230 results about "Access key" patented technology

The invention provides a blockchain-driven distributed private data storage and access control method and system, and relates to the technical field of access control, and the method comprises the steps: carrying out the sensitivity scoring and fragmentation processing of private data, organizing a data fingerprint into a Bloom filter, and constructing an integrity proof tree, the data fragments are encrypted and then submitted to a distributed storage network, and an evidence storage record of the data fingerprints is generated in the block chain; during data access, a hierarchical access key is dynamically generated according to behavior characteristics of a visitor, and the hierarchical access key is distributed to an authorized node group after threshold segmentation; the authorization node group generates an authorization voucher by using a threshold signature scheme based on a lattice password, and writes the authorization voucher into the block chain; and the visitor obtains the data fingerprint and the encrypted data fragment by using the authorization certificate, and decrypts the data fragment of the corresponding authority level through the secure multi-party calculation recombination key component after verifying the integrity.

The invention discloses a data access permission control method and system based on a block chain, and relates to the technical field of block chains, the system is composed of a plurality of function modules, and the system comprises a hierarchical permission module which adopts a role hierarchical strategy and defines the access granularity of a role through an intelligent contract; the dynamic permission adjustment module is used for dynamically adjusting the permission range by analyzing user behaviors in real time through machine learning according to the principle of following the minimum permission in the permission distribution process; attribute encryption and zero-knowledge proof are introduced, an access key is dynamically generated according to user attributes, and sensitive information is hidden in the verification process; the multi-chain collaboration module is used for coding an intelligent contract through an authority rule, automatically executing access request verification, storing encrypted data through a private chain, managing an index and an access strategy through an alliance chain, isolating a storage domain from an access domain, and carrying out process traceability on a data request through a cross-chain verification mechanism; and the key management module is used for generating a true random number private key by adopting a hardware security unit.

The invention relates to the technical field of cloud security verification, in particular to a cloud security verification method and system, electronic equipment and a computer readable storage medium. The method comprises the steps of generating and isolating an AKSK which is an access key pair for identity verification, simulating an attack behavior in combination with the AKSK, and performing security capability verification based on the simulated attack behavior. According to the method, the AKSK is generated to simulate the attack in the real cloud environment, it is ensured that the test scene highly restores the real attack path, and the technical problem that the traditional security test mainly depends on static policy analysis (such as IAM policy grammar check) and artificial penetration test and cannot simulate the complete attack path after AKSK leakage in the real attack chain is solved.

The invention discloses a transformer substation control screen cabinet pressing plate mistaken touch prevention method and system, and the method comprises the steps: the system automatically detects the approaching of the hand of an operator through infrared induction and gesture recognition, and judges whether the recognition operation is effective or not; according to environmental changes such as high humidity or temperature, the system automatically adjusts the sensitivity of the touch screen to optimize the operation experience; before key operation, the system starts a multiple confirmation mechanism, and an operator needs to confirm an operation intention through a touch screen button and voice recognition; for high-risk operation, the system pops up an alarm and carries out secondary confirmation; meanwhile, the system dynamically adjusts the authority according to the identity of the operator and the task requirement, and the low-authority operator is limited to access the key component and only can execute the operation within the authority range of the low-authority operator; according to the method and the system for preventing the pressing plate of the transformer substation control screen cabinet from being touched mistakenly, the accuracy and the flexibility of preventing mistakenly touching are effectively improved, and the defects in the prior art are overcome through an intelligent means.

A method for authenticating a wireless communications device to a network slice of a communications network is provided. The wireless communications device has one or more attributes associated with it, at least one of the one or more attributes fulfilling an attribute-based access policy of the network slice. The method is performed by a slice manager of the communications network and comprises sending a secret key to the wireless communications device, sending an encrypted access key to the wireless communications device, the encrypted access key being encrypted using the access policy, such that a secret key generated based at least one attribute that fulfill the attribute-based access policy can decrypt the encrypted access key.

The invention discloses a remote control method for smart home equipment, relates to the technical field of home equipment control, and is used for solving the problems of simple identity authentication, difficulty in cross-protocol control and poor complex scene control effect in the prior art. The method comprises the following steps: initiating a control request at a mobile terminal, synchronously triggering a two-factor verification operation, when verification succeeds, constructing a temporary access secret key, and dynamically distributing equipment control authority, when verification fails, requesting rollback, and automatically matching a corresponding optimal communication protocol from a protocol library according to the type of each piece of target home equipment, so as to achieve the purpose of controlling the home equipment according to the optimal communication protocol. The method comprises the following steps: evaluating network quality after communication interaction, dynamically switching a transmission mode according to an evaluation result, deploying a local computing node and a cloud computing node, respectively carrying out respective equipment remote control in simple and complex scenes, constructing an equipment relation graph to analyze a household equipment dependency relationship, optimizing a control execution sequence, and monitoring equipment feedback data. Mandatory intervention management is carried out in case of abnormity, and efficient and accurate equipment control is realized.

The invention discloses a large model cue word intelligent design and verification system supporting multi-person cooperation, which designs cue words in a manner of cue word project management and multi-person cooperation to realize specialized design of the cue words. The difficulty of cue word design is simplified by using AI aided design; the operation stability and accuracy of cue words in different models and different computing power are verified through single-point testing and batch testing, so that cue word verification and iteration form a closed loop, and the cue word quality is improved; after the cue word is published, directly outputting an interface with an access key for external calling, and storing the interface as a cue word case into a cue word knowledge base; compared with an existing system and technology, the cue word version management difficulty is effectively reduced, the workload of cue word designers is reduced, the cue word quality is improved, and the risk of cue word asset loss is reduced.

The disclosure relates to an apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: receive (500), from a model provider function, a user equipment identifier and a model identifier; generate (502) an access key to allow a user equipment identified by the user equipment identifier to access a model identified by the model identifier; store (504) the user equipment identifier and the model identifier along the access key to allow a user equipment identified by the user equipment identifier to access a model identified by the model identifier; and send (506), to the user equipment, the access key.

The invention discloses a science and technology project archive digital management system and method, and belongs to the field of science and technology project archive management, and the system comprises an archive authority evaluation marking module, an analysis storage module, a registration login and authentication and encryption module; a right evaluation value is obtained by analyzing association complexity, updating frequency and the like of the archive, and an access right level is evaluated and stored in a hierarchical manner; an access key is generated and monitored during registration and login; performing three-level encryption on the file title, and displaying special characters when the file title is not decrypted; the method comprises the steps of authority level evaluation, file hierarchical storage, registration and login authentication and title encryption. The problems that in the prior art, file authority management is not fine, the encryption means is single, the login authentication process is tedious, and effective monitoring is lacked are solved, accurate authority management and control, title multi-level encryption and abnormal access monitoring are achieved, and the safety and efficiency of file management are improved.

The invention discloses a zero-trust-based dynamic password access management method, system and device and a medium, and the method specifically comprises the steps: collecting the context information of an access request, and dynamically adjusting the intensity of multi-factor authentication based on the context information to verify the identity of a user; after the identity verification is passed, combining user attributes, resource attributes and environment attributes which are obtained in real time, inputting the user attributes, the resource attributes and the environment attributes into a user behavior portrait model to carry out real-time risk assessment and authorization calculation, generating and granting a minimum necessary permission set to the user, and obtaining an authorization decision result; dynamically generating a temporary access key according to the user role and the resource sensitivity in the authorization decision result; and continuously monitoring user access behaviors, and inputting the user access behaviors into the deep behavior analysis model for real-time trust score calculation. According to the invention, a dynamic password access management system based on zero trust is constructed, the access security and management flexibility are comprehensively improved, and various security threats are effectively resisted.

The present invention relates to a method for sharing control authority of an IoT device, which belongs to the field of IoT technology. The function is that a master user shares the control authority of an IoT device with a non-master user, and the steps are as follows: the IoT device generates an encryption code and reports it to a cloud server; the cloud server uses the encryption code to encrypt the master user ID and the sharing information of the control authority to generate an authority access key; the non-master user requests the authority access key from the server, and the server feeds back the authority access key to the non-master user after receiving the request; the non-master user logs in to the IoT device using the authority access key to obtain the control authority. The method allows the IoT device to also perceive the user's control authority, thereby realizing direct control without the need for cloud server transfer, improving the user experience and reducing the risk of being illegally controlled.

Managing access to stored objects includes receiving, by a storage OS in a computing system, an access key identifier (ID) and access key associated with a user of an object storage service (OSS); determining, by a directory service, whether the user is a member of a group authorized to access a storage object in at least one of a network accessible storage (NAS) volume and an OSS bucket, based at least in part on the access key ID; in response to the user being a group member, attempting to authenticate the user by the storage OS with the directory service based at least on the access key ID and the access key; and in response to the user being authenticated by the directory service, allowing, by the storage OS, access by the user to the storage object stored in at least one of the NAS volume and the OSS bucket.

The embodiment of the invention discloses a cloud data docking method and device, equipment and a storage medium, and the method comprises the steps: carrying out the format conversion of target configuration data according to a preset interface rule in response to an input instruction of the target configuration data, and obtaining a target cloud identifier, a target function module identifier and a target access key; performing instantiation configuration according to the target cloud identifier and the function module identifier, and performing cloud login verification according to a configuration result of the instantiation configuration and the target access key; and under the condition that the cloud login verification is successful, obtaining a first key certificate, and accessing a cloud corresponding to the target cloud identifier based on the first key certificate to realize data docking. The docking standards of multiple cloud manufacturers can be unified, and the efficiency of accessing the cloud manufacturers and the switching efficiency among the multiple cloud manufacturers are improved.

A Web3 gamepad contains a secure element to hold the user's cryptographic identity to access their accounts with just the gamepad. These accounts are not limited to Web2 accounts, such as Netflix or Steam, but include Web3 accounts, to allow players to store access keys to a blockchain (NFTs . . . etc). The secure element can be removable if integrated into a hardware wallet module that is matable to the gamepad to allow for portability and compatibility with laptop / desktop, and to be able to substitute the gamepad in the event of accidental damage, without substituting the wallet.

A technique for controlling access to one or more attractions is achieved using a number of access keys, each being issued to one or more users. An electronic queue management part manages a virtual queue in respect of each attraction and receives electronic requests for attraction access, each request relating to an access key and being for the users associated with it to access a particular attraction. Receipt of each request causes the respective users to be added to a corresponding virtual queue. A time at which each group of users reaches the front of the virtual queue and can access the attraction is determined. The users access the attractions by presenting an access key to an access control part, in communication with the electronic queue management part. Only a user presenting an access key at the correct time for accessing the attraction is allowed access to the attraction.

The present disclosure discloses configuring a device to determine, for encrypted content, a content access key pair including a content access public key and a content access private key, the encrypted content being determined by encrypting content utilizing a symmetric key; configuring the device to determine, for a folder, a folder access key pair including a folder access public key and a folder access private key; configuring the device to encrypt the content access private key by utilizing the folder access public key; configuring the device to encrypt the symmetric key by utilizing the content access public key; configuring the device to transmit the encrypted content, the encrypted content access private key and the encrypted symmetric key to a stateless server for storage; and configuring the device to access the encrypted content by decrypting the encrypted content access private key and the encrypted symmetric key. Various other aspects are contemplated.

The invention discloses an encrypted disk creation method and a data persistence storage method and device, and relates to the technical field of multi-party security computing and the technical field of privacy computing, and the encrypted disk creation method comprises the following steps: creating a virtual disk block in a disk block directory of a disk block mounted on a confidential container; obtaining a device access key from a KMS module, the KMS module being located in another confidential container, the another confidential container being located in another Guest VM of the TEE; encrypting the generated data encryption master key based on the device access key, and storing the encrypted data encryption master key ciphertext in the disk block head of the disk block to obtain an encrypted disk block; and using the device access key to decrypt the data encryption master key ciphertext read from the disk block head of the encrypted disk block to obtain the data encryption master key, and loading the data encryption master key to the memory. By adopting the scheme, the data persistent storage based on the TEE confidential container is realized, the data persistent storage in the encrypted disk block is realized, and the security of data storage is improved.

Systems, apparatuses, methods, and computer program products are disclosed for providing interoperability between private and public blockchains. An example method for providing interoperability between private and public blockchains includes, by a key exchange controller (KEC): receiving access key generation instructions; generating, based on the key generation instructions, an access key comprising access credentials; transmitting the access key to an access key target on a public blockchain network; receiving, from the access key target, a access request including the access credentials and information indicating a private blockchain on a private blockchain network; and providing, in response to receiving the access request, access for the access key target to access the private blockchain of the private blockchain network.

Techniques are provided for implementing a persistent key-value store for caching client data, journaling, and / or crash recovery. The persistent key-value store may be hosted as a primary cache that provides read and write access to key-value record pairs stored within the persistent key-value store. The key-value record pairs are stored within multiple chains in the persistent key-value store. Journaling is provided for the persistent key-value store such that incoming key-value record pairs are stored within active chains, and data within frozen chains is written in a distributed manner across distributed storage of a distributed cluster of nodes. If there is a failure within the distributed cluster of nodes, then the persistent key-value store may be reconstructed and used for crash recovery.

Systems, apparatuses, methods, and computer program products are disclosed for providing interoperability between private and public blockchains. An example method for providing interoperability between private and public blockchains includes, by a key exchange controller (KEC): receiving access key generation instructions; generating, based on the key generation instructions, an access key comprising access credentials; transmitting the access key to an access key target on a public blockchain network; receiving, from the access key target, a access request including the access credentials and information indicating a private blockchain on a private blockchain network; and providing, in response to receiving the access request, access for the access key target to access the private blockchain of the private blockchain network.

The invention provides a block chain data credible interaction method based on multi-permission attribute-based encryption. The method comprises the following steps: step 1, initializing a system; the whole system generates initial parameters, including generation and uplink of public parameters and generation of public keys and private keys. And step 2, data encryption. A data owner in the system needs to organize and encrypt data and upload ciphertext information to a block chain. And step 3, generating a secret key. When a data user wants to access data of other data owners, the data user sends an access request to the block chain. After the access request of the data user is monitored, the block chain notifies the attribute authority to provide the access key. And 4, data decryption. And the data user who needs to access the encrypted data obtains the access key and then downloads the corresponding ciphertext. And the data user decrypts the ciphertext according to the system parameters and the attribute token to obtain the data.

A method includes receiving, by a processing device, a request to provide an entity with access to data associated with a user. A reference to location of the data within a data store controlled by the user and an access key associated with the data store is generated. Upon receiving an indication of user approval of the request, a response package is sent to the entity. The response package includes the reference to the location of the data, an obscured version of the data, and the access key. The data is obtained from the data store using the reference to the data and the access key provided by the entity. The data is provided to the entity.

A method for changing an existing access key in a field device in automation technology includes the steps of: providing a key database on a database server; generating a key data set for a user authorized to access or a control unit authorized to access from the key database; and transferring the key data set to the control unit of the access-authorized user or the access-authorized control unit, so that the control unit of the access-authorized user or the access-authorized control unit has the existing access keys of the field devices for which an access authorization exists. The key database is for a plurality of field devices and contains at least a field device identifier of a respective field device, the existing access key of the respective field device and the identifier of a user authorized to access and / or a control unit authorized to access the respective field device.

Apparatus receives, from a subscriber identity module (SIM) manager, a mobile network operator (MNO) profile comprising first provisioning parameters, for provisioning apparatus to a MNO, and a module comprising second provisioning parameters, for provisioning apparatus to an apparatus manager. Instructions provision apparatus to the MNO using the first provisioning parameters, and provisions the apparatus to an apparatus manager using the second provisioning parameters. The module may be an applet. Apparatus may store MNO profile and module in a security domain of an embedded universal integration circuit card (eUICC). Provisioning apparatus to the apparatus manager comprises sending, from the module to an apparatus manager application on the apparatus, the second provisioning parameters and sending, from the apparatus manager application to the apparatus manager, a request to provision the apparatus to the apparatus manager. The second provisioning parameters may include an access key. Data may be sent, from the module to the apparatus manager application, using the access key. Apparatus may receive, by the module from the application manager via the SIM manager, configuration parameters and store, by the module, the configuration parameters.

Embodiments of the present specification disclose an access key traceability method and device, electronic equipment, medium and program product. The method comprises: extracting a target private signature algorithm identifier and a target private signature in a to-be-traced access key; calling a target private signature algorithm corresponding to the target private signature algorithm identifier, performing calculation based on the to-be-traced access key, and obtaining a target calculation result; comparing a target calculation signature in the target calculation result with the target private signature, and obtaining a target access key traceability result corresponding to the to-be-traced access key; the target calculation signature is a string of a preset signature length corresponding to a preset position in the target calculation result; and the preset signature length is used to represent the length of a string corresponding to a private signature in an access key issued by the organization.

The implementations described herein relate to an automated assistant that can selectively determine whether to incorporate a verbatim interpretation of a portion of an oral utterance and / or synonymous content into an input field. For example, a user can access an interface that provides an input field (e.g., an address field) for receiving user input. To provide input for the input field, the user can select the input field and / or access a GUI keyboard to initiate the automated assistant for assisting in populating the input field. If the user provides an oral utterance, the user can choose to provide an oral utterance that embodies the expected input (e.g., an actual address) or a reference to the expected input (e.g., a name). In response to the oral utterance, the automated assistant can populate the input field with the expected input without further input from the user.

The present invention relates to granting access rights to control applications of an industrial automation system. A first control application (113, 123) is provided by a software container that is loaded into a container runtime environment (112, 122) installed on a host operating system (111, 121) and executed there. The first control application is monitored and configured by an application management system (200). Furthermore, the first control application is authenticated by the application management system. A second control application (114, 124) is executed directly on the host operating system (111, 121) and cryptographically authenticated. After successful authentication, data flows (11) from the first and second control applications to a target device (103, 301) and / or a target application are authenticated by means of an at least temporarily valid access key (12) inserted into the data flow.

Provided is a system-on-chip including a host central processing unit (CPU) and a secure element, wherein the secure element includes a primary device configured to transmit encrypted data, an internal bus configured to transmit the encrypted data, a plurality of secondary devices configured to receive the encrypted data, and a secure CPU configured to manage access keys indicating authorization of the primary device for accessing the plurality of secondary devices, and the internal bus sets a secondary device to which the encrypted data is to be transmitted from among the plurality of secondary devices, based on the access key and transmits the encrypted data to a set secondary device by using an error detection tag.

The application discloses a kind of based on SM2 algorithm and SM4 algorithm's password processing method and system, belong to computer information security technical field, comprising: the enhanced task control block including service index number and data amount is constructed;Based on historical performance data calculation processing coefficient, utilize double threshold hysteresis comparator decision serial or parallel mode, avoid mode frequent switching;Parallel mode is through load balancing weight function for subtask allocation IP core;Hardware synchronization control unit maintains three index tables being processing, blocking and having been processed, realizes the automatic blocking and wake-up of associated job package, and with service index number as address accesses key and intermediate state;Adopt interrupt aggregation and double buffering batch processing result;Based on sliding window adaptive calibration double threshold and dynamically adjusting weight coefficient.The application effectively reduces interrupt overhead, eliminates scheduling ping-pong effect, realizes hardware level job synchronization, improves load balancing and image encryption structure fidelity.

Techniques are provided for implementing a persistent key-value store for caching client data, journaling, and / or crash recovery. The persistent key-value store may be hosted as a primary cache that provides read and write access to key-value record pairs stored within the persistent key-value store. The key-value record pairs are stored within multiple chains in the persistent key-value store. Journaling is provided for the persistent key-value store such that incoming key-value record pairs are stored within active chains, and data within frozen chains is written in a distributed manner across distributed storage of a distributed cluster of nodes. If there is a failure within the distributed cluster of nodes, then the persistent key-value store may be reconstructed and used for crash recovery.