Nokia Corporation

Nokia Technologies Oy

Huawei International Pte. Ltd.

Sampo Juhani Sovio

Vesa-Veikko Luukkala

Sergey Boldyrev

Ian Justin Oliver

Nadarajah Asokan

Jan-Erik Gustav Ekberg

Philip Ginzboorg

Jari-Jukka Harald Kaaja

Jukka Honkola

Hannu Ensio Laine

Mika Juhani Mannermaa

Arto Tapio Palin

Valtteri Niemi

Rune Lindholm

Joni Jantunen

Timo Eriksson

Shuang Wu

Jarmo Tapani Arponen

Harald Kaaja

Pekka Eerikki Leinonen

Kaisa Nyberg

Pekka Lahtinen

Juha-Matti Tuupola

Seamus Peter Moloney

Rauno Tamminen

Olli Tyrkkö

Samuli Silanto

Ronald Brown

Xiaopu Wang

Martti Takala

Suvi Lehtinen

Kari Ti Kostiainen

Jari Takala

Rune Adolf Lindholm

Seamus Moloney

An approach is provided for providing identity based encryption in distributed computations. An identity based encryption platform causes, at least in part, a segmentation of a computation closure into at least a first part and one or more second parts. The identity based encryption platform also causes, at least in part, an encryption of the one or more second parts using the first part as a public key of an identity-based encryption.

Method and apparatus for providing identity based encryption in distributed computations

A system for cryptographically authenticated communication, wherein an activation signal is sent from a communications device to a memory device (). The memory device derives a random challenge from at least one physical property of the activation signal and sends it back to the communications device (). A signature is computed using the received random challenge () and sent, together with a certificate, to the memory device ().

Cryptographically authenticated communication

It is inter alia disclosed to provide first identity data stored in an apparatus, the first identity data comprising an identifier and a first certificate, and to provide second identity data stored in the apparatus, the second identity data comprising an identifier and a second certificate, wherein the identifier of the first identity data is the same as the identifier of the second identity data.

Identification for apparatuses

An approach is provided for reducing communication traffic and cost by applying recipient criteria in identity-based encryption. A recipient criterion application selects one or more recipient criteria for data, and encrypts the data using the selected one or more recipient criteria as a public key of identity-based encryption.

Method and apparatus for applying recipient criteria in identity-based encryption

Systems and methods are provided for enchancing pseudo random number generation to thwart various security attacks to a system that relies on digital signature security measures. For example, a random number may be bound to a message that is to be signed using a digital signature. Alternatively, a random number may be bound to a secret seed value, which may be updated subsequent to each signing. Alternatively still, a random number may be bound to both the message to be signed using a digital signature and a secret seed value.

Method and apparatus for improving digital signatures

An approach is provided for providing biometric information processing using distributed computation. A biometric information processing infrastructure determines to receive an input including, at least in part, biometric information. The biometric information processing infrastructure selects one or more analyses for processing the input. The biometric information processing infrastructure also determines one or more processes associated with the one or more analyses. The biometric information processing infrastructure further determines to derive one or more computation closures from the one or more processes. The biometric information processing infrastructure determines to decompose the one or more computation closures for distribution in one or more computation spaces.

Method and apparatus for processing biometric information using distributed computation

An approach is provided for reducing communication traffic/cost and protecting content by applying recipient criteria in identity-based encryption. A criterion application of a querier causes, at least in part, transmission of a query associated with a first user described according to a first set of criteria. Based on the query, the criterion application of the querier receives one or more second sets of criteria associated with respective second users, wherein the second sets of criteria are matched, at least in part, to the first set of criteria, and wherein at least one of the second sets of criteria is used as a public key for encrypting data according to an identity-based encryption scheme. A criterion application of an information store receives the query associated with the first user, and matches one or more second sets of criteria with all or part of the first set of criteria.

Method and apparatus for querying content protected by identity-based encryption

An approach is provided for performing biometric authentication. A determination is made of biometric data from a user equipment having an associated user. Decomposition of the biometric data is caused into one or more closure primitives that represent computation closures of one or more processes of the user equipment. The user is selectively authenticated based on the decomposition of the biometric data.

Method and apparatus for providing biometric authentication using distributed computations

An apparatus comprising a processor, the processor configured to select a first cryptographic key, encrypt a message with the first cryptographic key to produce a first encrypted message, and further encrypt the first cryptographic key and an identifier of a second apparatus with a first encryption key to form a second encrypted message.

Securing communication

An approach is provided for construction and aggregation of distributed computations. A distributed computation construction infrastructure identifies an execution context bound to a user context at a device, the execution context corresponding to one or more processes executing at the device. The distributed computation construction infrastructure further causes, at least in part, decomposition of the execution context into one or more closure primitives and respective process states, wherein the one or more closure primitives represent computation closures of the one or more processes. The distributed computation construction infrastructure also causes, at least in part, serialization of the one or more closure primitives, the process states, or a combination thereof. The distributed computation construction infrastructure further causes, at least in part, aggregation of the one or more primitives and the respective process states to reconstruct at least a portion of the execution context based, at least in part, on consistency determination.

Method and apparatus for construction and aggregation of distributed computations

Methods and systems for managing access to a wireless local area network are provided. A wireless access point (AP) may use a unified approach that utilizes an out-of-band channel to communicate authentication key and network address information to a guest device, and utilizes an in-band channel to establish communications with the guest device, and also provides support for in-band setup on all devices. The ability to use out-of-band where possible provides for an increase to security and usability, and the possibility of delegating access from one device to another. The unified approach thereby also provides easy management of guest access to the WLAN.

Administration of wireless local area networks

An approach is provided for reducing decision diagram related communication traffic and cost by encoding decision diagrams. A hash identifier application constructs a reduced ordered binary decision diagram from a resource description framework graph, computes a hash identifier corresponding to the decision diagram, and stores the hash identifier with the decision diagram.

Method and apparatus for encoding decision diagrams

An approach is provided for binding user interface elements and granular reflective processing. An information management infrastructure determines to detect an event, from a first device, for specifying one or more user interface elements for transfer to a second device. The information management infrastructure further identifies one or more processes bound to the user interface elements. The information management infrastructure also determines at least one of a user context, an execution context within the user context, and one or more other execution contexts for the processes, wherein the one or more other execution contexts are from at least one of the user context and one or more other user contexts. The information management infrastructure further causes, at least in part, serialization of at least one of the user context, the execution context, and the one or more other execution contexts. The information management infrastructure further determines to transmit the serialization to the second device to initiate reconstruction of the at least one of the user context, the execution context, and the one or more other execution contexts.

Growing community of inventors

Riihimaki, Finland

Sampo Juhani Sovio