14 results about "Authorization Mode" patented technology

The invention discloses an authority management method and system for equipment flashing, a chip and an intelligent terminal.The method comprises the steps that when an authorization mode for equipment flashing is a quick start authorization mode, a boot loader is started; the client application initiates a first authorization authentication request via the first trusted execution environment client interface; the trusted execution environment core driver receives the first authorization authentication request and switches the operating environment of the processor from a common world to a secure world; the trusted operating system receives and analyzes the first authorization authentication request, and schedules an early trusted application to obtain equipment fingerprint information from the first storage partition; when the equipment fingerprint information passes verification, modifying the first authorization mark, and correspondingly modifying the second authorization mark stored in the second storage partition; and the intelligent terminal is switched into the factory mode. According to the method and the device, the original flashing port can be controllably opened, so that the risk of illegal flashing is avoided, and meanwhile, legal flashing operation is guaranteed.

The present invention provides an image processing device, etc., that can reduce the risk of the approval process being hindered due to the applicable approval method. [Solution] The authorization server comprises a control unit capable of performing authorization processing using multiple authorization methods, a storage unit for storing connection information to the authorization server, and an output unit for outputting screen information related to the authorization processing. When the user selects the authorization processing based on one authorization method using the connection information, the control unit determines whether the authorization server supports that authorization method. If the authorization server determines that it does not support the authorization method, it restricts the execution of the authorization processing using that authorization method. The output unit outputs a notification prompting the user to select an authorization method different from the authorization method.

This invention discloses a dynamic renewal system and method for permissions without fixed time limits, relating to the field of permission management technology. The system includes a business gateway, a permission database, a renewal decision engine, and an approval adaptation module. The business gateway is communicatively connected to the permission database, the renewal decision engine, and the approval adaptation module, respectively. The renewal decision engine is communicatively connected to the approval adaptation module. This system replaces the traditional static authorization mode by establishing dynamic renewal and continuous verification triggered upon access for permissions without fixed time limits. It can trigger risk assessment and status control of permissions in real time based on user access behavior, ensuring that permission status dynamically matches the user's actual business access needs. This fundamentally avoids the problem of permission drift leading to ghost accounts, achieving precise adaptation between business permissions and actual needs. It prevents the long-term disconnect between permissions and business needs in the traditional mode, making permission management closely aligned with actual business usage scenarios.

The embodiment of the present specification provides an authentication model construction method and device, a task processing method and device. The authentication model construction method comprises determining a distributed call link corresponding to a target service; analyzing the distributed call link to determine an authentication and authorization mode of a service node in the distributed call link and an association relationship between the service nodes; and constructing an authentication and authorization model of the distributed call link according to the authentication and authorization mode of the service node and the association relationship between the service nodes. The method analyzes the distributed call link corresponding to the target service, determines the authentication and authorization mode of each service node in the distributed call link, and according to the association relationship between each service node and other service nodes, an authentication and authorization model with a directed acyclic structure is made. Subsequently, the authentication and authorization model can be used to form a trusted level security authentication of the service link, and the security of the service is systematically improved.

The invention relates to the technical field of high-level information security and secrecy, in particular to a dynamic access control method and device based on multi-dimensional fusion analysis. The method comprises the following steps: receiving a computer access event, extracting a source IP address and an inherent risk score, matching a user ID based on the source IP address, and taking a user corresponding to the user ID as a target user; acquiring a plurality of original events associated with the user ID, and performing fusion analysis on the plurality of original events to generate a physical confidence coefficient; performing behavior analysis on the computer access event to obtain a behavior matching degree conforming to the normal behavior of the target user; bayesian fusion reasoning is carried out on the inherent risk score, the physical confidence degree and the behavior matching degree, and the dynamic credibility of the target user making the normal behavior at the correct position is obtained; and generating and executing an access control instruction according to a comparison result of the dynamic credibility and a trust threshold. The method can ensure that the authority moves along with the personnel, and eliminates the contradiction between a static authorization mode and dynamic physical reality.

The invention relates to the technical field of industrial host software, and provides an authorization permission detection method applied to industrial host software, which comprises the following steps: S1, finishing authorization system deployment on a host running the industrial software; s2, when the industrial software is triggered to run according to a preset time interval, the industrial software calls an authorization SDK interface function to initiate an authorization state verification request and an authorization SDK packaging request and then transmits the authorization state verification request and the authorization SDK packaging request to a kernel layer drive program; s3, the driving program calls a process protection module to detect the safety of a software operation environment, initiates an encryption calling request to the safety encryption hardware through the USB bus after confirming that no abnormity exists, and then returns a result to the driving program; s4, the drive program transmits the encryption result to the authorization SDK in a transparent manner, the SDK decrypts the encryption result to obtain a plaintext result and feeds the plaintext result back to the industrial software for operation, and the industrial software modifies an internal authorization flag bit according to the result; and S5, safety monitoring and connection verification are maintained in the whole detection process. The problem that a traditional industrial software authorization mode is prone to being counterfeited or cracked is solved.

The invention discloses an intelligent anti-photographing monitoring, blocking and terminal security sensing system, which comprises the following modules: a camera authorization and watermark control module, which is used for configuring a camera use authorization mode and desktop watermark prompt information display according to a security policy; the environment image acquisition and mode selection module is used for acquiring image data of the surrounding environment of the display screen of the terminal and selecting an identification mode; the AI behavior recognition engine module is used for extracting visual features, positioning shooting related equipment and generating shooting behavior judgment data and abnormal behavior confirmation data; the abnormal behavior handling module is used for executing handling operation when an abnormal behavior is detected; and the unlocking control and security audit module is used for unlocking the terminal after the exception is eliminated and generating an audit log and alarm information. According to the invention, an integrated processing flow of intelligent sensing, active blocking and safety auditing for preventing the photographing risk of the terminal is realized.

The application provides a password authorization mode improvement method and system based on big data and intelligent algorithms, relates to the technical field of big data, and comprises the following steps: extracting a behavior characteristic sequence of an object to be authorized, performing time sequence correlation analysis by using a dynamic trust evaluation model to obtain a trust measurement value, and generating a temporary authorization voucher bound with an identity label according to the trust measurement value. In the access process, the behavior deviation is compared in real time, and when the deviation exceeds the limit, the model is fed back to update the weight and the key strength is adaptively adjusted. The application realizes the dynamic and intelligent of the authorization process, and improves the security and adaptability of the access control.

The invention discloses a brain disease prevention information pushing system, and relates to the technical field of medical health information, and the system comprises the following steps: S1, collecting authorization; s2, the data flow direction is visible; s3, the user autonomously sets the authority; s4, setting data privacy; s5, evaluating a result; and S6, emotion monitoring. According to the brain disease prevention information pushing system, data transmission lines and destination node types are clearly presented in a visual mode, and in combination with line new and old distinguishing and node safety level marking, a user visually masters the data flow direction and eliminates authorized data destination blind areas; a differential authorization rule is set according to a historical security record of a destination node, a user is supported to flexibly adjust an authorization mode, data transmission of a low-security node is defaulted and limited, and the user is endowed with an absolute control right for data transmission; unique sensitive information such as an identity card number and a photo is encrypted, privacy security in the data storage and transmission process is ensured, and the risk of sensitive information leakage is avoided.

The application discloses an authorization method and device, a computing device and a storage medium. The method comprises the following steps: assigning, to a user in a first application, identification information required by the user for using a second application; receiving a target data acquisition request initiated by the second application; the target data acquisition request comprises to-be-verified identification information and application information of the second application; verifying whether a binding relationship exists between the to-be-verified identification information and the application information of the second application; and if it is verified that the binding relationship exists, authorizing the second application to use target data in the first application. In the above manner, the authorization method is easy to implement and has low development difficulty, and the time for verifying application permissions can be saved.

The invention discloses a digital asset protection method and device, equipment, a medium and a product, and the method comprises the steps: obtaining authorization metadata corresponding to a target digital asset based on a mixed authorization mode which is an authorization mode combining a physical lock with soft authorization; the target resource in the authorization metadata is verified; and if the verification is passed, loading the target digital assets in a target loading mode. According to the invention, through the authorization mode of combining the physical lock and the soft authorization, the flexible adjustment of the authorization strategy is realized, the business change can be responded without replacing the hardware, and the flexibility of authorization management is greatly improved while the safety base line is ensured.

This invention relates to a system for trusted transmission and reverse authorization processing of multi-party interactive data. The system includes a data sender that configures a security policy list based on the data receiver's access request and assigns a temporary key with an attached permission tag to the data receiver. The data receiver configures the data sender's hardware and software environment as a trusted execution environment. The data receiver and data sender jointly construct a trusted transmission channel based on the feasible execution environment and share a communication key. This invention also relates to a method, apparatus, processor, and computer-readable storage medium for trusted transmission and reverse authorization processing of multi-party interactive data. By employing the system, method, apparatus, processor, and computer-readable storage medium of this invention for trusted transmission and reverse authorization processing of multi-party interactive data, trusted transmission and reverse authorization of multi-party interactive data are achieved, ensuring trusted data transmission at the system security level and refining data access and usage permissions under the reverse authorization mode.

The present invention provides an image processing device, etc., that can reduce the risk of the approval process being hindered due to the applicable approval method. [Solution] The authorization server comprises a control unit capable of performing authorization processing using multiple authorization methods, a storage unit for storing connection information to the authorization server, and an output unit for outputting screen information related to the authorization processing. When the user selects the authorization processing based on one authorization method using the connection information, the control unit determines whether the authorization server supports that authorization method. If the authorization server determines that it does not support the authorization method, it restricts the execution of the authorization processing using that authorization method. The output unit outputs a notification prompting the user to select an authorization method different from the authorization method.

The application provides a kind of unified authorization and security verification system and method for software and dynamic library, belongs to software copyright protection and network security technical field.The system includes authorization management center, multi-dimensional fingerprint generation module, secure storage construction module, dual-mode authorization execution module and unified verification engine, by generating software fingerprint, hardware fingerprint and company data fingerprint to constitute multiple binding information, using embedded or independent file mode to securely store encryption certificate, support local and remote two authorization modes, and in software runtime, decryption, certificate chain verification and multi-dimensional fingerprint matching check are carried out.The application realizes unified authorization management for different forms of software, improves hardware binding strength and software tamper resistance ability, while taking into account production batch and on-site remote operation and maintenance needs, suitable for full life cycle security management and control in complex scenarios such as Internet of Things.