公开(公告)号：US10243829B2

公开(公告)日：2019-03-26

申请号：US15309861

申请日：2015-04-17

申请人： China IWNCOMM Co., LTD.

发明人： Jun Cao ,  Qin Li ,  Yuehui Wang ,  Yanan Hu ,  Qi Pan ,  Bianling Zhang

IPC分类号： G06F15/173 ,  H04L12/26 ,  H04L29/06

摘要： A communication protocol testing method, a tested device and a testing platform. The method includes: the tested device and the reference device execute a communication protocol, a message sent and/or received during execution of the communication protocol serving as a first message, and the first message being encapsulated in a data encapsulation format of the communication protocol; the tested device encapsulates a part of data or all the data in the first message and/or known data of the tested device according to a unified data encapsulation format to generate a second message; and the testing platform acquires the second message, parses the acquired second message according to the unified data encapsulation format to obtain a part of data or all the data in the second message, executes testing items, and outputs testing results, thereby completing the test.

公开(公告)号：US09374218B2

公开(公告)日：2016-06-21

申请号：US14408276

申请日：2013-06-09

申请人： China IWNCOMM Co., LTD.

发明人： Zhiyong Li ,  Jun Cao ,  Xiang Yan

IPC分类号： G06F21/00 ,  H04L9/06 ,  G09C1/00 ,  H04L9/16 ,  H04L9/32

CPC分类号： H04L9/0631 ,  G09C1/00 ,  H04L9/065 ,  H04L9/16 ,  H04L9/3263 ,  H04L2209/122

摘要： Disclosed are a method for conducting data encryption and decryption using a symmetric cryptography algorithm and a table look-up device. The method comprises: when it is determined that it is required to use S-boxes to look up a table in a symmetric cryptography algorithm, determining all types of S-boxes to be used; for each type of S-box, determining the total number Ni of the type of S-box, and when Ni is larger than 1, determining that the type of S-box meets a multiplexing condition; and when data encryption and decryption are conducted using the symmetric cryptography algorithm, multiplexing at least one type of S-box which meets the multiplexing condition. The present application can reduce the occupation by the symmetric cryptography algorithm of hardware resources under the condition of comparative shortage of hardware resources.

摘要翻译： 公开了使用对称加密算法和表查找装置进行数据加密和解密的方法。 该方法包括：当确定需要使用S盒来查找对称加密算法中的表时，确定要使用的所有类型的S盒; 对于每种类型的S盒，确定S盒类型的总数Ni，并且当Ni大于1时，确定S盒的类型满足多路复用条件; 并且当使用对称加密算法进行数据加密和解密时，复用满足复用条件的至少一种类型的S盒。 在硬件资源比较短缺的情况下，本应用可以减少硬件资源对称密码算法的占用。

公开(公告)号：US20150128238A1

公开(公告)日：2015-05-07

申请号：US14384445

申请日：2013-03-12

申请人： CHINA IWNCOMM CO., LTD.

发明人： Zhiqiang Du ,  Jun Cao ,  Manxia Tie ,  Yi Li

IPC分类号： H04L29/06

CPC分类号： H04L63/0884 ,  H04L9/321 ,  H04L9/3247 ,  H04L63/0421 ,  H04L63/08 ,  H04L63/0869 ,  H04L2209/42

摘要： The present invention relates to the field of identity authentication. Provided are a method, device, and system for identity authentication, solving the technical problem that existing identity authentication technologies are incapable of protecting personal privacy, and that authentication technologies comprising personal privacy must provide a traceability feature. The method for identity authentication mainly comprises: a first authenticator transmitting to a second authenticator a first identity authentication message; the second authenticator transmitting to an authentication server a second identity authentication message; the authentication server verifying the validity of a secure domain where the second authenticator is at on the basis of the second identity authentication message; the authentication server returning to the second authenticator a third identity authentication message; when the third identity authentication message is received by the second authenticator, same transmitting to the first authenticator a fourth identity authentication message.

摘要翻译： 本发明涉及身份认证领域。 提供用于身份认证的方法，设备和系统，解决现有身份认证技术不能保护个人隐私的技术问题，并且包括个人隐私的认证技术必须提供可追溯性特征。 用于身份认证的方法主要包括：第一认证器向第二认证者发送第一身份认证消息; 所述第二认证器向认证服务器发送第二身份认证消息; 所述认证服务器基于所述第二身份认证消息来验证所述第二认证者所在的安全域的有效性; 所述认证服务器返回到所述第二认证者第三身份认证消息; 当第二身份认证消息被第二认证者接收时，向第一认证者发送第四身份认证消息。

公开(公告)号：US20150172043A1

公开(公告)日：2015-06-18

申请号：US14408276

申请日：2013-06-09

申请人： China IWNCOMM Co., LTD.

发明人： Zhiyong Li ,  Jun Cao ,  Xiang Yan

IPC分类号： H04L9/06 ,  H04L9/16 ,  H04L9/32

CPC分类号： H04L9/0631 ,  G09C1/00 ,  H04L9/065 ,  H04L9/16 ,  H04L9/3263 ,  H04L2209/122

摘要： Disclosed are a method for conducting data encryption and decryption using a symmetric cryptography algorithm and a table look-up device. The method comprises: when it is determined that it is required to use S-boxes to look up a table in a symmetric cryptography algorithm, determining all types of S-boxes to be used; for each type of S-box, determining the total number Ni of the type of S-box, and when Ni is larger than 1, determining that the type of S-box meets a multiplexing condition; and when data encryption and decryption are conducted using the symmetric cryptography algorithm, multiplexing at least one type of S-box which meets the multiplexing condition. The present application can reduce the occupation by the symmetric cryptography algorithm of hardware resources under the condition of comparative shortage of hardware resources.

摘要翻译： 公开了使用对称加密算法和表查找装置进行数据加密和解密的方法。 该方法包括：当确定需要使用S盒来查找对称加密算法中的表时，确定要使用的所有类型的S盒; 对于每种类型的S盒，确定S盒类型的总数Ni，并且当Ni大于1时，确定S盒的类型满足多路复用条件; 并且当使用对称加密算法进行数据加密和解密时，复用满足复用条件的至少一种类型的S盒。 在硬件资源比较短缺的情况下，本应用可以减少硬件资源对称密码算法的占用。

公开(公告)号：US10291614B2

公开(公告)日：2019-05-14

申请号：US14384445

申请日：2013-03-12

申请人： CHINA IWNCOMM CO., LTD.

发明人： Zhiqiang Du ,  Jun Cao ,  Manxia Tie ,  Yi Li

IPC分类号： H04L29/06 ,  H04L9/32

摘要： The present invention relates to the field of identity authentication. Provided are a method, device, and system for identity authentication, solving the technical problem that existing identity authentication technologies are incapable of protecting personal privacy, and that authentication technologies comprising personal privacy must provide a traceability feature. The method for identity authentication mainly comprises: a first authenticator transmitting to a second authenticator a first identity authentication message; the second authenticator transmitting to an authentication server a second identity authentication message; the authentication server verifying the validity of a secure domain where the second authenticator is at on the basis of the second identity authentication message; the authentication server returning to the second authenticator a third identity authentication message; when the third identity authentication message is received by the second authenticator, same transmitting to the first authenticator a fourth identity authentication message.

公开(公告)号：US20170272353A1

公开(公告)日：2017-09-21

申请号：US15309861

申请日：2015-04-17

申请人： China IWNCOMM Co., LTD.

发明人： Jun Cao ,  Qin Li ,  Yuehui Wang ,  Yanan HU ,  Qi Pan ,  Bianling Zhang

IPC分类号： H04L12/26 ,  H04L29/06

CPC分类号： H04L43/50 ,  H04L63/123 ,  H04L63/1433

摘要： A communication protocol testing method, a tested device and a testing platform. The method includes: the tested device and the reference device execute a communication protocol, a message sent and/or received during execution of the communication protocol serving as a first message, and the first message being encapsulated in a data encapsulation format of the communication protocol; the tested device encapsulates a part of data or all the data in the first message and/or known data of the tested device according to a unified data encapsulation format to generate a second message; and the testing platform acquires the second message, parses the acquired second message according to the unified data encapsulation format to obtain a part of data or all the data in the second message, executes testing items, and outputs testing results, thereby completing the test.

公开(公告)号：US09716707B2

公开(公告)日：2017-07-25

申请号：US14384432

申请日：2013-03-12

申请人： CHINA IWNCOMM CO., LTD.

发明人： Zhiqiang Du ,  Jun Cao ,  Manxia Tie ,  Yi Li

IPC分类号： H04L9/32 ,  H04L29/06 ,  G06F21/33 ,  G06F21/41

CPC分类号： H04L63/0815 ,  G06F21/33 ,  G06F21/335 ,  G06F21/41 ,  H04L9/321 ,  H04L9/3213 ,  H04L9/3247 ,  H04L9/3263 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/0807 ,  H04L63/0823 ,  H04L63/0869 ,  H04L63/0876 ,  H04L63/0884

摘要： A method and device device for authentication are provided. The method includes: a second authenticator transmitting to a first authenticator a first identity authentication message; the first authenticator transmitting to an authentication server a second identity authentication message; the authentication server verifying the validity of a secure domain where the second authenticator is at and of the first authenticator on the basis of the second identity authentication message; the authentication server returning to the first authenticator a third identity authentication message; the first authenticator transmitting to the second authenticator a fourth identity authentication message; the second authenticator proceeding to verification when the fourth identity authentication message is received; the second authenticator transmitting to the first authenticator a fifth identity authentication message; and the first authenticator proceeding when the fifth identity authentication message is received.

公开(公告)号：US20150135294A1

公开(公告)日：2015-05-14

申请号：US14384432

申请日：2013-03-12

申请人： CHINA IWNCOMM CO., LTD.

发明人： Zhiqiang Du ,  Jun Cao ,  Manxia Tie ,  Yi Li

IPC分类号： H04L29/06

CPC分类号： H04L63/0815 ,  G06F21/33 ,  G06F21/335 ,  G06F21/41 ,  H04L9/321 ,  H04L9/3213 ,  H04L9/3247 ,  H04L9/3263 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/0807 ,  H04L63/0823 ,  H04L63/0869 ,  H04L63/0876 ,  H04L63/0884

摘要： The present invention relates to the field of identity authentication. Provided are a method, device, and system for authentication, solving the problem that existing identity authentication technologies are incapable of protecting personal privacy, and that authentication technologies comprising personal privacy must provide a traceability feature. The method for identity authentication comprises: a second authenticator transmitting to a first authenticator a first identity authentication message; the first authenticator transmitting to an authentication server a second identity authentication message; the authentication server verifying the validity of a secure domain where the second authenticator is at and of the first authenticator on the basis of the second identity authentication message; the authentication server returning to the first authenticator a third identity authentication message; the first authenticator transmitting to the second authenticator a fourth identity authentication message; the second authenticator proceeding to verification when the fourth identity authentication message is received; the second authenticator transmitting to the first authenticator a fifth identity authentication message; and the first authenticator proceeding when the fifth identity authentication message is received. The authentication system comprises the first authenticator, the second authenticator, the secure domain where the second authenticator is at, and the authentication server.

摘要翻译： 本发明涉及身份认证领域。 提供了用于认证的方法，设备和系统，解决了现有身份认证技术不能保护个人隐私的问题，并且包括个人隐私的认证技术必须提供可追溯性特征。 用于身份认证的方法包括：第二认证器，向第一认证者发送第一身份认证消息; 所述第一认证器向认证服务器发送第二身份认证消息; 所述认证服务器基于所述第二身份认证消息来验证所述第二认证者所在的安全域的有效性，并且所述认证服务器基于所述第二身份认证消息来验证所述第一认证者的有效性; 所述认证服务器返回到所述第一认证者第三身份认证消息; 所述第一认证器向所述第二认证器发送第四身份认证消息; 第二认证器在接收到第四身份认证消息时进行验证; 所述第二认证器向所述第一认证器发送第五身份认证消息; 并且当接收到第五身份认证消息时第一认证器进行。 认证系统包括第一认证器，第二认证器，第二认证器所在的安全域，认证服务器。

公开(公告)号：US20150106898A1

公开(公告)日：2015-04-16

申请号：US14384425

申请日：2013-03-12

申请人： CHINA IWNCOMM CO., LTD.

发明人： Zhiqiang Du ,  Jun Cao ,  Manxia Tie ,  Yi Li

IPC分类号： H04L29/06

CPC分类号： H04L63/08 ,  H04L9/321 ,  H04L9/3297 ,  H04L63/0421 ,  H04L2209/42

摘要： A method for identity authentication comprises: 1) a first authenticator transmitting to a second authenticator a first identity authentication message; 2) the second authenticator transmitting to the first authenticator a second identity authentication message; 3) the first authenticator transmitting to an authentication server a third identity authentication message; 4) the authentication server verifying the validity of a secure domain for the second authenticator on the basis of the third identity authentication message; 5) the authentication server transmitting to the first authenticator a fourth identity authentication message; and, 6) the first authenticator authenticating when the fourth identity authentication message is received. The identity authentication system mainly comprises: the first authenticator, the second authenticator, the secure domain for the second authenticator, and the authentication server.

摘要翻译： 一种用于身份认证的方法包括：1）第一认证器向第二认证器发送第一身份认证消息; 2）第二认证器向第一认证者发送第二身份认证消息; 3）第一认证器向认证服务器发送第三身份认证消息; 4）认证服务器，基于第三身份认证消息来验证第二认证者的安全域的有效性; 5）认证服务器向第一认证者发送第四身份认证消息; 以及6）当接收到第四身份认证消息时第一认证者进行认证。 身份认证系统主要包括：第一认证方，第二认证方，第二认证方的安全域，认证服务器。