专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2013015910A1 SOFTWARE RUN-TIME PROVENANCE 审中-公开
标题翻译：软件运行时间
公开(公告)号：WO2013015910A1
公开(公告)日：2013-01-31
申请号：PCT/US2012/043064
申请日：2012-06-19
申请人： ALCATEL LUCENT , MC LELLAN, Hubert, R. , KOLESNIKOV, Vladimir
发明人： MC LELLAN, Hubert, R. , KOLESNIKOV, Vladimir
IPC分类号： G06F21/00
CPC分类号： G06F21/575
摘要： An executing first computing module verifies the run-time provenance of an unverified second computing module. A signed certificate identifying an author of the second computing module is received at the first computing module. An association between the signed certificate and the second computing module is verified. A first provenance certificate and associated private key signed by the first computing module and identifying a runtime provenance of the second computing module is then generated, and the first provenance certificate is published to the second computing module. A chain of signed certificates, including provenance certificates and a static identification certificates, can be published. Each provenance certificate in the chain verifies the integrity of a layer of execution, and the plurality of static identification certificates identifies a respective author of the computing module associated with each layer of software. The provenance of the second computing module can be recursively traced through the published chain of certificates.
摘要翻译：执行的第一计算模块验证未验证的第二计算模块的运行时间来源。在第一计算模块处接收识别第二计算模块的作者的签名证书。验证签名证书和第二计算模块之间的关联。然后生成由第一计算模块签名并识别第二计算模块的运行时源的第一来源证书和相关联的私钥，并且将第一来源证书发布到第二计算模块。可以发布一系列签名证书，包括出货凭证和静态认证证书。链中的每个来源证书验证执行层的完整性，并且多个静态识别证书识别与每层软件相关联的计算模块的相应作者。第二个计算模块的来源可以通过发布的证书链递归地追踪。

2. 发明申请

WO2011068719A1 EMBEDDED SFE: OFFLOADING SERVER AND NETWORK USING HARDWARE TOKEN 审中-公开
标题翻译：嵌入式SFE：使用硬件TOKEN卸载服务器和网络
公开(公告)号：WO2011068719A1
公开(公告)日：2011-06-09
申请号：PCT/US2010/057769
申请日：2010-11-23
申请人： ALCATEL-LUCENT USA INC. , KOLESNIKOV, Vladimir
发明人： KOLESNIKOV, Vladimir
IPC分类号： H04L9/08
CPC分类号： G09C1/00 , H04L9/0838 , H04L9/0877 , H04L9/3234 , H04L2209/12 , H04L2209/56
摘要： An improved secure transaction system for facilitating secure transactions between devices in a network is set forth. The system includes a first device. A secure agent, adapted for encrypting and delivering a message on behalf of the first device, is provided. The secure agent has a secret key drawn at random from a large domain embedded in the agent by the first device. A second device, adapted to obtain the message, based on a session ID, from the secure agent, is provided. The second device can selectively test the truth of a corresponding message from the agent, based on querying of the first device. The testing is unknown and unpredictable to the secure agent during the transaction. In this manner, the first device and agent are kept separate to deter cheating.
摘要翻译：阐述了一种改进的安全交易系统，用于促进网络中设备之间的安全交易。该系统包括第一设备。提供了适于代表第一设备加密和传递消息的安全代理。安全代理具有由第一设备从代理中嵌入的大域中随机绘制的秘密密钥。提供了一种适于从安全代理获得基于会话ID的消息的第二设备。第二设备可以基于对第一设备的查询来选择性地测试来自代理的对应消息的真实性。在交易过程中，安全代理程序的测试是未知的和不可预知的。以这种方式，第一设备和代理被保持分开以阻止作弊。

3. 发明申请

WO2011005569A2 EFFICIENT KEY MANAGEMENT SYSTEM AND METHOD 审中-公开
标题翻译：有效的密钥管理系统和方法
公开(公告)号：WO2011005569A2
公开(公告)日：2011-01-13
申请号：PCT/US2010/039647
申请日：2010-06-23
申请人： ALCATEL-LUCENT USA INC. , KOLESNIKOV, Vladimir , GURBANI, Vijay
发明人： KOLESNIKOV, Vladimir , GURBANI, Vijay
IPC分类号： H04L29/06
CPC分类号： H04L63/061 , H04L9/083 , H04L63/18 , H04L65/1006 , H04L65/105 , H04L2209/76
摘要： A system for providing cost effective, secure key exchange from at least one first device to at least one second device through at least one proxy server is provided. The system includes a first key exchange message from the at least one first device to the at least one second device via the at least one proxy server. A second key exchange message from the at least one second device to the at least one first device via a media stream of the Internet is required to complete the computation of the session key. A method of securing a communication system is also set forth. The method includes the steps of providing a routing device for identifying a subscriber, and providing a master key exchange session, the master key exchange session including a key k to find a subscriber and a nonce r to answer a query to the subscriber, wherein the master key exchange session includes both the key k and the nonce r.
摘要翻译：提供了一种用于通过至少一个代理服务器从至少一个第一设备向至少一个第二设备提供成本有效的安全密钥交换的系统。该系统包括经由至少一个代理服务器从至少一个第一设备到至少一个第二设备的第一密钥交换消息。需要经由互联网的媒体流从至少一个第二设备到至少一个第一设备的第二密钥交换消息来完成对话密钥的计算。还提出了一种保护通信系统的方法。该方法包括以下步骤：提供用于识别订户的路由设备，以及提供主密钥交换会话，所述主密钥交换会话包括密钥k以找到订户并且随机地向订户回答查询，其中所述主密钥交换会话包括密钥k和随机数r。

4. 发明申请

WO2003032133A2 DISTRIBUTED SECURITY ARCHITECTURE FOR STORAGE AREA NETWORKS (SAN) 审中-公开
标题翻译：存储区域网络的分布式安全体系结构（SAN）
公开(公告)号：WO2003032133A2
公开(公告)日：2003-04-17
申请号：PCT/CA2002/001518
申请日：2002-10-11
申请人： KASTEN CHASE APPLIED RESEARCH LTD. , MURTY, Kumar , KOLESNIKOV, Vladimir , THANOS, Daniel
发明人： MURTY, Kumar , KOLESNIKOV, Vladimir , THANOS, Daniel
IPC分类号： G06F1/00
CPC分类号： H04L63/0428 , H04L9/0894 , H04L63/0823
摘要： The invention relates to a method of transferring data between a host computer server and a secure network storage system via a data transfer architecture. The secure network storage system has a plurality of storage devices for storage of the data. The method comprises (a) authenticating the host computer server with a security system associated with the secure network storage system; (b) obtaining a storage key from the security system after authentication; and (c) performing an encryption/decryption operation comprising at least one of (i) encrypting and storing data on the secure network storage system, and (ii) retrieving and decrypting data stored on the secure network storage system.
摘要翻译：本发明涉及一种通过数据传输体系结构在主计算机服务器和安全网络存储系统之间传输数据的方法。安全网络存储系统具有用于存储数据的多个存储设备。该方法包括（a）用与安全网络存储系统相关联的安全系统认证主机服务器; （b）在认证之后从安全系统获得存储密钥; 和（c）执行加密/解密操作，该加密/解密操作包括以下中的至少一个：（i）在所述安全网络存储系统上加密和存储数据，以及（ii）检索和解密存储在所述安全网络存储系统上的数据。

5. 发明申请

WO2012151040A1 MAC AGGREGATION RESILIENT TO DENIAL-OF-SERVICE ATTACKS FOR USE IN A MULTI-NODE DATA NETWORK 审中-公开
标题翻译： MAC聚合在多节点数据网络中用于服务攻击的攻击
公开(公告)号：WO2012151040A1
公开(公告)日：2012-11-08
申请号：PCT/US2012/033810
申请日：2012-04-16
申请人： ALCATEL-LUCENT USA INC. , KOLESNIKOV, Vladimir, Y. , LEE, Wonsuck
发明人： KOLESNIKOV, Vladimir, Y. , LEE, Wonsuck
IPC分类号： H04L9/32 , H04L29/06
CPC分类号： H04L63/123 , H04L9/0643 , H04L63/126 , H04L63/1458
摘要： An improved MAC aggregation technique is disclosed that yields an aggregate MAC much shorter than the concatenation of constituent MACs while achieving improved resilience to denial-of-service (DoS) attacks. The aggregate MAC is constructed in a manner wherein upon instance of channel impairments or malicious attack (e.g., from a rogue node or man-in-the-middle attacker ), only a portion of the aggregate MAC will include corrupted data, at least a portion of the aggregate MAC thereby including valid verifiable data. A source of corruption of the aggregate MAC may be ascertained based on indicia of which constituent MACs are included in the valid portion; and constituent MACs that are wholly included in the valid portion may be declared valid.
摘要翻译：公开了一种改进的MAC聚合技术，其产生比构成MAC的级联短的聚合MAC，同时实现对拒绝服务（DoS）攻击的改善的弹性。聚合MAC以如下方式构造：其中，在信道损害或恶意攻击（例如，来自流氓节点或中间人攻击者）的情况下，仅聚合MAC的一部分将包括损坏的数据，至少一个从而包括有效的可验证数据。可以基于哪个组成的MAC被包括在有效部分中的标记来确定聚合MAC的损坏来源; 并且完全包括在有效部分中的组成MAC可以被声明为有效的。

6. 发明申请

WO2011067139A1 SYSTEM AND METHOD FOR ACCESSING PRIVATE DIGITAL CONTENT 审中-公开
标题翻译：用于访问私有数字内容的系统和方法
公开(公告)号：WO2011067139A1
公开(公告)日：2011-06-09
申请号：PCT/EP2010/068027
申请日：2010-11-23
申请人： ALCATEL LUCENT , BOSCH, Peter , KOLESNIKOV, Vladimir , MULLENDER, Sape , DAENEN, Koen
发明人： BOSCH, Peter , KOLESNIKOV, Vladimir , MULLENDER, Sape , DAENEN, Koen
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L63/06 , H04L9/0838 , H04L9/3215 , H04L9/3263 , H04L63/0823 , H04L63/166 , H04L2209/60
摘要： Method for providing access to private digital content installed on a content server C (s), wherein a content manager server C (a) has a number of clients potentially interested in the private content; the method comprising the following steps performed at the content management server C (a) : establishing a first communication channel with a client C (b) of the number of clients; receiving a query for private digital content from the client C (b) and sending an appropriate response, causing the client to establish a second communication channel with the content server; establishing a secure session with the content server C (s) over the first and second communication channel; establishing a new session key for the secure session and transmitting said new session key to the client C (b), so that the client can obtain the queried private digital content from the content server as if the client is the content management server.
摘要翻译：用于提供对安装在内容服务器C上的私人数字内容的访问的方法，其中内容管理器服务器C（a）具有可能对私人内容感兴趣的客户端数量; 该方法包括在内容管理服务器C（a）执行的以下步骤：与客户端数量的客户端C（b）建立第一通信信道; 从客户端C（b）接收私人数字内容的查询并发送适当的响应，使客户端与内容服务器建立第二通信信道; 在所述第一和第二通信信道上建立与所述内容服务器C的安全会话; 建立用于安全会话的新会话密钥并将所述新的会话密钥发送到客户端C（b），使得客户端可以从内容服务器获得查询的私人数字内容，就像客户端是内容管理服务器一样。

7. 发明申请

WO2011006997A1 SYSTEM AND METHOD FOR PROVIDING SECURE VIRTUAL MACHINES 审中-公开
标题翻译：用于提供安全虚拟机的系统和方法
公开(公告)号：WO2011006997A1
公开(公告)日：2011-01-20
申请号：PCT/EP2010/060341
申请日：2010-07-16
申请人： ALCATEL LUCENT , BOSCH, Peter , KOLESNIKOV, Vladimir , MULLENDER, Sape , McKIE, Jim , DOBBELAERE, Philippe , McLELLAN, Hubert
发明人： BOSCH, Peter , KOLESNIKOV, Vladimir , MULLENDER, Sape , McKIE, Jim , DOBBELAERE, Philippe , McLELLAN, Hubert
IPC分类号： G06F21/00
CPC分类号： G06F21/53 , G06F21/572
摘要： The present invention provides improved security in a virtual machine. By extending the capabilities of modern secure processors, privacy of computation is provided from both the owner of the equipment and other users executing on the processor, which is an advantageous feature for rentable, secure computers. In addition to the hardware extensions required to secure a virtualizable computer, an infrastructure for the deployment of such processors is also provided. Furthermore, a signaling flow to establish the various relationships between the owner, user and manufacturer of the equipment is disclosed.
摘要翻译：本发明提供了虚拟机中的改进的安全性。通过扩展现代安全处理器的能力，计算的隐私由设备的所有者和在处理器上执行的其他用户提供，这是可出租，安全的计算机的有利特征。除了安装可虚拟化计算机所需的硬件扩展之外，还提供了用于部署这种处理器的基础设施。此外，公开了建立设备的所有者，用户和制造商之间的各种关系的信令流。

8. 发明申请

WO2010024874A2 MESSAGE AUTHENTICATION CODE PRE-COMPUTATION WITH APPLICATIONS TO SECURE MEMORY 审中-公开
标题翻译：消息认证码使用应用程序预先计算以确保存储器安全
公开(公告)号：WO2010024874A2
公开(公告)日：2010-03-04
申请号：PCT/US2009/004820
申请日：2009-08-25
申请人： ALCATEL-LUCENT USA INC. , GARAY, Juan, A. , KOLESNIKOV, Vladimir , MCLELLAN, Hubert, Rae
发明人： GARAY, Juan, A. , KOLESNIKOV, Vladimir , MCLELLAN, Hubert, Rae
IPC分类号： H04L9/32
CPC分类号： G06F21/71 , H04L9/0631 , H04L9/0643 , H04L9/3242
摘要： A method comprising the steps of creating a random permutation of data from a data input by executing at least one of a Pseudo-Random Permutation (PRP) and a Pseudo-Random Function (PRF), creating a first data block by combining the random permutation of data with a received second data block and executing an ε-differentially uniform function on the result of the combination, XORing the result of the ε-DU function evaluation with a secret key, and reducing the first data block to a first message authentication code.
摘要翻译：包括以下步骤的方法：通过执行伪随机置换（PRP）和伪随机函数（PRF）中的至少一个来从数据输入创建数据的随机置换;创建通过将数据的随机置换与接收到的第二数据块进行组合，并对组合的结果执行ε-差分均匀函数，将ε-DU函数估计的结果与秘密密钥进行异或，以及将第一数据块的第一数据块添加到第一个消息认证码。

9. 发明申请

WO2011084419A1 SECURE MULTI - UIM AUTHENTICATION AND KEY EXCHANGE 审中-公开
标题翻译：安全多用户认证和密钥交换
公开(公告)号：WO2011084419A1
公开(公告)日：2011-07-14
申请号：PCT/US2010/060283
申请日：2010-12-14
申请人： ALCATEL-LUCENT USA INC. , KOLESNIKOV, Vladimir, Y.
发明人： KOLESNIKOV, Vladimir, Y.
IPC分类号： H04L9/08 , H04L9/32 , H04L29/06
CPC分类号： H04L63/162 , H04L9/3242 , H04L9/3271 , H04L63/0853 , H04W12/06
摘要： An apparatus in one example, where the apparatus comprises a communication device component that performs an authentication key agreement protocol by receiving a first random nonce (RAND) and an authentication token, wherein the communication device component is configured with a shared secret key. The communication device component generates a derivation key by applying a pseudo random function to the RAND and the shared secret key. The communication device component generates a first set of session keys based on a second random nonce (RANDC) and the derivation key where the first set of session keys are used in encrypting communications.
摘要翻译：在一个示例中的装置，其中所述装置包括通过接收第一随机随机数（RAND）和认证令牌来执行认证密钥协商协议的通信设备组件，其中所述通信设备组件配置有共享秘密密钥。通信设备组件通过将伪随机函数应用于RAND和共享秘密密钥来生成导出密钥。通信设备组件基于第二随机随机数（RANDC）和导出密钥生成第一组会话密钥，其中第一组会话密钥用于加密通信。

10. 发明申请

WO2011005569A3 EFFICIENT KEY MANAGEMENT SYSTEM AND METHOD 审中-公开
标题翻译：高效的关键管理系统和方法
公开(公告)号：WO2011005569A3
公开(公告)日：2011-03-24
申请号：PCT/US2010039647
申请日：2010-06-23
申请人： ALCATEL LUCENT USA INC , KOLESNIKOV VLADIMIR , GURBANI VIJAY
发明人： KOLESNIKOV VLADIMIR , GURBANI VIJAY
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L63/061 , H04L9/083 , H04L63/18 , H04L65/1006 , H04L65/105 , H04L2209/76
摘要： A system for providing cost effective, secure key exchange from at least one first device to at least one second device through at least one proxy server is provided. The system includes a first key exchange message from the at least one first device to the at least one second device via the at least one proxy server. A second key exchange message from the at least one second device to the at least one first device via a media stream of the Internet is required to complete the computation of the session key. A method of securing a communication system is also set forth. The method includes the steps of providing a routing device for identifying a subscriber, and providing a master key exchange session, the master key exchange session including a key k to find a subscriber and a nonce r to answer a query to the subscriber, wherein the master key exchange session includes both the key k and the nonce r.
摘要翻译：提供了一种用于通过至少一个代理服务器从至少一个第一设备到至少一个第二设备提供成本有效的安全密钥交换的系统。系统包括经由至少一个代理服务器从至少一个第一设备到至少一个第二设备的第一密钥交换消息。需要经由因特网的媒体流从至少一个第二设备到至少一个第一设备的第二密钥交换消息来完成会话密钥的计算。还阐述了确保通信系统的方法。该方法包括以下步骤：提供用于识别订户的路由设备，以及提供主密钥交换会话，所述主密钥交换会话包括查找订户的密钥k和用户应答查询的随机数，其中，主密钥交换会话包括密钥k和随机数。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式