Method for establishing session key agreement
    11.
    发明授权
    Method for establishing session key agreement 有权
    建立会话密钥协议的方法

    公开(公告)号:US06591364B1

    公开(公告)日:2003-07-08

    申请号:US09141580

    申请日:1998-08-28

    申请人: Sarvar Patel

    发明人: Sarvar Patel

    IPC分类号: H04L900

    摘要: In the method for establishing a session key, a network and a mobile transfer codes between one another. The mobile and the network perform mutual authentication based on the codes. Besides performing this mutual authentication, the mobile and the network to establish the session key based on the codes. In one embodiment, the messages forming part of the intended session are sent with the codes, and form a basis upon which the codes for authentication have been derived.

    摘要翻译: 在用于建立会话密钥的方法中,网络和移动传送代码彼此之间。 移动和网络基于代码执行相互验证。 除了执行这种相互认证,移动和网络还可以根据代码建立会话密钥。 在一个实施例中,形成预期会话的一部分的消息与代码一起发送,并且形成已经导出认证码的基础。

    Encryption method for message authentication
    13.
    发明授权
    Encryption method for message authentication 有权
    消息认证的加密方法

    公开(公告)号:US08687800B2

    公开(公告)日:2014-04-01

    申请号:US11540790

    申请日:2006-09-29

    申请人: Sarvar Patel

    发明人: Sarvar Patel

    IPC分类号: H04L29/06

    摘要: In an encryption method, an input block of data is reversibly processed to produce a string that is at least partially randomized. The randomized string is then encrypted by a block cipher. In decryption, the input block of encrypted data is first decrypted with respect to the block cipher. Then the randomization is reversed.

    摘要翻译: 在加密方法中,输入数据块被可逆地处理以产生至少部分随机化的字符串。 随机化的字符串然后通过块密码加密。 在解密中,首先对加密数据的输入块相对于块密码进行解密。 然后随机化相反。

    Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access
    15.
    发明授权
    Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access 有权
    用于认证连接到根据码分多址操作的毫微微小区的移动单元的方法

    公开(公告)号:US08230035B2

    公开(公告)日:2012-07-24

    申请号:US11972262

    申请日:2008-01-10

    IPC分类号: G06F15/167

    摘要: The present invention provides a method involving a femtocell in communication with a secure core network such as an Internet Protocol Multimedia Subsystem (IMS) network. The method includes receiving, from the femtocell and at a first secure entity in the IMS network, a global challenge including information indicating a random number. The method also includes receiving an authentication response computed by a mobile unit based on the random number and the first key known by the mobile unit and not known by the femtocell. The method further includes determining, at the first secure entity, that the random number is a legitimate random number provided to the femtocell by the IMS network.

    摘要翻译: 本发明提供了一种涉及与诸如因特网协议多媒体子系统(IMS)网络的安全核心网络通信的毫微微小区的方法。 该方法包括从毫微微小区和IMS网络中的第一安全实体接收包括指示随机数的信息的全局挑战。 该方法还包括基于移动单元已知的随机数和第一密钥接收由移动单元计算的认证响应,并且毫微微蜂窝不知道该认证响应。 该方法还包括在第一安全实体处确定随机数是IMS网络提供给毫微微小区的合法随机数。

    Processing method for message integrity with tolerance for non-sequential arrival of message data
    16.
    发明授权
    Processing method for message integrity with tolerance for non-sequential arrival of message data 有权
    消息完整性的处理方法,具有消息数据非连续到达的容限

    公开(公告)号:US08122247B2

    公开(公告)日:2012-02-21

    申请号:US11976126

    申请日:2007-10-22

    申请人: Sarvar Patel

    发明人: Sarvar Patel

    IPC分类号: H04L29/06

    摘要: One example embodiment of the present invention discloses a method for processing an application packet for transmission, includes breaking the application packet into a plurality of segments, creating first pseudorandom bits, and generating partial tags based on each of the plurality of segments and portions of the first pseudorandom bits associated with each of the plurality of segments. The method further including combining the partial tags including a last partial tag associated with a last segment of the application packet to create an accumulated tag, generating an authentication tag based on the accumulated tag and second pseudorandom bits, storing the authentication tag, and transmitting the plurality of segments including the authentication tag.

    摘要翻译: 本发明的一个示例性实施例公开了一种用于处理用于传输的应用分组的方法,包括将应用分组分解成多个分段,创建第一伪随机比特,并且基于多个分段中的每一个和 与多个段中的每一个相关联的第一伪随机比特。 所述方法还包括组合包括与所述应用分组的最后片段相关联的最后部分标签的所述部分标签以创建累积标签,基于所述累积标签和第二伪随机比特生成认证标签,存储所述认证标签,以及发送 多个段包括认证标签。

    Femtocell access control list addition confirmation
    17.
    发明申请
    Femtocell access control list addition confirmation 审中-公开
    毫微微蜂窝接入控制列表增加确认

    公开(公告)号:US20100069098A1

    公开(公告)日:2010-03-18

    申请号:US12215810

    申请日:2008-06-30

    IPC分类号: H04W4/12 H04W4/00

    摘要: An apparatus in one example has: a femtocell operatively coupled to an operations support system and operatively coupleable to a mobile terminal; a femtocell access control list operatively coupled to the operations support system and the femtocell; and an SMS control center operatively coupled to the operations support system and to the femtocell; wherein an addition of the mobile terminal to the femtocell access control list is initiated; wherein a message is sent to the mobile terminal that informs the mobile terminal that the mobile terminal is being added to the femtocell; wherein a response is communicated from the mobile terminal to the operations support system; and wherein the mobile terminal is added to the access control list upon receipt of the response. Thus, the present method and apparatus control addition of mobile terminals to access control lists for femtocells.

    摘要翻译: 一个示例中的装置具有:操作地耦合到操作支持系统并且可操作地耦合到移动终端的毫微微小区; 可操作地耦合到所述操作支持系统和所述毫微微蜂窝的毫微微小区接入控制列表; 以及可操作地耦合到所述操作支持系统和所述毫微微小区的SMS控制中心; 其中启动所述移动终端到所述毫微微小区接入控制列表的添加; 其中向所述移动终端发送消息,所述移动终端通知所述移动终端所述移动终端正在被添加到所述毫微微小区; 其中响应从所述移动终端传送到所述操作支持系统; 并且其中所述移动终端在接收到所述响应时被添加到所述访问控制列表。 因此,本方法和装置控制移动终端的添加以访问毫微微小区的控制列表。

    Provisioning root keys
    19.
    发明申请
    Provisioning root keys 审中-公开
    配置根密钥

    公开(公告)号:US20060236116A1

    公开(公告)日:2006-10-19

    申请号:US11108609

    申请日:2005-04-18

    申请人: Sarvar Patel

    发明人: Sarvar Patel

    IPC分类号: H04L9/00

    摘要: The present invention provides a method of key material generation for authenticating communication with at least one network application function. The method includes determining first key material in response to a bootstrapping key request and determining second key material in response to determining the first key material. The second key material corresponds to third key material, which is determined and provided to the at least one network application function in response to determining the first key material.

    摘要翻译: 本发明提供了一种用于与至少一个网络应用功能认证通信的密钥材料生成方法。 该方法包括响应于自举密钥请求确定第一密钥材料,并响应于确定第一密钥材料来确定第二密钥材料。 第二密钥材料对应于第三密钥材料,其响应于确定第一密钥材料而被确定并提供给所述至少一个网络应用功能。

    Method for determining temporary mobile identifiers and managing use thereof
    20.
    发明授权
    Method for determining temporary mobile identifiers and managing use thereof 有权
    用于确定临时移动标识符并管理其使用的方法

    公开(公告)号:US06463154B1

    公开(公告)日:2002-10-08

    申请号:US09141581

    申请日:1998-08-28

    申请人: Sarvar Patel

    发明人: Sarvar Patel

    IPC分类号: H04K100

    摘要: In the method for managing the use of temporary mobile identifiers (TIDs), the mobile and the network each store a list of TIDs for the mobile. Newly determined TIDs are added to the respective TID list such that the TIDs are stored in chronological order. To determine a new TID, the network sends a first challenge to the mobile and the mobile sends a second challenge to the network as part of a TID update protocol. The network and the mobile then determine the new TID based on the first and second challenges. As communication between the mobile and the network continues, the respective TID lists are updated. Namely, when either the network or the mobile confirms a TID, the TIDs older than the confirmed TID are deleted from the TID list. In communicating with one another, the mobile will use the oldest TID on its TID list, while the network will use the newest TID on its TID list.

    摘要翻译: 在用于管理临时移动标识符(TID)的使用的方法中,移动台和网络各自存储移动台的TID列表。 新确定的TID被添加到相应的TID列表中,使得TID按时间顺序存储。 为了确定新的TID,网络向移动台发送第一个挑战,并且移动台向TNA更新协议的一部分向网络发送第二个挑战。 然后,网络和移动设备基于第一和第二挑战确定新的TID。 随着移动和网络之间的通信继续,相应的TID列表被更新。 也就是说,当网络或移动设备确认TID时,从TID列表中删除比确认的TID更早的TID。 在彼此进行通信时,移动台将在其TID列表中使用最旧的TID,而网络将在其TID列表中使用最新的TID。