Mobile terminal for sharing resources, method of sharing resources within mobile terminal and method of sharing resources between web server and terminal
    1.
    发明授权
    Mobile terminal for sharing resources, method of sharing resources within mobile terminal and method of sharing resources between web server and terminal 有权
    用于共享资源的移动终端,移动终端内共享资源的方法和Web服务器与终端之间共享资源的方法

    公开(公告)号:US08504832B2

    公开(公告)日:2013-08-06

    申请号:US13189352

    申请日:2011-07-22

    IPC分类号: H04L29/06 H04L9/32

    摘要: Provided are a mobile terminal for sharing resources, a method of sharing resources within a mobile terminal and a method of sharing resources between a web server and a terminal. The mobile terminal for sharing resources includes a web browser using a web standard protocol to display a first random value, an authentication number, and a Distinguished Name (DN) of web server transferred from the web server after it has been determined that there is no key information in a cookie; and a resource when the first random value and the DN are received from the web browser, being terminated after storing the first random value and the DN, and when the resource is re-executed and the authentication number is input by a user, verifying the first random value, generating a second random value and a shared key from the first random value and generating a symmetric key using a part of the shared key, wherein the shared key is generated from the second random value based on the symmetric key, and the symmetric key is identical to a symmetric key of the web server generated from a part of the symmetric key, and the web browser and the resources are operated by an execution unit.

    摘要翻译: 提供了用于共享资源的移动终端,在移动终端内共享资源的方法以及在web服务器和终端之间共享资源的方法。 用于共享资源的移动终端包括使用网络标准协议的Web浏览器,以便在确定没有网络服务器之后显示从web服务器传送的web服务器的第一随机值,认证号码和识别名称(DN) cookie中的关键信息; 以及当从web浏览器接收到第一随机值和DN时的资源,在存储第一随机值和DN之后被终止,并且当资源被重新执行并且认证号码被用户输入时,验证 第一随机值,从第一随机值生成第二随机值和共享密钥,并使用共享密钥的一部分生成对称密钥,其中,基于对称密钥从第二随机值生成共享密钥,并且 对称密钥与从对称密钥的一部分生成的Web服务器的对称密钥相同,并且Web浏览器和资源由执行单元操作。

    Key tree construction and key distribution method for hierarchical role-based access control
    2.
    发明授权
    Key tree construction and key distribution method for hierarchical role-based access control 有权
    基于层次化角色访问控制的密钥树构建和密钥分发方法

    公开(公告)号:US08447037B2

    公开(公告)日:2013-05-21

    申请号:US12786811

    申请日:2010-05-25

    CPC分类号: H04L9/0836

    摘要: A key tree construction and key distribution method for hierarchical role-based access control, includes: constructing a key tree including relationships between a hierarchical structure of role groups and data; performing encryption and decryption of data keys and role keys; and generating a key table, in which the data keys required to decrypt encrypted data and the role keys required to decrypt encrypted data keys are stored, with reference to the key tree. Further, the key tree construction and key distribution method for hierarchical role-based access control includes performing management such that a specific role group can obtain a data key by performing decryption based on its own role key by using both the key tree and the key table.

    摘要翻译: 层次化角色访问控制的关键树结构和密钥分配方法,包括:构建一个包括角色组和数据层次结构之间关系的密钥树; 执行数据密钥和角色密钥的加密和解密; 并且生成密钥表,其中参照密钥树存储解密加密数据所需的数据密钥和解密加密数据密钥所需的角色密钥。 此外,层次化的基于角色的访问控制的密钥树构造和密钥分发方法包括执行管理,使得特定角色组可以通过使用密钥树和密钥表两者通过基于其自己的角色密钥执行解密来获得数据密钥 。

    Apparatus and Method for Providing Personal Information Sharing Service Using Signed Callback Url Message
    5.
    发明申请
    Apparatus and Method for Providing Personal Information Sharing Service Using Signed Callback Url Message 审中-公开
    使用签名的回叫网址消息提供个人信息共享服务的装置和方法

    公开(公告)号:US20080301444A1

    公开(公告)日:2008-12-04

    申请号:US12096415

    申请日:2006-12-07

    IPC分类号: H04L9/32

    CPC分类号: H04L63/08 H04L63/126

    摘要: An apparatus and method for providing a service that securely and easily shares personal information using a signed callback uniform resource locator (URL) message in a mobile terminal environment are provided. The mobile terminal providing a personal information sharing service using a signed URL message includes; a personal information sharing service module which receives a message that includes a first callback URL and a personal information sharing request and is signed using a private key of a server, and creates a second callback URL by adding a user response result in response to the personal information sharing request to the first callback URL; and an authentication module which verifies a signature of the message using a public key of the server, and signs the second callback URL using a user private key.

    摘要翻译: 提供了一种用于在移动终端环境中提供使用签名回叫统一资源定位符(URL)消息安全地并且容易地共享个人信息的服务的装置和方法。 使用签名的URL消息提供个人信息共享服务的移动终端包括: 个人信息共享服务模块,其接收包括第一回叫URL和个人信息共享请求的消息,并使用服务器的私钥进行签名,并且通过响应于所述个人来添加用户响应结果来创建第二回调URL 信息共享请求到第一个回调URL; 以及验证模块,其使用所述服务器的公钥来验证所述消息的签名,并且使用用户私钥对所述第二回调URL进行签名。

    Method and System for Transmitting and Receiving User's Personal Information Using Agent
    6.
    发明申请
    Method and System for Transmitting and Receiving User's Personal Information Using Agent 有权
    使用代理发送和接收用户个人信息的方法和系统

    公开(公告)号:US20080294896A1

    公开(公告)日:2008-11-27

    申请号:US12097179

    申请日:2006-12-06

    IPC分类号: H04L9/06

    CPC分类号: G06F21/51 G06F21/6245

    摘要: A method and system for transmitting and receiving user's personal information using an agent are provided. An information management server managing user's personal information provides an agent including user's personal information in response to a user's personal information request message from a client. A client receives the agent and requests user's personal information from the agent. Then, the agent determines whether the client is authorized and provides the user's personal information to the client when it is determined that the client is authorized. Accordingly, the user's personal information is safely managed and transmitted.

    摘要翻译: 提供了一种使用代理发送和接收用户个人信息的方法和系统。 管理用户个人信息的信息管理服务器响应于来自客户端的用户的个人信息请求消息提供包括用户个人信息的代理。 客户端接收代理并从代理请求用户的个人信息。 然后,当确定客户端被授权时,代理确定客户端是否被授权并且向客户端提供用户的个人信息。 因此,用户的个人信息被安全地管理和发送。

    Transactions Certification Method And System To Protect Privacy On Details Of Electronic Transactions
    7.
    发明申请
    Transactions Certification Method And System To Protect Privacy On Details Of Electronic Transactions 审中-公开
    交易认证方法和系统保护电子交易详情

    公开(公告)号:US20080134346A1

    公开(公告)日:2008-06-05

    申请号:US11573175

    申请日:2004-12-13

    IPC分类号: G06F7/04

    摘要: Provided are a transactions certification method and system to protect privacy on details of electronic transactions, the method comprising the operations of: a) receiving and registering client information which is encoded so that a client cannot be identified; b) receiving and storing transactions details of a client including a client transactions identifier encoded by the service provider server; c) after receiving client certification information for client certification, performing client certification by comparing the client information previously registered in the operation a) with the received client certification information; d) receiving a client transactions identifier for searching transactions details of a client when the client certification is performed in the operation c), and determining whether the client transactions identifier and the client transactions identifier previously stored in the operation b) are identical with each other; and c) generating a message corresponding to the transactions details of the client and sending the generated message to the client when it is determined that the client transactions identifiers are identical with each other in the operation d). Accordingly, the transactions details can be managed while protecting privacy on the transactions details of the client.

    摘要翻译: 提供了一种交易认证方法和系统,以保护电子交易细节上的隐私,该方法包括以下操作:a)接收和注册被编码以便客户端不能被识别的客户端信息; b)接收和存储包括由服务提供商服务器编码的客户端交易标识符的客户端的交易细节; c)在收到客户认证信息后,通过比较先前在操作a)中注册的客户信息与接收的客户端认证信息进行客户端认证; d)当在操作c)中执行客户端认证时,接收用于搜索客户端的事务细节的客户端事务标识符,并且确定先前存储在操作b)中的客户端事务标识符和客户端事务标识符是否彼此相同 ; 以及c)当在所述操作d)中确定所述客户端事务标识符彼此相同时,生成与所述客户端的事务细节相对应的消息并将所生成的消息发送到所述客户端。 因此,可以管理交易细节,同时保护客户端的交易细节上的隐私。

    Method and system for transmitting and receiving user's personal information using agent
    9.
    发明授权
    Method and system for transmitting and receiving user's personal information using agent 有权
    使用代理人发送和接收用户个人信息的方法和系统

    公开(公告)号:US08769276B2

    公开(公告)日:2014-07-01

    申请号:US12097179

    申请日:2006-12-06

    IPC分类号: H04L9/32

    CPC分类号: G06F21/51 G06F21/6245

    摘要: A method and system for transmitting and receiving user's personal information using an agent are provided. An information management server managing user's personal information provides an agent including user's personal information in response to a user's personal information request message from a client. A client receives the agent and requests user's personal information from the agent. Then, the agent determines whether the client is authorized and provides the user's personal information to the client when it is determined that the client is authorized. Accordingly, the user's personal information is safely managed and transmitted.

    摘要翻译: 提供了一种使用代理发送和接收用户个人信息的方法和系统。 管理用户个人信息的信息管理服务器响应于来自客户端的用户的个人信息请求消息提供包括用户个人信息的代理。 客户端接收代理并从代理请求用户的个人信息。 然后,当确定客户端被授权时,代理确定客户端是否被授权并且向客户端提供用户的个人信息。 因此,用户的个人信息被安全地管理和发送。

    Apparatus and method for managing identity information
    10.
    发明授权
    Apparatus and method for managing identity information 有权
    用于管理身份信息的装置和方法

    公开(公告)号:US08539594B2

    公开(公告)日:2013-09-17

    申请号:US12612451

    申请日:2009-11-04

    IPC分类号: G06F7/04

    摘要: Provided are an apparatus and method for managing identity information. The apparatus includes a contract detail manager managing details of an identity information sharing contract made between a user and an identity provider (IdP) wanting to provide identity information about the user, and details of an identity information sharing contract made between the user and an identity consumer (IdC) wanting to be provided with the identity information about the user, an IdP selector selecting an IdP capable of providing the identity information about the user based on the details of the sharing contract when a request for the identity information about the user is input from the IdC, and an information provider obtaining information according to the identity information request from the selected IdP, and providing the obtained information to the IdC. The apparatus and method can solve a problem that all of a user's identity information is provided to an IdC according to the user's comprehensive agreement.

    摘要翻译: 提供了一种用于管理身份信息的装置和方法。 该装置包括管理用户与想要提供关于用户的身份信息的身份提供者(IdP)之间进行的身份信息共享合同的细节的合同细节管理者以及在用户和身份之间进行的身份信息共享合同的细节 消费者(IdC)希望被提供有关用户的身份信息,当对请求关于用户的身份信息的请求时,IdP选择器选择能够基于共享契约的细节提供关于用户的身份信息的IdP 来自IdC的输入,以及信息提供者根据来自所选择的IdP的身份信息请求获得信息,并将所获得的信息提供给IdC。 该装置和方法可以解决根据用户的全面协议将用户的身份信息全部提供给IdC的问题。