公开(公告)号：US09100413B2

公开(公告)日：2015-08-04

申请号：US13245061

申请日：2011-09-26

申请人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little ,  Scott W. Totzke

发明人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little ,  Scott W. Totzke

IPC分类号： G06F7/04 ,  G06F17/30 ,  G06F11/00 ,  G06F17/00 ,  G06F12/14 ,  H04N7/16 ,  G08B13/00 ,  G08B21/00 ,  G08B29/00 ,  H04L29/06 ,  H04M1/66 ,  H04M3/16 ,  G06F7/00 ,  H04W12/02 ,  G06F21/62 ,  G06F21/88

CPC分类号： G06F21/6245 ,  G06F21/602 ,  G06F21/6218 ,  G06F21/88 ,  G06F2221/2107 ,  G06F2221/2113 ,  G06F2221/2143 ,  H04L63/0428 ,  H04L63/101 ,  H04L63/105 ,  H04W12/02 ,  H04W12/08

摘要： A system and method for selectively securing data from unauthorized access on a client device storing a plurality of data types with reference to an authorization level indicated in a command. A command is received at a client device comprising an authorization level indicator. Based on at least one predefined rule, which may be implemented in an IT policy stored at the client device, each of the plurality of data types to be secured is determined, and then the data corresponding to those types is secured. The data may be secured by encrypting and/or deleting the data at the client device. The predefined rules associated with each authorization level may be configured by a user or administrator having an authorization level that exceeds the associated authorization level.

公开(公告)号：US08056143B2

公开(公告)日：2011-11-08

申请号：US12016723

申请日：2008-01-18

申请人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little ,  Scott W. Totzke

发明人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little ,  Scott W. Totzke

IPC分类号： G06F7/04 ,  G06F17/30 ,  G06F11/00 ,  G06F17/00 ,  G06F12/14 ,  H04N7/16 ,  G08B13/00 ,  G08B21/00 ,  G08B29/00 ,  H04L29/06 ,  H04M1/66 ,  H04M3/16 ,  G06F7/00

CPC分类号： G06F21/6245 ,  G06F21/602 ,  G06F21/6218 ,  G06F21/88 ,  G06F2221/2107 ,  G06F2221/2113 ,  G06F2221/2143 ,  H04L63/0428 ,  H04L63/101 ,  H04L63/105 ,  H04W12/02 ,  H04W12/08

摘要： A system and method for selectively securing data from unauthorized access on a client device storing a plurality of data types with reference to an authorization level indicated in a command. A command is received at a client device comprising an authorization level indicator. Based on at least one predefined rule, which may be implemented in an IT policy stored at the client device, each of the plurality of data types to be secured is determined, and then the data corresponding to those types is secured. The data may be secured by encrypting and/or deleting the data at the client device. The predefined rules associated with each authorization level may be configured by a user or administrator having an authorization level that exceeds the associated authorization level. The system and method thus provide a method for securing only selected data types, depending on the authorization level of the issuer of the command.

摘要翻译： 一种系统和方法，用于参考命令中指示的授权级别选择性地保护存储多种数据类型的客户机设备上的未授权访问的数据。 在包括授权级别指示符的客户端设备处接收到命令。 基于可以在存储在客户端设备的IT策略中实现的至少一个预定规则，确定要保护的多个数据类型中的每一个，然后确保与这些类型对应的数据。 可以通过在客户端设备处加密和/或删除数据来保护数据。 与每个授权级别相关联的预定义规则可以由具有超过相关授权级别的授权级别的用户或管理员配置。 因此，系统和方法提供了一种仅根据命令的发行者的授权级别来保护所选择的数据类型的方法。

公开(公告)号：US20100275029A1

公开(公告)日：2010-10-28

申请号：US12829555

申请日：2010-07-02

申请人： Herbert A. Little ,  David R. Clark ,  Russell N. Owen ,  Scott W. Totzke ,  Neil P. Adams ,  Michael S. Brown

发明人： Herbert A. Little ,  David R. Clark ,  Russell N. Owen ,  Scott W. Totzke ,  Neil P. Adams ,  Michael S. Brown

IPC分类号： H04L9/32 ,  G06F9/445

CPC分类号： G06F21/62 ,  G06F21/6218 ,  G06F21/64 ,  G06F21/71 ,  G06F2221/2105 ,  G06F2221/2113 ,  G06F2221/2143 ,  G06F2221/2149 ,  G06F2221/2153

摘要： In at least one embodiment, there is provided a mobile wireless device comprising: a microprocessor and memory, the memory comprising a set of control settings used to control a plurality of device operations; wherein the microprocessor is configured to: receive a first digital signature key for verifying digital signatures on software applications to be installed on the device; determine if any digital signature keys for verifying digital signatures on software applications to be installed on the device exist on the device, and if not, store the received first digital signature key in the memory; receive a software application for installation on the device; verify a digital signature on the received software application using the first digital signature key; and install the software application on the device if the digital signature on the received software application is successfully verified.

摘要翻译： 在至少一个实施例中，提供了一种移动无线设备，包括：微处理器和存储器，所述存储器包括用于控制多个设备操作的一组控制设置; 其中所述微处理器被配置为：接收用于验证要安装在所述设备上的软件应用上的数字签名的第一数字签名密钥; 确定用于在设备上存在用于验证要安装在设备上的软件应用上的数字签名的数字签名密钥是否存在，如果不存在，则将接收到的第一数字签名密钥存储在存储器中; 接收在设备上安装的软件应用程序; 使用第一数字签名密钥验证所接收的软件应用上的数字签名; 并且如果接收到的软件应用程序上的数字签名被成功验证，则将软件应用程序安装在设备上。

公开(公告)号：US08850188B2

公开(公告)日：2014-09-30

申请号：US13614755

申请日：2012-09-13

申请人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

发明人： Neil P. Adams ,  Herbert A. Little ,  Michael K. Brown ,  Michael S. Brown ,  Michael G. Kirkup

IPC分类号： H04L29/06 ,  H04L12/58 ,  H04L9/32 ,  H04W12/06

CPC分类号： H04L51/38 ,  H04L9/3263 ,  H04L63/0823 ,  H04L2209/80 ,  H04W4/02 ,  H04W4/12 ,  H04W12/06

摘要： A system and method for processing certificates located in a certificate search. Certificates located in a certificate search are processed at a data server (e.g. a mobile data server) coupled to a computing device (e.g. a mobile device) to determine status data that can be used to indicate the status of those certificates to a user of the computing device. Selected certificates may be downloaded to the computing device for storage, and the downloaded certificates are tracked by the data server. This facilitates the automatic updating of the status of one or more certificates stored on the computing device by the data server, in which updated status data is pushed from the data server to the computing device.

摘要翻译： 用于处理位于证书搜索中的证书的系统和方法。 位于证书搜索中的证书在耦合到计算设备（例如，移动设备）的数据服务器（例如移动数据服务器）处理，以确定可用于向用户指示这些证书的状态的状态数据 计算设备。 选定的证书可以下载到计算设备进行存储，并且下载的证书由数据服务器跟踪。 这有助于数据服务器自动更新存储在计算设备上的一个或多个证书的状态，其中将更新的状态数据从数据服务器推送到计算设备。

公开(公告)号：US20130007459A1

公开(公告)日：2013-01-03

申请号：US13611016

申请日：2012-09-12

申请人： James A. Godfrey ,  Herbert A. Little ,  Michael K. Brown ,  Neil P. Adams ,  Carl L. Cherry ,  Timothy R. Tyhurst ,  Michael S. Brown

发明人： James A. Godfrey ,  Herbert A. Little ,  Michael K. Brown ,  Neil P. Adams ,  Carl L. Cherry ,  Timothy R. Tyhurst ,  Michael S. Brown

IPC分类号： H04L9/32 ,  G06F21/00 ,  G06F15/16

CPC分类号： H04L12/5835 ,  G06Q10/107 ,  H04L51/066 ,  H04L51/38 ,  H04L63/0442 ,  H04L63/045 ,  H04L63/062 ,  H04L63/101 ,  H04L63/126 ,  H04L67/04 ,  H04L67/28 ,  H04L67/2828 ,  H04L69/04 ,  H04L69/329 ,  H04L2463/062 ,  H04W4/12 ,  H04W4/16 ,  H04W12/02 ,  H04W12/10 ,  H04W24/02 ,  H04W28/06

摘要： A system and method are provided for pre-processing encrypted and/or signed messages at a host system before the message is transmitted to a wireless mobile communication device. The message is received at the host system from a message sender. There is a determination as to whether any of the message receivers has a corresponding wireless mobile communication device. For each message receiver that has a corresponding wireless mobile communication device: the message is processed so as to modify the message with respect to encryption and/or authentication aspect. The processed message is transmitted to a wireless mobile communication device that corresponds to the first message receiver. The system and method may include post-processing messages sent from a wireless mobile communications device to a remote system. Authentication and/or encryption message processing is performed upon the message. The processed message may then be sent through the remote system to one or more receivers.

摘要翻译： 提供了一种用于在将消息发送到无线移动通信设备之前在主机系统处理加密和/或签名消息的系统和方法。 消息在主机系统从消息发送方接收。 确定任何消息接收机是否具有相应的无线移动通信设备。 对于具有相应无线移动通信设备的每个消息接收机：处理该消息以便修改关于加密和/或认证方面的消息。 经处理的消息被发送到对应于第一消息接收器的无线移动通信设备。 系统和方法可以包括从无线移动通信设备发送到远程系统的后处理消息。 对消息执行认证和/或加密消息处理。 经处理的消息然后可以通过远程系统发送到一个或多个接收器。

公开(公告)号：US20120191978A1

公开(公告)日：2012-07-26

申请号：US13355228

申请日：2012-01-20

申请人： Herbert A. Little ,  Michael K. Brown ,  Jonathan F. Hammell ,  Michael S. Brown ,  Michael G. Kirkup ,  Neil P. Adams

发明人： Herbert A. Little ,  Michael K. Brown ,  Jonathan F. Hammell ,  Michael S. Brown ,  Michael G. Kirkup ,  Neil P. Adams

IPC分类号： H04L9/00

CPC分类号： H04L51/066 ,  H04L51/38 ,  H04L63/0464 ,  H04L63/0478 ,  H04L63/105 ,  H04W12/02

摘要： A system and method for securing data for redirecting and transporting over a wireless network are generally described herein. In accordance with some embodiments, when it is determined that an electronic message that is protected with a first encryption algorithm is to be transported over a wireless network to a wireless device, the electronic message is converted to a data structure that is recognizable by the wireless device and the data structure is encrypted with a second encryption algorithm using a random session key. The second encryption algorithm has a stronger security than the first encryption algorithm. The random session key is encrypted with a public key and packets that comprise the encrypted data structure and the encrypted random session key are transmitted to the wireless device over the wireless network.

摘要翻译： 通常在此描述用于保护用于通过无线网络重定向和传送的数据的系统和方法。 根据一些实施例，当确定用第一加密算法保护的电子消息将通过无线网络传送到无线设备时，电子消息被转换成可被无线识别的数据结构 设备，并且使用随机会话密钥使用第二加密算法对数据结构进行加密。 第二种加密算法比第一种加密算法具有更强的安全性。 随机会话密钥用公钥加密，并且包括加密数据结构和加密的随机会话密钥的分组通过无线网络传送到无线设备。

公开(公告)号：US08042189B2

公开(公告)日：2011-10-18

申请号：US11614561

申请日：2006-12-21

申请人： Herbert A. Little ,  Neil P. Adams ,  Michael K. Brown ,  Michael S. Brown

发明人： Herbert A. Little ,  Neil P. Adams ,  Michael K. Brown ,  Michael S. Brown

IPC分类号： G06F21/00 ,  G06F21/22

CPC分类号： G06F12/0261 ,  G06F12/0253 ,  G06F21/62 ,  G06F2212/1052 ,  G06F2221/2143

摘要： Embodiments relate to systems and methods for implementation on a mobile device to force the mobile device into a secure state upon detection or determination of a triggering event. Once it is determined that a triggering event has occurred, each application operating on the mobile device is caused to immediately unreference sensitive objects and a secure garbage collection operation is performed upon the unreferenced sensitive objects to render data associated therewith unreadable. The mobile device is then caused to enter a secure state, in which the mobile device cannot be accessed without authorization. A microprocessor within the mobile device is configured to determine the existence of the triggering event according to a configuration data structure and to perform the secure garbage collection.

摘要翻译： 实施例涉及用于在移动设备上实现的系统和方法，以在检测或确定触发事件时强制移动设备进入安全状态。 一旦确定已经发生触发事件，则导致在移动设备上操作的每个应用程序立即不敏感的对象，并且对未引用的敏感对象执行安全的垃圾回收操作，以使与其相关联的数据不可读。 然后使移动设备进入安全状态，在该状态下移动设备无法在未经授权的情况下被访问。 移动设备内的微处理器被配置为根据配置数据结构确定触发事件的存在并执行安全垃圾收集。

公开(公告)号：US08015254B2

公开(公告)日：2011-09-06

申请号：US12477655

申请日：2009-06-03

申请人： Neil P. Adams ,  Michael S. Brown ,  Herbert A. Little ,  Anthony F. Scian ,  Michael K. Brown

发明人： Neil P. Adams ,  Michael S. Brown ,  Herbert A. Little ,  Anthony F. Scian ,  Michael K. Brown

IPC分类号： G06F13/00

CPC分类号： H04L51/066 ,  G06Q10/107 ,  H04L51/00 ,  H04L63/20

摘要： A system and method of selecting messaging settings on a messaging client are provided. A data store configured to operate in conjunction with the messaging client stores records comprising messaging settings or characteristics for previously received and/or sent messages. The messaging client is configured to send outgoing messages, each of the messages having message characteristics, to determine whether a record for an addressed recipient of an outgoing message exists in the data store, and to select messaging settings to control the message characteristics of the outgoing message based on the record where a record exists.

摘要翻译： 提供了一种在消息接发客户端上选择消息传递设置的系统和方法。 被配置为与消息接发客户端一起操作的数据存储器存储包括先前接收和/或发送消息的消息传递设置或特性的记录。 消息传递客户端被配置为发送传出消息，每个消息具有消息特征，以确定数据存储中是否存在外部消息的寻址接收方的记录，并且选择消息传递设置以控制传出的消息特征 基于记录存在的记录的消息。

公开(公告)号：US07953971B2

公开(公告)日：2011-05-31

申请号：US11259372

申请日：2005-10-27

申请人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little ,  Neil P. Adams

发明人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little ,  Neil P. Adams

IPC分类号： H04L29/06

CPC分类号： H04L67/1095 ,  H04L63/0823 ,  H04L63/20

摘要： Systems and methods for processing messages within a wireless communications system are disclosed. A server within the wireless communications system maintains a list of certificates contained in devices that use the server. The server synchronizes or updates the list of certificates based on information contained in message to and from the device. By providing a server with certificates associated with devices that use the server, and providing a system and method for synchronizing the certificates between the device and server, the server can implement powerful features that will improve the efficiency, speed and user satisfaction of the devices. The exemplary embodiments also enable advantageous bandwidth savings by preventing transmission of certificates unnecessarily.

摘要翻译： 公开了一种在无线通信系统内处理消息的系统和方法。 无线通信系统内的服务器维护包含在使用服务器的设备中的证书列表。 服务器根据包含在消息中的信息同步或更新证书列表。 通过向服务器提供与使用服务器的设备相关联的证书，并提供用于在设备和服务器之间同步证书的系统和方法，服务器可以实现强大的功能，从而提高设备的效率，速度和用户满意度。 示例性实施例还通过不必要地传递证书来实现有利的带宽节省。

公开(公告)号：US07929702B2

公开(公告)日：2011-04-19

申请号：US11058259

申请日：2005-02-16

申请人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little

发明人： Michael K. Brown ,  Michael S. Brown ,  Herbert A. Little

IPC分类号： H04L9/00

CPC分类号： H04L9/0825 ,  H04L9/0861 ,  H04L2209/80

摘要： A system and method for generating reproducible session keys in a wireless messaging system. The session key is generated based on a hash of a message itself, optionally concatenated with additional information. Since the local server stores the message, it can easily regenerate the same session key in response to each MORE request. The method of the invention can be implemented with the stored original message, a public key, and an algorithm for generating the session key based on a hash of the message.

摘要翻译： 一种用于在无线消息收发系统中产生可再现会话密钥的系统和方法。 会话密钥基于消息本身的散列生成，可选地与附加信息连接。 由于本地服务器存储消息，因此可以根据每个MORE请求轻松地重新生成相同的会话密钥。 本发明的方法可以利用存储的原始消息，公共密钥和用于基于消息的散列来生成会话密钥的算法来实现。