SYSTEM AND METHOD OF PROVIDING GRANULAR ACCESS CONTROL

    公开(公告)号:WO2023086149A1

    公开(公告)日:2023-05-19

    申请号:PCT/US2022/042412

    申请日:2022-09-02

    IPC分类号: G06F21/62 H04L9/40 H04L41/28

    摘要: A system and method for method for providing access to a resource includes receiving, from a user device of a user, a request to access the resource and an access token, the access token identifying an access role associated with the user and the request identifying a task to be performed on the resource; retrieving the access role from the access token; examining a role-to-permissions map to identify one or more permission available for the access role; determining, based on the available permissions for the access role that the user is authorized to perform the task on the resource; determining, based on the access role and the available permissions that the user has permission to access the resource managed by an object model; and upon determining that the user is authorized to perform the task on the resource and the user has permission to access the resource managed by the object model, permitting the user device of the user to access the resource to perform the task.

    ACCESS POINT, METHOD AND NON-TRANSITORY COMPUTER-READABLE MEDIUM FOR ACCESS POINT

    公开(公告)号:WO2023282956A1

    公开(公告)日:2023-01-12

    申请号:PCT/US2022/025018

    申请日:2022-04-15

    发明人: LIANG, Jianming

    摘要: The present disclosure relates to an access point, a method, a medium, and a computer program product for the access point. An access point is configured to perform at least the following processing: in response to an association request received from a user station, checking a first access control list set by a user to determine whether the user station is set by the user as a user station that is to be refused access to the access point; in response to determination that the user station is set by the user as a user station that is to be refused access to the access point, determining whether a push button configuration mode of a wireless protection setup of the access point is activated and verifying whether the association request is related to the push button configuration mode; and in response to determination that the push button configuration mode of the access point is activated and the association request of the user station is related to the push button configuration mode, sending an association response to the user station to complete a network configuration process of the user station.

    VERFAHREN ZUM SICHEREN KONFIGURIEREN EINER VIELZAHL VON GATEWAY-STEUERGERÄTEN EINES FAHRZEUGS, COMPUTERLESBARES MEDIUM, SYSTEM, UND FAHRZEUG

    公开(公告)号:WO2023036493A1

    公开(公告)日:2023-03-16

    申请号:PCT/EP2022/068893

    申请日:2022-07-07

    摘要: Die Erfindung betrifft ein Verfahren zum sicheren Konfigurieren einer Vielzahl von Gateway- Steuergeräten eines Fahrzeugs, das Verfahren umfassend: Empfangen einer Empfangsanforderung von einer Client-Schnittstelle eines ersten Gateway-Steuergeräts durch eine Server-Schnittstelle eines zweiten Gateway-Steuergeräts; Signieren des Empfangsanforderung mit einem privaten Schlüssel der Server-Schnittstelle des zweiten Steuergeräts; Übermitteln eines Sendeangebots von der Server-Schnittstelle des zweiten Gateway-Steuergeräts an die Client-Schnittstelle des ersten Gateway-Steuergeräts, wobei das Sendeangebot die signierte Empfangsanforderung umfasst; Verifizieren der signierten Empfangsanforderung mit einem öffentlichen Schlüssel der Server-Schnittstelle des zweiten Gateway-Steuergeräts durch die Client-Schnittstelle des ersten Gateway-Steuergeräts; Empfangen einer Bestätigungsnachricht von der Client-Schnittstelle des ersten Gateway- Steuergeräts durch die Server-Schnittstelle des zweiten Gateway-Steuergeräts, wobei die Bestätigungsnachricht eine Bestätigung oder eine Ablehnung des übermittelten Sendeangebots durch das erste Gateway-Steuergerät umfasst, wobei die Bestätigungsnachricht mit dem privaten Schlüssel der Client-Schnittstelle des ersten Gateway-Steuergeräts signiert ist; Verifizieren der signierten Bestätigungsnachricht mit einem öffentlichen Schlüssel der Client- Schnittstelle des ersten Gateway-Steuergeräts durch die Server-Schnittstelle des zweiten Gateway-Steuergeräts; und Konfigurieren einer Routing-Tabelle des zweiten Gateway- Steuergeräts in Abhängigkeit der empfangenen Bestätigungsnachricht durch das zweite Gateway-Steuergerät, falls die signierte Bestätigungsnachricht erfolgreich durch die Server- Schnittstelle des zweiten Gateway-Steuergeräts verifiziert wurde.

    METHOD AND SYSTEM FOR GRANTING REMOTE ACCESS TO AN ELECTRONIC DEVICE

    公开(公告)号:WO2022198303A1

    公开(公告)日:2022-09-29

    申请号:PCT/CA2022/050381

    申请日:2022-03-15

    申请人: GENETEC INC.

    发明人: OUELLET, Sylvain

    摘要: Methods, systems, devices and computer-readable media for granting remote access to an electronic device are described herein. An electronic device obtains an encrypted password comprising a password encrypted with a public encryption key. The electronic device outputs the encrypted password for a device user computer to transmit the encrypted password to a support computer to have the encrypted password decrypted with a private encryption key corresponding to the public encryption key. The electronic device receiving an access request comprising the password from the support computer. The electronic device grants the support computer access thereto when the password of the access request from the support computer corresponds to the password at the electronic device.

    A METHOD OF, A PROVISIONER AND A SYSTEM FOR PROVISIONING A PLURALITY OF OPERATIVELY INTERCONNECTED NODE DEVICES IN A NETWORK

    公开(公告)号:WO2022096561A1

    公开(公告)日:2022-05-12

    申请号:PCT/EP2021/080615

    申请日:2021-11-04

    摘要: A method of provisioning a particular type of node devices in a network is disclosed. The network comprises a plurality of operatively interconnected node devices of the particular type. Each of the particular type of node devices comprises a short range communication interface and configured for operating under control of a network backend server and an application backend server separate from the network backend server. The method performed by an application provisioner associated with the particular type of node devices, which first obtains device specific network provisioning data for the particular type of node devices from the network backend server, then obtains an application credential for the particular type of node devices; and thereafter provision the particular type of node devices by distributing the application credential to each of the particular type of node devices over a short range communication interface of the particular type of node device.