14 results about "Certificate server" patented technology

The invention relates to the field of digital certificates and certificate application, and discloses an anti-quantum cryptography agile migration method capable of dynamically adapting to an algorithm, which is cooperatively executed by a strategy server, a certificate server and an application terminal: the strategy server monitors a migration progress and dynamically generates and issues a migration strategy; the application terminal analyzes the strategy and applies for a specified type of certificate from the certificate server; the certificate server carries out processing and issues a certificate; and the application terminal dynamically selects an algorithm compatible with the target application to establish secure connection according to the strategy during communication. According to the method, through automatic certificate management driven by a strategy and terminal self-adaptive algorithm selection, agile and smooth migration of the cryptographic algorithm is realized, and the problems of compatibility and safety management in the migration process are effectively solved.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

The invention relates to the technical field of software version control and code security management, in particular to an authority control method, system and device under front-end code monorepo warehouse management and a medium. The method supports file-level, directory-level and extended-name-level multi-dimensional authority rules, fills the blank of Git native capability, and realizes fine-grained control; the method is realized completely based on a Git hook, does not need additional services or middleware, is compatible with any Git hosting platform, and realizes zero external dependence; permission file modification is ensured to be authorized by an administrator through digital signature, so that a developer is prevented from relaying permission rules privately; the signature verification process is completed at the local hook, an external certificate server does not need to be connected, the security and the offline availability are both considered, and the tamper-resistant capability is enhanced.

A method and system for intelligent management of equipment availability based on digital calibration certificates, belonging to the field of metrology and testing technology. The system includes a digital calibration certificate server, a digital calibration certificate authentication module, an intelligent gateway, and a host computer. By uploading the digital calibration certificate of the measuring equipment to the digital calibration certificate server, and after authentication, the host computer accesses the digital calibration certificate to obtain basic equipment information, certificate release date, and calibration results. Combined with the association information between the intelligent gateway port stored on the server and the equipment usage requirements, the management of measuring equipment values ​​and product quality management are highly integrated in time and space. The system determines the availability of equipment and disables or restricts data transmission from measuring equipment that does not meet management requirements, restricts the measuring equipment's access to the measurement network, and issues alarms for corresponding measuring equipment faults via the host computer.

The embodiment of the application discloses a kind of methods for distributing application, comprising: application certificate server sends first application certificate to application developer equipment, first application certificate is used to identify application developer, and application developer equipment is used to join target application with first application certificate;Application certificate server obtains second application certificate information from application distribution server;If application certificate server confirms that first application certificate matches second application certificate according to second application certificate information, application certificate server sends check-through result to application distribution server.The application also provides a kind of device, equipment and medium, and application developer equipment joins the application certificate that application certificate server uniformly manages in target application, so that application distribution server can check application by application certificate, while avoiding the installation conflict problem that occurs due to package name repetition in the process of multi-channel distribution application.

The invention provides an identity authentication method and device, equipment, a medium and a program product, which can be applied to the technical field of security authentication and artificial intelligence. The method comprises the following steps: calling a near field communication module of a mobile terminal of a target client, reading a certificate ciphertext of an identity certificate of the target client, and sending the certificate ciphertext to an empirical server for verification; calling a camera module of the mobile terminal to obtain image information of the identity document, inputting a pre-trained feature extraction model to output anti-counterfeiting features, and sending the anti-counterfeiting features to an anti-counterfeiting verification server for verification; wherein the feature extraction model is obtained according to training of an identity document sample, and the identity document sample is marked with at least one item of optically variable ink, a directional photochromic film or micro characters; responding to the received certificate ciphertext and the anti-counterfeiting feature verification passing result, and confirming that the identity certificate is true and effective; the verification result of the identity document is used as a basis for identity authentication when the target customer handles the business.

Disclosed is a method of operating a certification server of a public key certificatesystem. The method includes receiving a request for issuance of a public key certificate from a terminal, determining a terminal encryption scheme and a certification encryption scheme that are suitable for a public key certificate system, the terminal encryption scheme and the certification encryption scheme being encryption schemes allowed in the public key certificate system, generating a public key of the terminal according to the terminal encryption scheme, generating a public key certificate for verifying the validity of the public key of the terminal according to the certification encryption scheme, and transmitting the public key certificate to the terminal.

The invention belongs to the field of wireless ad hoc networks, and discloses a wireless ad hoc network quantum security authentication method and a related device, in a master station mode, a quantum protection key is written into equipment offline and is used for encrypting a one-time quantum authentication key, and symmetric challenge-response authentication is realized through ciphertext transmission and decryption; in the independent mode of the device, the device generates quantum random public and private keys and requests for a digital certificate, the server signs with a root certificate and then distributes, and certificate exchange and challenge-response authentication are supported. By adopting the method, the network security is remarkably improved, illegal access and data leakage are effectively prevented, stable operation of the key information infrastructure is ensured, the authentication reliability is enhanced, and different deployment requirements are met.

The invention relates to a pressure plate data acquisition module based on trusted WLAN (Wireless Local Area Network) network security authentication, which comprises a secret key and certificate generation unit, a secret key and certificate management unit and a pressure plate data acquisition unit, the intranet secret key certificate server is responsible for issuing, verifying and managing equipment, certificates and secret keys used in the intranet; the trusted pressure plate data acquisition module provides an equipment MAC address for the secret key certificate generation unit, when equipment enters a debugging stage after being installed in a transformer substation, a transformer substation trusted WLAN network starts a temporary network, an intranet secret key certificate server is started, and the intranet secret key certificate server applies for replacing a formal secret key or certificate; after the application, a formal secret key and a formal certificate are automatically distributed to the equipment after comparison and auditing to an intranet secret key certificate server are completed. According to the invention, the network security is improved to a great extent, the transformer substation pressing plate acquires the secret key certificate of the network to realize automatic management, and the security requirement of state grid intelligent development is further improved.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

The utility model relates to the technical field of electric vehicles, in particular to an electric vehicle digital certificate transmission tool based on a PKI certificate system. Comprising an adapter and filling equipment, a mounting groove for mounting the adapter is reserved in the back of the filling equipment; two pins are arranged on a shell of the filling equipment and used for being connected with an adapter to charge the adapter. The adapter is wirelessly connected with the filling equipment through Bluetooth; the adapter is inserted into a data interface of the electric vehicle and is used for acquiring identity information of the vehicle-mounted terminal and transmitting the identity information to the filling equipment; the filling equipment communicates with the PKI certificate server through network connection; the sending module is used for sending the public key and the identity information of the vehicle-mounted terminal to the PKI server, so that the PKI server generates a digital certificate according to the public key and the identity information of the vehicle-mounted terminal; the digital certificate generated by the authentication center is also acquired and written into the electric vehicle main controller through the adapter; according to the utility model, through the filling tool and the detachable wirelessly-connected adapter, the electric vehicle certificate downloading device is adapted to electric vehicles of different models so as to wirelessly download certificates; the efficiency is greatly improved, and convenience is brought to users.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

The invention discloses a data transmission security system of an unmanned aerial vehicle remote controller in a wireless local area network, which comprises an unmanned aerial vehicle, a ground end and a remote control end, and is characterized in that the ground end comprises the unmanned aerial vehicle remote controller, wireless terminal access equipment, a ground switch and a certificate server, and the unmanned aerial vehicle is wirelessly connected with the unmanned aerial vehicle remote controller; the unmanned aerial vehicle remote controller is connected with the wireless terminal access equipment by using a WAPI encrypted wireless local area network, the wireless terminal access equipment is in wired connection with the ground switch, and the ground switch is in communication connection with the certificate server and the remote control end; wherein the unmanned aerial vehicle transmits acquired data to the wireless terminal access equipment through the unmanned aerial vehicle remote controller, and the wireless terminal access equipment is used for performing WAPI encryption on the data, verifying a certificate provided by the certificate server and transmitting the verified data to the remote control end through the ground switch; the problem of potential data security in wireless network transmission is effectively solved, and the security of data transmission is remarkably enhanced.