Particular Communication Authentication Technique

Particular Communication Authentication Technique patent applications listed are from June 2005 to current and include Date, Patent Application Number, Patent Title, Patent Abstract summary and are linked to the corresponding patent application page.

11/15/07 - 20070266246 - User authentication method and system for a home network
An external authentication method authenticates access a home network from outside the home network using temporal credential information. The method of authentication for the home network includes requesting a transmission of temporal credential information from the home server for authenticating a user, and receiving the temporal credential information from the ...

11/15/07 - 20070266245 - System and method for inherently secure identification over insecure data communications networks
A method for secure identification of stations connected over data communications networks during a transaction, comprising transmitting, on the part of a first station to a second station, an identification index of a reference cell in a sequence of codes known to both stations and a first code in the ...

11/15/07 - 20070266244 - Wireless local area network and methods for secure resource reservations for fast roaming
Embodiments of an authorization server and method for securely reserving resources in a wireless network are generally described herein. Other embodiments may be described and claimed. In some embodiments, access points reserve bandwidth thereon through the verification of reservation tokens received from the mobile station. ...

11/08/07 - 20070260883 - Personal digital key differentiation for secure transactions
A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A Personal Digital Key is a portable device carried by an individual that stores one or more profiles (e.g., a biometric profile) in a tamper-proof memory. When multiple PDKs are present at ...

11/08/07 - 20070260882 - Method for secure delegation of calculation of a bilinear application
A technique for secure delegation of calculation of a value f(X,Y) of a bilinear application in a computational server. The technique comprises: selection of two secret parameters a and b; calculation of the numbers Xa and Yb; supply of the two numbers Xa and Yb to the computational server; calculation ...

11/01/07 - 20070255952 - Session initial protocol identification method
A Session Initiation Protocol (SIP) authentication method, sends a request message without authentication information to a server end from a client to request for access; sends back a response message, which contains authentication exchange information and DH authentication response information of the server end when the server end receives the ...

11/01/07 - 20070255951 - Token based multi-protocol authentication system and methods
A Token based, multi-Server and multi-protocol authentication system comprising a plurality of Servers employing potentially a plurality of Proof protocols each requiring a Proof of Token presence before accepting login request from a possessor of said Token and a plurality of Token apparatus capable of communicating with said Servers and ...

10/25/07 - 20070250710 - Versatile secure and non-secure messaging
A messaging system and method are associated with a first device. The messaging system includes a plurality of credentials and a plurality of authorities. Each authority associates at least one of a plurality of protocol operations with at least one of the plurality of credentials. The messaging system is adapted ...

10/25/07 - 20070250709 - Methods, apparatus, and computer programs for automatic detection and registration of ip multimedia devices situated in a customer device zone
Methods, apparatus, and computer programs for providing encrypted data to an internet protocol (IP) multimedia subsystem (IMS)-capable device. The device is automatically detected when the device is situated in a customer device zone. The customer device zone comprises a spatial volume within which a signal transmitted by the device can ...

10/18/07 - 20070245143 - Method for the radio transmission of traffic messages and radio receiver
A method for transmitting encoded traffic messages via a data channel, which is reserved for transmitting encrypted traffic messages, a certain subset of traffic messages being in general transmitted via the data channel in unencrypted form. For the encryption of the traffic messages, in each case only one of at ...

10/18/07 - 20070245142 - Authentication of a request to alter at least one of a bios and a setting associated with the bios
A system comprises storage and a basic input/output system (BIOS) stored in the storage and adapted to be executed by a processor. The BIOS has an associated setting. The system receives an encrypted value that comprises an encrypted hash of a request to alter at least one of the BIOS ...

10/11/07 - 20070239986 - Secure ads-b authentication system and method
A secure system for authenticating the identity of ADS-B systems, including: an authenticator, including a unique id generator and a transmitter transmitting the unique id to one or more ADS-B transmitters; one or more ADS-B transmitters, including a receiver receiving the unique id, one or more secure processing stages merging ...

10/11/07 - 20070239985 - Secure extensions
The operating system organizes software so the set of extensions for an extendable application can be dynamically discovered and the extension can be run securely. Extensions are run as separate applications instead of within the extendable application's process. Extensions are discoverable to an activated extendable application by querying a category ...

10/04/07 - 20070234051 - Method for synchronization in encrypted communications using shared key
The disclosed is a method for synchronization of the running key that is generated from a shared key and that is used for encryption and decryption in communications encrypted with the shared key using a multi-valued signal. In the method for synchronization, the transmitting node transmits a signal that is ...

10/04/07 - 20070234050 - Communications system and method
A communications system includes a transmitting device for processing packets to be sent, and a receiving device for processing the transmitted packets. The transmitting device includes a first memory unit, a first communications unit, and a first processing unit coupled therebetween. The first processing unit is operable so as to ...

09/27/07 - 20070226499 - Session key management for public wireless lan supporting multiple virtual operators
A method and apparatus for managing a session key for allowing a mobile terminal to access a wireless local area network (WLAN). The invention provides for establishing a first secure channel between an access point and a virtual operator, and suggesting a session key to the virtual operator from the ...

09/27/07 - 20070226498 - Validating apparatus for use with a pair of integrated circuits
An apparatus is provided for validating a device. The apparatus includes a first integrated circuit which is configured to generate a random number, reference information using the random number and a secret key. A control system is configured to: receive the random number and the reference information from the first ...

09/27/07 - 20070226495 - Settlement method using a mobile terminal and system thereof
Disclosed is a settlement method using a mobile terminal and system thereof that is able to safely perform micro-payment using a mobile terminal that is able to perform a first authentication in a mobile communication system using communication subscriber information, and protect a user from a mobile terminal illegally duplicated ...

09/20/07 - 20070220253 - Mutual authentication between two parties using two consecutive one-time passwords
A communication system and method are configured for mutual authentication between two parties. In one embodiment a first party generates a first one-time password and sends it to a second party. The second party authenticates the first party by generating a one-time password using the same algorithm, secrets and parameters ...

09/20/07 - 20070220252 - Interactive network access controller
Methods (400, 500) and systems (100, 600) for interactively controlling access to a communication network (102) are disclosed. In one embodiment, a user is queried (600) on whether to allow a communication device (118) to access the network (102) and the communication device (118) is allowed access if the user ...

09/13/07 - 20070214361 - Device, system and method for fast secure message encryption without key distribution
One party sends a securely encrypted message to a second party. Each party chooses a secret message key for the message, which is never shared with or transmitted to any other party. The message is sent by means of three encrypted messages. The first encrypted message is sent from the ...

09/13/07 - 20070214360 - System and method for detecting security violation
A system and a method for ensuring that the initiation of mobile platform operations using maintenance terminals or other tools is prohibited when maintenance activities are not intended to be performed. The solution involves the incorporation of a manual interlock switch (accessible only to authorized personnel) that blocks activation of ...

09/06/07 - 20070208940 - Digital identity related reputation tracking and publishing
Systems and processes of the present invention allow for tracking and publishing digital identity related reputation. In an example embodiment, a Digital Identity Provider maintains a database with reputation data that can be accessed by Requesters. The Digital Identity Provider may update reputation data based on a variety of events ...

09/06/07 - 20070208937 - System and method for wireless network profile provisioning
A system and method to enable an access point to dynamically provision a WLAN client with a new wireless profile once an association is established based on the infrastructure policy. A client can be directed to use a new profile without the need for pre-configuration and going through another authentication ...

09/06/07 - 20070208936 - Means and method for single sign-on access to a service network through an access network
The present invention provides means and method for Single Sign-On authentication of a user accessing a service network through an access network when the user has been already authenticated by a core network where the user holds a subscription. Therefore, a number of means are provided in different entities distributed ...

08/30/07 - 20070204157 - Method and apparatus for using out of band captured protocol traffic to facilitate in band traffic capturing
A method and apparatus for processing electronic data are provided. The method comprises the steps of receiving an out of band data transmission and processing the out of band data transmission to retrieve a Connection Context Information key in substantially real time. Thereafter, an in band data transmission is received ...

08/30/07 - 20070204156 - Systems and methods for providing access to network resources based upon temporary keys
Secure access to a wireless switch or other server node is provided through the use of a temporary key. The server initially receives a key request from a remotely-located client application that is formatted according to a first protocol such as the simple network management protocol (SNMP). In response to ...

08/30/07 - 20070204155 - Framework of media-independent pre-authentication
This application describes, among other things, a framework of Media-independent Pre-Authentication (MPA), a new handover optimization mechanism that has a potential to address issues on existing mobility management protocols and mobility optimization mechanisms. MPA is a mobile-assisted, secure handover optimization scheme that works over any link-layer and with any mobility ...

08/23/07 - 20070198834 - Method for the authentication of applications
A method is disclosed for the authentication of applications both at the time of their downloading, as well as at the time of their execution. At least one application works in an equipment connected by a network to a control server, the equipment being locally connected to a security module. ...

08/16/07 - 20070192601 - System and method for user identification and authentication
A user identification and authentication device provides a secure computing platform and a secure computing path for communication with a secure remote host. The device is coupled to an unsecure PC but provides for secure verification of a user's identity and authorization in participating in a transaction. ...

08/16/07 - 20070192600 - Key handshaking method and system for wireless local area networks
A key handshake method in a wireless local area network (LAN) capable of performing authentication between two wirelessly connected stations by exchanging keys once is provided. Because the security key for authentication can be exchanged by one 4-way handshake between an authenticator and a supplicant in a wireless LAN, an ...

08/16/07 - 20070192599 - Authentication method and authentication system
After a selection key bundle is determined by a selection key bundle determining process, the following first authentication key authenticating process is executed. An authentication processing part selects a selection encryption key from selection key bundle following a predetermined association based on a received random-number data. On the other hand, ...

08/16/07 - 20070192598 - Pedigrees for quantum cryptography
A system stores pedigrees that include details of how and when each of multiple blocks of encryption key material were distributed between two endpoints using quantum cryptographic techniques. The system receives an indication of a possible quantum cryptographic security violation and accesses the stored pedigrees to identify one or more ...

08/09/07 - 20070186106 - Systems and methods for multi-factor authentication
Requests to gain access to secure resources are adjudicated according to authentication policies that include rules based on user-states derived from multiple heterogeneous access-control systems. ...

08/09/07 - 20070186105 - Wireless authentication methods and apparatus
A first processing device, which may be, for example, a wireless authentication token or an RFID tag, transmits information in a wireless network in a manner that emulates standard communications of an access point of the wireless network, although the first processing device is not configured to operate as an ...

08/09/07 - 20070186104 - Equipment authentication device
A web client device 20 is installed with an agent program 21 for requesting an authentication switch device 30 interposed between a Web server device 10 and the Web client device 20 to access the Web server device 10. The authentication switch device 30, when accepting the request from a ...

08/09/07 - 20070186103 - Common authentication service for network connected applications, devices, users, and web services
System architecture for network connected applications, devices, users, and web services providing security effected by means for managing interaction with an authentication library that effects a correlation between the use and creation of library entries having predetermined correlation indicia for effecting strong authentication of users and participants within the network. ...

08/02/07 - 20070180244 - Rogue access point detection
A method of detecting a rogue access point is disclosed. A message is directed from a supplicant to a network through a first access point. A response message is received by the supplicant from the first access point. The supplicant can determine the first access point is a rogue access ...

08/02/07 - 20070180243 - System and method for using acoustic digital signature generator as oracle
A hand-held sonic token can be used as a pseudorandom oracle for a requesting application, which can generate a challenge that is sent to the token. The user of the token decides whether to allow the token to function as an oracle, and if so, the user causes the token ...

08/02/07 - 20070180242 - Gsm authentication in a cdma network
Systems and techniques for secured communications from a subscriber station is disclosed. The subscriber station includes a processor having an authentication algorithm for a first network. The processor is configured to use a key for a second network in the authentication algorithm to establish a session with the second network. ...

08/02/07 - 20070180241 - Authentication method
An authentication method of a first module by a second module includes the steps of generating a first random datum by the second module to be sent to the first module, generating a first number by the first module starting from the first datum and by way of a private ...

07/26/07 - 20070174616 - System and method for securing computing management functions
In a computing management system authentication procedures are secured by protecting keys and/or processes used during the authentication procedures. In some embodiments the system cryptographically protects any keys used to mutually authenticate a management console and client. In some embodiments the system cryptographically protects execution of one or more of ...

07/26/07 - 20070174615 - Method and device for communication using random codes
A method and device for communication, in which a random code is used in the communication. The method comprises storing a random code in a first device; storing the random code in a second device; and using the random code in a subsequent communication. The invention may be employed in ...

07/26/07 - 20070174614 - Derivative seeds
A method of generating authentication seeds for a plurality of users, the method involving: based on a single master seed, generating a plurality of derivative seeds, each one for a corresponding different one of a plurality of users; and distributing the plurality of derivative seeds to a verifier for use ...

07/26/07 - 20070174613 - Context limited shared secret
In a communication system in which two communication entities seek to have a private or confidential communication session, a trust relationship needs first be established. The trust relationship is based on the determination of a shared secret which in turn is generated from contextual information. The contextual information can be ...

07/26/07 - 20070174612 - Method for communicating and checking authentication data between a portable transponder device and a vehicle reader unit
The method enables authentication data to be communicated and checked between a transponder device (1) and a reader unit (2) of a vehicle in order to authorise access to the vehicle. The device includes a logic circuit (11), a non-volatile memory (13), an encryption and/or decryption circuit (12) and a ...

07/26/07 - 20070174611 - Method for communicating and checking authentication data between a portable transponder device and a vehicle reader unit
The method enables authentication data to be communicated and checked between a transponder device (1) and a reader unit (2) of a vehicle in order to authorise access to the vehicle. The device includes a logic circuit (11), a non-volatile memory (13), an encryption and/or decryption circuit (12) and a ...

07/19/07 - 20070168662 - Privacy protection in communication systems
Methods and apparatus for protecting user privacy in a shared key system. According to one aspect, a user generates a derived identity based on a key and a session variable, and sends the derived identity to an application. In one embodiment, a key server may be used to receive the ...

07/19/07 - 20070168661 - Localization determination process for 1394 serial bus
A localization process in a network of source devices and sink devices on a 1394 bus, is performed by a source device while it is communicating to a sink device, which determines local network links from nonlocal ones. An actual round trip time calculation is performed only by the source ...

07/05/07 - 20070157024 - Automatic configuration of devices upon introduction into a networked environment
Automatic configuration of devices upon introduction into a networked environment, can be implemented, for example, by having a device randomly generate a series of letters and/or numbers, e.g., generate a PIN (Personal Identification Number) that encodes temporary credentials that, in addition to proving ownership and/or control over the device by ...

06/28/07 - 20070150732 - Wireless network control device and wireless network control system
A wireless LAN control device 3 includes a wireless LAN control unit having a transmitting/receiving unit performing communications with a plurality of wireless LAN access points 4 belonging to different user groups and a wireless LAN connection control unit executing control of transferring a user authentication request received by the ...

06/28/07 - 20070150731 - Authenticating device, authenticated device and key updating method
An authenticating device 100 includes an authentication processing unit 197 to perform an authentication process with a communication device 200 using an authentication key, an update key generating unit 160 to generate a new authentication key when the communication device 200 does not hold an authentication key to be used ...

06/21/07 - 20070143609 - Method for logically binding and verifying a subassembly in equipment
The present invention discloses a method for logically binding and verifying a subassembly in equipments. The method sets the subassembly in the equipment as a sub-module, and setting a main module in the equipment. the sub-module stores individual information of its own and the main module stores the individual information ...

06/21/07 - 20070143608 - Malleable pseudonym certificate system and method
The invention provides a malleable pseudonym certificate system and method for a communication network. According to one embodiment of the invention, a user acquires a root proof from a trusted entity, generates one or more pseudonym certificates based on the root proof, and sends anonymous public keys each equipped with ...

06/21/07 - 20070143607 - Electronic device enabling hardware and methods
This disclosure is generally concerned with systems and methods for selectively enabling an electronic device that is configured to communicate with a remote computer. In one example of such a method, identification data is initially transmitted from the electronic device to the remote computer. At the remote computer, a determination ...

06/21/07 - 20070143606 - Authentication of i²c bus transactions
This invention enables authenticated communications (transactions) to take place on a standard I2C bus without requiring modification of existing I2C devices. Read and write transactions occurring on the bus are authenticated using an Authentication Agent and a shared secret key. In addition to allowing verification of the legitimacy of the ...

06/14/07 - 20070136586 - Method and system for transmitting authentication context information
A system of the present invention uses an identity provider to provide the authentication services for multiple service providers. An identity provider communicates with one or more service providers. A user that wishes to gain access to a service provider is authenticated through the use of the identity provider. A ...

06/14/07 - 20070136585 - Determining authentication of rfid tags for indicating legitimacy of their associated items
RFID readers, computers, and methods are provided for determining the authentication of one or more RFID tags associated with a proffered item. In some embodiments, an Item Identifier (II) is input from the tags, along with a Declared Password (DP) corresponding to the II. A question is generated about whether ...

06/14/07 - 20070136584 - Handling legitimate and unauthorized items in supply chain according to authentication of their rfid tags
Methods are provided for handling items in a supply chain, or at a checkpoint such as a Customs Office. When an item is proffered, it is associated with one or more RFID tags. If an authentication condition about the tag data is met, the item is accepted, but otherwise it ...

06/14/07 - 20070136583 - Reporting on authentication of rfid tags for indicating legitimacy of their associated items
RFID readers, computers, and methods are provided for reporting on the authentication of one or more RFID tags associated with a proffered item, while requiring special permissions be cleared before reporting. In some embodiments, a question is input about whether a Declared Password (DP) is regarded as proper for an ...

06/14/07 - 20070136582 - Method and system for transaction validation
A method and system of authenticating submissions from a client to a server within a secure session as established for example by entry of username and password data, wherein the session is composed of a number of transactions each of which is itself additionally authenticated, for example by submission of ...

06/14/07 - 20070136581 - Secure authentication facility
Secure authentication facility coordinates user authentication for secure access to systems, software applications, and hardware and software resources. The secure authentication facility provides for user authentication using local or remote authentication devices, to authenticate to local or remote operating system, application software, or other resources. The secure authentication facility sends ...

06/14/07 - 20070136580 - Method and system for tracking a data processing system within a communications network
A method and system for tracking a data processing system within a communications network are provided. According to one embodiment, a method is provided comprising receiving identity data from a data processing system via a communications network, where the data processing system comprises a security processing element associated with a ...

06/14/07 - 20070136579 - Web browser operating system
A Web browsing system using a browser operating system (BOS), which provides a trusted software layer on which Web browsers execute. The BOS runs the client-side component of each Web application (e.g., on-line banking, and Web mail) in its own virtual machine, which provides strong isolation between Web services and ...

06/07/07 - 20070130463 - Single one-time password token with single pin for access to multiple providers
A system and a method are disclosed that includes a first party with a terminal and a one-time password token, one or more second parties, each with a host application system and a service provider authentication server, and a third party with a host application system and a master authentication ...

06/07/07 - 20070130462 - Asynchronous encryption for secured electronic communications
An asynchronous communication system and method are configured for secured communication between a sender and a recipient without a need for pre-arrangement of shared static encryption key secrets. In one embodiment a system receives an initiation request for authentication from a sender seeking to transmit a message. The system generates ...

06/07/07 - 20070130461 - Network service control method and agent dispatching method used therein
A network service control method detects whether a mobile node communicating with a corresponding node is trending to a second local area network from a first local area network and forks and transmits a user agent and a server agent to a proxy when the mobile node is trending to ...

06/07/07 - 20070130460 - Efficient browser-based identity management providing personal control and anonymity
The invention allows a reliable and efficient identity management that can, with full interoperability, accommodate to various requirements of participants. For that a method and system are presented for providing an identity-related information about a user to a requesting entity. The method comprises a location-request step initiated by the requesting ...

05/31/07 - 20070124588 - Information processing device and controlling method thereof
According to one embodiment, when an input from a pen input device is detected by a sensor, it is discriminated by BIOS that single sign-on is set. If it is discriminated that single sign-on is set, authentication is executed by a fingerprint authentication device. If the authentication is confirmed, an ...

05/31/07 - 20070124587 - Re-keying in a generic bootstrapping architecture following handover of a mobile terminal
An apparatus for re-keying a mobile terminal in a foreign network includes a processor. The processor is configured to receive, at the apparatus which is physically located in the foreign network, a request for re-keying from the mobile terminal in the foreign network. The processor is also configured to translate ...

05/31/07 - 20070124586 - Dedicated communication system and dedicated communicating method
The management of a conversion table of the original address and the dedicated address, and the management of the correspondence between a dedicated address and a communication partner are not necessary, and an original address can be concealed from the communication partner while performing communications by generating a dedicated address ...

05/31/07 - 20070124585 - Authorizing an endpoint node for a communication service
A network system for authorizing an endpoint node for a communication service includes an operator network and an organization network. The operator network operates to perform a device authorization operation to authorize the endpoint node for a communication session. The organization network operates to facilitate a service authorization operation to ...

05/31/07 - 20070124584 - Proving ownership of shared information to a third party
Establishing proof of authorized receipt of information between two recipients involves a sender developing an asymmetric key pair and sending one key to each of the two recipients. A first recipient develops a challenge and sends it to the second recipient. The second recipient uses a first key to encrypt ...

05/24/07 - 20070118745 - Multi-factor authentication using a smartcard
Methods and systems are provided for non-cryptographic capabilities of a token such as a smartcard to be used as an additional authentication factor when multi-factor authentication is required. Smartcards are configured to generate a transaction code each time a transaction is attempted by the smartcard. The transaction code is dynamic, ...

05/24/07 - 20070118744 - System and method for managing user equipment to access networks by using generic authentication architecture
The present invention discloses a method for managing user equipment (UE) to access the network by using Generic Authentication Architecture. The basic technical solution of the present invention is that upon receiving a B-TID query request from a NAF, a network function which provides query information determines whether the UE ...

05/17/07 - 20070113087 - Computer system establishing a safe communication path
Provided is a computer system including: a first computer; a second computer including a second processor and a second memory; and a communication controller for controlling communication between the first and second computers, in which: upon reception of a packet from the first computer, the communication controller translates address information ...

05/17/07 - 20070113086 - Method for selecting the authentication manner at the network side
The present invention discloses a method for a network to choose an authentication mode, wherein the key lies in that, according to the received authentication information in the authentication vector request message from S-CSCF as well as according to type of the requesting subscriber, HSS returns authentication information of the ...

05/17/07 - 20070113085 - Methods for secure and bandwidth efficient cryptographic synchronization
Methods for cryptographic synchronization of data packets. A roll-over counter (ROC) value is periodically appended to and transmitted with a data packet when a function of the packet sequence number equals a predetermined value. The ROC effectively synchronizes the cryptographic transformation of the data packets. Although the disclosed methods are ...

05/17/07 - 20070113084 - Method, apparatus, and program for processing information
An information processing apparatus decrypts, using meta data, encrypted data obtained by encrypting stream data including successive frames according to an encryption method in which, when the stream data is sequentially encrypted on a frame-by-frame basis, a key used for encrypting each frame is updated according to a predetermined rule. ...

05/17/07 - 20070113083 - System and method of message authentication
A system and method of improving the resistance of MAC functions to attack makes use of the output MAC value to perform a one-way operation such as exponentiation in a cyclic group such as a Galois Field. Further enhancements are provided by an optional keyed function that can provide another ...

05/17/07 - 20070113082 - Login method for a wireless network with security settings, and wireless network system with security settings
In a login method for a wireless network with security settings, security settings data for a wireless local area network is provided in a portable wireless device (such as a remote controller) capable of two-way wireless transmission. When it is intended to log a new wireless network device in to ...

05/17/07 - 20070113081 - Digital rights management based on device proximity
The present invention discloses a digital rights management (DRM) system and method based on device proximity for controlling what devices can utilize DRM protected content. DRM data and DRM protected content are copied from a first device to a second device such that the DRM protected content on the first ...

05/10/07 - 20070106893 - Authentication method, authentication device and information processor
Authentication processing is easily performed on a device used as a node in a network. Upon the authentication of a terminal used as the node in the network, when the terminal can communicate with another terminal, the terminal sends an electronic certificate of the terminal per se to the other ...

05/10/07 - 20070106892 - Method and system for establishing a communication using privacy enhancing techniques
A method of establishing a communication path from a first legal entity in a data communication network comprises the steps of providing at least one private reference point comprised in the data communication network and establishing a communication path from the first legal entity to the private reference point. The ...

05/03/07 - 20070101139 - System for protecting information over the internet
A system for protecting information over the Internet, or other public network, is provided at a web site addressable by one or more client computer systems. Each client computer system connects to the web site to receive a respondent identifier and viewer software. When the viewer software is installed at ...

05/03/07 - 20070101138 - Cryptographic methods, host system, trusted platform module, computer arrangement, computer program product and computer program
A cryptographic method is provided for a host system having an associated trusted platform module. A first contribution to a message is computed by the TPM based on a first secret parameter stored in the TPM. The host system computes a second contribution to the message based on a second ...

05/03/07 - 20070101137 - Method and apparatus for encryption of data
A method for encryption and decryption of data items is provided by defining a cipher key based on variables in a Chaotic Equation. The method includes selecting a Chaotic Equation (110) from a set of Chaotic Equations, defining starting conditions of the variables of the equation (140), and applying the ...

05/03/07 - 20070101136 - Secure login method for establishing a wireless local area network connection, and wireless local area network system
A secure login method for a wireless local area network is implemented using a first wireless terminal that has already been logged in to the wireless local area network and that has obtained a settings value, and a second wireless terminal that has yet to be logged in to the ...

05/03/07 - 20070101135 - Security system for portable computer
A portable computer searches for preprogrammed wireless stations when it boots, and if it does not recognize any, stops booting the O.S. so that data cannot be accessed. In this way, should the portable computer be stolen and removed from its intended vicinity, data on the computer cannot be accessed ...

05/03/07 - 20070101134 - Method and apparatus for performing encryption of data at rest at a port of a network device
Methods and apparatus for performing encryption for data at rest at a port of a network device such as a switch are disclosed. Specifically, when data is received from a host during a write to a storage medium such as a disk, the data is encrypted by the port prior ...

05/03/07 - 20070101133 - Method for offloading encryption and decryption of a message received at a message server to remote end devices
A method for offloading encryption and decryption of a message received at a message server to one or more end devices that are remote from the message server. An encrypting end device remote from the message server encrypts a message using cryptographic context and transmits the cryptographic context and encrypted ...

05/03/07 - 20070101132 - Method and device for forming an encrypted message together with method and device for encrypting an encrypted message
A cryptographic key pair is formed using an Internet-based authentication method, in order to transmit communication configuration data from a first communication unit to a second communication unit in a secure cryptographic manner. ...

04/26/07 - 20070094499 - Processing device, authentication server, processing system and function offering method
A digital MFP, which offers a function called by an operator, transmits a user ID and a password acquired from the operator to an authentication server and receives an authentication result with respect to the transmitted user ID and the password from the authentication server. The digital MFP receives a ...

04/26/07 - 20070094498 - Authentication method and apparatus utilizing proof-of-authentication module
A single sign-on technique allows multiple accesses to one or more applications or other resources using a proof-of-authentication module operating in conjunction with a standard authentication component. The application or other resource issues an authentication information request to the standard authentication component responsive to an access request from the user. ...

04/26/07 - 20070094497 - Secure authentication with voiced responses from a telecommunications terminal
A method and an apparatus are disclosed that enable an enhanced, interactive voice response (IVR) system to securely authenticate a user at a telecommunications terminal, without some of the disadvantages in the prior art. In particular, after the user at the telecommunications terminal requests access to a resource, the controlling ...

04/12/07 - 20070083760 - Secure booting method and mobile terminal for the same
A secure booting method for a mobile terminal comprising: checking configuration information stored in a non-volatile memory embedded in the mobile terminal to determine whether the configuration information is effective when the mobile terminal is booted, connecting the mobile terminal with a host to copy a downloader and a downloader ...

04/12/07 - 20070083759 - Data transfer system
A data transfer system comprising a host device and a data transfer device. The host device generates an encryption key based upon information unique to a removable data storage item onto which data are to be stored. The encryption key is then delivered by the host device to the data ...

04/12/07 - 20070083758 - Data transfer device
A data transfer device for storing data to a removable data storage item. The data transfer device comprises a non-volatile memory suitable for storing an encryption key. Unauthorised access to the contents of the non-volatile memory is prevented. The data transfer device is operable to receive data to be stored, ...

04/12/07 - 20070083757 - Authentication system
To ensure that one device acquires and updates a list used for judging whether the other device in communication is valid or invalid, in a device authentication system. When a list H stored in a personal computer 200 is old, the personal computer 200 acquires a latest version of the ...

04/05/07 - 20070079121 - Navigation system, license management device, license management system, license acquiring method and license acquiring program
A license management device receives a license issued by a license issuing device. The license management device transmits the received license to a navigation system for receiving the license, and stores the received license in a memory device. When the license to be acquired cannot be acquired, the navigation system ...

03/29/07 - 20070074021 - System and method for verification of personal identity
A system and method for storing identifying information and telephone numbers associated with individuals, and cross-referencing said information so as to link a first individual to other referee individuals capable of identifying the first individual as a result of a telephone conversation. When a relying party wishes to confirm the ...

03/29/07 - 20070074020 - Information processing apparatus, method, and program
Disclosed herein is an information processing apparatus that processes content data supplied in a format that has at least a metadata region in which metadata of a content is stored, the apparatus including: acquisition means configured to acquire the content data in the aforementioned format and decryption information for decrypting ...

03/22/07 - 20070067631 - Method for authentication
A method for authentication between at least two nodes within a network, preferably a wireless sensor network, is disclosed. The sending node computes a t-bit long hash value by using a hash function h. A transmission of possibly few additional data over the network is designed in such a way ...

03/22/07 - 20070067630 - Trusted information exchange based on trust agreements
Techniques are provided for allowing organizations to preserve the trust and allow this trust to be propagated across multiple agencies and/or enterprises. A technology is provided that allows (mutually) trusted entities to share content (information, digital assets) over any protocol-based network such as the Internet based on granted rights and ...

03/22/07 - 20070067629 - Cryptographic authentication, and/or establishment of shared cryptographic keys, using a signing key encrypted with a non-one-time-pad encryption, including (but not limited to) techniques with improved security against malleability attacks
Using a password (π), a client (C) computes part (H1(<C,πC>) of the password verification information of a server (S), and together they use this information to authenticate each other and establish a cryptographic key (K′), possibly using a method resilient to offline dictionary attacks. Then over a secure channel based ...

03/22/07 - 20070067628 - Association method and system in network system
An association method and system in a network system are provided. The association method is for data exchange between a host and a device in a network system, and includes measuring a distance between the device and the host, and transmitting a connection context required for association with the device ...

03/22/07 - 20070067627 - Processing device and processing method
A digital MFP carries out an authentication of an operator by a user ID and a password prior to usage of the digital MFP. The digital MFP requests from the operator an instruction as to whether or not to store the successfully authenticated user ID and password in a flash ...

03/22/07 - 20070067626 - Method and system for managing privacy policies
The present invention is a method and system for managing privacy policies in ad-hoc networks by way of spatial and temporal landmarks. A privacy policy is associated with a geographic or temporal landmark, which is associated with a domain. An information system selects an appropriate privacy policy for a wireless ...

03/22/07 - 20070067625 - System and method for enabling secure access to a program of a headless server device
Provided is a system and method for enabling secure access to a desired end-point server program of at least one end-point server program. The system includes a server having a security server program and the end-point server programs, and a client. During operation, the server establishes a first connection with ...

03/15/07 - 20070061571 - System and method for managing security testing
The subject matter relates generally to a system and method for managing security testing. Particularly, this invention relates to maintaining a security database by correlating multiple sources of vulnerability data and also to managing security testing from plural vendors. This invention also relates to providing secure session tracking by performing ...

03/15/07 - 20070061570 - Method of hardware driver integrity check of memory card controller firmware
A memory system comprises an encryption engine implemented in the hardware of a controller. In starting up the memory system, a boot strapping mechanism is implemented wherein a first portion of firmware when executed pulls in another portion of firmware to be executed. The hardware of the encryption engine is ...

03/08/07 - 20070055874 - Bundled subscriber authentication in next generation communication networks
Performing an authentication of a subscriber in a communication system comprising at least two subsystems is disclosed, the authentication of the subscriber requiring authentications of the subscriber in any of the subsystems, the method performing a bundled subscriber authentication by using an authentication in a first one of the subsystems ...

03/08/07 - 20070055873 - Method and system for protecting data, related communication network and computer program product
A method for securely storing at least one user's private information item, such as a private key for cipher processing, includes the steps of providing a communication network wherein the user is allotted a respective subscriber identity module and the subscriber identity module stores at least one security algorithm; producing ...

03/08/07 - 20070055872 - Secure processor
A processor having a general-purpose function and a security dedicated function (i.e., safe keeping of key data and high-speed digital signature calculation) is provided. Key data is stored in a non-volatile key register 130 of a secure processor 100, which has general instructions and signature calculation instructions. A key bit ...

03/08/07 - 20070055871 - Method and system for authenticating a user
A method and system of authenticating the identity of a person is disclosed which involves obtaining a value representing an overall degree of trust that the user is who he or she claims to be. A plurality of values are obtained from different authentication sources. By combining the values using ...

03/08/07 - 20070055870 - Process for secure communication over a wireless network, related network and computer program product
In order to ensure secure communication over a wireless network, such as a network according to the 802.11 standard, the terminals in the network exchange information ciphered by means of at least one key. The key is generated independently at each terminal by means of the group key agreement type. ...

03/01/07 - 20070050624 - Secure instant messaging system
A secure instant messaging system integrates secure text instant messaging and secure file transfers into existing instant messaging systems. At least one certificate authority (CA) is provided that issues a security certificate to a user that binds the user's instant messaging screen name to a public key which is used ...

03/01/07 - 20070050623 - Method of obtaining the user identification for the network application entity
The present disclosure provides a method for Network Application Function to acquire subscriber identity information. According to application of the disclosed method, NAF acquires subscriber identity information so as to facilitate its subscriber management, such as to achieve subscriber charging and/or access control. When NAF serves as an application server ...

03/01/07 - 20070050622 - Method, system and apparatus for prevention of flash ic replacement hacking attack
Techniques are provided for preventing replacement of a one-time-programmable (OTP) component. The OTP component can be part of a wireless device. The wireless device is configured such that programming of a new IMEI code into the OTP component is permitted only when the wireless device is in a secure-mode state. ...

03/01/07 - 20070050621 - Method for prohibiting an unauthorized component from functioning with a host device
A method for prohibiting an unauthorized component from functioning with a host device is disclosed. The method includes reading key information from a component and inputting the key information into an algorithm to generate a first identifier. In addition, the method includes detecting a coupling between the component and a ...

02/22/07 - 20070043945 - Method for performing multiple pre-shared key based authentication at once and system for executing the method
A method and apparatus for performing a multiple Pre-Shared Key (PSK) based authentication in a single procedure is described, where the multiple PSK based authentication generates a combined credential in a terminal by using a plurality of credentials including a user identifier and the PSK, and authenticates the terminal in ...

02/22/07 - 20070043944 - Storage control device, storage control device host interface control unit, and storage control device information protection method
When a channel adapter (CHA) is replaced, the storage control device of the present invention deletes the security information held in the channel adapter to improve security. The CHA conducts encrypted communications with the host. Security information (encryption keys and the like) employed in encrypted communications is stored in the ...

02/15/07 - 20070038859 - Method and apparatus for hierarchical assignment of rights to documents and documents having such rights
A self-contained device for protecting content, the content having usage rights associated therewith, includes a usage rights portion having usage rights that control the use of the content; a rights management module that authorizes a request to access to the content based on the usage rights; a rights assignment module ...

02/15/07 - 20070038858 - Compliance in a network memory architecture
A network memory system for ensuring compliance is disclosed. The network memory system comprises a first appliance configured to encrypt first data, store the encrypted first data in a first memory device. The first appliance also determines whether the encrypted first data exists in a second appliance and transmits a ...

02/08/07 - 20070033401 - Security enhancements for pervasive devices
A method, apparatus, and program product for tiered, multi-state intelligent detection and enforcement of security on a pervasive device is provided. The method/apparatus first monitors the pervasive device for the presence of a security identifier, then establishes a current security level chosen from a plurality of security levels for the ...

02/08/07 - 20070033400 - System and method for secure electronic data delivery
Electronic data is securely delivered from an issuer to a recipient, in the form of an encrypted object. Data belonging to the issuer to be delivered is first selected and then encrypted into the object. The object is registered with a transaction archive for tracking the object prior to transmitting ...

02/08/07 - 20070033399 - Transmitting/receiving system and method, transmitting apparatus and method, receiving apparatus and method, and program used therewith
A transmitting/receiving system includes a transmitting apparatus that transmits, to another apparatus, first encrypted data obtained by encrypting stream data including consecutive unit data items in accordance with a first encryption technique prescribing that, when the stream data is encrypted for each item, keys used for encrypting the items are ...

02/08/07 - 20070033398 - System and method for selective encryption of input data during a retail transaction
A retail environment having retail terminals with data entry point devices selectively encrypts input received by the data entry point devices and passes the encrypted data to a security module. The selective encryption is based on whether or not sensitive or confidential information, such as a personal identification number (PIN) ...

02/08/07 - 20070033397 - Securing digital content system and method
A system and method of encrypting digital content in a digital container and securely locking the encrypted content to a particular user and/or computer or other computing device is provided. The system uses a token-based authentication and authorization procedure and involves the use of an authentication/authorization server. This system provides ...

02/08/07 - 20070033396 - Method and device for securing content delivery over a communication network via content keys
A method for descrambling secure content received over a network is disclosed. The method is operable at a receiving device (150) located at a remote site in communication with a network (140) for receiving a first information item scrambled using an encrypting key (Pu) known by the remote site, descrambling ...

02/01/07 - 20070028103 - Communication system, communication apparatus, communication method, communication control method, communication control program, and program storage medium
A communication control method for a communication apparatus for performing communication in conformity with predetermined communication standards among a plurality of communication apparatus by setting predetermined system information common to the communication apparatus, the communication apparatus performing communication with another communication apparatus having authentication processing means for executing an authentication ...

02/01/07 - 20070028102 - System for processing data and method thereof
Record carrier identification information is stored using an asymmetry modulation (FIGS. 1,2,3). This prevents the access to this information throught the regular data path (65) of the playback device (60). The asymmetry information is automatically removed by the playback device because of the inherent data slicing FIG. 4) and decoding ...

01/25/07 - 20070022290 - Information processing apparatus, control method thereof, and computer program
An apparatus includes a first storage unit configured to store first data to be backup, an encryption unit configured to generate second data by encrypting the first data by using a cryptographic key, a second storage unit configured to store the second data together with a first identifier of the ...

01/25/07 - 20070022289 - Method and system for providing secure credential storage to support interdomain traversal
An approach provides interdomain traversal to support packetized voice transmissions. A request is received from a first endpoint of a first domain for establishing a communication session with a second endpoint of a second domain. Encrypted user credential information is retrieved from a credentials database resident within the first domain, ...

01/18/07 - 20070016776 - Method for securing a transmission, associated system and mediation platform
In a system comprising a broadcasting subsystem and a radiocommunication subsystem each connected to a mediation platform, said transmission being ciphered and arranged for being deciphered by using a key, the following steps are performed at the mediation platform, relatively to a user or group of users having terminals: determining ...

01/18/07 - 20070016775 - Scheme for resolving authentication in a wireless packet data network after a key update
In one embodiment, a scheme is disclosed for resolving authentication of a mobile node that negotiates with a packet data serving node (PDSN) for establishing a Simple IP (SIP) connection after encountering a failure in Mobile IP (MIP) service mode. ...

01/18/07 - 20070016774 - Secure proxy mobile apparatus, systems, and methods
Secure proxy mobile apparatus, systems, methods, and articles are described generally herein. Other embodiments may be described and claimed. ...

01/11/07 - 20070011454 - Method for safely downloading setting data in voip system
A method for safely downloading setting data in a Voice over Internet protocol (VoIP) system including a server, a VoIP device, and a console, includes steps of: establishing communication between the console and the VoIP device; determining whether a certificate authority of the VoIP device is valid; generating a session ...

01/11/07 - 20070011453 - Establishment of a trusted relationship between unknown communication parties
The present invention provides an establishment of a trusted relationship between two mutually unknown communication parties in a communication system without the use of a trusted third party. The invention is based on non-interactive proofs-of-work being purpose-bound for establishing the trusted relationship and cryptographically signing information to be transferred between ...

01/11/07 - 20070011452 - Multi-level and multi-factor security credentials management for network element authentication
A secured execution device (SED) maintains security credentials for a certain user that requests access to the network for performing specified operations or for obtaining specified information. The NE from where the user requests access to the network is authenticated using SED credentials against a multi-level and multi-factor credentials table ...

01/04/07 - 20070005969 - Anonymous communication system and method
A system for anonymous communication wherein a first party, subscriber, stores private contact address information with a server controlled by a trusted third party. The subscriber is associated with a token in the server database. The subscriber may publish the token with information of interest to a second party. The ...

01/04/07 - 20070005968 - Multi-chassis interconnect
The present invention provides a system, apparatus and method for providing point-to-point inter-chassis connections within chassis systems and/or network nodes. Multi-chassis systems within a network employ a protocol wherein a peer discovery process is initiated and the discovered neighbors are authentically verified before establishing an active state between point-to-point inter-chassis ...

01/04/07 - 20070005967 - Method and apparatus for providing authentication between a sending unit and a recipient based on challenge usage data
A method, apparatus and/or system generates a challenge for user authentication, having a challenge data element from a stored pool of challenge data elements. The challenge is based on rule data and stored usage data associated with at least some of the challenge data elements in the stored pool of ...

01/04/07 - 20070005966 - Derivation of a shared keystream from a shared secret
Techniques and architectures that allow two electronic devices to derive a shared keystream from a shared secret. In one embodiment, each of the electronic devices generates a random number and transmits the random number to the other electronic device. Each electronic device may generate value by performing a hash on ...

01/04/07 - 20070005965 - Client authentication using multiple user certificates
Example embodiments provide for authenticating a device to multiple servers without using delegation or having to have a password stored on the device. Multiple certificates that are typically non-delegable are used to authenticate the device to each server. One certificate is used to authenticate the client with the front-end server ...

01/04/07 - 20070005964 - Methods and apparatus for authenticating a remote service to another service on behalf of a user
Methods and apparatus are provided for authenticating a remote service to another service on behalf of a user. A user client authorizes a remote application client to perform one or more actions on behalf of the user client. The user client provides one or more keys to a remote authentication ...

01/04/07 - 20070005963 - Secured one time access code
Techniques are described that may provide secure access to a computing device. In one embodiment, a nonce and a device identifier are utilized to generate a secured one time access code. ...

01/04/07 - 20070005962 - Methods and apparatus for negotiating agreement over concealed terms through a blind agent
The present invention relates to methods, processes, apparatus, algorithms, etc., for secure identification of secret answers that satisfy secret questions. The methods, etc., can be used for the negotiated exchange of information, goods, or services when the Seeker and the Provider conceal their negotiating positions. ...

12/28/06 - 20060294376 - System and method for concurrently downloading digital content and recording to removable media
A method, system and program product to simultaneously download and burn digital media files via the Internet, including audio, video, video games and other digital content and data, onto removable storage media on personal computer burners. Large media files can be downloaded by pushing files or portions of files to ...

12/28/06 - 20060294375 - System for the assets identification and protection
System of the assets identification Ond protection which is bound to marking Ond reverse identification of stolen things or lost transport means, things and animals by the means of electronic records, in order to determinate correctly the origin and the owner. It consists of protection elements (microdots and microchips bearing ...

12/21/06 - 20060288210 - System of personal data spaces and a method of governing access to personal data spaces
A system of personal data spaces (PDB) utilizing known storage spaces is characterized by the fact that it consists of the sum of unitary personal data spaces, each of which comprises the owner (P) of the unitary personal data space (UPDB) and the storage space (S) of the owner (P) ...

12/21/06 - 20060288209 - Method and apparatus for secure inter-processor communications
A portable electronic device (110) is capable of secure inter-processor communications (160) between processors (120, 130). The processors have unique and unalterable device identifiers used to encrypt session key data using shared secrets. A first processor device identifier is encrypted by a first processor (120) and decrypted by a second ...

12/07/06 - 20060277406 - System and method for encrypted communication
In an encryption communication using VPN technologies, a load on a VPN system becomes large if the number of communication terminals increases. When an external terminal accesses via an internal terminal an application server, processes become complicated because it is necessary to perform authentication at VPN and authentication at the ...

11/30/06 - 20060271782 - Network system and method for operating network system
A control network system connected with a node having a unique identifier includes a KDC4B for distributing a first key to the node for cryptographic communication, a PS4B for supplying a function name and a second key corresponding to the unique identifier to the node by the cryptographic communication using ...

11/30/06 - 20060271781 - Information processor, method for managing the same and computer program product
An information processor is provided that can maintain security in the entire network and use recording media resources efficiently. An image forming apparatus includes a user information memorizing portion for memorizing local user data of users who have ever used the image forming apparatus, a user information deleting portion for ...

11/23/06 - 20060265589 - Method and apparatus for url forwarding
A domain name is associated with the IP address of a first, URL forwarding web server within the domain name system (DNS) so that a request for a website or other resource associated with the domain name is presented to the URL forwarding web server. The URL forwarding web server ...

11/16/06 - 20060259769 - Method and device for encryption and decryption
Applying both an encryption and also a decryption algorithm, which is inverse to the encryption algorithm, as an encryption definition to thereby enable the use of an encryption unit and a decryption unit of an encryption/decryption device simultaneously, i.e. temporally overlapping, in an encryption process when a part of the ...

11/16/06 - 20060259768 - Apparatus, and associated method, for providing communication access to a communication device at a network access port
Apparatus, and an associated method, for selectably providing access to a communication device connected to a network access port in a communication network. When a communication device is connected at the access port, its connection is detected by a detector. A determiner determines whether the communication device is 802.1x capable. ...

11/16/06 - 20060259767 - Methods and apparatuses for information authentication and user interface feedback
Methods and apparatuses for management of entitlement to security operations. In one aspect, a method for authentication, includes: determining an indication of a cursor being positioned over a graphical user interface element of a first application process for a period of time, where the first application process is to present ...

11/16/06 - 20060259766 - System and method to protect personal identity identifiers
This invention teaches methodology for implementing password authentication of social security numbers, and other such identity identifier objects, with the aim to curb unwarranted use of peoples' identity identifiers. The invention introduces an identity-matrix and related methodology. Together, they comprise a system that is a combination of a person's social ...

11/09/06 - 20060253706 - Systems and methods for demonstrating authenticity of a virtual machine using a security image
Access to an authentication image may be protected so that only authenticated processes have access to the image. The image can be displayed to authenticate a User Interface (UI) to a computer user. The image indicates the UI can be trusted. If the image is not displayed, it may be ...

11/09/06 - 20060253705 - Systems and methods for determining if applications executing on a computer system are trusted
Access to an authentication image may be protected so that only authenticated processes have access to the image. The image can be displayed to authenticate a User Interface (UI) to a computer user. The image indicates the UI can be trusted. If the image is not displayed, it may be ...

11/02/06 - 20060248335 - Configuring interfaces of a switch using templates
Configuring an interface of a switch includes sending an authentication request requesting authentication for an endpoint from a switch to an authentication server. The switch comprises interfaces and is operable to access templates, where a template is operable to generate one or more interface commands for an interface. An instruction ...

10/26/06 - 20060242409 - Linking diffie hellman with hfs authentication by using a seed
A method of chip authentication comprising verifying a driver identity, establishing a Diffie Hellman key, hashing the Diffie Hellman key, picking a seed, and performing a hardware functional scan with the seed. ...

10/26/06 - 20060242408 - Cryptographic peer discovery, authentication, and authorization for on-path signaling
A method is disclosed for cryptographic peer discovery, authentication, and authorization. According to one embodiment, a data packet, which is addressed to a destination device other than an intermediary network device, is intercepted at the intermediary network device. The data packet contains a request and a group identifier. A shared ...

10/19/06 - 20060236104 - Method and apparatus for encrypting and decrypting data in a database table
One embodiment of the present invention provides a system that decrypts an encrypted column in a row. During operation, the system receives the encrypted column in the row. The system then determines a security domain associated with the encrypted column in the row, wherein the security domain represents a set ...

10/19/06 - 20060236103 - Dynamic authentication of mark use
Disclosed are systems and methods for authenticating use of a mark. In one embodiment, a system for facilitation, authentication, and authorization of the use of a mark comprises a mark owner server that receives registration information from a reseller server via a network that requests to use a mark. The ...

10/19/06 - 20060236102 - Secret-key-controlled reversible circuit and corresponding method of data processing
A combinatorial key-dependent network suitable for the encryption/decryption of data on buses and in memories of data-processing devices, has a number of layers, where each layer has a number of elementary building blocks operating on very small block sizes. A generic building block acts on a small number of input ...

10/19/06 - 20060236101 - Authentication method for medic gateway
The present invention relates to a method of authentication for Media Gateway, comprising: setting up an initial key for validating initial digital signatures between a Media Gateway and a Media Gateway Controller; generating a new shared key having a specific lifetime by performing signaling communication between said Media Gateway and ...

10/12/06 - 20060230268 - System and method for providing an user's security when setting-up a connection over insecure networks
A method for setting up a secure communication line between a user and a service provider using non-secure communication channels within an insecure network, comprising the steps of transmitting an identity token from a user station to a service provider station both coupled to the insecure network; upon reception of ...

10/12/06 - 20060230267 - Switching an application, user and security context based on device orientation
A computer is adapted for changing one or more of the application, security, or user contexts based on the orientation of a component, such as a monitor. Changing the context responsive to the reorientation allows two or more users to use the same hardware to complete a transaction requiring at ...

10/12/06 - 20060230266 - Secure communications across multiple protocols
Systems, methods, and devices for secure communications across multiple protocols are disclosed. In one embodiment, the method comprises receiving, at an access device, an encryption key. The access device analyzes the communication to determine a portion of the communication to be encrypted and to determine an additional portion of the ...

10/05/06 - 20060224889 - Methods for authenticating an identity of an article in electrical communication with a verifier system
Methods for authenticating a property of an article in electrical communication with a verifier system including, for example, reading an identification code from the article, generating a challenge phrase from a verifier system, writing a challenge phrase to a first memory location on the article, reading a response phrase from ...

10/05/06 - 20060224888 - Methods and apparatuses for security visualization
Methods and apparatuses for preconscious security feedback. In one aspect, a method for secure communication includes: displaying a first visual cue to indicate presence of security measure for communication while an operation for a secure communication transaction is in progress; and playing a first audio cue to indicate the presence ...

09/28/06 - 20060218400 - Cryptographic key construct
A computer program product, for producing a cryptographic key label for use in exchanging information between first and second organizations of members, resides on a computer-readable medium includes computer-readable instructions configured to cause a computer to: produce a read-write cryptographic key using at least one base value; produce a write-only ...

09/28/06 - 20060218399 - Method and system indicating a level of security for voip calls through presence
In accordance with a particular embodiment of the present invention, a method for providing security information associated with a prospective communication session to a user includes providing at least one communication network for the establishment of a prospective communication session between a first network device and a second network device. ...

09/28/06 - 20060218398 - Communications security
A method of authenticating a device's access to a communications node is disclosed. The method of operation includes the communications node generating a first value for use in the derivation of a first encryption key, the first encryption key being at least partially used to authenticate the device's access to ...

09/28/06 - 20060218397 - Apparatus and methods for sharing cryptography information
A system includes a server, a first client device to communicate in an authenticated and secured manner with the server over a first communication link, and a second client device to communicate in an authenticated and secured manner with the first client device over a second communication link. The first ...

09/21/06 - 20060212702 - Authenticating an endpoint using a stun server
Authenticating an endpoint using a STUN server includes facilitating a communication session between a first endpoint and a second endpoint over a network. A challenge request is sent to the second endpoint. The challenge request attempts to authenticate the second endpoint and includes an identification. The identification is associated with ...

09/21/06 - 20060212701 - Automatic centralized authentication challenge response generation
A centralized challenge response verification server such as a RADIUS server is used to generate challenge responses as well as to verify challenge responses. In this way, the requirement for all machines to maintain a set of shared secrets corresponding to all potential peers is eliminated. In an embodiment of ...

09/14/06 - 20060206710 - Network assisted terminal to sim/uicc key establishment
A method is described herein which enables a mobile device and a smart card (SIM, UICC) to establish a shared secret KE which can then be used to secure an interface between themselves. A mobile operator helps in the establishment of the shared secret (KE) by taking part in a ...

09/07/06 - 20060200668 - Process for the secure management of the execution of an application
To secure the execution of an application on an intelligent mobile telephone, each application is identified by an identifier and a table or rights is associated with each resource on the mobile telephone. Through a table of rights, access rights to the resource can be associated with an application identifier. ...

09/07/06 - 20060200667 - Method and system for consistent recognition of ongoing digital relationships
Exemplary embodiments disclosed herein may include a method and system for creating an attendance marker and establishing consistent recognition of an ongoing digital relationship, including receiving an identity key about a server, creating an attendance marker, associating the attendance marker with the server. Other embodiments relate to systems and methods ...

09/07/06 - 20060200666 - Methods, communication networks, and computer program products for monitoring communications of a network device using a secure digital certificate
A communication network is operated by storing a digital certificate on a subject device. A communication session is established between the subject device and another device across a communication network. The communication session incorporates the digital certificate in at least one message between the subject device and the other device. ...

08/31/06 - 20060195694 - Method and apparatus for authenticated dial-up access to command controllable equipment
A method and apparatus for secure and authenticated access to command controllable computerized equipment is described. The method involves using an access apparatus that prevents access to the command controllable computerized equipment until a user is authenticated as a trusted user authorized to access the command controllable computer equipment. The ...

08/24/06 - 20060190729 - Portable information terminal and data protecting method
Even if a portable information terminal is lost or stolen, a third party is prevented from illegally browsing data stored in the portable information terminal. When a control signal is received through wireless communication part and when the received control signal is an instruction signal to execute an encryption process ...

08/24/06 - 20060190728 - System and method for three-phase data encryption
The present invention is directed to a three-phase encryption method and a three-phase decryption method, and an apparatus implementing the three-phase encryption method and/or the three-phase decryption method. To encrypt a message according to the three-phase encryption method, a content of a message is converted from a first form M ...

08/24/06 - 20060190727 - Method and control program for operating a communication terminal for packet-oriented data transmission
In the English translation document, please add the paragraph at page 11 line 1, after the newly added ABSTRACT section heading, as follows: In order to operate a communication terminal for packet-oriented data transmission, at least one piece of status information is stored, for a communication terminal, in a memory ...

08/24/06 - 20060190726 - Method for secure data exchange between two devices
In a preferred embodiment, the first device (10) is a security module containing a first encrypting key, said private key (PAKV) of a pair of asymmetric encrypting keys. The second device is a receiver (11) comprising at least one second encrypting key, said public key (PAKB) of said pair of ...

08/24/06 - 20060190725 - Method and system for measuring productivity based on computer activities
A method and system for measuring a user's productivity for a plurality of projects conducted on computer. The system allows manager and user to define the scope of the projects in which project-related computer activities will be recorded and productivity attributes will be derived. The system receives specifications comprising a ...

08/10/06 - 20060179311 - System for providing device authentication in a wireless network
A system and method are provided for authenticating a new device in a wireless network using an authentication device. First, the new device estimates the distance between the new device and the authenticating device as a first distance measurement, and sends the first distance measurement to the authentication device. The ...

08/10/06 - 20060179310 - Interactive processing method for selecting network information for a user terminal in a wireless local area network
The present invention is an interactive processing method for selecting network information for a user terminal in a WLAN. After a radio connection between a WLAN user terminal and a WLAN AN is established, the WLAN AN or the WLAN user terminal initiates an authentication procedure, and the WLAN AN ...

08/10/06 - 20060179309 - Systems and methods for managing multiple keys for file encryption and decryption
Systems and methods for managing multiple keys for file encryption and decryption may provide an encrypted list of previously used keys. The list itself may be encrypted using a current key. To decrypt files that are encrypted in one or more of the previous keys, the list can be decrypted, ...

08/10/06 - 20060179308 - System and method for providing a secure boot architecture
A system and method for providing a secure boot architecture, in accordance with one embodiment of the present invention, includes a processor having an atomic state machine and a physically protected storage area. The atomic state machine stores a state of the processor in a state save map upon a ...

08/10/06 - 20060179307 - Method and system for inter-subnet pre-authentication
A method and system for performing pre-authentication across inter-subnets. A pre-authentication request is received by a first access point associated with a first subnet from a mobile node requesting that is requesting pre-authentication with a second access point associated with a second subnet. The request is forwarded by the access ...

08/10/06 - 20060179306 - Communication device, communicate method for communication device, and communication program for communication device
When in receiving a call sign to identify the radio station RS being received now from a client terminal CT and transmitting state information that shows the state of an information provision service about the radio station RS corresponding to the call sign to the above client terminal CT, if ...

08/10/06 - 20060179305 - Wlan session management techniques with secure rekeying and logoff
The invention provides a method for improving the security of a mobile terminal in a WLAN environment by installing two shared secrets instead of one shared secret, the initial session key, on both the wireless user machine and the WLAN access point during the user authentication phase. One of the ...

08/10/06 - 20060179304 - Instant log-in method for authentificating a user and settling bills by using two different communication channels and a system thereof
A method for authenticating a user of certain service provided by a system through a first communication channel, in one aspect including receiving an access request from a first terminal of the user through the first communication channel; receiving an address or number of a second terminal of t