127 results about "Authentication scheme" patented technology

The invention relates to the technical field of communication security, in particular to an anti-quantum identity authentication method and device.On the basis of a traditional authentication scheme, a root of trust is introduced and used for signing a public key and identity information in a storage device, signing and issuing of the storage device are completed, and the security of the storage device is improved. The identity authentication end can confirm that the public key and the identity information in the storage equipment are effective by verifying the signature of the root of trust, so that the risk of identity counterfeiting is reduced; in addition, an anti-quantum cryptographic algorithm is introduced to the root of trust and the identity authentication end, signature and verification are carried out in a mode of mixing the anti-quantum cryptographic algorithm and a national cryptographic algorithm, and higher-level security is provided.

The invention discloses a distributed access control method, system and equipment based on multi-factor authentication, and relates to the related field of data access control, and the method comprises the steps: responding to a real-time access request, determining a first access user, and judging whether the access is the first access; if not, the first decentralized identity system is connected to determine the bound multi-factor authentication mode and the lowest permission principle under the zero-trust architecture; connecting the access log database to collect a historical access record of the first access user, performing trust risk assessment, and generating a trust risk index; judging whether the trust risk index meets the trust requirement under the zero-trust architecture or not, executing screening of the lowest permission principle and the multi-factor authentication mode, and generating a target authentication scheme; and performing access authority authentication on the first access user. The technical problems that existing access control is insufficient in safety and unauthorized access is difficult to effectively prevent are solved, and the technical effects of improving the safety of access control and effectively preventing unauthorized access are achieved.

The invention relates to the technical field of identity authentication, in particular to a multi-lens iris recognition module and method, and the module comprises a lens adjustment unit, an image capture unit, an image quality evaluation unit, a color correction unit, a detail optimization unit and an identity authentication unit. According to the invention, the iris images with different depths of field are captured and the iris acquisition distance is enlarged by differentiating the aperture size and the focusing distance of the lens, so that the distance change of a user is effectively adapted, the recognition accuracy and the user experience are improved, and the high-quality iris images are screened through multi-parameter quality evaluation, so that the recognition precision is improved, and the user experience is improved. The method has the advantages that the image recognition accuracy is improved by enhancing the iris edge, the iris recognition efficiency and accuracy are optimized, the influence of environment change and individual difference on the recognition effect is reduced, and the recognition efficiency is improved. And a safer and more reliable identity verification scheme is provided for the user.

A third verification factor is introduced into the two-factor authentication process, thereby establishing a robust three-factor authentication system. Specifically, a One-Time Password (OTP) that is typically generated for authentication purposes undergoes an additional layer of security by utilizing the OTP in a data authentication scheme of a user's chip-enabled credit, debit, banking, or similar card. An enhanced OTP generator sends the OTP to the card, which encrypts either the OTP or a value derived from the OTP (e.g., such as a hash of the OTP) with a cryptographic key associated with the card to create an encrypted authentication token. The encrypted authentication token is then provided to the authenticating party. Also described is an enhanced OTP generation device in the form of a passbook.

A computer implemented method of access control for a user device having at least one component for determining behaviors of the user. The method including defining a training period during which access to the device is determined based on a credential-based authentication scheme wherein each access determination is used to generate an item of training data and training a machine learning classifier based on the training data such that the classifier is operable to classify user behavior as compliant or non-compliant. The method further including, in response to a determination that a behavior subsequent to the training period is classified as non-compliant, requesting a credential-based authentication of the user and permitting access to the device in response to the credential-based authentication, wherein permitting access to the device further includes constructively training the classifier based on the subsequent behavior as a compliant behavior.

The invention discloses a micro-fluidic DNA detection-based security key generation and authentication method, which comprises the following steps: S1, carrying out DNA detection on a biological sample through a micro-fluidic chip to obtain SNP and STR feature data; s2, performing unified coding on the SNP and STR feature data to form stable bit string representation; s3, processing the bit string representation by using a fuzzy extraction mechanism, and generating a consistent key material under the condition of permitting a detection error; s4, deriving a final symmetric key from the key material by using a key derivation function; and S5, performing security packaging, transmission and authentication on the final symmetric key by adopting a post-quantum cryptography mechanism. According to the security key generation and authentication method based on microfluidic DNA detection, a set of key generation and identity authentication scheme with instantaneity, high specificity and anti-quantum security is constructed.

The invention relates to a physical layer authentication scheme based on a sparse auto-encoder and knowledge distillation. In order to enhance the learning ability of the model, the scheme firstly proposes a generative adversarial network data enhancement model SensSpecific-GAN based on Sensitivity-Specific Loss, and the model enhances the diversity of data and the recognition ability of the model for negative samples by introducing sensitivity and specificity constraints into the generative adversarial network. Afterwards, in order to solve the problem of calculation burden caused by relatively high CSI data dimension, the invention provides a sparse auto-encoder model SABES based on a bald eagle optimization algorithm, and the feature expression ability of the model can be enhanced by automatically adjusting model hyper-parameters. Finally, the invention provides a multi-teacher knowledge distillation model AMTDF of adaptive weight, contributions of different teacher models to student models are adjusted through an adaptive weight mechanism, and the performance of the model on a target task is improved. Experimental results show that the accuracy of the authentication model provided by the scheme reaches 96.32%, and the training speed is increased by 2.46 times compared with that of a reference algorithm.

The invention provides a signature encryption method based on Beidou third-generation navigation message authentication, and belongs to the technical field of navigation signal processing. At present, a mainstream anti-spoofing attack scheme has the defect of high calculation time overhead due to the use of a traditional signature algorithm, and the anti-spoofing attack scheme only depends on signature authentication or MAC authentication, cannot cope with various spoofing attacks and has the problem of insufficient security. In the aspect of calculating time overhead by a signature algorithm, the method is based on an SM2 algorithm, a w-NAF scalar multiplication algorithm and a prime number table are adopted to optimize scalar multiplication operation, and a faster modular reduction and inverse element calculation method is obtained by using a Fermat's minimum theorem and SM2 prime number domain characteristics. In order to improve the safety, a signature, TESLA secret key and MAC triple authentication scheme is adopted, replay and generative spoofing attacks can be dealt with, a public key is updated by using a navigation message, and the situation that the equipment cannot update the secret key by using a certificate is avoided.

An information processing apparatus includes a second reception unit capable of receiving an instruction to set second setting for executing authentication with a second server by a second authentication scheme having a security level at a second level higher than a first level, a second authentication unit configured to execute authentication with the second server by the second authentication scheme based on reception of the instruction to set the second setting, and a control unit configured to perform, based on reception of the instruction to set the second setting by the second reception unit, control to prevent reception of an instruction to set first setting for executing authentication with a first server by a first authentication scheme having a security level at a first level.

The invention discloses a pairing-free security revocable attribute-based encryption method using a white box TEE, and relates to the technical field of access control. According to the method, complex bilinear pairing calculation in a traditional identity authentication scheme is replaced by simple scalar multiplication on an elliptic curve, so that efficient attribute-based encryption is realized, and the security is ensured by depending on the calculation difficulty of a discrete logarithm problem of the elliptic curve. A hybrid encryption strategy is innovatively adopted, and a ciphertext strategy attribute-based encryption algorithm CP-ABE and a symmetric encryption algorithm AES-GCM are combined and act on an access control layer and an outsourcing data encryption layer respectively. Furthermore, a staged outsourcing decryption mechanism is designed, a private key sk of an original CP-ABE is split into three parts in a secret sharing form: a conversion key TK, a revocation key RK and a decryption key DK, and each request user RU corresponds to a group of attribute sets and the three keys, so that refined access control is realized. And the request user RU can finish final decryption only through lightweight operation. According to the method, the performance bottleneck caused by traditional pairing encryption is overcome, the problem of high-overhead user permission revocation is solved, and safe outsourcing decryption and fine-grained access control are realized.

The invention discloses a lightweight intelligent electric meter authentication method and system based on analog-to-digital grouping, and the method achieves the revocation of a single intelligent electric meter user through issuing a secret random value bound with the identity of an intelligent electric meter. The specific authentication scheme comprises six stages of system initialization, key generation, intelligent electric meter registration, intelligent electric meter authentication, power consumption data charging and intelligent electric meter revocation. According to the method, the security of the power consumption data of the intelligent electric meter is protected through encryption, and identity attacks from inside and outside opponents are resisted by using the hash function and the timestamp, so that various attacks can be resisted more effectively, and the integrity and security of data transmission are guaranteed.

The invention provides an EAP-based authentication method, communication equipment and a communication system, and belongs to the technical field of communication. According to the method, the PSK set including the multiple PSKs is pre-stored in the communication equipment, when the communication equipment needs to execute the EAP authentication process with other communication equipment, the target PSK finally used in the PSK set is determined through negotiation, selection and use of the multiple PSKs are supported, and the flexibility of an EAP authentication scheme is improved.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

The application discloses a kind of multi-dimensional multiple access and lightweight continuous authentication combined design system.The combined design system is based on non-orthogonal multiple access technology, explores multiple domains of device access, describes the access time sequence of multiple users, sub-channel and power allocation as a joint optimization problem, improves the communication performance of system while guaranteeing the continuous identity authentication of multiple devices.The system uses the unique access time sequence and channel generated by the user in advance to realize the simultaneous verification of multiple users at the base station end;While guaranteeing the continuous authentication of multiple users, the communication performance of the system is improved by optimizing their channel and power allocation.The system provides a fast network access and continuous authentication scheme for devices, which can be widely applied in wireless communication scenarios.

The invention discloses a reliable road condition message transmission method based on vehicle-mounted fog computing. The method comprises a registration stage, a mutual authentication and key negotiation stage, a road condition monitoring stage and a partial private key updating stage. According to the method, an authentication mechanism of the vehicle and the fog node for ensuring secure communication between the vehicle and the FN is provided without real-time participation of a trusted authority TA, the defects of long message transmission time and low message authentication and integrity in a traditional anonymous authentication protocol are overcome, the system efficiency is improved, and the communication overhead is reduced. A lightweight vehicle privacy security protection authentication scheme based on fog computing is provided to protect the vehicle privacy and minimize the vehicle storage burden. Under the condition that the real identity of the vehicle is not leaked, the identity information generation mode and the session key of the V2F are redesigned, the problems that identity authentication between the V2Fs is complex, the identity information storage amount is large, and communication messages are prone to attack are solved, the communication safety is improved, and the vehicle storage burden is relieved.

The invention provides an equipment authentication method and device based on a 5G-A network, equipment and a storage medium, relates to the technical field of data security, and solves the problem that an authentication scheme in the related technology is difficult to meet the dynamic security requirement of the 5G-A network. And binding is carried out according to the dynamic token and the spatial position of the access equipment to obtain corresponding space-time proof information, so that the space-time proof information obtained from the base station and the actual position of the corresponding access equipment are acquired through the server, and the space-time proof information of the access equipment is obtained based on a dynamic binding mechanism of the dynamic token and the position. According to the technical scheme, dual-source position verification is realized, the dynamic token is anchored through the block chain to verify the dynamic token, the reliability of equipment authentication is improved through dual verification, the credibility of general sensing data is ensured, and the data security in the 5G-A network is effectively improved, so that the dynamic security requirement of the 5G-A network is met.

This disclosure provides a secure JTAG authentication method, chip, and electronic device, belonging to the field of chip debugging technology. The secure JTAG authentication method includes: obtaining an image configuration file corresponding to the bootloader during the execution of a bootloader by the processor in the chip; performing security verification on the image configuration file, and sending a JTAG interface enable command to a debugging module based on the JTAG interface enable flag contained in the image configuration file after successful verification; receiving the JTAG interface enable command through the debugging module in the chip, and configuring a first interface enable register inside the debugging module according to the JTAG interface enable command to control the JTAG interface to be in a debuggable state. The secure JTAG authentication scheme provided by this disclosure combines software and hardware, balancing flexibility and security during chip testing and debugging.

The invention provides a device authentication method and an electronic device. In the method, a first electronic device receives an access request sent by a second electronic device, and sends a first authentication request message to the second electronic device. The first electronic device receives first information sent by the second electronic device, wherein the first information is related to the device type of the second electronic device. And the first electronic equipment sends a second authentication request message to the server, the second authentication request message is used for requesting to obtain an equipment credential of the second electronic equipment, and the second request message comprises the first information. And the first electronic equipment receives the equipment credential information of the second electronic equipment sent by the server. And the first electronic equipment performs equipment authentication on the second electronic equipment according to the equipment credential information of the second electronic equipment. Through the scheme, the requirements on the execution environment and the storage space of the second electronic equipment in the equipment authentication process are reduced, a more universal equipment authentication scheme is provided, and the success rate of equipment authentication is improved.

The invention belongs to the technical field of wireless communication security and signal processing, and discloses a high-reliability equipment authentication method based on antenna array error characteristics and dual-beam transmission, which comprises the following steps of: 1, constructing dual beams, and transmitting a signal received by user equipment through the dual beams; 2, actively tracking the double beams, and adjusting the directions of the double beams in real time; 3, modeling the statistical analysis model of the radiation mode; 4, defining a radiation mode characteristic extraction target, completing characteristic extraction, and calculating a gain error value, a phase error value and a position error value; and step 5, calculating signal energy, comparing the signal energy as an energy detection statistic with a preset threshold value, judging the legality of a signal source, and completing the authentication of the equipment. The authentication scheme provided by the invention can effectively cope with the influence of array errors, so that a reliable and efficient authentication solution is provided for a millimeter wave communication system, and the security of a communication link is enhanced.

The invention relates to a method to perform a mutual authentication according to a predefined authentication scheme between a User Equipment UE and a 5G communication serving ground network in a context where the UE having a Subscription Permanent Identifier (SUPI) registered at a home network is connected via a non-geostationary satellite access in store and forward operation The invention proposes to reverse the authentication flow by initiating the authentication flow on the UE side.

Techniques are disclosed relating to automating authentication decisions for a multi-factor authentication scheme based on computer learning. In disclosed embodiments, a mobile device receives a first request corresponding to a factor in a first multi-factor authentication procedure. Based on user input approving or denying the first request, the mobile device sends a response to the first request and stores values of multiple parameters associated with the first request. The mobile device receives a second request corresponding to a factor in a second multi-factor authentication procedure where the second request is for authentication for a different account than the first request. The mobile device automatically generates an approval response to the second request based on performing a computer learning process on inputs that include values of multiple parameters for the second request and the stored values of the multiple parameters associated with the first request. The approval response is automatically generated and sent without receiving user input to automate the second request.

The invention relates to a physical layer authentication scheme based on multi-scale convolution and meta learning. In order to solve the problem of data imbalance caused by difficult collection of illegal data, the scheme proposes an SMOTE oversampling algorithm based on a subcarrier weight factor to oversample minority samples, introduces weights of different subcarriers to guide the oversampling process, and ensures that newly generated minority samples are closer to actual sample distribution. In order to extract deep features of CSI data more effectively, a CNN network MDA-Net based on multi-scale convolution and an attention mechanism is designed, and a deformable convolution module is used to improve the feature extraction capability of the model. And finally, an environment difference index EDI is proposed to measure the difference between the existing environment and the basic environment, the learning rate of meta learning is adaptively adjusted based on the EDI, and the adaptive capacity of the model in a new scene and a changing scene is improved. Experiments show that the F1 score of the model in a new scene reaches 0.966, and the false positive example rate is reduced by 2.42% compared with an existing representative algorithm.

The application relates to a distributed gateway identity mutual trust method, system and related equipment. The method comprises the following steps: a first gateway node sends a registration request containing a digital certificate and an agency code to a second gateway node; the second gateway node generates and returns a registration response containing a public key certificate and a security policy template in response to the registration request; the first gateway node verifies the validity of the public key certificate and audits whether the security policy template meets a preset security policy; if the audit is passed, the first gateway node signs a mutual trust protocol and sends the signed mutual trust protocol to the second gateway node; after verifying the validity of the signature, the second gateway node establishes and stores a trust record with the first gateway node, completes the trust establishment between the gateways, solves the technical problem that the cross-domain identity authentication scheme in the prior art generally depends on a unified identity authentication center and has a single-point failure risk, and achieves the technical effect of realizing safe and reliable cross-domain identity mutual trust.

The invention relates to the field of intelligent products, discloses an NFC label anti-counterfeiting authentication method applied to an intelligent household appliance, and solves the problems that an existing NFC label anti-counterfeiting authentication scheme is tedious in implementation process and high in development difficulty. According to the method, the non-repeated KEYs are generated at the cloud in batches and written into the PC end test software, the PC end test software packs the read UID of the NFC label and the selected KEYs into common data and writes the common data into the NFC label, in a user use scene, the mobile terminal supporting the NFC function touches the NFC label to read the UID and the packed data, and the user experience is improved. The method comprises the steps of reading a UID, performing preliminary verification based on the read UID and a UID analyzed from packet data, and uploading an analyzed key KEY to a cloud for re-verification after the preliminary verification is passed, so that the key generation and write-in process is simplified without an encryption algorithm, the UID cannot be duplicated, the cloud key management is utilized, and the encryption algorithm is not needed, and the key generation and write-in process is simplified, so that the key generation and write-in process is simplified, and the key generation and write-in process is simplified. Precise identification of the copy paste and the pirate paste of the NFC label is realized, and NFC label anti-counterfeiting authentication with low development difficulty and high anti-counterfeiting reliability is achieved.

A function executing device may cause a first output unit to output first output information including location information of a server that is configured to operate according to a predetermined authentication scheme. The first output information may be acquired by a terminal device configured to operate according to the predetermined authentication scheme. The terminal device may be configured to access the server, receive first verification information, create signature information by encrypting the first verification information using a private key in a case where first authentication for a target user succeeds, and send the signature information to the server. The server may be configured to decrypt the signature information using a public key, and send an execution instruction to the function executing device in a case where the first verification information is acquired by decrypting the signature information. The function executing device may execute a specific function.

The present application relates to a kind of electronic tags with infrared remote control with conventional protection function and password protection function and its unlocking method and anti-theft system, including electronic tag body and infrared remote controller, the upper end surface of the shell in the electronic tag body is equipped with infrared remote controller interface and infrared receiving component is equipped in infrared remote controller interface, the lower end surface of the infrared remote controller is equipped with infrared remote controller connector and infrared transmitting component is equipped in infrared remote controller connector, after infrared remote controller connector is inserted into infrared remote controller interface, infrared receiving tube in infrared receiving component and infrared transmitting tube in infrared transmitting component are opposite and the light signal sent by infrared transmitting tube can be received by infrared receiving tube.Optical: one is not only the anti-theft function of the present application with traditional anti-theft tag, also has password unlocking function, prevent illegal unlocking;Two is the present application adopts one-to-one infrared code unlocking, can prevent non-target electronic tag be unlocked by mistake;Three is the present application in password protection, simultaneously, using voltage authentication scheme as the prerequisite of infrared remote control protocol reception, increase the difficulty of cracking, enhance the protection.

The application provides a data cross-domain access control method and system, relates to the industrial internet, cross-domain access control, data protection, and in particular to a data cross-domain access control method based on the industrial internet. By using machine learning technology and an access control idea based on attribute encryption, a rule mapping mechanism and a cross-domain encryption mechanism are designed, and data cross-domain access control suitable for a large-scale dynamic industrial internet environment is realized. A cross-domain registration and authentication scheme is provided for legality authentication of a cross-domain request process, a rule mapping scheme is provided for cross-domain rule mapping by using NLP technology, a security basis is provided for data cross-domain, and a cross-domain encryption scheme is provided for optimizing CP-ABE to realize multi-permission traceable cross-domain data encryption and decryption.

The invention relates to a signature authentication method for a firewall and an anti-network topology discovery system based on a firewall, which belong to the field of computer network security technology. The invention aims to solve the problems of network layer data loss and disorder and high signature authentication overhead in the existing signature authentication method for firewalls. The method of the invention explains the implementation process of the firewall signature authentication scheme based on the message hash chain from two perspectives: the basic process of signature authentication and the hash chain construction and verification scheme. In this process, the three major problems faced by the firewall will be discussed respectively: the network layer data packet loss and disorder problem, the two-way authentication problem and the firewall hash chain signature authentication information organization problem. Based on the signature authentication method of the firewall, an anti-network topology discovery system is designed, which uses a trusted detection filtering module to design three trusted detection filtering schemes based on source IP address, token and hash chain signature authentication to improve the protection capability of the firewall in the anti-network topology discovery process.

The invention discloses a power distribution network data asset access control-oriented multi-factor identity authentication method, which comprises the following steps of: firstly, initiating a login request to a server by a power distribution network user, distributing user authority by a system, collecting user keystroke characteristics, and generating a user keystroke model; and meanwhile, generating a dynamic password, synchronizing the server and the client through an identity authentication out-of-step readjustment mechanism, finally performing identity authentication on the user, updating corresponding parameters after the authentication is finished, and notifying the user of an authentication result. The system is prevented from being attacked by illegal users, and the access control security of the power distribution network is improved; the characteristics of a power distribution network server and a client are combined, a user keystroke characteristic factor and a dynamic password factor are combined, and a multi-factor identity authentication scheme is provided; and the challenge-response protocol and the MD5 algorithm are combined to verify the dynamic password of the user, so that the accuracy and safety of identifying the legal user are improved.

Various embodiments herein each include at least one of systems, methods, and software for identity verification. Some such embodiments identify a user based on analysis of their handwriting. Some such embodiments may be utilized to authenticate an individual, for emergency authentication or when other authentication solutions are not available, as one of a two or more step authentication process, authenticating checks, authenticating a signature or other handwriting on another document, and the like. One embodiment, in the form of a method, includes storing a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual. The method may then determine whether an input handwriting sample is handwriting of the individual based on the stored set of handwriting characteristics of the individual and then output a result of the determining.