-
11.发明授权Authenticating access to a wireless local area network based on security value(s) associated with a cellular system 有权基于与蜂窝系统相关联的安全值验证对无线局域网的访问公开(公告)号：US07593717B2
公开(公告)日：2009-09-22
申请号：US10661715
申请日：2003-09-12
CPC分类号： H04L63/062 , H04L63/0442 , H04W12/04 , H04W12/06 , H04W84/12 , H04W88/02
摘要： A method is provided for determining a private key for a first network based on at least one security value associated with a second network. The method further includes establishing a plurality of sessions between a mobile terminal and the first network based on the private key.
摘要翻译： 提供了一种用于基于与第二网络相关联的至少一个安全值来确定第一网络的私钥的方法。 该方法还包括基于私钥在移动终端和第一网络之间建立多个会话。
-
12.发明申请Authenticating access to a wireless local area network based on security value(s) associated with a cellular system 有权基于与蜂窝系统相关联的安全值验证对无线局域网的访问公开(公告)号：US20050113067A1
公开(公告)日：2005-05-26
申请号：US10661715
申请日：2003-09-12
CPC分类号： H04L63/062 , H04L63/0442 , H04W12/04 , H04W12/06 , H04W84/12 , H04W88/02
摘要： A method is provided for determining a private key for a first network based on at least one security value associated with a second network. The method further includes establishing a plurality of sessions between a mobile terminal and the first network based on the private key.
摘要翻译： 提供了一种用于基于与第二网络相关联的至少一个安全值来确定第一网络的私钥的方法。 该方法还包括基于私钥在移动终端和第一网络之间建立多个会话。
-
13.发明授权Network vulnerability assessment of a host platform from an isolated partition in the host platform 有权主机平台上的孤立分区的主机平台的网络漏洞评估公开(公告)号：US08281402B2
公开(公告)日：2012-10-02
申请号：US11435038
申请日：2006-05-16
IPC分类号： H04L29/06
CPC分类号： H04L63/1433 , G06F21/577 , H04L63/0227
摘要： According to embodiments of the present invention, host platform device includes an embedded firmware agent that may detect an attempt by the host platform device to fully connect to a network. The firmware agent may restrict traffic between the host platform device and the network to bootstrap traffic, test the device to determine device vulnerability, may temporarily stop access to other peripheral devices, and transmit a report of the device vulnerability to a remote policy server. After the test(s) are performed, the firmware agent may receive an indication from the remote policy server as to whether the device is permitted to fully connect to the network and, if so, whether there are any further restrictions on traffic flow, for example, and if the peripheral device access may be allowed.
摘要翻译： 根据本发明的实施例，主机平台设备包括可以检测主机平台设备完全连接到网络的尝试的嵌入式固件代理。 固件代理可以限制主机平台设备和网络之间的流量来引导流量，测试设备以确定设备漏洞，可能暂时停止访问其他外围设备，并将设备漏洞的报告传输到远程策略服务器。 在执行测试之后，固件代理可以从远程策略服务器接收关于设备是否被允许完全连接到网络的指示，并且如果是，是否存在对业务流量的任何进一步的限制，对于 例如，如果允许外围设备访问。
-
14.发明申请Tamper-resistant method and apparatus for verification and measurement of host agent dynamic data updates 审中-公开用于验证和测量主机代理动态数据更新的防篡改方法和装置公开(公告)号：US20080134321A1
公开(公告)日：2008-06-05
申请号：US11648252
申请日：2006-12-29
申请人： Priya Rajagopal , Travis Schluessler , Uday R. Savagaonkar , David Durham , Ravi Sahita , Uri Blumenthal
发明人： Priya Rajagopal , Travis Schluessler , Uday R. Savagaonkar , David Durham , Ravi Sahita , Uri Blumenthal
IPC分类号： H04L9/32
CPC分类号： G06F21/55 , G06F21/52 , G06F21/6281 , G06F21/64 , H04L9/3242 , H04L9/3247 , H04L63/06 , H04L63/123 , H04L63/1441
摘要： A platform for verifying the validity of changes to dynamic data modifiable during the runtime execution of an agent. In one embodiment, a management mode of a processor uses key information to generate a signature for a set of dynamic data, the signature to verify the validity of the state of the dynamic data to an integrity measurement agent.
摘要翻译： 用于验证代理程序运行时执行期间可修改动态数据的更改的有效性的平台。 在一个实施例中，处理器的管理模式使用密钥信息来生成一组动态数据的签名，该签名用于向完整性测量代理验证动态数据的状态的有效性。
-
15.发明申请SECURE PLATFORM VOUCHER SERVICE FOR SOFTWARE COMPONENTS WITHIN AN EXECUTION ENVIRONMENT 有权执行环境中软件组件的安全平台提供服务公开(公告)号：US20080022129A1
公开(公告)日：2008-01-24
申请号：US11864573
申请日：2007-09-28
申请人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd Khosravi , Uri Blumenthal , Men Long
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： Embodiments of apparatus, articles, methods, and systems for secure platform voucher service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise comprised operating system environment. A provisioning remote entity or gateway only needs to know a platform's public key or certificate hierarchy in order to receive verification proof for any component in the platform. The verification proof or voucher helps to assure to the remote entity that no man-in-the-middle, rootkit, spyware or other malware running in the platform or on the network will have access to the provisioned material. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译： 这里一般地描述用于执行环境中的软件组件的安全平台凭单服务的装置，物品，方法和系统的实施例。 一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制仅通过特定认证的，授权的和已验证的软件组件进行访问的存储器区域，即使在另外包含的操作系统环境的一部分。 配置远程实体或网关只需要知道平台的公钥或证书层次结构，以便接收平台中任何组件的验证证明。 验证证明或凭证有助于向远程实体确保在平台或网络上运行的中间人，rootkit，间谍软件或其他恶意软件将无法访问所提供的资料。 代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。 可以描述和要求保护其他实施例。
-
公开(公告)号：US08949986B2
公开(公告)日：2015-02-03
申请号：US11647860
申请日：2006-12-29
申请人： Omer Ben-Shalom , Uri Blumenthal
发明人： Omer Ben-Shalom , Uri Blumenthal
CPC分类号： H04L63/1491 , H04L63/10 , H04L63/1441
摘要： A method and apparatus for network security elements using endpoint resources. An embodiment of a method includes receiving a request for access to a network at an endpoint server. The method further includes detecting that the request for access to the network includes a request that is unauthorized. The request for access to the network is directed to a network security element.
摘要翻译： 一种使用端点资源的网络安全元素的方法和装置。 方法的实施例包括在端点服务器处接收对网络的访问请求。 该方法还包括检测到对网络的访问请求包括未授权的请求。 访问网络的请求被引导到网络安全元件。
-
公开(公告)号：US08205238B2
公开(公告)日：2012-06-19
申请号：US11393486
申请日：2006-03-30
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L63/101
摘要： Transport agnostic, secure communication protocol for transmitting host platform posture information to the Network Access Control Server or PDP (Policy Decision Point) and for receiving policy information to be enforced on the trusted host platform and respective applications for data processing and communication are described herein.
摘要翻译： 这里描述了用于将主机平台姿势信息发送到网络访问控制服务器或PDP（策略决策点）并且用于接收在可信主机平台上执行的策略信息和用于数据处理和通信的相应应用的传输不可知的安全通信协议。
-
公开(公告)号：US20070240197A1
公开(公告)日：2007-10-11
申请号：US11393486
申请日：2006-03-30
IPC分类号： H04L9/00
CPC分类号： H04L63/0227 , H04L63/101
摘要： Transport agnostic, secure communication protocol for transmitting host platform posture information to the Network Access Control Server or PDP (Policy Decision Point) and for receiving policy information to be enforced on the trusted host platform and respective applications for data processing and communication are described herein.
摘要翻译： 这里描述了用于将主机平台姿势信息发送到网络访问控制服务器或PDP（策略决策点）并且用于接收在可信主机平台上执行的策略信息和用于数据处理和通信的相应应用的传输不可知的安全通信协议。
-
19.发明申请SECURE PLATFORM VOUCHER SERVICE FOR SOFTWARE COMPONENTS WITHIN AN EXECUTION ENVIRONMENT 有权执行环境中软件组件的安全平台提供服务公开(公告)号：US20120226903A1
公开(公告)日：2012-09-06
申请号：US13412382
申请日：2012-03-05
申请人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
IPC分类号： H04L29/06
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： Apparatuses, articles, methods, and systems for secure platform voucher service for software within an execution environment. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by authenticated, authorized and verified software components. A provisioning remote entity or gateway only needs to know a platform's public key or certificate hierarchy to receive verification for any component. The verification or voucher helps assure to the remote entity that no malware running in the platform or on the network will have access to provisioned material. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the software component.
摘要翻译： 用于执行环境中的软件的安全平台凭证服务的设备，物品，方法和系统。 一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制仅通过认证的，授权和验证的软件组件进行访问的存储器区域。 配置远程实体或网关只需要知道平台的公钥或证书层次结构来接收任何组件的验证。 验证或凭证有助于向远程实体确保在平台或网络上运行的恶意软件无法访问配置的资料。 代表在受保护的内存区域中提供的经认证/授权/验证的软件组件的软件组件可访问的基础平台来锁定和解锁秘密。
-
20.发明授权Secure platform voucher service for software components within an execution environment 有权在执行环境中的软件组件的安全平台凭证服务公开(公告)号：US08132003B2
公开(公告)日：2012-03-06
申请号：US11864573
申请日：2007-09-28
申请人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
发明人： David Durham , Hormuzd M. Khosravi , Uri Blumenthal , Men Long
IPC分类号： H04L29/06
CPC分类号： G06F21/54 , H04L9/004 , H04L9/3236 , H04L63/123 , H04L63/126 , H04L63/20 , H04L2209/60
摘要： Embodiments of apparatus, articles, methods, and systems for secure platform voucher service for software components within an execution environment are generally described herein. An embodiment includes the ability for a Virtual Machine Monitor, Operating System Monitor, or other underlying platform capability to restrict memory regions for access only by specifically authenticated, authorized and verified software components, even when part of an otherwise compromised operating system environment. A provisioning remote entity or gateway only needs to know a platform's public key or certificate hierarchy in order to receive verification proof for any component in the platform. The verification proof or voucher helps to assure to the remote entity that no man-in-the-middle, rootkit, spyware or other malware running in the platform or on the network will have access to the provisioned material. The underlying platform to lock and unlock secrets on behalf of the authenticated/authorized/verified software component provided in protected memory regions only accessible to the authenticated/authorized/verified software component. Other embodiments may be described and claimed.
摘要翻译： 这里一般地描述用于执行环境中的软件组件的安全平台凭单服务的装置，物品，方法和系统的实施例。 一个实施例包括虚拟机监视器，操作系统监视器或其他底层平台功能的能力，以限制存储器区域，以便仅通过特定认证的，授权的和已验证的软件组件进行访问，即使在其他受损的操作系统环境的一部分。 配置远程实体或网关只需要知道平台的公钥或证书层次结构，以便接收平台中任何组件的验证证明。 验证证明或凭证有助于向远程实体确保在平台或网络上运行的中间人，rootkit，间谍软件或其他恶意软件将无法访问所提供的资料。 代表被保护的内存区域中提供的经过身份验证/授权/验证的软件组件的锁定和解锁秘密的底层平台只能由经过身份验证/授权/验证的软件组件访问。 可以描述和要求保护其他实施例。
-
-
-
-
-
-
-
-
-
搜索结果
22 条记录 (耗时 0.017 秒)
