Google Inc.

Motorola Corporation

Motorola Mobility LLC

General Instrument Corporation

Dean H Vogler

Mahesh V Tripunitara

Patrick Toomey

Larry C Puhl

Ezzat A Dabbish

Thomas S Messerges

Douglas A Kuhlman

Joel D Voss

Timothy James Wright

Yi Q Li

A method for managing data communication between a communication device () and another device () in a communication network, comprises providing () data for transmission by the communication device (), and controlling by at least one secure management element () operating in a secure environment () in the communication device the transmission of the provided data by the communication device so as to manage data transmitted by the communication device. The step of controlling may include at least one of controlling an amount of data transmitted, controlling a time of transmission of data and controlling a periodicity of transmission of data. A communication device and a method of managing data received by a communication device are also described.

Method for managing data communication between a communication device and another device and communication device

System and methods for access control in a Universal Plug and Play (UPnP) network are based on a user identity. A control point has an identity assertion capability for identifying a user. The control point is configured to declare a value of an attribute associated with the identity assertion capability. A device is communicatively coupled to the control point via the UPnP network. The device has a first access control list and a trusted-to-identify access control list (TIA). The device is configured to permit the user to perform one or more actions based upon whether the user identity appears as a subject in the first access control list.

System and methods for access control based on a user identity

System and methods for managing trust in access control are based on a user identity, in a Universal Plug and Play (UPnP) network. A device has an access control list (ACL), a trusted-to-identify access control list (TIA), and a first TIA management module configured to manage the TIA. A security console is communicatively coupled to the device via the network. The security console has a second TIA management module. The first TIA management module is able to implement an add request from the security console for adding an entry to the TIA. The entry includes a control point identity for a control point communicatively coupled to the device via the network.

System and methods for managing trust in access control based on a user identity

Systems and methods for providing secure identity authentication amongst devices using identity information contained therein to facilitate data synchronization amongst the user devices, wherein the identity information in the devices are compared for authentication but not actually transmitted or exposed for unauthorized access to such information and to the devices.

Method and system for securely authenticating user identity information

New devices () are added to an existing domain by obtaining domain information (e.g., domain name and private domain password) from devices () already in the domain that preferably are in close proximity. Once the domain information has been transferred from the device already in the domain to the device being added to the domain, the device being added to the domain contacts a key issuer () to complete its registration into the domain. The key issuer returns a DRM domain private key () as well as a DRM certificate (). Both are utilized by the device to obtain and render digital content ().

Domain-based digital-rights management system with easy and secure device enrollment

Encryption keys are transferred by obtaining a public and private key pair ( ) from a source device ( ). The public key is transmitted ( ) from the source device ( ) to a target device ( ). The target ( ) obtains a traffic key ( ) stored within the target device ( ). The traffic key is encrypted ( ) within the target device using the public key. The encrypted traffic key is transmitted to the source device ( ) where it is decrypted ( ) using the private key. The replacement encryption key(s) is(are) encrypted using the traffic key by the source device ( ) forming an encrypted replacement key message which contains a target slot identification for each of the replacement encryption keys. The encrypted replacement key message is transmitted to the target device ( ) where the replacement encryption key(s) is(are) recovered ( ). The replacement encryption key(s) is(are) then stored at the target device in an identified target slot ( ). The public, private, and traffic keys may then be erased from the source and target devices as appropriate.

Method for transferring an encryption key

A wireless electronic commerce system (,) comprising a wireless gateway (,) to a wireless network (,) with which a wireless device (,) having a unique client identifier (ID) is capable of communicating. A server (,) or servers (,and,) is/are coupleable to the wireless gateway, delivering content items (e.g. software products) to the wireless device (,) and maintaining digital content certificates for content items and digital license certificates for licenses for the content items. The server maintains, for each wireless client associated with the system, a record of licenses for that client and a record of content items associated with each license.

Growing community of inventors

Algonquin, IL, United States of America

Dean H Vogler