Method for electronic commerce using security token and apparatus thereof
    1.
    发明申请
    Method for electronic commerce using security token and apparatus thereof 审中-公开
    使用安全令牌的电子商务方法及其装置

    公开(公告)号:US20050097060A1

    公开(公告)日:2005-05-05

    申请号:US10863735

    申请日:2004-06-07

    IPC分类号: H04L9/00 H04L29/06

    摘要: A method for electronic commerce using a security token and an apparatus thereof are provided. The electronic commerce method using a security token comprises a transaction approval institution generating a security token based on a security assertion markup language (SAML), using credit information of a purchaser who requests to issue a security token, and transmitting the security token to the purchaser; the purchaser writing an electronic signature on an order and transmitting the order together with the security token to a seller; the seller verifying the received order and security token, and then delivering goods according to the order to the purchaser; and the transaction approval institution performing payment for the seller and the purchaser. The method can solve the problems of personal information leakage and privacy infringement that may happen when a purchaser sends his personal information to a seller for electronic commerce. Since the token is one-time-use data, even if a security token sent is counterfeited or stolen, the loss can be minimized. In addition, by writing an extensible markup language (XML) electronic signature in the security token, authentication, integrity, and non-repudiation for a transmitted message can be guaranteed and through simple object access protocol (SOAP) security technology, confidentiality is maintained.

    摘要翻译: 提供一种使用安全令牌的电子商务的方法及其装置。 使用安全令牌的电子商务方法包括使用基于安全断言标记语言(SAML)生成安全令牌的交易审批机构,使用请求发出安全令牌的购买者的信用信息,以及将安全令牌发送给购买者 ; 买方在订单上写上电子签名并将该订单与安全令牌一起发送给卖方; 卖方验证接收到的订单和安全令牌,然后根据订单将货物交付给买方; 交易审批机构对卖方和买方执行付款。 该方法可以解决当买方将个人信息发送给卖方进行电子商务时可能发生的个人信息泄露和隐私侵权问题。 由于令牌是一次性使用数据,即使发送的安全令牌被伪造或被盗,也可以将损失减至最小。 另外,通过在安全令牌中写入可扩展标记语言(XML)电子签名,可以保证传输消息的认证,完整性和不可否认性,并且通过简单的对象访问协议(SOAP)安全技术,保持机密性。

    Method and apparatus for managing online and offline documents with RFID technology
    2.
    发明申请
    Method and apparatus for managing online and offline documents with RFID technology 有权
    用于管理在线和离线文档的方法和设备

    公开(公告)号:US20060092024A1

    公开(公告)日:2006-05-04

    申请号:US11091366

    申请日:2005-03-29

    IPC分类号: G08B13/14

    摘要: Provided are a method and an apparatus for managing online and offline documents using RFID technology. The method includes: pre-registering online and offline documents using radio frequency identification tag information stored in at least one of the online and offline documents to be output; determining whether the pre-registered online and offline documents are authorized to be output; and if it is determined that the pre-registered online and offline documents are authorized to be output, generating documents of the online and offline documents to be output and storing new radio frequency identification tag information in radio frequency identification tags attached to the documents to be output.

    摘要翻译: 提供了一种使用RFID技术管理在线和离线文档的方法和装置。 该方法包括:使用存储在要输出的在线和离线文档中的至少一个的射频识别标签信息预先注册在线和离线文档; 确定预注册的在线和离线文档是否被授权输出; 并且如果确定预先注册的在线和离线文档被授权输出,则生成要输出的在线和离线文档的文档,并将附加到文档的射频识别标签中的新的射频识别标签信息存储为 输出。

    Method of transmitting and receiving message using encryption/decryption key
    4.
    发明申请
    Method of transmitting and receiving message using encryption/decryption key 审中-公开
    使用加密/解密密钥发送和接收消息的方法

    公开(公告)号:US20050141718A1

    公开(公告)日:2005-06-30

    申请号:US10860970

    申请日:2004-06-03

    CPC分类号: H04L9/0894

    摘要: Provided is a method of transmitting and receiving a message using an encryption/decryption key, by which each of a sender and a recipient can generate an encryption/decryption key and recover a key used for encryption/decryption while transmitting and receiving the message using an electronic device. The method includes: (a) a user generating his/her own private key and a public key, registering the public key with a key recovery agent (KRA), and setting shared secret information; and (b) a sender transmitting the recovery information necessary for decryption of the transmission message to a recipient, and the recipient generating a key necessary for the decryption from the recovery information and decrypting the transmission message. The method may further include the recipient requesting recovery of the session key to the KRA.

    摘要翻译: 提供了一种使用加密/解密密钥发送和接收消息的方法,通过该方法,发送者和接收者中的每一个可以生成加密/解密密钥并恢复用于加密/解密的密钥,同时使用 电子设备。 该方法包括:(a)生成他/她自己的私钥和公开密钥的用户,用密钥恢复代理(KRA)注册公共密钥,并设置共享的秘密信息; 以及(b)发送方将发送消息解密所必需的恢复信息发送给接收者,接收者从恢复信息生成解密所必需的密钥并解密传输消息。 该方法还可以包括接收请求恢复到KRA的会话密钥。

    Method and apparatus for recognizing fingerprint by hiding minutiae
    5.
    发明申请
    Method and apparatus for recognizing fingerprint by hiding minutiae 审中-公开
    通过隐藏细节识别指纹的方法和装置

    公开(公告)号:US20080013804A1

    公开(公告)日:2008-01-17

    申请号:US11607617

    申请日:2006-11-30

    IPC分类号: G06K9/00

    摘要: Provided is a method and apparatus for authenticating a fingerprint by hiding minutiae, securely storing information on the fingerprint, and authenticating the information on the fingerprint in order to prevent the information on the fingerprint from being reused by an attacker who accesses the information on the fingerprint that is stored in a storage unit. The method for recognizing fingerprint by hiding minutiae of a fingerprint adds fake minutiae information to genuine minutiae information, hides fingerprint information using a polynomial, which is generated based on personal intrinsic information, and stores the fingerprint information, thereby securely protecting the fingerprint information from an external attacker, and preventing the fingerprint information accessed by the attacker from being reused since the attacker cannot know the genuine minutiae.

    摘要翻译: 提供了一种通过隐藏细节来认证指纹的方法和装置,安全地存储关于指纹的信息,以及认证关于指纹的信息,以防止指纹信息被访问指纹信息的攻击者重复使用 它被存储在存储单元中。 通过隐藏指纹细节识别指纹的方法将虚假细节信息添加到真实细节信息中,使用基于个人内在信息生成的多项式隐藏指纹信息,并存储指纹信息,从而可靠地保护指纹信息免受 外部攻击者,并防止攻击者访问的指纹信息被重用,因为攻击者无法知道真正的细节。

    Multiple biometric identification system and method
    6.
    发明申请
    Multiple biometric identification system and method 审中-公开
    多重生物识别系统和方法

    公开(公告)号:US20070071286A1

    公开(公告)日:2007-03-29

    申请号:US11521862

    申请日:2006-09-15

    IPC分类号: G06K9/00

    CPC分类号: G06K9/6293 G06K9/00892

    摘要: A multiple biometric identification system and method are provided. In the multiple biometric identification system and method, a plurality of unified comparison values are generated for respective corresponding candidates who may have different combinations of biometric identification information so that the comparison value vectors of the candidates can be effectively compared with one another. Therefore, it is possible to enable multiple biometric identification even when the type and quantity of biometric information differs from one candidate to.

    摘要翻译: 提供了多重生物识别系统和方法。 在多重生物体识别系统和方法中,为可能具有不同组合的生物特征识别信息的各个相应候选者生成多个统一的比较值,使得能够有效地比较候选的比较值向量。 因此,即使当生物特征信息的类型和数量不同于一个候选者时,也可以启用多个生物识别识别。

    Method and apparatus for providing XML signature service in wireless environment
    7.
    发明申请
    Method and apparatus for providing XML signature service in wireless environment 审中-公开
    在无线环境中提供XML签名服务的方法和装置

    公开(公告)号:US20070136361A1

    公开(公告)日:2007-06-14

    申请号:US11635367

    申请日:2006-12-07

    IPC分类号: G06F7/00

    CPC分类号: G06F21/64

    摘要: Provided are a mobile extensible Markup Language (XML) signature service providing apparatus and method. The mobile XML signature service providing apparatus includes: an XML message analyzing unit authenticating a mobile client, according to an XML signature template generation request or an XML signature verification request received from the mobile client; an XML signature processor generating an XML signature template and a SignedInfo element in a canonicalized format if the authentication is successful, and verifying an XML signature; and an encoder providing key information and at least one setting value for the generation of the XML signature template and verification of the XML signature, to the XML signature processor. Therefore, the mobile XML signature service providing apparatus and method provide authentication, integrity, non-repudiation, etc. with respect to messages received/transmitted in a wireless environment, are applied to a wireless environment having limited resources, are compatible with an XML signature for an existing wired environment that is to be applied to wired-and-wireless integration electronic commerce, and minimizes a change in an existing wired environment when a mobile XML signature is applied.

    摘要翻译: 提供了一种移动可扩展标记语言(XML)签名服务提供装置和方法。 移动XML签名服务提供装置包括:XML消息分析单元,根据从该移动客户端接收到的XML签名模板生成请求或XML签名验证请求认证移动客户端; XML签名处理器,如果认证成功,则以规范格式生成XML签名模板和SignedInfo元素,并验证XML签名; 以及向XML签名处理器提供关键信息和用于生成XML签名模板和验证XML签名的至少一个设置值的编码器。 因此,移动XML签名服务提供装置和方法相对于在无线环境中接收/发送的消息提供认证,完整性,不可抵赖性等应用于具有有限资源的无线环境,与XML签名兼容 对于要应用于有线和无线集成电子商务的现有有线环境,并且当应用移动XML签名时,使现有有线环境的变化最小化。

    Method and apparatus for secure digital content distribution
    8.
    发明申请
    Method and apparatus for secure digital content distribution 审中-公开
    用于安全数字内容分发的方法和装置

    公开(公告)号:US20070124313A1

    公开(公告)日:2007-05-31

    申请号:US11604516

    申请日:2006-11-27

    IPC分类号: G06F17/30

    CPC分类号: G06F21/10

    摘要: Provided are a method and apparatus for securely distributing digital content. According to the method and apparatus, content is securely transmitted to users who have a right of use content regardless of the reliability of a content distributor, thereby allowing the users to efficiently use content. For example, even if an unauthorized third party changes a list of content users by deleting a user who has a right to use content from the list or adding a user who has no right to use content to the list, such an unauthorized change can be easily detected in real time, thereby securely protecting the list. Accordingly, it is possible to securely distribute and use digital content regardless of a content distributor.

    摘要翻译: 提供了一种用于安全地分发数字内容的方法和装置。 根据该方法和装置,不管内容分发者的可靠性如何,内容被安全地发送给具有使用权限的用户,从而允许用户有效地使用内容。 例如,即使未经授权的第三方通过删除具有从列表使用内容的权利的用户或添加没有权利使用内容到该列表的用户来更改内容用户的列表,则这样的未经授权的改变可以是 轻松检测到实时,从而安全地保护列表。 因此,无论内容分发者如何,都可以安全地分发和使用数字内容。

    System for managing identification information via internet and method of providing service using the same
    9.
    发明申请
    System for managing identification information via internet and method of providing service using the same 审中-公开
    通过互联网管理身份信息的系统和使用该身份信息的服务的方法

    公开(公告)号:US20060100888A1

    公开(公告)日:2006-05-11

    申请号:US10994148

    申请日:2004-11-19

    IPC分类号: G06Q99/00

    摘要: The present invention relates to a system for managing user identity information via the Internet and a method of providing a service using the same. The identity information managing system including: an electronic identification certificate issuing device for issuing an electronic identification certificate to authenticate and secure a user identity on the Internet; a service providing device for preparing an electronic contract with a user on the basis of the electronic identification certificate of the user, and providing a service to the user; and a user-side server receiving the service from the service providing device with which the electronic contract with the user is prepared.

    摘要翻译: 本发明涉及一种通过因特网管理用户身份信息的系统以及使用该系统提供服务的方法。 所述身份信息管理系统包括:电子身份证明书发行装置,用于发行电子身份证明书以在互联网上认证和确保用户身份; 一种服务提供装置,用于根据用户的电子识别证书与用户准备电子合同,并向用户提供服务; 以及从所述服务提供装置接收与用户进行电子契约的服务的用户侧服务器。

    Method of analyzing network attack situation
    10.
    发明申请
    Method of analyzing network attack situation 审中-公开
    分析网络攻击情况的方法

    公开(公告)号:US20050138425A1

    公开(公告)日:2005-06-23

    申请号:US10938113

    申请日:2004-09-10

    IPC分类号: H04L12/24 H04L9/00 H04L29/06

    CPC分类号: H04L63/1408 H04L63/1441

    摘要: Provided is a method for analyzing a network attack situation. The method categorizes network intrusion detection alerts into network attack situations, counts the frequency of same-featured intrusion alert occurrence for each network attack situation using a counting algorithm based on time slots, and analyzes the network attack situation based on the frequency of same-featured intrusion detection alert occurrence, the rate of same-featured intrusion detection alert occurrence, or an AND/OR combination of them. The network attack situation can be correctly detected in real time without relatively being influenced by the size of the network or amount of the occurrence of the intrusion detection alerts.

    摘要翻译: 提供了一种分析网络攻击情况的方法。 该方法将网络入侵检测警报分为网络攻击情况,使用基于时隙的计数算法对每个网络攻击情况的同一入侵警报发生频率进行计数,并根据相同频率的频率分析网络攻击情况 入侵检测警报发生,同一特征入侵检测警报发生率,或其AND / OR组合。 可以实时正确检测网络攻击情况,而不会受到网络规模或入侵检测警报发生量的影响。