What is Claimed is:
1. A network system providing integration, comprising:
a client computer;
a server;
a server-side cryptographic function providing cryptographic services located on the server;
a PKI-Bridge providing an interface between the server and the server-side cryptographic function;
a remote access switch providing an interface between the client computer and the server;
a client-side cryptographic function providing cryptographic services located on the client computer;
a dial-up client providing dialing services to access the remote access switch; and
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function.
2. The network system of claim 1, further comprising:
a security device holding authentication information; and
a security device reader attached to the client computer for reading the security device.
3. The network system of claim 2, wherein a certificate is stored on the security device.
4. The network system of claim 2, wherein the security device is a smart card.
5. The network system of claim 1, further comprising:
a directory service accessed by the server-side cryptographic function.
6. The network system of claim 5, wherein the directory service is lightweight directory access protocol compliant.
7. The network system of claim 1, wherein the client-side cryptographic function and the server-side cryptographic function employ the same cryptographic scheme.
8. The network system of claim 1, wherein the server-side cryptographic function uses a random number generator to generate a challenge string.
9. The network system of claim 1, wherein a client-side cryptographic function uses a random number generator to generate a response string.
10. The network system of claim 1, wherein the client-side cryptographic function generates a signed response string.
11. The network system of claim 1, wherein the server-side cryptographic function generates a challenge string.
12. The network system of claim 1, wherein the server-side cryptographic function verifies the signed response string.
13. The network system of claim 1, wherein the dial-up client operates in terminal mode.
14. A network system providing integration, comprising:
a client computer;
a server;
a server-side cryptographic function providing cryptographic services located on the server;
a PKI-Bridge providing an interface between the server and the server-side cryptographic function;
a remote access switch providing an interface between the client computer and the server;
a client-side cryptographic function providing cryptographic services located on the client computer;
a dial-up client providing dialing services to access the remote access switch;
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function;
a security device holding authentication information;
a security device reader attached to the client computer for reading the security device; and
a directory service accessed by the server-side cryptographic function.
15. A client computer comprising:
a dial-up client providing dialing services to the client computer;
a client-side cryptographic function providing cryptographic services located on the client computer; and
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function.
16. The client computer of claim 15, further comprising:
a security device reader attached to the client computer for reading a security device.
17. The client computer of claim 15, wherein a security device is a smart card.
18. The client computer of claim 15, wherein the custom script dynamically linked library comprises a SDLogin component and a SDSetupDial component.
19. The client computer of claim 15, wherein the dial-up client automates the authentication process using a hidden terminal operating in terminal mode.
20. A client computer comprising:
a dial-up client providing dialing services to the client computer;
a client-side cryptographic function providing cryptographic services located on the client computer;
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function; and
a security device reader attached to the client computer for reading a security device.
21. A server comprising:
a server-side cryptographic function providing cryptographic services located on the server; and
a PKI-Bridge providing an interface between the server and the server-side cryptographic function.
22. The server of claim 21, further comprising:
a directory service accessed by the server-side cryptographic function.
23. A server comprising:
a server-side cryptographic function providing cryptographic services located on the server;
a PKI-Bridge providing an interface between the server and the server-side cryptographic function; and
a directory service accessed by the server-side cryptographic function.
24. A method of integrating via a dial-up interface, comprising:
sending session initiation information from a dial-up client to a PKI-Bridge;
checking session initiation information by the PKI-Bridge;
generating a challenge string by a server-side cryptographic function;
forwarding the challenge string to a custom script dynamically linked library;
forwarding the challenge string to a client-side cryptographic function from the custom script dynamically linked library;
utilizing a private key from a security device;
generating a response string;
signing the response string with the private key of a dial-in user;
forwarding a signed response string to the custom script dynamically linked library;
dividing the signed response string into packets;
forwarding packets to the PKI-Bridge;
reconstructing the signed response string from packets;
forwarding a reconstructed signed response string to the server-side cryptographic function;
obtaining a public key of the dial-in user; and
verifying the reconstructed signed response string using the server-side cryptographic function.
25. The method of claim 24, further comprising:
reading the security device by a security device reader.
26. The method of claim 24, further comprising:
encoding the signed response string.
27. The method of claim 24, further comprising:
decoding the signed response string.
28. The method of claim 24, further comprising:
forwarding the challenge string to the dial-up client; and
forwarding the challenge string to the PKI-Bridge.
29. The method of claim 24, further comprising:
forwarding packets from the custom script dynamically linked library.
30. The method of claim 24, wherein the security device is a smart card.
31. The method of claim 24, wherein the session initiation information comprises version information and a distinguished name.
32. The method of claim 24, wherein the public key is stored on a directory service.
33. The method of claim 32, wherein the directory service is lightweight directory access protocol compliant.
34. A method of integrating via a dial-up interface, comprising:
sending session initiation information from a dial-up client to a PKI-Bridge;
checking session initiation information by the PKI-Bridge;
generating a challenge string by a server-side cryptographic function;
forwarding the challenge string to a custom script dynamically linked library;
forwarding the challenge string to a client-side cryptographic function from the custom script dynamically linked library;
utilizing a private key from a security device;
generating a response string;
signing the response string with the private key of a dial-in user;
forwarding a signed response string to the custom script dynamically linked library;
dividing the signed response string into packets;
forwarding packets to the PKI-Bridge;
reconstructing the signed response string from packets;
forwarding a reconstructed signed response string to the server-side cryptographic function;
obtaining a public key of the dial-in user;
verifying the reconstructed signed response string using the server-side cryptographic function;
reading the security device by a security device reader;
encoding the signed response string;
decoding the signed response string;
forwarding the challenge string to the dial-up client;
forwarding the challenge string to the PKI-Bridge; and
forwarding packets from the custom script dynamically linked library.
35. An apparatus of integrating via a dial-up interface, comprising:
means for sending session initiation information from a dial-up client to a PKI-Bridge;
means for checking session initiation information by the PKI-Bridge;
means for generating a challenge string by a server-side cryptographic function;
means for forwarding the challenge string to a custom script dynamically linked library;
means for forwarding the challenge string to a client-side cryptographic function from the custom script dynamically linked library;
means for utilizing a private key from a security device;
means for generating a response string;
means for signing the response string with the private key of a dial-in user;
means for forwarding a signed response string to the custom script dynamically linked library;
means for dividing the signed response string into packets;
means for forwarding packets to the PKI-Bridge;
means for reconstructing the signed response string from packets;
means for forwarding a reconstructed signed response string to the server-side cryptographic function;
means for obtaining a public key of the dial-in user; and
means for verifying the reconstructed signed response string using the server-side cryptographic function.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. Fragrance diffusion device (20; 70), which comprises:
two opposing walls (30, 32; 72, 74) spaced apart from one another along a vertical longitudinal axis (L) so as to define between them a cavity (C) which extends transversally as far as a peripheral wall (40) provided with at least one opening (42) for diffusing fragrance to outside the device, said at least one opening placing the cavity in communication with the outside of the device,
several openings (O1, O2; O\u20321, O\u20322) formed in each of the two opposing walls and which pass through the relevant wall in such a way as to allow, in the case of a first (30) of the two walls which is situated above the second wall (32), the passage of the liquid fragrance from a first zone (Z1) into the cavity so that said fragrance can be diffused to outside the device via said at least one diffusion opening, the first zone being adjacent to said first wall, above the latter and separated from the cavity by this first wall and, in the case of the second (32) of the two walls, the passage of the liquid fragrance from the cavity to a second zone (Z2) which is adjacent to said second wall, underneath the latter and separated from the cavity by this second wall,
at least one duct (44, 46) which passes through each of the two opposing walls and extends into the zone adjacent to the relevant wall so as to place each zone adjacent to each wall in communication with the cavity, said at least one duct formed in the first wall (30) being an air intake duct (44) which directly takes in air from the outside of the device via said at least one opening (42) and the cavity, whereas said at least one duct (46) formed in the second wall (32) is a flow duct for the liquid fragrance coming from the cavity.
2. Device according to claim 1, wherein said at least one air intake duct (44) extends in the first zone (Z1) over a height suited to the open end (44a) of said at least one air intake duct being at a position above the level of liquid fragrance contained in the first zone (Z1).
3. Device according to claim 1, wherein at least certain openings formed in the two opposing walls are each extended by a neck which projects into the cavity with respect to the relevant wall.
4. Device according to claim 1, wherein the openings (O1, O2; O\u20321, O\u20322) of one of the two opposing walls are geometrically offset in relation to the openings of the other wall.
5. Device according to claim 1, further comprising several liquid-fragrance flow-retarding elements (76; 102, 104, 106, 108) each comprising a body of elongate overall shape, the bodies extending into the cavity so as each to connect two respective openings of the two opposing walls, thus allowing the liquid fragrance to be guided via each flow-retarding element from an opening in the first wall (30) to an opening in the second wall (32).
6. Device according to claim 5, wherein the bodies of the fragrance flow-retarding elements are formed of several tubes (76) which extend into the cavity in such a way that each tube connects together two respective openings of the two opposing walls, thus allowing the liquid fragrance to be guided via each tube from an opening in the first wall to an opening in the second wall.
7. Device according to claim 1, wherein each of the two opposing walls (30, 32; 72, 74) has a concave overall shape with the concave side facing towards the cavity and comprises a central region.
8. Device according to claim 1, wherein said at least one duct (44, 46) is situated in the central region.
9. Device according to claim 5, wherein the at least one duct (44, 46) is situated in the central region, and the liquid-fragrance flow-retarding elements (76; 102, 104, 106, 108) are arranged around said at least one duct.
10. Device according to claim 1, further comprising one or more elements (112, 114) made of absorbent material, which are formed on each of the two opposing walls (30, 32).
11. Fragrance diffusion system (10; 60), which comprises:
a diffusion device (20; 70) according to claim 1,
an upper first bottle (12) having a first neck (12a) the opening of which is positioned facing the first (30; 72) of the two opposing walls referred to as the upper wall; a lower second bottle (14) having a second neck (14a) the opening of which is positioned facing the second wall referred to as the lower wall (32; 74), the upper first bottle comprising the liquid fragrance which, by flowing drop by drop through the openings (O1, O2; O\u20321, O\u20322) on the one hand causes the fragrance to diffuse into the cavity (C) and to outside of the device via the said at least one opening (42), and on the other hand causes dripping drop by drop into the lower second bottle.
12. Method for diffusing a fragrance in a fragrance diffusion device (20; 70), wherein the device comprises:
two opposing walls (30, 32; 72, 74) spaced apart from one another along a vertical longitudinal axis (L) so as to define between them a cavity (C) which extends transversally as far as a peripheral wall (40) provided with at least one opening (42) for diffusing fragrance to outside the device, said at least one opening placing the cavity in communication with the outside of the device,
several openings (O1, O2; O\u20321, O\u20322) formed in each of the two opposing walls and which pass through the relevant wall in such a way as to allow, in the case of a first (30) of the two walls which is situated above the second wall (32), the passage of the liquid fragrance from a first zone (Z1) into the cavity so that said fragrance can be diffused to outside the device via said at least one diffusion opening, the first zone being adjacent to said first wall, above the latter and separated from the cavity by this first wall and, in the case of the second (32) of the two walls, the passage of the liquid fragrance from the cavity to a second zone (Z2) which is adjacent to said second wall, underneath the latter and separated from the cavity by this second wall,
at least one duct (44, 46) which passes through each of the two opposing walls and extends into the zone adjacent to the relevant wall so as to place each zone adjacent to each wall in communication with the cavity, said at least one duct formed in the first wall (30) being an air intake duct (44) whereas said at least one duct (46) formed in the second wall (32) is a flow duct for the fragrance coming from the cavity, according to the method, the liquid fragrance contained in the first zone (Z1) flows through the openings (O1; O\u20321) in the first wall (30) so that, on the one hand, the fragrance diffuses into the cavity (C) and to outside the device via said at least one opening (42) and, on the other hand, the remaining liquid fragrance that has not diffused flows into the second zone (Z2) via said at least one duct (46), the flow of liquid fragrance through the openings in the first wall (30) being permitted as a result of the intake of external air via said at least one opening (42), the cavity (C) and said at least one air intake duct (44).
13. Method according to claim 12, wherein the flow of liquid fragrance from the first zone (Z1) through the openings (O1; O\u20321) in the first wall (30) is diverted, as it passes into the cavity, from a direct path in order to reach the second wall (32) so as to increase the time for which said flow is present in said cavity.
14. Method according to claim 13, wherein the flow of liquid fragrance is diverted by encountering a number of obstacles (76; 102; 104; 106; 108) present in the cavity (C).
15. Method according to claim 12, characterized in that the diffusion of fragrance takes place in a fragrance diffusion system (10; 60) comprising:
a fragrance diffusion device (20; 70),
an upper first bottle (12) having a first neck (12a) the opening of which is positioned facing the first (30; 72) of the two opposing walls referred to as the upper wall; a lower second bottle (14) having a second neck (14a) the opening of which is positioned facing the second wall referred to as the lower wall (32; 74), the upper first bottle comprising the fragrance.
16. Device according to claim 2, wherein at least certain openings formed in the two opposing walls are each extended by a neck which projects into the cavity with respect to the relevant wall.
17. Device according to claim 2, wherein the openings (O1, O2; O\u20321, O\u20322) of one of the two opposing walls are geometrically offset in relation to the openings of the other wall.
18. Device according to claim 2, further comprising several liquid-fragrance flow-retarding elements (76; 102, 104, 106, 108) each comprising a body of elongate overall shape, the bodies extending into the cavity so as each to connect two respective openings of the two opposing walls, thus allowing the liquid fragrance to be guided via each flow-retarding element from an opening in the first wall (30) to an opening in the second wall (32).