Verizon Patent and Licensing Inc.

Cellco Partnership

Young Rak Choi

Warren Hojilla Uy

Manuel Enrique Caceres

Dayong He

Mauricio Pati Caldeira De Andrada

Samirkumar Patel

Mun Wei Low

Emilia C Quijano

Taussif Khan

Iftekhar Rahman

Bruno Mendez

John M Stokes

Feng Luo

Yuk Lun Li

Jeremy Nacer

Jyotsna Kachroo

Samir S Vaidya

Quentin N Robinson

Kevin Donnellan

Samuel Akiwumi-Assani

Ray P Hwang

Muxiang Zhang

Te-Sheng Lin

Byunghun Choi

Babila Sunny Pinyin

One or more computing devices, systems, and/or methods are provided. In an example, a system includes a first non-quantum-resistant (NQR) device configured to generate first data and a first quantum capable proxy server configured to receive the first data, encrypt the first data using a quantum resistant (QR) protocol to generate first QR data, and communicate the first QR data to a first target device using a first QR channel. In an example, a method includes generating first data by a first non-quantum-resistant (NQR) device, communicating the first data, by the first NQR device, to a first quantum capable proxy server, encrypting the first data, by the quantum capable proxy server, using a quantum resistant (QR) protocol to generate first QR data, and communicating, by the quantum capable proxy server, the first QR data to a first target device using a first QR channel.

Systems and methods for device grouping based on quantum resistant encryption capability

A device may receive, at an operating system, a request for a random number from an application. The device may provide a command to generate an entropy input, based on the request for the random number and through a driver that is isolated from the operating system, to a quantum random number generator that is isolated from one or more processors hosting the operating system. Accordingly, the device may receive the entropy input, from the quantum random number generator, using the driver, and may generate the random number based at least in part on the entropy input. The device may provide the random number to the application.

Systems and methods for secure random number generation

A first wireless access device, associated with a wireless service provider, establishes a wireless local area network connection with a second wireless access device and receives a certificate including a unique identifier associated with the second wireless access device. The first wireless access device determines whether the second wireless access device is authorized to connect to the first wireless access device. For example, if the certificate is signed by a certificate authority associated with the wireless service provider and the unique identifier appears in a whitelist stored at the first wireless access device, the first wireless access device and the second wireless access device perform a mutual authentication procedure based on one or more ephemeral keys. The first wireless access device provides the second wireless access device with access to a wide area network based on successful completion of the mutual authentication procedure.

Mutual authentication between wireless access devices

A system described herein provide for the secure maintaining and providing of information, such as public keys used in Public Key Infrastructure ('PKI') techniques or other techniques, using a secure distributed ledger (e.g., “blockchain”) system. A blockchain system may be utilized in lieu of a key escrow system in the exchange and/or providing of public keys in a Diffie-Hellman key exchange technique or other type of technique in which public keys are provided from one entity to another. A first entity may generate an asymmetric key pair that includes a public key and a private key, and may provide the public key to a blockchain system for retrieval by one or more other entities. For example, the entities may be engaged in a secure messaging session, in which messages are encrypted and may be decrypted using one or more keys, including the public key.

Systems and methods for blockchain-based secure key exchange

A network device may load, via a boot ROM application, a provider bootloader application from a memory of the network device and may calculate a first hash value based on decrypting a provider bootloader signature with a provider public key. The network device may calculate a second hash value based on the provider bootloader application and may utilize, when the first hash value and the second hash value are equivalent, the provider bootloader application to load an original equipment manufacturer (OEM) bootloader application from the memory. The network device may calculate a third hash value based on decrypting an OEM bootloader signature with one of a plurality of OEM public keys. The network device may calculate a fourth hash value based on the OEM bootloader application. The network device may complete, when the third hash value and the fourth hash value are equivalent, a boot process for the network device.

Systems and methods for securely booting a network device with a service provider trust anchor

A device receives, from an application, a request to access an attestation key stored in a secure element of the device. The device obtains an attestation policy, by which to verify an identity of the application. The device examines an application file associated with the application, to determine whether the application file satisfies the attestation policy. The device selectively generates a temporary key based on a result of examining the application file. The temporary key may be used to access the attestation key. The temporary key may be generated based on the application file satisfying the attestation policy, and may not be generated based on the application file not satisfying the attestation policy.

Devices and methods for application attestation

A method or system for authentication and access control in for network device management is disclosed. The method or system may include establishing a communication channel between a user device and a network device and receiving, by the network device, a public-key certificate including a specified identity of the user device. The method or system may include determining whether the public-key certificate is valid against a root certificate stored in the network device, and determining an actual identity of the user device. The method or system may include indicating that the user device is authentic and authorized when the received public-key is valid against the root certificate and when the actual identity of the user device matches the specified identity in the public-key certificate.

Authentication and access control for device management and provisioning

A first user device may provide, to a provisioning device, a request for a subscriber identity module (SIM) swap that causes provisioning data to be provided to a first SIM card of the first user device and from a second SIM card of a second user device. The first user device may generate a first encrypted token based on a first identifier associated with the first SIM card. The first user device may provide, to the provisioning device, the first encrypted token and a user identifier. The first user device may selectively receive the provisioning data when the first encrypted token matches a second encrypted token generated by the second user device based on a second identifier associated with the second SIM card, or receive a message indicating that the first user device cannot be provisioned, when the first encrypted token fails to match the second encrypted token.

Systems and methods for authenticating a subscriber identity module swap

A method, device, and computer-readable medium provide for establishing, by a fixed wireless access (FWA) device in a customer premises equipment (CPE) network, a communication channel with a user device; dynamically generating, by the FWA device, a one-time personal identification number (PIN); sharing, by the FWA device, the one-time PIN with the user device; pairing, by the FWA device and based on activation of one-time PIN, the user device via a short-range connection; and performing, by the FWA device using the short-range connection, at least one of setup or installation of one or more devices in the CPE network.

Systems and methods for short-range wireless pairing and connectivity

A device determines information concerning the device and sends the information concerning the device to a first device. The device receives, from the first device, information concerning a user device, and receives, from a second device, a request concerning the user device accessing the device. The request includes information identifying the device and information identifying the user device. The device generates a request response by validating the user device for access to the device based on the request and sends, to the second device, the request response to facilitate a communication session to be established between the user device and the device. The device communicates with the user device via the communication session.

Systems and methods for validating a device and authenticating a user

A method may include monitoring communications from a first user device coupled to a network and determining, based on the communications, whether the first user device is operating in accordance with a profile associated with the first user device. The method may also include transmitting a message to a network device in response to determining that the first user device is not operating in accordance with the profile. The method may further include blocking at least some communications from being transmitted to or received by the first user device, in response to determining that the first user device is not operating in accordance with the profile.

Systems and methods for policing and protecting networks from attacks

A method is provided for operating a computing device, the method including verifying the contents of a protected portion of a nonvolatile memory included in the computing device, the protected portion including a first protected file that includes first instructions; in response to the protected portion being successfully verified, initiating execution of an operating system kernel, on the computing device, included in a boot portion of the nonvolatile memory, wherein the boot portion is configured to cause the computing device to execute instructions stored in a system portion of the nonvolatile memory under control of the kernel, and the system portion is not included in the protected portion; subsequent to initiating execution of the kernel, locating the first instructions via a first symbolic link to the first protected file, wherein the first symbolic link is stored in one of the system portion or the boot portion; and executing the first instructions under control of the kernel.

Protecting and verifying contents of files on mobile computing devices

To allow a user to temporarily move access to premium content to another location, e.g. outside the vicinity of the home, while adequately protecting the rights of a broadcast content provider, the various examples implement a transfer of an object for an identified right of content usage between premium content reproduction devices and a mobile device. The mobile device enables such transfer to support viewing of the premium content by a user outside of the user's home.

Growing community of inventors

Belle Mead, NJ, United States of America

Young Rak Choi