237 results about "Device fingerprint" patented technology

The embodiment of the invention provides a security authentication method, device and system for a test platform, and a storage medium, and relates to the technical field of network security. The method comprises the following steps: performing fingerprint acquisition on virtual and real equipment to generate a unique identifier, dynamically slicing based on a software defined network to form an isolated test environment, and injecting a zero-trust access strategy associated with the fingerprint; and based on the zero-trust access policy and the device fingerprint, allocating a minimum permission through an attribute-based access control model, continuously evaluating device behaviors to calculate a dynamic trust score, and adaptively updating the permission according to the trust score. By constructing a full-process security certification system and through multi-dimensional mechanism cooperation, dynamic risk perception and timely strategy adjustment, fine-grained control of virtual and real equipment access in an industrial control scene is realized, the dynamic adaptability and risk resistance of a test platform in a complex network environment are improved, and the test efficiency is improved. Equipment access safety, authority distribution minimization and behavior monitoring continuity are ensured, and the safety risk of the industrial control system is reduced.

The invention provides an Internet of Vehicles broadcast frame radio frequency fingerprint identification method based on LMMSE channel estimation. The method comprises the following steps: obtaining subcarrier data in a resource grid based on an obtained signal of a physical side link broadcast channel; performing root-mean-square delay expansion and channel autocorrelation matrix construction based on the subcarrier data, and combining priori signal-to-noise ratio regularization and time domain windowing operation to obtain a channel estimation value; initial radio frequency fingerprint features are obtained through the channel equalization and the channel estimation value, and the improved neural network and the initial radio frequency fingerprint features are utilized to carry out classification identification on the Internet of Vehicles equipment. Influences of noise and channels on fingerprints are effectively considered, and the purpose of extracting fingerprints of different devices in a complex environment more accurately is achieved.

The embodiment of the invention discloses a dynamic metadata sensing and self-adaptive mapping method and system, and the method comprises the following steps: deploying a lightweight probe to be agented to a plurality of heterogeneous source database systems, and building a trusted communication channel between the probe and a coordination center through equipment fingerprint generation and security authentication; a database log event is captured in real time, log analysis is carried out through an FPGA module, the change of a field structure or a semantic level is identified, and structured event data is generated; performing context embedding representation on the captured event based on a semantic understanding model, performing strategy reasoning in combination with a historical strategy and a knowledge graph, and generating a matched mapping strategy; loading and executing the mapping strategy in a trusted execution environment (TEE) to realize data conversion, cleaning and complementation, and performing desensitization processing on sensitive data through a differential privacy mechanism; and collecting performance indexes and abnormal logs of a strategy execution result, continuously training the model through a closed-loop optimization mechanism, and correcting an unreasonable strategy or updating a rule base.

The invention discloses an enhanced equipment fingerprint identification system and method based on time-frequency domain feature fusion. The system is composed of a signal processing module, a feature extraction module, a feature fusion module and an equipment identification module. The method comprises the following steps: firstly, splitting IQ into three time domain features, converting the IQ into a frequency domain and a time-frequency domain by using corresponding FFT and STFT formulas, and extracting corresponding features; respectively inputting the features of the time domain, the frequency domain and the time-frequency domain into a feature extraction module for feature extraction; the extracted features are sent to a feature fusion module, and final fusion features are generated; and finally, the fusion features are transmitted to a classification model, and fingerprint matching and identification of the equipment are completed. By adopting the enhanced equipment fingerprint identification system and method based on time-frequency domain feature fusion, the security, accuracy and robustness of the Internet of Things equipment are improved, the sensitivity of the system to noise interference is reduced, the equipment fingerprint extraction cost is reduced, and the higher identification accuracy is realized.

The invention discloses a cloud mobile phone equipment fingerprint disguising method and related equipment, and relates to the technical field of cloud mobile phone security, and the method comprises the steps: obtaining hardware entropy source data which comprises current timestamp data, a hardware unique identifier hash value and an environment noise sampling value; non-linear transformation is carried out on the hardware entropy source data based on a preset chaotic mapping algorithm, a virtual parameter set is generated, and the virtual parameter set meets a preset equipment parameter rule; covering the virtual parameter set to a multi-level system interface of the real equipment fingerprint through kernel-level injection operation; monitoring the use state of the virtual parameter set based on a preset life cycle model, and determining a parameter updating trigger condition; and when a parameter updating triggering condition is met, the nonlinear transformation is executed again to generate an updated virtual parameter set, and the updated virtual parameter set covers the multi-level system interface.

A network monitoring device is connected to a communications network and monitors traffic transmitted to and from a server. The system stores a device fingerprint of devices identified as involved in attacks across the communications network, generates attack patterns for attacks across the communications network based on data packets transmitted or received by the devices during an attack based on the data packets corresponding to the device fingerprint, monitors data packet exchanges between the server and network devices, determines a set of transmission parameters for each of the data packet exchanges, compares the set of transmission parameters for the plurality of data packet exchanges to the attack patterns, and, responsive to determining a match between a first set of transmission parameters and an attack pattern, applies a tag to a network device communicating with the server via the data packet exchange indicating the network device is involved in an attack.

A computer-implemented method and system for managing an authentication between user devices and authentication servers, is disclosed. The computer-implemented method includes: obtaining user credentials associated with users; retrieving information associated with device fingerprints corresponding to the user devices; generating cipher messages by at least one of: creating random numbers and encrypting the random numbers with keys derived from at least one of: the first and second index; transmitting the one or more user identities, the first index, the second index, and the cipher messages, to authentication servers; dynamically generating the private keys from private key variables; generating authentication responses by decoding authentication based questions obtained from the authentication servers, using cipher messages and the private keys; and transmitting the authentication responses to the authentication servers for adapting the authentication servers to authenticate the user devices.

The invention discloses a robust radio frequency fingerprint identification method based on Barlow Twins domain adaptation. Aiming at the problems of training and deployment environment distribution offset and cross-domain identification performance reduction caused by wireless channel multipath and time-varying characteristics in the prior art, the invention provides a domain adaptation framework combined with feature decoupling. The method comprises the following steps: firstly, converting a received time domain signal into a short-time Fourier transform spectrogram to reserve a time-frequency structure; then, a double-end convolutional encoder is constructed, bottom layer features are extracted through a shared backbone network, and device fingerprints and channel features are obtained in an identity branch and a channel branch respectively; in order to realize thorough decoupling of the two types of features, Barlow Twins-based independence regularization is introduced, and the identity features and the channel features are statistically orthogonal by minimizing a cross-correlation matrix of the identity features and the channel features, so that purer fingerprint features are obtained, channel interference is effectively eliminated, and generalization and recognition precision of the model under an unknown channel are remarkably improved.

A network monitoring device is connected to a communications network and monitors traffic transmitted to and from a server. The system stores a device fingerprint of devices identified as involved in attacks across the communications network, generates attack patterns for attacks across the communications network based on data packets transmitted or received by the devices during an attack based on the data packets corresponding to the device fingerprint, monitors data packet exchanges between the server and network devices, determines a set of transmission parameters for each of the data packet exchanges, compares the set of transmission parameters for the plurality of data packet exchanges to the attack patterns, and, responsive to determining a match between a first set of transmission parameters and an attack pattern, applies a tag to a network device communicating with the server via the data packet exchange indicating the network device is involved in an attack.

The invention discloses a vehicle trunk automatic opening method and device and a computer program product, and the method comprises the steps: firstly, after the device fingerprint verification of a target vehicle is passed, obtaining N paths of surrounding video streams through a whole vehicle panoramic camera composed of N vehicle-mounted cameras; and then pedestrian detection and cross-shot pedestrian tracking processing are carried out on each frame of image in the N paths of video streams to obtain a pedestrian detection result and a pedestrian tracking result. Generating a BEV pedestrian trajectory according to a pedestrian tracking result; a target pedestrian BEV track is screened out from the target pedestrian BEV track; and after the identity verification of the target pedestrian is passed, obtaining a state diagram of the target pedestrian according to a pedestrian detection result, inputting the BEV track of the target pedestrian, the state diagram of the target pedestrian and the scene text information of the landmark building within the preset range around the target vehicle into a VLM in combination with prompt, and when the VLM judges that the target pedestrian has the intention of opening the trunk, opening the trunk. And the trunk is automatically opened, so that the safety of the target vehicle and the vehicle use experience of the target pedestrian are improved.

The invention discloses an aliasing power load identification and power decomposition method, system, device and medium, and the method comprises the steps: collecting electrical data containing aliasing signals, carrying out the multi-modal feature extraction, and obtaining a device fingerprint comprising a steady-state power feature, a frequency domain harmonic feature and a statistical behavior feature; constructing an equipment behavior graph based on the fingerprint features, wherein nodes in the graph represent equipment, and edges represent power behavior correlation between the equipment; performing feature aggregation and joint reasoning on the equipment graph by using a graph attention neural network, and outputting an identification result of the target equipment and a single-equipment power estimation value; the classification precision and the power fitting capability are optimized at the same time through a joint loss function guide model; and finally, high-precision identification and power decomposition in a multi-device aliasing state are realized. The method has good anti-interference capability and edge deployment performance, and is suitable for the scenes of distributed power utilization monitoring, non-intrusive load identification, intelligent energy-saving control and the like.

The invention discloses a drug inspection information sharing method and system based on a block chain, and relates to the technical field of drug inspection data management, and the method comprises the steps: sending an authentication request to a block chain network when a drug inspection device is started, verifying the state of the device according to a device digital identity certificate after an intelligent contract receives the authentication request, and sending the verification result to a server; generating a temporary operation token, encrypting the temporary operation token by using the equipment public key and returning the temporary operation token to the medicine inspection equipment; the medicine inspection equipment performs medicine inspection through the temporary operation token, synchronously acquires inspection data, a GPS position, an inspection timestamp and an equipment fingerprint, calculates a composite hash value, and encrypts the inspection data; and submitting the composite hash value to a block chain network, performing space-time compliance verification through an intelligent contract, obtaining a drug batch DID, and generating an on-chain block associated with the drug batch DID. According to the invention, the identity credibility of the medicine inspection equipment is ensured, and the authenticity, integrity and time-space consistency of inspection data are realized.

The invention discloses an Android instant messaging method and system based on dynamic key management and privacy protection. The system comprises an equipment fingerprint key generation module used for extracting equipment hardware fingerprints and generating a unique master key through a Hash algorithm; the dynamic session key rotation module is used for dynamically deriving a session key based on a timestamp confusion mechanism and a preset triggering condition; the key verification and synchronization module is used for realizing key legality verification through two-factor verification and a server blacklist mechanism; and the privacy protection module is used for protecting user data privacy by adopting an end-to-end encryption and local storage encryption technology, so that the technical problems in the background technology are solved, and the technical effects of remarkably improving the communication security and the privacy protection level through equipment fingerprint binding, dynamic key rotation and a two-factor verification mechanism are realized.

The invention relates to the technical field of anti-fraud identification and fingerprint generation, in particular to an intelligent anti-fraud equipment fingerprint generation method, which comprises the following steps: data collection and preprocessing: acquiring latest equipment information and characteristics through networking query; repeated data is removed, missing values are processed, abnormal values are filtered, a data format is standardized, and a unified data set is formed; training and generating an equipment fingerprint by using a large model, including training the large model by using a deep learning framework to generate a unique equipment fingerprint; and identifying the equipment and carrying out anti-fraud detection, namely comparing the equipment fingerprints submitted by the user, identifying the real identity of the equipment and carrying out anti-fraud detection. According to the method, the complex association between the device features is mined through the deep learning model, the generated device fingerprint has uniqueness and is difficult to counterfeit, and the accuracy of device identification can be effectively improved, so that the anti-fraud effect is improved, and the loss caused by fraudulent behaviors is reduced.

The invention relates to the technical field of USB audio equipment optimization, and discloses a USB audio equipment Device mode implementation method and system, a storage medium and equipment, and the method comprises the steps: dynamically recognizing a connection type through detecting a USB data line voltage threshold value, and dynamically loading a corresponding protocol stack module based on the connection type; in a Device mode, a multi-stage buffer mechanism is adopted to manage audio data streams, the number and size of buffer areas are dynamically allocated according to target delay time, and clock synchronization with a host is realized based on an adaptive clock recovery algorithm; the power consumption of the equipment is dynamically adjusted through a multi-stage power consumption state machine, switching is carried out among working states according to an audio activity state and a data transmission requirement, and a remote wakeup function is supported; according to the method, a compatibility strategy library is matched based on a device fingerprint recognition result, protocol characteristics and audio formats of different host devices are automatically adapted, meanwhile, audio playing is controlled through audio quality monitoring and self-optimization, and Device mode support is added to the USB audio device through the method.

The invention relates to the technical field of data encryption hiding, in particular to an intelligent security traceability method and system based on steganography watermarking and hierarchical signatures, and the method comprises the steps: carrying out the first-level watermarking embedding of an original file, and obtaining a first-level watermarking file; then storing signature event data and device fingerprints in the watermark embedding process of the first level in a block chain; transmitting the watermark file of the first level to a second level to obtain a first transmission watermark file; performing hierarchical watermark signature chain verification according to the first transmission watermark file; when the verification is not passed, terminating file transmission and freezing file access permission, and when the verification is passed, calculating a real-time risk index at the current moment, triggering a hierarchical response according to the real-time risk index, and performing a subsequent hierarchical watermark embedding operation according to a hierarchical response result; and when the hierarchical response is high in risk, querying an abnormal point through the block chain, and positioning a leakage source. According to the invention, the accuracy of intelligent safety traceability is improved.

The invention provides a cloud disk data access control and authority management method and system based on a zero-trust architecture, and relates to the technical field of cloud computing, and the method comprises the steps: generating a real-time risk score through calculating a user access behavior deviation degree, a geographic position and a device fingerprint; reading the distributed permission strategy library in parallel by adopting a consistent Hash algorithm, and obtaining dynamic permission configuration; based on an attribute access control strategy, constructing a multi-dimensional permission decision matrix in combination with a data sensitivity label and an access environment context; and finally executing fine-grained access control and recording a verification process. According to the method, dynamic and continuous identity verification and refined authority control are realized, and the cloud disk data access security is remarkably improved.

The invention relates to a multi-security protection method for an electric power application shopping mall, and the method comprises the following steps: S1, collecting and recognizing the fingerprint information of equipment, then carrying out the credibility evaluation of the equipment, and outputting an authenticated and credible user session voucher; s2, dynamically judging a function and a data range which are allowed to be accessed in combination with a shopping mall permission model, and verifying whether the permission conforms to the current application or not in real time; s3, when a user accesses the application, deploying a runtime application self-protection component according to each running application, monitoring the running state of the application in real time, and obtaining monitoring content; s4, establishing an application normal behavior baseline based on a machine learning algorithm, and identifying an abnormal behavior by comparing a real-time behavior with a baseline model according to the monitoring content; and S5, when the security risk is detected, the system automatically executes corresponding response measures according to the risk level. The reliability of the electric power application shopping mall is effectively improved.

The invention relates to a multi-factor dynamic authentication method and device, electronic equipment and a storage medium, and the method can collect user behavior data, equipment fingerprint data, real-time threat intelligence and other multi-dimensional data in real time based on a received authentication request, carries out the evaluation of the multi-dimensional data based on a pre-trained artificial intelligence model, and improves the user experience. The method comprises the steps of obtaining a comprehensive risk score of an authentication request, determining a target multi-factor authentication strategy from a preset multi-factor authentication strategy library according to the comprehensive risk score, authenticating a user according to the target multi-factor authentication strategy, and determining authorized access or denied access to the user according to an authentication result. Due to the fact that the corresponding target multi-factor authentication strategy can be selected in combination with the multi-dimensional data collected in real time, the multi-factor authentication strength can be dynamically adjusted to complete multi-factor authentication, and user experience and safety are balanced.

The invention discloses a block chain-based medical place automatic door data sharing and privacy protection system, which is characterized by comprising an edge sensing module used for processing biological recognition data through edge nodes, outputting desensitization feature vectors and packaging device fingerprints and timestamps; the encryption storage module is used for dynamically generating an encryption key, performing anonymous permission verification in combination with zero-knowledge proof, encrypting data and performing fragmentation storage on the key; the evidence storage and sharing module is used for constructing an alliance chain and carrying out evidence storage on the desensitized and encrypted data through a multi-channel uplink, and nodes on the alliance chain are in data intercommunication through a cross-chain protocol; the authority management module is used for deploying a three-layer intelligent contract and automatically executing authority control according to an alliance chain setting rule; and the double-chain auditing module is used for automatically detecting an abnormal access behavior by adopting a double-chain structure and automatically triggering an intelligent contract to adjust a permission strategy. According to the method, the data management mode of the medical place is reconstructed, and the method has remarkable advantages in compliance, efficiency improvement and emergency response dimensions.

The invention discloses an air conditioner control method, device and system, a storage medium and a computer program product. The method comprises the steps that a broadcast packet of Bluetooth equipment and the signal strength of the broadcast packet are obtained; extracting multiple types of feature information in the broadcast packet to construct a device fingerprint; performing similarity matching based on the device fingerprint to associate the random MAC address in the broadcast packet with the same Bluetooth device to obtain an association result; filtering the signal intensity, and judging the existence state of the Bluetooth equipment according to the filtered signal intensity and the association result; and generating and executing a control strategy of the air conditioner according to the existence state. According to the scheme, the equipment existence recognition reliability of the air conditioner is improved, the automatic control precision of the air conditioner is improved, and the energy-saving effect and the user comfort experience are enhanced.

The invention belongs to an authentication method, and provides a power terminal adaptive security authentication method and a related device aiming at the technical problems that the adaptive security authentication capability is insufficient and the application depth of an AI (Artificial Intelligence) technology is insufficient in an existing power business scene. Then enhancement verification is carried out by means of a large language model and generative retrieval enhancement, a security authentication strategy of a terminal to be accessed to the network is generated, simulation test and multi-level auditing are carried out on the generated security authentication strategy, deployment is carried out after all the security authentication strategies pass, continuous security monitoring is carried out after deployment, and the security authentication strategy is adjusted in time according to a monitoring result. And if necessary, regenerating the device fingerprint for the terminal and re-authenticating. And a technical support is provided for safe access and full-life-cycle safe management and control of massive terminals of a novel electric power system.

The invention relates to the technical field of communication, and discloses an equipment fingerprint-based MCP client identity authentication method for information security, which is characterized in that a unique equipment fingerprint is generated by collecting and analyzing hardware and software feature information of client equipment, and dual authentication is realized in combination with user identity information. Account embezzlement and equipment forgery attacks are effectively prevented, the equipment-level identity verification capability is provided, a credible equipment access baseline is established, the safety and credibility of an MCP system are improved, abnormal equipment access behaviors can be found in time, abnormal changes of an equipment environment can be recognized, detailed equipment audit logs are provided, and the safety and reliability of the MCP system are improved. And non-perceptual authentication is provided for legal equipment, so that user interference of repeated authentication is reduced, flexible management of a multi-equipment scene is supported, automatic equipment trust management is matched, the equipment authorization and revocation process is simplified, and a visual equipment management interface is provided.

The application discloses a network model parameter protection method based on a multi-layer key, relates to the technical field of data protection, and calculates a low-entropy page upper limit at a single moment based on device parameters and a maximum layer scale of a model, and determines a page budget balance in combination with a remaining count of a previous round; in response to a hierarchical decryption request, if the balance is sufficient, a certain amount is deducted and a one-time session key is derived in combination with a device fingerprint; then, the assigned physical page is subjected to no-information-residue verification, after the verification, the parameter ciphertext is decrypted using the session key and written, and the current low-entropy page count is increased in real time; after the page is used up, forced overwriting and clearing verification are performed, after the verification, the page budget balance is backfilled and the low-entropy page count is reduced, and the one-time session key is destroyed; finally, a digital signature is generated and stored as evidence. The application establishes a budget gating and recycling mechanism, realizes dynamic limitation of the amount of plaintext in the runtime memory, and solves the exposure risk problem caused by full-decryption of model parameters of an edge device.

The invention relates to an onboard network real-name authentication method and device based on a boarding pass. The onboard network real-name authentication method based on the boarding pass comprises the following steps: in response to an authentication request initiated by mobile equipment, determining the model of the mobile equipment; acquiring hardware information and operating system permission of the mobile equipment according to the model, and acquiring an equipment fingerprint of the mobile equipment; automatically optimizing the imaging condition of the mobile equipment based on the hardware information to scan the industry standard two-dimensional code on the boarding pass; calling an authentication script based on the authority of the operating system, and identifying the industry standard two-dimensional code by using the authentication script to complete the initial verification of the identification information; and the identification result and the device fingerprint are encrypted and transmitted to the server, and real-name authentication of the mobile device is carried out.

The invention discloses a power equipment identity fingerprint generation method, verification method and device, and the method comprises the steps: obtaining the software and hardware static identity information and dynamic identity information of power equipment; wherein the dynamic identity information is obtained according to the private data of the power equipment, or a public key and a private key are generated by using a cryptographic key generation method, and the public key is used as the dynamic identity information; performing Hash calculation according to the identity information to obtain the identity information of the power equipment; and converting the identity information of the power equipment into a form conforming to a specified format, namely the identity fingerprint of the power equipment. According to the invention, identity fingerprints based on the combination of software and hardware static information and cryptography dynamic information are provided for power equipment, and identity verification and living body detection of a verification party on the equipment are completed in one message interaction based on a non-interactive zero-knowledge proof method; and the potential safety hazard that the identity fingerprint of the power equipment is easily counterfeited and illegally abused is solved.

The invention discloses a quantum random source, equipment fingerprint and biological characteristic-based three-quantum hybrid security chip and an identity authentication method. The three-quantum hybrid security chip comprises a quantum random number generation unit; the system comprises an equipment safety processing unit, a biological characteristic processing unit, a triple mixing processing unit and a key derivation and identity management unit. The chip is integrated with a biological characteristic processing unit with living body detection and quantum fuzzy commitment functions, quantum randomness, equipment physical fingerprints and living body biological characteristics are subjected to deep cryptographic fusion through a triple hybrid processing unit, a unique hybrid result binding'equipment-user 'is generated, and a joint authentication key is derived according to the hybrid result; according to the invention, the method achieves the jump from equipment authentication to human-machine integrated strong authentication, thoroughly solves the risk of equipment embezzlement while inheriting the anti-quantum and anti-cloning advantages, and is suitable for scenes with the highest security level.

The embodiment of the invention provides an account distinguishing method and device, equipment, a storage medium and a program product, and relates to the field of financial science and technology. The method comprises the following steps: acquiring account data, a device fingerprint and a relationship between the account data and the device fingerprint, wherein the device fingerprint is used for identifying a device; generating a credibility evaluation result between the account data and the equipment fingerprint according to the relationship between the account data and the equipment fingerprint by using a pre-constructed credibility evaluation model; constructing a group model according to the account data, the device fingerprints, the relationship between the account data and the device fingerprints and the credibility evaluation result; and based on the group model, according to the credibility evaluation result, determining a group type corresponding to a group to which the account data belongs. According to the method, the group type to which the account belongs is dynamically identified through the group model and the credibility evaluation result, so that the group type to which the account belongs is accurately identified, and the accuracy of determining the group type to which the account belongs is improved.

The invention provides a CODESYS-based HID equipment adaptive data interaction method and system and a storage medium, and the method comprises the steps: firstly, capturing an HID equipment plugging event in real time, and extracting equipment fingerprints containing VID, PID and protocol types; secondly, white list verification is carried out during operation, an exclusive annular buffer area is created for legal equipment, and a standardized function block is dynamically generated; then, a communication mode is configured based on the equipment type, and direct data transmission is realized through a zero-copy channel by adopting a polling or fragmentation transmission mode; and finally, the application layer calls the function block through a declarative interface, and executes data retransmission or fusing protection according to a CRC check result. According to the method, middleware dependence is eliminated, asynchronous I / O and shared memory technologies are adopted, data transmission delay is reduced, and hot plug automatic identification of equipment is also realized; according to the invention, a high-real-time and high-reliability HID equipment access solution is provided for the field of industrial control.

Embodiments of the present application provide a positioning method and device, electronic equipment, storage medium and program product. The positioning method comprises: determining a plurality of target location points based on the similarity between the device fingerprint data of the to-be-positioned device and the device fingerprint data of the location points recorded in the device fingerprint database; the device fingerprint data comprises wireless network signal data and direction; determining a first weight value based on the similarity between the device fingerprint data of the plurality of target location points and the to-be-positioned device fingerprint data; and weighting the plurality of target location points based on the first weight value to obtain the location of the to-be-positioned device. Since the angle towards the wireless access point, i.e. the direction of the device, will affect the performance of the wireless network signal data, the similarity between the directions is introduced into the WKNN algorithm for weight calculation, thereby improving the accuracy of device positioning.