129 results about "Certificate verification" patented technology

The invention relates to the technical field of data processing and storage, in particular to an asynchronous verification and batch storage system and method for high-concurrency voucher data. Certificate verification is executed based on the memory snapshot, and verification time consumption is improved from the millisecond level of database IO to the microsecond level of memory calculation; a batch persistence mechanism enables the throughput of the system to be improved by dozens of times, and a concurrent storage scene of ten thousand-level TPS can be easily supported; the voucher storage response time is reduced from a hundred millisecond level to a millisecond level; the response is immediately returned to the user after the verification is passed, the user almost does not need to wait, and the operation experience is smooth; the introduction of the message queue enables the system to have peak clipping and valley filling capabilities, and can deal with burst traffic leisurely; the multi-node cluster deployment supports horizontal capacity expansion, the fault of a single node does not influence the overall service availability, and the system reliability is improved.

The invention provides a power distribution authorization method and device based on a certificate file, equipment and a medium, and relates to the technical field of cross of power distribution automation and information security. A certificate generation end formats authorization information such as equipment unique identification, validity period and operation authority into an XML plaintext, randomly generates a one-time RSA key pair, and sends the one-time RSA key pair to a server; encrypting the segmented plaintext by using a public key to obtain a ciphertext, and carrying out BASE64 coding; and meanwhile, coding the private key through BASE64, performing equal-length segmentation and cross mixing on the private key and the ciphertext to form a mixed character string, adding a private key coding length identifier at the tail part, and finally outputting. And text certificates. And the verification end can perform reverse splitting only according to the length identifier, restore the ciphertext and the private key, complete BASE64 decoding and RSA decryption, analyze the XML, compare the SN and determine whether to open the configuration permission after the validity period.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention relates to an IPSEC (Internet Protocol Security) key exchange method resistant to quantum computing. According to the invention, based on a lattice cryptographic algorithm and improved SM4-256 symmetric encryption, secure communication between a master mode and a fast mode is realized; in the main mode, an initiator sends an IKE first message through a UDP (User Datagram Protocol), negotiates SA parameters with a responder and exchanges a lattice password certificate; the two parties encapsulate a temporary 32-byte secret key by using the public key of the opposite party, generate a 512-bit random number through SM4-256 encryption, and sign and transmit the 512-bit random number to realize secure random number exchange and certificate verification; and the two parties calculate a first session key based on a PRF (Pseudo Random Function), and encrypt an exchange data HASH value to complete main mode key consistency confirmation. And after entering the fast mode, taking the main mode session key as an SM4-256 symmetric key to continue communication, sending an SA message carrying a 512-bit random number by the two parties, calculating to obtain a second session key, and establishing an ESP tunnel. According to the method, the security of IPSEC under the threat of quantum computing is improved through the lattice password.

The invention relates to an entry and exit certificate verification method based on dynamic weight and multi-modal fusion, and belongs to the technical field of entry and exit certificate information processing and verification. The method comprises the following steps: collecting multi-source heterogeneous data of a certificate in three modes of visual reading, machine reading and chip reading; constructing a verification data graph taking the unique identification of the certificate as a core, and carrying out data association and alignment; based on a dynamic weight distribution model, performing weighted voting fusion on the homologous key fields, and performing semantic fusion on the heterologous complementary fields; and constructing a traceable verification decision factor matrix, judging a verification conclusion according to the content of the matrix, positioning a source when the verification conclusion is abnormal, and generating a structured verification record containing a complete decision path and a disposal scheme. Through the dynamic weight fusion and the decision factor matrix, the problem of splitting of the existing verification mode is effectively solved, and the accuracy and reliability of the verification result and the process traceability are remarkably improved.

The invention provides an intelligent contract management method and system for cargo receipt circulation, and the method comprises the steps: carrying out the certificate verification of a cargo receipt circulation request of a certificate initiation node through an intelligent contract system, generating a first receipt certificate, and transmitting the first receipt certificate to a certificate confirmation node for signing; receiving signing information of the voucher confirmation node, generating a second document voucher, sending the second document voucher to a first execution node, and monitoring cargo state information; according to the cargo state information, generating a third document voucher, sending the third document voucher to a second execution node, and obtaining transfer state information; and carrying out delivery voucher identification based on the transfer state information, generating a fourth document voucher, sending the fourth document voucher to a voucher receiving node for confirmation, and completing document circulation. According to the method, automatic receipt generation and circulation of multi-node collaboration and state driving can be realized, and trust cost and communication delay across subjects are greatly reduced.

Embodiments of the present disclosure relate to a network access control method, apparatus and device, and a storage medium. The network access control method includes: receiving a certificate verification request sent by a terminal, and returning a certificate verification response to the terminal, wherein the certificate verification response carries a preset server certificate, the certificate verification response is used for instructing the terminal to verify the preset server certificate based on a root certificate installed in the terminal, and identity verification information of the root certificate is partially or fully different from identity verification information of the preset server certificate; and receiving a verification result returned by the terminal for the preset server certificate, and in a case where the verification result indicates that certificate verification succeeds, determining that the terminal has a security risk and interrupting a network access communication link of the terminal. In the embodiments of the present disclosure, when the terminal successfully verifies the preset server certificate, the terminal may be prevented from accessing a network by interrupting the network access communication link with the terminal, thereby improving the security of the network.

The application discloses a kind of trusted time transfer device and method, it is related to trusted time transfer technical field, including network management system and trusted time transfer equipment;Network management system is used for equipment identity solidification and authentication and equipment operating state real-time monitoring;Trusted time transfer equipment is based on trusted time signal reception relay module, equipment identity authentication pre-solidification mechanism, two-way certificate verification and transmission encryption mechanism, equipment failure stop signal transmission mechanism and the traceability and proof mechanism of time signal, real-time measurement is carried out to trusted time signal, time delay compensation, signal amplification processing is transferred out;The application ensures that itself is not replaced by strict control mechanism;On signal processing, the controllability of time real-time detection and time delay compensation is realized;In addition, it also provides a feasible path for the traceability verification and credibility proof of time signal with time relay function.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

The present application relates to the technical field of computer data processing, and especially relates to an intelligent agent system for automatically identifying, downloading and installing self-controllable peripherals, which comprises a device information acquisition module for collecting data to generate hardware identification data; a driver compatibility determination module for comparing a pre-stored self-controllable peripheral list to match a driver resource to generate a resource identification; a secure downloading module for establishing an encrypted connection to download a driver file, storing the driver file in an isolated sandbox after hash verification and digital certificate verification; a driver migration module for simulating a system call environment through an operating system compatibility layer in the driver migration module, and converting a driver instruction into a host system instruction by using a user-level binary translator in the driver migration module; and an automatic installation module for calling a system interface to deploy the driver and verifying an installation state. The present application realizes closed-loop automatic processing from identification to installation of a peripheral driver, and solves the problem of compatibility between a Linux system and a Windows driver.

The invention discloses a digital certificate signing and issuing method and device and a digital certificate verification method and device. The method comprises the steps that a certificate application request submitted by a user is received, and the certificate application request comprises a shared key received by the user in the digital certificate application process; determining an issuing CA corresponding to the certificate application request, and determining an encryption key corresponding to the issuing CA from a key relationship library; encrypting the shared key according to the encryption key to obtain an encrypted shared key, and adding the encrypted shared key to a private extension field in the certificate application request to obtain an updated target certificate application request; and signing the target certificate application request through the signing and issuing CA to generate a corresponding digital certificate. According to the method and the device, the technical problem that the certificate private key is easy to be illegally used after being leaked due to the fact that digital certificate verification in related technologies only depends on verification of validity of the certificate private key and an effective certificate holder identity dynamic verification mechanism is lacked is solved.

The application discloses a zero-carbon washing and selecting and water treatment source network load storage integrated microgrid system based on an energy ring, wherein distributed photovoltaic units and substation energy storage units of each workshop are connected to a common direct-current bus through bidirectional DC / DC isolation units to eliminate parallel circulating current from a physical layer; a central shared energy storage regulating unit is arranged and is specially used for bus voltage stabilization and transient power suppression; a direct-current charging and changing facility with a single-pile independent DC / DC architecture is used as a flexible adjustable load unit, and is combined with washing and selecting and water treatment rigid loads to form a virtual battery regulating capacity of a factory area. A three-in-one scheduling control platform of the application is combined with blockchain storage and wind power green electricity certificate verification and cancellation technologies, and realizes four-flow closed-loop cooperation of energy flow, data flow, carbon flow and value flow. The application effectively reduces equipment loss, improves photovoltaic power consumption capacity, meets distributed photovoltaic full self-generation and self-use approval requirements, realizes zero-carbon energy supply of a factory area at all time periods, and simultaneously completes carbon footprint compliance verification and carbon asset value conversion.

This certificate authority verification system includes: a verification device; a local certificate authority device that operates under an isolated execution environment; a certificate presenter device that serves as a server or a client and uses a server certificate or a client certificate; and a certificate verifier device that serves as a server or a client and verifies a presented certificate. The certificate authority device includes a self-certificate generation unit that generates a self-certificate which is a certificate of the certificate authority device itself, an evidence generation unit that generates evidence of the self-certificate, and a reference value registration request unit that executes a reference value registration request together with a reference value of the self-certificate. The verification device includes a reference value registration unit that registers the reference value of the self-certificate.

The public key can be recorded on the blockchain by the certificate authority in such a way that any third party can quickly and easily verify that the public key is certified by the certificate authority and that the certification has not been revoked. The certificate authority can revoke a certification almost instantaneously, and / or can certify a new key for the same entity at the same time as revoking the old key. The verification can be incorporated into a new transaction so that there is no gap between reliance on the certificate and verification of its validity. In some cases, each transaction in which a certificate is used can also serve as a certification transaction that links to update the certificate to enable subsequent use.

This invention provides an information processing device, system, verification method, and program that improve digital certificate verification technology. [Solution] In a system in which an information processing device and a terminal device are connected to a network including a mobile communication network and the Internet, the information processing device 10 includes a control unit 11 that acquires attribute information associated with a digital certificate and identification information related to the digital certificate, verifies the digital certificate based on the attribute information and identification information, and outputs the verification result of the digital certificate.

The invention discloses a data processing method and system based on a multi-party cooperative network. The method comprises the following steps: deploying a digital steward for an operation main body and participants; generating a main body identifier for each participant, and signing and issuing an identity certificate; each participant stores a subject identifier, an identity certificate and a private key of the participant in a digital steward; the participant of the data request issues an invitation link to the participant of the data owner; the data owner receives the invitation link through the digital steward and verifies the identity of the participant of the data request, and the data request verifies the identity of the participant of the data owner; the identity verification comprises main body identification and identity certificate verification; when the identities of the data request and the participant of the data owner pass verification, the data owner and the participant of the data request establish an encrypted connection channel based on the exclusive secret key determined by negotiation; and transmitting the data of the participant of the data request and the participant of the data owner through the encrypted connection channel.

The invention discloses a license verification method and electronic equipment. The method is applied to payment equipment and comprises the following steps: acquiring an equipment license file; analyzing a working certificate and a digital signature from the equipment license file; verifying the legality of the working certificate by using a first public key of a preset intermediate certificate; and if the working certificate is legal, verifying the digital signature by using the working certificate to obtain a verification result. According to the invention, offline verification is realized through a multi-layer certificate trust chain, so that the license is prevented from being easily forged and tampered; through binding correction of the equipment serial number, uniqueness of authorization is ensured, abuse is effectively prevented, and flexibility and practicability of authorization management are improved.

The application discloses a server controller login method and device, a storage medium and an electronic device, relates to the technical field of servers, and comprises the following steps: receiving a device login request; verifying the integrity of a reference digital certificate carried in the device login request in response to the device login request; in the case where the integrity verification is passed, verifying the first control property of the device login request according to the reference digital certificate; in the case where the first control property verification is passed, verifying the second control property of a target controller by a target account; and in the case where the second control property verification is passed, logging in the target controller according to the control authority of the target controller by the target account carried in the reference digital certificate, so that the technical problem of low login security of the server controller is solved, and the technical effect of improving the login security of the server controller is achieved.

The invention relates to the technical field of communication, in particular to a card management method and equipment based on a virtual SE, and the method comprises the steps: responding to an equipment certificate application of a VSE client in user equipment, generating and returning an equipment certificate to the VSE client based on an SE end private key; in response to a card service application of the VSE client, performing security encryption verification and operation based on the VSE client key pair, the bidirectional certificate verification and the challenge encryption verification to complete corresponding services; the bidirectional certificate verification comprises that the VSE client verifies an SE end certificate or an SP end certificate of the server, and the server verifies an equipment certificate or a card certificate of the VSE client; and the challenge encryption verification is to generate data encryption information and message encryption information based on the randomly generated challenge information so as to perform service data transmission. Therefore, the function of the device without the SE chip can be realized with low cost and high safety.

The invention discloses an intelligent campus certificate credit data management system based on artificial intelligence, which relates to the technical field of artificial intelligence and comprises a multi-source data acquisition unit, a certificate verification unit, a credit progress monitoring unit and a credit supervision unit. The method comprises the following steps: acquiring a personal certificate data set, verifying the authenticity of an electronic seal and anti-counterfeiting watermark characteristics, marking the verified personal certificate data set as a target data set, extracting an issuing mechanism in a certificate, acquiring time and skill levels, carrying out assignment representation, and integrating into a certificate value data set; the credit conversion coefficient is calculated according to the authority, skill scarcity and industry acceptance degree of a certificate issuing mechanism, the certificate, the course score and the practice record of the same student are associated, and the student credit acquisition progress is predicted through time sequence analysis. And automatically generating a personalized repair scheme and sending the personalized repair scheme to the student terminal and the monitoring party associated with the student terminal.

The application provides a Web3-oriented distributed identity authentication method and device based on chameleon signature, and belongs to the technical field of information security. In an entity registration process, an entity generates a public-private key pair based on a discrete logarithm assumption; the entity includes a certificate issuer, a user and a verifier; in a certificate issuance process, the verifier issues verifiable credentials to the user by using a chameleon signature algorithm based on the discrete logarithm assumption; in a certificate use process, the user signs the received verifiable credentials by using the chameleon signature algorithm based on the discrete logarithm assumption, obtains a verifiable statement, and sends the statement to the verifier; and in a certificate verification process, the verifier verifies the user by using the chameleon signature algorithm based on the discrete logarithm assumption after receiving the verifiable statement. The application realizes the non-transferability of certificates for the Web3 scenario, reduces communication and storage overheads, and improves authentication efficiency.

The invention discloses an offshore wind power cloud platform communication security enhancement system and method, and relates to the technical field of communication and information security, and the method specifically comprises the steps: constructing a communication network, obtaining all communication nodes and communication channels, and carrying out the bidirectional certificate verification; negotiating the session key based on the identity authentication to obtain a first encryption key and a corresponding first decryption key; a sender obtains the content of a message to be transmitted and carries out formatting packaging and encryption to obtain an initial encrypted communication message; performing secondary encryption based on a communication channel transmission protocol to obtain a secondary encrypted communication message, and storing the secondary encrypted communication message to a local database to form a sending evidence storage record; the receiver receives the secondary encrypted communication message, verifies, decrypts and stores the content of the transmission message, and generates a receipt message according to the importance of the content of the transmission message; and the sender receives the receipt message, updates the message processing state of the sender according to the processing state of the receipt message, and performs receipt evidence storage.

The invention discloses an international roaming ticket interaction method, device, equipment and medium, and relates to the technical field of communication, the method is applied to a server, and the method comprises the following steps: receiving a QUIC connection request initiated by a client and performing TLS bidirectional certificate verification to establish an encrypted transmission channel; receiving an interaction request initiated by a client, wherein the interaction request comprises a downloading request and an uploading request; packaging the target data according to the downloading request to obtain an original data packet and a redundant packet; and transmitting the original data packet and the redundant packet to the client based on the number of the current concurrent data streams. Rapid establishment of a channel is realized based on QUIC merge connection and encrypted handshake, rapid connection with zero round-trip time is realized, the connection establishment process is rapid and efficient, dynamic and efficient parallel transmission is realized through intelligent multi-stream multiplexing, small file transmission efficiency is optimized, and high real-time ticket transmission requirements are preferably met.

The invention relates to an intelligent identification and system optimization method based on passport data-knowledge base driving. The method comprises the following steps: acquiring passport image data through a preset microscopic imaging architecture, and forming double-source data in combination with structured information extracted by a certificate reader; performing character positioning on the image data to obtain a character region after direction correction, and further analyzing and generating an optical character identification code and identification confidence; according to a predefined regular pattern matching field, obtaining an independent field, taking the nationality code and the certificate number as retrieval conditions, performing multi-level matching query in a preset signing and issuing rule library, and determining an original signing and issuing specification; a candidate rule set is generated through a normative gene chain matching strategy, a quantitative rule consistency identifier is obtained through weighted credibility matching, and a check decision rule instruction is generated and dynamically responded according to the quantitative rule consistency identifier. And finally, the signing and issuing rule base is updated by the rule management module, the character recognition template base and the confidence coefficient correction parameter are adjusted, and passport certificate verification closed-loop processing is realized.

The invention provides a terminal domain adding method and system based on a non-Kerberos protocol, relates to the technical field of data communication, is applied to a domain management platform, the platform comprises a client and a server, the client is deployed on a target terminal, and the method comprises the following steps: sending a domain adding request to the server through the client, responding to the domain adding request through the server, and sending the domain adding request to the target terminal through the server. The method comprises the steps of obtaining administrator login information in a domain adding request, generating a domain adding certificate based on the administrator login information through a server, sending the domain adding certificate to a client, receiving the domain adding certificate through the client, encrypting the domain adding certificate to obtain an encrypted domain adding certificate, and sending the encrypted domain adding certificate to the server when the client receives the login request of a target user. According to the technical scheme, the client performs certificate verification with the server based on the encrypted domain adding certificate to obtain the target verification result, and the target user is authorized to log in the target terminal based on the target verification result, so that the technical problem of insufficient identity authentication security caused by the adoption of a Kerberos protocol in the prior art is solved, and the effect of improving the identity authentication security is achieved.

The invention discloses a power dispatching certificate generation and verification method, device, system and equipment and a storage medium, and the generation method comprises the steps: receiving a quantum random number seed generated after a certificate application is approved, taking the quantum random number seed as an input, and employing a software and hardware collaborative architecture to execute a national secret SM2 algorithm to generate an asymmetric key pair; and performing digital signature by using an asymmetric key pair and user identity information, generating double digital certificates in combination with an SM3 algorithm, and issuing the double digital certificates to a user, a program and equipment, a signature certificate private key being only known by a client, and a private key of an encryption certificate being backed up and managed by a KMC. The invention further provides a certificate verification method based on the power dispatching security partition and the CAs and the KMCs at all levels. Partition verification is carried out on the double digital certificates through public keys stored in a trust list by two communication parties. According to the invention, the security and reliability of the power dispatching digital certificate are improved.

The invention relates to the field of block chains, and provides a certificate query method and device based on edge nodes, equipment, a medium and a product. The method comprises the following steps: receiving registration transaction information initiated by an authoritative certification authority; under the condition that the pre-verification of the registration transaction information is passed, sending the root certificate to the distributed public key infrastructure block chain, and receiving a registration completion response fed back by the distributed public key infrastructure block chain; under the condition that the registration completion response passes verification, after the registration completion response is fed back to the authority authentication mechanism, the authority authentication mechanism issues an entity certificate and feeds the entity certificate back to the network element; receiving a certificate verification request sent by the network element; and carrying out certificate query according to the certificate verification request, and determining a certificate query result. According to the certificate query method based on the edge node, a bridge is built through the edge node, and during certificate query, the network element securely accesses the distributed public key infrastructure through the edge node, so that the query efficiency is improved.

The invention relates to the technical field of machine learning, in particular to a foreign matter license multi-modal information verification method and system based on a large model, and the method comprises the steps: obtaining a license portrait image, a verification image, a chip image, a license text vector and a chip text vector; extracting a skin region and a watermark region in the license portrait image according to the skin features and the watermark features in the foreground region of the license portrait image; dividing the license portrait image into a plurality of sub-regions, and adaptively enhancing each sub-region according to the degree that the skin is shielded by the watermark in each sub-region and the average gray level, so as to obtain a license portrait image without the watermark; according to the similarity between the verification image and the chip image and the similarity between the verification image and the license portrait image without the watermark and the similarity between the license text vector and the chip text vector, whether the current license verification process passes verification or not is judged. According to the method and the device, the license portrait image is adaptively enhanced, so that the accuracy of license verification is improved.

The application relates to the technical field of data backup, and discloses a backup and recovery method and system for iOS device data, wherein the method comprises the following steps: performing SSL certificate verification and EscrowBag key authentication on an iOS device to obtain a data path list; performing parallel scanning of APFS file system B-Tree traversal, NAND flash page reading and SQLite WAL log analysis on an iOS device storage partition according to the data path list to obtain an original data set; performing integrity evaluation based on the original data set to obtain an effective data set and construct a virtual file index; confirming a user's data selection list based on the virtual file index and performing safe recovery to return a data recovery result; and the application combines SQLite page Cell reconstruction and fragment file signature matching technology, can intelligently repair and quality predict damaged data, improves user experience and operation efficiency, and ensures the safety and reliability in the data recovery process.