8results about How to "Simplify the certification process" patented technology

The present invention provides a method and system for seamless authentication of distributed devices. A first device and a second device establish a distributed connection via a distributed soft bus. The first device obtains a matching public key and private key, and based on the public and private key pairs, obtains corresponding public key certificates and authentication ciphertext. The second device performs authentication based on the public key certificate and authentication ciphertext, and returns the corresponding authentication result, thus completing the authentication. This ensures the security of the distributed device connection and improves data security. Furthermore, during the authentication process between the first and second devices, the first and second devices autonomously send and return authentication information via the distributed soft bus, without user intervention or input, simplifying the device authentication process, achieving seamless authentication of distributed devices, optimizing user experience, and improving device authentication efficiency.

The invention discloses a data right confirmation method and a data management method and system, and belongs to the technical field of data right confirmation. A distributed digital identity identifier of an authorization mechanism is used as an attribute to be embedded into a preset access strategy so as to appoint that the authorization mechanism has the right of decrypting data and checking data plaintext, and a distributed digital identity identifier of a data owner is used as an attribute to be embedded into the preset access strategy so as to clarify the ownership of right confirmation data. Secondly, encrypting right confirmation data by adopting a preset access strategy after global parameters and attributes are embedded, and submitting an obtained data ciphertext to an authorization mechanism for right confirmation, so that the security and privacy of the data are ensured; meanwhile, the obtained data ownership declaration directly carries the distributed digital identity identifier information of the authorization mechanism, so that the authorization mechanism for data right confirmation does not need to be combined for authentication in the subsequent authentication process of the data ownership declaration, and the data ownership declaration can be easily intercommunicated and recognized among different platforms.

The present invention relates to the field of electrical data processing technology, and specifically discloses a dial-up technology security authentication method based on the Radius protocol. The method comprises: performing dial-up technology biometric security authentication on a remote access server, performing dial-up technology Radius protocol security authentication on the remote access server that has passed the dial-up technology biometric security authentication, judging whether the remote access server has passed the dial-up technology Radius protocol security authentication and returning a response based on a credibility feature value of a request authentication credential and a credibility feature value of a request device credential. The present invention solves the problem that a traditional dial-up authentication method usually relies on a single factor authentication, which may lead to a poor user experience in an environment requiring frequent authentication, provides multiple verifications, greatly increases the security level, and can perform real-time monitoring and detailed audit tracking, which is essential for meeting compliance requirements, performing security assessments, and responding to potential security threats in a timely manner.

The application discloses an Internet of Things terminal with endogenous security capability and a collaborative control system and method, and relates to the technical field of Internet of Things and network security technology.The terminal device uses a lightweight authentication algorithm based on CPK to perform identity authentication on an edge gateway, negotiates a session token after authentication, and uses the session token for data encryption transmission;the data is subjected to an embedding watermark operation before being sent;after the data reaches the edge gateway, watermark detection and data cleaning operations are performed to detect the integrity and security of the data;after the data reaches a cloud platform core server, watermark detection and deep forgery detection are performed to verify the integrity and authenticity of the data;and fast response to network threats is realized.The application has lightweight algorithm, adapts to the characteristics of limited resources of the Internet of Things, realizes terminal trusted access in the whole link, and has real and complete data and transmission security protection capability.

The invention discloses a cloud platform multi-tenant AD domain docking authentication method, system and device, and belongs to the field of communication, and the method mainly comprises the steps: deploying an authentication server and a transfer AD domain server, and building an AD domain relation between the authentication server and the transfer AD domain server; respectively establishing a mapping relationship among the registered tenants, the AD domain servers of the tenants and the access authentication equipment in the authentication server, and remotely calling and transferring the AD domain server to establish a trust relationship with the AD domain servers of the tenants; the authentication request of the user terminal of the tenant is sent to the transfer AD domain server through the authentication server, and the transfer AD domain server distributes the authentication request of the user terminal of the tenant to the AD domain server of the tenant to complete authentication. According to the invention, a domain authentication relationship is established between the authentication server and the initially deployed transfer AD domain server, so that the authentication process is simplified; and meanwhile, the transfer AD domain server distributes the authentication request to the AD domain server of the tenant, so that the pressure of the authentication server is shared.

The embodiment of the invention provides an equipment communication identity authentication method and related equipment, and belongs to the technical field of communication security. The method comprises the following steps: analyzing a received equipment authentication request to obtain first identity information of requesting equipment; querying and acquiring a dynamic credible factor of the request equipment according to the first identity information; determining the equipment credibility type of the request equipment according to the dynamic credibility factor; under the condition that the equipment credibility type is credible equipment, a first authentication strategy is adopted to authenticate the request equipment; the first authentication strategy is realized by verifying the digital signature based on an asymmetric encryption technology; under the condition that the equipment credible type is non-credible equipment, a first authentication strategy and a second authentication strategy are adopted to authenticate the request equipment; the second authentication policy is implemented based on an authentication protocol of challenge and response interaction. According to the invention, the equipment identity authentication efficiency and the equipment communication security can be improved.

The embodiment of the invention provides an identity verification method and device and electronic equipment, and the method comprises the steps: obtaining a first signature value of a first terminal, a second signature value of a second terminal and a digital certificate under the condition of receiving a login request initiated by the first terminal, the first signature value being obtained through signature of a first key segment, and the second signature value being obtained through signature of a second key segment; the second signature value is obtained through signature of a second key segment, and the first key segment and the second key segment are different segments of the target private key; performing aggregation processing on the first signature value and the second signature value to obtain a third signature value; verifying the third signature value through the digital certificate; and under the condition that verification is passed, it is determined that identity verification of the first terminal and the second terminal is successful, and the second terminal and the first terminal belong to authorized login terminals of the same account. Therefore, according to the embodiment of the invention, the problem that in the prior art, the terminal logs in the cloud desktop system, the identity authentication function is lacked, and great security is brought to the cloud desktop service and data security can be solved.

A vehicle network identity management system and management method based on blockchain and identification password, including: blockchain layer, management layer and perception layer, wherein: the blockchain layer interacts with the vehicle, the trusted authorization agency, the roadside unit, and the key generation center respectively to complete the identity management, data management, and behavior monitoring of the vehicle. The present invention uses the alliance chain to build a decentralized identity management platform between various car companies, unify the vehicle identity authentication process and the identity format stored on the chain, and facilitate cross-domain authentication; and through a lightweight two-way identity authentication mechanism based on identification password technology, simplifies the certificate-based authentication method in the traditional public key cryptography scheme; and uses MPT to build blockchain nodes, and designs the storage form of vehicle information in MPT in the form of key-value pairs to achieve rapid positioning and search of vehicle information, thereby improving the speed of on-chain queries.