Nec Corporation

Nec Europe Ltd.

Joao Girao

Dirk Westhoff

Frederik Armknecht

Ghassan Karame

Hugo Santos

Jun Furukawa

Wenting Li

Dan Dobre

Felix Gomez Marmol

Daniele Abbadessa

Miguel Martin Lopez

Rui Luis Aguiar

Mithun Puthige Acharya

Yukiko Endo

Alfredo Matos

Marcus Kuhnen

Florian Winkler

Joao Dá Silva

Einar Mykletun

Félix GÓMEZ MÁRMOL

For providing a simple network access process which can be used for accessing network with focus on a single service a process for providing network access for a user via a Network Provider (NP) to a Service Provider (SP) is claimed, the process including: establishing a connection between the user and the Network Provider (NP) by user's request to access the Service Provider (SP); authenticating of the user by a user's Identity Provider (IdP) on request of the Network Provider (NP); transmitting data from the Identity Provider (IdP) to the Network Provider (NP), so that the Network Provider (NP) has the information that the Service Provider (SP) or a third party is payee of the access fees; and providing the access for the user via the Network Provider (NP) to the Service Provider (SP) by the Network Provider (NP).

Process for providing network access for a user via a network provider to a service provider

A method for executing applications on an untrusted device includes selecting one or more applications as sensitive applications. One or more instruction sequences of the said one or more sensitive applications are modified by an external dongle. The one or more sensitive applications are executed on the untrusted device according to the modified instruction sequences. Whether correct execution of the instructions of the said modified instruction sequences has occurred is checked by the external dongle.

Method and system for executing applications in an untrusted environment

A method for executing a secure application on an untrusted user equipment having storage means with at least one protected region includes establishing a secure or authenticated communication channel between a trusted device and the user equipment. Secure application information of the secure application is provided via the communication channel to be executed on the user equipment. Correctness of the secure application information is checked. Execution of the secure application is initiated on the user equipment via the communication channel such that the secure application is stored in the protected region of the storage means.

Method and system for executing a secure application on an untrusted user equipment

A method and system for providing service access to a user, includes the steps of:

Method and system for providing service access to a user

Method for supporting a reputation mechanism in a network including one or more domains with one or more users being connected to the domains, one or more Identity Providers that manage identity information, and at least one entity that functions as Web Service Consumer for the users. When a user requests a Web Service Consumer of one of the domains for a web service provided by a Web Service Provider, the requested Web Service Consumer requests its known Identity Providers regarding a recommendation of the Web Service Provider. The Identity Providers function as recommendation aggregators by collecting reputation assessments of the Web Service Provider from entities registered on the Identity Providers who return an aggregated recommendation to the requested Web Service Consumer that determines a trust assessment about the Web Service Provider. A privacy homomorphism is employed for providing an encrypted exchange of recommendation related information.

Method for supporting a reputation mechanism in a network and network

A key exchanging apparatus transmits the contribution data to the plurality of counterpart apparatuses, generates a signer contribution confirmation signature with respect to a contribution data set including all the contribution data received from the plurality of counterpart apparatuses, generates auxiliary data and auxiliary data validity certification sentence from the contribution data set and the contribution random number, transmits the auxiliary data, the auxiliary data validity certification sentence and the contribution confirmation signature to the plurality of counterpart apparatuses, verifies validity of auxiliary data by using the counterpart identifier set, the counterpart public key set, the contribution confirmation signature set including the data received from the plurality of counterpart apparatuses, the auxiliary data set and the auxiliary data validity certification sentence set, and generates a public key from the contribution data set and the auxiliary data received from the plurality of counterpart apparatuses.

Key exchanging apparatus

A method for supporting management and exchange of distributed data of a user or an entity, in particular user profile information data, is characterized in that a protocol is provided that employs SAML (Security Assertion Markup Language) as bearer protocol in such a way that SAML messages function as containers for DST (Data Service Template) or DST-like messages in order to compose SAML DST messages, wherein the DST or DST-like messages include data processing information, and wherein for the DST or DST-like messages unified protocol namespaces are defined as the protocol specific namespaces.

Method for supporting management and exchange of distributed data of user or an entity

A method for managing data in a preferably non real-time sensor network, wherein the network comprises a multitude of sensor nodes to sense data, wherein the network is divided into clusters with each consisting of several sensor nodes, wherein within each cluster a sensor node acts as aggregator node to aggregate the sensed data of the rest of the sensor nodes of the cluster, and wherein always a pre-configurable number of neighbored clusters are combined to groups and the data aggregated within a cluster are stored by the aggregator node of the cluster itself and in addition by another aggregator node of a cluster of the respective group is characterized in that the data is encrypted with homomorphic methods before being stored persistently.

Method for managing data in a wireless sensor network

A method for establishing a secret key between two nodes in a communication network, in particular in a wireless local area network (WLAN), includes concealment of the fact that a key exchange occurs, one of the nodes&#x2014;first node (B)&#x2014;broadcasts one or more packets (P) that can be received by the other node&#x2014;second node (A)&#x2014;, wherein the packets (P) contain each a first key (K) and wherein the packets (P) are each encrypted with a second key (k) before being sent, the second node (A) randomly chooses one packet (P) from the packets (P) received and breaks the encryption of the chosen packet (P) in order to obtain the first key (K), and the second node (A) initiates a key exchange protocol, wherein the second node (A) encrypts the message to be sent for initiating the key exchange protocol with the revealed key (K).

Method for establishing a secret key between two nodes in a communication network

A method for aggregating data in a network, particularly in a wireless sensor network, wherein the network () includes a plurality of sensor nodes (N) to measure data and at least one sink node (S) at which the data measured by the sensor nodes (N) are aggregated, and wherein each sensor node (N) encrypts its measured data with a key k and forwards the result towards the sink node (S), is characterized in that, in the context of a key distribution within the network (), a master key K is chosen, and that the master key K is autonomously split up by the network () into individual keys kto be used by the sensor nodes (N) for encrypting measured data, with the sum of all individual keys kbeing equal to the master key K.

Method for aggregating data in a network

A method for authentication of elements of a group, especially for authentication of sensor nodes in a preferably wireless sensor network is disclosed. The group has one specific element&#x2014;leading element&#x2014;with which each of the group elements can exchange information and wherein the authentication of the group elements takes place with regard to the leading element. The leading element sends an authentication request to the group elements wherein the authentication request is the same for all the group elements. The group elements each send authentication responses&#x2014;based on the authentication request&#x2014;to the leading element, with the authentication responses being different for each group element.

Method for authentication of elements of a group

In a method for distributing keys for encrypted data transmission in a sensor network, nodes store a subset of keys from a set of keys. A sink node triggers the key election procedure and sensor nodes choose from a locally broadcasted keyID list, with one key to be stored on each node. All other initially stored keys are subsequently deleted. The process is repeated until the edge of the network is reached. Such key predistribution is suitable for the encryption of reverse multicast traffic to the sink node which is the predominant traffic pattern in wireless sensor networks.

Method for distributing keys for encrypted data transmission in a preferably wireless sensor network

Method to transmit data in an ad hoc network or a sensor network with the network comprising a multitude of sensor nodes to sensor data, at least one aggregator node to aggregate the sensored data of at least a subset of the sensor nodes, and at least one sink node to collect the data of the aggregator node is characterized in&#x2014;regarding a high level of security against attacks from outside while transmitting data, and regarding an economic energy consumption&#x2014;that the sensored data is encrypted at the sensor nodes, that the encrypted data is transmitted to one of the aggregator nodes, that at the aggregator node an aggregation function is executed on the encrypted data, and that the result of the aggregation function is transmitted to the sink node and decrypted there.

Growing community of inventors

Ludwigshafen, Germany

Joao Girao