专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20140337941A1 METHODS AND DEVICES FOR PROVIDING WARNINGS ASSOCIATED WITH CREDENTIALS TO BE STORED IN A CREDENTIAL STORE 有权
标题翻译：用于提供与凭证存储的凭证相关的警告的方法和设备
公开(公告)号：US20140337941A1
公开(公告)日：2014-11-13
申请号：US13891627
申请日：2013-05-10
申请人： RESEARCH IN MOTION LIMITED
发明人： Jeremy L. Kominar , Neil Patrick Adams , Alexander Truskovsky , Christopher Lyle Bender , Daryl Joseph Martin
IPC分类号： G06F21/45
CPC分类号： G06F21/45
摘要： Methods and devices for providing a warning associated with credentials to be stored in a credential store on a computing device are disclosed herein. In one broad aspect, the method comprises receiving a request to store, in the credential store, at least one credential for a specified service, determining whether a secure connection between the computing device and the specified service is available, associating the specified service with a level of security based on at least one of an availability of the secure connection or one or more properties of the secure connection, and providing a warning in response to determining that at least one credential stored in the credential store corresponds to the at least one credential for the specified service and is for a service that is associated with a level of security different from the level of security with which the specified service is associated.
摘要翻译：本文公开了用于提供与要存储在计算设备上的凭证存储器中的凭证相关联的警告的方法和设备。在一个广泛的方面，该方法包括接收在证书存储器中存储用于指定服务的至少一个凭证的请求，确定计算设备和指定服务之间的安全连接是否可用，将指定的服务与基于安全连接的可用性或安全连接的一个或多个属性中的至少一个的安全级别，以及响应于确定存储在凭证存储库中的至少一个凭证对应于至少一个凭证而提供警告用于指定的服务，并且用于与指定服务相关联的安全级别不同的安全级别相关联的服务。

2. 发明申请

US20140337937A1 METHODS AND DEVICES FOR DETECTING UNAUTHORIZED ACCESS TO CREDENTIALS OF A CREDENTIAL STORE 有权
标题翻译：用于检测未经授权访问凭证存储凭证的方法和设备
公开(公告)号：US20140337937A1
公开(公告)日：2014-11-13
申请号：US13891258
申请日：2013-05-10
申请人： RESEARCH IN MOTION LIMITED
发明人： Alexander Truskovsky , Christopher Lyle Bender , Daryl Joseph Martin
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , G06F21/45 , G06F21/554 , G06F2221/2135
摘要： Methods and devices for detecting unauthorized access to credentials of a credential store on a computing device are disclosed herein. In one broad aspect, the method comprises monitoring a plurality of credentials of the credential store accessed within a period associated with a first setting, and responsive to determining that a number of credentials accessed within the period exceeds a threshold associated with a second setting, outputting, in a user interface, an indication of potential unauthorized access to the credential store. In at least one embodiment, each of the credentials accessed within the period is associated with a different user account.
摘要翻译：本文公开了用于检测未经授权访问计算设备上的证书存储的凭证的方法和设备。在一个广泛的方面，该方法包括监视在与第一设置相关联的时段内访问的凭证存储的多个凭证，并且响应于确定在该周期内访问的凭证的数量超过与第二设置相关联的阈值，输出在用户界面中，指示潜在的未授权访问凭证存储。在至少一个实施例中，在该周期内访问的每个凭证与不同的用户帐户相关联。

3. 发明申请

US20140215206A1 SYSTEM AND METHOD FOR PROVIDING A TRUST FRAMEWORK USING A SECONDARY NETWORK 有权
标题翻译：使用二级网络提供信任框架的系统和方法
公开(公告)号：US20140215206A1
公开(公告)日：2014-07-31
申请号：US13793166
申请日：2013-03-11
申请人： RESEARCH IN MOTION LIMITED , CERTICOM CORP.
发明人： Sean Alexander Courtney , Matthew John Campagna , George Ross Staikos , Alexander Truskovsky
IPC分类号： H04L9/32
CPC分类号： H04L9/3268 , H04L63/0281 , H04L63/18 , H04W12/04
摘要： A system for providing security services to a mobile device where the mobile device is in communication with a public network through a first network path that is subject to interference by a third party. The system includes a security server and a private network. The security server is operative to communicate with the mobile device through the private network. The security server is also operative to communicate with the public network through a second network path that is less susceptible to the interference by the third party than is the first network path. The security server communicates with the public network through the second network path to provide security services to the mobile device that are delivered over the private network.
摘要翻译：一种用于向移动设备提供安全服务的系统，其中移动设备通过受第三方干扰的第一网络路径与公共网络通信。该系统包括一个安全服务器和一个专用网络。安全服务器可操作以通过专用网络与移动设备进行通信。安全服务器还可操作以通过第二网络路径与公共网络进行通信，该第二网络路径比第一网络路径更不易受到第三方的干扰。安全服务器通过第二网络路径与公共网络进行通信，以向通过专用网络传送的移动设备提供安全服务。

4. 发明授权

US09363669B2 Methods and systems for server-initiated activation of device for operation with server 有权
标题翻译：服务器启动激活服务器操作的设备的方法和系统
公开(公告)号：US09363669B2
公开(公告)日：2016-06-07
申请号：US13861510
申请日：2013-04-12
申请人： Research In Motion Limited
发明人： Alexander Truskovsky , Daryl Joseph Martin
IPC分类号： G06F15/16 , H04L29/06 , H04W12/06 , H04L29/08 , G06F21/00
CPC分类号： H04L63/0869 , H04L47/70 , H04L63/0823 , H04L63/10 , H04L63/1458 , H04L67/04 , H04W12/06 , H04W88/02
摘要： Methods and systems for enabling activation of a wireless communication device to operate with a server on a wireless communication network. An activation request is pushed from the server to the device, the activation request being authenticated with a signature signed with a server certificate. After the device verifies the activation request using server certificate and signature, a mutually authenticated communication session is established between the device and the server for activation of the device on the server.
摘要翻译：用于使无线通信设备能够激活以在无线通信网络上与服务器一起操作的方法和系统。激活请求从服务器推送到设备，激活请求通过使用服务器证书签名的签名进行身份验证。在设备使用服务器证书和签名验证激活请求之后，在设备和服务器之间建立相互认证的通信会话以激活服务器上的设备。

5. 发明授权

US08996855B2 HTTP layer countermeasures against blockwise chosen boundary attack 有权
标题翻译： HTTP层对抗屏蔽选择边界攻击的对策
公开(公告)号：US08996855B2
公开(公告)日：2015-03-31
申请号：US13676730
申请日：2012-11-14
申请人： Research In Motion Limited , Certicom Corp.
发明人： Alexander Sherkin , Gregory Marc Zaverucha , Alexander Truskovsky , Michael Matovsky , Osman Zohaib Arfeen
IPC分类号： H04L29/06
CPC分类号： H04L63/0428 , H04L63/0823 , H04L63/166
摘要： A client application, when executed by a processor, is operative to create a HyperText Transfer Protocol (HTTP) request containing a target header that includes a confidential value. The HTTP request is to be sent over a Secure Sockets Layer (SSL) 3.0 connection or a Transport Layer Security (TLS) 1.0 connection to a web server. The client application implements at its HTTP layer a countermeasure to a blockwise chosen-boundary attack. The client application generates an additional header having a header name that is not recognizable by the web server and inserts the additional header into the HTTP request ahead of the target header, thus creating a modified HTTP request. The modified HTTP request is to be sent, instead of the unmodified HTTP request, over the SSL 3.0 connection or the TLS 1.0 connection to the web server.
摘要翻译：当由处理器执行时，客户端应用程序可操作以创建包含包含机密值的目标报头的超文本传输协议（HTTP）请求。 HTTP请求将通过安全套接字层（SSL）3.0连接或传输层安全（TLS）1.0连接发送到Web服务器。客户端应用程序在其HTTP层实现了对块选择边界攻击的对策。客户机应用程序生成一个额外的标头，其标题名称不能由Web服务器识别，并将附加标头插入到目标标题之前的HTTP请求中，从而创建修改的HTTP请求。修改的HTTP请求将通过SSL 3.0连接或与服务器的TLS 1.0连接发送，而不是未修改的HTTP请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式