Microsoft Technology Licensing, LLC

Nokia Corporation

Ulrich Müller

Alain Gefflaut

Mikko Tapani Suni

Laurent Bussard

Jan Frey

Methods for ad-hoc trust establishment using visual verification are described. In a first embodiment, a visual representation of a shared data is generated on two or more devices and the visual representations generated can be visually compared by a user. This method can be used to verify that the correct devices are involved in a negotiation, when pre-existing trust relationships do not exist between the devices. The visual representation may, for example, comprise a picture with a number of different elements, each representing a part of the shared data. In another embodiment, a method of secure key exchange is described in which, before sharing the keys, the parties exchange information which encapsulates the key. This information can be used subsequently to check that a party has not changed the key that they are using and prevents a man in the middle attack.

Ad-hoc trust establishment using visual verification

Methods and apparatus for device virtualization and for communication between network devices are described. In one example, all devices on a first Local Area Network (LAN) which are to communicate with devices on a second Local Area Network (LAN) have a virtual presence on LAN, and all the devices on LANwhich are to communicate with devices on LANhave a virtual presence on LAN, enabling these devices to communicate as if they were located in the same LAN. In another example, a device which uses different networking protocols to other devices on a network is virtualized on its own network, along with all the devices with which it communicates. In either example, the proposed virtualization technique may ensure that virtualized devices appear like physical devices to the other devices such that no modifications of the networking protocol is necessary to interact with a virtualized device.

Device virtualization

According to an embodiment, a method comprises receiving a data packet including an indication comprising a process state indication and a transmission state indication, comparing the indication with an expected indication, and determining if the data packet is valid or not based on a result of the comparison.

Failure differentiation and recovery in distributed systems

The present invention relates to a method for controlling a user terminal of a communications network, the user terminal having a communications unit, a subscriber identification means including a restricted using mode list, each entry of which includes an identifier (AI) and/or ID-number of a communications link and/or a class of communications links which are allowed when a restricted using mode of the user terminal is enabled, and memory means for storing entries including identifiers and associated ID-numbers of communications links. The inventive method comprises: inputting a request for a communications link (S) and building-up requested communications links (S), if the restricted using mode is not enabled (S); otherwise comparing the ID-number of the requested communications link with entries of the restricted using mode list (S) and building-up the requested communications link (S), if the ID-number matches an entry of the restricted using mode list; otherwise rejecting the request (S).

Growing community of inventors

Aachen, Germany

Ulrich Müller