8859 results about "Authentication" patented technology

The invention relates to the technical field of financial data security, and discloses an intelligent ERP financial system data security management and authentication method. The method comprises the following steps: acquiring an original transaction data stream in an ERP system, extracting key financial fields, and dividing the key financial fields into a sensitive data set and a common data set according to a preset rule; a dynamic encryption strategy framework is constructed based on sensitive data set attributes, the framework comprises multiple levels of encryption strength parameters, and the corresponding encryption strength can be automatically matched according to the authentication level of an access request. And monitoring a system data access behavior in real time, collecting feature data, inputting the feature data into the anomaly detection model, and triggering access blocking when an output anomaly access probability exceeds a threshold value. And generating a periodic integrity verification instruction according to the sensitive data updating frequency, performing integrity verification by using a hash chain technology, recording a result and marking a tampering risk level. And based on the association relationship between the tampering risk level and the abnormal access probability, generating an updated security policy and synchronizing the updated security policy to each data access node.

The invention relates to the technical field of management of the Internet of Things, and discloses a security control method and system for remote control of the Internet of Things, and the system comprises a security remote control platform, a zero-trust gateway, an authentication module, a security policy engine, edge proxy equipment and an encryption communication module. And the authentication module is used for performing identity authentication on the equipment and the user. The security policy engine dynamic access control table comprises access rule entries and associated signature information, and is issued to the edge proxy device through the zero-trust gateway. And the edge proxy device stores the dynamic access control table, verifies the signature information based on the platform public key, and performs matching and verification according to the access rule entry when receiving the control instruction. And the encryption communication module is used for performing encryption transmission on the access control table, the control instruction and the execution result. According to the invention, the whole process of remote control of the Internet of Things is dynamic, secure and credible, and the anti-attack capability and operation reliability of the system are effectively improved.

The invention discloses a data security dynamic evaluation system and a protection method, belongs to the technical field of information security, and is used for solving the problem of terminal equipment access control and behavior risk dynamic collaborative protection. The method comprises the following steps: generating fingerprints through terminal equipment features, verifying authorization, inputting access feature slices into a time sequence model by authorized terminal equipment, generating a trust score based on cosine similarity of a behavior sequence and a prediction sequence, and constructing a Markov model to dynamically select an authentication mode according to the trust score; calculating a risk index by combining network and geographic information, and distributing the risk index to a real or virtual environment; and the unauthorized terminal equipment distributes the virtual environment after registration. Differentiated monitoring is carried out, a time sequence library is established in the virtual environment, and doubt scores are generated through sequence matching; the state deviation of the real environment is calculated through a hidden Markov model, and the risk score is generated by fusing the multi-dimensional features. And based on the result management authority, the suspicion terminal equipment isolates and shrinks the authority, the compliance terminal equipment authenticates and migrates, and the access is regulated and controlled according to the minimum privilege principle and the time window mechanism.

A computer implemented method for governing risk actions by an artificial intelligence (AI) browser, by classifying a proposed action by the AI browser based on a large language model (LLM) as safe or risky based on AI weights or based on policy rules; initiating a step up authentication flow for a risk action; presenting an action summary and required capabilities to the user for approval; and enforcing user configured spend or scope limits on the risk action.

A system for affinity-based user acquisition is disclosed. An affinity analysis agent analyzes affinity patterns from existing customers and automatically identifies potential referrals without accessing message content. A relationship mapping agent calculates relationship strength between customers and non-customers based on communication frequency, interaction duration, timing patterns, and automatically finds the high-probability network candidates by scoring these relationships. An outreach and engagement agent creates personalized referral offers using relationship information and delivers them through optimal communication channels at ideal times. When someone accepts a referral offer, a billing integration AI agent may be initiated for automated account creation and service activation through identity verification, service selection, and account activation. Each new individual becomes part of the network. The AI communication agents analyze affinity patterns associated with the new individuals for discovering additional compatible individuals through graph traversal algorithms and centrality analysis.

The invention relates to the technical field of security and protection management, in particular to a campus security and protection management system based on deep learning, which improves the accuracy and robustness of identity recognition by acquiring access control card numbers, face images or fingerprint features and generating standardized identity authentication data. And on the basis of a comparison result of the identity authentication data and the campus database, a behavior chain initialization identifier is generated, and accurate identity binding of the school entering personnel is realized. Furthermore, by collecting multi-camera image stream data, pedestrian re-identification and similarity calculation are executed by using a deep feature matching network, and a cross-camera continuous trajectory data set is generated. And matching the behavior track data set with the conventional path template to generate a behavior offset feature vector. And carrying out joint modeling on the behavior offset characteristics and the identity information through a graph neural network model containing an attention mechanism, and outputting a behavior purpose label and a risk grade score. And a graded security response instruction is generated based on the risk score, so that the missing report rate and the false report rate are effectively reduced.

The invention discloses a water conservancy design archive retrieval system and method based on a local lightweight large model, and the method comprises the steps: S1, constructing a Python automatic preprocessing assembly line, extracting texts for PDF and Word multi-format archives, correcting metadata, and outputting standardized data; s2, constructing a full-text retrieval and semantic retrieval dual-mode cross-document retrieval service by relying on a Weavi ate local vector database and a lightweight text embedding model; s3, analyzing a user query intention through a local large model, synchronously triggering metadata accurate retrieval and content semantic retrieval, and generating a structured result; and S4, integrating the core module into a local area network Web platform, adopting Docker containerization deployment, and combining an RBAC permission model and JWT authentication to guarantee security. The system comprises a preprocessing module, a cross-document retrieval module, an intelligent agent module and a background management module, and collaboration is achieved through a standardized API. According to the method, the problem of archive fragmentation is solved, multi-mode retrieval breaks through keyword limitation, an intelligent agent reduces manual intervention, a localized architecture prevents secret-related leakage, background management adapts to an existing I T environment, and full-process intelligent archive service is provided for water conservancy design.

The invention discloses an edge computing-based industrial Internet of Things equipment data encryption transmission method, which comprises the following steps of: constructing an edge node alliance comprising at least two cross-regional edge gateways, completing bidirectional identity authentication through an alliance root certificate, and establishing an encrypted communication link; industrial equipment collects original data and then transmits the original data to an edge gateway which the industrial equipment belongs to, and the gateway extracts data features and divides the data features into a core control level, a process parameter level, a common monitoring level and a security level; differential encryption strategies are adopted for different levels of data; each edge gateway uploads the encrypted data to a distributed key management node, and obtains and synchronizes a periodically updated key chain; during cross-region transmission, performing secondary packaging and encryption to generate a data packet containing identifications such as a security level and the like; and the receiving end verifies the legality of the node, decrypts and verifies the integrity of the data, distributes the data if the decryption is passed, and blocks the alarm if the decryption The method is suitable for scenes such as single-area monitoring and multi-area manufacturing, data security and transmission efficiency balance are achieved, and all-weather stable transmission is guaranteed.

The invention discloses a rubber product quality detection method and system, and relates to the related technical field of rubber quality detection.The method comprises the steps that rubber products are conveyed to a target detection table, and data acquisition of the rubber products is executed; inputting the wave impedance distribution data and the surface heat distribution gradient field into a defect causal atlas channel to execute phase inversion fusion processing, establishing a cross-modal coupling phase tensor, and identifying deep defect response characteristics by solving a phase difference matrix; activating a pressure spectrum sensing unit to apply control pressure, reading a local mechanical response spectrum, sending the local mechanical response spectrum to a cross-modal calibration layer, and executing joint error authentication; and performing quality detection report according to a self-calibration defect mapping result. The technical problems that in the prior art, multi-modal sensing data fusion efficiency is low, deep defects are difficult to comprehensively recognize, and consequently the quality detection precision and reliability of rubber products are insufficient are solved, and the technical effects that cross-modal cooperative detection is achieved, and the precision and reliability of defect recognition results are improved are achieved.

The invention provides a communication module low-delay switching control method based on HPLC and HRF, and relates to the technical field of data processing, and the method comprises the following steps: when an index continuously exceeds a dynamically adjusted judgment threshold, a switching judgment unit generates a mode switching enable signal, and initializes an HRF channel pre-synchronization sequence; based on a pre-stored HRF channel feature vector table, HRF channel negotiation and authentication handshake processes are executed in parallel while HPLC link state monitoring is maintained; through a dual-channel redundancy transmission mechanism, the key fault information is packaged into a final priority protocol data unit before the establishment of the HRF link is not completed, and redundancy forwarding is carried out through a reserved time slot window of the HPLC link; and after the handshake of the HRF link is completed, the switching control unit executes seamless switching of the data transmission channel. According to the invention, the accuracy of channel state judgment is improved.

A method of provisioning a credential for a transaction between a payment device of a user and a transaction processing device is described. The method is implemented a third-party server remote from the payment device and the transaction processing device. The method comprises assigning the credential to the transaction and the user and provisioning the credential into the payment device for subsequent retrieval by the payment device. Assigning the credential to the transaction comprises: determining unique identifying information of the user; allocating a first user-identifying portion of the credential to correspond to the unique identifying information; determining a plurality of properties intrinsic to the transaction and encoding the plurality of properties into transaction-identifying information; and allocating a second transaction-identifying portion of the credential to correspond to the transaction-identifying information. The credential is associated with encrypted authentication data that is generated by the payment device during the transaction, and used for subsequent authentication of the transaction by the remote third-party server.

Some embodiments improve the security of service principals, service accounts, and other application identity accounts by detecting compromise of account credentials. Application identity accounts provide computational services with access to resources, as opposed to human identity accounts which operate on behalf of a particular person. Authentication attempt access data is submitted to a machine learning model which is trained specifically to detect application identity account anomalies. Heuristic rules are applied to the anomaly detection result to reduce false positives, yielding a compromise assessment suitable for access control mechanism usage. Embodiments reflect differences between application identity accounts and human identity accounts, in order to avoid inadvertent service interruptions, improve compromise detection for application identity accounts, and facilitate compromise containment and recovery efforts by focusing on credentials individually. Aspects of familiarity measurement, model feature selection, and a model feature engineering pipeline are also described.

The invention provides a rail transit vehicle-ground security encryption control method based on a national cryptographic algorithm. The method comprises the following steps: realizing rail transit vehicle-ground security encryption control enabled by the national cryptographic algorithm by adopting a layered and segmented three-level security encryption architecture of a vehicle-mounted terminal layer-a network transmission layer-a core network layer; cooperative control of a national cryptographic algorithm is realized through three stages of terminal authentication, data encryption and tunnel encapsulation; in order to solve the problem of encryption interruption caused by wireless link switching such as 5G signal attenuation, the technical scheme of the patent realizes lossless switching through a three-layer linkage mechanism of signal monitoring, switching decision and key synchronization; self-adaptive intelligent adjustment of a key strategy is realized through a three-layer closed-loop architecture of environmental perception, intelligent evaluation and dynamic regulation and control; and the self-adaptive intelligent adjustment of the key strategy is realized through a three-layer closed-loop architecture of environmental perception, intelligent evaluation and dynamic regulation and control. And the national secret algorithm is combined with the block chain evidence storage technology to realize data tampering prevention, and the speed is high.

The invention discloses a cross-domain joint authentication and multi-party signing system and method, and belongs to the technical field of cross-domain authentication. The system is characterized in that a cross-domain authentication request module receives initiating domain request information, determines a target domain, obtains a physical identity registration result, derives a temporary identity token, constructs, signs and packages a cross-domain authentication request packet, and sends the cross-domain authentication request packet; the execution stream verification module obtains target domain execution stream data and generates a verifiable execution stream; the consistency verification module matches the evidence of the initiation domain and the target domain based on a strategy rule to obtain a target evidence set passing verification; and the cross-domain verification module performs hierarchical hash on the target evidence set to generate a synthesized hash value, generates a signature result in combination with the request packet and verifies the signature result to obtain a cross-domain signature verification result. According to the scheme, by generating the verifiable execution stream and the verification evidence data, credible tracking and integrity guarantee of cross-domain operation are achieved, and it is ensured that cross-domain authentication is safe, reliable and auditable in combination with hierarchical hash and signature verification.

The present technology pertains to systems and methods for one-way authentication of quantum channels. A transmitter generates an entangled quantum state comprising a first state and a second state, modulates the second state according to a clock-synchronized pattern, and transmits it through a quantum channel to a receiver. The first state is retained and measured at the transmitter to extract quantum-state information. Authentication is performed based on this information, without requiring feedback from the receiver. The quantum-state information may be derived using quadrature measurements, Gaussian tomography, or other statistical analyses to detect whether the second state underwent irreversible interactions such as eavesdropping or decoherence. The system enables secure unidirectional quantum authentication, reduces protocol complexity, and supports real-time anomaly detection. It is compatible with continuous-variable quantum states, quantum key distribution (QKD), and scalable communication architectures.

The present disclosure provides for technology that addresses technological challenges arising in the field of identity verification. In particular, the present disclosure provides for out-of-band identity verification workflows that allow a first user to issue a verification challenge to a second user to confirm the identity of the second user. For example, the first user may receive a communication claiming to be from the second user. Rather than attempting to confirm the identity of the second user in-band, the first user initiates an out-of-band verification challenge to the second user.

A server computer may receive an authentication data packet including authentication data from a relying party computer in communication with an authenticator associated with a user device. The server computer may verify the authentication data in the authentication data packet. The server computer may store the authentication data packet in a database. The server computer may transmit to an authorizing entity computer, a data packet including data relating to the verification of the authentication data.

The invention belongs to the technical field of intelligent electric power internet of things, and particularly relates to an unmanned aerial vehicle heterogeneous terminal self-adaptive security access method for electric power edge computing, which comprises the following specific steps: terminal registration and credible anchoring: binding a hardware-level identity, collecting a multi-mode fingerprint and constructing a security behavior portrait; self-adaptive access authentication is carried out; dynamic behavior monitoring and baseline adjustment: establishing an identity authentication and management system, synchronously carrying out multi-dimensional real-time monitoring, carrying out linkage treatment on abnormal behaviors, and adopting a baseline evolution mechanism to avoid misjudgment; the multi-dimensional real-time monitoring comprises terminal service trend monitoring and flow situation analysis; and performing safe closed loop and cooperative response. According to the invention, unified risk detection of the unmanned aerial vehicle can be realized, real-time monitoring of vulnerabilities, access authority and operation states of the unmanned aerial vehicle is carried out, a dynamic behavior monitoring model is constructed in combination with unmanned aerial vehicle terminal information, business data, environment data and the like, and real-time monitoring and early warning of the unmanned aerial vehicle terminal are realized.

The invention discloses a portable operation and maintenance gateway management and control method and system based on dynamic monitoring feedback, and relates to the field of portable operation and maintenance gateway management and control, and the method comprises the steps: enabling a portable operation and maintenance gateway to be connected between an operation and maintenance terminal and a power control system in series, and carrying out the dual authentication of personnel and equipment; after authentication is passed, operation and maintenance are started, identity, time, position and gateway state of operation and maintenance personnel are collected and monitored in real time, reference information is matched to obtain a matching result, operation and maintenance behaviors are monitored in real time, multi-source data are collected, a management and control strategy is dynamically generated based on risk assessment, and a safety response is triggered; when the equipment is abnormal, an emergency repair mode is switched, non-core authority is relaxed, and whole-course auditing is carried out; the data in the whole operation and maintenance process is uploaded to a remote management platform after structured arrangement, and multi-channel synchronization and delayed uploading are supported when the network is abnormal. The system comprises an authentication module, a risk assessment module, a strategy execution module and a data synchronization module, power operation and maintenance whole-process safety management and control are achieved, efficiency and safety are both considered, and operation traceability is guaranteed.

Methods, apparatus, systems, and articles of manufacture are disclosed for device authentication in a dedicated private network. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to utilize the machine readable instructions to generate first credentials associated with a first network based on second credentials associated with a second network, the first credentials including first location data corresponding to a dedicated private network (DPN), cause a mobile device to program a programmable subscriber identity module (SIM) of the mobile device based on the first credentials, and permit the mobile device to access the DPN based on a determination that second location data corresponding to the mobile device and included with the programmable SIM corresponds to the first location data.

The embodiment of the invention provides a virtual power plant terminal access control system based on dynamic permission, and the system comprises an identity authentication module which is configured to collect hardware invariant features and firmware signature information of terminal equipment and generate an encryption certificate; the trust evaluation module is in communication connection with the identity authentication module and is configured to continuously monitor communication behavior characteristics and service instruction characteristics of the terminal and output a dynamic trust score; the dynamic authority management module is in data connection with the trust evaluation module and is configured to adjust the access authority level in real time according to the mapping relation of the dynamic trust score in a preset authority level interval; the strategy engine module is configured to generate an access control instruction when abnormal behavior characteristics are detected; and the behavior monitoring module interacts with the strategy engine module and the dynamic authority management module and is configured to execute blocking operation and feed back an execution result to the log auditing module. And the hardware invariant features and the dynamic behavior features are subjected to fusion evaluation, so that the terminal credibility quantification precision is improved.

The invention provides a match alliance platform management system and method, and the system comprises a match authentication module constructed by a block chain, an AI-driven qualification auditing module, a process management module, a convolutional neural network, a big data analysis module, and an RBAC authority management module. Wherein the match authentication module dynamically analyzes and stores authenticated match rule data through an intelligent contract, and realizes rule version tracing by using an encrypted hash chain; the AI-driven qualification auditing module integrates a natural language processing engine to analyze the selection standard and construct a multi-dimensional evaluation model, and adopts a machine learning algorithm to analyze historical data of athletes to generate a visual qualification report; the process management module supported by cloud computing automatically generates an application process based on a rule engine, adopts a Monte Carlo algorithm to execute multi-constraint drawing, and constructs a directed graph model to dynamically generate a schedule topological structure containing a three-person rotation time sequence.

The invention relates to the technical field of intelligent power grid and electric vehicle cooperative control, and discloses a plug-and-play and flexible power regulation and control integrated vehicle network interaction cooperative control system, which comprises a protocol adaptive conversion module, a multi-modal data alignment module, a flexible power regulation and control module, a vehicle pile identity authentication module and a power grid state sensing module, and realizing inter-generation vehicle millisecond-level identification and data unified modeling through the protocol middleware. According to the method, the problems of protocol compatibility and data alignment in a plug-and-play scene are solved, and deep coordination between the charging process and the power grid state is realized through flexible power regulation and control and a multi-stage safety mechanism. The system guarantees the non-inductive charging experience of a user, reduces the impact on a power grid to the maximum extent, prolongs the service life of a battery, and improves the energy utilization efficiency.

The invention discloses an AI agent data protection method and device based on a controlled execution environment, and the method comprises the steps: verifying the integrity of a safety decision monitoring module in each service node kernel of a cloud side through a remote authentication service in a trusted execution environment, and verifying whether the service nodes of the cloud side are all operated in the trusted execution environment or not; the starting environment is safe and credible; the cloud side receives the security configuration from the user side and distributes the security configuration to the security decision monitoring module of each service node; firstly, security check is executed on a service request to be sent by an AI agent, the service request is received by a cloud side service node after compliance, and a security decision monitoring module of a cloud side gateway service node intercepts a received network packet and judges whether the service request is normal traffic; when other service node services of the cloud need to be called, continuing to judge whether the traffic meets the security configuration configured by the user; and the security decision monitoring module is established based on an eBPF and is used for intercepting a received or sent network packet and realizing verification and auditing functions.

The invention relates to the technical field of artificial intelligence and robots, and discloses a robot health state authentication method and system based on multi-dimensional fusion, and the method comprises the steps: collecting multi-source data, and carrying out the standardization preprocessing; 17 health dimensions are estimated based on an algorithm model; fusing the health dimensions to generate a comprehensive health index; authenticating the health state, and generating a health authentication report; reporting and coding, and storing to a block chain; the system comprises a multi-source data acquisition module, a dimension calculation engine, a correlation analysis module, a dynamic authentication generator, a block chain evidence storage module and an application interface layer. According to the method, a 17-dimensional health index system is constructed, hardware multiplexing is realized by applying an algorithm model based on current, speed, vision, network data and the like, an expensive physical sensor is effectively replaced, and more comprehensive health data can be obtained by matching with a chemical risk inversion model based on vision and network data to generate an environmental chemical index.

Methods, systems, and machine-readable mediums that enhance transaction authentication of a transaction of a first application by checking that a state of one or more other applications matches prespecified states or that one or more of those applications transition states within a prespecified period of time. For example, the prespecified states may correspond to the application being installed on a specified device (e.g., of the user) and having an authenticated session with a specified user.

The invention discloses an electric power artificial intelligence model security protection method and system based on a zero-trust architecture, and belongs to the technical field of power grid security protection. The method comprises the following steps: constructing an encryption service request according to identity recognition information and environment information of an access user; verifying the request by adopting a multi-factor identity verification method, and generating an authentication credible score; performing weighted calculation by combining the user historical behavior score, the equipment safety score and the environmental factor score to obtain a dynamic comprehensive credibility score; and generating a permission configuration strategy based on the score to realize fine-grained access control. The system comprises a user request access module, an information collection module, a credibility evaluation module and an access control module, and through continuous verification and dynamic permission adjustment, safe access of the electric power artificial intelligence model is ensured. The defect that a traditional security technology depends on static authentication and boundary protection is overcome, data leakage, model tampering and illegal access are effectively prevented, and the overall security and stability of a power system are improved.

The invention discloses a digital asset management method and device, equipment, a storage medium and a program product, and the method comprises the steps: carrying out the hash calculation of transaction data when a super SIM card receives a transaction request carrying transaction data sent by first equipment, and generating a transaction hash value; performing hierarchical signature on the transaction hash value through a preset signature algorithm, and triggering personal identification code authentication of the user so as to release signature data of the hierarchical signature after the personal identification code authentication is passed; and sending the verification abstract of the personal identification code and the signature data to a block chain network, so that the block chain network verifies the signature data, stores the signature data after verification is passed, and returns a transaction confirmation event to the first device. According to the embodiment of the invention, the super SIM card is used as a security carrier, and the transaction data hash calculation, the hierarchical signature and the personal identification code authentication are combined, so that the whole-process security protection of the digital asset transaction is realized, and the security of the digital asset transaction can be effectively improved.

The invention provides a data verification method based on two-dimensional code third-party login and national secret authentication, and the method comprises the steps: obtaining a user identity bill and obtaining a private key password corresponding to the user identity bill by an encryption end when a login request sent by a user end through scanning a login two-dimensional code of a login end is received; the encryption end encrypts the private key password to obtain an encrypted key password, and sends the encrypted key password to the login end; the encryption end determines collaborative signature response data according to the collaborative signature request and the user identity bill and sends the collaborative signature response data to the login end; and the encryption end verifies the complete signature through the verification request, and sends a verification result to the authentication end. By arranging the encryption end, national secret authentication and two-dimensional code third-party login are combined, and the safety of logging in a third-party website when the two-dimensional code is scanned is guaranteed.

The invention discloses a wide-area time traceability credible authentication method in a power heterogeneous network environment, and belongs to the technical field of power system informatization and automation. Comprising the following steps: acquiring various high-precision time source information in a power heterogeneous network environment, and acquiring an initial time reference of the power system time synchronization device; generating uniform reference time, and embedding a digital watermark containing time source information and credibility thereof for each timestamp by using the digital watermark embedding module; controlling the power system time synchronization device to sequentially generate time transmission fingerprints at all levels of network nodes; constructing a unique time fingerprint chain covering the whole link; packaging the time fingerprint of each time transmission node and the traceability information thereof, and performing uplink storage; precise prediction and optimal control of time transmission errors are realized; if the overall cumulative time error exceeds a range of + / -10 [mu] s, the predictive correction is maintained until the error is controlled within + / -10 [mu] s.