15results about How to "Implement identity authentication" patented technology

The invention relates to the technical field of information security, and provides an identity authentication method and system, and computer equipment. According to the method, password-free authentication is carried out through a fingerprint authentication mode of a fingerprint password key, and a user name and a password are only stored in the fingerprint password key; in the identity authentication process, the client encrypts a first random number generated by the fingerprint password key by using a public key of the server and then sends the encrypted first random number to the server, and the server encrypts the first random number obtained by decryption and a second random number generated by the server to obtain ciphertext data and sends the ciphertext data to the server. The client and the server perform bidirectional identity authentication by using the random numbers of both parties and combining the certificate, and the client and the server perform operation by using the first random number, the second random number and the feature code to obtain the transmission key, so that an attacker is prevented from stealing an authentication credential by using network monitoring or other modes; and the data is retransmitted to the authentication server for replay attack, so that the data transmission security in the authentication process is ensured.

The invention discloses a cross-non-cooperative domain identity authentication method, which comprises the following steps that: adjacent routers in a core network negotiate a first symmetric key and an MAC (Media Access Control) address list, a boundary router negotiates a global group key, a registration server verifies a network access user, generates a digital identity label, anonymizes the identity label and configures the MAC address list, the user negotiates a second symmetric key with an adjacent router and is associated with the adjacent router, the user obtains MAC information based on a neighbor discovery protocol, determines a third symmetric key, encrypts an anonymized identity identifier, randomly selects an MAC address as a source MAC, calculates an integrity check code and embeds the integrity check code, constructs a data packet, and uploads the data packet to a core network router; and performing intra-cooperative domain authentication and cross-non-cooperative domain authentication. According to the method, protection of user privacy information is considered from multiple perspectives, source address verification and user identity authentication can be realized, the data packet is allowed to cross multiple non-cooperative domains, and the method can be suitable for different scenes.

The invention provides a wrist-worn device identity authentication method based on vibration feedback. A vibration signal is generated through equipment such as a smart watch, and vibration response data of a user is collected in real time by using a built-in accelerometer. The method comprises the steps of signal noise filtering, direction correction and normalization preprocessing, then vibration characteristics are extracted through multi-order difference, and a multi-branch convolutional neural network (MCNN) is used for characteristic extraction and fusion so as to capture vibration characteristics of different time scales. And finally, identity matching is carried out through a Softmax classifier. The method shows good stability and recognition precision in various wearing postures, hand action changes and complex use scenes, and has high anti-interference capability.

This invention discloses a method for applying for identity credentials, comprising: a wallet client sending an identity credential application request to a first operating institution; the first operating institution obtaining the public key of the corresponding wallet client from the identity chain based on the user's distributed identity identifier; verifying the signature information of the wallet client; generating an identity credential based on the private key of the first operating institution; generating a first-pass encrypted ciphertext based on the user's first identity information; and sending the identity credential and the first-pass encrypted ciphertext to the wallet client. This method ensures the security of identity information while reducing the need for secondary verification by the user, thus improving the user experience. Corresponding devices, electronic devices, and computer-readable media are also provided.

The application discloses an industrial internet high-risk software identification system and method, and particularly relates to the technical field of industrial internet security, and comprises an industrial software gene map automatic construction module, a business context-aware dynamic risk assessment module and a map-associated precise disposal strategy recommendation module; through multi-dimensional feature acquisition and fusion technology, a unique digital identity is generated for software assets, precise identification is realized; the real security risk of software assets is dynamically quantified by comprehensively considering vulnerability severity, business criticality and network exposure; based on asset relationship map and game analysis, the optimal disposal strategy with the least impact on business is generated and recommended for high-risk software. The application solves the problems of inaccurate industrial software identification, risk assessment out of business context and lack of intelligent decision support for disposal measures in the prior art, realizes automatic closed-loop management from identification, evaluation to disposal, and significantly improves the security protection capability of the industrial internet.

The invention belongs to the technical field of network security authentication, and particularly provides a wireless network security authentication method and system based on burst signal fingerprint identification, and the method comprises the steps: employing a maximum likelihood detection algorithm, and carrying out the detection of a transient process of a radiation source burst signal; calculating the instantaneous amplitude of the signal transient process; extracting a radiation source fingerprint feature implied in the instantaneous amplitude of the signal transient process by adopting a least square estimation algorithm; in the training stage, fingerprints of legal radiation sources are trained by using a support vector description algorithm, and a wireless communication network security authentication model is established; and an authentication stage: identifying the radiation source fingerprint by using the trained radiation source identification model to complete the authentication of the equipment identity. According to the method, the transient process of a burst signal is accurately detected, mathematical modeling is carried out on the transient distortion process of a transmitter, and the estimation and identification of the fingerprint characteristics of the radiation source in the transient process are realized, so that the authentication of wireless communication network access equipment is completed.

The present invention belongs to the field of digital twin technology, specifically a permission management method adapted to twin applications. The method proposed in the present invention includes creating a unique identity identifier of a twin, performing twin identity key verification based on the unique identity identifier of each twin; enabling twins of different identities to access data content of corresponding permissions; encrypting the transmitted twin data content, and encrypting the key of the encrypted data content; decrypting the obtained encryption key and encrypted data content; and forwarding data packets using the twin as a data storage node. The permission management method adapted to twin applications of the present invention can effectively set security rules for twin applications and access policies for application data, and realize the authentication of twin identities and the confidentiality, integrity and efficiency of the data transmission process.

The application discloses a security authentication method and device, network equipment, a storage medium and a program product. The method comprises the following steps: receiving a first service request sent by a distributed node SCP, wherein the first service request carries a first signature and first information, and the first information comprises a first SCU identifier and first organization information; obtaining first identity information corresponding to the first information through a block chain, and verifying the first signature based on the first identity information; if the verification of the first signature fails, sending a verification failure result to the distributed node SCP; and if the verification of the first signature succeeds, forwarding the first service request to a central node NF.

The present application belongs to the technical field of quantum communication, and particularly relates to a QKD remote key distribution method, system, device and medium based on a PQC channel. In view of the fact that the prior art fails to coordinate performance overhead and risk exposure, the present application adopts the following technical solution: a QKD remote key distribution method based on a PQC channel, comprising: pre-storing a parent key in a service end in a hardware security module; establishing a temporary, forward-secure, anti-quantum-attack PQC authentication key exchange channel between a client and the service end, the service end performing identity authentication by using a standard PQC digital signature, and the client indirectly implementing identity authentication of the service end through a key encapsulation mechanism; the remotely distributed key is a one-time business key; and the business keys are used for encrypted communication between clients. The present application has the beneficial effect of resolving the contradiction between performance overhead and risk exposure through an asymmetric authentication protocol and a strict risk isolation architecture.

The application discloses a kind of security control method and system based on SDN architecture, it is related to security control technical field, including: user end is authenticated by sending first handshake request to edge computing device to realize the identity authentication of user end, and corresponding master key is issued to user end and SDN controller by edge computing device, user end is encrypted to access request by master key, and sends the encrypted access request to SDN controller, after SDN controller is parsed encrypted access request, determine its data transmission route path, i.e. which switch is sent to user end by the data stream collected by distributed data acquisition terminal the security control method based on SDN architecture provided by the application realizes the unified control of network, wisdom arrangement and collaborative scheduling, provides various automation, intelligent capacity, provides high-speed, reliable, safe communication service guarantee for power system.

The invention provides a resource access control method and device and electronic equipment, and relates to the technical field of information security. The method comprises the following steps: receiving a first identity token and a resource access request sent by a consumption process; according to a domain identifier in the first identity token, sending the first identity token and first verification indication information to the second control domain; wherein the first verification indication information is used for indicating the second control domain to verify the first identity token; receiving a first verification result sent by the second control domain; and under the condition that the first verification result indicates that verification succeeds, according to the application identifier in the first identity token, determining whether the consumption process has a resource access permission to the service process. According to the technical scheme provided by the invention, the problem of cross-domain application process identity authentication can be solved.

The embodiment of the invention provides an identity verification method and device and electronic equipment, and the method comprises the steps: obtaining a first signature value of a first terminal, a second signature value of a second terminal and a digital certificate under the condition of receiving a login request initiated by the first terminal, the first signature value being obtained through signature of a first key segment, and the second signature value being obtained through signature of a second key segment; the second signature value is obtained through signature of a second key segment, and the first key segment and the second key segment are different segments of the target private key; performing aggregation processing on the first signature value and the second signature value to obtain a third signature value; verifying the third signature value through the digital certificate; and under the condition that verification is passed, it is determined that identity verification of the first terminal and the second terminal is successful, and the second terminal and the first terminal belong to authorized login terminals of the same account. Therefore, according to the embodiment of the invention, the problem that in the prior art, the terminal logs in the cloud desktop system, the identity authentication function is lacked, and great security is brought to the cloud desktop service and data security can be solved.

The application discloses a privacy protection identity registration and authentication method and system compatible with a standard SIM card, and belongs to the technical field of cryptographic protocols. The system comprises three participants of a user end, an operator and an application program, is based on the SIM card issued by a mobile operator and owned by all mobile phone users, and is jointly completed by the user and the operator to perform identity authentication of the application program on the user. The application has high security and high efficiency, even if an enemy invades the operator, the enemy cannot obtain the login behavior of the user, the identity authentication of the user can be protected from a man-in-the-middle attack, the existing SIM card is compatible, the existing hardware device does not need to be replaced, and deployment is convenient. The application is further enhanced in privacy protection, ensures that the access behavior of the user cannot be tracked, has good interoperability, and is suitable for large-scale 5G application deployment.

This disclosure relates to an identity authentication method, apparatus, device, medium, and product. The method includes: after a user on a client side has successfully registered, sending an access request to a server; wherein the access request carries the user's username; obtaining an encrypted string returned by the server and sending the encrypted string to a SIM card; wherein the encrypted string is obtained by encrypting a verification information string using the public key of a key pair generated by the server for the user on the SIM card, and the SIM card stores the key pair generated for the successfully registered user; obtaining the decryption result of the SIM card decrypting the encrypted string using the user's corresponding private key, and sending the decryption result to the server, so that the server can authenticate the user's identity based on the decryption result. This disclosure can improve the security of identity authentication.

The present invention provides a user identity authentication method based on RFID trust, which includes two modules: user registration and user identification. The present invention uses semantic addresses and physical addresses to complete the tracing and positioning of RFID tags in the system, and constructs an intrusion detection method of a two-level defense system. Without increasing the cost of tags, the present invention effectively completes the real-time monitoring of the RFID system and the identification of tag cloning attacks.