1278 results about "Authentication information" patented technology

The embodiment of the invention relates to the technical field of data analysis, in particular to a national secret log auditing system which is characterized in that firstly, an operation behavior record sequence generated in the running process of a national secret application system is collected by the national secret log auditing system, and the sequence is composed of log entries containing identity verification information, resource access path information and state transition description information; performing context semantic association analysis on the operation behavior record sequence to obtain a semantic element extraction result and a semantic dependency relationship; then performing multi-level compliance verification based on a national secret security audit rule system, and generating a compliance judgment conclusion of a log entry level and a cross-entry-level abnormal behavior pattern recognition report; and finally, according to the judgment conclusion and the identification report, constructing a national secret log security auditing result set which comprises a risk level evaluation result, a violation evidence chain association graph and a security reinforcement strategy suggestion list, thereby effectively improving the accuracy and comprehensiveness of national secret log auditing.

The invention discloses a security verification method for security transaction, which is characterized by comprising the following steps: a client generates first authentication request data before a user requests to perform security transaction, and sends the first authentication request data to a server through an encrypted channel; and after the server receives the first authentication request data, a one-time authentication token is generated based on a preset authentication algorithm and the user identity information, and the one-time authentication token and the unique transaction context corresponding to the one-time authentication token are bound and stored in a server session cache. And the authentication information is transmitted by adopting an independent channel, so that the token is prevented from being reused after being intercepted and captured, and the transaction security is effectively guaranteed. Meanwhile, user behavior feature analysis is introduced, token generation and verification strategies are dynamically adjusted, the recognition and response ability of the system to abnormal transactions is enhanced, and therefore the accuracy of identity verification and the intelligence of risk control in the security transaction process are improved.

The invention discloses a self-adaptive equipment dormancy method based on a Wi-Fi signal state, and the method comprises the following steps: 1, based on the continuous monitoring of a physical layer index of associated equipment, sending a suggested wake-up instruction to the corresponding associated equipment when it is predicted that the signal quality is rapidly reduced but does not fall off a switching threshold; step 2, according to a received suggested wake-up instruction or a signal degradation trend detected by the corresponding associated device, specifically, switching from a deep sleep state to a standby wake-up state, shortening a sleep period and pre-loading authentication information; 3, the wireless access point dynamically adjusts the sending opportunity of the suggested wake-up instruction according to the service delay requirement of the associated equipment; 4, the associated device dynamically elects a main link and a slave link based on a multi-attribute decision algorithm, and the main link is responsible for receiving a wireless access point instruction and uniformly scheduling dormancy and awakening of the slave link; and 5, generating a prediction result of future data traffic, and controlling the on-demand wake-up time of the slave link by the main link.

A system for micro-segmented networking is provided. A system controller is programmed to a) store a plurality of micro-segmented network accounts and a plurality of subscriber accounts, b) receive a request from a user device to activate a first micro-segmented network associated with a first subscriber account, c) authenticate the first subscriber account based on the subscriber information, d) activate the first micro-segmented network, including a plurality of device slots for a plurality of devices, e) transmit, to the user device, first device slot authentication information for a first device slot of the plurality of device slots; f) receive, from a first device connecting to the wireless network, the first device slot authentication information; g) authenticate the first device slot authentication information; and h) in response to authenticating the first device slot authentication information, connect the first device to the first micro-segmented network.

The invention discloses a testament management and extraction method based on a smart contract and a computer program product. The method is applied to a smart contract, the smart contract is configured in a block chain, and the management method comprises the steps of obtaining a key for encrypting testament authentication information and a testament ciphertext, and obtaining identity authentication information of N participants of the testament; storing the testament ciphertext to a block chain; carrying out fragmentation processing on the secret key to generate at least N secret key fragments; after the identity authentication information of the N participants passes verification, distributing at least one key fragment to each participant, so as to sign the corresponding key fragment through the participant terminal according to the exclusive private key of the participant, and generate a signature fragment; and after each participant uploads the corresponding signature fragment to the block chain, based on the number N of the participants, generating an activation condition of the key, the activation condition being used for recovering the key based on the key fragment authorized by the participant in a decryption scene to decrypt the testament ciphertext.

The invention provides a resource access method and device, a zero-trust platform and a storage medium, and the method comprises the steps: receiving an internal resource access request of a zero-trust client, the access request carrying an access address of a target resource, user information of the zero-trust client, and temporary authentication information; the access address comprises a zero-trust platform domain name and a target resource identifier, the zero-trust platform domain name points to a public network address of the zero-trust platform, and the target resource identifier is used for uniquely identifying a target resource; the temporary authentication information is used for authenticating that the zero-trust client has the qualification of initiating the access request; based on the user information and the temporary authentication information, verifying the user identity and the access authority of the zero-trust client; after the verification is successful, determining a real address of the target intranet server based on a pre-configured mapping relationship between the real address of the intranet server and the internal resource identifier; and forwarding the access request to the target intranet server according to the real address of the target intranet server.

The invention discloses a method and device for safely accessing industrial control equipment to a public test platform, and the method comprises the steps: carrying out the initialization of the public test platform, including the generation of a public and private key pair, the configuration of a digital certificate, the configuration of a Bloom filter, the selection of a hash function set matched with the Bloom filter, and the construction of a controlled resource identifier set; the public test platform receives registration information of the industrial control equipment, grants a corresponding authority to the industrial control equipment according to the registration information, generates a minimum authorized resource set corresponding to the authority, writes the minimum authorized resource set into the Bloom filter, and stores identity information of the industrial control equipment; the public testing platform performs bidirectional authentication of the public testing platform and the industrial control equipment based on an authentication request initiated by the industrial control equipment, and dynamically updates authentication information held by the public testing platform and the industrial control equipment respectively; and after the bidirectional authentication is completed, the public test platform performs access admission judgment on a resource access request initiated by the industrial control equipment by using a bloom filter based on the controlled resource identifier set and corresponding authority granted to the industrial control equipment. The invention aims to solve the problems that the current industrial control equipment in a large-scale access scene is weak in authentication anti-attack capability, a secret key is easy to leak and counterfeit, physical attack protection is insufficient, communication lacks forward and backward security, and a resource authorization mechanism does not have a fine granularity and minimum authorization principle.

The invention provides a clinical test data security sharing method and device based on a block chain. The method is applied to the technical field of data processing, and comprises the following steps: extracting feature dimensions corresponding to various types of data, and calculating corresponding data sensitivity coefficients; determining a data sensitivity level of the corresponding data category; extracting corresponding associated metadata; selecting a corresponding encryption algorithm to encrypt the data, and generating corresponding encrypted data and a data abstract; uploading the associated metadata, the encrypted data and the data abstract to a block chain node, constructing a clinical test data sharing account book, and recording a timestamp and a node signature of data operation; extracting identity authentication information and historical access records of visitors, and calculating access credibility; judging whether the visitor is allowed to acquire the decryption key or not; after the visitor obtains the encrypted data, the integrity in the data transmission process is verified based on the non-tampering property of the block chain. Therefore, the security of clinical test data sharing based on the block chain is improved.

The invention discloses an equipment security authentication method, equipment and a storage medium. The method comprises the following steps: decrypting received client card punching information through a pre-stored platform private key; the decrypted clock-in information is verified, and identity authentication information is generated based on a device public key corresponding to the client when it is determined that the clock-in information is correct; issuing the identity authentication information to the client, so that the client decrypts the identity authentication information based on a pre-stored device private key and then initiates the next time of clock-in information; wherein a platform private key and a platform public key are pre-stored in the management and control platform, a project certificate corresponding to the project is generated based on a current new project, a client side is determined according to the project certificate, and identity authentication information is issued to the client side. According to the method, the technical effect of improving the anti-counterfeiting capability and cross-device compatibility in an offline environment is achieved through the two-way security authentication based on dynamic certificate management between the management and control platform and the client.

The invention discloses an electric power internet of things edge security interaction method, which comprises the following steps: by taking an initial interaction request initiated by a request security domain to a response security domain as a processing object, establishing a cross-domain interaction basic framework through a HotStuff consensus control center, fusing node historical trust data and authentication information of a trusted identity basic trust facility, and establishing a cross-domain interaction framework through the HotStuff consensus control center; constructing a multi-dimensional security protection strategy covering identity verification, authority control and data encryption; a multi-dimensional security protection strategy is used as a processing object, a cross-domain interaction process is executed based on a HotStuff consensus mechanism, and a quantitative trust evaluation result is generated through a hierarchical model of distributed trust calculation, joint trust calculation, total trust calculation, link reliability calculation and fuzzy trust calculation; and when a trust evaluation result meets a security threshold, executing an interaction operation, performing coordinate fuzzification processing on a physical position of the accessed resource to hide a real address, and after interaction is completed, generating a performance verification report through communication overhead and a false alarm rate index.

The methods and systems disclosed herein allow for faster and more efficient authentication using a partial cookie instead of a full cookie (or other data structure). In one example, a server receives, during the first browser session at the first time, a first request for authorization from an electronic device along with authentication information. Responsive to generating a profile using the authentication information, the server transmits to the electronic device a first data source configured to grant access to the profile to the electronic device, via a first authentication protocol; and receives, at a second browser session at a second time, from the electronic device, a second request for authorization to access the profile; responsive to a determination that the electronic device includes the first data source, the server executes a secondary authentication protocol.

A method for authenticating an application program interface (API) invoker enhances secure communication between API invokers and a Common Application Program Interface Framework (CAPIF). The method involves sending authentication information from the API invoker to the CAPIF function, which authenticates the invoker's identity. The process includes obtaining enrollment information to establish a secure transport layer security (TLS) connection with the CAPIF function. Advanced authentication mechanisms leverage an authentication and key management for applications (AKMA) anchor key, enabling secure derivation and verification of application function keys (KAF). Additionally, the CAPIF function uses received authentication data to retrieve API invoker configuration information, onboard signing keys, and certificates. These elements facilitate secure API access and interaction while ensuring compliance with authentication protocols.

The invention discloses a decentralized terminal user login management system in an ad hoc network environment, which is embedded in each terminal of the whole network, and each terminal comprises a user login module used for a user to input a user name and a password in the ad hoc network environment to initiate login; the local offline user management module is used for user information authentication of a user in an ad hoc network environment; and the user authentication broadcast confirmation module is used for synchronizing authentication information to other terminals after the user is successfully authenticated in the ad hoc network environment. The invention further discloses a method of the decentralized terminal user login management system in the ad hoc network environment. According to the method, the problems of single-point failure, poor dynamic topology adaptability, incapability of authenticating an offline scene, low synchronization efficiency and the like caused by centralized authentication in a traditional ad hoc network user management system are effectively solved.

Provided are communication methods and communication devices. One method comprises: on the basis of a shared key, a first device generates a first key; the first device receives a second random number of a second device; on the basis of the first key, the first device generates first authentication information of the first device; and the first device sends a first message to the second device, the first message comprising the first authentication information, and the first authentication information being generated according to one or more of the following information: device information, service-related information, an identifier of a device forwarding the first message, and a first random number and a second random number of the first device.

A data processing system and method, and a related device, relating to the technical field of artificial intelligence (AI). The data processing system comprises a general-purpose processor and an AI accelerator card. The general-purpose processor is used for sending an operation request comprising authorization authentication information and requesting to process an AI model deployed in the AI accelerator card. The AI accelerator card is constructed to be provided with a trusted execution environment (TEE), and the AI accelerator card is used for running a policy enforcement point (PEP) component deployed in the TEE, and is further used for receiving the operation request and determining whether the authorization authentication information in the operation request complies with a verification rule in the PEP component, and when the authorization authentication information complies with the verification rule, the first operation request is executed to execute a processing operation on the AI model. In this way, the PEP component is deployed in the TEE of the AI accelerator card, that is, the PEP is deployed in an execution environment closer to the AI model, so that the AI model can be effectively prevented from being illegitimately accessed by the general-purpose processor, thereby ensuring access safety of the AI model in the AI accelerator card.

The invention provides a supply chain traceability management method and system based on a large model, and the method comprises the steps: carrying out the identity registration authentication of a supply chain participant, and obtaining the identity authentication information; carrying out block chain recording on the commodity production and circulation process based on the identity authentication information to obtain traceability data; analyzing and processing the traceability data through a large model, and identifying abnormal nodes; and responding to the traceability query request according to the abnormal node identification result, and generating a tracking report and credibility evaluation. Through the deep learning ability of the large model, malicious participants in the supply chain can be accurately identified, the credibility of the traceability data is improved, and reliable product traceability service is provided for consumers and supervision departments.

The present invention relates to a cyber security method, which includes: in a first device: randomly generating an ephemeral decryption key (EDK) in response to an input of an authentication information (AI); transmitting the EDK to a third device and retrieving a token index (TI) from the third device; encrypting an ID info to generate an electronic digital signature (EDS) based on a part of the EDK to generate an authentication token (AT) accordingly; and combining the AI, the ID info, the TI and the AT to form an ephemeral string and sending the ephemeral string to a second device; and in the second device: acquiring the AI, the ID info, the TI and the AT by parsing the ephemeral string and requesting to retrieve the EDK from the third device based on the TI; and decrypting the AT and verifying the EDS based on the EDK.

A computer system, in response to detecting a request to access content corresponding to a first application: in accordance with a determination that the first application is in a locked state: requests authentication information from a user of the computer system; and in response to receiving, via the one or more input devices, the authentication information and in accordance with a determination that the received authentication information is consistent with authorized authentication information, allows access to the content corresponding to the first application without opening the first application; in accordance with a determination that the first application is in an unlocked state, allows access to the content corresponding to the first application without requesting the authentication information from the user of the computer system and without opening the first application.

The invention provides a zero-trust security authentication system and method for hospital heterogeneous equipment access, and belongs to the technical field of security authentication and virtualization. The method comprises the following steps: after the heterogeneous equipment passes identity authentication, establishing communication pre-connection, so that a hospital information system unidirectionally acquires an operating system type and application program data of the heterogeneous equipment; the method comprises the following steps: creating a virtual network partition on a data center server of a hospital information system based on an operating system type and application program data of heterogeneous equipment; after each virtual network partition is used for receiving application program data of the heterogeneous equipment, calling a security container mirror image to create a target container, wherein the security container mirror image corresponds to an operating system type of the heterogeneous equipment; sending environment authentication information to the heterogeneous device through the target container; and when the environment authentication information is passed, establishing data interaction connection between the heterogeneous equipment and the virtual network partition of the hospital information system, so that the heterogeneous equipment accesses the hospital information system through the target container.

The invention relates to the field of product authentication and traceability, and discloses a block chain-based product authentication and traceability method and system, and the method comprises the steps: obtaining the authentication information of a product, carrying out the encryption processing of data through a Hash algorithm, and uploading the processed authentication information to a block chain system; based on the product identification code, calling an intelligent contract deployed in a block chain network, and performing automatic verification on the traceability information uploaded by each participation node in the product circulation link; collecting traceability information corresponding to the product identification code, and uploading the traceability information to a block chain system in sequence; based on the tracing information, dividing information bound with the product identification code into common information and sensitive information, performing encryption processing on the sensitive information according to an authority strategy, and generating a hierarchical access data representation structure; and based on the encrypted data representation structure, generating a visual traceability path diagram of the product in combination with each time node and the product circulation path. The method has the advantage of improving the traceability of the authentication information.

The invention provides an authentication method and device, electronic equipment, a chip and a storage medium. The method comprises the following steps: respectively receiving first authentication information sent by control equipment and second authentication information sent by controlled equipment; wherein the first authentication information at least comprises first identity information of the control equipment, first quantum key identification information and a first ciphertext for encrypting the first identity information based on a quantum key; the second authentication information at least comprises second identity information of the controlled equipment, second quantum key identification information and a second ciphertext for encrypting the second identity information based on the quantum key; and performing security authentication on the control equipment according to the first authentication information, and performing security authentication on the controlled equipment according to the second authentication information.

The invention provides a terminal authentication method and device, relates to the field of cloud desktops, and can improve the security of cloud desktop resource access. According to the specific technical scheme, information of a terminal is sent to a management platform through a client program of the terminal; verifying the information of the terminal through an authentication strategy of the management platform, wherein the authentication strategy comprises at least one configuration item; when all the configuration items of the authentication strategy are verified successfully, verifying the authentication information of the terminal; and when the verification of the authentication information of the terminal is successful, establishing a communication connection between the terminal and a cloud desktop. According to the invention, the client program can flexibly control the access of the terminal to the cloud desktop resource through the authentication strategy configured by the administrator on the management platform under the condition that the user does not perceive, so that the security is improved, the privacy and personal data of the user are guaranteed, the leakage risk is reduced, and the user experience is improved.

The invention relates to the field of information security, discloses a service resource access method and device, computer equipment, a computer readable storage medium and a computer program product, and is applied to a server. The method comprises the following steps: in response to a login verification request sent by a client, obtaining a to-be-verified verification code returned by the client; under the condition that the verification code to be verified passes verification, generating a target encryption token according to token element information of the client, and storing the target encryption token to a target database; in response to a resource access request sent by a client, acquiring authentication information; decrypting the encrypted token to be verified according to the access channel information, and acquiring a stored token under the condition that a plaintext token obtained by decryption passes verification; and under the condition that the stored token is matched with the to-be-verified encryption token, sending a target service resource requested to be accessed by the resource access request to the client. By adopting the method, the technical effect of improving the flexibility of a token verification mechanism can be realized.

Systems and methods detect and prevent vishing attacks through an integrated framework combining SIP header customization, STIR / SHAKEN frameworks, AI / ML analysis, and real-time speech analysis using the Viterbi algorithm. The system begins with call initiation, embedding authentication information in the SIP header. The SIP data is transmitted and verified using STIR / SHAKEN frameworks, ensuring the authenticity of the caller's identity. Verified data is cross-referenced with third-party databases and analyzed by an AI / ML engine to detect anomalies. If potential fraud is detected, the call is blocked, and the customer is notified. Calls that pass initial checks are further analyzed using the Viterbi algorithm, which converts speech to text and identifies suspicious patterns. An anomaly pattern detector processes the converted text to detect vishing indicators, terminating the call if a match is found. This multi-layered approach ensures robust protection against vishing, enhancing the security and reliability of voice communications while safeguarding users from fraud.

The invention provides an active identification method and device based on industrial internet identification codes, and relates to the field of data processing, the method is applied to an active identification carrier, and the active identification carrier is connected with user equipment to be identified; the method comprises the following steps: in response to a received identification registration control instruction sent by user equipment, controlling an active identification carrier to actively establish connection with an industrial internet identification system according to the identification registration control instruction; based on first target data used for identification registration and provided in the identification registration control instruction, performing identification registration on an industrial internet unique identification code corresponding to the first target data in the industrial internet identification system; in response to completion of identification registration, authentication is automatically performed on an edge-side Internet of Things (IoT) platform based on the unique identification code of the industrial Internet; and establishing a connection between the active identification carrier and the IoT platform based on the authenticated information.

The invention relates to a traffic freight employment qualification certificate handling service system and method based on artificial intelligence. The method comprises the following steps: in response to a traffic freight employment qualification certificate service instruction triggered by a user, determining a certificate service type needing to be handled based on the service instruction; collecting identity verification information of the user, and performing identity verification on the user based on the identity verification information; if the identity verification is passed, generating and pushing a service information input interface to the user according to the type of the certificate service needing to be handled; acquiring user driving qualification information uploaded in the service information input interface, and performing service preprocessing on the user driving qualification information by adopting a driving qualification review model; pushing a certificate service confirmation interface to the user, so that the user confirms the to-be-examined information in the certificate service confirmation interface; and in response to a confirmation instruction of the target user for the certificate business confirmation interface, pushing the to-be-examined information in the certificate business confirmation interface to an examination end to complete a business handling process.

The invention relates to the technical field of micro-service gateways, and discloses a multi-source heterogeneous service system integration method and platform based on a micro-service gateway, and the method comprises the steps: receiving a source request message, executing protocol conversion, and generating a standardized request message and a protocol conversion record; constructing a distributed routing rule table, extracting multi-dimensional matching features, screening an optimal routing rule and a specific service instance, and generating a forwarding request message carrying authentication information; performing intelligent flow control on the message, receiving to-do items of a service system, performing cross-system aggregation, and generating a to-do processing track; constructing a cross-system service behavior graph based on a routing log, a protocol conversion record and a to-do processing track, predicting a service operation path, and executing cross-system resource intelligent prefetching and collaborative optimization; according to the invention, the bottleneck of multi-source heterogeneous system integration is effectively broken through, efficient collaboration and optimal resource configuration of the system are realized, and the integrated management requirements of enterprises are met.

A system for conserving computing and memory resources and enhancing security by performing application-level multifactor level authentication of a client requesting execution of an action by the system. A request to execute an action sent by the client and received by an action execution application of the system may include compiled client authentication information. The compiled client authentication information may comprise at least a client digital certificate and client login credentials that are unique to the action execution application. The action execution application can authenticate the client relative to the requested action by validating the received client digital certificate against a stored set of previously validated digital certificates, in addition to validating the received client login credentials against a stored set of previously validated login credentials. In response to authenticating the client, the action execution application may execute the requested action.

A video call method, an electronic device, and a storage medium are disclosed. The video call method applied to a first terminal device may include: establishing, by the first terminal device, a video call with a second terminal device; receiving face authentication request information from the second terminal device based on a preset data channel; acquiring face image information in response to the face authentication request information; performing privacy protection processing on the face image information to obtain encrypted information or authentication information; and sending the encrypted information or the authentication information to the second terminal device based on the preset data channel, such that the second terminal device determines a face authentication result of the first terminal device according to the encrypted information or the authentication information.

To allow a user to reset authentication information even in a case where the user cannot perform logging-in based on the user's authentication information and contact information registered in the user's account is unusable.SOLUTION: An authentication device is configured to: receive a request for resetting authentication information used by the authentication device when authenticating a user; determine that the reset of the authentication information is to be accepted on the basis of the facts that, after the user makes the request using a first terminal, the user has made the request using a second terminal different from the first terminal, and that past authentications of the user using each of the first terminal and the second terminal have been successful; and notify the user to accept the reset of the authentication information on the basis of the fact that the reset of the authentication information is to be accepted.SELECTED DRAWING: Figure 7