91results about How to "Ensure confidentiality" patented technology

In a card settlement system using a portable electronic device having a fingerprint sensor, a credit card and a portable electronic device (5) having a fingerprint sensor are issued to a person who has made application. To this electronic device (5), card information (12), a storage public key Kp1, and

The invention discloses a security protection method of communication data of a special electricity public network, which provides secure and reliable data communication for the data communication ofthe special electricity public network by adopting the technical means of network isolation, right control, identity authentication and transmission encryption, realizes the purpose of securely usingthe public network for communication at any time and in any places without making any change to the application environment or software. In the process of application, a calling telecontrol communication security gateway (7) and a called telecontrol communication security gateway (9) are connected to a public network (8) by dialing; an encrypted public network communication channel is establishedfor the communication between a communication front-end processor (6) and a remote RTU (10); and the data is connected with the telecontrol communication security gateway (7) from the communication front-end processor (6) through a serial port or network, connected with the public network (8) through the calling telecontrol communication security gateway (7), connected with the called telecontrolcommunication security gateway (9) from the public network (8), and then connected with the remote RTU (10) through the serial port or the network. The invention can be widely applied to the field ofsecurity protection of the communication data of the public network.

A predictive analysis generates a predictive model (Padj(Y|X)) based on two separate pieces of information,

• • a set of original training data (Dorig), and
  • a “true” distribution of indicators (Ptrue(X)).

The predictive analysis begins by generating a base model distribution (Pgen(Y|X)) from the original training data set (Dorig) containing tuples (x,y) of indicators (x) and corresponding labels (y). Using the “true” distribution (Ptrue(X)) of indicators, a random data set (D′) of indicator records (x) is generated reflecting this “true” distribution (Ptrue(X)). Subsequently, the base model (Pgen(Y|X)) is applied to said random data set (D′), thus assigning a label (y) or a distribution of labels to each indicator record (x) in said random data set (D′) and generating an adjusted training set (Dadj). Finally, an adjusted predictive model (Padj(Y|X)) is trained based on said adjusted training set (Dadj).

An authentication printing system, comprising: an authentication unit that acquires authentication information from a user and authenticates based on the authentication information that the user possesses the authority to execute authentication printing (referred to as “authorized user”); a printing unit that acquires a print job corresponding to the authorized user from a printing job holding unit, and executes the authentication printing based on the print job (referred to as “print execution job”); a re-authentication unit that acquires the authentication information from a user upon completion of print processing, with regard to the print execution job, and authenticates based on the authentication information that the user is the authorized user of the print execution job; and a determination unit that determines that a printed matter is collected by the authorized user with regard to the print execution job, when re-authentication is completed with regard to the print execution job.

A device and method are provided for establishing a session key between two entities of a communication network that may be highly heterogeneous in terms of resources. The method, based on the Diffie-Hellman (DH) algorithm, provides for the delegation to assistant nodes of the network of the cryptographic operations required for the computations of the DH public value and of the DH session key for the node which is constrained in terms of resources.

The present invention provides a method of broadcasting a message having a text portion to be communicated to a user, the method including broadcasting the message in the form of an entitlement management message for reception by the user.

The invention discloses an electronic license information interaction system. The system comprises a master control terminal for coordinating calling of ports, a storage terminal for storing an electronic license, an issuing terminal called by an electronic license issuing department, an authorization terminal called by an electronic license holder, an inspection terminal called by an electronic license inspection institution and a digital certificate server for calling a digital certificate service agency. The electronic license information interaction system has the advantages as follows: the license holder can authorize different administrative agencies to inspect electronic licenses according to different working procedures, accordingly, the directionality of license circulation is greatly increased, and institutions with no need for inspection are shielded; the master control terminal can compare licenses provided by the license holder with licenses in a license list required to be inspected by the administrative agencies, so that the license holder can know which licenses required to be supplemented by an issuing institution in the procedure handling process are lacked and through comparison; confidentiality and safety of information are ensured while the licenses are effectively used.

An information communication system includes a first telephone operated by a first user, first proximity communication means operated when a first device comes into its vicinity so as to connect the both, a second telephone operated by a second user, and second proximity communication means operated when a second device comes into its vicinity so as to connect the both. The first telephone reads an IP address of the first device via the first proximity communication means, transmits it to the second telephone via a telephone network, and notifies it to the second device via the second proximity communication means. By link operation between a telephone and an electronic device in its vicinity, it is possible to share information and exchange information with a conversation partner via the telephone.

The invention discloses a cloud technology-based commodity traceability and consumption flow statistical analysis method and system. According to the cloud technology-based commodity traceability and consumption flow statistical analysis method and system, a cloud technology architecture in which a cloud computing platform and a cloud computing terminal coordinate with each other is adopted, wherein the cloud computing platform is responsible for coding, compression, encryption, generation and activation, assignment and management of hundred-million-level encrypted two-dimension codes and providing traceability services for consumers and providing consumption flow statistical analysis services for enterprises, and the cloud computing terminal is responsible for assigning identifiers for the encrypted two-dimension codes of commodities; since the powerful computing ability and performance of cloud technologies are utilized, and a convenient automated centralized management mode is adopted, the operational efficiency, reliability, flexibility and robustness of the system can be ensured.

An optical network system including an OLT and ONUs is provided that can prevent the loss of a multicast signal. When receiving an encryption key generation request from the OLT, the ONU generates an encryption key, and transmits the generated encryption key to the OLT. When receiving a notice of timing from the OLT, the ONU updates the encryption key of a belonging group. When receiving a report message from a STB through the ONU, the OLT analyzes the report message, stores a group that the STB belongs to as well as the ONU in a second table, and transmits the encryption key generation request to the ONU. When receiving the encryption key from the ONU, the OLT further stores the encryption key in the second table, and transmits to the ONU a notice of the timing in which the encryption key is valid.

In one embodiment of a print system, a client terminal (10) that generates a print job, a server function portion that stores the print job, a printer (30) that performs pull printing of the print job are connected via the network (40). The print job holds print data and authority information including user information for specifying a user having print authority over the print data. The client terminal (10) is provided with an authority setting means for setting authority information. A server (20) is provided with the server function portion, and is configured to update authority information, identify a user, authenticate whether or not to permit printing based on the authority information and the identification result obtained by a user identification means, and transmit print data.

An apparatus and method for protecting user data are disclosed herein. The apparatus for protecting user data includes a network filter, a user authentication unit, a message relay unit, and a key management unit. The network filter filters traffic between a user and a cloud server. The user authentication unit registers and authenticates the user. The message relay unit relays a message and data included in the traffic between the user and the cloud server. The key management unit generates and manages a key required to encrypt the data.

The invention provides a mobile terminal safety access authentication method in combination with fingerprint. The method comprises the four steps of establishing an encryption channel, user registering, user information checking and user business accessing. A client collects terminal feature information which comprises a USBKEY sequence number, a digital certificate sequence number, a mobile terminal sequence number and user fingerprint feature information, and the terminal feature information is uploaded to a safety access gateway through the encryption channel; the safety access gateway verifies the integrity and validity of the terminal information, and decides whether the terminal can access a protected server according to a verification result. The fingerprint recognition technology is combined with the traditional identity recognition mode, so that the medium for marking the identity is directly related to the natural person, the identity recognition and the recognized person are really corresponding to each other, the security level of the mobile terminal information access is effectively improved, and the convenient mobile technology can be facilitated to play effect in the information application.

The technique of the present invention ensures generation of an image file, in which image data and additional data are included, with the confidentiality of specific data kept.

An image output system outputs the image data, which is generated in a digital still camera DSC 12, with a color printer 20. The DSC 12 encrypts image processing control data, which is preset by the manufacturer, and generates the image file, in which the image data and the encrypted image processing control data are included. The color printer 20 decodes the image processing control data included in the image file, performs image processing based on the image processing control data, and thereby outputs an image.

This invention relates to one information safety method and its function module based on industry controlled network and to the safety management method, which comprises the following steps: establishing safety function module in the net; defining safety function module input interface and outputting interface and safety affairs and executing control form dispatching formula when the affairs arrive; processing the input unsigned char to fulfill the data coding and buffer the results in the output interface; finally executing the control form to send one affair signal and completing the coding formula in the key dispatching system.

Supplier evaluation system for selecting a supplier for a project and/or monitoring a current supplier's performance. A supplier evaluation system first comprises a first database storing a plurality of inquiries and supplier contact information. The supplier candidates identify raters and those raters receive the inquiries over a computer network. The system provides a user interface for the rater to confidentially respond to the inquiries. The raters' responses are then electronically sent to one or more databases in the system and the system's database management system analyses the responses and makes them available to purchasing agents in a plurality of formats.

The invention relates to a mobile payment system, in particular to a safe payment system based on wireless fidelity (wifi). According to the system, after a purchasing side is connected with a network through wifi sending equipment of a selling side, a wireless router mark of the wifi sending equipment is acquired and sent to a wifi sending equipment management and authentication server of the selling side through a wireless router network channel, authentication is carried out from two parts, namely a hardware wireless router and the wireless router network channel, safety and confidentiality of selling side information are guaranteed, one wireless router mark is acquired at one time, the purchasing side and the selling side do not need to interact to carry out screening and selecting, and accordingly payment can be smooth and convenient.

A distribution system is provided with: a distributing apparatus being provided with: a first compressing device (202) for compressing first data, which is a reproduction reference in a first compression method (MPEG2); a second compressing device (203) for compressing second data other than the first data in a second compression method (MPEG4); an encrypting device (205) for encrypting at least one portion of the compressed first data; and a distributing device (207) for distributing each of the encrypted first data and the compressed second data to a receiving apparatus, and a receiving apparatus being provided with: a receiving device (307) for receiving each of the encrypted first data and the compressed second data; a converting device (304) for converting the compression method for the compressed second data to the first compression method; and a generating device for generating the content data by combining the encrypted first data with the second data whose compression method is converted.

A storage system includes plural storage apparatuses storing data, and a storage controller which transmits and receives data between an external computer and the plural storage apparatuses, and further controls the plural storage apparatuses. Logical devices each representing a logical storage area are defined on the storage apparatuses. When one logical device is in a state of allocation to the external computer and stores data used by the external computer, and the logical device is deallocated from the external computer, the storage controller performs a processing such as erasing data from the logical device to be deallocated. The processing is performed according to the logical device being deallocated.