UA108957C2 - Механізм безпеки для зовнішнього програмного коду - Google Patents

Механізм безпеки для зовнішнього програмного коду

Info

Publication number
UA108957C2
UA108957C2 UAA201405037A UAA201405037A UA108957C2 UA 108957 C2 UA108957 C2 UA 108957C2 UA A201405037 A UAA201405037 A UA A201405037A UA A201405037 A UAA201405037 A UA A201405037A UA 108957 C2 UA108957 C2 UA 108957C2
Authority
UA
Ukraine
Prior art keywords
naf
code
external
special
key
Prior art date
Application number
UAA201405037A
Other languages
English (en)
Russian (ru)
Ukrainian (uk)
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed filed Critical
Publication of UA108957C2 publication Critical patent/UA108957C2/ru

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/33—User authentication using certificates
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/168—Implementing security features at a particular protocol layer above the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/061—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Storage Device Security (AREA)
  • Stored Programmes (AREA)
  • Information Transfer Between Computers (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephonic Communication Services (AREA)
UAA201405037A 2011-10-31 2011-10-31 Механізм безпеки для зовнішнього програмного коду UA108957C2 (uk)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/FI2011/050953 WO2013064716A1 (en) 2011-10-31 2011-10-31 Security mechanism for external code

Publications (1)

Publication Number Publication Date
UA108957C2 true UA108957C2 (uk) 2015-06-25

Family

ID=48191420

Family Applications (1)

Application Number Title Priority Date Filing Date
UAA201405037A UA108957C2 (uk) 2011-10-31 2011-10-31 Механізм безпеки для зовнішнього програмного коду

Country Status (18)

Country Link
US (1) US20150163669A1 (enExample)
EP (1) EP2774068A4 (enExample)
JP (1) JP2015501613A (enExample)
KR (1) KR20140095523A (enExample)
CN (1) CN104011730A (enExample)
AP (1) AP3955A (enExample)
AU (1) AU2011380272A1 (enExample)
BR (1) BR112014010472A2 (enExample)
CA (1) CA2853867A1 (enExample)
IL (1) IL232374A0 (enExample)
IN (1) IN2014CN03915A (enExample)
MX (1) MX2014005223A (enExample)
PH (1) PH12014500964A1 (enExample)
RU (1) RU2582863C2 (enExample)
SG (1) SG11201401950PA (enExample)
UA (1) UA108957C2 (enExample)
WO (1) WO2013064716A1 (enExample)
ZA (1) ZA201403900B (enExample)

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9693226B2 (en) * 2012-10-29 2017-06-27 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for securing a connection in a communications network
US9253185B2 (en) * 2012-12-12 2016-02-02 Nokia Technologies Oy Cloud centric application trust validation
CN104348801B (zh) * 2013-07-31 2018-05-04 华为技术有限公司 认证方法、生成信任状的方法及相关装置
WO2015057116A1 (en) * 2013-10-15 2015-04-23 Telefonaktiebolaget L M Ericsson (Publ) Establishing a secure connection between a master device and a slave device
CN105814834B (zh) 2013-12-20 2019-12-20 诺基亚技术有限公司 用于公共云应用的基于推送的信任模型
EP3248404B1 (en) * 2015-01-19 2020-07-22 Telefonaktiebolaget L M Ericsson (publ) Method and apparatus for direct communication key establishment
CN106487501B (zh) * 2015-08-27 2020-12-08 华为技术有限公司 密钥分发和接收方法、密钥管理中心、第一和第二网元
US10129235B2 (en) 2015-10-16 2018-11-13 Qualcomm Incorporated Key hierarchy for network slicing
CN108702615B (zh) * 2016-02-12 2022-08-05 瑞典爱立信有限公司 保护接口以及用于建立安全通信链路的过程
WO2019108100A1 (en) * 2017-11-29 2019-06-06 Telefonaktiebolaget Lm Ericsson (Publ) Session key establishment
FR3077175A1 (fr) * 2018-01-19 2019-07-26 Orange Technique de determination d'une cle destinee a securiser une communication entre un equipement utilisateur et un serveur applicatif
CN114363890B (zh) * 2018-08-10 2025-05-06 华为技术有限公司 扩展的通用引导架构认证方法、装置及存储介质
JP7437405B2 (ja) * 2019-01-14 2024-02-22 テレフオンアクチーボラゲット エルエム エリクソン（パブル） セキュリティのための方法および装置
CN113015159B (zh) * 2019-12-03 2023-05-09 中国移动通信有限公司研究院 初始安全配置方法、安全模块及终端
US20230068196A1 (en) * 2020-02-19 2023-03-02 Samsung Electronics Co., Ltd. Apparatus and method of generating application specific keys using key derived from network access authentication
US12500744B2 (en) * 2021-09-17 2025-12-16 Qualcomm Incorporated Securing application communication

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7558957B2 (en) * 2005-04-18 2009-07-07 Alcatel-Lucent Usa Inc. Providing fresh session keys
CN100379315C (zh) * 2005-06-21 2008-04-02 华为技术有限公司 对用户终端进行鉴权的方法
CN1929370A (zh) * 2005-09-05 2007-03-14 华为技术有限公司 用户接入认证代理时确定认证使用的密钥的方法及系统
US20070101122A1 (en) * 2005-09-23 2007-05-03 Yile Guo Method and apparatus for securely generating application session keys
US20070086590A1 (en) * 2005-10-13 2007-04-19 Rolf Blom Method and apparatus for establishing a security association
US8522025B2 (en) * 2006-03-28 2013-08-27 Nokia Corporation Authenticating an application
CN103001940A (zh) * 2007-10-05 2013-03-27 交互数字技术公司 由wtru使用的用于建立安全本地密钥的方法
EP3079298B1 (en) * 2007-11-30 2018-03-21 Telefonaktiebolaget LM Ericsson (publ) Key management for secure communication
US8875232B2 (en) * 2009-02-18 2014-10-28 Telefonaktiebolaget L M Ericsson (Publ) User authentication
CN104980434B (zh) * 2009-04-01 2018-10-30 瑞典爱立信有限公司 基于ims的多媒体广播和多播服务中的安全密钥管理方法
RU101231U1 (ru) * 2010-03-02 2011-01-10 Закрытое акционерное общество "Лаборатория Касперского" Система управления безопасностью мобильного вычислительного устройства
DK2695410T3 (en) * 2011-04-01 2017-06-26 ERICSSON TELEFON AB L M (publ) Methods and devices to avoid network attack damage

Also Published As

Publication number Publication date
RU2582863C2 (ru) 2016-04-27
IN2014CN03915A (enExample) 2015-10-16
EP2774068A4 (en) 2015-08-05
ZA201403900B (en) 2017-05-31
SG11201401950PA (en) 2014-09-26
CN104011730A (zh) 2014-08-27
JP2015501613A (ja) 2015-01-15
AP3955A (en) 2016-12-22
CA2853867A1 (en) 2013-05-10
BR112014010472A2 (pt) 2017-04-18
KR20140095523A (ko) 2014-08-01
IL232374A0 (en) 2014-06-30
WO2013064716A1 (en) 2013-05-10
US20150163669A1 (en) 2015-06-11
RU2014118918A (ru) 2015-12-10
PH12014500964A1 (en) 2014-06-30
AU2011380272A1 (en) 2014-05-22
AP2014007624A0 (en) 2014-05-31
EP2774068A1 (en) 2014-09-10
MX2014005223A (es) 2014-09-01

Similar Documents

Publication Publication Date Title
PH12014500964A1 (en) Security mechanism for external code
EP4354840A3 (en) Distributed personal assistant
GB2474200A (en) Ticket authorized secure installation and boot
WO2014055241A3 (en) Secure identification of computing device and secure identification methods
EP4242892A3 (en) Code pointer authentication for hardware flow control
MX352442B (es) Metodo que se relaciona con granularidad de presencia con realidad aumentada.
IN2014DN10099A (enExample)
BR112014005631A2 (pt) sistemas e métodos de realizar configuração de enlace e autenticação
CL2014002816A1 (es) Método de autenticación de usuario, que comprende recibir un pedido de usuario para iniciar sesión de autenticación, acceder a un registro almacenado en memoria asociada al usuario, generar una matriz de seguridad, transmitir la matriz al usuario, recibir del usuario una secuencia ordenada de valores de código seleccionada desde la matriz, validar la secuencia recibida, generar un resultado de autenticación; aparato; sistema
BR112017023309A2 (pt) método, computador servidor, e, método implementado por computador
WO2011112964A3 (en) System and method for providing information as a service via web services
BR112013031001A2 (pt) método, programa de computador e aparelho
BRPI0803574A2 (pt) aparelho e método para autenticação de um programa flash
EP3334085A4 (en) ADMINISTRATIVE DEVICE, ADMINISTRATIVE SYSTEM, KEY GENERATING DEVICE, KEY GENERATION SYSTEM, KEY MANAGEMENT SYSTEM, VEHICLE, ADMINISTRATIVE PROCEDURE, KEY PRODUCING METHOD AND COMPUTER PROGRAM
BR112013027005A2 (pt) método e sistema para compartilhar e utilizar informação de localização em um terminal portátil
AR080690A1 (es) Operacion de un dispositivo de comunicacion movil
FI20145650A7 (fi) Lukkojärjestelmä ja sähköisten avainten luonti lukkojärjestelmässä
GB2549614A (en) Auditing of web-based video
MX373229B (es) Aceleración de la verificación del estado de un certificado en línea con un servicio de sugerencias de internet.
MY198754A (en) Improved customer profiling system and method therefor
WO2013166250A3 (en) Using actions to select advertisements
BR112013021704A2 (pt) gerenciamento e personalização segura de chaves de assinatura de código únicas
JP2014011762A5 (enExample)
WO2016086187A3 (en) Providing mentor assistance in an embedded marketplace
MX2018012421A (es) Sistema para realizar una verificacion de validez de un dispositivo de usuario.