公开(公告)号：US20170324733A1

公开(公告)日：2017-11-09

申请号：US15528288

申请日：2015-11-20

Applicant: INTERDIGITAL PATENT HOLDINGS, INC.

Inventor： Dolores F. HOWRY ,  Vinod Kumar CHOYI ,  Alec BRUSILOVSKY ,  Yogendra C. SHAH

IPC: H04L29/06 ,  H04W12/06 ,  H04W76/02 ,  H04W88/02

CPC classification number: H04L63/0823 ,  G06F21/577 ,  H04L63/102 ,  H04L63/105 ,  H04L63/1433 ,  H04L63/20 ,  H04W12/003 ,  H04W12/06 ,  H04W12/08 ,  H04W76/00 ,  H04W76/14 ,  H04W88/02

Abstract: Current approaches to using security postures lack functionalities. Security postures can be used to enable various nodes to make informed decisions. In accordance with one embodiment, a system comprises a first node and a second node. The first node receives a security posture associated with the second node. The security posture provides a verifiable point-in-time trust metric on an overall level of trust in the second node. The first node compares the security posture associated with the second node to an expected security posture level associated with the first node. If the security posture associated with the second node is adequate as compared to the expected security posture level, a connection is established between the first node and the second node.

公开(公告)号：US20180013782A1

公开(公告)日：2018-01-11

申请号：US15539179

申请日：2015-12-23

Applicant: INTERDIGITAL PATENT HOLDINGS, INC.

Inventor： Vinod Kumar CHOYI ,  Yogendra C. SHAH ,  Alec BRUSILOVSKY ,  Li-Hsiang SUN ,  Nobuyuki TAMAKI ,  Rafael A. CEPEDA

IPC: H04L29/06

CPC classification number: H04L63/1433 ,  H04L63/083 ,  H04L63/0892 ,  H04L63/105 ,  H04L63/108 ,  H04L2463/082

Abstract: An authentication assurance level associated with an entity, for instance a user equipment, may be computed periodically or in response to an event. The authentication assurance level is compared to an authentication threshold. Based on the comparison, it is determined whether a fresh performance of at least one authentication factor needs to be performed. Thus, appropriate authentication factors and functions may be invoked on a periodic basis to maintain a certain authentication assurance level, which is referred to herein as the assurance threshold. The authentication assurance level may change, for instance decay, over time and may be refreshed periodically.