9819 results about "Authorization" patented technology

Herein disclosed is receiving predetermined content, receiving a request to transform the predetermined content into a derivative work, receiving a requested theme for the derivative work, using generative artificial intelligence to create the derivative work generated as a function of the predetermined content and the requested theme, determining if the generated derivative work is approved based on a machine learning model configured to determine a content approval score as a function of content owner preferences, in response to determining the generated derivative work is approved, applying a digital watermark to the approved derivative work, configuring an authorization server to govern use of the approved derivative work based on the digital watermark and providing user access to the authorized derivative work. The requested theme may be determined using a Large Language Model (LLM) and a chatbot interview. The generative artificial intelligence may comprise a diffusion model. The content may comprise music.

The invention discloses a medical image encryption and secure storage method and system based on a block chain, and the method comprises the steps: obtaining the original data of a medical image, segmenting the original data of the medical image into a plurality of segments through a fragmentation technology, carrying out the encryption of each segment through a symmetric encryption algorithm, generating an encrypted segment set, and storing the encrypted segment set in a database; determining an integrity check value of the encrypted fragment set; according to the encrypted fragment set, adopting a distributed storage protocol to distribute each fragment to a plurality of storage nodes, recording a storage position and an integrity check value of each fragment to a block chain account book, and generating a storage index containing a storage path and check information; and establishing an access control strategy through the block chain smart contract, and if the obtained requester identity identifier and the authority level conform to the access control strategy, generating a dynamic authorization token including an access range and time limitation. According to the method, the privacy of the patient is protected, and meanwhile, the safety and availability of medical data are improved.

The invention relates to a multi-protocol transmission text data monitoring and warning method and system, and the method comprises the steps: generating a multi-source protocol transmission instance based on dynamic authorization and hardware security verification, and collecting and analyzing text data; a network connection state, a data backlog amount and sensor numerical value content parameters are monitored in real time through multiple threads, and a transmission state and content exception event queue is generated; learning a causal relationship among network congestion, equipment faults and alarm events by using a Bayesian network algorithm, calculating a root cause probability in combination with a dynamic weight distribution strategy, and generating a comprehensive alarm list of priority ranking; on the basis of user feedback data, protocol weights and alarm strategies are adaptively updated, abnormal early warning triggering, data snapshot binding and closed-loop optimization of alarm logs are achieved, and the problems that in a multi-protocol mixed transmission scene, safety adaptability is poor, the monitoring dimension is single, root cause analysis depends on static rules, and strategy updating lags are solved. And the real-time performance, the accuracy and the self-adaptability of data transmission of the industrial Internet of Things are improved.

The invention provides a security management and retrieval method based on Internet of Vehicles data, and the method comprises the steps: carrying out the cooperative training of a global key management model through a federated learning technology on the premise of not leaking the original data of all parties, and achieving a security key management scheme under the participation of multiple parties through a model parameter aggregation and updating mechanism; when data retrieval is needed, a user submits a retrieval request and identity authentication information, and after a system verifies the identity of the user, a ciphertext data identifier meeting conditions is matched in an attribute index according to a keyword and an authorization attribute of the request; the system acquires corresponding ciphertext data from a distributed database according to the ciphertext data identifier, and directly performs keyword matching calculation on the ciphertext data through a secure multi-party computing protocol under the condition of not decrypting the data; and according to the mined security threats and abnormal modes, a data encryption strategy and an access control strategy are dynamically adjusted, authority limitation or access blocking is performed on suspicious users, and the security protection capability of the system is improved.

Apparatus and methods are disclosed for implementing a copilot as a network of microservices including specialized large language models (LLMs) or other trained machine learning (ML) tools. The microservice network architecture supports flexible, customizable, or dynamically determinable dataflow. Compared to much larger competing LLMs, comparable or superior performance is achieved for certain tasks, while significantly reducing hardware requirements and computation time. Disclosed examples incorporate microservices for expansion, retrieval, embedding, and evaluation, in addition to one or more core microservices. Optionally, intermodal I / O, multiple data repositories, competency qualification, or human feedback can be supported. Multiple core microservices can support varying client authorizations or cognitive functions. The disclosed architecture supports any major LLM use case and can be deployed on a single compute node with a single GPU. Techniques are disclosed for multi-recursive retrieval, expansion ML tool training, input / output translation at data producers, and qualification of input / output data against copilot competency.

Methods and systems for a document review process are provided. The method includes receiving an input digital model representation comprising at least one externally-accessible model endpoint for generating a digital artifact. Then, generating a document splice comprising access to multiple document subunits, with at least one document subunit written in a natural language and comprising the digital artifact; the access to each document subunit is provided through an externally-accessible document endpoint for the subunit. Then, generating a document by combining the document subunits, and generating a view associated with the document, based on an user authorization result including selective access rights to the document subunits. The view comprises access to the digital model representation, the digital artifact, each document subunit, and the document. Finally, receiving a user input and updating, via one of the externally-accessible document endpoints, the document splice based on the user input.

The invention relates to the technical field of service examination and approval, and discloses a service examination and approval processing method, device and equipment and a storage medium, and the method comprises the steps: receiving a user authorization request, verifying the user authorization request, and obtaining a sub-account certificate with a reading only permission; performing real-time data acquisition on the plurality of e-commerce platforms based on the sub-account credentials to obtain multi-dimensional user data including transaction records, operation data and evaluation information; inputting the multi-dimensional user data into a preset space-time sequence attention network and graph convolution hybrid model to carry out dynamic evaluation on a user behavior pattern to obtain risk quantitative indexes; inputting the risk quantitative indexes into a rule engine integrating an adaptive decision tree and a genetic algorithm for automatic decision making to obtain a graded approval decision; and performing multi-signature encryption on the execution instruction according to the graded approval decision to obtain a safety operation instruction and execution state information, thereby realizing full-process automation from data acquisition, risk assessment to decision execution.

The invention provides an integrated sharing method and platform for health data of old people, and relates to the technical field of data processing.The method comprises the steps that multi-source heterogeneous health data of the old people are accessed, a rule template in a historical grading preprocessing rule base is matched based on data source capacity and data features, and data cleaning and standardization are completed; further identifying a sensitive field based on a medical data standard and an industry privacy specification, generating a sensitive field vector, carrying out sensitive level scoring, and calling a data desensitization strategy library to execute desensitization operations such as de-identification and masking; an access control function is constructed based on user attributes, access context and field sensitivity levels, authorization levels are determined, differential encryption is performed, and authorization views and data tokens are generated for secure access. Through the method, the problems of heterogeneous sources, complex processing, insufficient privacy protection and lack of flexibility of a sharing mechanism of old-age health data in the prior art can be solved.

The invention discloses a dynamic authority management system and method based on multi-source salary data integration, and relates to the technical field of salary data management, and the method comprises the following steps: collecting role names, authority boundaries and operation granularity information from a plurality of business systems, and generating structured role semantic ontology entries based on a field-level semantic annotation mode; and disassembling the to-be-mapped role according to the authority dimension, calculating a semantic similarity index between the to-be-mapped role and the standard role based on the role semantic ontology library, and outputting a role consistency scoring matrix. According to the method, the authority difference is identified through the role semantic ontology and the similarity score, the minimum authorization judgment is realized in combination with the rule engine and reinforcement learning, the audit traceability and anomaly detection are guaranteed by using the block chain and the dynamic graph, and finally a strategy self-evolution closed loop is constructed. And the problems of permission mismatching and data leakage caused by role semantic inconsistency are effectively solved.

The invention discloses a zero-trust network dynamic access control method based on an AI behavior portrait, and the method comprises the following steps: 1, collecting multi-source real-time behavior data during an access request; 2, constructing an AI behavior portrait engine based on historical data, inputting the integrated multi-source behavior data, calculating a behavior deviation degree through the AI behavior portrait engine, and outputting a risk score; 3, dynamic strategy decision making, wherein a decision making engine executes hierarchical control according to the risk score; 4, continuous session monitoring and real-time adjustment are carried out; step 5, when risk upgrading is detected in the session, degrading the session authority, limiting high-risk operation, terminating the session, and retaining evidence obtaining data; step 6, audit event generation and portrait updating; and step 7, strategy optimization closed loop. According to the method, the risk score is calculated in real time based on the AI behavior portrait, transition from static authorization to dynamic permission adjustment is realized, and internal threats such as voucher stealing and the like are effectively blocked.

The invention discloses a data security dynamic evaluation system and a protection method, belongs to the technical field of information security, and is used for solving the problem of terminal equipment access control and behavior risk dynamic collaborative protection. The method comprises the following steps: generating fingerprints through terminal equipment features, verifying authorization, inputting access feature slices into a time sequence model by authorized terminal equipment, generating a trust score based on cosine similarity of a behavior sequence and a prediction sequence, and constructing a Markov model to dynamically select an authentication mode according to the trust score; calculating a risk index by combining network and geographic information, and distributing the risk index to a real or virtual environment; and the unauthorized terminal equipment distributes the virtual environment after registration. Differentiated monitoring is carried out, a time sequence library is established in the virtual environment, and doubt scores are generated through sequence matching; the state deviation of the real environment is calculated through a hidden Markov model, and the risk score is generated by fusing the multi-dimensional features. And based on the result management authority, the suspicion terminal equipment isolates and shrinks the authority, the compliance terminal equipment authenticates and migrates, and the access is regulated and controlled according to the minimum privilege principle and the time window mechanism.

The invention discloses a personal data cross-border circulation method based on a block chain. The method comprises the steps of data acquisition and local storage, third-party neutral institution witness and data fingerprint chaining, data transmission and use authorization declaration, fingerprint verification and data verification on a receiver chain, and full-link tracing and dynamic auditing. Aiming at the problems that trust guarantee of personal data cross-border circulation depends on a single technical means such as centralized institution authentication or encrypted transmission or a static legal protocol, a trust transfer chain is lengthy, and cross-national legal mutual recognition is fragile, a data fingerprint anchoring system constructed based on a block chain is designed; aiming at the problems that traditional data cross-border authorization depends on a manual signing protocol or static strategy configuration, response lag exists, rule execution deviation exists, privacy protection and compliance auditing are difficult to consider and the like, a data use rule is dynamically constrained through an intelligent contract; a user defines a data use range, timeliness and an operation white list through a declarative intelligent contract, and contract codes are automatically executed after being subjected to consensus verification of nodes on a chain.

In accordance with embodiments of the present disclosure, a method for conducting secure financial transactions uses a model-based reflex agent to ensure real-time authorization, anomaly detection, and risk assessment. The agent receives transaction-related data, maintains an internal state reflecting observed and inferred conditions, and applies condition-action rules to determine appropriate actions, such as authorizing payments, triggering multi-factor authentication, or halting transactions. The agent dynamically updates its internal state based on feedback, adapts to changes using machine learning, and ensures compliance through audit logs. This approach enhances security, minimizes fraud, and provides seamless, adaptive processing for financial transactions in dynamic environments.

Systems and techniques for location management are described herein. In an example, a system may include at least one processor and at least one memory with instructions stored thereon that when executed by the processor, cause the processor to obtain data originating from one or more sensors proximate to the location. A trained activity-based detection model may identify an activity at the location and perform a determination of a service to be offered at the location based on the detected activity. The system may then send a message to a user offering the service to the user, and in response to receiving an authorization accepting the service from the user, cause the service to be implemented at the location, which may include classifying the service as a service type, matching the service type to a service provider, and sending a notification to the service provider.

The present disclosure provides technologies and techniques related to enabling access to localized services. The present disclosure provides mechanisms for authentication and authorization for enabling a non-public network (NPN) to act as a hosting network for providing access to localized services. Additionally, the present disclosure provides mechanisms for enabling user equipment (UE) to discover, select and access an NPN acting as a hosting network to receive localized services. Furthermore, the present disclosure provides mechanisms for enabling access to localized services via a specific hosting network.

The invention relates to the technical field of information security, and discloses a data security management system and method in an intelligent power grid, and the system comprises a dynamic encryption and key management module which is used for carrying out the encryption and key management of the data of the intelligent power grid, determining an encryption algorithm according to the sensitivity of the data, and generating a corresponding key, the dynamic encryption and key management module transmits encrypted data and key information to the adaptive access control module so as to ensure the security of data access; and the self-adaptive access control module is used for managing access permissions of the user and the equipment and performing dynamic authorization according to the attribute label and the context information. Through dynamic encryption and adaptive key management, an encryption algorithm and a key length are adjusted in real time according to data sensitivity and a network environment, a quantum key distribution technology is combined, high security and quantum attack resistance of a key are ensured, and then security and real-time performance of data transmission are ensured.

Systems and methods are described for transmitting broadcasts by Peripherals, receiving the broadcasts by Centrals, and communicating with a Backend by Centrals. Specifically, a Peripheral may generate and transmit an encrypted broadcast packet to a Central, the Central may transmit the encrypted observation information to the Backend, which may decrypt the broadcast packet. Additionally, a Central may transmit a request for authorization to connect to a Peripheral to the Backend. If authorized by the Backend, the Central may connect to the Peripheral. Further, a Central may receive a plurality of broadcasts over a period of time. The Central may store information about the broadcasts and, at the conclusion of the period of time, transmit the information about the broadcasts and the last-received broadcast to the Backend.

The invention discloses a multi-factor dynamic identity verification and access control system, which comprises a user management module, a biological recognition module, a strategy-level authorization module, a dynamic evaluation module and an interface module, and is characterized in that the user management module is used for user registration, information management and logout; the biological recognition module adopts a biological recognition technology to collect, process and compare biological characteristics of a user; the strategy-level authorization module is used for accessing sensitivity levels of applications and terminal type factors according to user identities; the dynamic evaluation module is responsible for monitoring and evaluating the user access process in real time; and the interface module is used for providing an interactive interface between the system and other systems or applications. By integrating various advanced technologies, efficient, safe and flexible access control management is realized, and the safety and user experience of the whole system are improved.

The invention relates to the technical field of access control, in particular to an access control strategy generation method and system based on a large language model.Automatic cue words are generated through cue word engineering, enhanced data are generated for an example document according to the automatic cue words, and the example document is a text marked with access control elements; learning an access control element reasoning process in the example document and the enhanced data by using a plurality of large language models, and generating a corresponding access control strategy thinking chain, so as to obtain an access control strategy set of a target document in the attribute mining and strategy generation task based on the thinking chain; and based on a multi-model voting mode, obtaining a final access control attribute and strategy for the access control strategy to be optimized in the access control strategy set according to an optimization result. According to the method, the access control strategy with relatively high quality can be generated, and the method has a relatively good application prospect in the aspects of dynamic and mass data resource access authorization and management under novel open environments such as big data and the Internet of Things.

The invention discloses a power grid project supplier information access control method based on a zero-trust architecture, and the method comprises the following steps: S1, receiving an access request, and executing identity verification; s2, extracting supplier related information from the verified access request, and generating access context information; s3, generating an access control strategy according to the access context information; s4, a resource access path is established, and access connection is completed through an encryption communication mode; s5, collecting operation behavior data of the suppliers in the access process; s6, calculating a deviation degree between the operation behavior data and a preset behavior baseline, and generating a risk score; s7, when the risk score exceeds a set threshold value, executing a corresponding security processing operation; and S8, archiving the operation behavior data and the security processing record in the access process. According to the method, a dynamic access control and behavior risk response system is constructed based on a zero-trust architecture, and the method has the advantages of fine authorization, continuous verification and high security.

The present application relates to the field of e-government technology, and discloses an e-government privacy and security protection system based on blockchain technology, including a blockchain layer, a data storage layer, a smart contract layer, a user layer, a privacy computing module, a dynamic authorization and trust scoring module, a revocable access permission module, a data tampering detection and reporting module, a decentralized identity management module, and an on-chain audit module; the blockchain layer is used to record and store data and transactions generated in the e-government process; the data storage layer is used to store encrypted sensitive data, and store the corresponding hash value and index on the blockchain. The computing task allocation is dynamically adjusted through the automatic coordination mechanism of the smart contract to ensure computing efficiency and data privacy. At the same time, the on-chain audit tool immediately verifies the compliance of the results and generates reliable decision-making recommendations, thereby providing reliable decision support and avoiding data leakage risks.

A system and method for dynamically visualize and modify user authority and security resource edge based on access behaviors in a cloud computing environment. The method provides a new access control perspective to ensure the credibility of database object usage patterns, build clearer and explicit security data consumption mode for data usage requests, and guide tenants to have a more comprehensive understanding and concise use. Processing components and method are configured to gather data and analytics including collecting data resource and database object usage tagging both resources and users with security level by machine learning and building an access model for each role. The method uses graph modeling with created, trained access patterns for users protected resources and produces in-memory implicit sub-groups for users with similar access requirements and limits their resource accesses according to their history behaviors. Further provided are outlier activities prediction and in-real time access authorization modification.

The invention relates to the technical field of system security, in particular to a terminal zero-trust security capability system based on trusted environment perception. According to the invention, through real-time environment perception, dynamic risk assessment and fine-grained access control, all-around security protection is provided for enterprises; firstly, an identity agent program is deployed on a user terminal, and environment risk information is collected and reported in real time; secondly, a secure access control area is set up and comprises a trusted environment perception system, an intelligent identity analysis platform, a trusted access console and other core components for risk assessment, the trust level is obtained through user behavior analysis, and dynamic authorization is conducted based on the risk and the trust level; and finally, realizing fine-grained access control on applications and interfaces in the data subnet through a trusted application agent and a trusted interface agent. Environment perception, identity analysis and access control are closely integrated to form a coherent zero-trust architecture, environment changes and threats can be better responded, and the system security is improved.

The invention relates to the technical field of data processing, in particular to a block chain-based data sharing system, which comprises a field path hash index module, a permission entry sorting module, a path compliance judgment module, a certificate state updating and verification module and a joint permission confirmation module. According to the method and the device, the multilevel structure information of the field path chain is extracted from the data sharing calling request, salt coding is performed in combination with the calling party address, and hash processing is performed, so that unique mapping of the field path is realized, field identification fuzziness and path conflict are effectively avoided, and accurate positioning of sharing operation is ensured. By means of path structure analysis and access frequency normalization processing, a field entry weight sequence is established in combination with a scoring mechanism, field access entries can be sorted according to actual use frequency and structure hierarchy, and authorization judgment efficiency is improved. A task responsibility number and a timestamp are extracted from an access behavior track, a responsibility chain segment is established, and abnormal changes in a responsibility path can be effectively recognized.

The invention provides an Internet of Things data processing method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps that an Internet of Things device carries out the digital signature of an authentication request through employing a pre-stored private key, and generates a signed authentication request; the smart contract in the block chain network receives the signed authentication request, and the smart contract generates an authentication token including an authentication result, a validity period and an authorization level based on the historical authentication record, the credit score, the current timestamp and the challenge value; the Internet of Things equipment receives the encrypted authentication token and the intelligent contract address; the Internet of Things equipment configures own access authority and function limitation according to the authentication result, the validity period and the authorization level; and the Internet of Things equipment takes the intelligent contract address as an identity credential within the period of validity, and is used for subsequent secure communication and data exchange with other Internet of Things equipment or application programs.

Herein disclosed is receiving predetermined content, receiving a request to transform the predetermined content into a derivative work, receiving a requested theme for the derivative work, using generative artificial intelligence to create the derivative work generated as a function of the predetermined content and the requested theme, determining if the generated derivative work is approved, in response to determining the generated derivative work is approved, applying a digital watermark to the approved derivative work, configuring an authorization server to govern use of the approved derivative work based on the digital watermark and providing user access to the authorized derivative work. The requested theme may be determined using a Large Language Model (LLM) and a chatbot interview. The generative artificial intelligence may comprise a diffusion model. The content may comprise music.

Methods and systems for selecting a deep learning / machine learning model are described. In one embodiment, a plurality of models are optimized by addressing class imbalances among a first subset of records, each of the plurality of models are trained using the first subset of records, each of the plurality of models are implemented to predict a value of respective known target columns in each of a second subset of records, respective success rates for each of the plurality of models at predicting the respective known target columns for each of the second subset of records are determined, a first of the plurality of models having a highest success rate is selected, and the first of the plurality of models is implemented to decide a target column of a received authorization request based on predictor columns in the received authorization request.

The invention provides a distributed multi-mode data cross-trust-domain data sharing method and system, and relates to the technical field of data sharing, and the method comprises the steps: carrying out the type recognition and format standardization processing of heterogeneous data provided by a plurality of data source nodes; dividing the data source node into different trust domains based on the security level, the authorization range and the protection strategy; constructing a cross-trust-domain data mapping model to establish a data synchronization channel; verifying the access authority through the smart contract and recording an access log; a distributed consensus mechanism based on a Byzantine fault-tolerant algorithm is adopted to synchronize data states, and data conflicts are solved through version control. According to the invention, secure sharing and state consistency maintenance of heterogeneous data are realized, and the reliability and fault tolerance of cross-trust-domain data sharing are improved.

The invention discloses a self-service printing method based on an Internet of Things cloud platform, and the method comprises the following steps: user identity authentication and dynamic authorization: enabling a user to use a dynamic two-dimensional code or a one-time password to complete identity authentication and printing authority distribution through the Internet of Things cloud platform; lightweight cloudization of the printing task: user equipment fragments and compresses a file, and only uploads an encryption task description containing printing parameters to a cloud platform; cloud platform task scheduling: the cloud platform detects the state of the Internet of Things printing device in real time, and distributes the printing task to the optimal device according to the device load and the geographic position; distributed data transmission and edge analysis: the cloud platform transmits task fragments to an edge node through an Internet of Things protocol, and the edge device completes file recombination and analysis; by introducing a zero-knowledge encryption technology, edge calculation and dynamic task scheduling, the problems of insufficient data privacy protection, low efficiency, poor security, resource waste and the like in the prior art are solved.

Security registration and authentication systems and methods are disclosed herein for extending OpenID security standards for registration of OpenID client devices for passkey authentication. A client device comprises client frontend application (app). A registration and authentication server comprises a client backend app for receiving an authorization request of the client device comprising a prompt parameter, and implementing one of: (a) a secure registration algorithm if the prompt parameter defines a create value; or (b) an authentication algorithm if the prompt parameter does not define the create value. The security registration and authentication systems and methods provide an authentication token to the client device, the authentication token authenticating the client device to initiate a secure session with a secure resource on a computer network.