METHOD AND APPARATUS FOR CONTROLLING THE ROUTING OF DATA PACKETS
    5.
    发明公开
    METHOD AND APPARATUS FOR CONTROLLING THE ROUTING OF DATA PACKETS 有权
    方法和一种用于控制数据分组路由

    公开(公告)号:EP2279599A4

    公开(公告)日:2013-12-25

    申请号:EP08767160

    申请日:2008-05-22

    Abstract: Method and apparatus for controlling the routing of data packets in an IP network (200). A DNS system (202) stores a packet admission policy configured for a first end-host (B) that dictates conditions for allowing other end-hosts to get across data packets to the first end-host or not. A routing voucher is defined which is required for routing data packets to the first end-host. The routing voucher is distributed to routers (R) in the IP network. When an address query is received at the DNS system (202) from a second end-host, the voucher is supplied to the second end-host if the configured policy allows the second end-host to convey data packets. Otherwise, the voucher is not supplied. If allowed, the second end-host will add the routing voucher to any data packets directed to the first end-host. When a valid routing voucher is present in a packet at a router (204) in the network, the packet will be forwarded to the next router in the IP network. The router will otherwise discard the packet.

    KEY MANAGEMENT FOR SECURE COMMUNICATION
    7.
    发明公开
    KEY MANAGEMENT FOR SECURE COMMUNICATION 有权
    密钥管理安全通信

    公开(公告)号:EP2215769A4

    公开(公告)日:2013-10-30

    申请号:EP07852199

    申请日:2007-11-30

    Abstract: A method and arrangement is disclosed for managing session keys for secure communication between a first and at least a second user device in a communications network. The method is independent of what type of credential each user device implements for security operations. A first user receives from a first key management server keying information and a voucher and generates a first session key. The voucher is forwarded to at least a responding user device that, with support from a second key management server communicating with the first key management server, resolves the voucher and determines a second session key. First and second session keys are, thereafter, used for secure communication. In one embodiment the communication traverses an intermediary whereby first and second session keys protect communication in their respective leg to said intermediary.

    METHOD FOR ESTABLISHING A RANDOM NUMBER FOR SECURITY AND ENCRYPTION, AND A COMMUNICATIONS APPARATUS
    9.
    发明申请
    METHOD FOR ESTABLISHING A RANDOM NUMBER FOR SECURITY AND ENCRYPTION, AND A COMMUNICATIONS APPARATUS 审中-公开
    建立安全和加密的随机数的方法和通信装置

    公开(公告)号:WO2008133590A9

    公开(公告)日:2009-11-19

    申请号:PCT/SE2008050479

    申请日:2008-04-26

    Abstract: A communications apparatus includes a mobile device. The apparatus includes a receiver for receiving at the mobile device a plurality of signals carrying information including received signals which provides randomly varying data related to location of the mobile device. The apparatus includes a random number generator which generates a random number as a function of the data. The apparatus includes a cryptographic key generator which generates a cryptographic key using the random number. A method to establish at a mobile device a random number for cryptographic operations includes the steps of receiving at the mobile device a plurality of signals carrying information including received signals which provides randomly varying data related to location of the mobile device. There is the step of estimating signal entropy for at least one of the received signals in dependence of location where the signals are received by the mobile device. There is the step of selecting the at least one entropy estimated signal having estimated entropy satisfying a predetermined property. There is the step of generating from the at least one entropy estimated signal the random number.

    Abstract translation: 通信装置包括移动装置。 该装置包括接收机,用于在移动设备处接收携带包括接收信号的信息的多个信号,所述接收信号提供与移动设备的位置相关的随机变化的数据。 该装置包括随机数生成器,其生成作为数据的函数的随机数。 该装置包括使用随机数生成加密密钥的加密密钥生成器。 一种用于在移动设备处建立用于密码操作的随机数的方法包括以下步骤:在移动设备处接收携带包括接收信号的信息的多个信号,所述接收信号提供与移动设备的位置相关的随机变化的数据。 根据移动设备接收信号的位置,估计接收到的信号中的至少一个信号熵的步骤。 存在选择具有满足预定特性的估计熵的至少一个熵估计信号的步骤。 存在从至少一个熵估计信号产生随机数的步骤。

    EFFICIENT ARITHMETIC IN FINITE FIELDS OF ODD CHARACTERISTIC ON BINARY HARDWARE
    10.
    发明申请
    EFFICIENT ARITHMETIC IN FINITE FIELDS OF ODD CHARACTERISTIC ON BINARY HARDWARE 审中-公开
    二元硬件上奇数特征有限域的有效算术

    公开(公告)号:WO2004036413A3

    公开(公告)日:2004-06-24

    申请号:PCT/SE0301560

    申请日:2003-10-07

    CPC classification number: G06F7/724 G06Q20/3829 H04L9/0841 H04L9/3066

    Abstract: A method of processing binary data representing field elements of an odd-characteristic finite field GF(pk) is described. The method comprises storing binary data representing at least a portion of a field element of an odd-characteristic finite field GF(pk) in a register, p being an odd prime number, the field element comprising k coefficients in accordance with a polynomial-basis representation, the binary data comprising plural groups of data bits, wherein each group of data bits represents an associated one of the k coefficients. The method also comprises executing at least one operation on contents of the register such that the plural groups of data bits are processed in parallel. An apparatus comprising a memory and a processing unit coupled to the memory to carry out the method is also described.

    Abstract translation: 描述了表示奇特征有限域GF(pk)的场元素的二进制数据的处理方法。 该方法包括将表示奇特征有限域GF(pk)的场元素的至少一部分的二进制数据存储在寄存器中,p是奇素数,该场元素包括k个系数,依照基于多项式的 表示,二进制数据包括多组数据比特,其中每组数据比特表示k个系数中相关联的一个。 该方法还包括对寄存器的内容执行至少一个操作,使得并行处理多组数据位。 还描述了包括存储器和耦合到存储器以执行该方法的处理单元的设备。

Patent Agency Ranking