56results about How to "Prevent replay attacks" patented technology

The invention relates to the technical field of Internet of Things security, and provides a security authentication method and system for an Internet of Things device, a medium and a device, and the method comprises the steps: responding to an authentication request of the Internet of Things device, the authentication request comprising a unique identifier, a current timestamp and a comprehensive feature vector of the Internet of Things device; after the current timestamp and the comprehensive feature vector are connected, generating a random challenge value through a random function and sending the random challenge value to obtain a returned Internet of Things equipment response value; after the authentication key, the comprehensive feature vector and the random challenge value are connected, an expected response value is generated through a secure hash function, and whether the Internet of Things equipment is successfully authenticated or not is judged through comparison; and if the authentication is successful, generating a session key, connecting the authentication key with the session key, and updating the authentication key through a secure hash function. The common security threats such as replay attack and man-in-the-middle attack are effectively prevented, and the uniqueness and security of each authentication are ensured.

The invention discloses a cloud application login method, device and equipment and a computer storage medium. The method comprises the following steps: in response to a first request for acquiring a token sent by a cloud machine client, determining a cloud application key according to a cloud application identity identifier in the first request; encrypting the cloud mobile phone information and the user identity information according to the cloud application key, the symmetric encryption algorithm library version, the symmetric encryption algorithm selector, the asymmetric key, the random number and the token expiration time to obtain an encryption result; generating a token according to an encryption result; and sending the token to the cloud mobile phone client to enable the cloud mobile phone client to send the token to the cloud application server, so that the cloud application server decrypts based on the token to obtain the user identity information, and sends the user identity information to the cloud application client to enable the cloud application client to log in the cloud application based on the user identity information. According to the invention, the cloud application can be logged in safely and conveniently.

The invention discloses a method for remotely controlling Android equipment through MQTT messages based on multi-factor identity verification. The method comprises the steps that S1, a two-way multi-factor identity verification system is configured in a remote control server; s2, a client application program supporting an MQTT protocol is deployed on the Android device; s3, issuing a starting or closing instruction of the application program and a modification instruction set by the system through an MQTT protocol; s4, the remote control server starts a multi-factor identity verification system to verify the identity of the user; s5, verifying the identity of the remote control server through a multi-factor verification system; s6, preventing unauthorized access and tampering; s7, the control instruction is decrypted through the MQTT client application program; s8, feeding back an operation result to the remote control server in a message form through an MQTT protocol; and S9, recording the feedback operation result in a server log. According to the invention, by introducing multi-factor identity verification and an MQTT protocol, safe and efficient remote control of the Android device is realized.

The invention relates to the technical field of information security, in particular to a database tamper-proofing method and system based on a trusted computing environment, and the method comprises the steps: S1, receiving data transmitted into the database by adopting a security protocol communication TLS, carrying out the preliminary verification and cleaning of the data, generating a verification key through a trusted computing module TPM, and storing the verification key in a secure storage area of the trusted computing module; s2, loading the verified data into a feasible computing environment TEE to generate an encryption key, and storing the encryption key in an internal storage area of the feasible computing environment TEE; s3, performing integrity verification on the encrypted data in the feasible computing environment TEE; and S4, leaving the checked data from the feasible computing environment TEE through the security protocol communication TLS, and transmitting the checked data to a tamper-proof database for storage. The data processing and storage operation is executed in the trusted computing environment, the integrity and non-tampering property of the operation record are ensured by using the tampering-proof database, and the credibility and safety of the whole data processing and storage system are improved in a combined mode.

The invention provides a decentralized cross-chain user identity authentication method based on a password accumulator. The method comprises the steps that a representative node registers a cross-chain system identity for a user; the plurality of representative nodes jointly run a threshold signature protocol to generate an access voucher for the user; the relay chain verifies signature information and member certification information in the user cross-chain request based on the on-chain identity of the user and an accumulator, and if verification is passed, cross-chain transaction is allowed; and the representative node verifies the signature information and the member proof information in the user identity revocation request, if the verification is passed, the representative node and other representative nodes operate a threshold signature protocol together, and the proxy chain management node issues revocation elements and updates the accumulator. By utilizing the scheme of the invention, the user identity can be quickly verified in a decentralized cross-chain transaction scene, and credible access and identity revocation of the user are supported.

The invention discloses a cross-chain data penetration type sandbox supervision method and system for ideal lattice attribute encryption on a block chain, and the method comprises the following steps: a third-party platform selects and builds a block chain, configures each node on an alliance chain, and forms a supervision sandbox; the third-party platform carries out sandbox initialization, namely, a public key and a main private key are generated according to an ideal lattice encryption algorithm; the data provider, the data user and the supervision mechanism register identities on the block chain; arranging cross-chain data to be shared by a data provider, and defining an access strategy of the cross-chain data; a data user initiates an access request to the data and submits the access request; after the data user obtains the access authorization, data decryption is carried out by utilizing the attribute private key and the decryption ciphertext of the data user; and the supervision mechanism monitors and checks the flow direction and access condition of the data in real time through the block chain in the supervision sandbox, and identifies an abnormal access mode through an integrated anomaly detection mechanism of the smart contract. According to the method, the privacy and the integrity of the cross-chain data are guaranteed.

The invention discloses a secret key issuing method, system and device, a storage medium and a program product, and relates to the technical field of information security, and the method comprises the steps: transmitting a verification public key certificate and a signature to a server through a WebSocket protocol at a client; receiving and verifying a first signature verification result returned by the server to obtain a second signature verification result; signing the random number in the second signature verification result to obtain a first signature value; and sending the first signature value and the random number to the server. After receiving the first signature value and the random number, the server generates a master key and a verification value, and issues the encrypted master key and verification value to the client; and the client decrypts and stores the master key. According to the scheme, bidirectional authentication is realized through an authentication mechanism of a public key certificate, and the credibility of both parties is ensured. And the random number is subjected to signature verification and signature, so that the replay attack is effectively prevented. In the secret key issuing process, the encryption certificate is used for encrypting the equipment information, the safety of the main secret key is ensured, and good expansibility is achieved.

The invention provides a BMS upper computer system, and relates to the technical field of upper computer control, the BMS upper computer system comprises a BMS upper computer and a BMS, the BMS upper computer determines key data of the BMS according to a connection instruction, and sends a request seed message to the BMS; the BMS receives the request seed message; based on the request seed message, determining seed data according to the random factor, and sending the seed data; the BMS upper computer receives seed data returned by the BMS; based on a preset encryption algorithm, determining a first encryption seed result according to the key data and the seed data; the BMS determines a second encryption seed result based on a preset encryption algorithm according to the key data and the seed data, and verifies the first encryption seed result and the second encryption seed result; and when the first encryption seed result and the second encryption seed result are the same, connecting a BMS upper computer, and sending an identification binding success message to the BMS. According to the invention, the safety can be improved.

The invention discloses a quantum secure access communication method and system. The random identity generated in the access authentication process is calculated based on the reference random number provided by the quantum security base station and the authentication parameter of the quantum security terminal, so that illegal equipment only has a pairing key pool and cannot obtain the pairing key pool, that is, the quantum security base station cannot know the random identity before calculation and cannot simulate the random identity; the authentication center is unknowable or unable to simulate, the quantum security terminal is unknowable or unable to simulate, and after calculation, the quantum security terminal and the quantum security base station both have the random identity of the quantum security terminal on the premise of not carrying out network transmission; even if any third party has a symmetric key of the quantum security terminal and the quantum security base station, the random identity cannot be simulated, so that the problem that the data security is threatened by bypassing an identity authentication link by switching a communication flow or utilizing a shared resource to pretend to be an authenticated identity to send data is avoided.

The invention relates to the technical field of information security, and provides an identity authentication method and system, and computer equipment. According to the method, password-free authentication is carried out through a fingerprint authentication mode of a fingerprint password key, and a user name and a password are only stored in the fingerprint password key; in the identity authentication process, the client encrypts a first random number generated by the fingerprint password key by using a public key of the server and then sends the encrypted first random number to the server, and the server encrypts the first random number obtained by decryption and a second random number generated by the server to obtain ciphertext data and sends the ciphertext data to the server. The client and the server perform bidirectional identity authentication by using the random numbers of both parties and combining the certificate, and the client and the server perform operation by using the first random number, the second random number and the feature code to obtain the transmission key, so that an attacker is prevented from stealing an authentication credential by using network monitoring or other modes; and the data is retransmitted to the authentication server for replay attack, so that the data transmission security in the authentication process is ensured.

The invention belongs to the technical field of equipment communication control, and particularly relates to a remote control system and method adopting a national secret algorithm. The system comprises a server which is used for forwarding communication data of a security controller and a user terminal and decrypting and verifying data uploaded by the security controller; the user terminal is used for receiving an operation command input by a user and sending a remote control command to the safety controller through the server; the Bluetooth UKEY is internally provided with a digital certificate for providing encryption and decryption of a communication process and digital signature and signature verification processing of communication data; the security controller is internally provided with a digital certificate for receiving the remote control command forwarded by the verification server, and an encryption chip for providing encryption and decryption in a communication process and digital signature and signature verification processing of communication data; encryption and decryption in the communication process use an SM4 symmetric encryption algorithm, and digital signature verification uses a national cryptographic SM2 asymmetric encryption algorithm. According to the method, the key security in the whole process can be ensured, and attacks such as tampering and forgery of intermediate links to data are avoided.

The invention provides a login method and system based on a 5G message voiceprint verification code, and the method comprises the steps: generating a 5G message, receiving a message receiving confirmation feedback of a user, obtaining a composite audio stream through combining with environment sound collected based on a local voiceprint collection device, carrying out the processing through a blind source separation algorithm, obtaining a preliminary composite voiceprint sample, and carrying out the verification of the voiceprint verification code. A target composite voiceprint sample is obtained after optimization; performing encryption processing based on a preset encryption protocol, obtaining a decrypted target composite voiceprint sample in combination with a quantum key distribution mechanism and a cloud authentication platform, and calculating a preliminarily adjusted comprehensive score by using a convolutional neural network, a recurrent neural network and a generative adversarial network combination model; performing processing by utilizing a behavior analysis algorithm to obtain a final adjusted comprehensive score, and performing access permission confirmation to obtain an access confirmation result; according to the invention, the security and accuracy of user identity verification are enhanced, efficient user experience is provided, and the security and reliability of the user login process are ensured.

The invention provides a method and device for secure communication between a client and a server, and the method comprises the steps: the server generates a public key and a private key, and transmits the public key to the client; the client obtains hardware information of local equipment and generates a machine code character string; randomly generating random characters with set digits, and combining the machine code character string with the random characters to serve as encryption seeds; generating an encryption key according to the encryption seed; the client encrypts the encryption key through a public key and then sends the encryption key to a server, and the server decrypts the encryption key through a private key to obtain the encryption key; the client encrypts the request data according to the encryption key to obtain encrypted data, and signs the encrypted data; the client sends the signature and the encrypted data to the server; the server receives the signature, verifies the signature, decrypts the encrypted data by using the encryption key after the verification is passed, processes the data according to the request data, and sends return data; and the safety of data communication is greatly improved.

The embodiment of the invention provides a website request tamper-proofing method, a server side, a webpage side and a storage medium. The method is applied to a server side and comprises the following steps: generating an access token of a webpage side under the condition that login of the webpage side succeeds, performing encryption calculation on a first request parameter carried by a login request of the webpage side to generate a first signature, and returning the first signature to the webpage side; receiving a resource request which is initiated by the webpage end and carries a second request parameter; determining whether a webpage side ciphertext exists in the resource request or not; under the condition of determining that the webpage side ciphertext exists in the resource request, obtaining effective parameters in the second request parameters; generating a second object character string according to the effective parameter; splicing the first signature and the second object character string to obtain a second character string; performing encryption calculation on the second character string by taking the access token as a secret key to generate a server ciphertext; and when the webpage side ciphertext is consistent with the server side ciphertext, determining that the second request parameter carried by the resource request is not tampered in the issuing process.

The invention provides a consumable anti-counterfeiting method and system, and relates to the technical field of consumable anti-counterfeiting. The consumable anti-counterfeiting method comprises the following steps that S1, equipment is maintained with a secret key and a random value, the secret key is solidified in the equipment when leaving a factory and recorded in a server, the random value is automatically generated by the equipment, it needs to be guaranteed that the random value is changed only once after consumable replacement, and the value is different from any value used before; s2, after the consumables are replaced, the device splices the URL, the device SN and the random value to generate a two-dimensional code; s3, a user scans the two-dimensional code with a mobile phone to enter an activation page, and at the moment, the server can obtain the equipment SN and the random value; and S4, the user needs to fill in the consumable SN in the activation page, and the server judges whether the consumable is a certified product or not and whether the consumable is used or not. According to the invention, certified product verification is carried out through the serial number of the consumable, no additional circuit needs to be added, and the equipment is activated through the activation code, can be activated offline and does not need to be directly connected with a server.

This invention provides a remote smart lock control method based on a cloud platform, relating to the field of artificial intelligence technology. The method includes: the cloud platform sending a sound wave signal transmission command to the target smart lock, triggering the smart lock to send multi-band sound wave signals to preset auxiliary signal enhancement device deployment locations A and B; the cloud platform receiving sound wave feedback signals from locations A and B, calculating the final communication path based on signal propagation delay, frequency band interference intensity, and attenuation parameters, combined with real-time signal quality indicators reported by the remote communication module; and dynamically encrypting the command and sending it to the remote communication module through the final communication path. This invention dynamically calculates the optimal transmission path, breaking through the limitations of traditional single-channel transmission. Even in complex electromagnetic environments or obstacle-blocked scenarios, it can still ensure reliable transmission of control commands and reduce communication interruption rates.

The present invention discloses a fast consensus method and system for identity authentication based on blockchain, including: obtaining user identity information of blockchain network; encrypting the user identity information using an improved encryption variant algorithm to generate a digital identity certificate; building an improved identity consensus signature framework by closely combining multiple Schnorr signature technology with blockchain consensus mechanism; introducing an optimized consensus algorithm to realize the special needs of identity authentication under multi-entity secure access to shared resources; introducing an adaptive intelligent dynamic weight distribution system to identify the user identity information; and encrypting and protecting it through an advanced encryption algorithm of the Sovrin architecture. The present invention not only realizes technical innovation through the improved algorithm, but also brings significant improvements in practical applications, meeting the needs of modern digital society for efficient, secure and scalable identity authentication solutions.

The invention provides an automobile internal wireless communication semiconductor module and method based on a Bluetooth low-power-consumption technology. The method belongs to the technical field of intelligent network connection automobiles and vehicle-mounted communication. The method comprises the following steps: performing dynamic topology modeling on communication nodes in an automobile to generate multi-connection topology network data; the method comprises the following steps: deploying Bluetooth low-power 5.4 multi-link equipment according to multi-connection topology network data, and constructing a dynamic networking architecture; by means of the automobile internal wireless communication method based on the Bluetooth low-power-consumption technology, the stability and reliability of automobile internal communication are improved, the dynamic topology modeling and the self-adaptive frequency hopping technology enable a communication link to flexibly cope with dynamic scenes such as seat movement and automobile door opening and closing, and it is ensured that data transmission is not interrupted. The whole vehicle weight and the wiring cost are reduced, a large number of wire harnesses are replaced by wireless communication, the vehicle body burden is relieved, the wiring process is simplified, and the production cost is saved.

The invention relates to the technical field of automotive electronics, in particular to an information security transmission method, device and equipment and a medium. And both the PDU sending end ECU and the PDU receiving end ECU realize SecOC modules. When a safe PDU needs to be sent, PDU information of an upper layer application is forwarded to the SecOC module through the PDUR module, the SecOC module processes the PDU information, authentication information is added, and then an API provided by the PDUR is called to send out the safe PDU through a lower layer communication interface. And when the lower-layer communication module receives the security PDU, the security PDU information is forwarded to the SecOC module by the PDUR module, the SecOC module verifies the PDU information, and if the verification is passed, the API provided by the PDUR module is called to forward the PDU information to the upper-layer application. The present disclosure provides necessary functions for verifying the integrity and freshness of PDU-based communication between ECUs in a vehicle architecture, and provides authentication for transmitted data, and attack means for preventing replay attacks, cheating, tampering and the like.

The invention relates to the technical field of vehicles, in particular to a message verification method, device and system based on a timestamp and a serial number and a medium, and the method comprises the steps: obtaining a to-be-verified message which comprises the timestamp, the serial number, business data and a dynamic signature; verifying whether the timestamp is in an effective window of the current system time or not to obtain a timestamp verification result; verifying whether the serial number meets a preset uniqueness condition or not to obtain a serial number verification result; re-calculating a signature by using a preset dynamic alternate session key, the timestamp, the serial number and the service data, and comparing a calculation result with the dynamic signature to obtain a signature comparison result; when the timestamp verification is passed, the serial number verification is passed and the signature comparison is consistent, determining that the message verification is passed; otherwise, determining that the message verification fails and triggering an exception handling mechanism; according to the invention, the security and reliability of message transmission can be improved.

The present invention relates to the field of vehicle networks, and to a cross-domain authentication method for vehicle networks based on blockchain, comprising: a trusted authentication center initializes system parameters and registers identity information of roadside units RSU and vehicle V in the vehicle network; each roadside unit RSU periodically broadcasts its own identity information; and vehicle V ij Entering the Roadside Unit RSU ij The communication range of the roadside unit RSU ij The identity information of the vehicle is verified; if the vehicle V ij If the authentication is successful, the vehicle V ij Generate a cross-domain authentication request using an anonymous identity and send it to the roadside unit RSU ij ; The roadside unit RSU ij Through zero-knowledge proof, the vehicle V ij The anonymous identity is authenticated. If the authentication is successful, a roadside unit RSU is established. ij With vehicle V ij The connection between the roadside units RSU ij With vehicle V ij The present invention also proposes a cross-domain authentication system, device and storage medium for Internet of Vehicles based on blockchain. The present invention can improve the authentication efficiency and reduce the storage and computing overhead on the blockchain.

The invention discloses a communication method for preventing a replay attack. The method comprises the following steps: a first device sends a request frame for establishing communication to a second device; when the first equipment receives a response frame sent by the second equipment in the time window, the first equipment confirms whether the response frame is valid or not according to the random value; if the response frame is valid, the first device sends a data frame to the second device; the first device receives an acknowledgement frame sent by the second device; and the first device continues to send the data frame to the second device until data sending is completed, and the first device sends an end frame to the second device. According to the method, the replay attack can be prevented, and the security in the communication process is improved.

The invention discloses an identity authentication method and device of networking equipment, electronic equipment and a storage medium, and relates to the technical field of Internet of Things communication, and the method comprises the steps: registering the networking equipment according to a registration request sent by the networking equipment, and storing registration information corresponding to the registration request in an equipment network space; after registration in the networking device and the device network space is completed, an authentication request sent by the networking device is authenticated according to registration information, an authentication result of the networking device is obtained, and authentication information of the networking device is stored in the device network space; and verifying the authentication information according to the historical authentication record in the equipment network space, and storing a verification result in the equipment network space after verification. According to the method, distributed network storage is adopted, so that the historical traceability and tamper-proofing performance of the authentication process are enhanced, and the security of related authentication data of the networking equipment in the identity authentication process is ensured.

The present application discloses a method, device and medium for realizing an enhanced verification code based on the rotation of 3D space particles, determines the text content of a random verification code to be converted into a corresponding two-dimensional code image, and performs grayscale processing on the two-dimensional code image; converts each pixel in the grayscale two-dimensional code image into a 3D space particle through a particle manager, and adjusts the plane coordinates of the corresponding 3D space particle according to the pixel position of each pixel in the two-dimensional code image to obtain a target two-dimensional code image corresponding to the 3D space particle; adjusts the vertical coordinate of each 3D space particle in the target two-dimensional code image to obtain a scrambled 3D space particle, and displays the scrambled 3D space particle on an operation panel based on a verification trigger of the verification code; adjusts the scrambled 3D space particles based on an operation instruction received by the operation panel, and recognizes the adjusted two-dimensional code image, and determines whether the verification based on the enhanced verification code passes according to the recognition result.

The invention provides a dynamic multi-port knock network service access method and system, and the method comprises the steps: uploading a knock data package according to a preset knock rule when a user accesses a knock network port; performing first verification on the knock data packet, and if the first verification is passed, calculating a knock authentication port according to a preset authentication port algorithm; the user calculates a knock authentication port according to a preset authentication port algorithm and tries to access the knock authentication port, and if the access is successful, a knock authentication data packet is sent to the port according to a preset knock authentication rule; performing second verification and information authentication on the knocking authentication data packet, and if the second verification and the information authentication are passed, calculating a network service port according to a preset network service mapping port algorithm; and the user calculates the port number and tries to access the network service port of the system, and if the access is successful, the user accesses the network service according to the port number. According to the invention, the security of the service can be improved, and targeted network traffic attacks can be avoided.

The invention provides a distributed identity selective disclosure method and system, the format of an implicit certificate is used as a verifiable certificate of a user, only the Merkel tree root of the user is reflected in the certificate, and a user key pair using the certificate is calculated through parameters in the certificate; and the user can autonomously sign attribute information needing to be disclosed according to the public and private keys corresponding to the certificate. According to the method, the selective disclosure function of the user side attributes is added, the privacy of the user side is better protected, fine-grained control is carried out when the user side shows the attributes, excessive exposure of privacy information during identity verification of the user side is avoided, the authenticity and validity of data are ensured, meanwhile, the identity information of the user side is stored in combination with the block chain, and the user side experience is improved. The problems of data non-intercommunication and data privacy of the user sides are solved, and the privacy of the user sides is greatly protected.

The application discloses a PPG dynamic coupling identity authentication method and system based on behavior stimulation, constructs a coupling feature vector by randomly generating a behavior challenge instruction sequence, synchronously collecting PPG signals and behavior signals, extracting response delay, response amplitude change, instantaneous phase, recovery time and a correlation coefficient, adopts confusion factor perception weighted comparative learning to train a feature encoder to obtain identity feature representation, and constructs a user feature distribution model through a conditional diffusion model and adopts diffusion time proxy scoring to make an authentication decision. The application realizes high-differentiation identity recognition through dynamic behavior stimulation and PPG response coupling modeling, effectively prevents replay attacks, simultaneously enhances feature robustness through manifold constraint diffusion and confusion factor perception comparative learning, and realizes real-time authentication decision through diffusion time proxy scoring.

The invention relates to an encryption authentication method and device and a radio frequency identification system. The encryption authentication method is applied to a tag in a radio frequency identification system, the radio frequency identification system further comprises a reader and a server, and the encryption authentication method comprises the steps that a first message sequence is received from the reader; generating a second message sequence according to a tag key TS1 corresponding to the tag, a server pseudo name SID, a first tag pseudo name IDS and the first message sequence; sending the second message sequence to a reader, so that the reader sends the second message sequence to a server, and the server generates a third message sequence according to the second message sequence; and receiving a third message sequence from the reader, and determining an authentication result corresponding to the current session process based on the third message sequence. By adopting the method, the encryption authentication efficiency in the radio frequency identification system can be improved.

The invention relates to the field of electric digital data processing, and discloses an anti-fault-injection AI chip model encryption loading and execution method, which comprises the following steps of: latching a micro-architecture state vector in real time at a pipeline execution level of a calculation unit, initializing a hardware rolling hash accumulator, and performing loading and execution on the hardware rolling hash accumulator; forcing the numerical value and a state vector expected value of a previous data processing stage to participate in one-way hash operation together to generate a dynamic mask, and encrypting transmission data; according to the method, an internal immune mechanism based on micro-architecture state entanglement is constructed, the correctness of an instruction time sequence is converted into a mathematical necessary condition for data decryption, and the correctness of the instruction time sequence is converted into the mathematical necessary condition for data decryption. High-entropy noise self-destruction of a data level is directly caused by execution stream abnormity caused by any fault injection, the security vulnerability of orthogonality of a control stream and a data stream is avoided, and mathematical blocking of physical attacks is realized.

The invention discloses an infectious disease traceability early warning method and system based on privacy protection and attack resistance, and belongs to the field of information protection and attack detection.The method comprises the steps that a contact flow data time sequence of a user is collected; according to the sudden change condition of the contact flow data time sequence at the time switching node, determining a normal contact flow data time sequence, injecting noise into the normal contact flow data time sequence to form a pseudo-marked flow time sequence, and training the comparison model to obtain a pseudo-marked flow time sequence; determining a normal contact flow data time sequence according to the trained comparison model; the method comprises the following steps of: constructing a traceability graph according to a normal contact flow data time sequence, aggregating multi-hop connection among nodes in the traceability graph by adopting an iterative aggregation method to obtain a contact knowledge graph of direct contact and indirect contact, and obtaining contact information of all users as training data according to the contact knowledge graph. And training the prediction model according to the training data, and outputting the infection probability of the user by the trained model.