专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2009039380A3 VIRTUAL SUBSCRIBER IDENTITY MODULE 审中-公开
公开(公告)号：WO2009039380A3
公开(公告)日：2009-03-26
申请号：PCT/US2008/077029
申请日：2008-09-19
申请人： INTERDIGITAL TECHNOLOGY CORPORATION , SCHMIDT, Andreas U. , KUNTZ, Nicolai , KASPER, Michael , SHAH, Yogendra, C. , CHA, Inhyok , GUCCIONE, Louis, J.
发明人： SCHMIDT, Andreas U. , KUNTZ, Nicolai , KASPER, Michael , SHAH, Yogendra, C. , CHA, Inhyok , GUCCIONE, Louis, J.
IPC分类号： H04L29/06 , H04W8/26
摘要： A mobile trusted platform (MTP) configured to provide virtual subscriber identify module (vSIM) services is disclosed. In one embodiment, the MTP includes: a device manufacturer- trusted subsystem (TSS-DM) configured to store and provide credentials related to a manufacturer of the MTP; a mobile network operator - trusted subsystem (MNO-TSS) configured to store and provide credentials related to a mobile network operator (MNO); and a device user/owner - trusted subsystem (TSS-DO/TSS-U) configured to store and provide credentials related to user of the MTP. The TSS-MNO includes a vSIM core services unit, configured to store, provide and process credential information relating to the MNO. The TSS-DO/TSS-U includes a vSIM management unit, configured to store, provide and process credential information relating to the user/owner of the MTP. The TSS-DO/TSS-U and the TSS-MNO communicate through a trusted vSIM service.

2. 发明申请

WO2009046400A1 TECHNIQUES FOR SECURE CHANNELIZATION BETWEEN UICC AND A TERMINAL 审中-公开
标题翻译： UICC和终端之间安全通道的技术
公开(公告)号：WO2009046400A1
公开(公告)日：2009-04-09
申请号：PCT/US2008/078893
申请日：2008-10-06
申请人： INTERDIGITAL TECHNOLOGY CORPORATION , CHA, Inhyok , RATHI, Chinmayee V. , SHAH, Yogendra, C. , GUCCIONE, Louis, J. , SCHMIDT, Andreas U. , KUNTZ, Nicolai
发明人： CHA, Inhyok , RATHI, Chinmayee V. , SHAH, Yogendra, C. , GUCCIONE, Louis, J. , SCHMIDT, Andreas U. , KUNTZ, Nicolai
IPC分类号： H04W12/04 , H04L29/06
CPC分类号： H04L63/0428 , H04L63/06 , H04L63/0853 , H04W12/04
摘要： The present invention is related to a wireless communication system. 3G UMTS mobile phone systems rely on a protected smart card called the UMTS integrated circuit card (UICC) that provides UMTS subscriber identity module (USIM) applications as a basis or root of various security measures protecting the communication path between the 3G mobile terminal and the UMTS wireless network (or UTRAN). Disclosed is a method by which the UICC exchanges information with a terminal, such as an Internal Key Center (IKC 1250) and a Bootstrapping Server Function (BSF 1270) enables a procedure where multiple local keys specific to applications and Network Application Functions (NAFs) (Ks_local) are used for authentication and to encrypt and decrypt messages.
摘要翻译：本发明涉及无线通信系统。 3G UMTS移动电话系统依赖于被称为UMTS集成电路卡（UICC）的受保护的智能卡，其提供UMTS用户识别模块（USIM）应用，作为保护3G移动终端与3G移动终端之间的通信路径的各种安全措施的基础或根源 UMTS无线网络（或UTRAN）。本发明公开了一种UICC与诸如内部密钥中心（IKC 1250）和引导服务器功能（BSF 1270）之类的终端交换信息的方法，能够实现特定于应用和网络应用功能（NAF）的多个本地密钥的过程，（Ks_local）用于认证和加密和解密消息。

3. 发明申请

WO2010102259A2 PLATFORM VALIDATION AND MANAGEMENT OF WIRELESS DEVICES 审中-公开
标题翻译：无线设备的平台验证和管理
公开(公告)号：WO2010102259A2
公开(公告)日：2010-09-10
申请号：PCT/US2010/026436
申请日：2010-03-05
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , SCHMIDT, Andreas U. , LEICHER, Andreas , CHA, Inhyok , SHAH, Yogendra, C. , PATTAR, Sudhir B. , HOWRY, Dolores F. , GREINER, David G. , CASE, Lawrence L. , MEYERSTEIN, Michael V. , GUCCIONE, Louis, J.
发明人： SCHMIDT, Andreas U. , LEICHER, Andreas , CHA, Inhyok , SHAH, Yogendra, C. , PATTAR, Sudhir B. , HOWRY, Dolores F. , GREINER, David G. , CASE, Lawrence L. , MEYERSTEIN, Michael V. , GUCCIONE, Louis, J.
IPC分类号： H04W12/10
CPC分类号： H04W12/10 , G06F21/44 , G06F21/57 , H04L63/123 , H04W12/06 , H04W12/08
摘要： Methods, components and apparatus for implementing platform validation and management (PVM) are disclosed. PVM provides the functionality and operations of a platform validation entity with remote management of devices by device management components and systems such as a home node-B management system or component. Example PVM operations bring devices into a secure target state before allowing connectivity and access to a core network.
摘要翻译：公开了实现平台验证和管理（PVM）的方法，组件和设备。 PVM通过设备管理组件和系统（如家庭节点B管理系统或组件）提供对设备进行远程管理的平台验证实体的功能和操作。示例PVM操作在允许连接和访问核心网络之前将设备置于安全目标状态。

4. 发明申请

WO2010102222A2 METHOD AND APPARATUS FOR H(e)NB INTEGRITY VERIFICATION AND VALIDATION 审中-公开
标题翻译： H（e）NB完整性验证和验证的方法和设备
公开(公告)号：WO2010102222A2
公开(公告)日：2010-09-10
申请号：PCT/US2010/026384
申请日：2010-03-05
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , PATTAR, Sudhir B. , CHA, Inhyok , SCHMIDT, Andreas U. , LEICHER, Andreas , SHAH, Yogendra, C. , HOWRY, Dolores F. , GREINER, David G. , CASE, Lawrence L. , MEYERSTEIN, Michael V. , GUCCIONE, Louis, J.
发明人： PATTAR, Sudhir B. , CHA, Inhyok , SCHMIDT, Andreas U. , LEICHER, Andreas , SHAH, Yogendra, C. , HOWRY, Dolores F. , GREINER, David G. , CASE, Lawrence L. , MEYERSTEIN, Michael V. , GUCCIONE, Louis, J.
IPC分类号： H04W12/10 , G06F11/22
CPC分类号： H04L41/0869 , H04L41/0654 , H04L41/0681 , H04L63/123 , H04L63/166 , H04W12/10 , H04W84/045
摘要： An apparatus and method for providing home evolved node-B (H(e)NB) integrity verification and validation using autonomous validation and semi-autonomous validation is disclosed herein.
摘要翻译：本文公开了一种用于使用自主验证和半自主验证来提供家庭演进节点B（H（e）NB）完整性验证和验证的设备和方法。

5. 发明申请

WO2009105542A2 A METHOD AND APPARATUS FOR SECURE TRUSTED TIME TECHNIQUES 审中-公开
标题翻译：一种用于安全受理时间技术的方法和装置
公开(公告)号：WO2009105542A2
公开(公告)日：2009-08-27
申请号：PCT/US2009/034522
申请日：2009-02-19
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , CHA, Inhyok , SHAH, Yogendra, C. , SCHMIDT, Andreas U. , KUNTZ, Nicolai , HETT, Christian
发明人： CHA, Inhyok , SHAH, Yogendra, C. , SCHMIDT, Andreas U. , KUNTZ, Nicolai , HETT, Christian
IPC分类号： H04W12/10 , H04L29/06 , H04W56/00 , G06F21/00
CPC分类号： G06F21/81 , G06F21/725 , H04L63/123 , H04L2463/101 , H04L2463/121 , H04W12/10
摘要： A method and apparatus to establish a trustworthy local time based on trusted computing methods are described. The concepts are scaling because they may be graded by the frequency and accuracy with which a reliable external time source is available for correction and/or reset, and how trustworthy this external source is in a commercial scenario. The techniques also take into account that the number of different paths and number of hops between the device and the trusted external time source may vary. A local clock related value which is protected by a TPM securely bound to an external clock. A system of Accuracy Statements (AS) is added to introduce time references to the audit data provided by other maybe cheaper sources than the time source providing the initial time.
摘要翻译：描述了基于可信计算方法建立可靠的本地时间的方法和装置。概念是缩放，因为它们可以通过可靠的外部时间源可用于校正和/或重置的频率和准确度进行分级，并且在商业场景中该外部源是如何可信赖的。这些技术还考虑到设备与受信任的外部时间源之间的不同路径和跳数的数量可能会有所不同。由TPM保护的本地时钟相关值安全地绑定到外部时钟。添加准确性声明（AS）的系统来引入时间参考，提供其他可能比起提供初始时间的时间源更便宜的源提供的审计数据。

6. 发明申请

WO2006130725A2 AUTHENTICATION AND ENCRYPTION METHODS USING SHARED SECRET RANDOMNESS IN A JOINT CHANNEL 审中-公开
标题翻译：在联合通道中使用共享秘密随机的认证和加密方法
公开(公告)号：WO2006130725A2
公开(公告)日：2006-12-07
申请号：PCT/US2006/021173
申请日：2006-05-31
申请人： INTERDIGITAL TECHNOLOGY CORPORATION , REZNIK, Alexander , PURKAYASTHA, Debashish , GOLDBERG, Steven, Jeffrey , OLESEN, Robert, Lind , RUDOLF, Marian , CHA, Inhyok , CARLTON, Alan, Gerald , SHAH, Yogendra, C. , RAHMAN, Shamin, Akbar , MUKHERJEE, Rajat, Pritam , DIFAZIO, Robert, A. , STERNBERG, Gregory, S. , KAZAKEVICH, Leonid , SIWIAK, Kazimierz , ZHANG, Guodong , HAQUE, Tanbir , GUCCIONE, Louis, J. , CHITRAPU, Prabhakar, R. , KUMOLUYI, Akinlolu, Oloruntosi , BRIANCON, Alain, Charles, Louis
发明人： REZNIK, Alexander , PURKAYASTHA, Debashish , GOLDBERG, Steven, Jeffrey , OLESEN, Robert, Lind , RUDOLF, Marian , CHA, Inhyok , CARLTON, Alan, Gerald , SHAH, Yogendra, C. , RAHMAN, Shamin, Akbar , MUKHERJEE, Rajat, Pritam , DIFAZIO, Robert, A. , STERNBERG, Gregory, S. , KAZAKEVICH, Leonid , SIWIAK, Kazimierz , ZHANG, Guodong , HAQUE, Tanbir , GUCCIONE, Louis, J. , CHITRAPU, Prabhakar, R. , KUMOLUYI, Akinlolu, Oloruntosi , BRIANCON, Alain, Charles, Louis
CPC分类号： H04B7/0434 , H04B7/0695 , H04L9/0631 , H04L9/0656 , H04L9/0875 , H04L9/3271 , H04L63/0428 , H04L63/061 , H04L63/08 , H04L63/1441 , H04L63/1466 , H04L63/18 , H04L2209/34 , H04L2209/80 , H04W12/02 , H04W12/04 , H04W12/06 , H04W92/10
摘要： The present invention relates to secret key generation and authentication methods that are based on joint randomness not shared by others (JRNSO), in which unique channel response between two communication terminals generates a secret key. Multiple network access points use a unique physical location of a receiving station to increase user data security. High data rate communication data is encrypted by generating a random key and a pseudo-random bit stream. A configurable interleaving is achieved by introduction of JRNSO bits to an encoder used for error-correction codes. Databases of user data are also protected by JRNSO-based key mechanisms. Additional random qualities are induced on the joint channel using MIMO eigen-beamforming, antenna array deflection, polarization selection, pattern deformation, and path selection by beamforming or time correlation. Gesturing induces randomness according to uniquely random patterns of a human user's arm movements inflected to the user device.
摘要翻译：本发明涉及基于其他人不共享的联合随机性（JRNSO）的秘密密钥生成和认证方法，其中两个通信终端之间的唯一信道响应产生密钥。多个网络接入点使用接收站的唯一物理位置来增加用户数据的安全性。通过生成随机密钥和伪随机比特流来加密高数据速率通信数据。通过将JRNSO位引入用于纠错码的编码器来实现可配置的交错。用户数据的数据库也受到基于JRNSO的关键机制的保护。使用MIMO本征波束形成，天线阵列偏转，偏振选择，图案变形以及通过波束形成或时间相关的路径选择在联合信道上引起附加随机质量。手势根据用户装置的人体手臂运动的唯一随机模式引起随机性。

7. 发明申请

WO2012040198A1 IDENTITY MANAGEMENT ON A WIRELESS DEVICE 审中-公开
标题翻译：无线设备的身份管理
公开(公告)号：WO2012040198A1
公开(公告)日：2012-03-29
申请号：PCT/US2011/052345
申请日：2011-09-20
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , SCHMIDT, Andreas , MEYERSTEIN, Michael, V. , LEICHER, Andreas , SHAH, Yogendra, C. , GUCCIONE, Louis, J. , CHA, Inhyok
发明人： SCHMIDT, Andreas , MEYERSTEIN, Michael, V. , LEICHER, Andreas , SHAH, Yogendra, C. , GUCCIONE, Louis, J. , CHA, Inhyok
IPC分类号： H04L29/06 , G06F21/00 , H04W12/04 , H04W12/06
CPC分类号： H04W12/06 , H04L63/061 , H04L63/068 , H04L63/08 , H04L63/0815 , H04L63/0853 , H04L67/02 , H04L2463/061 , H04L2463/081 , H04W12/04 , H04W88/02
摘要： A wireless device may perform a local authentication to reduce the traffic on a network. The local authentication may be performed using a local web server and/or a local OpenID provider (OP) associated with the wireless device. The local web server and/or local OP may be implemented on a security module, such as a smartcard or a trusted execution environment for example. The local OP and/or local web server may be used to implement a provisioning phase to derive a session key, associated with a service provider, from an authentication between the wireless device and the network. The session key may be reusable for subsequent local authentications to locally authenticate a user of the wireless device to the service provider.
摘要翻译：无线设备可以执行本地认证以减少网络上的流量。可以使用与无线设备相关联的本地Web服务器和/或本地OpenID提供商（OP）来执行本地认证。本地Web服务器和/或本地OP可以在例如智能卡或可信执行环境的安全模块上实现。可以使用本地OP和/或本地Web服务器实现供应阶段，以从无线设备和网络之间的认证导出与服务提供商相关联的会话密钥。会话密钥可以可重用于随后的本地认证，以向服务提供商本地认证无线设备的用户。

8. 发明申请

WO2012129503A1 SYSTEMS AND METHODS FOR SECURING NETWORK COMMUNICATIONS 审中-公开
标题翻译：用于安全网络通信的系统和方法
公开(公告)号：WO2012129503A1
公开(公告)日：2012-09-27
申请号：PCT/US2012/030352
申请日：2012-03-23
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , CHA, Inhyok , GUCCIONE, Louis, J. , SCHMIDT, Andreas , LEICHER, Andreas , SHAH, Yogendra, C.
发明人： CHA, Inhyok , GUCCIONE, Louis, J. , SCHMIDT, Andreas , LEICHER, Andreas , SHAH, Yogendra, C.
IPC分类号： H04W12/06 , H04L29/06
CPC分类号： H04L9/0819 , G06F21/335 , G06F21/42 , G06F21/53 , G06F21/575 , G06F2221/2107 , G06F2221/2149 , H04L9/3271 , H04L63/0272 , H04L63/062 , H04L63/0869 , H04L63/168 , H04L67/02 , H04L67/42 , H04W12/02 , H04W12/04 , H04W12/06
摘要： Secure communications may be established amongst network entities for performing authentication and/or verification of the network entities. For example, a user equipment (UE) may establish a secure channel with an identity provider, capable of issuing user identities for authentication of the user/UE. The UE may also establish a secure channel with a service provider, capable of providing services to the UE via a network. The identity provider may even establish a secure channel with the service provider for performing secure communications. The establishment of each of these secure channels may enable each network entity to authenticate to the other network entities. The secure channels may also enable the UE to verify that the service provider with which it has established the secure channel is an intended service provider for accessing services.
摘要翻译：可以在用于执行网络实体的认证和/或验证的网络实体之间建立安全通信。例如，用户设备（UE）可以建立具有身份提供商的安全信道，能够发出用户/ UE用户身份。 UE还可以与服务提供商建立安全信道，能够经由网络向UE提供服务。身份提供商甚至可以与服务提供商建立用于执行安全通信的安全信道。这些安全信道中的每一个的建立可以使每个网络实体能够对其他网络实体进行认证。安全信道还可以使得UE能够验证其已建立安全信道的服务提供商是用于接入服务的预期服务提供商。

9. 发明申请

WO2012149384A1 SSO FRAMEWORK FOR MULTIPLE SSO TECHNOLOGIES 审中-公开
标题翻译： SSO技术的SSO框架
公开(公告)号：WO2012149384A1
公开(公告)日：2012-11-01
申请号：PCT/US2012/035540
申请日：2012-04-27
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , SHAH, Yogendra, C. , SCHMIDT, Andreas , CHA, Inhyok , GUCCIONE, Louis, J. , LEICHER, Andreas
发明人： SHAH, Yogendra, C. , SCHMIDT, Andreas , CHA, Inhyok , GUCCIONE, Louis, J. , LEICHER, Andreas
IPC分类号： H04L29/06
CPC分类号： H04W12/06 , H04L63/0815 , H04L63/205 , H04L2463/082
摘要： Users desire useable security or a seamless means for accessing internet services whereby user interaction in the provisioning of credentials may be kept to a minimum or even eliminated entirely. The Single Sign-On identity management concept enables user- assisted and network- assisted authentication for access to desired services. To enable seamless authentication services to users, a unified framework and a protocol layer interface for managing multiple authentication methods may be used. A user equipment, UE, comprises a user application (202, 204) configured to communicate with a service provider to access a service and a plurality of network- assisted authentication modules (208 - 216), each network-assisted authentication module corresponding to a different network-assisted authentication protocol. The UE further comprises a single sign-on subsystem (206) configured to authenticate a user of the UE based on user-assisted authentication information at the UE and/or network and to select one of the network-assisted authentication modules based on one more policies.
摘要翻译：用户希望可用的安全性或用于访问互联网服务的无缝手段，从而可以将凭证提供中的用户交互保持最小或甚至完全消除。单点登录身份管理概念使得用户辅助和网络协助的身份验证能够访问所需的服务。为了实现对用户的无缝认证服务，可以使用用于管理多种认证方法的统一框架和协议层接口。用户设备UE包括被配置为与服务提供商通信以访问服务的用户应用（202,204）和多个网络辅助认证模块（208-216），每个网络辅助认证模块对应于不同的网络辅助认证协议。 UE还包括单个登录子系统（206），其被配置为基于UE和/或网络处的用户辅助的认证信息来认证UE的用户，并且基于多个网络辅助认证模块选择一个政策。

10. 发明申请

WO2012092604A2 AUTHENTICATION AND SECURE CHANNEL SETUP FOR COMMUNICATION HANDOFF SCENARIOS 审中-公开
标题翻译：通信切换场景的认证和安全通道设置
公开(公告)号：WO2012092604A2
公开(公告)日：2012-07-05
申请号：PCT/US2011/068206
申请日：2011-12-30
申请人： INTERDIGITAL PATENT HOLDINGS, INC. , SHAH, Yogendra, C. , CHA, Inhyok , SCHMIDT, Andreas , GUCCIONE, Louis, J. , CASE, Lawrence , LEICHER, Andreas , TARGALI, Yousif
发明人： SHAH, Yogendra, C. , CHA, Inhyok , SCHMIDT, Andreas , GUCCIONE, Louis, J. , CASE, Lawrence , LEICHER, Andreas , TARGALI, Yousif
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , H04L63/0209 , H04L63/0815 , H04L63/0892 , H04L63/10 , H04L63/18 , H04W12/04 , H04W12/06 , H04W12/08 , H04W36/0038
摘要： Persistent communication layer credentials generated on a persistent communication layer at one network may be leveraged to perform authentication on another. For example, the persistent communication layer credentials may include application- layer credentials derived on an application layer. The application-layer credentials may be used to establish authentication credentials for authenticating a mobile device for access to services at a network server. The authentication credentials may be derived from the application- layer credentials of another network to enable a seamless handoff from one network to another. The authentication credentials may be derived from the application- layer credentials using reverse bootstrapping or other key derivation functions. The mobile device and/or network entity to which the mobile device is being authenticated may enable communication of authentication information between the communication layers to enable authentication of a device using multiple communication layers.
摘要翻译：可以利用在一个网络上的持久通信层上生成的持久通信层凭证来对另一网络执行认证。例如，持久通信层凭证可以包括在应用层上派生的应用层凭证。应用层凭证可以用于建立用于认证移动设备以访问网络服务器处的服务的认证证书。身份验证凭证可以从另一个网络的应用层凭证导出，以实现从一个网络到另一个网络的无缝切换。认证证书可以使用反向自举或其他密钥派生函数从应用层证书派生。移动设备正在被认证的移动设备和/或网络实体可以启用通信层之间的认证信息的通信，以使得能够使用多个通信层来认证设备。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式