84 results about "Certificate signing request" patented technology

The invention provides a real estate full life cycle intelligent management method and system based on Internet of Things perception, and the method comprises the steps: distributing a unique hardware identifier of equipment, combining a lightweight digital certificate with a pre-shared key to achieve two-factor authentication, and storing a root certificate in a cloud end; an access authentication process is optimized, an identity label and a certificate signature request need to be submitted when a node accesses for the first time, a temporary session key is generated after the gateway verifies, and abnormal access is immediately isolated and reported; data integrity verification is implemented, and after a sensor collects data, an abstract is generated and data encryption transmission is carried out; after decryption, the receiving end recalculates the abstract for comparison, and if not, the abstract is discarded and nodes are marked to be abnormal; a data anomaly detection model is constructed, energy consumption fluctuation is determined based on historical data, a frequency baseline is collected, data reasonability is monitored in real time, secondary authentication is triggered when the data is abnormal, and node data access is suspended if the data fails; a hierarchical key system is established, hardware is solidified by a root key, session keys are alternated for 24 hours, and data encryption keys are dynamically derived and distributed through encryption channels.

Systems and methods for performing zero knowledge proofs to prove a user's possession of secret data and / or biometric data without exposing such data. The methods can include receiving a certificate signing request and biometric data associated with a user; creating a stable key based at least in part on the biometric data; creating a private key based at least in part on the stable key; transmitting the private key to the user device for local storage thereon; creating a public key based at least in part on the private key; and forwarding the certificate signing request to an issuer.

According to embodiments of this disclosure, a method, apparatus, device and storage medium for device authentication and checking are provided. The method of device authentication includes: sending, at a first device, a device activation request to a second device, the device activation request comprising identity authentication information of the first device; and in response to receiving an activation certificate from the second device, storing the activation certificate in a trusted environment associated with the first device. The method further includes: sending a certificate signing request to the second device, the certificate signing request being generated based at least in part on the activation certificate in the trusted environment; and storing a device certificate received from the second device in the trusted environment, the device certificate being generated based on the certificate signing request.

The embodiment of the invention discloses a digital certificate issuing method based on a post-quantum hybrid algorithm and a related device. A user terminal generates three pairs of public and private keys according to an asymmetric encryption algorithm, a post-quantum key signature algorithm and a post-quantum key encapsulation algorithm; generating a certificate signature request according to the mixed public key comprising the first public key and the second public key and the user identification information; the first public key and the third public key are sent to the CA terminal; the CA terminal generates a mixed secret key signature, a packaging certificate, a secret key packaging ciphertext and an encrypted mixed secret key packaging private key according to the two; the user terminal decrypts the secret key packaging ciphertext and the encrypted mixed secret key packaging private key according to the first private key and the third private key to obtain the mixed secret key packaging private key; according to the method, the mixed key signature and the packaging certificate are installed and are bound with the corresponding private key, so that signing and issuing of the mixed key signature and the packaging certificate can be realized, legal use of the certificate in an anti-quantum algorithm scene is ensured, and information security is improved.

Provided are a method, system, and device for registering an xApp instance in a cloud-native network. The method may be implemented by a Near Real-Time (RT) Radio Access Network (RAN) Intelligent Controller (RIC), and the method may include: receiving a registration message including details of an xApp instance and an xApp identifier (ID) from Service Management and Orchestration (SMO); generating a certificate signing request (CSR) based on the registration message, wherein the CSR includes the xApp ID registered in the Near RT-RIC; receiving an identification request message from the xApp instance; verifying the xApp instance based on the identification request message; and sending an identification response message to the xApp instance.

A method and apparatus for generating and processing implicitly attested Certificate Signing Requests (CSRs) is disclosed. In one embodiment, the method comprises generating a message having a public key of a key pair of a device and an identifier of a device; generating a digest of the message; signing the digest according to a private key of the key pair of the device; and encoding the signed digest and the public key to produce the CSR; wherein the CSR implicitly attests to the identity of the device according to at least one of the message, the digest, and the encoding.

A communication system includes a communication device, a terminal device, and a certificate authority is provided. The communication device transmits, to the terminal device, a certificate signing request for requesting issuance of a certificate used for the communication device to communicate with the first server device. The terminal device transmits the certificate signing request transmitted from the communication device to the certificate authority. The certificate authority issues a certificate in response to the certificate signing request transmitted from the terminal device. The certificate issued by the certificate authority is transmitted from the certificate authority to the communication device via the terminal device, and is registered in the communication device.

Techniques for creating, managing, and using SSH certificates with one or more target-specific principals are disclosed. A certificate authority receives a certificate signing request that includes both a user identifier and a resource identifier. The user identifier identifies a user, and the resource identifier represents one or more target hosts. The certificate authority forms a target-specific principal for use in creating the certificate. The target-specific principal indicates both the user and the resource identifier representing the resource(s) for which access is requested. The resource identifier may represent a host class associated with more than one host. Once the certificate authority verifies that the user is entitled to access the requested resource(s), it generates the certificate, signs it, and returns it to the requesting device.

Systems and methods for applying a digitally signed QR code to a vehicle are provided. In one implementation, a method includes the step of receiving, from a requesting entity, a Certificate Signing Request (CSR) and object-related information associated with an object. The method further includes the step of issuing a digital certificate to authenticate the object and / or the requesting entity. Also, the method includes the step of digitally signing a machine-detectable code configured to reference a database associated with the digital certificate and the object-related information. The method also includes the step of sending the digitally signed machine-detectable code to the requesting entity.

Systems and methods for handling supply chain certificates are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include a processor and a memory coupled to the processor. The memory may store program instructions that, upon execution, cause the IHS to receive a message from a supplier identifying a device. The IHS may verify the device against a Purchase Order (PO) database of an Original Equipment Manufacturer (OEM) and may send encrypted material to the supplier. The supplier may generate a Certificate Signing Request (CSR) for the device comprising the encrypted material. The supplier may receive a digital certificate in response to the CSR and stores the certificate in the device. The system may ensure the authenticity and quality of components throughout the supply chain using cryptographic techniques.

Techniques for implementing a client-rooted decryption Public Key Infrastructure (PKI) to securely inspect encrypted traffic in cloud-based proxy environments are disclosed. A proxy node generates an intermediate Certificate Authority (CA) certificate signing request (CSR) and sends it to a client device equipped with a locally-managed root CA. The client device cross-signs the CSR, creating a client-specific intermediate CA certificate, which it returns to the proxy node. This client-specific intermediate CA certificate is scoped uniquely to the individual client device, significantly reducing the potential blast radius in case of CA key compromise. The proxy node uses the client-specific CA certificate to dynamically generate short-lived, scoped decryption certificates for inspecting encrypted traffic. This architecture provides client-level control of trust boundaries, enhanced traceability, reduced complexity, and improved scalability of encrypted traffic inspection, minimizing the operational risks associated with conventional centralized certificate management.

To provide a mechanism capable of preventing an expiration date exceeding a compromise period of an algorithm used for issuance processing of an electronic certificate from being set as the expiration date of the electronic certificate.SOLUTION: The multifunction peripheral 101 generates a public key pair. Further, the multifunction peripheral 101 generates, in accordance with an instruction by the user, an issuance request for an electronic certificate for certifying the validity of the multifunction peripheral 101, which is an issuance request including a certificate signing request generated based on the public key in the public key pair. The multifunction peripheral 101 performs control for preventing an expiration date exceeding the compromise time of the algorithm used for the issuance processing of the electronic certificate from being included in the issuance request for the electronic certificate as the expiration date of the electronic certificate.SELECTED DRAWING: Figure 3

The invention relates to a method for verifying the origin of an electronic unit (1) for a control device (2) using a verification system (3), comprising the steps of: receiving a certificate signing request (7) for digitally certifying the control device (2) with the electronic unit (1) from a requesting instance using a receiving device (4) of the verification system (3), wherein the certificate signing request (7) is signed with a wrapper signature (8) of the electronic unit (1); generating a verification request (9) with a manufacturer of the electronic unit (1) based on the received wrapper signature (8) using an electronic computing device (6) of the verification system (3); transmitting the verification request (9) to the manufacturer using a sending device (5) of the verification system (3);Receiving a verification message (11) for verifying the electronic unit (1) from the manufacturer using the receiving device (4); and verifying the origin of the electronic unit (1) depending on the verification message (11) using the electronic computing device (6). The invention further relates to a computer program product and a verification system (3).

The invention discloses a secure communication method, a robot, a server and a nonvolatile computer readable storage medium. The method comprises the following steps: generating a certificate signature request according to an identifier of the robot and a key pair generated by a public and private key generator; sending a certificate signature request to a server to obtain a certificate from the server; when a certificate sent by the server is received, storing the certificate into a trusted space of the robot through a preset key management service; and responding to the server, acquiring the certificate from the trusted space through the key management service, and establishing communication connection with the server according to the certificate. According to the technical scheme, the certificate matched with the robot can be requested through the key pair and the identifier of the robot, so that when the robot communicates, the communication connection with the server can be established only when the robot has the certificate issued by the server, and the secure communication between the robot and the server is realized.

A method for operating a secure programming system is provided. Firstly, a first verification code is calculated according to a payload extracted from a job control package. Then, a second verification code is calculated according to the payload burnt into a programmable device. If the first verification code and the second verification code are verified successfully, a burning task is performed. Then, an OEM certificate signing request is generated according to an identifiable information and a programmable device public key. If the OEM certificate signing request is verified successfully, an OEM device certificate is generated and signed with an OEM private key. A third verification code is calculated according to the OEM device certificate. Then, a fourth verification code is calculated according to the OEM device certificate burnt into the programmable device.

Techniques are disclosed for implementing a certificates service in a reduced footprint data center. A certificates service data plane can be implemented on a computing device of a reduced footprint data center. The certificates service data plane can include a security certificate usable to establish a secure communication channel. The secure communication channel can be established with a service executing in a virtual cloud network of the reduced footprint data center. The service can include a corresponding security certificate to the security certificate. The certificates service data plane can receive a certificate signing request from the service using the secure communication channel and issue a signed certificate to the service using the secure communication channel.

The invention provides a hierarchical certificate issuing system, method, device and equipment, and the system comprises root CA equipment, strategy CA equipment and certificate issuing CA equipment: the root CA equipment is used for generating a self-signature root CA certificate based on a root CA key pair, and carrying out the signature of a strategy CA certificate signature request of the strategy CA equipment through employing a root CA private key, and obtaining the strategy CA certificate; the policy CA equipment is used for acquiring a policy CA certificate from the root CA equipment and signing a certificate issuing CA certificate signature request of the certificate issuing CA equipment by adopting a policy CA private key to obtain the certificate issuing CA certificate; the certificate issuing CA equipment is used for acquiring a certificate issuing CA certificate from the policy CA equipment and signing a terminal certificate signature request of the terminal equipment by adopting a certificate issuing CA private key to obtain a terminal entity certificate; and the certificate issuing CA equipment is also used for sending a certificate chain to the terminal equipment, and the certificate chain comprises a self-signature root CA certificate, a policy CA certificate, a certificate issuing CA certificate and a terminal entity certificate.

The invention relates to the technical field of data transmission, and discloses a cloud side data transmission method and device, computer equipment and a storage medium, and the method comprises the steps: initiating a certificate signature request to a cloud server, and obtaining an equipment certificate issued by the cloud server; sending a device certificate of the edge device and the first key parameter to the cloud server side under the condition of data transmission with the cloud server side; the cloud server side is used for generating a first data key of an application layer according to the first key parameter and a preset private key of the cloud server side, and returning a second key parameter; acquiring a second key parameter returned by the cloud server, and generating a second data key of the application layer according to the second key parameter and a preset private key corresponding to the first key parameter; and encrypting the original data according to the second data key to obtain encrypted data, and sending the encrypted data to the cloud server. According to the invention, data leakage can be effectively avoided, and the security of data transmission can be improved.

A method and apparatus for generating and processing implicitly attested Certificate Signing Requests (CSRs) is disclosed. In one embodiment, the method comprises generating a message having a public key of a key pair of a device and an identifier of a device; generating a digest of the message; signing the digest according to a private key of the key pair of the device; and encoding the signed digest and the public key to produce the CSR; wherein the CSR implicitly attests to the identity of the device according to at least one of the message, the digest, and the encoding.

Systems and methods for cryptographic algorithm identity certificate selection in an Information Handling System (IHS) are described. In one embodiment, an IHS includes a processor, and a memory coupled to the processor. The memory stores program instructions that, upon execution, cause the processor to receive a Certificate Signing Request (CSR) from a server, sign the CSR with a first Cryptographic Algorithm Identity (CAI) key stored in the memory, and send the signed CSR to the server. The server is configured to identify a geographical region that is associated with the first CAI key, identify an approved cryptographic algorithm that is approved for use in the identified region, and send a second CAI key associated with the identified approved cryptographic algorithm. When the IHS receives the second CAI key from the server, it may perform a cryptographic operation using a cryptographic algorithm associated with the second CAI key.

The invention provides an edge device security authentication method and system, and the method comprises the steps: a production stage: generating a certificate signature request based on a security element of an edge device, so that a cloud server signs and issues a device certificate according to the certificate signature request; in the cloud server, establishing a binding relationship between the device identifier of the edge device and the element identifier of the secure element; in the deployment stage, the edge device executes bidirectional authentication with the cloud server so as to complete registration of the edge device after the cloud server verifies the binding relationship between the device identifier and the element identifier; in the use stage, the cloud server responds to a binding request which is initiated by the user terminal and carries the device identifier, and binding of the user terminal and the edge device is completed. According to the invention, security protection based on a deep hardware level and full-life-cycle security management from production to user use are provided, a security authentication process is guaranteed through high automation, and the authentication efficiency and security risk are greatly improved.

The invention discloses an authentication method, an authentication system and a communication method, a complex three-level architecture under a PKI (Public Key Infrastructure) framework is abandoned, a two-layer architecture of a main controller and nodes is adopted, hierarchical interaction overhead is reduced, a certificate signature request is firstly sent through the nodes, a trust chain between the two layers is established by adopting a signature verification mode, and a certificate signature request is sent through the nodes. And then, within a preset time, based on encryption, decryption, signature and signature verification of the secret key, strict identity authentication of a request-response-confirmation mechanism is completed, so that the security of data interaction during communication can be ensured.

A method implemented by an IoT service in the Matter network is described. In some implementations, the method may include receiving a sharing request from a first client terminal in the Matter network on which a first user is logged, where the sharing request may include an identification of a second user and a designated access level for the second user, and where the second user is logged on a second client terminal. In addition, the method may include sending a sharing notification to the second client terminal. The method may include assigning an identity ID for the second user. Moreover, the method may include generating a first certificate in response to receiving a first certificate signing request from the second client terminal, where the first certificate signing request may include a public key generated on the second client terminal, where the first certificate may include the identity ID for the second user and an assigned access ID in association with the designated access level. Also, the method may include sending the first certificate to the second client terminal, where the first certificate enables the second client terminal to access at least one IoT device in the Matter network according to the designated access level for the second user.

The invention discloses a public key certificate application method, a secure channel establishment method, devices and electronic equipment, and relates to the technical field of multi-party secure computing, and the method comprises the steps that a server side generates a key pair of the server side by TPM equipment through message interaction between the server side and the TPM equipment, the key pair comprises a server side private key and a server side public key, and the server side private key and the server side public key are sent to the TPM equipment; the server-side public key is returned to the server-side by the TPM equipment, and the server-side private key is used for establishing a secure channel between the server-side and a client outside the TEE by the TPM equipment; generating a certificate signature request, wherein the certificate signature request carries a server-side public key; sending a certificate signature request to a CA system; and receiving a server-side public key certificate returned by the CA system, wherein the server-side public key certificate carries the server-side certificate signature and the server-side public key. By adopting the method, the security of external data transmission of the server side is improved.

A device may include processing circuitry configured to, generate a device identifier associated with the device, and generate a unique endorsement identity (ID) associated with the device identifier, a first layer sub-circuit configured to, receive the device identifier, and generate a first certificate and a second certificate based on the device identifier and the unique endorsement ID, the first certificate and the second certificate including information to authenticate the device, and the processing circuitry is further configured to, receive the first certificate and the second certificate, and verify whether the device has been modified based on the first certificate and the second certificate, wherein, in response to the first layer sub-circuit being modified, the first layer sub-circuit is further configured to, generate an endorsement key based on a new unique endorsement ID, and generate a certificate signing request for the new unique endorsement ID based on the endorsement key.

The invention relates to a method for verifying the origin of an electronic unit (1) for a control device (2) using a verification system (3), having the steps of: receiving a certificate signing request (7) for digitally certifying the control device (2) with the electronic unit (1) from a query entity by means of a receiving device (4) of the verification system (3), wherein the certificate signing request (7) is signed with a wrapper signature (8) of the electronic unit (1); generating a verification query (9) for a manufacturer of the electronic unit (1) on the basis of the received wrapper signature (8) by means of an electronic computing device (6) of the verification system (3); transmitting the verification query (9) to the manufacturer by means of a transmitting device (5) of the verification system (3); receiving a verification message (11) for verifying the electronic unit (1) from the manufacturer by means of the receiving device (4); and verifying the origin of the electronic unit (1) on the basis of the verification message (11) by means of the electronic computing device (6). The invention also relates to a computer program product and to a verification system (3).

A method, in a provisioning server, of provisioning a printer, includes: receiving a provisioning request from the printer, the provisioning request containing (i) a printer identifier, and (ii) an account identifier associated with the printer; obtaining, from a digital certificate issuer, a unique string; sending the unique string to the printer; receiving from the printer, in response to sending the unique string, a certificate signing request containing (i) the printer identifier, (ii) the account identifier, and (iii) an authentication token including the unique string signed with a private key of the printer; validating the certificate signing request; passing the validated certificate signing request to the digital certificate issuer; receiving, from the digital certificate issuer, a digital certificate encoding the printer identifier and the account identifier; and providing the digital certificate to the printer for storage.

The invention discloses a trusted digital identity management method, device, equipment, medium and product, a super SIM card receives a key generation instruction sent by a user terminal, generates a key comprising a public key and a private key, generates a certificate signature request file according to the public key and an identity identification code of the user terminal, and sends the certificate signature request file to the user terminal; the user terminal carries a certificate signature request file and user identity information and initiates a digital identity creation request to the trusted identity platform; and when the SIM card receives encrypted data returned after the trusted identity platform adopts the public key to encrypt, the SIM card adopts the private key to decrypt to obtain the digital identity certificate, the user identity information and the biological characteristic identification information signed by adopting the digital identity certificate in the encrypted data, and returns a digital identity creation result to the user terminal. According to the invention, the management processes such as creation and authentication of the digital identity certificate are realized through the super SIM card, and the security of the digital identity certificate in the storage and authentication process is improved.

Certificate management as-a-service for software-defined datacenters is described herein. One method includes receiving an indication of an expiry of a first certificate of a virtual appliance in a virtualized environment via a certificate management agent of a gateway device in communication with the appliance, and performing a certificate replacement process responsive to determining that the expiry of the first certificate exceeds a threshold, wherein the certificate generation process includes sending a request to the appliance via an agent associated with the appliance, receiving, from the appliance, a certificate signing request (CSR), sending the CSR to an external certificate authority, receiving a second certificate from the certificate authority, and replacing the first certificate with the second certificate.

To make it possible to prevent information leaks and ensure convenience.SOLUTION: An information processing device that performs encrypted communication with an external device is provided. The information processing device includes: generation means for generating a private key for the encrypted communication and a CSR (Certificate Signing Request) using the private key; storage means for storing the private key, the CSR, and a certificate issued based on the CSR; first reception means for accepting an instruction to initialize information stored in the storage means; and control means for performing control to erase the CSR and the certificate but not the private key when the first reception means accepts the instruction to initialize.SELECTED DRAWING: Figure 9