299 results about "Anonymity" patented technology

The invention discloses a human resource management method and system based on data security. The method comprises the steps that multi-source human resource data are collected through a standardized interface, and sensitive levels are marked in a classified mode; calling a dynamic encryption engine based on the sensitive level and the data type, performing asymmetric encryption on the structured data, and performing hybrid encryption on the unstructured data; a dynamic hierarchical access control strategy is generated in combination with user roles and service scenes, and the permission range is adjusted in real time; laws and regulations such as GDPR and CCPA are analyzed through a compliance rule base, data operation legality is automatically verified, and illegal behaviors are blocked; k-anonymity and differential privacy technologies are adopted to desensitize sensitive data, and privacy protection and data availability balance are ensured; and recording a full-process operation log based on the block chain and generating a non-tampering audit report. The system comprises a data classification acquisition module, a dynamic encryption engine module, an access control engine module and the like. According to the method, the problems of data protection rigidness, compliance response lag and privacy-utility imbalance of a traditional HR system are solved.

The invention relates to the technical field of campus management, and particularly discloses a smart campus management system based on big data, an event-driven data management architecture is used for dynamically collecting, integrating and associating multi-source heterogeneous data in a campus, and generating a standardized event stream; the dynamic resource scheduling engine is in communication connection with the event-driven data governance architecture, generates a resource allocation instruction based on event types and priorities in event streams, and dynamically deploys campus resources; the closed-loop evaluation optimization module receives a resource scheduling result of the dynamic resource scheduling engine and generates a multi-dimensional evaluation index, and the multi-dimensional evaluation index is fed back to the data governance architecture through root cause analysis so as to optimize a subsequent decision; the privacy enhancement processing unit integrates a federated learning framework and a differential privacy algorithm, performs collaborative analysis on cross-system data and ensures the anonymity of individual data; through three core technologies of dynamic data management, intelligent resource scheduling and closed-loop evaluation optimization, intelligent upgrading of the whole campus management process is realized.

Various systems, computer-readable media, and computer-implemented methods of providing improved data privacy, anonymity and security by enabling subjects to which data pertains to remain “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent that is desired—are disclosed herein. Embodiments include systems that create, access, use, store and / or erase data with increased privacy, anonymity, and security—thereby facilitating the availability of more qualified and accurate information. When personal data is authorized by data subjects to be shared with third parties, embodiments described herein may facilitate the sharing of information in a dynamically-controlled manner that also enables the delivery of temporally-, geographically-, and / or purpose-limited information to the receiving party. In one example, the disclosed techniques may be used to functionally separate geospatial information, such that it remains “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent or degree that is desired.

The invention provides a double-stream video conference privacy tracing method based on a block chain, and the method comprises the steps: building a tracing evidence obtaining model which comprises information uplink and tracing evidence obtaining; the information uploading comprises the following steps: in a video conference process, audio and video data and related conference information are uploaded to an interstellar file system for storage and verification after being subjected to encryption and signature processing through a threshold ring signature mechanism, and key evidence is uploaded to a block chain; the intelligent contract is used for automatically managing data storage; the traceability evidence obtaining comprises the following steps: after leaked picture information is obtained, detecting a traceability identifier in a video or a picture, and comparing the traceability identifier with information stored on a chain; a secret divulging block point is automatically tracked and positioned through an intelligent contract, and the real identity of a secret divulging party is decrypted. According to the method, tampering resistance, transparency, decentration and anonymity of chain information in the traceability evidence obtaining process are achieved, and automatic evidence obtaining and traceability operation is supported.

The provided is an anonymity algorithm-based data sharing privacy protection method. The method includes: identifying and merging an attribute that requires privacy protection, and specifying an anonymity processing object; performing first clustering by a MSAK anonymity algorithm to divide an original data set into a plurality of first subdata sets, and separating an outlier of each of the first subdata sets to form second subdata sets and a first tuple set to be allocated; performing second clustering on each of the second subdata sets to generate a plurality of clustering clusters including similar tuples, and determining the sizes of the clustering clusters and clipping distant tuples to form a first clustering cluster set, a second clustering cluster set and a second tuple set to be allocated; and performing third clustering, allocating all tuples to be allocated, and replacing all the tuples in the clustering clusters with clustering centers.

The invention discloses a static database self-adaptive fuzzification desensitization implementation method for highly sensitive data in the power industry. The method comprises the following steps: a data preprocessing module, a sensitivity analysis module, a fuzzification algorithm module, a self-adaptive mechanism module and an effect evaluation and verification module. Compared with the prior art, the method has the advantages that 1, self-adaptive dynamic adjustment is performed: a desensitization strategy is automatically optimized according to data characteristics and use scenes, and privacy protection indexes (such as k-anonymity values) are improved by 30%-50%; 2, multi-dimensional balance: the information loss rate is reduced by 10%-20%, the query accuracy is improved by 5%-10%, and safety and service requirements are considered; 3, system expansibility: a plug-in architecture supports dynamic loading of new algorithms and rules, and a configuration management module realizes strategy real-time adjustment; and 4, compliance guarantee: through a law and regulation rule base and a compliance check algorithm, the compliance is ensured to meet the standard.

The invention relates to an alliance chain identity privacy protection method and system based on multi-level group signature and distributed key management, and belongs to the field of block chain technology, network and information security. According to the method, a multi-level group signature structure is adopted, anonymous identity verification is achieved in the transaction process, privacy protection is further enhanced through zero-knowledge proof, anonymous identity verification is achieved in the transaction process, it is ensured that privacy of participants is not leaked, a homomorphic encryption algorithm is used in the signature and verification process of transaction data, and the transaction data are subjected to identity authentication. And privacy leakage is prevented. And meanwhile, the Shamir secret sharing algorithm divides the master key and stores the master key in a plurality of sub-group members in a distributed manner, so that the anti-attack capability and the key security are enhanced. According to the method, a dynamic group member management and double signature verification mechanism is further introduced, so that the flexibility and the overall security are improved. The method has significant advantages in the aspects of identity anonymity, data integrity and efficiency, and is suitable for alliance chain application scenarios with high privacy and security requirements.

The Central Bank Digital Currency (CBDC) introduced here is software only and anonymous—yet aggregation of amounts larger than those issued each user is thwarted. Each user has the ability to undo the anonymity of any value they should obtain, and this ability is in effect irrevocable even if the user wishes to give it up, which makes value obtained from multiple users risky to hold or spend. If the value issued a user has already been spent by someone other than the user, for instance, the user can at least reveal where it was spent; but if the value is not already spent, the user can spend it first thereby preventing anyone from spending it later.

The invention discloses a decentralized traceable ring signature authentication method and system, and a storage medium, and the method comprises the steps: carrying out the verification of a ring signature result and a public key vector, and verifying the legality of a signer corresponding to the ring signature result; and if the ring signature result passes verification and the number of the users agreeing to trace is greater than or equal to the threshold, obtaining the index of the signer member by tracing the fragment private key of the user, thereby completing the tracing operation. By adopting the technical scheme provided by the invention, the traceability of anonymity and decentralization can be provided for a signer, and the security and reliability of digital signature are improved.

The invention discloses a financial data processing evaluation method, system and device based on the Internet of Things, and relates to the technical field of financial data processing. The financial data processing evaluation method based on the Internet of Things comprises the following steps of data processing, anonymous evaluation, encryption evaluation and comprehensive judgment. According to the method, the obtained to-be-shared financial data is preprocessed to obtain the financial shared data, then the financial shared data is subjected to data anonymization processing and then is evaluated to obtain the anonymous evaluation index, and then whether data encryption is executed or not is judged based on the anonymous evaluation index and the preset anonymous threshold range; and finally, the data encryption strength is evaluated to obtain an encryption strength effect evaluation value, and whether the financial encrypted data is transmitted or not is judged, so that the effect of improving the security of the financial institution during financial data sharing is achieved, and the problem of relatively low security of the financial institution during financial data sharing in the prior art is solved.

The invention relates to the technical field of identity authentication and information security, in particular to an SM2 ring signature scheme with revocable and anonymity. According to the scheme, the data can be digitally signed while the privacy security of a signer is protected, and any user can verify the correctness of the digital signature. In addition, identity tracking is performed on the signer of the dishonor, the identity of the dishonor is exposed, and the possibility of occurrence of the dishonor behavior is reduced. When a signer executes a signature process, the signer must firstly send a unique identity tag ID to a third party, and the third party adds the ID into a set L and returns a signature parameter R to the signer. And the signer executes an SM2 ring signature algorithm with revocation and anonymity by using the R to generate a digital signature and a revocation label. And the user requests to use the data, discovers that the data has problems in the use process, requests the third party to cancel the anonymity of the signer, executes a signature cancel algorithm by using a cancel label, and returns the identity of the signer, so that the real signer is exposed.

The invention discloses a face anonymous method based on a StyleGAN encoder and a skin color matching generative adversarial network. The method comprises the following steps: converting an original face image into a semantic segmentation map by using a pre-trained face semantic segmentation model BiSeNet; utilizing a translation encoder to extract posture potential representation of the semantic segmentation map, and utilizing an identity encoder to extract identity potential representation information of the reference face image; fusing the posture potential characterization information and the identity potential characterization information to obtain a new potential characterization which keeps the original face posture and is different from the original face identity, and converting the injected new potential characterization into a preliminary anonymous face image through a StyleGAN generator; and fusing the generated anonymous face image and the background of the original image by using a skin color matching generative adversarial network to realize final face anonymity. The anonymity of the anonymous picture, the face detection performance, the image generation quality, the diversity, the facial expression recognition performance and the picture integrity are improved.

The invention discloses a blockchain identity privacy protection system. The system comprises a user, an authentication center, a transaction verification party and a supervision party, the user comprises a receiving party and a sending party, the receiving party and the sending party respectively generate a secret key, and a real-name authentication request is submitted to the authentication center by using a public key in the secret key; the sender respectively generates one-time public keys by using the public key of the sender and the public key of the receiver, and then generates transaction information by using the one-time public keys; and the supervisor extracts the supervision ciphertext from the transaction information, and decrypts the supervision ciphertext by using a private key in the supervision key to obtain the real identities of the sender and the receiver so as to realize off-line supervision. On the basis of ensuring identity secrecy of transaction participants, a supervisor is allowed to identify the real identity of a transaction party offline when necessary so as to realize controllable anonymous supervision requirements, correct operation of a protocol is ensured through an anti-quantum zero-knowledge proof technology, required computing resources and time are reduced, and correctness of communication data is ensured.

The invention belongs to the technical field of information security, and particularly relates to a decentralized traceable ring signature method and system based on a block chain. The method comprises the following steps: S1, generating global parameters through a system initializer, and respectively generating respective key pairs for a signature user and a tracer group; s2, constructing and generating a traceable ring signature according to respective key pairs of the signature user and the tracer group generated in the step S1; and S3, when the identity of the signer needs to be revealed, submitting a secret key share by a traceability reaching a set threshold, jointly recovering the traceability, and positioning a real signature user according to the traceable ring signature. The method has the advantages of being safer, more reliable and more transparent, meeting the decentration principle and meanwhile being capable of guaranteeing anonymity of user data processing.

Enhanced dynamic security with partial data access to preserve anonymity is provided herein. An example method comprises storing personally identifying information (PII) about an end user in a database, organizing data in the database into tokens, determining, upon receiving a request for the PII from an agent in communication with the end user, that the agent is authorized to access the PII, granting the agent temporary access to the PII, and removing the PII from a device associated with the agent.

The invention relates to the technical field of voiceprint recognition, in particular to an anonymous speaker identity verification traceability system which comprises an audio input module, a preprocessing module, a forged audio detection module, a voiceprint traceability module, an identity and anonymous technology confirmation module, a normal audio processing module and an identity verification module. The forged audio detection module is connected with the preprocessing module, the voiceprint traceability module and the normal audio processing module are both connected with the forged audio detection module, and the identity and anonymity technology confirmation module and the identity verification module are respectively connected with the voiceprint traceability module and the normal audio processing module. In this way, the technical problems that in the prior art, a voiceprint authentication system is good in performance in a normal environment, but lacks enough mechanisms to recognize and defend sounds processed through an advanced anonymous technology, and consequently the detection capacity of forged audios is insufficient, traceability is lacked, and adaptability and flexibility are insufficient are solved.

Various systems, computer-readable media, and computer-implemented methods of providing improved data privacy, anonymity and security by enabling subjects to which data pertains to remain “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent that is desired—are disclosed herein. Embodiments include systems that create, access, use, store and / or erase data with increased privacy, anonymity, and security—thereby facilitating the availability of more qualified and accurate information. When personal data is authorized by data subjects to be shared with third parties, embodiments described herein may facilitate the sharing of information in a dynamically-controlled manner that also enables the delivery of temporally-, geographically-, and / or purpose-limited information to the receiving party. In one example, the disclosed techniques may be used to functionally separate geospatial information, such that it remains “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent or degree that is desired.

A method, apparatus, and computer program product are provided for establishing and applying a second level of anonymization of trajectories to improve privacy. Methods may include: receiving anonymized mobility data for a geographic region subdivided into a plurality of map tiles, where the mobility data includes a plurality of probe data points anonymized with a first anonymization level, where sequences of probe data points define trajectories; determining, based on the anonymized mobility data, one or more map tiles of the plurality of map tiles where anonymization of trajectories using the first anonymization level fails to satisfy a predefined anonymity parameter value; removing a subset of the anonymized mobility data corresponding to the one or more map tiles; and publishing the anonymized mobility data without the subset of the mobility data corresponding to the one or more map tiles for use with one or more location-based services.

The invention relates to an anti-quantum anonymity two-factor authentication key negotiation method, and belongs to the technical field of information security. The negotiation process comprises the following steps: a client U sends login request information to a server S based on an intelligent card issued by the server S, wherein the login request information comprises a first ciphertext C1, a random number R and a first message check code F1; the server S verifies the received login request information, generates a session key and sends a response message to the client U, and the response message comprises a second ciphertext C2 and a second message check code F2; the client U verifies the received response message, obtains the session key, generates a third message verification code F3 and sends the third message verification code F3 to the server S; and the server S verifies whether the negotiation is successful based on the third message verification code F3. According to the method, two-way authentication and two-way confirmation are achieved through three message verification codes, on the premise that digital authentication infrastructure does not need to be transformed, client information identity is hidden, identity authentication and key negotiation of digital financial payment are achieved, and better safety and good usability are achieved.

To make a postcard EM (postcard token) recorded on a block chain part coexist both in the case of emphasizing anonymity and in the case of being useful to specify a false caller of crime prevention.SOLUTION: An EM is stored in a block chain part 30DLR about a postcard data EM to be stored in block data of a block chain part of a node 3A. The data EM records / includes a digital signature part ETHCAS by a certificate derived from a user private key to be used in a block chain or a signature part CAPCAS by a certificate (e.g.: a certificate of an ID card and a private key) by the outside. The ETHACAS may form a circle of trust in the form of registering a registered user in a list through authentication between users.SELECTED DRAWING: Figure 1

The invention discloses a batch message verification method and system applied to an industrial internet of things, and relates to the technical field of wireless network security communication. According to the message authentication method, the compute-intensive tasks are unloaded to the edge server, the certificateless aggregation signature algorithm is adopted for message batch verification, system server computing resources are fully utilized, and the message processing efficiency is remarkably improved. Identity-based pseudonym information is adopted to encrypt the message, the complexity of key management and the requirement for verifying a public key certificate are eliminated, the required identity information amount is reduced, compared with a certificate-based system, the key storage, distribution, generation and verification processes are simplified, the processing efficiency of the system is improved, meanwhile, the anonymity requirement is met, and the safety of the system is improved. And the safety of the system is improved.

The invention discloses an Internet of Vehicles cross-domain authentication method based on a block chain and a self-sovereignty identity, and the method provides a set of cross-domain authentication service that a high-speed moving vehicle carries out an application service request among different security domains, and can achieve the distributed sharing of vehicle identity authentication information among different security domains. The cross-domain authentication time delay is effectively reduced, meanwhile, the vehicle completely has the control right of identity information, and necessary information of cross-domain authentication can be selectively disclosed. A distributed identity information management architecture is established based on an alliance chain, identity credential information of a Merkel tree structure is stored in a dynamic accumulator on the alliance chain, a sparse Merkel tree is adopted to construct a vehicle access credential, and privacy information leakage in a cross-domain authentication process is avoided; the message is signed by using a conditional privacy anonymous method, integrity and credibility verification of request information transmission is realized through pseudonyms, and batch verification of signed messages and identity revocation of malicious vehicles are supported. According to the invention, the system parameters and storage space are small, the verification time delay is small, and the cross-domain authentication requirement of the vehicle in the dynamically changing vehicle networking environment can be met.

To secure anonymity in an interactive interview service and provide a more efficient business tool by performing voice correction in real time and correcting an element such as dialect and intonation.SOLUTION: A system including generative system AI for performing voice correction includes: means for correcting dialect and intonation of a corresponding voice in real time; means for providing interactive interview service securing anonymity for applying the voice to an interview; and means for automatically scheduling a date of an interview by using a brain of GPT.SELECTED DRAWING: Figure 1

The invention belongs to the technical field of federated learning privacy protection, and discloses an anonymous and Byzantine robust federated learning privacy protection method and system with safe and efficient aggregation. Firstly, the invention provides a single mask protocol, which not only can effectively protect the security of privacy data, but also improves the aggregation efficiency. And then, anonymous ring signature and secure shuffling are used, so that the metadata of the client message is eliminated while the identity of the client is ensured to be legal, and the legality and anonymity of the identity of the client are ensured at the same time. The invention also realizes a baffle mechanism for malicious update, so that the influence of the malicious update on the global model can be ignored, thereby realizing Byzantine robustness.

The invention relates to the technical field of credible authentication, and discloses a mobile intelligent node lightweight identity authentication method based on a block chain, which comprises the following steps: an initialization stage: a credible center generates a public password parameter, and writes a PUF challenge-response table subjected to redundancy coding, a dynamic pseudonym and each entity public key into the block chain; in the message signature stage, a node obtains a random challenge at one time through an intelligent contract, calculates a single-frame signature according to a local PUF response and a public parameter, and broadcasts the single-frame signature; in the authentication stage, the receiver completes decentralized verification according to the on-chain parameters, and if verification fails, the trusted center traces the real identity through pseudonym mapping. According to the method, multiple rounds of handshake are abandoned, only minimum auxiliary data are stored on a chain, anonymity, traceability and low calculation and low communication load of resource-constrained equipment are considered, and the method is suitable for high-dynamic scenes such as Internet of Vehicles and unmanned aerial vehicle clusters.

The invention relates to the technical field of electronic signature evidence storage, in particular to an electronic signature whole process data evidence storage method based on a block chain, and the method comprises the steps: collecting all historical transaction behavior data, including transaction users, transaction time and text data of signed files, of each user before each transaction in the block chain; determining the theme difference degree of the signed files of any two transactions; determining a transaction behavior abnormal coefficient of each user during each transaction; acquiring the malicious user confidence of each user during each transaction; and for each transaction, based on the number of transactions between each user and each to-be-signed user, in combination with the malicious user confidence of each to-be-signed user, obtaining a selectable coefficient of each to-be-signed user during each transaction of each user, screening the to-be-signed users, and performing electronic signature by using an encrypted signature algorithm. According to the application, the anonymity of the identity of the signer is ensured, and the privacy security of both transaction parties is improved.

The invention provides a content distribution network erection method based on anonymous communication, and aims to enhance anonymity and security on the basis of reducing link time delay. The method comprises the following steps: receiving a push-pull stream request of a client for a data stream; determining a transmission path corresponding to the push-pull stream request according to a transmission parameter corresponding to the push-pull stream request; determining an anonymous transmission link between adjacent nodes of the transmission path; the anonymous transmission link is determined after orientation exposure evaluation; and anonymously transmitting transmission data corresponding to the push-pull stream request through the transmission path and an anonymous transmission link between adjacent nodes of the transmission path.

To provide an information generation system and an information generation device that enable a user of any position to make statements (transmit information) with improved anonymity and safety.SOLUTION: In an information generation system 1, a server 20 includes a processing unit and a storage unit. The processing unit, in cooperation with the storage unit, receives opinion information of multiple anonymous users within a group, combines the opinion information of the multiple anonymous users, and generates representative opinion information of the group using the combined opinion information of the multiple anonymous users.SELECTED DRAWING: Figure 1

The invention discloses an intelligent psychological health education system based on an education robot. The system comprises (1) AI family-school cooperation: an improved YOLOv7 algorithm captures classroom behaviors, dynamic Gaussian blur protects privacy, directionally pushes student participation images containing desensitization IDs, supports AI to generate personalized communication verbal skills, and improves the degree of participation of parents; (2) an interdisciplinary fusion engine: constructing a knowledge graph to associate psychological courses with mathematics, sports and other subjects, predicting an optimal fusion opportunity in combination with educational administration data, and generating a double-teacher collaborative teaching plan; (3) interest and emotion driven daily penetration: analyzing student interest labels based on a latent semantic model (LFM), and triggering personalized family task pushing in combination with multi-modal emotion recognition to realize intelligent penetration of psychological health education in a family scene; and (4) full-link privacy protection: adopting differential privacy, block chain and federated learning technologies to realize'all anonymity 'and'availability and invisibility' of data, and ensuring information security through three-level desensitization and quantum encryption, so that the system meets the requirements of'personal information protection method '.

Techniques are described through which groups of individuals and / or other entities may interface with a data cloud blockchain network and / or cloud-based platform to collectively share data in a secure, controlled manner. Decentralized groups that are connected to the data cloud network may be registered and listed in a searchable directory. Entities that are interested in accessing data associated with a group may browse the directory, execute smart contracts within a blockchain, and track online content interactions of a group in a manner that does not compromise the anonymity of individual group members. Data usage and performance metrics may be tracked on the blockchain network using data cloud services, and the metrics may be written to distributed ledgers within the blockchain network. Smart contracts and chaincode within the network may initiate blockchain transactions based on performance metrics and / or other aspects associated with accessing information about a group.