169 results about "Authorization certificate" patented technology

The invention discloses a block chain-based medical data management method, system and device, and a medium, and relates to the field of information management. The method comprises the following steps: acquiring medical data, analyzing content attributes and context information of the medical data through a first smart contract on a block chain, and generating a first sensitivity level identifier; based on the first sensitivity level identifier, performing differential encryption on the medical data through a second smart contract on the block chain, and generating verification information; partitioning the differentially encrypted medical data, constructing a data structure together with the verification information, and storing the data structure into a block chain; in response to the received access request, verifying an authority certificate in the access request and the type of the access request through a third smart contract on the block chain, and generating an access authorization certificate; and outputting target medical data corresponding to the access request based on the access authorization certificate. By implementing the technical scheme provided by the invention, the full-life-cycle safety management and control of the medical data from collection, storage to sharing is realized.

The invention provides a blockchain-driven distributed private data storage and access control method and system, and relates to the technical field of access control, and the method comprises the steps: carrying out the sensitivity scoring and fragmentation processing of private data, organizing a data fingerprint into a Bloom filter, and constructing an integrity proof tree, the data fragments are encrypted and then submitted to a distributed storage network, and an evidence storage record of the data fingerprints is generated in the block chain; during data access, a hierarchical access key is dynamically generated according to behavior characteristics of a visitor, and the hierarchical access key is distributed to an authorized node group after threshold segmentation; the authorization node group generates an authorization voucher by using a threshold signature scheme based on a lattice password, and writes the authorization voucher into the block chain; and the visitor obtains the data fingerprint and the encrypted data fragment by using the authorization certificate, and decrypts the data fragment of the corresponding authority level through the secure multi-party calculation recombination key component after verifying the integrity.

The invention provides a credible sharing method and system for multi-party industrial data, and relates to the technical field of data processing, and the method comprises the steps that multiple participants encrypt local industrial data through a credible execution space, and generate encrypted data and corresponding data fingerprints; defining a data access rule based on the smart contract; verifying and auditing the data access request, and obtaining an encrypted data authorization certificate after verification and auditing; and under the federated learning framework, the trusted execution space of each data provider executes the privacy calculation task based on the authorization certificate, and outputs a task calculation result and sends the task calculation result to the task requester. According to the method and the device, the technical problem of privacy risk of data leakage or tampering caused by contradiction between multi-party industrial data sharing and privacy protection is solved, the privacy can still be ensured while data sharing is ensured through federated learning and trusted execution space, and the security and the credibility of data sharing are improved.

The invention provides a digital asset decentralized management method and system, and the method comprises the steps: enabling legal members in a group to jointly participate in the generation of an initial authorization key according to a preset distributed key generation protocol, dividing the key into a plurality of fragments through a threshold key sharing scheme, and storing the fragments in different member nodes; after the consensus is reached, the member node reconstructs a complete authorization key according to the request content, signs the key by adopting an aggregation signature scheme, generates an authorization certificate, and returns the certificate to the request node; a key cache mechanism is introduced, a member node maintains a local cache and stores historical authorization keys in the latest period of time, when a new authorization request is processed, available keys are searched from the local cache, and the available keys are directly used if hit.

The invention provides an API (Application Program Interface) calling management and control system and authentication method for different security protection levels in a specific field. According to the system, APIs are isolated and deployed to matched API gateways according to security levels, so that the requirement of a specific field for resource isolation of different security protection levels is met. The core component comprises an API gateway management and control module, a caller registration module, an API subscription module, an authentication module and a display center module. In order to ensure the security and credibility of an API caller, an API calling authentication method for different security protection levels in a specific field is designed, and multi-level authentication control is carried out on the basis of an authorization certificate, an IP address, a security level attribute and an access authority. According to the technical scheme, the authorization range of the API resources is controlled, it is ensured that an API caller can only access the API resources matched with the safety protection level of the API caller, confidential data leakage caused by unauthorized access or unauthorized access is effectively prevented, and the high safety requirement for API protection in the specific field is met.

The invention discloses a License verification method and a License verification device for private deployment of a k8s or docker environment. When the method is applied to a client, the method comprises the following steps: firstly, creating a target container by using k8s or Docker, and running target application software; then, obtaining the MAC address of the physical machine; then, according to the token information of the user, the current unique identification code of the container and the MAC address, generating a license application request, and encrypting the license application request; then, the encrypted license application request is sent to a server side to generate an authorization certificate, and the authorization certificate is encrypted; and the client receives the encrypted authorization certificate returned by the server and decrypts the encrypted authorization certificate to obtain the decrypted authorization certificate. And finally, the system verifies the authorization information in the decrypted authorization certificate, and loads a corresponding application software function module in the operation environment of the target container according to a verification result. According to the method, the security and reliability of license verification are remarkably improved, and legal use of software is ensured.

The invention provides an access control access management system and method based on remote APP control management, which combines an access control terminal, an APP (visitor terminal) and a cloud control platform, realizes that a visitor logs in a property management platform (cloud control platform) through the APP, and the cloud control platform performs multi-modal information authentication on the visitor and drives an access control machine to open a door. Therefore, intelligent and automatic access control access management can be realized, the labor cost of property management can be saved, and a secure access control mechanism is realized. And identity leakage is avoided through combined verification of the biological information and the secret key. And the process that the visitor logs in the platform and controls the access control to unlock is carried out under the supervision of the property platform, so that not only can authorized buildings be avoided, but also the problems that paper authorization certificates are easy to lose and access control congestion is caused by manual verification can be solved. The platform records access records, authentication records and access control passing records of visitors in real time, system traceability management is facilitated, and the property management level and the security level are improved.

The invention relates to the technical field of anti-counterfeiting verification, in particular to an embedded equipment anti-counterfeiting verification method based on hardware fingerprints and double encryption, which comprises the following steps of: analyzing a CPU unique identification number generated by starting for the first time, adjusting a sequence and splicing a software version, judging ciphertext content and synchronizing the ciphertext content to an activation end and an EEPROM (Electrically Erasable Programmable Read-Only Memory), and decrypting a comparison data field. And decrypting the verification parameter group, the timestamp and the MAC address to obtain an authorization parameter verification result. According to the method, hardware fingerprint deep processing and multi-factor data encryption are fused, in the identity feature generation and storage process, the multi-dimensional identification degree of identity information is remarkably improved by adopting multi-data-source dynamic combination and ciphertext verification, hierarchical dynamic authorization is achieved through joint limitation of the period, the number of times and the limit, and the authentication efficiency is improved. The equipment environment and activation behavior are traced back by the whole link, the parameter state and affiliation are verified item by item after the authorization certificate is decrypted, and abnormal operations such as equipment illegal activation, authority border crossing and certificate false use are effectively prevented and controlled.

The invention discloses a distributed data use control method and system based on a DID and a verifiable credential, a storage medium and an electronic device, and the method comprises the steps: carrying out the identity verification of a data user based on a DID, carrying out the authentication of the identity through a verifiable credential issued by an authority, and carrying out the verification of the identity through the verifiable credential; the privacy information range is controlled by adopting a selective disclosure mechanism; generating data authorization information based on the verifiable certificate, establishing an encrypted point-to-point data transmission channel in combination with the DID identifiers of the authorizer and the authorized person, and executing encrypted transmission and encrypted storage of data; and verifying the identity of a data user based on a DID signature mechanism, carrying out tamper-proof verification on a use strategy in the authorization certificate, and carrying out compliance judgment on an authorization range, strategy content and a decryption condition. According to the method provided by the invention, identity credibility right confirmation in a distributed environment is realized, the security and compliance of data exchange are improved, and security autonomy and verifiable control in a data use stage are realized.

A system includes non-transitory computer-readable media storing instructions and a processor configured to execute the instructions to receive a request for access to first media from a device. The first media is recorded by a first media-recording device and includes a portion identified as being associated with an event. The event is classified into an event category. The request for access includes an authorization certificate that includes a role. The processor is configured to execute the instructions to, in response to determining the authorization certificate is valid and the role is authorized to access the event category, provide the device access to the portion of the first media and transmit a token to the device. The token includes metadata associated with the portion of the first media and is usable by the device to access a portion of second media. The second media is recorded by a second media-recording device.

The invention relates to the technical field of data management, and discloses a multi-factor authentication and blockchain evidence storage data processing method and system, and the system comprises an identity authentication module which is used for carrying out the multi-factor identity verification, and writing a verification result and an authentication serial number into an authorization certificate; the authorization contract module is used for generating a block chain authorization contract according to user authorization and setting a state version number; the government affair data access module is used for reading government affair data through the government affair network integrated public data platform and adding a request signature generated based on an SM3 algorithm into a request; the block chain evidence storage module is used for performing same-rule uplink evidence storage on the authorization certificate and the calling log, generating an authorization abstract, calling the log and generating a log abstract; the consistency verification module is used for matching the authorization voucher with the call log; and the user authority management module is used for displaying an authorization state and executing modification or revocation operation. According to the invention, credible verification and dynamic management and control of the whole authorization process are realized, and the security of data sharing is improved.

The invention relates to the technical field of computers, and particularly provides an off-line authorization verification method and system for an application program, a terminal and a storage medium, and the method comprises the steps: receiving an authorization request, generating a key pair containing a public key and a private key based on the authorization request, and extracting a machine code from the authorization request; generating authorization information based on the machine code, wherein the authorization information comprises an authorization deadline, an authorization code and authority information; using system time as authorization time, and encrypting the authorization information and the authorization time by using a private key to obtain an authorization certificate; and issuing the public key and the authorization certificate to a client which sends the authorization request, and appointing a storage directory of the authorization certificate in the client. According to the invention, by introducing the timed task, authorization management is more flexible, and changeable market requirements can be met.

The invention relates to the technical field of data authorization, in particular to an accurate data authorization system and method based on distributed digital identities. The system comprises a distributed digital identity management module, a verifiable data authorization certificate management module and a block chain system, wherein the distributed digital identity management module is used for carrying out distributed digital identity issuing and verification work on participants; the verifiable data authorization voucher management module is used for generating and verifying a data authorization voucher by utilizing distributed digital identity information and combining a verifiable voucher technology, and analyzing the data authorization voucher through an intelligent contract to realize accurate authorization of data; and the block chain system is used for storing the distributed digital identity information, the data authorization certificate information and related operation records. According to the method, the security, the accuracy and the high efficiency of the data authorization process are ensured through the combination of the distributed digital identity and the verifiable certificate and the transparency and the non-tampering property of the block chain.

A method and system for providing secure delivery, transport, modification, exchange of digital design and build files that have been bundled into a digital asset within a complex digital supply chain. The system also provides for quality standards when the digital asset is used to manufacture a physical part, and provides for secure feedback to stakeholders for the purpose of digital logistics, data analytics, or liability. The system includes, but is not limited to, manufacturing, licensing, modification and delegation policy, generating authorization certificates, authenticating manufacturing devices and provide qualitative and quantitative file consumption data.

The invention discloses an alliance chain-based unmanned aerial vehicle cross-domain service function link accessing method, which comprises the following steps of: 1, initializing a system and configuring an alliance chain, generating a global password parameter and a root key by a trusted mechanism, and finishing domain registration and certificate chain storage by each management domain edge server; 2, blockchain-driven identity management is carried out, and the unmanned aerial vehicle completes chain registration and anti-counterfeiting registration certificate acquisition through a domain edge server to which the unmanned aerial vehicle belongs; 3, deploying a flexible threshold signature algorithm to realize multi-domain joint signature and Byzantine fault tolerance; 4, executing a cross-domain SFC security authentication protocol, including SFC pre-verification and security authorization certificate issuing, first node verification starting, hop-by-hop key negotiation and handover certificate transmission, and on-chain auditing; and 5, based on the topology centrality and the path coverage, dynamically electing an orchestrator to realize load balancing. According to the invention, safe access and identity authentication of the cross-domain service function chain of the unmanned aerial vehicle are realized, safety, efficiency and expandability are balanced, and reliable guarantee is provided for cross-domain cooperation of the unmanned aerial vehicle.

Some embodiments control access by applications to resources in a computing environment. An embodiment notes a request from an application to access a resource, determines a compliance status of the application based on access control policy compliance criteria, ascertains an authorization status of the request based on an authorization credential of the request and an authorization requirement of the resource, and responds to the request based on the compliance status and also based on the authorization status, thereby providing fine-grained access control. Access may also be controlled based on a request's beneficiary. An access request response may allow access, deny access, or ask for additional authorization. A compliance classifier reduces risk by dynamically updating compliance status after compliance criteria changes or attribute changes. An identity service access control architecture uses a compliance attribute to improve efficiency. Applications may be access control grouped according to resource sensitivity labels.

The invention discloses an identity authentication method and system, electronic equipment and a storage medium. The method comprises a password authentication login stage and a certificate authentication login stage, in a password authentication login stage, after an authentication client receives identity identification information and password information sent by a user terminal and generates a password hash value, an authentication server receives the password hash value, a random salt value and the identity identification information from the authentication client and sends the password hash value to the user terminal; the authentication server verifies the legality of the received password hash value; in a certificate authentication login stage, the authentication server sends a first random value and timestamp information to the user terminal, and after a digital signature is generated by the user terminal according to the identity identification information, the first random value, a second random value selected by a user and the timestamp information, the first random value and the second random value are sent to the user terminal. And the authentication server receives the digital signature and the authorization certificate from the user terminal, and verifies the legality of the digital signature and the authorization certificate. By adopting the technical scheme provided by the invention, the security of terminal identity management is improved by the two-factor identity authentication method fusing the dynamic verification password and the certificate.

The invention discloses a chip debugging function control method and system, electronic equipment and a storage medium, and belongs to the technical field of electronic chip debugging. The chip debugging function control method comprises the following steps: if an authorization request transmitted by target equipment is received, generating a random number, and encrypting the random number to obtain a random ciphertext; wherein the target equipment is debugging equipment or a server; sending the random ciphertext to the target device, so that the target device adds a decryption result of the random ciphertext to an authorization certificate; receiving the authorization certificate sent by the target equipment, and verifying the authorization certificate; and if the authorization certificate passes the verification, adding an identifier of the chip to the authorization certificate, and starting a debugging function of the chip by using the authorization certificate, so that the debugging device debugs the chip. In conclusion, the safety of chip debugging can be improved.

Disclosed are various embodiments for authentication with network connected computing resources using a cryptographic coprocessor installed on a client device. A request can be sent to the client device to provision an asymmetric encryption key-pair using a cryptographic coprocessor installed on the client device, wherein the request comprises a key-authorization credential for the asymmetric encryption key-pair and the asymmetric encryption key-pair comprises a public key and a private key. The public key of the asymmetric encryption key-pair and an identity public key for the cryptographic coprocessor can be received. The public key, key-authorization credential, and the identity public key can then be stored in association with each other.

Disclosed are various embodiments for authentication with network connected computing resources using a cryptographic coprocessor installed on a client device. A request can be sent to the client device to provision an asymmetric encryption key-pair using a cryptographic coprocessor installed on the client device, wherein the request comprises a key-authorization credential for the asymmetric encryption key-pair and the asymmetric encryption key-pair comprises a public key and a private key. The public key of the asymmetric encryption key-pair and an identity public key for the cryptographic coprocessor can be received. The public key, key-authorization credential, and the identity public key can then be stored in association with each other.

Some embodiments control access by applications to resources in a computing environment. An embodiment notes a request from an application to access a resource, determines a compliance status of the application based on access control policy compliance criteria, ascertains an authorization status of the request based on an authorization credential of the request and an authorization requirement of the resource, and responds to the request based on the compliance status and also based on the authorization status, thereby providing fine-grained access control. Access may also be controlled based on a request's beneficiary. An access request response may allow access, deny access, or ask for additional authorization. A compliance classifier reduces risk by dynamically updating compliance status after compliance criteria changes or attribute changes. An identity service access control architecture uses a compliance attribute to improve efficiency. Applications may be access control grouped according to resource sensitivity labels.

The invention relates to the field of legal science and technology and generative artificial intelligence, and discloses a legal service project three-party agent pre-auditing arrangement and double-threshold gating method and system based on a large language model, and a storage medium. A platform, party and law institution three-party agent collaborative architecture is constructed, and role recognition, evidence structuring, law mapping, intelligent evaluation and document generation are completed through a chat mechanism. The method comprises the following steps: judging a party role based on LLM and generating an authorization certificate; demand fingerprints and evidence maps are extracted under platform arrangement, and legal mapping and reference chains are generated; hierarchical visible control is realized through a double-threshold scoring function; generating a neutral summary, a strategy tree and a document first draft through combination; and finally, outputting a desensitization packaging result and completing auditing anchoring. According to the method, the compliance, comparability and auditing performance of the project establishment stage are effectively improved, and the method is suitable for multiple types of legal service pre-docking scenes.

The invention discloses a resource access method and device, equipment and a storage medium, and relates to the technical field of information security, and the method comprises the steps: creating each access control strategy based on the input information of a system administrator in a target system; when a resource access request sent by a target user is received, extracting user attribute information and resource attribute information from the resource access request to determine corresponding target attribute information, and matching the target attribute information with each access control strategy to obtain a matching result; if the matching result shows that the target user has the corresponding resource access authority, generating a corresponding access authorization certificate for the target user; and when the target user performs resource access by using the access authorization certificate, determining a corresponding target resource, and encrypting and transmitting the target resource to the target user side based on a preset encryption algorithm and an HTTPS transmission protocol. Therefore, the flexibility and the security in the resource access process can be improved.

The invention discloses a supervisible privacy information retrieval method and device, a storage medium and a program product, and relates to the technical field of cryptography and privacy computing. The method comprises the following steps: a data holder completes a publicly verifiable cryptographic commitment for a database version in a system initialization stage and records the database version commitment to an evidence storage chain, and a supervision committee establishes a threshold signature system; the supervision committee performs compliance check on the external authorization certificate and the authorization message provided by the query party, generates a threshold signature when the check is passed, and records an authorization event to the certificate storage chain; the query party assembles an authorization query packet based on the threshold signature and submits the authorization query packet to the data holder; and generating a response ciphertext under the condition that the data holder passes verification of the threshold signature and the authorization query packet, confirms that authorization is legal and is consistent with the committed binding of the database version. According to the method, authorization decision making and post responsibility asking for encrypted query are realized, and trust hypothesis for a single-point approval subject is reduced.

The invention relates to a trusted digital identity-based user data authorization method and system, and the method comprises the steps: enabling a user to initiate an authorization request to a data authorization center through a third-party service system, and generating a unique authorization serial number and a safe authorization page URL (Uniform Resource Locator); and the user confirms authorization information on the authorization page and performs identity authentication through the trusted digital identity authentication system and the CTID platform. After the authentication is passed, the data authorization center generates an authorization record, an authentication record and authorization voucher data to ensure that the authorization behavior of the user is traceable and ensure that the authorization record and the authentication record are not tampered; and safely transmitting the authorization data packet confirmed by the user and the authorization serial number after authorization confirmation to a third-party service system. The method also comprises a fine-grained access control and data recovery mechanism, so that the data security is further guaranteed, the security and convenience of user data authorization are integrally improved, and the user privacy and the data security are effectively protected.

Embodiments of the present application provide a security implementation method and apparatus, a device and a network element. The method comprises: a first device acquires an authorization certificate of a first network element, wherein the authorization certificate is used for verifying whether the first network element has permission to receive data, the data is from at least one second device associated with the first device, and the authorization certificate comprises a first digital signature; and when the authorization certificate performs verification successfully on the basis of the first digital signature, the first device determines that the first network element has permission to receive data sent by the at least one second device.

The present application provides a security authentication method, device, and storage medium. The method includes: obtaining the local mobile phone number by taking a number through the gateway; performing verification of the local number; sending an authorization request to the operator authentication server and receiving an authorization credential returned by the operator authentication server; storing the relevant authorization information on the blockchain; sending the authorization credential to a third-party capability provider, and the third-party capability provider sends the authorization credential to the operator authentication server for authentication verification, and the operator authentication server returns the authentication result, and the relevant authentication information is stored on the blockchain; obtaining the login authorization of the terminal application based on the authentication result. It ensures traceability of the login, and improves the login security and convenience of users.

The invention provides a machine room operation and maintenance system and a machine room operation and maintenance method, and relates to the technical field of cloud computing. The machine room operation and maintenance system comprises block chain equipment and a plurality of machine rooms; the first machine room is used for splitting the first task into at least one subtask and broadcasting the first subtask to other machine rooms in the machine room operation and maintenance system; after first request information sent by the second machine room is received, the first request information is sent to the block chain equipment; the first request information comprises an identifier of the second machine room and current remaining resources of the second machine room; the block chain equipment is used for determining a target machine room for executing the first subtask according to the uplink resource value of the second machine room and the first request information, generating an authorization certificate for the target machine room, and controlling the target machine room to execute the first subtask according to the authorization certificate; a smart contract is stored on the block chain device, and the smart contract comprises an uplink resource value of each machine room in the machine room operation and maintenance system. According to the invention, the flexibility of task scheduling and the flexibility of resource utilization can be improved.

The invention relates to the technical field of data security, and discloses a trusted data space-based data desensitization method, which comprises the following steps of: in a trusted execution environment, analyzing data source metadata to obtain field semantic relevance and data consanguinity topology of the data source metadata; taking real-time context features of the data source metadata as nodes, taking the data consanguinity topology and the field semantic relevance as connection weight edges, and constructing a self-adaptive desensitization rule tree of the data source metadata; in the trusted execution environment, based on an authorization certificate of a user of the data source metadata and a data processing purpose, constructing a multi-party security computing protocol of the data source metadata; segmenting the desensitization rule set into distributed policy fragments based on the multi-party security computing protocol; performing parallel desensitization on a to-be-processed data source based on the distributed strategy fragment; according to the method, the adaptability and the accuracy of the desensitization rule are improved.

The embodiment of the invention provides a distributed data authorization method and system based on wearable equipment, and relates to the technical field of intelligent wearable equipment. According to the method, original data can be obtained through the wearable device, forced end-to-end encryption and desensitization are executed on the original data, and authorizable data are generated. And uploading the authorizable data to the decentralized storage network so as to cast an ownership certificate of the authorizable data through the decentralized storage network. When the data authorization is performed, a data authorization credential for the authorizable data may be casted based on the ownership credential, thereby transferring the data authorization credential in accordance with the authorization request. Through forced encryption and desensitization, privacy calculation is carried out on the premise that original data is not leaked, privacy security is guaranteed to the maximum extent, and it is ensured that a user has ownership to the data through an ownership certificate. Moreover, by casting a data authorization certificate, key authorization and on-chain recording of authorization are realized, and transparency and traceability of data authorization can be improved.