- International families
- 78k2015 to 2024
- Leading country
- United States1.6× the next
- All families
- 340khome filings included
- Over five years
- Steady2020 to 2024 against the five before
Year by year
Patent families by country of origin and the year of the earliest filing, 2000 to 2025; 2025 is a part year, still filling in. International families are those for which protection was sought beyond one country.
Volume
International patent families in the capability, by the year of the earliest filing.
Source: Global Institute for National Capability (GINC), 2026. Underlying patents from 107 patent offices, IFI CLAIMS and Google
Share by country
Each country's share of the year's international families, in per cent: the capability's five largest countries of origin, 2015 to 2024, and the rest of the world.
Source: Global Institute for National Capability (GINC), 2026. Underlying patents from 107 patent offices, IFI CLAIMS and Google
Country leaderboard
International patent families, 2015 to 2024, by country of origin. Growth compares the latest five full years with the five before.
Ten largest
United States
China
Japan
South Korea
Germany
France
Sweden
United Kingdom
Taiwan
Finland
24,476
15,698
8,691
6,051
4,461
2,494
1,985
1,834
1,586
1,314
| 2000 to 2025 | ||||||
|---|---|---|---|---|---|---|
| 1 | United States | 24,476 | 31.4% | 1.0× | 63,980 | |
| 2 | China | 15,698 | 20.1% | 1.2× | 212,965 | |
| 3 | Japan | 8,691 | 11.1% | 0.9× | 13,626 | |
| 4 | South Korea | 6,051 | 7.8% | 1.2× | 17,015 | |
| 5 | Germany | 4,461 | 5.7% | 1.1× | 6,075 | |
| 6 | France | 2,494 | 3.2% | 0.8× | 3,077 | |
| 7 | Sweden | 1,985 | 2.5% | 1.2× | 2,057 | |
| 8 | United Kingdom | 1,834 | 2.4% | 0.9× | 2,575 | |
| 9 | Taiwan | 1,586 | 2.0% | 1.1× | 2,565 | |
| 10 | Finland | 1,314 | 1.7% | 1.4× | 1,422 | |
| 11 | Canada | 1,147 | 1.5% | 0.8× | 1,819 | |
| 12 | Switzerland | 1,057 | 1.4% | 1.5× | 1,443 | |
| 13 | Israel | 911 | 1.2% | 0.9× | 1,828 | |
| 14 | Singapore | 815 | 1.0% | 1.8× | 1,133 | |
| 15 | Netherlands | 809 | 1.0% | 1.1× | 980 | |
| 16 | Cayman Islands | 799 | 1.0% | 0.1× | 895 | |
| 17 | India | 611 | 0.8% | 1.5× | 1,076 | |
| 18 | Russia | 469 | 0.6% | 0.5× | 859 | |
| 19 | Australia | 300 | 0.4% | 0.7× | 463 | |
| 20 | Italy | 275 | 0.4% | 1.1× | 436 | |
| 21 | Ireland | 262 | 0.3% | 0.6× | 417 | |
| 22 | Türkiye | 213 | 0.3% | 1.8× | 404 | |
| 23 | Spain | 160 | 0.2% | 1.0× | 185 | |
| 24 | Hong Kong | 159 | 0.2% | 0.4× | 231 | |
| 25 | Austria | 131 | 0.2% | 1.0× | 146 | |
| 26 | Denmark | 123 | 0.2% | 1.0× | 135 | |
| 27 | Saudi Arabia | 112 | 0.1% | 1.5× | 234 | |
| 28 | Belgium | 108 | 0.1% | 0.7× | 130 | |
| 29 | Norway | 106 | 0.1% | 0.9× | 117 | |
| 30 | Luxembourg | 65 | 0.1% | 0.8× | 73 | |
| 31 | Poland | 53 | 0.1% | 0.6× | 89 | |
| 32 | Brazil | 50 | 0.1% | 0.6× | 131 | |
| 33 | Malaysia | 49 | 0.1% | 0.6× | 56 | |
| 34 | Portugal | 44 | 0.1% | 1.6× | 53 | |
| 35 | Czechia | 42 | 0.1% | 0.4× | 125 | |
| 36 | New Zealand | 35 | 0.0% | 1.2× | 40 | |
| 37 | South Africa | 35 | 0.0% | 0.4× | 39 | |
| 38 | Mexico | 16 | 0.0% | 0.8× | 38 | |
| 39 | Hungary | 16 | 0.0% | 1.0× | 24 | |
| 40 | Liechtenstein | 10 | 0.0% | 0.4× | 13 |
Applicants
The largest applicants by international patent families, 2015 to 2024: across the world, then within each of the five countries with the most families in Protective Cybersecurity Technologies. Names are as held in the source and are not consolidated across subsidiaries.
Global
78,012 international families
HUAWEI TECH CO LTD · China
SAMSUNG ELECTRONICS CO LTD · South Korea
MICROSOFT TECHNOLOGY LICENSING LLC · United States
ERICSSON TELEFON AB L M · Sweden
ZTE CORP · China
INTEL CORP · United States
3,932
2,340
1,943
1,527
1,248
1,151
United States
24,476 international families
MICROSOFT TECHNOLOGY LICENSING LLC
INTEL CORP
QUALCOMM INC
IBM
GOOGLE LLC
APPLE INC
1,937
1,135
1,084
878
773
668
China
15,698 international families
HUAWEI TECH CO LTD
ZTE CORP
GUANGDONG OPPO MOBILE TELECOMMUNICATIONS CORP LTD
ALIPAY HANGZHOU INF TECH CO LTD
TENCENT TECH SHENZHEN CO LTD
PING AN TECH SHENZHEN CO LTD
3,873
1,248
555
457
452
451
Japan
8,691 international families
NEC CORP
CANON KK
NIPPON TELEGRAPH & TELEPHONE
FUJITSU LTD
MITSUBISHI ELECTRIC CORP
HITACHI LTD
783
761
567
486
355
341
South Korea
6,051 international families
SAMSUNG ELECTRONICS CO LTD
LG ELECTRONICS INC
ELECTRONICS & TELECOMMUNICATIONS RES INST
HYUNDAI MOTOR CO LTD
KIA CORP
KIA MOTORS CORP
2,337
444
271
266
188
143
Germany
4,461 international families
SIEMENS AG
BOSCH GMBH ROBERT
DEUTSCHE TELEKOM AG
INFINEON TECHNOLOGIES AG
ROBERT BOSCH CO LTD
GIESECKE & DEVRIENT MOBILE SECURITY GMBH
884
616
222
171
160
154
Similar capabilities
The nine capabilities that share the most international patent families with Protective Cybersecurity Technologies, 2015 to 2024: the families counted in both as a share of those counted in either. Each card shows its five largest countries.
Critical Technology
Privacy, Identity & Trust Technologies
44.0% shared · 45,520 families in both
United States
China
Japan
South Korea
Germany
20,167
13,819
8,702
6,734
3,966
National Security
Defensive Cyber Operations
20.2% shared · 15,717 families in both
United States
China
Japan
South Korea
Germany
5,863
1,954
1,881
1,128
878
Strategic Infrastructure
Data Centres, Compute & Cloud
17.2% shared · 21,569 families in both
United States
China
Japan
South Korea
Germany
23,300
14,719
7,822
4,889
3,301
Strategic Infrastructure
Data Resources
14.9% shared · 22,016 families in both
United States
China
Japan
South Korea
Germany
28,809
23,945
12,592
7,266
3,037
Strategic Infrastructure
Mobile & Wireless Networks
8.6% shared · 26,890 families in both
China
United States
Japan
South Korea
Sweden
83,485
59,761
31,601
30,496
14,008
Strategic Infrastructure
Core & Backbone Networks
6.9% shared · 11,601 families in both
United States
China
Japan
South Korea
Germany
26,336
26,166
15,255
6,683
4,804
Financial Strength
Currency Issuance & Digital Money
6.2% shared · 5,504 families in both
United States
Japan
China
South Korea
Germany
4,952
2,438
1,902
1,526
1,399
Critical Technology
Advanced Wireless Communication
5.9% shared · 18,625 families in both
China
United States
Japan
South Korea
Sweden
82,694
57,368
31,448
30,111
13,628
Strategic Infrastructure
Payments & Settlement Systems
5.1% shared · 4,968 families in both
United States
Japan
China
South Korea
Germany
8,689
3,604
3,322
2,540
750
Crosswalk
How Protective Cybersecurity Technologies is matched to the patent classifications. The entries below were chosen for it; each stands for itself and everything beneath it in the scheme, 183 Cooperative entries in all. A patent family counts when any of its codes, in either scheme and at any office, falls under one of them. Codes since retired are placed under the entries that replaced them.
| Entry | Title in the scheme | Why it is chosen | CPC codes | IPC codes | Documents |
|---|---|---|---|---|---|
| G06F21/50 | Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems | Platform integrity: malware and intrusion detection, secure boot | 22 | 8 | 345,803 |
| G06F21/60 | Protecting data | Protecting data: access control and encryption services | 13 | 2 | 390,423 |
| G06F21/70 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer | Hardware security of computer components | 22 | 19 | 179,703 |
| H04L63/00 | Network architectures or network communication protocols for network security | Network security: firewalls, access control, malicious-traffic detection | 74 | 6 | 1,380,036 |
| H04L9/40 | Network security protocols | Network security protocols | 1 | 1 | 227,700 |
| H04W12/00 | Security arrangements; Authentication; Protecting privacy or anonymity | Wireless network security | 111 | 54 | 547,127 |
| G06F21/6245 | Protecting personal data, e.g. for financial or medical purposes | Left out | |||
| G06F21/64 | Protecting data integrity, e.g. using checksums, certificates or signatures | Left out | |||
| H04L63/08 | Network architectures or network communication protocols for network security for authentication of entities | Left out | |||
| H04W12/02 | Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] | Left out | |||
| H04W12/06 | Authentication | Left out |
CPC and IPC codes are the codes in use on patent documents, at any office, that fall under the entry. Documents is the larger of the two schemes' counts of documents carrying one of them. An entry with no IPC codes can be told apart only in the Cooperative scheme.
The Cooperative codes in use that count towards Protective Cybersecurity Technologies: 243 codes on 2,956,863 documents. The 150 most used are listed; the full list is in the cpc-to-capability.csv download.
| Code | Title | Under entry | How placed | Documents |
|---|---|---|---|---|
| H04L9/40 | Network security protocols | H04L9/40 | In the scheme | 126,005 |
| H04L63/0428 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload | H04L63/00 | In the scheme | 121,965 |
| G06F21/602 | Providing cryptographic facilities or services | G06F21/60 | In the scheme | 103,432 |
| H04L63/20 | Network architectures or network communication protocols for network security for managing network security; network security policies in general | H04L63/00 | In the scheme | 83,506 |
| H04L63/10 | Network architectures or network communication protocols for network security for controlling access to devices or network resources | H04L63/00 | In the scheme | 82,988 |
| G06F21/6218 | Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database | G06F21/60 | In the scheme | 81,175 |
| H04W12/08 | Access security | H04W12/00 | In the scheme | 75,693 |
| H04L63/1416 | Event detection, e.g. attack signature detection | H04L63/00 | In the scheme | 66,650 |
| H04L63/1425 | Traffic logging, e.g. anomaly detection | H04L63/00 | In the scheme | 62,132 |
| H04L63/102 | Entity profiles | H04L63/00 | In the scheme | 53,676 |
| H04L63/1441 | Countermeasures against malicious traffic | H04L63/00 | In the scheme | 44,489 |
| H04L63/123 | Applying verification of the received information received data contents, e.g. message integrity | H04L63/00 | In the scheme | 41,239 |
| G06F21/577 | Assessing vulnerabilities and evaluating computer system security | G06F21/50 | In the scheme | 39,710 |
| H04W12/04 | Key management, e.g. using generic bootstrapping architecture [GBA] | H04W12/00 | In the scheme | 39,448 |
| H04L63/101 | Access control lists [ACL] | H04L63/00 | In the scheme | 37,923 |
| G06F21/57 | Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities | G06F21/50 | In the scheme | 36,991 |
| H04L63/1433 | Vulnerability analysis | H04L63/00 | In the scheme | 36,239 |
| H04L63/1408 | Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic | H04L63/00 | In the scheme | 35,750 |
| G06F21/604 | Tools and structures for managing or administering access control systems | G06F21/60 | In the scheme | 34,264 |
| G06F21/554 | Detecting local intrusion or implementing counter-measures involving event detection and direct action | G06F21/50 | In the scheme | 33,224 |
| G06F21/53 | Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine | G06F21/50 | In the scheme | 31,586 |
| H04L63/12 | Applying verification of the received information | H04L63/00 | In the scheme | 31,345 |
| H04L63/0442 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption | H04L63/00 | In the scheme | 30,990 |
| H04L63/105 | Multiple levels of security | H04L63/00 | In the scheme | 30,739 |
| G06F21/62 | Protecting access to data via a platform, e.g. using keys or access control rules | G06F21/60 | In the scheme | 30,422 |
| H04L63/0272 | Virtual private networks | H04L63/00 | In the scheme | 29,291 |
| G06F21/6209 | Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself | G06F21/60 | In the scheme | 27,574 |
| H04W12/03 | Protecting confidentiality, e.g. by encryption | H04W12/00 | In the scheme | 26,702 |
| H04L63/06 | Network architectures or network communication protocols for network security for supporting key management in a packet data network | H04L63/00 | In the scheme | 26,193 |
| G06F21/552 | Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting | G06F21/50 | In the scheme | 25,514 |
| H04W12/50 | Secure pairing of devices | H04W12/00 | In the scheme | 24,675 |
| H04W12/041 | Key generation or derivation | H04W12/00 | In the scheme | 24,578 |
| H04L63/061 | Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks | H04L63/00 | In the scheme | 24,568 |
| G06F21/566 | Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities | G06F21/50 | In the scheme | 24,116 |
| H04L63/126 | Applying verification of the received information the source of the received data | H04L63/00 | In the scheme | 24,060 |
| H04L63/062 | Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party | H04L63/00 | In the scheme | 23,521 |
| G06F21/6227 | Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries | G06F21/60 | In the scheme | 23,184 |
| G06F21/606 | Protecting data by securing the transmission between two devices or processes | G06F21/60 | In the scheme | 23,169 |
| H04L63/0236 | Filtering by address, protocol, port number or service, e.g. IP-address or URL | H04L63/00 | In the scheme | 22,797 |
| H04L63/0435 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption | H04L63/00 | In the scheme | 22,249 |
| H04L63/18 | Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels | H04L63/00 | In the scheme | 21,707 |
| H04W12/63 | Location-dependent; Proximity-dependent | H04W12/00 | In the scheme | 21,422 |
| H04L63/145 | Countermeasures against malicious traffic the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms | H04L63/00 | In the scheme | 20,939 |
| G06F21/78 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data | G06F21/70 | In the scheme | 20,433 |
| H04L63/0227 | Filtering policies | H04L63/00 | In the scheme | 20,124 |
| H04W12/033 | Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic | H04W12/00 | In the scheme | 19,831 |
| G06F21/56 | Computer malware detection or handling, e.g. anti-virus arrangements | G06F21/50 | In the scheme | 19,138 |
| H04L63/1466 | Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks | H04L63/00 | In the scheme | 19,125 |
| G06F21/60 | Protecting data | G06F21/60 | In the scheme | 19,085 |
| G06F21/79 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in semiconductor storage media, e.g. directly-addressable memories | G06F21/70 | In the scheme | 18,893 |
| H04L63/107 | Network architectures or network communication protocols for network security for controlling access to devices or network resources wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals | H04L63/00 | In the scheme | 18,266 |
| H04L63/0281 | Proxies | H04L63/00 | In the scheme | 18,181 |
| H04L63/1458 | Denial of Service | H04L63/00 | In the scheme | 18,037 |
| G06F21/575 | Secure boot | G06F21/50 | In the scheme | 18,007 |
| H04L63/104 | Grouping of entities | H04L63/00 | In the scheme | 18,001 |
| H04L63/02 | Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls | H04L63/00 | In the scheme | 17,981 |
| H04W12/12 | Detection or prevention of fraud | H04W12/00 | In the scheme | 17,568 |
| H04W12/0431 | Key distribution or pre-distribution; Key agreement | H04W12/00 | In the scheme | 17,421 |
| H04L63/205 | Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved | H04L63/00 | In the scheme | 16,991 |
| H04L63/166 | Implementing security features at a particular protocol layer at the transport layer | H04L63/00 | In the scheme | 16,448 |
| G06F21/55 | Detecting local intrusion or implementing counter-measures | G06F21/50 | In the scheme | 16,271 |
| G06F21/72 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in cryptographic circuits | G06F21/70 | In the scheme | 16,043 |
| H04W12/122 | Counter-measures against attacks; Protection against rogue devices | H04W12/00 | In the scheme | 16,003 |
| H04L63/0263 | Rule management | H04L63/00 | In the scheme | 15,591 |
| G06F21/51 | Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability | G06F21/50 | In the scheme | 15,474 |
| H04W12/35 | Protecting application or service provisioning, e.g. securing SIM application provisioning | H04W12/00 | In the scheme | 14,628 |
| H04W12/106 | Packet or message integrity | H04W12/00 | In the scheme | 14,421 |
| H04L63/168 | Implementing security features at a particular protocol layer above the transport layer | H04L63/00 | In the scheme | 14,158 |
| H04W12/10 | Integrity | H04W12/00 | In the scheme | 13,718 |
| G06F21/629 | Protecting access to data via a platform, e.g. using keys or access control rules to features or functions of an application | G06F21/60 | In the scheme | 13,557 |
| G06F21/52 | Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow | G06F21/50 | In the scheme | 13,490 |
| G06F21/74 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode | G06F21/70 | In the scheme | 13,220 |
| G06F21/85 | Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices | G06F21/70 | In the scheme | 12,544 |
| G06F21/572 | Secure firmware programming, e.g. of basic input output system [BIOS] | G06F21/50 | In the scheme | 12,457 |
| H04L63/029 | Firewall traversal, e.g. tunnelling or, creating pinholes | H04L63/00 | In the scheme | 12,381 |
| H04L63/108 | Network architectures or network communication protocols for network security for controlling access to devices or network resources when the policy decisions are valid for a limited amount of time | H04L63/00 | In the scheme | 12,376 |
| G06F21/71 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information | G06F21/70 | In the scheme | 11,755 |
| H04L63/1483 | Countermeasures against malicious traffic service impersonation, e.g. phishing, pharming or web spoofing | H04L63/00 | In the scheme | 11,725 |
| H04W12/72 | Subscriber identity | H04W12/00 | In the scheme | 11,466 |
| H04L63/04 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks | H04L63/00 | In the scheme | 11,356 |
| G06F21/608 | Secure printing | G06F21/60 | In the scheme | 11,268 |
| G06F21/84 | Protecting input, output or interconnection devices output devices, e.g. displays or monitors | G06F21/70 | In the scheme | 11,136 |
| H04W12/71 | Hardware identity | H04W12/00 | In the scheme | 11,124 |
| G06F21/54 | Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs | G06F21/50 | In the scheme | 10,635 |
| H04L63/14 | Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic | H04L63/00 | In the scheme | 10,617 |
| H04W12/037 | Protecting confidentiality, e.g. by encryption of the control plane, e.g. signalling traffic | H04W12/00 | In the scheme | 10,415 |
| H04L63/0209 | Architectural arrangements, e.g. perimeter networks or demilitarized zones | H04L63/00 | In the scheme | 10,269 |
| H04L63/164 | Implementing security features at a particular protocol layer at the network layer | H04L63/00 | In the scheme | 9,965 |
| G06F21/73 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by creating or determining hardware identification, e.g. serial numbers | G06F21/70 | In the scheme | 9,946 |
| G06F21/86 | Secure or tamper-resistant housings | G06F21/70 | In the scheme | 9,574 |
| H04L63/0421 | Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer | H04L63/00 | In the scheme | 9,455 |
| H04L63/0407 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden | H04L63/00 | In the scheme | 9,394 |
| G06F21/83 | Protecting input, output or interconnection devices input devices, e.g. keyboards, mice or controllers thereof | G06F21/70 | In the scheme | 9,082 |
| H04W12/084 | Access security using delegated authorisation, e.g. open authorisation [OAuth] protocol | H04W12/00 | In the scheme | 9,052 |
| H04L63/0245 | Filtering by information in the payload | H04L63/00 | In the scheme | 8,950 |
| G06F21/88 | Detecting or preventing theft or loss | G06F21/70 | In the scheme | 8,929 |
| H04W12/37 | Managing security policies for mobile devices or for controlling mobile applications | H04W12/00 | In the scheme | 8,879 |
| H04W12/61 | Time-dependent | H04W12/00 | In the scheme | 8,682 |
| G06F21/562 | Static detection | G06F21/50 | In the scheme | 8,641 |
| G06F21/50 | Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems | G06F21/50 | In the scheme | 8,101 |
| H04W12/126 | Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning | H04W12/00 | In the scheme | 7,886 |
| H04W12/77 | Graphical identity | H04W12/00 | In the scheme | 7,786 |
| H04L63/068 | Network architectures or network communication protocols for network security for supporting key management in a packet data network using time-dependent keys, e.g. periodically changing keys | H04L63/00 | In the scheme | 7,692 |
| H04W12/0433 | Key management protocols | H04W12/00 | In the scheme | 7,634 |
| H04L63/045 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption | H04L63/00 | In the scheme | 7,617 |
| G06F21/563 | Static detection by source code analysis | G06F21/50 | In the scheme | 7,399 |
| H04L63/162 | Implementing security features at a particular protocol layer at the data link layer | H04L63/00 | In the scheme | 7,352 |
| H04W12/082 | Access security using revocation of authorisation | H04W12/00 | In the scheme | 7,302 |
| H04W12/088 | Access security using filters or firewalls | H04W12/00 | In the scheme | 7,095 |
| H04L63/0492 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload by using a location-limited connection, e.g. near-field communication or limited proximity of entities | H04L63/00 | In the scheme | 7,031 |
| H04L63/065 | Network architectures or network communication protocols for network security for supporting key management in a packet data network for group communications | H04L63/00 | In the scheme | 6,879 |
| H04L63/1491 | Countermeasures against malicious traffic using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment | H04L63/00 | In the scheme | 6,723 |
| H04W12/009 | Security arrangements; Authentication; Protecting privacy or anonymity specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks | H04W12/00 | In the scheme | 6,442 |
| H04L63/00 | Network architectures or network communication protocols for network security | H04L63/00 | In the scheme | 5,786 |
| H04W12/00 | Security arrangements; Authentication; Protecting privacy or anonymity | H04W12/00 | In the scheme | 5,697 |
| H04W12/086 | Access security using security domains | H04W12/00 | In the scheme | 5,620 |
| G06F21/80 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in storage media based on magnetic or optical technology, e.g. disks with sectors | G06F21/70 | In the scheme | 5,516 |
| H04W12/108 | Source integrity | H04W12/00 | In the scheme | 5,476 |
| H04W12/64 | Location-dependent; Proximity-dependent using geofenced areas | H04W12/00 | In the scheme | 5,439 |
| H04L63/30 | Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information | H04L63/00 | In the scheme | 5,373 |
| H04W12/128 | Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware | H04W12/00 | In the scheme | 5,308 |
| H04W12/40 | Security arrangements using identity modules | H04W12/00 | In the scheme | 5,296 |
| H04W12/33 | Security of mobile devices; Security of mobile applications using wearable devices, e.g. using a smartwatch or smart-glasses | H04W12/00 | In the scheme | 5,208 |
| H04W12/68 | Gesture-dependent or behaviour-dependent | H04W12/00 | In the scheme | 5,137 |
| G06F21/77 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in smart cards | G06F21/70 | In the scheme | 5,078 |
| G06F21/564 | Static detection by virus signature recognition | G06F21/50 | In the scheme | 5,037 |
| H04L63/0485 | Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up | H04L63/00 | In the scheme | 5,017 |
| H04W12/47 | Security arrangements using identity modules using near field communication [NFC] or radio frequency identification [RFID] modules | H04W12/00 | In the scheme | 4,970 |
| H04W12/69 | Identity-dependent | H04W12/00 | In the scheme | 4,967 |
| H04W12/0471 | Key exchange | H04W12/00 | In the scheme | 4,962 |
| G06F21/568 | Computer malware detection or handling, e.g. anti-virus arrangements eliminating virus, restoring damaged files | G06F21/50 | In the scheme | 4,897 |
| H04L63/0478 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key | H04L63/00 | In the scheme | 4,738 |
| H04W12/65 | Environment-dependent, e.g. using captured environmental data | H04W12/00 | In the scheme | 4,673 |
| G06F21/76 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in application-specific integrated circuits [ASIC] or field-programmable devices, e.g. field-programmable gate arrays [FPGA] or programmable logic devices [PLD] | G06F21/70 | In the scheme | 4,618 |
| H04L63/0464 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it | H04L63/00 | In the scheme | 4,589 |
| G06F21/556 | Detecting local intrusion or implementing counter-measures involving covert channels, i.e. data leakage between processes | G06F21/50 | In the scheme | 4,473 |
| H04W12/30 | Security of mobile devices; Security of mobile applications | H04W12/00 | In the scheme | 4,419 |
| H04L63/306 | Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information intercepting packet switched data communications, e.g. Web, Internet or IMS communications | H04L63/00 | In the scheme | 4,409 |
| H04L63/0218 | Distributed architectures, e.g. distributed firewalls | H04L63/00 | In the scheme | 4,373 |
| G06F21/6281 | Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database at program execution time, where the protection is within the operating system | G06F21/60 | In the scheme | 4,304 |
| G06F21/565 | Static detection by checking file integrity | G06F21/50 | In the scheme | 4,290 |
| H04L63/0471 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding | H04L63/00 | In the scheme | 4,272 |
| G06F21/81 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations | G06F21/70 | In the scheme | 4,213 |
| H04L63/0414 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication | H04L63/00 | In the scheme | 4,193 |
| G06F21/755 | Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation with measures against power attack | G06F21/70 | In the scheme | 4,164 |
| G06F21/6272 | Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database by registering files or documents with a third party | G06F21/60 | In the scheme | 3,865 |
| G06F21/567 | Computer malware detection or handling, e.g. anti-virus arrangements using dedicated hardware | G06F21/50 | In the scheme | 3,854 |
| H04W12/75 | Temporary identity | H04W12/00 | In the scheme | 3,837 |
| H04W12/121 | Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS] | H04W12/00 | In the scheme | 3,660 |
| H04L63/0457 | Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption | H04L63/00 | In the scheme | 3,644 |