150 results about "Certificate" patented technology

The invention relates to the technical field of data processing, in particular to a block chain-based data sharing system, which comprises a field path hash index module, a permission entry sorting module, a path compliance judgment module, a certificate state updating and verification module and a joint permission confirmation module. According to the method and the device, the multilevel structure information of the field path chain is extracted from the data sharing calling request, salt coding is performed in combination with the calling party address, and hash processing is performed, so that unique mapping of the field path is realized, field identification fuzziness and path conflict are effectively avoided, and accurate positioning of sharing operation is ensured. By means of path structure analysis and access frequency normalization processing, a field entry weight sequence is established in combination with a scoring mechanism, field access entries can be sorted according to actual use frequency and structure hierarchy, and authorization judgment efficiency is improved. A task responsibility number and a timestamp are extracted from an access behavior track, a responsibility chain segment is established, and abnormal changes in a responsibility path can be effectively recognized.

The invention provides a task chain self-healing transmission prediction method and system based on parameter fingerprint holographic perception, and relates to the technical field of parameter transmission, and the method comprises the steps: deploying a probe array to collect a task chain parameter flow, and extracting a feature tensor through a chaotic feature network to generate a feature fingerprint. The feature fingerprints are stored in a dynamic certificate chain, and a high-dimensional transfer matrix is constructed to track performance changes. And constructing an adaptive sensing network according to the dynamic certificate chain and the high-dimensional transfer matrix, and training an improved chaos twinborn model for constructing an anomaly recognition network. And generating a self-adaptive repair strategy according to the abnormal features and the historical data, and storing the self-adaptive repair strategy in a distributed knowledge graph. And training a prediction engine based on the knowledge graph and the chaos twinborn model, predicting the risk of the task chain, and finally evaluating the system performance through deep reinforcement learning to realize continuous optimization. According to the method, the task chain risk can be effectively predicted, self-adaptive repair is realized, and the stability and reliability of the task chain are improved.

The present application relates to the field of distributed computing, and discloses a data processing method, a computer device, and a storage medium, used for improving the scalability of computing resources of computing systems and reducing the block producing blockage degree of blockchains while ensuring the trustworthiness of the systems, thereby improving the block generation efficiency of the blockchains. The method is realized on the basis of a distributed computing system supporting node scaling, and the system comprises a verification node cluster, a scheduling node cluster and a computing node cluster. The system and the data processing method can improve the scalability of computing resources. Users can all use their own computers as computing nodes to provide certain computing power. A user that desires to perform computation can send a computing task to a designated scheduling node, and randomly selects a computing node on the basis of a random number seed sent by himself / herself, so that the fairness and the security of the computing task are ensured, and the identity trustworthiness of all nodes can be ensured by means of a multi-layer certificate authority mechanism.

An embodiment sends, at a first time, from a boundary server to a client system in response to a challenge request, a challenge specifying a computational problem to be solved by the client system, the boundary server specified in a challenge list sent to the client system. An embodiment receives, at a second time, at the boundary server, a challenge response from the client system, the challenge response comprising a solution to the computational problem. An embodiment generates, at the boundary server, a certificate encoding an elapsed time between the first time and the second time, the certificate usable by the client system to prove a location of the client system. An embodiment sends, from the boundary server to the client system, the certificate.

The invention discloses an access control system fusing multiple mechanisms. The access control system is characterized in that a main body initiates an access request to an access control execution node; the access control execution node forwards the access request to an access control decision node; the access control decision node queries a certificate type combination required by the access request from a policy storage library; the access control decision node initiates certificate requests to a plurality of decision attribute issuing nodes in parallel according to a fusion mode of certificates in the certificate type combination or initiates certificate requests to different decision attribute issuing nodes in sequence according to a certificate dependency sequence; the access control decision node performs parallel verification or hierarchical verification according to the fusion mode of the certificates in the certificate type combination to obtain an access decision result; and the access control execution node executes the access request according to the access decision result. According to the invention, a new control model can be flexibly expanded according to different business requirements and scenes.

The invention relates to the technical field of power equipment state monitoring and data security, and discloses a power equipment supply chain data sharing method based on a block chain, and the method comprises the following steps: S1, data collection and standardization: collecting sensor data of power equipment in real time, and carrying out the standardization processing; s2, dynamic entropy threshold calculation: dynamically calculating a data entropy threshold based on an information geometry theory; s3, verification mode decision making, wherein quantum chaos random walk data sampling or full-amount zero-knowledge proof verification is triggered according to entropy threshold decision making; and S4, anti-tamper certificate construction: constructing an anti-quantum hash chain for the sampled data and carrying out distributed anti-tamper coding. According to the method, through dynamic entropy threshold adaptation and quantum chaos sampling, accurate improvement of anomaly detection sensitivity is realized, based on Reed-Solomon fragmentation and algebraic verification, it is ensured that data can still be completely recovered when being partially tampered, and security and throughput efficiency are balanced by using block chain evidence storage and improvement of PBFT consensus.

The invention relates to a voucher template generation method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: acquiring voucher entry line information and candidate document field information corresponding to a target document type; determining a target document field matched with the voucher entry line information from the candidate document field information through a first semantic understanding model; obtaining target field content of the target document field; inputting the candidate document field information, the voucher entry line information and the target field content into a second semantic understanding model, and outputting a first mapping condition between a target voucher subject in the voucher entry line information and the target field content; and generating a voucher template corresponding to the target document type based on the first mapping condition. By adopting the method, the efficiency of generating the voucher template can be improved.

The present invention relates to a scalable certificate management system architecture. An example system may include one or more application platforms (e.g., VMs) running a registration approval authority, which are communicatively connected to one or more computing engines that perform cryptographic calculations required by the registration approval authority. The system may also include one or more application platforms running a registration certificate issuing authority, which are communicatively connected to one or more computing engines that perform cryptographic calculations required by the registration certificate issuing authority. The system may further include one or more application platforms running a pseudonymous certificate issuing authority, which are communicatively connected to one or more computing engines that perform cryptographic calculations required by the pseudonymous certificate issuing authority. The system may also include one or more application platforms running a first link authority and a second link authority, which are communicatively connected to one or more computing engines that perform cryptographic calculations required by the link authority.

The invention belongs to the field of platform management, and particularly discloses an engineering bidding and tendering platform management method and system, and the method comprises the steps: storing and obtaining a demand description text from a bidding project chain through a block chain node, extracting a keyword sequence through natural language processing, and obtaining a bidding demand feature vector; according to the bid invitation demand feature vector, performing vector conversion processing on qualification certificate data submitted by a bidding enterprise, judging the similarity between the converted vector and the demand feature vector, and if the similarity exceeds a preset threshold, determining preliminary qualification matching; extracting performance index data from historical performance records on the bidding enterprise chain, and fusing the performance index data with the preliminary qualification matching result by adopting a vector embedding method to obtain a comprehensive qualification vector; the objective of the invention is to solve the problems of low qualification examination efficiency, insufficient data credibility and non-transparent business scenes in the verification process in the traditional bidding process.

According to the anti-frequency analysis searchable encryption method and system, a certificateless encryption system is introduced, for a scene with limited computing resources, the scheme is ensured to be safe and suitable for the scene with the limited computing resources, meanwhile, a trap door algorithm is designed based on a probability trap door generation algorithm, and the security of the scheme is improved. The method improves the resistance of a system to frequency analysis attacks, solves the problem of secret key trusteeship due to the fact that identity information and secret key distribution are concentrated in a private key generation center in a traditional encryption scheme, and improves the encryption efficiency. The technical problem that malicious users are easy to obtain the privacy information of the target keyword by performing frequency analysis on trap doors and initiating keyword guessing attacks is solved.

The invention discloses an AI model manual annotation method with associated logic, relates to the technical field of artificial intelligence and optical character recognition (OCR), and aims to solve the problems that the existing OCR recognition technology is low in accuracy and lacks an effective content verification and correction mechanism when processing complex certificates. The method comprises the following steps of: firstly, extracting a driving license, a driving license, an electronic license and text contents of various certificates through OCR (Optical Character Recognition) scanning equipment; constructing an association logic AI model for storing certificate information association logic rules; performing structured labeling processing on an OCR recognition result to realize document information classification and regularization; performing logic verification on the annotated content by utilizing an association logic AI model, marking problems and proposing a modification scheme; and finally, corrected data is fed back to the model to complete optimization iteration. According to the method, the logic contradiction can be accurately found and corrected, the identification accuracy of the AI model on multiple types of certificates is remarkably improved, the manual labeling error is reduced, and the certificate information extraction efficiency and reliability are improved.

The invention belongs to the field of cloud computing, and discloses a method and a system for realizing SSL certificate resource migration across a cloud platform, a user front-end interface is constructed, and operations such as a selection area, a certificate information display area and an operation button of a source cloud platform and a target cloud platform are provided for a user; designing an extraction module code with a certificate format identification mechanism, and automatically detecting which format the input certificate belongs to; storing the extracted certificate information in a memory or a temporary file for subsequent processing and transmission; a random secret key is generated, secure transmission and storage of the secret key are ensured, an SSL / TLS certificate is configured on a server by using an HTTPS protocol, and secure connection is established; the Hash value of the certificate information is calculated, the received certificate information is subjected to Hash calculation at the receiving end and compared with the transmitted Hash value, and the data integrity is verified; and checking whether the certificates of the source end and the target end are consistent or not by using a consistency algorithm. According to the invention, the migration efficiency and security are improved, and the migration cost is reduced.

In some embodiments, a computer-implemented method for preventing credential passing attacks may include receiving an input; determining whether the input is a credential access command, wherein the determination includes searching for occurrences of references to executables related to adding, reading, copying, or performing actions with respect to a credential, if the input is determined to be a credential access command, performing anomaly detection, wherein performing the anomaly detection includes evaluating whether a user is a valid domain user, whether an elapsed time of the credential is greater than a maximum lifetime of the credential, and whether a privilege attribute certificate of the credential is valid, determining that an anomaly exists if the command was generated by an invalid domain user; an elapsed time of a credential is greater than a maximum lifetime, or the privilege attribute certificate of the credential is invalid, and performing mitigation of the anomaly.

The invention provides a certificate quality detection method and apparatus, a storage medium and an electronic device. The method comprises the steps of obtaining a to-be-detected image of a to-be-detected certificate, work record information of certificate production equipment, certificate information and corresponding certificate detection text prompt information; detecting a task based on the information; obtaining knowledge graph feature information corresponding to the detection task, image feature information of the to-be-detected image and knowledge graph feature information, and carrying out feature alignment on the information to obtain feature-aligned embedded features; based on the detection task, performing quality detection on the embedded features to obtain detection output data; performing multi-expert analysis on the detection output data by using a multi-expert-multi-modal neural network model to determine optimal output data; and determining a quality detection result according to the optimal output data by using the trained large language model. Therefore, the accurate detection result is obtained, the reason about the abnormity of the certificate is determined, the certificate making process is adjusted in time, and the certificate making efficiency and the certificate making quality are improved.

The invention discloses a URL (Uniform Resource Locator) security analysis method and device for an end-side large language model and a medium, and belongs to the field of network and information security. The method comprises the steps of collecting multi-modal data such as a URL analysis structure, DNS / certificate metadata, front-end code sampling, an OCR text and a dynamic behavior event sequence; performing exponential decay weighted aggregation on the dynamic events in the sliding time window; generating a static structure feature, a text semantic feature and a threat intelligence similarity based on the multi-modal data; fusing the multi-modal features by adopting a gating attention mechanism; inputting the fusion features and the readable context into an end-side large language model, and calling a security analysis tool set under limited decoding; a risk score and a minimum sufficient evidence are obtained through two-stage scoring; and executing an end-side security policy according to the scoring threshold value and leaving a trace by using a JSONL structure. According to the method, in-end closed-loop analysis is realized, the detection accuracy is remarkably improved, and the method is suitable for various deployment scenes such as mobile terminals and edge gateways.

The invention relates to the technical field of network security authentication, in particular to a network security authentication method, device and system. When a server side authenticates the identity of a request side, the method comprises the following steps: acquiring signature data, abstract data and a digital certificate from the request side; decrypting the signature data through a public key in the digital certificate to obtain biological characteristic data and decryption action instruction data; calculating the biological characteristic data and the decryption action instruction data obtained from the self-signature data by adopting a Hash algorithm, and comparing a calculation result with the abstract data; matching the biological characteristic data and the decryption action instruction data with a secret order database arranged at a server side; and completing identity authentication of the server side to the request side. According to the invention, identity authentication of the request end from the server end can be well realized.

The invention relates to the field of digital certificates and certificate application, and discloses an anti-quantum cryptography agile migration method capable of dynamically adapting to an algorithm, which is cooperatively executed by a strategy server, a certificate server and an application terminal: the strategy server monitors a migration progress and dynamically generates and issues a migration strategy; the application terminal analyzes the strategy and applies for a specified type of certificate from the certificate server; the certificate server carries out processing and issues a certificate; and the application terminal dynamically selects an algorithm compatible with the target application to establish secure connection according to the strategy during communication. According to the method, through automatic certificate management driven by a strategy and terminal self-adaptive algorithm selection, agile and smooth migration of the cryptographic algorithm is realized, and the problems of compatibility and safety management in the migration process are effectively solved.

An embodiment sends, at a first time, from a boundary server to a client system in response to a challenge request, a challenge specifying a computational problem to be solved by the client system, the boundary server specified in a challenge list sent to the client system. An embodiment receives, at a second time, at the boundary server, a challenge response from the client system, the challenge response comprising a solution to the computational problem. An embodiment generates, at the boundary server, a certificate encoding an elapsed time between the first time and the second time, the certificate usable by the client system to prove a location of the client system. An embodiment sends, from the boundary server to the client system, the certificate.

The invention discloses a software package processing method and device, a medium and a program product, and relates to the technical field of data transmission. The software package is signed by adopting at least two signature algorithms, so that the potential safety hazard existing in a single algorithm and the limitation of only supporting a single fixed algorithm are avoided, the dynamic switching of a national secret algorithm and an international algorithm is supported, the compliance and compatibility requirements of different scenes are met, and the security and strategy flexibility of the algorithm level are improved; the client can select the signature algorithm for verification according to requirements, the verification mode is allowed to be dynamically adjusted, the problem of lack of a strategic verification mechanism is solved, and verification failure caused by failure of a single algorithm or expiration of a certificate is avoided. According to the method, large-scale distributed environment deployment is adapted through a multi-algorithm signature and flexible verification strategy of a software level, the technical problems of potential safety hazards and limited application scenes existing in a single signature algorithm are solved, and the technical effects of expanding the application scenes and improving the safety are achieved.

The invention discloses an automatic certificate management method and system, and belongs to the technical field of network security and digital certificate management, and the method comprises the following steps: 1, providing a protocol adaptation layer supporting multiple protocols, the protocol adaptation layer supporting ACME, SCEP, EST, CMP and private RESTful protocols, and communicating with a certificate authority (CA); step 2, setting a strategy management module, and defining an automatic management strategy of the certificate, including conditions and rules of certificate application, updating, revoking and distribution; and step 3, automatically executing application, updating, revoking and distribution operations of the certificate by using a certificate management module. According to the automatic certificate management method, the system and the system architecture, a new certificate management protocol is allowed to be integrated in the future, technical development is adapted, a machine learning algorithm is introduced, a certificate management strategy is optimized according to historical data, and a complete secure ecology is constructed by integrating with other security systems and operation and maintenance systems through an open API (Application Program Interface).

The invention provides a framework for synthesizing a Fourier KAN obstacle certificate, and relates to the field of computer science and artificial intelligence. The method comprises two main stages: a learning stage and a verification stage. In the learning stage, a candidate obstacle certificate is generated through a Fourier Kolmogorov-Arnold network (Fourier KAN), and network parameters are optimized through gradient descent so as to minimize a loss function; in the verification stage, an SMT solver is used for verifying the validity of the candidate certificates, and the global validity of the obstacle certificates is ensured through Lipschitz continuity conditions. The framework disclosed by the invention can efficiently generate and verify the Fourier KAN obstacle certificate, has good stability and accuracy, and provides a new technical scheme for research and application in related fields.

The invention discloses a multi-modal large model training method for a certificate OCR (optical character recognition) task. The method comprises the following steps: performing fine adjustment on a multi-modal large model through a small number of labeled samples; carrying out reinforcement learning training on the multi-modal large model through the remaining labeled samples until the recognition precision of the multi-modal large model on the verification set reaches a set standard, and completing the training of the multi-modal large model; the label of the sample label is structured output of the key field in the certificate image. According to the method, a long text task is disassembled into field-level feedback and optimization, relative advantages are generated in combination with intra-group comparison, so that effective learning in a sparse environment is realized, and the method greatly improves the recognition accuracy of a model to complex certificate contents while ensuring the normalization of an output format, and has a good application prospect. The method has the advantages that the method is simple and easy to implement, good generalization ability and reasoning level are shown, the multi-modal large model with excellent performance for the certificate OCR task can be trained under the condition that the manual labeling workload is reduced, and the method has wide application prospects.

The invention provides a service approval auxiliary method, device and equipment, a medium and a program product, which can be applied to the technical fields of artificial intelligence and financial science and technology. The method comprises the steps that classification prediction is carried out based on a received certificate image to obtain a certificate type, screening is carried out in a preset extraction strategy library based on the certificate type to obtain a target extraction strategy, the extraction strategy library comprises a plurality of candidate extraction strategies, and each candidate extraction strategy has a matched certificate type; processing the certificate image through the target extraction strategy to obtain to-be-approved information, and forming an application material with the application text and user historical data; and based on a preset thinking chain indicated by the preset cue word, the large model is guided to generate an approval auxiliary conclusion based on the application material, and the preset thinking chain comprises a reasoning step for guiding the large model to approve the application material based on the approval risk control expert role.

The invention discloses an anonymous voucher generation system and method, and belongs to the technical field of computer security, and the anonymous voucher generation system comprises a certificate mechanism, a plurality of users and a server side. The certificate authority is used for sending the attribute, the credential value, the pseudonym and the accumulator evidence of the first user to the first user; the first user is configured to generate a blinded credential using the credential value, generate an accumulator auxiliary parameter based on the accumulator value and the accumulator evidence, generate a first zero knowledge proof based on the accumulator auxiliary parameter and a blinding auxiliary parameter in the blinded credential, the first zero knowledge proof is used for proving that the first user has the blinded certificate, the accumulator evidence, the accumulator auxiliary parameter and the blinding auxiliary parameter; and the server side is used for verifying the validity of the first zero knowledge proof, and verifying the correctness of the public attribute, the blinded certificate and the accumulator auxiliary parameters by adopting a bilinear pairing operation. The system can reduce the calculation overhead of the user in the anonymous credential technology.

The invention relates to a certificate information desensitization method and device in development or test business. Comprising the steps of receiving a certificate information desensitization request of a current batch; splitting target certificate information in the certificate information desensitization request to obtain a target address code, a target date and a target sequence code in the certificate information; searching an address code virtual value corresponding to the target address code from the address code dictionary of the current batch; searching a random day number corresponding to the target address code from a random day number dictionary of the current batch, and calculating a date virtual value according to the target date and the random day number; encrypting the target sequence code to obtain a sequence code virtual value; calculating a check code virtual value; and splicing the address code virtual value, the date virtual value, the sequence code virtual value and the check code virtual value in sequence to obtain desensitized certificate information of the target certificate information. By means of the method, desensitization of the certificate information is achieved, and development or testing can be conducted smoothly through verification of the certificate information in the development or testing process.

An embodiment sends, at a first time, from a boundary server to a client system in response to a challenge request, a challenge specifying a computational problem to be solved by the client system, the boundary server specified in a challenge list sent to the client system. An embodiment receives, at a second time, at the boundary server, a challenge response from the client system, the challenge response comprising a solution to the computational problem. An embodiment generates, at the boundary server, a certificate encoding an elapsed time between the first time and the second time, the certificate usable by the client system to prove a location of the client system. An embodiment sends, from the boundary server to the client system, the certificate.

The invention relates to the field of virtualization security, and particularly provides a configuration-free virtual machine security starting method supporting a national cryptographic algorithm, which comprises the following steps: acquiring an OVMF source code of an open source EDK2, introducing related functions of an SM2 algorithm and an SM3 algorithm into the OVMF source code, and adding and modifying a corresponding interface function to obtain a modified OVMF source code; compiling the modified OVMF source code to obtain a first virtual firmware; and importing an SM2 certificate into the PK and the KEK according to the first virtual firmware, calculating a hash value of a shim certificate of a virtual machine operating system by using an SM3 algorithm, importing the hash value into the DB, adding the processed PK, KEK and DB into the modified OVMF source code, and compiling to obtain a second virtual firmware. The technical problem that in the prior art, a certificate for safely starting a virtual machine needs to be manually configured and cannot support a national cryptographic algorithm is solved.

The application relates to a data property right ownership proof generation and verification method and device. The method comprises the following steps: in response to a data generation moment, generating a property right stamp object for the data by a preset property right stamp generation logic in a secure environment of a local device generating the data; and inseparably binding the property right stamp object and the data to generate protected data carrying an ownership proof. The property right stamp object at least comprises a producer identity, a generation time stamp, a generation device fingerprint, a hash value generated based on data content and preset ownership rule information, and the ownership rule information is used for defining a use constraint on the data. The method generates a five-element cryptography property right stamp in a local secure environment at a data generation moment and strongly binds the five-element cryptography property right stamp with the data, so that any third party can independently verify data ownership and integrity offline, data ownership is technically forced to belong to the data producer, and a reliable basis is provided for data whole-life-cycle compliance management and value distribution.

This disclosure relates to a certificate computer system. A rules store stores, for a template identifier, template identifiers of dependency certificates, attribute paths, and functions to compute output certificate attributes. A certificate metadata store stores, for a certificate identifier, a validity state, certificate identifiers of dependency certificates, and a hash value. A processor generates a certificate by receiving a request comprising a template identifier and dependency certificates. The processor queries a rules store to retrieve a template, and computes a value for the attributes by applying a function from the rules store on attribute values of the dependency certificates. The processor creates the output certificate including the computed value for the computed attributes. The processor may further verify an input certificate by comparing a hash value to the certificate metadata store and retrieving certificate identifiers of dependencies associated with the certificate identifier and checks if dependency certificates are valid.

The application belongs to the field of platform management, and specifically discloses an engineering bidding platform management method and system, wherein the method comprises the following steps: obtaining a demand description text from a bidding project chain through a blockchain node, extracting a keyword sequence by using natural language processing, and obtaining a bidding demand feature vector; performing vector conversion processing on qualification certificate data submitted by a bidding enterprise according to the bidding demand feature vector, judging the similarity between the converted vector and the demand feature vector, and determining preliminary qualification matching if the similarity exceeds a preset threshold; extracting performance index data from historical performance records on a bidding enterprise chain, and obtaining a comprehensive qualification vector by using a vector embedding method to fuse the performance index data and the preliminary qualification matching result; and the application aims to solve the problems of low qualification examination efficiency, insufficient data reliability and non-transparent verification process in the traditional bidding process.