58 results about "Anonymous authentication" patented technology

The invention provides a vehicle identity anonymous authentication method in a space-air-ground fusion vehicle-mounted network. The method comprises the following steps: carrying out multi-source data acquisition; generating a dynamic area identifier based on the vehicle real-time position data, and performing dynamic updating according to a vehicle moving threshold value; vehicle equipment identification information is acquired, a salted hash value is generated in combination with the dynamic region identifier, and an anonymous certificate containing dynamic effective duration is generated; extracting spatio-temporal data fluctuation parameters according to the environmental perception data, and extracting delay trend parameters and channel stability parameters according to the regional network state data; the weight is dynamically adjusted according to the link type and the time period type, and the dynamic trust quantized value of the vehicle is calculated through weighted summation; differential authentication is executed based on the dynamic trust quantized value of the vehicle and the anonymous voucher, and the differential authentication comprises the steps that lightweight verification is adopted when the vehicle is highly trusted, two-factor authentication is started when the vehicle is low trusted, and link timeout redundancy authentication is combined. According to the method, the trust evaluation accuracy can be improved, and the dynamism of a privacy protection mechanism is enhanced.

The invention belongs to the field of computer security and discloses a blockchain-based anonymous authentication method for the Internet of Vehicles across trusted authorities, including registering the vehicle (with onboard unit) and roadside unit in their respective trusted authorities. When the vehicle enters different trusted authority domains, both the onboard unit and roadside unit generate corresponding authentication parameters and transmit them to the consortium blockchain of the Internet of Vehicles for verification and signature, obtaining authenticated data signed by the consortium blockchain. The onboard unit and roadside unit receive and verify the authenticated data, and upon successful verification, the onboard unit calculates a session key. The onboard unit uses the session key to sequentially transmit data with the roadside unit and the consortium blockchain. This technical solution allows vehicles from any trusted authority domain to authenticate and negotiate session keys with roadside units from different trusted authority domains.

The invention belongs to the technical field of security authentication, and discloses a distributed energy storage equipment cross-domain security access authentication method and a related device, attribute information is submitted after zero-knowledge proof verification, and a certificate issuing party is triggered to generate a verifiable certificate based on a signature algorithm; then generating a zero-knowledge proof-based randomized verifiable representation based on the verifiable credentials; and finally, the energy storage device sends the generated randomized verifiable representation to a verifier to complete access authentication. According to the invention, cross-domain authentication is realized through a distributed architecture and verifiable certificates without depending on a single centralized mechanism. Verifiable certificates adopt a uniform format and support mutual recognition among different trust domains. And the certificate cannot be associated with a specific equipment identity after randomization processing, so that anonymous authentication is realized. And the verification process is realized through zero-knowledge proof, and the equipment can prove the identity legality without leaking sensitive information, so that the authentication security and privacy are effectively guaranteed.

The invention relates to an Internet of Things data security sharing method for blockchain fragmentation. The method comprises the following steps: firstly, performing identity anonymous authentication based on an auditing mechanism combining encryption packaging and zero-knowledge proof; thirdly, performing threshold slicing on the to-be-stored data by adopting an IDA slicing algorithm, performing dynamic allocation of storage nodes based on weighted consistency hash, and performing data storage and distribution based on the allocated storage nodes; afterwards, a PBFT consensus mechanism based on behavior reputation is adopted to carry out security auditing of data recovery and storage, a recovery voucher is generated, and on-chip data recovery is carried out; and finally, querying a target fragment of data distribution based on a trusted relay cross-fragment transaction mechanism, and completing cross-fragment data recovery in the target fragment. According to the invention, high efficiency and security of IoT data sharing and terminal identity privacy protection can be realized, and application requirements in a large-scale IoT environment are well met.

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

The invention relates to a compressed and quantized Internet of Vehicles privacy protection security hierarchical federated learning method, which designs a vehicle end side encryption parameter compression and integer quantization method, a vehicle side completes model training on the basis of local data, and performs flattening, low-rank approximate compression and integer quantization on parameter tensors to obtain a compressed and quantized vehicle end side encryption parameter. And the transmission quantity is obviously reduced under the condition of ensuring the model precision. The quantized parameters are subjected to end-side homomorphic encryption at a vehicle end, and a ciphertext is kept invisible in transmission and aggregation stages. And secondly, a method for setting anonymous authentication batch verification and session key negotiation security encryption between the vehicle end and the fog layer is designed, the concurrent authentication pressure is reduced through a batch verification structure, and the communication security and the access efficiency are improved. And finally, designing a hierarchical ciphertext aggregation updating and Bloom filtering revocation control method, performing homomorphic domain aggregation on ciphertext parameters uploaded by different vehicles by a fog layer, executing one-time decryption by a center end and recovering a floating point model weight, and completing global model updating.

The application discloses a communication network anonymous authentication method, user equipment, a home network and a product, wherein a network side parameter value is obtained by calculating according to an encryption parameter value in received authentication data; and a replay attack is identified according to the size of the network side parameter value and a locally stored terminal parameter value. The application scheme can identify a tracking attack on user location information and protect the privacy security of a terminal user.

The invention provides an anonymous method and system for a smart electric meter, and the method comprises the steps: building a key generation center, and enabling the smart electric meter and an aggregator to carry out the registration of the key generation center when the smart electric meter and the aggregator join a smart power grid for the first time; the intelligent electric meter encrypts an identity label and a timestamp of the intelligent electric meter by using an intelligent electric meter public key, generates an authentication request message according to the encrypted identity label and timestamp of the intelligent electric meter, and sends the authentication request message to the aggregator; the aggregator verifies the authentication request message after receiving the authentication request message, and generates an authentication response message and sends the authentication response message to the intelligent electric meter under the condition that the verification result is successful; and after receiving the authentication response message, the intelligent electric meter verifies the authentication response message, and under the condition that the verification result is successful, the two parties establish a shared session key to complete the authentication process. According to the method, the problems of low calculation efficiency, insufficient privacy protection, complex authentication process and the like in the prior art are effectively solved.

The embodiment of the application discloses a group identity security anonymous authentication method and system based on secret sharing, wherein the method comprises the following steps: determining a public parameter according to a security level parameter; an access party generates a key pair, and stores a public key hash into an authentication hash fingerprint set of a management party; a target access party divides a target private key of the access party into a first private key share, a second private key share and a third private key share, and distributes the private key shares in groups of two to three calculation parties; each calculation party calculates a public key share according to the received private key share and in combination with other calculation parties; the public key shares of two parties are randomly selected from the first calculation party, the second calculation party and the third calculation party, and are sent to the management party; the management party calculates a target public key hash according to the public key shares, judges whether the target public key hash exists in the authentication hash fingerprint set, if yes, authentication succeeds; otherwise, authentication fails. In the case of guaranteeing user anonymous authentication, the security of the management system is improved.

The invention discloses a privacy protection and traceable anonymous bidirectional authentication method for heterogeneous Internet of Vehicles, which comprises the following steps: generating public and private keys based on a key generation center, a private key generator and a trusted registration mechanism, and constructing a heterogeneous password system; the vehicle completes key registration by fusing the certificateless public key system, and the roadside unit completes key registration based on the identity public key system; the vehicle registers and uses the pseudonym to communicate with the roadside unit; and the vehicle and roadside unit bidirectional authentication verifies the legality of the opposite side through a hash function and a temporary value, and finally generates a session key. According to the invention, by providing traceable pseudonym and anonymous authentication communication for each vehicle, the privacy of the vehicle can be effectively protected, and an attacker can be prevented from tracking the identity information of the vehicle. Based on various security hypotheses, the method meets various security attributes including anonymity, unlinkability, perfect forward security, security of known temporary information specific to sessions and the like, and the security of data transmission of the Internet of Vehicles can be improved.

The application provides a kind of unmanned plane anonymous authentication and identity remote identification method, unmanned plane and its supervision equipment, the method includes: by unmanned plane service provider in advance selecting system main private key and main public key, define attribute set;And by unmanned plane registration process, generate and issue certificate for the unmanned plane;Unmanned plane running process, generate RID data packet that can be anonymous authentication and meet RID rule;RID data packet includes the following information: unmanned plane position, unmanned plane speed, unmanned plane attribute ciphertext, unmanned plane operator's location ciphertext, encrypted unmanned plane public key information, time stamp, group signature;Timing broadcast RID data packet, so that receiver obtains the position and flight speed of unmanned plane according to the received RID data packet. Utilize the scheme of the application, the effective management and privacy protection of unmanned plane can be realized.

The invention relates to an anonymous authentication and key negotiation method for a communication network, relates to the technical field of mobile communication networks, and aims to solve the problems that user identity tracking and revocation are difficult and privacy protection and effective supervision cannot be effectively balanced in a mobile communication system of the communication network. Comprising the following steps: establishing a system and generating system parameters; generating an HN key; generating a tracker key; generating an SN key; distributing certificates, enabling a user to interact with the HN, and requesting the certificate of the attribute of the user; verifying the certificate; a user interacts with the SN to negotiate a session key; displaying the anonymous voucher; verifying the anonymous credential; tracking and tracing; and performing local revocation. According to the method, the role of the tracker is set, the certificate is used for the mobile communication system, and when some malicious behaviors occur, the identity of the user is tracked by the tracker, so that a verifier can perform local revocation, anonymous authentication, identity tracking and revocation oriented to the communication network are effectively realized, and meanwhile, the privacy of other legal users is ensured.

The invention discloses a reliable road condition message transmission method based on vehicle-mounted fog computing. The method comprises a registration stage, a mutual authentication and key negotiation stage, a road condition monitoring stage and a partial private key updating stage. According to the method, an authentication mechanism of the vehicle and the fog node for ensuring secure communication between the vehicle and the FN is provided without real-time participation of a trusted authority TA, the defects of long message transmission time and low message authentication and integrity in a traditional anonymous authentication protocol are overcome, the system efficiency is improved, and the communication overhead is reduced. A lightweight vehicle privacy security protection authentication scheme based on fog computing is provided to protect the vehicle privacy and minimize the vehicle storage burden. Under the condition that the real identity of the vehicle is not leaked, the identity information generation mode and the session key of the V2F are redesigned, the problems that identity authentication between the V2Fs is complex, the identity information storage amount is large, and communication messages are prone to attack are solved, the communication safety is improved, and the vehicle storage burden is relieved.

The invention discloses an efficient anonymous authentication method and system applied to identity authentication, an identity provider performs system initialization, a service provider performs legality check on user service qualification, and a block chain stores and manages identity information associated with a user and a data file of an anonymous certificate. After a delegation request of the user is received, re-proxy verification is completed; a user stores and manages the files through a block chain, the user sends a service request to the block chain when service qualification verification needs to be carried out, a service provider sends materials required by verification to the user and the block chain, and the block chain sends the materials required by verification to the user and the block chain after obtaining a one-time authorization token displayed by an anonymous certificate of the user. And the block chain completes service qualification verification of the user. According to the method, the block chain is integrated, and the proxy zero-knowledge proof scheme is introduced, so that the storage and calculation overhead is outsourced to the block chain, the privacy and the control right of the user are ensured, and seamless and efficient anonymous authentication between the user and the service provider is finally realized.

The invention discloses a security federal learning method and system based on a dynamic group signature, an administrator generates a bilinear group and public and private keys, and a client encrypts gradient information after applying for joining the group and uploads the gradient information with a group signature. And the server decrypts and verifies the validity of the signature, detects malicious clients through cosine similarity, removes malicious nodes and generates a blacklist, and contributes a three-dimensional weight aggregation model to normal clients according to data volume, quality and history. According to the scheme, identity anonymous authentication and malicious detection are achieved, model aggregation safety is guaranteed, federal learning robustness and efficiency are improved, and the method is suitable for data privacy sensitive scenes.

The invention discloses a method capable of extracting an n-time signature, a method capable of completely extracting the n-time signature, and a traceable anonymous authentication method and system based on the n-time signature, in the n-time signature capable of being extracted, a public key and a private key are generated by a polynomial commitment scheme, and the private key comprises a core polynomial and a mask polynomial; an identifier bound with a public key can be extracted from the effective signature exceeding the signature capacity, and a user private key can also be extracted by the method for completely extracting the signatures for n times. Based on the fact that the application capable of completely extracting the signatures for n times is a traceable anonymous token, anonymity of the user is achieved through the signatures in the authentication process, and when the preset number of times is exceeded, the identity of the user can be traced by extracting the identifiers. The traceable anonymous token is jointly maintained by a plurality of participants, and operations such as key generation, signature verification and identity tracing need to be jointly completed by the participants, so that the traceable anonymous token method based on the extractable n-time signatures is realized.

The invention discloses a one-time pad key management method based on a grouped confusion Merkel hash tree, and relates to the technical field of information security. According to the method, the Internet of Things equipment is divided into different equipment groups, a group administrator is introduced into each equipment group to replace a trusted center to perform key management in the group, and only the Merkel Hash tree constructed by taking the equipment one-time pad key as a leaf needs to be confused in the equipment group, so that the confusion scale and height of the Merkel Hash tree are reduced; a secure channel distribution authentication path only needs to be constructed in the device group, frequent intervention of a trusted center is avoided, and therefore the key management efficiency is improved. The method solves the problem of high efficiency in realizing conditional anonymous authentication of the Internet of Things equipment by confusing the Merkel Hash tree, is not only suitable for constructing a conditional anonymous lightweight Internet of Things authentication protocol, but also can be popularized and applied to post-quantum group signature based on the Merkel Hash tree.

The invention discloses an anti-quantum traceable anonymous authentication method and system for a mobile internet of things, and belongs to the technical field of identity authentication and tracking. The method comprises an initialization stage, a mobile Internet of Things equipment registration stage, a mobile Internet of Things equipment authentication stage and a mobile Internet of Things equipment tracking and revocation stage. Bidirectional authentication and session key negotiation between an edge node and equipment are realized by utilizing a lattice-based chameleon hash and a short integer solution problem, quantum computing attacks are resisted, and meanwhile, the equipment identity and path privacy are protected through block chain evidence storage and a chameleon hash trap door technology, and the security of the equipment is improved. And on-demand accurate tracing and rapid revocation of malicious equipment by a law enforcement agency can be supported, and the requirements of safety, privacy and supervision in a mobile Internet of Things scene are met.

The application discloses a kind of complete anonymous authentication and key agreement method based on block chain in Internet of Vehicles, belong to block chain and vehicle-mounted network technical field, design a kind of pseudonym generation algorithm based on homomorphic encryption, guarantee the verifiability of vehicle pseudonym While, the complete anonymity of vehicle pseudonym is realized;On this basis, an automatic pseudonym revocation mechanism is designed, a time-dependent secret value is embedded into the pseudonym, and the secret value is updated regularly to automatically revoke the expired pseudonym;In addition, the vehicle certificate is verified and stored using decentralized blockchain technology, which improves the authentication efficiency of the vehicle certificate;The application not only realizes the verifiability and complete anonymity of vehicle pseudonym, but also realizes the automatic revocation of pseudonym, and can be used in various authentication scenarios under Internet of Vehicles environment.

An anti-quantum anonymous authentication method based on a dynamic group signature comprises the steps of system initialization and key generation, group member joining, group member signature, signature verification by a verifier, signature identity tracing, tracing result judgment and group member revocation. According to the method, the step of adding the group members and the step of revoking the group members are adopted, and an efficient accumulator mechanism and a zero-knowledge proof technology are used in the two steps, so that the technical problem that in the prior art, the signature cost, the public key cost and the key size cost are high is solved, and the efficiency of the dynamic group signature method is improved. According to the method, the size of the group public key and the size of the secret key are irrelevant to the number of group members and can be added and revoked in real time at the logarithm level, the communication cost is reduced, a group signature framework is constructed by adopting a lattice password, and quantum can be resisted. The method has the advantages of high security, low communication cost, high privacy, capability of resisting quantum computing attack and the like, and can be used in the technical field of anonymous authentication.

The present invention discloses an anonymous authentication method for certificateless groups in an Internet of Vehicles (IoV), comprising: 1) system initialization, including: system parameter generation, roadside unit registration, and vehicle registration; 2) vehicle-to-infrastructure communication authentication, including two-way identity authentication and secure key negotiation; 3) vehicle-to-vehicle communication authentication, including: pseudonym and signature generation, as well as signature authentication and efficient batch authentication; 4) a malicious vehicle revocation mechanism based on group key update, including: malicious vehicle identity disclosure, group key update and distribution, and recovery of legitimate vehicle keys and isolation of malicious vehicles. The present invention not only has more efficient processing capabilities in ensuring data security, privacy protection, and Sybil attack defense in the IoV system, but also meets the IoV's demand for efficient identity authentication and revocation in a resource-constrained environment, providing a secure, low-cost, and efficient overall solution for the IoV system.

The present invention relates to the anonymized confirmation of personal user features. A user authenticates the user features to be checked with a separate authentication device. The authentication with a service provider takes place by way of anonymized authentication information.

The embodiments of the present specification provide an anonymous identity authentication method and device. According to the method, a first device generates a binary indication vector and an auxiliary vector having a predetermined relationship with the indication vector according to the sequence index of a first account in a target account set; and generates a signature value C according to the indication vector, the auxiliary vector and a private key of the first account. A first public key vector is also calculated according to a first random number selected by a verification device and a public key sequence of the target account set, and a blinding value is calculated based on the first public key vector and a random number array selected by the first device. The first device further generates a first and second group of commitment values according to the indication vector, the auxiliary vector and a challenge array and a variable value selected by the verification device. The first device provides the signature value C, the blinding value and the first and second group of commitment values to the verification device, and the verification device verifies whether the first account belongs to the target account set according to the foregoing.

The application relates to the technical field of blockchains, in particular to a smart contract chain on-line identity authentication permission authentication method and system. The method comprises the following steps: generating a private certificate that can be directly verified in a cipher domain by adopting Paillier homomorphic encryption and zero-knowledge proof technology; structurally storing the private certificate by adopting a hierarchical Merkle tree, and taking a root hash as an efficient on-line identity identifier; realizing cross-chain anonymous authentication by adopting ring signature, guaranteeing the privacy of interaction; after authentication, constructing a channel based on a two-way commitment and a time lock, and ensuring that the encryption attribute is safely and atomically exchanged between chains; and introducing a differential privacy mechanism, adding noise to an authentication log, and generating privacy protection data that can be used for safe auditing. The application scheme constructs a decentralized identity authentication system that has strong privacy protection, high security and cross-chain interoperability.

The present application belongs to the technical field related to satellite communication identity authentication, and discloses a satellite communication anonymous access method, communication equipment, and system with attribute verification. The method includes: a user communication device requests access to a satellite and the satellite verifies the access request, wherein the satellite is provided with an access control policy, the user terminal selects an attribute value, a count value, a random number, a temporary public key, and a storage path as a privacy value, and calculates the corresponding public value, and uses zero-knowledge proof technology to generate an access legitimacy certificate. The satellite uses zero-knowledge proof technology to verify the anonymous certificate to achieve user access authentication. In the present invention, the use of zero-knowledge proof technology for anonymous authentication protects the privacy security of the user, and by selecting the above parameters, the attribute matching degree, the validity of the certificate, whether it is a malicious attack behavior, and the legitimacy of the attribute source can be verified, which greatly improves the strictness of anonymous access authentication and ensures the security of system communications.

The invention discloses an anonymous certificate registration method, an anonymous authentication method and electronic equipment, and relates to the technical field of computer and network security, and the method comprises the steps: sending an intra-domain user public key information request to a cloud, and receiving a public key information list returned by the cloud; constructing a to-be-signed message, generating a ring signature in combination with the message, a preset anonymous key pair set and a public key information list, and generating a holding certificate of a current user through a preset temporary anonymous key pair private key; an anonymous public key registration request is generated according to the ring signature, the to-be-signed message and the holding proof and sent to the cloud, and the cloud completes registration based on the request, generates an anonymous subject identifier of the temporary anonymous public key and stores a mapping relation between the anonymous subject identifier and the temporary anonymous public key in a public key library. A ring signature is introduced as a group qualification certificate, and registration of an anonymous public key is completed at a cloud end, so that the problems that all users share the same anonymous identity, so that the anonymous identity cannot be distinguished, and fine-grained management and auditing are difficult to perform are solved.

The invention provides an identity authentication authorization method and system, and relates to the technical field of information management security, and the method comprises the steps: receiving an identity authentication request initiated by a user, and determining the category of the identity authentication request, the request category comprising an anonymous authentication request and a real name authentication request; when the identity authentication request is anonymous authentication, anonymous authentication is carried out on a user through an RSA accumulator, and an anonymous authorized user is determined; authorizing the anonymous authorized user to access public resources; when the identity authentication request is real-name authentication, performing real-name authentication on the user through two-factor authentication and biological feature authentication, and determining a real-name authorized user; generating a search voucher according to the user voucher of the real-name authorized user; and performing encryption search according to the search voucher, and sending the searched encrypted file to the real-name authorized user. According to the invention, the security and privacy protection capability of identity authentication are obviously improved.

The present invention discloses a traceable anonymous authentication method and system, the method comprising: a trusted third party as the credential issuer issues an attribute credential to a user using the issuer's private key signature; the user presents the attribute certificate in the attribute credential according to the verification requirements of the verification party; the verification party verifies the attribute certificate presented by the user, and if the verification passes, the authentication is successful; the credential issuer tracks the user's identity based on the attribute certificate presented by the malicious user sent by the verification party. The present invention achieves concise and efficient credential presentation. When presenting an attribute credential, the user does not need to present all attribute credential information, but only needs to present the portion of the attribute credential that needs to be verified, and an aggregation method is used to achieve efficient verification of the presented credential. The present invention achieves tracking of the identity of malicious users, and enables the issuer to track the identity of malicious users while ensuring that the identity privacy of non-malicious users will not be leaked during the credential presentation stage.

Embodiments of the present application provide a method and an apparatus for authentication. In the present application, an authentication ID is introduced for authentication of a device by an authentication server, and a device's temporary ID is used for anonymous communication among gateways and service providers. The authentication ID is only known by an IDM function and the AS, thereby achieving anonymous authentication and device's ID privacy protection.