36739results about "User identity/authority verification" patented technology

The present disclosure relates to a blockchain-based authentication system for electric vehicles and drones, and a method for authenticating electric vehicles or drones in a smart city. The proposed blockchain-based authentication system enhances security, privacy, and scalability for electric vehicles (EVs) and drones in smart city environments. It employs a consortium blockchain managed by city authorities and stakeholders, utilizing smart contracts for identity registration, credential issuance, and access control. Device nodes store cryptographic keys securely, while an optional authentication server facilitates off-chain integration. The authentication operation of the system includes, ensuring tamper-proof identity verification through on-chain validation. Authentication attempts are immutably recorded for auditing and anomaly detection. By eliminating single points of failure and strengthening data privacy, this decentralized authentication framework offers a scalable and secure solution for integrating EVs and drones into smart city infrastructures.

A system and method for an AI-controlled sensor network for threat mapping and characterization. The system deploys a network of honeypots and sensors across various geographic locations and network segments, collecting and aggregating data on network traffic and potential threats. An AI orchestrator analyzes this data using advanced machine learning models, generating dynamic honeypot profiles and a comprehensive threat landscape. The system can adapt in real-time to emerging threats, optimize resource allocation, and provide actionable intelligence. By correlating data across multiple points, the system offers enhanced threat detection capabilities and proactive cybersecurity measures, surpassing traditional security information and event management (SIEM) tools.

The invention relates to the technical field of intelligent decision making, in particular to a simulation system intelligent decision making method and system based on a knowledge graph and federated learning, and the method comprises the steps that each simulation node constructs a knowledge graph sub-graph based on local dynamic data, and multi-modal semantic representation is generated through space-time modeling and event chain reasoning; the federal center initializes a simulation decision model architecture and issues the simulation decision model architecture to each node; each node uses a local knowledge graph to train a time sequence diagram network, extracts an equipment degradation path and abnormal propagation characteristics, and uploads gradient parameters in combination with homomorphic encryption; the federation center fuses the multi-node model through a dynamic weight aggregation algorithm to generate a global decision model; and driving knowledge graph evolution based on real-time data, and performing causal reasoning and decision optimization on an event chain through a federal model. According to the method, the problem of insufficient dynamic decision adaptability in a multi-source data island and privacy sensitive scene in a simulation system is solved.

The invention discloses a dynamic sensitive data outbound risk assessment method and system based on multi-source risk information in the technical field of data cross-border. The system is mainly composed of a multi-source risk information acquisition module, a dynamic security identifier generation module, a risk collaborative assessment engine, a dynamic weight adjustment module, a disposal range dynamic calculation module and a flexible emergency disposal module, and an acquisition-identifier-assessment-calculation-disposal full-process closed-loop architecture is formed. A full-process closed-loop processing framework of collection-identification-evaluation-calculation-disposal is innovatively proposed, and by combining a dynamic risk evaluation model, a reinforcement learning intelligent technology and a block chain evidence storage technology, the problems of insufficient dynamic nature, lack of collaboration and lack of closed-loop capability in the prior art are systematically solved; and high-precision evaluation, real-time response and traceable management and control of the cross-border data flow risk are realized.

The invention relates to the technical field of data processing, in particular to an artificial intelligence algorithm-oriented model encryption and privacy protection method, which comprises the following steps of: generating a privacy level mapping table through quantum feature extraction and multi-objective optimization, and dynamically screening node subsets with low delay and complementary data distribution by adopting a quantum annealing algorithm, a federated aggregation formula is improved by combining a weight prediction model of Bayesian optimization, and parameter conflicts caused by non-independent identically distributed data are relieved. For the balance problem of privacy protection and model precision, incremental update parameters are generated through quantum hash comparison, violation data streams are blocked in combination with anomaly detection of a quantum support vector machine, and an auditing chain drives a quantum hybrid optimization framework to synchronously adjust encryption strength and noise rules. And the closed loop iteration mechanism feeds back optimization parameters to the data preprocessing and encryption module to form full-link adaptive cooperation from feature dimension reduction, model training to reasoning output, so that global optimization of privacy protection and model effectiveness in a data heterogeneous scene is realized.

A computer-implemented method and system for privacy-preserving location verification in distributed networks comprises initializing a multi-modal biometric authentication system on a user device, generating cryptographic keys using a distributed key generation protocol, binding the cryptographic keys to biometric templates using a fuzzy vault scheme, constructing and broadcasting encrypted location beacons, and generating zero-knowledge proofs of location claims. The system includes user devices equipped with biometric sensors and verifier devices configured to validate location claims and maintain consensus in a blockchain network. The method implements real-time liveness detection for multiple biometric input types, executes fault-tolerant consensus algorithms with privacy preservation, and maintains a dual-scoring mechanism comprising device trust scores and user reputation scores. The system enables secure location verification while preserving user privacy through cryptographic protocols and biometric authentication in decentralized environments.

The invention provides a private domain live broadcast data storage and visitor authentication method and system based on a block chain, and relates to the technical field of data storage and access control, and the method comprises the steps: collecting multi-mode biological characteristic data of a visitor, carrying out the feature extraction and fusion through a deep neural network of a space-time attention mechanism, and carrying out the authentication of the visitor; authenticity verification is carried out in combination with an adversarial generative network, a dynamic identity token is generated, and a hash value of the dynamic identity token is written into the block chain. The method comprises the following steps: performing semantic analysis on live broadcast data flow through a self-adaptive content perception model, constructing a double-layer access control matrix according to a data sensitivity level and a credibility score, performing self-adaptive fragmentation and hierarchical encryption based on federated learning, and then storing. After an access request is subjected to identity verification, an optimal edge node is selected according to access authority and network performance parameters to construct multi-path transmission, and a transmission strategy is generated based on a service quality score and a data sensitivity level. And when the service quality is lower than a threshold value, triggering the smart contract to perform fault migration.

The invention relates to the technical field of medical terminal data secure transmission and real-time management and control, in particular to a bank medical intelligent terminal data secure transmission and real-time management and control system and method. The behavior analysis module is used for calculating threat indexes through federated learning, the strategy module is used for dynamically switching algorithms and isolating anomalies, and the audit module is used for block chain verification and zero knowledge verification to generate a report. According to the method, dynamic encryption and fragmentation cutting are driven through sensitivity grading labels, the accuracy of data protection is improved, a time sequence attack path is blocked based on cooperation of fragmentation time sequence reference and an encryption transmission protocol, and dual guarantee of decentralized auditing and tampering positioning is realized by combining block chain hash identification and zero-knowledge proof verification, so that the security of data protection is improved. And full-link safe transmission and real-time management and control requirements of medical terminal data are met.

The invention relates to the technical field of judicial data security, and discloses a judicial system confidential data security circulation method based on a block chain technology. Collecting multi-source judicial data, identifying sensitive information through a large language model, and performing differential privacy desensitization processing; constructing an SM4 encryption and TLS 1.3 end-to-end secure channel, generating a data hash fingerprint, and writing the data hash fingerprint into an alliance chain evidence based on a PBFT consensus mechanism; designing a multi-modal classification engine to perform feature extraction and intelligent classification; establishing a hybrid authority model to integrate an XACML strategy and a Kafka queue, and implementing dynamic authority control in combination with an RBAC / ABAC mechanism; a hierarchical encryption storage architecture is constructed, and homomorphic encryption retrieval and erasure code distributed storage are adopted; constructing a judicial knowledge graph based on a BERT model; and deploying a block chain auditing system, and combining LSTM anomaly detection and a DREAD risk assessment model to form a closed-loop risk control system. According to the method, the problems of security risk and privacy disclosure in judicial data cross-department circulation are solved.

The invention provides a block chain-based distributed device identity authentication and access control method and system, and relates to the technical field of block chains, and the method comprises the steps: generating a target device fingerprint by a to-be-accessed device based on a physical cloning-free function of the to-be-accessed device, binding the target device fingerprint with a device public key to generate device identity information, and sending the device identity information to the to-be-accessed device; carrying out block chain evidence storage on the equipment identity information through an identity authentication smart contract; the authentication node queries corresponding equipment identity information based on an equipment fingerprint sent by the to-be-accessed equipment, and verifies the digital signature in the access authentication request by using the equipment public key; the access device which passes the authentication and obtains the encrypted session key obtains an access control strategy pre-configured by an administrator through an access control smart contract; and when needing to access network resources, the access equipment accesses the network resources based on the access control strategy.

A method is provided for improving image classification accuracy in few-shot learning scenarios, where only a limited number of training examples are available. The method combines the use of Gabor filters and convolutional neural networks (CNNs) to extract detailed texture and orientation features from images. These features are then enhanced through global average pooling, aggregated into comprehensive feature vectors, and refined using an attention mechanism that identifies and emphasizes the most relevant features for classification. Masks generated from this attention process selectively enhance critical features, which, after optional re-encoding, are used to train a classifier via a metric learning approach. This method aims to increase feature separability and classification performance, facilitating more accurate classification of new images with minimal training data.

Systems and methods are described for transmitting broadcasts by Peripherals, receiving the broadcasts by Centrals, and communicating with a Backend by Centrals. Specifically, a Peripheral may generate and transmit an encrypted broadcast packet to a Central, the Central may transmit the encrypted observation information to the Backend, which may decrypt the broadcast packet. Additionally, a Central may transmit a request for authorization to connect to a Peripheral to the Backend. If authorized by the Backend, the Central may connect to the Peripheral. Further, a Central may receive a plurality of broadcasts over a period of time. The Central may store information about the broadcasts and, at the conclusion of the period of time, transmit the information about the broadcasts and the last-received broadcast to the Backend.

The present invention generally relates to computer systems, methods and program products that allow a digital asset exchange to provide an option to customers to lend all or a portion of the digital assets associated with at least a first blockchain and held by the exchange on behalf of the customer in exchange for payments such as interest.

The invention discloses a medical image encryption and secure storage method and system based on a block chain, and the method comprises the steps: obtaining the original data of a medical image, segmenting the original data of the medical image into a plurality of segments through a fragmentation technology, carrying out the encryption of each segment through a symmetric encryption algorithm, generating an encrypted segment set, and storing the encrypted segment set in a database; determining an integrity check value of the encrypted fragment set; according to the encrypted fragment set, adopting a distributed storage protocol to distribute each fragment to a plurality of storage nodes, recording a storage position and an integrity check value of each fragment to a block chain account book, and generating a storage index containing a storage path and check information; and establishing an access control strategy through the block chain smart contract, and if the obtained requester identity identifier and the authority level conform to the access control strategy, generating a dynamic authorization token including an access range and time limitation. According to the method, the privacy of the patient is protected, and meanwhile, the safety and availability of medical data are improved.

The invention relates to the technical field of computer network security and data transmission, and discloses a computer network security data transmission method and device, and the method comprises the steps: obtaining real-time threat intelligence data, a real-time packet loss rate and a real-time transmission performance parameter, carrying out the encryption, and obtaining encrypted fragmented data; inputting the real-time transmission performance parameters into a path performance evaluation model to obtain a path performance score; sorting according to the path performance score to obtain a transmission path set; according to the transmission path set, matching to obtain a sequence corresponding relation; generating complete transmission data according to the sequence corresponding relation; performing anti-attack optimization according to the real-time transmission performance parameters to obtain a link connection strategy; analyzing the link quality according to the real-time packet loss rate to obtain a transmission link quality score; and performing dynamic adjustment according to the transmission link quality score, the link connection strategy and the complete transmission data to obtain real-time transmission data. According to the method, real-time and complete computer network security data transmission can be realized.

Techniques for updating certificate bundles may include receiving, at an entity associated with a virtual cloud network, a certificate bundle that includes an updated set of certificate authority (CA) certificates. The techniques may include applying a validation process to an entity certificate based on the certificate bundle, with the entity certificate having been issued to the entity prior to the entity receiving the certificate bundle. The validation process may include validating, by the entity, a certificate chain that includes the entity certificate and a CA certificate included in the updated set of CA certificates. The techniques may include, responsive to validating the certificate chain, installing the certificate bundle in a storage medium associated with the entity, and utilizing, by the entity, the certificate bundle to authenticate at least one additional entity associated with the virtual cloud network.

The invention discloses a collaborative sharing method, system and device on an energy data chain fusing multi-party security calculation and zero knowledge proof and a storage medium, and belongs to the field of energy data security sharing and block chain privacy protection, and the method comprises the steps: executing desensitization processing on original data according to types, and generating a cryptographic commitment value and a data hash identifier; encrypting and fragmenting the desensitized data, registering a task structure body through an intelligent contract, and uploading the task structure body; and each node decrypts the ciphertext, executes calculation and generates a zero-knowledge proof, and submits the zero-knowledge proof to the block chain to be verified by the smart contract. According to the method, data privacy protection and result verifiability unification are realized, cross-mechanism cooperation efficiency is improved, an auditing system on a whole process chain is constructed, and safe sharing of energy data is guaranteed.

The invention discloses a big data auxiliary key generation method and system in communication data encryption transmission, and relates to the technical field of big data analysis and processing. The dynamic entropy source processing module is used for generating a high-randomness entropy pool by combining an information entropy quantification model and adopting a Shannon entropy and minimum entropy fusion algorithm; the anti-quantum key generation module is used for generating a dynamic variable-length key seed based on an entropy pool driven post-quantum cryptographic algorithm; the hierarchical key negotiation module adopts a clustering Diffie-Hellman protocol, dynamically divides negotiation according to network topology, and precomputes and reduces the load of a core network through edge nodes; and a lightweight verification and update module. According to the method, high-entropy sources such as environmental noise, user behaviors and equipment hardware fingerprints are fused with low-entropy sources such as network messages and sensor data, and an intelligent acquisition strategy and a nonlinear decorrelation technology are combined, so that the anti-quantum dynamic entropy pool is generated, and the randomness of a secret key and the reliability of the entropy sources are improved.

Systems and methods for decentralized data management across interoperable distributed platforms are disclosed. A computing system receives input data associated with a unique decentralized identifier (DID) representing an entity or event. The computing system segments the input data into encrypted data segments, each cryptographically linked to the DID, and distributes these encrypted segments across decentralized storage nodes according to a redundancy scheme. A cryptographic lineage record, including segment identifiers, timestamps, and hashes linked to the DID, is stored in a decentralized ledger. In response to authenticated access requests, the computing system reconstructs the input data by retrieving, decrypting, and cryptographically verifying the distributed data segments against the lineage record. Authorized entities access the reconstructed data through interfaces enforcing cryptographically secured access permissions defined within the decentralized ledger, providing enhanced security, provenance verification, and data resilience.

The invention discloses a cross-industry data security sharing method and system based on data desensitization and a medium, and relates to the related field of privacy computing, and the method comprises the following steps: carrying out dynamic desensitization processing on original data, generating a shared data set for real-time recording, constructing an access behavior characteristic spectrum to configure a dynamic access strategy, and establishing a third-party security data sharing platform, storing the shared data set in a trusted execution environment in a fragmented manner, obtaining fragmented encrypted data, executing a dynamic access strategy, performing conjoint analysis on the fragmented encrypted data through a security multi-party computing protocol, and generating a data security sharing suggestion. The technical problems that in cross-industry data sharing, the privacy leakage risk is high, the static desensitization rule is rigid, and the multi-party calculation efficiency is low are solved, and the technical effects of breaking data islands and constructing safe and mutual-trust data circulation ecology through fusion of dynamic hierarchical desensitization and a trusted execution environment are achieved.

Systems, methods, and computer-readable media for modeling cyber resilience data using cyber resilience identities and associated metadata are disclosed. A system can include one or more processing circuits configured to receive or identify cyber resilience data, encrypt a portion of the cyber resilience data, and generate a metadata object including metadata of cyber resilience data. The processing circuits can generate a cyber resilience identity including at least a link with the metadata object, a unique identifier (UID), and a performance event dataset. The processing circuits can encapsulate the cyber resilience identity within a control structure restricting one or more updates and redemptions of the metadata object, determine at least one access data structure being compatible with the control structure, and broadcast, using the control structure, the cyber resilience identity to a ledger or distributed ledger.

A method for verifying a worker agent includes receiving, by a core node, from a worker agent, a capability description describing a plurality of tasks and, for each of the plurality of tasks, (i) at least one parameter of the task and (ii) an outcome expected to be produced by performing the task. The method includes generating, based on the capability description, a plurality of request-output pairs, each representing a particular request and a corresponding baseline output expected to be produced upon processing the request. The core node receives, from the worker agent, a plurality of outputs, each of the plurality of outputs generated by the worker agent and corresponding to one of the plurality of request-output pairs. The core node compares the plurality of baseline outputs to the plurality of actual outputs to produce comparison output and determines whether to approve the worker agent based on the comparison output.

The invention discloses a nursing data sharing method and system based on the Internet of Things. The method comprises the steps that S1, multi-modal nursing data are collected in real time through a distributed Internet of Things terminal cluster, and a feature signal set is formed; s2, constructing a data coordination engine, executing federal learning preprocessing operation on the feature signal set, and forming a coordination signal flow; s3, dynamically calculating a data contribution degree weight and generating a verification signal chain; s4, monitoring vital sign abnormal indexes in the coordination signal flow in real time, and generating a trigger signal vector; and S5, updating incentive mechanism parameters according to the contribution degree voucher in the verification signal chain, optimizing a service quality strategy based on a network resource allocation scheme in the trigger signal vector, and forming a closed-loop control signal. According to the invention, the problem of data islanding effect in the medical care data sharing process can be solved.

The invention discloses a data security sharing method and system, and relates to the technical field of data security, and the method comprises the steps: receiving to-be-shared data uploaded by a data provider; fragmenting the data by adopting a biologically inspired adaptive fragmentation algorithm; generating a digital fingerprint for each fragment by using a multi-dimensional dynamic Hash algorithm; encrypting data fragments by adopting a post-quantum encryption algorithm and storing the data fragments in a decentralized network; recording the access authority, the digital fingerprint and the storage position information to a block chain security account book; when a data request is received, the access permission is verified; carrying out identity verification by adopting multi-mode biological feature recognition; after the verification is passed, obtaining a digital fingerprint and a storage position from the block chain; acquiring the encrypted fragments from the decentralized network and decrypting the encrypted fragments; verifying the integrity by using the digital fingerprint; and recombining the verified fragments to obtain complete data and returning the complete data to the requester. According to the method, efficient data sharing is realized while the data security is guaranteed, and the data value and privacy protection are effectively balanced.

Various aspects of methods, systems, and use cases for multi-entity (e.g., multi-tenant) edge computing deployments are disclosed. Among other examples, various configurations and features enable the management of resources (e.g., controlling and orchestrating hardware, acceleration, network, processing resource usage), security (e.g., secure execution and communication, isolation, conflicts), and service management (e.g., orchestration, connectivity, workload coordination), in edge computing deployments, such as by a plurality of edge nodes of an edge computing environment configured for executing workloads from among multiple tenants.

A distributed intelligent authentication method based on dynamic multi-modal fusion relates to the field of network security, and adopts an alliance chain + DAG hybrid block chain architecture, combines a threshold signature to realize secret key fragment management, and switches among PBFT, Raft and probabilistic algorithms through a dynamic consensus mechanism to improve authentication efficiency. The multi-mode authentication module is based on a dynamic weight distribution algorithm, integrates biological characteristics, behavior analysis, equipment fingerprints and environmental factors, and combines an LSTM-GAN model and a quantum random number driven challenge-response mechanism to realize zero-trust verification under environmental perception. The session management module generates a session key by using a chaotic mapping algorithm. In the aspect of privacy protection, CKKS homomorphic encryption, zero-knowledge proof and attribute-based encryption are fused. According to the method, the block chain technology, the secure multi-party computing technology, the machine learning technology and the quantum cryptography technology are fused, and a high-performance, high-security and strong-privacy-protection distributed authentication solution is provided.

Techniques are described for partitioning B-tree keys of file systems into key ranges for parallel processing in delta generation during file storage replications between file systems in different cloud infrastructure regions. In certain embodiments, a delta generation processing for cross-region replication may utilize a key-range splitting mechanism involving a recursive algorithm that partitions B-tree keys of a source file system into roughly equal-size key ranges. All the partitioned key ranges may be processed in parallel and concurrently by different processing threads, one thread per key range, to improve the performance of the delta generation and achieve scalability.

The invention discloses a trusted data space cross-domain collaborative analysis method based on privacy computing, which comprises the following steps: step 1, trusted data space construction: edge computing nodes are deployed in a plurality of data owners participating in cross-domain collaborative analysis, and each edge computing node is interconnected through a block chain network to form a distributed trusted data space; a strategy engine is configured in the trusted data space, and the strategy engine is used for defining a data use permission, a privacy protection level and a calculation task life cycle management rule; and step 2, dynamically selecting privacy computing protocols, and selecting at least one privacy computing protocol from a pre-configured protocol library according to the data type, privacy protection requirement and computing complexity of the collaborative analysis task. When the scheme is implemented, the data participates in calculation in a ciphertext or desensitization form in the whole process, and the original data is not out of the domain, so that the privacy compliance requirement is met; and data use rules are automatically executed through block chain evidence storage and the intelligent contract, so that malicious node tampering is prevented.

The invention belongs to the technical field of information security, and relates to a data encryption transmission method based on a zero-trust architecture, which comprises the following steps: verifying the identity of a user based on an RSA encryption algorithm; the identity of a user is tightly bound with authorized terminal equipment by combining a hardware fingerprint technology, and a hardware fingerprint, an operation environment parameter and a certificate serial number are combined to generate a dynamic identity token; a strategy engine is introduced to analyze network environment data, a data sensitivity level and a risk assessment level of computer password; dynamically selecting a proper encryption algorithm by combining a low-risk score threshold and a high-risk score threshold; establishing an independent encryption tunnel based on a software definition boundary, and limiting a data transmission path by following a minimum permission principle; and each data packet is subjected to dynamic identity token verification, and if an abnormal behavior is detected, a session is terminated and a secondary authentication process is started. The problem that a traditional encryption method is difficult to adapt to continuously changing network environments and data sensitivity levels can be solved.

The invention relates to the technical field of intelligent security operation and maintenance, in particular to an artificial intelligence network security system based on multi-modal large model training, which comprises a server fault diagnosis module, a network attack detection module, an endpoint security monitoring module, a key management optimization module and a threat analysis feedback module. According to the method, the fault prediction accuracy is improved through multi-dimensional data analysis, service interruption caused by sudden hardware faults is reduced, the network access frequency, source and instruction features are evaluated based on the server abnormality, the attack detection accuracy is improved, the misjudgment risk is reduced, the endpoint equipment execution behavior, resource calling and behavior sequence are extracted, and the service performance of the terminal equipment is improved. Fine-grained security monitoring is realized, attack traceability is enhanced, a key strategy is dynamically adjusted, security adaptability is improved, strategy lag risk is reduced, multi-level data is integrated to calculate threat behavior and attack fitting degree, threat assessment fineness and response speed are enhanced, and global security situation awareness is improved.