专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008131444A3 INITIAL SEED MANAGEMENT FOR PSEUDORANDOM NUMBER GENERATOR 审中-公开
标题翻译： PSEUDORANDOM NUMBER GENERATOR的初步种子管理
公开(公告)号：WO2008131444A3
公开(公告)日：2009-04-23
申请号：PCT/US2008061341
申请日：2008-04-23
申请人： QUALCOMM INC , ROSE GREGORY GORDON , GANTMAN ALEXANDER , XIAO LU , FIGUEROA DAVID
发明人： ROSE GREGORY GORDON , GANTMAN ALEXANDER , XIAO LU , FIGUEROA DAVID
IPC分类号： G06F7/58
CPC分类号： G06F7/582 , G06F7/588 , H04L9/0869
摘要： A secure seeding and reseeding scheme is provided for pseudorandom number generators by using a pre-stored initialization seed. This scheme initializes a pseudorandom number generator into an unknown state even when entropy collection is unavailable. A primary seed file and a shadow seed file are maintained with initialization seed information in a secure file system. If the primary seed file is corrupted, the pseudorandom number generator is seeded with the content of the shadow seed file. Additionally, a trusted timer or clock may be mixed with the pre-stored initialization seed to add entropy even when the pre-stored seed information has been compromised.
摘要翻译：通过使用预先存储的初始化种子为伪随机数发生器提供安全的种子和再种植方案。即使熵收集不可用，该方案将伪随机数发生器初始化为未知状态。在安全文件系统中，使用初始化种子信息维护主种子文件和影子种子文件。如果主种子文件被破坏，则伪随机数生成器被种子与影子种子文件的内容。此外，即使预先存储的种子信息已被破坏，可信任的定时器或时钟可以与预先存储的初始化种子混合以添加熵。

2. 发明申请

WO2010045410A3 APPARATUS AND METHOD FOR TRANSITIONING ACCESS RIGHTS FOR ROLE-BASED ACCESS CONTROL COMPATIBILIITY 审中-公开
标题翻译：用于转换基于角色的访问控制兼容性的访问权限的装置和方法
公开(公告)号：WO2010045410A3
公开(公告)日：2010-09-16
申请号：PCT/US2009060760
申请日：2009-10-15
申请人： QUALCOMM INC , ROSE GREGORY GORDON , GANTMAN ALEXANDER , XIAO LU
发明人： ROSE GREGORY GORDON , GANTMAN ALEXANDER , XIAO LU
IPC分类号： H04L29/06 , G06F21/00 , H04W12/08
CPC分类号： H04L63/102 , G06F21/6218
摘要： Disclosed is a method for transitioning access rights, in a remote station with role-based access control, for an unknown role having access rights defined by a central access control management module. In the method, a role capability table is maintained in the remote station specifying centrally-defined access rights of roles that are interpretable in the remote station. An access request associated with an unknown role that is not interpretable in the remote station is received. The access request includes a role transition list that relates the unknown role to other centrally-defined roles. At least one of the other centrally-defined roles is interpretable in the remote station. A role is selected, from the role transition list, that is interpretable in the remote station for interpreting the unknown role of the access request. Access is granted based on the access request associated with the unknown role using the access rights of the interpretable role selected from the role transition table.
摘要翻译：公开了一种用于在具有基于角色的访问控制的远程站中对具有由中央访问控制管理模块定义的访问权的未知角色转换访问权的方法。在该方法中，在远程站中维护角色能力表，以指定在远程站中可解释的角色的集中定义的访问权限。接收到与远程站无法解释的未知角色相关的访问请求。访问请求包括角色转换列表，该列表将未知角色与其他集中定义的角色相关联。至少有一个其他集中定义的角色可在远程站中解释。从角色转换列表中选择一个角色，该角色在远程工作站中是可解释的，用于解释访问请求的未知角色。根据角色转换表中选择的可解释角色的访问权限，基于与未知角色相关的访问请求授予访问权限。

3. 发明申请

WO2008054375A3 CONSTRAINED CRYPTOGRAPHIC KEYS 审中-公开
标题翻译：约束CRYPTOGRAPHIC KEYS
公开(公告)号：WO2008054375A3
公开(公告)日：2008-11-13
申请号：PCT/US2006038110
申请日：2006-09-29
申请人： QUALCOMM INC , GANTMAN ALEXANDER , YALCINKAYA TOLGA , ROSE GREGORY GORDON , XIAO LU
发明人： GANTMAN ALEXANDER , YALCINKAYA TOLGA , ROSE GREGORY GORDON , XIAO LU
IPC分类号： H04L9/32
CPC分类号： H04L9/0872 , H04L9/088 , H04L9/321 , H04L63/083 , H04L2209/76
摘要： A constrained proxy key is used to secure communications between two devices via an intermediary device. A first proxy key is generated at a host device (key generator device) based on a shared secret key, one or more constraints on the first proxy key, and a key derivation function. At least the shared secret key and key derivation function are known to the host device and a client device (authentication device). The first proxy key is sent to a proxy device to use in authenticating communications with the client device. An authenticated message is generated by the proxy device using the first proxy key and sent to the client device. The client device locally generates a second proxy key using the key derivation function, one or more constraints, and the shared secrete key for authenticating the proxy device. The proxy device is authenticated if the client device successfully accesses the authenticated message from the proxy device using the second proxy key.
摘要翻译：受限代理密钥用于通过中间设备来保护两个设备之间的通信。基于共享秘密密钥，第一代理密钥上的一个或多个约束和密钥导出功能，在主机设备（密钥发生器设备）处生成第一代理密钥。至少共享秘密密钥和密钥导出功能对于主机设备和客户端设备（认证设备）是已知的。第一代理密钥被发送到代理设备以用于认证与客户端设备的通信。认证消息由代理设备使用第一代理密钥生成并发送到客户端设备。客户端设备使用密钥导出功能，一个或多个约束和用于认证代理设备的共享密钥来本地生成第二代理密钥。如果客户端设备使用第二代理密钥从代理设备成功访问认证消息，则代理设备被认证。

4. 发明申请

WO2009152100A3 METHOD AND APPARATUS FOR VERIFYING DATA PACKET INTEGRITY IN A STREAMING DATA CHANNEL 审中-公开
标题翻译：用于在流数据通道中验证数据分组完整性的方法和装置
公开(公告)号：WO2009152100A3
公开(公告)日：2010-05-20
申请号：PCT/US2009046631
申请日：2009-06-08
申请人： QUALCOMM INC , ROSE GREGORY GORDON , JULIAN DAVID JONATHAN , XIAO LU
发明人： ROSE GREGORY GORDON , JULIAN DAVID JONATHAN , XIAO LU
IPC分类号： H04L29/06
CPC分类号： H04L63/123 , H04L1/02 , H04L1/20
摘要： Disclosed is a method for verifying data packet integrity in a streaming-data channel. In the method, data packets are received from the streaming-data channel. Each data packet includes a data payload and a corresponding message integrity code. The received data packets are processed in a first processing mode, wherein the received data packets are forwarded to an application module before checking the integrity of the data packets using the respective message integrity codes. An integrity-check-failure measurement is generated for monitoring an integrity-check-failure rate in the first processing mode. If the integrity-check-failure measurement exceeds an integrity-check threshold, then the method transitions to a second processing mode. A received data packet is forwarded to the application module in the second processing mode only after passing the integrity check.
摘要翻译：公开了一种用于验证流数据信道中的数据分组完整性的方法。在该方法中，从流数据信道接收数据分组。每个数据分组包括数据有效载荷和对应的消息完整性代码。接收到的数据分组以第一处理模式进行处理，其中在使用各自的消息完整性代码检查数据分组的完整性之前，所接收的数据分组被转发到应用模块。产生完整性检查失败测量，用于在第一处理模式中监视完整性检查失败率。如果完整性检查失败测量超过完整性检查阈值，则该方法转换到第二处理模式。只有在通过完整性检查之后，接收到的数据包将以第二处理模式转发给应用模块。

5. 发明申请

WO2008119050A2 SYNCHRONIZATION TEST FOR DEVICE AUTHENTICATION 审中-公开
标题翻译：用于设备认证的同步测试
公开(公告)号：WO2008119050A2
公开(公告)日：2008-10-02
申请号：PCT/US2008058503
申请日：2008-03-27
申请人： QUALCOMM INC , ROSE GREGORY GORDON , XIAO LU , JULIAN DAVID JONATHAN
发明人： ROSE GREGORY GORDON , XIAO LU , JULIAN DAVID JONATHAN
CPC分类号： H04L63/08 , G06F21/35 , G06F21/40 , H04W12/04 , H04W12/06 , H04W88/02
摘要： Device authentication is based on the ability of a human to synchronize the movements of his or her fingers. A pairing procedure for two wireless devices may thus involve a synchronization test that is based on the relative timing of actuations of input devices on each of the wireless devices. In some aspects a synchronization test involves determining whether actuations of user input devices on two different wireless devices occurred within a defined time interval. In some aspects a synchronization test involves comparing time intervals defined by multiple actuations of user input devices on two wireless devices.
摘要翻译：设备认证是基于人类同步他或她的手指的动作的能力。因此，用于两个无线设备的配对过程可能涉及基于每个无线设备上的输入设备的启动的相对定时的同步测试。在一些方面，同步测试涉及确定是否在限定的时间间隔内发生在两个不同无线设备上的用户输入设备的启动。在一些方面，同步测试涉及比较由两个无线设备上的用户输入设备的多次致动所限定的时间间隔。

6. 发明申请

WO2008118620A3 DISTANCE-BASED PRESENCE MANAGEMENT 审中-公开
标题翻译：基于距离的存在管理
公开(公告)号：WO2008118620A3
公开(公告)日：2009-06-04
申请号：PCT/US2008055975
申请日：2008-03-05
申请人： QUALCOMM INC , JULIAN DAVID JONATHAN , LEE CHONG U , MOALLEMI KAMRAN , AGRAWAL AVNEESH , JAIME MANUEL E , DOUGLAS ROBERT KEITH , XIAO LU , ROSE GREGORY GORDON
发明人： JULIAN DAVID JONATHAN , LEE CHONG U , MOALLEMI KAMRAN , AGRAWAL AVNEESH , JAIME MANUEL E , DOUGLAS ROBERT KEITH , XIAO LU , ROSE GREGORY GORDON
IPC分类号： G06Q30/00 , H04L29/08
CPC分类号： H04W8/02 , G01S11/06 , G01S13/08 , H04L67/24 , H04W8/22 , H04W64/006
摘要： Various operations may be performed based on a distance-related function associated with two or more devices. For example, an association procedure for two or more devices may be based on one or more determined distances. Similarly, presence management may be based on one or more determined distances. A distance-related function may take various form including, for example, a distance between devices, two or more distances between devices, a rate of change in a relative distance between devices, relative acceleration between devices, or some combination of two or more of the these distance-related functions.
摘要翻译：可以基于与两个或更多个设备相关联的距离相关功能来执行各种操作。例如，两个或多个设备的关联过程可以基于一个或多个确定的距离。类似地，存在管理可以基于一个或多个确定的距离。距离相关功能可以采取各种形式，包括例如设备之间的距离，设备之间的两个或更多个距离，设备之间的相对距离的变化率，设备之间的相对加速度，或两个或更多个这些距离相关的功能。

7. 发明申请

WO2007121334A3 DISTANCE-BASED SECURITY 审中-公开
标题翻译：基于距离的安全
公开(公告)号：WO2007121334A3
公开(公告)日：2008-06-19
申请号：PCT/US2007066588
申请日：2007-04-13
申请人： QUALCOMM INC , MOALLEMI KAMRAN , EKBAL AMAL , LEE CHONG U , JULIAN DAVID JONATHAN , XIAO LU , ROSE GREGORY GORDON
发明人： MOALLEMI KAMRAN , EKBAL AMAL , LEE CHONG U , JULIAN DAVID JONATHAN , XIAO LU , ROSE GREGORY GORDON
IPC分类号： H04L29/08 , H04W12/06
CPC分类号： H04L63/0492 , H04L63/08 , H04L67/18 , H04W4/02 , H04W4/023 , H04W12/06
摘要： Various operations may be performed based on distance-related functions associated with two or more devices. For example, one or more distance-based functions may be used to control whether a device is allowed to request another device to perform one or more functions. Similarly, one or more distance-based functions may be used to control whether a device may perform one or more functions requested by another device. A distance-related function may take various form including, for example, a distance between devices, two or more distances between devices, a rate of change in a relative distance between devices, relative acceleration between devices, or some combination of two or more of the these distance-related functions.
摘要翻译：可以基于与两个或更多个设备相关联的距离相关功能来执行各种操作。例如，可以使用一个或多个基于距离的功能来控制是否允许设备请求另一个设备执行一个或多个功能。类似地，可以使用一个或多个基于距离的功能来控制设备是否可以执行另一设备请求的一个或多个功能。距离相关功能可以采取各种形式，包括例如设备之间的距离，设备之间的两个或更多个距离，设备之间的相对距离的变化率，设备之间的相对加速度，或两个或更多个这些距离相关功能。

8. 发明申请

WO2007121414A3 DISTANCE-BASED ASSOCIATION 审中-公开
标题翻译：基于距离的协会
公开(公告)号：WO2007121414A3
公开(公告)日：2007-12-27
申请号：PCT/US2007066731
申请日：2007-04-16
申请人： QUALCOMM INC , AGRAWAL AVNEESH , LEE CHONG , MOALLEMI KAMRAM , JULIAN DAVID JONATHAN , JAIME MANUEL E , DOUGLAS ROBERT KEITH , XIAO LU , ROSE GREGORY G
发明人： AGRAWAL AVNEESH , LEE CHONG , MOALLEMI KAMRAM , JULIAN DAVID JONATHAN , JAIME MANUEL E , DOUGLAS ROBERT KEITH , XIAO LU , ROSE GREGORY G
IPC分类号： H04L12/56
CPC分类号： H04W76/023 , A61B5/0015 , A61B5/0404 , G01S13/0209 , G01S13/284 , G01S13/765 , H04B5/0031 , H04L63/0861 , H04L67/24 , H04W4/001 , H04W4/02 , H04W4/023 , H04W4/027 , H04W8/005 , H04W12/06
摘要： Various operations may be performed based on a distance-related function associated with two or more devices. For example, an association procedure for two or more devices may be based on one or more determined distances. Similarly, presence management may be based on one or more determined distances. A distance-related function may take various form including, for example, a distance between devices, two or more distances between devices, a rate of change in a relative distance between devices, relative acceleration between devices, or some combination of two or more of the these distance-related functions.
摘要翻译：基于与两个或更多设备相关联的距离相关功能可以执行各种操作。例如，用于两个或更多设备的关联过程可以基于一个或多个确定的距离。类似地，呈现管理可以基于一个或多个确定的距离。距离相关功能可以采取各种形式，包括例如设备之间的距离，设备之间的两个或更多个距离，设备之间的相对距离的变化率，设备之间的相对加速度，或者两个或更多个这些距离相关的功能。

9. 发明申请

WO2011041597A3 METHOD AND DEVICE FOR ESTABLISHING A WIRELESS LINK KEY 审中-公开
标题翻译：用于建立无线链路密钥的方法和设备
公开(公告)号：WO2011041597A3
公开(公告)日：2011-05-26
申请号：PCT/US2010050985
申请日：2010-09-30
申请人： QUALCOMM INC , XIAO LU , KIM YONG JIN , JIA ZHANFENG , JULIAN DAVID JONATHAN
发明人： XIAO LU , KIM YONG JIN , JIA ZHANFENG , JULIAN DAVID JONATHAN
IPC分类号： H04W12/04 , H04L29/06
CPC分类号： H04L63/105 , H04L63/065 , H04W12/04
摘要： Disclosed is a method for establishing a wireless link key between a remote device (102) and a group device (GDn). In the method, the remote device obtains (210) a group identifier from the group device, and determines (220) whether the group device is associated with a group having a trust association with the remote device. When the group device is determined to be associated with a group having an established trust association with the remote device, the remote device forwards (230) a link setup request to the group device for virtually pairing with the group device using the trust association to establish the wireless link key. When the group device is determined not to be associated with a group having an established trust association with the remote device, the remote device forwards (240) a pairing request to the group device for pairing with the group device to establish the wireless link key.
摘要翻译：公开了一种用于在远程设备（102）和组设备（GDn）之间建立无线链路密钥的方法。在该方法中，远程设备从组设备获取（210）组标识符，并且确定（220）组设备是否与具有与远程设备的信任关联的组相关联。当组设备被确定为与具有与远程设备建立的信任关联的组相关联时，远程设备将链路建立请求转发（230）到组设备，以使用信任关联来与组设备进行虚拟配对以建立无线链接键。当确定组设备不与与远程设备建立的信任关联的组相关联时，远程设备将配对请求转发（240）到组设备，以便与组设备配对以建立无线链路密钥。

10. 发明申请

WO2010075338A3 SECURE NODE IDENTIFIER ASSIGNMENT IN A DISTRIBUTED HASH TABLE FOR PEER-TO-PEER NETWORKS 审中-公开
标题翻译：安全的节点标识符分配在对等网络的分布式散列表中
公开(公告)号：WO2010075338A3
公开(公告)日：2010-10-07
申请号：PCT/US2009069113
申请日：2009-12-22
申请人： QUALCOMM INC , XIAO LU , NARAYANAN VIDYA , HARDIE EDWARD THOMAS LINGHAM , JAYARAM RANJITH S , SUBRAMANIAN RAMACHANDRAN , DONDETI LAKSHMINATH REDDY
发明人： XIAO LU , NARAYANAN VIDYA , HARDIE EDWARD THOMAS LINGHAM , JAYARAM RANJITH S , SUBRAMANIAN RAMACHANDRAN , DONDETI LAKSHMINATH REDDY
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/126 , H04L63/1458 , H04L63/1466 , H04L67/104 , H04L67/1046 , H04L67/1057 , H04L2463/142
摘要： A multi-party commitment method is provided whereby a joining node uses contributions provided by contributor nodes in a peer-to-peer overlay network to generate a node identifier. The joining node generates a first contribution and sends a join request to an introducer node (or a plurality of contributor nodes), where the join request seeks to obtain one or more contributions for generating the node identifier within an identifier space of the overlay network. A hash of the first contribution may be included as part of the join request. In response, the joining node may receive a plurality of contributions, wherein the contributions are bound to each other and the first contribution by a prior external multi-node commitment operation. The joining node can then generate its node identifier as a function of the first contribution and the received contributions. Consequently, collusion between nodes and malicious manipulation during ID generation can be frustrated.
摘要翻译：提供多方承诺方法，由此加入节点使用由对等覆盖网络中的贡献者节点提供的贡献来生成节点标识符。加入节点生成第一贡献并向引导者节点（或多个贡献者节点）发送加入请求，其中加入请求试图获得用于在覆盖网络的标识符空间内生成节点标识符的一个或多个贡献。第一个贡献的散列可以作为加入请求的一部分包含在内。作为响应，加入节点可以接收多个贡献，其中贡献彼此相关并且第一贡献通过先前的外部多节点承诺操作。随后加入节点可以根据第一贡献和接收到的贡献生成其节点标识符。因此，ID生成期间节点之间的串通和恶意操作可能会受挫。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式