207 results about "Authentication protocol" patented technology

A system for improving employee engagement and automating the integration of business processes. The system includes: a user interaction module configured to receive multimodal inputs, including natural language text and voice requests from employees via enterprise portals, mobile applications, voice-activated devices, and collaboration platforms, and to generate real-time responses via conversational output channels; a context processor that is operationally coupled with the user interaction module, wherein the context processor stores the interaction history, employee preferences, organizational role metadata, and task results in both short-term and long-term memory and dynamically derives context for controlling responses and initiating workflows; A natural language and intent processor that is communicatively linked to the context processor. The intent engine consists of large language models trained on company-specific lexicons to perform intent detection, entity extraction, ambiguity resolution, and sentiment or urgency classification from employee queries; a workflow orchestration layer in communication with the intent engine and the context processor, wherein the workflow orchestration layer includes a rule-based and AI-powered process execution engine configured to automatically initiate, route, and complete cross-functional business tasks, including approvals, escalations, and compliance checks, with workflows defined using modular templates that include conditional logic and time-based triggers; Webhooks and authentication protocols provide secure interoperability between the workflow orchestration layer and external enterprise platforms; a feedback and learning module that is operationally coupled with the workflow orchestration layer and the natural language understanding engine, wherein the feedback and learning module is configured to analyze task completion rates, response accuracy, latency metrics, and user feedback signals, and to retrain underlying language and workflow models for adaptive improvement in real time; and an administration console with role-based access controls, compliance dashboards, audit trails and interfaces for workflow configuration, whereby the administration console enables authorized personnel to monitor system operations, adjust interaction rules and enforce data protection restrictions across departments.

The invention provides a communication authentication method and system for a train-mounted network, a storage medium and equipment, and the method only completes the key negotiation operation in the process of executing the communication authentication of the train-mounted network, enables the subsequent communication process to be executed based on a session key obtained through the negotiation of a first verification party and a second verification party, and improves the communication authentication efficiency. According to the method and the device, identity information of two communication parties is mutually verified, only a request carrying identity information of a verification party needs to be sent once in a primary communication process, only a session key generated by negotiation needs to be carried in a subsequent communication process, lightweight processing is performed on a communication authentication protocol, and the communication authentication protocol can be obtained by introducing a pairing-free password system based on an identity label. According to the method, a complex pairing process does not need to be executed, the number of calling times of Hash is reduced, the protocol calculation overhead is reduced, the communication efficiency is improved on the basis of ensuring the credible access authentication of a train-mounted network and the credible transmission of a control message, and the influence on the real-time performance of a train network monitoring management system is avoided.

The invention discloses a unified identity authentication and access control method for a power multi-service system based on a national secret algorithm. According to the invention, through systematic deployment of SM2, SM3 and SM4 cryptographic algorithms, a full-link security protection system from identity authentication to authority management is constructed. The unified identity authentication platform adopts a mode of combining a distributed micro-service architecture and a hardware encryption machine, so that the physical security of key storage and operation is guaranteed, and the stability and response speed of the system are improved through a master-slave synchronization mechanism and interface delay control. A multi-source identity information federation acquisition mechanism realizes real-time integration of static attributes and dynamic behavior data, abnormal characteristics of user operation can be accurately captured by combining a risk assessment matrix of an improved LSTM-attention mechanism, and an SM2 bidirectional dynamic authentication protocol is automatically triggered when a risk score exceeds a dynamic threshold. Closed-loop protection of collection-evaluation-authentication-auditing is formed, and security threats such as identity counterfeiting and authority crossing are effectively resisted.

A system for adaptive multi-factor authentication using NFC tags in identity management networks, consisting of: an NFC-enabled authentication device configured as a passive label embedded in a smart card, a wearable device, or a physical token, the device including a secure element for storing a cryptographic key pair and a unique device identifier; a terminal device comprising an NFC reader module, a cryptographic coprocessor, a biometric capture interface, and a local control processor configured to initiate a cryptographic challenge-response authentication protocol with the NFC-enabled authentication device upon proximity detection within 10 centimeters; a backend identity management server connected to the end device via a secure communications network, the server comprising a context-aware policy engine, a machine learning-based risk assessment module, and an identity federation interface; wherein, upon receiving a response to a cryptographic challenge signed with the private key embedded in the NFC device, the end device transmits this signed response, biometric data, and context-aware metadata including a timestamp, geolocation of the end device, and device trust level to the backend identity management server; and wherein the backend identity management server evaluates a dynamically generated risk assessment based on real-time behavior analysis, authentication history, and context data and applies an adaptive authentication policy that conditionally permits access;denied or escalated to additional authentication factors.

Methods and systems for managing text messaging-based authentication in absence of a physical authentication token. In some embodiments, the system receives, from a mobile device, a first text message, in which the mobile device is operating on a mobile network and associated with a user digital identifier relating to the mobile network, and the first text message indicates a request for access in absence of the physical authentication token. The system performs an account search based on the user digital identifier. In response to locating a user account associated with the user digital identifier, the system performs an assessment based on mobile device information relating to the mobile network and associated with the user digital identifier; selects, from a plurality of candidate authentication protocols, an authentication protocol based on the assessment; and manages, based on the authentication protocol, the request for access in absence of the physical authentication token.

Embodiments include systems and techniques to perform secure transactions including processing registration information for each computing device of a plurality of computing devices having authority over a financial account. In one example, embodiments include receiving a pending transaction against the financial account from a computing device. Embodiments include executing an authentication protocol to determine the computing device is a member of the plurality of computing devices based upon the registration information, and processing data identifying another computing device within a configurable distance from the computing device. Embodiments further include the system to execute the authentication protocol to determine the other computing device is a member of the plurality of computing devices based upon the registration information and bypass a portion of a security procedure for authorizing execution of the pending transaction.

The invention relates to the field of electric vehicle charging control, and particularly provides a system, method, device and equipment for safe communication between a charging pile and a BMS and a storage medium, the system comprises a bidirectional authentication module, a communication encryption module, a verification module and an optimization module; the bidirectional authentication module is used for constructing a bidirectional authentication protocol between the charging pile and a battery management system (BMS) based on the hardware security module and authenticating the identity; the communication encryption module is used for customizing an integrated transport layer security protocol line through an open source tool and encrypting security communication data; the verification module is used for designing a three-level verification mechanism, blocking a malicious firmware injection path and verifying a secure communication process; and the optimization module is used for optimizing the key process by adopting a redundant backup scheme deployed in a containerization manner. Through the system, the effect of a safe communication process between the charging pile and the BMS can be realized.

The methods and systems disclosed herein allow for faster and more efficient authentication using a partial cookie instead of a full cookie (or other data structure). In one example, a server receives, during the first browser session at the first time, a first request for authorization from an electronic device along with authentication information. Responsive to generating a profile using the authentication information, the server transmits to the electronic device a first data source configured to grant access to the profile to the electronic device, via a first authentication protocol; and receives, at a second browser session at a second time, from the electronic device, a second request for authorization to access the profile; responsive to a determination that the electronic device includes the first data source, the server executes a secondary authentication protocol.

A method for authenticating an application program interface (API) invoker enhances secure communication between API invokers and a Common Application Program Interface Framework (CAPIF). The method involves sending authentication information from the API invoker to the CAPIF function, which authenticates the invoker's identity. The process includes obtaining enrollment information to establish a secure transport layer security (TLS) connection with the CAPIF function. Advanced authentication mechanisms leverage an authentication and key management for applications (AKMA) anchor key, enabling secure derivation and verification of application function keys (KAF). Additionally, the CAPIF function uses received authentication data to retrieve API invoker configuration information, onboard signing keys, and certificates. These elements facilitate secure API access and interaction while ensuring compliance with authentication protocols.

The invention belongs to the technical field of power grid data processing, and particularly relates to a power grid data interaction and auditing method based on multi-source heterogeneous distributed data, which comprises the following steps of: identifying and accessing data sources; designing a data authentication protocol; compressing the multi-source heterogeneous distributed data; constructing a representation model of the multi-source heterogeneous distributed data; performing data processing on the data of different data sources to extract data features; on the basis of a cross validation idea of deep learning, compressed data records of different sources are compared through an algorithm, and the data consistency is verified so as to evaluate the authenticity of the data; establishing an audit log and a chain structure; deploying auditing rules and algorithms; an evaluation mechanism of audit results; according to the method, a charging facility and power grid multi-source heterogeneous data high-performance sharing interaction model is constructed, heterogeneous interfaces and protocols, multi-type data representation and compression, cross check and auditing are supported, and high-throughput and high-concurrency data interaction and cooperative execution of multiple types of nodes are achieved.

The invention relates to the technical field of near-field communication security, in particular to a hardware-level identity authentication and end-to-end encryption near-field data interaction method and system for an electric red-connected terminal, and the method comprises the steps: a first electric red-connected terminal and a second electric red-connected terminal initiate pairing based on a Bluetooth secure connection pairing protocol, and negotiate to generate a long-term key through an ECDH algorithm; performing bidirectional identity verification by adopting an application layer authentication protocol; activating AES-CCM encryption by using a session key derived from a long-term key; bluetooth signal strength and a connection state are monitored in real time, and a negotiation key is automatically paired again when abnormity occurs; generating an interaction log, digitally signing the log by using a locally stored private key, and securely storing the signed log in a local secure storage area of the terminal; the digital signature of the latest log is verified, and if interaction abnormity is found, the local security module of the terminal recovers the local data to the pre-interaction state according to the last credible log record. The problem that traditional Bluetooth communication is prone to eavesdropping and tampering can be solved.

The invention discloses a data use control method and system based on a smart contract, and relates to the technical field of data use control, and the system comprises an identity authentication module, a data classification and grading module, a data sandbox module and an evidence storage traceability module. Performing identity authentication on a user request of a data user based on an authentication protocol; performing classification rating on the accessed data; the data user and the data provider negotiate a contract signing detailed rule; the data user and the data provider sign a block chain smart contract; deploying the intelligent contract to a data sandbox, performing authority evaluation and distribution on the user, and performing behavior monitoring on the user; when the data user violates the signed smart contract, terminating the data access permission of the user, and calling the data sandbox to execute operation according to the contract signing content; logs are automatically generated, data access and use circulation are traced in the whole process, and it is ensured that data can be traced, audited and managed from authorization to use. According to the invention, the security and credibility of data circulation are guaranteed in a data transmission use control mode with decentration and multi-party cooperative participation.

A method comprises a security evaluation computer receiving access data from a user device of a user during an access request. The security evaluation computer analyzes the access data using authentication rules that each specify one of a plurality of authentication protocols for authenticating the user or the user device. At least one of the authentication rules specifies a security level flag for when no authentication is to be performed. The security evaluation computer triggers a first authentication rule corresponding to a first authentication protocol of the plurality of authentication protocols and implements the first authentication protocol. The security evaluation computer sends an authorization request message to an authorization server in a manner consistent with the first authentication protocol and then receive an authorization response message. The security evaluation computer analyzes, using authorization rules, the access data and the authorization response message to determine whether to complete the access request.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention provides a two-way channel authentication communication device based on dynamic network fingerprints, which comprises a network fingerprint generation module for generating equipment network fingerprints and platform network fingerprints; the bidirectional authentication protocol module is used for verifying the equipment network fingerprint and the platform network fingerprint; and the self-adaptive verification gateway module is used for generating and updating a dynamic port sequence based on the block chain intelligent contract, and selecting an encryption algorithm and verification strength of transmission data in real time. The invention also provides a two-way channel authentication communication method based on the dynamic network fingerprint. The method comprises the following steps: generating a device network fingerprint and a platform network fingerprint; the platform and the equipment respectively verify whether the fingerprints are matched; network environment parameters are collected in real time, a dynamic port sequence is generated and updated based on a block chain smart contract, and an encryption algorithm and verification strength of transmission data are selected according to real-time network information. According to the method, the three problems of bypass attack defense, bidirectional identity path verification and dynamic network adaptability are solved, and the security of communication authentication is improved.

The invention discloses a meal-assisting management system and a meal-assisting machine for old-age service, and relates to the technical field of dining management for old-age service, the meal-assisting management system and the meal-assisting machine for old-age service are characterized in that physiological parameters of old people are acquired in real time through a health data acquisition module, and a taboo food material list is generated according to the physiological parameters and the taboo food material list through a nutrition matching engine; the meal dispatching server generates a meal preparation instruction based on the meal preparation instruction, and personalized meal services conforming to the health conditions of the old people can be provided for the old people; a data desensitization unit of the health data acquisition module encrypts identity fields in physiological parameters, and establishes secure connection with a medical insurance database based on an SM2 national cryptographic algorithm bidirectional authentication protocol to ensure the security and privacy of data of the old; a space-time prediction unit of the meal dispatching server adopts a convolutional neural network to process historical meal records, and the meal delivery amount in different periods can be accurately predicted; and the path optimization unit calculates an optimal distribution path based on a genetic algorithm, so that the distribution efficiency is improved, and the distribution cost is reduced.

In response to an association request associated with an electronic device to a second WLAN that uses a WPA3-compatible authentication protocol, an access point may establish a connection with an electronic device using the second WLAN when a binding between a passphrase associated with the electronic device and the second WLAN exists in a computer system. Alternatively, when the binding does not exist, the access point may reject the association request. Instead, the access point may establish a second connection with the electronic device using a first WLAN that uses a WPA2-compatible authentication protocol, and may establish the binding in a computer system. Next, the access point may perform a BSS transition of the electronic device from the first WLAN to the second WLAN. Furthermore, the access point may perform authentication of the electronic device after the connection or the second connection is established.

The invention relates to the technical field of Internet of Things access, in particular to an auditable privacy protection authentication method based on Internet of Things access, which comprises the following steps: acquiring an uplink and downlink message extraction field set and verifying consistency, generating a mismatch identifier and screening a protocol candidate set if the uplink and downlink message extraction field set is not consistent, matching an optimal protocol based on the mismatch identifier and generating an instruction, and reconstructing a session collection feature construction vector to obtain a synchronization period, and predicting a trend judgment deviation adjustment period to generate a scheduling strategy. According to the invention, through uplink and downlink message structure field consistency verification and protocol matching score screening, rapid adaptation and dynamic identification of an authentication protocol are realized, a protocol vector model and similarity score are fused to improve multi-protocol authentication elasticity, and delay jitter is introduced to construct a communication dynamic vector. In combination with trend prediction and period adjustment, the key synchronization real-time adaptive ability is enhanced, key refresh is triggered when communication abnormity occurs initially, the key update sensitivity is improved, and the authentication accuracy of equipment access and the privacy protection durability are guaranteed.

The invention provides a communication method and related equipment. The method comprises the following steps: receiving a first request message, wherein the first request message is used for requesting terminal equipment to access a target network; according to the identification information of the terminal device, determining that the subscription data of the terminal device does not belong to the target network and there is no external authentication protocol between the home network of the terminal device and the target network; contextual information of the terminal equipment is determined, the contextual information comprises first indication information, and the first indication information is used for indicating that the terminal equipment accesses the target network under the condition that authentication is not carried out; and sending a first response message to the terminal device, wherein the first response message is used for indicating that the terminal device is allowed to access the target network. According to the method, the terminal equipment can be allowed to access the target network to obtain part of services provided by the target network under the condition that the subscription data of the terminal equipment does not belong to the target network and no external authentication protocol exists between the home network of the terminal equipment and the target network.

The invention relates to the technical field of mobile communication, and particularly provides a semantic communication security enhancement system based on SIM card quantum key presetting, comprising an SIM card security base module configured to generate physical unclonable function characteristics and preset quantum security keys by using SIM card hardware characteristics; the lightweight authentication protocol module is in communication connection with the SIM card security base module and is configured to realize dynamic identity authentication based on physical unclonable function characteristics and a quantum security key; the semantic security enhancement module is configured to perform privacy protection processing on the semantic communication data; the trusted execution environment optimization module is in communication connection with the SIM card safety base module and the lightweight authentication protocol module and is configured to construct a hardware-software collaborative trusted execution environment; the quantum security enhancement module is integrated on the SIM card security base module and is configured to provide quantum attack resistance and dynamic key management; according to the invention, the real-time performance and anti-quantum computing capability of key distribution are significantly improved.

A system and a method for authenticating user access to a service that is hosted on a public cloud platform are provided. The method includes: receiving an access request from a user that relates to a service that is hosted on a public cloud platform; preliminarily authenticating the access request by using a legacy authentication protocol that is not sufficiently secure for accessing the first service via the public cloud platform; generating and validating, based on a result of the preliminary authentication, a legacy protocol certification; retrieving roles that are associated with the user; obtaining, based on the user roles, a token that is usable for controlling access to the service via the public cloud platform; and augmenting the access request with the token and a signature to facilitate an authentication of the access request by the public cloud platform, while excluding the legacy protocol certification.

According to the lightweight Internet of Vehicles identity authentication protocol based on the block chain, the block chain is innovatively built on an urban bus to form a bus end block chain to better adapt to the high-speed movement characteristic of the Internet of Vehicles aiming at the problem that the communication and authentication efficiency of a traditional road side unit is low when the vehicle moves at a high speed. According to the protocol, efficient storage of identity messages, real-time revocation of illegal vehicle identities and dynamic updating of group keys are realized through elliptic curve encryption, a hash function, a regular 30-cellular automaton and a block chain technology. In the authentication process, the vehicle forms a temporary pseudonym by using a hash function and an elliptic curve password and sends an authentication message, and the urban bus reads the information through the block chain to complete authentication, so that the security and unforgeability of the pseudonym are ensured, the authentication efficiency is improved, and the calculation and communication overhead is reduced. In addition, according to the protocol, a group key generation and updating mechanism is designed based on a rule 30-cellular automaton, and the safety and flexibility of the system are further enhanced. The method can effectively solve the problems of single-point failure, data tampering risk, low communication efficiency, inconvenient group key updating and the like of a traditional centralized authentication protocol, and is suitable for a safe interaction scene between the urban bus and the common user vehicle.

The invention discloses a port authentication and three-right function test method and device, equipment and a storage medium, and relates to the technical field of communication, and the method comprises the steps: generating a test message based on a preset authentication protocol and preset authentication information; sending the test message to a switch to enable the switch to complete port authentication and three-right function test; when the port state of the switch is changed, capturing an interaction message between the switch and a remote user dial-in authentication server; and obtaining a test report based on a machine learning model, the test message and the interaction message. According to the application, the closed-loop flow of authentication request sending, response capturing and result analysis is realized through division and cooperation of the double network cards, the first network card simulates the client and the second network card monitors the state of the switch and controls the monitoring server, and in the stage of result analysis, indexes such as authentication success rate, response delay and concurrent session capacity are counted through a machine learning algorithm, so that the result analysis efficiency is improved. And a multi-dimensional performance evaluation report is provided.

The invention provides an Internet of Vehicles continuous identity authentication method based on multi-modal features and dynamic optimization, and mainly solves the problem of poor authentication performance caused by the fact that authentication cost and security are not considered at the same time in the prior art. According to the scheme, the method comprises the steps that firstly, multi-modal feature data based on the voiceprint of a driver, the steering angle standard deviation of a driven vehicle and the acceleration entropy value are collected, weighted fusion is conducted on the multi-modal feature data, and a comprehensive safety score of the user vehicle at the current moment is generated; dynamically generating the security level of the current user request system according to the score, wherein different levels correspond to the upper and lower bounds of different continuous authentication interval time; and finally, on the basis of continuous authentication protocol cost, including time delay and communication load required by authentication, constructing an optimization function in combination with an authentication system security evaluation value model, and solving the optimal continuous authentication interval time. According to the method, the cost and the security requirement of continuous identity authentication can be balanced, and the optimal authentication interval time for balancing the continuous identity authentication is obtained, so that the performance of an authentication system is remarkably improved.

The invention discloses a shared secret generation method and device based on post-quantum secret key negotiation and an electronic passport password authentication method, and the method comprises the steps: enabling a passport reader to read an information code in a machine reading region as a shared password; the reader and the chip take the shared password as seed input to perform key negotiation to generate a shared secret, and the electronic passport password authentication method based on post-quantum key negotiation generates a session key and a message authentication code by using the shared secret generated by key negotiation to perform electronic passport password authentication. The anti-quantum security authentication protocol is realized by utilizing a module lattice encryption algorithm ML-KEM and combining a symmetric encryption algorithm AES and a hash authentication algorithm SHA3-512. According to the technical scheme, on the premise of keeping an original PACE protocol authentication process, the security strength and the future adaptive capacity of the system are improved, and the method is suitable for a new-generation high-security electronic passport authentication scene.

An example method includes determining, by a client computing device, that a wireless access point (WAP) supports an in-band secure access protocol to connect to a wireless network hosted by a server, where the protocol involves establishing an initial network connection to exchange subscription data. The method includes receiving, from the WAP, a temporary login credential and an authentication protocol for the server. The method includes utilizing the temporary login credential and the authentication protocol to establish the initial network connection. The method includes exchanging the subscription data with the server over the initial network connection. The method includes completing the protocol by downloading, from the WAP and over the initial network connection, a subscription file. The subscription file enables the client computing device to establish an encrypted and trusted network connection over the wireless network.

The invention provides a cross-application login, authentication and information synchronization method and system. The method comprises the following steps: synchronizing user information to a plurality of target applications at regular time by utilizing a timer; setting a unified authentication interface and sharing the authentication information of the user to provide a single sign-on function; and providing a password-free login function through an encryption algorithm based on the authentication information of the user. According to the method, multiple authentication protocols can be integrated, unified management and login functions are realized, and an information synchronization mode is provided, so that information leakage and hostile attack are avoided, and convenience and security are improved.

The present invention discloses a virtual classroom teaching implementation method, system, medium and equipment based on homology mapping three-dimensional shape estimation, and the method includes the following steps: S1, modeling and inputting: constructing a virtual classroom model and a teacher-student 3D model by combining U-V transformation and homology mapping geometric generation model, and pre-entering modeling information in a virtual classroom management workstation; S2, login: using a camera to collect and input 2D images of teachers and students; S3, identification: identifying the teacher-student 3D model based on the teacher-student 2D image based on the DensePose algorithm and the homology mapping geometric generation model; S4, authentication: establishing an authentication model based on the teacher-student 3D model, and performing authentication information interaction between the teacher-student 3D model and the modeling information in step S3 according to a preset authentication protocol, and when the authentication is successful, the virtual classroom model adds the corresponding teacher-student 3D model, indicating that the login system is successful. The present invention can realize a more flexible and vivid teaching process and provide a better offline teaching and learning experience.

Embodiments of the present invention are applicable to the field of computer technology and provide an information acquisition method, device, electronic device, and storage medium, wherein the information acquisition method includes: upon obtaining a first access request for a set path, sending an identity authentication response to the sender of the first access request, wherein the identity authentication response is in the form of: a query / response identity authentication protocol NTLM authentication invitation; obtaining an NTLM authentication request initiated by the sender based on the NTLM authentication invitation; and obtaining the sender's identity information based on the NTLM authentication request.

The application claims a kind of anonymous fast identity authentication method for Internet of Vehicles based on double-chain architecture and national secret algorithm, comprising: constructing double-chain system, building system operation framework, including cloud chain, dynamic chain and in-vehicle TEE trusted environment;Initialization system, initialize system parameters, including cryptography curve selection, etc.;Real-name registration, vehicle submits its real identity information to cloud chain for registration, and obtains exclusive digital certificate after success;Pseudonym generation and registration of vehicle, vehicle first generates pseudonym Token locally, then calls the certificate and Token as parameters to call the evidence chain smart contract for anonymous identity registration;Anonymous fast authentication between vehicles, based on dynamic chain between vehicles, anonymous fast authentication between vehicles is realized through pseudonym Token and DH secret key negotiation algorithm.The application is based on double-chain architecture and national secret algorithm, and the evidence chain constructs vehicle node real information network, responsible for the real information trace of malicious node;Dynamic chain provides efficient two-way authentication protocol support between vehicles.