53results about How to "Avoid the risk of being stolen" patented technology

The invention discloses an NFC payment method. The method includes the steps that a first terminal receives input transaction data and NFC transaction instructions according to received outer instructions and outputs second information; a mobile terminal receives a radio frequency signal which is received from the first terminal and used for activating NFC payment; the mobile terminal is initialized according to initialization data from the first terminal, sends an initialization completion response to the first terminal and outputs first information; the mobile terminal collects biological characteristics of a user to obtain an image of the biological characteristics and carries out image process to extract first biological characteristic values; the mobile terminal compares the first biological characteristic values with second biological characteristic values included by pre-stored user information, and sends an authentication successful response to the first terminal when the first biological characteristic values are consistent with the second biological characteristic values; the first terminal interacts with a first server and the mobile terminal to complete NFC payment. According to the NFC payment method, the device, the mobile terminal and the system, safety can be improved.

The invention discloses a security certificate method based on fingerprint, cryptographic technology and fragile digital watermark, comprising the following steps: a sender collects a fingerprint image, calculates summary information of the fingerprint image and inserts the summary information, a secret key and digital information which is digitally signed and encrypted into the fingerprint image as a watermark; the fingerprint of the sender is collected, the fingerprint image inserted with the watermark is sent to a receiver after the fingerprint of the sender is qualified; after receiving information, the receiver firstly detects and verifies whether the fingerprint image is inserted with the digital watermark and whether the digital watermark is right or not so as to indentify identity authenticity; digital watermark information is extracted from the received image; the summary information of the fingerprint image from which the watermark is extracted is calculated; and the summary information is compared with the summary information of the fingerprint image recorded in the watermark information to approve information authenticity. The invention can effectively overcome the defects that the existing digital signature security certificate can not approve the legal KEY holder and the fingerprint in the fingerprint certificate is easy to clone and embezzle.

The invention discloses a method for increasing the security of a file encryption key in a trusted execution environment based on an encryption chip. The method comprises: integrating an encryption chip on a terminal device; controlling the encryption chip by a terminal device manufacturer to generate an encryption chip secret key as a secret key composition factor; generating a file encryption key protection key, used for protecting the file encryption key used when the file is encrypted in TEE service, and preventing problems that in the TEE service process, a chip manufacturer can completely decrypt the ciphertext data into a plaintext when leaving backdoor in the key generation process or performing inverse operation on the encryption key, and the sensitive data has the risk of being stolen. The security of the file encryption key is improved, and the autonomy and controllability of the terminal device manufacturer in encryption service are also improved. The embodiment is an improvement on the basis of an original TEE file encryption technology. The controllability of file encrypted storage and key algorithm is more conveniently realized under the condition that the encryptionand decryption efficiency of the original technology is not changed, and the security risk of key leakage is avoided.

The invention discloses an information processing method and device, and the method comprises the steps that a block chain node receives a digital asset processing request, and the digital asset processing request is used for requesting the authority of processing digital assets; under the condition that the block chain node receives the digital asset processing request, the block chain node sendsan authorization request to each electronic device in the M electronic devices, and the authorization request is used for requesting authorization processing of the digital asset; the blockchain nodedetermines that each electronic device in at least N electronic devices in the M electronic devices authorizes to process the digital asset, wherein M is greater than or equal to N; and the block chain node determines to obtain the authority of processing the digital asset. By adopting the method and the device, the efficiency of authorizing the digital assets can be effectively improved.

The embodiment of the invention discloses a method and system for logging in a client and a client. The method for logging in a client comprises: a logging-in verification request sent by a target client is received; according to the logging-in verification request, identity verification matching information of the target client is obtained; an associated logging-in verification request is submitted to a first server, so that the first server obtains logging-in verification information of the target client according to the associated logging-in verification request; the logging-in verification information, returned by the first server, of the target client is received; and the logging-in verification information of the target client is sent to the target client, so that the target client can log in a second server by using the logging-in verification information of the target client. According to the invention, rapid logging in of an application client can be realized and a risk of stealing logging-in verification information can be effectively eliminated, so that the logging-in security of the client can be improved.

The invention discloses a dynamic payment method and system. The method comprises the steps that S100, a client generates a dynamic code according to current time, a bank card serial number of a user and device identifier information of a client; S200, the client encrypts unique identifier information corresponding to a bank card plug-in in the client according to the generated dynamic code; S300, the client generates a dynamic bank card number according to the bank card serial number information in the client, the dynamic code and the encrypted unique identifier information in the step S200; and S400, a server performs verification according to the dynamic bank card number, and finishes payment when the verification succeeds, otherwise, returns to and executes the step S100. The purpose of the method is to generate the dynamic bank card number, and an offline authentication mode is adopted, so that the payment efficiency is improved and the use convenience is brought for users.

The embodiment of the invention discloses a data encryption method, a user terminal, a server and a system, and aims to enhance the security of data storage. The method is applied to a virtual desktopinfrastructure (VDI); the VDI comprises a user terminal and a server; and a virtual machine runs on the server. The method in the embodiment of the invention comprises the following steps that: the server receives a login request of the user terminal; the server verifies the login request, and launches the virtual machine; and the virtual machine of the server acquires a key from the user terminal, and encrypts or decrypts a data file which is mounted on the virtual machine. Through adoption of the data encryption method, the user terminal, the server and the system, encryption and decryptionof a virtual desktop personal disk can be controlled through a key on the terminal, and the key used for encrypting and decrypting the data file does not exist in the server, so that an administratorcan be prevented from letting out a secret by taking away a disk storing data and keys, and the security of data storage is enhanced.

The invention discloses a network identity authentication method. The method comprises the following steps: S100, receiving a user identity authentication request initiated by a network through an open license agreement; S200, initiating a biometric authentication request to an intelligent terminal of a user so that the user can perform the biometric recognition through the intelligent terminal; S300, receiving biometric authentication success information returned by the intelligent terminal when the biometric recognition is successful; and S400, returning the identity authentication success information to the network through the open license agreement. Furthermore, the invention further discloses a network identity authentication system and the intelligent terminal. By combining the biometric authentication and the open license agreement standard, the user identity authentication service is provided for the internet online resource, and the security and the reliability of performing the identity authentication in the internet by the user are improved.

A multi-layer data mapping authentication system has a real ID authentication server, a middle data mapping server and a terminal data mapping server. The real ID authentication server links to a private network and stores real IDs and the hidden codes, each of which corresponds to a unique real ID. The terminal data mapping server links to a public network and allows an end user to link so that the end user sends the terminal data mapping server a user's code and an one-time-password (OTP). Since the middle data mapping server links between the real ID authentication server and the terminal data mapping server, the end user only uses hidden code to generate the OTP and sends the user's code and the OTP to the public network. The terminal and middle data mapping servers are converts the user's code to the corresponding real ID of the end user in the private network to complete the authentication procedure. The real ID and hidden code is not sent at the public network and is not stolen.

The invention provides a video encryption method based on hyper-chaos system, and relates to the technical field of the image processing and secret communication. The method comprises the encryption process and the decryption process; the encryption process comprises the following steps: enabling a chaos secret communication system to achieve a synchronization state, and driving the system to generate an encryption initial scrambling sequence and an encryption initial scrambling matrix, and then decomposing video plaintext data into a data packet, performing XOR operation on the data packet and the encryption initial scrambling matrix to obtain initial cipherext data, and performing line scrambling operation on the initial ciphertext data; and finally performing adding module diffusion operation on the scrambled data to obtain the final video ciphertext data; the decryption process of the video is the inverse process of the encryption process. Through the video encryption method basedby the hyper-chaos system provided by the invention, the key can be transmitted without using a specific channel, and the risk that the key is stolen in the transmission process is avoided; the disadvantage that the low-dimension chaos system is easy to be attacked can be effectively overcome, the security is higher, and the realization is easy.

The invention discloses a safe payment system based on finger vein recognition and blockchain technology. The safe payment system comprises a finger vein recognition module and a regional chain payment module, the finger vein recognition module is used for performing finger vein image acquisition, preprocessing and feature extraction on a finger when a user is verified; the regional chain paymentmodule comprises a finger vein verification account and a finger vein recognition intelligent contract; the invention also discloses a safe payment method based on the finger vein recognition and blockchain technology. The method comprises the following steps: 1) constructing a blockchain payment network; 2) performing finger vein recognition payment operation; and 3) performing finger vein recognition recharging operation. According to the method, the problem that trade cannot be normally completed when a traditional mobile device is in abnormal states such as shutdown and no signal is provided is solved, the risk that a payment password of the mobile terminal is possibly stolen is avoided, and the use convenience of a user and the safety of a payment network are improved.

The invention discloses a non-contact card type fingerprint identification automobile sensor key chip which comprises a chip body. The chip body further comprises a battery, a micro processing chip, a circuit board, a wireless communication chip and a fingerprint chip. The battery output end is in electrical signal connection with the input end of the micro processing chip. According to the invention, the micro processing chip, the wireless communication chip and the fingerprint chip are arranged in the chip body, so that the chip body can send data information to the cloud when a user passes; when information is acquired through the operation of the cloud, the user identity is identified, and the user and the user's vehicle can be paired; after the pairing is successful, the vehicle can be unlocked; and when the user's key is stolen or the user identity information is stolen, the vehicle matching the user cannot be opened, which effectively ensures the safety of the user's vehicle, avoids the risk of being stolen, and effectively makes up for the prior art.

The invention provides a mobile terminal data backup method and device, and relates to the technical field of mobile communication. The mobile terminal data backup method is applied to a source mobile terminal and includes the steps: reading information to be transmitted to generate a specific file according to a data backup instruction; building a backup Wi-Fi (wireless fidelity) hotspot and monitoring whether the Wi-Fi hotspot is successfully connected with a target mobile terminal or not; transmitting the specific file to the target mobile terminal when successful connection of the Wi-Fi hotspot and the target mobile terminal is monitored. The information to be transmitted includes complete information or modified information, the modified information comprises modified data generated between previous backup and current backup, the specific file includes a complete file when the information to be transmitted includes the complete information, and the specific file includes a modified file when the information to be transmitted includes the modified information. According to the mobile terminal data backup method and device, personal privacy stealing risks can be effectively avoided, and security of backup storage is improved.

The invention discloses a client zero-storage single sign-on method. The method is that sign-on pages of all application systems are provided by a sign-on authorization center; the information of user signing on the system is stored by the sign-on authorization center and synchronized to a server of each application system at the same time, so that the user information and session ID (or bills) are not stored in the client. By adopting the client zero-storage single sign-on method, the user information can be stored, transmitted and synchronized in the sign-on authorization center and application service, thus that unnecessary information is transmitted to other sides from the client can be avoided, and moreover, the risk that the session ID (or bill) is embezzled can be prevented; the development process of a single sign-on application system is simplified, and the safety performance of the system is improved.

The invention relates to a mobile security settlement network construction system. The mobile security settlement network construction system consists of an embedded system comprising an intermediate key, namely, an X shield, a mobile X shield device, a client mobile device, a mobile private network, private network base station and controller, a data authentication center platform server and a receipt and payment settlement system operation platform server, and a mobile security settlement network is constructed. An X shield APP is installed in the client mobile device, bound with the client mobile device and associated with an APP of a receipt and payment settlement system; when a client performs receipt and payment settlement, the X shield APP is actively connected to the mobile private network of mobile security settlement, transmits private encrypted data and is intelligently connected with a back-end system server platform database; after an identity is confirmed to be correct through multiple comparison, a connection permission signal is released, so that the system can be securely connected with the private network, and secure system operation is ensured; and when the identity is abnormal through comparison, the system refuses a connection and gives an alarm signal to a client APP, so that the payment settlement is refused, and the private network connection is cut off.

The invention discloses an advertisement putting system capable of guaranteeing the safety of an advertisement putting process. A typical advertisement putting process in the advertisement putting system comprises the following steps that: 1) an advertiser uploads an advertisement to the system through the foreground of the advertisement putting system and designates terminal equipment of which the advertisement content is to be played; 2) the system administrator audits the advertisement content uploaded by the advertiser; 3) the system signs the audited advertisement by using a platform private key; 4) the system encrypts the platform public key, the advertisement signature and the advertisement URL by using the terminal public key; 5) the system pushes the encrypted content to terminalequipment to be played; 6) after receiving the push, the terminal decrypts the push by using the filled private key; 7) the terminal downloads the advertisement content to be played according to the advertisement URL; 8) the terminal performs signature verification on the advertisement; and 9) the terminal plays the advertisement passing the signature verification. Based on the system disclosed bythe invention, the security problems that an advertiser maliciously uploads bad advertisements, the operation security is audited, the advertisement content is tampered during network transmission, the advertisement content is tampered at the advertisement terminal and the like can be effectively solved.