1137 results about "Cryptogram" patented technology

Systems, methods and computer-readable storage media utilized to complete a cardless transaction on a distributed ledger network. One method includes receiving, by a point-of-sale (POS) computing device, a transaction request including a biometric sample from an individual associated with a payment account at a financial institution. The method further includes authenticating, by the POS computing device, the biometric sample by cross-referencing the biometric sample with a biometric dataset stored on the distributed ledger network. The method further includes, in response to authenticating the biometric sample, generating, by the POS computing device, a cryptogram associated with the biometric sample and processing, by the POS computing device, the transaction request utilizing the cryptogram.

The invention provides a password strength real-time evaluation method and device. The method comprises the following steps: training a polynomial naive Bayesian model through a password data set, wherein the password data set comprises a cracked weak password sample and a verified strong password sample; responding to a trigger event of password input by the user, and extracting character-level features and semantic features of the password input by the user; respectively generating sub-feature vectors according to the character-level features and the semantic features, and weighting the sub-feature vectors to obtain feature vectors; scoring the feature vector by using a trained polynomial naive Bayesian model to obtain a password strength score; and determining a password strength grade according to the password strength score. According to the method provided by the invention, the password strength can be evaluated in real time, and the accuracy of password security evaluation is improved.

Aspects of the disclosure relate to a network traffic monitoring platform. The platform may train an attack pattern analysis model to output a behavior profile and a cumulative attack score. The platform may identify a password failure rate spike. The platform may extract a password hash from the network traffic. The platform may generate the behavior profile based on the password hash. The platform may generate the cumulative attack score based on the behavior profile. The platform may compare the cumulative attack score to a threshold. Based on identifying that the cumulative attack score is below the threshold, the platform may identify the password hash as a secure hash. Based on identifying that the cumulative attack score meets or exceeds the threshold, the platform may and generate password complexity rules. The platform may refine the attack pattern analysis model based on the attacked hash and the cumulative attack score.

An apparatus comprises at least one processing device configured to receive a cryptographically attested digital document from an onboarding management system, wherein the cryptographically attested digital document comprises one or more credentials for at least one device requesting access to a secure communication channel to communicate with the onboarding management system. The at least one processing device is further configured to verify whether the cryptographically attested digital document is valid, and identify the one or more credentials in response to verifying that the cryptographically attested digital document is valid. The one or more credentials are transmitted to at least one authenticator in response to a request from the at least one authenticator to authenticate the at least one device. The at least one device is given the access to the secure communication channel responsive to verification of the one or more credentials by the at least one authenticator.

Systems and methods for enhanced security to log in to a mobile application are provided. A short-range communication antenna of a mobile device can receive a cryptogram from a contactless card, and a processor of the mobile device can verify the cryptogram to identify a customer account associated with the contactless card and verify that a phone number of the mobile device is associated with the customer account. Then, a user interface device of the mobile device can receive enhanced security input data, and the the processor of the mobile device can verify that the enhanced security input data matches enhanced security record data associated with the customer account. When the cryptogram, the phone number of the mobile device, and the enhanced security input data have been verified, systems and methods disclosed here can log in to a mobile application running on the mobile device to access the customer account.

The invention discloses a digital signature method and device, a verification method and device, equipment, a storage medium and a system. The digital signature method is applied to a sending end, and comprises the following steps: acquiring an additional value of original message data; connecting the additional value to the original message data to generate to-be-signed data; performing a first signature operation and a second signature operation based on the to-be-signed data to correspondingly obtain first signature data and second signature data; and connecting the first signature data and the second signature data in series to obtain final signature data. According to the digital signature method, the logic association of the signature data is realized by introducing the additional value, the signature uniqueness and tamper resistance are improved, quantum computing attacks can be effectively resisted through double signatures of the first signature operation and the second signature operation, the tamper resistance of the digital signature is enhanced, the data security is enhanced, and the security of the digital signature is improved. And the method has good compatibility with a traditional password system.

Systems and methods for automatically locking a contactless card are provided. A server can identify when a timer associated with the contactless card expires, lock the contactless card after the timer has expired, receive, via a short-range communication antenna of a mobile device in communication with the server, a cryptogram from the contactless card, successfully decrypt the cryptogram to authenticate the contactless card, and when the contactless card has been authenticated, unlock the contactless card.

The invention discloses a multi-encryption-based AI glasses security payment method and a related device, and relates to the field of security payment. In the method, multi-modal biological information of a user is collected, when the multi-modal biological information is consistent with preset biological information, a dynamic password request is sent to bound target equipment, and a dynamic password returned by the target equipment is received and displayed on a display interface; and when the user inputs the dynamic password on the payment interface, encrypting payment information by using a private key to obtain encrypted information, sending the encrypted information to a payment server to decrypt the payment information through the payment server and verify the decrypted data through a block chain network, and when the verification result is successful, sending the encrypted information to the user. Fund transfer is executed according to the payment information; and fund transfer information returned by the payment server is received. By implementing the technical scheme provided by the invention, the payment security and convenience are improved, and information leakage is effectively prevented through a multi-encryption technology.

A method includes receiving hashes of a static password and a lot-one authentication string from a user device of a user. After an initial validation, a first authentication matrix (AM) is generated. A block selection process is performed to select spurious and authentication blocks. While performing the block selection process, the first AM is replaced by a second AM, such that a first authentication block is selected from the first AM based on a first lot-two authentication string and a second authentication block is selected from the second AM based on a second lot-two authentication string. A dynamic password is generated by combining the static password, the lot-one authentication string, and the authentication blocks. A hash of the dynamic password is generated. In response to determining that the hash of the dynamic password matches a hash of a dynamic password stored in a user profile, the user is authenticated.

The invention relates to an integer decomposition method based on a quantum approximate optimization algorithm, and belongs to the technical field of password decoding. The method comprises the following steps: constructing clauses to describe an optimization algorithm for decomposing an RSA key M, wherein M is an integer; constructing a parameterized quantum circuit based on the clauses; solving parameters of the parameterized quantum circuit based on a quantum approximate optimization algorithm, and measuring a final quantum state; the quantum state measurement result is mapped into two factors P and Q of an RSA key M, and P and Q are used for calculating private keys of an RSA algorithm. According to the method, the key integer decomposition optimization problem is described by adopting the parameterized quantum gate circuit, and the method is easy to implement and expand on a general quantum computer.

A method to identify and remediate unsafe cipher suite deployments. The method includes identifying a target to be analyzed, determining a collection of cipher suites used by the target, generating and displaying a cipher suite dependency graph for the target based on the collection of cipher suites, and classifying the target as being one of post-quantum computing safe and post-quantum computing unsafe based on the cipher suite dependency graph and based on a predetermined rule for each cipher suite in the collection of cipher suites. A cipher suite hosted by a target can be remediated to convert the target to a post-quantum computing safe state.

The invention provides a hybrid encryption and decryption method, electronic equipment and a storage medium, and the method comprises the steps: receiving an encryption request sent by a first client, encrypting a target plaintext according to a client national secret public key and a client post-quantum public key of a second client, obtaining a hybrid encrypted ciphertext, sending the hybrid encrypted ciphertext to the first client, and sending the hybrid encrypted ciphertext to the second client. The second client is used for sending a decryption request to the server, the decryption request comprises the hybrid encrypted ciphertext, the hybrid encrypted ciphertext is decrypted according to a client national secret private key and a client post quantum private key of the second client, a target plaintext is obtained, and the target plaintext is sent to the first client. And sending the target plaintext to the second client. Through organic fusion of the national cryptographic algorithm and the post-quantum cryptographic algorithm, the capability of resisting quantum computing attacks is increased, the security of the target plaintext is ensured, and the security capability of the post-quantum era can be provided while the existing security level requirement is met.

The disclosed systems and methods are directed to an implementation of time-based authentication with a contactless card based on remotely provisioned timing data. In one described implementation the timing information is provided by an external agent such as a client device and / or a remote verification server associated with the user account. The timing information is then incorporated into a cryptogram generation process executing on the contactless card, resulting in creation of an encrypted time-based token. The authentication request message that includes the time-based authentication token, may be further supplemented by the inclusion of the timing information separately encoded using, for example, public key cryptography. This modification of the authentication request message generated by the contactless card, enables an additional time-based filtering mechanism that may be performed by a third-party client device.

The invention discloses a commercial password application security assessment evidence identification method based on image identification, relates to the technical field of image identification, and aims to assess employee advanced engineer certificates, extract information from multi-modal documents by using a Qwen-VL visual language model, generate vectors, label the vectors, convert the vectors into structured evidence nodes and store the structured evidence nodes in a graph database. Establishing various edges according to different associations, and constructing a preliminary evidence network; identifying certificate nodes, and clustering to form a certificate entity group; a correlation score is calculated by searching the support evidence through forward traceability, a correlation score is calculated by searching the contradiction evidence through reverse traceability, the credibility of the certificate entity group is dynamically adjusted, and the influence is propagated according to the updated credibility; and screening abnormal certificates lower than a threshold value, analyzing causes and contradictory points, listing abnormal information, visually displaying key evidences, the contradictory points and associated paths, and generating text description.

The invention discloses a Diithium rapid side channel attack analysis method, which belongs to the technical field of information security, and comprises the following steps of: detecting leakage by adopting a Gaussian mixture difference method to complete detection and selection of feature points; the signature information is used to classify the actual leakage in which the private key participates, and the distribution difference is used to recover the normal domain private key. According to the method, the problem of high time overhead under small sample leakage of the existing non-template attack is solved. A complete private key can be recovered within a few minutes at a high noise level by using side information leakage generated by a small amount of signatures. Compared with an existing leakage detection method, the Gaussian mixture difference method can complete detection and selection of feature points without obtaining a sensitive intermediate value. The method can be used for detecting whether the password equipment and the password chip are safe and reliable or not, such as the fields of bank cards of financial economy, physical digital currency cards, mobile phone chips of mobile communication and the like, so as to detect whether the equipment has security risks or not.

The invention discloses an ARX password anti-differential and linear analysis security assessment method and system, and relates to the password technology, and the method comprises the steps: respectively constructing a differential distribution table CDDT of dependent carry of modular addition and a linear approximation table CLAT of dependent carry; respectively sorting the CDDT and the CLAT according to the differential probability and the linear probability; after sorting, searching the optimal differential feature and the linear feature of the ARX password based on a branch and bound algorithm; and after all plaintext differences and masks are traversed, obtaining the maximum difference and linear feature probability as the maximum difference and linear feature probability of the ARX password of the corresponding round number. The invention provides an ARX password anti-differential and linear analysis security assessment method based on a carry-dependent differential distribution table and a linear approximation table, and solves the problem of anti-differential and linear analysis security assessment in an ARX password design process.

A method for detecting password spray attacks. The method includes obtaining information from an on-machine malware detection application for a particular machine indicating that a password spray tool is detected on the particular machine. Information is obtained indicating that the particular machine has performed failed sign in attempts. As a result, a determination is made that the particular machine is performing password spray attacks.

The invention provides a video privacy protection method, a video playing method and related devices. The video privacy protection method comprises the following steps: acquiring an original encryption parameter and an original video; for each original video frame, determining a privacy area of the original video frame, and performing image blurring processing on the privacy area of the original video frame by adopting a preset blurring algorithm to obtain a blurred video frame; taking the fuzzy video frame as input data of a base layer in a target encoder, taking the original video frame as input data of an enhancement layer in the target encoder, and performing video encoding by adopting the target encoder to obtain first video encoding data; encrypting enhanced data in the first video coding data according to the original encryption parameter to obtain second video coding data; and generating the privacy protection video based on the second video coding data. According to the method, the expandability of the H.265 coding technology and the password technology are combined, and the two aspects of high efficiency and reversible reduction can be considered at the same time.

The invention discloses a commercial password transformation method and system for electric power monitoring, and relates to the technical field of electric power, and the method comprises the steps: introducing a quantum key distribution technology, transmitting an encryption key through a quantum state, and monitoring a user behavior in combination with a behavior analysis technology; deploying a key data edge computing fusion technology of a zero-trust security architecture, and preprocessing the fused key data through a localization architecture; and establishing a self-response model integrated with dynamic sensing, sensing the threat situation in the system through the self-response model according to the pre-processed result, and constructing standard machine room area data conforming to the commercial password. According to the method, the security of the power monitoring system is remarkably improved, the defense capability of the system to internal and external threats is enhanced, and the integrity and confidentiality of data are improved, so that the stable and reliable operation of the power system is ensured.

A reset auxiliary structure for cipher wheel locks includes a knob; a cipher wheel assembly rotatable to the knob; a reset cam; and an auxiliary guide block. The knob is centrally provided with a receiving chamber for accommodating the cipher wheel assembly. The cipher wheel assembly includes a positioning piece, which is provided with a shifting lever. The reset cam is synchronously rotatable to the knob. The reset cam includes a reset surface and a guide surface that are connected. The guide surface is located beside the reset surface, and the reset surface is positioned at the highest point of the reset cam. The auxiliary guide block is movable to the reset cam. The support surface of the auxiliary guide block is positioned beside the reset surface. The shifting lever is connected with the reset cam.

The invention discloses a password plaintext risk monitoring system and method based on traffic analysis and a large model. The method comprises the following steps: collecting related basic information based on a traffic background environment to construct a knowledge base; analysis is carried out based on the pre-collected traffic, marking analysis is carried out on field information identified in the traffic, and a prompt word library is generated; the method comprises the following steps: collecting environment traffic, performing traffic analysis on the collected traffic, extracting interaction information in the traffic, performing cleaning and structural processing, and submitting the interaction information to a password plaintext risk identification agent; and the intelligent agent performs analysis through large model capability according to submitted content in combination with a knowledge base and cue words, judges a password plaintext state in the traffic information, and finally generates a risk report and returns the risk report. According to the method, the accuracy of password plaintext risk identification is improved through the intelligent analysis capability of the large model.

The invention provides a context-based deep mail password strength measurement method, which comprises the following steps of: introducing user context information such as an e-mail, a name and a birthday on a basic password measurement model framework, and realizing information fusion through a multi-head self-attention mechanism; and a password sequence probability calculation model is constructed in combination with a character-level long-short-term memory network (LSTM). An evaluation system taking guess times as a core index is established to quantify the performance difference of different models under the condition that whether user context information exists or not. Experiments show that the method can more truly reflect the cracking capability of an attacker when the attacker masters the context information of the user.

Techniques are described for providing touchless ATM transactions based on receipt of a pre-staged transaction initiated by an authenticated user via an online banking system of a bank and subsequent receipt of a cryptogram of the user's payment card at an ATM. A server device receives transaction data for the pre-staged transaction from a user computing device via a user interface of an application associated with the online banking system. The server device associates the pre-staged transaction with a bank account including one or more payment cards of the user. The server device later receives a cryptogram of a payment card from an ATM and, based on identification information included in the cryptogram, determines that the payment card at the ATM is one of the payment cards of the bank account associated with the pre-staged transaction. In response, the server device authorizes performance of the pre-staged transaction at the ATM.

The invention provides a method, a system and a medium for realizing unified encryption, decryption and desensitization of data across terminals, request and response data are encrypted through a 32-bit random password generated by a front end, and the password is stored in a session. And the front end encrypts the random password by using the RSA public key provided by the rear end, and sends the random password to the rear end through the HTTP request header. And after receiving the request, the rear end decrypts the random password by using the RSA private key, and encrypts and decrypts request data by using an AESGCM algorithm. The data between the front end and the rear end is always kept in an encrypted state in a transmission process, and the front end performs desensitization processing on the returned sensitive data according to service requirements, so that the data security is ensured. According to the method provided by the invention, multiple terminals (such as Web, mobile terminals and the like) are supported to uniformly call encryption, decryption and desensitization functions, repeated development on different platforms is avoided, and the development efficiency is improved.

Provided is a process, including: obtaining a first password to a private computer network; determining, with a credential-monitoring application within the private computer network, whether the first password satisfies one or more criteria by: comparing the first password to a set of compromised credentials within a database within the private computer network; and determining whether the first password matches one or more passwords within the database; and in response to the determination that the first password satisfies the one or more criteria from among the plurality of criteria, causing a use of the first password to access the private computer network to be rejected and causing a first user associated with the first password to be notified to change the first password.

An application server has a custodian application running thereon. The server receives a command to instantiate a cryptographic microservice application on the application server. In response, the server instantiates the cryptographic microservice application. The cryptographic microservice application builds a secure enclave on the application server and, within the secure enclave, a cryptogram that represents a virtual fingerprint of the cryptographic microservice application. The server transmits the cryptogram to an authentication computing system. The server receives a digitally signed certificate from the authentication computing system and a data encryption key encrypted with a master tenant key from the custodian application. The server transmits a request to the authentication computing system. The request includes the digitally signed certificate, the data encryption key, and a request to decrypt the data encryption key. The server then receives the decrypted data encryption key from the authentication computing system.

The invention relates to a threshold homomorphic password federated gradient secure aggregation method, system and device, and the method comprises the steps: obtaining an aggregation gradient plaintext based on an online participant set, a threshold value and a network connection time limit; obtaining an online participant set and a threshold value, inputting the online participant set and the threshold value into a T-N threshold homomorphic encryption model, and then encrypting and collecting the online participant set and the threshold value to an aggregation party to generate ciphertext data; an aggregation party collects encryption parameters through an aggregation algorithm in combination with ciphertext data and aggregation gradient plaintext, and a T-N threshold homomorphic encryption model can expand a new private key with a threshold access characteristic on the basis of multi-party homomorphic encryption, so that under the condition that a certain proportion of participants are offline, a new private key with a threshold access characteristic can be expanded, and the encryption efficiency is improved. And the rest participants can still decrypt the ciphertext by using the new private key with the threshold access characteristic, and then the aggregation gradient plaintext is obtained by cooperating with calculation for aggregation, so that the time of iterative convergence to an expected value is shortened.

Discussed are a cross certification method and a certifying device to perform the method. The certifying device can include a certification communication unit; a certification storage unit; and a certification control unit, wherein when a first certification is approved, the certification control unit encrypts a second identification information with a unidirectional encryption algorithm to generate a certification cryptogram, and transmits the certification cryptogram to an electronic device to request a second certification, when receiving a first random number in response to the request for the second certification, the certification control unit inputs the second identification information and an initial vector to a random number generating algorithm to generate a second random number, and the certification control unit compares the first random number and the second random number to verify the first random number, and determines whether to approve the second certification according to a result of the verification.

A method and apparatus for performing privacy preserving fraud detection in network based transactions are described. The method may include receiving a fraud detection message during a transaction between a user system and a merchant system, the message having a set of cryptographically transformed universal resource locator (URL) components generated from a URL of a web page of the merchant system on which the transaction is to occur. The method may also include generating one or more secure and anonymous fraud detection features, each fraud detection feature comprising a select subset of the cryptographically transformed URL components. The method may also include performing fraud detection for the web page using the one or more secure and anonymous fraud detection features to determine a likelihood that fraud is occurring in the transaction.

The invention discloses an on-lattice identity-based linear homomorphic digital signature method and related equipment, and belongs to the technical field of information security and passwords, and the method comprises the following steps: S1, generating a public parameter based on a preset security level; s2, calculating a main public key and a main private key based on the public parameters and an NTRU equation; s3, calculating an identity private key based on the main public key, the main private key, the public parameter and the identity id; s4, calculating a signature of the to-be-signed message based on the to-be-signed message, the identity private key and the identity id; s5, performing linear homomorphic operation on the signature of the to-be-signed message based on the public parameter to obtain a homomorphic signature; and S6, verifying whether the signature is passed based on the to-be-signed message, the homomorphic signature, the identity id, the main public key and the public parameter. According to the method, the problem of dependence on a public key certificate management system is solved while the efficient homomorphic operation capability is kept, and more times of linear homomorphic operation are supported, so that the security and practicability of a signature scheme in a quantum computing environment are improved.