Nokia Corporation

Other

Piotr Cofta

Olli Immonen

Lauri Piikivi

Panu S Markkanen

Petri Hyyppa

Zheng Yan

Lauri Paatero

Mikko Lukkaroinen

Topi Saukkonen

Mikael Linden

Mia Lähteenmäki

A method of accomplishing a transaction by a user equipment. Transaction information is inserted in at least one data field of an information entity that associates with the transaction based on information available at the user equipment. The information entity is then transmitted from the user equipment over a wireless interface. The insertion may require authorization. The insertion may occur automatically in response to a predefined event.

Electronic transactions

The present invention relates to a method and a system for allowing multiple applications to manage their respective data in a device () having a secure environment () to which access is strictly controlled. The idea of the invention is that a storage area is allocated () within the secure environment () of a device (). The storage area is associated () with an identity of an application, the associated identity is stored () in the secure environment () and access to the storage area is controlled () by verifying correspondence between the associated identity and the identity of an accessing application. This is advantageous, since it is possible for the accessing application to read, write and modify objects, such as cryptographic keys, intermediate cryptographic calculation results and passwords, in the allocated storage area.

Key storage administration

A method of accomplishing a transaction by a user equipment. Transaction information is inserted in at least one data field of an information entity that associates with the transaction based on information available at the user equipment. The information entity is then transmitted from the user equipment over a wireless interface. The insertion may require authorisation. The insertion may occur automatically in response to a predefined event.

Devices, methods, and computer code products are disclosed in which access to private keys required to create digital signatures for delimited information is controlled by permissions in the device. The permissions can be used to check the identity of an application to determine if the application has access to a digital key and permission to generate a digital signature.

Trusted signature with key access permissions

A method in a user equipment for enabling use thereof in electronic transactions is disclosed. In the method control information is received at the user equipment () from a management entity (). The user equipment is provided with transaction means based on the received control information.

A system and method is provided that establishes and maintains conditional trust by stating a signal of distrust from a trustee's computing platform to a trustor's computing platform. The trustor attests a trustee at a given time and also sends trust conditions to the trustee upon which the trustor trusts the trustee for some intended purpose. The trust conditions may include restrictions on hardware or software components and any status changes to the hardware or software components. The trustee then monitors the hardware and software components in relation to the trust conditions and reports distrust signals when the trustee's hardware and software configuration no longer matches the trust conditions.

System and method to establish and maintain conditional trust by stating signal of distrust

A handheld device () is capable of communicating wirelessly with a ticket issuer () through a network () or by using a short-range link such as Bluetooth, IrDA, or the like. A ticket is purchased using a payment system (). A user selects an image from a data store () and transmits it to the ticket issuer () along with data associated with the requested ticket. This data may comprise identification data of the user and/or the device (), data concerning a requested validity of the ticket, data concerning the payment method and/or an optional reservation number. The ticket issuer () receives the request then transmits to the user a template, which the user then fills in before transmitting payment data, the completed template and the selected image from the user device () to the ticket issuer (), as one or more SMS and/or MMS messages. If the data is verified as satisfactory, the ticket is then created by the ticket issuer () and visible and/or invisible watermarks are embedded into the image. The processed picture/image and the template are combined with additional data to generate a valid image digital ticket for the ticket user, which is then sent to the user or to an address or device which the user has given.

Method and a device for providing digital tickets in a mobile communications environment

A method is provided for authenticating an action between a control point and a user. A token which performs authentication is presented to the control point. The control point may be authenticated by using the token. The token may include a communication portion that obtains information regarding the control point and that communicates with a token issuer to authenticate the control point based on the information. A user interface portion may be coupled to the communication portion to indicate a result of the authentication to a user.

Method and token for authenticating a control point

A solution for controlling activities to be carried out in a network element in a flexible and safe manner. A data transmission network includes a network element, which includes data transfer means for transmitting and receiving data from the data transmission network, which data includes one or more commands: processing means for processing the data provided in a specified format; and control means for modifying the received command into a format required by the processing means. The control means includes a driver the origin of which can be verified with the help of an electronic signature; and one or more functions that control the operation of the processing means, which can only be initiated by the driver the origin of which has been verified with the help of the electronic signature.

Network element and method for controlling access to low level computer system services

The invention relates to a method for loading a program module (L, L, L) in a terminal, in which one or several programs (A, B) are running, and in which method subroutines (P, P, P) are stored in said program modules (L, L, L). The program modules (L, L, L) are provided with first tags (T, T, T), wherein to start binding, the program makes a call () to a subroutine (P, P, P). The call () is supplemented with the first tags (T, T, T) to select the program module (L, L, L) for binding, in which the called subroutine (P, P, P) is stored. The tags (T, T, T) are supplemented with second tags (LT, LT, LT). The call () is also supplemented with said second call data (PKx, PKy, PKz). In connection with the binding, said first tags (T, T, T) stored in the program modules are compared with the first tags (T, T, T) transmitted in the call (), and the second tags (LT, LT, LT) are compared with the second call data (PKx, PKy, PKz) transmitted in the call (), wherein the program module to be bound is selected to be the program module which matches with the first tags (T, T, T) and the second call data (PKx, PKy, PKz) transmitted in the call. The invention also relates to a terminal (MT).

Method for binding a program module

The invention is a method and system for visualizing a level of trust of network communication operations and connection of servers. In a system comprising a terminal, including a display and a network, the terminal using a browser to communicate with a network during a terminal session comprising at least communication operation initiated by a user and transmitted to the network, a method of the invention includes initiating a terminal session with the browser by making a transmission to the network; the network, in response to initiation of the terminal session, provides information from the network to the browser relating to the terminal session; and displaying on the display a level of trust based upon a standard of comparison of the at least one communication operation prior to transmission to the network informing the user of a level of security determined to be associated with the at least one communication operation if the at least one communication operation is permitted by the user to be transmitted to the network.

Growing community of inventors

Helsinki, Finland

Piotr Cofta