专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2011099904A1 TRUST DISCOVERY IN A COMMUNICATIONS NETWORK 审中-公开
标题翻译：通信网络中的信任发现
公开(公告)号：WO2011099904A1
公开(公告)日：2011-08-18
申请号：PCT/SE2010/050167
申请日：2010-02-12
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , HADDAD, Wassim , BLOM, Rolf , NÄSLUND, Mats
发明人： HADDAD, Wassim , BLOM, Rolf , NÄSLUND, Mats
IPC分类号： H04L29/06 , H04W12/06
CPC分类号： H04W12/06 , H04L63/08 , H04L63/0823
摘要： A method and apparatus to establish trust between two nodes in a communications network. A first node receives from a network node authentication data unique to the first node, which can be used to derive a compact representation of verification data for the first node. The first node also receives a certified compact representation of verification data of all nodes in the network. The first node derives trust information from the authentication data for the node, and sends to a second node a message that includes the trust information and part of the authentication data. The second node has its own copy of the certified compact representation of verification data of all nodes in the network, and verifies the authenticity of the message from the first node using the compact representation of verification data of all nodes in the network and the received trust information and authentication data.
摘要翻译：一种在通信网络中的两个节点之间建立信任的方法和装置。第一节点从网络节点接收对第一节点唯一的认证数据，其可以用于导出用于第一节点的验证数据的紧凑表示。第一个节点还接收到网络中所有节点的验证数据的认证紧凑表示。第一节点从节点的认证数据中导出信任信息，并向第二节点发送包含信任信息和认证数据的一部分的消息。第二节点具有网络中所有节点的验证数据的经认证的紧凑表示的副本，并使用网络中所有节点的验证数据的紧密表示和接收到的信任来验证来自第一节点的消息的真实性信息和认证数据。

2. 发明申请

WO2010036157A1 KEY DISTRIBUTION TO A SET OF ROUTERS 审中-公开
标题翻译：关键分配到一组路由器
公开(公告)号：WO2010036157A1
公开(公告)日：2010-04-01
申请号：PCT/SE2008/051068
申请日：2008-09-24
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , HADDAD, Wassim , NÄSLUND, Mats
发明人： HADDAD, Wassim , NÄSLUND, Mats
IPC分类号： H04L9/08 , H04L12/56
CPC分类号： H04L9/0827 , H04L9/0844 , H04L45/60 , H04L63/062
摘要： Before actually communicating information/data between two endpoints (C, S) connected to a network a secure and confidential distribution of a special key (K h) is performed to nodes (R j) along a path in the network. This is allowed by performing a path handshaking procedure in which first a hint token is forwarded along the path in a first direction and then a disclosure token is forwarded in the opposite direction. In forwarding the disclosure token it is verified in the nodes against the already received hint token. This assures that only nodes onthe particular path will receive the special key or possibly some other information related thereto.
摘要翻译：在连接到网络的两个端点（C，S）上实际传达信息/数据之前，沿着网络中的路径对节点（R j）执行特殊密钥（Kh）的安全和机密分发。这是通过执行路径握手过程来允许的，其中首先沿第一方向沿着路径转发提示令牌，然后以相反的方向转发公开令牌。在转发公开令牌时，它在节点中针对已经接收到的提示令牌进行验证。这确保仅特定路径上的节点将接收特殊密钥或可能接收与其相关的一些其它信息。

3. 发明申请

WO2009126083A1 ACCESS THROUGH NON-3GPP ACCESS NETWORKS 审中-公开
标题翻译：通过非3GPP接入网络访问
公开(公告)号：WO2009126083A1
公开(公告)日：2009-10-15
申请号：PCT/SE2008/051261
申请日：2008-11-05
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , NÄSLUND, Mats , ARKKO, Jari , BLOM, Rolf , LEHTOVIRTA, Vesa , NORRMAN, Karl , ROMMER, Stefan , SAHLIN, Bengt
发明人： NÄSLUND, Mats , ARKKO, Jari , BLOM, Rolf , LEHTOVIRTA, Vesa , NORRMAN, Karl , ROMMER, Stefan , SAHLIN, Bengt
IPC分类号： H04W12/06 , H04L29/06 , H04W76/02
CPC分类号： H04W12/06 , G06F21/30 , H04L63/0272 , H04L63/08 , H04L63/0892 , H04L63/1433 , H04L63/162 , H04L63/164 , H04L63/20 , H04W60/00 , H04W72/0493
摘要： When setting up communication from a user equipment UE (1), such as for providing IP access for the UE in order to allow it to use some service, information or an indication of at least one network property relatin g to a first network, e.g. the current access networ k (3, 3'), is sent to the UE from a node (13) in a sec ond network such as the home ne twork (5) of the subscriber of the UE. The information or indication can be sent in a first stage of an authentication procedure being part of the setting up of a connection from the UE. In particular, the network property can indicate whether the access networ k (3, 3') is trusted or not.
摘要翻译：当从用户设备UE（1）建立通信时，诸如用于为UE提供IP接入以允许其使用一些服务，信息或至少一个网络属性的指示与第一网络相关的信息，例如，当前接入网（3,3'）从诸如UE的用户的归属网（5）的秒网络中的节点（13）发送到UE。可以在认证过程的第一阶段中发送信息或指示，这是作为来自UE的连接的建立的一部分。特别地，网络属性可以指示访问网络（3,3'）是否被信任。

4. 发明申请

WO2012146282A1 AUTHENTICATING A DEVICE IN A NETWORK 审中-公开
标题翻译：验证网络中的设备
公开(公告)号：WO2012146282A1
公开(公告)日：2012-11-01
申请号：PCT/EP2011/056684
申请日：2011-04-27
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , NORRMAN, Karl , BLOM, Rolf , NÄSLUND, Mats
发明人： NORRMAN, Karl , BLOM, Rolf , NÄSLUND, Mats
IPC分类号： H04L29/06 , H04W12/06
CPC分类号： H04L63/08 , H04L63/062 , H04L63/0876 , H04L63/20 , H04W12/04 , H04W12/06
摘要： There is disclosed a system for authentication of a device in a network by establishing a second security context between the device and a serving network node when a first security context has previously been established, assisted by an authentication server, based on a random value and a secret shared between an identity module associated with the device and the authentication server. First re-use information from the establishment of the first security context is stored at the authentication server and at the device, the first re-use information enabling secure generation of the second security context from the random value and the secret. Second re-use information may be generated or stored at the device. A context regeneration request is generated at the device, the context regeneration request authenticated at least partly based on the secret. The context regeneration request is sent to the serving network node. The context regen eration req uest is sent from the servi ng n etwork node to the authentication server. The context regeneration request is verified at the authentication server. The second security context is generated at the authentication server based on at least the secret, the random value, and the first and second re-use information. The second security context is communicated from the authentication server to the serving network node.
摘要翻译：公开了一种用于通过基于随机值和由认证服务器辅助的先前建立第一安全上下文而在设备和服务网络节点之间建立第二安全上下文的网络中的设备认证的系统，在与设备相关联的身份模块和认证服务器之间共享秘密。来自建立第一安全上下文的第一重新使用信息被存储在认证服务器和设备处，第一重用信息使得能够从随机值和秘密安全地生成第二安全上下文。可以在设备上生成或存储第二重用信息。在设备上生成上下文再生请求，上下文再生请求至少部分地基于秘密进行认证。上下文再生请求被发送到服务网络节点。上下文重新发送请求从服务节点发送到认证服务器。认证服务器验证上下文再生请求。至少基于秘密，随机值以及第一和第二再利用信息，在认证服务器产生第二安全上下文。第二安全上下文从认证服务器传送到服务网络节点。

5. 发明申请

WO2012097883A1 METHOD AND APPARATUS FOR AUTHENTICATING A COMMUNICATION DEVICE 审中-公开
标题翻译：用于认证通信设备的方法和装置
公开(公告)号：WO2012097883A1
公开(公告)日：2012-07-26
申请号：PCT/EP2011/062361
申请日：2011-07-19
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , BLOM, Rolf , NÄSLUND, Mats , NORRMAN, Karl
发明人： BLOM, Rolf , NÄSLUND, Mats , NORRMAN, Karl
IPC分类号： H04W12/06 , H04L29/06
CPC分类号： H04L63/08 , H04L9/0833 , H04L9/321 , H04L9/3271 , H04L63/104 , H04L63/107 , H04L2209/80 , H04W4/70 , H04W12/06
摘要： According to an aspect of the present invention there is provided a method of operating a communication device, the communication device being part of a group comprising two or more communication devices that share a subscription to a communication network. The method comprises receiving a group authentication challenge from the network, at least part of the group authentication challenge having been generated using group authentication information that is associated with the shared subscription. The device then generates a device specific response to the group authentication challenge using the group authentication information and device specific authentication information and sends the device specific response to the network. The device is for example a member of a machine-type communication device group.
摘要翻译：根据本发明的一个方面，提供了一种操作通信设备的方法，所述通信设备是包括共享对通信网络的订阅的两个或更多个通信设备的组的一部分。该方法包括从网络接收组认证挑战，使用与共享订阅相关联的组认证信息已经生成了组认证挑战的至少一部分。然后，该设备使用组认证信息和设备特定认证信息生成对组认证挑战的设备特定响应，并将设备特定响应发送到网络。该设备例如是机器型通信设备组的成员。

6. 发明申请

WO2010071529A1 METHOD AND ARRANGEMENT FOR CREATION OF ASSOCIATION BETWEEN A USER EQUIPMENT AND AN ACCESS POINT 审中-公开
标题翻译：创建用户设备与访问点之间的关联的方法和装置
公开(公告)号：WO2010071529A1
公开(公告)日：2010-06-24
申请号：PCT/SE2008/051536
申请日：2008-12-19
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , SELANDER, Göran , VIKBERG, Jari , NORRMAN, Karl , BLOM, Rolf , NÄSLUND, Mats
发明人： SELANDER, Göran , VIKBERG, Jari , NORRMAN, Karl , BLOM, Rolf , NÄSLUND, Mats
IPC分类号： H04W48/20 , H04W48/02 , H04W60/00
CPC分类号： H04W12/08 , H04L63/101 , H04W84/045
摘要： A method and a computer program for creating, an association between a first user equipment and at least one access point assisted by a registration server in a telecommunication network. The method further including at least one communication device for communication between the first user equipment and the registration server. The method comprising the registration server responding to a first contact request carried out using a first association number for the access point, provided by the first user equipment; receiving a first association request for the association with the access point, provided by the first user equipment; authorizing the first association request based on a first authorization information provided by the first user equipment; registering the association between the first user equipment and the access point in case of a first successful authorization; whereby the first user equipment becomes an associated first user equipment associated with the access point, where the association is being administered by the registration server. Further the registration server comprises a registration server database, and a processor unit.
摘要翻译：一种用于在电信网络中创建由注册服务器辅助的第一用户设备和至少一个接入点之间的关联的方法和计算机程序。该方法还包括用于在第一用户设备和注册服务器之间进行通信的至少一个通信设备。所述方法包括：所述注册服务器响应于由所述第一用户设备提供的使用所述接入点的第一关联号码执行的第一联系请求; 由所述第一用户设备接收与所述接入点的关联的第一关联请求; 基于由所述第一用户设备提供的第一授权信息来授权所述第一关联请求; 在第一次成功授权的情况下注册第一用户设备和接入点之间的关联; 由此第一用户设备成为与接入点相关联的相关联的第一用户设备，其中由注册服务器管理该关联。此外，注册服务器包括注册服务器数据库和处理器单元。

7. 发明申请

WO2009068985A2 END-TO-EDGE MEDIA PROTECTION 审中-公开
标题翻译：端到端媒体保护
公开(公告)号：WO2009068985A2
公开(公告)日：2009-06-04
申请号：PCT/IB2008/003288
申请日：2008-12-01
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , BARRIGA, Luis , BLOM, Rolf , CHENG, Yi , NÄSLUND, Mats , NORRMAN, Karl , LINDHOLM, Fredrik
发明人： BARRIGA, Luis , BLOM, Rolf , CHENG, Yi , NÄSLUND, Mats , NORRMAN, Karl , LINDHOLM, Fredrik
IPC分类号： H04W12/02
CPC分类号： H04W76/02 , H04L63/0428 , H04L65/1016 , H04L65/1069 , H04W12/02 , H04W12/04 , H04W76/10
摘要： An IMS system includes an IMS initiator user entity. The system includes an IMS responder user entity that is called by the initiator user entity. The system includes a calling side S-CSCF in communication with the caller entity which receives an INVITE having a first protection offer and parameters for key establishment from the caller entity, removes the first protection offer from the INVITE and forwards the INVITE without the first protection offer. The system includes a receiving end S-CSCF in communication with the responder user entity and the calling side S-CSCF which receives the INVITE without the first protection offer and checks that the responder user entity supports the protection, inserts a second protection offer into the INVITE and forwards the INVITE to the responder user entity, wherein the responder user entity accepts the INVITE including the second protection offer and answers with an acknowledgment having a first protection accept. A method for supporting a call by a telecommunications node.
摘要翻译： IMS系统包括IMS发起者用户实体。该系统包括由发起者用户实体调用的IMS应答器用户实体。该系统包括与主叫实体进行通信的主叫侧S-CSCF，其从呼叫方实体接收具有第一保护报价的INVITE和用于密钥建立的参数，从INVITE中移除第一保护报价并转发INVITE而没有第一保护提供。该系统包括与响应者用户实体通信的接收端S-CSCF，以及在没有第一保护提供的情况下接收INVITE的主叫侧S-CSCF，并检查响应者用户实体是否支持保护，将第二保护请求插入到 INVITE并将INVITE转发到响应者用户实体，其中响应者用户实体接受包括第二保护提议的INVITE和具有第一保护接受的确认的应答。一种用于支持电信节点的呼叫的方法。

8. 发明申请

WO2013034187A1 SECURE COMMUNICATION 审中-公开
标题翻译：安全通信
公开(公告)号：WO2013034187A1
公开(公告)日：2013-03-14
申请号：PCT/EP2011/065529
申请日：2011-09-08
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (publ) , GRONOWSKI, Kristoffer , MURAKAMI, Shingo , NÄSLUND, Mats
发明人： GRONOWSKI, Kristoffer , MURAKAMI, Shingo , NÄSLUND, Mats
IPC分类号： H04L9/08
CPC分类号： H04L63/062 , H04L9/0816 , H04L9/0819 , H04L9/083 , H04L9/0838 , H04L63/061 , H04L63/083 , H04L63/0853 , H04L2209/56 , H04L2209/80
摘要： A method comprising the use of a bootstrapping protocol to define a security relationship between a first server and a second server, the first and second servers co-operating to provide a service to a user terminal. A bootstrapping protocol is used to generate a shared key for securing communication between the first server and the second server. The shared key is based on a context of the bootstrapping protocol, and the context is associated with a Subscriber Identity Module (SIM) associated with the user terminal and provides a base for the shared key. A method of the invention may, for example, be employed within a computing/service network such as a "cloud", and in particular for communications between two servers in the cloud that are co-operating to provide a service to a user.
摘要翻译：一种方法，包括使用引导协议来定义第一服务器和第二服务器之间的安全关系，所述第一和第二服务器协作以向用户终端提供服务。引导协议用于生成用于保护第一服务器和第二服务器之间的通信的共享密钥。共享密钥基于引导协议的上下文，并且上下文与与用户终端相关联的订户身份模块（SIM）相关联，并为共享密钥提供基础。例如，本发明的方法可以在诸如“云”的计算/服务网络内使用，并且特别地用于云中的两个服务器之间的通信，这些服务器正在协作以向用户提供服务。

9. 发明申请

WO2011081588A1 METHOD AND APPARATUS FOR SECURE ROUTING OF DATA PACKETS 审中-公开
标题翻译：数据包安全路由的方法和装置
公开(公告)号：WO2011081588A1
公开(公告)日：2011-07-07
申请号：PCT/SE2010/050001
申请日：2010-01-04
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , NÄSLUND, Mats , NORRMAN, Karl , YLITALO, Jukka , NIKANDER, Pekka
发明人： NÄSLUND, Mats , NORRMAN, Karl , YLITALO, Jukka , NIKANDER, Pekka
IPC分类号： H04L12/56
CPC分类号： H04L45/00 , H04L63/04 , H04L63/06
摘要： Methods and arrangements for supporting a forwarding process in routers (R1-R3) when routing data packets through a packet-switched network, by employing hierarchical parameters in which the hops of a predetermined transmission path between a sender (A) and a receiver are encoded. A name server (300) generates and distributes router-associated keys (K, K1-K3) to routers in the network which keys are used for computing the hierarchical parameters.
摘要翻译：在路由器（R1-R3）中通过分组交换网络路由数据分组时支持转发过程的方法和装置，通过采用其中编码发送器（A）和接收机之间的预定传输路径的跳数的分层参数。名称服务器（300）生成并将路由器相关密钥（K，K1-K3）分发给网络中用于计算层次参数的密钥的路由器。

10. 发明申请

WO2010134862A1 CHALLENGING A FIRST TERMINAL INTENDING TO COMMUNICATE WITH A SECOND TERMINAL 审中-公开
标题翻译：挑选第一个终端用于与第二个终端通信
公开(公告)号：WO2010134862A1
公开(公告)日：2010-11-25
申请号：PCT/SE2009/050585
申请日：2009-05-20
申请人： TELEFONAKTIEBOLAGET L M ERICSSON (PUBL) , BARRIGA, Luis , LILJENSTAM, Michael , NERBRANT, Per-Olof , NÄSLUND, Mats
发明人： BARRIGA, Luis , LILJENSTAM, Michael , NERBRANT, Per-Olof , NÄSLUND, Mats
IPC分类号： H04L9/32 , H04W8/18 , H04W8/22
CPC分类号： H04L9/3271 , G06F21/31 , G06F2221/2133 , G06Q10/107 , H04L63/08 , H04L2209/805 , H04W12/06 , H04W48/16 , H04W76/10
摘要： The invention relates to a method, party challenging device (18) and computer program products for providing a challenge to a first terminal (10) intending to communicate with a second terminal (24) via two networks (N1, N2). The party challenging device receives a first electronic message (1M) concerning a transfer of media from the first terminal to the second terminal sent from the first terminal (10) and addressed to the second terminal (24), obtains communication contextual data associated with the first party or the first terminal, provides an electronic challenge message (CHM) including a challenge (CH1l) based on the obtained data and sends the challenge message to the first terminal in order to enable a decision to be made how to process the invitation message for the second terminal based on the correctness of a response (RM) including a response to the challenge.
摘要翻译：本发明涉及一种方法，一方挑战性装置（18）和用于向第一终端（10）提供有意通过两个网络（N1，N2）与第二终端（24）进行通信的计算机程序产品。派对挑战装置接收关于从第一终端（10）发送的媒体从第一终端到第二终端的传送并寻址到第二终端（24）的第一电子消息（1M），获得与第一终端相关联的通信上下文数据第一方或第一终端基于获得的数据提供包括质询（CH1l）的电子质询消息（CHM），并将询问消息发送到第一终端，以便能够做出如何处理邀请消息基于包括对挑战的响应的响应（RM）的正确性的第二终端。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式