Cable Television Laboratories, Inc.

Massimiliano Pala

Steven John Goeringer

Ronald H Ih

Brian Alexander Scriber

Darshak Thakore

Tao Wan

Carl Fredrick Pettersson

Bernardo A Huberman

Jing Wang

Igor Faynberg

Martha Lurie Lyons

Simon Krauss

Chad Riland

Kyle Haefner

Andrew Alexander Dolan

Yuan Tian

Carl Fredrik Pettersson

A server device is provided for authenticating client devices on a communication network. The server device includes a transceiver configured for operable communication with at least one client of the communication network, and a processor including a memory configured to store computer-executable instructions. When executed by the processor, the instructions cause the server device to receive an authentication request from a client device, generate a seed for a first key for the client device if the client device authenticates, transmit the seed for the first key to the client device, receive a hash of the first key from the client device, and validate the first key based on the hash of the first key.

Systems and methods for advanced quantum-safe PKI credentials for authentications

A system for monitoring the status of digital certificates is provided. The system includes a responder computer device. The responder computer device is programmed to store, in a database, a plurality of statuses associated with a plurality of digital certificates. The responder computer device is also programmed to receive, from a first computer device, a request message including an identifier of a target certificate. The responder computer device is further programmed to query the database to retrieve status information about the target certificate. In addition, the responder computer device is programmed to generate a response message based on the retrieved status information. Moreover, the responder computer device is programmed to transmit the response message to the first computer device.

Systems and methods for enhanced online certificate status protocol

A trust store management system for a network communication ecosystem is provided. The system is programmed to a) receive a DNSSEC entry address of a DNSSEC entry stored at a DNSSEC server; b) transmit a request to a DNSSEC server to access information stored in the DNSSEC entry associated with the DNSSEC entry address; c) receive, from the DNSSEC server, the information stored in the DNSSEC entry; d) receive a trust store; and e) validate the trust store based on the information stored in the DNSSEC entry.

ATA systems and methods for advanced dynamic trust store management systems

A privacy proxy device for maintaining privacy on a communication network is provided. The privacy proxy device includes a transceiver, a processor, and a memory. The transceiver communicates with at least one user device and at least one device capable of recording over a communication medium of the communication network. The memory store computer-executable instructions, which, when executed by the processor, cause the privacy proxy device to store a plurality of privacy settings including one or more recording settings. The instructions further cause the privacy proxy device to receive a request to record from a recording device of the at least one device capable of recording. The instructions also cause the privacy proxy device to compare the request to record to the plurality of privacy settings. In addition, the instructions cause the privacy proxy device to generate and transmit a response to the request to record based on the comparison.

Systems and methods for network device advanced privacy

A server is provided for managing access of an electronic entity to a communications network. The server includes a contact point in operable communication with the electronic entity. The contact point is configured to receive a network access granting request message from the electronic entity. The server further includes a processing module, configured to process the received network access granting request message, validate trust indicators contained within the network access granting request message, authorize access of the electronic entity to the network upon validation of the trust indicators, and transmit a response message to the electronic entity indicating a level of access to the network that has been authorized.

Systems and methods for network access granting

A computer device is provided for performing secure updates and notifications. The computer device includes a transceiver configured for operable communication with an operator computer device of a communication network via a connection with a vendor computer device, and a first processor having a first memory device configured to store computer-executable instructions, which cause the first processor to (i) store a plurality of registration information for the operator computer device, which is registered for notifications for one or more device types, (ii) receive, from the vendor computer device, an update notification message associated with devices of a first device type, (iii) determine a link to update materials associated with the update notification message, (iv) determine additional operator computer devices that are registered to receive updates for the first device type, and (v) transmit, to the additional operator computer devices, an update notification message including the link to the update materials.

Systems and methods for secure updates

A server device is provided for privacy protecting contact tracing. The server device includes a transceiver configured for operable communication with at least one server of the communication network, and a processor including a memory configured to store computer-executable instructions. When executed by the processor, the instructions cause the server device to perform, by the transceiver, a scan to detect one or more nearby user devices, identify a unique identifier for each of the one or more nearby devices, store the unique identifiers of the one or more nearby devices, receive a notification including a first unique identifier, compare the first unique identifier to the stored unique identifiers, and alert the user of the user device if the first unique identifier matches one of the stored unique identifiers.

Systems and methods for private contact tracing

A security event management system for an electronic connected network includes a public key infrastructure subsystem configured to generate a security ID for a connected device accessing the network, a digital ledger, a trigger list in operable communication with the digital ledger, and an event manager configured to (i) subscribe to the trigger list by defining at least one reportable event of which the trigger list is to advise the event manager, and (ii) receive a notification from the trigger list upon validation of the at least one reportable event behind the digital ledger.

Systems and methods for secure event and log management

A system for provisioning a device is provided. The system includes a computer device. The computer device is programmed to receive, from a user equipment, a connection request via a layer two connection. The computer device is also programmed to accept the connection request. The computer device is further programmed to receive, from the user equipment, a certificate request via the layer two connection. Additionally, the computer device is programmed to determine a destination for the certificate request, and to route the certificate request to the destination.

Systems and methods for subscriber certificate provisioning

A server device is provided for authenticating client devices on a communication network. The server device includes a transceiver configured for operable communication with at least one client of the communication network, and a processor including a memory configured to store computer-executable instructions. When executed by the processor, the instructions cause the server device to transmit one or more messages of an authentication exchange with a client device, transmit a server Registration Authorization Token (RAT) associated with the server device to the client device, receive from the client device a client RAT associated with the client device, and store the client RAT.

Systems and methods for advanced chained authentications and authorizations

A system for enhanced public key infrastructure is provided. The system includes a computer device. The computer device is programmed to receive a digital certificate including a composite signature field including a plurality of signatures. The plurality of signatures include at least a first signature and a second signature. The computer device is also programmed to retrieve, from the digital certificate, a first key associated with the first signature from the digital certificate. The computer device is further programmed to retrieve the first signature from the composite signature field. In addition, the at least one computer device is programmed to validate the first signature using the first key.

Systems and methods for enhanced public key infrastructure

A system for enhanced internet of things digital certificate security is provided. The system includes a computer device. The computer device is programmed to store, in a database, a plurality of statuses associated with a plurality of digital certificates. The computer device is also programmed to receive, from a first computer device, a status update for the first digital certificate. The computer device is further programmed to update the first status based on the status update. Subsequently to updating the first status, the computer device is programmed to receive a request for a connection from the first device. Subsequently to updating the first status, the computer device is also programmed to deny the request for a connection based on the first status.

Systems and methods for enhanced internet of things digital certificate security

A certificate re-provisioning (CREP) protocol allows a client device to communicate with a provisioning server and be automatically provisioned, or re-provisioned, with needed credentials without the client device being aware of which credentials it needs. The CREP protocol uses a slot configuration template that defines which credentials are installed on the client device and the provisioning server responds with actions to provision the client device according to a client target configuration stored at the server.

Template based credential provisioning

A method for registering and provisioning an electronic device is provided. The method includes a step of inserting a first keypair into a secure element of the electronic device. The first keypair includes a public key and a private key. The method further includes a step of requesting, from a remote server configured to register and provision connected devices, a provisioning of credentials of the electronic device. The method further includes a step of verifying, by the remote server, the electronic device credentials. The method further includes a step of registering, by the remote server, the electronic device. The method further includes a step of transmitting, from the remote server to the electronic device, a device certificate. The method further includes steps of installing the transmitted device certificate within the secure element of the electronic device, and provisioning the electronic device according to the installed device certificate.

Systems and methods for secure element registration and provisioning

A method is provided for automating management of automatic renewal of a public key infrastructure (PKI) certificate issued by a certificate authority (CA) for a subscriber. The method includes steps of causing the subscriber to (i) transmit a first alert to a management entity for initiating renewal of the PKI certificate, and (ii) transmit a certificate signing request (CSR) to a registration authority (RA) for issuance of a renewal certificate. The method further includes steps of (iii) transmitting, from the RA to the CA, the CSR signed by the RA, (iv) receiving, at the RA from the CA, an issued renewal certificate signed by the CA, (v) sending, from the RA to the subscriber, the issued renewal certificate signed by the CA, and (vi) causing the subscriber to transmit a second alert to a management entity indicating renewal of the PKI certificate.

Growing community of inventors

Denver, CO, United States of America

Massimiliano Pala