公开(公告)号：US20070099597A1

公开(公告)日：2007-05-03

申请号：US10584293

申请日：2003-12-24

申请人： Jari Arkko ,  Pekka Nikander ,  Mats Naslund

发明人： Jari Arkko ,  Pekka Nikander ,  Mats Naslund

IPC分类号： H04M1/66

CPC分类号： H04W12/04 ,  H04L9/3236 ,  H04L63/061 ,  H04L63/08 ,  H04L2209/38 ,  H04L2209/80 ,  H04W12/06 ,  H04W12/10

摘要： A method of authenticating a mobile node to a communication system is provided, the communication system comprising a plurality of access nodes, the method comprising the steps of (a) generating a numerical chain comprising a series of values using a one-way coding function such that a given value within the chain is easily obtainable from a subsequent value, but the subsequent value is not easily obtainable from that given value; (b) sending a value from the first numerical chain from the mobile node to an access node to which the mobile node wishes to attach; and (c) using the sent value at the access node to authenticate the mobile node.

摘要翻译： 提供了一种向通信系统认证移动节点的方法，所述通信系统包括多个接入节点，所述方法包括以下步骤：（a）使用单向编码功能生成包括一系列值的数字链， 链中的给定值可以从随后的值容易地获得，但是后续值不容易从该给定值获得; （b）从第一数字链从移动节点发送值到移动节点希望附加的接入节点; 和（c）在接入节点使用发送的值来认证移动节点。

公开(公告)号：US20110274091A1

公开(公告)日：2011-11-10

申请号：US13181984

申请日：2011-07-13

申请人： Pekka Nikander ,  Jari Arkko

发明人： Pekka Nikander ,  Jari Arkko

IPC分类号： H04W36/00

CPC分类号： H04W36/0016 ,  H04L69/167 ,  H04W36/02 ,  H04W40/02 ,  H04W40/36 ,  H04W80/04

摘要： A method of forwarding IP packets, sent to an old care-of-address of a mobile node, to the mobile node following a handover of the mobile node from a first old access router to a second new access router. The method comprises, prior to completion of said handover, providing said first router or another proxy node with information necessary to determine the new IP care-of address to be used by the mobile node when the mobile node is transferred to the second access router. At said first router or said proxy node, the new care-of-address for the mobile node is determined using said information and ownership of the new care-of-address by the mobile node confirmed, and subsequently packets received at said first access network and destined for said old care-of-address are forwarded to the predicted care-of-address address.

摘要翻译： 一种在移动节点从第一旧接入路由器切换到第二新接入路由器之后，向移动节点转发发送到移动节点的旧转交地址的IP分组的方法。 该方法包括：在所述切换完成之前，当移动节点被传送到第二接入路由器时，向所述第一路由器或另一代理节点提供确定要由移动节点使用的新的IP转交地址所必需的信息 。 在所述第一路由器或所述代理节点处，移动节点的新转交地址由所确定的移动节点的新的转交地址的所述信息和所有权确定，并且随后在所述第一接入网络 并且预定用于所述旧的转交地址转发到预期的转交地址。

公开(公告)号：US08000704B2

公开(公告)日：2011-08-16

申请号：US11573831

申请日：2004-08-20

申请人： Jari Arkko ,  Pekka Nikander

发明人： Jari Arkko ,  Pekka Nikander

IPC分类号： H04M1/66 ,  H04M1/68 ,  H04M3/16 ,  H04W4/00 ,  H04L9/32

CPC分类号： H04W60/00 ,  H04L63/0823 ,  H04L63/126 ,  H04W8/087 ,  H04W12/06 ,  H04W40/02 ,  H04W74/00 ,  H04W80/00 ,  H04W80/04

摘要： A method of facilitating Internet Protocol access by a mobile node to an access Network, the method comprising: sending an attachment request from the mobile node to an access router of the access network, the request containing a mobile node identifier and an Interface Identifier or means for deriving an Interface Identifier, and being signed by the mobile node to allow the message to be authenticated as originating at that mobile node; receiving the request at the access router and authenticating the message there using the signature, and in response to the receipt and authentication of the message, performing a predefined set of tasks delegated to the access node and which are required to facilitate said access; and returning an acknowledgment from the access router to the mobile node confirming the access permission, the acknowledgement containing a network routing prefix and means for authenticating the access router to the mobile node.

摘要翻译： 一种促进移动节点对接入网络的因特网协议访问的方法，所述方法包括：从所述移动节点向所述接入网络的接入路由器发送附着请求，所述请求包含移动节点标识符和接口标识符或装置 用于导出接口标识符，并且被移动节点签名以允许将该消息认证为源于该移动节点; 在所述接入路由器处接收所述请求并使用所述签名在其上验证所述消息，并且响应于所述消息的接收和认证，执行委托给所述接入节点的预定义的任务集合，并且为便于所述接入而需要该任务; 以及从所述接入路由器返回确认所述访问许可的所述确认，所述确认包含网络路由前缀以及用于认证到所述移动节点的所述接入路由器的装置。

公开(公告)号：US07962122B2

公开(公告)日：2011-06-14

申请号：US10557750

申请日：2004-05-21

申请人： Pekka Nikander ,  Jari Arkko

发明人： Pekka Nikander ,  Jari Arkko

IPC分类号： H04W12/00

CPC分类号： H04W12/06 ,  H04L63/0853 ,  H04W40/02

摘要： A method of securely initializing subscriber and security data in a mobile routing system when the subscribers are also subscribers of a radio communication network. The method comprises, within the mobile routing system, authenticating subscribers to the mobile routing system using an authentication procedure defined for the radio communication network, collecting subscriber information from relevant nodes of the radio network, and agreeing upon keys by which further communications between the subscribers and the mobile routing system can take place, and using the subscriber information and keys in the provision of mobility services to subscriber mobile nodes and correspondent nodes.

摘要翻译： 当用户也是无线电通信网络的订户时，在移动路由系统中安全地初始化用户和安全数据的方法。 该方法包括：在移动路由系统内，使用为无线电通信网络定义的认证过程向移动路由系统认证用户，从无线电网络的相关节点收集用户信息，以及一致通过用户之间进一步通信的密钥 并且移动路由系统可以发生，并且使用用户信息和密钥来向订户移动节点和通信节点提供移动性服务。

公开(公告)号：US20090253411A1

公开(公告)日：2009-10-08

申请号：US12370781

申请日：2009-02-13

申请人： Jari Arkko ,  Pekka Nikander ,  Mats Naslund

发明人： Jari Arkko ,  Pekka Nikander ,  Mats Naslund

IPC分类号： H04M1/66 ,  H04M1/00

CPC分类号： H04L63/08 ,  H04L9/3236 ,  H04L63/061 ,  H04L2209/38 ,  H04L2209/80 ,  H04W12/04 ,  H04W12/06 ,  H04W36/0038 ,  H04W88/02

摘要： A mobile wireless terminal, the terminal comprising a generator configured to generate and store a first numerical chain comprising a series of n values using a one-way coding function such that a given value within the chain is easily obtainable from a subsequent value, but the subsequent value is not easily obtainable from that given value, and an authentication requester configured to disclose a value from the numerical chain to an access node, in order to allow the access node to authenticate the mobile wireless terminal, wherein the disclosed value succeeds any values in the chain already disclosed by the mobile wireless terminal.

摘要翻译： 一种移动无线终端，所述终端包括发生器，其被配置为使用单向编码功能生成并存储包括一系列n个值的第一数字链，使得链中的给定值可以容易地从后续值获得，但是 为了允许接入节点认证移动无线终端，认证请求器被配置为从数字链公开一个值到接入节点，其中所公开的值成功地接收任何值 在移动无线终端已经公开的链中。

公开(公告)号：US20070186000A1

公开(公告)日：2007-08-09

申请号：US10557750

申请日：2004-05-21

申请人： Pekka Nikander ,  Jari Arkko

发明人： Pekka Nikander ,  Jari Arkko

IPC分类号： G06F15/16

CPC分类号： H04W12/06 ,  H04L63/0853 ,  H04W40/02

摘要： A method of securely initialising subscriber and security data in a mobile routing system when the subscribers are also subscribers of a radio communication network. The method comprises, within the mobile routing system, authenticating subscribers to the mobile routing system using an authentication procedure defined for the radio communication network, collecting subscriber information from relevant nodes of the radio network, and agreeing upon keys by which further communications between the subscribers and the mobile routing system can take place, and using said subscriber information and keys in the provision of mobility services to subscriber mobile nodes and correspondent nodes.

摘要翻译： 当用户也是无线电通信网络的订户时，在移动路由系统中安全地初始化用户和安全数据的方法。 该方法包括：在移动路由系统内，使用为无线电通信网络定义的认证过程向移动路由系统认证用户，从无线电网络的相关节点收集用户信息，以及一致通过用户之间进一步通信的密钥 并且移动路由系统可以发生，并且使用所述订户信息和密钥来向订户移动节点和通信节点提供移动性服务。

公开(公告)号：US20060274693A1

公开(公告)日：2006-12-07

申请号：US10558498

申请日：2004-03-22

申请人： Pekka Nikander ,  Jari Arkko

发明人： Pekka Nikander ,  Jari Arkko

IPC分类号： H04Q7/00 ,  H04L12/56

CPC分类号： H04W36/0016 ,  H04L69/167 ,  H04W36/02 ,  H04W40/02 ,  H04W40/36 ,  H04W80/04

摘要： A method of forwarding IP packets, sent to an old care-of-address of a mobile node, to the mobile node following a handover of the mobile node from a first old access router to a second new access router. The method comprises, prior to completion of said handover, providing said first router or another proxy node with information necessary to determine the new IP care-of address to be used by the mobile node when the mobile node is transferred to the second access router. At said first router or said proxy node, the new care-of-address for the mobile node is determined using said information and ownership of the new care-of-address by the mobile node confirmed, and subsequently packets received at said first access network and destined for said old care-of-address are forwarded to the predicted care-of-address address.

公开(公告)号：US08462947B2

公开(公告)日：2013-06-11

申请号：US12520476

申请日：2006-12-19

申请人： Mats Näslund ,  Jari Arkko

发明人： Mats Näslund ,  Jari Arkko

IPC分类号： H04K1/00 ,  G06F21/00

CPC分类号： H04W12/04 ,  H04L63/061 ,  H04L63/062 ,  H04L63/067 ,  H04L63/08 ,  H04L63/0884 ,  H04L63/0892 ,  H04L63/162 ,  H04W12/06 ,  H04W80/04

摘要： A method of operating a node for performing handover between access networks wherein a user has authenticated for network access in a first access network. The method comprises receiving from a home network a first session key and a temporary identifier allocated to the user for the duration of a communication session. The identifier is mapped to the first session key, and the mapped identifier and key are stored at the node. A second session key is derived from the first session key and the second session key is sent to an access network, and the identifier sent to a user terminal. When the user subsequently moves to a second access network, the node receives the identifier from the user terminal. The node then retrieves the first session key mapped to the received identifier, derives a third session key and sends the third session key to the second access network.

摘要翻译： 一种操作节点的方法，用于在接入网络之间执行切换，其中用户已经在第一接入网络中对网络接入进行了认证。 该方法包括：在通信会话期间，从家庭网络接收分配给用户的第一会话密钥和临时标识符。 标识符被映射到第一个会话密钥，映射的标识符和密钥存储在节点处。 从第一会话密钥导出第二会话密钥，将第二会话密钥发送到接入网络，并将该标识符发送给用户终端。 当用户随后移动到第二接入网络时，节点从用户终端接收标识符。 然后，节点检索映射到接收到的标识符的第一会话密钥，导出第三会话密钥，并将第三会话密钥发送到第二接入网络。

公开(公告)号：US20130099896A1

公开(公告)日：2013-04-25

申请号：US13415458

申请日：2012-03-08

申请人： Jari Arkko ,  Oscar Novo Diaz ,  Heidi-Maria Rissanen

发明人： Jari Arkko ,  Oscar Novo Diaz ,  Heidi-Maria Rissanen

IPC分类号： G06K7/01

CPC分类号： H04L67/12 ,  G01S13/825 ,  G01S13/878 ,  H04L67/18 ,  H04W4/185 ,  H04W4/80 ,  H04W64/00

摘要： Methods and systems for determining a location of a device and tagging signals from the device with the location involve receiving, by a plurality of positioning devices, a signal sent by the device; determining, by each of the plurality of positioning devices, respective location information based on the signal; determining, based on the respective location information of each of the plurality of positioning devices, the location of the device; and forming, from the signal, a second signal annotated with the location of the device.

摘要翻译： 用于确定设备的位置并且标记来自具有位置的设备的信号的方法和系统涉及由多个定位设备接收由设备发送的信号; 由所述多个定位装置中的每一个基于所述信号确定各自的位置信息; 基于所述多个定位装置中的每一个的相应位置信息确定所述装置的位置; 以及从所述信号形成用所述设备的位置注释的第二信号。

公开(公告)号：US20130028411A1

公开(公告)日：2013-01-31

申请号：US13394514

申请日：2012-01-13

申请人： Jari Arkko ,  Heidi-Maria Rissanen ,  Oscar Novo Diaz ,  Ari Keranen

发明人： Jari Arkko ,  Heidi-Maria Rissanen ,  Oscar Novo Diaz ,  Ari Keranen

IPC分类号： G06F21/24

CPC分类号： H04L9/0833 ,  H04L9/0866 ,  H04L9/3255 ,  H04L63/123 ,  H04L2209/805 ,  H04W4/08 ,  H04W4/70 ,  H04W12/0052 ,  H04W12/10

摘要： A group identity for a set of devices is generated by acquiring an identity for each one of the devices and joining the identities into a common identity data set. A group identity for the set of devices is created by performing a hash function on the common identity set and using a resulting hash value as the group identity. A group identity for a set of devices is verified by acquiring a first group identity from a trusted party. An identity is acquired from each device in the set and the identities are joined into a common identity data set and a second group identity is created for the set of devices by performing a hash function on the common identity data set. A determination is made whether there is a match between the first group identity and the second group identity.

摘要翻译： 通过获取每个设备的身份并将身份加入到公共身份数据集中来生成一组设备的组标识。 通过在公共标识集上执行散列函数并使用生成的散列值作为组标识来创建该组设备的组标识。 通过从可信方获取第一组身份来验证一组设备的组标识。 从集合中的每个设备获取身份，并且将身份连接到公共标识数据集中，并且通过在公共标识数据集上执行散列函数来为该组设备创建第二组标识。 确定第一组身份和第二组身份之间是否存在匹配。