Telefonaktiebolaget Lm Ericsson (publ)

Marcos Antonio Simplicio Junior

Mats Näslund

Makan Pourzandi

Tereza Cristina Melo De Brito Carvalho

Tereza Cristina Carvalho

Cristina Dominicini

Leonardo Horn Iwaya

Peter Håkansson

Diego Gallo

Yeda Regina Venturini

Rony Sakuragui

Mats NÄSLUND

Peter HÅKANSSON

Methods and apparatus for encrypting and storing data. The methods and apparatus provide different levels of security and usability. The methods and apparatus generate two or more keys based on a shared secret made available to a user equipment and a server. The two or more keys comprise at least one perfect forward secrecy key, and at least one limited forward secrecy key. The methods and apparatus encrypt data using at least one of the two or more keys. The methods and apparatus store the encrypted data in a memory of the user equipment and/or transmit the data from the user equipment to the server.

Encrypting and storing data

Method and Apparatus for Securing a Connection in a Communications Network A method of operating a user equipment (UE) using a Generic Bootstrapping Architecture (GBA) is provided. The method includes establishing a shared secret between the UE and a Network Application Function (NAF). An authentication request is sent to a Bootstrapping Server Function (BSF) by the UE. An original parameter intended for a key derivation function and a bootstrapping transaction identifier is received from the BSF. An application request, including the bootstrapping transaction identifier, is sent by the UE to the NAF. A modified parameter is derived by the UE from the secret and the original parameter intended for the key derivation function. A cryptographic key is determined using said modified parameter in place of or in addition to the original parameter in the key derivation function, and communications with the NAF are secured using the key.

Method and apparatus for securing a connection in a communications network

A method for preserving privacy during authorization in pervasive environments is described. The method includes an authorization phase in which the user is provided with a reusable credential associated with verifiable constraints, and an operation phase where the service provider verifies the reusable credential before authorizing the user. Third parties cannot link plural uses of the credential to each other, and the service provider cannot link plural uses of said credential to each other.

Privacy preserving authorisation in pervasive environments

A method of controlling access to content comprises receiving, at a domain gateway () of a domain (), a request from a device () in the domain for access to the content. It is determined at the domain gateway whether the number of devices in the domain currently accessing the content is equal to a specified maximum number of devices that may simultaneously access the content. The maximum number of devices that may simultaneously access the content is independent of the number of devices in the domain. If the determination is that the number of devices in the domain currently accessing the content is less than the specified maximum number the request is allowed, otherwise it is refused.

Digital rights management in user-controlled environment

Growing community of inventors

São Paulo, Brazil

Marcos Antonio Simplicio Junior