专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2006069315A8 CLIENT ASSISTED FIREWALL CONFIGURATION 审中-公开
标题翻译：客户协助的防火墙配置
公开(公告)号：WO2006069315A8
公开(公告)日：2007-11-01
申请号：PCT/US2005046801
申请日：2005-12-21
申请人： QUALCOMM INC , PADDON MICHAEL , HAWKES PHILIP MICHAEL , ROSE GREGORY GORDON
发明人： PADDON MICHAEL , HAWKES PHILIP MICHAEL , ROSE GREGORY GORDON
IPC分类号： H04L29/06
CPC分类号： H04L41/0803 , H04L63/0227 , H04L63/1441 , H04L67/02 , H04L67/04 , H04L67/34
摘要： Embodiments describe techniques in connection with configuring a firewall and/or reducing network traffic. According to an embodiment is a method for configuring a firewall to reduce unwanted network traffic. The method includes executing a web-server and detecting a passive socket has been created. The method also includes establishing contact with a firewall and requesting the firewall to permit flows directed to the passive socket. According to some embodiments, the method can include closing the web-server and destroying the passive socket. The firewall can be contacted with the destroyed passive socket information and can be sent a request to deny flows directed to the destroyed passive socket. If the passive socket is closed, the method can automatically revoke the request to the firewall to permit flows directed to the passive socket.
摘要翻译：实施例描述了与配置防火墙和/或减少网络流量有关的技术。根据一个实施例，一种用于配置防火墙以减少不必要的网络流量的方法。该方法包括执行web服务器并且已经创建检测到被动套接字。该方法还包括建立与防火墙的联系，并请求防火墙允许流向被动插座的流。根据一些实施例，该方法可以包括关闭web服务器并销毁被动插座。可以将防火墙与被破坏的被动套接字信息联系起来，并且可以发送一个请求以拒绝指向被销毁的被动套接字的流。如果被动套接字关闭，该方法可以自动撤销对防火墙的请求，以允许流向被动插座的流。

2. 发明申请

WO2006029384A3 METHOD, APPARATUS AND SYSTEM FOR MUTUAL AUTHENTICATION WITH MODIFIED MESSAGE AUTHENTICATION CODE 审中-公开
标题翻译：使用修改后的信息验证码进行互相认证的方法，装置和系统
公开(公告)号：WO2006029384A3
公开(公告)日：2006-04-27
申请号：PCT/US2005032349
申请日：2005-09-08
申请人： QUALCOMM INC , SEMPLE JAMES , ROSE GREGORY GORDON , PADDON MICHAEL , HAWKES PHILIP MICHAEL
发明人： SEMPLE JAMES , ROSE GREGORY GORDON , PADDON MICHAEL , HAWKES PHILIP MICHAEL
IPC分类号： H04W12/06 , H04W12/10
CPC分类号： H04W12/06 , H04L63/0869 , H04L63/123 , H04W12/10
摘要： Methods and devices for instructing a subscriber identity module in a cellular communications network to process non-standard authentication information in a standard manner are disclosed. One embodiment of a method comprises receiving a first message authentication code (MAC) and an authentication management field (AMF) at a subscriber identity module as part of an authentication protocol, calculating a second MAC and determining whether the second MAC is equivalent to the first MAC. If the first and second MAC are not equivalent, the SIM calculates a third MAC and determines whether the first MAC is equivalent to the third MAC, and if so, the subscriber identity module processes the AMF in a predefined or standard manner.
摘要翻译：公开了用于指示蜂窝通信网络中的订户身份模块以标准方式处理非标准认证信息的方法和设备。方法的一个实施例包括在用户身份模块处接收第一消息认证码（MAC）和认证管理字段（AMF），作为认证协议的一部分，计算第二MAC并确定第二MAC是否等同于第一MAC 苹果电脑。如果第一和第二MAC不相等，则SIM计算第三MAC并确定第一MAC是否等于第三MAC，如果是，则订户身份模块以预定义或标准方式处理AMF。

3. 发明申请

WO2008049046A3 METHOD FOR SECURELY EXTENDING KEY STREAM TO ENCRYPT HIGH-ENTROPY DATA 审中-公开
标题翻译：用于安全地延长关键流道以加强高入侵数据的方法
公开(公告)号：WO2008049046A3
公开(公告)日：2008-10-09
申请号：PCT/US2007081737
申请日：2007-10-18
申请人： QUALCOMM INC , ROSE GREGORY GORDON , HAWKES PHILIP MICHAEL
发明人： ROSE GREGORY GORDON , HAWKES PHILIP MICHAEL
IPC分类号： H04L9/22
CPC分类号： H04L9/0662 , H04L2209/30
摘要： A stream stretcher is provided for securely expanding a key stream to match the length of a data block to be encrypted and/or decrypted. A key stream is obtained having a length of L Z bits. A length LD corresponding to a data block to be encrypted/decrypted is obtained, where L D > L Z . L D -L Z new bits are recursively generated by combining at least two bits of the key stream. The L D -L Z new bits are appended to the key stream to generate a stretched key stream. The data block may then be encrypted/decrypted with the stretched key stream. The at least two bits are selected to have offsets that form a full positive difference set.
摘要翻译：提供了流担架，用于安全地扩展密钥流以匹配要加密和/或解密的数据块的长度。获得具有长度为L个Z位的密钥流。获得对应于要加密/解密的数据块的长度LD，其中L L1> Z Z。通过组合密钥流的至少两个比特递归地生成新的比特。新的比特被添加到密钥流中以产生延伸的密钥流。然后可以用拉伸的密钥流对数据块进行加密/解密。选择至少两个位以具有形成完全正差分集的偏移。

4. 发明申请

WO2006086721A2 CONTEXT LIMITED SHARED SECRET 审中-公开
标题翻译：有限公司共享秘密
公开(公告)号：WO2006086721A2
公开(公告)日：2006-08-17
申请号：PCT/US2006004901
申请日：2006-02-10
申请人： QUALCOMM INC , PADDON MICHAEL , ROSE GREGORY GORDON , SEMPLE JAMES , HAWKES PHILIP MICHAEL
发明人： PADDON MICHAEL , ROSE GREGORY GORDON , SEMPLE JAMES , HAWKES PHILIP MICHAEL
IPC分类号： H04L9/08
CPC分类号： H04L9/085
摘要： In a communication system in which two communication entities seek to have a private or confidential communication session, a trust relationship needs first be established. The trust relationship is based on the determination of a shared secret which in turn is generated from contextual information. The contextual information can be derived from the circumstances surrounding the communication session. For example, the contextual information can include topological information, time-based information, and transactional information. The shared secret may be self-generated or received from a third party. In either event, the shared secret may be used as key material for any cryptographic protocol used between the communication entities.
摘要翻译：在两个通信实体寻求私人或机密通信会话的通信系统中，首先需要建立信任关系。信任关系是基于共同的秘密的确定，而这个秘密又是从上下文信息中产生的。上下文信息可以从通信会话周围的情况导出。例如，上下文信息可以包括拓扑信息，基于时间的信息和事务信息。共享密钥可以是自生产的或从第三方接收的。在任一情况下，共享秘密可以用作在通信实体之间使用的任何加密协议的关键材料。

5. 发明申请

WO2008019180A3 METHODS AND SYSTEMS FOR BLACKOUT PROVISIONING IN A DISTRIBUTION NETWORK 审中-公开
标题翻译：分布式网络中BLACKOUT提供的方法和系统
公开(公告)号：WO2008019180A3
公开(公告)日：2008-07-03
申请号：PCT/US2007068231
申请日：2007-05-04
申请人： QUALCOMM INC , WINGERT CHRISTOPHER R , AGGARWAL POOJA , HAWKES PHILIP MICHAEL
发明人： WINGERT CHRISTOPHER R , AGGARWAL POOJA , HAWKES PHILIP MICHAEL
IPC分类号： H04L29/06 , H04L12/22
CPC分类号： H04L63/0428 , H04L9/0822 , H04L63/10 , H04L2209/60
摘要： Methods and systems for blackout provisioning in a communication network. In an aspect, a method is provided for blackout provisioning in a distribution network. The method includes determining one or more affected regions, and generating a blackout key based an original key and the affected regions. The method also includes encrypting content with the blackout key to produce encrypted content, and transmitting the encrypted content and an encrypted version of the original key over the distribution network. An apparatus is provided for blackout provisioning that includes provisioning logic to determine one or more affected regions, a key generator to generate a blackout key based an original key and the affected regions, encryption logic to encrypt content with the blackout key to produce encrypted content, and a transmitter to transmit the encrypted content and an encrypted version of the original key over the distribution network.
摘要翻译：在通信网络中停电配置的方法和系统。在一方面，提供了一种用于分配网络中的中断供应的方法。该方法包括确定一个或多个受影响的区域，以及基于原始密钥和受影响的区域生成中断密钥。该方法还包括用停电密钥加密内容以产生加密的内容，以及通过分发网络发送加密的内容和原始密钥的加密版本。提供一种用于中断供应的装置，其包括用于确定一个或多个受影响区域的供应逻辑，基于原始密钥和受影响区域生成中断密钥的密钥发生器，用于断开密钥加密内容以产生加密内容的加密逻辑，以及发送器，用于在分发网络上传送加密的内容和原始密钥的加密版本。

6. 发明申请

WO2009058428A3 RESYNCHRONIZATION FOR PUSH MESSAGE SECURITY USING SECRET KEYS 审中-公开
标题翻译：用SECRET KEYS重新同步推送消息安全
公开(公告)号：WO2009058428A3
公开(公告)日：2009-09-24
申请号：PCT/US2008066612
申请日：2008-06-11
申请人： QUALCOMM INC , HAWKES PHILIP MICHAEL , WACHTER ANDREAS K , PADDON MICHAEL
发明人： HAWKES PHILIP MICHAEL , WACHTER ANDREAS K , PADDON MICHAEL
IPC分类号： H04L29/06 , H04L9/08 , H04L12/22
CPC分类号： H04L63/068 , H04L9/0894 , H04L9/12 , H04L9/3271 , H04L63/12 , H04L2209/80
摘要： A method for a server to initiate resynchronization with an access terminal, when synchronization has been lost, that cannot be exploited by attackers is provided. The server may provide the access terminal with a secret key that is only known to the access terminal and the server. The access terminal may store the secret key in a secure storage device to prevent the secret key from being hacked. If the server determines that synchronization has been lost, the server may send a resynchronization message to the access terminal with the secret key attached. The access terminal retrieves the stored secret key from the secure memory device and compares it to the secret key attached to the resynchronization message. If there is a match, the access terminal may initiate a secure communication link with the server to reestablish synchronization.
摘要翻译：提供了一种服务器在失去同步时启动与接入终端的再同步的方法，该方法不能被攻击者利用。服务器可以向接入终端提供只有接入终端和服务器已知的密钥。接入终端可以将秘密密钥存储在安全存储设备中以防止秘密密钥被黑客入侵。如果服务器确定同步已经丢失，则服务器可以使用附加的密钥向接入终端发送重新同步消息。接入终端从安全存储器设备中检索存储的密钥并将其与附加到再同步消息的密钥进行比较。如果匹配，则接入终端可以发起与服务器的安全通信链路以重新建立同步。

7. 发明申请

WO2007092793A2 METHOD AND APPARATUS FOR CONTENT PROTECTION IN WIRELESS COMMUNICATIONS 审中-公开
标题翻译：无线通信中内容保护的方法与装置
公开(公告)号：WO2007092793A2
公开(公告)日：2007-08-16
申请号：PCT/US2007061577
申请日：2007-02-02
申请人： QUALCOMM INC , LO CHARLES N , WANG JUN , DONDETI LAKSHMINATH REDDY , HAWKES PHILIP MICHAEL
发明人： LO CHARLES N , WANG JUN , DONDETI LAKSHMINATH REDDY , HAWKES PHILIP MICHAEL
IPC分类号： G06F21/00 , H04L29/06
CPC分类号： H04L63/06 , G06F21/10 , G06F2221/0797 , H04L2463/101 , H04W12/04
摘要： Disclosed is a method for securely presenting content in a mobile station. The mobile station may have a smart module, a security agent, and an air interface for communicating with a content provider and with a remote content rights manager. The smart module stores content presentation units and has a proxy content rights manager for when the mobile station is unable to receive secure content keys from the remote content rights manager using the air interface. In the method, content presentation units are transferred from the remote rights manager to the smart module for storage. Secure content keys are requested from the smart module for allowing presentation of content requested while the mobile station is unable to communicate with the remote rights manager. The secure content keys are transferred, based on a stored content presentation unit, from the proxy content rights manager to the security agent for allowing content presentation.
摘要翻译：公开了一种在移动台中安全地呈现内容的方法。移动台可以具有智能模块，安全代理和用于与内容提供商和远程内容权限管理器通信的空中接口。智能模块存储内容呈现单元，并且具有代理内容权限管理器，用于当移动站不能使用空中接口从远程内容权限管理器接收安全内容密钥时。在该方法中，内容呈现单元从远程权限管理器传送到智能模块进行存储。从智能模块请求安全内容密钥，以允许在移动台无法与远程权限管理器通信时呈现所请求的内容。安全内容密钥基于存储的内容呈现单元从代理内容权限管理器传送到安全代理以允许内容呈现。

8. 发明申请

WO2013033464A3 GENERIC BROADCAST OF LOCATION ASSISTANCE DATA 审中-公开
标题翻译：位置辅助数据的通用广播
公开(公告)号：WO2013033464A3
公开(公告)日：2013-05-30
申请号：PCT/US2012053238
申请日：2012-08-30
申请人： QUALCOMM INC , EDGE STEPHEN WILLIAM , FISCHER SVEN , HAWKES PHILIP MICHAEL
发明人： EDGE STEPHEN WILLIAM , FISCHER SVEN , HAWKES PHILIP MICHAEL
IPC分类号： H04W4/02 , G01S19/25 , H04W4/20
CPC分类号： H04W64/00 , G01S19/05 , G01S19/25 , H04L9/0637 , H04L9/3249 , H04L12/18 , H04L63/12 , H04L2209/80 , H04W4/02 , H04W4/06 , H04W4/20 , H04W12/02 , H04W12/04 , H04W12/06 , H04W12/10
摘要： Various techniques are provided for Location Services (LCS) Assistance Data broadcast, for example for implementation in LTE and LTE-A systems. The embodiments described herein may use the LPP/LPPe positioning protocol, by making use of existing unsolicited Provide Assistance Data (PAD) messages. Embodiments avoid the need to define and implement a separate broadcast Assistance Data protocol. Additional exemplary embodiments for scheduling and verifying of the broadcast Assistance Data messages are described herein.
摘要翻译：为位置服务（LCS）辅助数据广播提供了各种技术，例如用于LTE和LTE-A系统中的实现。本文描述的实施例可以通过利用现有的主动提供辅助数据（PAD）消息来使用LPP / LPPe定位协议。实施例避免了定义和实现单独的广播援助数据协议的需要。这里描述了用于调度和验证广播援助数据消息的附加示例性实施例。

9. 发明申请

WO2013040042A9 SYSTEMS AND METHODS OF PERFORMING LINK SETUP AND AUTHENTICATION 审中-公开
标题翻译：执行链接设置和认证的系统和方法
公开(公告)号：WO2013040042A9
公开(公告)日：2013-06-27
申请号：PCT/US2012054874
申请日：2012-09-12
申请人： QUALCOMM INC , CHERIAN GEORGE , HAWKES PHILIP MICHAEL , ABRAHAM SANTOSH PAUL , SAMPATH HEMANTH
发明人： CHERIAN GEORGE , HAWKES PHILIP MICHAEL , ABRAHAM SANTOSH PAUL , SAMPATH HEMANTH
IPC分类号： H04W12/06 , H04L9/08 , H04W12/04 , H04W36/14
CPC分类号： H04W12/04 , H04L9/0869 , H04L9/3273 , H04L63/062 , H04L63/0892 , H04L2209/80 , H04W12/06 , H04W84/02
摘要： Systems and methods of performing link setup and authentication are disclosed. A first method utilizes an unprotected association request and an association response that includes an access point nonce (ANonce). A second method includes receiving, during a first link setup using a first ANonce, a second ANonce for use in a second link setup. A third method utilizes a temporary key to protect an association request. A fourth method includes generating an ANonce at a mobile device based on an ANonce-seed received from an access point.
摘要翻译：公开了执行链路建立和认证的系统和方法。第一种方法利用无保护的关联请求和包括接入点随机数（ANonce）的关联响应。第二种方法包括在使用第一ANonce的第一链路建立期间接收在第二链路建立中使用的第二ANonce。第三种方法利用临时密钥来保护关联请求。第四种方法包括基于从接入点接收的ANonce种子在移动设备处生成ANonce。

10. 发明申请

WO2010138865A3 TRUST ESTABLISHMENT FROM FORWARD LINK ONLY TO NON-FORWARD LINK ONLY DEVICES 审中-公开
标题翻译：从前向链接的信托建立只有非前向链接只有设备
公开(公告)号：WO2010138865A3
公开(公告)日：2011-03-31
申请号：PCT/US2010036655
申请日：2010-05-28
申请人： QUALCOMM INC , THOMAS PANAGIOTIS , ACAR CAN E , HAWKES PHILIP MICHAEL , ANSARI BIJAN
发明人： THOMAS PANAGIOTIS , ACAR CAN E , HAWKES PHILIP MICHAEL , ANSARI BIJAN
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L9/0844 , H04L9/0822 , H04L9/0891 , H04L9/3242 , H04L63/0435 , H04L63/0464 , H04L63/068 , H04L2209/601 , H04L2209/80
摘要： A method, apparatus, and/or system are provided for establishing trust between an accessory device and a host device, using a global key known to both the host device and the accessory device, so that content protection for subscriber-based mobile broadcast services is provided. A secure link may be established between the accessory device and the host device so that when the accessory device receives encrypted content via a secured forward link only network, the accessory device may decrypt the content at the forward link only stack. The content is then re-encrypted/re-secured using one or more derived encryption keys and then sent to the host device where it may be decrypted and played back. A global key, unique to the particular device type of the host device, is employed to ultimately derive the session encryption keys used to re-encrypt/re-secure the content conveyed from the accessory device to the host device.
摘要翻译：提供了一种方法，装置和/或系统，用于使用主机设备和附件设备已知的全局密钥来建立附件设备与主机设备之间的信任，从而为基于订户的移动广播服务提供内容保护是提供。可以在附件设备和主机设备之间建立安全链路，使得当附件设备经由安全的仅向前链路网络接收加密的内容时，附件设备可以在仅前向链路堆栈处解密内容。然后使用一个或多个导出的加密密钥重新加密/重新保护内容，然后将其发送到主机设备，在那里可以对其进行解密和回放。采用独特于主机设备的特定设备类型的全局密钥来最终导出用于重新加密/重新保护从附件设备传送到主机设备的内容的会话加密密钥。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式