189 results about "Brute force" patented technology

The invention relates to the technical field of electric power data acquisition with an encryption function, and discloses an electric power data acquisition terminal with an encryption function and a method. By combining the environment data and the equipment state, the encryption process enhances the security and adaptability of data encryption. Environment and equipment data input ensures that encryption results are different, and potential safety hazards caused by static data sources are avoided. The data are reasonably combined through a seed generation formula, it is ensured that the seeds have enough randomness, and the brute force cracking risk is reduced. The key generation strategy generates a unique key through a seed, so that the attack resistance of the system is improved. The key matrix and random number generation strategy improves the unpredictability of the encryption algorithm. And dynamically updating the encryption matrix to prevent the encryption matrix from being cracked in long-term use. In the whole process, comprehensive protection of the data in acquisition, encryption and transmission is ensured, and the data is effectively prevented from being tampered or stolen.

The invention discloses a privacy-enhanced digital identity attribute selective disclosure and verification method, which is characterized in that a user does not need to provide hash values of all privacy information plaintexts when selectively disclosing privacy information, and the hash values of all the privacy information plaintexts are not required to be provided except the privacy information expected to be disclosed. And the other parts are multiple hash transformations of which the hash values disclosed for verifying the legality of the identity attribute information are all plaintext privacy information. Identity attribute hash is used as a leaf node of a Merkel tree to construct the Merkel tree, root hash is generated, a credential issuing party only signs the Merkel root hash, and a verification party only needs to verify the signature to prove the authenticity and integrity of the identity attribute. Salt value nodes are added in a Merkel tree, identity attributes and hash values thereof are hidden, the difficulty of brute force cracking and rainbow table attacks is increased, and identity information leakage is avoided. When the Merkel tree is constructed, brother nodes are added for leaf nodes of each identity attribute, when the identity attributes are selectively disclosed, other identity attributes can be effectively hidden, and leakage of identity information is avoided.

The invention provides a molecular identity authentication system and method based on DNA origami framework layered assembly. The molecular identity authentication system comprises a disclosed skeleton chain and a plurality of shared staple chains, the shared staple chain comprises staple chains shared by three groups of single bodies and staple chains shared in pairs, and the staple chains are used as secret keys to be distributed to three participants so as to prepare the three groups of single bodies respectively, and then the three groups of single bodies are combined and spliced into a tripolymer with a dot matrix pattern, so that multi-user collaborative layered chain type assembly is realized. According to the molecular identity authentication system based on DNA origami framework layered assembly, the system combination complexity is improved to the information theory security level, so that the biological information security protection capability is improved, and brute force cracking is prevented.

A system includes an originating client platform, a first intermediate client platform, and a bridge platform. A first electronic processor of the originating client platform is configured to generate an authorization request and transmit the authorization request. A second electronic processor of the first intermediate client platform is configured to receive the authorization request and determine whether the authorization request is malicious or not malicious. In response to determining that the authorization request is malicious, the second electronic processor is configured to store the authorization request in a data store, transmit an authorization request denial, and transmit an incident payload including details of the authorization request. A third electronic processor of the bridge platform is configured to receive the incident payload, generate a security profile based on the incident payload, and transmit the security profile to a second intermediate client platform.

The invention discloses an encryption circuit, an encryption method and a server, and the encryption circuit generates a dynamic encryption key through introducing a physical unclonable function, carries out the secondary encryption of initial encryption data through the key, can effectively improve the identity authentication and access control safety of a to-be-accessed module in the server, and improves the safety of the to-be-accessed module. Different from a traditional static password or secret key authentication mode, the dynamic encryption secret key generated based on the physical unclonable function is unpredictable, unique and difficult to clone, and the secret key does not need to provide a storage space for storage, so that even if a malicious device forges an identity or steals the secret key, the secret key can be stored in the storage space. Effective authentication information cannot be obtained through brute force cracking or phishing attack; besides, the verification process is further enhanced by a mechanism of comparing secondary encryption with reference encrypted data, and only a legal user can access the system, so that access of untrusted equipment is effectively prevented, and the security of the server and the integrity of the system are protected.

The invention discloses a dynamic authentication method for communication equipment and an optical module. The method comprises the following steps: the communication equipment judges whether the optical module is accessed or not; when the communication equipment judges that an optical module is accessed, first information of the optical module is read, and dynamic encryption data is generated according to the first information; the communication equipment writes the dynamic encryption data into the optical module according to a preset format; the communication equipment reads backup verification data generated by the optical module after the dynamic encryption data is written in; the communication equipment checks according to the backup check data, and judges whether the optical module is a legal optical module or not; and the communication equipment records and stores the first information of the legal optical module to complete dynamic authentication. According to the method, a dynamic authentication mode is adopted, the authentication data is dynamically generated while the authentication data is closely connected with key information of the equipment and the optical module, the authentication data is difficult to crack through modes of illegal clone reading, dictionary brute force cracking and the like, the safety is improved, and more guarantee is provided for the network quality.

Example embodiments provide systems and methods for increasing the cryptographic strength of an encryption or message-authentication-code-(MAC) generation technique. According to some embodiments, a MAC may be constructed around a shared secret (such as a random initialization number), thereby increasing strength of the MAC against brute force attacks based on the size of the shared secret. The MAC may be combined with randomized data, and may also be encrypted to further bolster the strength of the code. These elements (shared secret, MAC algorithm, and encryption algorithm) may be employed in various combinations and to varying degrees, depending on the application and desired level of security. At each stage, the cryptographic construct operates on the cyptographically modified data from the previous stage. This layering of cryptographic constructs may increase the strength of the group of contrasts more efficiently than applying any one construct with a larger key size or similar increase in complexity.

The invention discloses a low-frequency radio wave propagation phase statistical characteristic prediction method and related equipment, and the method comprises the steps: obtaining the random characteristic of the field intensity of radio waves propagated in a random layered waveguide model through an S-FDTD method based on the Taylor series approximation idea, constructing a constraint equation related to the amplitude and phase variance of a radio wave signal, and carrying out the prediction of the phase statistical characteristic of the low-frequency radio wave propagation. Secondly, a Taylor series approximation thought is introduced again, a plurality of sampling points which are in the same period and approach to zero are searched in a time domain waveform of an electric wave mean field, and then a nonlinear equation set is established at the same time according to a statistical result of field intensity of the sampling points to explore statistical characteristics of an electric wave propagation phase; the low-frequency radio wave propagation phase statistical characteristics are represented by using the average value and the standard deviation of the low-frequency radio wave propagation phase, the prediction of the low-frequency radio wave propagation phase statistical characteristics is realized, and finally, the phase average value and the variance of the signal under the random medium background are successfully obtained only through one-time simulation. According to the phase uncertainty measurement method, thousands of times of brute force simulation limitation of the Monte Carlo method is avoided, and the solving efficiency is greatly improved.

To provide an abnormality detection method, an abnormality detection program, and an abnormality detection system that are capable of easily and highly accurately detecting an abnormality in an object to be detected.SOLUTION: A plurality of vector analysis models VM is created by calculating α normal state feature amounts for each divided data BD obtained by dividing normal state record data SRD, extracting two feature amounts from the calculated α normal state feature amounts in a round-robin method, and performing machine learning using as input a plurality of normal state feature amount vectors STV consisting of combinations of the two extracted feature amounts. α detection feature amounts are calculated for each divided data BD obtained by dividing detection record data KRD. Two of the calculated α detection feature amounts are extracted using a round-robin method and a plurality of detection feature amount vectors KTV consisting of combinations of the extracted two is input into the vector analysis model VM, so as to calculate an abnormality score IS for the detection feature amount vectors KTV. A determination whether detection record data KRD is "abnormal" or "normal" is made based on the abnormality score IS.SELECTED DRAWING: Figure 2

Embodiments of the invention describe a computer-implemented method of analyzing an electronic version of a document. The computer-implemented method can include an architecture of machine learning sub-models that performs the global task of translating unstructured and semi-structured inputs into numerical representations that can be recognized and manipulated by a content-analysis (CA) sub-model without relying on brute force analysis. Embodiments of the invention achieve these results by separating the global task into auxiliary tasks and assigning each sub-model to at least one of the auxiliary tasks. The auxiliary tasks can include parsing the unstructured or semi-structured inputs into format types (e.g., lists, tables, figures, text, etc. of a PDF document), extracting features of the parsed document, and performing a computer-based CA on the extracted features. The sub-models are trained in stages and in groups, wherein both the stages and the groupings are based on the complexity of the sub-model's assigned task.

The invention discloses a multi-factor login authentication method and system based on a dynamic authentication chain, and belongs to the technical field of information security, and the method comprises the steps: defining a plurality of authentication factors and an associated authentication chain sequence through extensible configuration data; recording the current authentication step and the completion state of each step through a state machine object; realizing cross-request state synchronization based on a distributed cache storage session state; and intercepting a login request through a section controller, and dynamically driving a multi-factor authentication process according to an authentication chain sequence. According to the invention, flexible and safe identity verification is realized through configurable authentication process and state machine management, the code coupling degree can be reduced, the user experience can be improved, and the brute force cracking risk can be reduced.

The invention discloses an abnormal login detection method and device, equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: judging whether the current login time of a current login target user is within a normal login time range corresponding to the target user or not; and / or whether the current login failure times exceed an abnormal login threshold value corresponding to the target user is determined; the normal login time range is a normal login time period obtained by performing density clustering analysis on login time data in historical login data of different users by using a DBSCAN algorithm; the abnormal login threshold value is a threshold value determined by a distribution parameter obtained by performing statistical analysis on login failure times of different users in a preset time window based on historical login data; and if not, determining that the target user has an abnormal login behavior. According to the method and the device, abnormal login behaviors such as login at abnormal time by brute force cracking can be effectively identified and prevented, and meanwhile, the accuracy and the efficiency of abnormal login detection are improved.

The present invention relates to the field of network security technology, and discloses a method, device, equipment and storage medium for preventing URL parameters from being tampered with, wherein the method comprises generating a timestamp when receiving a business data string; determining a signature string according to the timestamp and the business data string; generating a URL according to the business data string, the timestamp and the signature string; and sending the URL to an operator, so that the operator can execute the business corresponding to the business data string after completing the verification of the signature string and the timestamp in the URL. The present invention can make the URL time-effective by adding a timestamp when generating the URL. Since violent tampering usually takes a long time, after the URL in the present invention has lost its time-effectiveness, when the URL is violently tampered with, it can also be judged whether the URL is valid by the time-effectiveness of the URL, thereby reducing the impact on the partners caused by modifying certain parameters in the URL after the URL is violently tampered with.

The present invention provides an end-to-end panoramic image stitching method, an electronic device, and a storage medium. The panoramic image stitching method comprises the following steps: acquiring pictures captured by multiple cameras of a vehicle; processing the multiple pictures to obtain camera data; and inputting the camera data, preset parameter data and weight data into a trained panoramic image stitching model to generate a panoramic image, wherein the parameter data is a coordinate mapping relationship between the pictures and the panoramic image, and the weight data is weights of the pictures in the panoramic image. The method can obtain a panoramic stitched view in an end-to-end manner by directly inputting camera data, parameter data and weight data into a stitching model, without intermediate transformations and brute-force matching. The method involves few model parameters, requires less inference time and less GPU computing power, achieves relatively high real-time performance, and is suitable for embedded platforms.

The invention provides an SSH brute force attack detection method and device. The method comprises the following steps: constructing a sample array; screening samples in the sample array by using a preset screening strategy to obtain reserved samples; extracting target statistical data of each reserved sample, and performing threshold judgment according to the target statistical data; and judging an SSH brute force cracking result according to a threshold judgment result. According to the method, a plurality of statistical characteristics, calculation characteristics and threshold value judgment methods are combined and used for detection, detection depending on single frequency or port characteristics is avoided, false alarms are reduced, and the detection accuracy is improved.

The invention discloses a network information security encryption method and system. The method comprises the following steps: converting network information data into a decimal sequence and constructing a matrix to be encrypted; based on uniformity parameters of elements in the matrix to be encrypted and feature difference values of adjacent rows, generating a reconstructed combined row set, and determining a basic unit row sequence and a basic unit column sequence through neighborhood complexity analysis; and performing multi-round replacement encryption on the basic unit rows and columns in combination with a dynamic random number generation algorithm. According to the network information security encryption method and system, dynamic matrix recombination is adopted, based on data uniformity parameter and neighborhood complexity analysis, self-adaptive adjustment of encryption granularity is achieved, compared with traditional fixed matrix encryption, brute force cracking resistance is improved, asymmetric fusion encryption is achieved, each round of replacement parameter is dynamically generated by an RSA public key, and the security of the network information security encryption system is improved. The AES-CBC mode is combined to form multi-layer protection, and the success rate of resisting man-in-the-middle attack is reduced.

The invention discloses a power grid upgrading mirror image data transmission method and system, and the method comprises the steps that a transmitting end generates a first key sequence and a second key sequence based on a preset iteration algorithm and two different pieces of initial iteration information; the sending end encrypts the power grid upgrading mirror image data based on the first key sequence and a first encryption algorithm to generate a first layer of encrypted data sequence; the sending end encrypts the first-layer encrypted data sequence based on a second key sequence and a second encryption algorithm to generate a second-layer encrypted data sequence; and the receiving end performs hierarchical decryption on the second-layer encrypted data sequence based on the first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrading mirror image data. Through the technical scheme of the embodiment of the invention, safe transmission of the power grid upgrading mirror image data is realized, the possibility that an encryption algorithm is cracked by brute force can be reduced, the transmission safety of the power grid upgrading mirror image data is improved, and the operation safety of a power grid is ensured.

Systems, computer program products, and methods are described herein for identification and verification of brute force attacks using hash signature segmentation and behavior clustering analysis. The present invention is configured to receive a plurality of access attempts and an associated plurality of hash values; determine a failure request load based on the plurality of access attempts; determine whether the failure request load meets a failure threshold, wherein, in an instance where the failure request load meets the failure threshold, separating the plurality of access attempts associated with the failure request load into a plurality of hash clusters; generate a behavior cluster for each hash cluster based on shared behavior data of the plurality of access attempts; and determine, based on the behavior cluster for each hash cluster, a likelihood of misappropriation for each access attempt of the plurality of access attempts.

A method is provided for detecting proximity between objects using threshold based clustering. The method includes receiving object data of a plurality of objects in a space to be monitored, from one or more data capturing devices disposed in a space, clustering the object data into one or more clusters, based on a predetermined threshold distance, thereby reducing the search space, and processing the one or more clusters using brute force to identify the plurality of objects which lie within the predetermined threshold distance of each other, thereby identifying the plurality of objects that are at risk of collision.

The present invention relates to a novel method for protecting encrypted information against decryption attempts by quantum artificial intelligence. The invention is based on the prior modification of the encrypted information so that a decryption attempt results in an incorrect solution or that several decryption attempts result in solutions plausible to quantum artificial intelligence. Thus, even the most powerful artificial intelligence, even one powered by quantum computing, can generate either an incorrect solution or a large number of plausible solutions without being able to determine which one is correct. The method described in the present invention represents a significant advance in the field of encryption, rendering data impenetrable to decryption attempts by the most sophisticated quantum artificial intelligence systems. Abstract figure: Fig. 1

The invention relates to the technical field of network intrusion detection, and discloses an RDP brute force cracking detection method and device, and the method comprises the steps: obtaining transmission data, and determining whether the transmission data is an RDP data flow or not through a preset method; when the transmission data is the RDP data stream, determining an RDP protocol version corresponding to the RDP data stream; when the RDP protocol version of the RDP data stream is a first version, detecting whether brute force cracking exists between an RDP server and a client by adopting a first detection method; and when the RDP protocol version of the RDP data stream is a second version, detecting whether brute force cracking exists between the RDP server and the client by adopting a second detection method. According to the method provided by the embodiment of the invention, the corresponding detection method is determined according to the version of the RDP protocol, and whether brute force cracking exists between the RDP server and the client can be more easily detected, so that the accuracy of RDP brute force cracking detection is improved.

The invention discloses an identity verification method and system, and the method comprises the steps: generating a verification result through a verification algorithm after an identity verification server receives an identity verification request; when the verification result is successful, generating a legal identity certificate; and when the verification result is failure, generating a counterfeit identity certificate, and generating at least one of counterfeit reasonable data, counterfeit reasonable authority and counterfeit reasonable abnormity. The method has the core advantages that fake reasonable information is returned when verification fails, so that illegal visitors cannot deduce correct identity information by using failure feedback and cannot distinguish the authenticity of acquired data, authority or abnormal prompts, illegal behaviors such as library collision attacks and brute force cracking are effectively avoided, and the safety of the visitors is improved. The defect that key information is leaked due to failure feedback in the traditional identity verification technology is overcome, and the security of system data and functions is remarkably improved.

The present invention provides a web application protection method, system, and computer-readable storage medium. The method comprises: a front-end sending a data request to a back-end, the data request carrying a uniform resource locator (URL) and parameter information; upon receiving the data request, the back-end parsing the parameter information to obtain corresponding parameter values; and the back-end generating corresponding parameter images based on the parameter values, and saving the parameter images to a preset database. By graphically representing parameter values, the present invention can avoid web application risks caused by inserting malicious code into parameters, effectively defend against attacks such as cross-site scripting, SQL injection, file uploads, and brute force attacks, thereby improving the security of web applications and achieving comprehensive protection for web applications. This addresses the problem that existing web application protection methods lack comprehensive protection for web applications.

The invention discloses a router Wi-Fi anti-brute force cracking function test method and device and a computer readable storage medium, and the method comprises the steps: carrying out the first simulation access and the second simulation access of a to-be-tested router Wi-Fi according to a preset first parameter and a preset second parameter, the Wi-Fi connection password in the first parameter is different from the Wi-Fi password of the router, and the Wi-Fi connection password in the second parameter is the same as the Wi-Fi password of the router; and generating an anti-brute force cracking function test result of the router Wi-Fi according to the first access state of the first simulation access and / or the second access state of the second simulation access. According to the invention, a self-adaptive testing scheme for the anti-brute force cracking function of the router Wi-Fi is realized, the testing efficiency and the testing precision are improved, the security and protection requirements of the router Wi-Fi are met, the testing steps are simplified, and the cost of manpower and material resources is reduced.

Methods, systems, and devices for access management are described. A software platform may identify devices of a botnet based on a cluster score associated with a device characteristic. For example, the software platform may receive a request from a device to access an application. The software platform may determine a cluster score for the characteristic of the device. The cluster score may be based on a link between the device and a list of devices (e.g., devices of a botnet). If the cluster score satisfies (e.g., exceeds) a cluster score threshold, the software platform may deny the access request. In some examples, the cluster score may be determined using machine learning techniques. Based on determining the cluster score, the software platform may efficiently identify devices of the botnet and prevent brute force attacks, which may improve reliability of access for users of the application.

The invention discloses an E-mail encryption system based on data privacy security password-free login and automatic key exchange, and particularly relates to the technical field of E-mail encryption, which comprises the following steps of: S1, registering an E-mail address; s2, an email box login process; s3, sending an E-mail; and S4, receiving the E-mail. According to the method, a password authentication system is abandoned, login verification is carried out in a mail certificate verification mode, and vulnerabilities, including easy forgetting of passwords, insufficient password strength, easy library collision attack, easy brute force cracking and the like, of a password system are avoided. Meanwhile, the S / MIME protocol encryption process is supported in the system, third-party mail client software does not need to be installed, and the whole encryption and decryption process can be completed in the system. The use difficulty of a user is reduced, and the usability is improved. According to the invention, automatic public key exchange is realized in the system, the process of actively acquiring the public key of the opposite side is avoided, and great convenience is brought to the user.

The application discloses a kind of mobile terminal operating system information protection methods based on hardware certificate, comprising the following steps: one, in boot partition and recovery partition using asymmetric encryption algorithm write mutual certificate system of confirmation;Two, whether through boot partition or recovery partition start is needed to ensure the integrity of another partition.Current mobile terminal operating system can be read by the system partition file in the way of writing the third party system that can be started in recovery partition, there are mobile terminal operating system files directly read, brute force cracking user password authentication and other security problems, all the startable partitions of the system are introduced into the certificate using asymmetric encryption algorithm in the application, only the certificate and the partition are complete, the system can normally run, thereby preventing the system from being maliciously tampered with, ensuring that the user cannot obtain system root permissions and cannot modify system files, with higher security and convenience.

The invention relates to the technical field of image processing, in particular to an MLCC metallographic microscopic image splicing method and system for repeated textures, and the method comprises the following steps: S1, obtaining a first image and a second image; s2, carrying out exhaustion matching by adopting a violent matcher to obtain an initial matching point pair set; s3, performing mismatching elimination processing on the initial matching point pair set to obtain a final inner point matching set; s4, calculating an affine transformation matrix between the first image and the second image; s5, aligning images in the image sequence in the affine transformation matrix by adopting a chain accumulation transformation mode to obtain a third image, and performing exposure compensation processing on the third image to obtain a fourth image; s6, an optimal path search algorithm is adopted to determine a splicing seam with the minimum visual cost in the overlapping area of the fourth image, feathering fusion is carried out along the splicing seam, and a fifth image is obtained; s7, cutting the fifth image to obtain a target spliced image; and the problem of matching fuzziness caused by repeated textures is effectively solved.

This technology is applied in the field of network security. This invention provides a method and apparatus for defending against SSH brute-force attacks through log analysis. The purpose of this invention is to solve the problem of inefficiency in existing security defense measures when they cannot cope with brute-force attacks. The main solution includes: acquiring security logs and system logs from monitoring devices and providing them to the perception module; acquiring the attacker's source IP address, username, and time; the perception module recording the attack source IP address, username, and time information in memory and performing statistics within a set time period; querying third-party professional threat intelligence to return the attack source IP address attribution information and threat score; the log threat analysis module defining the danger level of the brute-force threat based on the attack source IP address and threat score; and implementing different corresponding response measures based on the risk identification results of the threat analysis module.