66 results about "Authorization documentation" patented technology

The invention provides a service authorization method and device based on a single device fingerprint, equipment and a medium, and relates to the technical field of information security. The method comprises the following steps: acquiring single-device fingerprint information of a management server of a to-be-deployed big data platform; according to the single-device fingerprint information and multi-dimensional authorization information for the big data platform, a pre-generated private key is adopted for encryption, and an authorization file is generated; and sending an authorization file to a management server, decrypting the authorization file by using a public key corresponding to the private key by the management server, and performing authorization verification of the big data platform on the management server and a plurality of distributed servers of the management server according to the decrypted single-device fingerprint information and the decrypted multi-dimensional authorization information, and the plurality of distributed servers are used for deploying a plurality of service modules of the big data platform. According to the invention, refined authorization for the big data platform can be realized.

The invention discloses an access authentication function control method and device, equipment and a storage medium, and belongs to the technical field of vehicle control. The control method of the access authentication function comprises the following steps: receiving a closing request for closing the access authentication function of a vehicle; under the condition that the authorization file exists in the vehicle, the closing request is verified according to the authorization file, the authorization file is used for closing the access authentication function when the closing request meets the condition, the authorization file is generated by the production equipment and written into the vehicle, and a copy of the authorization file in the production equipment is deleted after the authorization file is written into the vehicle; the production equipment is appointed equipment when the vehicle is in a manufacturing and service state; and controlling the access authentication function according to a verification result after the closing request is verified. By writing the authorization file in the vehicle, the access authentication function can be closed when the closing request meets the condition, so that the complexity of accessing the external equipment to the vehicle can be reduced, and the security of a vehicle system and data can be ensured.

The invention provides an offline authorization method and device supporting dynamic configuration, and relates to the field of software authorization certification, and the method comprises the steps: obtaining an encrypted authorization file; when the application program is started, extracting an authorization strategy parameter in the encrypted authorization file; and calling the configured public key to verify the signature field and the authorization strategy parameter by adopting the configured authorization authentication SDK, if the verification is passed, verifying the authorization validity period, the equipment binding identifier, the calling times and the to-be-called function, and if the authorization validity period, the equipment binding identifier, the calling times and the to-be-called function all pass the verification, calling the to-be-called function by adopting the configured public key to verify the signature field and the authorization strategy parameter. If yes, starting authorization passing information is returned to the application program. According to the method, the encrypted authorization file containing the service customization authorization strategy parameter and the signature field is obtained, signature verification is completed in combination with the authorization authentication SDK and the public key, authorization legitimacy is ensured through multi-dimensional verification, and the method has remarkable technical advantages and practical value.

The application discloses a kind of authorization method and system based on multi-factor binding device and host computer software, it is related to embedded device security and software authorization management technical field, and authorization method includes the following steps: S1: upstream vendor securely solidifies core identity information to the read-only storage area of device by factory programming procedure, S2: upstream vendor generates authorization file for device by binding authorization management procedure according to the authorization data of primary customer, S3: primary customer uses the authorization file obtained from upstream vendor, and performs binding operation on device by device binding procedure;With device to establish communication, S4: end user connects host computer software and device, controls device to run;Authorization system includes factory programming procedure, binding authorization management procedure, device binding procedure, host computer procedure.The beneficial effects of the application include realizing the leap from "two-dimensional binding" to "multi-dimensional binding", and providing more control granularity and flexibility.

The invention discloses a vPLC authorization method based on a docker container, and relates to the technical field of virtualization and containerization, the vPLC container is deployed in host machine equipment of a client site, a secondary server collects operation environment characteristics of the vPLC container, encrypts the operation environment characteristics and then sends the operation environment characteristics to a primary server, then the primary server generates an authorization file code according to the characteristics and records the authorization file code, and the authorization file code is sent to the host machine equipment. The second-level server downloads the authorization file and pushes the authorization file to a container mounting directory, the vPLC container reads the authorization file under a mounting folder when running, and operation is performed according to a result and authorization duration after verification. According to the scheme, the problem that traditional hardware authorization cannot penetrate through a virtualization layer management and control container is solved, it is ensured that the authorization state of a single container is independent and controllable, meanwhile, accurate management of the whole life cycle of authorization is achieved, and the requirement for freely deploying equipment on an industrial site is better met.

The invention discloses a software authorization management method, system and device, a medium and a product, and the method comprises the steps: a platform integration party responds to a software installation request, and after verification that an installation configuration environment meets a preset configuration condition, an authorization request file containing software authorization use time and a reduced-order model generation number is generated; sending the authorization request file to a software developer, so that the software developer generates an authorization file according to the authorization request file; receiving an authorization file returned by the software developer through the platform integration party, and performing authorization activation on software corresponding to the software installation request; generating a reduced-order model through the software after authorization activation by a platform integration party under the authorization use constraint of the software authorization use time and the generation number of the reduced-order model; a platform integration party responds to a model exporting request of target user side equipment, and an order reduction model is exported to the target user side equipment, so that the problems of model abuse, pirate diffusion and unclear ownership of rights and interests are avoided.

The invention discloses a method and a system for managing software based on an encryption lock, and belongs to the technical field of information security. The method comprises a process that the slave encryption lock initiates software authorization to the master encryption lock and a process that the sub encryption lock operates software encrypted by the master encryption lock through an authorization file. A hierarchical authorization architecture is adopted, authorization management of the software is achieved, the software is safely created and encrypted through the master encryption lock, the use right of the software is authorized to the slave encryption locks, the number of the slave encryption locks can be multiple, flexible management of the authorization states of the slave encryption locks is achieved, and the security of the software is improved. And the controllability of software authorization and the flexibility of software use are enhanced.

The invention provides a visual displacement program encryption authorization method and system, and the method comprises the steps: constructing a device identifier based on a camera serial number and a USB flash disk serial number, and calculating a first device identifier abstract value to generate an authorization request file; generating a public key and a private key through a preset key algorithm to perform signature encryption on the first equipment identifier abstract value to obtain an authorization code, and storing the authorization code in an authorization file; when the visual displacement program is started, reading a current camera serial number, a current USB flash disk serial number and a current authorization file, and calculating a second equipment identification abstract value; carrying out decryption verification on the current authorization file through the public key and the private key to obtain a decryption verification value; and based on the decryption verification value, if the second equipment identification digest value is consistent with the first equipment identification digest value, authorizing the operation of the visual displacement program through the private key. According to the method, encryption authorization is performed on the visual displacement program in combination with a multi-serial number authorization mechanism and a multi-encryption mechanism, and the operation safety of the visual displacement program is improved.

The invention provides a software license authorization method and device, equipment and a medium, and the method comprises the steps: generating a blank authorization file, and copying the blank authorization file into a first operation environment; obtaining file creation time, and generating a random timestamp difference; calculating to obtain file starting time; sending the random timestamp difference and the file starting time to an authorization server, and verifying the legality of the operating environment; if yes, the random timestamp difference and the file starting time are stored in a blank authorization file, and a legal authorization file is obtained; and authorization authentication is carried out on the to-be-authorized software. According to the application, the blank authorization file is generated and verified in the first operation environment, the unique authorization fingerprint value is obtained by using the random timestamp difference and the file starting time, and the corresponding relation is established between the value and the authorization code, so that the commercial software is controlled to only operate in the legal operation environment, and illegal abuse is avoided. Meanwhile, the method is widely applicable to various operating environments, and breaks through the limitation of a traditional method on the operating environments.

The invention discloses a loan service application method and device, electronic equipment and a storage medium, and relates to the technical field of internet finance, and the method comprises the steps: obtaining a unified social credit code and contact information of an enterprise, and transmitting a registration request to a server to complete account registration; logging in a server based on the registered account information; guiding the user to sequentially complete tax information authorization and electronic signing of a credit investigation authorization file; using the server to generate and return a loan amount to the client based on an authorization success result; guiding a user to input loan information by using a client, and completing electronic signing of a loan contract and a guarantee contract; and performing signing processing on the successfully signed loan contract and guarantee contract by using the server, and executing loan expenditure in response to an expenditure instruction of the user. According to the invention, through registration, quota calculation and signing of the loan application, the technical problems of flow splitting, tedious operation, low efficiency and incoherent experience of the existing online loan business can be effectively solved.

Embodiments of the present application disclose a vehicle diagnosis method and related equipment, which are used for vehicle diagnosis in the case of improving the convenience of vehicle diagnosis. The method comprises the following steps: obtaining application information for closing vehicle on-board diagnosis authentication sent by a diagnosis equipment, the application information comprising various application parameters; if it is verified that the various application parameters meet a preset legality standard, the legality of the vehicle and the diagnosis equipment is determined by manually auditing the various application parameters; after the manual audit is passed, an authorization file for closing the on-board diagnosis authentication is generated based on the various application parameters, the authorization file is sent to the diagnosis equipment, so that the diagnosis equipment sends the authorization file to a corresponding vehicle ECU, and the vehicle ECU executes the operation of closing the on-board diagnosis authentication in the authorization file after verifying that the authorization file is legal.

This invention discloses a method and system for managing software based on encryption locks, belonging to the field of information security technology. The method includes a process where a primary encryption lock initiates software authorization to a master encryption lock, and a process where a secondary encryption lock runs the software encrypted by the master encryption lock through an authorization file. This invention employs a hierarchical authorization architecture to achieve software authorization management. The master encryption lock securely creates and encrypts software, and then authorizes the use of that software to secondary encryption locks. Multiple secondary encryption locks can exist, enabling flexible management of the authorization status of the secondary encryption locks and enhancing the controllability of software authorization and the flexibility of software use.

The invention discloses a method, system, electronic device, and storage medium for managing access permissions on a vehicle-to-everything (V2X) platform. The method includes: pre-setting a platform authorization file to authorize platform operators to use the V2X platform; initializing the V2X platform using the platform authorization file and generating a master administrator account for the platform operator; logging into the V2X platform through the master administrator account to authorize manufacturers to use the V2X platform's functional permissions and create manufacturer administrator accounts; and logging into the V2X platform through the manufacturer administrator accounts to authorize users to use the V2X platform's functional permissions and create user accounts. This invention employs a multi-level user object authorization control method and adds data item access permission control to the platform's functional permission control, making it more flexible and rigorous.

The invention relates to an off-line software authorization protection method based on USB hardware binding and multi-dimensional verification. By introducing dual binding of USB hardware and host hardware, mutual mirror image backup of an authorization file and a time recording file and three-party consistency cross check, a differential processing strategy based on a use scene, self-adaptive dynamic verification frequency, a one-time repair key mechanism and multi-layer anti-reverse and safe exit measures, the security of the time recording file is improved, and the security of the time recording file is improved. According to the method, the defects that in the prior art, authorization files are easy to copy, time can be returned, use scenes cannot be distinguished, exceptions cannot be recovered, core codes are easy to crack and the like are effectively overcome, the authorization safety, reliability and cracking resistance in the offline environment are remarkably improved, and the requirements of the high-safety field for complete offline, controllable migration and comprehensive protection are met.

The application provides an identity credential management method and device, electronic equipment and readable storage medium, and belongs to the technical field of communication. In the case that a target application requests upgrading, the application obtains upgrading information corresponding to the target application, wherein the upgrading information comprises upgrading data and an upgrading mode; controls the target application to generate a corresponding authorization file based on the upgrading mode; after generating the authorization file, upgrades the target application based on the upgrading data; and controls the upgraded target application to request a corresponding identity credential from a corresponding application background based on the authorization file. Through the present solution, the upgraded target application can request a corresponding identity credential from the application background based on the authorization file generated by the target application before upgrading. Thus, the application program can intelligently obtain an identity credential after updating and upgrading, thereby improving the efficiency of obtaining an identity credential.

This invention discloses a protection method and system against version rollback attacks, belonging to the field of automotive information security technology. The method includes: the device sending a version rollback request to the server; the server collecting version rollback information based on the request, and sequentially determining the upgrade package, calculating a first hash value, generating an identity identifier, calculating a first counter value, setting the operation type, obtaining a first timestamp, and assembling a rollback version authorization file structure; signing the rollback version authorization file structure, generating a signature value, and constructing a rollback version authorization file; sending the upgrade package and the rollback version authorization file to the device; the device sequentially performing multiple security checks on the upgrade package and the rollback version authorization file; and executing the version rollback upon successful verification. This invention integrates multi-dimensional information and technology to construct a comprehensive protection system, effectively protecting against version rollback attacks and improving the security and reliability of the version rollback mechanism.

The invention discloses an encryption and authorization system and method for a microscope trial prototype, and relates to the technical field of medical instruments. The system comprises a microscope body, an identity binding module, an authorization code generation module, an encryption module, an authorization verification module, a function control module and a manufacturer database, wherein the microscope body comprises a main control circuit board and a camera board which are communicated through a serial port. A camera network MAC address is used as a unique identity label, and binding and two-way identity verification of a machine code and the MAC address are realized; a long-term / short-term hierarchical authorization code is generated based on the MAC address and the authorization deadline, and a unique authorization file is generated through AES-128 encryption, base64 serialization and serial number verification; and multi-dimensional verification of the MAC address, the authorization deadline and the serial number is completed after startup, a core function is started if verification passes, and shutdown and prompting are carried out if verification fails. And remote monitoring, abnormal log and expiration reminding functions are newly added, so that undeadline trial and hardware replacement avoidance behaviors are effectively prevented, a trial-to-sales scene is adapted, the rights and interests of manufacturers are guaranteed, and the use experience is improved.

The application provides an authorization method, an electronic device and a computer readable storage medium. The method comprises the following steps: configuring multiple types of digital certificates, wherein the digital certificates comprise at least one management type digital certificate and at least one ordinary type digital certificate; issuing an authorization file to a terminal through the authority of the management type digital certificate, and backing up the authorization file; obtaining an operation request reported by the terminal; verifying the legality of a first ordinary type digital certificate through the authorization file; in the case that the first ordinary type digital certificate is legal, verifying the legality of the operation request through a first digital signature; and in the case that the operation request is legal, performing an operation corresponding to the operation request. Through the method, when the authority of the terminal needs to be changed, the authorization file needs to be reissued to the terminal through the authority of the management type digital certificate, and the identity and authority of each terminal are re-authenticated according to the updated authorization file in the authentication stage, so that the flexibility of re-authorization when the authority of the terminal is changed is greatly improved.

The invention provides an authorization control method and device, electronic equipment and a storage medium, and the method comprises the steps: starting operation according to a received starting instruction, and detecting whether an internal file exists or not; wherein the authorization information comprises a first identifier of the authorization server, an authorization period, the number of the authorization access devices and a second identifier of each authorization access device; the internal file is only accessed by a specified program; the internal file is generated by decrypting the authorization file; if the internal file exists, checking that the first server and each first device are legal according to the internal file; and allowing the first server and each first device to operate normally. According to the mode, an internal file comprises a first identifier of an authorization server, an authorization time limit, the number of authorization access devices and a second identifier of each authorization access device, and the first server and each first device are checked according to the content in the internal file; the authorization deadline, the first server and the accessed first equipment can be accurately managed and controlled, and the safety and accuracy of authorization are improved.

The present disclosure provides a running method, an application program running device, an electronic device and a non-transitory computer readable storage medium, relates to the technical field of computers, and particularly relates to information flow technology. The specific implementation scheme is as follows: in response to a starting operation on a target application program, it is determined whether the target application program has superuser permission; based on the permission determination result, the target application program is run according to a copy directory of an executable file directory; wherein the copy directory includes a superuser permission authorization file, and the copy directory is located in a non-system volume. According to the technology of the present disclosure, the compatibility and universality of the running mode of application programs with different permissions are improved.

The invention discloses a storage medium authentication method, system and device for vehicle flashing and a medium. The storage medium authentication method for vehicle flashing comprises the steps that medium parameters of a storage medium are read through a diagnostic instrument, and the medium parameters at least comprise the serial number of the storage medium; an authorization authentication file is generated according to the medium parameters, and the authorization authentication file at least comprises the serial number and an authorization time period; sending the authorization authentication file to a PKI system, so as to sign the authorization authentication file after the authentication of the authorization authentication file by the PKI system is passed; and receiving a signed authorization file returned by the PKI system, and writing the signed authorization file into the storage medium. By adopting the method and the device, the safety of writing operation of all the external equipment such as the storage medium on the in-vehicle controller is ensured, the national standard requirement is met, the safety certification of the external equipment such as the storage medium is ensured, and the authenticity and the traceability of the writing equipment are ensured.

This application discloses a USB flash drive binding method, system, and device for an offline broadcast control system, solving the problems of playback source loss of control and chaotic management caused by the inability of USB flash drives to securely bind with playback devices in offline environments. The method includes: an authorized terminal obtaining the USB flash drive's hardware identification data, encrypting and generating authorization verification data according to a key policy, and writing it to the USB flash drive's authorization file; after detecting the USB flash drive, the playback device reads its hardware identification and authorization file, encrypts and generates verification data according to the same policy, and determines the legality of the USB flash drive by comparing the two; if legal, broadcast control is executed. This application achieves highly secure and robust offline USB flash drive device binding and management.

This application relates to a multimedia file playback processing method, apparatus, electronic device, and storage medium. The method relates to cloud computing and includes: in response to a playback operation, sending a playback request for a multimedia file to a multimedia server; receiving the playback address of the multimedia file from the multimedia server in response to the playback request, and an authorization request tag issued by a digital rights management (DRM) license server. The method loads an encrypted multimedia file based on the playback address, and simultaneously requests an authorization file from the DRM license server based on the authorization request tag; parses the authorization file to obtain a key; decrypts the encrypted multimedia file using the key; and then plays the decrypted multimedia file. This method can obtain the authorization file while loading the encrypted multimedia file, thus protecting the legitimate interests of the copyright holder and avoiding unnecessary waiting time during playback, further improving the efficiency of multimedia file playback processing.

Embodiments of the present disclosure provide a distributed cluster-based software authorization method, device, equipment and medium, which are applied to the technical field of computer application. The method comprises receiving a generation request of an application code of a current client, and obtaining an authorization file and an application file; in response to the absence of the authorization file and the application file, generating a first application code based on a preset algorithm; encrypting and salting the first application code to obtain a first ciphertext; and returning the first ciphertext to the current client. In a full-containerized storage-computation separation environment, by constructing a dispersed persistent combined application code and a complex logic design of a combination means, the software application code is dispersedly stored, and the authorization permission problem of complex and variable cluster information is solved.

The application discloses a method for debugging an application in a local Kubernetes (K8s) cluster, comprising modifying a registry center of a Kubernetes (K8s) cluster, so that an application outside a container and an application in the container can access the registry center; setting a gateway in a container of the Kubernetes (K8s) cluster, and providing an access interface of the gateway, which is used for calling access by the application outside the container; a routing configuration in the gateway is configured to provide an access path of the application in the container; when local debugging of the application outside the container is performed, the routing configuration provided by the gateway is acquired through the access interface of the gateway; the access path of the application in the container is acquired from the routing configuration, and then the application in the container is called, so that debugging of the application outside the container is realized. In the case that no additional software is installed and no k8s container authorization file is exposed to a developer, the local application of the developer can be connected to other dependent applications in a container in a test environment, so that the application can be debugged locally during development. The development efficiency is effectively improved, and the convenience is beneficial to promotion.

Embodiments of the present disclosure disclose a software file, a software running method and an apparatus related thereto, the method includes: obtaining a booting request to boot the working software of the software file; booting the bootstrap program of the software file according to the booting request and allocating an encryption memory for an encryption container corresponding to the software file; instructing the security processor through the bootstrap program to obtain the first decryption key of the encryption container disk image file and sending the first decryption key to the encryption container, so that the encryption container decrypts the encryption container disk image file to obtain the encryption container disk image and the working software stored in the encryption memory; running the encryption container disk image to boot the encryption container; and booting the working software when a local authorization file in the encryption container disk image is legal.

The invention relates to the field of network technology and security, provides an application program interface request access method, device and equipment, and is used for solving the problems that the code complexity of a client is relatively high and sensitive information is easy to leak in the process of calling an application program interface by the client in the related technology. In response to an application program interface authentication request of the client, obtaining an authorization file generated by the application program interface server through the access security device, sending a user credential authentication request to the application program interface server to obtain an authorization token corresponding to the client, and in response to an application program interface calling request of the client, sending a user credential authentication request to the application program interface server to obtain the authorization token corresponding to the client; and generating an application program interface proxy request and sending the request to the application program interface server, and finally, receiving a response message of the application program interface server and sending the response message to the client. According to the embodiment of the invention, the user certificate authentication step is executed through the access security device, so that the code quantity of the client is reduced, and sensitive information leakage is avoided.

The invention provides an authorization management method, which comprises the following steps: in response to a screening instruction, screening available authorization codes meeting a screening condition from authorization codes pre-recorded in a platform, and screening online equipment meeting the screening condition from equipment managed by the platform to obtain an available authorization code list and an online equipment list; determining a target authorization code and target equipment according to a selection operation of a user on the list; in response to the activation instruction, collecting a DID file of the target device, and calling an API interface of the License platform based on the DID file and the target authorization code to submit an activation request; and in response to the import instruction, obtaining an authorization file generated by the License platform according to the activation request, and importing the authorization file into the target device and activating the authorization file. According to the method, a full-closed-loop authorization management process is constructed in a management platform, one-stop automatic management from authorization code screening and activation to authorization file issuing is realized, and the large-scale equipment authorization efficiency is remarkably improved.

The application provides a data import method, system, electronic device and computer readable storage medium, comprising: importing serial number files of each diagnostic equipment connected with a computer into corresponding category folders respectively; decompressing diagnostic data compression packages pre-existing in the computer into each category folder to obtain first diagnostic data files; generating authorization files by using the serial number files and the first diagnostic data files in each category folder respectively; importing the diagnostic data compression packages pre-existing in the computer into each diagnostic equipment and obtaining second diagnostic data files by decompression; and executing a batch import command on all authorization files to import each authorization file into the second diagnostic data files in the corresponding diagnostic equipment. The technical scheme solves the problem of single and slow import process of diagnostic data in the prior art, thereby affecting the technical problem of the diagnostic equipment.

The invention relates to the technical field of automotive electronics, and discloses a controller flashing method based on VCU authorization in the field of buses, which is characterized in that a VCU is used as a unique flashing authorization center of the whole bus, and diagnosis equipment does not directly perform secure access interaction with a target controller, but applies for authorization to the VCU, so that the whole bus is flashed. After the VCU comprehensively judges the identity of the diagnostic equipment, the vehicle state and the legality of the flash package, a unified agent completes the safe unlocking operation of all target controllers, the diagnostic equipment can perform actual data transmission only after obtaining the authorization of the VCU, and only the operation with an effective authorization file can be executed, otherwise, the ECU refuses the connection or write-in, and the operation is completed. Any person capable of being connected with the diagnosis port can be effectively prevented from flashing, and the vehicle is easy to be maliciously controlled or swiped into an unofficial version.