MULTI-TTP-BASED METHOD AND DEVICE FOR VERIFYING VALIDITY OF IDENTITY OF ENTITY

    公开(公告)号:US20180295132A1

    公开(公告)日:2018-10-11

    申请号:US15766332

    申请日:2016-08-26

    Abstract: Provided are an entity identity validity verification method and device with multiple trusted third parties being involved. In the application, validity of identities of entities performing mutual identity validity verification can only be verified by different trusted third parties. During the verification process, the trusted third parties that are respectively trusted by the two entities interact with each other, and provide services for mutual identity validity verification between the entities, to complete the identity validity verification between the entities.

    TWO-WAY KEY SWITCHING METHOD AND IMPLEMENTATION DEVICE
    3.
    发明申请
    TWO-WAY KEY SWITCHING METHOD AND IMPLEMENTATION DEVICE 审中-公开
    两路钥匙切换方法及实施装置

    公开(公告)号:US20150222427A1

    公开(公告)日:2015-08-06

    申请号:US14420342

    申请日:2013-08-09

    Abstract: A two-way key switching method and an implementation device. The method includes: when acquiring a new key, any end in a communication link setting a new key transmitting direction to be unavailable and setting a new key receiving direction to be available; after it is presumed or determined that at least n opposite ends have acquired the new key and before an original key is invalid, the any end starting a first key switching process, to set the transmitting direction of the original key to be unavailable and set the new key transmitting direction to be available, where N≧n≧1, and N is the total number of receiving sides corresponding to the transmitting side; according to a protection identifier of data transmitted from the opposite end, the any end selecting a valid key to perform deprotection; and after the data is successfully deprotected with the new key for the first time, the any end starting a second key switching process, to set the receiving direction of the original key to be unavailable. By limiting the sequence of each end on a communication link to perform key switching, the present invention ensures that each end can correctly deprotect data transmitted from an opposite end.

    Abstract translation: 一种双向密钥交换方法和实现装置。 所述方法包括:当获取新密钥时,通信链路中的任何一端将新的密钥发送方向设置为不可用,并设置新的密钥接收方向可用; 在假定或确定至少n个相对端已经获得新密钥之后并且在原始密钥无效之前,任何一个端点开始第一密钥交换过程,以将原始密钥的发送方向设置为不可用,并将 新密钥发送方向可用,其中N≥n≥1,N是对应于发送侧的接收侧的总数; 根据从相对端发送的数据的保护标识符,任一端选择有效的密钥进行去保护; 并且在首次用新密钥成功地去保护数据之后,任何一端开始第二密钥交换处理,以将原始密钥的接收方向设置为不可用。 通过限制通信链路上的每个端点的序列来执行密钥交换,本发明确保每一端能够正确地去除从相对端发送的数据。

    ONE-WAY KEY SWITCHING METHOD AND IMPLEMENTATION DEVICE
    4.
    发明申请
    ONE-WAY KEY SWITCHING METHOD AND IMPLEMENTATION DEVICE 有权
    一键式切换方法及实现装置

    公开(公告)号:US20150222425A1

    公开(公告)日:2015-08-06

    申请号:US14421400

    申请日:2013-07-15

    Abstract: A one-way key switching method and an implementation device. The method comprises: after obtaining a new key and before deducing or determining that at least n receivers obtain the new key, a sender setting the sending direction of the new key as unavailable and keeping the sending direction of an original key as available; after obtaining the new key and before deducing or determining that at least n receivers obtain the new key, before the original key is invalid, the sender starting up a key switching process, i.e. setting the sending direction of the original key as unavailable and setting the sending direction of the new key as available; where N≧n≧1, N is the total number of the receivers corresponding to the sender.

    Abstract translation: 单向密钥交换方法和实现装置。 该方法包括:在获得新密钥之后,在推导或确定至少n个接收者获得新密钥之前,发送者将新密钥的发送方向设置为不可用,并保持原始密钥的发送方向可用; 在获得新密钥之后,在推导或确定至少n个接收者获得新密钥之前,在原始密钥无效之前,发送者启动密钥交换过程,即将原始密钥的发送方向设置为不可用,并设置 发送新密钥的方向可用; 其中N≥n≥1,N是对应于发送者的接收器的总数。

    Communication protocol testing method, and tested device and testing platform thereof

    公开(公告)号:US10243829B2

    公开(公告)日:2019-03-26

    申请号:US15309861

    申请日:2015-04-17

    Abstract: A communication protocol testing method, a tested device and a testing platform. The method includes: the tested device and the reference device execute a communication protocol, a message sent and/or received during execution of the communication protocol serving as a first message, and the first message being encapsulated in a data encapsulation format of the communication protocol; the tested device encapsulates a part of data or all the data in the first message and/or known data of the tested device according to a unified data encapsulation format to generate a second message; and the testing platform acquires the second message, parses the acquired second message according to the unified data encapsulation format to obtain a part of data or all the data in the second message, executes testing items, and outputs testing results, thereby completing the test.

    Entity authentication method and device with Elliptic Curve Diffie Hellman (ECDH) key exchange capability

    公开(公告)号:US10389702B2

    公开(公告)日:2019-08-20

    申请号:US15122806

    申请日:2015-03-27

    Abstract: Disclosed are an entity authentication method and device, involving: sending, by an entity A, a first identity authentication message to an entity B; inspecting, by the entity B after receiving the first message, the validity of a certificate of the entity A; sending, by the entity B, a second identity authentication message to the entity A; inspecting, by the entity A after receiving the second message, the correctness of field data therein; calculating, by the entity A, a secret information and message authentication code using a private key thereof and a temporary public key of the entity B, and sending a third message to the entity B; inspecting, by the entity B after receiving the third message, the correctness of field data therein; calculating, by the entity B, a secret information and message authentication code using a private key thereof and a public key of the entity A.

    ENTITY AUTHENTICATION METHOD AND DEVICE BASED ON PRE-SHARED KEY

    公开(公告)号:US20170310475A1

    公开(公告)日:2017-10-26

    申请号:US15510006

    申请日:2015-06-23

    Abstract: An entity authentication method includes: an entity A generates and sends NA to an entity B; the entity B generates NB and ZSEEDB, computes a key MKA∥KEIA and first encrypted authentication data AuthEncDataB, and sends the NB∥NA∥AuthEncDataB to the entity A for verification; the entity A generates ZSEEDA, computes second encrypted authentication data AuthEncDataA, a shared key seed Z, a master key MK and a first message authentication identifier MacTagA, and sends the NA∥NB∥AuthEncDataA∥MacTagA to the entity B for verification; the entity B computes Z, MK and MacTagA, compares the MacTagA with the received MacTagA, and if the two are equal, considers that the entity A is valid; the entity B computes and sends a second message authentication identifier MacTagB to the entity A; and the entity A computes MacTagB, compares the MacTagB with the received MacTagB, and if the two are equal, considers that the entity B is valid.

    Digital credential management method and device

    公开(公告)号:US11323433B2

    公开(公告)日:2022-05-03

    申请号:US16645149

    申请日:2018-09-07

    Abstract: Provided in the present invention are a digital credential management method and a device, the method comprising: a digital credential application device negotiating establishment of a secure data channel with a digital credential issuing device, and sending to the digital credential issuing device a digital credential management request message; the digital credential issuing device receiving the message, and sending to the digital credential application device a digital credential management verification request message; the digital credential application device receiving the verification request message, and sending to the digital credential issuing device a digital credential management verification response message; the digital credential issuing device receiving the digital credential management verification response message, and sending to the digital credential application device a digital credential management response message; the digital credential application device receiving the digital credential management response message, and sending to the digital credential issuing device a digital credential management confirmation message.

    Method and device for verifying validity of identity of entity

    公开(公告)号:US10812480B2

    公开(公告)日:2020-10-20

    申请号:US15766322

    申请日:2016-08-16

    Abstract: Provided are an entity identity validity verification method and device with multiple trusted third parties being involved. In the application, validity of identities of entities performing mutual identity validity verification can only be verified by different trusted third parties. During the verification process, the trusted third parties that are respectively trusted by the two entities interact with each other, and provide identity validity verification services for mutual identity validity verification between the entities, to complete the identity validity verification between the entities.

Patent Agency Ranking