7results about How to "Implement identity authentication" patented technology

This invention discloses a method for applying for identity credentials, comprising: a wallet client sending an identity credential application request to a first operating institution; the first operating institution obtaining the public key of the corresponding wallet client from the identity chain based on the user's distributed identity identifier; verifying the signature information of the wallet client; generating an identity credential based on the private key of the first operating institution; generating a first-pass encrypted ciphertext based on the user's first identity information; and sending the identity credential and the first-pass encrypted ciphertext to the wallet client. This method ensures the security of identity information while reducing the need for secondary verification by the user, thus improving the user experience. Corresponding devices, electronic devices, and computer-readable media are also provided.

The application discloses an industrial internet high-risk software identification system and method, and particularly relates to the technical field of industrial internet security, and comprises an industrial software gene map automatic construction module, a business context-aware dynamic risk assessment module and a map-associated precise disposal strategy recommendation module; through multi-dimensional feature acquisition and fusion technology, a unique digital identity is generated for software assets, precise identification is realized; the real security risk of software assets is dynamically quantified by comprehensively considering vulnerability severity, business criticality and network exposure; based on asset relationship map and game analysis, the optimal disposal strategy with the least impact on business is generated and recommended for high-risk software. The application solves the problems of inaccurate industrial software identification, risk assessment out of business context and lack of intelligent decision support for disposal measures in the prior art, realizes automatic closed-loop management from identification, evaluation to disposal, and significantly improves the security protection capability of the industrial internet.

The application discloses a security authentication method and device, network equipment, a storage medium and a program product. The method comprises the following steps: receiving a first service request sent by a distributed node SCP, wherein the first service request carries a first signature and first information, and the first information comprises a first SCU identifier and first organization information; obtaining first identity information corresponding to the first information through a block chain, and verifying the first signature based on the first identity information; if the verification of the first signature fails, sending a verification failure result to the distributed node SCP; and if the verification of the first signature succeeds, forwarding the first service request to a central node NF.

The present application belongs to the technical field of quantum communication, and particularly relates to a QKD remote key distribution method, system, device and medium based on a PQC channel. In view of the fact that the prior art fails to coordinate performance overhead and risk exposure, the present application adopts the following technical solution: a QKD remote key distribution method based on a PQC channel, comprising: pre-storing a parent key in a service end in a hardware security module; establishing a temporary, forward-secure, anti-quantum-attack PQC authentication key exchange channel between a client and the service end, the service end performing identity authentication by using a standard PQC digital signature, and the client indirectly implementing identity authentication of the service end through a key encapsulation mechanism; the remotely distributed key is a one-time business key; and the business keys are used for encrypted communication between clients. The present application has the beneficial effect of resolving the contradiction between performance overhead and risk exposure through an asymmetric authentication protocol and a strict risk isolation architecture.

The application discloses a kind of security control method and system based on SDN architecture, it is related to security control technical field, including: user end is authenticated by sending first handshake request to edge computing device to realize the identity authentication of user end, and corresponding master key is issued to user end and SDN controller by edge computing device, user end is encrypted to access request by master key, and sends the encrypted access request to SDN controller, after SDN controller is parsed encrypted access request, determine its data transmission route path, i.e. which switch is sent to user end by the data stream collected by distributed data acquisition terminal the security control method based on SDN architecture provided by the application realizes the unified control of network, wisdom arrangement and collaborative scheduling, provides various automation, intelligent capacity, provides high-speed, reliable, safe communication service guarantee for power system.

The application discloses a privacy protection identity registration and authentication method and system compatible with a standard SIM card, and belongs to the technical field of cryptographic protocols. The system comprises three participants of a user end, an operator and an application program, is based on the SIM card issued by a mobile operator and owned by all mobile phone users, and is jointly completed by the user and the operator to perform identity authentication of the application program on the user. The application has high security and high efficiency, even if an enemy invades the operator, the enemy cannot obtain the login behavior of the user, the identity authentication of the user can be protected from a man-in-the-middle attack, the existing SIM card is compatible, the existing hardware device does not need to be replaced, and deployment is convenient. The application is further enhanced in privacy protection, ensures that the access behavior of the user cannot be tracked, has good interoperability, and is suitable for large-scale 5G application deployment.

This disclosure relates to an identity authentication method, apparatus, device, medium, and product. The method includes: after a user on a client side has successfully registered, sending an access request to a server; wherein the access request carries the user's username; obtaining an encrypted string returned by the server and sending the encrypted string to a SIM card; wherein the encrypted string is obtained by encrypting a verification information string using the public key of a key pair generated by the server for the user on the SIM card, and the SIM card stores the key pair generated for the successfully registered user; obtaining the decryption result of the SIM card decrypting the encrypted string using the user's corresponding private key, and sending the decryption result to the server, so that the server can authenticate the user's identity based on the decryption result. This disclosure can improve the security of identity authentication.