利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

35 条记录 (耗时 0.033 秒)

    Method and apparatus for trusted federated identity
    1.
    发明授权
    Method and apparatus for trusted federated identity 有权
    可信联合身份的方法和装置

    公开(公告)号：US08533803B2

    公开(公告)日：2013-09-10

    申请号：US13023985

    申请日：2011-02-09

    申请人： Inhyok Cha ,  Andreas Schmidt ,  Andreas Leicher ,  Yogendra C. Shah ,  Louis J. Guccione ,  Dolores F. Howry

    发明人： Inhyok Cha ,  Andreas Schmidt ,  Andreas Leicher ,  Yogendra C. Shah ,  Louis J. Guccione ,  Dolores F. Howry

    IPC分类号： G06F7/04 ,  H04L29/06 ,  G06F17/30

    CPC分类号： H04L63/0815 ,  G06F21/34 ,  G06F21/35 ,  G06F2221/2115 ,  H04L63/0853 ,  H04W12/06

    摘要： A trusted computing environment, such as a smartcard, UICC, Java card, global platform, or the like may be used as a local host trust center and a proxy for a single-sign on (SSO) provider. This may be referred to as a local SSO provider (OP). This may be done, for example, to keep authentication traffic local and to prevent over the air communications, which may burden an operator network. To establish the OP proxy in the trusted environment, the trusted environment may bind to the SSO provider in a number of ways. For example, the SSO provider may interoperate with UICC-based UE authentication or GBA. In this way, user equipment may leverage the trusted environment in order to provide increased security and reduce over the air communications and authentication burden on the OP or operator network.

    摘要翻译： 可以使用诸如智能卡，UICC，Java卡，全球平台等的可信计算环境作为本地主机信任中心和用于单点登录（SSO）提供商的代理。 这可以被称为本地SSO提供商（OP）。 这可以被实现，例如，保持认证流量本地并且防止空中通信，这可能会对运营商网络造成负担。 要在受信任的环境中建立OP代理，可信环境可以通过多种方式绑定到SSO提供者。 例如，SSO提供商可以与基于UICC的UE认证或GBA进行互操作。 以这种方式，用户设备可以利用可信环境来提供增加的安全性并减少OP或运营商网络上的空中通信和认证负担。

    Method And Apparatus For Trusted Federated Identity
    2.
    发明申请
    Method And Apparatus For Trusted Federated Identity 有权
    用于可信联合身份的方法和装置

    公开(公告)号：US20120072979A1

    公开(公告)日：2012-03-22

    申请号：US13023985

    申请日：2011-02-09

    申请人： Inhyok Cha ,  Andreas Schmidt ,  Andreas Leicher ,  Yogendra C. Shah ,  Louis J. Guccione ,  Dolores F. Howry

    发明人： Inhyok Cha ,  Andreas Schmidt ,  Andreas Leicher ,  Yogendra C. Shah ,  Louis J. Guccione ,  Dolores F. Howry

    IPC分类号： H04L9/32 ,  G06F21/00

    CPC分类号： H04L63/0815 ,  G06F21/34 ,  G06F21/35 ,  G06F2221/2115 ,  H04L63/0853 ,  H04W12/06

    摘要： A trusted computing environment, such as a smartcard, UICC, Java card, global platform, or the like may be used as a local host trust center and a proxy for a single-sign on (SSO) provider. This may be referred to as a local SSO provider (OP). This may be done, for example, to keep authentication traffic local and to prevent over the air communications, which may burden an operator network. To establish the OP proxy in the trusted environment, the trusted environment may bind to the SSO provider in a number of ways. For example, the SSO provider may interoperate with UICC-based UE authentication or GBA. In this way, user equipment may leverage the trusted environment in order to provide increased security and reduce over the air communications and authentication burden on the OP or operator network.

    摘要翻译： 可以使用诸如智能卡，UICC，Java卡，全球平台等的可信计算环境作为本地主机信任中心和用于单点登录（SSO）提供商的代理。 这可以被称为本地SSO提供商（OP）。 这可以被实现，例如，保持认证流量本地并且防止空中通信，这可能会对运营商网络造成负担。 要在受信任的环境中建立OP代理，可信环境可以通过多种方式绑定到SSO提供者。 例如，SSO提供商可以与基于UICC的UE认证或GBA进行互操作。 以这种方式，用户设备可以利用可信环境来提供增加的安全性并减少OP或运营商网络上的空中通信和认证负担。

    Device validation, distress indication, and remediation
    6.
    发明授权
    Device validation, distress indication, and remediation 有权
    设备验证，遇险指示和修复

    公开(公告)号：US08914674B2

    公开(公告)日：2014-12-16

    申请号：US13289154

    申请日：2011-11-04

    申请人： Yogendra C. Shah ,  Lawrence Case ,  Dolores F. Howry ,  Inhyok Cha ,  Andreas Leicher ,  Andreas Schmidt

    发明人： Yogendra C. Shah ,  Lawrence Case ,  Dolores F. Howry ,  Inhyok Cha ,  Andreas Leicher ,  Andreas Schmidt

    IPC分类号： G06F11/00 ,  H04W12/10 ,  G06F21/10 ,  G06F21/57

    CPC分类号： G06F11/0709 ,  G06F11/0751 ,  G06F11/079 ,  G06F11/0793 ,  G06F11/08 ,  G06F21/10 ,  G06F21/575 ,  G06F2221/2103 ,  G06F2221/2111 ,  H04L63/123 ,  H04M1/24 ,  H04W8/22 ,  H04W12/10 ,  H04W24/02

    摘要： A wireless communications device may be configured to perform integrity checking and interrogation with a network entity to isolate a portion of a failed component on the wireless network device for remediation. Once an integrity failure is determined on a component of the device, the device may identify a functionality associated with the component and indicate the failed functionality to the network entity. Both the wireless network device and the network entity may identify the failed functionality and/or failed component using a component-to-functionality map. After receiving an indication of an integrity failure at the device, the network entity may determine that one or more additional iterations of integrity checking may be performed at the device to narrow the scope of the integrity failure on the failed component. Once the integrity failure is isolated, the network entity may remediate a portion of the failed component on the wireless communications device.

    摘要翻译： 无线通信设备可以被配置为执行与网络实体的完整性检查和询问，以隔离无线网络设备上的故障组件的一部分以进行修复。 一旦在设备的组件上确定完整性故障，则设备可以识别与组件相关联的功能并且向网络实体指示失败的功能。 无线网络设备和网络实体都可以使用组件到功能映射来识别故障功能和/或故障组件。 在接收到设备上的完整性故障的指示之后，网络实体可以确定可以在设备处执行完整性检查的一个或多个附加迭代以缩小故障组件上的完整性故障的范围。 一旦完整性故障被隔离，则网络实体可以修复无线通信设备上的故障组件的一部分。

    DEVICE VALIDATION, DISTRESS INDICATION, AND REMEDIATION
    7.
    发明申请
    DEVICE VALIDATION, DISTRESS INDICATION, AND REMEDIATION 有权
    设备验证，区域指示和补救

    公开(公告)号：US20120290870A1

    公开(公告)日：2012-11-15

    申请号：US13289154

    申请日：2011-11-04

    申请人： Yogendra C. Shah ,  Lawrence Case ,  Dolores F. Howry ,  Inhyok Cha ,  Andreas Leicher ,  Andreas Schmidt

    发明人： Yogendra C. Shah ,  Lawrence Case ,  Dolores F. Howry ,  Inhyok Cha ,  Andreas Leicher ,  Andreas Schmidt

    IPC分类号： G06F11/28 ,  G06F11/20 ,  G06F11/07

    CPC分类号： G06F11/0709 ,  G06F11/0751 ,  G06F11/079 ,  G06F11/0793 ,  G06F11/08 ,  G06F21/10 ,  G06F21/575 ,  G06F2221/2103 ,  G06F2221/2111 ,  H04L63/123 ,  H04M1/24 ,  H04W8/22 ,  H04W12/10 ,  H04W24/02

    摘要： A wireless communications device may be configured to perform integrity checking and interrogation with a network entity to isolate a portion of a failed component on the wireless network device for remediation. Once an integrity failure is determined on a component of the device, the device may identify a functionality associated with the component and indicate the failed functionality to the network entity. Both the wireless network device and the network entity may identify the failed functionality and/or failed component using a component-to-functionality map. After receiving an indication of an integrity failure at the device, the network entity may determine that one or more additional iterations of integrity checking may be performed at the device to narrow the scope of the integrity failure on the failed component. Once the integrity failure is isolated, the network entity may remediate a portion of the failed component on the wireless communications device.

    摘要翻译： 无线通信设备可以被配置为执行与网络实体的完整性检查和询问，以隔离无线网络设备上的故障组件的一部分以进行修复。 一旦在设备的组件上确定完整性故障，则设备可以识别与组件相关联的功能并且向网络实体指示失败的功能。 无线网络设备和网络实体都可以使用组件到功能映射来识别故障功能和/或故障组件。 在接收到设备上的完整性故障的指示之后，网络实体可以确定可以在设备处执行完整性检查的一个或多个附加迭代以缩小故障组件上的完整性故障的范围。 一旦完整性故障被隔离，则网络实体可以修复无线通信设备上的故障组件的一部分。

    Smart card with domain-trust evaluation and domain policy management functions
    10.
    发明授权
    Smart card with domain-trust evaluation and domain policy management functions 有权
    具有域信任评估和域策略管理功能的智能卡

    公开(公告)号：US09363676B2

    公开(公告)日：2016-06-07

    申请号：US13991530

    申请日：2011-12-06

    申请人： Louis J. Guccione ,  Michael V. Meyerstein ,  Inhyok Cha ,  Andreas Schmidt ,  Andreas Leicher ,  Yogendra C. Shah

    发明人： Louis J. Guccione ,  Michael V. Meyerstein ,  Inhyok Cha ,  Andreas Schmidt ,  Andreas Leicher ,  Yogendra C. Shah

    IPC分类号： H04L29/06 ,  H04W12/08 ,  H04W12/12 ,  G06F21/10 ,  H04W12/10

    CPC分类号： G06F21/604 ,  G06F21/10 ,  G06F21/6218 ,  H04L63/00 ,  H04L63/205 ,  H04W12/08 ,  H04W12/10 ,  H04W12/12

    摘要： One or more wireless communications device may include one or more domains that may be owned or controlled by one or more different owners. One of the domains may include a security domain having ultimate control over the enforcement of security policies on the one or more wireless communications devices. Another one of the domains may include a system-wide domain manager that is subsidiary to the security domain and may enforce the policies of one or more subsidiary domains. The system-wide domain manager may enforce its policies based on a privilege level received from the security domain. The privilege level may be based on the level of trust between an external stakeholder, such as an owner of a domain that is subsidiary to the system-wide domain manager, and the security domain.

    摘要翻译： 一个或多个无线通信设备可以包括可由一个或多个不同所有者拥有或控制的一个或多个域。 一个域可以包括对一个或多个无线通信设备上的安全策略的执行的最终控制的安全域。 另一个域可以包括系统范围的域管理器，其是安全域的子公司，并且可以执行一个或多个子域的策略。 系统范围的域管理器可以基于从安全域接收到的特权级别强制执行其策略。 权限级别可以基于外部利益相关者（例如，系统范围域名管理员的子域的所有者）与安全域之间的信任级别。