61 results about "Anonymous identifier" patented technology

The invention relates to the technical field of big data, in particular to a cloud computing-based tumor early screening data sharing platform construction method and system. The sharing platform construction method comprises the following steps: carrying out association modeling on multi-dimensional early screening data by adopting a knowledge graph technology; encrypting the sensitive field of the metadata index database, and synchronously generating an irreversible anonymous identifier to replace the original identifier; partitioning and arranging the metadata index database in a distributed storage system corresponding to a cloud platform according to tumor types, and performing cross-region redundant backup by adopting an erasure code technology; and constructing an access control smart contract based on a block chain technology, verifying the qualification of a requester through a digital identity authentication module, and after verifying the validity of a digital certificate of the requester, dynamically decrypting and transmitting a data copy conforming to an authority level. Through organic fusion of the knowledge graph, the encryption technology, distributed storage and the block chain, a safe, efficient and reliable tumor early screening data sharing platform is constructed.

A privacy-preserving health verification system with incentive mechanisms for promoting regular testing behavior is disclosed. The system implements a cryptographic separation between user identity and verification status by extracting minimal verification metadata from health documentation and generating zero-knowledge proofs. Pseudonymous identifiers eliminate direct linkages between identity and health status while maintaining verification integrity. An algorithmic incentive mechanism analyzes temporal patterns between verification events, implementing streak detection with configurable grace periods and recovery acceleration factors. The system enables secure verification sharing with third parties through cryptographically signed, time-limited tokens containing no personally identifiable information. The implementation simultaneously solves privacy challenges and psychological barriers to regular testing, delivering a viable solution for improved testing schedules and enhanced compliance with recommended health protocols, particularly in sensitive health domains such as sexually transmitted diseases and infections.

A first network node operating in a telecommunications network can receive an authentication request associated with a communication device requesting registration with the telecommunications network. The authentication request can include first subscriber information. The first network node can determine that the first subscriber information includes an anonymous identifier. Responsive to determining that the first subscriber information includes the anonymous identifier, the network node can determine an authentication procedure to be performed. The network node can receive information associated with the communication device as part of the authentication procedure. The network node can generate second subscriber information based on the information associated with the communication device.

A system and method are disclosed for generating a privacy-preserving data corpus for Artificial Intelligence (AI) training. The system comprises a relying partner (RP) computing environment and a trusted, independent identity provider (IdP) computing system. Upon a user authentication request, the IdP provides the RP with only a PII-free, persistent pseudonymous identifier (gUserID) for the user. Any authentication artifacts containing Personally Identifiable Information (PII), such as an OAuth token, are programmatically neutralized by the IdP. This is achieved by generating a transient public-private encryption key pair, immediately destroying the private key, and encrypting the PII-laden artifact with the remaining public key, rendering the PII therein permanently irrecoverable. This enforcement of “PII unknowability” at the RP enables the aggregation of pseudonymous user data, linked by the persistent gUserID, from multiple independent RPs into a rich, cross-organizational corpus for AI training, without ever exposing user PII to the RP.

A data anonymization technique for datasets including personal identifiable information (PII) such as utility datasets may primarily include assigning anonymous identifiers to nodes in the dataset and swapping or otherwise moving portions of information between nodes of the dataset. The methodology of the swapping or moving operation may vary optionally based on a number of parameters, and may include swapping endpoints under a single parent, swapping endpoints between similar parents, and / or swapping similar endpoints between parents. The anonymization technique may output an anonymized dataset which reflects a topology of the original dataset and may optionally be updatable and modifiable to include additional data about existing or new nodes.

The invention discloses an identity card number anonymization system based on hierarchical dynamic encryption and SM3 salt value enhancement. The identity card number anonymization system comprises a security preprocessing and format normalizing module, a salt value enhancement hash module, a dynamic derived key module, a hierarchical dynamic encryption module, an anonymous identifier generation module and an anonymous identifier verification module. The invention provides a more comprehensive and efficient privacy protection scheme by introducing an anonymization technology based on dynamic salt value expansion and a layered protection architecture.

The invention provides a clinical data management system, a clinical data privacy protection method, equipment and a medium. Obtaining an identity identifier corresponding to the medical institution identity information of the requester and a patient anonymous identifier associated with the medical record text data; performing medical semantic analysis on clinical contents in the medical record text data, identifying a plurality of sensitive entities containing diagnosis and treatment features, physiological indexes and personal identifiers of patients, associating medical contexts of the sensitive entities, and generating a specified replacement seed value for each sensitive entity based on anonymous identifiers of the patients; and for each sensitive entity, determining corresponding replacement content from a preset desensitization rule base according to the medical context of the sensitive entity and the replacement seed value. And finally, replacing each sensitive entity with the corresponding replacement content, and generating a desensitized clinical text associated with the anonymous identifier of the patient. According to the scheme, context-aware privacy protection can be realized in a clinical data sharing environment.

The invention discloses a double offline payment transaction method based on a CA center and a group signature, which relates to the technical field of information security, and comprises the following steps: the CA center sets system parameters, generates a group and a key pair, allocates an anonymous identifier for each group member in the group, generates a private key for each group member in the group according to the system parameters, the group and the key pair, and sends the private key to the group member; synchronously broadcasting the system parameters, the group, the key pair and the private key to the user terminal and the merchant terminal; the user terminal receives the transaction amount, performs group signature according to the system parameters, the group, the private key and the dynamic anonymity degree adjustment strategy to generate a signature, and sends the signature to the merchant terminal; and the merchant terminal performs secret key verification on the signature according to the system parameters and the secret key pair, if the signature is valid, the transaction is continuously processed according to the transaction amount, otherwise, the transaction is refused. According to the invention, the group signature technology is adopted to realize privacy protection of small-amount transactions and effective identity tracing of large-amount transactions under digital RMB double-offline payment, and user privacy and supervision requirements are balanced.

The invention provides a hotel environment adaptive regulation and control system based on the Internet of Things, and belongs to the field of hotel regulation and control management. Comprising a privacy enhanced environment perception and preference acquisition module, a hotel operation data security fusion engine, a dynamic room state and authority regulation and control decision module and a security execution and auditing module which perform data interaction to enhance user data confidentiality and deeply align with hotel operation information; the privacy enhanced environment perception and preference acquisition module is deployed in a guest room and a public area and comprises an environment sensor and a user interaction terminal; a preference acquisition mechanism based on a temporary anonymous identifier is adopted, a user activates an interactive terminal through a check-in voucher and establishes an encrypted anonymous identifier uniquely corresponding to a physical room number, and acquired environment setting preference data is only bound with the anonymous identifier and is stored in an encrypted storage area of a local edge computing node of a guest room.

The present invention relates to the technical field of distributed data storage, and discloses a distributed storage method and system for clinical trial data. The method comprises: performing ring signature encryption processing on patient test data of multiple data centers to obtain patient anonymized identifiers and standardized clinical data; performing two-level random storage node configuration to obtain an optimal storage node configuration scheme; constructing an LPPMM-DA data aggregation model based on the optimal storage node configuration scheme, and performing sharding processing on the patient test data to obtain multiple target data shards; performing dynamic operation envelope analysis and alliance graph game calculation on the multiple target data shards to obtain a storage resource scheduling scheme; performing distributed data block storage and access authentication on the multiple target data shards according to the storage resource scheduling scheme and the anonymous identifier to generate data block storage distribution information. The present invention constructs a complete data access control system to ensure the safe and reliable storage of clinical trial data.

The invention discloses a payment routing method and device based on voiceprint encryption, equipment and a medium, and the method comprises the steps: obtaining a plurality of voiceprint secret key fragments containing voiceprint features and payment information based on a voice payment instruction of a user, and obtaining a plurality of static secret key fragments used for access authorization; performing routing evaluation on a plurality of preset cross-border payment paths to obtain a target path for payment settlement; performing encryption processing on each voiceprint key fragment to obtain a plurality of anonymous identifiers matched with the target path; performing combined verification on each voiceprint key fragment and each static key fragment according to each anonymous identifier to obtain a routing verification result; and sending the route verification result and each anonymous identifier to the target path for payment settlement. According to the method, payment authentication security is enhanced through a dual verification mechanism of voiceprint key fragmentation and static key fragmentation, and the method is suitable for a high-sensitivity financial scene and can assist a financial institution to quickly access a mainstream cross-border payment network.

A first network node operating in a telecommunications network can receive an authentication request associated with a communication device requesting registration with the telecommunications network. The authentication request can include first subscriber information. The first network node can determine that the first subscriber information includes an anonymous identifier. In response to determining that the first subscriber information includes an anonymous identifier, the network node can determine an authentication procedure to perform. The network node can receive information associated with the communication device as part of the authentication procedure. The network node can generate second subscriber information based on the information associated with the communication device.

The invention provides an authentication and key negotiation method and system based on a physical unclonable function, and the method comprises the steps: building a registration center, generating system parameters through the registration center, and registering equipment; registering an edge gateway in the registration center, and storing the system parameters in the edge gateway; generating a first secret parameter set by using the exclusive registration information in the equipment; the equipment requests access to the edge gateway, the edge gateway decrypts the identity identifier corresponding to the anonymous identifier, and authentication of the edge gateway on the equipment corresponding to the identity identifier is established; according to the first secret parameter set of the equipment, enabling the edge gateway to generate a session key and a first verification parameter, and enabling the equipment to generate a second verification parameter; and in response to successful verification of the first verification parameter and the second verification parameter, establishing authentication of the device to the edge gateway and determining that the session key is the communication key. The problems of poor expansibility, relatively low privacy and excessive computing resource consumption during authentication of the edge gateway and the equipment are solved.

The present invention provides a method and device for monitoring the contact behavior and infection risk of users diagnosed with infectious diseases. The tracking key of the current mobile terminal in each working cycle and the time information of the corresponding recording time period are encrypted and used as an anonymous identifier to mark the mobile terminal in a specific time period. The anonymous identifier is broadcast via Bluetooth and other mobile terminals within a set range around are scanned. By downloading the collection of tracking keys of the diagnosed users broadcast by the server, it is calculated and compared whether there is a record that is consistent with the anonymous identifier of other terminal devices recorded locally. If so, it is determined that the user of the current mobile terminal has come into contact with the diagnosed user. And the infectious disease infection probability is directly obtained from the server. By directly using the Bluetooth module and data for monitoring and processing, the monitoring of the contact behavior between a large number of monitoring objects and diagnosed users under the condition of large traffic volume is realized, and the monitoring frequency and accuracy can be effectively improved.

The application discloses a ranging method, device, system, storage medium and computer equipment, and relates to the technical field of communication. The method comprises the following steps: receiving a broadcast data frame issued by a base station, wherein the broadcast data frame carries identification information of the base station; sending a ranging data frame carrying an anonymous identifier to the base station, and receiving a reply data frame sent by the base station, wherein the reply data frame carries the identification information of the base station, time stamp information of the base station receiving the ranging data frame and time stamp information of the base station sending the reply data frame. The ranging solution and the positioning solution can only be completed locally on the mobile device, so that the security of the calculated distance information and positioning information is ensured. In addition, in the whole communication process, the base station cannot obtain the identity information of the mobile device, the distance information between the mobile device and the base station and the position information of the mobile device, so that the privacy security of the user holding the mobile device can be effectively protected.

The application discloses an account authentication method and device, a storage medium and an electronic device, and relates to the technical field of data processing. The method comprises the following steps: first, obtaining user information and user signaling of a login user; then, generating an anonymous identifier of the user information corresponding to the login user based on the user information; then, extracting an anonymous user information entry corresponding to the anonymous identifier in a blockchain system; finally, determining an account authentication result of the login user according to the anonymous user information entry and the user signaling. According to the application, the anonymous identifier can be generated according to the user information of the login user, and then the anonymous user information entry can be extracted by using the anonymous identifier. The user signaling of the current login user is verified according to the user information stored in the blockchain system, and the account authentication result of the login user is determined, so that the account borrowing and stealing situation can be found in time, the detection capability of the system for irregular behaviors and stealing attack behaviors is improved, and the account authentication accuracy is improved.

Techniques are disclosed relating to computing security and privacy. In some embodiments, a computing device provides, to a service computing system, a service request that identifies an action and includes an anonymous identifier for a user of the computing device. The computing device receives, from the service computing system, a score request for a trustworthiness score indicative of the user's trustworthiness. In response to receiving the score request from the service computing system, the computing device provides information indicative of the user's identity to a scoring computing system and receives the trustworthiness score and a corresponding score signature from the scoring computing system. In response to receiving the score and the score signature from the scoring computing system, the computing device provides the score to the service computing system.

Techniques are disclosed relating to computing security and privacy. In some embodiments, a computing device provides, to a service computing system, a service request that identifies an action and includes an anonymous identifier for a user of the computing device. The computing device receives, from the service computing system, a score request for a trustworthiness score indicative of the user's trustworthiness. In response to receiving the score request from the service computing system, the computing device provides information indicative of the user's identity to a scoring computing system and receives the trustworthiness score and a corresponding score signature from the scoring computing system. In response to receiving the score and the score signature from the scoring computing system, the computing device provides the score to the service computing system.

To provide a service cooperation system and a service cooperation method for efficiently performing transactions.SOLUTION: A service cooperation system A1 includes a second server 30 which is connected to a first server 20 providing a first settlement service and provides a second settlement service, and user terminals 10 using the first settlement service. Then, a second server 30 executes image generation processing for generating an image identifier to be included in a code image to be used for settlement, and association processing for associating and storing the anonymous identifier generated by the first server 20 and the image identifier. Further, when acquiring the image identifier of the code image read by the reading terminal, the second server 30 executes settlement stage processing for making the first server 20 execute the settlement of the transaction of the anonymous identifier associated with the image identifier.SELECTED DRAWING: Figure 1

The invention relates to the technical field of scientific research data security protection, and discloses a multi-model cooperation-based scientific research data security protection method, which comprises the following steps of: obtaining a user identity attribute statement and an access request parameter, and generating an anonymous identifier and an attribute proof through a zero-knowledge proof technology; analyzing a multi-mode composition structure of scientific research data; dispersing and embedding the coded anonymous identifiers into different modes of scientific research data; constructing a revocable mapping mechanism between the anonymous identifier and the real identity, and performing fragmentation storage on the mapping relation; when a data leakage event is detected, extracting watermark information based on leaked data to reconstruct an anonymous identifier; a multi-party authorization revocation protocol is executed, and the identity mapping relation is reconstructed after authorization is obtained; according to the method, zero knowledge proves that the multi-modal watermark and the revocable anonymous architecture are innovatively combined, so that the privacy of scientific research data accessors is protected, and meanwhile, effective balance between data tracking and leakage responsibility investigation is realized.

The embodiment of the invention provides a data access processing method and device for an education platform, and belongs to the technical field of data processing.The method comprises the steps that an internal communication layer, a business logic layer, an encryption service layer, an identity verification layer and a data storage layer corresponding to a course release model and a course interaction model are arranged on the education platform; when a data access requester initiates an access request to the education platform, performing identity verification on the data access requester through the identity verification layer, and after the identity verification is passed, performing binding operation of course recommendation data and the data access requester in the data storage layer to generate course use data; in the data storage layer, course use data is subjected to random segmentation processing, the segmented data is fused with the anonymous identifier, and in the encryption service layer, the fused data is encrypted by using a user private key carried by a data access requester to form encrypted course data. According to the invention, the data processing security of the education platform is improved.

A method and system detect and link anomalous gaming events. A processor, using shuffler sensors, detects a first anomaly on a first card from a first game instance, the anomaly varying from prior card images. In response, a machine learning model analyzes image data from a first gaming table's image sensors to determine unique biometric facial features of a first participant. A first anonymous identifier is generated from these features and stored, linked to first anomaly data. Subsequently, a second anomaly on a second card in a second game instance is detected by shuffler sensors. Image data from a second gaming table is analyzed by the machine learning model to extract unique biometric facial features of a second participant. It is then determined that the second participant's facial features mathematically correspond to the stored first anonymous identifier. A counter associated with the first anonymous identifier is incremented, indicating multiple linked anomaly events.

Vehicle, comprising: Sensors; and a controller which is designed to: to use the sensors to capture a dynamic attribute and a static identifier of a target vehicle; to generate a pseudo-anonymous identifier by generating a hash value of the identifier and the attribute of the target vehicle; to transmit a first message containing the pseudo-anonymous identifier, a random number and a public key; and in response to receiving a second message containing a symmetric key, the identifier, and the random number, to transmit a third message encrypted with the symmetric key.

Systems, apparatus, methods, and computer-readable media for authentication are disclosed. For example, a method may include receiving first authentication information of a user; generating an authentication token based on the received first authentication information, wherein the authentication token does not include the first authentication information; receiving user information of a user; obtaining an anonymous identifier token, where the anonymous identifier token comprises a composite token, and where the anonymous identifier token comprises an identity token generated based on the received user information; adding an authentication token to the anonymous identifier token; and storing the anonymous identifier token for authenticating the user.

This invention provides a method and apparatus for protecting the privacy of smart home user behavior based on federated learning. The method includes receiving anonymous device identifiers reported by each smart home terminal, storing and generating an anonymous identifier collection status marker; performing category association analysis to obtain a category association degree distribution map, and generating device clustering results based on this; sending cluster identifiers to terminals within each device cluster, receiving confirmation information to generate a cluster division completion status table; adjusting the length and removing redundancy of basic anchor point segments according to the terminal scale to generate obfuscated anchor point sequences and sending them to the terminals, receiving verification information to generate an anchor point sending completion status marker; receiving obfuscated behavior segments reported by terminals, classifying them according to cluster identifiers, and performing alignment and aggregation processing based on content overlap to generate a cluster-level behavior collaboration sequence and sending it to the terminals; and generating a federated collaboration completion marker for the current round based on the returned deployment status marker. This invention improves the alignment accuracy and collaborative aggregation efficiency of multi-terminal behavior sequences.

The application provides a smart contract driven unmanned aerial vehicle operation data sharing method and related device, and relates to the unmanned aerial vehicle field. The unmanned aerial vehicle respectively converts the identity information of each subscription user of the unmanned aerial vehicle into the anonymous identifier of each subscription user, and generates a broadcast header including the anonymous identifier of each subscription user; selects a key generation element from a large prime order integer group, and generates a symmetric key of shared data according to the key generation element and a preset bilinear mapping value; converts the shared data into encrypted ciphertext through the symmetric key, and generates signature information of the encrypted ciphertext and the broadcast header; encapsulates the signature information, the encrypted ciphertext and the broadcast header into broadcast ciphertext, and broadcasts to the terminal equipment of each subscription user. In this way, the unmanned aerial vehicle supports dynamic subscription, and hides the identity information of the subscription user through a one-way anonymous key agreement. In addition, a lightweight accountability mechanism is realized through an accountability smart contract and a short signature deployed on a private chain.

The invention relates to the technical field of data security processing, in particular to a commercial finance big data security processing method, which comprises the following steps: S1, receiving uploaded data from a plurality of data provider nodes, the uploaded data comprising local feature vectors encrypted by using a joint public key based on a threshold homomorphic encryption mechanism, the commercial financial subject anonymous identifier is encrypted by using the same joint public key and corresponds to the feature vector sample; according to the method, security alignment and cooperative calculation of financial data under full-flow ciphertext are realized, privacy is guaranteed and processing efficiency is greatly improved through decentralized architecture and hardware acceleration, and a reliable and efficient solution is provided for cross-mechanism data fusion.

The invention discloses an anonymous and real-name opinion submission processing method, system and device and a medium, and relates to the technical field of internet information interaction. The method comprises the steps of verifying a user identity and maintaining a user login state; determining a current effective identifier according to the submission mode selected by the user; if the submission mode is an anonymous submission mode, generating a temporary anonymous identifier which is associated with the user login state and cannot directly reversely deduce the user identity; if the submission mode is a real-name submission mode, using a traceable real-name identifier bound with a user login state as an effective identifier; dynamically binding the opinion content input by the user with the effective identifier, and locally caching the opinion content and the effective identifier; in response to a mode switching operation of the user, updating the current effective identifier, and maintaining the bound opinion content; and in response to a submission instruction, forming a data packet by the opinion content and the current effective identifier and submitting the data packet. According to the invention, seamless switching between the anonymous mode and the real-name mode can be realized while the privacy security of the user is guaranteed.

The present application provides an authentication processing method and device. The method includes: sending an authentication request message to a second device so that the second device generates registration information according to preset parameters; receiving the registration information sent by the second device; obtaining the current timestamp, and using the preset hash function in the registration information to perform hash operation processing on the first hash encryption item, the self-identification and the timestamp in the registration information to obtain attribute information; calculating the anonymous identification according to the self-identification and the registration information; sending the timestamp, the characteristic value in the registration information, the anonymous identification and the attribute information to the second device, so that the second device calculates the attribute verification information according to the timestamp, the characteristic value in the registration information, the anonymous identification, the attribute information, the preset parameters and the preset hash function when the timestamp meets the preset conditions, and if the attribute verification value is equal to the attribute information, the first device is authenticated. The method of the present application reduces the time cost.