公开(公告)号：US08898469B2

公开(公告)日：2014-11-25

申请号：US13021384

申请日：2011-02-04

申请人： Tat Keung Chan ,  Paul D. Baker ,  Christopher P. Gardner ,  Mark E. Gregotski ,  Ted R. Michaud ,  Xin Qiu ,  Jinsong Zheng

发明人： Tat Keung Chan ,  Paul D. Baker ,  Christopher P. Gardner ,  Mark E. Gregotski ,  Ted R. Michaud ,  Xin Qiu ,  Jinsong Zheng

IPC分类号： H04L9/32 ,  G06F21/10

CPC分类号： G06F21/10 ,  Y10S705/902 ,  Y10S705/911

摘要： A method enables selected features of a software product residing on an end user electronic device with a license delivered from a licensing provider to a service provider of the end user electronic device. The method includes requesting at least one license to authorize a first service provider. An encrypted installation key uniquely associated with the first service provider is received as well as an authorization agent module for installation on one or more authorization agent devices associated with the first service provider. The encrypted installation key and the authorization agent module are installed on the authorization agent devices. A device-unique identifier (DUID) is generated for each authorization agent device based on hardware characteristics of the respective authorization agent devices. The DUID and the encrypted installation key are sent from the authorization agent device to a licensing provider to obtain the requested license. The requested license is received by the authorization agent devices if the DUID and the encrypted installation key are validated by the licensing provider. The license on authorization agent device authorizes and enables the selected features of the software product on an end user electronic device.

摘要翻译： 一种方法使得驻留在最终用户电子设备上的软件产品的选定特征具有从许可提供者向最终用户电子设备的服务提供商提供的许可证。 该方法包括请求至少一个许可证以授权第一服务提供商。 接收与第一服务提供商唯一相关联的加密安装密钥以及用于安装在与第一服务提供商相关联的一个或多个授权代理设备上的授权代理模块。 加密安装密钥和授权代理模块安装在授权代理设备上。 基于相应的授权代理设备的硬件特性，为每个授权代理设备生成设备唯一标识符（DUID）。 DUID和加密的安装密钥从授权代理设备发送到许可提供商以获取所请求的许可证。 如果DUID和加密安装密钥由许可提供商验证，则授权代理设备将收到所请求的许可证。 授权代理设备的许可证在最终用户电子设备上授权并启用软件产品的选定功能。

公开(公告)号：US08589674B2

公开(公告)日：2013-11-19

申请号：US13350072

申请日：2012-01-13

申请人： Alexander Medvinsky ,  Tat Keung Chan ,  Eric J. Sprunk

发明人： Alexander Medvinsky ,  Tat Keung Chan ,  Eric J. Sprunk

IPC分类号： H04L9/00

CPC分类号： H04L9/0891 ,  H04L9/12 ,  H04L9/3268

摘要： In one embodiment, a method includes receiving a revocation request for revoking a model type of a device. A first computing device determines a list of device unit identifiers (UIDs) that are associated with the model type from a database. The device UIDs are for devices of the model type manufactured by a first entity. The method adds the list of device UIDs to a device revocation list and outputs the device revocation list to revoke a validity of secure information associated with devices associated with the list of device UIDs.

摘要翻译： 在一个实施例中，一种方法包括接收用于撤销设备的模型类型的吊销请求。 第一计算设备确定与数据库中的模型类型相关联的设备单元标识符（UID）的列表。 设备UID用于由第一实体制造的型号类型的设备。 该方法将设备UID的列表添加到设备撤销列表，并输出设备撤销列表以撤销与设备UID列表相关联的设备相关联的安全信息的有效性。

公开(公告)号：US20130185173A1

公开(公告)日：2013-07-18

申请号：US13353309

申请日：2012-01-18

申请人： Jinsong Zheng ,  Tat Keung Chan ,  David B. Prickett ,  Xin Qiu

发明人： Jinsong Zheng ,  Tat Keung Chan ,  David B. Prickett ,  Xin Qiu

IPC分类号： G06Q30/06

CPC分类号： G06Q30/06

摘要： A method and apparatus for provisioning devices. One method includes authenticating a first customer as an authenticated user and receiving from a first customer a first request to establish a credit record for a specified number of upgraded feature licenses. The upgraded feature licenses are obtainable from a third party supplier and are associated with components available from the third party supplier. The credit record includes feature credits to be made available to the first customer to obtain the upgraded feature licenses from the third party supplier. A second request is received from the first customer to release the feature credits to a credit pool associated with the first customer so that the feature credits are available to the first customer. The upgraded feature licenses are generated and the credit pool associated with the first customer is debited for the number of credits needed to obtain the upgraded feature licenses.

摘要翻译： 一种供应设备的方法和装置。 一种方法包括将第一客户认证为经认证的用户，并从第一客户接收针对指定数量的升级特征许可证建立信用记录的第一请求。 升级后的功能许可证可从第三方供应商获得，并与第三方供应商提供的组件相关联。 信用记录包括要向第一客户提供的特征信用以从第三方供应商获得升级的功能许可证。 从第一客户接收到第二请求，以将特征信用释放到与第一客户相关联的信用卡，使得特征信用可用于第一客户。 生成升级的功能许可证，并且与第一个客户相关联的信用额度被扣除获得升级的功能许可证所需的信用点数。

公开(公告)号：US08050285B2

公开(公告)日：2011-11-01

申请号：US11845019

申请日：2007-08-24

申请人： Tat Keung Chan

发明人： Tat Keung Chan

IPC分类号： H04L12/56

CPC分类号： H04B3/542 ,  H04B2203/5445 ,  H04B2203/5466

摘要： A power line module and method. In a preferred embodiment, the power line module is adapted to couple to a power line outlet, which is provided on a power line network within a spatial region. A power line chip is within a housing. In a preferred embodiment. the power line chip has an input/output port and is capable of converting a power line telecommunication signal having a data rate of greater than about 80 Megabits per second from the power line network to an Ethernet signal for use in a local area network segment. The module has a coupling device coupled to the input/output port of the power line chip. In a preferred embodiment, the module has a first pin comprising a plurality of first spring members operably coupled the coupling device. The first pin is insertable into a first site of the power outlet. The module has a second pin comprising a plurality of second spring members operably coupled to the coupling device.

摘要翻译： 电力线模块及方法。 在优选实施例中，电力线模块适于耦合到设置在空间区域内的电力线网络上的电力线路出口。 电源线芯片在外壳内。 在优选实施例中。 电力线芯片具有输入/输出端口，并且能够将具有大于约80兆比特每秒的数据速率的电力线电信信号从电力线网络转换成用于局域网段的以太网信号。 该模块具有耦合到电力线芯片的输入/输出端口的耦合装置。 在优选实施例中，模块具有包括可操作地联接耦合装置的多个第一弹簧构件的第一销。 第一个引脚可插入电源插座的第一个位置。 模块具有第二销，其包括可操作地联接到联接装置的多个第二弹簧构件。

公开(公告)号：US07769907B2

公开(公告)日：2010-08-03

申请号：US11841877

申请日：2007-08-20

申请人： Tat Keung Chan ,  Songly Mu

发明人： Tat Keung Chan ,  Songly Mu

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： H04B3/542 ,  H04B2203/5408 ,  H04B2203/5441 ,  H04B2203/5445 ,  H04B2203/5466 ,  H04B2203/5479 ,  H04B2203/5483 ,  H04B2203/5491 ,  H04L12/66

摘要： A system for powerline networking. The system has an external data source, which is derived from a world wide networks of computers. A router is coupled to the external data source and coupled to a first datasource connection. A powerline network switch apparatus is coupled to the first datasource connection. The apparatus has a second datasource connection, which is coupled to the first data source connection. The apparatus has a powerline device coupled to the second datasource connection. The powerline device is adapted to receive and transmit information in a first format from the second data source connection and adapted to receive and transmit information in a second format. The apparatus has a virtual local area network device including a first input/output port and a plurality of second input/output ports. Each of the second input/output ports is numbered from 1 through N, where N is an integer greater than 1.

摘要翻译： 电力线网络系统。 该系统具有外部数据源，源自全球计算机网络。 路由器耦合到外部数据源并耦合到第一数据源连接。 电力线网络交换设备耦合到第一数据源连接。 该装置具有第二数据源连接，其连接到第一数据源连接。 该装置具有耦合到第二数据源连接的电力线装置。 电力线设备适于从第二数据源连接接收和发送以第一格式的信息，并适于以第二格式接收和发送信息。 该装置具有包括第一输入/输出端口和多个第二输入/输出端口的虚拟局域网设备。 每个第二输入/输出端口从1到N编号，其中N是大于1的整数。

公开(公告)号：US07401239B2

公开(公告)日：2008-07-15

申请号：US11219029

申请日：2005-09-02

申请人： Tat Keung Chan ,  Songly Mu

发明人： Tat Keung Chan ,  Songly Mu

IPC分类号： G06F1/26

CPC分类号： G06F1/26 ,  H04B3/542 ,  H04B2203/5454

摘要： A power supply apparatus and related method. The power supply apparatus has an AC input. The apparatus has a converter for converting AC power into DC power. In a specific embodiment, the converter has an input and an output. In a specific embodiment, the input of the converter is coupled to the AC input. The power supply apparatus has a DC output for voltage ranging. The output of the converter is coupled to the DC output. The apparatus also has a fan operably configured to transfer thermal energy away from the converter and a data input/output port, the data input/output port being coupled to a data signal from a data source. The apparatus has a coupler coupled between the data input/output port and the AC input. A power line module is coupled to the coupler. The power line module is adapted to convert the data signal from a first format to a second format. The second format is capable of transmission to the AC input. An enclosure is provided for the coupler. The enclosure shields the data signal from noise, e.g., high frequency noise, low frequency noise.

摘要翻译： 电源装置及相关方法。 电源装置具有AC输入。 该装置具有用于将AC电力转换为DC电力的转换器。 在具体实施例中，转换器具有输入和输出。 在具体实施例中，转换器的输入耦合到AC输入。 电源装置具有用于电压测距的直流输出。 转换器的输出耦合到直流输出。 该装置还具有可操作地配置成将热能传送离开转换器和数据输入/输出端口的风扇，数据输入/输出端口被耦合到来自数据源的数据信号。 该装置具有耦合在数据输入/输出端口和AC输入端之间的耦合器。 电源线模块耦合到耦合器。 电力线模块适于将数据信号从第一格式转换成第二格式。 第二种格式能够传输到AC输入。 为耦合器提供外壳。 外壳屏蔽数据信号免受噪声，例如高频噪声，低频噪声。

公开(公告)号：US08997252B2

公开(公告)日：2015-03-31

申请号：US12794305

申请日：2010-06-04

申请人： Alexander Medvinsky ,  Tat Keung Chan

发明人： Alexander Medvinsky ,  Tat Keung Chan

IPC分类号： G06F21/00 ,  H04L29/06 ,  G06F21/10 ,  G06F21/33

CPC分类号： H04L63/06 ,  G06F21/10 ,  G06F21/33 ,  G06F2221/2105 ,  G06F2221/2145 ,  H04L63/0823 ,  H04L63/20 ,  H04L2463/101

摘要： A conditional access system (CAS) computer in a downloadable CAS receives a downloadable management certificate (DMC) and determines, using the DMC, security information including a DMC key size and an expiration time of a DMC subordinate certificate authority (sub-CA) certificate, for the client device. The CAS computer then determines whether the DMC is valid based on the expiration time of the DMC sub-CA certificate. If the DMC is determined to be valid, the CAS server sends a cryptographic identity for the client device and a CAS client to the client device protected using the DMC. At a later time, if the DMC key size is considered to be still sufficiently secure, the validity of the DMC is extended by issuing a new DMC sub-CA certificate with the same public key as the original DMC sub-CA certificate.

摘要翻译： 可下载的CAS中的条件访问系统（CAS）计算机接收可下载的管理证书（DMC），并使用DMC确定包括DMC下属认证机构（子CA）证书的DMC密钥大小和到期时间的安全信息 ，用于客户端设备。 CAS计算机然后根据DMC子CA证书的到期时间确定DMC是否有效。 如果DMC确定为有效，CAS服务器将客户端设备和CAS客户端的加密身份发送到使用DMC保护的客户端设备。 稍后，如果DMC密钥大小被认为仍然足够安全，则DMC的有效性通过发布与DMC DMC-CA认证相同的公钥的新的DMC子CA证书来扩展。

公开(公告)号：US08269622B2

公开(公告)日：2012-09-18

申请号：US12550382

申请日：2009-08-30

申请人： Tat Keung Chan ,  Elsa A. Chan

发明人： Tat Keung Chan ,  Elsa A. Chan

IPC分类号： G08B1/08

CPC分类号： H04L12/2818 ,  G01D4/004 ,  H04L12/2836 ,  H04L12/40039 ,  Y02B90/242 ,  Y02B90/246 ,  Y04S20/322 ,  Y04S20/42 ,  Y04S20/46

摘要： A system for providing network infrastructure for energy management and control is disclosed. A controller integrates powerline and wireless networking technologies in order to provide an integrated network. A gateway sends and receives command and control data across the integrated network. Client devices may connect to the integrated network and perform a variety of functions. An appliance module may send and receive data across the integrated network in relation to a particular appliance. A panel meter may send and receive data across the integrated network in relation to data measured at a distribution panel. A serial bridge may connect various devices to the integrated network. Computing devices may remotely or locally connect to the integrated network and send and receive data.

公开(公告)号：US20120042160A1

公开(公告)日：2012-02-16

申请号：US13207394

申请日：2011-08-10

申请人： Madjid F. Nakhjiri ,  Tat Keung Chan ,  Alexander Medvinsky

发明人： Madjid F. Nakhjiri ,  Tat Keung Chan ,  Alexander Medvinsky

IPC分类号： H04L29/06 ,  H04L9/32 ,  G06F15/16

CPC分类号： H04L63/0884 ,  H04L9/0844 ,  H04L9/321 ,  H04L9/3271 ,  H04L63/067 ,  H04L63/0892 ,  H04L63/105 ,  H04L63/166

摘要： A method of authentication and authorization over a communications system is provided. Disclosed herein are systems and methods for creating a cryptographic evidence, called authentication/authorization evidence, AE, when a successful authentication/authorization between a client and an authentication server is complete. There are a variety of methods for generating AE. For instance, the AE can be data that is exchanged during the authentication signaling or data that results from it. A distinctive point being that AE results from the authentication process and is used as prior state for the following TLS exchange. An example for creation of AE, is as follows: EAP authentications typically result in an Extended Master Session Key (EMSK). The EMSK can be used to create an Evidence Master Key (EMK) that can then be used to create AE for a variety of servers.

摘要翻译： 提供了一种通信系统的认证和授权方法。 本文公开了当客户端和认证服务器之间的成功认证/授权完成时，用于创建加密证据的系统和方法，称为认证/授权证据。 有多种生成AE的方法。 例如，AE可以是在认证信令期间交换的数据或由其产生的数据。 一个独特之处在于，AE来自认证过程，并被用作以下TLS交换的先前状态。 创建AE的示例如下：EAP认证通常导致扩展主会话密钥（EMSK）。 EMSK可用于创建证据主密钥（EMK），然后可用于为各种服务器创建AE。

公开(公告)号：US20100238003A1

公开(公告)日：2010-09-23

申请号：US12550382

申请日：2009-08-30

申请人： Tat Keung Chan ,  Elsa A. Chan

发明人： Tat Keung Chan ,  Elsa A. Chan

IPC分类号： G05B11/01

CPC分类号： H04L12/2818 ,  G01D4/004 ,  H04L12/2836 ,  H04L12/40039 ,  Y02B90/242 ,  Y02B90/246 ,  Y04S20/322 ,  Y04S20/42 ,  Y04S20/46

摘要： A system for providing network infrastructure for energy management and control is disclosed. A controller integrates powerline and wireless networking technologies in order to provide an integrated network. A gateway sends and receives command and control data across the integrated network. Client devices may connect to the integrated network and perform a variety of functions. An appliance module may send and receive data across the integrated network in relation to a particular appliance. A panel meter may send and receive data across the integrated network in relation to data measured at a distribution panel. A serial bridge may connect various devices to the integrated network. Computing devices may remotely or locally connect to the integrated network and send and receive data.

摘要翻译： 公开了一种用于提供用于能量管理和控制的网络基础设施的系统。 控制器集成电力线和无线网络技术，以提供集成网络。 网关通过集成网络发送和接收命令和控制数据。 客户端设备可以连接到集成网络并执行各种功能。 设备模块可以相对于特定设备跨集成网络发送和接收数据。 面板仪可以通过集成网络发送和接收与配电盘测量的数据相关的数据。 串行桥可以将各种设备连接到集成网络。 计算设备可以远程或本地连接到集成网络并发送和接收数据。