Method for assembling authorization certificate chains
    1.
    发明授权
    Method for assembling authorization certificate chains 有权
    组合授权证书链的方法

    公开(公告)号:US09124577B2

    公开(公告)日:2015-09-01

    申请号:US14487998

    申请日:2014-09-16

    Inventor: Victor B. Lortz

    Abstract: A method for assembling authorization certificate chains among an authorizer, a client, and a third party allows the client to retain control over third party access. The client stores a first certificate from the authorizer providing access to a protected resource and delegates some or all of the privileges in the first certificate to the third party in a second certificate. The client stores a universal resource identifier (URI) associated with both the first certificate and the third party and provides the second certificate and the URI to the third party. The third party requests access to the protected resource by providing the second certificate and the URI, without knowledge or possession of the first certificate. When the authorizer accesses the URI, the client provides the first certificate to the authorizer, so that the client retains control over the third party's access.

    Abstract translation: 在授权者,客户端和第三方之间组合授权证书链的方法允许客户端保持对第三方访问的控制。 客户机从授权者存储提供对受保护资源的访问的第一个证书,并将第一个证书中的一些或全部权限委托给第二个证书中的第三方。 客户端存储与第一证书和第三方相关联的通用资源标识符(URI),并将第二证书和URI提供给第三方。 第三方通过提供第二证书和URI来访问受保护的资源,而不知道或拥有第一个证书。 当授权者访问URI时,客户端向授权者提供第一个证书,以便客户端保留对第三方访问的控制权。

    URI-based host to mobile device setup and pairing

    公开(公告)号:US10257681B2

    公开(公告)日:2019-04-09

    申请号:US15244770

    申请日:2016-08-23

    Abstract: Systems and methods directed to URI-based host to mobile device setup and pairing are described herein. A uniform resource identifier (URI) may be received from a host device. A request for an application associated with the host device and the wireless device may be transmitted based at least in part on the URI. The requested application may be received. An association with the host device may be established based at least in part on the application.

    SECURE MESSAGE FILTERING TO VEHICLE ELECTRONIC CONTROL UNITS WITH SECURE PROVISIONING OF MESSAGE FILTERING RULES
    4.
    发明申请
    SECURE MESSAGE FILTERING TO VEHICLE ELECTRONIC CONTROL UNITS WITH SECURE PROVISIONING OF MESSAGE FILTERING RULES 审中-公开
    安全信息过滤安全提供信息过滤规则的车辆电子控制单元

    公开(公告)号:US20160359903A1

    公开(公告)日:2016-12-08

    申请号:US15236557

    申请日:2016-08-15

    Abstract: A method according to one embodiment includes the operations of configuring a host processor to receive a message filtering rule, the host processor associated with a vehicle; configuring a bus controller to verify authenticity of the message filtering rule, wherein the bus controller is programmed through an interface, the interface inaccessible from the host processor; filtering messages from the host processor using the verified message filtering rule, wherein the filtering is performed by the bus controller; and transmitting the filtered messages from the bus controller over a bus to one or more electronic control units (ECUs), the ECUs communicatively coupled to the bus.

    Abstract translation: 根据一个实施例的方法包括配置主机处理器以接收消息过滤规则的操作,所述主机处理器与车辆相关联; 配置总线控制器以验证消息过滤规则的真实性,其中总线控制器通过接口编程,该接口不能从主机处理器访问; 使用经验证的消息过滤规则从主处理器过滤消息,其中所述过滤由所述总线控制器执行; 以及经由总线将经滤波的消息从总线控制器发送到一个或多个电子控制单元(ECU),ECU通信地耦合到总线。

    Method for assembling authorization certificate chains

    公开(公告)号:US09407629B2

    公开(公告)日:2016-08-02

    申请号:US14841347

    申请日:2015-08-31

    Inventor: Victor B. Lortz

    Abstract: A method for assembling authorization certificate chains among an authorizer, a client, and a third party allows the client to retain control over third party access. The client stores a first certificate from the authorizer providing access to a protected resource and delegates some or all of the privileges in the first certificate to the third party in a second certificate. The client stores a universal resource identifier (URI) associated with both the first certificate and the third party and provides the second certificate and the URI to the third party. The third party requests access to the protected resource by providing the second certificate and the URI, without knowledge or possession of the first certificate. When the authorizer accesses the URI, the client provides the first certificate to the authorizer, so that the client retains control over the third party's access.

    Voice interface to NFC applications
    6.
    发明授权
    Voice interface to NFC applications 有权
    NFC应用程序的语音界面

    公开(公告)号:US08849674B2

    公开(公告)日:2014-09-30

    申请号:US13756749

    申请日:2013-02-01

    Inventor: Victor B. Lortz

    Abstract: Technologies for transferring Near Field Communications information on a computing device include storing information corresponding to services in a database on the computing device, receiving a voice input corresponding to a name of a requested service, and retrieving the information corresponding to the requested service from the database. Such technologies may also include loading the retrieved information corresponding to the requested service into a Near Field Communications tag emulated by the computing device and transferring the retrieved information to a portable computing device in response to the Near Field Communications tag being touched by a Near Field Communications reader of the portable computing device. The information corresponding to the requested service stored in the database, retrieved from the database, loaded into the Near Field Communications tag, and/or transferred to the portable computing device may include a Universal Resource Identifier and content-specific keywords corresponding to the requested service.

    Abstract translation: 用于在计算设备上传送近场通信信息的技术包括将对应于服务的信息存储在计算设备上的数据库中,接收与所请求服务的名称相对应的语音输入,以及从数据库中检索对应于所请求服务的信息 。 这样的技术还可以包括将对应于所请求的服务的检索到的信息加载到由计算设备模拟的近场通信标签中,并且响应于近场通信被近场通信所触及的近场通信标签将检索到的信息传送到便携式计算设备 便携式计算设备的读取器。 与数据库中存储的数据库中所请求的服务相对应的信息,加载到近场通信标签和/或传送到便携式计算设备中的信息可以包括与所请求的服务相对应的通用资源标识符和特定于内容的关键字 。

    Registration of devices in secure domain

    公开(公告)号:US10575273B2

    公开(公告)日:2020-02-25

    申请号:US15087106

    申请日:2016-03-31

    Abstract: Embodiments are directed to enrollment of an endpoint device in a secure domain. An enrollment request is sent to a delegated registrar (DR) device to initiate a trust-establishment procedure with the DR device to establish initial connectivity and an initial symmetric key to be shared between the DR and the endpoint device. The DR device provides to the endpoint device limited-use credentials for group-access key establishment, and group connectivity parameters for accessing a group administrator (GA) device. The endpoint device and the GA device perform a group-enrollment procedure in which the endpoint device provides the limited-use credentials to the GA device and receives, from the GA device, the group-access key.

    Multi-radio wireless flash drive using NFC
    10.
    发明授权
    Multi-radio wireless flash drive using NFC 有权
    使用NFC的多无线电无线闪存驱动器

    公开(公告)号:US09537535B2

    公开(公告)日:2017-01-03

    申请号:US13853244

    申请日:2013-03-29

    CPC classification number: H04B5/0031 H04B5/0037 H04B5/0075

    Abstract: A wireless flash drive may use a Near Field Communication (NFC) radio link with a second device to establish a second, non-NFC, radio link with the second device, and then use the non-NFC link to wirelessly transfer data between the second device and the non-volatile memory in the flash drive. Some embodiments may also have other features, such as a switch to activate the non-NFC link without using the NFC link, a battery to power the non-NFC radio and the non-volatile memory, inductive charging circuitry to wirelessly recharge the battery, or instructions to be uploaded to the second device for use in establishing the non-NFC link.

    Abstract translation: 无线闪存驱动器可以使用与第二设备的近场通信(NFC)无线电链路来与第二设备建立第二非NFC无线电链路,然后使用非NFC链路在第二设备之间无线地传输数据 设备和闪存驱动器中的非易失性存储器。 一些实施例还可以具有其他特征,诸如在不使用NFC链路的情况下激活非NFC链路的开关,用于为非NFC无线电和非易失性存储器供电的电池,用于对电池无线充电的感应充电电路, 或要上传到第二设备以用于建立非NFC链路的指令。

Patent Agency Ranking