公开(公告)号：US20070038704A1

公开(公告)日：2007-02-15

申请号：US11192116

申请日：2005-07-29

申请人： Michael Brown ,  Michael Brown ,  Michael Kirkup

发明人： Michael Brown ,  Michael Brown ,  Michael Kirkup

IPC分类号： G06F15/16

CPC分类号： H04L63/102 ,  H04L51/00 ,  H04L51/14 ,  H04L51/38 ,  H04L63/0823

摘要： A system and method for processing messages being composed by a user of a computing device (e.g. a mobile device). Embodiments are described in which the performance of certain tasks is initiated before a direction is received from a user to send a message being composed by the user. This may involve, for example, “pre-fetching” security-related data that will be required in order to send a message that is in the process of being composed by the user securely. Such data may include security policy data, certificate data, and/or certificate status data, for example.

摘要翻译： 一种用于处理由计算设备（例如，移动设备）的用户组成的消息的系统和方法。 描述了在从用户接收到发送由用户正在组成的消息的方向之前启动某些任务的性能的实施例。 这可能涉及例如“预取”与安全相关的数据，这是为了发送正在由用户安全地组成的消息所需要的。 这样的数据可以包括例如安全策略数据，证书数据和/或证书状态数据。

公开(公告)号：US20060123313A1

公开(公告)日：2006-06-08

申请号：US11059676

申请日：2005-02-17

申请人： Michael Brown ,  Michael Kirkup ,  Michael Brown

发明人： Michael Brown ,  Michael Kirkup ,  Michael Brown

IPC分类号： H03M13/00

CPC分类号： H04L1/0083

摘要： A system for adding a redundancy check to an electronic message to discourage tampering and facilitate identification of altered messages provides a communication device for composing message content, a messaging module with a formatting and encoding layer for encoding the message content with header information in a series of message blocks, and an encryption layer for calculating a redundancy check value and inserting the value in one or more locations within the series of message blocks according a rule defined by a characteristic of the message content or the header information, and encrypting the message for delivery to a recipient. Upon receipt, the recipient communication device decrypts the message, extracts the redundancy check value from the message, and compares a calculated redundancy check value with the extracted redundancy check value to determine if the message had been altered before receipt.

公开(公告)号：US20050246538A1

公开(公告)日：2005-11-03

申请号：US10836807

申请日：2004-04-30

申请人： Michael Brown ,  Michael Brown ,  Michael Kirkup

发明人： Michael Brown ,  Michael Brown ,  Michael Kirkup

IPC分类号： H04L9/00 ,  H04L29/06

CPC分类号： H04L63/04

摘要： A method and system for providing e-mail messages to a receiving e-mail application. The e-mail messages as sent from a sending e-mail application being secure and in opaque signed format. The opaque signed e-mail messages being converted to clear signed e-mail messages by decoding extracting message content and digital signatures. The clear signed e-mails being sent to a receiving e-mail application.

摘要翻译： 一种用于向接收电子邮件应用提供电子邮件消息的方法和系统。 从发送电子邮件应用程序发送的电子邮件是安全的，采用不透明的签名格式。 通过解码提取消息内容和数字签名，将不透明的电子邮件消息转换为清除签名的电子邮件消息。 明确签署的电子邮件被发送到接收电子邮件应用程序。

公开(公告)号：US20070263872A1

公开(公告)日：2007-11-15

申请号：US11432418

申请日：2006-05-12

申请人： Michael Kirkup ,  Michael Brown ,  Michael Brown

发明人： Michael Kirkup ,  Michael Brown ,  Michael Brown

IPC分类号： H04K1/00

CPC分类号： H04L9/0861 ,  H04L9/0844 ,  H04L63/061 ,  H04L63/18 ,  H04L2209/80 ,  H04W12/04 ,  H04W76/10 ,  H04W84/18

摘要： Embodiments of a system and method for providing additional security for data being transmitted across a wireless connection that has been established using a known wireless protocol (e.g. Bluetooth) are described. An encryption key is exchanged between a computing device (e.g. a mobile device) and a wireless peripheral device (e.g. a keyboard, a printer). In exemplary embodiments, the encryption key is generated at one of the two devices. Data associated with the encryption key is output at the one device, which can be input by the user at the other device. The encryption key is then recovered at the other device from the input, thereby completing the key exchange. The encryption key can then be used to encrypt and decrypt data transmitted over the established wireless connection, providing additional security.

摘要翻译： 描述了用于为已经使用已知的无线协议（例如，蓝牙）建立的无线连接传输的数据提供附加安全性的系统和方法的实施例。 在计算设备（例如移动设备）和无线外围设备（例如，键盘，打印机）之间交换加密密钥。 在示例性实施例中，在两个设备之一上生成加密密钥。 与加密密钥相关联的数据在一个设备处输出，其可由用户在另一设备处输入。 然后，加密密钥从输入端在另一个设备处恢复，从而完成密钥交换。 加密密钥然后可用于加密和解密通过建立的无线连接传输的数据，提供额外的安全性。

公开(公告)号：US20070194132A1

公开(公告)日：2007-08-23

申请号：US11677938

申请日：2007-02-22

申请人： Michael Brown ,  Michael Brown ,  Michael Kirkup

发明人： Michael Brown ,  Michael Brown ,  Michael Kirkup

IPC分类号： G06K19/06 ,  G06K7/08 ,  G06K7/00

CPC分类号： G06K19/0723 ,  G06K19/07741

摘要： A portable adaptor for using a smart card of a first configuration with a smart card reader of a second configuration. For instance, the adaptor may enable use of a contactless smart card with a contact smart card reader, or vice versa. The adaptor is provided with a casing that is configured to engage a contact smart card or a contactless smart card, and where intended for use with a contact smart card reader is provided with an exterior portion that physically cooperates via a contact pad with a contact smart card reader. The adaptor is provided with an interface passing signals between a smart card of a first configuration and a smart card reader, of a second configuration. For instance, an interface for passing signals between a contact smart card and a contactless smart card reader or vice versa.

摘要翻译： 一种用于使用具有第二配置的智能卡阅读器的具有第一配置的智能卡的便携式适配器。 例如，适配器可以使得能够使用具有联系智能卡读取器的非接触式智能卡，反之亦然。 适配器设置有壳体，其被配置为接合接触式智能卡或非接触式智能卡，并且在与接触式智能卡读卡器一起使用的情况下，设置有经由接触垫与接触智能物理协作的外部部分 读卡器。 该适配器具有在第二配置的第一配置的智能卡和智能卡读卡器之间传递信号的接口。 例如，用于在联系智能卡和非接触式智能卡阅读器之间传递信号的接口，反之亦然。

公开(公告)号：US20060277592A1

公开(公告)日：2006-12-07

申请号：US11261701

申请日：2005-10-31

申请人： Michael Brown ,  Michael Brown ,  Michael Kirkup

发明人： Michael Brown ,  Michael Brown ,  Michael Kirkup

IPC分类号： H04L9/00

CPC分类号： H04L9/3263 ,  H04L51/00 ,  H04L51/14 ,  H04L51/38 ,  H04L63/0428 ,  H04L63/102 ,  H04L63/20 ,  H04L2209/80

摘要： A system and method for determining a security encoding to be applied to a message being sent by a user of a computing device, such as a mobile device, for example. In one broad aspect, the method comprises the steps of identifying a message to be sent to at least one recipient; determining, at the computing device, whether a general message encoding configuration setting thereon is set to a value that indicates that the security encoding to be applied to the identified message is to be established by a policy engine; where the general message encoding configuration setting on the computing device is set to a value that indicates that the security encoding to be applied to the identified message is to be established by the policy engine, determining the security encoding to be applied to the identified message by querying the policy engine for the security encoding to be applied to the identified message; applying the determined security encoding to the identified message; and transmitting the identified message to which the security encoding has been applied to the at least one recipient. In one embodiment, the policy engine is a PGP Universal Server.

公开(公告)号：US20070143612A1

公开(公告)日：2007-06-21

申请号：US11304611

申请日：2005-12-16

申请人： Michael Brown ,  Herbert Little ,  David MacFarlane ,  Michael Brown

发明人： Michael Brown ,  Herbert Little ,  David MacFarlane ,  Michael Brown

IPC分类号： H04L9/00

CPC分类号： H04L9/083 ,  H04L2209/80

摘要： A system and method for generating keys that can be used for encrypting and decrypting PIN messages transmitted between mobile devices. In one embodiment, the method comprises defining a function f, where f(x,y)=f(y,x), and for each of first and second mobile devices, evaluating f with one of x and y having the value of the PIN of the respective mobile device. Each one of the first and second mobile devices can then compute a shared messaging key by evaluating f with the other of x and y having the value of the PIN of the other mobile device. The shared key can then be used specifically to encrypt and decrypt PIN messages transmitted between those two mobile devices.

摘要翻译： 一种用于产生可用于加密和解密在移动设备之间传输的PIN消息的密钥的系统和方法。 在一个实施例中，该方法包括定义函数f，其中f（x，y）= f（y，x），并且对于第一和第二移动设备中的每一个，用x和y中的一个对 相应移动设备的PIN。 第一和第二移动设备中的每一个然后可以通过评估f，而x和y中的另一个具有另一移动设备的PIN的值来计算共享的消息传递密钥。 然后，共享密钥可以专门用于加密和解密在这两个移动设备之间传输的PIN消息。

公开(公告)号：US20050245231A1

公开(公告)日：2005-11-03

申请号：US10835276

申请日：2004-04-30

申请人： Michael Brown ,  Michael Brown ,  Herbert Little

发明人： Michael Brown ,  Michael Brown ,  Herbert Little

IPC分类号： H04L9/00 ,  H04L9/12 ,  H04L9/22 ,  H04L29/06 ,  H04M1/66

CPC分类号： H04L63/0428 ,  H04L9/0662 ,  H04L9/12 ,  H04L2209/80

摘要： A wireless communication system which employs cryptographic functions requiring random data input in a mobile wireless device includes provisions for securely adding randomness to the mobile wireless device. Such added randomness can be securely provided during synchronizing sessions with a device user's base computer via secure wired and/or wireless connections. The new random data can be obtained by software and/or hardware random number generators accessible to the user's base computer and/or from accessible secure external sources (e.g., a secure website source of random data).

摘要翻译： 采用在移动无线设备中需要随机数据输入的加密功能的无线通信系统包括用于安全地向移动无线设备添加随机性的规定。 在通过安全有线和/或无线连接与设备用户的基本计算机同步会话期间，可以安全地提供这种增加的随机性。 新的随机数据可以由用户的基本计算机可访问的软件和/或硬件随机数生成器和/或从可访问的安全外部源（例如，安全的网站的随机数据源）获得。

公开(公告)号：US20070038820A1

公开(公告)日：2007-02-15

申请号：US11202786

申请日：2005-08-11

申请人： Michael Brown ,  Herbert Little ,  Michael Brown

发明人： Michael Brown ,  Herbert Little ,  Michael Brown

IPC分类号： G06F13/28

CPC分类号： G06F21/79 ,  G06F12/0802 ,  G06F12/1408

摘要： Increasing security for a hand-held data processing device with communication functionality where such a device includes an access-ordered memory cache relating to communications carried out by the device. The hand-held data processing device has a locked state that is entered by the device receiving or initiating a trigger. On occurrence of the trigger to enter the locked state the memory cache is reordered so as to disrupt the access-ordering of the cache to obscure device traffic information and thus increase the security of the device in the locked state.

摘要翻译： 提高具有通信功能的手持式数据处理设备的安全性，其中这样的设备包括与由设备执行的通信相关的访问有序的存储器高速缓存。 手持式数据处理装置具有被接收或发起触发的装置输入的锁定状态。 在发生触发器进入锁定状态时，存储器高速缓存被重新排序，以便中断高速缓存的访问排序以模糊设备交通信息，从而增加处于锁定状态的设备的安全性。

公开(公告)号：US20050251680A1

公开(公告)日：2005-11-10

申请号：US11118236

申请日：2005-04-29

申请人： Michael Brown ,  Herbert Little ,  David MacFarlane ,  Michael Brown ,  Dinah Davis

发明人： Michael Brown ,  Herbert Little ,  David MacFarlane ,  Michael Brown ,  Dinah Davis

IPC分类号： H04L9/00 ,  H04L9/30 ,  H04L29/06

CPC分类号： H04L9/08 ,  H04L9/002 ,  H04L9/0841 ,  H04L9/0844 ,  H04L9/3066 ,  H04L9/3215 ,  H04L9/3226 ,  H04L63/061 ,  H04L63/083 ,  H04L63/18 ,  H04L2209/80 ,  H04W12/04 ,  H04W12/06

摘要： A method for secure bidirectional communication between two systems is described. A first key pair and a second key pair are generated, the latter including a second public key that is generated based upon a shared secret. First and second public keys are sent to a second system, and third and fourth public keys are received from the second system. The fourth public key is generated based upon the shared secret. A master key for encrypting messages is calculated based upon a first private key, a second private key, the third public key and the fourth public key. For re-keying, a new second key pair having a new second public key and a new second private key is generated, and a new fourth public key is received. A new master key is calculated using elliptic curve calculations using the new second private key and the new fourth public key.

摘要翻译： 描述了两个系统之间的安全双向通信的方法。 产生第一密钥对和第二密钥对，后者包括基于共享秘密生成的第二公钥。 第一和第二公钥被发送到第二系统，并且从第二系统接收第三和第四公钥。 第四个公钥是基于共享的秘密生成的。 基于第一私钥，第二私钥，第三公钥和第四公钥来计算用于加密消息的主密钥。 为了重新键入，生成具有新的第二公钥和新的第二私钥的新的第二密钥对，并接收新的第四公钥。 使用新的第二私钥和新的第四公钥，使用椭圆曲线计算来计算新的主密钥。