公开(公告)号：US09282085B2

公开(公告)日：2016-03-08

申请号：US13332027

申请日：2011-12-20

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L29/06

CPC分类号： H04L63/062 ,  H04L63/061 ,  H04L63/08 ,  H04L63/126

摘要： A method according to preferred embodiment can include receiving a request at a server from a private key module associated with a first user device; directing a request for a first portion of the private key from the server to a second user device; and in response to a successful user challenge creating a first portion of a digital signature and a second portion of a digital signature at the server. The method of the preferred embodiment can further include combining the first portion of the digital signature and the second portion of the digital signature; and delivering the digital signature to the first user device. The method of the preferred embodiment can function to secure the digital signature process by splitting or dividing the user's private key into two or more portions, each of which require independent authorization from the user in order to create the digital signature.

摘要翻译： 根据优选实施例的方法可以包括：从与第一用户设备相关联的私钥模块在服务器处接收请求; 将所述私钥的第一部分的请求从所述服务器引导到第二用户设备; 并且响应于在服务器处创建数字签名的第一部分和数字签名的第二部分的成功的用户挑战。 优选实施例的方法还可以包括组合数字签名的第一部分和数字签名的第二部分; 以及将数字签名传递给第一用户设备。 优选实施例的方法可以通过将用户的私有密钥分割或分割成两个或更多个部分来保护数字签名过程，每个部分需要来自用户的独立授权以便创建数字签名。

公开(公告)号：US20110219230A1

公开(公告)日：2011-09-08

申请号：US13039209

申请日：2011-03-02

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L9/32

CPC分类号： H04L63/0853 ,  G06F21/305 ,  G06F21/31 ,  G06F21/32 ,  H04L9/32 ,  H04L9/321 ,  H04L63/083 ,  H04W12/06 ,  H04W12/08

摘要： A method including registering an authority device for an account on an auth platform; receiving transaction request from an initiator to the auth platform; messaging the authority device with the transaction request; receiving an authority agent response from the authority device to the auth platform; if the authority agent response confirms the transaction, communicating a confirmed transaction to the initiator; and if the authority agent response denies the transaction, communicating a denied transaction to the initiator.

摘要翻译： 一种方法，包括在验证平台上登记帐户的授权装置; 从发起者接收到认证平台的交易请求; 使用事务请求发送权限设备; 从授权设备接收授权代理响应到认证平台; 如果授权代理响应确认交易，则将确认的交易传送给发起者; 并且如果权限代理响应拒绝该事务，则将拒绝的事务传送给发起者。

公开(公告)号：US20060289004A1

公开(公告)日：2006-12-28

申请号：US11157121

申请日：2005-06-20

申请人： Manuel Saez ,  Lachezar Tsvetanov ,  Maximo Heer ,  Matthew Chin ,  Dean Chapman ,  Douglas Song

发明人： Manuel Saez ,  Lachezar Tsvetanov ,  Maximo Heer ,  Matthew Chin ,  Dean Chapman ,  Douglas Song

IPC分类号： A62B18/00 ,  A62B17/04

CPC分类号： A62B17/04 ,  A62B23/02

摘要： The present invention is directed to an air purifying escape hood that protects a user from acute environmental hazards by filtering contaminants and providing breathable air for a time sufficient to escape the hazard. The air purifying escape hood comprises a hood assembly that covers the head of the user and a filter assembly that filters contaminants and provides a flow of purified air to a user. The air purifying escape hood is particularly useful in protecting a user from smoke, allowing the user to safely escape a burning building and is further useful for protection against non-smoke related particulates, chemical and biological contaminants, and radiological/nuclear contaminants.

摘要翻译： 本发明涉及一种空气净化逃生罩，其通过过滤污染物并提供透气空气足以逃避危险而保护使用者免受严重的环境危害。 空气净化逃生罩包括覆盖使用者头部的罩组件和过滤器组件，其过滤污染物并向使用者提供净化空气流。 空气净化逃生罩特别适用于保护使用者免受烟雾影响，使用户能够安全地逃离燃烧的建筑物，并且进一步用于防止与非烟雾相关的微粒，化学和生物污染物以及放射性/核污染物。

公开(公告)号：US09544143B2

公开(公告)日：2017-01-10

申请号：US13039209

申请日：2011-03-02

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L9/32 ,  G06F21/30 ,  H04W12/06 ,  G06F21/31 ,  H04W12/08

CPC分类号： H04L63/0853 ,  G06F21/305 ,  G06F21/31 ,  G06F21/32 ,  H04L9/32 ,  H04L9/321 ,  H04L63/083 ,  H04W12/06 ,  H04W12/08

摘要： A method including registering an authority device for an account on an auth platform; receiving transaction request from an initiator to the auth platform; messaging the authority device with the transaction request; receiving an authority agent response from the authority device to the auth platform; if the authority agent response confirms the transaction, communicating a confirmed transaction to the initiator; and if the authority agent response denies the transaction, communicating a denied transaction to the initiator.

摘要翻译： 一种方法，包括在验证平台上登记帐户的授权装置; 从发起者接收到认证平台的交易请求; 使用事务请求发送权限设备; 从授权设备接收授权代理响应到认证平台; 如果授权代理响应确认交易，则将确认的交易传送给发起者; 并且如果权限代理响应拒绝该事务，则将拒绝的事务传送给发起者。

公开(公告)号：US08892885B2

公开(公告)日：2014-11-18

申请号：US13601431

申请日：2012-08-31

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L29/06 ,  H04L9/32

CPC分类号： H04L63/08 ,  H04L9/32 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/12 ,  H04L63/168

摘要： A system and method for authenticating a user that includes receiving an access-request of a network protocol at a challenge-response server; determining if an access-challenge message is required; delivering an active script component through a parameter of an access-challenge message of the network protocol when an access-challenge is required; receiving a challenge-response of a user; validating the challenge-response; and selectively sending an access-accept response for a valid challenge-response and sending an access-denied response for an invalid challenge-response.

摘要翻译： 一种用于认证用户的系统和方法，包括在询问 - 响应服务器处接收网络协议的接入请求; 确定是否需要访问挑战消息; 当需要访问挑战时，通过网络协议的访问挑战消息的参数递送活动脚本组件; 接收用户的质询 - 响应; 验证挑战响应; 以及选择性地发送用于有效质询 - 响应的访问接受响应，并发送无效质询 - 响应的访问拒绝响应。

公开(公告)号：US08510820B2

公开(公告)日：2013-08-13

申请号：US13310532

申请日：2011-12-02

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L29/06 ,  G06F7/04 ,  G06F15/16 ,  G06F17/30

CPC分类号： H04L63/0853 ,  G06F21/335 ,  H04L63/0272 ,  H04L63/0807

摘要： Various systems and methods of embedded authentication are described herein. One method of the preferred embodiment can include receiving at an authentication server a transaction token from a host website, the host website including an embeddable interface and prompting a user challenge by the authentication server at the embeddable interface. The method of the preferred embodiment can also include creating a signed authentication token in response to a successful user challenge, and transmitting the signed authentication token from the authentication server to the embeddable interface.

摘要翻译： 这里描述了嵌入式认证的各种系统和方法。 优选实施例的一种方法可以包括在认证服务器处接收来自主机网站的交易令牌，所述主机网站包括可嵌入接口，并且在所述可嵌入接口处提示所述认证服务器的用户质询。 优选实施例的方法还可以包括响应于成功的用户质询而创建签名的认证令牌，以及将签名的认证令牌从认证服务器发送到可嵌入接口。

公开(公告)号：US20120198228A1

公开(公告)日：2012-08-02

申请号：US13332027

申请日：2011-12-20

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L29/06

CPC分类号： H04L63/062 ,  H04L63/061 ,  H04L63/08 ,  H04L63/126

摘要： A method according to preferred embodiment can include receiving a request at a server from a private key module associated with a first user device; directing a request for a first portion of the private key from the server to a second user device; and in response to a successful user challenge creating a first portion of a digital signature and a second portion of a digital signature at the server. The method of the preferred embodiment can further include combining the first portion of the digital signature and the second portion of the digital signature; and delivering the digital signature to the first user device. The method of the preferred embodiment can function to secure the digital signature process by splitting or dividing the user's private key into two or more portions, each of which require independent authorization from the user in order to create the digital signature.

摘要翻译： 根据优选实施例的方法可以包括：从与第一用户设备相关联的私钥模块在服务器处接收请求; 将所述私钥的第一部分的请求从所述服务器引导到第二用户设备; 并且响应于在服务器处创建数字签名的第一部分和数字签名的第二部分的成功的用户挑战。 优选实施例的方法还可以包括组合数字签名的第一部分和数字签名的第二部分; 以及将数字签名传递给第一用户设备。 优选实施例的方法可以通过将用户的私有密钥分割或分割成两个或更多个部分来保护数字签名过程，每个部分需要来自用户的独立授权以便创建数字签名。

公开(公告)号：US20130212387A1

公开(公告)日：2013-08-15

申请号：US13601431

申请日：2012-08-31

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： H04L29/06

CPC分类号： H04L63/08 ,  H04L9/32 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/12 ,  H04L63/168

摘要： A system and method for authenticating a user that includes receiving an access-request of a network protocol at a challenge-response server; determining if an access-challenge message is required; delivering an active script component through a parameter of an access-challenge message of the network protocol when an access-challenge is required; receiving a challenge-response of a user; validating the challenge-response; and selectively sending an access-accept response for a valid challenge-response and sending an access-denied response for an invalid challenge-response.

摘要翻译： 一种用于认证用户的系统和方法，包括在询问 - 响应服务器处接收网络协议的接入请求; 确定是否需要访问挑战消息; 当需要访问挑战时，通过网络协议的访问挑战消息的参数递送活动脚本组件; 接收用户的质询 - 响应; 验证挑战响应; 以及选择性地发送用于有效质询 - 响应的访问接受响应，并发送无效质询 - 响应的访问拒绝响应。

公开(公告)号：US20120198535A1

公开(公告)日：2012-08-02

申请号：US13310532

申请日：2011-12-02

申请人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

发明人： Jon Oberheide ,  Douglas Song ,  Adam Goodman

IPC分类号： G06F21/00 ,  H04L9/32

CPC分类号： H04L63/0853 ,  G06F21/335 ,  H04L63/0272 ,  H04L63/0807

摘要： Various systems and methods of embedded authentication are described herein. One method of the preferred embodiment can include receiving at an authentication server a transaction token from a host website, the host website including an embeddable interface and prompting a user challenge by the authentication server at the embeddable interface. The method of the preferred embodiment can also include creating a signed authentication token in response to a successful user challenge, and transmitting the signed authentication token from the authentication server to the embeddable interface.

摘要翻译： 这里描述了嵌入式认证的各种系统和方法。 优选实施例的一种方法可以包括在认证服务器处接收来自主机网站的交易令牌，所述主机网站包括可嵌入接口，并且在所述可嵌入接口处提示所述认证服务器的用户质询。 优选实施例的方法还可以包括响应于成功的用户质询而创建签名的认证令牌，以及将签名的认证令牌从认证服务器发送到可嵌入接口。

公开(公告)号：US20050216956A1

公开(公告)日：2005-09-29

申请号：US10887213

申请日：2004-07-08

申请人： Douglas Orr ,  Thomas Ptacek ,  Douglas Song

发明人： Douglas Orr ,  Thomas Ptacek ,  Douglas Song

IPC分类号： H04L9/00 ,  H04L29/06

CPC分类号： H04L63/0209 ,  H04L63/08 ,  H04L63/1408 ,  H04L63/1441 ,  H04L63/145 ,  H04L63/20

摘要： Technique for protecting a communications network, such a computer network, from attack such as self-propagating code violations of security policies, in which the network is divided into “compartments” that are separated by access control devices such as firewalls. The access control devices are then used to stop the spread of self-propagating attack code, the “zero-day” worms, for example. However, the access control devices are configured such that upon activation legitimate in-use network services will not be jeopardized.

摘要翻译： 用于保护通信网络（诸如计算机网络）的技术免于诸如自蔓延代码违反安全策略的攻击，其中网络被分成由诸如防火墙的访问控制设备分隔的“隔间”。 然后，访问控制设备用于例如停止自传播攻击代码的传播，即“零日”蠕虫。 然而，访问控制设备被配置为使得在激活时将不会危及合法的在用网络服务。