Huawei Technologies Co., Limited

Huazhong University of Science and Technology

Zhibin Zheng

Jiwei Wei

Lifeng Liu

Kai Zhao

Yuehua Chen

Shuling Liu

Yang Xin

Chao Li

Wei Zhao

Feng Ren

Lin Zhou

XiaoGang Wu

Jie Yang

Xiaolei Dong

Zhenfu Cao

Hongliang Zhu

Xiaogang Wu

Zuxi Wang

Zhenchuan Chai

Changfeng Ji

Pengyu Lu

Ziqi Zhu

Hanping Hu

Guanzhou Lin

Yixian Yang

A system and a method for security authentication, in which a biometric authentication subsystem in the security authentication system receives a biometric certificate held by the user and the user's biometric information from a user terminal; the biometric certificate contains the user's biometric template or the storage address of the biometric template; next, the biometric authentication subsystem authenticates the biometric certificate, performs matching between the biometric information and the biometric template, and generates the identity authentication result. The invention can also combine biometric authentication with PMI privilege authentication, so as to enhance security of identity authentication in PMI and widen applicability of biometric authentication.

System and method for security authentication using biometric authentication technique

A detecting method is provided, which includes extracting an Internet Protocol Identifier value from an obtained data packet. The detecting method may further include searching in a record table containing a correspondence relationship between an Internet Protocol Identifier value and a terminal serial number to determine whether the record table contains an adjacent Internet Protocol Identifier value smaller than the extracted Internet Protocol Identifier value and modifying the adjacent Internet Protocol Identifier value that is smaller than the extracted Internet Protocol Identifier value to be the extracted Internet Protocol Identifier value if the record table contains the adjacent Internet Protocol Identifier value smaller than the extracted Internet Protocol Identifier value. Otherwise, the detecting method may also include, adding a new record of the extracted Internet Protocol Identifier value and the corresponding terminal serial number into the record table. When a notification is received, the detecting method may calculate the number of terminal serial numbers in the record table and output the number of terminal serial numbers as the number of hosts. The provided detecting method may further provide a corresponding statistic and analyzing server and a detecting system.

Method and system for detecting accessing host contained in network, and statistic and analyzing server

A method for preventing Spam over Internet Telephony (SPIT), includes: a terminal receives a call request of a calling user; the terminal sets an identifier of the calling user into a SPIT reporting request upon receipt of the call request; and sends the SPIT reporting request to a server in response to an instruction of a called user that the call request is the SPIT.

System and method for preventing spam over internet telephony

A system and method for generating analog-digital mixed chaotic signal and an encryption communication method thereof are provided. In the system and method, the complementarity between continuous chaotic systems () and digital chaotic systems () are reasonably utilized. In specific, the digital chaotic systems, which are separated from each other, control the local continuous chaotic systems respectively, so as to enable the continuous chaotic systems, which are also separated from each other, to stably and synchronously work for a long time. Thus, there is no need to transmit the synchronizing signal, and as a result the anti-attack capability is increased effectively. Further, the continuous chaotic systems disturb the local digital chaotic systems to prevent the digital chaotic systems from degradation. This compensates the drawbacks of digital chaotic systems.

System and method for generating analog-digital mixed chaotic signal, encryption communication method thereof

A correlative reacting system and a method for implementing security update of mobile station. The correlative reacting system includes a security correlative agent at a terminal side and a security correlative server at a network side communicated with the security correlative agent via an air interface. In the present invention, the correlative reacting system performs an information interaction with the mobile station, controls the mobile station to carry out an automatic security update. The automatic security update includes automatic downloading and installation, update of the security correlative agent, and automatic recovery of the insecurity factors of the mobile station and the like.

Method for implementing security update of mobile station and a correlative reacting system

The present invention provides a method, a device and a system for controlling VoIP border security. The system includes: a border security controller, which includes two dynamic information tables, an active session information table and a registered user information table, acting as the basis of security control; and a security policy server, in communication with the border security controller, adapted to provide a security policy to the border security controller and check the security of a signaling packet forwarded by the border security controller. The border security control system first checks the security and processes the packets of a user datagram received according to the active session information table and the registered user information table, and allows a packet which passed the security processing to pass, and then performs protocol processing on the media packet and signaling packet which are allowed to pass.

Method, device and security control system for controlling communication border security

The present invention discloses a method and system for remote password based authentication using smart cards for accessing a communications network. The disclosed method does not require a remote authentication sever to maintain a table of passwords for all users. The disclosed method and system also support mutual authentication. It not only prevents the illegal use of system resources by an impersonator, the user can also authenticate the identity of the remote authentication server.

Method and system for remote password based authentication using smart cards for accessing a communications network

A method for implementing security communication. A bit for representing CI is added, and a judge process for the CI and encryption algorithm supported by both the current subscriber and network is added. If the CN supports more than one encryption algorithm, if the CI is 1 and a standard encryption algorithm is supported by both UE and CN, the standard encryption algorithm is determined as the encryption algorithm for security communication: otherwise, the communication is disconnected; if the CI is 0 and a self-developed non-standard encryption algorithm is supported by both UE and CN, the encryption algorithm is determined as the encryption algorithm for security communication; otherwise, the communication is disconnected. If the CN only supports the standard encryption algorithm, if this algorithm is also supported by UE, this standard encryption algorithm is determined as the encryption algorithm for security communication directly; otherwise, the communication is disconnected.

Method of selecting encrypting arithmetric for realizing communication of secrecy

The present invention discloses a method for determining encryption algorithm used in security communication based on Mobile Country Code (MCC) number. In this method, a Mobile Country Code (MCC) number list is preset in a Core Network (CN), and all the MCC numbers of those countries or service providers adopting the same self-developed encryption algorithms as those adopted by the homeland are stored in this MCC number list. When a User Equipment (UE) is calling or being called, the UE sends an International Mobile Subscriber Identifier (IMSI) information of the current subscriber to the CN, and the CN parses the information and extracts the MCC number after receiving the IMSI information. The CN compares the extracted MCC number of the current subscriber with elements of the MCC number list one by one, if the MCC number of the current subscriber is identical with a certain MCC number in the MCC number list, the CN selects the domestic self-developed encryption algorithm; if the MCC number of the current subscriber is not identical with any MCC number in the MCC number list, the CN selects an available standard encryption algorithm for the security communication. The CN sends the UEA of the selected encryption algorithm to an access network; then the access network sends the UEA of the selected encryption algorithm to the UE. The present method not only allows the coexistence of standard encryption algorithms and self-developed encryption algorithm, but also simplifies the process of encryption algorithm selection. Accordingly, the subscriber interest and service quality is guaranteed.

Method for determining encryption algorithm of secret communication based on mobile country codes

The invention discloses a signal-to-interference ratio (SIR) measurement method. The method measures interference power (I) of a single-path signal after the received signal is demodulated by the single-path demodulators of multipath receiving device at the receiving end. The total interference power is obtained by equipartition combining with the measured interference power of each single-path signal. The signal power (S) is obtained by measuring after maximum ratio combination of each single-path signal. The SIR of the received signal is the division of the signal power and the total interference power. An apparatus, implementing mentioned method, sets the interference power measurement-device in the RAKE combiner and the signal power measurement-device after the RAKE combiner. In this way, the interference measurement can effectively provide more information and can more really response to the channel variation.

SIR measure method and apparatus for the same

A method for identifying the primary cell under Site Selective Diversity Transmit comprises the steps of: (1) An ID is assigned by the system to each cell; (2) The ID indicating the primary cell is transmitted periodically by UE to the connected cells via the up link FBI fields; (3) The ID indicating the primary cell transmitted by the mobile station is received by the base station, if the signals received by the base station satisfy with one of the following conditions, then the said base station will consider itself as a primary cell; the identification conditions are: A. The ID code word indicating the primary cell received by the base station is matched with the ID code word of itself; B. The quality of the up link signals received does not satisfy with a quality threshold Qth, at the same time, there is a certain matching degree between the received ID code word indicating the primary cell and the ID code word of the cell itself; and C. The bits of dropping of the ID code word caused by using the up link compression mode excess a limitation. The signals transmitted form some of the non-primary cells having extremely bad quality to UE can be prevented, thereby the system interference is reduced, and the system stability and the system capacity are increased.

Primary cell identification method under site selective diversity transmit

The invention discloses a power control method for the multiple time-slot power control pattern in a CDMA system. The method pre-stores two encoded symbols which correspond to the all '1' and all '0' TPC commands respectively. Based on whether the current TPC command is identical with the last TPC command, the receiving end determines whether sending the original TPC command or the encoded TPC command. In the transmitting end, based on consistent degree of the received N TPC command data group and the encoded symbol, a corresponding power control mode is determined. The invention replaces the all &#x201c;0&#x201d; or all &#x201c;1&#x201d; TPC command with an encoded symbol, so the reliability of a TPC command is raised and the performance of power control is improved.

Growing community of inventors

Shenzhen, China

Zhibin Zheng