公开(公告)号：US10015158B2

公开(公告)日：2018-07-03

申请号：US12039960

申请日：2008-02-29

申请人： Christopher Lyle Bender ,  Sam Cheng-Fu Shih ,  Neil Patrick Adams

发明人： Christopher Lyle Bender ,  Sam Cheng-Fu Shih ,  Neil Patrick Adams

IPC分类号： H04L29/06 ,  G06F21/33

CPC分类号： H04L63/0823 ,  G06F21/33

摘要： In one illustrative scenario, a mobile communication device causes a communication session to be established with a host server of a communication network. The mobile device performs communication operations in the communication session for activating a communication service, such as a data synchronization service, with the host server. In the communication session, the mobile device also receives configuration information which includes information for use in constructing a request message for obtaining a digital certificate from a certificate authority (CA). After receipt of the configuration information, the mobile device constructs the request message for the digital certificate and causes it to be sent to the host server. In response, the host server requests and obtains the digital certificate from the CA on behalf of the mobile device, and thereafter “pushes” the received digital certificate to the mobile device. The mobile device receives the digital certificate and stores it for use in subsequent communications. The host server may be part of a local area network (LAN) which includes a wireless LAN (WLAN) adapted to authenticate the mobile device based on the digital certificate, so that the mobile device may obtain access to the WLAN.

公开(公告)号：US09613219B2

公开(公告)日：2017-04-04

申请号：US13293743

申请日：2011-11-10

申请人： Geordon Thomas Ferguson ,  Christopher Lyle Bender ,  Alberto Daniel Zubiri ,  Kenneth Cyril Schneider ,  Oliver Whitehouse ,  Christopher William Lewis Hobbs

发明人： Geordon Thomas Ferguson ,  Christopher Lyle Bender ,  Alberto Daniel Zubiri ,  Kenneth Cyril Schneider ,  Oliver Whitehouse ,  Christopher William Lewis Hobbs

IPC分类号： G06F21/60 ,  H04L29/06

CPC分类号： H04L63/20 ,  G06F21/604 ,  H04L63/0209 ,  H04L63/102 ,  H04L63/105 ,  H04W12/08

摘要： In some implementations, a method of managing access to resources in a single device including receiving, from a first resource assigned to a first perimeter, a request to access a second resource assigned to a second perimeter different from the first perimeter. The single device includes the first perimeter and the second perimeter. Whether access to the second resource is prohibited is determined based on a management policy for the first perimeter. The management policy defining one or more rules for accessing resources assigned to the second perimeter including the second resource.

公开(公告)号：US09112732B2

公开(公告)日：2015-08-18

申请号：US12464279

申请日：2009-05-12

申请人： Neil Patrick Adams ,  Eli Omen Jackson ,  Shivangi Anantrupa Gandhi ,  Christopher Lyle Bender ,  Michael Kenneth Brown ,  Alexandru-Radu Manea ,  Lee Willis Manchur

发明人： Neil Patrick Adams ,  Eli Omen Jackson ,  Shivangi Anantrupa Gandhi ,  Christopher Lyle Bender ,  Michael Kenneth Brown ,  Alexandru-Radu Manea ,  Lee Willis Manchur

IPC分类号： G06F7/04 ,  H04L9/08 ,  G06F11/30 ,  H04L12/58 ,  H04L9/32 ,  H04L29/06

CPC分类号： H04L12/5895 ,  H04L9/0822 ,  H04L9/3247 ,  H04L51/38 ,  H04L63/0435 ,  H04L63/20 ,  H04L2209/80 ,  H04L2463/062 ,  H04L2463/101

摘要： After a predetermined limit for decryption attempts has been exceeded by a user attempting to decrypt an encrypted electronic message or attempting to decrypt a encrypted electronic certificate associated with an electronic message, access to the electronic message may be restricted.

摘要翻译： 在尝试解密加密的电子消息或尝试解密与电子消息相关联的加密的电子证书的用户已经超过解密尝试的预定限制之后，可以限制对电子消息的访问。

公开(公告)号：US08799227B2

公开(公告)日：2014-08-05

申请号：US13398676

申请日：2012-02-16

申请人： Geordon Thomas Ferguson ,  Christopher Lyle Bender ,  Alberto Zubiri ,  Kenneth Cyril Schneider ,  Oliver Whitehouse ,  Christopher William Lewis Hobbs

发明人： Geordon Thomas Ferguson ,  Christopher Lyle Bender ,  Alberto Zubiri ,  Kenneth Cyril Schneider ,  Oliver Whitehouse ,  Christopher William Lewis Hobbs

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： G06F17/30029 ,  G06F17/30171 ,  G06F17/30312 ,  G06F21/6218 ,  G06Q10/00 ,  G06Q10/109

摘要： In some implementations, a method for managing data in a user device includes pushing first metadata for a first resource in a first perimeter to a service external to the first perimeter. The first perimeter is configured to prevent external resources from accessing resources in the first perimeter. Second metadata for a second resource in a second perimeter is pushed to the external service. The external service is external to the second perimeter, the second perimeter being configured to prevent external resources from accessing resources in the second perimeter. Information is presented to the user based on a combination of the first metadata and the second metadata.

摘要翻译： 在一些实现中，用于管理用户设备中的数据的方法包括将第一周边中的第一资源的第一元数据推送到第一周边外部的服务。 第一个周边配置为防止外部资源访问第一个周边的资源。 第二个周边的第二个资源的第二个元数据被推送到外部服务。 外部服务在第二个周边外部，第二个周边配置为防止外部资源访问第二个周边的资源。 基于第一元数据和第二元数据的组合，向用户呈现信息。

公开(公告)号：US08682245B2

公开(公告)日：2014-03-25

申请号：US12888620

申请日：2010-09-23

申请人： Steven Henry Fyke ,  Jason Tyler Griffin ,  Scott Douglas Rose ,  Christopher Lyle Bender

发明人： Steven Henry Fyke ,  Jason Tyler Griffin ,  Scott Douglas Rose ,  Christopher Lyle Bender

IPC分类号： H04B5/00

CPC分类号： G07C9/00007 ,  G07C9/00015 ,  G07C9/00087 ,  G07C9/00309 ,  G07C9/00857 ,  G07C2009/00476 ,  G07C2009/00777 ,  G07C2009/00865 ,  G07C2209/08 ,  H04L63/0492 ,  H04L63/102 ,  H04M2250/04 ,  H04W4/02 ,  H04W4/80 ,  H04W84/18

摘要： A security system may include an access control device associated with a personnel access position. The access control device may include a first Near-Field Communication (NFC) sensor, and a first controller configured to selectively grant personnel access based upon receiving a valid security code from the first NFC sensor, and to deny personnel access and generate an access denial electronic message(s) based upon receiving an invalid security code from the first NFC sensor. The system may also include a mobile wireless communications device(s) including a second NFC sensor and a second controller, which may be configured to communicate a security code via the second NFC sensor to the first NFC sensor based upon proximity therewith, and to receive a corresponding access denial electronic message from the first controller based upon the security code being invalid.

摘要翻译： 安全系统可以包括与人员访问位置相关联的访问控制装置。 访问控制设备可以包括第一近场通信（NFC）传感器和第一控制器，其被配置为基于从第一NFC传感器接收到有效的安全代码来选择性地授予人员访问，并且拒绝人员访问并生成访问拒绝 基于从第一NFC传感器接收到无效的安全代码的电子消息。 该系统还可以包括包括第二NFC传感器和第二控制器的移动无线通信设备，其可以被配置为基于与第一NFC传感器的邻近性将第二NFC传感器传递到第一NFC传感器，并且接收 基于安全码无效的来自第一控制器的对应的访问拒绝电子消息。

公开(公告)号：US20120079122A1

公开(公告)日：2012-03-29

申请号：US13204227

申请日：2011-08-05

申请人： Michael Stephen Brown ,  Herbert Anthony Little ,  Christopher Lyle Bender

发明人： Michael Stephen Brown ,  Herbert Anthony Little ,  Christopher Lyle Bender

IPC分类号： G06F15/16

CPC分类号： H04L12/4641 ,  H04L63/0272 ,  H04L63/0281 ,  H04W12/02

摘要： Systems and methods for providing access to an enterprise network from a remote computer are described. In one example, a system includes a mobile device configurable for connection to the remote computer, the mobile device adapted to establish secure communication to the enterprise network and a connection server application located on the mobile device for receiving a request from the remote computer specifying a location and a connection path and selectively providing to the remote computer access to the enterprise network via the mobile device based on the request. Other implementations are possible.

摘要翻译： 描述从远程计算机提供对企业网络的访问的系统和方法。 在一个示例中，系统包括可配置用于连接到远程计算机的移动设备，所述移动设备适于建立到企业网络的安全通信以及位于移动设备上的连接服务器应用，用于从远程计算机接收指定 位置和连接路径，并且基于该请求选择性地向远程计算机经由移动设备提供对企业网络的访问。 其他实现也是可能的。

公开(公告)号：US20110154041A1

公开(公告)日：2011-06-23

申请号：US12643160

申请日：2009-12-21

申请人： James Andrew GODFREY ,  Herbert Anthony LITTLE ,  Christopher Lyle BENDER ,  Connor Patrick O'ROURKE

发明人： James Andrew GODFREY ,  Herbert Anthony LITTLE ,  Christopher Lyle BENDER ,  Connor Patrick O'ROURKE

IPC分类号： H04L9/32

CPC分类号： H04W12/04 ,  H04L9/083 ,  H04L9/0838 ,  H04L63/061 ,  H04L63/062 ,  H04L2209/80 ,  H04L2463/062 ,  H04W4/00 ,  H04W12/02 ,  H04W88/02

摘要： A method for securely transferring a service from a first mobile device to a second mobile device, the service being associated with a server configured for facilitating provisioning of services to mobile devices over a wireless communications network. The method includes generating in the first mobile device a shared key, the shared key being generated using a master key unique to the server and to the first mobile device, the master key being accessible by the server and by the first mobile device; and sending said shared key from the first mobile device to the second mobile device using an alternate communication mechanism independent from the server.

摘要翻译： 一种用于将服务从第一移动设备安全地传送到第二移动设备的方法，所述服务与被配置为便于通过无线通信网络向移动设备提供服务的服务器相关联。 所述方法包括在所述第一移动设备中生成共享密钥，所述共享密钥使用所述服务器和所述第一移动设备唯一的主密钥生成，所述主密钥可由所述服务器和所述第一移动设备访问; 以及使用独立于所述服务器的备用通信机制将所述共享密钥从所述第一移动设备发送到所述第二移动设备。

公开(公告)号：US20080195862A1

公开(公告)日：2008-08-14

申请号：US11673871

申请日：2007-02-12

申请人： Christopher Lyle Bender ,  Michael S. Brown

发明人： Christopher Lyle Bender ,  Michael S. Brown

IPC分类号： H04L9/00

CPC分类号： H04L51/00 ,  H04L63/0272 ,  H04L63/0823

摘要： A system and method for processing messages composed by a user of a computing device is described herein. After an instruction is received from the user to send an encoded message (e.g. a message that is encrypted, signed, or both encrypted and signed, depending on the implementation), a status verification is performed at a user's computing device in respect of one or more certificates, which includes at least a user's personal certificate, prior to the sending of the encoded message to a recipient. If the status verification is unsuccessful, the user is provided with message processing options that allow the user to determine how the message should be further processed. The user is provided with at least the option to not send the message.

摘要翻译： 本文描述了一种用于处理由计算设备的用户组成的消息的系统和方法。 在从用户接收到发送编码消息（例如，根据实现被加密，签名或加密和签名的消息）的指令之后，在用户的计算设备处，针对一个或多个 在将编码的消息发送到接收者之前，更多证书，其至少包括用户的个人证书。 如果状态验证不成功，则向用户提供消息处理选项，其允许用户确定如何进一步处理该消息。 向用户提供至少不发送消息的选项。

公开(公告)号：US09698975B2

公开(公告)日：2017-07-04

申请号：US13397413

申请日：2012-02-15

申请人： Sivakumar Nagarajan ,  Srdan Dikic ,  Mark A. McConnaughay ,  Christopher Lyle Bender ,  Marius Bozsitz

发明人： Sivakumar Nagarajan ,  Srdan Dikic ,  Mark A. McConnaughay ,  Christopher Lyle Bender ,  Marius Bozsitz

IPC分类号： H04L9/30 ,  H04L9/08

CPC分类号： H04L9/0825 ,  H04L9/0863 ,  H04L9/0891 ,  H04L9/0894

摘要： There is provided a method and apparatus for resetting a password for a device or managing the device, the device having an encryption perimeter. A device shares a public/private key pair with a server, the public key being on the device and the private key being on the server. An intermediate value is encrypted on the mobile device using the public key. If the password is lost or the device needs to be managed, the server can request the encrypted intermediate value, decrypt it, and send the decrypted value to the mobile device which may then resume operations. A new password may be provided by the server or the user may set a new password once the encryption key is recreated from the decrypted intermediate value.

公开(公告)号：US09479339B2

公开(公告)日：2016-10-25

申请号：US12039991

申请日：2008-02-29

申请人： Christopher Lyle Bender ,  Sam Cheng-Fu Shih ,  Neil Patrick Adams

发明人： Christopher Lyle Bender ,  Sam Cheng-Fu Shih ,  Neil Patrick Adams

IPC分类号： H04L9/32 ,  H04L29/06 ,  H04W12/06

CPC分类号： H04L9/3268 ,  H04L9/3265 ,  H04L63/0823 ,  H04L67/26 ,  H04L67/303 ,  H04L2209/80 ,  H04W4/12 ,  H04W12/06 ,  H04W84/12

摘要： In one illustrative scenario, a mobile device receives configuration information which includes information for use in constructing a request message for obtaining a digital certificate from a certificate authority (CA). After receipt of the configuration information, the mobile device constructs the request message for the digital certificate and causes it to be sent to a host server of a communication network. In response, the host server requests and obtains the digital certificate from the CA on behalf of the mobile device, and thereafter “pushes” the received digital certificate to the mobile device. The mobile device receives the digital certificate and stores it for use in subsequent communications. The host server may be part of a local area network (LAN) which includes a wireless LAN (WLAN) adapted to authenticate the mobile device based on the digital certificate, so that the mobile device may obtain access to the WLAN.

摘要翻译： 在一个示例性场景中，移动设备接收配置信息，该配置信息包括用于构建用于从证书颁发机构（CA）获得数字证书的请求消息的信息。 在接收到配置信息之后，移动设备构造数字证书的请求消息并使其发送到通信网络的主机服务器。 作为响应，主机服务器代表移动设备从CA请求并获得数字证书，然后将接收到的数字证书“推送”到移动设备。 移动设备接收数字证书并存储在随后的通信中。 主机服务器可以是局域网（LAN）的一部分，其包括适于基于数字证书认证移动设备的无线LAN（WLAN），使得移动设备可以获得对WLAN的接入。