公开(公告)号：US07401239B2

公开(公告)日：2008-07-15

申请号：US11219029

申请日：2005-09-02

申请人： Tat Keung Chan ,  Songly Mu

发明人： Tat Keung Chan ,  Songly Mu

IPC分类号： G06F1/26

CPC分类号： G06F1/26 ,  H04B3/542 ,  H04B2203/5454

摘要： A power supply apparatus and related method. The power supply apparatus has an AC input. The apparatus has a converter for converting AC power into DC power. In a specific embodiment, the converter has an input and an output. In a specific embodiment, the input of the converter is coupled to the AC input. The power supply apparatus has a DC output for voltage ranging. The output of the converter is coupled to the DC output. The apparatus also has a fan operably configured to transfer thermal energy away from the converter and a data input/output port, the data input/output port being coupled to a data signal from a data source. The apparatus has a coupler coupled between the data input/output port and the AC input. A power line module is coupled to the coupler. The power line module is adapted to convert the data signal from a first format to a second format. The second format is capable of transmission to the AC input. An enclosure is provided for the coupler. The enclosure shields the data signal from noise, e.g., high frequency noise, low frequency noise.

摘要翻译： 电源装置及相关方法。 电源装置具有AC输入。 该装置具有用于将AC电力转换为DC电力的转换器。 在具体实施例中，转换器具有输入和输出。 在具体实施例中，转换器的输入耦合到AC输入。 电源装置具有用于电压测距的直流输出。 转换器的输出耦合到直流输出。 该装置还具有可操作地配置成将热能传送离开转换器和数据输入/输出端口的风扇，数据输入/输出端口被耦合到来自数据源的数据信号。 该装置具有耦合在数据输入/输出端口和AC输入端之间的耦合器。 电源线模块耦合到耦合器。 电力线模块适于将数据信号从第一格式转换成第二格式。 第二种格式能够传输到AC输入。 为耦合器提供外壳。 外壳屏蔽数据信号免受噪声，例如高频噪声，低频噪声。

公开(公告)号：US08997252B2

公开(公告)日：2015-03-31

申请号：US12794305

申请日：2010-06-04

申请人： Alexander Medvinsky ,  Tat Keung Chan

发明人： Alexander Medvinsky ,  Tat Keung Chan

IPC分类号： G06F21/00 ,  H04L29/06 ,  G06F21/10 ,  G06F21/33

CPC分类号： H04L63/06 ,  G06F21/10 ,  G06F21/33 ,  G06F2221/2105 ,  G06F2221/2145 ,  H04L63/0823 ,  H04L63/20 ,  H04L2463/101

摘要： A conditional access system (CAS) computer in a downloadable CAS receives a downloadable management certificate (DMC) and determines, using the DMC, security information including a DMC key size and an expiration time of a DMC subordinate certificate authority (sub-CA) certificate, for the client device. The CAS computer then determines whether the DMC is valid based on the expiration time of the DMC sub-CA certificate. If the DMC is determined to be valid, the CAS server sends a cryptographic identity for the client device and a CAS client to the client device protected using the DMC. At a later time, if the DMC key size is considered to be still sufficiently secure, the validity of the DMC is extended by issuing a new DMC sub-CA certificate with the same public key as the original DMC sub-CA certificate.

摘要翻译： 可下载的CAS中的条件访问系统（CAS）计算机接收可下载的管理证书（DMC），并使用DMC确定包括DMC下属认证机构（子CA）证书的DMC密钥大小和到期时间的安全信息 ，用于客户端设备。 CAS计算机然后根据DMC子CA证书的到期时间确定DMC是否有效。 如果DMC确定为有效，CAS服务器将客户端设备和CAS客户端的加密身份发送到使用DMC保护的客户端设备。 稍后，如果DMC密钥大小被认为仍然足够安全，则DMC的有效性通过发布与DMC DMC-CA认证相同的公钥的新的DMC子CA证书来扩展。

公开(公告)号：US08269622B2

公开(公告)日：2012-09-18

申请号：US12550382

申请日：2009-08-30

申请人： Tat Keung Chan ,  Elsa A. Chan

发明人： Tat Keung Chan ,  Elsa A. Chan

IPC分类号： G08B1/08

CPC分类号： H04L12/2818 ,  G01D4/004 ,  H04L12/2836 ,  H04L12/40039 ,  Y02B90/242 ,  Y02B90/246 ,  Y04S20/322 ,  Y04S20/42 ,  Y04S20/46

摘要： A system for providing network infrastructure for energy management and control is disclosed. A controller integrates powerline and wireless networking technologies in order to provide an integrated network. A gateway sends and receives command and control data across the integrated network. Client devices may connect to the integrated network and perform a variety of functions. An appliance module may send and receive data across the integrated network in relation to a particular appliance. A panel meter may send and receive data across the integrated network in relation to data measured at a distribution panel. A serial bridge may connect various devices to the integrated network. Computing devices may remotely or locally connect to the integrated network and send and receive data.

公开(公告)号：US20120042160A1

公开(公告)日：2012-02-16

申请号：US13207394

申请日：2011-08-10

申请人： Madjid F. Nakhjiri ,  Tat Keung Chan ,  Alexander Medvinsky

发明人： Madjid F. Nakhjiri ,  Tat Keung Chan ,  Alexander Medvinsky

IPC分类号： H04L29/06 ,  H04L9/32 ,  G06F15/16

CPC分类号： H04L63/0884 ,  H04L9/0844 ,  H04L9/321 ,  H04L9/3271 ,  H04L63/067 ,  H04L63/0892 ,  H04L63/105 ,  H04L63/166

摘要： A method of authentication and authorization over a communications system is provided. Disclosed herein are systems and methods for creating a cryptographic evidence, called authentication/authorization evidence, AE, when a successful authentication/authorization between a client and an authentication server is complete. There are a variety of methods for generating AE. For instance, the AE can be data that is exchanged during the authentication signaling or data that results from it. A distinctive point being that AE results from the authentication process and is used as prior state for the following TLS exchange. An example for creation of AE, is as follows: EAP authentications typically result in an Extended Master Session Key (EMSK). The EMSK can be used to create an Evidence Master Key (EMK) that can then be used to create AE for a variety of servers.

摘要翻译： 提供了一种通信系统的认证和授权方法。 本文公开了当客户端和认证服务器之间的成功认证/授权完成时，用于创建加密证据的系统和方法，称为认证/授权证据。 有多种生成AE的方法。 例如，AE可以是在认证信令期间交换的数据或由其产生的数据。 一个独特之处在于，AE来自认证过程，并被用作以下TLS交换的先前状态。 创建AE的示例如下：EAP认证通常导致扩展主会话密钥（EMSK）。 EMSK可用于创建证据主密钥（EMK），然后可用于为各种服务器创建AE。

公开(公告)号：US20100238003A1

公开(公告)日：2010-09-23

申请号：US12550382

申请日：2009-08-30

申请人： Tat Keung Chan ,  Elsa A. Chan

发明人： Tat Keung Chan ,  Elsa A. Chan

IPC分类号： G05B11/01

CPC分类号： H04L12/2818 ,  G01D4/004 ,  H04L12/2836 ,  H04L12/40039 ,  Y02B90/242 ,  Y02B90/246 ,  Y04S20/322 ,  Y04S20/42 ,  Y04S20/46

摘要： A system for providing network infrastructure for energy management and control is disclosed. A controller integrates powerline and wireless networking technologies in order to provide an integrated network. A gateway sends and receives command and control data across the integrated network. Client devices may connect to the integrated network and perform a variety of functions. An appliance module may send and receive data across the integrated network in relation to a particular appliance. A panel meter may send and receive data across the integrated network in relation to data measured at a distribution panel. A serial bridge may connect various devices to the integrated network. Computing devices may remotely or locally connect to the integrated network and send and receive data.

摘要翻译： 公开了一种用于提供用于能量管理和控制的网络基础设施的系统。 控制器集成电力线和无线网络技术，以提供集成网络。 网关通过集成网络发送和接收命令和控制数据。 客户端设备可以连接到集成网络并执行各种功能。 设备模块可以相对于特定设备跨集成网络发送和接收数据。 面板仪可以通过集成网络发送和接收与配电盘测量的数据相关的数据。 串行桥可以将各种设备连接到集成网络。 计算设备可以远程或本地连接到集成网络并发送和接收数据。

公开(公告)号：US07778152B2

公开(公告)日：2010-08-17

申请号：US12031372

申请日：2008-02-14

申请人： Tat Keung Chan

发明人： Tat Keung Chan

IPC分类号： H04J11/00

CPC分类号： H04B3/54 ,  H01R13/6463 ,  H01R13/6473 ,  H04B3/56 ,  H04B2203/5408 ,  H04B2203/5441 ,  H04B2203/5445 ,  H04B2203/5454 ,  H04B2203/5466 ,  H04B2203/5483

摘要： In one embodiment, a powerline system includes a data connection, a powerline module coupled to the data connection, a physical socket coupled to the powerline module and including a female connector device, a male connector device inserted into the female connector device, and a pair of wires coupled to and extending from the male connector device. The female connector device comprises a first female connector and a second female connector. The male connector device comprises a first male connector coupled to the first female connector and a second male connector coupled to the second female connector. The first wire of the pair of wires is coupled to and extending from the first male connector, and the second wire of the pair of wires is coupled to and extending from the second male connector respectively.

摘要翻译： 在一个实施例中，电力线系统包括数据连接，耦合到数据连接的电力线模块，耦合到电力线模块的物理插座，并且包括阴连接器装置，插入到母连接器装置中的公连接器装置和一对 耦合到阳连接器装置并从阳连接器装置延伸的导线。 阴连接器装置包括第一阴连接器和第二阴连接器。 阳连接器装置包括耦合到第一阴连接器的第一阳连接器和耦合到第二阴连接器的第二阳连接器。 一对电线的第一线耦合到第一阳连接器并从第一阳连接器延伸，并且一对电线的第二线分别耦合到第二阳连接器并从第二阳连接器延伸。

公开(公告)号：US20080205450A1

公开(公告)日：2008-08-28

申请号：US11845019

申请日：2007-08-24

申请人： Tat Keung Chan

发明人： Tat Keung Chan

IPC分类号： G05B11/01 ,  H04L27/00

CPC分类号： H04B3/542 ,  H04B2203/5445 ,  H04B2203/5466

摘要： A power line module and method. In a preferred embodiment, the power line module is adapted to couple to a power line outlet, which is provided on a power line network within a spatial region. A power line chip is within a housing. In a preferred embodiment. the power line chip has an input/output port and is capable of converting a power line telecommunication signal having a data rate of greater than about 80 Megabits per second from the power line network to an Ethernet signal for use in a local area network segment. The module has a coupling device coupled to the input/output port of the power line chip. In a preferred embodiment, the module has a first pin comprising a plurality of first spring members operably coupled the coupling device. The first pin is insertable into a first site of the power outlet. The module has a second pin comprising a plurality of second spring members operably coupled to the coupling device.

摘要翻译： 电力线模块及方法。 在优选实施例中，电力线模块适于耦合到设置在空间区域内的电力线网络上的电力线路出口。 电源线芯片在外壳内。 在优选实施例中。 电力线芯片具有输入/输出端口，并且能够将具有大于约80兆比特每秒的数据速率的电力线电信信号从电力线网络转换成用于局域网段的以太网信号。 该模块具有耦合到电力线芯片的输入/输出端口的耦合装置。 在优选实施例中，模块具有包括可操作地联接耦合装置的多个第一弹簧构件的第一销。 第一个引脚可插入电源插座的第一个位置。 模块具有第二销，其包括可操作地联接到联接装置的多个第二弹簧构件。

公开(公告)号：US20070073858A1

公开(公告)日：2007-03-29

申请号：US11237484

申请日：2005-09-27

申请人： Ram Lakshmi Narayanan ,  Tat Keung Chan

发明人： Ram Lakshmi Narayanan ,  Tat Keung Chan

IPC分类号： G06F15/173

CPC分类号： H04L63/1408 ,  H04L67/2814 ,  H04L67/2871

摘要： The invention relates to a virtual computing platform for providing subscribers of the virtual computing platform with means for running their applications on the platform instead of running the applications on their mobile devices. The virtual computing platform is adapted to route internal communication directed from a first application of the platform to a second application of the platform via a set of external security appliances. The set may include a firewall, a security gateway, an application layer firewall, a web shield, an anti-virus device and an anti-spam device.

摘要翻译： 本发明涉及一种虚拟计算平台，用于向虚拟计算平台的用户提供在平台上运行其应用的装置，而不是在其移动设备上运行应用。 虚拟计算平台适于将从平台的第一应用引导的内部通信经由一组外部安全设备路由到平台的第二应用。 该集合可以包括防火墙，安全网关，应用层防火墙，网络防火墙，防病毒设备和反垃圾邮件设备。

公开(公告)号：US09646332B2

公开(公告)日：2017-05-09

申请号：US13238850

申请日：2011-09-21

申请人： Jinsong Zheng ,  Tat Keung Chan ,  Liqiang Chen ,  Greg N. Nakanishi ,  Jason A. Pasion ,  Xin Qiu ,  Ting Yao

发明人： Jinsong Zheng ,  Tat Keung Chan ,  Liqiang Chen ,  Greg N. Nakanishi ,  Jason A. Pasion ,  Xin Qiu ,  Ting Yao

IPC分类号： G06F21/00 ,  G06Q30/06

CPC分类号： G06F21/105 ,  G06Q30/06 ,  G06Q2220/18

摘要： Disclosed is a manufacturing process and feature licensing system for provisioning personalized (device-unique) licenses to devices. The secure system uses a secure key wrapping mechanism to deliver the LSK to LPS. Another feature is that various network communication links are secured using standard security protocol. Application messages, license templates, licenses are digitally signed. The system is flexible, configured to allow multiple manufacturers and to allow various feature configurations via the use of License Template; scalable, as it is possible to use multiple LPS hosts to serve multiple programming stations; and available in that the delegation of license signing capability from CLS to LPS eliminates the dependency on unreliable Internet connections. Redundant LPS hosts provide high level of availability required for high volume license provisioning. The system is traceable: license and device association are replicated back to the CLS to provide full license request and generation traceability.

公开(公告)号：US09178869B2

公开(公告)日：2015-11-03

申请号：US13080301

申请日：2011-04-05

申请人： Madjid F. Nakhjiri ,  Tat Keung Chan

发明人： Madjid F. Nakhjiri ,  Tat Keung Chan

IPC分类号： G06F15/173 ,  H04L29/06

CPC分类号： H04L63/0823

摘要： A method and apparatus are provided for locating network resources over a communication network. The method includes receiving a digital certificate identifying a first entity and extracting information from at least one predetermined field of the digital certificate. The extracted information is used as input to a location generation function to create a resource locator (e.g., a URL). The network resource is contacted over the communication network in accordance with a communication protocol using the resource locator to obtain requested information concerning the first entity.

摘要翻译： 提供了一种用于通过通信网络定位网络资源的方法和装置。 该方法包括接收标识第一实体的数字证书，并从数字证书的至少一个预定字段提取信息。 所提取的信息被用作位置生成功能的输入以创建资源定位符（例如，URL）。 根据使用资源定位器的通信协议，通过通信网络联系网络资源，以获得关于第一实体的请求信息。