KR100965465B1 - 이동 사용자 증명서의 공유 정보를 이용한 보안 레코드프로토콜을 위한 시스템 및 방법 - Google Patents

이동 사용자 증명서의 공유 정보를 이용한 보안 레코드프로토콜을 위한 시스템 및 방법 Download PDF

Info

Publication number
KR100965465B1
KR100965465B1 KR1020070119179A KR20070119179A KR100965465B1 KR 100965465 B1 KR100965465 B1 KR 100965465B1 KR 1020070119179 A KR1020070119179 A KR 1020070119179A KR 20070119179 A KR20070119179 A KR 20070119179A KR 100965465 B1 KR100965465 B1 KR 100965465B1
Authority
KR
South Korea
Prior art keywords
server
client device
key
key generator
input
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
KR1020070119179A
Other languages
English (en)
Korean (ko)
Other versions
KR20080046593A (ko
Inventor
마이클 쉔필드
알랙산더 서킨
Original Assignee
리서치 인 모션 리미티드
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 리서치 인 모션 리미티드 filed Critical 리서치 인 모션 리미티드
Publication of KR20080046593A publication Critical patent/KR20080046593A/ko
Application granted granted Critical
Publication of KR100965465B1 publication Critical patent/KR100965465B1/ko
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0863—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving passwords or one-time passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Databases & Information Systems (AREA)
  • Mathematical Physics (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)
KR1020070119179A 2006-11-22 2007-11-21 이동 사용자 증명서의 공유 정보를 이용한 보안 레코드프로토콜을 위한 시스템 및 방법 Active KR100965465B1 (ko)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP06124600.5 2006-11-22
EP20060124600 EP1926278B1 (en) 2006-11-22 2006-11-22 System and method for secure record protocol using shared knowledge of mobile user credentials

Publications (2)

Publication Number Publication Date
KR20080046593A KR20080046593A (ko) 2008-05-27
KR100965465B1 true KR100965465B1 (ko) 2010-06-25

Family

ID=37771053

Family Applications (1)

Application Number Title Priority Date Filing Date
KR1020070119179A Active KR100965465B1 (ko) 2006-11-22 2007-11-21 이동 사용자 증명서의 공유 정보를 이용한 보안 레코드프로토콜을 위한 시스템 및 방법

Country Status (11)

Country Link
EP (1) EP1926278B1 (https=)
JP (1) JP2008131652A (https=)
KR (1) KR100965465B1 (https=)
CN (1) CN101188500A (https=)
AT (1) ATE427617T1 (https=)
AU (1) AU2007234575B2 (https=)
CA (1) CA2611100A1 (https=)
DE (1) DE602006006072D1 (https=)
MX (1) MX2007014601A (https=)
SG (1) SG143152A1 (https=)
TW (1) TW200833059A (https=)

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7784089B2 (en) * 2004-10-29 2010-08-24 Qualcomm Incorporated System and method for providing a multi-credential authentication protocol
US8935528B2 (en) * 2008-06-26 2015-01-13 Microsoft Corporation Techniques for ensuring authentication and integrity of communications
CN101562525B (zh) * 2009-04-30 2012-06-27 飞天诚信科技股份有限公司 签名方法、设备及系统
CN101860546A (zh) * 2010-06-18 2010-10-13 杭州电子科技大学 一种改进ssl握手协议的方法
US9231757B2 (en) 2012-12-05 2016-01-05 Inha-Industry Partnership Institute Proxy signature scheme
TWI499928B (zh) * 2014-05-09 2015-09-11 Univ Nat Chiao Tung 以協作平台上之版本修訂記錄進行資訊隱藏之方法
US10530576B2 (en) * 2015-02-13 2020-01-07 Insyde Software Corp. System and method for computing device with improved firmware service security using credential-derived encryption key
LU100497B1 (fr) * 2017-10-27 2019-05-08 Kayan Yves Laurent Méthode et système d'inscription sécurisé de clés cryptographiques sur un support physique pour clés cryptographiques, et support physique produit
US10797868B2 (en) * 2018-05-31 2020-10-06 Irdeto B.V. Shared secret establishment
CN111817998B (zh) * 2019-04-10 2023-08-15 阿里巴巴集团控股有限公司 信息认证处理方法、装置、系统及电子设备
CN110650160B (zh) * 2019-10-29 2022-01-04 北京天威诚信电子商务服务有限公司 一种身份认证方法及系统
CN111641615A (zh) * 2020-05-20 2020-09-08 深圳市今天国际物流技术股份有限公司 一种基于证书的分布式身份验证方法及系统
CN112311884B (zh) * 2020-10-30 2024-05-28 奇安信科技集团股份有限公司 网络通信安全性的识别方法、装置、电子设备及存储介质
JP7619446B2 (ja) * 2021-05-19 2025-01-22 日本電信電話株式会社 鍵交換システム、端末、鍵交換方法、及びプログラム
WO2022244150A1 (ja) * 2021-05-19 2022-11-24 日本電信電話株式会社 鍵交換システム、端末、サーバ、鍵交換方法、及びプログラム
WO2025109804A1 (ja) * 2023-11-24 2025-05-30 パナソニックＩｐマネジメント株式会社 通信方法、通信システム、サーバ、及び通信機器

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001013572A1 (en) * 1999-08-19 2001-02-22 Visto Corporation System and method for encrypting and decrypting files
US20020078351A1 (en) * 2000-10-13 2002-06-20 Garib Marco Aurelio Secret key Messaging

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1236516A (zh) * 1997-07-29 1999-11-24 朗迅科技公司 采用了增强变换的增强蜂窝消息加密算法的方法和装置
US6233341B1 (en) * 1998-05-19 2001-05-15 Visto Corporation System and method for installing and using a temporary certificate at a remote site
JP3932685B2 (ja) * 1998-08-11 2007-06-20 富士ゼロックス株式会社 ネットワーク上で遠隔手続き呼び出しを実行するための方法、及び、遠隔手続き呼び出しを実行可能なネットワーク・システム
US20030093680A1 (en) * 2001-11-13 2003-05-15 International Business Machines Corporation Methods, apparatus and computer programs performing a mutual challenge-response authentication protocol using operating system capabilities
JP2004334860A (ja) * 2003-04-14 2004-11-25 Matsushita Electric Ind Co Ltd 機器認証システム、サーバ機器、クライアント機器
US20050154889A1 (en) * 2004-01-08 2005-07-14 International Business Machines Corporation Method and system for a flexible lightweight public-key-based mechanism for the GSS protocol
US7778422B2 (en) * 2004-02-27 2010-08-17 Microsoft Corporation Security associations for devices
WO2005094036A1 (en) * 2004-03-23 2005-10-06 Philips Intellectual Property & Standards Gmbh Anonymous integrity of transmitted data
US7602910B2 (en) * 2004-11-17 2009-10-13 Microsoft Corporation Password protection

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001013572A1 (en) * 1999-08-19 2001-02-22 Visto Corporation System and method for encrypting and decrypting files
US20020078351A1 (en) * 2000-10-13 2002-06-20 Garib Marco Aurelio Secret key Messaging

Also Published As

Publication number Publication date
DE602006006072D1 (de) 2009-05-14
AU2007234575B2 (en) 2009-08-20
EP1926278A1 (en) 2008-05-28
CA2611100A1 (en) 2008-05-22
EP1926278B1 (en) 2009-04-01
TW200833059A (en) 2008-08-01
SG143152A1 (en) 2008-06-27
KR20080046593A (ko) 2008-05-27
MX2007014601A (es) 2009-02-19
AU2007234575A1 (en) 2008-06-05
CN101188500A (zh) 2008-05-28
ATE427617T1 (de) 2009-04-15
JP2008131652A (ja) 2008-06-05

Similar Documents

Publication Publication Date Title
KR100965465B1 (ko) 이동 사용자 증명서의 공유 정보를 이용한 보안 레코드프로토콜을 위한 시스템 및 방법
US9455830B2 (en) Method for securing credentials in a remote repository
US7603556B2 (en) Challenge response-based device authentication system and method
CN103959831B (zh) 辅助的证书注册
EP1394982B1 (en) Methods and apparatus for secure data communication links
KR100960064B1 (ko) 클라이언트 자격증명서 기반의 보안 세션 인증 방법 및장치
JP2004180280A (ja) 適応性のある委任のための方法とシステム
KR20080065964A (ko) 무선 네트워크들에서 구조들을 안전하게 하기 위한 장치 및방법
US9210145B2 (en) Method and system for hypertext transfer protocol digest authentication
CA2813765C (en) A method for securing credentials in a remote repository
US20080118059A1 (en) System and method for secure record protocol using shared knowledge of mobile user credentials
HK1168429A (en) A method for securing credentials in a remote repository

Legal Events

Date Code Title Description
A201 Request for examination
PA0109 Patent application

Patent event code: PA01091R01D

Comment text: Patent Application

Patent event date: 20071121

PA0201 Request for examination
PG1501 Laying open of application
E902 Notification of reason for refusal
PE0902 Notice of grounds for rejection

Comment text: Notification of reason for refusal

Patent event date: 20091021

Patent event code: PE09021S01D

E701 Decision to grant or registration of patent right
PE0701 Decision of registration

Patent event code: PE07011S01D

Comment text: Decision to Grant Registration

Patent event date: 20100527

GRNT Written decision to grant
PR0701 Registration of establishment

Comment text: Registration of Establishment

Patent event date: 20100615

Patent event code: PR07011E01D

PR1002 Payment of registration fee

Payment date: 20100616

End annual number: 3

Start annual number: 1

PG1601 Publication of registration
FPAY Annual fee payment

Payment date: 20130522

Year of fee payment: 4

PR1001 Payment of annual fee

Payment date: 20130522

Start annual number: 4

End annual number: 4

FPAY Annual fee payment

Payment date: 20140528

Year of fee payment: 5

PR1001 Payment of annual fee

Payment date: 20140528

Start annual number: 5

End annual number: 5

FPAY Annual fee payment

Payment date: 20150527

Year of fee payment: 6

PR1001 Payment of annual fee

Payment date: 20150527

Start annual number: 6

End annual number: 6

FPAY Annual fee payment

Payment date: 20160602

Year of fee payment: 7

PR1001 Payment of annual fee

Payment date: 20160602

Start annual number: 7

End annual number: 7

FPAY Annual fee payment

Payment date: 20170531

Year of fee payment: 8

PR1001 Payment of annual fee

Payment date: 20170531

Start annual number: 8

End annual number: 8

FPAY Annual fee payment

Payment date: 20180530

Year of fee payment: 9

PR1001 Payment of annual fee

Payment date: 20180530

Start annual number: 9

End annual number: 9

PR1001 Payment of annual fee

Payment date: 20200602

Start annual number: 11

End annual number: 11

PR1001 Payment of annual fee

Payment date: 20250527

Start annual number: 16

End annual number: 16