21 results about "Certificate server" patented technology

The invention relates to the field of digital certificates and certificate application, and discloses an anti-quantum cryptography agile migration method capable of dynamically adapting to an algorithm, which is cooperatively executed by a strategy server, a certificate server and an application terminal: the strategy server monitors a migration progress and dynamically generates and issues a migration strategy; the application terminal analyzes the strategy and applies for a specified type of certificate from the certificate server; the certificate server carries out processing and issues a certificate; and the application terminal dynamically selects an algorithm compatible with the target application to establish secure connection according to the strategy during communication. According to the method, through automatic certificate management driven by a strategy and terminal self-adaptive algorithm selection, agile and smooth migration of the cryptographic algorithm is realized, and the problems of compatibility and safety management in the migration process are effectively solved.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

The invention relates to the technical field of software version control and code security management, in particular to an authority control method, system and device under front-end code monorepo warehouse management and a medium. The method supports file-level, directory-level and extended-name-level multi-dimensional authority rules, fills the blank of Git native capability, and realizes fine-grained control; the method is realized completely based on a Git hook, does not need additional services or middleware, is compatible with any Git hosting platform, and realizes zero external dependence; permission file modification is ensured to be authorized by an administrator through digital signature, so that a developer is prevented from relaying permission rules privately; the signature verification process is completed at the local hook, an external certificate server does not need to be connected, the security and the offline availability are both considered, and the tamper-resistant capability is enhanced.

A method and system for intelligent management of equipment availability based on digital calibration certificates, belonging to the field of metrology and testing technology. The system includes a digital calibration certificate server, a digital calibration certificate authentication module, an intelligent gateway, and a host computer. By uploading the digital calibration certificate of the measuring equipment to the digital calibration certificate server, and after authentication, the host computer accesses the digital calibration certificate to obtain basic equipment information, certificate release date, and calibration results. Combined with the association information between the intelligent gateway port stored on the server and the equipment usage requirements, the management of measuring equipment values ​​and product quality management are highly integrated in time and space. The system determines the availability of equipment and disables or restricts data transmission from measuring equipment that does not meet management requirements, restricts the measuring equipment's access to the measurement network, and issues alarms for corresponding measuring equipment faults via the host computer.

Near field communication (NFC) is used for banking, access control or identification. The NFC-chip contains data verifying the identity of the holder, which is read by an NFC-chip reader. NFC-chip readers are now often online or stand-alone terminals, which may be trusted or untrusted. Trusted terminals may require a communication link to a certificate server. Untrusted terminals require a link to a server that performs the authentication steps and may require a link to a certificate server. A disadvantage of conventional NFC-chips and readers is that it can be challenging to position NFC-chip readers at remote or other arbitrary locations. A solution is found in a method for communication with an NFC-chip of a user identification document, by which a terminal obtains protected data from the NFC-chip, including the step of verifying the integrity of the protected data; and a server verifies genuineness of the NFC-chip communicating via the terminal.

The embodiment of the application discloses a kind of methods for distributing application, comprising: application certificate server sends first application certificate to application developer equipment, first application certificate is used to identify application developer, and application developer equipment is used to join target application with first application certificate;Application certificate server obtains second application certificate information from application distribution server;If application certificate server confirms that first application certificate matches second application certificate according to second application certificate information, application certificate server sends check-through result to application distribution server.The application also provides a kind of device, equipment and medium, and application developer equipment joins the application certificate that application certificate server uniformly manages in target application, so that application distribution server can check application by application certificate, while avoiding the installation conflict problem that occurs due to package name repetition in the process of multi-channel distribution application.

The invention provides an identity authentication method and device, equipment, a medium and a program product, which can be applied to the technical field of security authentication and artificial intelligence. The method comprises the following steps: calling a near field communication module of a mobile terminal of a target client, reading a certificate ciphertext of an identity certificate of the target client, and sending the certificate ciphertext to an empirical server for verification; calling a camera module of the mobile terminal to obtain image information of the identity document, inputting a pre-trained feature extraction model to output anti-counterfeiting features, and sending the anti-counterfeiting features to an anti-counterfeiting verification server for verification; wherein the feature extraction model is obtained according to training of an identity document sample, and the identity document sample is marked with at least one item of optically variable ink, a directional photochromic film or micro characters; responding to the received certificate ciphertext and the anti-counterfeiting feature verification passing result, and confirming that the identity certificate is true and effective; the verification result of the identity document is used as a basis for identity authentication when the target customer handles the business.

The present invention relates to the field of information technology, and in particular to a low-latency electronic data storage method, comprising: establishing a storage server and a plurality of execution nodes, the storage server generating a storage function; dividing the storage period T into a plurality of small periods, converting the storage function into a binary machine code and sending it to a plurality of execution nodes; connecting the data node to the storage server, and the storage server assigning a node serial number; the data node extracting the hash value of the electronic data to be stored, and sending the last N bits of the associated node serial number and timestamp to any execution node; the execution node verifies the timestamp, obtains the current small period serial number, uses the node serial number as the first serial number, uses the small period serial number as the second serial number, substitutes it into the storage function, obtains the corresponding matching number and feeds it back to the data node; the data node stores the matching number and timestamp associated with the electronic data to be stored. The substantial effect of the present invention is that the electronic data storage can be completed in a timely manner.

Disclosed is a method of operating a certification server of a public key certificatesystem. The method includes receiving a request for issuance of a public key certificate from a terminal, determining a terminal encryption scheme and a certification encryption scheme that are suitable for a public key certificate system, the terminal encryption scheme and the certification encryption scheme being encryption schemes allowed in the public key certificate system, generating a public key of the terminal according to the terminal encryption scheme, generating a public key certificate for verifying the validity of the public key of the terminal according to the certification encryption scheme, and transmitting the public key certificate to the terminal.

The present invention provides a method, device and system for authorizing an ETC security authentication device based on location information, the method comprising: determining whether the self-positioning falls within the preset electronic fence range; initiating an SSL handshake request to a certificate server; sending a pre-generated random number and self-ID information to an online key platform for identity authentication; after the identity authentication is passed, receiving the authorization authentication ciphertext sent by the online key platform and decrypting it using a local key; determining whether the authorization is successful based on the decryption result. The system and method provided in the present application replace the function of the PSAM card in the traditional RSU antenna, and compared with the PSAM card, it is not easy to lose and is adaptable to different network environments. Moreover, a positioning verification link is added to the present method to ensure that the security authentication device is reasonably used in the correct area, avoiding incorrect use or unauthorized change of use.

The invention discloses an equipment availability intelligent management method and system based on a digital calibration certificate, and belongs to the technical field of measurement testing. The system comprises a digital calibration certificate server side, a digital calibration certificate authentication module, an intelligent gateway and an upper computer. A digital calibration certificate of measurement equipment is uploaded to a digital calibration certificate server side, and after the digital calibration certificate is authenticated, an upper computer accesses the digital calibration certificate to obtain equipment basic information, certificate release date and calibration result in the digital calibration certificate; in combination with the association information of the intelligent gateway port stored in the server side and the equipment use requirement, the management of the measurement equipment quantity value and the management of the product quality are highly fused in time and space, the permissibility of the equipment is judged, and the data transmission of the measurement equipment which does not meet the management requirement is forbidden or restricted. And limiting the access of the measurement equipment to the measurement network, and giving an alarm for the fault of the corresponding measurement equipment through the upper computer.

The invention belongs to the field of wireless ad hoc networks, and discloses a wireless ad hoc network quantum security authentication method and a related device, in a master station mode, a quantum protection key is written into equipment offline and is used for encrypting a one-time quantum authentication key, and symmetric challenge-response authentication is realized through ciphertext transmission and decryption; in the independent mode of the device, the device generates quantum random public and private keys and requests for a digital certificate, the server signs with a root certificate and then distributes, and certificate exchange and challenge-response authentication are supported. By adopting the method, the network security is remarkably improved, illegal access and data leakage are effectively prevented, stable operation of the key information infrastructure is ensured, the authentication reliability is enhanced, and different deployment requirements are met.

The invention relates to a pressure plate data acquisition module based on trusted WLAN (Wireless Local Area Network) network security authentication, which comprises a secret key and certificate generation unit, a secret key and certificate management unit and a pressure plate data acquisition unit, the intranet secret key certificate server is responsible for issuing, verifying and managing equipment, certificates and secret keys used in the intranet; the trusted pressure plate data acquisition module provides an equipment MAC address for the secret key certificate generation unit, when equipment enters a debugging stage after being installed in a transformer substation, a transformer substation trusted WLAN network starts a temporary network, an intranet secret key certificate server is started, and the intranet secret key certificate server applies for replacing a formal secret key or certificate; after the application, a formal secret key and a formal certificate are automatically distributed to the equipment after comparison and auditing to an intranet secret key certificate server are completed. According to the invention, the network security is improved to a great extent, the transformer substation pressing plate acquires the secret key certificate of the network to realize automatic management, and the security requirement of state grid intelligent development is further improved.

The invention provides a method, a system and equipment for applying certificates in batches and a readable medium. The method comprises the following steps: acquiring at least two public keys which need to apply for certificates; obtaining certificate application data respectively corresponding to the at least two public keys; generating a request data packet for applying certificates in batches according to the certificate application data corresponding to the at least two public keys; and generating a certificate batch application request message carrying the request data packet, and sending the certificate batch application request message to a certificate server. The method is used for realizing batch application of certificates.

The invention discloses a system data security enhancement method, which relates to the field of computer security, and comprises the following steps: step 1, a client requests for connection and sends a 'THello' message to a server; 2, the server responds, and after receiving the 'THello', the server replies a 'SHello' message; 3, the server sends the certificate, and the server sends the certificate of the server; step 4, key exchange; according to the method, before data transmission is carried out between the client and the server, handshake is carried out through the request sent by the client and the response of the server, so that the security of data transmission is ensured; and meanwhile, the data are encrypted and decrypted, so that the security of data transmission is further improved.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

The invention belongs to the technical field of electric power communication, and particularly relates to a safe access method and system for a credible WLAN network of a transformer substation. The method comprises the following steps that: the portable access device initiates a data packet comprising a certificate authentication process and a key negotiation process to a wireless access controller AC; after the AC adds the local certificate to the data packet, forming a certificate authentication request packet and sending the certificate authentication request packet to a certificate server AS; after the certificate authentication request packet is verified and signed by the AS and the AC, the certificate authentication request packet is packaged into an access authentication response packet, and the access authentication response packet is transmitted back to the portable access device; and the portable access device analyzes and verifies the data in the access identification response group, and judges the legality of the wireless access controller AC and the legality of the access. Through peer-to-peer bidirectional identification of the portable access device and the AC, access safety, channel safety and data safety of the portable access device can be ensured.

The utility model relates to the technical field of electric vehicles, in particular to an electric vehicle digital certificate transmission tool based on a PKI certificate system. Comprising an adapter and filling equipment, a mounting groove for mounting the adapter is reserved in the back of the filling equipment; two pins are arranged on a shell of the filling equipment and used for being connected with an adapter to charge the adapter. The adapter is wirelessly connected with the filling equipment through Bluetooth; the adapter is inserted into a data interface of the electric vehicle and is used for acquiring identity information of the vehicle-mounted terminal and transmitting the identity information to the filling equipment; the filling equipment communicates with the PKI certificate server through network connection; the sending module is used for sending the public key and the identity information of the vehicle-mounted terminal to the PKI server, so that the PKI server generates a digital certificate according to the public key and the identity information of the vehicle-mounted terminal; the digital certificate generated by the authentication center is also acquired and written into the electric vehicle main controller through the adapter; according to the utility model, through the filling tool and the detachable wirelessly-connected adapter, the electric vehicle certificate downloading device is adapted to electric vehicles of different models so as to wirelessly download certificates; the efficiency is greatly improved, and convenience is brought to users.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

Some embodiments provide proxies or other servers in a computing network with independent certificate chains which facilitate mitigation of certificate problems. Independence criteria are enforced against two or more installed certificate chains on a given server, identifying and avoiding dependencies such as cross-certification, shared certificate authorities, shared revocation lists, or shared certificate status protocol endpoints between the certificate chains. Some embodiments serve independent certificates concurrently in an active-active certificate server configuration. The certificate chains' coexistence and their independence from one another facilitates transitioning the network from a failing issuer or a failed chain to a chain that works better, thereby improving network resilience and limiting damage from certificate problems. By dynamically updating certificate bindings, some embodiments also facilitate safe deployment of new certificates during migration from one issuer to another. Certificate distributions are computed from issuer ratios, network topology, or both.

The invention discloses a data transmission security system of an unmanned aerial vehicle remote controller in a wireless local area network, which comprises an unmanned aerial vehicle, a ground end and a remote control end, and is characterized in that the ground end comprises the unmanned aerial vehicle remote controller, wireless terminal access equipment, a ground switch and a certificate server, and the unmanned aerial vehicle is wirelessly connected with the unmanned aerial vehicle remote controller; the unmanned aerial vehicle remote controller is connected with the wireless terminal access equipment by using a WAPI encrypted wireless local area network, the wireless terminal access equipment is in wired connection with the ground switch, and the ground switch is in communication connection with the certificate server and the remote control end; wherein the unmanned aerial vehicle transmits acquired data to the wireless terminal access equipment through the unmanned aerial vehicle remote controller, and the wireless terminal access equipment is used for performing WAPI encryption on the data, verifying a certificate provided by the certificate server and transmitting the verified data to the remote control end through the ground switch; the problem of potential data security in wireless network transmission is effectively solved, and the security of data transmission is remarkably enhanced.