6850 results about "Authorization" patented technology

Herein disclosed is receiving predetermined content, receiving a request to transform the predetermined content into a derivative work, receiving a requested theme for the derivative work, using generative artificial intelligence to create the derivative work generated as a function of the predetermined content and the requested theme, determining if the generated derivative work is approved based on a machine learning model configured to determine a content approval score as a function of content owner preferences, in response to determining the generated derivative work is approved, applying a digital watermark to the approved derivative work, configuring an authorization server to govern use of the approved derivative work based on the digital watermark and providing user access to the authorized derivative work. The requested theme may be determined using a Large Language Model (LLM) and a chatbot interview. The generative artificial intelligence may comprise a diffusion model. The content may comprise music.

The invention discloses a medical image encryption and secure storage method and system based on a block chain, and the method comprises the steps: obtaining the original data of a medical image, segmenting the original data of the medical image into a plurality of segments through a fragmentation technology, carrying out the encryption of each segment through a symmetric encryption algorithm, generating an encrypted segment set, and storing the encrypted segment set in a database; determining an integrity check value of the encrypted fragment set; according to the encrypted fragment set, adopting a distributed storage protocol to distribute each fragment to a plurality of storage nodes, recording a storage position and an integrity check value of each fragment to a block chain account book, and generating a storage index containing a storage path and check information; and establishing an access control strategy through the block chain smart contract, and if the obtained requester identity identifier and the authority level conform to the access control strategy, generating a dynamic authorization token including an access range and time limitation. According to the method, the privacy of the patient is protected, and meanwhile, the safety and availability of medical data are improved.

The invention relates to a multi-protocol transmission text data monitoring and warning method and system, and the method comprises the steps: generating a multi-source protocol transmission instance based on dynamic authorization and hardware security verification, and collecting and analyzing text data; a network connection state, a data backlog amount and sensor numerical value content parameters are monitored in real time through multiple threads, and a transmission state and content exception event queue is generated; learning a causal relationship among network congestion, equipment faults and alarm events by using a Bayesian network algorithm, calculating a root cause probability in combination with a dynamic weight distribution strategy, and generating a comprehensive alarm list of priority ranking; on the basis of user feedback data, protocol weights and alarm strategies are adaptively updated, abnormal early warning triggering, data snapshot binding and closed-loop optimization of alarm logs are achieved, and the problems that in a multi-protocol mixed transmission scene, safety adaptability is poor, the monitoring dimension is single, root cause analysis depends on static rules, and strategy updating lags are solved. And the real-time performance, the accuracy and the self-adaptability of data transmission of the industrial Internet of Things are improved.

Methods and systems for a document review process are provided. The method includes receiving an input digital model representation comprising at least one externally-accessible model endpoint for generating a digital artifact. Then, generating a document splice comprising access to multiple document subunits, with at least one document subunit written in a natural language and comprising the digital artifact; the access to each document subunit is provided through an externally-accessible document endpoint for the subunit. Then, generating a document by combining the document subunits, and generating a view associated with the document, based on an user authorization result including selective access rights to the document subunits. The view comprises access to the digital model representation, the digital artifact, each document subunit, and the document. Finally, receiving a user input and updating, via one of the externally-accessible document endpoints, the document splice based on the user input.

The invention relates to the technical field of service examination and approval, and discloses a service examination and approval processing method, device and equipment and a storage medium, and the method comprises the steps: receiving a user authorization request, verifying the user authorization request, and obtaining a sub-account certificate with a reading only permission; performing real-time data acquisition on the plurality of e-commerce platforms based on the sub-account credentials to obtain multi-dimensional user data including transaction records, operation data and evaluation information; inputting the multi-dimensional user data into a preset space-time sequence attention network and graph convolution hybrid model to carry out dynamic evaluation on a user behavior pattern to obtain risk quantitative indexes; inputting the risk quantitative indexes into a rule engine integrating an adaptive decision tree and a genetic algorithm for automatic decision making to obtain a graded approval decision; and performing multi-signature encryption on the execution instruction according to the graded approval decision to obtain a safety operation instruction and execution state information, thereby realizing full-process automation from data acquisition, risk assessment to decision execution.

The invention provides an integrated sharing method and platform for health data of old people, and relates to the technical field of data processing.The method comprises the steps that multi-source heterogeneous health data of the old people are accessed, a rule template in a historical grading preprocessing rule base is matched based on data source capacity and data features, and data cleaning and standardization are completed; further identifying a sensitive field based on a medical data standard and an industry privacy specification, generating a sensitive field vector, carrying out sensitive level scoring, and calling a data desensitization strategy library to execute desensitization operations such as de-identification and masking; an access control function is constructed based on user attributes, access context and field sensitivity levels, authorization levels are determined, differential encryption is performed, and authorization views and data tokens are generated for secure access. Through the method, the problems of heterogeneous sources, complex processing, insufficient privacy protection and lack of flexibility of a sharing mechanism of old-age health data in the prior art can be solved.

The invention discloses a dynamic authority management system and method based on multi-source salary data integration, and relates to the technical field of salary data management, and the method comprises the following steps: collecting role names, authority boundaries and operation granularity information from a plurality of business systems, and generating structured role semantic ontology entries based on a field-level semantic annotation mode; and disassembling the to-be-mapped role according to the authority dimension, calculating a semantic similarity index between the to-be-mapped role and the standard role based on the role semantic ontology library, and outputting a role consistency scoring matrix. According to the method, the authority difference is identified through the role semantic ontology and the similarity score, the minimum authorization judgment is realized in combination with the rule engine and reinforcement learning, the audit traceability and anomaly detection are guaranteed by using the block chain and the dynamic graph, and finally a strategy self-evolution closed loop is constructed. And the problems of permission mismatching and data leakage caused by role semantic inconsistency are effectively solved.

The invention discloses a zero-trust network dynamic access control method based on an AI behavior portrait, and the method comprises the following steps: 1, collecting multi-source real-time behavior data during an access request; 2, constructing an AI behavior portrait engine based on historical data, inputting the integrated multi-source behavior data, calculating a behavior deviation degree through the AI behavior portrait engine, and outputting a risk score; 3, dynamic strategy decision making, wherein a decision making engine executes hierarchical control according to the risk score; 4, continuous session monitoring and real-time adjustment are carried out; step 5, when risk upgrading is detected in the session, degrading the session authority, limiting high-risk operation, terminating the session, and retaining evidence obtaining data; step 6, audit event generation and portrait updating; and step 7, strategy optimization closed loop. According to the method, the risk score is calculated in real time based on the AI behavior portrait, transition from static authorization to dynamic permission adjustment is realized, and internal threats such as voucher stealing and the like are effectively blocked.

The invention discloses a data security dynamic evaluation system and a protection method, belongs to the technical field of information security, and is used for solving the problem of terminal equipment access control and behavior risk dynamic collaborative protection. The method comprises the following steps: generating fingerprints through terminal equipment features, verifying authorization, inputting access feature slices into a time sequence model by authorized terminal equipment, generating a trust score based on cosine similarity of a behavior sequence and a prediction sequence, and constructing a Markov model to dynamically select an authentication mode according to the trust score; calculating a risk index by combining network and geographic information, and distributing the risk index to a real or virtual environment; and the unauthorized terminal equipment distributes the virtual environment after registration. Differentiated monitoring is carried out, a time sequence library is established in the virtual environment, and doubt scores are generated through sequence matching; the state deviation of the real environment is calculated through a hidden Markov model, and the risk score is generated by fusing the multi-dimensional features. And based on the result management authority, the suspicion terminal equipment isolates and shrinks the authority, the compliance terminal equipment authenticates and migrates, and the access is regulated and controlled according to the minimum privilege principle and the time window mechanism.

The invention discloses a personal data cross-border circulation method based on a block chain. The method comprises the steps of data acquisition and local storage, third-party neutral institution witness and data fingerprint chaining, data transmission and use authorization declaration, fingerprint verification and data verification on a receiver chain, and full-link tracing and dynamic auditing. Aiming at the problems that trust guarantee of personal data cross-border circulation depends on a single technical means such as centralized institution authentication or encrypted transmission or a static legal protocol, a trust transfer chain is lengthy, and cross-national legal mutual recognition is fragile, a data fingerprint anchoring system constructed based on a block chain is designed; aiming at the problems that traditional data cross-border authorization depends on a manual signing protocol or static strategy configuration, response lag exists, rule execution deviation exists, privacy protection and compliance auditing are difficult to consider and the like, a data use rule is dynamically constrained through an intelligent contract; a user defines a data use range, timeliness and an operation white list through a declarative intelligent contract, and contract codes are automatically executed after being subjected to consensus verification of nodes on a chain.

In accordance with embodiments of the present disclosure, a method for conducting secure financial transactions uses a model-based reflex agent to ensure real-time authorization, anomaly detection, and risk assessment. The agent receives transaction-related data, maintains an internal state reflecting observed and inferred conditions, and applies condition-action rules to determine appropriate actions, such as authorizing payments, triggering multi-factor authentication, or halting transactions. The agent dynamically updates its internal state based on feedback, adapts to changes using machine learning, and ensures compliance through audit logs. This approach enhances security, minimizes fraud, and provides seamless, adaptive processing for financial transactions in dynamic environments.

Systems and techniques for location management are described herein. In an example, a system may include at least one processor and at least one memory with instructions stored thereon that when executed by the processor, cause the processor to obtain data originating from one or more sensors proximate to the location. A trained activity-based detection model may identify an activity at the location and perform a determination of a service to be offered at the location based on the detected activity. The system may then send a message to a user offering the service to the user, and in response to receiving an authorization accepting the service from the user, cause the service to be implemented at the location, which may include classifying the service as a service type, matching the service type to a service provider, and sending a notification to the service provider.

The present disclosure provides technologies and techniques related to enabling access to localized services. The present disclosure provides mechanisms for authentication and authorization for enabling a non-public network (NPN) to act as a hosting network for providing access to localized services. Additionally, the present disclosure provides mechanisms for enabling user equipment (UE) to discover, select and access an NPN acting as a hosting network to receive localized services. Furthermore, the present disclosure provides mechanisms for enabling access to localized services via a specific hosting network.

Systems and methods are described for transmitting broadcasts by Peripherals, receiving the broadcasts by Centrals, and communicating with a Backend by Centrals. Specifically, a Peripheral may generate and transmit an encrypted broadcast packet to a Central, the Central may transmit the encrypted observation information to the Backend, which may decrypt the broadcast packet. Additionally, a Central may transmit a request for authorization to connect to a Peripheral to the Backend. If authorized by the Backend, the Central may connect to the Peripheral. Further, a Central may receive a plurality of broadcasts over a period of time. The Central may store information about the broadcasts and, at the conclusion of the period of time, transmit the information about the broadcasts and the last-received broadcast to the Backend.

The invention discloses a power grid project supplier information access control method based on a zero-trust architecture, and the method comprises the following steps: S1, receiving an access request, and executing identity verification; s2, extracting supplier related information from the verified access request, and generating access context information; s3, generating an access control strategy according to the access context information; s4, a resource access path is established, and access connection is completed through an encryption communication mode; s5, collecting operation behavior data of the suppliers in the access process; s6, calculating a deviation degree between the operation behavior data and a preset behavior baseline, and generating a risk score; s7, when the risk score exceeds a set threshold value, executing a corresponding security processing operation; and S8, archiving the operation behavior data and the security processing record in the access process. According to the method, a dynamic access control and behavior risk response system is constructed based on a zero-trust architecture, and the method has the advantages of fine authorization, continuous verification and high security.

The present application relates to the field of e-government technology, and discloses an e-government privacy and security protection system based on blockchain technology, including a blockchain layer, a data storage layer, a smart contract layer, a user layer, a privacy computing module, a dynamic authorization and trust scoring module, a revocable access permission module, a data tampering detection and reporting module, a decentralized identity management module, and an on-chain audit module; the blockchain layer is used to record and store data and transactions generated in the e-government process; the data storage layer is used to store encrypted sensitive data, and store the corresponding hash value and index on the blockchain. The computing task allocation is dynamically adjusted through the automatic coordination mechanism of the smart contract to ensure computing efficiency and data privacy. At the same time, the on-chain audit tool immediately verifies the compliance of the results and generates reliable decision-making recommendations, thereby providing reliable decision support and avoiding data leakage risks.

A system and method for dynamically visualize and modify user authority and security resource edge based on access behaviors in a cloud computing environment. The method provides a new access control perspective to ensure the credibility of database object usage patterns, build clearer and explicit security data consumption mode for data usage requests, and guide tenants to have a more comprehensive understanding and concise use. Processing components and method are configured to gather data and analytics including collecting data resource and database object usage tagging both resources and users with security level by machine learning and building an access model for each role. The method uses graph modeling with created, trained access patterns for users protected resources and produces in-memory implicit sub-groups for users with similar access requirements and limits their resource accesses according to their history behaviors. Further provided are outlier activities prediction and in-real time access authorization modification.

The invention relates to the technical field of data processing, in particular to a block chain-based data sharing system, which comprises a field path hash index module, a permission entry sorting module, a path compliance judgment module, a certificate state updating and verification module and a joint permission confirmation module. According to the method and the device, the multilevel structure information of the field path chain is extracted from the data sharing calling request, salt coding is performed in combination with the calling party address, and hash processing is performed, so that unique mapping of the field path is realized, field identification fuzziness and path conflict are effectively avoided, and accurate positioning of sharing operation is ensured. By means of path structure analysis and access frequency normalization processing, a field entry weight sequence is established in combination with a scoring mechanism, field access entries can be sorted according to actual use frequency and structure hierarchy, and authorization judgment efficiency is improved. A task responsibility number and a timestamp are extracted from an access behavior track, a responsibility chain segment is established, and abnormal changes in a responsibility path can be effectively recognized.

Herein disclosed is receiving predetermined content, receiving a request to transform the predetermined content into a derivative work, receiving a requested theme for the derivative work, using generative artificial intelligence to create the derivative work generated as a function of the predetermined content and the requested theme, determining if the generated derivative work is approved, in response to determining the generated derivative work is approved, applying a digital watermark to the approved derivative work, configuring an authorization server to govern use of the approved derivative work based on the digital watermark and providing user access to the authorized derivative work. The requested theme may be determined using a Large Language Model (LLM) and a chatbot interview. The generative artificial intelligence may comprise a diffusion model. The content may comprise music.

The invention provides a distributed multi-mode data cross-trust-domain data sharing method and system, and relates to the technical field of data sharing, and the method comprises the steps: carrying out the type recognition and format standardization processing of heterogeneous data provided by a plurality of data source nodes; dividing the data source node into different trust domains based on the security level, the authorization range and the protection strategy; constructing a cross-trust-domain data mapping model to establish a data synchronization channel; verifying the access authority through the smart contract and recording an access log; a distributed consensus mechanism based on a Byzantine fault-tolerant algorithm is adopted to synchronize data states, and data conflicts are solved through version control. According to the invention, secure sharing and state consistency maintenance of heterogeneous data are realized, and the reliability and fault tolerance of cross-trust-domain data sharing are improved.

The invention discloses a self-service printing method based on an Internet of Things cloud platform, and the method comprises the following steps: user identity authentication and dynamic authorization: enabling a user to use a dynamic two-dimensional code or a one-time password to complete identity authentication and printing authority distribution through the Internet of Things cloud platform; lightweight cloudization of the printing task: user equipment fragments and compresses a file, and only uploads an encryption task description containing printing parameters to a cloud platform; cloud platform task scheduling: the cloud platform detects the state of the Internet of Things printing device in real time, and distributes the printing task to the optimal device according to the device load and the geographic position; distributed data transmission and edge analysis: the cloud platform transmits task fragments to an edge node through an Internet of Things protocol, and the edge device completes file recombination and analysis; by introducing a zero-knowledge encryption technology, edge calculation and dynamic task scheduling, the problems of insufficient data privacy protection, low efficiency, poor security, resource waste and the like in the prior art are solved.

Security registration and authentication systems and methods are disclosed herein for extending OpenID security standards for registration of OpenID client devices for passkey authentication. A client device comprises client frontend application (app). A registration and authentication server comprises a client backend app for receiving an authorization request of the client device comprising a prompt parameter, and implementing one of: (a) a secure registration algorithm if the prompt parameter defines a create value; or (b) an authentication algorithm if the prompt parameter does not define the create value. The security registration and authentication systems and methods provide an authentication token to the client device, the authentication token authenticating the client device to initiate a secure session with a secure resource on a computer network.

The invention relates to the technical field of information retrieval, in particular to a software copyright management system based on a smart contract, which comprises a copyright level right confirmation module, an NFT fragmentation evidence storage module, a dynamic right confirmation verification module, a fragment recombination tracking module and a transaction authorization management module. According to the method, copyright data hash mapping is constructed based on a block chain hierarchical right confirmation mode, a software copyright evolution path is defined, evolution integrity is ensured by calculating hierarchical hash values and adopting Merkle tree structure storage and association of copyright information of different hierarchies, right confirmation data is split and stored in a fragmentation evidence storage mode, safety is improved, and storage and retrieval burdens are reduced; a dynamic right confirmation mechanism is combined with hash comparison and public key signature, real-time verification of newly added copyright information is achieved, it is ensured that the copyright inheritance relation is accurate and checkable, hash calculation based on code fragments, code change tracking and derivative copyright confirmation verification are achieved, and an intelligent contract is used for transaction authorization management, transaction matching and rule verification execution and copyright circulation compliance is ensured.

The invention discloses a smart city data sharing system based on a block chain technology, and relates to the crossing field of medical data processing and information technologies. The system comprises the following modules: 1, a data storage and block chain mapping module, which generates an abstract by using a salting SHA-256 algorithm, stores the abstract in a block chain, stores original data in an IPFS distributed manner, sets redundancy and cache, and regulates abstract storage according to data popularity; 2, a data sharing module driven by the intelligent contract, which is used for subdividing authorization levels, setting pre-request verification, dynamically updating rules and automatically executing functions to guarantee compliance and controllability; the privacy protection technology fusion module expands zero-knowledge proof application and optimizes multi-party security calculation by adopting hybrid encryption; and 4, a data tracing and compliance auditing module which records logs to form a historical chain, traces and outputs an auditing report. According to the invention, the security, efficiency and compliance of medical data sharing can be comprehensively improved, and the application prospect is wide.

The invention discloses a multi-agent collaborative data authorization operation management method and system, and the method comprises the steps: carrying out the edge grading, edge verification and desensitization of scientific research data, obtaining desensitized shared data, encrypting and transmitting the desensitized shared data to a cloud sharing platform, carrying out the layering encryption, and generating an uploading log, the method comprises the following steps: generating an encrypted request packet, screening data, providing the data for a research and development institution, generating an intelligent contract, carrying out dynamic authorization to generate an authorization instruction and an authorization log, verifying the authorization instruction, opening a data channel permission to determine visited data, carrying out hierarchical decryption on the visited data to obtain collaborative authorization data, and sending the collaborative authorization data to the research and development institution. And carrying out weight sorting on the collaborative authorization data, accessing and downloading the collaborative authorization data, and updating an access log. The method not only can improve the efficiency and accuracy of scientific research data authorization operation management, but also has good interpretability, and can be directly applied to a scientific research data authorization operation management system.

The invention discloses a data security method and system based on privacy computing and multifunctional encryption, and relates to the technical field of privacy security computing. Verifying the operation authority of the computing node on the encrypted data block through a zero-knowledge proof protocol, and generating a strategy compliance proof; a differential privacy budget real-time verification mechanism is adopted to verify the privacy protection intensity of strategy compliance proof, and a temporary permission token which passes authorization is obtained; based on the temporary permission token, performing encryption calculation allowed by strategy compliance proof on the encrypted data block through homomorphic operation, and generating an encryption calculation result and a calculation correctness proof; carrying out joint cryptographic packaging on an encryption calculation result, a strategy compliance proof and a calculation correctness proof, and outputting security data through a verifiable calculation protocol; according to the invention, through a differential privacy budget real-time verification mechanism and homomorphic and cryptomorphic calculation based on the temporary permission token, dual guarantee of privacy protection and data security is realized.

The invention provides a credible sharing method and system for multi-party industrial data, and relates to the technical field of data processing, and the method comprises the steps that multiple participants encrypt local industrial data through a credible execution space, and generate encrypted data and corresponding data fingerprints; defining a data access rule based on the smart contract; verifying and auditing the data access request, and obtaining an encrypted data authorization certificate after verification and auditing; and under the federated learning framework, the trusted execution space of each data provider executes the privacy calculation task based on the authorization certificate, and outputs a task calculation result and sends the task calculation result to the task requester. According to the method and the device, the technical problem of privacy risk of data leakage or tampering caused by contradiction between multi-party industrial data sharing and privacy protection is solved, the privacy can still be ensured while data sharing is ensured through federated learning and trusted execution space, and the security and the credibility of data sharing are improved.

The invention relates to the technical field of energy efficiency management, in particular to an information access security control method and system. The method comprises the following steps: performing secure physical space authorization on a target access environment, and deploying a secure environment acquisition network; performing access environment benchmark monitoring by using a secure environment acquisition network to obtain environment benchmark feature data; a user carries out real-time access environment monitoring through user terminal equipment to generate real-time access environment monitoring data; performing multi-dimensional access risk assessment on the real-time access environment monitoring data through the environment reference feature data, and performing dynamic information security access execution to obtain access control execution data; and monitoring an operation behavior of the user in real time based on the access control execution data so as to realize information access security control. According to the invention, information access in an unauthorized physical environment can be effectively prevented, and the capability of resisting position cheating, illegal invasion and potential internal threats is remarkably improved.

The invention relates to the technical field of network and information security, in particular to a zero-trust multi-party security data exchange method, which comprises the following steps of: generating a zero-trust token and a capability authorization bill and constructing context description data; authentication encryption is performed on the plaintext fragment, attribute-based encryption is performed on the data one-time key, and a policy bearing ciphertext container is assembled; in the trusted execution environment, authentication decryption is completed through a one-time secret key of data recovery through joint challenge and threshold deblocking, or strategy migration and transfer are achieved through proxy re-encryption; and aggregating the decryption event and the forwarding event by vector commitment, generating a time anchor, and mapping the time anchor into a next round of random base. According to the invention, fine-grained authorization of the key layer, no plaintext transfer, event-level verifiable auditing and rapid revocation are realized.

A computer may generate a temporary digital wallet containing one or more anonymous payment tokens and transmit the temporary digital wallet to a user device of a user. When the user provides an anonymous payment token of the one or more anonymous payment tokens to a point of sale (POS) system, the computer may receive from the POS system or other systems connected thereto, a request to authorize payment for the anonymous payment token. The request to authorize payment may also include an amount to be paid by the user to the POS system. Using the anonymous payment token, the computer may retrieve a user account and determine that the user account has sufficient funds for the transaction. Based upon the determination that the user account has sufficient funds, the computer may transmit an authorization confirmation back to the POS system or any other system that the authorization request originated from.