IMPROVED INSTALLATION OF A TERMINAL IN A SECURE SYSTEM

    公开(公告)号:EP3205047A4

    公开(公告)日:2018-06-13

    申请号:EP15849138

    申请日:2015-10-08

    Applicant: KELISEC AB

    Inventor: REVELL ELISE

    Abstract: A system comprising a terminal and a server, wherein the terminal is installed in the system by the server being configured to: identify the terminal; generate key generation data, comprising at least one data seed; distribute the at least one seed to the terminal; generate key data and meta data based on said at least one seed and a function; store an identifier for the terminal along with the key data and the meta data for the terminal, wherein the terminal is arranged to receive the at least one seed from the server; generate key data and meta data based on said at least one seed and the same function; store the key data and the meta data, wherein the key data and the meta data stored in the terminal are the same as the key data and the meta data stored in the server.

    GROUP SECURITY IN MACHINE-TYPE COMMUNICATION

    公开(公告)号:EP2601772B1

    公开(公告)日:2018-05-23

    申请号:EP11754550.9

    申请日:2011-08-01

    Abstract: If the related secure communication method is applied to the system which includes a plurality of the MTC devices, traffic in a network would increase in proportion to the number of MTC devices. A disclosed communication apparatus is connected to a network and a plurality of communication terminals, and includes: a group information sending unit for sending group information, which is received from the network; an access control unit for 1) receiving a reply from the communication terminal(s) which responded to the group information and 2) sending the reply to the network; and a temporary identifier and group key sending unit for sending a temporary identifier and a group key to the communication terminal which responded to the group information, when the communication apparatus received the temporary identifier and the group key from the network.

    COMMUNICATION APPARATUS, COMMUNICATION SYSTEM, COMMUNICATION METHOD, AND COMPUTER-READABLE MEDIUM
    6.
    发明公开
    COMMUNICATION APPARATUS, COMMUNICATION SYSTEM, COMMUNICATION METHOD, AND COMPUTER-READABLE MEDIUM 审中-公开
    通信设备,通信系统,通信方法和计算机可读媒体

    公开(公告)号:EP3322133A1

    公开(公告)日:2018-05-16

    申请号:EP17188110.5

    申请日:2017-08-28

    Abstract: According to an arrangement, a communication apparatus (30) is connected to a bus (90) in which a second bit has higher priority than a first bit, and the communication apparatus (30) includes an acquisition unit (32), a generation unit (33), and transmission unit (34). In the communicaiton apparatus (30), the acquisition unit (32) is configured to obtain first information. The generation unit (33) is configured to generate second information in which the first information is set at a predetermined position and a predetermined bit string including the first bit is set at a position other than the predetermined position. The transmission unit (34) is configured to transmit communication data including the second information.

    Abstract translation: 根据一种布置,通信设备(30)连接到总线(90),其中第二比特具有比第一比特更高的优先级,并且通信设备(30)包括获取单元(32),生成单元 (33)和传输单元(34)。 在通信设备(30)中,获取单元(32)被配置为获取第一信息。 生成单元(33)被配置为生成其中第一信息被设置在预定位置并且包括第一比特的预定比特串被设置在除了预定位置之外的位置的第二信息。 传输单元(34)被配置为传输包括第二信息的通信数据。

    SYSTEM OF FLEXIBLE SECURE IOT NETWORKS
    8.
    发明公开
    SYSTEM OF FLEXIBLE SECURE IOT NETWORKS 审中-公开
    柔性安全物联网系统

    公开(公告)号:EP3247083A1

    公开(公告)日:2017-11-22

    申请号:EP16305569.2

    申请日:2016-05-17

    Applicant: GEMALTO SA

    Abstract: The present invention relates to a system to provision flexible secure Internet of Things networks (Ni) owned by owners, said system comprising at least a device provisioning server (DPS), as many gateways (GWi) as loT networks (Ni), devices (Di) to be connected to loT network (Ni) and a configurator (CFG), said configurator (CFG) having connectivity adapted to connect to device provisioning server (DPS) using a certificate (CCFG) indicating its identity and its configuration function to get at least, for each loT network (Ni), an unique key (DK_LINK), gateway network information and identifier (GWi) and an upper level key (DK_DTLS) to be used to derive device keys (DDK_DTLS) to be sent to devices (Di) in order to enable them to communicate with the device provisioning server (DPS), said configurator (CFG) having a non-encrypted link layer enabling any device (Di) to connect to it any time to get parameters enabling them to get connectivity in a given network (Ni) of the system.

    Abstract translation: (Ni)的系统,所述系统至少包括设备供应服务器(DPS),与网络(Ni)一样多的网关(GWi),设备( Di)被连接到loT网络(Ni)和配置器(CFG),所述配置器(CFG)具有适于使用指示其身份及其配置功能的证书(CCFG)连接到设备供应服务器(DPS) 至少对于每个loT网络(Ni),将使用唯一密钥(DK_LINK),网关网络信息和标识符(GWi)和上级密钥(DK_DTLS)来导出要发送给设备的设备密钥(DDK_DTLS) Di)为了使它们能够与设备供应服务器(DPS)进行通信,所述配置器(CFG)具有非加密的链路层,使得任何设备(Di)能够随时连接到它以获取使它们能够连接的参数 在系统的给定网络(Ni)中。

    CRYPTOGRAPHIC KEY GENERATION
    9.
    发明公开
    CRYPTOGRAPHIC KEY GENERATION 审中-公开
    密码密钥生成

    公开(公告)号:EP3242436A1

    公开(公告)日:2017-11-08

    申请号:EP17166183.8

    申请日:2008-07-21

    Abstract: A technique for generating a cryptographic key (120) is provided. The technique is particularly useful for protecting the communication between two entities (202, 302; 204, 304) cooperatively running a distributed security operation. The technique comprises providing at least two parameters (106, 108), the first parameter (106) comprising or deriving from some cryptographic keys (110, 112) which have been computed by the first entity (202, 302) by running the security operation; and the second parameter (108) comprising or deriving from a token (116) having a different value each time the security (114) operation is initiated by the second entity (204, 304) for the first entity (202, 302). A key derivation function is applied to the provided parameters (106, 108) to generate the desired cryptographic key (120).

    Abstract translation: 提供了一种用于生成密码密钥(120)的技术。 该技术对保护协作运行分布式安全操作的两个实体(202,302; 204,304)之间的通信特别有用。 该技术包括提供至少两个参数(106,108),所述第一参数(106)包括或来自已经由所述第一实体(202,302)通过运行所述安全操作而计算出的一些密码密钥(110,112) ; 并且每当所述第二实体(204,304)针对所述第一实体(202,302)发起所述安全(114)操作时,所述第二参数(108)包括或者从具有不同值的令牌(116)导出。 将密钥推导函数应用于提供的参数(106,108)以生成期望的密码密钥(120)。

Patent Agency Ranking