Inventors list

Assignees list

Classification tree browser

Top 100 Inventors

Top 100 Assignees


Jan-Erik Ekberg

Jan-Erik Ekberg, Vantaa FI

Patent application numberDescriptionPublished
20080220746KEY ESTABLISHMENT UTILIZING LINK PRIVACY - A system for allowing two or more wireless devices to form a secure relationship despite any other device that may be attempting to intercept information exchanged between the devices. The process may be performed automatically by the devices, yielding security information that may be used to authenticate information believed to have been sent from a known device. The security information may include at least an encryption key utilized to identify previously encountered known devices and for securing communication with these devices. The security key may be computed by analyzing the transmission and receipt of advertising messages, or by analyzing the contents of pseudorandom information contained in advertising message payloads.09-11-2008
20090316908Verification key handling - A method, an apparatus, and a computer program product for enabling verification key handling is disclosed. Said handling is enabled by receiving a verification key including an identifier of the parent verification key of the verification key, wherein the verification key includes a constraint portion, determining whether the constraint portion of the verification key corresponds to the constraint portion of the parent verification key, associating, in case the constraint portion of the verification key corresponds to the constraint portion of the parent verification key, the verification key with a particular state update, and storing the verification key associated with the particular state update.12-24-2009
20100005294Security in Wireless Environments Using Out-Of-Band Channel Communication - A methodology of using an (preferably uni-directional) out-of-band channel for secure information transmission between two devices capable for LPRF communication is provided. Information, which is intended for secure transmission from one of the devices to the other device, is encoded into a time dependent visual sequence. The visual sequence may comprise one or more visual signals, in particular lighted-up and dark states. The visual sequence is emitted in a time-dependent visual signal by a light emitter of the one device and the emitted signal is detected by a light sensor of the other device on the basis of the detected signal. The time-dependent signal especially timely varies in the light intensity. The light sensor generates a (time-dependent) sequence of detection signals. These detection signals are decoded to reconstruct the information intended for secure transmission. The out-of-band channel transmission of the information being separate from the LPRF communication enables to transmit a shared secret. The shared secret is required for secure authentication of the devices during initialization of the LPRF communication.01-07-2010
20100082679METHOD, APPARATUS AND COMPUTER PROGRAM PRODUCT FOR PROVIDING OBJECT PRIVILEGE MODIFICATION - An apparatus for providing object privilege modification may include a processor. The processor may be configured to receive an indication to modify at least one privilege associated with an object. The processor may be further configured to modify the at least one privilege associated with the object based at least in part on the indication and update a policy file based at least in part on the modified privilege associated with the object. The processor may be additionally configured to provide for an output of the object based at least in part on the modified privilege associated with the object. Associated methods and computer program products may also be provided.04-01-2010
20100262841METHOD FOR SECURE PROGRAM CODE EXECUTION IN AN ELECTRONIC DEVICE - The invention relates to a method for secure piecemeal execution of a program code. In the method, the program code is split to a number of pieces in a first electronic device. The pieces are provided one after another to a second electronic device, which computes a message authentication code from the pieces and returns the authenticated pieces back to the first electronic device. In order to execute the program, the authenticated pieces are provided for execution to the second electronic device, which verifies the message authentication codes in the pieces to allow the execution of the pieces in the second electronic device.10-14-2010
20100325427METHOD AND APPARATUS FOR AUTHENTICATING A MOBILE DEVICE - An approach is provided for authenticating a mobile device. A mobile device initiates transmission of a request to an authentication platform for generating a public-key certificate to access a service from the mobile device. The mobile device receives an identity challenge and responds by initiating transmission of a tag specific to the mobile device to the authentication platform. The authentication platform uses the tag to generate a public-key certificate.12-23-2010
20110093938METHODS, APPARATUSES, AND COMPUTER PROGRAM PRODUCTS FOR BOOTSTRAPPING DEVICE AND USER AUTHENTICATION - An apparatus may include a processor configured to receive a security certificate request from a remote device comprising a public key of the remote device and an authentication credential based upon a legacy authentication mechanism of the remote device. The processor may be further configured to validate the received authentication credential in accordance with the legacy authentication mechanism. The processor may be additionally configured to generate a security certificate for the public key. The processor may be further configured to provide the generated security certificate to the remote device04-21-2011
20110161648SOFTWARE LOADING METHOD AND APPARATUS - A method and an apparatus that enable loading of computer programs to a trusted computing platform. The computer program loading is enabled by executing a first program loader (06-30-2011

Patent applications by Jan-Erik Ekberg, Vantaa FI

Jan-Erik Ekberg, Vanda FI

Patent application numberDescriptionPublished
20100266128CREDENTIAL PROVISIONING - Disclosed is a method in a provisioning apparatus. The method comprises obtaining a family key, a family key defining a family; submitting the family key to a security element in a secure manner (10-21-2010
20100303236METHOD AND APPARATUS FOR PROPAGATING ENCRYPTION KEYS BETWEEN WIRELESS COMMUNICATION DEVICES - A system for propagating encryption key information between wireless communication devices without the requirement of pairing each and every device. A wireless communication device may be paired with at least one device in a group of devices. When a secure link is established between these devices, a determination may be made as to whether encryption key information should be passed from one device to another. The additional encryption key information may allow a wireless communication device to create a secure link with other devices without having to first establish a trusted relationship (e.g., go through a pairing process) with the other devices.12-02-2010
20110066850COMMUNICATION USING MULTIPLE APPARATUS IDENTITIES - A system for broadcasting multiple public identities corresponding to the same apparatus. For example, each public identity may correspond to different operational environments, while none of the public identities disclose a private identity that uniquely and permanently identifies the apparatus. This allows apparatuses to keep their unique identity a secret while still being able to communicate with other apparatuses in various environments.03-17-2011

Jan-Erik Ekberg, Helsinki FI

Patent application numberDescriptionPublished
20080311884BILLING IN A PACKET DATA NETWORK - A method for billing in a packet data network (WISP1) comprising at least one user's terminal (MN), comprising the steps of:12-18-2008

Patent applications by Jan-Erik Ekberg, Helsinki FI