816 results about "Access token" patented technology

Systems and methods for providing access rights may include a first computing system that receives a request to link an enterprise account of the first computing system to a second computing system. The first computing system may authenticate a user, receive a selection of one or more access rights, and one or more accounts of the enterprise account, via an application interface of the second computing system, and generate an access token for transmission to a computing device of the user, where the access token identifies the one or more access rights and the one or more accounts. The first computing system may transmit the access token to the computing device, to provide the computing device access to the one or more accounts according to the one or more access rights, of the first computing system, via the second computing system.

The invention relates to the technical field of data access security, and discloses a container mirror image security management method and system, and the method comprises the steps: constructing a container mirror image, generating a differential encryption key through a strategy center, carrying out the encryption strategy of a kernel dependence layer, a runtime environment layer, an application code layer and a sensitive configuration layer, and forming a hierarchical protection basis. If an access request is triggered, firstly collecting equipment fingerprints and geofence information and evaluating an environmental risk score, verifying access authority and an access scene matching degree through attribute-based encryption, analyzing operation track characteristics in real time, identifying an abnormal mode, and if the three-layer verification is passed, generating a temporary access token; according to the method, access request authority is verified, a temporary access token is matched, key fragments are synthesized, a master key is only temporarily generated in a memory and encrypted and stored, and through combination of a double-layer encryption channel and inner-layer and outer-layer defense, the anti-attack ability of container mirror image transmission is improved, and man-in-the-middle attack and data tampering are effectively coped with.

The invention relates to the technical field of traffic data processing, and discloses a traffic edge computing data security sharing method and system, and the method comprises the steps: collecting traffic edge computing network multi-source heterogeneous data, and carrying out the classification standardization processing to generate a structured data set; designing a dynamic data sharing security protocol based on a multi-party security computing protocol and a homomorphic encryption algorithm; verifying the authority of a requester in a multi-level manner by using an attribute-based access control model and a zero-knowledge proof mechanism, and generating a dynamic access token; storing data by adopting a fragmentation storage and redundancy encryption strategy, and recording storage information through a hash chain; and dynamically adjusting the encryption strength and the sharing strategy according to the network threat level and the data sensitivity. The method effectively guarantees safe sharing of traffic data, accurately controls access authority, improves storage and sharing efficiency, adapts to complex network environment changes, and provides powerful support for development of an intelligent traffic system.

Systems, apparatus, and methods of managing access to private data via tokens are disclosed. The disclosed techniques provide for constructing digital tokens that represent a right-to-access private data where the tokens can be managed as individual objects. Further, such digital access tokens (DATs) can be recorded on a notarized ledger, a blockchain for example. Additionally, the rights-to-access can be embodied as a non-fungible token (NFT), which could further include support for establishing homomorphic encryption workspaces in which private data can be accessed or manipulated without exposing the private data.

Systems, apparatus, and methods of managing access to private data via tokens are disclosed. The disclosed techniques provide for constructing digital tokens that represent a right-to-access private data where the tokens can be managed as individual objects. Further, such digital access tokens (DATs) can be recorded on a notarized ledger, a blockchain for example. Additionally, the rights-to-access can be embodied as a non-fungible token (NFT), which could further include support for establishing homomorphic encryption workspaces in which private data can be accessed or manipulated without exposing the private data.

Embodiments include methods performed by a service consumer network function (NF) of a communication network. Such methods include sending, to a network repository function (NRF) of the communication network, a request for an access token for notifications from a service producer NF of the communication network. The request includes a list of alternative notification endpoints. Such methods also include receiving, from the NRF, an access token for the notifications from the service producer NF. The access token includes the list of alternative notification endpoints. Such methods also include sending, to the service producer NF, a subscription request for the notifications. The subscription request includes the received access token, a primary notification endpoint, and binding information usable for selecting an alternative notification endpoint from the list. Other embodiments include complementary methods performed by NRFs and service producer NFs, as well as network nodes / functions that perform such methods.

The invention provides a data privacy protection method for a data governance system, and belongs to the technical field of data governance, and the method comprises the steps: carrying out the cross verification of multi-source feature data and the unique identification information of an object collected on site, generating an original data set, carrying out the sensitive information recognition and grading, and generating the preprocessing data with a sensitive grade label; core identification information in the preprocessed data is disassembled to generate standardized desensitized data conforming to privacy protection, a bidirectional encryption mapping relation is established between object unique identification information collected on site and the standardized desensitized data, an encryption index is formed, the encryption index and preset multi-dimensional compliance data are fused, and a data fusion result is obtained; generating standardized fusion data; and based on the access token, generating a differential authorization data set divided according to permission granularity, performing privacy disclosure risk assessment, generating a risk level, performing privacy processing on the risk level, and outputting the risk level to a risk control system. And the data management efficiency is improved.

The invention relates to the technical field of information security, provides an intelligent warehouse login verification method and system based on dynamic living body detection, and is used for realizing accurate generation of an identity label vector, enhanced authentication of a dynamic password and automatic matching of warehouse authority while accurately performing living body detection. And the security and convenience of warehousing system login are comprehensively improved. The method comprises the following steps: collecting real-time interaction action data of a warehousing system login user, calling a preset living body detection algorithm to carry out dynamic biological characteristic analysis on the real-time interaction action data, and generating a living body verification confidence coefficient and a user identity identification vector; performing dynamic password enhanced authentication according to the living body verification confidence coefficient and a preset security authentication threshold value, and generating a dynamic access token containing multiple layers of encryption identifiers; and based on the user identity identification vector and the dynamic access token, executing storage permission automatic matching processing, and outputting a login verification result associated with the user permission level to the storage system according to the permission matching label.

A method and apparatus are disclosed for generating permission-based large language model responses by using a query received from a user to identify a plurality of documents that are semantically similar to the query, using an access token received from the user to identify user accessible documents from the plurality of documents that the user is permitted to access, processing the user accessible documents to define a context of user accessible documents that is associated with the query, and then submitting the query and the context of user accessible documents to a large language model (AI system) to generate an AI system response to the query.

A cloud deployment automation system consisting of: a deployment automation device housed in a rack-mountable enclosure, the device comprising: a multi-core orchestration processor configured to execute deployment logic as compiled execution graphs; a storage module operatively coupled to the orchestration processor, the storage storing a set of deployment templates, real-time execution states, telemetry logs, and policy configurations; a secure credential management processing unit embedded in the device, configured to generate, store, and rotate cloud access tokens, API keys, and user-specific credentials, and to provide encrypted access to those credentials during deployment execution; an in-memory workflow execution engine executed by the orchestration processor, configured to analyze a user-defined deployment configuration that includes a declarative specification of infrastructure resources and compile that configuration into a directed acyclic graph (DAG) that represents the resource deployment order, dependency mapping, and rollback relationships, a cloud provider interface subsystem communicatively connected to multiple heterogeneous cloud platforms via appropriate API adapters, the subsystem enabling the orchestration processor to send provisioning requests and receive status events from the platforms; a customizable workflow compiler unit configured to convert graphical workflow definitions or domain-specific language (DSL) scripts into execution sequences that can be used by the workflow execution engine, where the workflow compiler unit supports conditional branching, asynchronous operations, and runtime variable resolution; and A policy enforcement control unit integrated into the deployment automation device, with the policy engine configured to apply organization-specific compliance rules, tagging conventions, security group configurations, and runtime resource limits to all deployment actions in a context-aware manner prior to execution.

Systems and methods for scheduling actions in remote networking environments while minimizing exposure of secured access credentials using a bifurcated security approach. The system may receive confirmation of a first verification that the first user is authorized to access the remote server. The system may, after providing access to the remote server, receive and schedule a first action. The system may generate a first access token for the remote server, wherein the first access token is specific to the first user. The system may authorize, via a second verification, the first action based on determining that the first access token is currently valid.

Various embodiments described herein relate to systems, methods, and non-transitory computer-readable media structured to perform server-to-device secure data exchange using a device access token. In an embodiment, a smart device receives, from a requestor entity provided to the smart device, an account data provisioning request for an account. Based on the account data provisioning request, an account identifier for the account is determined. In some arrangements, the account identifier comprises or is associated with a device access token. Based on the device access token, a data element associated with the account is determined. In some embodiments, the data element is accessible to the requestor entity only if it is not access-restricted based on the device access token. Based on the data element, an executable graphic rendering instruction is generated. The executable graphic rendering instruction is executed, which includes generating and displaying, on a user interface of the smart device, a dynamic account status indicator relating to the account.

The invention provides an identity authentication and access control method and device for a low-altitude aircraft, and the method comprises the steps: obtaining environment data, equipment state data and a historical authentication log of the low-altitude aircraft, and obtaining collection data; inputting the collected data into an AI decision engine, and generating an authentication factor combination through a pre-trained deep reinforcement learning model to obtain a main factor and a standby factor; performing identity authentication of the aircraft by using the main factor, and when the matching degree of the identity authentication of the main factor is in a preset interval, triggering a standby factor to perform secondary identity authentication to obtain an authentication result; and an access token is generated according to the authentication result and the risk assessment model, and the aircraft performs access control according to the access token. The invention relates to the field of low-altitude security management and control, and solves the technical problems that the identity authentication security of a low-altitude aircraft is insufficient and the low-altitude aircraft cannot dynamically adapt to a complex airspace environment in the prior art.

Disclosed are example methods, systems, and devices that allow for secure digital authorization via generated datasets. The techniques include receiving a first dataset of a first user and a second dataset of a second user and generating a first set of identity elements and a second set of identity elements based on the first dataset and the second dataset, respectively. A linkage definition can be generated based on the first and second datasets, which can be associated with a set of activation elements. The techniques include determining that a set of inputs satisfy one or more of the set of activation elements and, in response, generating a set of security access tokens based on the linkage condition. The security access tokens can be transmitted to a computing device upon analyzing and verifying biometric data received from that computing device.

The invention relates to the technical field of database security, and discloses an MCP and agent-based heterogeneous database security access and report generation method, which comprises the following steps of: receiving a task request, acquiring a task context, synchronizing capability declarations from a plurality of database adapters according to the MCP, generating a capability graph and determining a capability version identifier; performing semantic mapping to obtain a strategy inline rewriting rule and a rewriting abstract fingerprint; the method comprises the following steps: signing and issuing a minimum permission access token, generating cross-source query, performing forced rewriting according to a strategy inline rewriting rule in a compilation stage, verifying consistency, processing an original result to obtain a purified result, only allowing to read a generated report from a buffer area of the purified result under the constraint of a structured mode template, and calculating a report fingerprint at the same time. And writing a chained audit log, fixing the audit log, and verifying report reproduction based on the audit log. According to the method and the system, minimum access, unauthorized prevention and control, compliance audibility and result reproducibility are realized.

A method for detecting and mitigating security attacks on producer network NFs using access token to non-access-token parameter correlation at a proxy NF includes receiving an inter-PLMN SBI request message. The method further includes obtaining, from an access token transmitted with the inter-PLMN SBI request message, at least one network- or service-identifying parameter and obtaining, externally from the access token, at least one network- or service-identifying parameter. The method further includes comparing the at least one network- or service-identifying parameter obtained from the access token and the at least one network- or service-identifying parameter obtained externally from the access token and performing a network security action when the at least one network- or service-identifying parameter obtained from the access token does not match the at least one network- or service-identifying parameter obtained externally from the access token.

The invention discloses an energy big data right confirmation method and system based on a hierarchical hash tree and dynamic authorization, and belongs to the field of energy big data management and information security, and the method comprises the steps: obtaining and standardizing original data in an energy scene, and dividing the original data into a data block set according to equipment and time; constructing a hierarchical hash tree and generating root hash; writing the root hash and the associated metadata into the block chain to realize right confirmation and evidence storage; executing proxy re-encryption according to the access token, and converting the ciphertext into a decryptable format; verifying the data consistency through the Hash path and the root Hash, and completing the access; and recording the access behavior and distributing transaction earnings by the smart contract based on the contribution degree. Hash calculation and local path updating of a data block level are supported through a layered Hash tree structure, so that when large-scale energy data is frequently updated, a new root Hash value can be quickly generated and right confirmation updating can be completed only by carrying out local Hash recalculation on a changed path.

The invention relates to the field of front-end technology, can be applied to the field of digital medical / financial science and technology, and discloses a front-end multi-tenant management method and device, electronic equipment and a storage medium. The method comprises the following steps: returning a security access token corresponding to a target tenant by using an authentication mechanism based on a token or third-party authorization according to a tenant registration request; when registration succeeds, role configuration data and permission configuration data of the target tenant are generated; when it is monitored that login is successful by using the security access token, creating a micro-front-end application and different micro-front-end modules of the target tenant according to the role configuration data and the authority configuration data; starting a micro-front-end application, and dynamically loading a micro-front-end module according to the role configuration data and the authority configuration data; and executing mixed mode rendering on the front-end module at the server side and the tenant side through the integrated front-end framework to obtain a front-end rendering page of the target tenant. According to the method, multi-tenant security isolation is realized, resources are loaded as required, and system performance and expansibility are guaranteed.

Systems and methods are disclosed for real time, frictionless channel switching to map and transpose a transaction on a preferred channel from an incoming channel. The systems and methods may use a machine learning model that processes features from a plurality of channels to determine the preferred channel. An omni channel processor is used to determine intended functionality data of the transaction for the preferred channel. The systems and methods may generate transposed intent data based on the intended functionality data of the transaction for the preferred channel. A deep link is generated and embedded with the transposed intent data and a channel access token for the transaction on the preferred channel. The deep link is configured to access and complete the requested transaction on the preferred channel.

The invention discloses a gynaecology and obstetrics emergency medical data security sharing system based on a block chain, and relates to the technical field of medical information processing. The method is used for solving the security and timeliness problems of multi-mechanism data sharing in an emergency scene. The method comprises the following steps: firstly, performing grading processing and desensitization on personal identifiers and medical data of patients through a data grading and desensitization module, and outputting data which can be safely shared; then, an on-chain evidence storage module performs windowing processing on the continuous monitoring data flow, extracts key physiological features, generates feature value Hash, constructs data feature descriptors and submits the data feature descriptors to a block chain network; the emergency access token management module realizes dynamic authorization through a smart contract, and generates a temporary access token associated with the data feature descriptor; and finally, the secure decryption and data sharing module verifies the authority based on the hierarchical decryption key, decrypts the data and compares the eigenvalue hash, and shares and records an operation log with an authorization party after ensuring the data integrity, thereby realizing efficient, secure and traceable data sharing.

The invention discloses a supply plan system-oriented client persistent login method, which comprises the following steps of: acquiring an access token, a refresh token and an access token timestamp from a server based on successfully authenticated user login information; when a request is sent to a server, triggering a request interceptor to obtain an access token timestamp, and judging whether the access token timestamp is expired; and after the refresh token is added in the request, a request authentication interface carrying the refresh token is sent to the server side, or after the access token is added in the request, whether the access token added in the request is valid is judged, and if the access token is valid, the request authentication interface carrying the access token is sent to the server side. Therefore, whether the access token is refreshed or not can be judged in advance at the client through the access token timestamp, so that the problem that a user needs to perform login authentication again due to the fact that the access token is found to be expired only after the request arrives at the server is avoided, the login frequency of the user is reduced, and the use experience of the user is improved.

According to an example aspect of the present invention, there is provided a method, comprising: obtaining (200) client credentials associated with a subscriber identity module of a user equipment, sending (210), to an authorization function, an access token request for an access token to authorize, for an application function outside a mobile network, access to a network exposure function of the mobile network, wherein the access token request comprises the client credentials, receiving (220) the access token issued by the authorization function, and sending (230) an access request to the network exposure function to access a service of the mobile network via the network exposure function, wherein the access request comprises the received access token.

The invention relates to the technical field of Internet of Things data management, in particular to an intelligent terminal identity authentication and data security management method, system and device based on a block chain and a medium, and the method comprises the steps: generating a unique identity label and a public and private key pair of an intelligent terminal device, a fog node and a user, packaging a digital certificate, and writing the digital certificate into a block chain network; the intelligent terminal equipment initiates a registration request, and the blockchain network distributes a hosting fog node to the intelligent terminal equipment after verification is passed; the intelligent terminal device generates data, constructs a data fingerprint, sends the data fingerprint to the block chain network for storage, encrypts the data, and sends the data to the hosting fog node for storage; a user initiates an authentication request, and a temporary access token is generated after verification is passed; and establishing a secure communication channel by using the temporary access token, obtaining the required encrypted data stored by the fog node, decrypting to obtain the required data, and verifying the integrity of the required data by using the data fingerprint. According to the invention, the overall security and reliability of data management of the Internet of Things system can be significantly improved.

In some implementations, a system is provided for securely transferring access credentials from a mobile device that is exclusively operated by a single user, to a terminal device that is shared among multiple different users, via a session server. A session is established between the session server and the terminal device over a secure communication channel. The terminal device generates a key pair, transmits the public key to the session server, and stores the private key. The terminal device outputs a detectable code corresponding to the session. In response to detecting the detectable code, the mobile device transmits an access token payload to the session server. The session server transmits, to the terminal device, an encrypted access token that has been encrypted using the public key. The terminal device decrypts the encrypted access token using the stored private key, and provides operator access to the terminal device.

The invention relates to a security authentication method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: receiving a key generation request sent by target equipment; if it is determined that the key generation request is legal, generating a trust identifier and a security certificate of the target device, obtaining an identifier verification request through the trust identifier, and sending the identifier verification request to an authentication server, so that the authentication server verifies the trust identifier to obtain an access token corresponding to the target device; receiving a message returned by the authentication server, and processing an access token carried by the message to obtain a trust identifier; and writing the security certificate into the target protection area, and sending the trust identifier and the security certificate to the target equipment, so that the target equipment is registered in the authentication server. By adopting the method, the identity verification of the equipment and the control of an encryption communication mechanism are realized, and the safety protection performance in a communication system is further improved.

A data analytics system receives a data access request from a client device at a control plane. The data access request is a request to access a set of target data files stored by the data analytics system. The data analytics system identifies a data plane that stores the set of target data files and generates an access token for the client device based on the request and the identified data plane. The access token is a token that contains authorization information for the client device to request the target data files directly from identified data plane. The client device can transmit the access token to the data plane to request the target data files. The data plane receives the data file request with the access token, collects the target data files, and transmits them to the client device.

Various examples of embodiments described herein relate to methods and apparatuses for mitigation against access token theft attack in direct and indirect communications in SBA. One such example of an embodiment relates to a method that includes obtaining a first access token request from a network function service consumer, NFc, the first access token request comprising an authentication code of the NFc; authenticate the network function consumer, NFc, based on a check whether the authentication code is signed by the NFc; sending a second access token request to a network authorization entity or function, wherein the second access token request comprises the authentication code of the NFc and the second access token request further comprises a public key of the NFc or a hash of the public key of the NFc; based thereon, receiving an access token from the network authorization entity or function, wherein the access token comprises the public key of the NFc or a hash of the public key of the NFc; and sending a service request to a network function service provider, NFp, wherein the service request comprises the access token and the authentication code of the NFc.

Systems, apparatus, articles of manufacture, and methods are disclosed for aliasing scopes in access tokens. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to at least one of instantiate or execute the machine readable instructions to detect a request to create an identity to access an online resource, the message including at least one scope assignment associated with a user of the computing device, determine that an alias has not been created for the at least one scope assignment, the alias to represent two more scopes assigned to the user, and generate the alias for the scope assignment, the alias having less characters than the scope assignment.

The embodiments of the present disclosure relate to a permission management method and apparatus, and a device and a storage medium. The method provided herein comprises: receiving an application request from a proxy service, wherein the application request indicates permission information of a target application regarding a set of resources; sending to the proxy service an access token corresponding to the permission information; receiving from the target application an access request for a target resource, wherein the access request comprises the access token; determining whether the access request matches the permission information corresponding to the access token; and in response to the access request matching the permission information, authorizing the target application to access the target resource. In this way, the embodiments of the present disclosure can improve the security and flexibility of resource access.

Systems and methods are disclosed for real time, frictionless channel switching to map and transpose a transaction on a preferred channel from an incoming channel. The systems and methods may use a machine learning model that processes features from a plurality of channels to determine the preferred channel. An omni channel processor is used to determine intended functionality data of the transaction for the preferred channel. The systems and methods may generate transposed intent data based on the intended functionality data of the transaction for the preferred channel. A deep link is generated and embedded with the transposed intent data and a channel access token for the transaction on the preferred channel. The deep link is configured to access and complete the requested transaction on the preferred channel.