-
公开(公告)号:US20220264299A1
公开(公告)日:2022-08-18
申请号:US17740136
申请日:2022-05-09
Applicant: Intel Corporation
Inventor: Omer BEN-SHALOM , Alex NAYSHTUT , David BIRNBAUM , Ehud RESHEF
IPC: H04W12/065
Abstract: Methods and apparatus for virtual enterprise secure networking. A Layer 2 (L2)-based secured network solution is provided using resources of a computer platform to connect an operating system to a secured backend overlay network (e.g., enterprise, service provider or ‘zero trust network service’) in a way that does not require changes in the operating system and connection manager or alteration of network infrastructure (e.g., wireless access point) in the location where a client may reside. Under an aspect of the solution, the computer platform itself (e.g., platform hardware/Firmware/drivers) provides part of the role of the authenticator in an Institute of Electrical and Electronics Engineers (IEEE) 802.1X scheme either directly by simulation of an Access Point (AP) or as a pass through to the overlay network core. This replaces the traditional access point/switch authenticator role.
-
公开(公告)号:US20160127379A1
公开(公告)日:2016-05-05
申请号:US14129425
申请日:2013-06-28
Applicant: INTEL CORPORATION
Inventor: Alex NAYSHTUT , Omer BEN-SHALOM , Hong LI
IPC: H04L29/06
CPC classification number: H04L63/102 , G06F21/554 , G06F21/629 , G06F2221/2137 , G06F2221/2149 , H04L63/083 , H04L63/101 , H04L63/105 , H04L63/20 , H04L63/205 , H04L67/22 , H04L67/306
Abstract: Technologies to facilitate supervision of an online identify include a gateway server to facilitate and monitor access to an online service by a user of a “child” client computer device. The gateway server may include an identity manager to receive a request for access to the online service from the client computing device, retrieve access information to the online service, and facilitate access to the online service for the client computing device using the access information. The access information is kept confidential from the user. The gateway server may also include an activity monitor module to control activity between the client computing device and the online service based on the set of policy rules of a policy database. The gateway server may transmit notifications of such activity to a “parental” client computing device for review and/or approval, which also may be used to update the policy database.
Abstract translation: 促进对在线识别的监督的技术包括网关服务器,以方便和监视“儿童”客户端计算机设备的用户对在线服务的访问。 网关服务器可以包括身份管理器,以从客户端计算设备接收对在线服务的访问请求,检索对在线服务的访问信息,以及使用访问信息便于访问客户端计算设备的在线服务。 访问信息对用户保密。 网关服务器还可以包括活动监视器模块,用于基于策略数据库的策略规则集来控制客户端计算设备和在线服务之间的活动。 网关服务器可以将这种活动的通知发送给“父母”客户端计算设备以供审查和/或批准,其也可用于更新策略数据库。
-
公开(公告)号:US20240338197A1
公开(公告)日:2024-10-10
申请号:US18393733
申请日:2023-12-22
Applicant: Intel Corporation
Inventor: Dan HOROVITZ , Igor METRIK , Omer BEN-SHALOM , Ilil BLUM SHEM-TOV , Ofer RIVLIN
Abstract: A method and apparatus for anti-rollback protection for a non-persistent software in a system. A software install package includes a main version of software and a fallback version of the software. The fallback version of the software includes a vulnerable versions list that includes a list of vulnerable versions of the software determined up to a release date of the fallback version of the software. The fallback version of the software is stored in the system. The main version of the software is installed if the main version of the software is not listed in the vulnerable versions list. The fallback version may be updated automatically if the new fallback version higher than the existing fallback version is received. The fallback version is stored in a fallback versions' repository by an operating system or installer. The fallback version may include an allowed versions list.
-
4.
公开(公告)号:US20180019976A1
公开(公告)日:2018-01-18
申请号:US15209949
申请日:2016-07-14
Applicant: Intel Corporation
Inventor: Omer BEN-SHALOM , Alex NAYSHTUT , Ned M. Smith
CPC classification number: H04L63/0428 , H04L9/0833 , H04L9/0841 , H04L9/14 , H04L9/30 , H04L12/185 , H04L12/1886 , H04L12/4641 , H04L45/16 , H04L63/0272 , H04L63/065 , H04L2209/24
Abstract: In one embodiment, a hub logic is to provision a plurality of group private keys for a dynamic multipoint virtual private network (DMVPN) group associated with a function of a plurality of devices, provide a group public key for the DMVPN group to the plurality of devices and provision each of the plurality of group private keys to one of the plurality of devices, to enable one or more subsets of the plurality of devices to negotiate a traffic encryption key without interaction with a system having the hub logic. Other embodiments are described and claimed.
-
公开(公告)号:US20250063355A1
公开(公告)日:2025-02-20
申请号:US18921042
申请日:2024-10-21
Applicant: Intel Corporation
Inventor: Ilil BLUM SHEM-TOV , Yaron KLEIN , Dan HOROVITZ , Yoni KAHANA , Omer BEN-SHALOM
Abstract: A method and apparatus for authentication of a user. A user profile is generated during an initial registration. The user profile may include a trusted location of the user. During a subsequent authentication process for the user, it is determined whether the user is located in the trusted location of the user, and an access to a service for the user may be controlled based on a result of the authentication process and the determination whether the user is located in the trusted location of the user. A location-based parameter of the trusted location of the user may be determined and stored in advance, and it is determined whether the user is located in the trusted location of the user by comparing the location-based parameter of the current location of the user and the location-based parameter of the trusted location of the user.
-
公开(公告)号:US20190049275A1
公开(公告)日:2019-02-14
申请号:US15857667
申请日:2017-12-29
Applicant: Intel Corporation
Inventor: Oleg POGORELIK , Omer BEN-SHALOM , Alex NAYSHTUT
Abstract: A circuit includes a first communication interface configured to receive first sensor data from a stationary sensor. The first sensor data include a result of a first sensing of a local environment of the stationary sensor performed by the stationary sensor. The circuit may further include a second communication interface configured to receive second sensor data from an unmanned aerial vehicle. The second sensor data include a result of a second sensing of at least a portion of the local environment of the stationary sensor performed by a sensor of the unmanned aerial vehicle. The circuit may further include one or a plurality of processors configured to compare the first sensor data and the second sensor data and to classify the at least one stationary sensor based on a result of the comparison.
-
公开(公告)号:US20180205783A1
公开(公告)日:2018-07-19
申请号:US15846007
申请日:2017-12-18
Applicant: Intel Corporation
Inventor: Oleg POGORELIK , Alex NAYSHTUT , Igor TATOURIAN , Omer BEN-SHALOM
Abstract: Measurement exchange networks and protocols to exchange measurements of a parameter amongst devices (e.g., IoT devices), select the best measurement(s), accuracy/precision-wise, and determine a process variable for a control system based on the selected best measurement(s). A device may select a peer-provided best measurement to output as the process variable in place of a local measurement, and/or compute the process variable from multiple best measurements (e.g., local and/or peer-provided measurements). Metadata may be used to select a measurement(s) and/or to increase reliability/trust of exchanged data. In this way, each device of an exchange group/network may obtain the highest measurement accuracy of all available collocated sensors with little or no additional processing or cloud connectivity. A best measurement(s) may be selected based on measurement quality specifications extracted from metadata, measurement qualities computed from measurements of respective sensors, locations/proximities of the sensors, a policy(ies), and/or device IDs (e.g., extracted from metadata).
-
-
-
-
-
-