7results about How to "Improve authentication security" patented technology

The application relates to the mobile development technical field and provides an application program system, a client, a server, a storage medium and a program product, which can improve authentication security. Under the triggering of a third-party business webpage, an application program client sends a first request parameter to an application program server; the application program server carries out one-stage identity authentication based on a first type token, obtains third-party configuration data of the third-party business webpage based on a domain name identifier of the third-party business webpage after passing the one-stage identity authentication, generates a second type token, carries out two-stage identity authentication with a third-party business server based on the second type token, and feeds back a third type token and an asymmetric encryption public key to the third-party business webpage after passing the two-stage identity authentication; and the third-party business webpage carries out identity authentication based on the third type token and carries out double-key hybrid encryption based on the asymmetric encryption public key and a symmetric encryption key in the interaction process with the third-party business server.

The application provides a cloud network implementation of a sudden worker real-name system fast management authentication method, including the following steps: S1, a worker enters an engineering site, obtains a worker type through a cloud network, and triggers an identity recognition operation for a sudden worker; S2, in the identity recognition operation process, a body contour of a plurality of sudden workers is collected through face recognition, and contrast is adjusted according to an external light environment; S3, a candidate frame of the obtained plurality of sudden workers is subjected to a filtering operation, an image operator is calculated, face and body contour recognition is performed according to a sudden worker correlation degree judgment result, and identity information collected by a safety helmet is subjected to double comparison.

The disclosure provides a two-factor identity authentication method and device based on electroencephalogram spelling password, the method comprising: presetting accounts and corresponding passwords of multiple users; constructing a user electroencephalogram template library, the user electroencephalogram template library comprising electroencephalogram signal templates of all users, wherein the electroencephalogram signal template of each user is obtained based on the electroencephalogram signal of the user when staring at each target key of a visual stimulation electroencephalogram spelling keyboard; obtaining an account of a test user; obtaining a target password input by the test user using the visual stimulation electroencephalogram spelling keyboard and a target electroencephalogram signal when inputting the target password; and determining whether the identity authentication passes based on the target password, the password corresponding to the account of the test user, and the target electroencephalogram signal and the electroencephalogram signal template of the test user in the user electroencephalogram template library. According to the method of the disclosure, the authentication security can be improved.

The invention provides a root certificate updating method, a vehicle and a cloud, and belongs to the technical field of network security of vehicles. By adopting the technical scheme provided by the invention, the vehicle sends the target application request to the cloud under the condition of triggering the power-on operation, and receives the first target response returned by the cloud, so that the target update request is sent to the cloud under the condition that the target update information meets the preset condition; finally, the root certificate of the vehicle is updated based on the second target response returned by the cloud, dynamic and safe updating of the root certificate is realized through interaction between the vehicle and the cloud, the problem of service interruption of the Internet of Vehicles caused by failure of the root certificate is avoided, and the service experience of the Internet of Vehicles is improved. A dynamic updating mechanism enables the vehicle to always keep the validity of the root certificate in the use period, the maintenance cost of the vehicle is reduced, meanwhile, the vehicle sends the target updating request to the cloud only when the target updating information meets the preset condition, the updating accuracy of the root certificate is improved, and the safety of vehicle communication is improved.

This invention discloses a method and system for interfacing HarmonyOS 6 with a cloud rendering platform. The method first involves the HarmonyOS 6 terminal generating a device fingerprint for registration, establishing a gRPC data channel and a WebSocket status channel via TLS 1.3 bidirectional authentication. Next, terminal performance parameters are collected, and adaptive rendering parameters are generated and encrypted by an end-to-cloud rendering parameter intelligent matching system before being sent to the cloud. The cloud allocates computing power to initiate rendering. During rendering, the cloud pushes status and error codes every 100ms. After the rendering stream is transmitted in segments, it is accelerated and decoded by the terminal's NPU to achieve a display speed of ≥60FPS. Finally, the encrypted rendering results and parameters are saved, resources are released, and system maintenance and updates are completed. This method achieves end-to-cloud communication latency ≤50ms, is compatible with mainstream cloud rendering platforms, improves the security, efficiency, and adaptability of end-to-cloud collaboration, and solves the problem of insufficient single-end computing power on the HarmonyOS 6 terminal.

This invention discloses an optimized access control system for all types of electronic products based on a dual-layer independent authentication element, belonging to the field of device security authentication technology. The system adopts a dual-layer independent architecture: a hardware-fixed first authentication element and a user-created second authentication element. The first authentication element is the factory-fixed baseline information of the device, while the second authentication element is generated after the user's first verification of a custom sub-element. The system generates an authorization credential uniquely bound to the current device and application, which cannot be reused across devices or applications. For consecutive authentication failures, the system implements tiered delay, temporary blacklisting, and time-limited blacklisting strategies, only rejecting authentication requests without modifying user data. Users can choose whether to clear historical authorization credentials when modifying custom sub-elements. Only those with valid first authentication element verification can access the second authentication data. The system supports authorization record management and automatic cleanup upon uninstallation. This invention features a simple architecture, high security, effective prevention of brute-force attacks and theft, strong versatility, and applicability to all types of electronic products.

This specification provides an embodiment of a blockchain-based device verification system, which includes: a first device that uploads device information associated with a target device to the blockchain; a second device that publishes a smart contract on the blockchain, the smart contract being used to determine whether the target device meets acceptance requirements; the target device, upon its first run, acquires the device information on the blockchain and performs a self-check based on the device information to obtain a self-check result; the self-check result is used as a parameter to call the smart contract to perform device acceptance, and the result after executing the smart contract is recorded on the blockchain as the acceptance result.