36 results about "Anonymous identifier" patented technology

A system and method are disclosed for generating a privacy-preserving data corpus for Artificial Intelligence (AI) training. The system comprises a relying partner (RP) computing environment and a trusted, independent identity provider (IdP) computing system. Upon a user authentication request, the IdP provides the RP with only a PII-free, persistent pseudonymous identifier (gUserID) for the user. Any authentication artifacts containing Personally Identifiable Information (PII), such as an OAuth token, are programmatically neutralized by the IdP. This is achieved by generating a transient public-private encryption key pair, immediately destroying the private key, and encrypting the PII-laden artifact with the remaining public key, rendering the PII therein permanently irrecoverable. This enforcement of “PII unknowability” at the RP enables the aggregation of pseudonymous user data, linked by the persistent gUserID, from multiple independent RPs into a rich, cross-organizational corpus for AI training, without ever exposing user PII to the RP.

A data anonymization technique for datasets including personal identifiable information (PII) such as utility datasets may primarily include assigning anonymous identifiers to nodes in the dataset and swapping or otherwise moving portions of information between nodes of the dataset. The methodology of the swapping or moving operation may vary optionally based on a number of parameters, and may include swapping endpoints under a single parent, swapping endpoints between similar parents, and / or swapping similar endpoints between parents. The anonymization technique may output an anonymized dataset which reflects a topology of the original dataset and may optionally be updatable and modifiable to include additional data about existing or new nodes.

The invention discloses an identity card number anonymization system based on hierarchical dynamic encryption and SM3 salt value enhancement. The identity card number anonymization system comprises a security preprocessing and format normalizing module, a salt value enhancement hash module, a dynamic derived key module, a hierarchical dynamic encryption module, an anonymous identifier generation module and an anonymous identifier verification module. The invention provides a more comprehensive and efficient privacy protection scheme by introducing an anonymization technology based on dynamic salt value expansion and a layered protection architecture.

The invention provides a clinical data management system, a clinical data privacy protection method, equipment and a medium. Obtaining an identity identifier corresponding to the medical institution identity information of the requester and a patient anonymous identifier associated with the medical record text data; performing medical semantic analysis on clinical contents in the medical record text data, identifying a plurality of sensitive entities containing diagnosis and treatment features, physiological indexes and personal identifiers of patients, associating medical contexts of the sensitive entities, and generating a specified replacement seed value for each sensitive entity based on anonymous identifiers of the patients; and for each sensitive entity, determining corresponding replacement content from a preset desensitization rule base according to the medical context of the sensitive entity and the replacement seed value. And finally, replacing each sensitive entity with the corresponding replacement content, and generating a desensitized clinical text associated with the anonymous identifier of the patient. According to the scheme, context-aware privacy protection can be realized in a clinical data sharing environment.

The invention provides a hotel environment adaptive regulation and control system based on the Internet of Things, and belongs to the field of hotel regulation and control management. Comprising a privacy enhanced environment perception and preference acquisition module, a hotel operation data security fusion engine, a dynamic room state and authority regulation and control decision module and a security execution and auditing module which perform data interaction to enhance user data confidentiality and deeply align with hotel operation information; the privacy enhanced environment perception and preference acquisition module is deployed in a guest room and a public area and comprises an environment sensor and a user interaction terminal; a preference acquisition mechanism based on a temporary anonymous identifier is adopted, a user activates an interactive terminal through a check-in voucher and establishes an encrypted anonymous identifier uniquely corresponding to a physical room number, and acquired environment setting preference data is only bound with the anonymous identifier and is stored in an encrypted storage area of a local edge computing node of a guest room.

The invention discloses a payment routing method and device based on voiceprint encryption, equipment and a medium, and the method comprises the steps: obtaining a plurality of voiceprint secret key fragments containing voiceprint features and payment information based on a voice payment instruction of a user, and obtaining a plurality of static secret key fragments used for access authorization; performing routing evaluation on a plurality of preset cross-border payment paths to obtain a target path for payment settlement; performing encryption processing on each voiceprint key fragment to obtain a plurality of anonymous identifiers matched with the target path; performing combined verification on each voiceprint key fragment and each static key fragment according to each anonymous identifier to obtain a routing verification result; and sending the route verification result and each anonymous identifier to the target path for payment settlement. According to the method, payment authentication security is enhanced through a dual verification mechanism of voiceprint key fragmentation and static key fragmentation, and the method is suitable for a high-sensitivity financial scene and can assist a financial institution to quickly access a mainstream cross-border payment network.

A first network node operating in a telecommunications network can receive an authentication request associated with a communication device requesting registration with the telecommunications network. The authentication request can include first subscriber information. The first network node can determine that the first subscriber information includes an anonymous identifier. In response to determining that the first subscriber information includes an anonymous identifier, the network node can determine an authentication procedure to perform. The network node can receive information associated with the communication device as part of the authentication procedure. The network node can generate second subscriber information based on the information associated with the communication device.

The invention provides an authentication and key negotiation method and system based on a physical unclonable function, and the method comprises the steps: building a registration center, generating system parameters through the registration center, and registering equipment; registering an edge gateway in the registration center, and storing the system parameters in the edge gateway; generating a first secret parameter set by using the exclusive registration information in the equipment; the equipment requests access to the edge gateway, the edge gateway decrypts the identity identifier corresponding to the anonymous identifier, and authentication of the edge gateway on the equipment corresponding to the identity identifier is established; according to the first secret parameter set of the equipment, enabling the edge gateway to generate a session key and a first verification parameter, and enabling the equipment to generate a second verification parameter; and in response to successful verification of the first verification parameter and the second verification parameter, establishing authentication of the device to the edge gateway and determining that the session key is the communication key. The problems of poor expansibility, relatively low privacy and excessive computing resource consumption during authentication of the edge gateway and the equipment are solved.

The application discloses an account authentication method and device, a storage medium and an electronic device, and relates to the technical field of data processing. The method comprises the following steps: first, obtaining user information and user signaling of a login user; then, generating an anonymous identifier of the user information corresponding to the login user based on the user information; then, extracting an anonymous user information entry corresponding to the anonymous identifier in a blockchain system; finally, determining an account authentication result of the login user according to the anonymous user information entry and the user signaling. According to the application, the anonymous identifier can be generated according to the user information of the login user, and then the anonymous user information entry can be extracted by using the anonymous identifier. The user signaling of the current login user is verified according to the user information stored in the blockchain system, and the account authentication result of the login user is determined, so that the account borrowing and stealing situation can be found in time, the detection capability of the system for irregular behaviors and stealing attack behaviors is improved, and the account authentication accuracy is improved.

To provide a service cooperation system and a service cooperation method for efficiently performing transactions.SOLUTION: A service cooperation system A1 includes a second server 30 which is connected to a first server 20 providing a first settlement service and provides a second settlement service, and user terminals 10 using the first settlement service. Then, a second server 30 executes image generation processing for generating an image identifier to be included in a code image to be used for settlement, and association processing for associating and storing the anonymous identifier generated by the first server 20 and the image identifier. Further, when acquiring the image identifier of the code image read by the reading terminal, the second server 30 executes settlement stage processing for making the first server 20 execute the settlement of the transaction of the anonymous identifier associated with the image identifier.SELECTED DRAWING: Figure 1

The invention relates to the technical field of scientific research data security protection, and discloses a multi-model cooperation-based scientific research data security protection method, which comprises the following steps of: obtaining a user identity attribute statement and an access request parameter, and generating an anonymous identifier and an attribute proof through a zero-knowledge proof technology; analyzing a multi-mode composition structure of scientific research data; dispersing and embedding the coded anonymous identifiers into different modes of scientific research data; constructing a revocable mapping mechanism between the anonymous identifier and the real identity, and performing fragmentation storage on the mapping relation; when a data leakage event is detected, extracting watermark information based on leaked data to reconstruct an anonymous identifier; a multi-party authorization revocation protocol is executed, and the identity mapping relation is reconstructed after authorization is obtained; according to the method, zero knowledge proves that the multi-modal watermark and the revocable anonymous architecture are innovatively combined, so that the privacy of scientific research data accessors is protected, and meanwhile, effective balance between data tracking and leakage responsibility investigation is realized.

Systems, apparatus, methods, and computer-readable media for authentication are disclosed. For example, a method may include receiving first authentication information of a user; generating an authentication token based on the received first authentication information, wherein the authentication token does not include the first authentication information; receiving user information of a user; obtaining an anonymous identifier token, where the anonymous identifier token comprises a composite token, and where the anonymous identifier token comprises an identity token generated based on the received user information; adding an authentication token to the anonymous identifier token; and storing the anonymous identifier token for authenticating the user.

This invention provides a method and apparatus for protecting the privacy of smart home user behavior based on federated learning. The method includes receiving anonymous device identifiers reported by each smart home terminal, storing and generating an anonymous identifier collection status marker; performing category association analysis to obtain a category association degree distribution map, and generating device clustering results based on this; sending cluster identifiers to terminals within each device cluster, receiving confirmation information to generate a cluster division completion status table; adjusting the length and removing redundancy of basic anchor point segments according to the terminal scale to generate obfuscated anchor point sequences and sending them to the terminals, receiving verification information to generate an anchor point sending completion status marker; receiving obfuscated behavior segments reported by terminals, classifying them according to cluster identifiers, and performing alignment and aggregation processing based on content overlap to generate a cluster-level behavior collaboration sequence and sending it to the terminals; and generating a federated collaboration completion marker for the current round based on the returned deployment status marker. This invention improves the alignment accuracy and collaborative aggregation efficiency of multi-terminal behavior sequences.

The application provides a smart contract driven unmanned aerial vehicle operation data sharing method and related device, and relates to the unmanned aerial vehicle field. The unmanned aerial vehicle respectively converts the identity information of each subscription user of the unmanned aerial vehicle into the anonymous identifier of each subscription user, and generates a broadcast header including the anonymous identifier of each subscription user; selects a key generation element from a large prime order integer group, and generates a symmetric key of shared data according to the key generation element and a preset bilinear mapping value; converts the shared data into encrypted ciphertext through the symmetric key, and generates signature information of the encrypted ciphertext and the broadcast header; encapsulates the signature information, the encrypted ciphertext and the broadcast header into broadcast ciphertext, and broadcasts to the terminal equipment of each subscription user. In this way, the unmanned aerial vehicle supports dynamic subscription, and hides the identity information of the subscription user through a one-way anonymous key agreement. In addition, a lightweight accountability mechanism is realized through an accountability smart contract and a short signature deployed on a private chain.

The invention relates to the technical field of data security processing, in particular to a commercial finance big data security processing method, which comprises the following steps: S1, receiving uploaded data from a plurality of data provider nodes, the uploaded data comprising local feature vectors encrypted by using a joint public key based on a threshold homomorphic encryption mechanism, the commercial financial subject anonymous identifier is encrypted by using the same joint public key and corresponds to the feature vector sample; according to the method, security alignment and cooperative calculation of financial data under full-flow ciphertext are realized, privacy is guaranteed and processing efficiency is greatly improved through decentralized architecture and hardware acceleration, and a reliable and efficient solution is provided for cross-mechanism data fusion.

The invention discloses an anonymous and real-name opinion submission processing method, system and device and a medium, and relates to the technical field of internet information interaction. The method comprises the steps of verifying a user identity and maintaining a user login state; determining a current effective identifier according to the submission mode selected by the user; if the submission mode is an anonymous submission mode, generating a temporary anonymous identifier which is associated with the user login state and cannot directly reversely deduce the user identity; if the submission mode is a real-name submission mode, using a traceable real-name identifier bound with a user login state as an effective identifier; dynamically binding the opinion content input by the user with the effective identifier, and locally caching the opinion content and the effective identifier; in response to a mode switching operation of the user, updating the current effective identifier, and maintaining the bound opinion content; and in response to a submission instruction, forming a data packet by the opinion content and the current effective identifier and submitting the data packet. According to the invention, seamless switching between the anonymous mode and the real-name mode can be realized while the privacy security of the user is guaranteed.

The invention relates to a recommendation engine based on collaborative filtering, comprising: - a random identifier (RID) generator, wherein the generator is configured to generate a random identifier (RID) for a device (1) according to the Universally Unique Identifier (UUID) principle, wherein the random identifier (RID) is uniquely assigned to the device (1), - an identity modifier configured to remove a direct association between data and a data source from the random identifier (RID) and to create a K-anonymized identifier (KID) common to a number K of devices (1), - a data transmission system configured to send data, including the random identifier (RID), the K-anonymized identifier (KID), a timestamp and event details, from the device (1) to a central server, - a machine learning model (203) trained to generate recommendations based on collected anonymous data tailored to a specific random identifier (RID), - a database (202, 204) accessible via a programming interface (205) and storing recommendations for each random identifier (RID), and - a query system configured to query the database (202, 204) for recommendations associated with the random identifier (RID).

This invention discloses an intelligent system for HIV prevention and detection, belonging to the field of medical and health data processing technology. The system includes an intelligent testing kit, a user terminal, and a disease control management terminal. The intelligent testing kit has a built-in image acquisition unit for acquiring the colorimetric image of the HIV test strip; the user terminal receives the colorimetric image and extracts colorimetric feature parameters, generates a continuously variable risk index through a risk mapping model, and simultaneously identifies high-risk scenarios through a behavior perception module, dynamically pushing intervention information based on the risk index and / or high-risk scenarios; the disease control management terminal receives the desensitized risk index and corresponding anonymous identifiers and spatiotemporal data, constructs a risk propagation model based on a graph neural network, traces the spatiotemporal companions of risk nodes, and pushes anonymous early warning information. This invention achieves a closed loop from individual detection to group early warning, which can improve the early detection rate of HIV, achieve precise intervention, and optimize resource allocation.

A method for obtaining an identifier of a terminal device includes a key management network element receiving, from a first terminal device, a first key request including a first identifier, where the first identifier is an anonymous identifier or a temporary identifier of a second terminal device. The key management network element sends, to a unified data management network element, a first request including the first identifier. The unified data management network element determines a SUPI of the second terminal device based on the first identifier, and sends, to the key management network element, a first response including the SUPI. In response to an authorization check performed on the second terminal device based on the SUPI succeeds, the key management network element sends a first key response to the first terminal device, where the first key response includes a secure communication parameter.

A cyber security system creates a behavioral framework for evaluating cyber security of computer systems of an organization based on employees of the organization.SOLUTION: The system leverages offline and online personal identity information and then converts this data into anonymous identifiers to protect privacy. The identifiers are used to retrieve data, including behavioral data, from the identity graph. A business-to-business identity graph correlates the name of the organization maintaining the targeted computer system with the anonymous identifier of the employee. Online activity is collected by pixels fired from a website accessed by a user browser and collected by one or more remote servers.SELECTED DRAWING: Figure 1

The invention provides an AI marketing advertisement putting optimization system and method fusing multi-source data, and the method comprises the steps: linking anonymous identifiers with relevance through user behavior events from a plurality of heterogeneous data sources, and generating a plurality of unverified identity links with initial confidence scores; if the current anonymous identifier belongs to any unverified identity link and the corresponding initial confidence score is within a preset verification triggering range, putting an advertisement creative with a verification component to the user terminal to perform identity identifier verification; if the verification result of the user identity identifier is successful verification, marking the identity link as a verified identity link; and in a subsequent advertisement request decision, when it is identified that the user identifier belongs to the verified identity link, calling the user portrait bound with the identity link to generate a target advertisement putting strategy. According to the technical scheme provided by the invention, accurate delivery of the advertisement can be realized under the cross-channel behavior of the user.

A method and apparatus for securely logging a computer user into a computer system using an anonymous identifier is presented, thereby eliminating the use of a username and password and requiring only a single click or touch of the user to log into the computer. The anonymous identifier uniquely identifies the user and can be used as an encryption key.

The invention provides an anonymous authentication method, device and system, equipment, a storage medium and a program product, and relates to the technical field of security. The method comprises the following steps: when UE needs to update an anonymous identifier, generating a first message authentication code based on the anonymous identifier of the UE; sending the first request message to an application function AF network element; the first request message comprises a first message authentication code and an anonymous identifier, and the first request message is used for indicating establishment of an application session; receiving a first response message returned by the AF network element; and updating the anonymous identifier if it is determined that the anonymous identifier needs to be updated based on the first response message. According to the method and the device, the anonymous identifiers are updated, and different anonymous identifiers can be adopted when the UE accesses the AF, namely, the UE can use the different anonymous identifiers to carry out service requests and access one or more AF network elements, so that the privacy information of the UE is better protected, and the security of the UE is improved.

The application relates to the technical field of scientific research data security protection, and discloses a scientific research data security protection method based on multi-model cooperation, which comprises the following steps: obtaining a user identity attribute declaration and an access request parameter, generating an anonymous identifier and an attribute proof through zero-knowledge proof technology; analyzing the multi-modal composition structure of scientific research data; dispersively embedding the coded anonymous identifier into different modes of the scientific research data; constructing a revocable mapping mechanism between the anonymous identifier and the real identity, and performing sharded storage on the mapping relationship; when a data leakage event is detected, extracting watermark information from the leaked data to reconstruct the anonymous identifier; executing a multi-party authorization revocation protocol, and reconstructing the identity mapping relationship after authorization is obtained; through the innovative combination of zero-knowledge proof, multi-modal watermark and a revocable anonymous architecture, the application realizes the effective balance between data tracking and leakage accountability while protecting the privacy of scientific research data visitors.

Various embodiments of the present disclosure disclose a method and apparatus for subscription retrieval for anonymous identification. A first network node operating in a telecommunications network may receive an authentication request associated with a communication device requesting registration with the telecommunications network. The authentication request may include first subscriber information. The first network node may determine that the first subscriber information includes an anonymous identifier. In response to determining that the first subscriber information includes an anonymous identifier, the network node may determine an authentication process to perform. The network node may receive information associated with the communication device as part of the authentication process. The network node may generate second subscriber information based on information associated with the communication device.

The invention provides a network security password verification method and system. The method comprises the following steps: acquiring a revocation list when group members sign; determining a secret revocation voucher and a personal key pair of each group member; in response to a plurality of signature requests of any group member for the plurality of event topics, performing anti-quantum attack processing on each event topic and the personal key pair to obtain an anonymous identifier for identity authorization when the group member is signed; carrying out anti-quantum encryption on the secret revocation voucher, and carrying out zero-knowledge proof on the anonymous identifier and the legality of the encryption process based on an encryption form to obtain a group signature of a hidden group member identity; and performing revocation detection on the group signature according to the anonymous identifier and the revocation list, and revoking the signer identity when the anonymous identifier corresponds to different signature messages under the same event theme based on a revocation detection result. By adopting the scheme of the invention, group signature verification of user privacy protection can be realized under the condition of resisting quantum computing attacks.

This Application sets forth techniques for establishing a custodial relationship between a user device and a custodian device for recovering access to a user account and / or to encrypted user data with assistance provided by the custodian device to effect access recovery. A server of a cloud network service provides an anonymous identifier to associate with the custodian device and an account recovery key to store at the custodian device. Identity of an account of the cloud network service associated with the custodian device can be hidden from the server. The user device generates a data recovery key and provides a first portion of the data recovery key to the custodian device and a second portion of the data recovery key to the server. Integrity of the stored account recovery key and portions of the data recovery key are checked regularly by the custodian device and the user device.

The invention provides an anonymous appeal reporting method and device, electronic equipment and a storage medium, and relates to the technical field of communication. After a real mobile phone number of a user is obtained, an irreversibly encrypted anonymous identifier is generated based on the real mobile phone number and a dynamic parameter; and performing hash operation on an authorization protocol signed by a user and the generation information of the anonymous identifier to generate an authorization certificate and an anonymous identifier certificate, synchronizing the authorization certificate and the anonymous identifier certificate to a block chain certificate platform, accessing a number agent platform based on the anonymous identifier, dynamically binding a temporary number, and starting a voice processing service to establish anonymous call connection. And unbinding the temporary number after the call is ended, and synchronizing the call record and the unbinding state to the block chain evidence storage platform, so that the problems that in the prior art, the user privacy is easy to leak in the campus bullying appeal and report process, the subsequent dispute is difficult to arbitrate due to lack of a credible evidence storage mechanism, and the user experience is poor can be solved. And some anti-bullying technologies have the problems of false alarm, high implementation cost or incapability of realizing real-time appeal and report.

The invention provides an anonymous authentication method, device and system, electronic equipment, a storage medium and a product, and the method comprises the steps that: when it is determined that an anonymous identity identifier corresponding to user equipment needs to be updated, the user equipment generates a new anonymous identity identifier for the communication; sending a first request message to an AF network element; the first request message is used for indicating the AF network element to send a second request message to the AAnF network element; the second request message is used for indicating the AAnF network element to generate a new anonymous identity identifier; and under the condition that a first response message returned by the AF network element is received, updating the old anonymous identity identifier into a new anonymous identity identifier. By updating the anonymous identity identifier corresponding to the user equipment, the problem that a plurality of AFs share the same anonymous identity identifier to track the information of all AFs accessed by the UE is avoided, the privacy information of the UE is protected, and the security of the UE is improved.