87 results about "Credential management" patented technology

A method of provisioning a credential for a transaction between a payment device of a user and a transaction processing device is described. The method is implemented a third-party server remote from the payment device and the transaction processing device. The method comprises assigning the credential to the transaction and the user and provisioning the credential into the payment device for subsequent retrieval by the payment device. Assigning the credential to the transaction comprises: determining unique identifying information of the user; allocating a first user-identifying portion of the credential to correspond to the unique identifying information; determining a plurality of properties intrinsic to the transaction and encoding the plurality of properties into transaction-identifying information; and allocating a second transaction-identifying portion of the credential to correspond to the transaction-identifying information. The credential is associated with encrypted authentication data that is generated by the payment device during the transaction, and used for subsequent authentication of the transaction by the remote third-party server.

The invention discloses a credential management system, a credential acquisition method and a related device, and belongs to the technical field of cloud computing. The credential management system is applied to a cloud management platform, and the cloud management platform comprises a first credential management node and a second credential management node. The target service node sends a service authentication request to the first credential management node; the first credential management node sends a first token to the target service node under the condition that the first credential management node verifies that the target service node is a legal cloud service node; and the target service node obtains the first credential information from the first credential management node based on the first token. A first credential management node is set to provide a credential management service for a plurality of cloud service nodes, so that a second credential management node provides the credential management service for a customer, and meanwhile, the service credential of the second credential management node can be managed through the first credential management node. And the credential information of the cloud service node and the client can be comprehensively managed.

The disclosed exemplary embodiments include computer-implemented systems, apparatuses, and processes that dynamically manage consent, permissioning, and trust between computing systems and unrelated, third-party applications operating within a computing environment. By way of example, the apparatus may receive a request for an element of data that includes an access token and first credential data associated with an application program. When the first credential data corresponds to second credential data associated with the application program, may determine that the requested data element is accessible to the application program and perform operations that validate the access token. Further, and based on the validation of the access token, that apparatus may obtain and encrypt the requested data element, and may transmit the encrypted data element to a device via the communications interface.

Systems and methods described herein relate to workforce credential management. A request is assigned to a first profile identified by a first identifier. The first profile includes worker credentials. An association between the first profile and a second profile identified by a second identifier in the request is stored. The first identifier is encoded into a digital code that is presentable by a first device associated with the first profile. Capturing of the digital code by a second device associated with the second profile is detected. In response to detecting the capturing of the digital code by the second device, the association between the first profile and the second profile is identified and at least a subset of the worker credentials is transmitted to the second device.

The present invention is an identity management system comprising a credential management unit which causes a storage unit to store a prescribed plurality of pieces of credential information in association with an information storage medium owned by a real user, said plurality of pieces of credential information being from among: one or more pieces of credential information that are assigned to an identity serving as the real user existing in a real space and that indicate that the user has a prescribed credential; and one or more pieces of qualification information that are assigned to an identity serving as an avatar that corresponds to the real user and can exist in the metaverse.

The present disclosure is directed to a method and related apparatus and computer readable medium for credential verification using verification requirement document (VRD). A VRD credential verification ecosystem may include but is not limited to a VRD administration system, a first credential management system, a second credential management system, a VRD issuing device, a verifier device, a distributed VRD transaction consensus network, and a distributed credential management transaction consensus network with necessary communication among them.

The invention relates to the technical field of information security, in particular to a dynamic rule-based server security certificate automatic management system, which comprises a rule generation module, a certificate generation module, a certificate distribution module, a monitoring and detection module, a dynamic adjustment module and a log recording module, wherein the rule generation module is used for generating a corresponding dynamic management rule; the voucher generation module is used for automatically generating a security voucher according to the dynamic management rule provided by the rule generation module; the voucher distribution module is used for distributing the generated security voucher to a specified server; the monitoring and detection module is used for detecting the abnormal condition of the security certificate; and the dynamic adjustment module is used for adjusting a dynamic rule based on the monitoring data and the abnormal condition detection result. According to the invention, through dynamic rule generation, real-time monitoring, anomaly detection and an automatic adjustment mechanism, efficient and automatic management of the server security credential is realized, and the security and adaptability of credential management are improved.

Methods, systems, and devices to support techniques for container registry credentials management are described. An operator executed across a set of clusters may manage credentials for multiple namespaces distributed across multiple clusters. For example, the operator may identify a configuration of a namespace (e.g., detect a creation of a configuration, detect an update to a configuration) and may provision the namespace within the container image registry using an application programming interface (API) call transmitted to the registry. The operator may retrieve one or more credentials associated with the namespace from the container image registry based on an operational mode (e.g., an application mode, an infrastructure mode). The operator may store the one or more credentials to a database associated with the cluster.

This invention provides a distributed, verifiable, revocable, and scalable credential management method and system. The method includes: maintaining and managing verifiable credentials using a grouped hierarchical tree-structured RSA accumulator; registering a service center and publishing source computing services and root computing services corresponding to the grouped hierarchical tree-structured RSA accumulator through an entry service; and managing verifiable credentials through the source computing services and root computing services. This invention extends the application of traditional RSA accumulators by designing a grouped hierarchical tree-structured RSA accumulator, breaking down large-scale credential services into smaller, manageable parts, reducing single-point computing resources, and enabling flexible expansion of service capabilities, thus facilitating the large-scale application of verifiable credential services.

The embodiments of the present application relate to the technical field of electronic devices. Provided are a credential management method, and a device. The method is applied to a first device, and comprises: a first device determining that a user account is to be used to associate a target credential, wherein the target credential is used for encrypting user data managed by the first device; the first device further acquiring identity verification information of a user on the basis of the determination that the user account is to be used to associate the target credential; and the first device further sending the target credential to a third device when determining, on the basis of the identity verification information, that the identity verification of the user is successful. Therefore, it is not necessary for a user to manually save a target credential, thereby improving the convenience of credential management. Furthermore, the user can subsequently acquire the target credential only upon successful identity verification, such that the flexibility and security of credential management are improved.

A system for offline generation of digital assets includes: a security credential management system (SCMS) that is operable to generate and conditionally transmit digital assets; and a certificate authority communicatively connected to the SCMS by a communication network, the certificate authority being operable to receive the digital assets from the SCMS. The certificate authority is operable to securely provision a plurality of computerized devices based on the received digital assets, the certificate authority intermittently connects to the SCMS to receive the digital assets, the certificate authority is operable to securely provision the plurality of computerized devices while disconnected from the SCMS, and the provisioning by the certificate authority while disconnected from the SCMS is limited by a policy associated with the certificate authority.

The present disclosure is directed to a managed cloud-based FIDO authenticator implemented with a distributed switchboard system. The disclosed switchboard implementation enables proxy automation and management of FIDO-related service, including registration and / or access operations, between FIDO service requesting and relying parties. The described process is based on generation of a single pre-validated and personalized identity token, based on validation, tokenization and identity mapping of an identification record associated with a FIDO service-requesting entity (SRE). The generated FIDO identity token can be used as a validity signature for streamlined resolution of identity for generation of FIDO access credentials. The managed FIDO authenticator further provides a FIDO credential management and recovery features for user and / or client applications reliant upon FIDO-authenticated services. The distributed switchboard implementation further enables implementation of a federated FIDO services for a distributed application whereby various FIDO-reliant application components can perform their own FIDO authentication via the distributed switchboard.

Systems and methods described herein relate to workforce credential management. A request is assigned to a first profile identified by a first identifier. The first profile includes worker credentials. An association between the first profile and a second profile identified by a second identifier in the request is stored. The first identifier is encoded into a digital code that is presentable by a first device associated with the first profile. Capturing of the digital code by a second device associated with the second profile is detected. In response to detecting the capturing of the digital code by the second device, the association between the first profile and the second profile is identified and at least a subset of the worker credentials is transmitted to the second device.

Novel tools and techniques are provided for implementing credential management across multiple devices for wireless network access. In examples, in response to receiving, from a client device, an authentication request for connection to a wireless network, a wireless access point device sends, to an administrator device, an authorization request for establishing a connection between the client device and the wireless network; receives, from the administrator device, an authorization response; and, when the authorization response indicates to provide access, generates and associates a credential for and with the client device, sets one or more time-to-live (“TTL”) values for the credential, and sends the credential to the client device. In response to receiving another authentication request from the client device, including the credential, the wireless access point device determines whether a first TTL value is valid; when the first TTL value is valid, approves the authentication request and establishing the connection.

The invention relates to identity authentication middleware applied to a PaaS platform, and belongs to the field of data processing, and the identity authentication middleware comprises a user interface which is used for providing a task creation interface, a data uploading interface and an application configuration interface for a user; the identity verification module is used for verifying the identity of the user based on a bilinear pairing technology; the application program interface server is used for receiving an API request of a user; the composer is used for screening user requests initiated by the users passing the identity verification and determining resource scheduling schemes for all the user requests; the workflow engine is used for converting the resource scheduling scheme into a workflow; the execution adapter is used for converting the task description in the workflow into a specific operation command; the application directory module is used for storing all scientific applications supported by the PaaS platform and parameter templates of the scientific applications; the credential management module is used for managing keys of the user and the cloud service provider; and the message system is used for asynchronous communication among the components in the identity authentication middleware.

In one or more methods, devices, and / or systems, solutions are provided for managing wireless communication. For example, managing wireless communication may include a trust enabler client registration process implemented by one or more devices. For example, managing wireless communication may include a distributed user identifier registration process implemented by one or more devices (e.g., mobile device(s) initiated, network device(s) initiated, for multiple mobile devices, etc.). For example, managing wireless communication may include a distributed verifiable user credential generation process implemented by one or more devices (e.g., mobile device(s) initiated, network device(s) initiated, etc.).

1. The name of the design product: intelligent certificate management cabinet. 2. The use of the design product: for the storage and retrieval of identity cards, passports and other certificates. 3. The design points of the design product: in shape. 4. The picture or photo that best indicates the design points: perspective view 1.

Methods, systems, and devices to support techniques for container registry credentials management are described. An operator executed across a set of clusters may manage credentials for multiple namespaces distributed across multiple clusters. For example, the operator may identify a configuration of a namespace (e.g., detect a creation of a configuration, detect an update to a configuration) and may provision the namespace within the container image registry using an application programming interface (API) call transmitted to the registry. The operator may retrieve one or more credentials associated with the namespace from the container image registry based on an operational mode (e.g., an application mode, an infrastructure mode). The operator may store the one or more credentials to a database associated with the cluster.

The invention provides a dynamic collaborative access credential security management method and system, belongs to the technical field of network security, and aims to solve the problems of isolation and response lag of a security credential management module. The method comprises the following steps: establishing a normal use behavior baseline model of the security credential; analyzing the current use behavior in real time to generate a risk index; in response to the risk index meeting the risk condition or receiving an external management event, automatically executing a corresponding security policy; after the restrictive strategy is executed, when the risk meets the recovery condition, the restriction is automatically released. Through linkage behavior analysis, permission configuration and gateway management and control, cooperative defense is realized, the security and management efficiency are improved, and the service influence is reduced.

Implementation of butterfly key extension scheme. The present disclosure relates to methods, computer programs and registration authority modules for implementing butterfly key extension scheme. The present disclosure also relates to a security credential management system using these methods, computer programs or registration authority modules for implementing butterfly key extension scheme. In a first step, a public larva signature key and a first pseudo-random function in a private / public larva signature key pair are received (S1) from a requesting device. The public larva signature key is expanded (S2) to a public cocoon signature key using the first pseudo-random function. Then, based on the public cocoon signature key, a certificate signing request is generated (S4), for example, by creating (S3) a public butterfly signature key from each public cocoon signature key and inserting each public butterfly signature key into a corresponding certificate signing request. Subsequently, the certificate signing request is sent (S5) to a certificate authority module. In response, a signed pseudonym certificate is received (S6) from the certificate authority module. Then, the signed pseudonym certificate is encrypted (S7) to generate a response packet. The generated response packet can be further signed (S8) and provided (S9) for downloading by the requesting device.

An embodiment of the present invention provides a data sharing method, system, and device based on a service chain, which can be used in the field of artificial intelligence technology. The method includes: in response to a shared data encapsulation request, performing credential encapsulation processing on the shared data to obtain a verifiable data credential; encrypting the verifiable data credential according to the shared user set of the current institution to obtain a ciphertext message; sending the ciphertext message to a blockchain node on the service chain, so that the blockchain node sends a data acquisition message to a data recipient in the shared user set, for the data recipient to decrypt the ciphertext message through the service chain to obtain the shared data. Based on broadcast encryption technology, one-to-many secure sharing of blockchain credentials can be realized, which can simplify the encryption process and credential management process and save consumption costs.

The invention discloses an MQTT voucher management method and device of an embedded Internet of Things system, equipment and a medium, and relates to the field of Internet of Things, and the method comprises the steps: reading and decrypting encrypted MQTT voucher data corresponding to a voucher obtaining request needed by MQTT connection from a local storage of the equipment; if the preset triggering condition is met, obtaining new MQTT voucher data from the target server; encrypting the new MQTT voucher data to obtain new encrypted MQTT voucher data, storing the new encrypted MQTT voucher data in a local storage, and returning the new MQTT voucher data to the requester; and when it is detected that the MQTT connection is interrupted due to the fact that the voucher has a problem, clearing the corresponding encrypted MQTT voucher data in the local storage, obtaining new MQTT voucher data, and establishing a new MQTT connection according to the new MQTT voucher data. According to the invention, the security and reliability of MQTT communication of the embedded Internet of Things equipment are improved.

Methods and systems for managing operation of data processing systems are disclosed. To manage operation of the data processing systems, the data processing systems may present a communication and credential management system. The communication and credential management system may be used to manage the operation of any number of devices hosted by the data processing systems. The communication and credential management system may include a device provisioning, validity, and removal process.

The invention relates to a giant chain database enabled Internet of Things equipment data security aggregation method, which comprises the following steps of: accessing a certificate management module, generating an equipment temporary identity certificate based on equipment information stored in a giant chain database, and performing data compliance uploading by the equipment by using the certificate. And the data aggregation portal module cooperates with the equipment access credential management module to identify the identity credential of the railway Internet of Things equipment, and then detects and processes the equipment request and data. And the data management module is used for storing the data uploaded by the railway Internet of Things equipment, providing the data for the anomaly detection module and providing the data required by the equipment. And the anomaly detection module is used for constructing an abnormal data detection model by adopting a federated learning technology based on the multi-chain data in the data storage module, and identifying abnormal equipment. According to the method, efficient and safe access of railway Internet of Things equipment and efficient and safe loading of equipment data can be realized in a large-scale railway Internet of Things system, and privacy protection of sensitive data is realized.

A system for offline generation of digital assets includes: a security credential management system (SCMS) that is operable to generate and conditionally transmit digital assets; and a certificate authority communicatively connected to the SCMS by a communication network, the certificate authority being operable to receive the digital assets from the SCMS. The certificate authority is operable to securely provision a plurality of computerized devices based on the received digital assets, the certificate authority intermittently connects to the SCMS to receive the digital assets, the certificate authority is operable to securely provision the plurality of computerized devices while disconnected from the SCMS, and the provisioning by the certificate authority while disconnected from the SCMS is limited by a policy associated with the certificate authority.

A cryptographic secure transaction system comprising first and second cryptographic storage devices, each having a master key pair and a public key. A computer server maintains a list of globally unique names and associated public keys. The devices communicate via various signaling pathways, including centralized, decentralized, and broadcast-based pathways, using notification addresses derived from their public keys. A shared secret key generation algorithm generates a shared secret key using the devices' keys, and a distributed ledger records transactions using an address derived from the shared secret key. The system includes methods for managing verified credentials, recovering signals, and reconstructing transaction history using the shared secret keys and distributed ledger. The signaling pathways enable secure communication between devices, facilitating efficient credential management and transaction history reconstruction.

Embodiments described herein provide systems and methods to prevent, or provide a countermeasure, to a co-existence attack, for example, that may occur in a Security Credential Management System (SCMS) where both regular butterfly key (RBK) protocol and unified butterfly key (UBK) protocol are supported. Embodiments described herein provide, support, employ, or implement hardware acceleration for a Hardware Security Module (HSM), for example, for cryptographic operations (e.g., block ciphers, digital signature schemes, and key exchange protocols).

The application provides an identity credential management method and device, electronic equipment and readable storage medium, and belongs to the technical field of communication. In the case that a target application requests upgrading, the application obtains upgrading information corresponding to the target application, wherein the upgrading information comprises upgrading data and an upgrading mode; controls the target application to generate a corresponding authorization file based on the upgrading mode; after generating the authorization file, upgrades the target application based on the upgrading data; and controls the upgraded target application to request a corresponding identity credential from a corresponding application background based on the authorization file. Through the present solution, the upgraded target application can request a corresponding identity credential from the application background based on the authorization file generated by the target application before upgrading. Thus, the application program can intelligently obtain an identity credential after updating and upgrading, thereby improving the efficiency of obtaining an identity credential.

The present disclosure relates to the technical field of smart home communication, in particular to a smart home device direct connection communication method and device, by pre-storing network configuration information in the local storage of the device, the first device does not need to request network credentials from the gateway when initiating communication, eliminating the dependence of the communication initiation process on the real-time availability of the gateway, and normal communication between devices can still be maintained in scenarios such as gateway offline or network interruption; by encrypting the payload with a network key and carrying a network identifier in the data frame, the second device can independently complete the legality verification and content decryption of the frame based on the same credentials stored locally, without the gateway having to bear the responsibility of credential management or relay, completely decoupling the forwarding path of the gateway for both parties of the communication. By directly sending data frames on the radio frequency channel corresponding to the network configuration information, the control instruction reaches the target device via a single wireless path between devices, reducing the instruction transmission delay.