263 results about "Authentication protocol" patented technology

The present invention discloses a post-quantum key negotiation system and method based on the IKE protocol, which relates to the field of network security, especially the design and implementation of key exchange and identity authentication protocols. The present invention provides security for data protection and identity authentication by combining the IKE protocol scheme with the post-quantum cryptographic algorithm; by introducing post-quantum cryptographic algorithms such as ML‑KEM, ML‑DSA and FALCON, the quantum resistance of key exchange and identity authentication is enhanced, and the flexibility and adaptability of the protocol are also improved; in addition, the dynamic algorithm selection mechanism adopted by the present invention enables users to optimize security performance according to specific needs, thereby improving the overall efficiency of the system while ensuring information security.

A system for improving employee engagement and automating the integration of business processes. The system includes: a user interaction module configured to receive multimodal inputs, including natural language text and voice requests from employees via enterprise portals, mobile applications, voice-activated devices, and collaboration platforms, and to generate real-time responses via conversational output channels; a context processor that is operationally coupled with the user interaction module, wherein the context processor stores the interaction history, employee preferences, organizational role metadata, and task results in both short-term and long-term memory and dynamically derives context for controlling responses and initiating workflows; A natural language and intent processor that is communicatively linked to the context processor. The intent engine consists of large language models trained on company-specific lexicons to perform intent detection, entity extraction, ambiguity resolution, and sentiment or urgency classification from employee queries; a workflow orchestration layer in communication with the intent engine and the context processor, wherein the workflow orchestration layer includes a rule-based and AI-powered process execution engine configured to automatically initiate, route, and complete cross-functional business tasks, including approvals, escalations, and compliance checks, with workflows defined using modular templates that include conditional logic and time-based triggers; Webhooks and authentication protocols provide secure interoperability between the workflow orchestration layer and external enterprise platforms; a feedback and learning module that is operationally coupled with the workflow orchestration layer and the natural language understanding engine, wherein the feedback and learning module is configured to analyze task completion rates, response accuracy, latency metrics, and user feedback signals, and to retrain underlying language and workflow models for adaptive improvement in real time; and an administration console with role-based access controls, compliance dashboards, audit trails and interfaces for workflow configuration, whereby the administration console enables authorized personnel to monitor system operations, adjust interaction rules and enforce data protection restrictions across departments.

The invention provides a communication authentication method and system for a train-mounted network, a storage medium and equipment, and the method only completes the key negotiation operation in the process of executing the communication authentication of the train-mounted network, enables the subsequent communication process to be executed based on a session key obtained through the negotiation of a first verification party and a second verification party, and improves the communication authentication efficiency. According to the method and the device, identity information of two communication parties is mutually verified, only a request carrying identity information of a verification party needs to be sent once in a primary communication process, only a session key generated by negotiation needs to be carried in a subsequent communication process, lightweight processing is performed on a communication authentication protocol, and the communication authentication protocol can be obtained by introducing a pairing-free password system based on an identity label. According to the method, a complex pairing process does not need to be executed, the number of calling times of Hash is reduced, the protocol calculation overhead is reduced, the communication efficiency is improved on the basis of ensuring the credible access authentication of a train-mounted network and the credible transmission of a control message, and the influence on the real-time performance of a train network monitoring management system is avoided.

Systems and methods are described for receiving a request to provide content to at least one authorized recipient; generating a customized message comprising at least one action associated with the content; causing transmission of the customized message to a mobile computing device associated with the at least one authorized recipient, requesting authorization data corresponding to the at least one authorized recipient; responsive to receiving the requested authorization data: verifying that the authorization data correlates to an identity of the at least one authorized recipient or an identity of the mobile computing device; determining a classification of the at least one authorized recipient; and generating a Rich Communication Service (RCS) message comprising the content; and scheduling, using a machine learning model and based on the determined classification, delivery of the RCS message to the mobile computing device.

Systems and methods are described for receiving a request to provide content to at least one authorized recipient; generating a customized message comprising at least one action associated with the content; causing transmission of the customized message to a mobile computing device associated with the at least one authorized recipient, requesting authorization data corresponding to the at least one authorized recipient; responsive to receiving the requested authorization data: verifying that the authorization data correlates to an identity of the at least one authorized recipient or an identity of the mobile computing device; determining a classification of the at least one authorized recipient; and generating a Rich Communication Service (RCS) message comprising the content; and scheduling, using a machine learning model and based on the determined classification, delivery of the RCS message to the mobile computing device.

The invention discloses a unified identity authentication and access control method for a power multi-service system based on a national secret algorithm. According to the invention, through systematic deployment of SM2, SM3 and SM4 cryptographic algorithms, a full-link security protection system from identity authentication to authority management is constructed. The unified identity authentication platform adopts a mode of combining a distributed micro-service architecture and a hardware encryption machine, so that the physical security of key storage and operation is guaranteed, and the stability and response speed of the system are improved through a master-slave synchronization mechanism and interface delay control. A multi-source identity information federation acquisition mechanism realizes real-time integration of static attributes and dynamic behavior data, abnormal characteristics of user operation can be accurately captured by combining a risk assessment matrix of an improved LSTM-attention mechanism, and an SM2 bidirectional dynamic authentication protocol is automatically triggered when a risk score exceeds a dynamic threshold. Closed-loop protection of collection-evaluation-authentication-auditing is formed, and security threats such as identity counterfeiting and authority crossing are effectively resisted.

A method for user authentication at a client device is described. The method includes obtaining a unique identifier of a user associated with the client device. The method further includes performing a first sequence of operations to register the unique identifier and the client device with a native computing application in accordance with a cryptographic authentication protocol. One or more operations of the first sequence may be performed using a platform-agnostic framework associated with the native computing application. The method further includes performing a second sequence of operations to authenticate the client device and the user of the client device in accordance with the cryptographic authentication protocol. One or more operations of the second sequence may be performed using the platform-agnostic framework. The method further includes accessing the native computing application via the client device based on performing the first sequence of operations and the second sequence of operations.

A system for adaptive multi-factor authentication using NFC tags in identity management networks, consisting of: an NFC-enabled authentication device configured as a passive label embedded in a smart card, a wearable device, or a physical token, the device including a secure element for storing a cryptographic key pair and a unique device identifier; a terminal device comprising an NFC reader module, a cryptographic coprocessor, a biometric capture interface, and a local control processor configured to initiate a cryptographic challenge-response authentication protocol with the NFC-enabled authentication device upon proximity detection within 10 centimeters; a backend identity management server connected to the end device via a secure communications network, the server comprising a context-aware policy engine, a machine learning-based risk assessment module, and an identity federation interface; wherein, upon receiving a response to a cryptographic challenge signed with the private key embedded in the NFC device, the end device transmits this signed response, biometric data, and context-aware metadata including a timestamp, geolocation of the end device, and device trust level to the backend identity management server; and wherein the backend identity management server evaluates a dynamically generated risk assessment based on real-time behavior analysis, authentication history, and context data and applies an adaptive authentication policy that conditionally permits access;denied or escalated to additional authentication factors.

Methods and systems for managing text messaging-based authentication in absence of a physical authentication token. In some embodiments, the system receives, from a mobile device, a first text message, in which the mobile device is operating on a mobile network and associated with a user digital identifier relating to the mobile network, and the first text message indicates a request for access in absence of the physical authentication token. The system performs an account search based on the user digital identifier. In response to locating a user account associated with the user digital identifier, the system performs an assessment based on mobile device information relating to the mobile network and associated with the user digital identifier; selects, from a plurality of candidate authentication protocols, an authentication protocol based on the assessment; and manages, based on the authentication protocol, the request for access in absence of the physical authentication token.

Embodiments include systems and techniques to perform secure transactions including processing registration information for each computing device of a plurality of computing devices having authority over a financial account. In one example, embodiments include receiving a pending transaction against the financial account from a computing device. Embodiments include executing an authentication protocol to determine the computing device is a member of the plurality of computing devices based upon the registration information, and processing data identifying another computing device within a configurable distance from the computing device. Embodiments further include the system to execute the authentication protocol to determine the other computing device is a member of the plurality of computing devices based upon the registration information and bypass a portion of a security procedure for authorizing execution of the pending transaction.

The invention relates to the field of electric vehicle charging control, and particularly provides a system, method, device and equipment for safe communication between a charging pile and a BMS and a storage medium, the system comprises a bidirectional authentication module, a communication encryption module, a verification module and an optimization module; the bidirectional authentication module is used for constructing a bidirectional authentication protocol between the charging pile and a battery management system (BMS) based on the hardware security module and authenticating the identity; the communication encryption module is used for customizing an integrated transport layer security protocol line through an open source tool and encrypting security communication data; the verification module is used for designing a three-level verification mechanism, blocking a malicious firmware injection path and verifying a secure communication process; and the optimization module is used for optimizing the key process by adopting a redundant backup scheme deployed in a containerization manner. Through the system, the effect of a safe communication process between the charging pile and the BMS can be realized.

The methods and systems disclosed herein allow for faster and more efficient authentication using a partial cookie instead of a full cookie (or other data structure). In one example, a server receives, during the first browser session at the first time, a first request for authorization from an electronic device along with authentication information. Responsive to generating a profile using the authentication information, the server transmits to the electronic device a first data source configured to grant access to the profile to the electronic device, via a first authentication protocol; and receives, at a second browser session at a second time, from the electronic device, a second request for authorization to access the profile; responsive to a determination that the electronic device includes the first data source, the server executes a secondary authentication protocol.

A method for authenticating an application program interface (API) invoker enhances secure communication between API invokers and a Common Application Program Interface Framework (CAPIF). The method involves sending authentication information from the API invoker to the CAPIF function, which authenticates the invoker's identity. The process includes obtaining enrollment information to establish a secure transport layer security (TLS) connection with the CAPIF function. Advanced authentication mechanisms leverage an authentication and key management for applications (AKMA) anchor key, enabling secure derivation and verification of application function keys (KAF). Additionally, the CAPIF function uses received authentication data to retrieve API invoker configuration information, onboard signing keys, and certificates. These elements facilitate secure API access and interaction while ensuring compliance with authentication protocols.

The invention discloses an IWSN sensor access authentication protocol method based on TCA and PUF, and provides an IWSN sensor access authentication protocol based on TCA and PUF in order to solve the problem that a sensor is prone to common network attacks and the problem that a complex authentication algorithm is not applicable due to the fact that IWSN sensor resources are limited. The access authentication server performs bidirectional user identity authentication, platform identity authentication and platform integrity verification on the sensor and the gateway to ensure that only the safe and credible sensor can access a reliable network to resist various common network attacks and collusion attacks; according to the invention, platform identity authentication and key negotiation are carried out by using the PUF based on the characteristics of uniqueness and unclonability of the PUF, and secret data is not stored in a memory for resisting physical attacks; in addition, simple encryption and signature calculation are carried out by using a simple XOR algorithm and a Hash algorithm, so that the calculation overhead is ensured to be acceptable by a resource-limited sensor.

The invention belongs to the technical field of power grid data processing, and particularly relates to a power grid data interaction and auditing method based on multi-source heterogeneous distributed data, which comprises the following steps of: identifying and accessing data sources; designing a data authentication protocol; compressing the multi-source heterogeneous distributed data; constructing a representation model of the multi-source heterogeneous distributed data; performing data processing on the data of different data sources to extract data features; on the basis of a cross validation idea of deep learning, compressed data records of different sources are compared through an algorithm, and the data consistency is verified so as to evaluate the authenticity of the data; establishing an audit log and a chain structure; deploying auditing rules and algorithms; an evaluation mechanism of audit results; according to the method, a charging facility and power grid multi-source heterogeneous data high-performance sharing interaction model is constructed, heterogeneous interfaces and protocols, multi-type data representation and compression, cross check and auditing are supported, and high-throughput and high-concurrency data interaction and cooperative execution of multiple types of nodes are achieved.

The invention relates to the technical field of near-field communication security, in particular to a hardware-level identity authentication and end-to-end encryption near-field data interaction method and system for an electric red-connected terminal, and the method comprises the steps: a first electric red-connected terminal and a second electric red-connected terminal initiate pairing based on a Bluetooth secure connection pairing protocol, and negotiate to generate a long-term key through an ECDH algorithm; performing bidirectional identity verification by adopting an application layer authentication protocol; activating AES-CCM encryption by using a session key derived from a long-term key; bluetooth signal strength and a connection state are monitored in real time, and a negotiation key is automatically paired again when abnormity occurs; generating an interaction log, digitally signing the log by using a locally stored private key, and securely storing the signed log in a local secure storage area of the terminal; the digital signature of the latest log is verified, and if interaction abnormity is found, the local security module of the terminal recovers the local data to the pre-interaction state according to the last credible log record. The problem that traditional Bluetooth communication is prone to eavesdropping and tampering can be solved.

The invention discloses a power system network cross-region authentication certificate verification method and system, and the verification method comprises the steps: effectively guaranteeing the confidentiality, integrity and non-repudiation of an authentication certificate in a transmission process through a cross-region authentication protocol based on a unified multi-domain identifier; a production control region and a management information region are respectively provided with a sub-domain key management center, a root key management center is arranged between the two regions, corresponding authentication certificates are generated according to respective security policies and requirements, and the authentication certificates are distributed to corresponding users or systems through secure channels; in the process of data exchange and information sharing, both communication parties need to adopt a continuous authentication mechanism, a communication line is protected from attacks of various protocols through a nonlinear function, and the risk of security vulnerabilities and data leakage is reduced to the minimum. According to the invention, safe and rapid verification of authentication credentials between a production control region and a management information region is realized, and the safety, reliability and real-time performance of data exchange and information sharing are ensured.

The invention discloses a data use control method and system based on a smart contract, and relates to the technical field of data use control, and the system comprises an identity authentication module, a data classification and grading module, a data sandbox module and an evidence storage traceability module. Performing identity authentication on a user request of a data user based on an authentication protocol; performing classification rating on the accessed data; the data user and the data provider negotiate a contract signing detailed rule; the data user and the data provider sign a block chain smart contract; deploying the intelligent contract to a data sandbox, performing authority evaluation and distribution on the user, and performing behavior monitoring on the user; when the data user violates the signed smart contract, terminating the data access permission of the user, and calling the data sandbox to execute operation according to the contract signing content; logs are automatically generated, data access and use circulation are traced in the whole process, and it is ensured that data can be traced, audited and managed from authorization to use. According to the invention, the security and credibility of data circulation are guaranteed in a data transmission use control mode with decentration and multi-party cooperative participation.

Systems and methods are described for receiving a request to provide content to at least one authorized recipient; generating a customized message comprising at least one action associated with the content; causing transmission of the customized message to a mobile computing device associated with the at least one authorized recipient, requesting authorization data corresponding to the at least one authorized recipient; responsive to receiving the requested authorization data: verifying that the authorization data correlates to an identity of the at least one authorized recipient or an identity of the mobile computing device; determining a classification of the at least one authorized recipient; and generating a Rich Communication Service (RCS) message comprising the content; and scheduling, using a machine learning model and based on the determined classification, delivery of the RCS message to the mobile computing device.

A method comprises a security evaluation computer receiving access data from a user device of a user during an access request. The security evaluation computer analyzes the access data using authentication rules that each specify one of a plurality of authentication protocols for authenticating the user or the user device. At least one of the authentication rules specifies a security level flag for when no authentication is to be performed. The security evaluation computer triggers a first authentication rule corresponding to a first authentication protocol of the plurality of authentication protocols and implements the first authentication protocol. The security evaluation computer sends an authorization request message to an authorization server in a manner consistent with the first authentication protocol and then receive an authorization response message. The security evaluation computer analyzes, using authorization rules, the access data and the authorization response message to determine whether to complete the access request.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The present solution is enclosed in the area of authentication protocols, in particular web-based authentication protocols for reliably determining the origin of a web content, namely a website, and thereby legitimise / certify such website and / or visible content, be it partly or in its entirety, under consent of the rightful proprietor. The present disclosure comprises a computational method for the reliable blocklisting of a domain which, upon the performance of a single action, allows to combine a reliable allowlist with an also reliable blocklist, thereby avoiding that undesired blockage of reliable domains occurs.

The invention provides a two-way channel authentication communication device based on dynamic network fingerprints, which comprises a network fingerprint generation module for generating equipment network fingerprints and platform network fingerprints; the bidirectional authentication protocol module is used for verifying the equipment network fingerprint and the platform network fingerprint; and the self-adaptive verification gateway module is used for generating and updating a dynamic port sequence based on the block chain intelligent contract, and selecting an encryption algorithm and verification strength of transmission data in real time. The invention also provides a two-way channel authentication communication method based on the dynamic network fingerprint. The method comprises the following steps: generating a device network fingerprint and a platform network fingerprint; the platform and the equipment respectively verify whether the fingerprints are matched; network environment parameters are collected in real time, a dynamic port sequence is generated and updated based on a block chain smart contract, and an encryption algorithm and verification strength of transmission data are selected according to real-time network information. According to the method, the three problems of bypass attack defense, bidirectional identity path verification and dynamic network adaptability are solved, and the security of communication authentication is improved.

The invention discloses a meal-assisting management system and a meal-assisting machine for old-age service, and relates to the technical field of dining management for old-age service, the meal-assisting management system and the meal-assisting machine for old-age service are characterized in that physiological parameters of old people are acquired in real time through a health data acquisition module, and a taboo food material list is generated according to the physiological parameters and the taboo food material list through a nutrition matching engine; the meal dispatching server generates a meal preparation instruction based on the meal preparation instruction, and personalized meal services conforming to the health conditions of the old people can be provided for the old people; a data desensitization unit of the health data acquisition module encrypts identity fields in physiological parameters, and establishes secure connection with a medical insurance database based on an SM2 national cryptographic algorithm bidirectional authentication protocol to ensure the security and privacy of data of the old; a space-time prediction unit of the meal dispatching server adopts a convolutional neural network to process historical meal records, and the meal delivery amount in different periods can be accurately predicted; and the path optimization unit calculates an optimal distribution path based on a genetic algorithm, so that the distribution efficiency is improved, and the distribution cost is reduced.

In response to an association request associated with an electronic device to a second WLAN that uses a WPA3-compatible authentication protocol, an access point may establish a connection with an electronic device using the second WLAN when a binding between a passphrase associated with the electronic device and the second WLAN exists in a computer system. Alternatively, when the binding does not exist, the access point may reject the association request. Instead, the access point may establish a second connection with the electronic device using a first WLAN that uses a WPA2-compatible authentication protocol, and may establish the binding in a computer system. Next, the access point may perform a BSS transition of the electronic device from the first WLAN to the second WLAN. Furthermore, the access point may perform authentication of the electronic device after the connection or the second connection is established.

The invention relates to the technical field of Internet of Things access, in particular to an auditable privacy protection authentication method based on Internet of Things access, which comprises the following steps: acquiring an uplink and downlink message extraction field set and verifying consistency, generating a mismatch identifier and screening a protocol candidate set if the uplink and downlink message extraction field set is not consistent, matching an optimal protocol based on the mismatch identifier and generating an instruction, and reconstructing a session collection feature construction vector to obtain a synchronization period, and predicting a trend judgment deviation adjustment period to generate a scheduling strategy. According to the invention, through uplink and downlink message structure field consistency verification and protocol matching score screening, rapid adaptation and dynamic identification of an authentication protocol are realized, a protocol vector model and similarity score are fused to improve multi-protocol authentication elasticity, and delay jitter is introduced to construct a communication dynamic vector. In combination with trend prediction and period adjustment, the key synchronization real-time adaptive ability is enhanced, key refresh is triggered when communication abnormity occurs initially, the key update sensitivity is improved, and the authentication accuracy of equipment access and the privacy protection durability are guaranteed.

The invention provides a communication method and related equipment. The method comprises the following steps: receiving a first request message, wherein the first request message is used for requesting terminal equipment to access a target network; according to the identification information of the terminal device, determining that the subscription data of the terminal device does not belong to the target network and there is no external authentication protocol between the home network of the terminal device and the target network; contextual information of the terminal equipment is determined, the contextual information comprises first indication information, and the first indication information is used for indicating that the terminal equipment accesses the target network under the condition that authentication is not carried out; and sending a first response message to the terminal device, wherein the first response message is used for indicating that the terminal device is allowed to access the target network. According to the method, the terminal equipment can be allowed to access the target network to obtain part of services provided by the target network under the condition that the subscription data of the terminal equipment does not belong to the target network and no external authentication protocol exists between the home network of the terminal equipment and the target network.

The invention relates to the technical field of mobile communication, and particularly provides a semantic communication security enhancement system based on SIM card quantum key presetting, comprising an SIM card security base module configured to generate physical unclonable function characteristics and preset quantum security keys by using SIM card hardware characteristics; the lightweight authentication protocol module is in communication connection with the SIM card security base module and is configured to realize dynamic identity authentication based on physical unclonable function characteristics and a quantum security key; the semantic security enhancement module is configured to perform privacy protection processing on the semantic communication data; the trusted execution environment optimization module is in communication connection with the SIM card safety base module and the lightweight authentication protocol module and is configured to construct a hardware-software collaborative trusted execution environment; the quantum security enhancement module is integrated on the SIM card security base module and is configured to provide quantum attack resistance and dynamic key management; according to the invention, the real-time performance and anti-quantum computing capability of key distribution are significantly improved.

A system and a method for authenticating user access to a service that is hosted on a public cloud platform are provided. The method includes: receiving an access request from a user that relates to a service that is hosted on a public cloud platform; preliminarily authenticating the access request by using a legacy authentication protocol that is not sufficiently secure for accessing the first service via the public cloud platform; generating and validating, based on a result of the preliminary authentication, a legacy protocol certification; retrieving roles that are associated with the user; obtaining, based on the user roles, a token that is usable for controlling access to the service via the public cloud platform; and augmenting the access request with the token and a signature to facilitate an authentication of the access request by the public cloud platform, while excluding the legacy protocol certification.

According to the lightweight Internet of Vehicles identity authentication protocol based on the block chain, the block chain is innovatively built on an urban bus to form a bus end block chain to better adapt to the high-speed movement characteristic of the Internet of Vehicles aiming at the problem that the communication and authentication efficiency of a traditional road side unit is low when the vehicle moves at a high speed. According to the protocol, efficient storage of identity messages, real-time revocation of illegal vehicle identities and dynamic updating of group keys are realized through elliptic curve encryption, a hash function, a regular 30-cellular automaton and a block chain technology. In the authentication process, the vehicle forms a temporary pseudonym by using a hash function and an elliptic curve password and sends an authentication message, and the urban bus reads the information through the block chain to complete authentication, so that the security and unforgeability of the pseudonym are ensured, the authentication efficiency is improved, and the calculation and communication overhead is reduced. In addition, according to the protocol, a group key generation and updating mechanism is designed based on a rule 30-cellular automaton, and the safety and flexibility of the system are further enhanced. The method can effectively solve the problems of single-point failure, data tampering risk, low communication efficiency, inconvenient group key updating and the like of a traditional centralized authentication protocol, and is suitable for a safe interaction scene between the urban bus and the common user vehicle.