Characteristics Of Security Associations
    1.
    发明申请

    公开(公告)号:US20190007406A1

    公开(公告)日:2019-01-03

    申请号:US16044686

    申请日:2018-07-25

    Abstract: Authentication of a user or a wireless transmit/receive unit may be based on an obtained measure of authentication strength, which may referred to as an assurance level. For example, a user, via a WTRU, may request access to a service controlled by an access control entity (ACE). The user may be authenticated with a user authenticator and assertion function (UAAF), producing a result. A user assertion may be provided that includes the user authentication result, a user assurance level, and/or a user freshness level. The WTRU may be authenticated with a device authenticator and assertion function (DAAF), producing an associated result. A device assertion may be provided that may include the device authentication result, a device assurance level, and/or a device freshness level. The assertions may be bound together to receive access to a service or resource.

    Method and apparatus for protecting time values in wireless communications
    5.
    发明授权
    Method and apparatus for protecting time values in wireless communications 有权
    用于保护无线通信中的时间值的方法和装置

    公开(公告)号:US09396361B2

    公开(公告)日:2016-07-19

    申请号:US13949677

    申请日:2013-07-24

    Abstract: A method and apparatus to establish a trustworthy local time based on trusted computing methods are described. The concepts are scaling because they may be graded by the frequency and accuracy with which a reliable external time source is available for correction and/or reset, and how trustworthy this external source is in a commercial scenario. The techniques also take into account that the number of different paths and number of hops between the device and the trusted external time source may vary. A local clock related value which is protected by a TPM securely bound to an external clock. A system of Accuracy Statements (AS) is added to introduce time references to the audit data provided by other maybe cheaper sources than the time source providing the initial time.

    Abstract translation: 描述了基于可信计算方法建立可靠的本地时间的方法和装置。 概念是缩放,因为它们可以通过可靠的外部时间源可用于校正和/或重置的频率和准确度进行分级,并且在商业场景中该外部源是如何可信赖的。 这些技术还考虑到设备与受信任的外部时间源之间的不同路径和跳数的数量可能会有所不同。 由TPM保护的本地时钟相关值安全地绑定到外部时钟。 添加准确性声明(AS)的系统来引入时间参考,以提供其他可能比提供初始时间的时间源更便宜的源提供的审计数据。

    Enhancements to enable fast security setup
    7.
    发明授权
    Enhancements to enable fast security setup 有权
    增强功能可实现快速安全设置

    公开(公告)号:US09237448B2

    公开(公告)日:2016-01-12

    申请号:US13967484

    申请日:2013-08-15

    Abstract: WTRUs, ARSs, APs, WLG/AAA proxies, networks, and methods thereon are disclosed for fast security setup on a multi-RAT WTRU. Methods of sharing security associations between RATs on a multi-RAT WTRU are disclosed. Methods of caching security associations are disclosed. Methods are disclosed for alerting an ANDSF server of an AP that should be considered for association. Enhancements to advertisements from an AP are disclosed where the advertisements may include SSID with a FQDN, a HESSID type information, or TAI type information. Methods of resolving AP identities to a reachable address are disclosed. An address resolution protocol is disclosed for resolving AP identities. ARSs are disclosed that may resolve a BSSID to a network routable address. Protocols for carrying AP identities and security parameters are disclosed. Methods are disclosed of using ANDSF to provide the WTRU with security information and parameters of an AP. An RSN may indicate security capabilities.

    Abstract translation: WTRU,ARS,AP,WLG / AAA代理,网络和其上的方法被公开用于在多RAT WTRU上的快速安全设置。 公开了在多RAT WTRU上的RAT之间共享安全关联的方法。 披露了缓存安全关联的方法。 公开了用于警报应考虑进行关联的AP的ANDSF服务器的方法。 公开了对来自AP的广告的增强,其中广告可以包括具有FQDN的SSID,HESSID类型信息或TAI类型信息。 公开了将AP身份解析为可达地址的方法。 公开了解决AP身份的地址解析协议。 公开了可以将BSSID解析为网络可路由地址的ARS。 公开了携带AP身份和安全参数的协议。 公开了使用ANDSF向WTRU提供AP的安全信息和参数的方法。 RSN可以指示安全功能。

    Identity management on a wireless device
    8.
    发明授权
    Identity management on a wireless device 有权
    无线设备上的身份管理

    公开(公告)号:US09185560B2

    公开(公告)日:2015-11-10

    申请号:US14537226

    申请日:2014-11-10

    Abstract: A wireless device may perform a local authentication to reduce the traffic on a network. The local authentication may be performed using a local web server and/or a local OpenID provider (OP) associated with the wireless device. The local web server and/or local OP may be implemented on a security module, such as a smartcard or a trusted execution environment for example. The local OP and/or local web server may be used to implement a provisioning phase to derive a session key, associated with a service provider, from an authentication between the wireless device and the network. The session key may be reusable for subsequent local authentications to locally authenticate a user of the wireless device to the service provider.

    Abstract translation: 无线设备可以执行本地认证以减少网络上的流量。 可以使用与无线设备相关联的本地Web服务器和/或本地OpenID提供商(OP)来执行本地认证。 本地Web服务器和/或本地OP可以在例如智能卡或可信执行环境的安全模块上实现。 可以使用本地OP和/或本地Web服务器来实现供应阶段,以从无线设备和网络之间的认证导出与服务提供商相关联的会话密钥。 会话密钥可以可重用于随后的本地认证,以向服务提供商本地认证无线设备的用户。

    Identity Management on a Wireless Device
    9.
    发明申请
    Identity Management on a Wireless Device 审中-公开
    无线设备上的身份管理

    公开(公告)号:US20150065093A1

    公开(公告)日:2015-03-05

    申请号:US14537226

    申请日:2014-11-10

    Abstract: A wireless device may perform a local authentication to reduce the traffic on a network. The local authentication may be performed using a local web server and/or a local OpenID provider (OP) associated with the wireless device. The local web server and/or local OP may be implemented on a security module, such as a smartcard or a trusted execution environment for example. The local OP and/or local web server may be used to implement a provisioning phase to derive a session key, associated with a service provider, from an authentication between the wireless device and the network. The session key may be reusable for subsequent local authentications to locally authenticate a user of the wireless device to the service provider.

    Abstract translation: 无线设备可以执行本地认证以减少网络上的流量。 可以使用与无线设备相关联的本地Web服务器和/或本地OpenID提供商(OP)来执行本地认证。 本地Web服务器和/或本地OP可以在例如智能卡或可信执行环境的安全模块上实现。 可以使用本地OP和/或本地Web服务器来实现供应阶段,以从无线设备和网络之间的认证导出与服务提供商相关联的会话密钥。 会话密钥可以可重用于随后的本地认证,以向服务提供商本地认证无线设备的用户。

    Staged Control Release in Boot Process
    10.
    发明申请
    Staged Control Release in Boot Process 审中-公开
    启动过程中的分阶段控制释放

    公开(公告)号:US20150026471A1

    公开(公告)日:2015-01-22

    申请号:US14507205

    申请日:2014-10-06

    Abstract: Integrity validation of a network device may be performed. A network device comprising a secure hardware module, may receive a root key. The secure hardware module may also receive a first code measurement. The secure hardware module may provide a first key based on the root key and the first code measurement. The secure hardware module may receive a second code measurement and provide a second key based on the first key and the second code measurement. The release of keys based on code measurements may provide authentication in stages.

    Abstract translation: 可以执行网络设备的完整性验证。 包括安全硬件模块的网络设备可以接收根密钥。 安全硬件模块还可以接收第一代码测量。 安全硬件模块可以基于根密钥和第一代码测量来提供第一密钥。 安全硬件模块可以接收第二代码测量,并且基于第一密钥和第二代码测量提供第二密钥。 基于代码测量的键的释放可以分阶段地进行认证。

Patent Agency Ranking