System and method for application authorization
    12.
    发明申请
    System and method for application authorization 有权
    系统和应用程序授权方法

    公开(公告)号:US20050256878A1

    公开(公告)日:2005-11-17

    申请号:US10996406

    申请日:2004-11-26

    IPC分类号: G06F12/14 G06F17/30 G06F21/00

    摘要: A method and system for authorization of applications executing on a device having a key store. Applications obtain an application-level ticket to permit access to one or more key values located in the key store. Each ticket is securely associated with an application and being generated on the determination that the application is a trusted application. Tickets are potentially associated with one key value in the key store, with a subset of key values in the key store, or with all key values in the key store. Access to key values by an application is possible independently of a user providing a password for each such access.

    摘要翻译: 一种用于在具有密钥存储的设备上执行的应用的授权的方法和系统。 应用程序获得一个应用程序级票证,以允许访问位于密钥存储区中的一个或多个密钥值。 每个票据与应用程序安全地相关联,并且在确定应用程序是可信应用程序时生成。 门票可能与密钥库中的一个密钥值相关联,密钥存储中的密钥值的子集或密钥存储中的所有密钥值。 可以独立于为每个这样的访问提供密码的用户访问应用的密钥值。

    Wireless communication device with duress password protection and related method
    13.
    发明申请
    Wireless communication device with duress password protection and related method 有权
    无线通信设备具有胁迫密码保护及相关方法

    公开(公告)号:US20050245229A1

    公开(公告)日:2005-11-03

    申请号:US10835260

    申请日:2004-04-30

    摘要: A wireless communication device (and its related method of operation) includes, if invoked, password protected access to data stored therewithin and/or to normal device operations and further includes duress password checking logic that automatically causes a duress message to be sent if a duress password has been entered. The duress message is preferably sent without maintaining any user accessible indication of such sending. It is also preferred that the password checking logic automatically cause an end-of-duress message to be sent if a normal password is entered after a duress password has been entered. A plurality of different duress passwords may be entered into a duress password portion of data memory in the device.

    摘要翻译: 无线通信设备(及其相关操作方法)如果被调用,则包含密码保护对其中存储的数据和/或正常设备操作的访问,并且还包括胁迫密码检查逻辑,如果胁迫则自动导致胁迫消息被发送 密码已输入。 优先发送胁迫消息,而不保持这种发送的任何用户可访问的指示。 如果在输入胁迫密码之后输入正常密码,则密码检查逻辑也优选地自动导致发送结束消息。 可以将多个不同的胁迫密码输入到设备中的数据存储器的胁迫密码部分。

    System and method for managing memory in a mobile device
    14.
    发明申请
    System and method for managing memory in a mobile device 审中-公开
    用于管理移动设备中的存储器的系统和方法

    公开(公告)号:US20060294304A1

    公开(公告)日:2006-12-28

    申请号:US11195615

    申请日:2005-08-03

    IPC分类号: G06F12/00 G06F12/14

    摘要: A system and method for managing memory in a mobile device to prevent the swapping out of sensitive data to non-volatile storage from a volatile memory, to provide enhanced security for the sensitive data. In one broad aspect, there is provided a method of managing memory in a mobile device comprising the steps of identifying one or more data objects stored in a volatile memory on the mobile device to be swapped out to a non-volatile storage component, determining objects marked as containing sensitive data, and retaining so-marked objects in the volatile memory of the mobile device.

    摘要翻译: 一种用于管理移动设备中的存储器以防止将敏感数据从易失性存储器转换为非易失性存储器的系统和方法,以为敏感数据提供增强的安全性。 在一个广泛的方面,提供了一种管理移动设备中的存储器的方法,包括以下步骤:识别存储在移动设备上的易失性存储器中的一个或多个数据对象,以被交换到非易失性存储组件,确定对象 标记为包含敏感数据,并将所标记的对象保留在移动设备的易失性存储器中。

    Enhanced security for voice mail passwords
    18.
    发明申请
    Enhanced security for voice mail passwords 有权
    增强语音邮件密码的安全性

    公开(公告)号:US20050278545A1

    公开(公告)日:2005-12-15

    申请号:US10857436

    申请日:2004-06-01

    摘要: A communication device (and its related method of operation), when accessing password protected voicemail services, may invoke an enhanced security feature which effectively masks at least the password digit values from being discernible by feedback to the user. This is especially important where portable wireless communication devices may have pre-stored password data for use with automated voicemail access—even in a “locked” mode. Unauthorized possessors of such a device might utilize conventional audible feedback during password transmission to decipher the password value. However, such lack of security is avoided by masking the password data values from the audible and/or visual user feedback, if any.

    摘要翻译: 通信设备(及其相关操作方法)在访问受密码保护的语音邮件服务时,可以调用增强的安全特征,其有效地屏蔽至少通过对用户的反馈来识别密码数字值。 这在便携式无线通信设备可能具有用于自动语音邮件访问的预存的密码数据 - 甚至在“锁定”模式中尤为重要。 这种设备的未经许可的拥有者可以在密码传输期间利用传统的可听反馈来解密密码值。 然而,通过从可听和/或可视用户反馈(如果有的话)屏蔽密码数据值来避免这种缺乏安全性。

    System and method for providing an indication of randomness quality of random number data generated by a random data service
    20.
    发明申请
    System and method for providing an indication of randomness quality of random number data generated by a random data service 有权
    用于提供由随机数据服务生成的随机数数据的随机性质量指示的系统和方法

    公开(公告)号:US20070071238A1

    公开(公告)日:2007-03-29

    申请号:US11237723

    申请日:2005-09-29

    IPC分类号: H04L9/00

    摘要: A system and method for providing an indication of randomness quality of random number data generated by a random data service. The random data service may provide random number data to one or more applications adapted to generate key pairs used in code signing applications, for example. In one aspect, the method comprises the steps of: retrieving random number data from the random data service; applying one or more randomness tests to the retrieved random number data to compute at least one indicator of the randomness quality of the random number data; associating the at least one indicator with at least one state represented by a color; and displaying the color associated with the at least one indicator to a user. The color may be displayed in a traffic light icon, for example.

    摘要翻译: 一种用于提供由随机数据服务产生的随机数数据的随机性质量指示的系统和方法。 随机数据服务可以向例如适用于生成在代码签名应用中使用的密钥对的一个或多个应用提供随机数字数据。 一方面,该方法包括以下步骤:从随机数据服务中检索随机数字数据; 对所检索的随机数数据应用一个或多个随机性测试以计算所述随机数数据的随机性质量的至少一个指示符; 将所述至少一个指示符与由颜色表示的至少一个状态相关联; 以及将与所述至少一个指示符相关联的颜色显示给用户。 例如,颜色可以显示在交通灯图标中。