PERSONAL SECURITY MANAGER FOR UBIQUITOUS PATIENT MONITORING
    41.
    发明申请
    PERSONAL SECURITY MANAGER FOR UBIQUITOUS PATIENT MONITORING 有权
    个人安全管理人员,负责监护病人

    公开(公告)号:US20110145894A1

    公开(公告)日:2011-06-16

    申请号:US12995677

    申请日:2009-06-10

    IPC分类号: G06F21/00 H04L29/06

    摘要: The present invention relates to a system and corresponding method for a secure end-to-end patient healthcare system which includes wireless medical sensors adapted to be attached to a patient's body and in communication with each other forming a body sensor network within a wireless medical sensor network including one or more body sensor networks; λ-secure keying means incorporated into each wireless medical sensor for enabling secure communications between the wireless medical sensors, and a personal security manager within the body sensor network and in communication with the wireless medical sensors within the body sensor network, the personal security manager providing secure communications with backend services and providing security relationships within the body sensor network by means of the λ-secure keying means, wherein the λ-secure keying means are such that a coalition of no more than λ compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical sensors and provides protection against node compromise until λ+1 wireless medical sensors have been compromised.

    摘要翻译: 本发明涉及一种用于安全的端到端患者保健系统的系统和相应的方法,其包括适于附接到患者身体并彼此通信的无线医疗传感器,其形成无线医疗传感器内的身体传感器网络 网络包括一个或多个身体传感器网络; 结合到每个无线医疗传感器中的λ-安全键控装置,用于实现无线医疗传感器之间的安全通信,以及身体传感器网络内的个人安全管理器,并且与身体传感器网络内的无线医疗传感器通信,个人安全管理器提供 与后端服务的安全通信,并通过λ-安全键控装置在身体传感器网络内提供安全关系,其中λ-安全键控装置使得不超过λ个受损的无线医疗传感器的联盟在两个 任何两个不妥协的无线医疗传感器,并提供对节点损害的保护,直到λ+ 1无线医疗传感器已经受到损害。

    NETWORK AND METHOD FOR ESTABLISHING A SECURE NETWORK
    42.
    发明申请
    NETWORK AND METHOD FOR ESTABLISHING A SECURE NETWORK 审中-公开
    建立安全网络的网络和方法

    公开(公告)号:US20110119489A1

    公开(公告)日:2011-05-19

    申请号:US12674953

    申请日:2008-09-04

    IPC分类号: H04L9/32

    摘要: The invention relates to a network with a first node (102) comprising first pre-distributed keying material being assigned to the first node before the first node is connected to the network and a second node (104) comprising second pre-distributed keying material being assigned to the second node before the second node is connected to the network. The first node is configured to establish a secure communication (112) to the second node based on the first and second pre-distributed keying materials, without relying on a trust center (108). Pre-distributed keying materials can be replaced in a secure manner with post-deployed keying materials by the network trust center. Nodes can establish further secure communications based on post-deployed keying materials.

    摘要翻译: 本发明涉及具有第一节点(102)的网络,第一节点(102)包括在第一节点连接到网络之前被分配给第一节点的第一预分布密钥材料,以及包括第二预分布密钥材料的第二节点(104) 在第二节点连接到网络之前分配给第二节点。 第一节点被配置为基于第一和第二预分布密钥材料建立到第二节点的安全通信(112),而不依赖于信任中心(108)。 预分配的密钥材料可以通过网络信任中心的后处理密钥材料安全地替换。 节点可以基于后期部署的密钥材料建立进一步的安全通信。

    METHOD FOR DISTRIBUTED IDENTIFICATION, A STATION IN A NETWORK
    43.
    发明申请
    METHOD FOR DISTRIBUTED IDENTIFICATION, A STATION IN A NETWORK 有权
    分布式识别方法,网络中的一个站点

    公开(公告)号:US20110029778A1

    公开(公告)日:2011-02-03

    申请号:US12936534

    申请日:2009-04-10

    IPC分类号: H04W12/04 H04B7/00 H04W12/06

    摘要: The present invention relates to a method for identifying and/or, authenticating, and/or authorizing a first radio station in a radio network, comprising the steps of (a) at the first radio station, transmitting to a second radio station a first radio station identifier computed from a set of identity parameters based on the identity of the first radio station, comprising at least one identity parameter, (b) at the first radio station, transmitting at least one identity parameter from the set of identity parameters, (c) at the second radio station, comparing an authentication identifier computed on the basis of the transmitted identity parameter to the first radio station identifier for enabling a subsequent communication between the first and second radio stations.

    摘要翻译: 本发明涉及一种用于在无线电网络中识别和/或认证和/或授权第一无线电台的方法,包括以下步骤:(a)在第一无线电台,向第二无线电台发送第一无线电 (c)基于第一无线电站的身份从一组身份参数计算的站标识符,包括至少一个身份参数,(b)在第一无线电台从所述一组身份参数中传送至少一个身份参数,(c ),将根据所发送的身份参数计算出的认证标识与第一无线电台标识符进行比较,以便能够进行第一和第二无线电台之间的后续通信。

    WIRELESS SENSOR NETWORK KEY DISTRIBUTION
    44.
    发明申请
    WIRELESS SENSOR NETWORK KEY DISTRIBUTION 有权
    无线传感器网络密钥分发

    公开(公告)号:US20100082988A1

    公开(公告)日:2010-04-01

    申请号:US12594610

    申请日:2008-03-28

    IPC分类号: H04L9/32 H04L9/06 G06F12/14

    摘要: When installing and maintaining a wireless sensor network in a medical or factory environment, distribution of keying material to sensor nodes (18) is performed by a key material box (KMB) (12), such as a smartcard or the like. The KMB (12) has a random seed stored to it during manufacture, and upon activation performs an authentication protocol with a sensor node (18) to be updated or installed. The KMB (12) receives node identification information, which is used in conjunction with the random seed to generate keying material for the node (18). The KMB (12) then encrypts the keying material for transmission to the node (18), and transmits over a wired or wireless communication link in a secure manner. The node (18) sends an acknowledgement message back the KMB (12), which then updates the nodes status in look-up tables stored in the KMB (12).

    摘要翻译: 当在医疗或工厂环境中安装和维护无线传感器网络时,密钥材料向传感器节点(18)的分配由密钥材料盒(KMB)(诸如智能卡等)执行。 KMB(12)在制造期间存储有随机种子,并且在激活时执行与更新或安装的传感器节点(18)的认证协议。 KMB(12)接收与随机种子一起使用以生成节点(18)的密钥材料的节点识别信息。 KMB(12)然后加密密钥资料以传输到节点(18),并通过有线或无线通信链路以安全的方式进行传输。 节点(18)向KMB(12)发送确认消息,KMB(12)然后更新存储在KMB(12)中的查找表中的节点状态。

    FALL DETECTION AND/OR PREVENTION SYSTEMS
    45.
    发明申请
    FALL DETECTION AND/OR PREVENTION SYSTEMS 有权
    落地检测和/或预防系统

    公开(公告)号:US20110230791A1

    公开(公告)日:2011-09-22

    申请号:US13059484

    申请日:2009-08-20

    IPC分类号: A61B5/11

    摘要: There is provided a fall detection and/or prevention system, comprising one or more sensors for detecting characteristics of movement of a user of the fall detection and/or prevention system and for generating corresponding signals; processing means for analyzing the signals from the one or more sensors using a fall detection algorithm to determine if a fall has taken place or is likely to take place; wherein the processing means is further adapted to update said fall detection algorithm based on the result of the analysis of the signals and an indication whether a fall has actually taken place from the user or a third party.

    摘要翻译: 提供了一种跌倒检测和/或防止系统,包括一个或多个传感器,用于检测跌倒检测和/或防止系统的用户的移动特性并产生相应的信号; 处理装置,用于使用跌落检测算法分析来自所述一个或多个传感器的信号,以确定是否发生了跌倒或可能发生; 其中所述处理装置进一步适于基于所述信号分析的结果来更新所述跌倒检测算法,以及用户或第三方是否实际发生了跌倒的指示。

    NETWORK AND METHOD FOR INITIALIZING A TRUST CENTER LINK KEY
    47.
    发明申请
    NETWORK AND METHOD FOR INITIALIZING A TRUST CENTER LINK KEY 审中-公开
    用于初始化信任中心链路的网络和方法

    公开(公告)号:US20100183152A1

    公开(公告)日:2010-07-22

    申请号:US12666835

    申请日:2008-06-26

    IPC分类号: H04W12/04 H04L9/08

    摘要: The invention relates in general to a network and to a method for initializing a trust center link key. According to an embodiment of the invention, a network is provided with a new node (106) comprising node specific cryptographic keying material, wherein the new node is configured to specify an cryptographic key based on the node specific cryptographic keying material, a first node (102) requiring the cryptographic key for a network security initialization and means (108) for providing a missing cryptographic key to the first node from a storage different to the new node, wherein the missing cryptographic key is equal to the cryptographic key.

    摘要翻译: 本发明一般涉及网络和用于初始化信任中心链路密钥的方法。 根据本发明的实施例,网络具有包括节点特定密码密钥材料的新节点(106),其中新节点被配置为基于节点特定密码密钥材料来指定密码密钥,第一节点 102),其要求用于网络安全初始化的加密密钥,以及用于从与新节点不同的存储器向第一节点提供丢失密码密钥的装置(108),其中缺少的密码密钥等于密码密钥。

    Deterministic Key Pre-Distribution and Operational Key Management for Mobile Body Sensor Networks
    48.
    发明申请
    Deterministic Key Pre-Distribution and Operational Key Management for Mobile Body Sensor Networks 有权
    移动体传感器网络的确定性密钥预分配和操作密钥管理

    公开(公告)号:US20090167535A1

    公开(公告)日:2009-07-02

    申请号:US11916764

    申请日:2006-05-31

    IPC分类号: G08B23/00

    摘要: A wireless network (2, 150) for monitoring a patient includes a body sensor network (22, 24, 26, 172, 174, 176) that includes one or more wireless sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) operatively connected to the patient that collect and transfer information related to the patient's health to the wireless network (2, 150). A set-up server (4, 154) configures the one or more wireless sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) with keying material before the one or more sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) are deployed to the wireless network (2, 150). A base station (178, 180) distributes a key certificate to the one or more sensors (6, 8, 10, 12, 14, 16, 18, 20, 156, 158, 160, 162, 164, 166, 168, 170) associated with the body sensor network (22, 24, 26, 172, 174, 176), such that two sensors generate a unique pairwise key based at least in part upon the pre-distributed keying material and the key certificate distributed by the base station (178, 180).

    摘要翻译: 用于监测患者的无线网络(2,150)包括身体传感器网络(22,24,26,172,174,176),其包括一个或多个无线传感器(6,8,10,12,14,16,17) 18,20,156,158,160,162,164,166,168,170),其可操作地连接到所述患者,所述患者收集和传送与所述患者健康有关的信息到所述无线网络(2,150)。 设置服务器(4,154)配置一个或多个无线传感器(6,8,10,12,14,16,18,20,156,158,160,162,164,166,168,170) 在一个或多个传感器(6,8,10,12,14,16,18,20,156,158,160,162,164,166,168,170)之前的密钥材料被部署到无线网络(2 ,150)。 基站(178,180)将密钥证书分配给一个或多个传感器(6,8,10,12,14,16,18,20,156,158,160,162,164,166,168,170) ),使得两个传感器至少部分地基于预分布的密钥材料和由基础分发的密钥证书生成独特的成对密钥(22,24,172,174,176) 车站(178,180)。

    System And Methods For Efficient Authentication Of Medical Wireless Ad Hoc Network Nodes
    49.
    发明申请
    System And Methods For Efficient Authentication Of Medical Wireless Ad Hoc Network Nodes 有权
    医疗无线网络节点高效认证的系统和方法

    公开(公告)号:US20070214357A1

    公开(公告)日:2007-09-13

    申请号:US11570134

    申请日:2005-06-07

    IPC分类号: H04L9/00

    摘要: A medical ad hoc wireless network (10) is deployed in a healthcare medical facility surrounding individual patients and including wireless nodes (A, B, . . . , Z). Before deployment, each node (A, B, . . . , Z) is pre-initialized with a public key certificate (22) and offers a trust and symmetric key distribution service (32). In joining the ad hoc network (10), a node (B) authenticates and registers to one randomly self-chosen node (A) by using certified public keys (20). Such node (A) becomes Trusted Portal (TPA) of the node (B). The node (B) dynamically registers to a new self-chosen TP node when its old TP node leaves the ad hoc network (10). The network (10) supports symmetric key authentication between nodes registered to the same TP node. Additionally, it supports symmetric key authentication between nodes registered to different TP nodes.

    摘要翻译: 医疗自组织无线网络(10)部署在围绕个体患者并且包括无线节点(A,B,...,Z))的医疗保健医疗设施中。 在部署之前,每个节点(A,B,...,Z)都用公钥证书(22)预初始化,并提供信任和对称密钥分发服务(32)。 在加入自组织网络(10)中,节点(B)通过使用认证的公钥(20)来认证并向一个随机自选节点(A)注册。 这样的节点(A)成为节点(B)的可信门户(TP A )。 当节点(B)的旧TP节点离开自组织网络(10)时,动态地向新的自选TP节点注册。 网络(10)支持对同一TP节点注册的节点之间的对称密钥认证。 另外,它支持注册到不同TP节点的节点之间的对称密钥认证。