公开(公告)号：US20070201412A1

公开(公告)日：2007-08-30

申请号：US11363208

申请日：2006-02-28

申请人： Lusheng Ji ,  Jonathan Russell Agre ,  Tamer Nadeem ,  Ashok Agrawala

发明人： Lusheng Ji ,  Jonathan Russell Agre ,  Tamer Nadeem ,  Ashok Agrawala

IPC分类号： H04Q7/24

CPC分类号： H04W72/082 ,  H04W72/0406

摘要： Disclosed is a protocol used by wireless stations sharing a single wireless channel. When a local station senses a communication between remote stations using the channel, the local station estimates whether its local transmissions would disrupt this on-going remote communication. To estimate, the local station forms capture models of the remote stations. From the capture models, the local station determines if its local transmission would prevent each remote station from capturing the signal from the other remote station. If the local transmission would not disrupt the remote communications, the local station transmits its message over the channel at the same time the remote stations use the channel. The local station performs the estimation using parameters of the remote stations. The stations could share their parameters by including them in headers of frames. The protocol can be implemented as an enhancement to the IEEE 802.11 standard.

摘要翻译： 公开了一种由共享单个无线信道的无线站使用的协议。 当本地站感测到使用该信道的远程站之间的通信时，本地站估计其本地传输是否会中断该正在进行的远程通信。 估计，本地站形成远程站的捕获模型。 从捕获模型中，本地站确定其本地传输是否会阻止每个远程站从另一个远程站捕获信号。 如果本地传输不会中断远程通信，则本地站在远程站使用信道的同时通过信道发送其消息。 本地站使用远程站的参数进行估计。 站可以通过将它们包括在帧的头部中来共享它们的参数。 该协议可以被实现为对IEEE 802.11标准的增强。

公开(公告)号：US20110200026A1

公开(公告)日：2011-08-18

申请号：US12929662

申请日：2011-02-07

申请人： Lusheng Ji ,  Brian Feldman ,  Jonathan Russell Agre

发明人： Lusheng Ji ,  Brian Feldman ,  Jonathan Russell Agre

IPC分类号： H04W84/12 ,  H04W40/00

CPC分类号： H04W12/06 ,  H04L45/54 ,  H04L63/0428 ,  H04L63/062 ,  H04L63/065 ,  H04L63/08 ,  H04L63/0823 ,  H04L63/0884 ,  H04L63/162 ,  H04W40/20 ,  H04W40/248 ,  H04W40/26 ,  H04W84/12 ,  H04W84/18 ,  H04W88/04

摘要： A wireless computer network includes a backbone network including backbone network nodes authenticated to each other and in communication with each other. The wireless computer network also includes a master authenticator node and a proxy authenticator node among the backbone network nodes. When an unauthenticated new node requests authentication to the backbone network and the unauthenticated new node is in communication with at least one of the backbone network nodes, the at least one of the backbone network nodes becoming the proxy authenticator node for the unauthenticated new node and communicates with the master authenticator node to authenticate the unauthenticated new node to the backbone network.

摘要翻译： 无线计算机网络包括骨干网络，骨干网络包括彼此认证并彼此通信的骨干网络节点。 无线计算机网络还包括骨干网络节点中的主认证器节点和代理认证器节点。 当未经认证的新节点向骨干网络请求认证，并且未认证的新节点与至少一个骨干网络节点通信时，所述至少一个骨干网络节点成为未认证的新节点的代理认证器节点并且通信 与主认证器节点认证到骨干网络的未认证的新节点。

公开(公告)号：US07801826B2

公开(公告)日：2010-09-21

申请号：US10628583

申请日：2003-07-29

申请人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre

发明人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre

IPC分类号： G06Q99/00

CPC分类号： G06Q20/02 ,  G06Q20/04 ,  G06Q20/0855 ,  G06Q20/12 ,  G06Q20/367 ,  G06Q20/3674 ,  G06Q20/382

摘要： A system for conducting an agreement between two parties relying on a trusted a third party includes a first party generating a first view of the agreement and transmitting the first view of the agreement to the third party, a second party independently generating a second view of the agreement and transmitting the second view of the agreement to the third party, a wireless network connecting the first party and the second party, and a wired or wireless network connecting the second party to the third party. The trusted third party, receives the first view of the agreement and the second view of the agreement, verifies conditions including that the identities of the parties that transmitted the agreements and that the independent views of the agreement are consistent with each other, and takes action to execute the agreement if the conditions are satisfied.

摘要翻译： 依靠可信赖的第三方进行双方达成协议的系统包括产生协议的第一视图的第一方并将协议的第一视图传送给第三方，第二方独立生成第二视图， 协议并将协议的第二视图传送给第三方，连接第一方和第二方的无线网络以及将第二方连接到第三方的有线或无线网络。 受信任的第三方收到协议的第一个看法和协议的第二个观点，验证条件，包括转让协议的各方的身份，协议的独立意见彼此一致，并采取行动 如果条件满足，执行协议。

公开(公告)号：US08683059B2

公开(公告)日：2014-03-25

申请号：US11453074

申请日：2006-06-15

申请人： Jonathan Russell Agre ,  Jesus Molina-Terriza ,  Lusheng Ji ,  Prabha Ramachandran

发明人： Jonathan Russell Agre ,  Jesus Molina-Terriza ,  Lusheng Ji ,  Prabha Ramachandran

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： H04L63/0263 ,  H04L63/104

摘要： A security management approach that combines network security management with application layer or software service security to address the threat of internal network security attacks. The invention is directed to a method for enhancing network security on a computer network. Data access privileges relating to users and services are interpreted, network access rules are determined based on the interpreted privileges, and network message traffic is monitored and filtered based on the determined network access rules. The interpreting, determining, monitoring, and filtering are performed at a network layer responsible for controlling how a network device gains access to the network, such as the Media Access Control (MAC) layer.

摘要翻译： 一种将网络安全管理与应用层或软件服务安全性相结合的安全管理方法，以解决内部网络安全攻击的威胁。 本发明涉及一种用于增强计算机网络上的网络安全性的方法。 解释与用户和服务相关的数据访问权限，基于解释的权限确定网络访问规则，并且基于所确定的网络访问规则来监视和过滤网络消息业务。 解释，确定，监视和过滤在负责控制网络设备如何获得对网络（例如媒体访问控制（MAC））层的访问的网络层执行。

公开(公告)号：US07822688B2

公开(公告)日：2010-10-26

申请号：US11045484

申请日：2005-01-31

申请人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre ,  Jesus Molina Terriza ,  Wei-lun Chen

发明人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre ,  Jesus Molina Terriza ,  Wei-lun Chen

IPC分类号： G06Q20/00

CPC分类号： G07F7/0866 ,  G06Q20/02 ,  G06Q20/04 ,  G06Q20/10 ,  G06Q20/102 ,  G06Q20/12 ,  G06Q20/32 ,  G06Q20/3227 ,  G06Q20/341 ,  G06Q20/3552 ,  G06Q20/363 ,  G06Q20/3674 ,  G06Q20/40 ,  G06Q20/401 ,  G07F7/0886 ,  G07F7/1008

摘要： A mobile phone system and method of initializing, at a secure transaction server (STS), a mobile payment software with a software authentication parameter, as an authentic mobile payment software; providing an STS correlation between a personal identification entry (PIE) and the authentic mobile payment software; installing, in a mobile phone, the authentic mobile payment software; and inputting, by a user, the PIE to the installed authentic mobile payment software to generate according to the PIE and the software authentication parameter a transformed secure authenticable mobile phone cashless monetary transaction over the mobile phone network, as a mobile phone wireless wallet of the user of the mobile phone. The mobile phone authenticable cashless monetary transaction is performed according to an agreement view(s) protocol.

摘要翻译： 一种移动电话系统和方法，在安全交易服务器（STS）下，具有软件认证参数的移动支付软件作为真正的移动支付软件; 在个人识别条目（PIE）和真实移动支付软件之间提供STS相关性; 在移动电话中安装真正的移动支付软件; 并且由用户将PIE输入到所安装的真实移动支付软件，以根据PIE和软件认证参数通过移动电话网络转换安全可认证的手机无现金货币交易，作为移动电话无线钱包 用户手机。 根据协议视图协议执行手机可认证的无现金货币交易。

公开(公告)号：US08630275B2

公开(公告)日：2014-01-14

申请号：US12929662

申请日：2011-02-07

申请人： Lusheng Ji ,  Brian Feldman ,  Jonathan Russell Agre

发明人： Lusheng Ji ,  Brian Feldman ,  Jonathan Russell Agre

IPC分类号： H04W4/00

CPC分类号： H04W12/06 ,  H04L45/54 ,  H04L63/0428 ,  H04L63/062 ,  H04L63/065 ,  H04L63/08 ,  H04L63/0823 ,  H04L63/0884 ,  H04L63/162 ,  H04W40/20 ,  H04W40/248 ,  H04W40/26 ,  H04W84/12 ,  H04W84/18 ,  H04W88/04

摘要： A wireless computer network includes a backbone network including backbone network nodes authenticated to each other and in communication with each other. The wireless computer network also includes a master authenticator node and a proxy authenticator node among the backbone network nodes. When an unauthenticated new node requests authentication to the backbone network and the unauthenticated new node is in communication with at least one of the backbone network nodes, the at least one of the backbone network nodes becoming the proxy authenticator node for the unauthenticated new node and communicates with the master authenticator node to authenticate the unauthenticated new node to the backbone network.

摘要翻译： 无线计算机网络包括骨干网络，骨干网络包括彼此认证并彼此通信的骨干网络节点。 无线计算机网络还包括骨干网络节点中的主认证器节点和代理认证器节点。 当未经认证的新节点向骨干网络请求认证，并且未认证的新节点与至少一个骨干网络节点通信时，所述至少一个骨干网络节点成为未认证的新节点的代理认证器节点并且通信 与主认证器节点认证到骨干网络的未认证的新节点。

公开(公告)号：US07877605B2

公开(公告)日：2011-01-25

申请号：US11041223

申请日：2005-01-25

申请人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre ,  Jesus Molina Terriza

发明人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre ,  Jesus Molina Terriza

IPC分类号： H04L29/06

CPC分类号： G06Q10/10

摘要： A computer-based system securely transmitting and authenticating a transaction input by a user while retaining the anonymity of the user with respect to content of the transaction, including a device encoding the content of the transaction input by the user with a key known only to another device, encoding other portions of the transaction with another key known only to a secure transaction server, and sending the encoded content of the transaction and the encoded other portions of the transaction to the secure transaction server to authenticate an identity of the user of the device, wherein the secure transaction server decodes the other portions of the transaction and sends the encoded content of the transaction to the another device to be finally decoded.

摘要翻译： 一种基于计算机的系统，安全地传送和认证用户输入的交易，同时保留用户对交易内容的匿名性，包括用仅使用另一个知道的密钥来编码用户输入的交易内容的设备 设备，使用仅为安全事务服务器知道的另一密钥对事务的其他部分进行编码，以及将事务的编码内容和事务的编码的其他部分发送到安全事务服务器，以验证设备的用户的身份 其中所述安全事务服务器对所述事务的其他部分进行解码，并将所述事务的编码内容发送到所述另一设备以最终解码。

公开(公告)号：US07711097B2

公开(公告)日：2010-05-04

申请号：US10875207

申请日：2004-06-25

申请人： Lusheng Ji ,  Yannis Labrou ,  Jonathan Russell Agre

发明人： Lusheng Ji ,  Yannis Labrou ,  Jonathan Russell Agre

IPC分类号： H04M15/00

CPC分类号： G06Q30/06 ,  G06Q20/202 ,  H04L12/14 ,  H04L12/1432 ,  H04L12/1453 ,  H04L63/0236 ,  H04L63/0823 ,  H04L67/14

摘要： A pay-per-connection system is coupled to a network service provider and to a client computer. The pay-per-connection system receives payment and a passcode from a user, determines duration of use based on the payment, and provides access by the client computer to the network service provider based on the payment and the passcode without advance sign-up by the user with the network service provider.

摘要翻译： 付费连接系统耦合到网络服务提供商和客户端计算机。 每个连接付费系统从用户接收付款和密码，基于付款确定使用时间，并且基于付款和密码提供客户计算机对网络服务提供商的访问，而无需预先注册 用户与网络服务提供商。

公开(公告)号：US07492787B2

公开(公告)日：2009-02-17

申请号：US10108473

申请日：2002-03-29

申请人： Lusheng Ji ,  Jonathan Russell Agre

发明人： Lusheng Ji ,  Jonathan Russell Agre

IPC分类号： H04J3/16 ,  H04Q7/00 ,  H04Q7/24 ,  H04L12/56

CPC分类号： H04L29/12009 ,  H04L12/5692 ,  H04L29/12018 ,  H04L61/10 ,  H04W8/26 ,  H04W36/0011 ,  H04W36/14 ,  H04W80/04

摘要： A method of migrating across link technologies on an IP-based subnet while maintaining on-going communication comprises selecting a link, and notifying interested hosts of the address of the selected link. A mobile computing devices migrates across link technologies on a subnet while maintaining on-going communication and comprises a link migration module selecting a link, and notifying interested hosts of the address of the selected link, and a dynamic MAC to IP binding module binding a MAC address to an IP address based upon the selected link. A computer-readable medium storing a program which when executed by a computer causes the computer to execute the functions of migrating across link technologies on a subnet while maintaining on-going communication, comprising selecting a link, and notifying interested hosts of the address of the selected link. The migration is executed within the mobile computing device and does not entail modification to the other components of the network.

摘要翻译： 在保持持续通信的同时在基于IP的子网上跨越链路技术迁移的方法包括选择链路，并通知感兴趣的主机所选链接的地址。 移动计算设备在子网上跨越链路技术迁移，同时保持正在进行的通信，并且包括链路迁移模块选择链路，并且向感兴趣的主机通知所选链路的地址，以及绑定MAC的动态MAC到IP绑定模块 基于所选择的链接地址到IP地址。 一种存储程序的计算机可读介质，当由计算机执行时，所述计算机使得所述计算机执行在子网上跨链接技术迁移的功能，同时保持正在进行的通信，包括选择链路，并通知感兴趣的主机 选择的链接。 迁移在移动计算设备内执行，不需要修改网络的其他组件。

公开(公告)号：US07353382B2

公开(公告)日：2008-04-01

申请号：US10458205

申请日：2003-06-11

申请人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre

发明人： Yannis Labrou ,  Lusheng Ji ,  Jonathan Russell Agre

IPC分类号： H04L9/00 ,  H04L9/14 ,  H04K1/00

CPC分类号： H04L63/126 ,  G06Q20/02 ,  G06Q20/04 ,  G06Q20/0855 ,  G06Q20/12 ,  H04L63/0485

摘要： A computer system, a method of a computer system and a computer-readable medium securely transmit and verify a multiparty agreement. The method, the computer system, and the computer readable medium include developing and transmitting views of the multi-party agreement by each party to a separate verification party. The verification party authenticates the participants and determines whether the views of the agreement are mutually consistent, and notifies the partys of the results of the comparison.

摘要翻译： 计算机系统，计算机系统的方法和计算机可读介质安全地传输和验证多方协议。 该方法，计算机系统和计算机可读介质包括由各方开发和发送多方协议的视图到单独的验证方。 验证方认证参与者，确定协议的意见是否相互一致，并通知各方比较结果。