公开(公告)号：US09015809B2

公开(公告)日：2015-04-21

申请号：US13563447

申请日：2012-07-31

申请人： Michael Stephen Brown ,  Herbert Anthony Little ,  Graham Russell ,  David Francis Tapuska

发明人： Michael Stephen Brown ,  Herbert Anthony Little ,  Graham Russell ,  David Francis Tapuska

IPC分类号： G06F17/30 ,  H04W12/02 ,  H04W12/08 ,  H04L29/06

CPC分类号： H04W12/02 ,  H04L63/0272 ,  H04W12/08

摘要： A first device establishes a connection with a second device and attempts access, via the connection to an enterprise server of an enterprise. The first device may have a number of security perimeters, ones of which are allowed to use various communications proxies provided by the second device. If the first device and the second device are associated with a same common enterprise, an enterprise perimeter of the first device may be enabled to access the enterprise using an enterprise proxy of the second device.

摘要翻译： 第一设备建立与第二设备的连接，并尝试通过与企业的企业服务器的连接进行访问。 第一设备可以具有多个安全性周边，其中一个被允许使用由第二设备提供的各种通信代理。 如果第一设备和第二设备与相同的公共企业相关联，则可以使得能够使用第二设备的企业代理来访问企业的第一设备的企业范围。

公开(公告)号：US08539226B2

公开(公告)日：2013-09-17

申请号：US13223999

申请日：2011-09-01

申请人： Herbert Anthony Little ,  Neil Patrick Adams ,  David Francis Tapuska ,  Michael Stephen Brown ,  James Andrew Godfrey ,  Michael Grant Kirkup

发明人： Herbert Anthony Little ,  Neil Patrick Adams ,  David Francis Tapuska ,  Michael Stephen Brown ,  James Andrew Godfrey ,  Michael Grant Kirkup

IPC分类号： H04L29/06 ,  G06F11/30 ,  G06F12/14 ,  G06F17/30 ,  H04L9/32 ,  G06K9/00

CPC分类号： H04L67/04 ,  G06Q10/107 ,  H04L12/189 ,  H04L51/00 ,  H04L51/38 ,  H04L63/0272 ,  H04L63/0442 ,  H04L63/045 ,  H04L63/062 ,  H04L63/0823 ,  H04L63/101 ,  H04L63/126 ,  H04W12/02 ,  H04W12/04 ,  H04W12/10 ,  H04W92/18

摘要： A method and system for Certificate management and transfer between messaging clients are disclosed. When communications are established between a first messaging client and a second messaging client, one or more Certificates stored on the first messaging client may be selected and transferred to the second messaging client. Messaging clients may thereby share Certificates. Certificate management functions such as Certificate deletions, Certificate updates and Certificate status checks may also be provided.

公开(公告)号：US08474029B2

公开(公告)日：2013-06-25

申请号：US13423966

申请日：2012-03-19

申请人： Neil Patrick Adams ,  David Francis Tapuska ,  Michael Stephen Brown ,  Herbert Anthony Little

发明人： Neil Patrick Adams ,  David Francis Tapuska ,  Michael Stephen Brown ,  Herbert Anthony Little

IPC分类号： G06F7/04 ,  G06F12/14 ,  G06F21/00

CPC分类号： G06F1/1656 ,  G06F1/1626 ,  G06F1/1632 ,  G06F21/34

摘要： Systems and methods are provided for facilitating access to an electronic device. Password information is stored on the electronic device, and on a portable authenticator. When a user attempts to access the electronic device, the user is prompted to enter a password at the electronic device. The portable authenticator determines the validity of the entered password. The electronic device receives the results of the validity determination from the portable authenticator, and provides access to the electronic device based on the received validity determination.

摘要翻译： 提供了系统和方法以便于访问电子设备。 密码信息存储在电子设备和便携式认证器上。 当用户尝试访问电子设备时，提示用户在电子设备处输入密码。 便携式验证器确定输入密码的有效性。 电子设备从便携式认证器接收有效性确定的结果，并且基于所接收的有效性确定提供对电子设备的访问。

公开(公告)号：US20120233681A1

公开(公告)日：2012-09-13

申请号：US13423966

申请日：2012-03-19

申请人： Neil Patrick Adams ,  David Francis Tapuska ,  Michael Stephen Brown ,  Herbert Anthony Little

发明人： Neil Patrick Adams ,  David Francis Tapuska ,  Michael Stephen Brown ,  Herbert Anthony Little

IPC分类号： H04L9/32

CPC分类号： G06F1/1656 ,  G06F1/1626 ,  G06F1/1632 ,  G06F21/34

摘要： Systems and methods are provided for facilitating access to an electronic device. Password information is stored on the electronic device, and on a portable authenticator. When a user attempts to access the electronic device, the user is prompted to enter a password at the electronic device. The portable authenticator determines the validity of the entered password. The electronic device receives the results of the validity determination from the portable authenticator, and provides access to the electronic device based on the received validity determination.

摘要翻译： 提供了系统和方法以便于访问电子设备。 密码信息存储在电子设备和便携式认证器上。 当用户尝试访问电子设备时，提示用户在电子设备处输入密码。 便携式验证器确定输入密码的有效性。 电子设备从便携式认证器接收有效性确定的结果，并且基于所接收的有效性确定提供对电子设备的访问。

公开(公告)号：US08904170B2

公开(公告)日：2014-12-02

申请号：US13613069

申请日：2012-09-13

申请人： Michael Stephen Brown ,  Neil Patrick Adams ,  David Francis Tapuska ,  Herbert Anthony Little

发明人： Michael Stephen Brown ,  Neil Patrick Adams ,  David Francis Tapuska ,  Herbert Anthony Little

IPC分类号： H04L29/06 ,  H04L9/32

CPC分类号： H04L9/3263 ,  H04L61/1523 ,  H04L63/0823 ,  H04L2209/80 ,  H04W12/04 ,  Y10S707/99933

摘要： A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one embodiment, a certificate synchronization application is programmed to perform certificate searches by querying one or more certificate servers for all of the certificates on those certificate servers. If all of the certificates on a certificate server cannot be successfully retrieved using a single search query, due to a search quota on the certificate server being exceeded for example, the search is re-performed through multiple queries, each corresponding to a narrower subsearch. Embodiments described herein enable large amounts of certificates to be automatically searched for and retrieved from certificate servers, thereby minimizing the need for users to manually search for individual certificates.

摘要翻译： 用于搜索和检索证书的系统和方法，其可以用于编码消息的处理。 在一个实施例中，证书同步应用程序被编程为通过向一个或多个证书服务器查询那些证书服务器上的所有证书来执行证书搜索。 如果证书服务器上的所有证书都无法使用单个搜索查询成功检索，因为例如超过了证书服务器上的搜索配额，则通过多个查询重新执行搜索，每个查询对应于较窄的子搜索。 本文描述的实施例能够从证书服务器自动搜索和检索大量证书，从而最小化对用户手动搜索单个证书的需要。

公开(公告)号：US08452970B2

公开(公告)日：2013-05-28

申请号：US12874325

申请日：2010-09-02

申请人： Herbert Anthony Little ,  Neil Patrick Adams ,  Michael Grant Kirkup ,  David Francis Tapuska

发明人： Herbert Anthony Little ,  Neil Patrick Adams ,  Michael Grant Kirkup ,  David Francis Tapuska

IPC分类号： H04L29/06

CPC分类号： H04L9/3226 ,  G06F21/629 ,  H04L9/3215 ,  H04L9/3247 ,  H04L63/166 ,  H04L2209/80 ,  H04W12/10

摘要： A system and method for code signing. The entities may be software application developers or other individuals or entities that wish to have applications digitally signed. Signing of the applications may be required in order to enable the applications to access sensitive APIs and associated resources of a computing device when the applications are executed on the computing device.

摘要翻译： 用于代码签名的系统和方法。 实体可以是软件应用程序开发人员或希望对应用进行数字签名的其他个人或实体。 可能需要签署应用程序，以便在应用程序在计算设备上执行时，使应用程序能够访问计算设备的敏感API和相关资源。

公开(公告)号：US20130145153A1

公开(公告)日：2013-06-06

申请号：US13566252

申请日：2012-08-03

申请人： Michael Stephen Brown ,  David Francis Tapuska

发明人： Michael Stephen Brown ,  David Francis Tapuska

IPC分类号： H04L29/06

CPC分类号： H04L63/0823 ,  G06F21/6263

摘要： A system, methods and devices for the secure notification of an identity in a communications network. The methods include sending or receiving a communication including a hash of a certificate of a device to notify or detect the presence of the device in a network. Each certificate is associated with an identity which is excluded from the communication of the hash of the certificate. The received hash is compared to hashes of certificates stored in an electronic device to determine an identity. The identity may represent an electronic device or a user of the electronic device.

摘要翻译： 用于通信网络中的身份的安全通知的系统，方法和设备。 所述方法包括发送或接收包括设备的证书的散列的通信，以通知或检测网络中设备的存在。 每个证书与从证书的散列通信中排除的身份相关联。 将接收到的散列与存储在电子设备中的证书的散列进行比较以确定身份。 身份可以表示电子设备或电子设备的用户。

公开(公告)号：US08826008B2

公开(公告)日：2014-09-02

申请号：US13566252

申请日：2012-08-03

申请人： Michael Stephen Brown ,  David Francis Tapuska

发明人： Michael Stephen Brown ,  David Francis Tapuska

IPC分类号： H04L9/32

CPC分类号： H04L63/0823 ,  G06F21/6263

摘要： A system, methods and devices for the secure notification of an identity in a communications network. The methods include sending or receiving a communication including a hash of a certificate of a device to notify or detect the presence of the device in a network. Each certificate is associated with an identity which is excluded from the communication of the hash of the certificate. The received hash is compared to hashes of certificates stored in an electronic device to determine an identity. The identity may represent an electronic device or a user of the electronic device.

摘要翻译： 用于通信网络中的身份的安全通知的系统，方法和设备。 所述方法包括发送或接收包括设备的证书的散列的通信，以通知或检测网络中设备的存在。 每个证书与从证书的散列通信中排除的身份相关联。 将接收到的散列与存储在电子设备中的证书的散列进行比较以确定身份。 身份可以表示电子设备或电子设备的用户。

公开(公告)号：US20130166907A1

公开(公告)日：2013-06-27

申请号：US13336217

申请日：2011-12-23

申请人： Michael Stephen Brown ,  David Francis Tapuska

发明人： Michael Stephen Brown ,  David Francis Tapuska

IPC分类号： H04L9/32

CPC分类号： H04L9/3268 ,  G06F21/33 ,  H04L9/32 ,  H04L9/3247 ,  H04L9/3265 ,  H04L63/0823

摘要： A device certificate binds an identity of a first device to a public key of the first device. The first device comprises a certificate authority service that creates for a process on the first device a process certificate certifying one or more capabilities of the process on the first device. The process certificate is presented to the second device. Upon validating the process certificate using the device certificate, the second device permits the process on the first device to have on the second device one or more of the verified certified capabilities.

摘要翻译： 设备证书将第一设备的标识绑定到第一设备的公钥。 第一设备包括证书授权服务，其为第一设备上的过程创建证明第一设备上的过程的一个或多个能力的过程证书。 过程证书被呈现给第二设备。 在使用设备证书验证过程证书时，第二设备允许第一设备上的过程在第二设备上具有经验证的认证能力中的一个或多个。

公开(公告)号：US08843740B2

公开(公告)日：2014-09-23

申请号：US13310356

申请日：2011-12-02

申请人： Michael Stephen Brown ,  David Francis Tapuska

发明人： Michael Stephen Brown ,  David Francis Tapuska

IPC分类号： H04L29/06 ,  H04L9/32

CPC分类号： H04L9/3268 ,  H04L9/3247 ,  H04L9/3265 ,  H04L63/0823

摘要： A first device with a changing identity establishes a secure connection with a second device in a network by acting as its own certificate authority. The first device issues itself a self-signed root certificate that binds an identity of the first device to a long-term public key of the first device. The root certificate is digitally signed using a long-term private key, where the long-term public key and the long-term private key form a public/private key pair. The first device provides its root certificate to the second device in any trusted manner. The first device can then create a certificate for one or more short-term identities acquired by the first device and sign the newly-created certificate using the long-term private key. The first device can authenticate itself to the second device by sending the newly-created certificate to the second device.

摘要翻译： 具有变化的身份的第一个设备通过充当其自己的证书颁发机构来建立与网络中的第二设备的安全连接。 第一个设备发布自身签名的根证书，将第一个设备的标识绑定到第一个设备的长期公钥。 根证书使用长期私钥进行数字签名，其中长期公钥和长期私钥形成公钥/私钥对。 第一个设备以任何可信的方式将其根证书提供给第二个设备。 然后，第一个设备可以为第一个设备获取的一个或多个短期身份创建证书，并使用长期私钥对新创建的证书进行签名。 第一个设备可以通过将新创建的证书发送到第二个设备来认证自己到第二个设备。