公开(公告)号：US07770032B2

公开(公告)日：2010-08-03

申请号：US11547711

申请日：2004-04-06

申请人： Pasquale Andrea Nesta ,  Luigi Nesta, legal representative ,  Miranda Aurigemma, legal representative ,  Giovanna Patrizia Nesta, legal representative ,  Pier Luigi Zaccone ,  Paolo Dal Checco ,  Davide Cavagnino ,  Francesco Bergadano ,  Michele Miraglia

发明人： Pasquale Andrea Nesta ,  Pier Luigi Zaccone ,  Paolo Dal Checco ,  Davide Cavagnino ,  Francesco Bergadano ,  Michele Miraglia

IPC分类号： G06F21/00

CPC分类号： G06F21/6209 ,  G06F2221/2101 ,  H04L9/0833 ,  H04L9/0891

摘要： A method for protecting sensitive data in an entry of a log file for later audit, which includes encrypting the sensitive data in the log entry by using a random cryptographic key for each auditor authorized to access the log entry, encrypting the random cryptographic key by using an auditor's personal cryptographic key, and for each auditor not authorized to access the log entry, encrypting a fake cryptographic key having the same properties as the random cryptographic key by using an auditor's personal cryptographic key.

摘要翻译： 一种用于保护日志文件的条目中的敏感数据以供稍后审核的方法，其包括通过使用被授权访问日志条目的每个审核员使用随机加密密钥对日志条目中的敏感数据进行加密，使用 审核员的个人加密密钥，对于每个没有授权访问日志条目的审核员，通过使用审核员的个人密码密钥加密具有与随机加密密钥相同属性的伪密码密钥。

公开(公告)号：US08245047B2

公开(公告)日：2012-08-14

申请号：US12086688

申请日：2005-12-19

申请人： Pier Luigi Zaccone ,  Manuel Leone ,  Ettore Caprella ,  Francesco Bergadano ,  Davide Cavagnino ,  Paolo Dal Checco

发明人： Pier Luigi Zaccone ,  Manuel Leone ,  Ettore Caprella ,  Francesco Bergadano ,  Davide Cavagnino ,  Paolo Dal Checco

IPC分类号： H04L29/06

CPC分类号： H04L9/3239 ,  H04L9/0833 ,  H04L9/0891 ,  H04L9/3218 ,  H04L9/3255

摘要： A method for managing a group signature scheme includes in a setup procedure for group initialization, generating, by a group manager, a group public key. In a join procedure for the group manager to add a new member to the group, the method includes generating by the new member, user information, and providing the generated user information to the group manager, and computing, by the group manager, membership information for the new member based on the user information received by the new member and on the group public key, and providing to the new member the computed membership information. In particular, the membership information is computed, by the group manager, as a function of the inverse of a given hash function of the user information. In a signing procedure for a group member to sign a message on behalf of the group, the method includes: using, by the group member, the membership information and the user information. The method further includes the use of digital certificates, in order for the group member to prove to the group manager the possession of said user information.

摘要翻译： 用于管理组签名方案的方法包括在组初始化的设置过程中，由组管理器生成组公钥。 在组管理者向组中添加新成员的加入过程中，该方法包括由新成员生成用户信息，并向组管理者提供生成的用户信息，以及由组管理器计算会员信息 基于新成员接收的用户信息和组公钥，为新成员提供计算的成员资格信息。 特别地，由组管理者根据用户信息的给定散列函数的倒数来计算会员信息。 在组成员代表组签署消息的签名过程中，该方法包括：由组成员使用成员资格和用户信息。 该方法还包括使用数字证书，以便小组成员向组管理员证明拥有所述用户信息。

公开(公告)号：US20090222668A1

公开(公告)日：2009-09-03

申请号：US12086688

申请日：2005-12-19

申请人： Pier Luigi Zaccone ,  Manuel Leone ,  Ettore Caprella ,  Francesco Bergadano ,  Davide Cavagnino ,  Paolo Dal Checco

发明人： Pier Luigi Zaccone ,  Manuel Leone ,  Ettore Caprella ,  Francesco Bergadano ,  Davide Cavagnino ,  Paolo Dal Checco

IPC分类号： H04L9/32 ,  H04L9/08 ,  H04L9/14

CPC分类号： H04L9/3239 ,  H04L9/0833 ,  H04L9/0891 ,  H04L9/3218 ,  H04L9/3255

摘要： A method for managing a group signature scheme includes in a setup procedure for group initialization, generating, by a group manager, a group public key. In a join procedure for the group manager to add a new member to the group, the method includes generating by the new member, user information, and providing the generated user information to the group manager, and computing, by the group manager, membership information for the new member based on the user information received by the new member and on the group public key, and providing to the new member the computed membership information. In particular, the membership information is computed, by the group manager, as a function of the inverse of a given hash function of the user information. In a signing procedure for a group member to sign a message on behalf of the group, the method includes: using, by the group member, the membership information and the user information. The method further includes the use of digital certificates, in order for the group member to prove to the group manager the possession of said user information.

摘要翻译： 用于管理组签名方案的方法包括在组初始化的设置过程中，由组管理器生成组公钥。 在组管理者向组中添加新成员的加入过程中，该方法包括由新成员生成用户信息，并向组管理者提供生成的用户信息，以及由组管理器计算会员信息 基于新成员接收的用户信息和组公钥，为新成员提供计算的成员资格信息。 特别地，由组管理者根据用户信息的给定散列函数的倒数来计算会员信息。 在组成员代表组签署消息的签名过程中，该方法包括：由组成员使用成员资格和用户信息。 该方法还包括使用数字证书，以便小组成员向组管理员证明拥有所述用户信息。

公开(公告)号：US07636848B2

公开(公告)日：2009-12-22

申请号：US10580438

申请日：2003-11-27

申请人： Ettore Elio Caprella ,  Paolo De Lutiis ,  Manuel Leone ,  Pier Luigi Zaccone

发明人： Ettore Elio Caprella ,  Paolo De Lutiis ,  Manuel Leone ,  Pier Luigi Zaccone

IPC分类号： H04L9/32 ,  H04L29/06 ,  G06F7/04

CPC分类号： H04L41/28 ,  H04L63/0442 ,  H04L63/0823 ,  H04L63/126

摘要： Communication between an administrator device and an administered device in a network is arranged in the form of a chain of digitally signed communication items including messages sent from an originator device to a recipient device. Each message has an associated respective digitally signed receipt, and the originator device is configured not to send a new item toward the recipient device in the absence of a respective digitally signed receipt for a previously sent item. With at least one, and preferably by both of the administrator device and the administered device, there is stored a history record of communication items exchanged therebetween. The history record is agreed upon and signed by both the administrator device and the administered device.

摘要翻译： 管理员设备和网络中的管理设备之间的通信以数字签名的通信项目链的形式进行布置，包括从发起者设备发送到接收者设备的消息。 每个消息具有关联的相应的数字签名的收据，并且发起者设备被配置为在没有针对先前发送的项目的相应的数字签名的收据的情况下，向接收者设备发送新的项目。 对于至少一个，优选地由管理员设备和被管理设备两者，存储有在其间交换的通信项目的历史记录。 历史记录由管理员设备和管理设备同意并签署。