PERSONAL IDENTIFICATION NUMBER (PIN) GENERATION BETWEEN TWO DEVICES IN A NETWORK
    41.
    发明申请
    PERSONAL IDENTIFICATION NUMBER (PIN) GENERATION BETWEEN TWO DEVICES IN A NETWORK 有权
    网络中的两个设备之间的个人识别号码(PIN)生成

    公开(公告)号:US20100169399A1

    公开(公告)日:2010-07-01

    申请号:US12345010

    申请日:2008-12-29

    IPC分类号: G06F7/58

    摘要: A method of generating a Personal Identification Number (PIN) between a first device and a second device in a network is provided. The method includes securely receiving information of input choices of the second device and random numbers assigned to the input choices at the first device. At the first device, the PIN is generated from the random numbers, and instructions are provided directing an entry of the input choices on the second device. At the second device, the input choices are entered. The second device is operable to generate the PIN from the input choices and the random numbers if the input choices are entered as instructed.

    摘要翻译: 提供了一种在网络中的第一设备和第二设备之间生成个人识别码(PIN)的方法。 该方法包括安全接收第二设备的输入选择信息和分配给第一设备上的输入选择的随机数。 在第一设备处,从随机数生成PIN,并且提供指令,以将输入选择的条目引导到第二设备上。 在第二个设备上输入输入选项。 如果按照指示输入输入选项,则第二设备可操作以从输入选项和随机数生成PIN。

    INTERNET PROTOCOL TELEPHONY SECURITY ARCHITECTURE
    42.
    发明申请
    INTERNET PROTOCOL TELEPHONY SECURITY ARCHITECTURE 有权
    互联网协议电话安全架构

    公开(公告)号:US20090323954A1

    公开(公告)日:2009-12-31

    申请号:US12490124

    申请日:2009-06-23

    IPC分类号: H04L9/08 H04L12/66 H04L9/32

    摘要: A secure Internet Protocol (IP) telephony system, apparatus, and methods are disclosed. Communications over an IP telephony system can be secured by securing communications to and from a Cable Telephony Adapter (CTA). The system can include one or more CTAs, network servers, servers configured as signaling controllers, key distribution centers (KDC), and can include gateways that couple the IP telephony system to a Public Switched Telephone Network (PSTN). Each CTA can be configured as secure hardware and can be configured with multiple encryption keys that are used to communicate signaling or bearer channel communications. The KDC can be configured to periodically distribute symmetric encryption keys to secure communications between devices that have been provisioned to operate in the system and signaling controllers. The secure devices, such as the CTA, can communicate with other secure devices by establishing signaling and bearer channels that are encrypted with session specific symmetric keys derived from a symmetric key distributed by a signaling controller.

    摘要翻译: 公开了一种安全的因特网协议(IP)电话系统,装置和方法。 通过IP电话系统的通信可以通过保护与有线电话适配器(CTA)的通信来保护。 该系统可以包括一个或多个CTA,网络服务器,配置为信令控制器的服务器,密钥分配中心(KDC),并且可以包括将IP电话系统耦合到公共交换电话网络(PSTN)的网关。 每个CTA都可以配置为安全硬件,并且可以配置多个用于通信信令或承载信道通信的加密密钥。 KDC可以被配置为周期性地分配对称加密密钥以保护已经被提供以在系统和信令控制器中操作的设备之间的通信。 诸如CTA之类的安全设备可以通过建立用由信令控制器分配的对称密钥导出的会话专用对称密钥加密的信令和承载信道来与其他安全设备进行通信。

    Method and apparatus for modifying a transport packet stream to provide
concatenated synchronization bytes at interleaver output
    45.
    发明授权
    Method and apparatus for modifying a transport packet stream to provide concatenated synchronization bytes at interleaver output 失效
    用于修改传输分组流以在交织器输出处提供级联同步字节的方法和装置

    公开(公告)号:US5771239A

    公开(公告)日:1998-06-23

    申请号:US560008

    申请日:1995-11-17

    摘要: An MPEG transport packet stream or the like is modified to provide concatenated synchronization bytes at an output of an interleaver receiving the modified packet stream. A conventional sync byte located in a first transport packet is replaced with a first substitute sync byte. A conventional sync byte located in a conventional sync byte position of a second transport packet is deleted. Another byte from the second transport packet is moved to the position of the deleted sync byte to open a desired byte position in the second transport packet. A second substitute sync byte is inserted into the desired byte position. The first and second transport packets and the desired byte position are selected to provide the first and second substitute sync bytes at locations in the modified packet stream where the first substitute sync byte will be concatenated with the second substitute sync byte at the output of the interleaver. The transport packet stream can be further modified to provide concatenated auxiliary bytes at the output of the interleaver.

    摘要翻译: 修改MPEG传输分组流等,以在接收修改的分组流的交织器的输出处提供级联的同步字节。 位于第一传输分组中的常规同步字节被替换为第一替代同步字节。 位于第二传输分组的常规同步字节位置的常规同步字节被删除。 来自第二传输分组的另一个字节被移动到删除的同步字节的位置,以在第二传输分组中打开所需的字节位置。 将第二个替代同步字节插入到所需的字节位置。 选择第一和第二传输分组和期望的字节位置以在修改分组流中的位置处提供第一和第二替代同步字节,其中第一替代同步字节将与交织器的输出处的第二替代同步字节连接 。 可以进一步修改传输分组流,以在交织器的输出端提供连接的辅助字节。

    Automatic adjustment of receiver apparatus based on
channel-bit-error-rate-affected parameter measurement
    46.
    发明授权
    Automatic adjustment of receiver apparatus based on channel-bit-error-rate-affected parameter measurement 失效
    基于信道比特率影响参数测量自动调整接收机设备

    公开(公告)号:US5463403A

    公开(公告)日:1995-10-31

    申请号:US180574

    申请日:1994-01-12

    摘要: Alignment of an antenna and a polarizer for the antenna are automatically adjusted and the frequency setting of a frequency-tunable receiver is automatically adjusted while receiving a broadcast communication signal that is forward-error-correction coded by processing the forward-error-correction code of the received signal to measure a channel-bit-error-rate-affected parameter for the received signal; by realigning the antenna and the polarizer from their respective initial positions in response to the measured parameter until the measured parameter is minimized; and by retuning the receiver from its initial frequency setting in response to the measured parameter until the measured parameter is minimized. A Viterbi decoder processes the forward-error-correction code of the received signal to compute path metrics affected by the bit-error rate of the received signal and normalizes the computed path metrics; and a counter counts the normalizations over fixed intervals to measure a path metric normalization rate as the measured parameter.

    摘要翻译: 自动调整用于天线的天线和偏振器的对准,并且在接收通过处理前向纠错码的前向纠错编码的广播通信信号的同时自动调整频率可调接收机的频率设置 所接收的信号用于测量接收信号的信道 - 比特误码率影响参数; 通过响应于测量的参数将天线和偏振器从其各自的初始位置重新对准,直到测量的参数最小化; 并且通过响应于测量的参数将接收器从其初始频率设置重新调度,直到所测量的参数被最小化。 维特比解码器处理接收信号的前向纠错码以计算受接收信号的误码率影响的路径度量,并对计算出的路径量度进行归一化; 并且计数器对固定间隔的归一化进行计数,以测量路径度量标准化率作为测量参数。

    Video scrambling by segmenting video information lines
    48.
    发明授权
    Video scrambling by segmenting video information lines 失效
    通过视频信息线分割视频加扰

    公开(公告)号:US4736420A

    公开(公告)日:1988-04-05

    申请号:US909763

    申请日:1986-09-19

    IPC分类号: H04K1/06 H04N7/169 H04N7/167

    CPC分类号: H04N7/1696

    摘要: A system for scrambling a video signal having a plurality of horizontal lines, each of which includes a video information portion and a non-video information portion. The scrambling system includes a memory; means for storing the video information portion of each video signal line in the memory; and means for forming scrambled horizontal lines by retrieving each of a plurality of said stored video information lines in a plurality of segments preceded by a non-video segment and separated by non-video segment(s). The retrieval means include means for varying the respective durations of the retrieved video information segments in individual scrambled horizontal lines in accordance with an encryption keystream; and means for varying the total duration of the non-video segments for individual scrambled horizontal lines in accordance with a predetermined timing pattern. A complementary descrambling system also is disclosed.

    摘要翻译: 一种用于对具有多个水平行的视频信号进行加扰的系统,每个水平行包括视频信息部分和非视频信息部分。 加扰系统包括存储器; 用于将每个视频信号线的视频信息部分存储在存储器中的装置; 以及用于通过在由非视频段前面并由非视频段分隔的多个段中检索多个所述存储的视频信息行中的每一个来形成加扰的水平线的装置。 检索装置包括用于根据加密密钥流改变检索到的各个加扰水平行中的视频信息段的持续时间的装置; 以及用于根据预定定时模式改变针对各个加扰水平线的非视频段的总持续时间的装置。 还公开了补充解扰系统。

    Method and system for registering a DRM client
    49.
    发明授权
    Method and system for registering a DRM client 有权
    用于注册DRM客户端的方法和系统

    公开(公告)号:US09184917B2

    公开(公告)日:2015-11-10

    申请号:US13170261

    申请日:2011-06-28

    IPC分类号: H04L29/06 H04L9/32 G06F21/10

    摘要: A client, method and system for registering a DRM client is disclosed. The method (100) includes the steps of: initiating (110) a registration request via a DRM client with an encrypted registration message including an asymmetric key cryptographic identity, a customer identifier and an application specific information (AINFO) field including a digital signature and a device certificate chain; validating (120) information in the application specific information (AINFO) field by a DRM registration server; and receiving (130) a registration response, the registration response being encrypted and including access information, to obtain content. Advantageously, this method provides an enhanced and reliable means of authentication.

    摘要翻译: 公开了用于注册DRM客户端的客户端,方法和系统。 所述方法(100)包括以下步骤:通过DRM客户端发起(110)注册请求,所述注册请求具有加密的注册消息,所述加密的注册消息包括非对称密钥加密标识,客户标识符和包括数字签名的应用专用信息(AINFO) 设备证书链; 通过DRM注册服务器验证应用程序特定信息(AINFO)字段中的信息(120); 并且接收(130)注册响应,所述注册响应被加密并包括访问信息,以获得内容。 有利地,该方法提供了增强和可靠的认证手段。

    Method and apparatus for delivering certificate revocation lists
    50.
    发明授权
    Method and apparatus for delivering certificate revocation lists 有权
    交付证书吊销清单的方法和装置

    公开(公告)号:US09054879B2

    公开(公告)日:2015-06-09

    申请号:US11455574

    申请日:2006-06-19

    摘要: The present invention discloses an apparatus and method for delivering a revocation list over a one-way broadcast network to receivers with limited memory capabilities. In one example, the revocation list is partitioned to form a first certificate revocation list (CRL) sequence if the number of entries in the revocation list exceeds a predetermined value. Individual identification numbers belonging to a first identification number series are subsequently assigned to partitions of the first CRL sequence. Afterwards, the first CRL sequence is interleaved into a first content transport stream.

    摘要翻译: 本发明公开了一种用于通过单向广播网络将撤销列表递送到具有有限存储能力的接收机的装置和方法。 在一个示例中,如果撤销列表中的条目数超过预定值,则撤销列表被分割以形成第一证书撤销列表(CRL)序列。 属于第一标识号序列的个体标识号随后被分配给第一CRL序列的分区。 之后,第一CRL序列被交织到第一内容传输流中。