118 results about "Certificate" patented technology

The invention relates to the technical field of data processing, in particular to a block chain-based data sharing system, which comprises a field path hash index module, a permission entry sorting module, a path compliance judgment module, a certificate state updating and verification module and a joint permission confirmation module. According to the method and the device, the multilevel structure information of the field path chain is extracted from the data sharing calling request, salt coding is performed in combination with the calling party address, and hash processing is performed, so that unique mapping of the field path is realized, field identification fuzziness and path conflict are effectively avoided, and accurate positioning of sharing operation is ensured. By means of path structure analysis and access frequency normalization processing, a field entry weight sequence is established in combination with a scoring mechanism, field access entries can be sorted according to actual use frequency and structure hierarchy, and authorization judgment efficiency is improved. A task responsibility number and a timestamp are extracted from an access behavior track, a responsibility chain segment is established, and abnormal changes in a responsibility path can be effectively recognized.

The invention relates to the technical field of power equipment state monitoring and data security, and discloses a power equipment supply chain data sharing method based on a block chain, and the method comprises the following steps: S1, data collection and standardization: collecting sensor data of power equipment in real time, and carrying out the standardization processing; s2, dynamic entropy threshold calculation: dynamically calculating a data entropy threshold based on an information geometry theory; s3, verification mode decision making, wherein quantum chaos random walk data sampling or full-amount zero-knowledge proof verification is triggered according to entropy threshold decision making; and S4, anti-tamper certificate construction: constructing an anti-quantum hash chain for the sampled data and carrying out distributed anti-tamper coding. According to the method, through dynamic entropy threshold adaptation and quantum chaos sampling, accurate improvement of anomaly detection sensitivity is realized, based on Reed-Solomon fragmentation and algebraic verification, it is ensured that data can still be completely recovered when being partially tampered, and security and throughput efficiency are balanced by using block chain evidence storage and improvement of PBFT consensus.

The invention belongs to the field of platform management, and particularly discloses an engineering bidding and tendering platform management method and system, and the method comprises the steps: storing and obtaining a demand description text from a bidding project chain through a block chain node, extracting a keyword sequence through natural language processing, and obtaining a bidding demand feature vector; according to the bid invitation demand feature vector, performing vector conversion processing on qualification certificate data submitted by a bidding enterprise, judging the similarity between the converted vector and the demand feature vector, and if the similarity exceeds a preset threshold, determining preliminary qualification matching; extracting performance index data from historical performance records on the bidding enterprise chain, and fusing the performance index data with the preliminary qualification matching result by adopting a vector embedding method to obtain a comprehensive qualification vector; the objective of the invention is to solve the problems of low qualification examination efficiency, insufficient data credibility and non-transparent business scenes in the verification process in the traditional bidding process.

According to the anti-frequency analysis searchable encryption method and system, a certificateless encryption system is introduced, for a scene with limited computing resources, the scheme is ensured to be safe and suitable for the scene with the limited computing resources, meanwhile, a trap door algorithm is designed based on a probability trap door generation algorithm, and the security of the scheme is improved. The method improves the resistance of a system to frequency analysis attacks, solves the problem of secret key trusteeship due to the fact that identity information and secret key distribution are concentrated in a private key generation center in a traditional encryption scheme, and improves the encryption efficiency. The technical problem that malicious users are easy to obtain the privacy information of the target keyword by performing frequency analysis on trap doors and initiating keyword guessing attacks is solved.

The invention discloses an AI model manual annotation method with associated logic, relates to the technical field of artificial intelligence and optical character recognition (OCR), and aims to solve the problems that the existing OCR recognition technology is low in accuracy and lacks an effective content verification and correction mechanism when processing complex certificates. The method comprises the following steps of: firstly, extracting a driving license, a driving license, an electronic license and text contents of various certificates through OCR (Optical Character Recognition) scanning equipment; constructing an association logic AI model for storing certificate information association logic rules; performing structured labeling processing on an OCR recognition result to realize document information classification and regularization; performing logic verification on the annotated content by utilizing an association logic AI model, marking problems and proposing a modification scheme; and finally, corrected data is fed back to the model to complete optimization iteration. According to the method, the logic contradiction can be accurately found and corrected, the identification accuracy of the AI model on multiple types of certificates is remarkably improved, the manual labeling error is reduced, and the certificate information extraction efficiency and reliability are improved.

The invention belongs to the field of cloud computing, and discloses a method and a system for realizing SSL certificate resource migration across a cloud platform, a user front-end interface is constructed, and operations such as a selection area, a certificate information display area and an operation button of a source cloud platform and a target cloud platform are provided for a user; designing an extraction module code with a certificate format identification mechanism, and automatically detecting which format the input certificate belongs to; storing the extracted certificate information in a memory or a temporary file for subsequent processing and transmission; a random secret key is generated, secure transmission and storage of the secret key are ensured, an SSL / TLS certificate is configured on a server by using an HTTPS protocol, and secure connection is established; the Hash value of the certificate information is calculated, the received certificate information is subjected to Hash calculation at the receiving end and compared with the transmitted Hash value, and the data integrity is verified; and checking whether the certificates of the source end and the target end are consistent or not by using a consistency algorithm. According to the invention, the migration efficiency and security are improved, and the migration cost is reduced.

In some embodiments, a computer-implemented method for preventing credential passing attacks may include receiving an input; determining whether the input is a credential access command, wherein the determination includes searching for occurrences of references to executables related to adding, reading, copying, or performing actions with respect to a credential, if the input is determined to be a credential access command, performing anomaly detection, wherein performing the anomaly detection includes evaluating whether a user is a valid domain user, whether an elapsed time of the credential is greater than a maximum lifetime of the credential, and whether a privilege attribute certificate of the credential is valid, determining that an anomaly exists if the command was generated by an invalid domain user; an elapsed time of a credential is greater than a maximum lifetime, or the privilege attribute certificate of the credential is invalid, and performing mitigation of the anomaly.

The invention discloses a URL (Uniform Resource Locator) security analysis method and device for an end-side large language model and a medium, and belongs to the field of network and information security. The method comprises the steps of collecting multi-modal data such as a URL analysis structure, DNS / certificate metadata, front-end code sampling, an OCR text and a dynamic behavior event sequence; performing exponential decay weighted aggregation on the dynamic events in the sliding time window; generating a static structure feature, a text semantic feature and a threat intelligence similarity based on the multi-modal data; fusing the multi-modal features by adopting a gating attention mechanism; inputting the fusion features and the readable context into an end-side large language model, and calling a security analysis tool set under limited decoding; a risk score and a minimum sufficient evidence are obtained through two-stage scoring; and executing an end-side security policy according to the scoring threshold value and leaving a trace by using a JSONL structure. According to the method, in-end closed-loop analysis is realized, the detection accuracy is remarkably improved, and the method is suitable for various deployment scenes such as mobile terminals and edge gateways.

The invention relates to the technical field of network security authentication, in particular to a network security authentication method, device and system. When a server side authenticates the identity of a request side, the method comprises the following steps: acquiring signature data, abstract data and a digital certificate from the request side; decrypting the signature data through a public key in the digital certificate to obtain biological characteristic data and decryption action instruction data; calculating the biological characteristic data and the decryption action instruction data obtained from the self-signature data by adopting a Hash algorithm, and comparing a calculation result with the abstract data; matching the biological characteristic data and the decryption action instruction data with a secret order database arranged at a server side; and completing identity authentication of the server side to the request side. According to the invention, identity authentication of the request end from the server end can be well realized.

The invention relates to the field of digital certificates and certificate application, and discloses an anti-quantum cryptography agile migration method capable of dynamically adapting to an algorithm, which is cooperatively executed by a strategy server, a certificate server and an application terminal: the strategy server monitors a migration progress and dynamically generates and issues a migration strategy; the application terminal analyzes the strategy and applies for a specified type of certificate from the certificate server; the certificate server carries out processing and issues a certificate; and the application terminal dynamically selects an algorithm compatible with the target application to establish secure connection according to the strategy during communication. According to the method, through automatic certificate management driven by a strategy and terminal self-adaptive algorithm selection, agile and smooth migration of the cryptographic algorithm is realized, and the problems of compatibility and safety management in the migration process are effectively solved.

The invention discloses a software package processing method and device, a medium and a program product, and relates to the technical field of data transmission. The software package is signed by adopting at least two signature algorithms, so that the potential safety hazard existing in a single algorithm and the limitation of only supporting a single fixed algorithm are avoided, the dynamic switching of a national secret algorithm and an international algorithm is supported, the compliance and compatibility requirements of different scenes are met, and the security and strategy flexibility of the algorithm level are improved; the client can select the signature algorithm for verification according to requirements, the verification mode is allowed to be dynamically adjusted, the problem of lack of a strategic verification mechanism is solved, and verification failure caused by failure of a single algorithm or expiration of a certificate is avoided. According to the method, large-scale distributed environment deployment is adapted through a multi-algorithm signature and flexible verification strategy of a software level, the technical problems of potential safety hazards and limited application scenes existing in a single signature algorithm are solved, and the technical effects of expanding the application scenes and improving the safety are achieved.

The invention discloses an automatic certificate management method and system, and belongs to the technical field of network security and digital certificate management, and the method comprises the following steps: 1, providing a protocol adaptation layer supporting multiple protocols, the protocol adaptation layer supporting ACME, SCEP, EST, CMP and private RESTful protocols, and communicating with a certificate authority (CA); step 2, setting a strategy management module, and defining an automatic management strategy of the certificate, including conditions and rules of certificate application, updating, revoking and distribution; and step 3, automatically executing application, updating, revoking and distribution operations of the certificate by using a certificate management module. According to the automatic certificate management method, the system and the system architecture, a new certificate management protocol is allowed to be integrated in the future, technical development is adapted, a machine learning algorithm is introduced, a certificate management strategy is optimized according to historical data, and a complete secure ecology is constructed by integrating with other security systems and operation and maintenance systems through an open API (Application Program Interface).

The invention provides a framework for synthesizing a Fourier KAN obstacle certificate, and relates to the field of computer science and artificial intelligence. The method comprises two main stages: a learning stage and a verification stage. In the learning stage, a candidate obstacle certificate is generated through a Fourier Kolmogorov-Arnold network (Fourier KAN), and network parameters are optimized through gradient descent so as to minimize a loss function; in the verification stage, an SMT solver is used for verifying the validity of the candidate certificates, and the global validity of the obstacle certificates is ensured through Lipschitz continuity conditions. The framework disclosed by the invention can efficiently generate and verify the Fourier KAN obstacle certificate, has good stability and accuracy, and provides a new technical scheme for research and application in related fields.

The invention discloses a multi-modal large model training method for a certificate OCR (optical character recognition) task. The method comprises the following steps: performing fine adjustment on a multi-modal large model through a small number of labeled samples; carrying out reinforcement learning training on the multi-modal large model through the remaining labeled samples until the recognition precision of the multi-modal large model on the verification set reaches a set standard, and completing the training of the multi-modal large model; the label of the sample label is structured output of the key field in the certificate image. According to the method, a long text task is disassembled into field-level feedback and optimization, relative advantages are generated in combination with intra-group comparison, so that effective learning in a sparse environment is realized, and the method greatly improves the recognition accuracy of a model to complex certificate contents while ensuring the normalization of an output format, and has a good application prospect. The method has the advantages that the method is simple and easy to implement, good generalization ability and reasoning level are shown, the multi-modal large model with excellent performance for the certificate OCR task can be trained under the condition that the manual labeling workload is reduced, and the method has wide application prospects.

The invention provides a service approval auxiliary method, device and equipment, a medium and a program product, which can be applied to the technical fields of artificial intelligence and financial science and technology. The method comprises the steps that classification prediction is carried out based on a received certificate image to obtain a certificate type, screening is carried out in a preset extraction strategy library based on the certificate type to obtain a target extraction strategy, the extraction strategy library comprises a plurality of candidate extraction strategies, and each candidate extraction strategy has a matched certificate type; processing the certificate image through the target extraction strategy to obtain to-be-approved information, and forming an application material with the application text and user historical data; and based on a preset thinking chain indicated by the preset cue word, the large model is guided to generate an approval auxiliary conclusion based on the application material, and the preset thinking chain comprises a reasoning step for guiding the large model to approve the application material based on the approval risk control expert role.

The invention discloses an anonymous voucher generation system and method, and belongs to the technical field of computer security, and the anonymous voucher generation system comprises a certificate mechanism, a plurality of users and a server side. The certificate authority is used for sending the attribute, the credential value, the pseudonym and the accumulator evidence of the first user to the first user; the first user is configured to generate a blinded credential using the credential value, generate an accumulator auxiliary parameter based on the accumulator value and the accumulator evidence, generate a first zero knowledge proof based on the accumulator auxiliary parameter and a blinding auxiliary parameter in the blinded credential, the first zero knowledge proof is used for proving that the first user has the blinded certificate, the accumulator evidence, the accumulator auxiliary parameter and the blinding auxiliary parameter; and the server side is used for verifying the validity of the first zero knowledge proof, and verifying the correctness of the public attribute, the blinded certificate and the accumulator auxiliary parameters by adopting a bilinear pairing operation. The system can reduce the calculation overhead of the user in the anonymous credential technology.

The invention relates to a certificate information desensitization method and device in development or test business. Comprising the steps of receiving a certificate information desensitization request of a current batch; splitting target certificate information in the certificate information desensitization request to obtain a target address code, a target date and a target sequence code in the certificate information; searching an address code virtual value corresponding to the target address code from the address code dictionary of the current batch; searching a random day number corresponding to the target address code from a random day number dictionary of the current batch, and calculating a date virtual value according to the target date and the random day number; encrypting the target sequence code to obtain a sequence code virtual value; calculating a check code virtual value; and splicing the address code virtual value, the date virtual value, the sequence code virtual value and the check code virtual value in sequence to obtain desensitized certificate information of the target certificate information. By means of the method, desensitization of the certificate information is achieved, and development or testing can be conducted smoothly through verification of the certificate information in the development or testing process.

An embodiment sends, at a first time, from a boundary server to a client system in response to a challenge request, a challenge specifying a computational problem to be solved by the client system, the boundary server specified in a challenge list sent to the client system. An embodiment receives, at a second time, at the boundary server, a challenge response from the client system, the challenge response comprising a solution to the computational problem. An embodiment generates, at the boundary server, a certificate encoding an elapsed time between the first time and the second time, the certificate usable by the client system to prove a location of the client system. An embodiment sends, from the boundary server to the client system, the certificate.

This disclosure relates to a certificate computer system. A rules store stores, for a template identifier, template identifiers of dependency certificates, attribute paths, and functions to compute output certificate attributes. A certificate metadata store stores, for a certificate identifier, a validity state, certificate identifiers of dependency certificates, and a hash value. A processor generates a certificate by receiving a request comprising a template identifier and dependency certificates. The processor queries a rules store to retrieve a template, and computes a value for the attributes by applying a function from the rules store on attribute values of the dependency certificates. The processor creates the output certificate including the computed value for the computed attributes. The processor may further verify an input certificate by comparing a hash value to the certificate metadata store and retrieving certificate identifiers of dependencies associated with the certificate identifier and checks if dependency certificates are valid.

The application belongs to the field of platform management, and specifically discloses an engineering bidding platform management method and system, wherein the method comprises the following steps: obtaining a demand description text from a bidding project chain through a blockchain node, extracting a keyword sequence by using natural language processing, and obtaining a bidding demand feature vector; performing vector conversion processing on qualification certificate data submitted by a bidding enterprise according to the bidding demand feature vector, judging the similarity between the converted vector and the demand feature vector, and determining preliminary qualification matching if the similarity exceeds a preset threshold; extracting performance index data from historical performance records on a bidding enterprise chain, and obtaining a comprehensive qualification vector by using a vector embedding method to fuse the performance index data and the preliminary qualification matching result; and the application aims to solve the problems of low qualification examination efficiency, insufficient data reliability and non-transparent verification process in the traditional bidding process.

The application provides a certificate machine code correction method and a storage medium. The method comprises the following steps: cutting the machine code according to the certificate specification to obtain a plurality of identification objects; if one identification object has one missing character, the 731 weighting method is used to calculate and obtain the missing character according to the successfully recognized known character; if one identification object has two missing characters, the weight position and the at least two possible characters corresponding to each missing character are determined according to the identification result, wherein if the missing character is a check bit, the weight position corresponding to the missing character is set as a check bit identification value; and the 731 weighting method is used to determine each missing character according to the successfully recognized known character, the weight position and the at least two possible characters. The application can accurately and efficiently correct the missing characters when the complete machine code cannot be read.

In one embodiment, in response to a challenge request, a challenge is sent from a border server to a client system at a first time, the challenge specifying a computing problem to be solved by the client system, the border server being specified in a list of challenges sent to the client system. One embodiment receives, at a second time, a challenge response from the client system at the border server, the challenge response including a solution to the compute question. One embodiment generates, at a border server, a certificate encoding a time elapsed between a first time and a second time, the certificate being usable by a client system to attestation a location of the client system. In one embodiment, credentials are sent from a border server to a client system.

The present application is suitable for the field of data consistency verification, and provides a versioned consistency verification system and method for language generation, which comprises a knowledge unit generation module for splitting text into knowledge slices and defining semantic vectors; a knowledge unit certificate generation module for giving hash certificates; a versioned certificate storage database for storing block contents, corresponding semantic vectors, block / vector identification codes and hash certificates; an access control module for authorizing and recording knowledge base data access and modification operations; a vector pre-reading storage module for storing corresponding block identification codes of vector data; a question unit generation module for generating question slices, question semantic vectors and question block / vector identification codes; and a retriever for block / vector identification code retrieval. Thus, the present application can solve the problem of security risks in ensuring data authenticity and consistency of existing RAG systems.

The invention relates to a certificate management method and device, terminal equipment and a computer program product, the certificate management method and device are applied to a K8S cluster, the K8S cluster comprises a control plane and a proxy component, and the following processing is executed through the proxy component: obtaining feature information of each certificate in the K8S cluster, the feature information comprises a domain name of the certificate, a namespace deployed by the certificate and expiration time of the certificate; generating a hash value based on the feature information of the certificate, and taking the hash value as a hash index of the certificate; uploading the hash index of each certificate to a control plane, and establishing a certificate index database; and scanning the certificate index database at intervals of a preset time period, marking the certificates with the remaining validity periods smaller than a preset threshold value as target certificates, and generating a prompt message. According to the certificate management method and device, the problem that the certificate in the K8S cluster is not updated in time in the related technology is solved, and the technical effect of improving the certificate management efficiency in the K8S cluster is achieved.

The invention relates to the related field of document data engines, in particular to a document data engine method and system, which realizes high-robustness field extraction capability by combining a template engine with an AI model, and adapts to multiple types of unstructured documents; field splitting / combination is intelligent, and manual intervention is reduced. Automatic mapping of standard fields and alignment of platform fields are achieved, the adaptation relation between an industry field standard library and multi-system fields is constructed, and the fields can be directly pushed to multiple service systems from original samples; field data quality and consistency guarantee capability are improved, and output fields are more accurate due to field-level difference comparison and format restoration functions; the AI completion and fuzzy recognition mechanism solves the problem that fields are not covered or uncertain in the traditional recognition technology. The system has four characteristics of standardization, rule driving, model assistance and dynamic updating, and the manual operation intensity and the business risk are remarkably reduced.

The invention provides an intelligent voucher automatic generation method and system based on a multi-modal large model. The method comprises the following steps: firstly, obtaining a voucher generation demand text containing voucher use scene description, core element requirements and text expression specifications; performing demand semantic anchoring processing on the voucher generation demand text, and performing semantic association matching with the voucher basic element library; then carrying out large model generation rule adaptation processing, and adjusting a text generation trigger condition of the multi-modal large model; feature mapping processing is carried out according to the adaptation scheme, and corresponding association between the core elements and the generated feature library is established; and finally, performing intelligent voucher text generation based on the adaptation scheme and the feature mapping association set. According to the invention, the voucher can be generated intelligently, accurately and flexibly, the generation efficiency and quality are improved, and the human error risk is reduced.

The invention discloses a multi-prover zero-knowledge proving method without prover communication, relates to the technical field of multi-prover zero-knowledge proving methods, solves the defect that provers need frequent communication in the multi-prover zero-knowledge proving method in the prior art, and comprises the following steps of: setting an algorithm: inputting a safety parameter lambda and a proposition P to be proved, the verifier outputs N certification keys {EK1,..., EKN} and a verification public key VKF; according to the coding algorithm, a proposition input u to be proved is input, and a verifier outputs a code Iu; according to the certification algorithm, a server index b and a bth certification key EKb are input, a code Iu is input, and a bth server outputs a bth proposition result and a bth certification pi (y, b); the verification algorithm comprises the steps of inputting a verification public key VKF, proposition input u, N proposition results and N certificates {pi (y, b)} (b = 1) N, if verification succeeds, outputting 1, and otherwise, outputting 0. The decentralized cooperation generation proof thoroughly solves the problem of communication dependence.

The invention relates to the technical field of information security, in particular to a vector commitment scheme generation method and device supporting efficient certification, and the method comprises the steps: inputting a first target security parameter corresponding to a target single vector of a to-be-generated vector commitment scheme into a target bilinear mapping generator, so as to obtain a first common parameter; calculating a commitment value and a proof value of the target single vector; calculating an aggregation proof value of the target single vector; verifying the correctness of the target single vector; when the verification result is incorrect, the commitment value and the proof value are updated again based on the target single vector, and then a commitment scheme of the target single vector is obtained; and when the verification result is correct, obtaining a commitment scheme of the target single vector based on the commitment value and the proof value. Therefore, the problems that in the related technology, when large vectors are processed, time is consumed seriously, cost is high, along with increase of the sizes of the vectors, the updating process is very tedious, and there is no effective technology for aggregating the certificates in the multiple vectors are solved.