PH12014500964A1 - Security mechanism for external code - Google Patents

Security mechanism for external code

Info

Publication number
PH12014500964A1
PH12014500964A1 PH1/2014/500964A PH12014500964A PH12014500964A1 PH 12014500964 A1 PH12014500964 A1 PH 12014500964A1 PH 12014500964 A PH12014500964 A PH 12014500964A PH 12014500964 A1 PH12014500964 A1 PH 12014500964A1
Authority
PH
Philippines
Prior art keywords
naf
external code
security mechanism
bootstrapping key
server
Prior art date
Application number
PH1/2014/500964A
Other languages
English (en)
Inventor
Silke Holtmanns
Pekka Johannes Laitinen
Original Assignee
Nokia Technologies Oy
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nokia Technologies Oy filed Critical Nokia Technologies Oy
Publication of PH12014500964A1 publication Critical patent/PH12014500964A1/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/33—User authentication using certificates
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/061—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/168—Implementing security features at a particular protocol layer above the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Storage Device Security (AREA)
  • Stored Programmes (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Information Transfer Between Computers (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephonic Communication Services (AREA)
PH1/2014/500964A 2011-10-31 2011-10-31 Security mechanism for external code PH12014500964A1 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/FI2011/050953 WO2013064716A1 (en) 2011-10-31 2011-10-31 Security mechanism for external code

Publications (1)

Publication Number Publication Date
PH12014500964A1 true PH12014500964A1 (en) 2014-06-30

Family

ID=48191420

Family Applications (1)

Application Number Title Priority Date Filing Date
PH1/2014/500964A PH12014500964A1 (en) 2011-10-31 2011-10-31 Security mechanism for external code

Country Status (18)

Country Link
US (1) US20150163669A1 (OSRAM)
EP (1) EP2774068A4 (OSRAM)
JP (1) JP2015501613A (OSRAM)
KR (1) KR20140095523A (OSRAM)
CN (1) CN104011730A (OSRAM)
AP (1) AP3955A (OSRAM)
AU (1) AU2011380272A1 (OSRAM)
BR (1) BR112014010472A2 (OSRAM)
CA (1) CA2853867A1 (OSRAM)
IL (1) IL232374A0 (OSRAM)
IN (1) IN2014CN03915A (OSRAM)
MX (1) MX2014005223A (OSRAM)
PH (1) PH12014500964A1 (OSRAM)
RU (1) RU2582863C2 (OSRAM)
SG (1) SG11201401950PA (OSRAM)
UA (1) UA108957C2 (OSRAM)
WO (1) WO2013064716A1 (OSRAM)
ZA (1) ZA201403900B (OSRAM)

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104756458B (zh) * 2012-10-29 2018-07-10 瑞典爱立信有限公司 用于保护通信网络中的连接的方法和设备
US9253185B2 (en) * 2012-12-12 2016-02-02 Nokia Technologies Oy Cloud centric application trust validation
CN104348801B (zh) * 2013-07-31 2018-05-04 华为技术有限公司 认证方法、生成信任状的方法及相关装置
US10305900B2 (en) * 2013-10-15 2019-05-28 Telefonaktiebolaget Lm Ericsson (Publ) Establishing a secure connection between a master device and a slave device
WO2015092130A1 (en) 2013-12-20 2015-06-25 Nokia Technologies Oy Push-based trust model for public cloud applications
EP3248404B1 (en) * 2015-01-19 2020-07-22 Telefonaktiebolaget L M Ericsson (publ) Method and apparatus for direct communication key establishment
CN106487501B (zh) * 2015-08-27 2020-12-08 华为技术有限公司 密钥分发和接收方法、密钥管理中心、第一和第二网元
US10129235B2 (en) 2015-10-16 2018-11-13 Qualcomm Incorporated Key hierarchy for network slicing
US20190020643A1 (en) * 2016-02-12 2019-01-17 Telefonaktiebolaget Lm Ericsson (Publ) Securing an interface and a process for establishing a secure communication link
US20200389788A1 (en) * 2017-11-29 2020-12-10 Telefonaktiebolaget Lm Ericsson (Publ) Session Key Establishment
FR3077175A1 (fr) * 2018-01-19 2019-07-26 Orange Technique de determination d'une cle destinee a securiser une communication entre un equipement utilisateur et un serveur applicatif
CN114363890B (zh) * 2018-08-10 2025-05-06 华为技术有限公司 扩展的通用引导架构认证方法、装置及存储介质
JP7437405B2 (ja) * 2019-01-14 2024-02-22 テレフオンアクチーボラゲット エルエム エリクソン（パブル） セキュリティのための方法および装置
CN113015159B (zh) * 2019-12-03 2023-05-09 中国移动通信有限公司研究院 初始安全配置方法、安全模块及终端
CN115152257B (zh) * 2020-02-19 2025-03-28 三星电子株式会社 使用从网络接入认证导出的密钥生成应用特定密钥的装置和方法
US12500744B2 (en) * 2021-09-17 2025-12-16 Qualcomm Incorporated Securing application communication

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7558957B2 (en) * 2005-04-18 2009-07-07 Alcatel-Lucent Usa Inc. Providing fresh session keys
CN100379315C (zh) * 2005-06-21 2008-04-02 华为技术有限公司 对用户终端进行鉴权的方法
CN1929370A (zh) * 2005-09-05 2007-03-14 华为技术有限公司 用户接入认证代理时确定认证使用的密钥的方法及系统
US20070101122A1 (en) * 2005-09-23 2007-05-03 Yile Guo Method and apparatus for securely generating application session keys
US20070086590A1 (en) * 2005-10-13 2007-04-19 Rolf Blom Method and apparatus for establishing a security association
US8522025B2 (en) * 2006-03-28 2013-08-27 Nokia Corporation Authenticating an application
KR20100083840A (ko) * 2007-10-05 2010-07-22 인터디지탈 테크날러지 코포레이션 Ｕｉｃｃ와 단말기간 보안 채널화를 위한 기술
JP5496907B2 (ja) * 2007-11-30 2014-05-21 テレフオンアクチーボラゲット エル エム エリクソン（パブル） セキュアな通信のための鍵管理
US8875232B2 (en) * 2009-02-18 2014-10-28 Telefonaktiebolaget L M Ericsson (Publ) User authentication
EP3107258A1 (en) * 2009-04-01 2016-12-21 Telefonaktiebolaget LM Ericsson (publ) Security key management in ims-based multimedia broadcast and multicast services (mbms)
RU101231U1 (ru) * 2010-03-02 2011-01-10 Закрытое акционерное общество "Лаборатория Касперского" Система управления безопасностью мобильного вычислительного устройства
US8903095B2 (en) * 2011-04-01 2014-12-02 Telefonaktiebolaget L M Ericsson (Publ) Methods and apparatuses for avoiding damage in network attacks

Also Published As

Publication number Publication date
MX2014005223A (es) 2014-09-01
RU2014118918A (ru) 2015-12-10
US20150163669A1 (en) 2015-06-11
RU2582863C2 (ru) 2016-04-27
IL232374A0 (en) 2014-06-30
CA2853867A1 (en) 2013-05-10
WO2013064716A1 (en) 2013-05-10
CN104011730A (zh) 2014-08-27
SG11201401950PA (en) 2014-09-26
AP3955A (en) 2016-12-22
EP2774068A1 (en) 2014-09-10
IN2014CN03915A (OSRAM) 2015-10-16
BR112014010472A2 (pt) 2017-04-18
ZA201403900B (en) 2017-05-31
UA108957C2 (uk) 2015-06-25
EP2774068A4 (en) 2015-08-05
JP2015501613A (ja) 2015-01-15
AP2014007624A0 (en) 2014-05-31
AU2011380272A1 (en) 2014-05-22
KR20140095523A (ko) 2014-08-01

Similar Documents

Publication Publication Date Title
IN2014CN03915A (OSRAM)
WO2012034083A8 (en) Transportation information systems and methods
MX2016011988A (es) Metodo y dispositivo de administracion de datos confidenciales, y metodo y sistema de autenticacion de seguridad.
CL2014002816A1 (es) Método de autenticación de usuario, que comprende recibir un pedido de usuario para iniciar sesión de autenticación, acceder a un registro almacenado en memoria asociada al usuario, generar una matriz de seguridad, transmitir la matriz al usuario, recibir del usuario una secuencia ordenada de valores de código seleccionada desde la matriz, validar la secuencia recibida, generar un resultado de autenticación; aparato; sistema
NZ746653A (en) Access control for encrypted data in machine-readable identifiers
WO2014093497A3 (en) System and method for improved communication on a wireless network
SG10201803986RA (en) Method and system for secure transmission of remote notification service messages to mobile devices without secure elements
WO2013032671A3 (en) Methods and apparatus for source authentication of messages that are secured with a group key
GB2509278A (en) Network user identification and authentication
IN2014DN09465A (OSRAM)
TW201614560A (en) Electronic tag and processing system and method for securing electronic tag
WO2010015906A3 (en) Apparatus, systems and methods for authentication of objects having multiple components
NZ593549A (en) Product ordering and inventory-taking system using portable communications devices
WO2012105930A3 (en) Quantum key distribution method and apparatus
WO2016114830A3 (en) Methods and systems for authentication interoperability
BR112013001728A2 (pt) métodos para criptografar um valor introduzido em um dispositivo de usuário, para verificar um valor comunicado a um sistema de autenticação via uma rede de comunicações, e para comunicar um valor introduzido em um dispositivo de usuário a um sistema de autenticação via uma rede de comunicações, dispositivo de usuário, sistema, software, e, meio legível por computador.
WO2008026060A3 (en) Method, system and device for synchronizing between server and mobile device
WO2013005989A3 (ko) 이동 기기에 대한 그룹 키 관리를 위한 방법 및 장치
WO2012094399A3 (en) Method and system for out-of-band delivery of wireless network credentials
EP2282443A4 (en) METHOD, DEVICE AND GENERATION SYSTEM FOR CRYPTOGRAPHIC KEYS
WO2011122912A3 (ko) 방송 서비스의 암호화 키 관리 방법 및 시스템
EP2728556A3 (en) Electronic key registration method, electronic key registration system, and controller
WO2014125375A3 (en) Secure mobile payments
MX2012004070A (es) Sistema y metodo de seguridad de transaccion electronica.
WO2013166250A3 (en) Using actions to select advertisements