WIRELESS ACCESS POINT SECURITY FOR MULTI-HOP NETWORKS
    71.
    发明申请
    WIRELESS ACCESS POINT SECURITY FOR MULTI-HOP NETWORKS 审中-公开
    多跳网络的无线接入点安全

    公开(公告)号:WO2008004102A2

    公开(公告)日:2008-01-10

    申请号:PCT/IB2007/001892

    申请日:2007-07-06

    Abstract: Security in wireless communication networks that employ relay stations to facilitate communications between base stations and mobile stations is enhanced. In one embodiment, resource information provided to one or more relay stations from a base station or another relay station is encrypted prior to being delivered to the one or more relay stations. Only authorized relay stations are allocated an appropriate key necessary to decrypt the resource information. As such, only appropriate relay stations are able to access and use the resource information to effect communications directly or indirectly between the base stations and the mobile stations. In certain embodiments, the resource information is delivered between the various base and relay stations using either unicast or multicast delivery techniques.

    Abstract translation: 使用中继站来促进基站与移动台之间的通信的无线通信网络中的安全性得到增强。 在一个实施例中,从基站或另一个中继站提供给一个或多个中继站的资源信息在被传送到一个或多个中继站之前被加密。 只有授权的中继站被分配了解密资源信息所需的适当密钥。 这样,只有适当的中继站才能够访问和使用资源信息来直接或间接地在基站和移动站之间进行通信。 在某些实施例中,使用单播或组播传送技术在各种基站和中继站之间传送资源信息。

    METHOD AND APPARATUS FOR CONTENT PROTECTION IN A PERSONAL DIGITAL NETWORK ENVIRONMENT
    72.
    发明申请
    METHOD AND APPARATUS FOR CONTENT PROTECTION IN A PERSONAL DIGITAL NETWORK ENVIRONMENT 审中-公开
    个人数字网络环境内容保护的方法与装置

    公开(公告)号:WO2006044749A2

    公开(公告)日:2006-04-27

    申请号:PCT/US2005/037178

    申请日:2005-10-18

    Abstract: In some embodiments, the invention is a personal digital network ("PDN") including hardware (sometimes referred to as Ingress circuitry) configured to transcript encrypted content that enters the PDN. Typically, the transcription (decryption followed by re-encryption) is performed in hardware within the Ingress circuitry and the re-encryption occurs before the decrypted content is accessible by hardware or software external to the Ingress circuitry. Typically, transcrypted content that leaves the Ingress circuitry remains in re-encrypted form within the PDN whenever it is transferred between integrated circuits or is otherwise easily accessible by software, until it is decrypted within hardware (sometimes referred to as Egress circuitry) for display or playback or output from the PDN. Typically, the PDN is implemented so that no secret in Ingress or Egress circuitry (for use or transfer by the Ingress or Egress circuitry) is accessible in unencrypted form to software or firmware within the PDN or to any entity external to the PDN. Other aspects of the invention are methods for protecting content in a PDN (e.g., an open computing system) and devices (e.g., multimedia graphics cards, set top boxes, or video processors) for use in a PDN.

    Abstract translation: 在一些实施例中,本发明是一种个人数字网络(“PDN”),其包括硬件(有时称为入口电路),其被配置成转录进入PDN的加密内容。 通常,在Ingress电路中的硬件中执行转录(后续是重新加密的解密),并且在通过Ingress电路外部的硬件或软件访问解密的内容之前,重新加密。 通常,离开入口电路的加密内容在PDN之间保持重新加密的形式,无论其在集成电路之间传输还是由软件容易地访问,直到在硬件(有时称为出口电路)中被解密以进行显示或 从PDN播放或输出。 通常,PDN被实现为使得入口或出口电路(用于入口或出口电路的使用或传输)中的秘密可以以未加密的形式被访问到PDN内的软件或固件或PDN外部的任何实体。 本发明的其他方面是用于保护PDN(例如,开放式计算系统)中的内容和用于PDN中的设备(例如,多媒体图形卡,机顶盒或视频处理器)的方法。

    SYSTEM AND METHOD FOR SECURING DATA
    74.
    发明申请
    SYSTEM AND METHOD FOR SECURING DATA 审中-公开
    用于保护数据的系统和方法

    公开(公告)号:WO2005107128A1

    公开(公告)日:2005-11-10

    申请号:PCT/CA2004/001938

    申请日:2004-11-09

    Abstract: Systems and methods are provided for securing data for transmission to a wireless device. The systems and methods may include an electronic messaging system used to send and receive data over a first network and also used to forward data to a wireless device operable in a second network. The electronic messaging system may receive an electronic message encrypted with a first encryption algorithm and addressed to a message recipient in the first network, the message recipient having an associated wireless device operable in the second network. The electronic messaging system may determine that the electronic message is to be transported across the second network to the wireless device, and in response to determining that the electronic message is to be transported across the second network, encrypt the electronic message using a second encryption algorithm and transmit the encrypted message over the second network to the wireless device, with the second encryption algorithm being a stronger encryption algorithm than the first encryption algorithm.

    Abstract translation: 系统和方法被提供用于保护用于传输到无线设备的数据。 系统和方法可以包括用于通过第一网络发送和接收数据的电子消息系统,并且还用于将数据转发到在第二网络中可操作的无线设备。 电子消息传送系统可以接收利用第一加密算法加密并且寻址到第一网络中的消息接收者的电子消息,消息接收者具有可在第二网络中操作的相关联的无线设备。 电子消息系统可以确定电子消息将通过第二网络传输到无线设备,并且响应于确定电子消息要跨越第二网络传输,使用第二加密算法对电子消息进行加密 并且通过第二网络将加密的消息发送到无线设备,其中第二加密算法是比第一加密算法更强的加密算法。

    PROXY METHOD AND SYSTEM FOR SECURE WIRELESS ADMINISTRATION OF MANAGED ENTITIES
    75.
    发明申请
    PROXY METHOD AND SYSTEM FOR SECURE WIRELESS ADMINISTRATION OF MANAGED ENTITIES 审中-公开
    用于安全管理实体的无线管理的代理方法和系统

    公开(公告)号:WO2004057823A2

    公开(公告)日:2004-07-08

    申请号:PCT/CA2003/002036

    申请日:2003-12-19

    Abstract: A method, system and apparatus are described for avoiding the use of a web-server or generic security when providing network administration services remotely to managed entities using wireless technology. Instead a true Proxy device, not operating as a web-server, is used to pre-process all command traffic from wireless input devices (WID). The intervention between the WID and the managed entities of the Proxy isolating the managed entities from the WID, enhanced by encoding using a novel messaging protocol, further enhanced by a novel security model based on multiple pre-shared keys and algorithms together with identifiers and passwords that are not transmitted, achieves several bandwidth and security advantages including the ability to deliver TELNET services across the Internet and behind a firewall.

    Abstract translation: 描述了一种方法,系统和装置,用于在向使用​​无线技术的被管实体远程提供网络管理服务时避免使用网络服务器或通用安全性。 而不是作为Web服务器运行的真正代理设备用于从无线输入设备(WID)预处理所有命令流量。 通过基于多个预共享密钥和算法以及标识符和密码的新型安全模型进一步增强了WID与被管理实体与WID的管理实体间的干预,WID通过使用新颖的消息协议进行编码而增强 不传输,实现了多种带宽和安全优势,包括通过Internet和防火墙后提供TELNET服务的能力。

    暗号化の一元集中管理システム
    76.
    发明申请
    暗号化の一元集中管理システム 审中-公开
    中央加密管理系统

    公开(公告)号:WO2003096613A1

    公开(公告)日:2003-11-20

    申请号:PCT/JP2003/005266

    申请日:2003-04-24

    Abstract:  暗号処理機能が導入された端末との間で暗号化によるセキュリティを終端するために暗号化処理および暗号の復号化処理を行う暗号/復号手段を備えて暗号装置1を構成し、この暗号装置1と、暗号通信を行う複数の通信端末2~9と、暗号通信に必要な種々の情報の設定を遠隔から通信端末7~9および暗号装置1に対して行うマネージャ端末12とを接続して暗号システムを構成することにより、専用の暗号ソフトをインストールできない端末を有する企業内LANの中でも暗号を利用することができるようにして、そのLAN内で終端された暗号化をマネージャ端末12において一元的に集中管理することができるようにする。

    Abstract translation: 加密装置(1)包括用于执行加密和解密的加密/解密装置,以终止具有加密功能的终端通过加密获得的安全性。 通过连接加密装置(1),执行加密通信的多个通信终端(2-9)和管理终端(12)形成加密系统,用于为通信终端距离设置加密通信所需的各种信息 (7-9)和加密装置(1),使得即使在具有不能安装专用加密软件的终端的企业LAN中也可以使用加密,并且可以在管理终端中对LAN中的加密终止进行集中管理 (12)。

    MECHANISM FOR SUPPORTING WIRED AND WIRELESS METHODS FOR CLIENT AND SERVER SIDE AUTHENTICATION
    78.
    发明申请
    MECHANISM FOR SUPPORTING WIRED AND WIRELESS METHODS FOR CLIENT AND SERVER SIDE AUTHENTICATION 审中-公开
    用于支持用于客户端和服务器端认证的有线和无线方法的机制

    公开(公告)号:WO2003061246A1

    公开(公告)日:2003-07-24

    申请号:PCT/US2003/000893

    申请日:2003-01-10

    Abstract: Autentication functions are centralized in a secutity system to offload servers of this functionality, and to provide an end-to-end solution for secure internet transactions. The security system supports authentication functions for authenticating a server by requesting server certificates from a certificate authority, and sending server certificates to clients requesting authentication. The security system also authenticates clients by checking digital signatures, validating the client certificates, which includes checking CA signatures, checking the validity period of the signatures, maintaining a certificate revocation list (CRL), and checking client certificates against the CRL.

    Abstract translation: 自动化功能集中在一个安全系统中,以卸载这个功能的服务器,并为安全的互联网交易提供端到端的解决方案。 安全系统支持通过从认证机构请求服务器证书来认证服务器的认证功能,并向请求认证的客户端发送服务器证书。 安全系统还通过检查数字签名,验证客户端证书来验证客户端,其中包括检查CA签名,检查签名的有效期,维护证书吊销列表(CRL)以及根据CRL检查客户端证书。

    ネットワーク上の通信を仲介する通信仲介装置
    80.
    发明申请
    ネットワーク上の通信を仲介する通信仲介装置 审中-公开
    用于介入网络通信的通信介质设备

    公开(公告)号:WO2003032175A1

    公开(公告)日:2003-04-17

    申请号:PCT/JP2002/010203

    申请日:2002-09-30

    Inventor: 島 敏博

    Abstract: A mediating server (200) mediates a printing request of a client (100) to a printer (300). To avoid a firewall (F/W) installed between the mediating server (200) and the printer (300), the printer (300) sends an HTTP request to the mediating server (200), and the mediating server (200) sends a printing request together with an HTTP response. Encryption communication between the client (100) and the printer (300) can be made according to the following procedures. The mediating server (200) deciphers, with a secret key, data ciphered with a public key by the client. The mediating server (200) re−ciphers the data with another secret key and mediates the data to the printer (300). The printer (300) deciphers the data with a public key to print the data. In such a way, printing in responce to a request of a client can be done over network environments the securities of which are ensured.

    Abstract translation: 中介服务器(200)将打印机(300)的客户机(100)的打印请求中介。 为了避免安装在中介服务器(200)和打印机(300)之间的防火墙(F / W),打印机(300)向中介服务器(200)发送HTTP请求,并且中介服务器(200)发送 打印请求以及HTTP响应。 客户端(100)与打印机(300)之间的加密通信可以按照以下步骤进行。 中介服务器(200)用秘密密钥解密客户端用公钥加密的数据。 中介服务器(200)用另一秘密密钥重新加密数据,并将数据中介给打印机(300)。 打印机(300)用公钥解密数据以打印数据。 以这种方式,可以通过确保其证券的网络环境来对客户端的请求进行打印。

Patent Agency Ranking