公开(公告)号：US08571221B2

公开(公告)日：2013-10-29

申请号：US11051560

申请日：2005-02-04

申请人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey ,  Andrew A. Fergusson

发明人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey ,  Andrew A. Fergusson

IPC分类号： H04L9/00

CPC分类号： G06F21/64 ,  G06F12/1408 ,  G06F21/72 ,  G06F21/79 ,  G06F21/85 ,  H04L9/0863 ,  H04L9/0869 ,  H04L9/0891 ,  H04L9/0894 ,  Y02D10/13

摘要： A system and method of creating and managing encryption keys in a data processing device generates subsequent encryption keys by combining the existing encryption key with an existing password and seed value. In the preferred embodiment, the initial encryption key is embedded during manufacture and is unknown to the user and manufacturer, thus ensuring that all subsequent encryption keys are derived from an unknown value. When a subsequent encryption key is generated, all data encrypted using the existing encryption key is decrypted using the existing encryption key and re-encrypted using the subsequent encryption key before the existing encryption key is overwritten. In a further aspect, during encryption/decryption the encryption key is combined with the sector address of the data to be encrypted/decrypted in order to generate a unique key for each sector of data to be encrypted/decrypted.

摘要翻译： 在数据处理设备中创建和管理加密密钥的系统和方法通过将现有加密密钥与现有密码和种子值组合来生成后续加密密钥。 在优选实施例中，初始加密密钥在制造期间被嵌入，并且对于用户和制造商来说是未知的，因此确保所有后续加密密钥都是从未知值导出的。 当生成随后的加密密钥时，使用现有加密密钥加密的所有数据使用现有的加密密钥进行解密，并且在覆盖现有加密密钥之前使用随后的加密密钥重新加密。 在另一方面，在加密/解密期间，将加密密钥与要加密/解密的数据的扇区地址组合，以便为每个要加密/解密的数据扇区生成唯一的密钥。

公开(公告)号：US08601279B2

公开(公告)日：2013-12-03

申请号：US13542815

申请日：2012-07-06

申请人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey

发明人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey

IPC分类号： G06F21/00

CPC分类号： G06F21/79 ,  G06F11/3656 ,  G06F2221/2105

摘要： The present invention provides a secure JTAG interface to an application-specific integrated circuit (ASIC). In the preferred embodiment the invention operates through the combined efforts of a Security Module (SM) comprising a state machine that controls the security modes for the ASIC, and a Test Control Module (TCM) which contains the JTAG interface. The TCM operates in either a restricted mode or an unrestricted mode, depending on the state of the SM state machine. In a restricted mode, only limited access to memory content is permitted. In an unrestricted mode, full access to memory content is permitted.

摘要翻译： 本发明提供了一种用于专用集成电路（ASIC）的安全JTAG接口。 在优选实施例中，本发明通过包括控制ASIC的安全模式的状态机和包含JTAG接口的测试控制模块（TCM）的安全模块（SM）的组合进行操作。 根据SM状态机的状态，TCM以受限制模式或非限制模式运行。 在限制模式下，只允许对存储器内容的访问有限。 在无限制模式下，允许完全访问内存内容。

公开(公告)号：US08219825B2

公开(公告)日：2012-07-10

申请号：US12325853

申请日：2008-12-01

申请人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey

发明人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey

IPC分类号： G06F21/00

CPC分类号： G06F21/79 ,  G06F11/3656 ,  G06F2221/2105

摘要： The present invention provides a secure JTAG interface to an application-specific integrated circuit (ASIC). In the preferred embodiment the invention operates through the combined efforts of a Security Module (SM) comprising a state machine that controls the security modes for the ASIC, and a Test Control Module (TCM) which contains the JTAG interface. The TCM operates in either a restricted mode or an unrestricted mode, depending on the state of the SM state machine. In a restricted mode, only limited access to memory content is permitted. In an unrestricted mode, full access to memory content is permitted.

摘要翻译： 本发明提供了一种用于专用集成电路（ASIC）的安全JTAG接口。 在优选实施例中，本发明通过包括控制ASIC的安全模式的状态机和包含JTAG接口的测试控制模块（TCM）的安全模块（SM）的组合进行操作。 根据SM状态机的状态，TCM以受限制模式或非限制模式运行。 在限制模式下，只允许对存储器内容的访问有限。 在无限制模式下，允许完全访问内存内容。

公开(公告)号：US07461407B2

公开(公告)日：2008-12-02

申请号：US11049987

申请日：2005-02-04

申请人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey

发明人： Herbert A. Little ,  Jerrold R. Randell ,  Richard C. Madter ,  Ryan J. Hickey

IPC分类号： H04L9/00 ,  H04L9/32 ,  G06F12/00 ,  G06F12/14 ,  H04K1/00

CPC分类号： G06F21/79 ,  G06F11/3656 ,  G06F2221/2105

摘要： The present invention provides a secure JTAG interface to an application-specific integrated circuit (ASIC). In the preferred embodiment the invention operates through the combined efforts of a Security Module (SM) comprising a state machine that controls the security modes for the ASIC, and a Test Control Module (TCM) which contains the JTAG interface. The TCM operates in either a restricted mode or an unrestricted mode, depending on the state of the SM state machine. In a restricted mode, only limited access to memory content is permitted. In an unrestricted mode, full access to memory content is permitted.

摘要翻译： 本发明提供了一种用于专用集成电路（ASIC）的安全JTAG接口。 在优选实施例中，本发明通过包括控制ASIC的安全模式的状态机和包含JTAG接口的测试控制模块（TCM）的安全模块（SM）的组合进行操作。 根据SM状态机的状态，TCM以受限制模式或非限制模式运行。 在限制模式下，只允许对存储器内容的访问有限。 在无限制模式下，允许完全访问内存内容。

公开(公告)号：US09633178B2

公开(公告)日：2017-04-25

申请号：US13413173

申请日：2012-03-06

申请人： David P. Yach ,  Michael S. Brown ,  Herbert A. Little

发明人： David P. Yach ,  Michael S. Brown ,  Herbert A. Little

IPC分类号： G06F21/00 ,  G06F21/10 ,  G06F21/12 ,  G06F21/51 ,  G06F21/62 ,  H04L9/32 ,  H04W4/00 ,  H04L29/06

摘要： A code signing system and method is provided. The code signing system operates in conjunction with a signed software application having a digital signature and includes an application platform, an application programming interface (API), and a virtual machine. The API is configured to link the software application with the application platform. The virtual machine verifies the authenticity of the digital signature in order to control access to the API by the software application.

公开(公告)号：US09033216B2

公开(公告)日：2015-05-19

申请号：US13618311

申请日：2012-09-14

申请人： Neil P. Adams ,  Michael G. Kirkup ,  Herbert A. Little ,  Russell N. Owen

发明人： Neil P. Adams ,  Michael G. Kirkup ,  Herbert A. Little ,  Russell N. Owen

IPC分类号： G06F9/45 ,  G06F12/14 ,  G06F21/51 ,  G06F21/52 ,  G06F21/53 ,  G06F21/62 ,  G06F21/71 ,  H04M1/725 ,  H04L29/08 ,  G06F9/445 ,  H04L29/06

CPC分类号： G06F21/629 ,  G06F8/61 ,  G06F12/1458 ,  G06F21/51 ,  G06F21/52 ,  G06F21/53 ,  G06F21/6218 ,  G06F21/71 ,  G06F2221/2149 ,  H04L63/102 ,  H04L67/34 ,  H04M1/72525

摘要： Systems and methods of owner application control of an electronic device are provided. Owner application control information is stored on the electronic device and/or one or more remote servers. Owner application control information is consulted to determine if one or more required applications are available for execution on the electronic device. If not, one or more required applications not available are downloaded and installed. This could be in a manner transparent to the user of the electronic device. If one or more required applications are not available on the electronic device, the device can be functionally disabled in whole, or in part, until one or more required applications are available.

摘要翻译： 提供了电子设备的所有者应用控制的系统和方法。 所有者应用控制信息存储在电子设备和/或一个或多个远程服务器上。 咨询所有者应用程序控制信息以确定一个或多个所需应用程序是否可用于在电子设备上执行。 如果没有，则下载并安装一个或多个不可用的必需应用程序。 这可以以对电子设备的用户透明的方式。 如果一个或多个所需的应用程序在电子设备上不可用，则该设备可以在全部或部分功能上禁用，直到一个或多个所需的应用程序可用。

公开(公告)号：US08966246B2

公开(公告)日：2015-02-24

申请号：US13332917

申请日：2011-12-21

申请人： Herbert A. Little ,  Stefan E. Janhunen

发明人： Herbert A. Little ,  Stefan E. Janhunen

IPC分类号： H04L29/06 ,  H04L12/58 ,  H04W12/06 ,  H04L9/32

CPC分类号： H04L63/0272 ,  H04L9/3263 ,  H04L51/00 ,  H04L63/0281 ,  H04L63/045 ,  H04L63/0823 ,  H04L63/126 ,  H04L2209/76 ,  H04L2209/80 ,  H04W12/06

摘要： A method for handling digital certificate status requests between a client system and a proxy system is provided. The method includes the steps of receiving at the proxy system digital certificate status request data transmitted from the client system and generating query data for the digital certificate status in response to receiving the digital certificate status request data. The query data is transmitted to a status provider system, and status data from the status provider system in response to the query data is received at the proxy system. Digital certificate status data based on the status data received is generated and transmitting to the client system.

摘要翻译： 提供了一种在客户端系统和代理系统之间处理数字证书状态请求的方法。 所述方法包括以下步骤：响应于接收到所述数字证书状态请求数据，在所述代理系统处接收从所述客户端系统发送的数字证书状态请求数据并生成所述数字证书状态的查询数据。 将查询数据发送到状态提供者系统，并且在代理系统处接收来自状态提供者系统的响应于查询数据的状态数据。 基于收到的状态数据生成数字证书状态数据并发送给客户端系统。

公开(公告)号：US08966054B2

公开(公告)日：2015-02-24

申请号：US12420150

申请日：2009-04-08

申请人： Herbert A. Little ,  Michael S. Brown

发明人： Herbert A. Little ,  Michael S. Brown

IPC分类号： G06F15/173 ,  H04L29/08 ,  H04L29/06

CPC分类号： H04L67/24 ,  H04L67/04 ,  H04L69/28

摘要： A method, system and mobile communication device for implementing a serverless presence system are provided. In accordance with one embodiment, there is provided a method of sharing presence information between a group of mobile communication devices configured to communicate over a wireless network, the mobile communication devices defining the group members of the group, the method comprising: sending a data packet from a sending group member to at least one of the other group members; determining a presence status in accordance with whether a delivery acknowledgement is received by the sending group member from each of the other group members to which the data packet was sent within a predetermined duration from the sending of the data packet; storing the determined presence status in memory; and sending a presence update comprising the determined presence status of at least some of the group members to all of the group members.

摘要翻译： 提供了一种用于实现无服务器存在系统的方法，系统和移动通信设备。 根据一个实施例，提供了一种在被配置为通过无线网络进行通信的移动通信设备组之间共享存在信息的方法，所述移动通信设备定义组的组成员，所述方法包括：发送数据分组 从发送组成员到其他组成员中的至少一个; 根据发送组成员从发送数据分组的预定持续时间内是否从发送数据分组的每个其他组成员接收到发送确认的确定状态; 将确定的存在状态存储在存储器中; 以及将所述组成员的至少一些的确定的存在状态发送到所有组成员。

公开(公告)号：US08850188B2

公开(公告)日：2014-09-30

申请号：US13614755

申请日：2012-09-13

申请人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

发明人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

IPC分类号： H04L29/06 ,  H04L12/58 ,  H04L9/32 ,  H04W12/06

CPC分类号： H04L51/38 ,  H04L9/3263 ,  H04L63/0823 ,  H04L2209/80 ,  H04W4/02 ,  H04W4/12 ,  H04W12/06

摘要： A system and method for processing certificates located in a certificate search. Certificates located in a certificate search are processed at a data server (e.g. a mobile data server) coupled to a computing device (e.g. a mobile device) to determine status data that can be used to indicate the status of those certificates to a user of the computing device. Selected certificates may be downloaded to the computing device for storage, and the downloaded certificates are tracked by the data server. This facilitates the automatic updating of the status of one or more certificates stored on the computing device by the data server, in which updated status data is pushed from the data server to the computing device.

摘要翻译： 用于处理位于证书搜索中的证书的系统和方法。 位于证书搜索中的证书在耦合到计算设备（例如，移动设备）的数据服务器（例如移动数据服务器）处理，以确定可用于向用户指示这些证书的状态的状态数据 计算设备。 选定的证书可以下载到计算设备进行存储，并且下载的证书由数据服务器跟踪。 这有助于数据服务器自动更新存储在计算设备上的一个或多个证书的状态，其中将更新的状态数据从数据服务器推送到计算设备。

公开(公告)号：US08775791B2

公开(公告)日：2014-07-08

申请号：US11313942

申请日：2005-12-22

申请人： Sean Paul Taylor ,  Viera Bibr ,  Brindusa Fritsch ,  Herbert A. Little ,  Michael Shenfield

发明人： Sean Paul Taylor ,  Viera Bibr ,  Brindusa Fritsch ,  Herbert A. Little ,  Michael Shenfield

IPC分类号： H04L29/06

CPC分类号： H04L63/12 ,  H04L51/00 ,  H04L63/0442 ,  H04L63/0471 ,  H04L63/061 ,  H04L63/166 ,  H04L67/28 ,  H04L67/2809 ,  H04W12/02 ,  H04W12/04 ,  H04W80/12

摘要： A method and system for secure messaging between a wireless device and an application gateway provides for connecting a device to an application mapping layer via a secure socket and exchanging encryption keys for effecting asymmetric encryption between the device and the application gateway. The encryption has a first set of keys for encrypting messages to the device and decryption a second set of keys for decrypting messages from the device. Accordingly, the present patent disclosure provides an entire solution from end-to-end. Combining a variety of security patterns and technologies in a specific manner to provide a highly secure form of protecting data in a messaging style format between two endpoints on a network. The present patent disclosure provides an optimized strength of encryption on the paths from application mapping layer to wireless device and vice versa. And is able to change in nature to suit the dynamic nature of the payload sizes and transmission rates in the mobile market.

摘要翻译： 用于无线设备和应用网关之间的安全消息传递的方法和系统提供了通过安全套接字将设备连接到应用映射层，并交换加密密钥以实现设备和应用网关之间的非对称加密。 加密具有用于加密到设备的消息的第一组密钥，并且解密用于从设备解密消息的第二组密钥。 因此，本专利公开提供了端到端的整体解决方案。 以特定方式组合各种安全模式和技术，以提供在网络上的两个端点之间以消息传递风格格式保护数据的高度安全的形式。 本专利公开提供了在从应用映射层到无线设备的路径上的加密优化强度，反之亦然。 并且能够改变自然，以适应移动市场中有效载荷大小和传输速率的动态性质。