公开(公告)号：US20060288207A1

公开(公告)日：2006-12-21

申请号：US11154953

申请日：2005-06-17

申请人： Michael Brown ,  Herbert Little ,  Michael Brown ,  Michael McCallum ,  Scott Totzke ,  Neil Adams

发明人： Michael Brown ,  Herbert Little ,  Michael Brown ,  Michael McCallum ,  Scott Totzke ,  Neil Adams

IPC分类号： H04L9/00

CPC分类号： H04L9/088 ,  H04L63/0428 ,  H04L63/20 ,  H04L2209/80

摘要： A communication system is provided with program logic for enforcing an IT Policy specifying suitable encryption encoding levels for corresponding security classification levels (and/or encryption strengths).

摘要翻译： 通信系统被提供有用于执行IT策略的程序逻辑，用于指定用于相应的安全分类级别（和/或加密强度）的合适的加密编码级别。

公开(公告)号：US20060190724A1

公开(公告)日：2006-08-24

申请号：US10546779

申请日：2003-02-28

申请人： Neil Adams ,  Herbert Little

发明人： Neil Adams ,  Herbert Little

IPC分类号： H04L9/00

CPC分类号： H04L63/0428 ,  G06F21/6218 ,  G06F21/71 ,  G06F2221/2105 ,  G06F2221/2107 ,  H04L63/045 ,  H04M1/72522

摘要： A system and method of protecting data on a communication device are provided. Data received when the communication device is in a first operational state is encrypted using a first cryptographic key and algorithm. When the communication device is in a second operational state, received data is encrypted using a second cryptographic key and algorithm. Received data is stored on the communication device in encrypted form.

公开(公告)号：US20060094442A1

公开(公告)日：2006-05-04

申请号：US10976303

申请日：2004-10-29

申请人： Michael Kirkup ,  Michael Brown ,  Herbert Little ,  Ian Robertson ,  Michael Brown

发明人： Michael Kirkup ,  Michael Brown ,  Herbert Little ,  Ian Robertson ,  Michael Brown

IPC分类号： H04Q7/20

CPC分类号： H04W88/02

摘要： A mobile wireless communication device also has at least one wired communication port. Enhanced security is achieved by permitting the device to automatically disable one or more wireless ports when connected to a wired port. Specific combinations/permutations of such automatic control may be effected by use of an IT Policy also resident on the device.

公开(公告)号：US20050278545A1

公开(公告)日：2005-12-15

申请号：US10857436

申请日：2004-06-01

申请人： Neil Adams ,  Herbert Little ,  Michael Kirkup ,  Raymond Vander Veen

发明人： Neil Adams ,  Herbert Little ,  Michael Kirkup ,  Raymond Vander Veen

IPC分类号： H04K1/00 ,  H04L9/00 ,  H04L29/06 ,  H04M1/673 ,  H04M1/725

CPC分类号： H04L63/083 ,  H04M1/673 ,  H04M1/7255

摘要： A communication device (and its related method of operation), when accessing password protected voicemail services, may invoke an enhanced security feature which effectively masks at least the password digit values from being discernible by feedback to the user. This is especially important where portable wireless communication devices may have pre-stored password data for use with automated voicemail access—even in a “locked” mode. Unauthorized possessors of such a device might utilize conventional audible feedback during password transmission to decipher the password value. However, such lack of security is avoided by masking the password data values from the audible and/or visual user feedback, if any.

摘要翻译： 通信设备（及其相关操作方法）在访问受密码保护的语音邮件服务时，可以调用增强的安全特征，其有效地屏蔽至少通过对用户的反馈来识别密码数字值。 这在便携式无线通信设备可能具有用于自动语音邮件访问的预存的密码数据 - 甚至在“锁定”模式中尤为重要。 这种设备的未经许可的拥有者可以在密码传输期间利用传统的可听反馈来解密密码值。 然而，通过从可听和/或可视用户反馈（如果有的话）屏蔽密码数据值来避免这种缺乏安全性。

公开(公告)号：US20050257209A1

公开(公告)日：2005-11-17

申请号：US11118844

申请日：2005-04-29

申请人： Neil Adams ,  Michael Kirkup ,  Herbert Little ,  Russell Owen

发明人： Neil Adams ,  Michael Kirkup ,  Herbert Little ,  Russell Owen

IPC分类号： G06F9/44 ,  G06F9/445 ,  G06F12/14 ,  G06K5/00 ,  H04L9/32 ,  H04L12/22 ,  H04M1/67 ,  H04M1/725 ,  H04Q7/32 ,  H04Q7/38

CPC分类号： G06F21/629 ,  G06F8/61 ,  G06F12/1458 ,  G06F21/51 ,  G06F21/52 ,  G06F21/53 ,  G06F21/6218 ,  G06F21/71 ,  G06F2221/2149 ,  H04L63/102 ,  H04L67/34 ,  H04M1/72525

摘要： Systems and methods of owner application control of an electronic device are provided. Owner application control information is stored on the electronic device and/or one or more remote servers. Owner application control information is consulted to determine if one or more required applications are available for execution on the electronic device. If not, one or more required applications not available are downloaded and installed. This could be in a manner transparent to the user of the electronic device. If one or more required applications are not available on the electronic device, the device can be functionally disabled in whole, or in part, until one or more required applications are available.

摘要翻译： 提供了电子设备的所有者应用控制的系统和方法。 所有者应用控制信息存储在电子设备和/或一个或多个远程服务器上。 咨询所有者应用程序控制信息以确定一个或多个所需应用程序是否可用于在电子设备上执行。 如果没有，则下载并安装一个或多个不可用的必需应用程序。 这可以以对电子设备的用户透明的方式。 如果一个或多个所需的应用程序在电子设备上不可用，则该设备可以在全部或部分功能上禁用，直到一个或多个所需的应用程序可用。

公开(公告)号：US20050251680A1

公开(公告)日：2005-11-10

申请号：US11118236

申请日：2005-04-29

申请人： Michael Brown ,  Herbert Little ,  David MacFarlane ,  Michael Brown ,  Dinah Davis

发明人： Michael Brown ,  Herbert Little ,  David MacFarlane ,  Michael Brown ,  Dinah Davis

IPC分类号： H04L9/00 ,  H04L9/30 ,  H04L29/06

CPC分类号： H04L9/08 ,  H04L9/002 ,  H04L9/0841 ,  H04L9/0844 ,  H04L9/3066 ,  H04L9/3215 ,  H04L9/3226 ,  H04L63/061 ,  H04L63/083 ,  H04L63/18 ,  H04L2209/80 ,  H04W12/04 ,  H04W12/06

摘要： A method for secure bidirectional communication between two systems is described. A first key pair and a second key pair are generated, the latter including a second public key that is generated based upon a shared secret. First and second public keys are sent to a second system, and third and fourth public keys are received from the second system. The fourth public key is generated based upon the shared secret. A master key for encrypting messages is calculated based upon a first private key, a second private key, the third public key and the fourth public key. For re-keying, a new second key pair having a new second public key and a new second private key is generated, and a new fourth public key is received. A new master key is calculated using elliptic curve calculations using the new second private key and the new fourth public key.

摘要翻译： 描述了两个系统之间的安全双向通信的方法。 产生第一密钥对和第二密钥对，后者包括基于共享秘密生成的第二公钥。 第一和第二公钥被发送到第二系统，并且从第二系统接收第三和第四公钥。 第四个公钥是基于共享的秘密生成的。 基于第一私钥，第二私钥，第三公钥和第四公钥来计算用于加密消息的主密钥。 为了重新键入，生成具有新的第二公钥和新的第二私钥的新的第二密钥对，并接收新的第四公钥。 使用新的第二私钥和新的第四公钥，使用椭圆曲线计算来计算新的主密钥。

公开(公告)号：US20050250473A1

公开(公告)日：2005-11-10

申请号：US10996369

申请日：2004-11-26

申请人： Michael Brown ,  Michael Brown ,  Michael Kirkup ,  Herbert Little

发明人： Michael Brown ,  Michael Brown ,  Michael Kirkup ,  Herbert Little

IPC分类号： G06F12/14 ,  G06F13/14 ,  H04L9/00 ,  H04L9/32 ,  H04L29/06

CPC分类号： H04L9/3271 ,  H04L9/3226 ,  H04L9/3236 ,  H04L63/083 ,  H04L2209/80

摘要： A challenge response scheme includes the authentication of a requesting device by an authenticating device. The authenticating device generates a challenge that is issued to the requesting device. The requesting device combines the challenge with a hash of a password provided by a user of the requesting device, and the combination of the hash of the password and the challenge is further hashed in order to generate a requesting encryption key that is used to encrypt the user supplied password. The encrypted user supplied password is sent to the authenticating device as a response to the issued challenge. The authenticating device generates an authenticating encryption key by generating the hash of a combination of the challenge and a stored hash of an authenticating device password. The authenticating encryption key is used to decrypt the response in order to retrieve the user-supplied password. If a hash of the user-supplied password matches the stored hash of the authenticating device password, then the requesting device has been authenticated and the authenticating device is in possession of the password.

摘要翻译： 挑战响应方案包括认证设备对请求设备的认证。 认证设备产生发出到请求设备的质询。 请求设备将挑战与由请求设备的用户提供的密码的散列相结合，并进一步散列密码散列和质询的组合，以便生成用于加密的请求加密密钥 用户提供的密码。 加密的用户提供的密码作为对发布的挑战的响应被发送到认证设备。 认证设备通过生成质询的组合和存储的认证设备密码的哈希的散列来生成认证加密密钥。 认证加密密钥用于解密响应，以便检索用户提供的密码。 如果用户提供的密码的散列与存储的认证设备密码的哈希匹配，则请求设备已被认证，认证设备拥有密码。

公开(公告)号：US20050232428A1

公开(公告)日：2005-10-20

申请号：US11093954

申请日：2005-03-30

申请人： Herbert Little ,  Michael Brown

发明人： Herbert Little ,  Michael Brown

IPC分类号： H04L9/00 ,  H04L9/08 ,  H04L9/30 ,  H04L9/32 ,  H04W12/04 ,  H04W12/06

CPC分类号： H04L9/0841 ,  H04L9/3215 ,  H04L9/3226 ,  H04L63/0428 ,  H04L63/06 ,  H04L2209/80 ,  H04W12/04 ,  H04W12/06

摘要： A method carried out by a first system for establishing a secure bidirectional communication path between the first system and a second system for an exchange of one or more messages is described. A first key pair having a first public key and a first private key is generated, and a second key pair having a second public key and a second private key is generated. The second public key is generated based upon a shared secret known to the first system and the second system. The second public key and the first public key are sent to the second system. A third public key and a fourth public key generated by the second system are received, wherein the fourth public key is generated based upon the shared secret. A master key is calculated based upon the first private key, the second private key, the third public key and the fourth public key, wherein the master key is configured to be used in encryption of one or more messages.

摘要翻译： 描述了由第一系统执行的用于在第一系统和第二系统之间建立用于交换一个或多个消息的安全双向通信路径的方法。 生成具有第一公钥和第一私钥的第一密钥对，生成具有第二公钥和第二私钥的第二密钥对。 第二公钥是基于第一系统和第二系统已知的共享秘密产生的。 第二个公钥和第一个公钥被发送到第二个系统。 接收由第二系统生成的第三公钥和第四公钥，其中基于所述共享秘密生成所述第四公钥。 基于第一私钥，第二私钥，第三公钥和第四公钥来计算主密钥，其中主密钥被配置为在一个或多个消息的加密中使用。

公开(公告)号：US20050232415A1

公开(公告)日：2005-10-20

申请号：US11051560

申请日：2005-02-04

申请人： Herbert Little ,  Jerrold Randell ,  Richard Madter ,  Ryan Hickey ,  Andrew Fergusson

发明人： Herbert Little ,  Jerrold Randell ,  Richard Madter ,  Ryan Hickey ,  Andrew Fergusson

IPC分类号： G06F12/14 ,  G06F21/00 ,  H04K1/00 ,  H04L9/00 ,  H04L9/08 ,  H04L9/14 ,  H04L9/32

CPC分类号： G06F21/64 ,  G06F12/1408 ,  G06F21/72 ,  G06F21/79 ,  G06F21/85 ,  H04L9/0863 ,  H04L9/0869 ,  H04L9/0891 ,  H04L9/0894 ,  Y02D10/13

摘要： A system and method of creating and managing encryption keys in a data processing device generates subsequent encryption keys by combining the existing encryption key with an existing password and seed value. In the preferred embodiment, the initial encryption key is embedded during manufacture and is unknown to the user and manufacturer, thus ensuring that all subsequent encryption keys are derived from an unknown value. When a subsequent encryption key is generated, all data encrypted using the existing encryption key is decrypted using the existing encryption key and re-encrypted using the subsequent encryption key before the existing encryption key is overwritten. In a further aspect, during encryption/decryption the encryption key is combined with the sector address of the data to be encrypted/decrypted in order to generate a unique key for each sector of data to be encrypted/decrypted.

摘要翻译： 在数据处理设备中创建和管理加密密钥的系统和方法通过将现有加密密钥与现有密码和种子值组合来生成后续加密密钥。 在优选实施例中，初始加密密钥在制造期间被嵌入，并且对于用户和制造商来说是未知的，因此确保所有后续加密密钥都是从未知值导出的。 当生成随后的加密密钥时，使用现有加密密钥加密的所有数据使用现有的加密密钥进行解密，并且在覆盖现有加密密钥之前使用随后的加密密钥重新加密。 在另一方面，在加密/解密期间，将加密密钥与要加密/解密的数据的扇区地址组合，以便为每个要加密/解密的数据扇区生成唯一的密钥。

公开(公告)号：US20050172128A1

公开(公告)日：2005-08-04

申请号：US10508114

申请日：2003-03-20

申请人： Herbert Little ,  Stefan Janhunen

发明人： Herbert Little ,  Stefan Janhunen

IPC分类号： H04L9/00 ,  H04L9/32 ,  H04L12/58 ,  H04L29/06

CPC分类号： H04L63/0272 ,  H04L9/3263 ,  H04L51/00 ,  H04L63/0281 ,  H04L63/045 ,  H04L63/0823 ,  H04L63/126 ,  H04L2209/76 ,  H04L2209/80 ,  H04W12/06

摘要： A method and system for handling digital certificate status checks are provided. Digital certificate status request data transmitted from a client system is received at a proxy system. The proxy system generates query data for the digital certificate status in response to receiving the digital certificate status request data. The query data is transmitted to a status provider system, and status data from the status provider system in response to the query data is received at the proxy system. Digital certificate status data based on the status data received is generated by the proxy system and transmitted to the client system.

摘要翻译： 提供了一种处理数字证书状态检查的方法和系统。 从代理系统接收从客户端系统发送的数字证书状态请求数据。 响应于接收到数字证书状态请求数据，代理系统生成数字证书状态的查询数据。 将查询数据发送到状态提供者系统，并且在代理系统处接收来自状态提供者系统的响应于查询数据的状态数据。 基于接收到的状态数据的数字证书状态数据由代理系统生成并发送给客户端系统。