中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

32 records (took 0.018 seconds)

    POLICY-BASED TECHNIQUES FOR MANAGING ACCESS CONTROL
    1.
    发明申请
    POLICY-BASED TECHNIQUES FOR MANAGING ACCESS CONTROL 审中-公开
    用于管理访问控制的基于策略的技术

    公开(公告)号：US20160063260A1

    公开(公告)日：2016-03-03

    申请号：US14815391

    申请日：2015-07-31

    Applicant: Apple Inc.

    Inventor： Christopher B. SHARP ,  Yousuf H. VAID ,  Li LI ,  Jerrold Von HAUCK ,  Arun G. MATHIAS ,  Xiangying YANG ,  Kevin P. McLAUGHLIN

    IPC: G06F21/60 ,  H04W12/08 ,  H04L29/06

    CPC classification number: G06F21/604 ,  H04L63/102 ,  H04L63/105 ,  H04L63/20 ,  H04W12/08

    Abstract: A policy-based framework is described. This policy-based framework may be used to specify the privileges for logical entities to perform operations associated with an access-control element (such as an electronic Subscriber Identity Module) located within a secure element in an electronic device. Note that different logical entities may have different privileges for different operations associated with the same or different access-control elements. Moreover, the policy-based framework may specify types of credentials that are used by the logical entities during authentication, so that different types of credentials may be used for different operations and/or by different logical entities. Furthermore, the policy-based framework may specify the security protocols and security levels that are used by the logical entities during authentication, so that different security protocols and security levels may be used for different operations and/or by different logical entities.

    Abstract translation: 描述了基于策略的框架。 该基于策略的框架可以用于指定逻辑实体执行与位于电子设备中的安全元件内的访问控制元素（例如电子订户身份模块）相关联的操作的权限。 注意，对于与相同或不同的访问控制元素相关联的不同操作，不同的逻辑实体可以具有不同的权限。 此外，基于策略的框架可以指定在认证期间由逻辑实体使用的凭证的类型，使得不同类型的凭证可以用于不同的操作和/或由不同的逻辑实体使用。 此外，基于策略的框架可以指定在认证期间由逻辑实体使用的安全协议和安全级别，使得不同的安全协议和安全级别可以用于不同的操作和/或不同的逻辑实体。

    APPARATUS AND METHODS FOR STORING ELECTRONIC ACCESS CLIENTS
    2.
    发明申请
    APPARATUS AND METHODS FOR STORING ELECTRONIC ACCESS CLIENTS 审中-公开
    用于存储电子访问客户的装置和方法

    公开(公告)号：US20150326568A1

    公开(公告)日：2015-11-12

    申请号：US14684273

    申请日：2015-04-10

    Applicant: Apple Inc.

    Inventor： Jerrold Von HAUCK ,  David T. HAGGERTY ,  Kevin McLAUGHLIN

    IPC: H04L29/06 ,  H04W12/06 ,  H04W12/04

    CPC classification number: H04L9/32 ,  H04L9/08 ,  H04L9/12 ,  H04L9/30 ,  H04L63/06 ,  H04L63/0853 ,  H04W12/04 ,  H04W12/06

    Abstract: Apparatus and methods for storing and controlling access control clients. In one embodiment, transmitting and receiving devices ensure that only one copy of an eSIM is active at any time. Specifically, each transferred eSIM is encrypted for the destination device; the eSIM from the source device is deleted, deactivated, or otherwise rendered unusable. Various aspects of network infrastructure are also described, including electronic Universal Integrated Circuit Card (eUICC) appliances, and mobile devices. Various scenarios for transfer of eSIMs are also disclosed.

    Abstract translation: 用于存储和控制访问控制客户端的装置和方法。 在一个实施例中，发送和接收设备确保在任何时间只有一个eSIM的副本被激活。 具体来说，每个转移的eSIM对目的设备进行加密; 来自源设备的eSIM被删除，停用或以其他方式呈现不可用。 还描述了网络基础设施的各个方面，包括电子通用集成电路卡（eUICC）电器和移动设备。 还披露了用于传送eSIM的各种场景。

    METHODS AND APPARATUS FOR STORAGE AND EXECUTION OF ACCESS CONTROL CLIENTS
    3.
    发明申请
    METHODS AND APPARATUS FOR STORAGE AND EXECUTION OF ACCESS CONTROL CLIENTS 有权
    访问控制客户存储和执行的方法和装置

    公开(公告)号：US20150074780A1

    公开(公告)日：2015-03-12

    申请号：US14543773

    申请日：2014-11-17

    Applicant: Apple Inc.

    Inventor： Stephan V. SCHELL ,  Jerrold Von HAUCK

    IPC: H04W12/06 ,  H04L29/06

    CPC classification number: H04W12/06 ,  H04L63/0823 ,  H04W4/50 ,  H04W4/60 ,  H04W8/18 ,  H04W8/205 ,  H04W8/265

    Abstract: Disclosed herein is a technique for securely provisioning access control entities (e.g., electronic Subscriber Identity Module (eSIM) components) to a user equipment (UE) device. In one embodiment, a UE device is assigned a unique key and an endorsement certificate that can be used to provide updates or new eSIMs to the UE device. The UE device can trust eSIM material delivered by an unknown third-party eSIM vendor, based on a secure certificate transmission with the unique key. In another aspect, an operating system (OS) is partitioned into various sandboxes. During operation, the UE device can activate and execute the OS in the sandbox corresponding to a current wireless network. Personalization packages received while connected to the network only apply to that sandbox. Similarly, when loading an eSIM, the OS need only load the list of software necessary for the current run-time environment. Unused software can be subsequently activated.

    Abstract translation: 本文公开了一种用于将访问控制实体（例如，电子订户身份模块（eSIM）组件）安全地提供给用户设备（UE）设备的技术。 在一个实施例中，向UE设备分配唯一密钥和可用于向UE设备提供更新或新eSIM的签注证书。 基于使用唯一密钥的安全证书传输，UE设备可以信任由未知的第三方eSIM供应商提供的eSIM资料。 在另一方面，操作系统（OS）被划分成各种沙盒。 在操作期间，UE设备可以在对应于当前无线网络的沙箱中激活并执行OS。 连接到网络时收到的个性化包仅适用于该沙盒。 同样，当加载eSIM时，操作系统只需加载当前运行时环境所需的软件列表。 未使用的软件可以随后激活。

    VIRTUAL ACCESS MODULE DISTRIBUTION APPARATUS AND METHODS
    4.
    发明申请
    VIRTUAL ACCESS MODULE DISTRIBUTION APPARATUS AND METHODS 审中-公开
    虚拟访问模块分发设备和方法

    公开(公告)号：US20140349705A1

    公开(公告)日：2014-11-27

    申请号：US14288212

    申请日：2014-05-27

    Applicant: Apple Inc.

    Inventor： David T. HAGGERTY ,  Jerrold Von HAUCK ,  Stephan V. SCHELL ,  Arun G. MATHIAS

    IPC: H04W88/06

    CPC classification number: H04W88/06 ,  G06Q30/06 ,  H04L67/34 ,  H04W4/50 ,  H04W8/183

    Abstract: Apparatus and methods for distributing electronic access client modules for use with electronic devices. In one embodiment, the access client modules are virtual subscriber identity modules (VSIMs) that can be downloaded from online services for use with cellular-equipped devices such as smartphones. The online services may include a point of sale (POS) system that sells electronic devices to users. A broker may be used to facilitate the selection of a virtual subscriber identity module. A provisioning service may also be used to provision the selected VSIM.

    Abstract translation: 用于分发用于电子设备的电子访问客户端模块的装置和方法。 在一个实施例中，接入客户端模块是虚拟订户身份模块（VSIM），其可以从在线服务下载，以便与配备蜂窝的设备如智能电话一起使用。 在线服务可以包括向用户销售电子设备的销售点（POS）系统。 可以使用代理来促进对虚拟订户身份模块的选择。 还可以使用供应服务来配置所选择的VSIM。

    SIMULACRUM OF PHYSICAL SECURITY DEVICE AND METHODS
    7.
    发明申请
    SIMULACRUM OF PHYSICAL SECURITY DEVICE AND METHODS 审中-公开
    物理安全装置和方法的模拟

    公开(公告)号：US20160044493A1

    公开(公告)日：2016-02-11

    申请号：US14814484

    申请日：2015-07-30

    Applicant: Apple Inc.

    Inventor： Stephan V. SCHELL ,  Jerrold Von HAUCK

    IPC: H04W8/18 ,  H04W12/06 ,  H04W4/00 ,  H04W8/20

    CPC classification number: H04W8/183 ,  G06F21/34 ,  H04L63/0853 ,  H04L67/34 ,  H04W4/50 ,  H04W4/80 ,  H04W8/205 ,  H04W8/265 ,  H04W12/06

    Abstract: Described herein is a simulacrum security device and methods. In one embodiment, a simulacrum or likeness of a physical security device is provided for use in conjunction with a software emulation of the security device. In one implementation, a “faux SIM card” is provided that does not contain Subscriber Identification Module (SIM) information itself, but instead enables a user to download Electronic SIM (eSIM) information (e.g., from a network or eSIM server) which is loaded into a software emulation of a Universal Integrated Circuit Card (UICC) device. The faux card is printed with an activation code, scan pattern, or other activation or access information. The subscriber purchases the faux card, and enters the activation code into a device; the entered activation code enables the device to log onto a network, and download the appropriate eSIM data. Delivery of eSIM information as enabled by the faux card addresses deficiencies in existing SIM distribution schemes, provides users with an enhanced perception of security, and further addresses various legal requirements.

    Abstract translation: 这里描述的是模拟安全装置和方法。 在一个实施例中，提供物理安全设备的模拟或相似性以与安全设备的软件仿真结合使用。 在一个实现中，提供了不包含用户识别模块（SIM）信息本身的“人造SIM卡”，而是使用户能够下载电子SIM（eSIM）信息（例如，从网络或eSIM服务器） 加载到通用集成电路卡（UICC）设备的软件仿真中。 虚拟卡被打印有激活码，扫描模式或其他激活或访问信息。 用户购买人造卡，并将激活码输入设备; 输入的激活码使设备登录到网络上，并下载相应的eSIM数据。 通过人造卡实现的eSIM信息交付解决了现有SIM分配方案中的缺陷，为用户提供了增强的安全认知，并进一步解决了各种法律要求。

Patent Agency Ranking