111 results about "Authentication protocol" patented technology

The invention discloses a unified identity authentication and access control method for a power multi-service system based on a national secret algorithm. According to the invention, through systematic deployment of SM2, SM3 and SM4 cryptographic algorithms, a full-link security protection system from identity authentication to authority management is constructed. The unified identity authentication platform adopts a mode of combining a distributed micro-service architecture and a hardware encryption machine, so that the physical security of key storage and operation is guaranteed, and the stability and response speed of the system are improved through a master-slave synchronization mechanism and interface delay control. A multi-source identity information federation acquisition mechanism realizes real-time integration of static attributes and dynamic behavior data, abnormal characteristics of user operation can be accurately captured by combining a risk assessment matrix of an improved LSTM-attention mechanism, and an SM2 bidirectional dynamic authentication protocol is automatically triggered when a risk score exceeds a dynamic threshold. Closed-loop protection of collection-evaluation-authentication-auditing is formed, and security threats such as identity counterfeiting and authority crossing are effectively resisted.

The invention relates to the field of electric vehicle charging control, and particularly provides a system, method, device and equipment for safe communication between a charging pile and a BMS and a storage medium, the system comprises a bidirectional authentication module, a communication encryption module, a verification module and an optimization module; the bidirectional authentication module is used for constructing a bidirectional authentication protocol between the charging pile and a battery management system (BMS) based on the hardware security module and authenticating the identity; the communication encryption module is used for customizing an integrated transport layer security protocol line through an open source tool and encrypting security communication data; the verification module is used for designing a three-level verification mechanism, blocking a malicious firmware injection path and verifying a secure communication process; and the optimization module is used for optimizing the key process by adopting a redundant backup scheme deployed in a containerization manner. Through the system, the effect of a safe communication process between the charging pile and the BMS can be realized.

A method for authenticating an application program interface (API) invoker enhances secure communication between API invokers and a Common Application Program Interface Framework (CAPIF). The method involves sending authentication information from the API invoker to the CAPIF function, which authenticates the invoker's identity. The process includes obtaining enrollment information to establish a secure transport layer security (TLS) connection with the CAPIF function. Advanced authentication mechanisms leverage an authentication and key management for applications (AKMA) anchor key, enabling secure derivation and verification of application function keys (KAF). Additionally, the CAPIF function uses received authentication data to retrieve API invoker configuration information, onboard signing keys, and certificates. These elements facilitate secure API access and interaction while ensuring compliance with authentication protocols.

The invention relates to the technical field of near-field communication security, in particular to a hardware-level identity authentication and end-to-end encryption near-field data interaction method and system for an electric red-connected terminal, and the method comprises the steps: a first electric red-connected terminal and a second electric red-connected terminal initiate pairing based on a Bluetooth secure connection pairing protocol, and negotiate to generate a long-term key through an ECDH algorithm; performing bidirectional identity verification by adopting an application layer authentication protocol; activating AES-CCM encryption by using a session key derived from a long-term key; bluetooth signal strength and a connection state are monitored in real time, and a negotiation key is automatically paired again when abnormity occurs; generating an interaction log, digitally signing the log by using a locally stored private key, and securely storing the signed log in a local secure storage area of the terminal; the digital signature of the latest log is verified, and if interaction abnormity is found, the local security module of the terminal recovers the local data to the pre-interaction state according to the last credible log record. The problem that traditional Bluetooth communication is prone to eavesdropping and tampering can be solved.

The invention discloses a data use control method and system based on a smart contract, and relates to the technical field of data use control, and the system comprises an identity authentication module, a data classification and grading module, a data sandbox module and an evidence storage traceability module. Performing identity authentication on a user request of a data user based on an authentication protocol; performing classification rating on the accessed data; the data user and the data provider negotiate a contract signing detailed rule; the data user and the data provider sign a block chain smart contract; deploying the intelligent contract to a data sandbox, performing authority evaluation and distribution on the user, and performing behavior monitoring on the user; when the data user violates the signed smart contract, terminating the data access permission of the user, and calling the data sandbox to execute operation according to the contract signing content; logs are automatically generated, data access and use circulation are traced in the whole process, and it is ensured that data can be traced, audited and managed from authorization to use. According to the invention, the security and credibility of data circulation are guaranteed in a data transmission use control mode with decentration and multi-party cooperative participation.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

In response to an association request associated with an electronic device to a second WLAN that uses a WPA3-compatible authentication protocol, an access point may establish a connection with an electronic device using the second WLAN when a binding between a passphrase associated with the electronic device and the second WLAN exists in a computer system. Alternatively, when the binding does not exist, the access point may reject the association request. Instead, the access point may establish a second connection with the electronic device using a first WLAN that uses a WPA2-compatible authentication protocol, and may establish the binding in a computer system. Next, the access point may perform a BSS transition of the electronic device from the first WLAN to the second WLAN. Furthermore, the access point may perform authentication of the electronic device after the connection or the second connection is established.

The invention relates to the technical field of Internet of Things access, in particular to an auditable privacy protection authentication method based on Internet of Things access, which comprises the following steps: acquiring an uplink and downlink message extraction field set and verifying consistency, generating a mismatch identifier and screening a protocol candidate set if the uplink and downlink message extraction field set is not consistent, matching an optimal protocol based on the mismatch identifier and generating an instruction, and reconstructing a session collection feature construction vector to obtain a synchronization period, and predicting a trend judgment deviation adjustment period to generate a scheduling strategy. According to the invention, through uplink and downlink message structure field consistency verification and protocol matching score screening, rapid adaptation and dynamic identification of an authentication protocol are realized, a protocol vector model and similarity score are fused to improve multi-protocol authentication elasticity, and delay jitter is introduced to construct a communication dynamic vector. In combination with trend prediction and period adjustment, the key synchronization real-time adaptive ability is enhanced, key refresh is triggered when communication abnormity occurs initially, the key update sensitivity is improved, and the authentication accuracy of equipment access and the privacy protection durability are guaranteed.

The invention relates to the technical field of mobile communication, and particularly provides a semantic communication security enhancement system based on SIM card quantum key presetting, comprising an SIM card security base module configured to generate physical unclonable function characteristics and preset quantum security keys by using SIM card hardware characteristics; the lightweight authentication protocol module is in communication connection with the SIM card security base module and is configured to realize dynamic identity authentication based on physical unclonable function characteristics and a quantum security key; the semantic security enhancement module is configured to perform privacy protection processing on the semantic communication data; the trusted execution environment optimization module is in communication connection with the SIM card safety base module and the lightweight authentication protocol module and is configured to construct a hardware-software collaborative trusted execution environment; the quantum security enhancement module is integrated on the SIM card security base module and is configured to provide quantum attack resistance and dynamic key management; according to the invention, the real-time performance and anti-quantum computing capability of key distribution are significantly improved.

The application claims a kind of anonymous fast identity authentication method for Internet of Vehicles based on double-chain architecture and national secret algorithm, comprising: constructing double-chain system, building system operation framework, including cloud chain, dynamic chain and in-vehicle TEE trusted environment;Initialization system, initialize system parameters, including cryptography curve selection, etc.;Real-name registration, vehicle submits its real identity information to cloud chain for registration, and obtains exclusive digital certificate after success;Pseudonym generation and registration of vehicle, vehicle first generates pseudonym Token locally, then calls the certificate and Token as parameters to call the evidence chain smart contract for anonymous identity registration;Anonymous fast authentication between vehicles, based on dynamic chain between vehicles, anonymous fast authentication between vehicles is realized through pseudonym Token and DH secret key negotiation algorithm.The application is based on double-chain architecture and national secret algorithm, and the evidence chain constructs vehicle node real information network, responsible for the real information trace of malicious node;Dynamic chain provides efficient two-way authentication protocol support between vehicles.

A software-based authentication protocol enables a client to be authenticated by a server through a host. The authentication protocol involves using mutable authentication data that changes to deter counterfeiters from making clones of authentic clients. The host requests a token from the client as proof of authenticity. The client establishes a communication channel to the server using the host as a communication proxy. The client presents mutable authentication data to the server. If the server determines that the mutable authentication data is outdated, then the client is deemed a counterfeit. If the server determined that the mutable authentication data is the latest version, then the client is deemed authentic and a token is issued to the client. Depending on a set of policies, the server changes the mutable authentication data and sends the new mutable authentication data to the client but not to counterfeit clients.

In one embodiment, a method uses a web browser to receive an authentication request for an application from an authentication prompt of a client device. The method identifies an authentication protocol associated with web browser of the client device and use the authentication prompt to fetch a first challenge from an authentication service associated with the client device. The method uses the authentication prompt to communicate a subscribe to the authentication service and use a localhost to communicate to the application to provide the first challenge. In response to receiving the first challenge, the method uses one or more native Application Programming Interfaces (APIs) to determine an assertion associated with the authentication request and the authentication protocol. The method validates the assertion associated with the authentication request. In response to determining the assertion is valid, the method approves the authentication request.

A method for verifying the setting of predefined safety functions (SF1, ..., SFn) of a field device for process and automation technology, wherein the predefined safety functions (SF1, ..., SFn) relate in particular to access to at least one function of the field device by an unauthorized person, wherein the method provides the following steps: - Determining a security level required at the measuring point and / or at the field device, wherein the determined security level defines the target setting of the predefined safety functions (SF1, ..., SFn) of the field device (1), - Identifying a user by means of an authentication protocol (2), - Starting a query about the actual setting of the safety functions (SF1, ..., SFn) of the field device specified at the measuring point by the user (3), - Comparing the actual setting of the predefined safety functions (SF1, ..., SFn) of the field device with the target setting of the specified safety functions (SF1, ..., SFn) defined by the specified safety level (4),- Issuance of an electronic report to the user regarding a conformity or deviation between the actual setting and the target setting of the specified safety functions (SF1, ..., SFn) of the field device (5),- in the case of conformity between the actual setting and the target setting of the specified safety functions (SF1, ..., SFn) of the field device, the following step is provided:◯ Storage of the electronic report (6), or- in the case of deviation between the actual setting and the target setting of the specified safety functions (SF1, ..., SFn) of the field device, the following steps are provided:◯ Proposal of at least one measure to adjust the actual setting of at least one specified safety function (SF1, ..., SFn) of the field device to the target setting (7), whereby at least one measure is shown to the user,◯ Implementation of the at least one proposed measure to adapt the actual setting to the target setting of the specified safety functions (SF1, ..., SFn) of the field device by the user (8),◯ Repetition of the query about the actual setting of the specified safety functions (SF1, ..., SFn) of the field device by the user (3).

This invention provides methods, systems and devices for personal, secure authenticated provision of oral solid dosage forms, administered as a dosage regimen which may be altered over time. The methods and systems rely on providing a device for personal secure administration of oral solid dosage forms to a subject, where the device comprises a plurality of individually addressable oral dosage forms contained therein, wherein a first oral dosage form of the plurality contained therein differs from that of at least a second oral dosage form of the plurality, in terms of an active ingredient type, an active ingredient dosage, or a composition component of said solid oral dosage form, or any combination thereof and wherein the device provides for dispensing at least one individually addressable oral dosage form contained therein following a personal authentication protocol and wherein the device is subject to programming, which programming controls distribution of said oral dosage forms contained therein according to a first secure distribution program and wherein the device comprises a user interface and optionally at least one sensor and wherein subject response data, sensor collected data, or testing result data or any combination thereof is collected and incorporated in the programming; and_whereby the programming controls adjusting, altering or overwriting the first distribution program via a secure protocol to a second distribution program, as a function of the collected subject response data, sensor collected data, or testing result data or any combination thereof and completing an authentication protocol for dispensing the oral dosage form to the subject and dispensing the first oral dosage form within an oral cavity of the subject and following secure communication with an authorized provider,enabling adjustment, alteration or overwriting of the programming to activate the second oral dosage form distribution program in the device; and_dispensing the oral dosage forms of the second oral dosage form distribution program to the subject, whereby an oral dosage form regimen is adjusted, altered or overwritten in the device resulting in altering dispensing of the oral dosage form, by means of a secure authenticated protocol.

The present invention is enclosed in the area of authentication protocols, in particular web-based authentication protocols for reliably determining the origin of a web content, namely a website, and thereby legitimise / certify such website. It is an object of the present invention a method for reliable authentication of the origin of a website which includes obtaining brand digital information which is digitally associated with the website, wherein the brand digital information comprises a registered trademark and the website has a Uniform Resource Indicator (URI) which is digitally associated to the registered trademark in at least one server of a brand verification system. The solution of the present invention takes a completely different approach with regard to the above referred prior art solutions, as it focusses on a brands digital property, by attributing a self-sovereign identity with which to present itself to its customers / partners, thereby being highly simple and efficient.

The invention discloses a user right level management method and device, electronic equipment and a program product, and relates to the technical field of block chains. The method comprises the steps that after user task completion state data is obtained through a task authentication module, authentication is carried out based on a right task authentication protocol of secure multi-party calculation, and a task authentication result, an authentication signature and a user task total contribution degree are output; and the smart contract receives the task authentication result, aggregates the block chain historical task authentication result according to a preset data structure, generates an updated aggregation result and stores the updated aggregation result on the block chain, thereby providing a reliable data basis for subsequent user right level adjustment. According to the method and the device, the security of task authentication and the data credibility are effectively improved, the tampering resistance of the user right data is ensured, the user privacy is further protected, the accuracy and the adaptability of user right management are improved, and the use experience of the user is improved.

Systems and methods for authorizing operations associated with blocked media assets using two-factor authentication. In some aspects, a media guidance application (e.g., executed by a set-top box or other user equipment used to store and display media assets) prompts a user for a password (e.g., a personal information number) in order to unlock the content for viewing. In response to receiving a second request from the user to perform an operation related to the media asset (e.g., delete), the media guidance application prompts the user for an additional factor confirming his or her identity, consistent with two-factor authentication protocol. If the user's identity is authenticated as a user that has authority to perform the operation related to the media asset (e.g., delete the stored media asset), the media guidance application performs the operation related to the media asset (e.g., deletes the media asset).

The invention provides a micro-grid internal lightweight semi-quantum communication method, which comprises the following steps: establishing a shared identity authentication key through an SQKD protocol, and generating a quantum sequence; the DERs receive the quantum sequence, interact with the MGCC to verify the identity of the DERs, and dynamically update an identity authentication key at the same time; the DERs inserts a classic state and an original quantum state into the quantum sequence to verify the identity of the MGCC and confirm a final key for communication; after the identity verification of the MGCC and the DERs is passed, communication is carried out through the final key; identity verification is conducted regularly, and communication real-time safety is achieved. Through the MGCC + DERs mixed mode, while the hardware cost is reduced, quantum-level encryption transmission of micro-grid control signals is realized based on SQKD and a bidirectional identity authentication protocol, and the confidentiality and integrity of communication between the DERs and the MGCC are guaranteed.

Systems, methods, and apparatus are provided for dynamic DAG-based blockchain authentication protocols. An authentication engine may deploy two associated parent nodes in a private blockchain network. The first parent node may include first party data and the second parent node may include smart contract logic including an aggregation threshold. The authentication engine may receive transaction data for a plurality of transactions between the first party and a second party and validate the transactions against the aggregation threshold. If a transaction exceeds the aggregation threshold, the authentication engine may aggregate a threshold number of transaction nodes into an aggregated node cryptographically linked to the second parent node and generate a new transaction node including a self-executing smart contract cryptographically linked to the aggregated node. At settlement, the authentication engine may validate links between the aggregated nodes and the second parent node and retrieve associated first party data.

This invention belongs to the field of hardware security technology and discloses a two-stage reliability enhancement circuit and response generation method suitable for Response Feedback Authentication Function (APUF). It includes a delay difference detection circuit and a majority voting circuit. The delay difference detection circuit comprises two identical additional delay modules symmetrically arranged vertically and three arbitrators. The two additional delay modules are respectively connected to the upper and lower delay chains of the APUF and are composed of multiple inverters connected in series. The delay difference between the delay modules is changed by altering the number of inverters. The three arbitrators are used to generate three different responses. The majority voting circuit includes a counter, initially set to 0, which increments by 1 when the APUF response is "1". This invention filters the APUF response delay during the feedback phase, only feeding back responses with larger delay differences. Compared to a pure voting method, this reduces the number of majority votes required for reliability enhancement and improves the efficiency of the authentication protocol.

An AI-driven coating training and control system configured to manage additives and pigments across resin formulations including epoxy, polyester, urethane, UV-curable, and hybrids. The system comprises a secure additive dosing module and modular interface capable of connecting to third-party pigment mixing banks. An AI logic engine calculates ratios, generates deployment profiles, and integrates environmental and substrate data. The system further enables visual simulation of projected finishes and provides multilingual operator interfaces including speech and sign language. When a desired color cannot be formulated locally, the AI queries pigment libraries to identify alternatives, ensuring universal color matching across industries. Authentication protocols, encrypted updates, and cartridge validation prevent unauthorized use. Applications include automotive, aerospace, marine, and industrial coatings, with learning-loop optimization for improved finish consistency and security.

This disclosure describes systems, methods, and devices related to internet of things (IoT) onboarding. A device may initiate the device with an internet of things (IoT) IoT provisioning profile. The device may identify an advertisement of openroaming framework received from an IoT deployment site access network. The device may initiate association and authentication with the IoT deployment site access network using information included in the IoT provisioning profile. The device may perform extensive authentication protocol (EAP) using the IoT provisioning profile. The device may identify a network access granted message from the IoT deployment site access network.

A method of connecting and integrating services into digital ecosystems comprises registering digital objects in an ENUM registry; registering services in a service registry and defining the following for said services: addresses of servers serving a service, authentication protocols and methods applicable during service querying, data structures used in queries to a service, data structures used in responses from a service, and methods used by a service; assigning associations between registered digital objects and services; and saving said associations on DNS servers where resource records are stored. ENUM domain names for the digital objects are registered on the basis of subscriber telephone numbers in the E.164 international format, which serve as digital object identifiers, by converting said numbers into ENUM domain names, and rights and accesses to sections of the ENUM registry and to digital objects are determined. The technical result consists in making it possible for a specific user to control digital objects within an ecosystem in the from of an intelligent transport system.

More effective authentication protocols for provisioning electronic devices are provided. An approval signal responsive to a provisioning request may be transmitted in real-time, such as under four seconds in certain embodiments. An authentication score for the provisioning request may be calculated even after transmitting the approval signal. In certain embodiments, information gathered from the successful provisioning of a device can be used in the authentication scoring process. Authentication scores deemed to fall below a requisite threshold may be used to suspend the provisioned device, therefore, limit the ability for the device to utilize the account, however, without withdrawing the approval or granted digital token. Certain implementations may negate the need to transmit further approvals or confirmations following determining an authentication score met a threshold.

The invention discloses a one-time pad key management method based on a grouped confusion Merkel hash tree, and relates to the technical field of information security. According to the method, the Internet of Things equipment is divided into different equipment groups, a group administrator is introduced into each equipment group to replace a trusted center to perform key management in the group, and only the Merkel Hash tree constructed by taking the equipment one-time pad key as a leaf needs to be confused in the equipment group, so that the confusion scale and height of the Merkel Hash tree are reduced; a secure channel distribution authentication path only needs to be constructed in the device group, frequent intervention of a trusted center is avoided, and therefore the key management efficiency is improved. The method solves the problem of high efficiency in realizing conditional anonymous authentication of the Internet of Things equipment by confusing the Merkel Hash tree, is not only suitable for constructing a conditional anonymous lightweight Internet of Things authentication protocol, but also can be popularized and applied to post-quantum group signature based on the Merkel Hash tree.

A method is disclosed and includes receiving, by a server computer, a virtual access credential request for an interaction between a resource provider computer and a communication device operated by a user and associated with a mobile network operator computer system. The method also includes transmitting, by the server computer, the virtual access credential request to an authorizing entity computer, receiving, by the server computer, a virtual access credential from the authorizing entity computer, and transmitting, by the server computer, the virtual access credential to the communication device or the resource provider computer.

Provided are an identity authentication method of a target device, a network system, a device, a medium and a product, a verification terminal being able to determine a value of a target parameter in an identity authentication protocol before performing identity authentication on the target device, thereby determining the identity authentication protocol based on the value of the target parameter, and improving the user experience. Therefore, the verification end can more effectively determine the target parameter in the identity authentication protocol, the precision of identity authentication of the target equipment by the verification end based on the identity authentication protocol is improved, and the calculation amount and consumed resources when the verification end authenticates the target equipment can be reduced; especially for the application of the resource-limited target device network, the practicability of the identity authentication protocol and the related authentication method is higher.