CERTIFICATE ENTITLEMENT LICENSES FOR AUTHENTICATING PUBLIC KEY INFRASTRUCTURE CERTIFICATE ENROLLMENT

    公开(公告)号:US20240073030A1

    公开(公告)日:2024-02-29

    申请号:US17822616

    申请日:2022-08-26

    CPC classification number: H04L9/3263 H04L9/0825 H04L9/0861

    Abstract: Systems and methods for authenticating public key infrastructure certificate enrollment using certificate entitlement licenses. One example system includes a device manager including an electronic processor. The electronic processor is configured to receive a request for software for an electronic device including a unique electronic device identifier. The electronic processor is configured to determine, based on the request, whether the electronic device is entitled to participate in a certificate management service. The electronic processor is configured to, responsive to determining that the electronic device is entitled to participate in a certificate management service, transmit a certificate entitlement license request including the unique device identifier to a certificate entitlement license manager. The electronic processor is configured to receive, from the certificate entitlement license manager, a certificate entitlement license for the unique device identifier. The electronic processor is configured to deliver the certificate entitlement license based on the unique device identifier.

    Certificate entitlement licenses for authenticating public key infrastructure certificate enrollment

    公开(公告)号:US12250326B2

    公开(公告)日:2025-03-11

    申请号:US17822616

    申请日:2022-08-26

    Abstract: Systems and methods for authenticating public key infrastructure certificate enrollment using certificate entitlement licenses. One example system includes a device manager including an electronic processor. The electronic processor is configured to receive a request for software for an electronic device including a unique electronic device identifier. The electronic processor is configured to determine, based on the request, whether the electronic device is entitled to participate in a certificate management service. The electronic processor is configured to, responsive to determining that the electronic device is entitled to participate in a certificate management service, transmit a certificate entitlement license request including the unique device identifier to a certificate entitlement license manager. The electronic processor is configured to receive, from the certificate entitlement license manager, a certificate entitlement license for the unique device identifier. The electronic processor is configured to deliver the certificate entitlement license based on the unique device identifier.

    Method and device for link layer decrypting and/or encrypting a voice message stream already supporting end to end encryption
    7.
    发明授权
    Method and device for link layer decrypting and/or encrypting a voice message stream already supporting end to end encryption 有权
    用于链路层解密和/或加密已经支持端到端加密的语音消息流的方法和设备

    公开(公告)号:US08824681B2

    公开(公告)日:2014-09-02

    申请号:US13671744

    申请日:2012-11-08

    CPC classification number: H04L63/162 H04L63/04 H04W12/02 H04W12/08

    Abstract: Methods and systems for LLE encrypting and decrypting voice message streams (VMSs) already supporting eTe encryption are disclosed. In one example, LLE and eTe encryption initialization vectors (EIVs) are interleaved such that an LLE EIV retrieved from one of a header and a data unit is used to LLE decrypt both the header or data unit and a subsequent data unit. A recovered eTe EIV is used to eTe decrypt voice payloads in one or more subsequent data units. In another example, a base station dynamically LLE encrypts a VMS already supporting eTe encrypting by determining whether a received VMS is eTe encrypted, and ii it is not generating a new LLE EIV, and if it is, re-using the pre-existing eTe EIV for LLE encryption. The LLE encrypted (and perhaps eTe encrypted) VMS is then sent over the air to one or more mobile stations.

    Abstract translation: 公开了已经支持eTe加密的LLE加密和解密语音消息流(VMS)的方法和系统。 在一个示例中,LLE和eTe加密初始化向量(EIV)被交织,使得从报头和数据单元中的一个检索的LLE EIV被用于LLE解密报头或数据单元以及随后的数据单元。 恢复的eTe EIV用于eTe在一个或多个后续数据单元中解密语音有效载荷。 在另一个例子中,基站动态LLE通过确定所接收的VMS是否被e加密来加密已经支持eTe加密的VMS,并且ii它不产生新的LLE EIV,如果是,则重新使用预先存在的eTe EIV用于LLE加密。 然后将LLE加密(以及eTe加密的)VMS通过空中发送到一个或多个移动台。

    Method and device for managing encrypted group rekeying in a radio network link layer encryption system
    8.
    发明授权
    Method and device for managing encrypted group rekeying in a radio network link layer encryption system 有权
    在无线网络链路层加密系统中管理加密组密钥密钥的方法和装置

    公开(公告)号:US08781132B2

    公开(公告)日:2014-07-15

    申请号:US13678747

    申请日:2012-11-16

    CPC classification number: H04W12/04 H04L63/065 H04L63/068

    Abstract: Disclosed is a radio system, method, and device for a mobile station to indicate to an authentication controller, in an authentication response message, which of a plurality of group key link layer encryption keys (GKEK)s it currently has in its possession, and to work with the authentication controller to more intelligently manage multiple GKEKs. The authentication controller can use the information obtained from the authentication response message to determine which of a plurality of GKEKs to advertise in a key announcement broadcast. Furthermore, individual requests for a future LLE key (LEK) to be used for link layer encryption (LLE) encrypting and decrypting inbound and outbound group communications between base station(s) and mobile station(s) are responded to with a broadcast GKEK-encrypted transmission including the future LEK. Only the requesting mobile station transmits an acknowledgment packet in response to the broadcast.

    Abstract translation: 公开了一种无线电系统,方法和装置,用于移动台向认证控制器指示认证响应消息中当前拥有的多个组密钥链路层加密密钥(GKEK)中的哪一个,以及 使用认证控制器更智能地管理多个GKEK。 认证控制器可以使用从认证响应消息获得的信息来确定在密钥通告广播中广告的多个GKEK中的哪一个。 此外,用于对基站和移动台之间的入站和出站组通信进行加密和解密的链路层加密(LLE)的未来LLE密钥(LEK)的单独请求通过广播GKEK- 加密传输,包括未来的LEK。 只有请求移动台响应于广播才发送确认分组。

Patent Agency Ranking