Cryptography inventions 10/08

20080260143 - Xz-elliptic curve cryptography with secret key embedding: Secure communications over an insecure channel is provided using symmetric key elliptic curve cryptography. More specifically, a shared secret key and/or data bit string is embedded in the X-coordinate and the Z-coordinate of an elliptic curve point defined in projective coordinates, wherein the embedding process is deterministic and non-iterative. In... Agent: Lowe Hauptman Ham & Berner, LLP

20080260144 - Image forming apparatus: An image forming apparatus is supplied capable of preventing data stored in a non-volatility memory from being read out when the non-volatility memory is stolen. In the image forming apparatus, an encryption function section of encryption/decryption function section encrypts print job received from an information processing apparatus or print data... Agent: Panitch Schwarze Belisario & Nadel LLP

20080260146 - Electronic circuit arrangement and method of operating such electronic circuit: In order to provide an electronic circuit arrangement (100) comprising at least one random number generating unit (10) for generating at least one random number (RN; RN1), wherein a calculation or estimation of the random numbers (RN; RN1) used in software (20) is not possible, especially not by physical measuring... Agent: Nxp, B.v. Nxp Intellectual Property Department

20080260147 - Method and apparatus for encrypting message for maintaining message integrity, and method and apparatus for decrypting message for maintaining message integrity: A method of encrypting a message for message integrity is provided. In the method, a random number is generated, a first ciphertext is generated by encrypting the message by using the generated random number, a hash value of the first ciphertext is calculated, an encryption key is generated by using... Agent: Sughrue Mion, PLLC

20080260145 - Selection of a lookup table with data masked with a combination of an additive and multiplicative mask: Processing of masked data using multiple lookup tables (LUTs), or sub-tables, is described. For each input value, an appropriate sub-table provides an output value that is the result of a non-linear transformation (e.g., byte substitution) applied to the input value. An additive mask can be applied to the input data.... Agent: Spansion LLC

20080260148 - Encryption processor: One chip encryption processor is disclosed, in which a password process unit for processing a data encryption and an interface for managing a password needed for an encryption are integrated into one chip. The encryption processor includes an encryption interface for connecting an externally connected apparatus and an internal data... Agent: Ladas & Parry LLP

20080260149 - Method and system for mobile device credentialing: Methods and systems taught herein allow mobile device manufacturers to preconfigure mobile devices for subscription with any network operator having access to a centralized device directory server. The directory server stores device records, each including a preliminary subscription identity. Manufacturers individually provision new mobile devices with these preliminary subscription identities,... Agent: Coats & Bennett, PLLC

20080260150 - Ic intrusion detection: The invention relates to an electronic device for cryptographic processing, having at least two electronic circuits (IC, CC, CP) coupled via a connection means, wherein the connection means is arranged for transferring data signals between the two electronic circuits. The electronic device further has a monitoring circuit (401) arranged to... Agent: Nxp, B.v. Nxp Intellectual Property Department

20080260151 - Use of metadata for time based anti-replay: A system and method for facilitating anti-replay protection with multi-sender traffic is disclosed. The system employs time-based anti-replay protection wherein a sender transmits a data packet with a pseudo-timestamp encapsulated in a metadata payload. At the receiving end, the receiver compares the pseudo-timestamp information received with its own pseudo-time, determines... Agent: Amin, Turocy & Calvin, LLP

20080260152 - Proofs of vicinity using cpufs: The present invention relates to a method and a device (104) for authenticating a plurality of physical tokens (101, 102, 103). A basic idea of the invention is to supply a sequence of interconnected devices (108, 109, 110), each device comprising a physical token (101, 102, 103), with a challenge... Agent: Philips Intellectual Property & Standards

20080260153 - Symmetric and asymmetric cryptography using shadow numbers: A method and an apparatus for enciphering and deciphering content with symmetric and asymmetric cryptography with the use of the shadow numbering system where two or more shadow values are used with two or more base values with a two side equation, on one side the value to encipher is... Agent: Louis Ventre Jr

20080260154 - Method and system for protecting the internet access of a mobile telephone, and corresponding mobile telephone and terminal: The invention aims at protecting the access to the Internet of such mobile telephones. For this purpose, a particular code (K) is implemented on the memory (100) of the mobile telephone (1). An Internet browser then makes it possible to communicate this model code, after the ciphering thereof, to the... Agent: Arent Fox LLP

20080260159 - Computer system, storage system, and data management method for updating encryption key: A computer system encrypts write-data to be written to the volume in response to a write command. The system transmits a rekey command from host computer system to the storage system when the key data stored in the host key data memory is changed to second key data. The storage... Agent: Stanley P. Fisher Reed Smith LLP

20080260156 - Management service device, backup service device, communication terminal device, and storage medium: It is an object to provide a method for invalidation and new registration of a storage medium, a method for backup of data stored in a storage medium and for restoration of backup data to a storage medium, and a method for encryption of and application of an electronic signature... Agent: Birch Stewart Kolasch & Birch

20080260158 - Methods and apparatus for initialization vector pressing: Methods and apparatus are provided for using explicit initialization vectors in both encryption and decryption processing. In one example, a sender generates an initialization vector, identifies cryptographic keys, encrypts data using the initialization vectors and the cryptographic keys, and transmits the encrypted data in a packet along with the initialization... Agent: Sterne, Kessler, Goldstein & Fox P.l.l.c.

20080260160 - Opt-in process and nameserver system for ietf dnssec: The process of signing and then publishing a DNS zone according to the IETF DNSSEC protocols is improved by the present invention, in order to facilitate the DNSSEC deployment until most of the DNS zones are signed. The prior art situation is that a second-level domain, e.g. example.com, often faces... Agent: Mr. Thierry Moreau

20080260157 - Recording apparatus and recording medium: A recording apparatus includes an encryption/decryption section for encrypting first and second contents obtained from the same content, using first and second keys, respectively, and outputting the results as first and second encrypted contents, respectively, and a recording medium. The encryption/decryption section encrypts the first and second keys using the... Agent: Mcdermott Will & Emery LLP

20080260155 - Storage medium processing method, storage medium processing device, and program: Spread of a forged storage medium is prevented suppressing an authentic storage medium's damage and trouble of a owner to the minimum. When there is an update request of user key data, the update history of the user key data concerning the shown above-mentioned medium identifier IDm is referred to.... Agent: Oblon, Spivak, Mcclelland Maier & Neustadt, P.C.

20080260162 - Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster: Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster that include receiving in the content server from the network device a key management block for the cluster, a unique data token for the cluster, and an encrypted cluster id and calculating a... Agent: International Corp (blf)

20080260161 - Terminal device and copyright protection system: To provide a terminal device with which, even if content that has undergone conversion is moved to another device, the content before the conversion can be used when moving the content from the device which is a move destination of the content back to a move source of the content.... Agent: Wenderoth, Lind & Ponack L.L.P.

20080260163 - Communication encryption processing apparatus: A communication encryption processing apparatus is provided in which a dedicated signal line is provided between a key management module and an encryption and decryption processing module to perform a key delivery via the dedicated signal line from the key management module to the encryption and decryption processing module, and... Agent: Canon U.s.a. Inc. Intellectual Property Division

20080260164 - Method and application for authentication of a wireless communication using an expiration marker: Systems and methods of securing wireless communications between a network and a subscriber station are disclosed. One embodiment creates authentication triplets due to expire after a certain amount of time such that they may not be used indefinitely by an attacker who intercepts them.... Agent: Qualcomm Incorporated

20080260143 - Xz-elliptic curve cryptography with secret key embedding: Secure communications over an insecure channel is provided using symmetric key elliptic curve cryptography. More specifically, a shared secret key and/or data bit string is embedded in the X-coordinate and the Z-coordinate of an elliptic curve point defined in projective coordinates, wherein the embedding process is deterministic and non-iterative. In... Agent: Lowe Hauptman Ham & Berner, LLP

20080260144 - Image forming apparatus: An image forming apparatus is supplied capable of preventing data stored in a non-volatility memory from being read out when the non-volatility memory is stolen. In the image forming apparatus, an encryption function section of encryption/decryption function section encrypts print job received from an information processing apparatus or print data... Agent: Panitch Schwarze Belisario & Nadel LLP

20080260146 - Electronic circuit arrangement and method of operating such electronic circuit: In order to provide an electronic circuit arrangement (100) comprising at least one random number generating unit (10) for generating at least one random number (RN; RN1), wherein a calculation or estimation of the random numbers (RN; RN1) used in software (20) is not possible, especially not by physical measuring... Agent: Nxp, B.v. Nxp Intellectual Property Department

20080260147 - Method and apparatus for encrypting message for maintaining message integrity, and method and apparatus for decrypting message for maintaining message integrity: A method of encrypting a message for message integrity is provided. In the method, a random number is generated, a first ciphertext is generated by encrypting the message by using the generated random number, a hash value of the first ciphertext is calculated, an encryption key is generated by using... Agent: Sughrue Mion, PLLC

20080260145 - Selection of a lookup table with data masked with a combination of an additive and multiplicative mask: Processing of masked data using multiple lookup tables (LUTs), or sub-tables, is described. For each input value, an appropriate sub-table provides an output value that is the result of a non-linear transformation (e.g., byte substitution) applied to the input value. An additive mask can be applied to the input data.... Agent: Spansion LLC

20080260148 - Encryption processor: One chip encryption processor is disclosed, in which a password process unit for processing a data encryption and an interface for managing a password needed for an encryption are integrated into one chip. The encryption processor includes an encryption interface for connecting an externally connected apparatus and an internal data... Agent: Ladas & Parry LLP

20080260149 - Method and system for mobile device credentialing: Methods and systems taught herein allow mobile device manufacturers to preconfigure mobile devices for subscription with any network operator having access to a centralized device directory server. The directory server stores device records, each including a preliminary subscription identity. Manufacturers individually provision new mobile devices with these preliminary subscription identities,... Agent: Coats & Bennett, PLLC

20080260150 - Ic intrusion detection: The invention relates to an electronic device for cryptographic processing, having at least two electronic circuits (IC, CC, CP) coupled via a connection means, wherein the connection means is arranged for transferring data signals between the two electronic circuits. The electronic device further has a monitoring circuit (401) arranged to... Agent: Nxp, B.v. Nxp Intellectual Property Department

20080260151 - Use of metadata for time based anti-replay: A system and method for facilitating anti-replay protection with multi-sender traffic is disclosed. The system employs time-based anti-replay protection wherein a sender transmits a data packet with a pseudo-timestamp encapsulated in a metadata payload. At the receiving end, the receiver compares the pseudo-timestamp information received with its own pseudo-time, determines... Agent: Amin, Turocy & Calvin, LLP

20080260152 - Proofs of vicinity using cpufs: The present invention relates to a method and a device (104) for authenticating a plurality of physical tokens (101, 102, 103). A basic idea of the invention is to supply a sequence of interconnected devices (108, 109, 110), each device comprising a physical token (101, 102, 103), with a challenge... Agent: Philips Intellectual Property & Standards

20080260153 - Symmetric and asymmetric cryptography using shadow numbers: A method and an apparatus for enciphering and deciphering content with symmetric and asymmetric cryptography with the use of the shadow numbering system where two or more shadow values are used with two or more base values with a two side equation, on one side the value to encipher is... Agent: Louis Ventre Jr

20080260154 - Method and system for protecting the internet access of a mobile telephone, and corresponding mobile telephone and terminal: The invention aims at protecting the access to the Internet of such mobile telephones. For this purpose, a particular code (K) is implemented on the memory (100) of the mobile telephone (1). An Internet browser then makes it possible to communicate this model code, after the ciphering thereof, to the... Agent: Arent Fox LLP

20080260159 - Computer system, storage system, and data management method for updating encryption key: A computer system encrypts write-data to be written to the volume in response to a write command. The system transmits a rekey command from host computer system to the storage system when the key data stored in the host key data memory is changed to second key data. The storage... Agent: Stanley P. Fisher Reed Smith LLP

20080260156 - Management service device, backup service device, communication terminal device, and storage medium: It is an object to provide a method for invalidation and new registration of a storage medium, a method for backup of data stored in a storage medium and for restoration of backup data to a storage medium, and a method for encryption of and application of an electronic signature... Agent: Birch Stewart Kolasch & Birch

20080260158 - Methods and apparatus for initialization vector pressing: Methods and apparatus are provided for using explicit initialization vectors in both encryption and decryption processing. In one example, a sender generates an initialization vector, identifies cryptographic keys, encrypts data using the initialization vectors and the cryptographic keys, and transmits the encrypted data in a packet along with the initialization... Agent: Sterne, Kessler, Goldstein & Fox P.l.l.c.

20080260160 - Opt-in process and nameserver system for ietf dnssec: The process of signing and then publishing a DNS zone according to the IETF DNSSEC protocols is improved by the present invention, in order to facilitate the DNSSEC deployment until most of the DNS zones are signed. The prior art situation is that a second-level domain, e.g. example.com, often faces... Agent: Mr. Thierry Moreau

20080260157 - Recording apparatus and recording medium: A recording apparatus includes an encryption/decryption section for encrypting first and second contents obtained from the same content, using first and second keys, respectively, and outputting the results as first and second encrypted contents, respectively, and a recording medium. The encryption/decryption section encrypts the first and second keys using the... Agent: Mcdermott Will & Emery LLP

20080260155 - Storage medium processing method, storage medium processing device, and program: Spread of a forged storage medium is prevented suppressing an authentic storage medium's damage and trouble of a owner to the minimum. When there is an update request of user key data, the update history of the user key data concerning the shown above-mentioned medium identifier IDm is referred to.... Agent: Oblon, Spivak, Mcclelland Maier & Neustadt, P.C.

20080260162 - Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster: Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster that include receiving in the content server from the network device a key management block for the cluster, a unique data token for the cluster, and an encrypted cluster id and calculating a... Agent: International Corp (blf)

20080260161 - Terminal device and copyright protection system: To provide a terminal device with which, even if content that has undergone conversion is moved to another device, the content before the conversion can be used when moving the content from the device which is a move destination of the content back to a move source of the content.... Agent: Wenderoth, Lind & Ponack L.L.P.

20080260163 - Communication encryption processing apparatus: A communication encryption processing apparatus is provided in which a dedicated signal line is provided between a key management module and an encryption and decryption processing module to perform a key delivery via the dedicated signal line from the key management module to the encryption and decryption processing module, and... Agent: Canon U.s.a. Inc. Intellectual Property Division

20080260164 - Method and application for authentication of a wireless communication using an expiration marker: Systems and methods of securing wireless communications between a network and a subscriber station are disclosed. One embodiment creates authentication triplets due to expire after a certain amount of time such that they may not be used indefinitely by an attacker who intercepts them.... Agent: Qualcomm Incorporated

20080253559 - Data security method, system and storage medium for preventing a desktop search tool from exposing encrypted data: In a data security method for preventing a desktop search tool from exposing encrypted data, when a virtual secure disk receives a control instruction, it is first determined if the control instruction came from the desktop search tool. If not, tasks are performed on the virtual secure disk according to... Agent: Pillsbury Winthrop Shaw Pittman, LLP

20080253560 - Duo codes for product authentication: Systems and methods are provided that employ two or more cryptographically linked codes. The codes, when encrypted, become cipher texts that appear unrelated. The codes described herein are characterized by a series of bits including one or more switch bits. The cipher text of a code having a switch bit... Agent: Peters Verny , L.L.P.

20080253557 - Method and device for carrying out a cryptographic calculation: A cryptographic calculation is carried out in an electronic component according to a specific cryptographic algorithm including at least one specified non-linear operation on blocks of data of k bits, k being a whole number of more than 2. Several blocks of masked intermediate data of j bits (b?m1,c?m2, ??n)... Agent: Miller, Matthias & Hull

20080253558 - Polynomial-based key distribution system and method: The present invention relates to a system (600) and method for sharing multiple session keys between low-power devices (701) and more advanced devices (702). A polynomial algorithm with a certain number of parameters is used. A large number of parameters are fixed for the low-power devices (701) and a small... Agent: Philips Intellectual Property & Standards

20080253561 - Common-key block encryption device common-key block encryption method, and common-key block encryption program: Disclosed is a common-key block encryption device including first Feistel-type hash means that divides a plain text into a PA block and a PB block and adds the PB block, which is compressed by a hash function, and the PA block to generate a unit block intermediate text; unit block... Agent: Sughrue Mion, PLLC

20080253562 - Handshake procedure: The invention discloses a solution for establishing by a handshake procedure a group temporal key for group communication. The group temporal key is established by a group procedure and is a group-specific temporal key.... Agent: Squire, Sanders & Dempsey L.L.P.

20080253564 - Method and apparatus for file sharing of missing content between a group of user devices in a peer-to-peer network: A communication system 100 includes a group of user devices, a first device separate from the group of user devices, a first satellite, a peer-to-peer network 130 in communication with the user devices and the satellite 106 and a content delivery network 120 in communication with the user devices. The... Agent: The Directv Group, Inc. Patent Docket Administration

20080253563 - Systems and methods for executing encrypted programs: Systems and methods for secure program execution are described. At least one embodiment includes a system for securely executing software comprising a host configured to accept a disc containing encrypted content to be accessed and store an encrypted program used to access the content on the disc. The system further... Agent: Thomas, Kayden, Horstemeyer & Risley, LLP

20080253566 - Communications system, communications apparatus and method, and computer program: Disclosed herein is a communications system configured to execute data transmission by use of a first transmission media and a second transmission media that are different from each other in security level, a communications apparatus on a transmitting side dividing transmission data into first transmission data and second transmission data... Agent: Bell, Boyd & Lloyd, LLP

20080253565 - Encrypted content parallel to free broadcast: The present invention relates to a method and a device (103) for acquiring content from an information transmission (101). The invention is based on the idea that an information transmission is received via a transmission channel. Along with the information transmission, which e.g. is a broadcast from a radio show,... Agent: Philips Intellectual Property & Standards

20080253567 - Encryption communications system: A system structured from a management device, a content key distribution device and a plurality of terminals suppresses the data volume of a terminal revocation list (TRL). The management device generates and transmits a TRL formed from data that expresses terminal IDs of all terminals to be invalidated, by only... Agent: Wenderoth, Lind & Ponack L.L.P.

20080253568 - Optical transmission device, scrambling method, and descrambling method: A first header-attaching unit attaches to data of a low speed bit rate A, a header of the bit rate A. A second header-attaching unit attaches the header of the bit rate A to data of a high speed bit rate B. A combining unit combines outputs of the first... Agent: Staas & Halsey LLP

20080253569 - System and method for performing authentication in a wireless mobile communication system: A system and method for authentication in a wireless mobile communication system are provided, in which a mobile station calculates a CMAC value having a first number of bits, transmits to a base station a ranging request message including a partial CMAC value being a second number of upper bits... Agent: Docket Clerk

20080253571 - Method and a system for protecting path and data of a mobile agent within a network system: Secure message transfer of at least one message from a sender to a receiver within a network system may be provided. For example, a message structure information regarding the at least one message may be computed on a sender-side and according to a pre-given scheme. The computed message structure information... Agent: Brake Hughes Bellermann LLP

20080253570 - System and method for processing user data in an encryption pipeline: A method, system and program are disclosed for efficiently processing host data which comprises encrypted and non-encrypted data and is to be written to a storage medium. The encrypted data is written to the storage medium in encrypted form. The non-encrypted data is encrypted by a storage device using a... Agent: John H. Holcombe IBM Corporation,IPLaw Dept.

20080253573 - Backup system for image forming apparatus and backup method for image forming apparatus: According to one embodiment, a backup system for an image forming apparatus includes: the image forming apparatus including an original data storage unit configured to store data, the image forming apparatus sending a backup copy of the data; and a backup apparatus electrically communicating with the image forming apparatus, the... Agent: Amin, Turocy & Calvin, LLP

20080253574 - Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster: Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster that include receiving in the content server from the network device a key management block for the cluster, a unique data token for the cluster, and an encrypted cluster id and calculating a... Agent: International Corp (blf)

20080253572 - Method and system for protecting data: The present disclosure is directed to a method and system for protecting data. In accordance with a particular embodiment of the present disclosure a new file is created. A key is retrieved for the file from a keyserver. The key includes a key identifier and an encryption algorithm. The file... Agent: Baker Botts L.L.P.

20080247539 - Method and system for secure data aggregation in wireless sensor networks: A method for transmitting sensed data in a wireless sensor network including multiple sensors, includes: encrypting the sensed data with an encryption key and a verification key to generate encrypted data in each of the multiple sensors that senses data; wirelessly receiving the encrypted data from the multiple sensors; determining... Agent: Finnegan, Henderson, Farabow, Garrett & Dunner LLP

20080247540 - Method and apparatus for protecting digital contents stored in usb mass storage device: A method and apparatus for protecting digital content stored in a universal serial bus (USB) mass storage (UMS) device from unlimited distribution are provided. According to the method and apparatus, a UMS device generates a random key according to a request from a user and shows the generated random key... Agent: Sughrue Mion, PLLC

20080247541 - Methods and apparatus for connecting a cable network to other network and/or devices: Methods and apparatus for connecting, e.g., bridging, a cable network to other networks and/or devices is described. A bridge device facilitates the distribution of cable provider content to end users operating IP based devices. The bridge device performs one of more of the following: interface protocol conversions, user device controlled... Agent: Straub & Pokotylo

20080247542 - Apparatus for and a method of providing content data: Apparatus and a method are described to enable reading apparatus to access content data of an optical disc such as a DVD where the content data carried by the DVD is encrypted by an encryption technique that requires a decryption key or keys. Reproduced content data corresponding to the encrypted... Agent: Patent Department Macrovision Corporation

20080247543 - Method and apparatus for protecting digital rights of copyright holders of publicly distributed multimedia files: A video network includes public kiosks having digital storage capacity. Centralized inventory control manages the video files stored at individual kiosks or network LANs. A user requests a multimedia file for download, and selects various ancillary files and control features, such as languages, subtitles, control of nudity, etc. The requested... Agent: Law Office Of Ronald Shea

20080247544 - Authentication in an audio/visual system having multiple signaling paths: A method and structure for authentication in a system having devices capable of communicating via multiple signal paths. Authentication is carried out between first and second devices. A first device communicates with a second device over a first data signaling path of an interface between the first and second devices... Agent: Leveque Intellectual Property Law, P.C.

20080247545 - Communication system and communication method: A capability list 102 stores a capability list in which capabilities regarding algorithms for encryption and decryption treated by a reader/writer 100 are described. Similarly, a capability list 202 stores a capability list in which capabilities regarding algorithms for encryption and decryption treated by an IC card 200 are described.... Agent: Oblon, Spivak, Mcclelland Maier & Neustadt, P.C.

20080247546 - Method and apparatus for protecting digital content stored in usb mass storage device using time information: Provided is a method of preventing digital content stored in a universal serial bus (USB) mass storage (UMS) device from being distributed without restriction. In the method, registration data is encrypted in order to allow a UMS device to decrypt and use digital content using time information only within a... Agent: Sughrue Mion, PLLC

20080247547 - Data transmitting apparatus and data receiving apparatus: A data communication apparatus which improves security against eavesdropping is provided for secret communication using Y-00 protocol. In a data transmitting apparatus 101, a multi-level code generation section 111 generates, based on key information 11, a multi-level code sequence 12 in which a signal level changes so as to be... Agent: Wenderoth, Lind & Ponack L.L.P.

20080247548 - Content processing apparatus and encryption processing method: A content processing apparatus includes a read unit which reads encrypted key information from a recording medium, a decryption unit which decrypts the encrypted key information with a device key and dynamic information to obtain key information containing content keys, an update unit which updates the dynamic information, a key... Agent: Charles N.j. Ruggiero, Esq. Ohlandt, Greeley, Ruggiero & Perle, L.L.P.

20080247549 - Remote diagnostic system for robots: A remote diagnostic system for robots including a number of at least two robots, wherein a controller of each robot of the system is locally connected to a service unit provided with local processing power, a remote service center provided with a connector server is arranged, and a communications infrastructure... Agent: Venable LLP

20080247551 - Information processing apparatus and computer readable medium: An information processing apparatus includes: an acceptance unit that accepts formed information to be formed on a medium and target information to be recorded as an information image together with an image based on the formed information; a specification acceptance unit that accepts specification of the accepted formed information or... Agent: Oliff & Berridge, PLC

20080247550 - Pon system with encryption function and encryption method of pon system: In a PON system, clocks of an optical network unit and an optical line terminal are synchronized. An optical network unit generates a new encryption key and transmits it to an optical line terminal. The optical network unit transmits a notification that includes an encryption key changing time to the... Agent: Birch Stewart Kolasch & Birch

20080240419 - Apparatus, system, and method for testing data compression and data encryption circuitry: An apparatus, system, and method are disclosed for testing data compression and data encryption circuitry. A pattern configuration module generates initial pattern parameters. Holding registers store the initial pattern parameters. A pattern generation module generates patterns for compression/encryption logic. A detection module detects a failure of the compression/encryption logic. The... Agent: Kunzler & Mckenzie

20080240424 - Cryptographic systems and methods supporting multiple modes: Cryptographic systems and methods that support multiple modes of operation, such as CBC, CTR and/or CCM modes. In one aspect, a method for encrypting data includes reading a plaintext data block from a memory, storing the plaintext data block in an input buffer, encrypting the plaintext data block in the... Agent: F. Chau & Associates, LLC

20080240425 - Data de-identification by obfuscation: Medical or other data is de-identified by obfuscation. Located instances are replaced. By replacing with values in a same format and level of generality, multiple possible identifications—the replacement values and the instances not located—are provided in the data, obfuscating the original identification. By replacing as a function of a probability,... Agent: Siemens Corporation Intellectual Property Department

20080240422 - Efficient advanced encryption standard (aes) datapath using hybrid rijndael s-box: The speed at which an AES decrypt operation may be performed in a general purpose processor is increased by providing a separate decrypt data path. The critical path delay of the aes decrypt path is reduced by combining multiply and inverse operations in the Inverse SubBytes transformation. A further decrease... Agent: Intel Corporation C/o Intellevate, LLC

20080240421 - Method and apparatus for advanced encryption standard (aes) block cipher: The speed at which encrypt and decrypt operations may be performed in a general purpose processor is increased by providing a separate encrypt data path and decrypt data path. With separate data paths, each of the data paths may be individually optimized in order to reduce delays in a critical... Agent: Intel Corporation C/o Intellevate, LLC

20080240420 - Method and system for a recursive security protocol for digital copyright control: Systems and methods are described which utilize a recursive security protocol for the protection of digital data. These may include encrypting a bit stream with a first encryption algorithm and associating a first decryption algorithm with the encrypted bit stream. The resulting bit stream may then be encrypted with a... Agent: SprinkleIPLaw Group

20080240423 - Speeding up galois counter mode (gcm) computations: Methods and apparatus to speed up Galois Counter Mode (GCM) computations are described. In one embodiment, a carry-less multiplication instruction may be used to perform operations corresponding to verification of an encrypted message in accordance with GCM. Other embodiments are also described.... Agent: Caven & Aghevli C/o Intellevate, LLC

20080240426 - Flexible architecture and instruction for advanced encryption standard (aes): A flexible aes instruction set for a general purpose processor is provided. The instruction set includes instructions to perform a “one round” pass for aes encryption or decryption and also includes instructions to perform key generation. An immediate may be used to indicate round number and key size for key... Agent: Intel Corporation C/o Intellevate, LLC

20080240427 - Key management: The present invention relates to arrangements and methods for generating keys for cryptographic processing of communication between a first communication unit (200) and a second communication unit (300). The first communication unit (200) and second communication unit (300) are adapted to obtain knowledge about a secret function, wherein the first... Agent: Nixon & Vanderhye, PC

20080240428 - Magnetic recording medium encryption: Systems and methods for easily and at high speed re-encrypting data recorded on a magnetic recording medium when the data is encrypted using an encryption key and the encryption key is changed. A track where effective user data is not recorded is set as a first reserved track, then data... Agent: Ference & Associates LLC

20080240429 - Storage apparatus and data management method: The storage apparatus of the present invention that controls the input and output of data to and from a computer includes a logical volume for storing data from the computer, a common resource for storing data pre-stored in the logical volume as update data in order to store subsequent data... Agent: Sughrue Mion, PLLC

20080240430 - Graphic code application apparatus and method: A machine readable code comprises at least a portion of a graphical indicium, the graphical indicium comprising a random arrangement of spots. At least some of the spots comprising the graphical indicium may have a dimension of less than one micrometre. The spots comprising the graphical indicium may vary in... Agent: Banner & Witcoff, Ltd.

20080240431 - Dynamically shifting control word: A method for generating a plurality of control words, each control word controlling access to an object. The method includes providing a control word packet (CWP), generating a first control word (CW) from the CWP, providing a second CW generation input and producing a second CW based, at least in... Agent: Ladas & Parry

20080240433 - Lightweight secure authentication channel: A secure authentication channel (SAC) between two nodes in a communication network is created by the nodes themselves using mutual authentication. The network has two nodes, a coordinating entity, two PKI-based SACs, and one non-PKI SAC which is created by the two nodes and is for use by the nodes.... Agent: Beyer Law Group LLP

20080240436 - Method and apparatus for determining whether to encrypt outbound traffic: An improved method, apparatus, and computer instructions for processing outbound traffic passing through a port. This port is for a server and receives a request from a client. The request includes a universal resource identifier to a destination. A determination is made as to whether the request requires encryption using... Agent: Ibm Corp (ya) C/o Yee & Associates PC

20080240432 - Method and system for security protocol partitioning and virtualization: A method for implementing a security protocol, involving receiving a packet from a network connection, obtaining an identifier for one of a plurality of security association database (SADB) partitions associated with the packet, wherein each of the plurality of SADB partitions is associated with one of a plurality of packet... Agent: Osha Liang L.L.P./sun

20080240435 - Perpetual masking for secure watermark embedding: Disclosed are a method and a system for secure watermark embedding in a server-client configuration (60,70). The method comprises encrypting (210) the data signal (x) and generating (240) a decryption key wherein a watermark (Wi) is included. The client decrypts (420) the encrypted data signal in order to obtain a... Agent: Philips Intellectual Property & Standards

20080240434 - Storage virtualization apparatus comprising encryption functions: A storage virtualization apparatus comprises a judgment portion. The judgment portion judges whether encryption functions are present in an external storage subsystem having an external logical volume identified based on a write request received from a higher-level device. When the result of the judgment is negative, the storage virtualization apparatus... Agent: Mattingly, Stanger, Malur & Brundidge, P.C.

20080240437 - Alternative design for quantum cryptographic entangling probe: An alternative design is given for an optimized quantum cryptographic entangling probe for attacking the BB84 protocol of quantum key distribution. The initial state of the probe has a simpler analytical dependence on the set error rate to be induced by the probe than in the earlier design. The new... Agent: U S Army Research Laboratory Attn Amsrl Cs Cc Ip

20080240438 - System and method for ciphering key forwarding and rrc packet deciphering in a umts monitoring system: System and method for forwarding a ciphering key to a decipher application comprising capturing a first message carrying the ciphering key from a first network interface, identifying a network node associated with the first network interface, identifying a monitor responsible for processing messages captured from interfaces coupled to the network... Agent: Matthew D. Rabdau Tektronix, Inc.

20080240439 - Methods and apparatus to facilitate data and security context transfer, and re-initialization during mobile device handover: Security context transfer and ROHC context transfer to enable secure and efficient mobile device handoff is facilitated by the introduction of new information elements to the UL Allocation message or separate downlink (DL) physical channel, the use of reverse tunneling during hand off (HO) to provide the User Equipment (UE)... Agent: Volpe And Koenig, P.C. Dept. Icc

20080240445 - Device, method and program for providing matching service: A computer for a service provider receives from each member of two groups who is a user of a service via a mediating computer, a priority list in which member IDs of the other group is permuted in the priority order of a user and processing information that are encrypted... Agent: Cantor Colburn, LLP - IBM Arc Division

20080240442 - Managing copy protecting information of encrypted data: The present invention provides according to an embodiment a method of reproducing digital content, comprising the steps of: (a) reading a position information where a sample data is present, the sample data being same as a portion of digital content and not encrypted; and (b) reproducing the sample data based... Agent: Birch Stewart Kolasch & Birch

20080240443 - Method and apparatus for securely processing secret data: A system and method for using the same secret key of a public key cryptosystem several times comprising a recoding method which can generate several distinct representations for the secret key, where one representation is chosen as recoded secret according to a selection data. In addition, the pair consisting of... Agent: Foley And Lardner LLP Suite 500

20080240444 - Method of distributing a decryption key in fixed-content data: Secondary content in encrypted for distribution to client terminals by selecting at least a portion of raw encrypted audio-video data (REAVD) that is provided on a media article as an encryption key, encrypting secondary content using the encryption key, and storing encrypted secondary content at a remotely located host. The... Agent: Connolly Bove Lodge & Hutz LLP

20080240441 - Storage controller comprising encryption function, data encryption method, and storage system: Proposed are a storage controller equipped with an encryption function, a data encryption method, and a storage system enabling a user to apply one's desired encryption policy to data received from a computer or the like. This storage controller includes a storage apparatus for storing data from a computer, and... Agent: Antonelli, Terry, Stout & Kraus, LLP

20080240440 - Synchronization test for device authentication: Device authentication is based on the ability of a human to synchronize the movements of his or her fingers. A pairing procedure for two wireless devices may thus involve a synchronization test that is based on the relative timing of actuations of input devices on each of the wireless devices.... Agent: Qualcomm Incorporated

20080240446 - Intruder traceability for shared security associations: Various embodiments are directed to systems and techniques for shared security associations. In one or more embodiments, a key distribution server provides shared security associations for clients and servers by assigning a group key to a particular client according to a time-based group key assignment schedule. The key distribution server... Agent: Kacvinsky LLC C/o Intellevate

20080240447 - System and method for user authentication with exposed and hidden keys: The present invention relates to a system and method for digitally authenticating users both online and offline. In one embodiment, a hardware token assigned by a trusted token provider to the user is employed to ensure the identity of the user. In the online authentication, the token is adapted for... Agent: Morris Manning Martin LLP