JP7314156B2 - コンピュータ間のデータ通信を保護するためのシステムおよび方法 - Google Patents

コンピュータ間のデータ通信を保護するためのシステムおよび方法 Download PDF

Info

Publication number
JP7314156B2
JP7314156B2 JP2020545692A JP2020545692A JP7314156B2 JP 7314156 B2 JP7314156 B2 JP 7314156B2 JP 2020545692 A JP2020545692 A JP 2020545692A JP 2020545692 A JP2020545692 A JP 2020545692A JP 7314156 B2 JP7314156 B2 JP 7314156B2
Authority
JP
Japan
Prior art keywords
computer
key
encrypted
token
public
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2020545692A
Other languages
English (en)
Japanese (ja)
Other versions
JP2021516491A5 (https=
JP2021516491A (ja
JPWO2019168477A5 (https=
Inventor
ムティタ ドンソムサクンキジ，
ディスアン ネトシリニンクル，
スワン ブーンプレム，
ジュクリット ユーイェン，
ジャグリー ナ アユタヤ プララカウォン，
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nitto Denko Corp
Original Assignee
Nitto Denko Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nitto Denko Corp filed Critical Nitto Denko Corp
Publication of JP2021516491A publication Critical patent/JP2021516491A/ja
Publication of JP2021516491A5 publication Critical patent/JP2021516491A5/ja
Publication of JPWO2019168477A5 publication Critical patent/JPWO2019168477A5/ja
Application granted granted Critical
Publication of JP7314156B2 publication Critical patent/JP7314156B2/ja
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/606—Protecting data by securing the transmission between two devices or processes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/045—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H04L67/141—Setup of application sessions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0827—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving distinctive intermediate devices or communication paths
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/088—Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
    • H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3242—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2107—File encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/88—Medical equipments
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Power Engineering (AREA)
  • Computer And Data Communications (AREA)
  • Storage Device Security (AREA)
JP2020545692A 2018-03-02 2019-02-28 コンピュータ間のデータ通信を保護するためのシステムおよび方法 Active JP7314156B2 (ja)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
SG10201801747W 2018-03-02
SG10201801747W 2018-03-02
PCT/SG2019/050114 WO2019168477A1 (en) 2018-03-02 2019-02-28 System and method for securing data communication between computers

Publications (4)

Publication Number Publication Date
JP2021516491A JP2021516491A (ja) 2021-07-01
JP2021516491A5 JP2021516491A5 (https=) 2022-02-18
JPWO2019168477A5 JPWO2019168477A5 (https=) 2022-02-18
JP7314156B2 true JP7314156B2 (ja) 2023-07-25

Family

ID=67808799

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2020545692A Active JP7314156B2 (ja) 2018-03-02 2019-02-28 コンピュータ間のデータ通信を保護するためのシステムおよび方法

Country Status (8)

Country Link
US (1) US11310038B2 (https=)
EP (1) EP3759867A4 (https=)
JP (1) JP7314156B2 (https=)
KR (1) KR20200127201A (https=)
CN (1) CN112075051A (https=)
AU (1) AU2019228421A1 (https=)
SG (1) SG11202008452PA (https=)
WO (1) WO2019168477A1 (https=)

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3837804B1 (en) * 2018-08-13 2025-12-31 Visa International Service Association TOKEN KEYS TO GENERATE CRYPTOGRAMS FOR TOKEN INTERACTIONS
JP7327208B2 (ja) * 2020-02-27 2023-08-16 横河電機株式会社 データ記録装置、データ記録方法、データ記録プログラム、システム、方法、および、プログラム
US11463258B2 (en) * 2020-03-13 2022-10-04 Ebay Inc. Secure token refresh
US11343079B2 (en) * 2020-07-21 2022-05-24 Servicenow, Inc. Secure application deployment
US11153080B1 (en) * 2020-07-29 2021-10-19 John A. Nix Network securing device data using two post-quantum cryptography key encapsulation mechanisms
US12003629B2 (en) 2020-12-30 2024-06-04 John A. Nix Secure server digital signature generation for post-quantum cryptography key encapsulations
US11444753B1 (en) * 2021-03-09 2022-09-13 ISARA Corporation Protocol key negotiation
US12192184B2 (en) 2021-12-08 2025-01-07 John A. Nix Secure session resumption using post-quantum cryptography
US12074641B2 (en) 2022-02-15 2024-08-27 Bank Of America Corporation System and method for secured data transmission using LiFi and holochain network
US12052261B2 (en) * 2022-02-15 2024-07-30 Bank Of America Corporation System and method for authenticating the receiving end of data transmission via LiFi and holochain network
US20230328103A1 (en) * 2022-04-07 2023-10-12 Citrix Systems, Inc. Systems and methods for updating microservices secure sockets layer certificate
US20240161104A1 (en) * 2022-11-16 2024-05-16 John Gregory Underhill Method and system for performance enhanced hierarchical key distribution system
CN116112152B (zh) * 2023-04-11 2023-06-02 广东徐工汉云工业互联网有限公司 跨企业网络的数据共享安全加密方法和装置
DE102023001848B3 (de) * 2023-05-08 2024-10-24 Mercedes-Benz Group AG Verfahren zum Trainieren eines Maschinenlernmodells und Fahrzeug
WO2025111130A1 (en) * 2023-11-22 2025-05-30 Verkada Inc. Systems and methods to perform end to end encryption
US12019778B1 (en) 2023-11-22 2024-06-25 Verkada Inc. Systems and methods to perform end to end encryption

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004538670A (ja) 2000-11-28 2004-12-24 ナグラヴィジオン エスアー トランザクションの証明書
JP2007258822A (ja) 2006-03-20 2007-10-04 Canon Inc 通信システム、その処理方法及び通信装置
CN106506470A (zh) 2016-10-31 2017-03-15 大唐高鸿信安（浙江）信息科技有限公司 网络数据安全传输方法
US20170359314A1 (en) 2016-06-12 2017-12-14 Apple Inc. Secure Transfer of A Data Object Between User Devices

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1042885A1 (en) * 1998-01-09 2000-10-11 Cybersafe Corporation Client side public key authentication method and apparatus with short-lived certificates
US6980659B1 (en) 2000-06-02 2005-12-27 Brig Barnum Elliott Methods and systems for supplying encryption keys
CA2464788A1 (en) * 2003-04-16 2004-10-16 Wms Gaming Inc. A gaming software distribution network in a gaming system environment
US8165301B1 (en) 2006-04-04 2012-04-24 Bitmicro Networks, Inc. Input-output device and storage controller handshake protocol using key exchange for data security
KR101609580B1 (ko) * 2010-02-10 2016-04-07 삼성전자주식회사 무선 통신 시스템 및 그의 사용자 단말기와 이동성 관리 엔티티 간 연결 방법
US9055520B2 (en) * 2012-12-19 2015-06-09 Cisco Technology, Inc. Systems, methods and media for mobile management entity (MME) selection by Evolved Node B (eNodeB)
UA116025C2 (uk) * 2013-07-04 2018-01-25 Нек Корпорейшн Система, спосіб і пристрій зв'язку
WO2015003753A1 (en) * 2013-07-12 2015-01-15 Nokia Solutions And Networks Oy Redirection of m2m devices
US11349675B2 (en) * 2013-10-18 2022-05-31 Alcatel-Lucent Usa Inc. Tamper-resistant and scalable mutual authentication for machine-to-machine devices
US9942043B2 (en) * 2014-04-23 2018-04-10 Visa International Service Association Token security on a communication device
US10050955B2 (en) * 2014-10-24 2018-08-14 Netflix, Inc. Efficient start-up for secured connections and related services

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004538670A (ja) 2000-11-28 2004-12-24 ナグラヴィジオン エスアー トランザクションの証明書
JP2007258822A (ja) 2006-03-20 2007-10-04 Canon Inc 通信システム、その処理方法及び通信装置
US20090028341A1 (en) 2006-03-20 2009-01-29 Canon Kabushiki Kaisha Communication system, communication device and processing method therefor
US20170359314A1 (en) 2016-06-12 2017-12-14 Apple Inc. Secure Transfer of A Data Object Between User Devices
CN106506470A (zh) 2016-10-31 2017-03-15 大唐高鸿信安（浙江）信息科技有限公司 网络数据安全传输方法

Also Published As

Publication number Publication date
WO2019168477A9 (en) 2020-04-09
WO2019168477A1 (en) 2019-09-06
US11310038B2 (en) 2022-04-19
KR20200127201A (ko) 2020-11-10
JP2021516491A (ja) 2021-07-01
AU2019228421A1 (en) 2020-09-24
EP3759867A1 (en) 2021-01-06
CN112075051A (zh) 2020-12-11
US20210058242A1 (en) 2021-02-25
SG11202008452PA (en) 2020-09-29
EP3759867A4 (en) 2021-11-03

Similar Documents

Publication Publication Date Title
JP7314156B2 (ja) コンピュータ間のデータ通信を保護するためのシステムおよび方法
US10701071B2 (en) Cross-region requests
US10375067B2 (en) Mutual authentication with symmetric secrets and signatures
US9973481B1 (en) Envelope-based encryption method
US11102191B2 (en) Enabling single sign-on authentication for accessing protected network services
US10033703B1 (en) Pluggable cipher suite negotiation
US11811739B2 (en) Web encryption for web messages and application programming interfaces
US9330245B2 (en) Cloud-based data backup and sync with secure local storage of access keys
US8745394B1 (en) Methods and systems for secure electronic communication
US10182044B1 (en) Personalizing global session identifiers
US9900160B1 (en) Asymmetric session credentials
US10277569B1 (en) Cross-region cache of regional sessions
US9485246B2 (en) Distributed authentication with data cloud
US9852300B2 (en) Secure audit logging
US20180375648A1 (en) Systems and methods for data encryption for cloud services
US12019778B1 (en) Systems and methods to perform end to end encryption
CN113411187A (zh) 身份认证方法和系统、存储介质及处理器
EP4395236A1 (en) Sharing secrets over one or more computer networks using proxies
WO2025111130A1 (en) Systems and methods to perform end to end encryption
HK40107343A (en) Sharing secrets over one or more computer networks using proxies
Kumar Yadav et al. An Efficient Approach for Security in Cloud Computing
Rostrom Framework to Secure Cloud-based Medical Image Storage and Management System Communications

Legal Events

Date Code Title Description
A529 Written submission of copy of amendment under article 34 pct

Free format text: JAPANESE INTERMEDIATE CODE: A529

Effective date: 20201028

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20220209

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20220209

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20221130

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20221206

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20230124

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20230502

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20230615

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20230704

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20230712

R150 Certificate of patent or registration of utility model

Ref document number: 7314156

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150