公开(公告)号：US20100250437A1

公开(公告)日：2010-09-30

申请号：US12741802

申请日：2008-11-07

申请人： Thomas Anton Goeller ,  Tet Hin Yeap

发明人： Thomas Anton Goeller ,  Tet Hin Yeap

IPC分类号： G06Q40/00 ,  H04L12/66 ,  H04L9/32

CPC分类号： H04L63/0442 ,  G06Q30/04 ,  H04L12/14 ,  H04L12/1471 ,  H04L63/0823 ,  H04L63/126 ,  H04M15/00 ,  H04W4/24

摘要： A scalable, distributed system and method for communicating originating network information for multiparty billing of network services, with authentication of originating network attributes, having particular application when value added services are provided to subscribers of other networks, for which price is determined at the terminating end. An originating network attribute, e.g. an originating network identification, is associated with a private-public key pair of the originating network operator, a service request is generated comprising an network attribute pair containing a clear text attribute and an encrypted attribute, encrypted with the private-key of the originating network operator. Authorized parties having a billing relationship with the originating network operator have access to public keys for decryption and verification the originating network identification prior to forwarding of the service request for completion and billing. An attribute pair may be provided as an extension of known service request protocols, and the network attribute may optionally include originating network identification, subscriber information, and other information associated with the service request.

摘要翻译： 一种可扩展的分布式系统和方法，用于通过对始发网络属性的认证来传送网络服务的多方计费的发起网络信息，当将增值服务提供给其他网络的用户时具有特定应用，在终端确定哪个价格 。 发起网络属性，例如 始发网络标识与发起网络运营商的私有 - 公共密钥对相关联，生成包括包含明文属性和加密属性的网络属性对的服务请求，该加密属性用始发网络的私钥加密 操作员。 与起始网络运营商具有计费关系的授权方可以在转发完成和计费的服务请求之前访问用于解密和验证始发网络标识的公钥。 可以将属性对提供为已知服务请求协议的扩展，并且网络属性可以可选地包括发起网络标识，订户信息和与服务请求相关联的其他信息。

公开(公告)号：US20090198997A1

公开(公告)日：2009-08-06

申请号：US12153413

申请日：2008-05-19

申请人： Tet Hin Yeap ,  Thomas Anton Goeller

发明人： Tet Hin Yeap ,  Thomas Anton Goeller

IPC分类号： H04L9/32 ,  H04L9/08 ,  H04L9/30 ,  H04L9/14

CPC分类号： H04L51/28 ,  H04L51/30 ,  H04L63/0442 ,  H04L63/06 ,  H04L63/0823

摘要： A system, method and software module for secure electronic communication services, wherein a public key (25) of private-public-key pair (30,25) is associated with an email address (24), internet name or other registered unique identifier; the registered user of the unique identifier holds the private-key (30) securely, and the respective public-key (25) is made accessible on a key server (6) for look-up and retrieval by other users, for encryption of communications to be sent to the holder of the private-key, and optionally for message confidentiality, message integrity and authentication of sender and recipient, without requiring certificates. A distributed and scalable system is provided by a server network (600; 401, 501) for registration, key distribution and management preferably using a kDNS server hierarchy (601,602,603) or a key-DNS server hierarchy (701,702,) and associated protocols so that public-keys of recipients can be searched and retrieved over the internet based on the recipients email address or other unique identifier, thus facilitating secure communication between users in different network domains and organizations.

摘要翻译： 一种用于安全电子通信服务的系统，方法和软件模块，其中私钥公钥（30,25）的公钥（25）与电子邮件地址（24），互联网名称或其他注册的唯一标识符相关联; 唯一标识符的注册用户可以安全地保存私钥（30），并且可以在密钥服务器（6）上访问相应的公开密钥（25）以供其他用户查询和检索，用于通信加密 被发送给私钥的持有人，并且可选地用于消息的保密性，消息完整性和发送者和接收者的认证，而不需要证书。 分布式和可扩展的系统由服务器网络（600; 401,501）提供，用于优选地使用kDNS服务器层级（601,602,603）或密钥DNS服务器层级（701,702）和相关联的协议进行注册，密钥分发和管理，使得 收件人的公开密钥可以通过互联网根据收件人电子邮件地址或其他唯一标识符进行搜索和检索，从而促进不同网络域和组织中的用户之间的安全通信。

公开(公告)号：US20080118070A1

公开(公告)日：2008-05-22

申请号：US11601872

申请日：2006-11-20

申请人： Tet Hin Yeap ,  Thomas Anton Goeller

发明人： Tet Hin Yeap ,  Thomas Anton Goeller

IPC分类号： H04L9/08 ,  H04L9/30

CPC分类号： H04L63/0823 ,  H04L51/28

摘要： A system to ease secure email communication by providing a unique email address of a user's choice, along with a private and public key pair which are generated and then associated with the email address. Along with the key pair, an plug-in to her preferred mail client is delivered to the user. The plug-in will allow for automatic retrieval of recipient's public keys from a server and encryption of mails to recipients whose email address is associated with a public key. Also, the email plug-in will perform automatic decryption of incoming mail, if necessary, plus additional functionality based on the existence of public and private keys.

摘要翻译： 通过提供用户选择的唯一的电子邮件地址以及生成的然后与电子邮件地址相关联的私钥和公钥对来简化安全的电子邮件通信的系统。 与密钥对一起，她的首选邮件客户端的插件被传递给用户。 该插件将允许从服务器自动检索收件人的公开密钥，并将电子邮件加密到电子邮件地址与公钥相关联的收件人。 此外，如果需要，电子邮件插件将会根据公钥和私钥的存在，对传入的邮件执行自动解密以及额外的功能。

公开(公告)号：US09787650B2

公开(公告)日：2017-10-10

申请号：US12741802

申请日：2008-11-07

申请人： Thomas Anton Goeller ,  Tet Hin Yeap

发明人： Thomas Anton Goeller ,  Tet Hin Yeap

IPC分类号： G06F21/00 ,  H04L29/06 ,  G06Q30/04 ,  H04L12/14 ,  H04M15/00 ,  H04W4/24

CPC分类号： H04L63/0442 ,  G06Q30/04 ,  H04L12/14 ,  H04L12/1471 ,  H04L63/0823 ,  H04L63/126 ,  H04M15/00 ,  H04W4/24

摘要： A scalable, distributed system and method for communicating originating network information for multiparty billing of network services, with authentication of originating network attributes, having particular application when value added services are provided to subscribers of other networks, for which price is determined at the terminating end. An originating network attribute, e.g. an originating network identification, is associated with a private-public key pair of the originating network operator, a service request is generated comprising an network attribute pair containing a clear text attribute and an encrypted attribute, encrypted with the private-key of the originating network operator. Authorized parties having a billing relationship with the originating network operator have access to public keys for decryption and verification the originating network identification prior to forwarding of the service request for completion and billing. An attribute pair may be provided as an extension of known service request protocols, and the network attribute may optionally include originating network identification, subscriber information, and other information associated with the service request.

公开(公告)号：US20110231276A1

公开(公告)日：2011-09-22

申请号：US13034159

申请日：2011-02-24

申请人： Tet Hin Yeap ,  Thomas Anton Goeller ,  Wei Du

发明人： Tet Hin Yeap ,  Thomas Anton Goeller ,  Wei Du

IPC分类号： G06Q30/00

CPC分类号： G06Q30/06 ,  G06Q30/0641 ,  G06Q30/08

摘要： A social network server executes instructions to implement a method that comprises: establishing a connection to a payable content management server that stores a set of preview items corresponding to payable content items and a location element for each payable content item; rendering the preview items accessible to a computing appliance connected to the social network server; receiving an indication that a particular one of the preview items has been selected using the computing appliance; and forwarding to the computing appliance the location element for the payable content item corresponding to the selected preview item. The location element for the payable content item corresponding to the selected preview item comprises an address of (or a domain name routable to) a designated network entity operated by an organization with which an operator of the payable content management server or the payable content item server has an inter-organizational billing arrangement.

摘要翻译： 社交网络服务器执行指令来实现一种方法，该方法包括：建立与应付内容管理服务器的连接，所述应付内容管理服务器存储与应付内容项目相对应的一组预览项目和每个可支付内容项目的位置元素; 呈现连接到社交网络服务器的计算设备可访问的预览项目; 接收使用所述计算设备选择所述预览项目中的特定一个的指示; 以及将与所选择的预览项目相对应的所述应付内容项目的位置元素转发到所述计算设备。 对应于所选择的预览项目的应付内容项目的位置元素包括由可支付内容管理服务器的运营商或可支付内容项服务器与组织操作的指定网络实体（或可路由到）的地址 具有组织间结算安排。

公开(公告)号：US20110038483A1

公开(公告)日：2011-02-17

申请号：US12989930

申请日：2009-04-30

申请人： Thomas Anton Goeller ,  Tet Hin Yeap

发明人： Thomas Anton Goeller ,  Tet Hin Yeap

IPC分类号： H04L9/30

CPC分类号： H04L41/5064 ,  H04L63/0807

摘要： Systems and methods are provided for managing user information comprising presence information, wherein authentication of requesting parties is based on public-private key pair encryption and key Domain Name Service (kDNS) infrastructure. Thus, a response to a request for presence information may be dependent on the authentication status of the requesting party. Presence information stored on a presence server or other network element may be stored or updated upon receiving a request from a user which includes the requestors identify, and is signed with the private key of the requestor. After authentication of a user having a registered unique identifier and an associated public key, presence information may be stored or updated, in either encrypted or unencrypted form. Presence information is preferably stored with user specified policy information for managing access to the presence information by other users, e.g. what information may be shared with anonymous or unauthenticated other users, or with other specific authorized users, or authorized user groups. Advantageously, all communications between communication parties and network elements of the system are encrypted. A scalable and distributed system and method is provided for managing exchange of dynamic information, such as presence information, between users of communications and network services, with improved reliability, security, and personalization. Systems and methods are particularly applicable for securely managing exchange of presence information and other information for multiparty communications service and for peer-to-peer network services.

摘要翻译： 提供了用于管理包括存在信息的用户信息的系统和方法，其中请求方的认证基于公共 - 私人密钥对加密和关键域名服务（kDNS）基础设施。 因此，对存在信息的请求的响应可以取决于请求方的认证状态。 存储在存在服务器或其他网络元件上的存在信息可以在接收到来自包括请求者标识的用户的请求时被存储或更新，并且用请求者的私钥进行签名。 在具有注册的唯一标识符和相关联的公钥的用户的认证之后，可以以加密或未加密的形式存储或更新存在信息。 存在信息优选地存储有用户指定的策略信息，用于管理其他用户访问存在信息，例如， 匿名或未经身份验证的其他用户或其他特定授权用户或授权用户组可以共享哪些信息。 有利地，系统的通信方和网络元件之间的所有通信都被加密。 提供了一种可扩展和分布式的系统和方法，用于管理通信和网络服务的用户之间的动态信息（例如存在信息）的交换，具有改进的可靠性，安全性和个性化。 系统和方法特别适用于安全地管理存在信息和用于多方通信服务和对等网络服务的其他信息的交换。

公开(公告)号：US08646049B2

公开(公告)日：2014-02-04

申请号：US12989930

申请日：2009-04-30

申请人： Thomas Anton Goeller ,  Tet Hin Yeap

发明人： Thomas Anton Goeller ,  Tet Hin Yeap

IPC分类号： H04L29/06

CPC分类号： H04L41/5064 ,  H04L63/0807

摘要： Systems and methods are provided for managing user information comprising presence information, wherein authentication of requesting parties is based on public-private key pair encryption and key Domain Name Service (kDNS) infrastructure. Thus, a response to a request for presence information may be dependent on the authentication status of the requesting party. Presence information stored on a presence server or other network element may be stored or updated upon receiving a request from a user which includes the requestors identify, and is signed with the private key of the requestor. After authentication of a user having a registered unique identifier and an associated public key, presence information may be stored or updated, in either encrypted or unencrypted form. Presence information is preferably stored with user specified policy information for managing access to the presence information by other users, e.g. what information may be shared with anonymous or unauthenticated other users, or with other specific authorized users, or authorized user groups. Advantageously, all communications between communication parties and network elements of the system are encrypted. A scalable and distributed system and method is provided for managing exchange of dynamic information, such as presence information, between users of communications and network services, with improved reliability, security, and personalization. Systems and methods are particularly applicable for securely managing exchange of presence information and other information for multiparty communications service and for peer-to-peer network services.

摘要翻译： 提供了用于管理包括存在信息的用户信息的系统和方法，其中请求方的认证基于公共 - 私人密钥对加密和关键域名服务（kDNS）基础设施。 因此，对存在信息的请求的响应可以取决于请求方的认证状态。 存储在存在服务器或其他网络元件上的存在信息可以在接收到来自包括请求者标识的用户的请求时被存储或更新，并且用请求者的私钥进行签名。 在具有注册的唯一标识符和相关联的公钥的用户的认证之后，可以以加密或未加密的形式存储或更新存在信息。 存在信息优选地存储有用户指定的策略信息，用于管理其他用户访问存在信息，例如， 匿名或未经身份验证的其他用户或其他特定授权用户或授权用户组可以共享哪些信息。 有利地，系统的通信方和网络元件之间的所有通信都被加密。 提供了一种可扩展和分布式的系统和方法，用于管理通信和网络服务的用户之间的动态信息（例如存在信息）的交换，具有改进的可靠性，安全性和个性化。 系统和方法特别适用于安全地管理存在信息和用于多方通信服务和对等网络服务的其他信息的交换。

公开(公告)号：US08538028B2

公开(公告)日：2013-09-17

申请号：US12153413

申请日：2008-05-19

申请人： Tet Hin Yeap ,  Thomas Anton Goeller

发明人： Tet Hin Yeap ,  Thomas Anton Goeller

IPC分类号： H04L9/30

CPC分类号： H04L51/28 ,  H04L51/30 ,  H04L63/0442 ,  H04L63/06 ,  H04L63/0823

摘要： A distributed and scalable system for public key registration, distribution and management is provided, comprising a hierarchical key server network providing key address resolution (kDNS) functionality based on a kDNS server hierarchy or a key-DNS server hierarchy and associated protocols. Thus, public-keys of users, such as email recipients, can be searched and retrieved over the internet based on a unique identifier of the user, facilitating secure communication between users in different network domains and organizations.

摘要翻译： 提供了一种用于公共密钥注册，分发和管理的分布式和可扩展的系统，包括基于kDNS服务器层次结构或密钥DNS服务器层次结构和关联协议提供密钥地址解析（kDNS）功能的分级密钥服务器网络。 因此，可以基于用户的唯一标识符，通过互联网搜索和检索诸如电子邮件接收者的用户的公共密钥，从而促进不同网络域和组织中的用户之间的安全通信。

公开(公告)号：US20110246780A1

公开(公告)日：2011-10-06

申请号：US13140656

申请日：2008-12-18

申请人： Tet Hin Yeap ,  William G. O'Brien ,  Sean MacLean Murray

发明人： Tet Hin Yeap ,  William G. O'Brien ,  Sean MacLean Murray

IPC分类号： H04L9/32 ,  G06Q40/00

CPC分类号： H04L63/0492 ,  G06K7/10366 ,  G06Q20/02 ,  G06Q20/32 ,  G06Q20/322 ,  G06Q20/3278 ,  G06Q20/3829 ,  G06Q20/40 ,  G06Q20/401 ,  G06Q20/4016 ,  G06Q20/425 ,  G06Q2220/00 ,  H04L9/3215 ,  H04L9/3247 ,  H04L9/3271 ,  H04L63/0869 ,  H04L63/18 ,  H04L2209/56 ,  H04L2209/805

摘要： A method involving a communication device, which comprises sending a request to a communication device; receiving a response from the communication device over a local communication path; deriving a received data set from said response; determining at least one data set that had been previously transmitted to the communication device over a wireless portion of a second communication path different from the local communication path; and validating the response based on the received data set and the at least one previously transmitted data set.

摘要翻译： 一种涉及通信设备的方法，包括向通信设备发送请求; 通过本地通信路径从所述通信设备接收响应; 从所述响应导出接收的数据集; 确定先前已经通过不同于本地通信路径的第二通信路径的无线部分发送到通信设备的至少一个数据集; 以及基于所接收的数据集和所述至少一个先前发送的数据集来验证所述响应。

公开(公告)号：US20090160615A1

公开(公告)日：2009-06-25

申请号：US12314456

申请日：2008-12-11

申请人： William G. O'Brien ,  Tet Hin Yeap

发明人： William G. O'Brien ,  Tet Hin Yeap

IPC分类号： H04Q5/22

CPC分类号： G06Q10/087 ,  G06F9/445 ,  G06F21/43 ,  G06F21/79 ,  G06Q20/02 ,  G06Q20/341 ,  G06Q20/3825 ,  G06Q20/3829 ,  G06Q20/385 ,  G06Q20/40 ,  G06Q20/401 ,  G06Q20/40975 ,  G06Q20/425 ,  G07F7/1008 ,  H04L9/3247 ,  H04L63/0823 ,  H04L63/0846 ,  H04L63/126 ,  H04L2209/56 ,  H04L2209/805 ,  H04L2209/84 ,  H04W12/00407 ,  H04W12/08 ,  H04W12/10

摘要： A method which comprises generating a first signature by encoding an identifier with a first additional data set at a first time instant; responding to a first read request from a tag reader by releasing the first signature; generating a second signature by encoding the identifier with a second additional data set at a second time instant, the second additional data set being different from the first additional data set; and responding to a second read request by releasing the second signature. Also, a method which comprises obtaining a signature from a contactlessly readable tag; decrypting the signature with a key to obtain a candidate identifier and a scrambling code associated with the signature; and validating the candidate identifier based on at least one of the scrambling code and the signature.

摘要翻译： 一种方法，包括：通过在第一时刻对具有第一附加数据集的标识符进行编码来生成第一签名; 通过释放所述第一签名来响应来自标签读取器的第一读取请求; 通过在第二时刻用第二附加数据集对所述标识符进行编码来生成第二签名，所述第二附加数据集不同于所述第一附加数据集; 以及通过释放所述第二签名来响应于第二读取请求。 另外，一种方法包括从非接触式可读标签中获取签名; 用密钥解密签名以获得候选标识符和与签名相关联的扰码; 以及基于所述扰码和所述签名中的至少一个来验证所述候选标识符。