公开(公告)号：US11418318B2

公开(公告)日：2022-08-16

申请号：US11465620

申请日：2006-08-18

申请人： Donald E. Eastlake, III ,  Anthony R. Metke

发明人： Donald E. Eastlake, III ,  Anthony R. Metke

IPC分类号： H04L29/00 ,  H04L9/00 ,  H04L9/40 ,  H04L9/32

摘要： A portable electronic device is operable as a portable certification authority. The portable electronic device stores a pair of keys of a public key infrastructure, issued by a parent certification authority and generates a certificate dependent upon the pair of keys. The private key and corresponding public key certificate are transmitted to a network device of a second agency to allow the device to be authenticated by any node of the network of the first agency that posses anchor information of the parent certification authority. This enables the device of the second agency to be authenticated by a network node of the first agency.

公开(公告)号：US08484461B2

公开(公告)日：2013-07-09

申请号：US12241566

申请日：2008-09-30

申请人： Anthony R. Metke ,  Donald E. Eastlake, III

发明人： Anthony R. Metke ,  Donald E. Eastlake, III

IPC分类号： H04L9/30

CPC分类号： G06F21/33 ,  G06F2221/2145 ,  H04L9/007 ,  H04L9/3265 ,  H04L63/064 ,  H04L63/0823

摘要： A method and apparatus for external organization (EO) path length (EOPL) validation are provided. A relying party node (RPN) stores a current EO path length constraint (EOPLC) value, and an EOPL counter that maintains a count of an actual external organization path length. The RPN obtains a chain of certificates that link a subject node (SN) to its trust anchor, and processes the certificates in the chain. When a certificate has a lower EOPLC than the current EOPLC value, the RPN replaces the current EOPLC value with the lower EOPLC. When the certificate currently being evaluated includes an enabled EO flag, the RPN increments the EOPL counter by one. The EOPL validation fails when the EOPL counter is greater than the current EOPLC value, and is successful when the last remaining certificate in the chain is processed without having the EOPL counter exceed the current EOPLC value.

摘要翻译： 提供了一种用于外部组织（EO）路径长度（EOPL）验证的方法和装置。 依赖方节点（RPN）存储当前EO路径长度约束（EOPLC）值，以及维持实际外部组织路径长度计数的EOPL计数器。 RPN获得将主节点（SN）链接到其信任锚点的证书链，并处理链中的证书。 当证书具有比当前EOPLC值更低的EOPLC时，RPN用较低的EOPLC替换当前的EOPLC值。 当当前正在评估的证书包含启用的EO标志时，RPN将EOPL计数器递增1。 当EOPL计数器大于当前EOPLC值时，EOPL验证失败，并且当链中的最后剩余证书被处理而不使EOPL计数器超过当前EOPLC值时，EOPL验证失败。

公开(公告)号：US08432797B2

公开(公告)日：2013-04-30

申请号：US11877778

申请日：2007-10-24

申请人： Benedito J. Fonseca, Jr. ,  Anthony R. Metke

发明人： Benedito J. Fonseca, Jr. ,  Anthony R. Metke

IPC分类号： H04J1/16 ,  H04J3/14 ,  H04L1/00 ,  H04L12/26

CPC分类号： H04W28/16 ,  H04L47/70 ,  H04L47/805 ,  H04L47/824 ,  H04W84/18

摘要： Techniques are provided for distributed admission control (AC) in a mobile ad hoc network (MANET). When the source node transmits a new communication stream (NCS) toward a destination node, other nodes allow transmission of the NCS during a temporary admission period even though the NCS has not yet been admitted. The nodes can determine whether the NCS causes degradation of any existing communication stream(s) (ECSs) supported by that node based on existing QoS requirements associated with the ECSs. In some implementations, nodes which determine that they are unable to support ECSs transmit an indicator which notifies other nodes that admission of the NCS is denied by that node. By contrast, if none of the nodes transmit an indicator during the temporary admission period, then the NCS is “admitted” to the MANET and the source node is permitted to keep transmitting the NCS, a variation thereof or another new communication stream.

摘要翻译： 为移动自组织网络（MANET）中的分布式准入控制（AC）提供技术。 当源节点向目的地节点发送新的通信流（NCS）时，即使NCS尚未被允许，其他节点允许在临时准入期间传送NCS。 节点可以基于与ECS相关联的现有QoS要求来确定NCS是否导致由该节点支持的任何现有通信流（ECS）的降级。 在一些实现中，确定它们不能支持ECS的节点传送通知其他节点的指示符，该节点拒绝接纳NCS。 相比之下，如果在临时准入期间没有节点发送指示符，则NCS被“允许”到MANET，并且源节点被允许继续发送NCS，其变体或另一新的通信流。

公开(公告)号：US08270947B2

公开(公告)日：2012-09-18

申请号：US11311959

申请日：2005-12-19

申请人： Anthony R. Metke ,  Bob D. LoGalbo

发明人： Anthony R. Metke ,  Bob D. LoGalbo

IPC分类号： H04M1/66

CPC分类号： H04W12/06 ,  H04W12/08 ,  H04W84/12 ,  H04W84/18

摘要： Providing a supplicant access to at least one requested service is described. An authentication request is received, wherein the authentication request comprises an association request and an identifier to a requested service. A relationship between the supplicant and the requested service based on the association request is created. Then, the association request for the requested service is fulfilled and an authentication server based upon the requested service identified in the authentication request is determined. Finally, the supplicant is authenticated for the requested service.

摘要翻译： 描述对至少一个所请求的服务的请求者访问。 接收认证请求，其中所述认证请求包括关联请求和对所请求服务的标识符。 创建基于关联请求的请求者与请求的服务之间的关系。 然后，满足对所请求服务的关联请求，并且确定基于认证请求中标识的请求服务的认证服务器。 最后，请求者对所请求的服务进行身份验证。

公开(公告)号：US07983158B2

公开(公告)日：2011-07-19

申请号：US11291433

申请日：2005-11-30

申请人： Liang Guo ,  Whay C. Lee ,  Anthony R. Metke ,  Deepak Bansal

发明人： Liang Guo ,  Whay C. Lee ,  Anthony R. Metke ,  Deepak Bansal

IPC分类号： G01R31/08 ,  G06F11/00 ,  G08C15/00 ,  H04J1/16 ,  H04J3/14 ,  H04L1/00 ,  H04L12/26 ,  H04L12/28 ,  H04L12/56

CPC分类号： H04L41/0896 ,  H04L45/04 ,  H04L45/125 ,  H04L45/42 ,  H04L47/15 ,  H04L47/2433 ,  H04L47/70 ,  H04L47/746 ,  H04L47/762 ,  H04L47/782 ,  H04L47/822 ,  H04L47/829

摘要： A system for facilitating bandwidth management in a routing domain is presented. In the system, area bandwidth managers are coupled to a domain bandwidth manager and arranged in accordance with an Open Shortest Path First (OSPF) hierarchical routing topology with the domain bandwidth manager at an upper level of the topology. Each area bandwidth manager is located in a different area of the routing topology in at least one lower level of the topology. The domain bandwidth manager and the area bandwidth managers cooperatively coordinate admission control to a routing domain for facilitating a communication session between a source device and a destination device.

摘要翻译： 提出了一种促进路由域中带宽管理的系统。 在系统中，区域带宽管理器被耦合到域带宽管理器，并且根据开放最短路径优先（OSPF）分层路由拓扑结构来布置，其中域带宽管理器位于拓扑的上层。 每个区域带宽管理器位于拓扑的至少一个较低级别中的路由拓扑的不同区域中。 域带宽管理器和区域带宽管理器协调地将接纳控制协调到路由域，以促进源设备和目的地设备之间的通信会话。

公开(公告)号：US07876706B2

公开(公告)日：2011-01-25

申请号：US11363757

申请日：2006-02-28

申请人： Randy L. Ekl ,  Mark J. Johnson ,  Anthony R. Metke ,  Aparna Pandey ,  Joseph E. Phillips ,  Christopher G. Ware

发明人： Randy L. Ekl ,  Mark J. Johnson ,  Anthony R. Metke ,  Aparna Pandey ,  Joseph E. Phillips ,  Christopher G. Ware

IPC分类号： H04L12/28

CPC分类号： H04W84/20 ,  H04L45/48 ,  H04W40/24

摘要： Techniques are provided for selecting a root node in an ad hoc network comprising a plurality of nodes including a first node. According to one implementation of these techniques, a first node can receive a message from at least one of the other nodes. Each message includes a number of primary factors associated with a particular node regarding capabilities of the particular node. The primary factors associated with each node can then be evaluated, and an attempt can be made to select the root node based on the primary factors associated with each node. If the first node is unable to select the root node based on the primary factors associated with each node, then the root node can be selected based on secondary factors associated with each node.

摘要翻译： 提供技术用于在自组织网络中选择包括第一节点的多个节点在其中的根节点。 根据这些技术的一个实施方式，第一节点可以从其他节点中的至少一个接收消息。 每个消息包括与特定节点相关联的关于特定节点的能力的多个主要因素。 然后可以评估与每个节点相关联的主要因素，并且可以基于与每个节点相关联的主要因素来尝试选择根节点。 如果第一节点不能根据与每个节点相关联的主要因素来选择根节点，则可以基于与每个节点相关联的次要因素来选择根节点。

公开(公告)号：US20100115266A1

公开(公告)日：2010-05-06

申请号：US12262761

申请日：2008-10-31

申请人： Liang GUO ,  Whay Chiou Lee ,  Anthony R. Metke

发明人： Liang GUO ,  Whay Chiou Lee ,  Anthony R. Metke

IPC分类号： H04L9/06

CPC分类号： H04L9/3268 ,  H04L9/006 ,  H04L9/0891 ,  H04L9/321

摘要： A method and device are useful for enabling a trust relationship using an unexpired public key infrastructure (PKI) certificate, where a current status of the PKI certificate is unavailable. The method includes determining at a relying party that a certificate status update for the PKI certificate is unavailable (step 905). Next, in response to the certificate status update being unavailable, a tolerable certificate status age (TCSA) for the PKI certificate is determined at the relying party based on one or more attributes associated with a certificate holder of the PKI certificate (step 910). Using the PKI certificate, a trust relationship is enabled between the relying party and the certificate holder after determining the TCSA and before an expiration of the TCSA (step 915).

摘要翻译： 方法和设备对于使用未到期的公钥基础设施（PKI）证书启用信任关系是有用的，其中PKI证书的当前状态不可用。 该方法包括在依赖方确定PKI证书的证书状态更新不可用（步骤905）。 接下来，响应于证书状态更新不可用，基于与PKI证书的证书持有者相关联的一个或多个属性，在依赖方确定PKI证书的可容忍证书状态年龄（TCSA）（步骤910）。 使用PKI证书，在确定TCSA之后和TCSA到期之前，依赖方和证书持有者之间启用信任关系（步骤915）。

公开(公告)号：US20100082975A1

公开(公告)日：2010-04-01

申请号：US12241566

申请日：2008-09-30

申请人： Anthony R. Metke ,  Donald E. Eastlake, III

发明人： Anthony R. Metke ,  Donald E. Eastlake, III

IPC分类号： H04L9/00

CPC分类号： G06F21/33 ,  G06F2221/2145 ,  H04L9/007 ,  H04L9/3265 ,  H04L63/064 ,  H04L63/0823

摘要： A method and apparatus for external organization (EO) path length (EOPL) validation are provided. A relying party node (RPN) stores a current EO path length constraint (EOPLC) value, and an EOPL counter that maintains a count of an actual external organization path length. The RPN obtains a chain of certificates that link a subject node (SN) to its trust anchor, and processes the certificates in the chain. When a certificate has a lower EOPLC than the current EOPLC value, the RPN replaces the current EOPLC value with the lower EOPLC. When the certificate currently being evaluated includes an enabled EO flag, the RPN increments the EOPL counter by one. The EOPL validation fails when the EOPL counter is greater than the current EOPLC value, and is successful when the last remaining certificate in the chain is processed without having the EOPL counter exceed the current EOPLC value.

摘要翻译： 提供了一种用于外部组织（EO）路径长度（EOPL）验证的方法和装置。 依赖方节点（RPN）存储当前EO路径长度约束（EOPLC）值，以及维持实际外部组织路径长度计数的EOPL计数器。 RPN获得将主节点（SN）链接到其信任锚点的证书链，并处理链中的证书。 当证书具有比当前EOPLC值更低的EOPLC时，RPN用较低的EOPLC替换当前的EOPLC值。 当当前正在评估的证书包含启用的EO标志时，RPN将EOPL计数器递增1。 当EOPL计数器大于当前EOPLC值时，EOPL验证失败，并且在链中的最后剩余证书被处理而不使EOPL计数器超过当前EOPLC值时，EOPL验证失败。

公开(公告)号：US07562148B2

公开(公告)日：2009-07-14

申请号：US11018301

申请日：2004-12-21

申请人： Anthony R. Metke ,  Robert D. LoGalbo ,  Aparna Pandey

发明人： Anthony R. Metke ,  Robert D. LoGalbo ,  Aparna Pandey

IPC分类号： G06F15/16

CPC分类号： H04L61/1511 ,  H04L29/12018 ,  H04L29/12066 ,  H04L61/10

摘要： Distributed DNS in a wireless communication network comprising broadcasting by a first node a request message to a second node is disclosed. The request message comprises a hostname of the second node. The first node forwards the request message to the second node through intermediate nodes in the wireless communication network and the second node transmits a response message to the first node. The response message comprises a MAC address of the second node.

摘要翻译： 公开了一种在无线通信网络中的分布式DNS，包括由第一节点广播向第二节点的请求消息。 请求消息包括第二节点的主机名。 第一节点通过无线通信网络中的中间节点将请求消息转发到第二节点，而第二节点向第一节点发送响应消息。 响应消息包括第二节点的MAC地址。

公开(公告)号：US20080314681A1

公开(公告)日：2008-12-25

申请号：US11767610

申请日：2007-06-25

申请人： Hemang F. Patel ,  Anthony R. Metke

发明人： Hemang F. Patel ,  Anthony R. Metke

IPC分类号： G08B1/08

CPC分类号： A62B3/00 ,  A62B99/00 ,  A62C99/0081 ,  G01S5/02 ,  G08B7/066

摘要： A method of providing situational awareness at an incident scene. Sensor data can be received from at least one sensor (104, 106, 108) located at the incident scene and position data can be received for at least one resource (306, 308, 310, 312). Based on the received data, at least one optimal exit route (318) at the incident scene can be calculated. The present invention also relates to a system (118) that provides situational awareness at an incident scene. The system can include a communications adapter (204) that receives sensor data from at least one sensor located at the incident scene and position data for at least one resource located at the incident scene, and a processor (202) that calculates at least one optimal exit route for the resource to exit a location at the incident scene based on the received sensor data and position data.

摘要翻译： 在事件现场提供情境意识的方法。 可以从位于入射场景的至少一个传感器（104,106,108）接收传感器数据，并且可以为至少一个资源（306,308,310,312）接收位置数据。 基于接收的数据，可以计算入射场景下的至少一个最优退出路线（318）。 本发明还涉及一种在事件现场提供情境感知的系统（118）。 该系统可以包括：通信适配器（204），其从位于事件场景处的至少一个传感器接收传感器数据，以及位于位于事件场景处的至少一个资源的位置数据;以及处理器（202），其计算至少一个最优 基于所接收的传感器数据和位置数据，资源的出口路线离开事件场景的位置。