73 results about "Anonymous identifier" patented technology

The invention relates to the technical field of big data, in particular to a cloud computing-based tumor early screening data sharing platform construction method and system. The sharing platform construction method comprises the following steps: carrying out association modeling on multi-dimensional early screening data by adopting a knowledge graph technology; encrypting the sensitive field of the metadata index database, and synchronously generating an irreversible anonymous identifier to replace the original identifier; partitioning and arranging the metadata index database in a distributed storage system corresponding to a cloud platform according to tumor types, and performing cross-region redundant backup by adopting an erasure code technology; and constructing an access control smart contract based on a block chain technology, verifying the qualification of a requester through a digital identity authentication module, and after verifying the validity of a digital certificate of the requester, dynamically decrypting and transmitting a data copy conforming to an authority level. Through organic fusion of the knowledge graph, the encryption technology, distributed storage and the block chain, a safe, efficient and reliable tumor early screening data sharing platform is constructed.

The invention provides an information management method and system for an access control card chip. The method comprises the following steps: providing an anonymous identifier, initializing an authentication process, and laying a foundation for privacy protection and a data link; mutual trust authentication of the access control card and the equipment is completed, and authentication challenge data is provided for follow-up behavior recording and tracing; based on a result and challenge data generated after authentication is completed, generating a complete encryption behavior record and establishing a chained hash structure; storing the encrypted behavior record and the chained hash value locally or synchronizing the encrypted behavior record and the chained hash value to a server to ensure the reliability and traceability of the behavior record; and detecting abnormal behaviors and supporting traceability verification by using complete behavior chain data. Dynamic identity generation, encryption behavior chain storage and a bidirectional authentication mechanism are integrated in the access control card chip, so that the privacy protection capability, the safety and the tracing efficiency of the access control system are remarkably improved.

Disclosed are systems, apparatuses, processes, and computer-readable media for authentication. For instance, a process can include receiving first authentication information for a user; generating an authentication token based on the received first authentication information, wherein the authentication token does not include the first authentication information; receiving user information for the user; obtaining an anonymous identifier token, wherein the anonymous identifier token comprises a composite token, and wherein the anonymous identifier token includes an identity token generated based on the received user information; adding the authentication token to the anonymous identifier token; and storing the anonymous identifier token for authenticating a user.

A privacy-preserving health verification system with incentive mechanisms for promoting regular testing behavior is disclosed. The system implements a cryptographic separation between user identity and verification status by extracting minimal verification metadata from health documentation and generating zero-knowledge proofs. Pseudonymous identifiers eliminate direct linkages between identity and health status while maintaining verification integrity. An algorithmic incentive mechanism analyzes temporal patterns between verification events, implementing streak detection with configurable grace periods and recovery acceleration factors. The system enables secure verification sharing with third parties through cryptographically signed, time-limited tokens containing no personally identifiable information. The implementation simultaneously solves privacy challenges and psychological barriers to regular testing, delivering a viable solution for improved testing schedules and enhanced compliance with recommended health protocols, particularly in sensitive health domains such as sexually transmitted diseases and infections.

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for processing event log data. An example event log processing method includes receiving an event log comprising a plurality of event records describing events that have occurred on each of one or more computer systems over a period of time; converting the event log into a graph, comprising: normalizing the plurality of event records, including anonymizing a unique identifier value in each event record and replacing a variable value in each event record with a predetermined value; representing each normalized event record as one or more nodes in the graph; and generating a plurality of event clusters, wherein each event cluster includes an aggregated group of nodes and is generated based on common attributes of and hierarchical relationships between the normalized event records represented by the nodes in the aggregated group.

A first network node operating in a telecommunications network can receive an authentication request associated with a communication device requesting registration with the telecommunications network. The authentication request can include first subscriber information. The first network node can determine that the first subscriber information includes an anonymous identifier. Responsive to determining that the first subscriber information includes the anonymous identifier, the network node can determine an authentication procedure to be performed. The network node can receive information associated with the communication device as part of the authentication procedure. The network node can generate second subscriber information based on the information associated with the communication device.

A system and method are disclosed for generating a privacy-preserving data corpus for Artificial Intelligence (AI) training. The system comprises a relying partner (RP) computing environment and a trusted, independent identity provider (IdP) computing system. Upon a user authentication request, the IdP provides the RP with only a PII-free, persistent pseudonymous identifier (gUserID) for the user. Any authentication artifacts containing Personally Identifiable Information (PII), such as an OAuth token, are programmatically neutralized by the IdP. This is achieved by generating a transient public-private encryption key pair, immediately destroying the private key, and encrypting the PII-laden artifact with the remaining public key, rendering the PII therein permanently irrecoverable. This enforcement of “PII unknowability” at the RP enables the aggregation of pseudonymous user data, linked by the persistent gUserID, from multiple independent RPs into a rich, cross-organizational corpus for AI training, without ever exposing user PII to the RP.

A data anonymization technique for datasets including personal identifiable information (PII) such as utility datasets may primarily include assigning anonymous identifiers to nodes in the dataset and swapping or otherwise moving portions of information between nodes of the dataset. The methodology of the swapping or moving operation may vary optionally based on a number of parameters, and may include swapping endpoints under a single parent, swapping endpoints between similar parents, and / or swapping similar endpoints between parents. The anonymization technique may output an anonymized dataset which reflects a topology of the original dataset and may optionally be updatable and modifiable to include additional data about existing or new nodes.

The invention discloses an identity card number anonymization system based on hierarchical dynamic encryption and SM3 salt value enhancement. The identity card number anonymization system comprises a security preprocessing and format normalizing module, a salt value enhancement hash module, a dynamic derived key module, a hierarchical dynamic encryption module, an anonymous identifier generation module and an anonymous identifier verification module. The invention provides a more comprehensive and efficient privacy protection scheme by introducing an anonymization technology based on dynamic salt value expansion and a layered protection architecture.

The invention provides a clinical data management system, a clinical data privacy protection method, equipment and a medium. Obtaining an identity identifier corresponding to the medical institution identity information of the requester and a patient anonymous identifier associated with the medical record text data; performing medical semantic analysis on clinical contents in the medical record text data, identifying a plurality of sensitive entities containing diagnosis and treatment features, physiological indexes and personal identifiers of patients, associating medical contexts of the sensitive entities, and generating a specified replacement seed value for each sensitive entity based on anonymous identifiers of the patients; and for each sensitive entity, determining corresponding replacement content from a preset desensitization rule base according to the medical context of the sensitive entity and the replacement seed value. And finally, replacing each sensitive entity with the corresponding replacement content, and generating a desensitized clinical text associated with the anonymous identifier of the patient. According to the scheme, context-aware privacy protection can be realized in a clinical data sharing environment.

Methods and systems are provided for anonymously tracking and / or analyzing flow or movement of individual subjects and / or objects using biometric data. A computer-implemented method enabling anonymous estimation of the amount and / or flow of individual subjects and / or objects, referred to as individuals, in a population moving and / or coinciding between two or more subject states using biometric data includes receiving identifying data, wherein the identifying data includes and / or is based on biometric data, from two or more individuals; generating, online and by one or more processors, an anonymized identifier for each individual; and storing: the anonymized identifier of each individual together with data representing a subject state; and / or a skew measure of such an anonymized identifier.

The invention discloses a double offline payment transaction method based on a CA center and a group signature, which relates to the technical field of information security, and comprises the following steps: the CA center sets system parameters, generates a group and a key pair, allocates an anonymous identifier for each group member in the group, generates a private key for each group member in the group according to the system parameters, the group and the key pair, and sends the private key to the group member; synchronously broadcasting the system parameters, the group, the key pair and the private key to the user terminal and the merchant terminal; the user terminal receives the transaction amount, performs group signature according to the system parameters, the group, the private key and the dynamic anonymity degree adjustment strategy to generate a signature, and sends the signature to the merchant terminal; and the merchant terminal performs secret key verification on the signature according to the system parameters and the secret key pair, if the signature is valid, the transaction is continuously processed according to the transaction amount, otherwise, the transaction is refused. According to the invention, the group signature technology is adopted to realize privacy protection of small-amount transactions and effective identity tracing of large-amount transactions under digital RMB double-offline payment, and user privacy and supervision requirements are balanced.

The invention provides a hotel environment adaptive regulation and control system based on the Internet of Things, and belongs to the field of hotel regulation and control management. Comprising a privacy enhanced environment perception and preference acquisition module, a hotel operation data security fusion engine, a dynamic room state and authority regulation and control decision module and a security execution and auditing module which perform data interaction to enhance user data confidentiality and deeply align with hotel operation information; the privacy enhanced environment perception and preference acquisition module is deployed in a guest room and a public area and comprises an environment sensor and a user interaction terminal; a preference acquisition mechanism based on a temporary anonymous identifier is adopted, a user activates an interactive terminal through a check-in voucher and establishes an encrypted anonymous identifier uniquely corresponding to a physical room number, and acquired environment setting preference data is only bound with the anonymous identifier and is stored in an encrypted storage area of a local edge computing node of a guest room.

The present invention relates to the technical field of distributed data storage, and discloses a distributed storage method and system for clinical trial data. The method comprises: performing ring signature encryption processing on patient test data of multiple data centers to obtain patient anonymized identifiers and standardized clinical data; performing two-level random storage node configuration to obtain an optimal storage node configuration scheme; constructing an LPPMM-DA data aggregation model based on the optimal storage node configuration scheme, and performing sharding processing on the patient test data to obtain multiple target data shards; performing dynamic operation envelope analysis and alliance graph game calculation on the multiple target data shards to obtain a storage resource scheduling scheme; performing distributed data block storage and access authentication on the multiple target data shards according to the storage resource scheduling scheme and the anonymous identifier to generate data block storage distribution information. The present invention constructs a complete data access control system to ensure the safe and reliable storage of clinical trial data.

The invention discloses a payment routing method and device based on voiceprint encryption, equipment and a medium, and the method comprises the steps: obtaining a plurality of voiceprint secret key fragments containing voiceprint features and payment information based on a voice payment instruction of a user, and obtaining a plurality of static secret key fragments used for access authorization; performing routing evaluation on a plurality of preset cross-border payment paths to obtain a target path for payment settlement; performing encryption processing on each voiceprint key fragment to obtain a plurality of anonymous identifiers matched with the target path; performing combined verification on each voiceprint key fragment and each static key fragment according to each anonymous identifier to obtain a routing verification result; and sending the route verification result and each anonymous identifier to the target path for payment settlement. According to the method, payment authentication security is enhanced through a dual verification mechanism of voiceprint key fragmentation and static key fragmentation, and the method is suitable for a high-sensitivity financial scene and can assist a financial institution to quickly access a mainstream cross-border payment network.

A first network node operating in a telecommunications network can receive an authentication request associated with a communication device requesting registration with the telecommunications network. The authentication request can include first subscriber information. The first network node can determine that the first subscriber information includes an anonymous identifier. In response to determining that the first subscriber information includes an anonymous identifier, the network node can determine an authentication procedure to perform. The network node can receive information associated with the communication device as part of the authentication procedure. The network node can generate second subscriber information based on the information associated with the communication device.

The invention provides an authentication and key negotiation method and system based on a physical unclonable function, and the method comprises the steps: building a registration center, generating system parameters through the registration center, and registering equipment; registering an edge gateway in the registration center, and storing the system parameters in the edge gateway; generating a first secret parameter set by using the exclusive registration information in the equipment; the equipment requests access to the edge gateway, the edge gateway decrypts the identity identifier corresponding to the anonymous identifier, and authentication of the edge gateway on the equipment corresponding to the identity identifier is established; according to the first secret parameter set of the equipment, enabling the edge gateway to generate a session key and a first verification parameter, and enabling the equipment to generate a second verification parameter; and in response to successful verification of the first verification parameter and the second verification parameter, establishing authentication of the device to the edge gateway and determining that the session key is the communication key. The problems of poor expansibility, relatively low privacy and excessive computing resource consumption during authentication of the edge gateway and the equipment are solved.

The present invention provides a method and device for monitoring the contact behavior and infection risk of users diagnosed with infectious diseases. The tracking key of the current mobile terminal in each working cycle and the time information of the corresponding recording time period are encrypted and used as an anonymous identifier to mark the mobile terminal in a specific time period. The anonymous identifier is broadcast via Bluetooth and other mobile terminals within a set range around are scanned. By downloading the collection of tracking keys of the diagnosed users broadcast by the server, it is calculated and compared whether there is a record that is consistent with the anonymous identifier of other terminal devices recorded locally. If so, it is determined that the user of the current mobile terminal has come into contact with the diagnosed user. And the infectious disease infection probability is directly obtained from the server. By directly using the Bluetooth module and data for monitoring and processing, the monitoring of the contact behavior between a large number of monitoring objects and diagnosed users under the condition of large traffic volume is realized, and the monitoring frequency and accuracy can be effectively improved.

The application discloses a ranging method, device, system, storage medium and computer equipment, and relates to the technical field of communication. The method comprises the following steps: receiving a broadcast data frame issued by a base station, wherein the broadcast data frame carries identification information of the base station; sending a ranging data frame carrying an anonymous identifier to the base station, and receiving a reply data frame sent by the base station, wherein the reply data frame carries the identification information of the base station, time stamp information of the base station receiving the ranging data frame and time stamp information of the base station sending the reply data frame. The ranging solution and the positioning solution can only be completed locally on the mobile device, so that the security of the calculated distance information and positioning information is ensured. In addition, in the whole communication process, the base station cannot obtain the identity information of the mobile device, the distance information between the mobile device and the base station and the position information of the mobile device, so that the privacy security of the user holding the mobile device can be effectively protected.

The application discloses an account authentication method and device, a storage medium and an electronic device, and relates to the technical field of data processing. The method comprises the following steps: first, obtaining user information and user signaling of a login user; then, generating an anonymous identifier of the user information corresponding to the login user based on the user information; then, extracting an anonymous user information entry corresponding to the anonymous identifier in a blockchain system; finally, determining an account authentication result of the login user according to the anonymous user information entry and the user signaling. According to the application, the anonymous identifier can be generated according to the user information of the login user, and then the anonymous user information entry can be extracted by using the anonymous identifier. The user signaling of the current login user is verified according to the user information stored in the blockchain system, and the account authentication result of the login user is determined, so that the account borrowing and stealing situation can be found in time, the detection capability of the system for irregular behaviors and stealing attack behaviors is improved, and the account authentication accuracy is improved.

Techniques are disclosed relating to computing security and privacy. In some embodiments, a computing device provides, to a service computing system, a service request that identifies an action and includes an anonymous identifier for a user of the computing device. The computing device receives, from the service computing system, a score request for a trustworthiness score indicative of the user's trustworthiness. In response to receiving the score request from the service computing system, the computing device provides information indicative of the user's identity to a scoring computing system and receives the trustworthiness score and a corresponding score signature from the scoring computing system. In response to receiving the score and the score signature from the scoring computing system, the computing device provides the score to the service computing system.

Techniques are disclosed relating to computing security and privacy. In some embodiments, a computing device provides, to a service computing system, a service request that identifies an action and includes an anonymous identifier for a user of the computing device. The computing device receives, from the service computing system, a score request for a trustworthiness score indicative of the user's trustworthiness. In response to receiving the score request from the service computing system, the computing device provides information indicative of the user's identity to a scoring computing system and receives the trustworthiness score and a corresponding score signature from the scoring computing system. In response to receiving the score and the score signature from the scoring computing system, the computing device provides the score to the service computing system.

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for processing event log data. An example event log processing method includes receiving an event log comprising a plurality of event records describing events that have occurred on each of one or more computer systems over a period of time; converting the event log into a graph, comprising: normalizing the plurality of event records, including anonymizing a unique identifier value in each event record and replacing a variable value in each event record with a predetermined value; representing each normalized event record as one or more nodes in the graph; and generating a plurality of event clusters, wherein each event cluster includes an aggregated group of nodes and is generated based on common attributes of and hierarchical relationships between the normalized event records represented by the nodes in the aggregated group.

To provide a service cooperation system and a service cooperation method for efficiently performing transactions.SOLUTION: A service cooperation system A1 includes a second server 30 which is connected to a first server 20 providing a first settlement service and provides a second settlement service, and user terminals 10 using the first settlement service. Then, a second server 30 executes image generation processing for generating an image identifier to be included in a code image to be used for settlement, and association processing for associating and storing the anonymous identifier generated by the first server 20 and the image identifier. Further, when acquiring the image identifier of the code image read by the reading terminal, the second server 30 executes settlement stage processing for making the first server 20 execute the settlement of the transaction of the anonymous identifier associated with the image identifier.SELECTED DRAWING: Figure 1

A method and a device are presented to securely log in a computer user into a computer system by means of an anonymous identifier, thereby eliminating the use of a user name and a password and requiring just one click or touch by the user to log into the computer. The anonymous identifier uniquely identifies the user and may be used as a cryptographic key.

A device detection system integrates location data with online tracking data describing content viewed by a user. The device detection system is configured to determine whether a device is located within a venue. The device detection system provides user identifiers to an identity matching server. An entity associated with the venue may provide online tracking data obtained via a tracking pixel to the identity matching server. The identity matching server provides the tracking data and anonymous identifiers to the device detection system which correspond to the device user identifiers. The device detection system generates a customer journey timeline that describes the location data and online tracking data for a user. The device detection system or the entity may use the information in the customer journey timeline to modify or select digital content to provide to users.

The invention relates to the technical field of scientific research data security protection, and discloses a multi-model cooperation-based scientific research data security protection method, which comprises the following steps of: obtaining a user identity attribute statement and an access request parameter, and generating an anonymous identifier and an attribute proof through a zero-knowledge proof technology; analyzing a multi-mode composition structure of scientific research data; dispersing and embedding the coded anonymous identifiers into different modes of scientific research data; constructing a revocable mapping mechanism between the anonymous identifier and the real identity, and performing fragmentation storage on the mapping relation; when a data leakage event is detected, extracting watermark information based on leaked data to reconstruct an anonymous identifier; a multi-party authorization revocation protocol is executed, and the identity mapping relation is reconstructed after authorization is obtained; according to the method, zero knowledge proves that the multi-modal watermark and the revocable anonymous architecture are innovatively combined, so that the privacy of scientific research data accessors is protected, and meanwhile, effective balance between data tracking and leakage responsibility investigation is realized.

The embodiment of the invention provides a data access processing method and device for an education platform, and belongs to the technical field of data processing.The method comprises the steps that an internal communication layer, a business logic layer, an encryption service layer, an identity verification layer and a data storage layer corresponding to a course release model and a course interaction model are arranged on the education platform; when a data access requester initiates an access request to the education platform, performing identity verification on the data access requester through the identity verification layer, and after the identity verification is passed, performing binding operation of course recommendation data and the data access requester in the data storage layer to generate course use data; in the data storage layer, course use data is subjected to random segmentation processing, the segmented data is fused with the anonymous identifier, and in the encryption service layer, the fused data is encrypted by using a user private key carried by a data access requester to form encrypted course data. According to the invention, the data processing security of the education platform is improved.

A method and system detect and link anomalous gaming events. A processor, using shuffler sensors, detects a first anomaly on a first card from a first game instance, the anomaly varying from prior card images. In response, a machine learning model analyzes image data from a first gaming table's image sensors to determine unique biometric facial features of a first participant. A first anonymous identifier is generated from these features and stored, linked to first anomaly data. Subsequently, a second anomaly on a second card in a second game instance is detected by shuffler sensors. Image data from a second gaming table is analyzed by the machine learning model to extract unique biometric facial features of a second participant. It is then determined that the second participant's facial features mathematically correspond to the stored first anonymous identifier. A counter associated with the first anonymous identifier is incremented, indicating multiple linked anomaly events.