126 results about "Device fingerprint" patented technology

The invention discloses a robust radio frequency fingerprint identification method based on Barlow Twins domain adaptation. Aiming at the problems of training and deployment environment distribution offset and cross-domain identification performance reduction caused by wireless channel multipath and time-varying characteristics in the prior art, the invention provides a domain adaptation framework combined with feature decoupling. The method comprises the following steps: firstly, converting a received time domain signal into a short-time Fourier transform spectrogram to reserve a time-frequency structure; then, a double-end convolutional encoder is constructed, bottom layer features are extracted through a shared backbone network, and device fingerprints and channel features are obtained in an identity branch and a channel branch respectively; in order to realize thorough decoupling of the two types of features, Barlow Twins-based independence regularization is introduced, and the identity features and the channel features are statistically orthogonal by minimizing a cross-correlation matrix of the identity features and the channel features, so that purer fingerprint features are obtained, channel interference is effectively eliminated, and generalization and recognition precision of the model under an unknown channel are remarkably improved.

The invention discloses an aliasing power load identification and power decomposition method, system, device and medium, and the method comprises the steps: collecting electrical data containing aliasing signals, carrying out the multi-modal feature extraction, and obtaining a device fingerprint comprising a steady-state power feature, a frequency domain harmonic feature and a statistical behavior feature; constructing an equipment behavior graph based on the fingerprint features, wherein nodes in the graph represent equipment, and edges represent power behavior correlation between the equipment; performing feature aggregation and joint reasoning on the equipment graph by using a graph attention neural network, and outputting an identification result of the target equipment and a single-equipment power estimation value; the classification precision and the power fitting capability are optimized at the same time through a joint loss function guide model; and finally, high-precision identification and power decomposition in a multi-device aliasing state are realized. The method has good anti-interference capability and edge deployment performance, and is suitable for the scenes of distributed power utilization monitoring, non-intrusive load identification, intelligent energy-saving control and the like.

The invention relates to a multi-security protection method for an electric power application shopping mall, and the method comprises the following steps: S1, collecting and recognizing the fingerprint information of equipment, then carrying out the credibility evaluation of the equipment, and outputting an authenticated and credible user session voucher; s2, dynamically judging a function and a data range which are allowed to be accessed in combination with a shopping mall permission model, and verifying whether the permission conforms to the current application or not in real time; s3, when a user accesses the application, deploying a runtime application self-protection component according to each running application, monitoring the running state of the application in real time, and obtaining monitoring content; s4, establishing an application normal behavior baseline based on a machine learning algorithm, and identifying an abnormal behavior by comparing a real-time behavior with a baseline model according to the monitoring content; and S5, when the security risk is detected, the system automatically executes corresponding response measures according to the risk level. The reliability of the electric power application shopping mall is effectively improved.

The invention discloses an air conditioner control method, device and system, a storage medium and a computer program product. The method comprises the steps that a broadcast packet of Bluetooth equipment and the signal strength of the broadcast packet are obtained; extracting multiple types of feature information in the broadcast packet to construct a device fingerprint; performing similarity matching based on the device fingerprint to associate the random MAC address in the broadcast packet with the same Bluetooth device to obtain an association result; filtering the signal intensity, and judging the existence state of the Bluetooth equipment according to the filtered signal intensity and the association result; and generating and executing a control strategy of the air conditioner according to the existence state. According to the scheme, the equipment existence recognition reliability of the air conditioner is improved, the automatic control precision of the air conditioner is improved, and the energy-saving effect and the user comfort experience are enhanced.

The application discloses a network model parameter protection method based on a multi-layer key, relates to the technical field of data protection, and calculates a low-entropy page upper limit at a single moment based on device parameters and a maximum layer scale of a model, and determines a page budget balance in combination with a remaining count of a previous round; in response to a hierarchical decryption request, if the balance is sufficient, a certain amount is deducted and a one-time session key is derived in combination with a device fingerprint; then, the assigned physical page is subjected to no-information-residue verification, after the verification, the parameter ciphertext is decrypted using the session key and written, and the current low-entropy page count is increased in real time; after the page is used up, forced overwriting and clearing verification are performed, after the verification, the page budget balance is backfilled and the low-entropy page count is reduced, and the one-time session key is destroyed; finally, a digital signature is generated and stored as evidence. The application establishes a budget gating and recycling mechanism, realizes dynamic limitation of the amount of plaintext in the runtime memory, and solves the exposure risk problem caused by full-decryption of model parameters of an edge device.

The invention discloses a quantum random source, equipment fingerprint and biological characteristic-based three-quantum hybrid security chip and an identity authentication method. The three-quantum hybrid security chip comprises a quantum random number generation unit; the system comprises an equipment safety processing unit, a biological characteristic processing unit, a triple mixing processing unit and a key derivation and identity management unit. The chip is integrated with a biological characteristic processing unit with living body detection and quantum fuzzy commitment functions, quantum randomness, equipment physical fingerprints and living body biological characteristics are subjected to deep cryptographic fusion through a triple hybrid processing unit, a unique hybrid result binding'equipment-user 'is generated, and a joint authentication key is derived according to the hybrid result; according to the invention, the method achieves the jump from equipment authentication to human-machine integrated strong authentication, thoroughly solves the risk of equipment embezzlement while inheriting the anti-quantum and anti-cloning advantages, and is suitable for scenes with the highest security level.

Embodiments of the present application provide a positioning method and device, electronic equipment, storage medium and program product. The positioning method comprises: determining a plurality of target location points based on the similarity between the device fingerprint data of the to-be-positioned device and the device fingerprint data of the location points recorded in the device fingerprint database; the device fingerprint data comprises wireless network signal data and direction; determining a first weight value based on the similarity between the device fingerprint data of the plurality of target location points and the to-be-positioned device fingerprint data; and weighting the plurality of target location points based on the first weight value to obtain the location of the to-be-positioned device. Since the angle towards the wireless access point, i.e. the direction of the device, will affect the performance of the wireless network signal data, the similarity between the directions is introduced into the WKNN algorithm for weight calculation, thereby improving the accuracy of device positioning.

To decrease a reduction amount of DNA remaining on a test body front surface when performing finger / palm print photographing with the use of an ultraviolet ray.SOLUTION: A finger / palm print photographing device includes: an ultraviolet ray source 1; a photographing machine 4 having sensitivity with respect to a wavelength of the ultraviolet ray; and an optical system for allowing reflection light of the ultraviolet ray emitted from the ultraviolet ray source 1 and reflected against a test body to be made incident to the photographing machine 4. The wavelength of the ultraviolet ray is the wavelength for occurrence of light absorption in protein, so that a finger / palm print on the test body is photographed by using a difference of a reflectance of the ultraviolet ray. A finger / palm print normally is present on a test body front surface 2 together with cytoplasm containing protein and a cell nucleus including DNA is encapsulated by the cytoplasm. The ultraviolet ray emitted toward the test body front surface 2 is absorbed in the cytoplasm, i.e., protein, so as to reduce the amount of the ultraviolet ray to reach DNA included in the cell nucleus. Thus, the amount of DNA to be reduced by the ultraviolet ray is decreased, so that the finger / palm photographing by the ultraviolet ray can be performed while decreasing the reduction amount of DNA.SELECTED DRAWING: Figure 1

This invention provides a method, apparatus, device, and medium for verifying an edge computing host and a platform, relating to the field of network security technology. The method includes the following steps: extracting device features from the platform based on a transmission request on the edge computing monitoring host; creating a device feature vector corresponding to the platform based on the device features; constructing a device fingerprint feature library; inputting the device feature vector into a convolutional neural network to extract the device fingerprint features corresponding to the platform; matching the device fingerprint features with the device fingerprint features of known devices; using the matching result as the first verification result of the edge computing monitoring host against the platform; if the first verification is successful, performing a second authentication on the edge computing monitoring host at the platform; if the second authentication is successful, sending traffic management data from the edge computing monitoring host to the platform. This solution improves the security of data transmission through two-way authentication between the host and the platform.

Some embodiments construct a device fingerprint of a target device (e.g., personal computer, smartphone) by intercepting an access request issued by the target device. A part of the device fingerprint may be determined according to the access request, e.g., according to various features of a TLS handshake, TCP header, and / or HTTP header of the respective access request. Another part of the device fingerprint is determined by transmitting a fingerprinting probe to the target device in response to the access request, and using executable code included in the fingerprinting probe to extract a set of features characterizing a browser executing on the target device. Some embodiments then compare the device fingerprint with reference fingerprints determined for other devices on the same network, to determine whether the target device is a familiar device or not. Exemplary applications include access control and personalized content distribution, among others.

The invention discloses a credit line dynamic configuration method and device based on merchant cashier data, equipment and a medium, relates to the technical field of computers, is applied to a bank credit system, and comprises the following steps: collecting transaction data, inventory data, member data, industry data and credit investigation data of merchants in a software-as-a-service cashier system in real time; triggering a timestamp of the data and a device fingerprint recording operation; performing verification, desensitization, standardization processing and abnormal data backflow cleaning on the obtained merchant cashier data acquisition result based on a data governance strategy, and storing the governed data to a data lake; constructing and training a dynamic credit extension model based on the data lake, a plurality of predefined interpretable factors and a preset model self-training rule; and when a money use application initiated by the merchant is received, adjusting the original credit line of the merchant based on the current dynamic credit model, and outputting a target credit line. The financing availability of small and micro merchants can be greatly improved, and business cooperation among banks, merchants and cashier system providers is promoted.

The application relates to the technical field of security verification, and discloses an application security access method and device, equipment and a storage medium, the method comprising the following steps: in response to an application access request input in a browser, determining identity verification information of a user according to the application access request; obtaining a device fingerprint, wherein the device fingerprint is generated by the browser according to device information of the user; performing security check according to the identity verification information and the device fingerprint to obtain a security check result; and performing application access control according to the security check result. The application can ensure that the user can only access the application on a specified security device, and effectively improves the application access security.

The invention is suitable for the technical field of electric power communication, and relates to a dual-mode communication module zero-trust access authentication and data encryption method, which comprises the following steps: S10, extracting hardware features and software features of a dual-mode communication module, and generating a unique equipment fingerprint through an SM3 hash algorithm; s20, collecting PLC / RF link dynamic characteristic parameters in real time, and constructing a link trust baseline; s30, a multi-factor zero-trust access process is designed, initial authentication passes fingerprint and digital certificate dual verification, and subsequent continuous verification passes the link feature deviation degree; and S40, realizing data encryption transmission based on the DTLS protocol and the link characteristic dynamic key. The method is simple in process and convenient to operate, solves the problems that potential safety hazards exist in traditional static authentication, link characteristics are not utilized, and an electric red-eng system is insufficient in adaptation, and improves the safety of the dual-mode communication module in the low-voltage transformer area on the aspects of access and data transmission.

The invention discloses a cross-channel and environment-adaptive Internet of Things equipment identification method and system, and relates to the technical field of equipment identification, and the method comprises the steps: carrying out the multi-channel flow collection based on a dynamic channel optimization strategy, and obtaining the flow data of each piece of equipment; distributing the traffic data into independent data streams corresponding to each device according to the source MAC address, and performing feature extraction on each independent data stream to obtain an original device fingerprint; inputting the original device fingerprint into the trained fingerprint aligner for alignment, and outputting an aligned device fingerprint; inputting the fingerprint of the aligned equipment into a dichotomy model for identification, and outputting an identification result; and if the identification result is the Internet of Things equipment, inputting the fingerprint of the aligned equipment into a multi-classification model for identification, and outputting the specific type of the equipment. The method can overcome the influence of multi-channel and environment difference in an unknown wireless network environment, and can effectively recognize the hidden Internet of Things equipment.

The invention relates to an aeronautical satellite communication dynamic authorization method based on multi-source equipment fingerprints, and belongs to the technical field of aeronautical communication security. The method comprises the following steps: dynamically collecting and integrating fingerprint data of multi-source equipment to form a multi-source fingerprint set; based on stability and communication relevance, performing two-dimensional grading, differential purification and weight fusion on the fingerprint features to generate a unique device fingerprint identifier; in combination with geography and link security level division results, introducing real-time risk assessment parameters to dynamically adjust authorization strategy weights; and verifying the identity of the equipment based on a dynamic strategy, generating an authorization voucher with time efficiency, and embedding the authorization voucher into a communication link establishment process, so as to realize dynamic authorization and abnormal linkage handling with a session as a period. According to the invention, the accurate authentication of the device identity and the dynamic adaptation of the authorization strategy are realized, and the security and reliability of aviation satellite communication are effectively improved.

The invention belongs to the technical field of data security, and particularly relates to an Internet of Things data information secure transmission method. In order to solve the problems of limited resources and many transmission potential safety hazards of Internet of Things equipment, the method constructs full-link protection: generating a dynamic equipment fingerprint based on a physical unclonable function and behavior characteristics, and ensuring identity credibility; an improved elliptic curve Diffie-Hellman algorithm is adopted to generate a shared key, and the shared key is adaptive to lightweight equipment and is resistant to attacks; based on information entropy dynamic fragmentation, encrypting and embedding redundant data according to sensitivity differentiation; data fragmentation is transmitted through multiple paths; and carrying out fragmentation-level verification and accurate retransmission, and carrying out alarm isolation if the verification fails for more than three times. The method gives consideration to safety and high efficiency, comprehensively resists the threats such as counterfeiting, eavesdropping and cracking, guarantees the integrity and reliability of data transmission, and is adaptive to the complex application scene of the Internet of Things.

This application relates to a device fingerprint extraction method, apparatus, computer device, storage medium, and computer program product. The method includes: acquiring a signal at a signal acquisition location at a wired connection between a master device and a slave device to obtain a master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone; acquiring multiple signals at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other; performing cepstral processing on the first mixed signal based on the master device signal to obtain a first cepstral signal; performing cepstral processing on the second mixed signal based on the master device signal to obtain a second cepstral signal; and obtaining the device fingerprint of the slave device based on the first and second cepstral signals.

The invention discloses a webpage login method based on a trusted environment and zero-knowledge proof and a related device, and belongs to the technical field of webpage security login, the method comprises the following steps: verifying whether a local login environment is trusted according to environment parameters locally stored by a client; wherein the environment parameters locally stored by the client comprise an environment validity period, an environment identifier, and an environment feature hash value and a registration matrix corresponding to the environment validity period and the environment identifier; if the login environment is credible, calculating an actual challenge result and an expected challenge result at the client and the server according to locally stored environment parameters based on zero-knowledge proof, performing comparison verification, if the verification is passed, logging in a webpage, and if the verification is not passed, switching a conventional login mode; wherein the environment parameters locally stored by the server side comprise a projection matrix and a dimensionality reduction vector corresponding to the environment identifier; if the login environment is not credible, a conventional login mode is switched, transmission and leakage of privacy information such as passwords and device fingerprints are avoided, and the replay and forgery risks are reduced.

The invention discloses an authority management method and system for equipment flashing, a chip and an intelligent terminal.The method comprises the steps that when an authorization mode for equipment flashing is a quick start authorization mode, a boot loader is started; the client application initiates a first authorization authentication request via the first trusted execution environment client interface; the trusted execution environment core driver receives the first authorization authentication request and switches the operating environment of the processor from a common world to a secure world; the trusted operating system receives and analyzes the first authorization authentication request, and schedules an early trusted application to obtain equipment fingerprint information from the first storage partition; when the equipment fingerprint information passes verification, modifying the first authorization mark, and correspondingly modifying the second authorization mark stored in the second storage partition; and the intelligent terminal is switched into the factory mode. According to the method and the device, the original flashing port can be controllably opened, so that the risk of illegal flashing is avoided, and meanwhile, legal flashing operation is guaranteed.

The invention relates to a one-to-one authorization and access control system and a one-to-one authorization and access control method for an information transmission terminal. The system comprises an equipment fingerprint management module and a license generation amp at an intranet side; a signature module; an external network side license receiving module, a license analysis and verification module and a system start amp; an authority control module and an equipment fingerprint acquisition module; and a unidirectional transmission link; the license generates an amp (amp); the signature module is used for generating a bound license file according to a device fingerprint; the equipment fingerprint acquisition module is used for acquiring hardware information of the terminal equipment and calculating the hardware information when the terminal equipment is started every time, so as to obtain a real-time equipment fingerprint; the license analysis and verification module is used for reading the license file and the real-time device fingerprint and executing verification; starting the amp by the system; and the authority control module executes authorization and access control according to the verification result. The problem that traditional authorization depends on bidirectional network verification is solved.

The invention relates to the technical field of IPTV (Internet Protocol Television) value-added services, in particular to a method for preventing false ordering of an IPTV value-added service, which comprises an operator, an SP (Service Provider), a cashier desk, a payment plug-in, a user data interface and the IPTV, a user browses the value-added service provided by the SP through an IPTV set top box and initiatively initiates an ordering request based on the own demand, and when the SP receives the ordering request of the user, the SP sends the ordering request to the IPTV. A payment plug-in is called, the payment plug-in is a unique cashier entrance, real equipment of a user is recognized through technologies such as equipment fingerprints, the authenticity of a request source is ensured, the payment plug-in carries a cached unique equipment identifier, a background interface of a cashier is accessed, and the background of the cashier executes multiple verifications; according to the method, false violation ordering behaviors are accurately recognized and intercepted in time, violation ordering is blocked before ordering is completed, economic losses of users are avoided, bad debt losses of operators are reduced, the operators can intercept malicious violation ordering in advance, trust of the users to the operators can be increased, and user stickiness can be increased.

The invention provides a device security registration method and system, a device and a storage medium. Relates to the technical field of electric equipment identification. The method is applied to an equipment security registration system, and comprises the following steps: monitoring voltage and current data at a main incoming line of a household distribution box; in response to a switching event of the access equipment, target features are determined according to the voltage and current data, the target features comprise steady-state features and transient-state features of the access equipment, and the switching event is used for indicating that the access equipment is connected or started; according to the target features, security detection is performed on the access device, and the security detection is used for identifying and filtering abnormal devices; when the access device passes the security detection, determining the device type of the access device according to the target feature and a preset device fingerprint database; and automatically registering the access equipment according to the equipment type. According to the invention, non-intrusive automatic discovery and safe registration of intelligent electric equipment and non-intelligent electric equipment in a family can be realized.

The application discloses a LoRa device identification system and method based on clock fingerprint characteristics, and belongs to the technical field of device identification. A time synchronization module utilizes frequency hopping spread spectrum in the LoRa device to change the time stamp when the channel interruption record sends the preamble and header of a data packet, writes the time stamp into a radio frequency FIFO to be sent together with the message, and records the time stamp when the receiving party receives the completed message, calculates the compensation time through the transmission parameters and the data packet size, and obtains a time stamp pair reflecting the clock crystal relationship of the device; a feature extraction module fits the clock relationship between the devices through the least square method, obtains the clock offset reflecting the clock crystal characteristics of the device as the device fingerprint; a fingerprint identification module maintains a fingerprint library of the legal devices, performs fingerprint matching of the devices through the nearest neighbor algorithm and a set threshold, and realizes identification of the devices. The application has the advantages of being not easy to be attacked, high safety, and low cost.

This invention relates to an automatic IT asset discovery method based on multi-protocol fusion and incremental change detection. Compared with existing technologies, it solves the shortcomings of existing IT asset discovery methods, such as incomplete protocol coverage, low scanning efficiency, improper handling of multi-source data conflicts, and high update overhead, resulting in low asset discovery coverage, low accuracy, and synchronization delays. This invention includes the following steps: building a multi-protocol parallel scanning framework; intelligent scheduling of protocol priorities; multi-dimensional device fingerprint extraction; confidence-weighted fusion deduplication; incremental change detection; and intelligent identification of asset model classification. This invention introduces an intelligent asset classification mechanism based on a machine learning model to achieve automatic identification and intelligent management of asset types, realizing high coverage, high accuracy, low overhead, and low latency automatic discovery and management of IT assets.

The present disclosure relates to a fingerprint detection device, a fingerprint chip, a display device and an electronic device, which are applied to a display panel, and the device comprises a switching module connected to an optical fingerprint chip, used for switching the working mode of the optical fingerprint chip to a touch detection mode or a fingerprint collection mode, wherein when the optical fingerprint chip works in the touch detection mode, the optical fingerprint chip is used for detecting whether the display panel is touched; when the optical fingerprint chip works in the fingerprint collection mode, the optical fingerprint chip is used for collecting fingerprints. The embodiment of the present disclosure can detect whether the display panel is touched by using the optical fingerprint chip, and collect fingerprints. Compared with the related art, the use of touch sensors or pressure sensors is saved, the cost is saved, and the process complexity is reduced, so that the response speed is improved and the overall power consumption is reduced.

A method for a network device is provided, the method comprising obtaining device fingerprint data representing a first set of characteristics of a device connected to the network and an associated confidence score representative of a confidence in the first set of characteristics, obtaining a threshold confidence score, receiving a service advertisement message from the device, the service advertisement message including an indication of a second set of characteristics of the device. The method then involves determining whether the first set of characteristics are inconsistent with the second set of characteristics and performing a predetermined action in dependence on an outcome of this determining and on a comparison of the confidence score with the threshold confidence score. A network device configured to perform the method, and a non-transitory computer-readable storage medium comprising instructions for executing the method are also provided.

Systems, methods, and articles of manufacture for secured account provisioning and payments using user computing devices are provided. One such method comprises receiving, by a user computing device, a payment request from a point of sale terminal; obtaining, by the user computing device, a storage encryption (ENC) key based on at least a device fingerprint of the user computing device and a storage root key; obtaining, by the user computing device, an encrypted account payload from a secure database of the user computing device; decrypting, by the user computing device, the encrypted account payload using the storage ENC key, wherein the decrypted account payload includes a payment credential; and transmitting, by the user computing device, the payment credential to the point-of-sale terminal.

The invention relates to a software authorization method and device, electronic equipment, a storage medium and a program product. The method comprises the following steps: acquiring a target ciphertext in a software authorization file, and acquiring real-time equipment information of to-be-authorized equipment; executing codes in the dynamic link library compiled by the compilation type language to generate a second real-time key segment; encrypting a real-time equipment fingerprint obtained by mapping the real-time equipment information based on a second real-time key segment, and mapping to obtain a real-time position characterization value; extracting a first real-time key segment from the target ciphertext according to the real-time position characterization value; after encrypting the real-time equipment information based on the second real-time key segment, extracting a third real-time key segment; decrypting the target ciphertext based on the key combined by the three key segments; and when the reference equipment information and the authorization configuration information are obtained through decryption and the real-time equipment information is consistent with the reference equipment information, authorizing the to-be-authorized equipment based on the authorization configuration information. By adopting the method, the software authorization security can be improved.

The invention discloses a hardware equipment fingerprint verification method and system. The method comprises the following steps: S1, collecting and calculating equipment fingerprint information of target hardware equipment; s2, broadcasting the processed equipment fingerprint information to a block chain network, and verifying the equipment fingerprint information based on a consensus node in the block chain network; and S3, based on the verification result of the consensus node, determining whether the device fingerprint of the target hardware device passes. According to the method, the reference information and the verification logic are stored in the decentralized block chain network, and verification is automatically executed by using the smart contract, so that algorithm cracking, data tampering and equipment identity counterfeiting are effectively prevented. And a multi-weight factor algorithm is adopted to better adapt to diversified hardware configuration in PC open ecology. In addition, a judgment mechanism based on a consensus node response proportion ensures that the verification service can still run stably and reliably under the condition that the network environment is complex and changeable.