SECURING DATABASES AGAINST PIRACY ATTACKS
    2.
    发明公开
    SECURING DATABASES AGAINST PIRACY ATTACKS 有权
    保护数据库免遭盗版攻击

    公开(公告)号:EP2893680A1

    公开(公告)日:2015-07-15

    申请号:EP13744920.3

    申请日:2013-07-22

    IPC分类号: H04L29/06 H04L29/08

    CPC分类号: H04L63/107 H04W4/02

    摘要: A database for location or geographic based services is secured by requiring location based requests to include a unique identifier that identifies the location as well as an authorization identifier associated with the location. The authorization identifier is information that is obtained by being physically present at the location, such as information from access points that are at the location or a position fix when present at the location. The authorization identifier may be non-unique but relatively time-invariant, making such information easily crowdsourced, but difficult to obtain unless physically present at the location. For example, the authorization identifier may be an SSID or a Beacon Frame, or a hash thereof from one or more devices at the location or a position fix.

    摘要翻译: 用于位置或基于地理的服务的数据库通过要求基于位置的请求包括标识位置的唯一标识符以及与位置相关联的授权标识符而得到保护。 授权标识符是通过实际存在于该位置而获得的信息,诸如来自该位置处的接入点的信息或当该位置处存在的位置修正。 授权标识符可以是非唯一的,但是相对不随时间变化,使得这些信息容易众包,但除非物理地存在于该位置,否则难以获得。 例如,授权标识符可以是来自该位置处的一个或多个设备或定位的SSID或信标帧或其散列。

    SECURING DATABASES AGAINST PIRACY ATTACKS
    3.
    发明授权
    SECURING DATABASES AGAINST PIRACY ATTACKS 有权
    保护数据库免遭盗版攻击

    公开(公告)号:EP2893680B1

    公开(公告)日:2018-04-18

    申请号:EP13744920.3

    申请日:2013-07-22

    IPC分类号: H04L29/06 H04L29/08

    CPC分类号: H04L63/107 H04W4/02

    摘要: A database for location or geographic based services is secured by requiring location based requests to include a unique identifier that identifies the location as well as an authorization identifier associated with the location. The authorization identifier is information that is obtained by being physically present at the location, such as information from access points that are at the location or a position fix when present at the location. The authorization identifier may be non-unique but relatively time-invariant, making such information easily crowdsourced, but difficult to obtain unless physically present at the location. For example, the authorization identifier may be an SSID or a Beacon Frame, or a hash thereof from one or more devices at the location or a position fix.

    PRESERVING SECURITY BY SYNCHRONIZING A NONCE OR COUNTER BETWEEN SYSTEMS
    4.
    发明公开
    PRESERVING SECURITY BY SYNCHRONIZING A NONCE OR COUNTER BETWEEN SYSTEMS 有权
    VERFAHREN UND VORRICHTUNGEN ZUR VERNEBELUNG EINERGERÄTEKENNUNG

    公开(公告)号:EP2817937A2

    公开(公告)日:2014-12-31

    申请号:EP13710152.3

    申请日:2013-02-22

    摘要: Methods, systems and devices enable synchronizing obscured identification information between a wireless identity transmitter and a central server to support one-way communication of the obscured identification information to the central server. The wireless identity transmitter may be a compact device configured to broadcast messages, such as through Bluetooth® advertisements, including an obscured identifier for receipt and relay to the central server by proximate proximity broadcast receivers via sighting messages that may also include location information. The central server may decode received identification codes to identify the wireless identity transmitter. The wireless identity transmitter may create message data by concatenating identifying information with an incrementing nonce, encrypting the concatenated information, and truncating the encrypted information. Alternatively, concatenated identification information may be encrypted with a pseudo-random function and a secret key known by the central server. The central server that may compare received data to pre-calculated encrypted data.

    摘要翻译: 方法,系统和设备使得能够在无线标识发射机和中央服务器之间同步隐蔽的识别信息,以支持将遮蔽的识别信息单向通信到中心服务器。 无线标识发射机可以是被配置为广播诸如通过蓝牙广告的消息的紧凑设备,包括用于接收的模糊标识符,并且通过邻近的广播接收机通过也可以包括位置信息的查看消息将其中继到中央服务器。 中央服务器可以解码所接收的识别码以识别无线标识发射机。 无线标识发射机可以通过连接识别信息与递增随机数,加密连接的信息以及截断加密的信息来创建消息数据。 或者,级联的识别信息可以用伪随机函数和中央服务器已知的秘密密钥加密。 可将接收到的数据与预先计算的加密数据进行比较的中央服务器。