23101 results about "Authentication" patented technology

The invention relates to the technical field of privacy data protection, and discloses a privacy data protection method and system based on homomorphic encryption and federated learning, and the method comprises the steps: processing original health data collected by Internet of Things equipment of a plurality of pension institutions, and obtaining a preprocessing data set and a privacy risk assessment result; encrypting to obtain a double encrypted data set; constructing a decentralized federated learning framework, and calculating global training parameters; performing noise injection processing and model iteration training to obtain a privacy protection model; performing trusted execution environment deployment on the privacy protection model, and performing identity verification through role-based multi-level access control and zero-knowledge proof to obtain a security access strategy; edge node distributed deployment is conducted on the privacy protection model, cross-mechanism health data analysis is conducted through a secure multi-party computing protocol, a collaborative analysis result is obtained, various privacy protection technologies are adopted, and efficient utilization of data is achieved while data privacy is protected.

The invention discloses an archive data security integration management system, which relates to the technical field of knowledge maps and comprises an archive data acquisition module, a knowledge intelligent analysis module, a knowledge map dynamic construction module, a security situation evaluation module and a security communication center module. The data acquisition module structurally acquires metadata and operation behaviors, the intelligent analysis module dynamically governs data quality, the map construction module constructs a three-dimensional security model, the situation evaluation module quantifies security influence and generates a strategy, and the communication center module realizes dynamic identity authentication and bandwidth allocation. Through the knowledge graph technology, comprehensive integration and safety management of the archive data are achieved, the data quality and utilization efficiency are improved, dynamic evaluation and coping with safety threats are achieved, and the safety and integrity of the archive data are ensured. Meanwhile, through dynamic identity authentication and bandwidth allocation, the safety and efficiency of cross-domain communication are improved.

The method provides for securely harvesting and distributing trusted metadata from devices to artificial intelligence (AI) systems. It enables use of cryptographic hashes and signatures on data for supply chain provenance. It is an agentless method to enhance application security by design, and data protection with data authenticity and confidentiality in device to upstream services communications and data sharing. It helps securely harvest, filter, and forward device metadata to webhooks for AI / ML driven data analytics.

The invention provides an intelligent Internet of Things public security management and control system and method based on multi-source data fusion, and belongs to the technical field of Internet of Things security. According to the system, unified collection and standardized processing of multi-source data are achieved by recognizing a system operation scene and loading corresponding model parameters and response strategies, and a unified semantic representation structure is constructed. And the system executes anomaly detection at an edge node, completes risk scoring and grading alarm judgment in combination with a semantic structure and anomaly feature information, and generates a control response instruction based on strategy matching. Meanwhile, dynamic optimization of the scoring model and identity authentication, behavior auditing and data compliance export in the operation process are supported. The system has intelligent identification, adaptive analysis and response closed loop capabilities, and improves the precision and credibility of public security management in the Internet of Things environment.

The invention provides a medical data privacy protection method and system based on artificial intelligence, and relates to the technical field of artificial intelligence, and the method comprises the steps: carrying out the feature analysis of medical data, building a scoring matrix, generating a privacy risk assessment result, dividing a security domain, and building a distributed cooperation mechanism through federal learning; preprocessing data at a local node, constructing a deep neural network model, encrypting gradient information by using a dynamic key matrix, and performing distributed aggregation operation and verification; forming a data privacy protection scheme; and performing identity verification and anomaly detection on the access request, and dynamically adjusting the access granularity. According to the method, the security and the flexibility of medical data privacy protection are improved, and meanwhile, the availability of the data is ensured.

Provided herein are techniques to facilitate dynamic policy enforcement for cloud-based applications in an enterprise environment. In one example, a method may include obtaining, from a cloud network of a cloud-based application, an authentication request associated with an enterprise user that is seeking to utilize the cloud-based application, wherein the authentication request comprises an application identifier and a vulnerability index associated with the cloud-based application; identifying one or more vulnerabilities of the cloud-based application based on the application identifier and the vulnerability index; determining an access level for which the cloud-based application is allowed to access the enterprise network based, at least in part, on one or more vulnerabilities of the cloud-based application and one or more access rules associated with the cloud-based application; and sending a response to the cloud network indicating the access level for which the cloud-based application is allowed to access the enterprise network.

Systems and methods for decentralized data management across interoperable distributed platforms are disclosed. A computing system receives input data associated with a unique decentralized identifier (DID) representing an entity or event. The computing system segments the input data into encrypted data segments, each cryptographically linked to the DID, and distributes these encrypted segments across decentralized storage nodes according to a redundancy scheme. A cryptographic lineage record, including segment identifiers, timestamps, and hashes linked to the DID, is stored in a decentralized ledger. In response to authenticated access requests, the computing system reconstructs the input data by retrieving, decrypting, and cryptographically verifying the distributed data segments against the lineage record. Authorized entities access the reconstructed data through interfaces enforcing cryptographically secured access permissions defined within the decentralized ledger, providing enhanced security, provenance verification, and data resilience.

The invention discloses a cloud desktop security access control method based on a zero-trust architecture, belongs to the technical field of network security, and is used for solving the problems of difficulty in hidden attack detection, cross-cloud attack chain breakage and conflict between security control and service continuity in a multi-cloud environment. Firstly, user identity attributes, session metadata and service call logs are aggregated, an identity-resource-behavior triple dynamic graph is constructed, cross-session association features are extracted, and a multi-dimensional behavior baseline is generated. And quantifying the access deviation degree based on the behavior baseline, triggering sensitive operation traceability analysis, constructing a time sequence risk propagation model, identifying latent attack features, predicting a penetration path and outputting a risk propagation coefficient. And finally, dynamically generating a process-level micro-isolation strategy according to a risk result, gradually adjusting the authority through a nonlinear authority attenuation function, inserting a secondary authentication node when unexpected resource jump is detected, reconstructing a communication white list, and realizing collaborative optimization of security protection and service continuity.

A system and method for user-level network trace and tracking which leverages the uniqueness of verified authentication objects as metadata tags on captured network packets to gain insight at the user-level of how a network and various applications interact. The tagged network packets may be tracked, and the resulting data formed into a trace and track dataset to create one or more user-level dependency graphs alongside captured temporal dynamics. The trace and track dataset may be enriched with application trace information and runtime instruction data to improve the executable graph and provide deeper insight into application and user security on a given network.

The invention discloses a data security sharing method and system, and relates to the technical field of data security, and the method comprises the steps: receiving to-be-shared data uploaded by a data provider; fragmenting the data by adopting a biologically inspired adaptive fragmentation algorithm; generating a digital fingerprint for each fragment by using a multi-dimensional dynamic Hash algorithm; encrypting data fragments by adopting a post-quantum encryption algorithm and storing the data fragments in a decentralized network; recording the access authority, the digital fingerprint and the storage position information to a block chain security account book; when a data request is received, the access permission is verified; carrying out identity verification by adopting multi-mode biological feature recognition; after the verification is passed, obtaining a digital fingerprint and a storage position from the block chain; acquiring the encrypted fragments from the decentralized network and decrypting the encrypted fragments; verifying the integrity by using the digital fingerprint; and recombining the verified fragments to obtain complete data and returning the complete data to the requester. According to the method, efficient data sharing is realized while the data security is guaranteed, and the data value and privacy protection are effectively balanced.

The invention relates to the technical field of login management, in particular to an account-free user unification method and system of a construction and management system based on multimode authentication, and the method comprises the following steps: collecting historical login time, login frequency, login place and equipment type data of a user based on multi-terminal user activity data, and obtaining a historical behavior record of the user; according to the method, the behavior deviation can be identified by comparing and analyzing the current and historical behaviors of the user, then the risk score is calculated, the authentication factor is dynamically adjusted according to the risk score, the flexibility and adaptability of security verification are improved, and the security verification efficiency is improved by binding the real person information of the user to the dynamically adjusted token and adjusting the validity period of the token. The security and effectiveness of token management are effectively improved, close token checking and authority analysis can be performed when a user accesses a downstream system, and the accuracy and security of authorized access are ensured.

The invention discloses a multi-level transaction security authentication method based on supply chain finance, and relates to the technical field of financial services, and the method comprises the steps: reading encrypted data stored in a block chain when a transaction is initiated, and calculating a dynamic credit score in combination with real-time data in a transaction request; according to the dynamic credit score, the transaction amount and the transaction frequency, carrying out risk grade division on the transaction; dynamically triggering a corresponding authentication level according to the transaction risk level, and performing privacy protection verification on sensitive data related to the transaction in combination with a zero-knowledge certification technology; after verification is passed, an adaptive hierarchical consensus mechanism is selected according to the transaction risk level to execute a consensus operation, and a consensus result is stored in the block chain; the transaction risk levels are dynamically divided, and corresponding authentication levels are triggered for different risk levels, so that the high efficiency of low-risk transactions is ensured, and fine-grained privacy protection is provided for high-risk transactions.

A federated mining method for multimodal data based on multiple security policies includes: a federated learning framework is used as a data mining model for distributed data mining; a multiple authentication mechanism is designed; a local edge node is selected to participate in a federated computation to obtain authenticated local edge node and aggregate a dataset; a multimodal data fusion and a multimodal data classification are performed on the dataset by a generalized multimodal data feature fusion model based on a multi-headed attention mechanism; and an adaptive perturbation mechanism based on cyclic correlation analysis and differential privacy is designed to add noise round by round and dynamically. A federated mining method for multimodal data is further provided.

A dynamic generative-AI enhanced leadership coaching platform includes an agent, an authentication module, an event processor, a user interface module, a router, a generative AI module having a prompt compiler module, a post-conversation analysis module, a prompt template library, an API interface module, a memory management module having a vector-search module, a vectorized database module configured to store vectorized data records and be accessible to the memory management module, a vectorization module configured to vectorize data, a knowledge base database module configured to catalogue vectorized data, and a user profile stored in the user database including a dynamic data point, a personalized conversation starter, and a user permission set.

The invention relates to the technical field of financial data security, and discloses an intelligent ERP financial system data security management and authentication method. The method comprises the following steps: acquiring an original transaction data stream in an ERP system, extracting key financial fields, and dividing the key financial fields into a sensitive data set and a common data set according to a preset rule; a dynamic encryption strategy framework is constructed based on sensitive data set attributes, the framework comprises multiple levels of encryption strength parameters, and the corresponding encryption strength can be automatically matched according to the authentication level of an access request. And monitoring a system data access behavior in real time, collecting feature data, inputting the feature data into the anomaly detection model, and triggering access blocking when an output anomaly access probability exceeds a threshold value. And generating a periodic integrity verification instruction according to the sensitive data updating frequency, performing integrity verification by using a hash chain technology, recording a result and marking a tampering risk level. And based on the association relationship between the tampering risk level and the abnormal access probability, generating an updated security policy and synchronizing the updated security policy to each data access node.

The invention relates to the technical field of integration of artificial intelligence security and network security, and discloses an AI dynamic security transmission system based on an SASE framework, which realizes security access control based on AI dynamic identity verification through an SASE integration access module, acquires and predicts network performance change in real time by using a network state sensing module, and transmits the network performance change to a network server. Equipment, environment and data content are subjected to multi-dimensional analysis by means of a security risk assessment module, a quantitative risk score is generated, and a transmission protocol, parameters and encryption strength are dynamically adjusted according to a network state and the risk score by means of a dynamic transmission optimization module and a self-adaptive encryption module; the problem that safety protection and transmission efficiency are difficult to cooperate in a traditional architecture is effectively solved, low-delay and high-reliability data transmission service can be provided for AI application in a complex network environment, meanwhile, self-adaptive dynamic protection of the whole data transmission process is achieved, and data safety is comprehensively guaranteed.

The invention relates to the technical field of virtual power plants, in particular to a multi-target scheduling optimization method and system for a virtual power plant to participate in a power market, and the method comprises the steps: carrying out the dynamic integration of distributed energy, an adjustable load and an energy storage unit in the virtual power plant, and constructing a resource model; establishing a distributed resource identity authentication and data storage mechanism; constructing a multi-objective optimization function, comprehensively considering a plurality of objectives such as resource utilization rate, carbon emission and load balance, and designing a dynamic weight adjustment mechanism; calculating a multi-objective optimization result, determining the optimal output and operation state of virtual power plant resources, and generating a virtual power plant optimization scheduling strategy; and cooperative optimization of internal resource scheduling and external power grid scheduling of the virtual power plant is realized by combining a game theory and a swarm intelligence algorithm. According to the method, the utilization efficiency of distributed resources can be improved, source-network load-storage coordination and new energy consumption are promoted, and the flexibility and comprehensive benefits of a power system are enhanced.

The invention relates to the technical field of Internet of Things, and discloses an OpenHarmony-based Internet of Things control method and platform, and the method comprises the steps: carrying out the distributed discovery and lightweight authentication of Internet of Things equipment, and constructing a dynamic equipment topological graph; generating a device capability description file according to the authentication device set, and creating a virtualization layer; acquiring multi-source sensor data from the virtualization layer and performing fusion processing to obtain a scene control strategy; acquiring network data packets at key nodes of the dynamic equipment topological graph and extracting features to obtain a security situation assessment result; performing deep packet detection based on a security situation assessment result and a scene control strategy, identifying an abnormal behavior, and generating a network optimization strategy; the cluster head nodes are selected according to the network optimization strategy to perform load-balanced data transmission, and the node working mode and the network topology structure are dynamically adjusted to realize global energy efficiency optimization, so that the global energy efficiency optimization is realized, and the overall operation time of the Internet of Things system is prolonged.

The invention relates to the technical field of data mining, in particular to a data security management system and method based on cloud computing. The method comprises the following steps: acquiring real-time vehicle driving data, and performing homomorphic modular exponentiation dangerous case sensing fragmentation encryption to obtain dangerous case sensing encrypted fragmentation data; acquiring an Internet of Vehicles data stream, and implementing zero-trust adaptive data stream encryption to obtain a zero-trust authentication credential; implementing federal learning privacy feature mapping on the dangerous case sensing encrypted fragmented data to obtain an anonymized encrypted feature mapping model; performing Merkle tree aggregation on the anonymized encrypted feature mapping model to obtain a block chain global dangerous case fingerprint; extracting a threat behavior quantization vector according to the block chain global dangerous case fingerprint and the anonymization encryption feature mapping model; and carrying out transmission strategy optimization according to the threat behavior quantization vector and the zero-trust authentication credential to obtain a global dynamic transmission strategy matrix. According to the invention, the safety of vehicle data uploading and the overall uploading efficiency can be improved.

The invention discloses a key generation and distribution system based on quantum random numbers, and relates to the technical field of quantum key distribution. The system comprises a quantum random number generation module, a light source control module, a quantum key distribution module, a detector module, a data processing module, a communication control module, a network anomaly monitoring module and an identity authentication module. According to the secret key generation and distribution system based on the quantum random number, the quantum random number generator generates a real unpredictable random number sequence by using the randomness principle in quantum mechanics, and the random number sequence is taken as the basis of the secret key, so that the unpredictability and the safety of the secret key are fundamentally improved; compared with a traditional secret key generation method based on a pseudo-random number, the quantum random number has higher randomness and lower predictable risk, various cryptographic analysis attacks can be effectively resisted, the uncrackability of the secret key is ensured, and an unbreakable safety guarantee is provided for information communication.

The invention discloses an intelligent risk control system and method for cross-border e-commerce digitization. Comprising an identity verification module, a transaction monitoring and abnormal behavior detection module, a credit assessment and risk quantification module, an anti-fraud and anti-money laundering check module, a compliance auditing module, a user behavior analysis module, a risk control rule engine module and a comprehensive risk assessment module. The problems of how to make a risk control system capable of meeting individual requirements and having cost benefits for small and micro enterprises and how to effectively evaluate and improve the ability of salesmen in the aspect of risk control are solved, and the overall risk control efficiency and accuracy are further improved. Therefore, personalized and intelligent setting of risk control is realized, a visual portrait of the ability of a salesman is provided, intelligent assessment and standard improvement of the ability of risk control personnel are promoted, risk control optimization is realized on the whole, the risk management level of cross-border e-commerce is improved, and enterprises can develop steadily in a complex and changeable international trade environment.

The invention relates to a power edge cloud cooperative management method based on a swan OS, and the method comprises the following steps: S1, deploying intelligent edge nodes, setting an embedded AI acceleration unit, operating the swan OS on all the intelligent edge nodes, and achieving the seamless cooperation of equipment through the distributed characteristics of the swan OS; and S2, realizing self-organizing connection of edge devices by adopting a Mesh network technology, designing a direct communication path between the edge devices, and realizing rapid processing of local problems. S3, aiming at the real-time requirement of a power system, optimizing an MQTT / CoAP protocol stack, improving the efficiency and reliability of message transmission, and allocating special network resources for different types of power applications by utilizing the 5G network slice characteristics, S4, constructing a security architecture based on a zero-trust principle, enhancing the equipment access control and data transmission security, and S5, establishing a security architecture based on a zero-trust principle. And identity authentication and data integrity protection are performed by using a block chain technology, so that data tampering and counterfeiting are prevented. According to the method, the local distributed decision-making capability and the global cooperation capability are effectively improved.

The invention relates to the technical field of information security data processing, and discloses an information security analysis method and system based on big data, and the method comprises the steps: S1, collecting multi-source heterogeneous security related data which comprises a business log, a user behavior track, network traffic, an application program interface calling record, an identity authentication log and a real-time security data flow, preprocessing the collected data to obtain standardized data; and S2, performing entity identification, event extraction and relationship mining based on the standardized data, and constructing a cross-modal threat knowledge graph containing security entity nodes and associated edges. The method solves the problem of monitoring blind areas caused by lack of dynamic association mining capability among data in a traditional method, and particularly aims at distributed, low-frequency and multi-stage hidden attacks, the scheme can accurately recover an attack chain and identify high-risk threats through dynamic matching and path reasoning of a knowledge graph, and the method has a good application prospect. And the detection coverage rate and accuracy in a complex attack scene are remarkably improved.

The invention discloses a JDK8-based heterogeneous service large model dynamic adaptation and intelligent scheduling method and system, and belongs to the technical field of artificial intelligence service integration, and the method comprises a unified service module which provides standardized HTTP / WebSocket access for an application layer and shields the difference of multiple platforms at the bottom layer; the dynamic routing module is used for dynamically selecting service nodes based on service quality indexes and supporting weight calculation, fusing recovery and flow dyeing; the service execution module is used for loading a platform adapter through a dual-mode service factory, integrating a tool calling function and realizing protocol conversion and authentication injection; and the configuration management module supports dual-configuration source hot loading of the static file and the dynamic database and provides versioning rollback and consistency verification. According to the method, the problems of multi-platform protocol difference, service rigid expansion, tool calling coupling and the like can be solved, the complexity of multi-platform management is remarkably reduced, and the flexibility and maintainability of the system are improved.

A system and method for comprehensive data utilization and tracking comprising an ontological engine which in some embodiments is configured to create and curate various industry-specific ontologies which can be used to provide deeper context to an enterprise's network traffic and data transmission. The system and method further comprise a tagging and tracking engine configured to inspect network packets, apply a first tag associated with an authentication object, apply a second tag associated with an identified ontology, and track the tagged packets as they traverse the enterprise network, generating data utilization tracking information as the packets move through the network. A scoring engine may leverage the data utilization tracking information in combination with user entity and behavior data to compute a risk score associated with data utilization on the enterprise network.

The invention provides a security risk assessment method and system for digital assets, and the method comprises the steps: obtaining a unique identifier and an ownership record of the digital assets, and determining key points of risk assessment, the key points comprising encrypted storage, transaction history and a circulation mechanism of the digital assets; for each key point, identifying identity authentication, access control and data encryption security factors in the key point, and performing security compliance verification on privacy protection and compliance requirements of the digital assets by adopting a probability statistical method; generating a plurality of digital asset cross-chain compatibility and value evaluation factor combinations through a Monte Carlo simulation method, simulating security events and consequences thereof in different scenes, and calculating the occurrence probability and loss influence of each scene; and according to the optimized risk assessment model, assessing the overall security risk of the digital assets, identifying the key link with the highest risk, and assessing the potential loss influence of the key link.

Systems, devices, apparatuses, and methods for more effectively protecting a user's private data and information regarding their browsing and other on-line activities. Embodiments remove constraints on an application developer by not requiring them to specify an authentication service provider as part of their application, and instead permit a user to make that choice in a protected and anonymous manner.

The invention relates to a multimedia equipment control method and system based on adaptive protocol matching. The method comprises the following steps: firstly, collecting communication protocol data and extracting features to form a protocol feature data set; secondly, performing confidence coefficient verification on a data set type identification result, and if the confidence coefficient is lower than a threshold value, extracting a depth feature through a convolutional neural network; and calling a national standard protocol adaptation conversion engine based on a classification result, converting the heterogeneous protocol into data in a unified format, and generating a secure communication data frame through national secret algorithm encryption and bidirectional identity verification. And finally, performing hash check and structured analysis on the data frame, constructing an interaction information packet in combination with user behavior characteristics, and dynamically optimizing a control strategy through real-time feedback data to generate a self-adaptive interaction control scheme. According to the method, through a technical closed loop of intelligent analysis-standard conversion-security reinforcement-closed loop optimization, the high efficiency, the intelligent level and the security performance of multimedia equipment management are remarkably improved.

A system and method for attacker interdiction using user-level network trace and tracking which leverages the uniqueness of verified authentication objects as metadata tags on captured network packets to gain insight at the user-level of how a network and various applications interact. The tagged network packets may be tracked, and the resulting data formed into a trace and track dataset to create one or more user-level dependency graphs alongside captured temporal dynamics. The trace and track dataset may be enriched with application trace information and runtime instruction data to improve the dependency graphs and provide deeper insight into application and user security on a given network. Attacks may be detected by analyzing the dependency graphs, and attacker interdiction may be implemented by actively orchestrating network security and IT devices using SOAR workflows.

The invention relates to the technical field of equipment remote control, and discloses a remote control method and system for sewage treatment equipment and a storage medium. The method comprises the following steps: performing communication encryption and identity authentication processing on a standard data packet of a sewage treatment system, and constructing an equipment communication link; performing intelligent analysis and state diagnosis processing on the data in the equipment communication link, and generating an equipment operation state report; performing control strategy generation and parameter matching processing according to the equipment operation state report, and outputting an equipment control instruction; performing hierarchical analysis and execution state monitoring on the equipment control instruction, and establishing a control feedback data link; and performing remote optimization treatment according to the data in the control feedback data link so as to realize remote intelligent control of the sewage treatment equipment. Under the condition that the sewage treatment equipment is dispersedly arranged, the real-time monitoring of the running state of the equipment and the intelligent adjustment of the process parameters are realized, and the stability of the treatment effect is ensured.