System and method for managing multiple smart card sessions
    91.
    发明授权
    System and method for managing multiple smart card sessions 有权
    用于管理多个智能卡会话的系统和方法

    公开(公告)号:US07891557B2

    公开(公告)日:2011-02-22

    申请号:US12335212

    申请日:2008-12-15

    IPC分类号: G06K5/00

    CPC分类号: G06K7/0008

    摘要: A system and method is provided for managing multiple smart card sessions with multiple communications or computing devices in association with a single smart card reader. A wireless smart card reader is provided for communicating with a plurality of devices requiring smart card functionality in a number of smart card sessions, in which each smart card session is addressed with an identifier identifying a single device. The smart card session is secured by a wireless connection pairing and by a secure pairing, such that each connection between the smart card reader and a device is secured against all other devices in communication with the smart card reader using a master connection key, which is unique for each device.

    摘要翻译: 提供了一种系统和方法,用于与单个智能卡读取器相关联地管理具有多个通信或计算设备的多个智能卡会话。 提供了一种无线智能卡读取器,用于与在许多智能卡会话中需要智能卡功能的多个设备进行通信,其中每个智能卡会话使用识别单个设备的标识符来寻址。 通过无线连接配对和安全配对来保护智能卡会话,使得智能卡读卡器和设备之间的每个连接都使用主连接密钥来抵御与智能卡读卡器通信的所有其他设备,该主连接密钥是 每个设备都是独一无二的

    SYSTEM AND METHOD FOR ENCRYPTED SMART CARD PIN ENTRY
    92.
    发明申请
    SYSTEM AND METHOD FOR ENCRYPTED SMART CARD PIN ENTRY 有权
    加密智能卡引脚的系统和方法

    公开(公告)号:US20100241867A1

    公开(公告)日:2010-09-23

    申请号:US12795383

    申请日:2010-06-07

    IPC分类号: H04L9/32

    摘要: A smart card, system, and method for securely authorizing a user or user device using the smart card is provided. The smart card is configured to provide, upon initialization or a request for authentication, a public key to the user input device such that the PIN or password entered by the user is encrypted before transmission to the smart card via a smart card reader. The smart card then decrypts the PIN or password to authorize the user. Preferably, the smart card is configured to provide both a public key and a nonce to the user input device, which then encrypts a concatenation or other combination of the nonce and the user-input PIN or password before transmission to the smart card. The smart card reader thus never receives a copy of the PIN or password in the clear, allowing the smart card to be used with untrusted smart card readers.

    摘要翻译: 提供了使用智能卡安全授权用户或用户设备的智能卡,系统和方法。 智能卡被配置为在初始化或请求验证时向用户输入设备提供公钥,使得在经由智能卡读卡器传输到智能卡之前,由用户输入的PIN或密码被加密。 智能卡然后解密PIN或密码以授权用户。 优选地,智能卡被配置为向用户输入设备提供公开密钥和随机数,该用户输入设备然后在发送到智能卡之前加密随机数和用户输入的PIN或密码的级联或其他组合。 因此,智能卡读卡器从未收到PIN或密码的副本,允许智能卡与不可信的智能卡读卡器一起使用。

    AUTOMATIC MANAGEMENT OF SECURITY INFORMATION FOR A SECURITY TOKEN ACCESS DEVICE WITH MULTIPLE CONNECTIONS
    93.
    发明申请
    AUTOMATIC MANAGEMENT OF SECURITY INFORMATION FOR A SECURITY TOKEN ACCESS DEVICE WITH MULTIPLE CONNECTIONS 审中-公开
    具有多个连接的安全访问设备的安全信息自动管理

    公开(公告)号:US20080011827A1

    公开(公告)日:2008-01-17

    申请号:US11458020

    申请日:2006-07-17

    IPC分类号: G06K5/00 G06K7/08

    摘要: A security token access device and a method implemented on an access device for automatically managing security information. The access device is capable of wirelessly communication with a plurality of user devices and may be securely paired with at least one of the plurality of user devices. The access device maintains connection information, including security information, for each user device securely paired with the access device. The access device designates a primary user device from the set of user devices securely paired with the access device, and determines whether the primary user device is in communication with the access device. If the primary user device is not in communication with the access device, the access device automatically clears all security information for each user device securely paired with the access device.

    摘要翻译: 安全令牌访问设备和在接入设备上实现的用于自动管理安全信息的方法。 接入设备能够与多个用户设备进行无线通信,并且可以与多个用户设备中的至少一个安全地配对。 访问设备维护与访问设备安全地配对的每个用户设备的连接信息,包括安全信息。 访问设备从与接入设备安全地配对的一组用户设备中指定主用户设备,并且确定主用户设备是否与接入设备通信。 如果主用户设备不与接入设备通信,则接入设备自动清除与接入设备安全配对的每个用户设备的所有安全信息。

    POLICY PROXY
    94.
    发明申请
    POLICY PROXY 有权
    政策执行

    公开(公告)号:US20120303786A1

    公开(公告)日:2012-11-29

    申请号:US13570709

    申请日:2012-08-09

    IPC分类号: G06F15/173

    摘要: In a system with a policy server, a first device able to communicate with the policy server and a second device able to communicate with the first device and unable to communicate with the policy server, the first device is to act as a policy proxy. The policy server may push to the first device a policy for the second device, and the first device may push the policy to the second device.

    摘要翻译: 在具有策略服务器的系统中,能够与策略服务器通信的第一设备和能够与第一设备进行通信并且无法与策略服务器通信的第二设备,第一设备将用作策略代理。 策略服务器可以向第一设备推送第二设备的策略,并且第一设备可以将策略推送到第二设备。

    Policy proxy
    95.
    发明授权
    Policy proxy 有权
    策略代理

    公开(公告)号:US08261338B2

    公开(公告)日:2012-09-04

    申请号:US12058684

    申请日:2008-03-29

    IPC分类号: H04L29/06

    摘要: In a system with a policy server, a first device able to communicate with the policy server and a second device able to communicate with the first device and unable to communicate with the policy server, the first device is to act as a policy proxy. The policy server may push to the first device a policy for the second device, and the first device may push the policy to the second device.

    摘要翻译: 在具有策略服务器的系统中,能够与策略服务器通信的第一设备和能够与第一设备进行通信并且无法与策略服务器通信的第二设备,第一设备将用作策略代理。 策略服务器可以向第一设备推送第二设备的策略,并且第一设备可以将策略推送到第二设备。

    System and method for encrypted smart card PIN entry
    96.
    发明授权
    System and method for encrypted smart card PIN entry 有权
    用于加密智能卡PIN输入的系统和方法

    公开(公告)号:US07735132B2

    公开(公告)日:2010-06-08

    申请号:US11196340

    申请日:2005-08-04

    IPC分类号: H04L9/32

    摘要: A smart card, system, and method for securely authorizing a user or user device using the smart card is provided. The smart card is configured to provide, upon initialization or a request for authentication, a public key to the user input device such that the PIN or password entered by the user is encrypted before transmission to the smart card via a smart card reader. The smart card then decrypts the PIN or password to authorize the user. Preferably, the smart card is configured to provide both a public key and a nonce to the user input device, which then encrypts a concatenation or other combination of the nonce and the user-input PIN or password before transmission to the smart card. The smart card reader thus never receives a copy of the PIN or password in the clear, allowing the smart card to be used with untrusted smart card readers.

    摘要翻译: 提供了一种使用智能卡安全授权用户或用户设备的智能卡,系统和方法。 智能卡被配置为在初始化或请求验证时向用户输入设备提供公钥,使得在经由智能卡读卡器传输到智能卡之前,由用户输入的PIN或密码被加密。 智能卡然后解密PIN或密码以授权用户。 优选地,智能卡被配置为向用户输入设备提供公开密钥和随机数,该用户输入设备然后在发送到智能卡之前加密随机数和用户输入的PIN或密码的级联或其他组合。 因此,智能卡读卡器从未收到PIN或密码的副本,允许智能卡与不可信的智能卡读卡器一起使用。

    AUTHENTICATION CERTIFICATE MANAGEMENT FOR ACCESS TO A WIRELESS COMMUNICATION DEVICE
    97.
    发明申请
    AUTHENTICATION CERTIFICATE MANAGEMENT FOR ACCESS TO A WIRELESS COMMUNICATION DEVICE 审中-公开
    认证无线通信设备认证证书管理

    公开(公告)号:US20090113543A1

    公开(公告)日:2009-04-30

    申请号:US11928679

    申请日:2007-10-30

    IPC分类号: H04L9/32

    摘要: A system and method for authenticating a user to a user device using one or more-factor authentication with a certificate are provided. The status of the certificate is stored at the user device such that the stored status is queried during the authentication process. The status is updated as a background operation on the user device on a periodic basis. In the event that the user device fails to obtain updated status information, further status update requests are issued by the user device at varying time intervals until a response is received. In the event that the user is authenticated to the device but the certificate is subsequently revoked, access to all or a subset of user data and functions on the user device may be restricted.

    摘要翻译: 提供了一种使用一个或多个身份认证与证书将用户认证给用户设备的系统和方法。 证书的状态存储在用户设备处,使得在认证过程期间查询存储的状态。 周期性地在用户设备上更新状态作为后台操作。 在用户设备未能获得更新的状态信息的情况下,用户设备以变化的时间间隔发送进一步的状态更新请求,直到接收到响应。 在用户对设备进行认证但证书随后被撤销的情况下,可以限制对用户设备上的用户数据和功能的全部或子集的访问。

    System and method for managing multiple smart card sessions
    98.
    发明授权
    System and method for managing multiple smart card sessions 有权
    用于管理多个智能卡会话的系统和方法

    公开(公告)号:US07464865B2

    公开(公告)日:2008-12-16

    申请号:US11412759

    申请日:2006-04-28

    IPC分类号: G06K5/00

    CPC分类号: G06K7/0008

    摘要: A system and method is provided for managing multiple smart card sessions with multiple communications or computing devices in association with a single smart card reader. A wireless smart card reader is provided for communicating with a plurality of devices requiring smart card functionality in a number of smart card sessions, in which each smart card session is addressed with an identifier identifying a single device. The smart card session is secured by a wireless connection pairing and by a secure pairing, such that each connection between the smart card reader and a device is secured against all other devices in communication with the smart card reader using a master connection key, which is unique for each device.

    摘要翻译: 提供了一种系统和方法,用于与单个智能卡读取器相关联地管理具有多个通信或计算设备的多个智能卡会话。 提供了一种无线智能卡读取器,用于与在许多智能卡会话中需要智能卡功能的多个设备进行通信,其中每个智能卡会话使用识别单个设备的标识符来寻址。 通过无线连接配对和安全配对来保护智能卡会话,使得智能卡读卡器和设备之间的每个连接都使用主连接密钥来抵御与智能卡读卡器通信的所有其他设备,该主连接密钥是 每个设备都是独一无二的

    POLICY PROXY
    99.
    发明申请
    POLICY PROXY 有权
    政策执行

    公开(公告)号:US20080289001A1

    公开(公告)日:2008-11-20

    申请号:US12058684

    申请日:2008-03-29

    IPC分类号: G06F21/00 G06F15/16 H04L9/32

    摘要: In a system with a policy server, a first device able to communicate with the policy server and a second device able to communicate with the first device and unable to communicate with the policy server, the first device is to act as a policy proxy. The policy server may push to the first device a policy for the second device, and the first device may push the policy to the second device.

    摘要翻译: 在具有策略服务器的系统中,能够与策略服务器通信的第一设备和能够与第一设备进行通信并且无法与策略服务器通信的第二设备,第一设备将用作策略代理。 策略服务器可以向第一设备推送第二设备的策略,并且第一设备可以将策略推送到第二设备。

    System and method for encrypted smart card pin entry
    100.
    发明授权
    System and method for encrypted smart card pin entry 有权
    用于加密智能卡引脚输入的系统和方法

    公开(公告)号:US08332935B2

    公开(公告)日:2012-12-11

    申请号:US12795383

    申请日:2010-06-07

    IPC分类号: H04L29/06

    摘要: A smart card, system, and method for securely authorizing a user or user device using the smart card is provided. The smart card is configured to provide, upon initialization or a request for authentication, a public key to the user input device such that the PIN or password entered by the user is encrypted before transmission to the smart card via a smart card reader. The smart card then decrypts the PIN or password to authorize the user. Preferably, the smart card is configured to provide both a public key and a nonce to the user input device, which then encrypts a concatenation or other combination of the nonce and the user-input PIN or password before transmission to the smart card. The smart card reader thus never receives a copy of the PIN or password in the clear, allowing the smart card to be used with untrusted smart card readers.

    摘要翻译: 提供了一种使用智能卡安全授权用户或用户设备的智能卡,系统和方法。 智能卡被配置为在初始化或请求验证时向用户输入设备提供公钥,使得在经由智能卡读卡器传输到智能卡之前,由用户输入的PIN或密码被加密。 智能卡然后解密PIN或密码以授权用户。 优选地,智能卡被配置为向用户输入设备提供公开密钥和随机数,该用户输入设备然后在发送到智能卡之前加密随机数和用户输入的PIN或密码的级联或其他组合。 因此,智能卡读卡器从未收到PIN或密码的副本,允许智能卡与不可信的智能卡读卡器一起使用。