：PCT/US2011/066701
申请日：2011-12-22
申请人： MOTOROLA SOLUTIONS, INC. , METKE, Anthony R., , HIMAWAN, Erwin, , SEABORN, Mark D., , THOMAS, Shanthi E.,
发明人： METKE, Anthony R., , HIMAWAN, Erwin, , SEABORN, Mark D., , THOMAS, Shanthi E.,
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L9/321 , H04L9/3263 , H04L63/0823 , H04L63/101
摘要： A certificate manager transmits a certificate service advertisement to a plurality of certificate clients. The certificate service advertisement identifies the certificate manager and includes segregation data. The segregation data indicates a set of services offered or a set of clients for which the certificate manager offers service. Responsive to the transmitting of the certificate service advertisement, the certificate manager receives a certificate service request from at least one certificate client of the plurality of certificate clients. The certificate manager verifies that the at least one certificate client is associated with the set of clients for which the certificate manager offers service, and the certificate manager fulfills the certificate service request.
摘要翻译：证书管理器向多个证书客户端发送证书服务广告。证书服务广告标识证书管理器并包括隔离数据。隔离数据指示提供的一组服务或证书管理器为其提供服务的一组客户端。响应于发送证书服务广告，证书管理器从多个证书客户端中的至少一个证书客户端接收证书服务请求。证书管理器验证至少一个证书客户端与证书管理器提供服务的一组客户端相关联，并且证书管理器履行证书服务请求。

3. 发明申请

WO2009123840A4 METHOD AND APPARATUS FOR DISTRIBUTING CERTIFICATE REVOCATION LISTS (CRLS) TO NODES IN AN AD HOC NETWORK 审中-公开
标题翻译：在特定网络中分发证书撤销名单（CRLS）的方法和装置
公开(公告)号：WO2009123840A4
公开(公告)日：2010-05-06
申请号：PCT/US2009036887
申请日：2009-03-12
申请人： MOTOROLA INC , THOMAS SHANTHI E , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY M
发明人： THOMAS SHANTHI E , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY M
IPC分类号： H04L29/06
CPC分类号： H04L9/3268 , H04L63/0823 , H04L2209/60 , H04L2209/80 , H04W12/06 , H04W84/18
摘要： A method and apparatus for distributing Certificate Revocation List (CRL) information in an ad hoc network are provided. Ad hoc nodes in an ad hoc network can each transmit one or more certificate revocation list advertisement message(s) (CRLAM(s)). Each CRLAM includes an issuer certification authority (CA) field that identifies a certification authority (CA) that issued a particular certificate revocation list (CRL), a certificate revocation list (CRL) sequence number field that specifies a number that specifies the version of the particular certificate revocation list (CRL) that was issued by the issuer certification authority (CA). Nodes that receive the CRLAMs can then use the CRL information provided in the CRLAM to determine whether to retrieve the particular certificate revocation list (CRL).
摘要翻译：提供了一种在自组织网络中分发证书吊销列表（CRL）信息的方法和装置。自组织网络中的自组织节点可以各自发送一个或多个证书撤销列表通告消息（一个或多个）。每个CRLAM包括发行者证书颁发机构（CA）字段，用于标识颁发特定证书吊销列表（CRL）的证书颁发机构（CA），证书撤销列表（CRL）序列号字段，其指定指定版本的版本的证书颁发机构特定证书撤销列表（CRL）由发行者证书颁发机构（CA）颁发。接收CRLAM的节点可以使用CRLAM中提供的CRL信息来确定是否检索特定的证书吊销列表（CRL）。

4. 发明申请

WO2010033328A3 METHOD AND DEVICE FOR CONFIRMING AUTHENTICITY OF A PUBLIC KEY INFRASTRUCTURE (PKI) TRANSACTION EVENT 审中-公开
公开(公告)号：WO2010033328A3
公开(公告)日：2010-03-25
申请号：PCT/US2009/053816
申请日：2009-08-14
申请人： MOTOROLA, INC. , HIMAWAN, Erwin , IGNACI, Ananth , METKE, Anthony, R. , THOMAS, Shanthi, E.
发明人： HIMAWAN, Erwin , IGNACI, Ananth , METKE, Anthony, R. , THOMAS, Shanthi, E.
IPC分类号： H04W12/04 , H04W12/06
摘要： A method and device for confirming authenticity of a public key infrastructure (PKI) transaction event between a relying node and a subject node in a communication network enables improved network security. According to some embodiments, the method includes establishing at a PKI event logging (PEL) server a process to achieve secure communications with the relying node (step 705). Next, the PEL server processes reported PKI transaction event data received from the relying node (step 710). The reported PKI transaction event data describe the PKI transaction event between the relying node and the subject node. The reported PKI transaction event data are then transmitted from the PEL server to the subject node (step 715). The subject node can thus compare the reported PKI transaction event data with corresponding local PKI transaction event data to confirm the authenticity of the PKI transaction event.

5. 发明申请

WO2012064455A3 CERTIFICATE POLICY MANAGEMENT TOOL 审中-公开
标题翻译：证书政策管理工具
公开(公告)号：WO2012064455A3
公开(公告)日：2012-07-12
申请号：PCT/US2011056072
申请日：2011-10-13
申请人： MOTOROLA SOLUTIONS INC , METKE ANTHONY R , HIMAWAN ERWIN , THOMAS SHANTHI E
发明人： METKE ANTHONY R , HIMAWAN ERWIN , THOMAS SHANTHI E
IPC分类号： H04L9/00 , G06F21/20 , H04L29/02
CPC分类号： H04L63/20 , H04L63/0823
摘要： A certificate policy management tool (100) is provided which targets the automated creation of customized certificate policies and the management of these policies within a public key infrastructure (PKI). A certificate policy parser 108, a certificate policy creation engine (110), a policy query engine (112),and an audit engine (114) interoperate to automate certificate policy creation, interpretation, and enforcement.
摘要翻译：提供证书策略管理工具（100），其目标是定制证书策略的自动创建以及公钥基础设施（PKI）内这些策略的管理。证书策略解析器108，证书策略创建引擎（110），策略查询引擎（112）和审计引擎（114）互操作以自动化证书策略创建，解释和实施。

6. 发明申请

WO2010033328A2 METHOD AND DEVICE FOR CONFIRMING AUTHENTICITY OF A PUBLIC KEY INFRASTRUCTURE (PKI) TRANSACTION EVENT 审中-公开
标题翻译：用于确认公钥基础设施（PKI）交易事件的真实性的方法和设备
公开(公告)号：WO2010033328A2
公开(公告)日：2010-03-25
申请号：PCT/US2009053816
申请日：2009-08-14
申请人： MOTOROLA INC , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY R , THOMAS SHANTHI E
发明人： HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY R , THOMAS SHANTHI E
IPC分类号： H04W12/04 , H04W12/06
CPC分类号： H04L63/0442 , H04L63/12
摘要： A method and device for confirming authenticity of a public key infrastructure (PKI) transaction event between a relying node and a subject node in a communication network enables improved network security. According to some embodiments, the method includes establishing at a PKI event logging (PEL) server a process to achieve secure communications with the relying node (step 705). Next, the PEL server processes reported PKI transaction event data received from the relying node (step 710). The reported PKI transaction event data describe the PKI transaction event between the relying node and the subject node. The reported PKI transaction event data are then transmitted from the PEL server to the subject node (step 715). The subject node can thus compare the reported PKI transaction event data with corresponding local PKI transaction event data to confirm the authenticity of the PKI transaction event.
摘要翻译：用于确认通信网络中的依赖节点和主题节点之间的公钥基础设施（PKI）事务事件的真实性的方法和设备使得能够提高网络安全性。根据一些实施例，该方法包括在PKI事件记录（PEL）服务器处建立实现与依赖节点的安全通信的过程（步骤705）。接下来，PEL服务器处理从依赖节点接收到的所报告的PKI交易事件数据（步骤710）。所报告的PKI事务事件数据描述依赖节点和主题节点之间的PKI事务事件。然后将所报告的PKI交易事件数据从PEL服务器发送到主题节点（步骤715）。因此，主题节点可以将所报告的PKI交易事件数据与相应的本地PKI交易事件数据进行比较，以确认PKI交易事件的真实性。

7. 发明申请

WO2010014314A3 METHOD AND DEVICE FOR DISTRIBUTING PUBLIC KEY INFRASTRUCTURE (PKI) CERTIFICATE PATH DATA 审中-公开
标题翻译：用于分配公钥基础设施（PKI）证书路径数据的方法和设备
公开(公告)号：WO2010014314A3
公开(公告)日：2010-03-25
申请号：PCT/US2009048539
申请日：2009-06-25
申请人： MOTOROLA INC , THOMAS SHANTHI E , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY R
发明人： THOMAS SHANTHI E , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY R
IPC分类号： H04W12/04 , H04W12/06
CPC分类号： H04L9/3268 , H04L9/007 , H04L9/3265 , H04L2209/80
摘要： A method and device for distributing public key infrastructure (PKI) certificate path data enables relying nodes to efficiently authenticate other nodes in an autonomous ad-hoc network. The method includes compiling, at a certificate path management unit (CPMU), the PKI certificate path data (step 405). One or more available certificate paths are then determined at the CPMU for at least one relying node (step 410). Next, the PKI certificate path data are distributed by transmitting a certificate path data message from the CPMU to the at least one relying node (step 415). The certificate path data message includes information identifying one or more trusted certification authorities associated with the one or more available certificate paths.
摘要翻译：用于分发公共密钥基础设施（PKI）证书路径数据的方法和设备使依靠节点能够有效地认证自治专用网络中的其他节点。该方法包括在证书路径管理单元（CPMU）处编译PKI证书路径数据（步骤405）。然后在CPMU处为至少一个依赖节点确定一个或多个可用证书路径（步骤410）。接下来，通过从CPMU向至少一个依赖节点发送证书路径数据消息来分发PKI证书路径数据（步骤415）。证书路径数据消息包括识别与一个或多个可用证书路径相关联的一个或多个可信证书颁发机构的信息。

8. 发明申请

WO2009123840A3 METHOD AND APPARATUS FOR DISTRIBUTING CERTIFICATE REVOCATION LISTS (CRLS) TO NODES IN AN AD HOC NETWORK 审中-公开
公开(公告)号：WO2009123840A3
公开(公告)日：2009-10-08
申请号：PCT/US2009/036887
申请日：2009-03-12
申请人： MOTOROLA, INC. , THOMAS, Shanthi, E. , HIMAWAN, Erwin , IGNACI, Ananth , METKE, Anthony, M.
发明人： THOMAS, Shanthi, E. , HIMAWAN, Erwin , IGNACI, Ananth , METKE, Anthony, M.
IPC分类号： H04L29/06
摘要： A method and apparatus for distributing Certificate Revocation List (CRL) information in an ad hoc network are provided. Ad hoc nodes in an ad hoc network can each transmit one or more certificate revocation list advertisement message(s) (CRLAM(s)). Each CRLAM includes an issuer certification authority (CA) field that identifies a certification authority (CA) that issued a particular certificate revocation list (CRL), a certificate revocation list (CRL) sequence number field that specifies a number that specifies the version of the particular certificate revocation list (CRL) that was issued by the issuer certification authority (CA). Nodes that receive the CRLAMs can then use the CRL information provided in the CRLAM to determine whether to retrieve the particular certificate revocation list (CRL).

9. 发明申请

WO2009123840A2 METHOD AND APPARATUS FOR DISTRIBUTING CERTIFICATE REVOCATION LISTS (CRLS) TO NODES IN AN AD HOC NETWORK 审中-公开
标题翻译：在特定网络中分发证书撤销名单（CRLS）的方法和装置
公开(公告)号：WO2009123840A2
公开(公告)日：2009-10-08
申请号：PCT/US2009036887
申请日：2009-03-12
申请人： MOTOROLA INC , THOMAS SHANTHI E , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY M
发明人： THOMAS SHANTHI E , HIMAWAN ERWIN , IGNACI ANANTH , METKE ANTHONY M
IPC分类号： H04L29/06
CPC分类号： H04L9/3268 , H04L63/0823 , H04L2209/60 , H04L2209/80 , H04W12/06 , H04W84/18
摘要： A method and apparatus for distributing Certificate Revocation List (CRL) information in an ad hoc network are provided. Ad hoc nodes in an ad hoc network can each transmit one or more certificate revocation list advertisement message(s) (CRLAM(s)). Each CRLAM includes an issuer certification authority (CA) field that identifies a certification authority (CA) that issued a particular certificate revocation list (CRL), a certificate revocation list (CRL) sequence number field that specifies a number that specifies the version of the particular certificate revocation list (CRL) that was issued by the issuer certification authority (CA). Nodes that receive the CRLAMs can then use the CRL information provided in the CRLAM to determine whether to retrieve the particular certificate revocation list (CRL).
摘要翻译：提供了一种在自组织网络中分发证书吊销列表（CRL）信息的方法和装置。自组织网络中的自组织节点可以各自发送一个或多个证书撤销列表通告消息（一个或多个）。每个CRLAM包括发行者证书颁发机构（CA）字段，用于标识颁发特定证书吊销列表（CRL）的证书颁发机构（CA），证书撤销列表（CRL）序列号字段，其指定指定版本的版本的证书颁发机构特定证书撤销列表（CRL）由发行者证书颁发机构（CA）颁发。接收CRLAM的节点可以使用CRLAM中提供的CRL信息来确定是否检索特定的证书吊销列表（CRL）。

10. 发明申请

WO2013019453A1 A PRIVATE CERTIFICATE VALIDATION METHOD AND APPARATUS 审中-公开
标题翻译：私人证书验证方法和设备
公开(公告)号：WO2013019453A1
公开(公告)日：2013-02-07
申请号：PCT/US2012/047847
申请日：2012-07-23
申请人： MOTOROLA SOLUTIONS, INC. , HIMAWAN, Erwin, , METKE, Anthony, R. , THOMAS, Shanthi, E.
发明人： HIMAWAN, Erwin, , METKE, Anthony, R. , THOMAS, Shanthi, E.
IPC分类号： H04L9/32
CPC分类号： H04L9/3268 , H04L9/3263 , H04L63/0823
摘要： Methods and apparatuses for validating the status of digital certificates include a relying party receiving at least one digital certificate and determining if the at least one digital certificate is to be validated against a private certificate status database. The relying party accesses the private certificate status database and cryptographically validates the authenticity of data in the private certificate status database. The relying party also validates the at least one digital certificate based on information in at least one of the private certificate status database and a public certificate status database.
摘要翻译：用于验证数字证书的状态的方法和装置包括依赖方接收至少一个数字证书，并确定是否要针对私人证书状态数据库验证至少一个数字证书。依赖方访问私有证书状态数据库，并密码验证私有证书状态数据库中数据的真实性。依赖方还基于至少一个私有证书状态数据库和公共证书状态数据库中的信息来验证至少一个数字证书。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式