公开(公告)号：US07756932B2

公开(公告)日：2010-07-13

申请号：US11192116

申请日：2005-07-29

申请人： Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

发明人： Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

IPC分类号： G06F15/16

CPC分类号： H04L63/102 ,  H04L51/00 ,  H04L51/14 ,  H04L51/38 ,  H04L63/0823

摘要： A system and method for processing messages being composed by a user of a computing device (e.g. a mobile device). Embodiments are described in which the performance of certain tasks is initiated before a direction is received from a user to send a message being composed by the user. This may involve, for example, “pre-fetching” security-related data that will be required in order to send a message that is in the process of being composed by the user securely. Such data may include security policy data, certificate data, and/or certificate status data, for example.

摘要翻译： 一种用于处理由计算设备（例如，移动设备）的用户组成的消息的系统和方法。 描述了在从用户接收到发送由用户正在组成的消息的方向之前启动某些任务的性能的实施例。 这可能涉及例如“预取”与安全相关的数据，这是为了发送正在由用户安全地组成的消息所需要的。 这样的数据可以包括例如安全策略数据，证书数据和/或证书状态数据。

公开(公告)号：US20100082976A1

公开(公告)日：2010-04-01

申请号：US12632217

申请日：2009-12-07

申请人： Michael S. Brown ,  Michael K. Brown ,  Herbert A. Little ,  Neil P. Adams ,  Michael G. Kirkup

发明人： Michael S. Brown ,  Michael K. Brown ,  Herbert A. Little ,  Neil P. Adams ,  Michael G. Kirkup

IPC分类号： H04L29/00 ,  H04L29/06 ,  H04L9/00 ,  H04L9/32 ,  H04L9/30 ,  G06F17/30

CPC分类号： H04L9/3265 ,  H04L61/1523 ,  H04L63/0823 ,  H04L2209/80 ,  H04W12/04

摘要： A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one embodiment, a certificate synchronization application is programmed to perform certificate searches by querying one or more certificate servers for all certificate authority (CA) certificates and cross-certificates on the certificate servers. In another embodiment, all certificates related to an identified certificate are retrieved from the certificate servers automatically by the certificate synchronization application, where the related certificates comprise at least one of one or more CA certificates and one or more cross-certificates. Embodiments of the invention facilitate at least partial automation of the downloading and establishment of certificate chains, thereby minimizing the need for users to manually search for individual certificates.

摘要翻译： 用于搜索和检索证书的系统和方法，其可以用于编码消息的处理。 在一个实施例中，证书同步应用程序被编程为通过在一个或多个证书服务器上查询证书服务器上的所有证书颁发机构（CA）证书和交叉证书来执行证书搜索。 在另一个实施例中，证书同步应用程序自动从证书服务器检索与所识别的证书相关的所有证书，其中相关证书包括一个或多个CA证书和一个或多个交叉证书中的至少一个。 本发明的实施例促进了证书链的下载和建立的至少部分自动化，从而最小化对用户手动搜索单个证书的需要。

公开(公告)号：US07653696B2

公开(公告)日：2010-01-26

申请号：US11192115

申请日：2005-07-29

申请人： Michael K. Brown ,  Michael G. Kirkup ,  Michael S. Brown

发明人： Michael K. Brown ,  Michael G. Kirkup ,  Michael S. Brown

IPC分类号： G06F15/16

CPC分类号： H04W12/10 ,  H04L51/28 ,  H04L63/123 ,  H04L63/126 ,  H04L63/168

摘要： A method and apparatus for processing digitally signed messages in which address mismatch errors are detected. In at least one aspect, the number of address mismatch errors reported to a user for a message may be minimized for messages that properly incorporate message portions signed by someone other than the sender of the message, as may be the case where the message contains a conversation thread for example, by performing at least one predetermined action for digital signatures corresponding to signed data appearing after a message separator. The message separator may indicate that the message contains data from an older forwarded message or from an older message that has been replied to, for example. The at least one-predetermined action may comprise bypassing verification of address matches for those digital signatures, or verifying address matches for those digital signatures but suppressing user notification of any address mismatch errors, for example.

摘要翻译： 一种用于处理其中检测到地址不匹配错误的数字签名消息的方法和装置。 在至少一个方面中，针对消息的用户报告的地址不匹配错误的数量可以被最小化，以适当地合并由消息的发送者以外的其他人签名的消息部分的消息，如可以是消息包含 例如，通过对与消息分离器之后出现的签名数据相对应的数字签名执行至少一个预定动作。 消息分隔符可以指示该消息包含来自较旧转发消息的数据，或者包含已被回复的旧消息。 所述至少一个预定动作可以包括绕过对那些数字签名的地址匹配的验证，或验证那些数字签名的地址匹配，但抑制用户对任何地址不匹配错误的通知。

公开(公告)号：US07562218B2

公开(公告)日：2009-07-14

申请号：US10919320

申请日：2004-08-17

申请人： Michael G. Kirkup ,  Michael K. Brown ,  Michael S. Brown ,  Neil P. Adams ,  Herbert A. Little

发明人： Michael G. Kirkup ,  Michael K. Brown ,  Michael S. Brown ,  Neil P. Adams ,  Herbert A. Little

IPC分类号： H04L9/00

CPC分类号： G06F21/35 ,  G06F21/34

摘要： Preferred embodiments of the invention relate to a method and device for authenticating a user of a computer and a corresponding system using the method and device. The device is a handheld electronic device having accessible thereto a first authentication code of the user. The handheld electronic device requires a second authentication code for enabling use thereof. In order to authenticate the user to the computer, the handheld electronic device is configured to transmit the first authentication code to the computer over a communication link between the computer and the handheld electronic device.

摘要翻译： 本发明的优选实施例涉及一种用于认证计算机的用户和使用该方法和装置的对应系统的方法和装置。 该设备是可访问用户的第一认证码的手持式电子设备。 手持电子设备需要第二认证码以使其能够使用。 为了将用户认证给计算机，手持电子设备被配置为通过计算机和手持电子设备之间的通信链路将第一认证码发送到计算机。

公开(公告)号：US08375282B2

公开(公告)日：2013-02-12

申请号：US12463878

申请日：2009-05-11

申请人： Michael K. Brown ,  Michael G. Kirkup ,  Michael S. Brown

发明人： Michael K. Brown ,  Michael G. Kirkup ,  Michael S. Brown

IPC分类号： H03M13/09 ,  G09C5/00

CPC分类号： H04L1/0083

摘要： A system for adding a redundancy check to an electronic message to discourage tampering and facilitate identification of altered messages provides a communication device for composing message content, a messaging module with a formatting and encoding layer for encoding the message content with header information in a series of message blocks, and an encryption layer for calculating a redundancy check value and inserting the value in one or more locations within the series of message blocks according a rule defined by a characteristic of the message content or the header information, and encrypting the message for delivery to a recipient. Upon receipt, the recipient communication device decrypts the message, extracts the redundancy check value from the message, and compares a calculated redundancy check value with the extracted redundancy check value to determine if the message had been altered before receipt.

公开(公告)号：US20130013919A1

公开(公告)日：2013-01-10

申请号：US13614755

申请日：2012-09-13

申请人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

发明人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

IPC分类号： G06F21/00

CPC分类号： H04L51/38 ,  H04L9/3263 ,  H04L63/0823 ,  H04L2209/80 ,  H04W4/02 ,  H04W4/12 ,  H04W12/06

摘要： A system and method for processing certificates located in a certificate search. Certificates located in a certificate search are processed at a data server (e.g. a mobile data server) coupled to a computing device (e.g. a mobile device) to determine status data that can be used to indicate the status of those certificates to a user of the computing device. Selected certificates may be downloaded to the computing device for storage, and the downloaded certificates are tracked by the data server. This facilitates the automatic updating of the status of one or more certificates stored on the computing device by the data server, in which updated status data is pushed from the data server to the computing device.

摘要翻译： 用于处理位于证书搜索中的证书的系统和方法。 位于证书搜索中的证书在耦合到计算设备（例如，移动设备）的数据服务器（例如移动数据服务器）处理，以确定可用于向用户指示这些证书的状态的状态数据 计算设备。 选定的证书可以下载到计算设备进行存储，并且下载的证书由数据服务器跟踪。 这有助于数据服务器自动更新存储在计算设备上的一个或多个证书的状态，其中将更新的状态数据从数据服务器推送到计算设备。

公开(公告)号：US20130013918A1

公开(公告)日：2013-01-10

申请号：US13614574

申请日：2012-09-13

申请人： Michael S. Brown ,  Michael K. Brown ,  Neil P. Adams ,  Michael G. Kirkup ,  Herbert A. Little

发明人： Michael S. Brown ,  Michael K. Brown ,  Neil P. Adams ,  Michael G. Kirkup ,  Herbert A. Little

IPC分类号： H04L29/06

CPC分类号： H04L63/0428 ,  H04L9/3247 ,  H04L9/3263 ,  H04L63/0823 ,  H04L63/12 ,  H04L2209/80

摘要： A system and method for retrieving certificates and/or verifying the revocation status of certificates. In one embodiment, when a user opens a digitally signed message, a certificate that is required to verify the digital signature on the message may be automatically retrieved if it is not stored on the user's computing device (e.g. a mobile device), eliminating the need for users to initiate the task manually. Verification of the digital signature may also be automatically performed by the application after the certificate is retrieved. Verification of the revocation status of a certificate may also be automatically performed if it is determined that the time that has elapsed since the status was last updated exceeds a pre-specified limit.

公开(公告)号：US20130007445A1

公开(公告)日：2013-01-03

申请号：US13614824

申请日：2012-09-13

申请人： Michael S. Brown ,  Michael K. Brown ,  Neil P. Adams ,  Michael G. Kirkup ,  Herbert A. Little

发明人： Michael S. Brown ,  Michael K. Brown ,  Neil P. Adams ,  Michael G. Kirkup ,  Herbert A. Little

IPC分类号： H04L29/06

CPC分类号： H04L63/0428 ,  H04L9/3247 ,  H04L9/3263 ,  H04L63/0823 ,  H04L63/12 ,  H04L2209/80

摘要： A system and method for retrieving certificates and/or verifying the revocation status of certificates. In one embodiment, when a user opens a digitally signed message, a certificate that is required to verify the digital signature on the message may be automatically retrieved if it is not stored on the user's computing device (e.g. a mobile device), eliminating the need for users to initiate the task manually. Verification of the digital signature may also be automatically performed by the application after the certificate is retrieved. Verification of the revocation status of a certificate may also be automatically performed if it is determined that the time that has elapsed since the status was last updated exceeds a pre-specified limit.

摘要翻译： 用于检索证书和/或验证证书的撤销状态的系统和方法。 在一个实施例中，当用户打开数字签名的消息时，如果消息中没有存储在用户的计算设备（例如，移动设备）上，则可以自动检索需要验证消息上的数字签名的证书，从而消除了需要 为用户手动启动任务。 检索证书后，应用程序也可以自动执行数字签名的验证。 如果确定自上次更新状态以来已经过去的时间超过预定限制，则也可以自动执行证书的撤销状态的验证。

公开(公告)号：US08291216B2

公开(公告)日：2012-10-16

申请号：US11455180

申请日：2006-06-19

申请人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

发明人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

IPC分类号： G06F21/00

CPC分类号： H04L51/38 ,  H04L9/3263 ,  H04L63/0823 ,  H04L2209/80 ,  H04W4/02 ,  H04W4/12 ,  H04W12/06

摘要： A system and method for processing certificates located in a certificate search. Certificates located in a certificate search are processed at a data server (e.g. a mobile data server) coupled to a computing device (e.g. a mobile device) to determine status data that can be used to indicate the status of those certificates to a user of the computing device. Selected certificates may be downloaded to the computing device for storage, and the downloaded certificates are tracked by the data server. This facilitates the automatic updating of the status of one or more certificates stored on the computing device by the data server, in which updated status data is pushed from the data server to the computing device.

摘要翻译： 用于处理位于证书搜索中的证书的系统和方法。 位于证书搜索中的证书在耦合到计算设备（例如，移动设备）的数据服务器（例如移动数据服务器）处理，以确定可用于向用户指示这些证书的状态的状态数据 计算设备。 选定的证书可以下载到计算设备进行存储，并且下载的证书由数据服务器跟踪。 这有助于数据服务器自动更新存储在计算设备上的一个或多个证书的状态，其中将更新的状态数据从数据服务器推送到计算设备。

公开(公告)号：US08291215B2

公开(公告)日：2012-10-16

申请号：US11417108

申请日：2006-05-04

申请人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

发明人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

IPC分类号： G06F21/00

CPC分类号： H04L51/38 ,  H04L9/3263 ,  H04L63/0823 ,  H04L2209/80 ,  H04W4/02 ,  H04W4/12 ,  H04W12/06

摘要： A system and method for processing certificates located in a certificate search. Certificates located in a certificate search are processed at a data server (e.g. a mobile data server) coupled to a computing device (e.g. a mobile device) to determine status data that can be used to indicate the status of those certificates to a user of the computing device, without having to download those certificates to the computing device in their entirety. The data server is further adapted to transmit the status data to the computing device. In one embodiment, at least one status property of the certificates is verified at the data server in determining the status data. In another embodiment, additional certificate data is determined and transmitted to the computing device, which can be used by the computing device to verify, at the computing device, at least one other status property of the certificates.

摘要翻译： 用于处理位于证书搜索中的证书的系统和方法。 位于证书搜索中的证书在耦合到计算设备（例如，移动设备）的数据服务器（例如移动数据服务器）处理，以确定可用于向用户指示这些证书的状态的状态数据 计算设备，而无需将这些证书全部下载到计算设备。 数据服务器还适于将状态数据发送到计算设备。 在一个实施例中，在确定状态数据时，在数据服务器处验证证书的至少一个状态属性。 在另一个实施例中，确定附加证书数据并将其发送到计算设备，计算设备可以由计算设备在计算设备处验证证书的至少一个其他状态属性。