231 results about "Certificate verification" patented technology

The invention discloses a power system source network interaction data security encryption verification method, system, device and medium, and belongs to the technical field of power system communication encryption, and the method comprises the following steps: a source side device and a network side device complete identity authentication through a bidirectional digital certificate verification mechanism; and an identity binding label is generated in combination with the device identifier, the timestamp and the position information. And after the authentication is passed, the two parties perform key negotiation based on an elliptic curve algorithm, and generate a temporary encryption key in combination with an authentication result. A source side device carries out structural packaging on original interaction data, adds a random number, a timestamp and a hash abstract, then encrypts the original interaction data in an AES-GCM mode, and carries out signature binding on key fields through digital signatures to form a complete data packet. And a receiving end performs compliance judgment on the timestamp and the random number in the data packet, and after the timestamp and the random number are confirmed to be in an effective time window and are not replayed, signature verification, decryption processing and Hash consistency verification are sequentially completed, so that closed-loop processing of a data flow is ensured.

The invention provides a multi-authentication electronic official certificate verification method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps: receiving an electronic official certificate uploading request, carrying out encryption processing to generate a secret key, carrying out the block encryption of an official certificate file to obtain an electronic ciphertext, carrying out the authentication of a creator identity to obtain an elliptic curve digital signature, and carrying out the verification of the elliptic curve digital signature. Writing in a new block, and calculating a block hash value; the target block is inquired, and if matching succeeds, the first verification information is extracted and verified, and a comprehensive verification result is generated; and carrying out consensus verification, modifying the block outlet time by dynamically adjusting the block difficulty value and verifying, if the block outlet time is true and effective, generating a verification result ciphertext and feeding back the verification result ciphertext to the request main body, and if objection exists, sending an objection application and carrying out objection rechecking, generating an arbitration result and writing the arbitration result into the new block.

The invention discloses a data security transmission method and system with anti-quantum security, and relates to the technical field of data transmission, and the method comprises the steps: obtaining information which comprises an identity identifier, a temporary public key, a temporary secret value and a validity period demand of a user; generating a public key and a private key of the user based on an ML-DSA signature algorithm; sending an authentication request to a CA authentication center according to the information and a public key of the user, and receiving a certificate authenticated, signed and issued by the CA authentication center; exchanging and verifying the credentials of each other with other users; and after the certificate verification is passed, responding to the data transmission instruction, calling and executing a temporary shared key generation module, outputting a temporary shared key, and then sending data to other users or receiving data from other users based on an SM4 algorithm and an ML-DSA signature algorithm according to the temporary shared key. According to the invention, the cost and risk during upgrading and updating of the system are reduced.

The invention discloses an iframe two-way encryption communication method and system based on a network target range, and belongs to the technical field of network security. In the aspect of data communication of iframes of a front-end platform and a third-party platform, security is enhanced, a digital certificate is generated through an ECDH key pair, and a foundation is laid for identity verification; then TCP handshake is simulated to establish a reliable channel, and two-way identity authentication resisting replay attack is achieved through two-way certificate verification and random number exchange; then negotiating a shared key by using ECDH, deriving a dynamic session key through an HKDF algorithm, and ensuring forward confidentiality; and finally, real-time data encryption and integrity verification are carried out by adopting AES-GCM, and the anti-leakage capability is continuously improved through a timing key rotation mechanism. The whole process fuses the characteristics of quantum computing resistance, low resource consumption, efficient transmission and the like, an end-to-end secure communication normal form is provided for Web application, and cross-session key confusion is prevented.

The invention discloses a power distribution terminal upgrading method, system and device based on an SD card and a medium. The method specifically comprises the steps of generating an incremental package of a Linux kernel and / or a root file system, calculating a hash value file of the incremental package, and generating a block chain certificate with a timestamp; encrypting and packaging the incremental package, the hash value file and the block chain certificate into a container mirror image, performing digital signature to form an upgrade package, and writing the upgrade package into an SD card; after it is detected that the SD card is inserted, mounting a boot partition, analyzing metadata of an upgrade package, and setting an upgrade flag bit and an upgrade operation type of Boot; and performing digital signature verification, hash value file verification and block chain certificate verification on the upgrade package in the SD card, if the verification is passed, backing up user parameters to the encrypted storage area, and restarting to enter the Recovery OS to complete replacement upgrade of the Linux kernel and / or the root file system. According to the method, safe, efficient and flexible upgrading of the operating system of the power distribution automation terminal is achieved, the rollback function is achieved, and the upgrading risk and cost are effectively reduced.

The invention discloses a cross-domain authentication bridging method and system oriented to industrial Internet of Things interconnection, and belongs to the technical field of Internet of Things security, and the method comprises the steps of system initialization, cross-domain bridging, certificate verification, key exchange and secure communication, dynamic certificate updating and management and the like. According to the method, technical means such as ChaCha20, Poly1305, BLAKE2s, Ed25519, an elliptic curve Diffie-Hellman and the like are comprehensively utilized, a Bloom filter and a Merkle tree are utilized to realize incremental updating and rapid verification of a revoked list, and dynamic key generation and seamless switching are completed through domain division management. Therefore, the system has the characteristics of low time delay, high safety and fault tolerance, is suitable for large-scale industrial scenes, can remarkably reduce the bandwidth and calculation overhead, improves the equipment interconnection efficiency, enhances the safety, and is suitable for industrial field multi-domain collaboration.

To provide a novel technique for streamlining a verification operation of a certificate possessed by a user by utilizing a video call.SOLUTION: A certificate verification method executed by a computer device includes: a video call step of executing a video call between a user terminal and a supporter; a target certificate information acquisition step of acquiring target certificate information on the basis of imaging at the user terminal during the video call; a certificate verification step of verifying a certificate on the basis of the target certificate information acquired in the target certificate information acquisition step; and a registration step of registering a verification result for the target certificate information in association with user information of a user who executed the video call, the steps being performed by at least one processing unit.SELECTED DRAWING: Figure 5

The invention relates to the technical field of data processing and storage, in particular to an asynchronous verification and batch storage system and method for high-concurrency voucher data. Certificate verification is executed based on the memory snapshot, and verification time consumption is improved from the millisecond level of database IO to the microsecond level of memory calculation; a batch persistence mechanism enables the throughput of the system to be improved by dozens of times, and a concurrent storage scene of ten thousand-level TPS can be easily supported; the voucher storage response time is reduced from a hundred millisecond level to a millisecond level; the response is immediately returned to the user after the verification is passed, the user almost does not need to wait, and the operation experience is smooth; the introduction of the message queue enables the system to have peak clipping and valley filling capabilities, and can deal with burst traffic leisurely; the multi-node cluster deployment supports horizontal capacity expansion, the fault of a single node does not influence the overall service availability, and the system reliability is improved.

The invention relates to the technical field of data backup, and discloses an iOS device data backup and recovery method and system, and the method comprises the steps: carrying out the SSL certificate verification and EscrowBag key authentication of an iOS device, and obtaining a data path list; according to the data path list, parallel scanning of APFS file system B-Tree traversal, NAND flash memory page reading and SQLite WAL log analysis is carried out on the iOS device storage partition, and an original data set is obtained; performing integrity evaluation based on the original data set to obtain an effective data set and constructing a virtual file index; the data selection list of the user is confirmed based on the virtual file index, safety recovery is executed, and a data recovery result is returned. The SQLite page Cell reconstruction and fragment file signature matching technology is combined, intelligent repair and quality prediction can be conducted on damaged data, the user experience and operation efficiency are improved, and the user experience is improved. And the security and the reliability in the data recovery process are ensured.

A method, performed by at least one processor of a trust broker, for establishing trust of vendor-supplied Open Radio Access Network (O-RAN) software, includes: receiving a plurality of O-RAN software from a plurality of O-RAN software vendors, the plurality of O-RAN software respectively signed by the plurality of O-RAN software vendors; for a software, among the plurality of O-RAN software, verifying a signature included with the software using a vendor certificate issued by a certificate authority (CA) of the corresponding vendor; based on successful verification of the signature, performing a software attestation with respect to the software using a digital certificate issued by a CA of the trust broker; and providing the attested software to an operator corresponding to the O-RAN system and with which the trust broker has a trust relationship.

The invention relates to the technical field of enterprise license management. The invention relates to an enterprise license data intelligent management and early warning platform. The system comprises a certificate obtaining unit, a historical use collection unit, a behavior tracking unit, a certificate encryption unit and a certificate verification unit. The certificate obtaining unit obtains standard certificate data of an enterprise certificate and obtains historical use records of the enterprise certificate at the same time. Behavior data of historical use requirements are collected and subjected to standard analysis through the data tracking module, risk use requirements are judged after comparison with preset behavior standards, then a risk database is established through the risk assessment module, a risk value of a user is calculated, quantitative assessment and hierarchical management of the license use risk are achieved, and the user experience is improved. Meanwhile, the real-time use requirement, the risk database and the user risk numerical value are combined, the use duration and the encryption frequency are dynamically adjusted, accurate control is achieved, and the potential safety hazard of high-risk behaviors is reduced.

The invention provides a power distribution authorization method and device based on a certificate file, equipment and a medium, and relates to the technical field of cross of power distribution automation and information security. A certificate generation end formats authorization information such as equipment unique identification, validity period and operation authority into an XML plaintext, randomly generates a one-time RSA key pair, and sends the one-time RSA key pair to a server; encrypting the segmented plaintext by using a public key to obtain a ciphertext, and carrying out BASE64 coding; and meanwhile, coding the private key through BASE64, performing equal-length segmentation and cross mixing on the private key and the ciphertext to form a mixed character string, adding a private key coding length identifier at the tail part, and finally outputting. And text certificates. And the verification end can perform reverse splitting only according to the length identifier, restore the ciphertext and the private key, complete BASE64 decoding and RSA decryption, analyze the XML, compare the SN and determine whether to open the configuration permission after the validity period.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention provides a method and a device for updating and transmitting a secret key between hardware equipment based on a network layer. The method aims at two paired and mutually authenticated equipment. A new secret key is generated at a first device serving as a sending end, updating is started, identity authentication information related to the new secret key is generated through an original secret key, and the new secret key is encrypted through a device certificate of a second device to form data encryption information. The information is packaged into an update request data frame, and an update identifier is set at a destination MAC address of the frame. And sending the data frame to the second equipment. And the second equipment serving as a receiving end receives the update request data frame from the first equipment, and extracts the identity authentication information and the data encryption information. And verifying the identity authentication information by using the device certificate of the first device, and decrypting the data encryption information by using the original key to obtain a new key after successful verification. And setting a key update result identifier at the destination MAC address of the response data frame, and sending the key update result identifier back to the first device. According to the invention, the key of the paired device can be updated online, and the security and efficiency of key update data transmission are improved.

The invention relates to an IPSEC (Internet Protocol Security) key exchange method resistant to quantum computing. According to the invention, based on a lattice cryptographic algorithm and improved SM4-256 symmetric encryption, secure communication between a master mode and a fast mode is realized; in the main mode, an initiator sends an IKE first message through a UDP (User Datagram Protocol), negotiates SA parameters with a responder and exchanges a lattice password certificate; the two parties encapsulate a temporary 32-byte secret key by using the public key of the opposite party, generate a 512-bit random number through SM4-256 encryption, and sign and transmit the 512-bit random number to realize secure random number exchange and certificate verification; and the two parties calculate a first session key based on a PRF (Pseudo Random Function), and encrypt an exchange data HASH value to complete main mode key consistency confirmation. And after entering the fast mode, taking the main mode session key as an SM4-256 symmetric key to continue communication, sending an SA message carrying a 512-bit random number by the two parties, calculating to obtain a second session key, and establishing an ESP tunnel. According to the method, the security of IPSEC under the threat of quantum computing is improved through the lattice password.

The invention proposes a block chain-based distributed digital identity management platform construction method, and the method specifically comprises the steps: 1) constructing a distributed digital identity management platform which comprises an application end and a DIDSDK, the application end provides a DID service related function, and the DIDSDK provides DID service logic processing; 2) setting a block chain gateway, and docking a block chain core service; constructing a block chain underlying infrastructure, and providing a block chain core service; and 3) constructing a key management system, and providing a key escrow function. The invention provides an innovative solution in the aspect of how to exclude identity center dependence, realize autonomous and controllable identity, minimize privacy disclosure of identity information and other core technical problems, returns ownership of a digital identity and data flow control right to an owner, and supports a data holding mechanism to perform certificate verification through an on-chain smart contract, so that the security of the data holding mechanism is improved. And chain evidence storage is realized for supervision and tracing.

The invention relates to an entry and exit certificate verification method based on dynamic weight and multi-modal fusion, and belongs to the technical field of entry and exit certificate information processing and verification. The method comprises the following steps: collecting multi-source heterogeneous data of a certificate in three modes of visual reading, machine reading and chip reading; constructing a verification data graph taking the unique identification of the certificate as a core, and carrying out data association and alignment; based on a dynamic weight distribution model, performing weighted voting fusion on the homologous key fields, and performing semantic fusion on the heterologous complementary fields; and constructing a traceable verification decision factor matrix, judging a verification conclusion according to the content of the matrix, positioning a source when the verification conclusion is abnormal, and generating a structured verification record containing a complete decision path and a disposal scheme. Through the dynamic weight fusion and the decision factor matrix, the problem of splitting of the existing verification mode is effectively solved, and the accuracy and reliability of the verification result and the process traceability are remarkably improved.

The invention provides an intelligent contract management method and system for cargo receipt circulation, and the method comprises the steps: carrying out the certificate verification of a cargo receipt circulation request of a certificate initiation node through an intelligent contract system, generating a first receipt certificate, and transmitting the first receipt certificate to a certificate confirmation node for signing; receiving signing information of the voucher confirmation node, generating a second document voucher, sending the second document voucher to a first execution node, and monitoring cargo state information; according to the cargo state information, generating a third document voucher, sending the third document voucher to a second execution node, and obtaining transfer state information; and carrying out delivery voucher identification based on the transfer state information, generating a fourth document voucher, sending the fourth document voucher to a voucher receiving node for confirmation, and completing document circulation. According to the method, automatic receipt generation and circulation of multi-node collaboration and state driving can be realized, and trust cost and communication delay across subjects are greatly reduced.

The invention discloses a TLS1.3 protocol security enhancement method and system based on a homologous cryptographic algorithm, and the method comprises the steps: 1), certificate generation: signing and issuing a certificate through an SQISign signature algorithm, and guaranteeing the verification and use of a post-quantum security signature algorithm through the certificate; and 2) protocol design: the client and the server complete identity verification through certificate verification based on an SQISign signature algorithm in a handshake stage of a TLS 1.3 protocol. And the server uses a FleS public key encryption algorithm to carry out key encapsulation and send the key encapsulation to the client, completes key exchange and establishes secure encryption connection with the client. The step 1) and the step 2) comprise compatibility design, and a homology-based post-quantum algorithm and a traditional cryptographic algorithm are allowed to coexist, so that the compatibility of an existing system is ensured. Through the method provided by the invention, the TLS 1.3 protocol can effectively resist security threats brought by quantum computing, the security of network communication in the quantum era is ensured, and meanwhile, the smooth transition of the existing system is ensured.

Embodiments of the present disclosure relate to a network access control method, apparatus and device, and a storage medium. The network access control method includes: receiving a certificate verification request sent by a terminal, and returning a certificate verification response to the terminal, wherein the certificate verification response carries a preset server certificate, the certificate verification response is used for instructing the terminal to verify the preset server certificate based on a root certificate installed in the terminal, and identity verification information of the root certificate is partially or fully different from identity verification information of the preset server certificate; and receiving a verification result returned by the terminal for the preset server certificate, and in a case where the verification result indicates that certificate verification succeeds, determining that the terminal has a security risk and interrupting a network access communication link of the terminal. In the embodiments of the present disclosure, when the terminal successfully verifies the preset server certificate, the terminal may be prevented from accessing a network by interrupting the network access communication link with the terminal, thereby improving the security of the network.

The application discloses a kind of trusted time transfer device and method, it is related to trusted time transfer technical field, including network management system and trusted time transfer equipment;Network management system is used for equipment identity solidification and authentication and equipment operating state real-time monitoring;Trusted time transfer equipment is based on trusted time signal reception relay module, equipment identity authentication pre-solidification mechanism, two-way certificate verification and transmission encryption mechanism, equipment failure stop signal transmission mechanism and the traceability and proof mechanism of time signal, real-time measurement is carried out to trusted time signal, time delay compensation, signal amplification processing is transferred out;The application ensures that itself is not replaced by strict control mechanism;On signal processing, the controllability of time real-time detection and time delay compensation is realized;In addition, it also provides a feasible path for the traceability verification and credibility proof of time signal with time relay function.

The invention provides a certificate verification method based on confusion encryption. The method comprises the steps that an encryption index is obtained through calculation of two large prime numbers; obtaining a private key index through the encryption index; combining the encryption index, the private key index and the modulus to obtain an RSA public key and an RSA private key; generating a message word sequence by utilizing the filled binary data; calculating an intermediate value through the message word sequence; iterating an intermediate state vector of the SM3 compression function by using the intermediate value, outputting a final hash value, and generating a License plaintext by using the final hash value; encrypting the binary data by using the License plaintext and the AES key to obtain a ciphertext; a final License file is obtained through the ciphertext; and verifying the final License file by using the RSA public key and the binary data. According to the method, the integrity of the License data and the authenticity of the source are ensured through a dual mechanism of encryption and signature.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

The invention discloses a trusted time transmission device and method, and relates to the technical field of trusted time transmission, and the device comprises a network management system and trusted time transmission equipment; the network management system is used for equipment identity solidification and authentication and equipment operation state real-time monitoring; the trusted time transmission device performs real-time measurement, time delay compensation and signal amplification processing on a trusted time signal based on a trusted time signal receiving relay module, a device identity authentication pre-curing mechanism, a bidirectional certificate verification and transmission encryption mechanism, a device fault stop signal transmission mechanism and a time signal traceability and proving mechanism, and then transmits the trusted time signal; it is ensured that the device is not replaced through a strict control mechanism; in the aspect of signal processing, the controllability of time real-time detection and time delay compensation is realized; in addition, the time relay function is achieved, and a feasible path is provided for traceability verification and credibility proof of time signals.

The present application relates to the technical field of computer data processing, and especially relates to an intelligent agent system for automatically identifying, downloading and installing self-controllable peripherals, which comprises a device information acquisition module for collecting data to generate hardware identification data; a driver compatibility determination module for comparing a pre-stored self-controllable peripheral list to match a driver resource to generate a resource identification; a secure downloading module for establishing an encrypted connection to download a driver file, storing the driver file in an isolated sandbox after hash verification and digital certificate verification; a driver migration module for simulating a system call environment through an operating system compatibility layer in the driver migration module, and converting a driver instruction into a host system instruction by using a user-level binary translator in the driver migration module; and an automatic installation module for calling a system interface to deploy the driver and verifying an installation state. The present application realizes closed-loop automatic processing from identification to installation of a peripheral driver, and solves the problem of compatibility between a Linux system and a Windows driver.

Methods, systems, apparatuses, and computer-readable storage mediums are described for issuing digital certificates to phone numbers and verifying phone numbers based on the digital certificates. For instance, a client may request from a certificate authority a digital certificate to be associated with the client's phone number. The certificate authority issues a phone number challenge to the client to verify that the request did in fact come from the client. The certificate authority signs and issues the digital certificate to the client responsive to a successful challenge. The digital certificates are utilized to exchange messages between a caller and call recipient to determine whether a phone number provided via CLI is accurate or inaccurate. Embodiments described herein determine whether the phone number is accurate using a process referred herein as positive CLI verification and determines whether the phone number is inaccurate using a process referred herein as negative CLI verification.

The present invention is applicable to the field of information security technology, and provides an identity authentication system and method for solving mutual communication between multiple platforms, including: a certificate generation module: used to provide certificate generation services; a certificate download module: used to provide certificate download services; a certificate renewal module: used to provide certificate renewal services; a certificate revocation module: used to provide certificate revocation services; a certificate verification module: used to provide certificate revocation services; an encryption and decryption service module, used to provide encryption and decryption services; this scheme controls the entry and exit of a privacy computing network through certificates, and the communication between participants is prevented from data leakage through certificate encryption processing; by deploying a certificate management platform to manage certificates and certificate-related operations, all participants in the privacy computing network can only perform certificate-related operations through this platform, and the management of participants is indirectly achieved through the platform's management of certificates.

The invention discloses a digital certificate signing and issuing method and device and a digital certificate verification method and device. The method comprises the steps that a certificate application request submitted by a user is received, and the certificate application request comprises a shared key received by the user in the digital certificate application process; determining an issuing CA corresponding to the certificate application request, and determining an encryption key corresponding to the issuing CA from a key relationship library; encrypting the shared key according to the encryption key to obtain an encrypted shared key, and adding the encrypted shared key to a private extension field in the certificate application request to obtain an updated target certificate application request; and signing the target certificate application request through the signing and issuing CA to generate a corresponding digital certificate. According to the method and the device, the technical problem that the certificate private key is easy to be illegally used after being leaked due to the fact that digital certificate verification in related technologies only depends on verification of validity of the certificate private key and an effective certificate holder identity dynamic verification mechanism is lacked is solved.

The application discloses a zero-carbon washing and selecting and water treatment source network load storage integrated microgrid system based on an energy ring, wherein distributed photovoltaic units and substation energy storage units of each workshop are connected to a common direct-current bus through bidirectional DC / DC isolation units to eliminate parallel circulating current from a physical layer; a central shared energy storage regulating unit is arranged and is specially used for bus voltage stabilization and transient power suppression; a direct-current charging and changing facility with a single-pile independent DC / DC architecture is used as a flexible adjustable load unit, and is combined with washing and selecting and water treatment rigid loads to form a virtual battery regulating capacity of a factory area. A three-in-one scheduling control platform of the application is combined with blockchain storage and wind power green electricity certificate verification and cancellation technologies, and realizes four-flow closed-loop cooperation of energy flow, data flow, carbon flow and value flow. The application effectively reduces equipment loss, improves photovoltaic power consumption capacity, meets distributed photovoltaic full self-generation and self-use approval requirements, realizes zero-carbon energy supply of a factory area at all time periods, and simultaneously completes carbon footprint compliance verification and carbon asset value conversion.