公开(公告)号：US20110145570A1

公开(公告)日：2011-06-16

申请号：US11587076

申请日：2005-04-21

申请人： Carmi David Gressel ,  Gabried Vago ,  Ran Granot ,  Mika Weinstein-Lustig ,  Uzi Apple ,  Herve Amsili ,  Timothy James Salmon ,  Avi Hecht ,  Tomer Kanza ,  Anat Vago ,  Mordechay Hadad ,  Amir Ingher

发明人： Carmi David Gressel ,  Gabried Vago ,  Ran Granot ,  Mika Weinstein-Lustig ,  Uzi Apple ,  Herve Amsili ,  Timothy James Salmon ,  Avi Hecht ,  Tomer Kanza ,  Anat Vago ,  Mordechay Hadad ,  Amir Ingher

IPC分类号： H04L9/00

CPC分类号： H04L63/0421 ,  H04L63/0823 ,  H04L63/102

摘要： An arrangement, system, and methods for creating and distributing authenticated personal information for users of network services and participants in social surveys, and in chat rooms and other forums. A trusted organization verifies that personal information presented by a user is correct, and authenticates the information in an encapsulated form as “certified profiles” within a smart card or other secure portable hardware device issued to the user Certified profiles are authenticated by digital signatures of the trusted organization and the profile users. Personal information in certified profiles can be in raw and/or in statistically-processed and abstracted form, and can be tailored by the user for specific needs to include whatever personal information is required, and to exclude all other personal information. By the use of unique aliases, it is possible for users to anonymously access restricted network sites and participate in surveys, while still satisfying recipients that supplied personal information is accurate, and for surveys that the user has not responded to the same survey more than once. Users enroll for certified profiles via trusted enrollment vendors who market the service to the public and also make hardware and software available to users for managing, maintaining, and distributing the certified profiles.

摘要翻译： 用于为网络服务用户和社会调查参与者以及聊天室和其他论坛创建和分发经过身份验证的个人信息的安排，系统和方法。 受信任的组织验证由用户呈现的个人信息是正确的，并且以封装形式将信息认证为智能卡或发给用户的其他安全便携式硬件设备中的“认证简档”。认证配置文件由数字签名认证 受信任的组织和个人资料用户。 认证资料中的个人信息可以是原始和/或统计处理和抽象的形式，并且可以由用户根据具体需要进行调整，以包括所需的任何个人信息，并排除所有其他个人信息。 通过使用独特的别名，用户可以匿名访问受限网站并参与调查，同时仍然满足提供个人信息的收件人是准确的，并且对于用户尚未响应相同调查的调查，不止一次 。 用户通过信任的注册供应商注册认证的个人资料，他们向公众提供服务，并为用户提供管理，维护和分发认证个人资料的硬件和软件。

公开(公告)号：US07827223B2

公开(公告)日：2010-11-02

申请号：US11578909

申请日：2005-04-21

申请人： Carmi David Gressel ,  Michael Slobodkin ,  Ran Granot ,  Roy Krotman ,  Yehonatan Bick ,  Mark Fiterman ,  Gabriel Vago ,  Amir Ingher ,  Uzi Apple

发明人： Carmi David Gressel ,  Michael Slobodkin ,  Ran Granot ,  Roy Krotman ,  Yehonatan Bick ,  Mark Fiterman ,  Gabriel Vago ,  Amir Ingher ,  Uzi Apple

IPC分类号： G06F7/58 ,  H04L9/00

CPC分类号： G06F7/582 ,  G06F7/584 ,  H04L9/0668 ,  H04L9/12 ,  H04L2209/046 ,  H04L2209/125

摘要： Systems and methods are disclosed, especially designed for very compact hardware implementations, to generate random number strings with a high level of entropy at maximum speed. For immediate deployment of software implementations, certain permutations have been introduced to maintain the same level of unpredictability which is more amenable to hi-level software programming, with a small time loss on hardware execution; typically when hardware devices communicate with software implementations. Particular attention has been paid to maintain maximum correlation immunity, and to maximize non-linearity of the output sequence. Good stream ciphers are based on random generators which have a large number of secured internal binary variables, which lead to the page synchronized stream ciphering. The method for parsed page synchronization which is presented is especially valuable for Internet applications, where occasionally frame sequences are often mixed. The large number of internal variables with fast diffusion of individual bits wherein the masked message is fed back into the machine variables is potentially ideal for message authentication procedures.

摘要翻译： 公开了特别设计用于非常紧凑的硬件实现的系统和方法，以最大速度产生具有高水平熵的随机数字串。 为了立即部署软件实现，已经引入了某些排列以保持相同级别的不可预测性，这更适合于高级软件编程，硬件执行时间较短; 通常当硬件设备与软件实现通信时。 已经特别注意保持最大相关免疫力，并使输出序列的非线性最大化。 良好的流密码基于具有大量安全内部二进制变量的随机生成器，这导致页面同步流加密。 所呈现的用于解析页面同步的方法对于互联网应用是特别有价值的，其中偶尔帧序列通常是混合的。 具有快速扩散的单个位的大量内部变量，其中掩蔽的消息被反馈到机器变量中对于消息认证过程是潜在的理想的。

公开(公告)号：US20070283145A1

公开(公告)日：2007-12-06

申请号：US11578929

申请日：2007-07-24

申请人： Carmi Gressel ,  Gabriel Vago ,  Ran Granot ,  Torner Kanza ,  Uzi Apple ,  Avi Hecht

发明人： Carmi Gressel ,  Gabriel Vago ,  Ran Granot ,  Torner Kanza ,  Uzi Apple ,  Avi Hecht

IPC分类号： G08B29/00 ,  H04L9/32

CPC分类号： G11C7/24 ,  G06F21/35 ,  G06Q20/341 ,  G06Q20/346 ,  G06Q20/40145 ,  G07C9/00039 ,  G07F7/1008

摘要： A system for multi-factor security involving multiple secure devices that distribute the secured functions of the system over the different devices, such that the loss or theft of any one of them does not compromise the overall security of the system. Moreover, a configuration of devices is also secure even if one of them has been attacked by malicious software agents, such as “keyboard sniffers”. A novel contactless smart card reader (200) is presented that incorporates a transceiver antenna (220) within a keypad (210) of a device used with contactless smart cards (100). When the card (100) is pressed against the device's keypad (210), the transceiver (220) of the device establishes a session with the smart card (100). A variety of systems are presented, including those using mobile telephones, computer-interfaced card readers, personal digital appliances, and television set-top box remote controllers.

摘要翻译： 一种涉及多个安全设备的多因素安全系统，它们通过不同的设备分发系统的安全功能，使得任何一个安全设备的丢失或被盗都不会损害系统的整体安全性。 此外，即使其中一个已经被恶意软件代理（例如“键盘嗅探器”）攻击，设备的配置也是安全的。 提出了一种新颖的非接触式智能卡读取器（200），其在与非接触式智能卡（100）一起使用的设备的键盘（210）内并入收发器天线（220）。 当卡（100）被按压在设备的键盘（210）上时，设备的收发器（220）与智能卡（100）建立会话。 提出了各种系统，包括使用移动电话，计算机接口读卡器，个人数字设备和电视机顶盒遥控器的系统。

公开(公告)号：US20070244951A1

公开(公告)日：2007-10-18

申请号：US11578909

申请日：2007-02-21

申请人： Carmi Gressel ,  Michael Slobodkin ,  Ran Granot ,  Roy Krotman ,  Yehonatan Bick ,  Mark Fiterman ,  Gabriel Vago ,  Amir Ingheer ,  Uzi Apple

发明人： Carmi Gressel ,  Michael Slobodkin ,  Ran Granot ,  Roy Krotman ,  Yehonatan Bick ,  Mark Fiterman ,  Gabriel Vago ,  Amir Ingheer ,  Uzi Apple

IPC分类号： G06F7/58

CPC分类号： G06F7/582 ,  G06F7/584 ,  H04L9/0668 ,  H04L9/12 ,  H04L2209/046 ,  H04L2209/125

摘要： Systems and methods are disclosed, especially designed for very compact hardware implementations, to generate random number strings with a high level of entropy at maximum speed. For immediate deployment of software implementations, certain permutations have been introduced to maintain the same level of unpredictability which is more amenable to hi-level software programming, with a small time loss on hardware execution; typically when hardware devices communicate with software implementations. Particular attention has been paid to maintain maximum correlation immunity, and to maximize non-linearity of the output sequence. Good stream ciphers are based on random generators which have a large number of secured internal binary variables, which lead to the page synchronized stream ciphering. The method for parsed page synchronization which is presented is especially valuable for Internet applications, where occasionally frame sequences are often mixed. The large number of internal variables with fast diffusion of individual bits wherein the masked message is fed back into the machine variables is potentially ideal for message authentication procedures.

摘要翻译： 公开了特别设计用于非常紧凑的硬件实现的系统和方法，以最大速度产生具有高水平熵的随机数字串。 为了立即部署软件实现，已经引入了某些排列以保持相同级别的不可预测性，这更适合于高级软件编程，硬件执行时间较短; 通常当硬件设备与软件实现通信时。 已经特别注意保持最大相关免疫力，并使输出序列的非线性最大化。 良好的流密码基于具有大量安全内部二进制变量的随机生成器，这导致页面同步流加密。 所呈现的用于解析页面同步的方法对于互联网应用是特别有价值的，其中偶尔帧序列通常是混合的。 具有快速扩散的单个位的大量内部变量，其中掩蔽的消息被反馈到机器变量中对于消息认证过程是潜在的理想的。