1824 results about "Authentication information" patented technology

The invention discloses a multi-platform Internet of Things equipment unified access management method, equipment and a storage medium, and relates to the technical field of Internet of Things integration. The method comprises the step of solving the fragmentation problem of cross-platform equipment access through dynamic configuration adaptation. The method comprises the following steps: starting from receiving a front-end equipment operation request, indexing a pre-configured mapping relation database through an equipment unique identifier, and obtaining a target platform type, an API address and an encryption certificate; dynamically calling a protocol adapter based on a platform type, and injecting an account certificate into a request header or a message body according to a platform specification; converting the original parameters into a format supported by a target platform through a protocol conversion engine, and combining the original parameters with the authentication information to generate a complete request; and realizing high-reliability communication by using an asynchronous message queue, and finally returning a platform response to a front end. According to the invention, through mapping management of the configuration driver and dynamic adapter scheduling, equipment access unification across the Internet of Things platform is realized.

The invention relates to the technical field of equipment collaboration, and discloses a multi-equipment collaboration control method and device, computer equipment and a storage medium, and the method comprises the steps: building a session channel with collaboration equipment according to the authentication information of main control equipment; acquiring operation state parameters of the collaborative devices based on the session channels, and generating a permission allocation matrix according to the operation state parameters of the collaborative devices; and processing task requirements of the main control equipment by utilizing the permission allocation matrix, generating a differential instruction set, and executing synchronous control on the collaborative equipment according to the differential instruction set. According to the invention, the problems of authority conflict, inflexible task allocation and incapability of fast and automatic switching after the main control equipment fails when multiple devices cooperatively control the cloud mobile phone instance in the prior art are solved.

The embodiment of the invention relates to the technical field of data analysis, in particular to a national secret log auditing system which is characterized in that firstly, an operation behavior record sequence generated in the running process of a national secret application system is collected by the national secret log auditing system, and the sequence is composed of log entries containing identity verification information, resource access path information and state transition description information; performing context semantic association analysis on the operation behavior record sequence to obtain a semantic element extraction result and a semantic dependency relationship; then performing multi-level compliance verification based on a national secret security audit rule system, and generating a compliance judgment conclusion of a log entry level and a cross-entry-level abnormal behavior pattern recognition report; and finally, according to the judgment conclusion and the identification report, constructing a national secret log security auditing result set which comprises a risk level evaluation result, a violation evidence chain association graph and a security reinforcement strategy suggestion list, thereby effectively improving the accuracy and comprehensiveness of national secret log auditing.

The invention discloses a security verification method for security transaction, which is characterized by comprising the following steps: a client generates first authentication request data before a user requests to perform security transaction, and sends the first authentication request data to a server through an encrypted channel; and after the server receives the first authentication request data, a one-time authentication token is generated based on a preset authentication algorithm and the user identity information, and the one-time authentication token and the unique transaction context corresponding to the one-time authentication token are bound and stored in a server session cache. And the authentication information is transmitted by adopting an independent channel, so that the token is prevented from being reused after being intercepted and captured, and the transaction security is effectively guaranteed. Meanwhile, user behavior feature analysis is introduced, token generation and verification strategies are dynamically adjusted, the recognition and response ability of the system to abnormal transactions is enhanced, and therefore the accuracy of identity verification and the intelligence of risk control in the security transaction process are improved.

Various aspects of the present disclosure relate to an authentication server function (AUSF) that receives an authentication request from a security anchor function (SEAF), and transmits a data request for authentication data to unified data management (UDM). The AUSF can receive the authentication data from the UDM for primary authentication, and set an expiration time for security information associated with the primary authentication being successful. The AUSF can then transmit an authentication message of authentication information that includes the security information and the expiration time to an authentication and key management for applications (AKMA) anchor function (AAnF) that registers the expiration time. The AUSF can also initiate reauthentication based at least in part on expiry of the authentication information.

The invention discloses a data security authentication method and system for smart medical treatment, and relates to the field of data security, and the method comprises the steps: obtaining the identity authentication information of a user, and generating an anti-quantum root key; obtaining operation data and an operation log; according to the operation type, dynamically deriving a temporary sub-key based on the master key, and decomposing the temporary sub-key to obtain m temporary sub-key fragments and n temporary sub-key fragments; transmitting the m temporary sub-key fragments to the client terminal; generating a second signature fragment based on the n temporary sub-key fragments, receiving the first signature fragment, and combining the first signature fragment and the second signature fragment to obtain an operation signature; calculating a hash value of the operation data, and embedding the hash value into the operation signature; and encrypting the operation log based on the embedded operation signature to generate a tamper-resistant log, and marking the temporary sub-key as a failure state. The security of the medical data can be effectively improved.

The invention discloses a dynamic NFT-based attribute-based encrypted medical data sharing method, which comprises the following steps that: firstly, a user submits identity authentication information to a trusted digital identity platform, and applies for an attribute certificate from an institution to which the user belongs; secondly, the key management system completes system initialization and generates a master key and a public key, the medical data owner generates an attribute-based encrypted ciphertext according to the access strategy and casts a dynamic NFT according to the smart contract, and when the medical data demander conforms to the access strategy, the medical data owner issues a sub-NFT of the dynamic NFT to the medical data demander through the smart contract; and then the medical data demander applies for a master key from the key management system and decrypts the ciphertext. And finally, the medical data owner changes the access strategy and re-judges whether the medical data demander conforms to the access strategy. According to the invention, the data access control does not depend on a fixed strategy any more, and the controllability and security of the data access control are enhanced.

The invention discloses a self-adaptive equipment dormancy method based on a Wi-Fi signal state, and the method comprises the following steps: 1, based on the continuous monitoring of a physical layer index of associated equipment, sending a suggested wake-up instruction to the corresponding associated equipment when it is predicted that the signal quality is rapidly reduced but does not fall off a switching threshold; step 2, according to a received suggested wake-up instruction or a signal degradation trend detected by the corresponding associated device, specifically, switching from a deep sleep state to a standby wake-up state, shortening a sleep period and pre-loading authentication information; 3, the wireless access point dynamically adjusts the sending opportunity of the suggested wake-up instruction according to the service delay requirement of the associated equipment; 4, the associated device dynamically elects a main link and a slave link based on a multi-attribute decision algorithm, and the main link is responsible for receiving a wireless access point instruction and uniformly scheduling dormancy and awakening of the slave link; and 5, generating a prediction result of future data traffic, and controlling the on-demand wake-up time of the slave link by the main link.

The invention provides an intelligent control system and method for a massage device, and relates to the technical field of massage devices, and the system comprises an identity authentication module which is used for obtaining the identity authentication information of a target user; the intelligent sensing module is used for sensing the body posture and massage requirements of a target user in real time, including pressure distribution and muscle tension, so as to automatically adjust the massage strength, speed and position parameters of the massage device; and the personalized setting module is used for performing intelligent analysis by using a wolf pack algorithm according to user preferences and historical data, and formulating a massage scheme for a target user, including massage duration, massage intensity upper limit values and massage modes of all parts. By integrating the functions of identity authentication, intelligent induction, personalized setting, execution control, fatigue degree determination, health monitoring and the like, customized, safe and efficient massage service is provided for a user, meanwhile, the health condition is monitored in real time, the user experience is improved, and the user safety is guaranteed.

A system for micro-segmented networking is provided. A system controller is programmed to a) store a plurality of micro-segmented network accounts and a plurality of subscriber accounts, b) receive a request from a user device to activate a first micro-segmented network associated with a first subscriber account, c) authenticate the first subscriber account based on the subscriber information, d) activate the first micro-segmented network, including a plurality of device slots for a plurality of devices, e) transmit, to the user device, first device slot authentication information for a first device slot of the plurality of device slots; f) receive, from a first device connecting to the wireless network, the first device slot authentication information; g) authenticate the first device slot authentication information; and h) in response to authenticating the first device slot authentication information, connect the first device to the first micro-segmented network.

To provide an information processing method, a server device, and a program that can reduce the occurrence of costs for continuously maintaining a verifiable credential (VC) even when a VC holder is no longer under the control of a VC issuer.SOLUTION: In response to a holder's instructions, an ID wallet application (APP) obtains the holder's decentralized identifier (DID) and identity verification information, generates a key pair of a private key and public key unique to the holder, sends a DID document update request including the DID, the identity verification information, and the public key to a DID issuer server 3, and upon receiving a DID document update response in response to the DID document update request, sends a verifiable credential (VC) reissue request to a VC Issuer server 4, and upon receiving a VC reissue notification in response to the VC reissue request, obtains a reissued VC.SELECTED DRAWING: Figure 8

System and method to adjust in-vehicle content based on digital assets are described herein. Exemplary implementations include: receive authentication information for a user; determine whether the authentication information is valid; determine, responsive to determination that the authentication information is valid, a set of one or more digital assets that are associated with an address included in a digital wallet of the user based on transactions recorded on a decentralized ledger such that the user owns the set of the one or more digital assets, wherein the transactions includes the address and the set of the one or more digital assets, wherein the digital wallet includes a private key that provides the user with access to consideration sent to the address; determine a set of one or more content correlated to the set of the one or more digital assets, wherein the content is stored in electronic storage; and adjust in-vehicle content based on the one or more digital assets and the correlated set of one or more content.

The invention relates to a secure communication method, system and device between an unmanned aerial vehicle and a ground station, and a readable medium. The method comprises the following steps: a control center generates and issues public parameters for safety communication of a system; registering the ground station and the unmanned aerial vehicle; the ground station and the unmanned aerial vehicle respectively send respective real identities to the control center; receiving and storing safety parameters and challenge sets which are respectively sent to the ground station and the unmanned aerial vehicle by the control center; randomly selecting a challenge from the received challenge set, and generating a registration parameter in combination with the public parameter; the ground station and the unmanned aerial vehicle generate mutually sent authentication information by using respective registration parameters to perform mutual authentication, and a session key special for secure communication is established between the ground station and the unmanned aerial vehicle after the authentication succeeds; and after authentication and key negotiation are successfully completed, the ground station and the unmanned aerial vehicle reselect challenges from respective stored challenge sets, and update authentication parameters. According to the invention, secure communication between the unmanned aerial vehicle and the ground station is realized.

Implementations of the present specification provide a data writing, data recovery, and data reading method, and a corresponding secure disk apparatus. The data writing method includes following: User data blocks are first written into a write cache, and a plurality of user data blocks identified by LBAs are read from the write cache under a certain condition. For each user data block, an HBA is allocated to the user data block, authenticated encryption is performed on the user data block to generate an encrypted data block and authentication information, and first metadata corresponding to the user data block is generated, where the first metadata is organized in a form of a KV pair and includes the LBA, the HBA, and the authentication information. A plurality of write commands for the plurality of user data blocks are submitted to a host disk for the disk to store the encrypted data block based on the corresponding HBA. In addition, the first metadata corresponding to each user data block is further written into a first metadata table maintained by using an LSM tree. Then, a synchronization operation command is sent to the LSM tree and the host disk for the LSM tree and the host disk to complete data write persistence.

The invention discloses a testament management and extraction method based on a smart contract and a computer program product. The method is applied to a smart contract, the smart contract is configured in a block chain, and the management method comprises the steps of obtaining a key for encrypting testament authentication information and a testament ciphertext, and obtaining identity authentication information of N participants of the testament; storing the testament ciphertext to a block chain; carrying out fragmentation processing on the secret key to generate at least N secret key fragments; after the identity authentication information of the N participants passes verification, distributing at least one key fragment to each participant, so as to sign the corresponding key fragment through the participant terminal according to the exclusive private key of the participant, and generate a signature fragment; and after each participant uploads the corresponding signature fragment to the block chain, based on the number N of the participants, generating an activation condition of the key, the activation condition being used for recovering the key based on the key fragment authorized by the participant in a decryption scene to decrypt the testament ciphertext.

A communication method and apparatus are provided, to implement automatic onboarding when no network-side information is configured on a terminal device. The method includes: The terminal device obtains auxiliary authentication information that includes identification information of one or more networks; determines access information of a first network based on first temporary authentication information and identification information of the first network, where the first network is any one of the one or more networks; triggers mutual temporary authentication with the first network based on the access information of the first network; and receives configuration information of the first network from the first network when the mutual temporary authentication succeeds. The terminal device may trigger the mutual temporary authentication with the first network based on the access information of the first network.

The invention provides a resource access method and device, a zero-trust platform and a storage medium, and the method comprises the steps: receiving an internal resource access request of a zero-trust client, the access request carrying an access address of a target resource, user information of the zero-trust client, and temporary authentication information; the access address comprises a zero-trust platform domain name and a target resource identifier, the zero-trust platform domain name points to a public network address of the zero-trust platform, and the target resource identifier is used for uniquely identifying a target resource; the temporary authentication information is used for authenticating that the zero-trust client has the qualification of initiating the access request; based on the user information and the temporary authentication information, verifying the user identity and the access authority of the zero-trust client; after the verification is successful, determining a real address of the target intranet server based on a pre-configured mapping relationship between the real address of the intranet server and the internal resource identifier; and forwarding the access request to the target intranet server according to the real address of the target intranet server.

An authentication apparatus holds: a combination of a concealment template generated from a secret key and biometric information through use of biometric cryptography and encrypted identity verification information obtained by encrypting identity verification information through use of the secret key; and biometric information on a user, and is configured to: extract the secret key from the concealment template through use of the biometric information on the user; acquire the identity verification information by decrypting the encrypted identity verification information through use of the extracted secret key; and verify identity of the user based on the acquired identity verification information.

The invention discloses a method and device for safely accessing industrial control equipment to a public test platform, and the method comprises the steps: carrying out the initialization of the public test platform, including the generation of a public and private key pair, the configuration of a digital certificate, the configuration of a Bloom filter, the selection of a hash function set matched with the Bloom filter, and the construction of a controlled resource identifier set; the public test platform receives registration information of the industrial control equipment, grants a corresponding authority to the industrial control equipment according to the registration information, generates a minimum authorized resource set corresponding to the authority, writes the minimum authorized resource set into the Bloom filter, and stores identity information of the industrial control equipment; the public testing platform performs bidirectional authentication of the public testing platform and the industrial control equipment based on an authentication request initiated by the industrial control equipment, and dynamically updates authentication information held by the public testing platform and the industrial control equipment respectively; and after the bidirectional authentication is completed, the public test platform performs access admission judgment on a resource access request initiated by the industrial control equipment by using a bloom filter based on the controlled resource identifier set and corresponding authority granted to the industrial control equipment. The invention aims to solve the problems that the current industrial control equipment in a large-scale access scene is weak in authentication anti-attack capability, a secret key is easy to leak and counterfeit, physical attack protection is insufficient, communication lacks forward and backward security, and a resource authorization mechanism does not have a fine granularity and minimum authorization principle.

The invention discloses an electronic lottery system based on an electronic signature and process data storage technology, and relates to the technical field of lottery systems. Comprising a lottery buyer betting client which receives betting information (lottery types, period numbers and number selection schemes) of lottery buyers through a standard betting control, generates a betting order containing a timestamp and a dynamic information code (a two-dimensional code / bar code, and the time efficiency is 60 seconds), and synchronously collects user real-name authentication information and betting behavior data (operation time and number selection records). A thermo-sensitive paper bill is replaced by the electronic certificate, so that the problem of certificate damage caused by environmental factors is avoided; by combining the electronic signature and the block chain evidence storage technology, tampering-free evidence storage of the voucher hash value is realized, counterfeiting and tampering risks are effectively prevented, and awarding disputes are reduced.

Methods, systems, computer-readable media, and apparatuses for providing policy-based copyright enforcement of media content items streamed to client devices are described. Various aspects discussed herein relate to managing content access rights in an adaptive bitrate environment (e.g., where an asset may be encoded and delivered at multiple different bitrates). The system discussed herein permits differentiated access to the same video, or portions of the same video, where any DRM-type client may read a manifest file including content verification data, which may be video authentication information that is specific to the video. Additional aspects discussed herein provide DRM metadata specific to each frame of a multi-bitrate video to enable the client device to verify the multi-bitrate video on a frame-by-frame basis.

The invention provides a clinical test data security sharing method and device based on a block chain. The method is applied to the technical field of data processing, and comprises the following steps: extracting feature dimensions corresponding to various types of data, and calculating corresponding data sensitivity coefficients; determining a data sensitivity level of the corresponding data category; extracting corresponding associated metadata; selecting a corresponding encryption algorithm to encrypt the data, and generating corresponding encrypted data and a data abstract; uploading the associated metadata, the encrypted data and the data abstract to a block chain node, constructing a clinical test data sharing account book, and recording a timestamp and a node signature of data operation; extracting identity authentication information and historical access records of visitors, and calculating access credibility; judging whether the visitor is allowed to acquire the decryption key or not; after the visitor obtains the encrypted data, the integrity in the data transmission process is verified based on the non-tampering property of the block chain. Therefore, the security of clinical test data sharing based on the block chain is improved.

The invention relates to the technical field of electronic warrants, and particularly discloses an intelligent electronic warrant service management system based on the Internet, and the system comprises a limit regulation and control module which is used for determining and regulating and controlling the issuing limit of an electronic warrant based on the credit rating and historical transaction data analysis of a user; the warranty verification module is used for verifying the credibility of the warranty file under the issuing limit in real time according to the block chain distributed account book; the permission adjusting module is used for adjusting the security permission level of the access platform in real time according to the multi-factor dynamic authentication information of the user; and the guarantee fund adjustment module is used for predicting the future fund risk openness based on the big data analysis model and adjusting the fulfillment guarantee fund amount of the electronic warrant of the user. According to the invention, the effectiveness and safety of electronic warrant management are improved from different levels, and the digital transformation of the financial service field is promoted.

The invention discloses an equipment security authentication method, equipment and a storage medium. The method comprises the following steps: decrypting received client card punching information through a pre-stored platform private key; the decrypted clock-in information is verified, and identity authentication information is generated based on a device public key corresponding to the client when it is determined that the clock-in information is correct; issuing the identity authentication information to the client, so that the client decrypts the identity authentication information based on a pre-stored device private key and then initiates the next time of clock-in information; wherein a platform private key and a platform public key are pre-stored in the management and control platform, a project certificate corresponding to the project is generated based on a current new project, a client side is determined according to the project certificate, and identity authentication information is issued to the client side. According to the method, the technical effect of improving the anti-counterfeiting capability and cross-device compatibility in an offline environment is achieved through the two-way security authentication based on dynamic certificate management between the management and control platform and the client.

The invention discloses an electric power internet of things edge security interaction method, which comprises the following steps: by taking an initial interaction request initiated by a request security domain to a response security domain as a processing object, establishing a cross-domain interaction basic framework through a HotStuff consensus control center, fusing node historical trust data and authentication information of a trusted identity basic trust facility, and establishing a cross-domain interaction framework through the HotStuff consensus control center; constructing a multi-dimensional security protection strategy covering identity verification, authority control and data encryption; a multi-dimensional security protection strategy is used as a processing object, a cross-domain interaction process is executed based on a HotStuff consensus mechanism, and a quantitative trust evaluation result is generated through a hierarchical model of distributed trust calculation, joint trust calculation, total trust calculation, link reliability calculation and fuzzy trust calculation; and when a trust evaluation result meets a security threshold, executing an interaction operation, performing coordinate fuzzification processing on a physical position of the accessed resource to hide a real address, and after interaction is completed, generating a performance verification report through communication overhead and a false alarm rate index.

Mechanisms are provided for performing homomorphic cryptographic operations. The mechanisms receive a specification of a homomorphic encryption (HE) operation to be performed on workloads comprising one or more input ciphertexts and generate a circuit of HE computations for performing the HE operation. The circuit comprises authentication tag checking logic at one or more inputs of the circuit, and nullification logic inserted into the circuit. The nullification logic operates to nullify one or more HE encrypted ciphertexts generated by the circuit. The mechanisms process the workloads by the circuit of HE computations to generate one or more output ciphertexts that are results of the HE operation executed on the one or more input ciphertexts, which are returned to a source computing system. The nullification logic masks an input ciphertext of the one or more input ciphertexts which, based on authentication information associated with the input ciphertext, cannot be authenticated.

The invention discloses a cross-regional vehicle authentication method based on a physical unclonable function, which belongs to the field of Internet of Vehicles information security, and comprises the following steps: initializing a trusted management mechanism system; initializing a regional agent mechanism; the cross-regional vehicle CDV selects a local trusted vehicle LTV; carrying out cross-regional vehicle authentication; the agent ATA creates an interaction identity; the LTV generates a temporary key; the CDV obtains the secret key and verifies the secret key; and the LTV verifies the credibility of the CDV. According to the method, the unique identity label is generated by using the PUF, so that the authentication security is ensured, the calculation and communication overhead is reduced, the robustness and diversity of the authentication information are improved, the potential safety hazard in cross-regional authentication can be effectively reduced, and the method has a wide application prospect in the fields of intelligent transportation, automatic driving and the like.

The invention discloses a user identity authentication method and device based on a block chain, and relates to the technical field of block chains and quantum encryption, and the method comprises the steps: obtaining multi-mode identity authentication information which is collected based on a probe program and is generated when a user carries out the user identity authentication at a client; encoding the multi-modal identity authentication information based on target quantum bit superposition state information generated by the quantum key; sending a 5G message carrying the quantum coded data to a quantum inspection node of the block chain; the quantum inspection node is used for observing whether the carried quantum bit superposition state information is in a collapsed state; when the quantum code data is not in the collapsing state, the quantum code data is sent to a bank authentication node; and after the identity authentication performed by the bank authentication node is passed, sending notification information indicating that the identity authentication is passed to the client of the user. The invention is used for improving the transmission security of data related to user identity authentication, improving the accuracy of the user identity authentication process and reducing the security risk.

The invention discloses an identity verification method and device based on an iris and a block chain, and a medium, and the method comprises the steps: collecting the iris phase information of a user, and enabling the iris phase information to be collected by an iris collection device; the iris acquisition equipment integrates a quantum random light source and a dynamic and dynamic light field modulator; performing multi-layer vector space mapping on iris phase information through an asymmetric topological decomposition algorithm, generating a dynamic weight matrix in combination with a quantum random number, and generating an iris feature hash value which is valid in single authentication; dividing the iris data into N ciphertext fragments by adopting threshold lattice-based encryption, and storing the N ciphertext fragments in a plurality of physical isolation nodes of a block chain network through a distributed storage protocol; zero-knowledge proof is generated in the authentication stage, and multi-party collaborative identity authentication is completed through an on-chain consensus mechanism constrained by a verifiable delay function. The security of identity verification is improved, and the leakage of verification information of a user is avoided.

Casino monetary systems and methods of processing casino monetary transactions are configured to read or scan an ID of a customer associated with a monetary value transaction, to transmit that ID information to a remote authentication vendor for authentication, to then use that authentication information as part of a transaction approval process and to create a transaction record, such as relative to an anti-money laundering (AML) system.