16263results about "User identity/authority verification" patented technology

A method is provided for improving image classification accuracy in few-shot learning scenarios, where only a limited number of training examples are available. The method combines the use of Gabor filters and convolutional neural networks (CNNs) to extract detailed texture and orientation features from images. These features are then enhanced through global average pooling, aggregated into comprehensive feature vectors, and refined using an attention mechanism that identifies and emphasizes the most relevant features for classification. Masks generated from this attention process selectively enhance critical features, which, after optional re-encoding, are used to train a classifier via a metric learning approach. This method aims to increase feature separability and classification performance, facilitating more accurate classification of new images with minimal training data.

The invention discloses a cross-domain computing task processing method, a program product, equipment and a medium, and relates to the technical field of cloud computing. The method comprises the following steps: determining a computing node for executing a cross-domain computing task in a cross-domain collaborative scene, and generating an identity certificate bound with the computing node based on a hardware credible state of the node; collecting security policies of a plurality of management domains for conflict detection and decision, and generating a conflict-free session policy; scheduling the cross-domain computing task to a target computing node meeting a preset credible requirement, and issuing a revocable dynamic session token; and recording the operation information of the cross-domain calculation task in the whole life cycle as an audit event, and generating a chained audit log which is linked by the hash value and is digitally signed through a preset verifiable audit interface. By means of the technical scheme, it can be ensured that the whole life cycle of any computing task meets the closed-loop safety requirements of identity credibility, permission controllability, execution propriability and behavior traceability in the complex distributed computing environment.

The invention relates to the technical field of management of the Internet of Things, and discloses a security control method and system for remote control of the Internet of Things, and the system comprises a security remote control platform, a zero-trust gateway, an authentication module, a security policy engine, edge proxy equipment and an encryption communication module. And the authentication module is used for performing identity authentication on the equipment and the user. The security policy engine dynamic access control table comprises access rule entries and associated signature information, and is issued to the edge proxy device through the zero-trust gateway. And the edge proxy device stores the dynamic access control table, verifies the signature information based on the platform public key, and performs matching and verification according to the access rule entry when receiving the control instruction. And the encryption communication module is used for performing encryption transmission on the access control table, the control instruction and the execution result. According to the invention, the whole process of remote control of the Internet of Things is dynamic, secure and credible, and the anti-attack capability and operation reliability of the system are effectively improved.

Methods and systems are presented for using blockchain technologies to manage the life cycle and authentication of artificial intelligence (AI) agents. When an AI agent is created, the AI agent registers itself with an authentication system. The authentication system creates identity information for the AI agent and store on a blockchain. The identity information is used to track the changes of the AI agent through its life cycle, including upgrading of the binary code, transfer of ownership, change of a delegator, and others. When the AI agent requests for access of one or more resources, the authentication system uses the information stored on the blockchain to authenticate the AI agent before granting the AI agent access to the one or more resources.

The invention relates to a system for realizing financial agent credible authentication based on distributed digital identity, which comprises a base layer, an identity layer, an authority layer and a business layer, and is characterized in that the base layer integrates distributed digital identity authentication service, subscription service and distributed storage service, and constructs a credible collaboration framework covering the whole life cycle; the identity layer is configured with a DID generation module, a DID verification module and a DID query module; the authority layer deploys a VC signing and issuing module, a VC verification module and a digital envelope module; the business layer comprises a client and a server between security institutions, and carries out cross-institution data calling through mutual trust verification and MCP message interaction. According to the system for realizing the credible authentication of the financial agent based on the distributed digital identity, through the fusion innovation of the distributed digital identity, the verifiable certificate and the block chain technology, the decentralization of identity authentication, the dynamic authority management and the full link of auditing and tracing are realized in a security industry agent cooperation scene.

The present invention relates to a system and method for cross-domain predictive modeling using Bedrock-based foundation models and blockchain-anchored data. The invention integrates large-scale foundation model reasoning with distributed ledger-based data provenance to enable verifiable, secure, and explainable predictive analytics across heterogeneous domains such as finance, healthcare, logistics, and environmental systems. The system comprises a data ingestion unit for receiving and normalizing multi-domain datasets, a blockchain anchoring unit for generating cryptographic hashes and recording data provenance into a distributed ledger, a cross-domain harmonization processor for aligning heterogeneous feature representations into a unified latent space, a foundation model processor configured to execute Bedrock-based predictive inference with adaptive domain contextualization, a verification processor for validating predictions against blockchain-anchored ground truths, and a governance processor for maintaining immutable audit trails of model evolution.

The invention discloses an industrial equipment fault prediction system based on federated learning and a privacy protection method, and relates to the field of industrial equipment fault prediction. The data acquisition preprocessing module extracts fault features through compressed sensing downsampling, screens and uploads the fault features; the federal learning training module adopts a layered architecture and a dynamic algorithm to schedule a learning rate; the fault prediction and diagnosis module constructs a space-time diagram neural network and fuses a physical model to improve generalization; the privacy protection security communication module performs homomorphic encryption storage and zero-knowledge proof verification update; the knowledge graph construction reasoning module constructs a dynamic graph, locates a fault root cause through causal reasoning, and supports cross-device knowledge migration. By adopting the quantum and federated learning technology, the industrial equipment fault diagnosis accuracy is high, the attack resistance is high, the encryption efficiency is greatly improved, the model training time is shortened, cross-equipment knowledge migration is realized, the operation and maintenance cost is reduced, and the intelligent operation and maintenance development of the industrial equipment is promoted.

An ID token wirelessly communicates a battery voltage to a vehicle gateway via short-range communication. A battery health may be determined based on the current battery voltage and one or more previous battery voltages associated with ID token. Replacement of the ID token may be initiated based on the battery health to avoid communication failures by the ID token due to insufficient battery charge.

The invention relates to the technical field of network security, in particular to a dynamic access blocking method based on zero trust. Comprising the following steps: step 1, collecting whole network flow data in real time in a bypass monitoring mode through a flow mirroring function of a network switch, performing deep packet inspection analysis on the collected original flow data, and extracting network flow characteristic parameters; 2, maintaining a dynamic identity information base; 3, performing real-time behavior analysis on each network session; 4, according to the risk assessment result and the real-time security context, generating a dynamic access control strategy based on a minimum permission principle; 5, implementing access control at the network execution point; and 6, continuously monitoring the network flow and the strategy execution effect, collecting feedback data, optimizing the risk assessment model and the strategy generation algorithm based on the feedback data, and forming closed-loop control. By dynamically updating the identity and asset information, the system can identify new assets or changes in real time, so that the adaptability and response capability of a network environment are improved.

A method for packaging digital evidence for long term validation comprises forming a package of a digital document (10), an electronic signature (12) for the document (10), together with evidence (16) of the authority of the signature in the document and a time stamp (20) indicating when the document was digitally signed. All of the pieces form parts of the packaged evidence.

Described herein are techniques for secure orchestration and publication control among agents (e.g., distributed agents), such as non-human identities (NHI), using cryptographic certificates, trust rules, and / or an Information-Centric Networking (ICN) architecture. In an example, a framework establishes identity for human and non-human identities-such as AI agents, services, and autonomous workloads—via cryptographically signed publications and / or collections. Trust policies can be defined and enforced through signed, verifiable trust rules, enabling access control, provenance validation, and / or policy delegation across federated domains. The disclosed techniques can enable multi-agent systems (MAS), zero-trust enforcement, and / or secure cross-domain communication using ICN-named role-based certificates and programmable trust shims. The disclosed techniques can also enable decentralized validation and selective replication of data while maintaining traceability and fine-grained control of agent behavior.

The invention belongs to the technical field of block chains, and discloses a block chain-based digital identity authentication and traceability method, which comprises the following steps: acquiring user biological characteristic data, generating a characteristic root value, splitting key shares, and generating a key share set through block chain evidence storage; each distributed node generates an identity private key and an on-chain identity template, and associates the on-chain identity template with a chain identifier to form a multi-chain identity key pool and an on-chain identity template library; dividing a core chain and an edge chain, generating a zero-knowledge proof, generating a cross-chain certificate after verification of the core chain, sending an encryption result to the edge chain, and generating a temporary authority token; writing traceability information into the edge chain, aggregating multi-chain information through cross-chain traceability, and generating a traceability information chain and a cross-chain traceability validity proof; and recording a key use track and identifying a risk behavior, triggering a key limiting mechanism, dynamically updating an identity template permission on the chain, reversely optimizing key related parameters, and forming a closed-loop iterative identity and traceability management link.

The invention belongs to the field of network security, and relates to a trusted management and control network platform construction method and device, electronic equipment and a storage medium, the method comprises the following steps: constructing a basic security architecture and a trusted base, the basic security architecture being used for providing a unified root of trust and a management core for collaborative operation of upper security components; based on the basic security architecture and the trusted base, implementing multi-dimensional trusted verification and dynamic access control; an intelligent boundary protection and depth detection system is deployed and is used for constructing an intelligent, three-dimensional and self-adaptive security defense line at the boundary of each region of the network, and various known and unknown threats can be identified and blocked; constructing a unified secure communication tunnel and a cross-domain transmission guarantee; defining and realizing a standardized security function interface and a collaboration protocol; and a continuous trust evaluation and automatic operation management and control closed loop is established. The overall security is enhanced, the secure transmission of data is ensured, the compatibility and collaboration of the system are improved, and the security operation intelligence is realized.

The invention provides a block chain-based electronic evidence full-life-cycle evidence storage and tracing method and system, and relates to the technical field of block chains. The method comprises the steps of metadata collection, initial evidence storage, incremental evidence storage, operation chain construction, traceability request analysis, target block positioning, intelligent contract verification and the like, and through Byzantine consensus, a Merkel tree structure and judicial node participation, credible recording on a whole process chain of evidence from generation to verification is achieved. Therefore, the electronic evidence has the capabilities of right confirmation, tampering prevention, traceability and judicial credit collection.

The present invention relates to the technical field of dynamic carbon sink accounting, and specifically relates to a dynamic carbon sink accounting system based on multi-modal AI remote sensing monitoring and blockchain-based evidence storage. The system collects optical remote sensing, radar, photosynthetically active radiation and meteorological data, performs unified spatiotemporal calibration on the data, and then fuses the calibrated data by means of a cross-modal attention mechanism, so as to generate multi-modal feature vectors, and inputs same into a TCN model for carbon stock and trend prediction. A prediction result and metadata are uploaded to a blockchain by means of smart contracts, so as to generate a carbon sink NFT including a geographic fence and a confidence level, thereby realizing trusted evidence storage. A residual mapping function is established in view of on-chain historical data, so as to dynamically optimize the model, and improve the accounting accuracy. The system improves the fusion capability and prediction accuracy, and enhances the credibility and transparency of carbon asset management and transactions.

The invention discloses a server BMC dynamic security authentication and firmware protection method and system based on a hardware root of trust, relates to the technical field of server remote management security, and discloses the server BMC dynamic security authentication and firmware protection method and system based on the hardware root of trust, which realize dynamic authentication by generating a device fingerprint through a security chip. According to the method, a multi-layer protection mechanism is constructed in combination with fragment encryption, differential hash check and memory integrity verification, and meanwhile, the data credibility is enhanced by using a block chain storage key hash value, so that the problems of static authentication risk, insufficient firmware tampering detection and missing of a trust chain in a traditional scheme are effectively solved, and the security protection capability of a BMC system can be improved.

The invention discloses a large language model prison break attack defense method and system, and belongs to the technical field of artificial intelligence security, and the method comprises the following steps: 1, receiving a user text prompt; 2, calculating the similarity between the input text and the historical attack text; 3, high similarity is directly rejected, and low similarity enters a compression process; 4, extracting text features and calculating a token retention probability; 5, selecting a high-probability token to form a compression prompt; 6, transmitting the intention information to the target model; and step 7, generating a safety response. According to the method, the technical problems of high calculation overhead, high cost, lagging of defense rules and inconsistent user experience in the prior art are solved, only a small amount of additional calculation overhead and token cost are needed for implementation, hostile attacks can be effectively defended, and the practicability of a large language model is not influenced.

Systems, apparatus, and methods of managing access to private data via tokens are disclosed. The disclosed techniques provide for constructing digital tokens that represent a right-to-access private data where the tokens can be managed as individual objects. Further, such digital access tokens (DATs) can be recorded on a notarized ledger, a blockchain for example. Additionally, the rights-to-access can be embodied as a non-fungible token (NFT), which could further include support for establishing homomorphic encryption workspaces in which private data can be accessed or manipulated without exposing the private data.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

Systems and methods for securing transactions in accordance with various embodiments of the invention are illustrated. One embodiment includes a method for confirming token ownership rights. The method generates a pre-image value using a random number generator. The method generates an action request that corresponds to an action performed cryptographic token(s). The method derives a commit output based on the pre-image value. The method generates a commit request that obfuscates the action request based on the commit output and submits the commit request to an immutable ledger. The method receives a confirmation when the commit request is approved by the ledger. When a reveal request referencing the commit output is published, the method receives a confirmation of at least one of: the reveal request being published, that the reveal request comprises a reference to the commit output, or that the action request has been approved.

The invention discloses a medical data privacy protection method and device, and relates to the field of medical data security. The method comprises the following steps: acquiring medical data feature information of a plurality of medical institutions to form a medical data feature map; constructing a hierarchical federal learning framework based on the medical data characteristic spectrum; performing parameter aggregation optimization through a convolution weighting method of a recursive context guide network; a dynamic differential privacy budget allocation strategy is combined with a multi-first-choice Lambda weighted list DPO technology to optimize a noise injection process, and adaptive differential privacy protection is realized; and in combination with a homomorphic encryption technology, performing multi-party calculation through a security aggregation protocol to obtain a medical data privacy protection analysis system. According to the method, efficient cooperative analysis is carried out while the privacy of the medical data is protected, the problems that in the prior art, simple parameter exchange may cause model inversion attack, special optimization for medical scenes is lacked, and a supervision and auditing mechanism is imperfect are solved, and the utilization efficiency and safety of the medical data are improved.

The invention relates to the technical field of network and information security, in particular to a zero-trust multi-party security data exchange method, which comprises the following steps of: generating a zero-trust token and a capability authorization bill and constructing context description data; authentication encryption is performed on the plaintext fragment, attribute-based encryption is performed on the data one-time key, and a policy bearing ciphertext container is assembled; in the trusted execution environment, authentication decryption is completed through a one-time secret key of data recovery through joint challenge and threshold deblocking, or strategy migration and transfer are achieved through proxy re-encryption; and aggregating the decryption event and the forwarding event by vector commitment, generating a time anchor, and mapping the time anchor into a next round of random base. According to the invention, fine-grained authorization of the key layer, no plaintext transfer, event-level verifiable auditing and rapid revocation are realized.

The invention discloses a logistics order management system and method, and belongs to the technical field of logistics information management. The method comprises the following steps: step 1, generating a unique digital fingerprint for each logistics order; step 2, performing multi-level security encryption and state synchronization management on order information; 3, constructing a digital twinborn model corresponding to the order, collecting and preprocessing key data in real time and visually displaying the key data in the logistics process, and realizing dynamic monitoring of the whole process; step 4, based on an order state consensus mechanism, automatically matching optimal logistics resources and driving an order processing flow, and generating a verifiable order execution proof chain at the same time; and step 5, performing intelligent analysis and adaptive optimization on the full-life-cycle data of the order, and continuously improving the overall efficiency and precision of logistics management.

The embodiment of the invention provides a quantum key distribution method based on a cryptographic infrastructure system, relates to the technical field of quantum secret communication, and provides a quantum key distribution method based on fusion of quantum key distribution and post quantum cryptography, which integrates a classical commercial cryptographic algorithm, a PQC post quantum cryptographic algorithm and quantum key distribution. A QKD-based quantum key secure distribution process combining SM2 and PQC mixed signature, SM2 and PQC mixed key packaging, PQC collaborative signature, PQC collaborative decryption, token access and other cryptographic technologies is designed, and anti-quantum cryptographic capability support is provided for voice applications through collaborative signature and collaborative decryption, so that the security of software for realizing a PQC cryptographic algorithm is improved, and the security of the PQC cryptographic algorithm is improved. Moreover, the software implementation mode does not have the inherent security problem of the IP, the dependency on the server is low, and the standardization program is high.

The invention relates to the technical field of data encryption and transmission, in particular to a power grid cross-domain operation and maintenance data secure transmission method and system based on encryption, and the method comprises the steps: pre-judging a current risk through a historical network security event, dividing a network environment into different risk intervals based on a risk level evaluation value, encryption strategies with different intensities are correspondingly matched, so that refined security management and control with higher risk and stronger protection are realized; a triple progressive identity authentication system of an equipment layer, a dynamic layer and a biological layer is constructed, a dynamic permission management and control mechanism driven by identity attributes and risk levels is constructed, a basic permission boundary is determined based on inherent identity attributes of an operation and maintenance terminal, and permission strength and validity period are dynamically adjusted in combination with a risk level evaluation value. And finally, generating an access control strategy only adapted to the current terminal, the current risk and the current access request, so as to perform data encryption and transmission through the target encryption strategy and the access control strategy, thereby ensuring the security of data transmission.

The invention relates to a secure communication method for an edge node and terminal equipment based on dynamic key negotiation. The method comprises the following steps: the terminal equipment sends an initial signal when initiating a communication request; the edge node generates a scenarized first key negotiation parameter and feeds back the scenarized first key negotiation parameter after passing dual identity and state verification; after the terminal device decrypts the parameter, a dynamic entropy value is collected by combining a network adaptive sensor, and a second key negotiation parameter associated with the first parameter feature is generated; the two parties calculate session keys based on an ECDH algorithm, and the consistency of the keys is ensured through dynamic entropy verification and Hash comparison; and after the key negotiation succeeds, entering a hierarchical encrypted data transmission stage, and dynamically updating a session key based on a multi-dimensional trigger mechanism. According to the method, through hardware credibility verification, a scenarized key strategy, dynamic entropy enhancement and national secret algorithm adaptation, dynamic management of keys and adaptive matching of terminal resources are achieved, attacks such as equipment counterfeiting and parameter tampering are effectively resisted, and the high-security and compliance requirements in the fields of industrial control and the like are met.

The invention is suitable for the technical field of data asset management, and provides a data asset management system based on a block chain and big data analysis, and the system comprises a first terminal which carries out the storage of the ownership information of data assets through a block chain network, and generates a storage data package; generating an evaluation result based on a preset technical index analysis model; writing the hash value of the evaluation result into transaction data of the main chain of the block chain, and generating an evidence storage voucher matched with the block chain transaction; an interaction data sequence is packaged for identity signature, encryption and compression to generate a target code stream, and the target code stream is sent to the second terminal; the second terminal decrypts the encrypted data in the target code stream by using a private key, decompresses the data by using a compression algorithm matched with the first terminal, and restores the data into an interactive data sequence; verifying the access authority and the transaction condition of the evidence storage data packet; checking the anchoring state of the evidence storage voucher on the main chain of the block chain; and the data transaction is completed, the data asset state report is generated, and the data element marketization configuration efficiency is improved.

A computerized platform enables secure, policy-compliant creation, governance, and monetization of digital artifacts produced by Al-driven “persona” agents in regulated domains (e.g., healthcare, finance). For each agent session, a federated compliance-token generator issues a cryptographically signed token embedding the full delegation chain, credential lineage, real-time policy snapshot, monetization rules, expiration and revocation data. As artifacts or workflows cross organizational or jurisdictional boundaries, a token inheritance module can subdivide, transfer, renew, or revoke the token while appending each event to an immutable, cryptographically linked audit trail. Every agent output is encapsulated as a digitally signed artifact that is indelibly linked to its originating compliance token and enriched with provenance, consent, and service metadata. A permissioned blockchain (or sharded distributed ledger) functions as an asset registry that immutably stores artifacts, tokens, and chronological records of creation, access, transfer, consent change, and policy updates. A smart-contract engine automates revenue allocation and settlement, ensuring continuous traceability, privacy protection, and financial compliance across institutional boundaries.

The invention provides a cross-park enterprise data collaborative analysis method based on federated learning, and relates to the technical field of distributed machine learning and data security, and the method comprises the steps that a central server distributes an initial global model and configuration parameters to each park node; the nodes execute local data feature alignment to generate standardized feature vectors; calculating dynamic collaborative factors of local data and global distribution; adjusting a training strategy based on the collaborative factors and updating model parameters; collecting model updating through an encrypted channel, and screening effective updating by adopting a dynamic aggregation offset threshold value; performing weighted aggregation to generate a new global model; and terminating the process when the cross-park convergence condition is met or the maximum round is reached. According to the method, heterogeneous data differences are eliminated through a dynamic feature alignment mechanism, dual-channel collaborative evaluation and adaptive security protection are combined, multi-park collaborative modeling efficiency and robustness are remarkably improved on the premise of guaranteeing data sovereignty, and the problems of feature space splitting, weak attack protection and node contribution imbalance are solved.

The invention provides an Internet of Vehicles vulnerability management method, system, device and medium based on a block chain, and relates to the technical field of vehicle networks, the method can comprehensively identify potential safety risks of vehicles through a dynamic and static combined vulnerability detection mechanism, and generates a structured vulnerability report; hash abstract chaining evidence storage is performed on key data of reports and subsequent repair links by using a block chain, so that the whole process of vulnerability discovery, analysis and repair is ensured not to be tampered and traceable, and the authenticity and credibility of data are improved; the integrity of the report is verified at the cloud end, and an AI analysis engine is combined to associate a CVE database and threat intelligence, so that intelligent generation and decision support of a repair scheme are realized; the hash abstract on the chain of the OTA patch is verified at the vehicle end, so that the credibility of the patch source and the integrity of the content are guaranteed; and finally, through feedback of an installation result and secondary uplink archiving, complete closed-loop management from vulnerability discovery to repair verification is formed.