937 results about "Authentication server" patented technology

The present disclosure relates to a blockchain-based authentication system for electric vehicles and drones, and a method for authenticating electric vehicles or drones in a smart city. The proposed blockchain-based authentication system enhances security, privacy, and scalability for electric vehicles (EVs) and drones in smart city environments. It employs a consortium blockchain managed by city authorities and stakeholders, utilizing smart contracts for identity registration, credential issuance, and access control. Device nodes store cryptographic keys securely, while an optional authentication server facilitates off-chain integration. The authentication operation of the system includes, ensuring tamper-proof identity verification through on-chain validation. Authentication attempts are immutably recorded for auditing and anomaly detection. By eliminating single points of failure and strengthening data privacy, this decentralized authentication framework offers a scalable and secure solution for integrating EVs and drones into smart city infrastructures.

The invention provides an industrial Internet of Things security authentication method and system based on zero-knowledge proof, and relates to the technical field of security authentication, and the method comprises the steps: sending the identity information of terminal equipment to an authentication server through an edge computing node, generating an equipment certificate, and building an identity management information base; and the authentication server detects a computing resource occupancy rate of the terminal equipment according to the equipment authentication key, generates a zero-knowledge proof request, performs parallel verification, updates an equipment reputation score and predicts a next authentication session state. And selecting main and standby communication channels based on the prediction state, and triggering channel switching when the health degree is lower than a threshold value. And the authentication server determines a dynamic time slice allocation strategy according to the equipment reputation score, the service priority and the prediction state, and the edge computing node adaptively adjusts the size of the time slice to complete authentication request processing. According to the method, the authentication efficiency and security are improved, the computing resource consumption is reduced, and the system robustness is enhanced.

Security registration and authentication systems and methods are disclosed herein for extending OpenID security standards for registration of OpenID client devices for passkey authentication. A client device comprises client frontend application (app). A registration and authentication server comprises a client backend app for receiving an authorization request of the client device comprising a prompt parameter, and implementing one of: (a) a secure registration algorithm if the prompt parameter defines a create value; or (b) an authentication algorithm if the prompt parameter does not define the create value. The security registration and authentication systems and methods provide an authentication token to the client device, the authentication token authenticating the client device to initiate a secure session with a secure resource on a computer network.

The invention discloses an anti-quantum security identity authentication method and system, a medium and equipment. The method comprises the following steps: S1, a client, a service server and a key distribution center perform key configuration by adopting a digital signature algorithm; s2, the client sends an authentication request to the authentication server, and receives an authentication response with a bill granted bill returned by the authentication server; s3, the client sends a bill request to the bill issuing server, and receives a bill response with the service bill returned by the bill issuing server; s4, the client generates a client key exchange public key by adopting a first key exchange algorithm and sends an access request, the service server calculates a shared key and a ciphertext after receiving the public key, generates an access response comprising the ciphertext and identity information encrypted by using the shared key, and returns the access response to the client; and S5, the client receives the access response and obtains the shared key, and performs encrypted communication with the service server by using the shared key. The method has forward safe quantum attack resistance and strong identity authentication.

The invention relates to the technical field of network security, in particular to an equipment identity verification system based on an MAC (Media Access Control) address, which comprises a hardware feature acquisition module, a binding MAC address generation module, an authentication code encryption module, an authentication server communication module, an equipment behavior monitoring module and a security response module, wherein the hardware feature acquisition module is used for generating a unique equipment hardware fingerprint; the binding MAC address generation module is used for mapping the equipment hardware fingerprint into a binding MAC address uniquely corresponding to the equipment; the authentication code encryption module is used for generating an equipment authentication code; the authentication server communication module is used for sending the equipment authentication code to an authentication server for verification; and the equipment behavior monitoring module is used for identifying potential abnormal behaviors. According to the invention, through combination of hardware feature binding of the MAC address and multi-dimensional behavior monitoring, uniqueness, security and active protection capability of equipment identity verification are realized, and the security protection level of the system is significantly improved.

The invention discloses an equipment access control method and system based on a security sandbox, which adopts an advanced virtualization technology, constructs a highly isolated operation environment, combines technologies such as deep packet inspection, system call interception and process operation logic analysis, comprehensively monitors access behaviors of processes in the sandbox to virtual equipment, and improves the access performance of the virtual equipment. And the security and credibility of the equipment are evaluated, and illegal processes are prevented from running on the access terminal, so that the security access control of the equipment is realized. The monitoring comprises data packet content, protocol filtering, threat detection, system call interception, process creation, execution and termination behavior monitoring and the like. In combination with a trust evaluation algorithm, behavior data features are collected and extracted, trust scoring is performed by applying a machine learning model, and the equipment trust level and the access strategy are dynamically adjusted according to the score. According to the invention, the access control strategy is managed in a unified manner and deployed quickly based on the security sandbox management program and the authentication server. After identity authentication of the equipment, real-time monitoring of process dynamic behaviors in the running process of the equipment is added, and the safety of the equipment in the data exchange process is further improved.

A cloud-based architecture includes a cloud-based network management system (NMS) that provides the management plane and one or more cloud-based NAC systems that provide NAC services, including end-point device authentication. The cloud-based NAC system may have multiple groups of authentication server instances. Each group may have multiple authentication server instances to allow the authentication service provided by the group to serve more client devices than a single authentication server instance alone. Different Groups can be configured differently to serve different tenant sets.

The invention provides an anonymous Internet of Things identity authentication method and device based on an anti-quantum computing password. A key generation device sends a public key to a message sending end and a message receiving end, and sends a private key to an authentication server; the authentication server generates a blind parameter based on the private key, and sends the blind parameter to the message sending end; the message sending end performs blind operation based on the blind parameter, the public key and the to-be-transmitted message to obtain a blind message, and sends the blind message to the authentication server; the authentication server performs post-quantum signature on the blind message based on the private key to obtain a to-be-solved blind signature, and sends the to-be-solved blind signature to the message sending end; the message sending end carries out blind resolution operation on the to-be-resolved blind signature to obtain a target signature; the message sending end sends the to-be-transmitted message and the target signature to a message receiving end; and the message receiving end performs post-quantum verification on the target signature based on the public key, and if verification succeeds, processing is performed based on the to-be-transmitted message. Through the scheme of the invention, the user data security can be improved.

Various aspects of the present disclosure relate to an authentication server function (AUSF) that receives an authentication request from a security anchor function (SEAF), and transmits a data request for authentication data to unified data management (UDM). The AUSF can receive the authentication data from the UDM for primary authentication, and set an expiration time for security information associated with the primary authentication being successful. The AUSF can then transmit an authentication message of authentication information that includes the security information and the expiration time to an authentication and key management for applications (AKMA) anchor function (AAnF) that registers the expiration time. The AUSF can also initiate reauthentication based at least in part on expiry of the authentication information.

A method and apparatus for authenticating a physical asset is provided. The method includes obtaining information from a tag associated with the physical asset, wherein the information includes a uniform resource locater (URL) and encrypted information, wherein the encrypted information corresponds to a cryptographic token on a distributed ledger and information about the physical asset. The method further includes transmitting a first message towards an authentication server based on the URL, wherein the first message comprises the encrypted information. The method further includes receiving a second message from the authentication server, the second message comprising an indication of authenticity of the physical asset.

A system and method provide streamlined restricted access to a secure server through a communications network. A client identifier parameter value is established and uniquely associated with a user registering with an authentication server, and is stored in at least first and second predetermined storage forms within a data storage system, the first form readable exclusively by a client device of the user and the second form readable by the authentication server. The client device then authenticates by retrieving the client identifier parameter value from the data storage system and providing it to the authentication server, which independently retrieves the client identifier parameter value from the data storage system for comparison, and initiates an interactive communication session between the client device and the secure server responsive to the comparison. Between comparisons, the client identifier parameter values are stored exclusively on the data storage system and deleted from all other devices.

Techniques leveraging hallucinations from generative AI for challenge-response in secure access are described and may be performed at least in part by a generative AI engine. An indication of a memorable event associated with a user is received. Time series sensor data associated with the user for a period of time associated with the memorable event is received from a time series database. Parameters for determining one or more plausible events that are similar to the memorable event are received by an authentication server. The parameters include a level of hallucination for generating the one or more plausible events. One or more plausible events are generated based at least in part on the memorable event, the time series sensor data, and the parameters. A challenge and response to be used as a challenge-response authentication from the user to access a network resource is generated and transmitted to the authentication server.

The invention provides an identity verification method based on identity information of Internet of Things equipment, which comprises the following steps that: a hardware terminal of the Internet of Things equipment performs hash encryption on the identity information to generate a first hash value; wherein the identity information is automatically updated every preset time or when a specific event is triggered. And the hardware terminal performs digital signature on the first hash value by using a private key of the hardware terminal. And the hardware terminal sends the identity information and the signature to the authentication server. And the authentication server performs signature verification by using the public key, and decrypts the signature to obtain a second hash value. And the authentication server performs Hash operation on the identity information to obtain a third Hash value, compares the third Hash value with the second Hash value, and performs Hash value verification. And if both the signature verification and the hash value verification are passed, determining that the identity of the hardware terminal is credible, otherwise, determining that the identity of the hardware terminal is not credible. According to the invention, an anti-counterfeiting and anti-tampering authentication framework is constructed based on identity information in combination with asymmetric encryption and Hash encryption.

A system and method for passwordless authentication for accessing a remote system is disclosed. The system includes an authentication server, a database, and a user computing device. The user computing device is configured to send a request to the authentication server. The authentication server is configured to generate, a lattice matrix, store the lattice matrix in the database, and return a lattice generator matrix (LGM) to the user computing device. The user computing device is further configured to compute a bioquantum of biometric data of a user based on the LGM using a post-quantum fuzzy commitment scheme (PQFC) and send the bioquantum to the authentication server for storage in the database.

This application provides an application login method and system, and relates to the field of communication technologies. The system includes a first electronic device and a second electronic device. A cellular communication function of the second electronic device is available. The first electronic device is configured to: display a login interface after an application to be logged in to is started, where the login interface includes a second control, the second control is used to provide a first login manner, and the first login manner is obtaining login information from an authentication server by using the cellular communication function of the second electronic device, to log in to the application based on the login information; and log in to the application in the first login manner after an operation performed by a user on the second control is detected. According to the application login system in embodiments of this application, after detecting the operation performed by the user on the second control, the first electronic device may log in to the application by using the cellular communication function of the second electronic device. This is easy for the user to operate and provides good user experience.

The invention relates to a security authentication method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: receiving a key generation request sent by target equipment; if it is determined that the key generation request is legal, generating a trust identifier and a security certificate of the target device, obtaining an identifier verification request through the trust identifier, and sending the identifier verification request to an authentication server, so that the authentication server verifies the trust identifier to obtain an access token corresponding to the target device; receiving a message returned by the authentication server, and processing an access token carried by the message to obtain a trust identifier; and writing the security certificate into the target protection area, and sending the trust identifier and the security certificate to the target equipment, so that the target equipment is registered in the authentication server. By adopting the method, the identity verification of the equipment and the control of an encryption communication mechanism are realized, and the safety protection performance in a communication system is further improved.

Apparatus and associated methods relate to an artwork authenticity owner validation system. In an illustrative example, an artwork remote identification system (ARIS) may include an artwork companion chip (ACC) and a certificate of authenticity (COA). The ACC, for example, may be physically attached to an artwork. The ACC and the COA, for example, may each include a unique identifier. For example, a centralized server may be configured to automatically authenticate an ownership of the artwork attached to the ACC by validating the ACC and the COA. For example, the user may scan the COA and then the ACC within a predetermined time limit to gain access to modify an ownership record in an artwork profile of the artwork. Various embodiments may advantageously allow a modification to the ownership information only when the centralized authentication server validates the COA and the ACC within the predetermined time period.

The present disclosure relates to a method for operating an application server in a wireless communication system, and the method may include receiving, by the application server, an application session establishment request including identification information of a first key from a terminal, wherein the terminal generates the first key and the identification information of the first key based on primary authentication with a network and an authentication server function (AUSF) generates the same first key and the identification information of the first key based on the primary authentication, determining, by the application server, a first application key based on the identification information of the first key, transmitting an application session establishment response message to the terminal based on the first application key, and receiving data from the terminal through an established application session.

A method performed by a UE. The method incudes generating a SUCI comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a SUPI is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the user equipment, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI. The method also includes transmitting the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number.

A secure user authentication system, operable over a client-server communications network to authenticate a system user. The system includes an application server which includes a site which is able to be enabled, and an authentication server, which is able to enable the application server site. The authentication server includes a core database, and receives and stores user authentication-enabling data in the core database. The system further includes a client, and a client program which is able to be actuated in the client. The client program includes the user authentication-enabling data. Upon actuation, the client program automatically directly connects to the authentication server, and sends the client authentication-enabling data to the authentication server, for secure user authentication by the authentication server.

The invention discloses an identity authentication method and system based on a block chain, and particularly relates to the technical field of identity authentication security. Comprising the steps of S01, user login request verification, S02, user identity detection enhancement verification, S03, user identity authentication abnormity control, S04, user access security assessment data acquisition, S05, user access security analysis and S06, user access security assessment. The face recognition confidence, the iris matching degree and the user face video stream are collected on the user login page, the user identity compliance is verified, the safety of identity verification is improved, the authentication accuracy is improved, the safety evaluation data of the authentication server in the block chain network are collected, the user authentication access risk evaluation coefficient is calculated, and the user authentication access risk evaluation efficiency is improved. And the server authentication access risk is monitored, so that the change of the server authentication access risk can be monitored in real time, the occurrence of security events is effectively prevented, and the user information management efficiency is improved.

Techniques for extending EAP for supporting generative AI challenge-response for secure access are described. The techniques may be performed at least in part by an authentication server. An indication of a request for a user account to access the network resource via a user device is received. A determination that the user device supports generative AI challenge-response authentication id determined. A posture of the user device is determined. Based at least in part on the device posture, parameters for generating a generative AI challenge-response are determined. The parameters include at least one of a level of hallucination for, and a type of, challenge response to generate, and are transmitted to a generative AI engine. The generative AI challenge-response is received from the generative AI engine and caused to be output by the user device.

A core network server for defining authentication credentials and authenticating a wireless communication device according to WIFI communication protocols includes a central processing unit (CPU) and a non-transitory memory comprising executable instructions that when executed by the CPU, causes the core network server to receive an encrypted authentication request from a wireless communication device; send the encrypted authentication request to an authentication server based on one or more attributes in the encrypted authentication request; receive an indicator of a specialized network slice associated with the wireless communication device based on sending the encrypted authentication request; communicate authentication messages to the wireless communication device according to one or more network functions of the specialized network slice; and authenticate the wireless communication device according to the specialized network slice responsive to communicating the authentication messages.

The invention discloses an information authentication method based on a block chain and related equipment. The method comprises the following steps: sending a login request of a target block chain resource account to a first trusted party server; receiving first challenge information sent by the first trusted party server in response to the login request; sending the first challenge information to an authentication server, so that the authentication server performs signature processing on the first challenge information by using an object private key corresponding to a target block chain resource account stored in the block chain; receiving the signed first challenge information, and sending the signed first challenge information to a first trusted party server, so that the first trusted party server verifies the signed first challenge information by using a corresponding object public key to obtain a first verification result; and receiving a first verification result sent by the first trusted party server, and when the first verification result is that verification is passed, confirming that login succeeds, and outputting an application interface of the target block chain resource account. According to the method, the login efficiency can be improved, and the privacy of the object can be effectively protected.

The invention discloses an unmanned aerial vehicle cluster authentication method based on a certificateless homomorphic network coding signature, and belongs to the field of cryptography and network security. In an unmanned aerial vehicle network system comprising a KGC, a source node, an intermediate node and an authentication server CS, the following steps are executed: the KGC generates system parameters and a master key; the source node registers to the KGC and requests part of private keys; the source node carries out vector splitting and expansion on the authentication message, randomly selects a message identifier, executes a signature algorithm to respectively calculate the signature of each vector, and sends the vectors and the signatures to the intermediate node; and the intermediate node executes a verification algorithm to judge the validity of the currently received data packet, discards the invalid data packet, calculates to obtain a signature of the combined vector, and forwards the signature to the adjacent intermediate node. When the CS obtains a sufficient number of valid data packets, the original authentication message can be recovered and an authentication success message is sent to the source node unmanned aerial vehicle. According to the invention, the transmission performance and reliability of the unmanned aerial vehicle network are improved.

Embodiments described herein provide systems and methods for secure and efficient user authentication across a variety of computing devices, such as desktops, laptops, smartphones, and tablets across operating systems such as Windows, MacOS, IOS, Android, and iPadOS. The system incorporates an authenticator application configured to communicate with internal or external user identifier scanners, such as RFID / NFC readers, fingerprint scanners, facial recognition cameras, and QR / Barcode scanners, using transport protocols like USB, BLE, or NFC. The authenticator application serves as a third-party passkey provider by interfacing with platform WebAuthn APIs, enabling WebAuthn-based authentication for native applications, browsers, and services, or alternatively as a browser extension, intercepting WebAuthn API calls directly within a browser environment. An authentication server, accessible over a network, verifies user identities by mapping unique identifiers to stored authenticators and requesting additional authentication factors as needed, such as a security PIN. Upon successful authentication, the server transmits passkeys and a session token to the authenticator application, enabling it to handle further authentication requests locally. The system supports advanced session management for shared device environments, allowing configurable passkey storage with options for one-time, time-based, or shift-based expiration, automatically clearing passkeys upon session completion. This design delivers a versatile, secure, and seamless authentication experience across diverse user environments.

The embodiment of the invention discloses an embedded subscriber identity module (eSIM) card changing method and related equipment, and the method comprises the steps that an authentication server receives a first card changing request sent by terminal equipment, and the first card changing request comprises a user account, a password, a user number and an eUICC chip identifier; verifying the user identity of the terminal equipment according to the user account and the password; and if the verification is passed, a second card changing request is sent to an operator service support system (BSS), the second card changing request comprises the user number and the eUICC chip identifier, the second card changing request is used for indicating the BSS to complete eSIM card changing, and an eSIM server is notified to generate an eSIM configuration file and associate the eSIM configuration file with the eUICC chip identifier. By adopting the embodiment of the invention, the eSIM card changing process is simplified, and the eSIM card changing efficiency is improved.

Disclosed is an electronic device that operates based on a cloud server including a biometric sensor, a database that stores identification information on at least one of the biometric sensor, a user, and the electronic device and biometric information registered by the biometric sensor, and at least one processor, wherein the processor receives an authentication request of an authentication server through the cloud server, acquires biometric information of a user through the biometric sensor in response to the authentication request being received, determines whether the acquired biometric information corresponds to biometric information stored in the database, generates a response value including information on a result of the determining, and transmits the response value and the identification information to the cloud server, and the response value is transmitted to the authentication server when the transmitted identification information matches at least one of identification information stored in the cloud server.

A node comprising, a processor executing a first operating system, a peripheral port connected to a peripheral device, a system control processor executing a second operating system, where the system control processor is configured to perform a method for metering usage of the peripheral device by the first operating system, the method that includes obtaining utilization data from a peripheral device, and sending the utilization data to a remote authentication server, where the first operating system cannot access the system control processor.

A system for digital authentication may include an authentication server. The system may be configured to receive a login request from a user device associated with a user. The login request may include a user identity data element and a login request data element. The system may be configured to retrieve, based on the login request, a supplemental data element associated with the user from a recording server and determine whether the login request data element matches the supplemental data element and in response to a determination that the login request data element matches the supplemental data element: perform an authentication on the user device; configure the user device as authenticated in response to the authentication; and in response to configure the user device as authenticated: configure a first login mode as an authenticated status; and configure a second login mode as the authenticated status.