中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

135 records (took 0.026 seconds)

    POLICY-BASED TECHNIQUES FOR MANAGING ACCESS CONTROL
    61.
    发明申请
    POLICY-BASED TECHNIQUES FOR MANAGING ACCESS CONTROL 有权
    用于管理访问控制的基于策略的技术

    公开(公告)号：US20140143826A1

    公开(公告)日：2014-05-22

    申请号：US14085951

    申请日：2013-11-21

    Applicant: Apple Inc.

    Inventor： Christopher B. Sharp ,  Yousuf H. Vaid ,  Li Li ,  Jerrold V. Hauck ,  Arun G. Mathias ,  Xiangying Yang ,  Kevin P. McLaughlin

    IPC: G06F21/60

    CPC classification number: G06F21/604 ,  H04L63/102 ,  H04L63/105 ,  H04L63/20 ,  H04W12/08

    Abstract: A policy-based framework is described. This policy-based framework may be used to specify the privileges for logical entities to perform operations associated with an access-control element (such as an electronic Subscriber Identity Module) located within a secure element in an electronic device. Note that different logical entities may have different privileges for different operations associated with the same or different access-control elements. Moreover, the policy-based framework may specify types of credentials that are used by the logical entities during authentication, so that different types of credentials may be used for different operations and/or by different logical entities. Furthermore, the policy-based framework may specify the security protocols and security levels that are used by the logical entities during authentication, so that different security protocols and security levels may be used for different operations and/or by different logical entities.

    Abstract translation: 描述了基于策略的框架。 该基于策略的框架可以用于指定逻辑实体执行与位于电子设备中的安全元件内的访问控制元素（例如电子订户身份模块）相关联的操作的权限。 注意，对于与相同或不同的访问控制元素相关联的不同操作，不同的逻辑实体可以具有不同的权限。 此外，基于策略的框架可以指定在认证期间由逻辑实体使用的凭证的类型，使得不同类型的凭证可以用于不同的操作和/或由不同的逻辑实体使用。 此外，基于策略的框架可以指定在认证期间由逻辑实体使用的安全协议和安全级别，使得不同的安全协议和安全级别可以用于不同的操作和/或不同的逻辑实体。

    Control channel for UE power saving
    64.
    发明授权
    Control channel for UE power saving 有权

    公开(公告)号：US12150147B2

    公开(公告)日：2024-11-19

    申请号：US18450953

    申请日：2023-08-16

    Applicant: Apple Inc.

    Inventor： Johnson O. Sebeni ,  Yang Li ,  Zhu Ji ,  Yuchul Kim ,  Wei Zeng ,  Dawei Zhang ,  Haijing Hu ,  Xiangying Yang ,  Li Su

    IPC: H04W72/23 ,  H04W52/02 ,  H04W76/28 ,  H04W84/04

    Abstract: A downlink control information (DCI), such as a blanking DCI (bDCI) message may be transmitted by a base station (e.g., eNB) and received by a mobile device (e.g., UE). The bDCI may indicate that the eNB will not transmit a subsequent DCI to the UE for a duration of time. The UE may be in continuous reception mode or connected discontinuous reception (C-DRX) mode. The UE may therefore determine to enter a sleep state or take other action. The bDCI may specify an explicit blanking duration, or an index indicating a blanking duration from a lookup table, and/or the blanking duration (and/or a blanking duration offset value) may be determined in advance, e.g., semi-statically. When the UE is in C-DRX mode, the UE may be configured such that either the sleep/wake period of the C-DRX mode or the blanking period of the bDCI may take precedence over the other.

    Application function key derivation and refresh
    65.
    发明授权
    Application function key derivation and refresh 有权

    公开(公告)号：US12132830B2

    公开(公告)日：2024-10-29

    申请号：US17437798

    申请日：2020-04-03

    Applicant: Apple Inc.

    Inventor： Shu Guo ,  Dawei Zhang ,  Fangli Xu ,  Haijing Hu ,  Huarui Liang ,  Xiangying Yang ,  Yuqin Chen

    IPC: H04L29/06 ,  H04L9/08 ,  H04W12/041

    CPC classification number: H04L9/0861 ,  H04L9/0891 ,  H04W12/041 ,  H04L2209/80

    Abstract: Apparatuses, systems, and methods for application function (AF) key generation and AF key renewal. A user equipment device (UE) may communicate with an application function (AF) via a radio access network (RAN) using a first AF key and determine that the first AF key has expired. The UE may derive a second AF key based on at least an Architecture for Authentication and Key Management for Applications (AKMA) anchor key (KAKMA) and a counter parameter and communicate with the AF via the RAN using the second AF key. At least one of the UE, the AF, and/or an AKMA Anchor Function (AAnF) may be configured to monitor expiration of the first AF key based on an associated lifetime of the first AF key. The first and second AF keys may be derived using a key derivation function that includes at least one variable parameter.

    Mobile device authentication without electronic subscriber identity module (eSIM) credentials
    66.
    发明授权
    Mobile device authentication without electronic subscriber identity module (eSIM) credentials 有权

    公开(公告)号：US12101630B2

    公开(公告)日：2024-09-24

    申请号：US17634950

    申请日：2019-08-18

    Applicant: Apple Inc.

    Inventor： Xiangying Yang ,  Jean-Marc Padova ,  Li Li ,  Shu Guo

    IPC: G06F7/04 ,  H04L9/32 ,  H04W8/20 ,  H04W12/041 ,  H04W12/0431 ,  H04W12/069 ,  H04L9/40

    CPC classification number: H04W12/069 ,  H04L9/3247 ,  H04L9/3263 ,  H04W8/205 ,  H04W12/041 ,  H04W12/0431 ,  H04L63/166 ,  H04L2209/80

    Abstract: This application sets forth techniques for authenticating a mobile device with a cellular wireless network without electronic Subscriber Identity Module (eSIM) credentials by using an Extensible Authentication Protocol Transport Layer Security (EAP-TLS) procedure. The mobile device authenticates with an Authentication Server Function (AUSF) of the cellular wireless network using an embedded Universal Integrated Circuit Card (eUICC) certificate. Processing circuitry of the mobile wireless device external to the eUICC implements the EAP-TLS procedure and authenticates validity of the AUSF. In some embodiments, the eUICC provides key generation and storage for a session key for communication between the mobile device and the cellular wireless network. In some embodiments, a third-party managed Unified Data Management (UDM) broker authenticates the mobile device based on knowledge of the eUICC certificate and provides a session key to the cellular wireless network for subsequent communication with the mobile device, upon successful authentication of the mobile device.

Patent Agency Ranking