1533 results about "Digital signature" patented technology

The invention discloses a cross-domain computing task processing method, a program product, equipment and a medium, and relates to the technical field of cloud computing. The method comprises the following steps: determining a computing node for executing a cross-domain computing task in a cross-domain collaborative scene, and generating an identity certificate bound with the computing node based on a hardware credible state of the node; collecting security policies of a plurality of management domains for conflict detection and decision, and generating a conflict-free session policy; scheduling the cross-domain computing task to a target computing node meeting a preset credible requirement, and issuing a revocable dynamic session token; and recording the operation information of the cross-domain calculation task in the whole life cycle as an audit event, and generating a chained audit log which is linked by the hash value and is digitally signed through a preset verifiable audit interface. By means of the technical scheme, it can be ensured that the whole life cycle of any computing task meets the closed-loop safety requirements of identity credibility, permission controllability, execution propriability and behavior traceability in the complex distributed computing environment.

The invention discloses an insurance claim settlement-oriented multi-modal image video evidence analysis method and system. The method comprises the following steps of: acquiring video / image and multi-source data such as metadata, audio, IMU (Inertial Measurement Unit), GPS (Global Positioning System), OBD (On-Board Diagnostic) and the like; calculating content Hash of the video and the audio according to frames, connecting the content Hash with time information in series to form chained Hash, and adding a verification digital signature and a credible timestamp; realizing cross-modal time sequence alignment based on self-adaptive time anchor-attitude coupling; tampering detection is carried out in combination with PRNU fingerprints, noise field consistency, dual compression, copy-movement and the like; multi-view geometry and monocular depth are fused, IMU scale constraint and micro rendering are introduced, three-dimensional reconstruction and re-projection optimization are completed, and collision dynamics verification is carried out; and constructing an event cause and effect graph, judging responsibility in combination with traffic rules, outputting a confidence coefficient vector and a structured report, and generating a verifiable evidence packet. The scheme has the advantages of high efficiency and traceability in the aspects of space-time restoration and interpretable responsibility judgment.

A method for packaging digital evidence for long term validation comprises forming a package of a digital document (10), an electronic signature (12) for the document (10), together with evidence (16) of the authority of the signature in the document and a time stamp (20) indicating when the document was digitally signed. All of the pieces form parts of the packaged evidence.

Systems and methods for executing multi-party validations for complex communications across multiple computer networks using bifurcated digital signing processes. For example, the system may receive a first request, at a bifurcated digital signing process, to perform a first multi-party validation action, wherein the first request has a first processing characteristic. The system may, in response to receiving the first request, process the first request with a first signing routine of the bifurcated digital signing process. The system may determine, based on the first signing routine, whether the first processing characteristic corresponds to a predetermined processing characteristic. The system may, in response to determining that the first processing characteristic corresponds to the predetermined processing characteristic, process the first request with a second signing routine of the bifurcated digital signing process to perform the first multi-party validation action.

The invention relates to the technical field of environment monitoring, and discloses a completion process data-based environment monitoring parameter comparison evaluation method, which comprises the following steps of: obtaining completion process data and environment monitoring data, and constructing a multi-dimensional data graph, mapping the completion process data and the environmental monitoring data to generate a standardized data set containing a construction feature vector and an environmental parameter vector; calculating a dynamic weight coefficient through a multi-objective optimization model based on the construction feature vector and the environment parameter vector in combination with the construction progress and the environment sensitivity, and outputting a weight matrix; the intelligent contract automatically triggers an evaluation process, generates a dynamic evaluation report containing an overproof event identifier, a compliance repair suggestion and a digital signature, and links an AR visualization system to be superposed to a BIM model to generate a three-dimensional thermodynamic diagram; and in combination with anomaly detection and a time sequence prediction model, identifying potential risks, generating a dynamic risk early warning map, and finally outputting a predictive evaluation report. According to the invention, the accuracy and real-time performance of environment monitoring evaluation can be improved.

A computerized platform enables secure, policy-compliant creation, governance, and monetization of digital artifacts produced by Al-driven “persona” agents in regulated domains (e.g., healthcare, finance). For each agent session, a federated compliance-token generator issues a cryptographically signed token embedding the full delegation chain, credential lineage, real-time policy snapshot, monetization rules, expiration and revocation data. As artifacts or workflows cross organizational or jurisdictional boundaries, a token inheritance module can subdivide, transfer, renew, or revoke the token while appending each event to an immutable, cryptographically linked audit trail. Every agent output is encapsulated as a digitally signed artifact that is indelibly linked to its originating compliance token and enriched with provenance, consent, and service metadata. A permissioned blockchain (or sharded distributed ledger) functions as an asset registry that immutably stores artifacts, tokens, and chronological records of creation, access, transfer, consent change, and policy updates. A smart-contract engine automates revenue allocation and settlement, ensuring continuous traceability, privacy protection, and financial compliance across institutional boundaries.

The invention discloses a remote monitoring cooperation system based on intelligent network connection, and relates to the technical field of cooperation control, and the system comprises a protocol analysis and normalization module which analyzes an original protocol message uploaded by a heterogeneous terminal, and generates standard event metadata; the arrangement scheduling module injects an execution token into a linkage execution sequence generated based on the standard event metadata and the strategy library, issues an action instruction, and triggers a remedial sub-process along a rollback edge when feedback is abnormal; the parameter intelligent setting module is used for generating an operation portrait based on the execution track log and obtaining a strategy parameter set based on the operation portrait; the intelligent cooperative processing module executes digital signature verification, certificate rolling rotation, deterministic transmission control and video adaptive adjustment according to the strategy parameter set; according to the invention, through organic combination of strategy analysis, arrangement scheduling, parameter intelligent setting and intelligent cooperative processing modules, automatic response and efficient control during coupling of multiple types of events in an intelligent network connection remote monitoring scene are realized.

The invention provides a multi-party collaborative anti-quantum signature method and system based on homomorphic Hash, and relates to the technical field of digital signatures, the system comprises a plurality of participants and a verification party, and the method is specifically as follows: each participant generates a pair of public and private keys, the public key is composed of a total public key, a total signature matrix and a total Hash matrix of all participants; based on the public and private keys, all participants perform multi-party signature on the target message through a homomorphic hash function, and a generated signature is composed of total hash challenge values of all participants, total response vectors of all participants and commitment value high-order difference values of all participants; according to the signature, the verifier recovers the high order of the total commitment value, further calculates the total hash challenge value, and verifies the validity of the signature through comparison of the total hash challenge value; according to the method, multi-user collaborative signature is realized, and the security of resisting malicious opponents under a quantum computer is obtained.

The invention discloses a multi-communication group fusion holding method and system for an intelligent door lock, and the method comprises the steps: building an independent multicast tree taking a feature vector as an identifier according to a communication group request initiated by each main control door lock; generating a multicast message containing a target communication group feature vector and a digital signature according to a merging request sent by the first master control door lock; according to feature vectors exchanged by the master control door locks of the two parties through a secure channel, a target master control door lock initiates feature interception registration, and negotiates and establishes a boundary feature tag rewriting rule; and according to the established forwarding path and the rewriting rule, the audio and video streams of the communication groups of the two parties are subjected to feature tag rewriting through the network boundary router, and then bidirectional intercommunication is realized. By utilizing the embodiment of the invention, the dynamic security isolation and seamless fusion of multiple communication groups can be realized, the network load and transmission delay are reduced, meanwhile, the terminal door lock can realize audio and video intercommunication without sensing the network address of the opposite end or changing the configuration, and the expansibility, the security and the user experience of the system are improved.

The invention relates to a mineral reserve dynamic monitoring method and system based on satellite remote sensing and a block chain. The method comprises the following steps: acquiring original remote sensing data and metadata of a mining area, executing hash operation on the data by utilizing a satellite-borne trusted execution environment to generate integrity proof, and performing digital signature to construct a trusted data packet; transmitting the data packet to a ground station to verify the validity of the signature, extracting verified data, and submitting the verified data to a block chain for evidence storage; based on the on-chain evidence storage data, using a deep learning model to extract earth surface features and calculating reserves changes; and finally, a reserve change result is returned to the block chain, and dynamic supervision and early warning are realized through an intelligent contract, so that a technical system from data source credible guarantee, transmission process tampering prevention, reserve intelligent calculation to supervision automatic execution is constructed. The problems that in traditional mineral product monitoring, the authenticity of a data source is lack, the processing process is not traceable, and supervision response is lagged are solved, and the reliability, auditing performance and supervision timeliness of a mineral product reserve dynamic monitoring result are improved.

The invention discloses a door lock communication group decomposition method and system, and the method comprises the steps: encrypting and issuing a sub-feature vector to a local storage of a corresponding member door lock through a secure channel according to the sub-feature vector generated by a main control door lock and a binding relation between the sub-feature vector and the member door lock; generating a multicast message containing a target subgroup feature vector and a digital signature according to a splitting request sent by a main control door lock; according to the result of querying the local ARP table and the subgroup registry by the multicast router, determining the subgroup to which the door lock connected with each interface belongs, and registering the corresponding sub-feature vector for the corresponding interface in the multicast forwarding table; and according to a detection message sent by each sub-group master control door lock and a confirmation message of a member door lock, the multicast router identifies and removes sub-feature vector registration of an interface which is not associated with an effective door lock, and communication group decomposition is completed. By utilizing the embodiment of the invention, safe, reliable and interface-level refined door lock group decomposition can be realized, and the splitting efficiency and the communication safety are improved.

The present embodiment discloses a novel process and system for storing versioned data on the Bitcoin blockchain network. This process involves generating derived public keys linked to specific versions and data parts using a key tweaking method, and storing each data part on the blockchain using its associated derived public key. Information about versions and parts are stored in root transactions. An API is provided for managing the stored data, with options for encryption, checksums, data anchoring, timestamping, segmentation, and digital signatures. AIDIOS, a data protocol designed for direct storage and retrieval on the Bitcoin blockchain, is also included. This system allows for significant amounts of data to be stored directly on the blockchain.

The invention relates to the technical field of network security, and particularly discloses an edge device network threat detection method and system based on an electric power large model, and the method comprises the steps: capturing a network message sequence in real time, extracting a time sequence randomness feature and a semantic deviation feature from a time dimension and a protocol dimension, and carrying out the fusion to form a comprehensive threat feature vector; performing multi-dimensional feature analysis and time sequence modeling by adopting a lightweight electric power large model to realize millisecond-level threat assessment; establishing a multi-level response mechanism, dynamically triggering a differential protection strategy according to the threat level, and ensuring the reliability and consistency of response actions through digital signature and collaborative verification; according to the method, the complex network attack in the power edge equipment can be effectively identified, the threat detection accuracy and the system defense capability are improved, and the strict requirements of a power system on real-time performance and reliability are met.

A computer-implemented system for multidimensional generative value assessment and applicant selection, consisting of: a data collection unit configured to electronically receive applicant data consisting of structured academic records, work experience records, digital documentation, and unstructured narrative responses generated from generative self-assessment instruments and contextual interviews; a feature extraction unit coupled to the data acquisition unit, configured to apply computer-assisted text processing, semantic analysis, and token-level attribute identification to transform narrative responses and structured data into multidimensional feature vectors that represent generative indicators of innovation, mentoring, collaborative performance, resilience, social contribution, ethical consistency, and predicted institutional impact; a weighting calculation unit configured to assign weight values ​​to the extracted feature vectors based on a digital generative profile definition matrix that includes dimensions, sub-criteria, indicators, documentation requirements and importance coefficients, with the weighting being distributed across the generative dimensions defined in the digital matrix and configurable according to the institutional context; a quantitative rating unit configured to calculate a generative rating score by aggregating weighted feature vectors derived from self-assessment inputs, interview-based ratings, document analyses, and authenticity predictions, with the aggregation including normalization, nonlinearity correction, conflict handling, and artifact frequency balancing to obtain a consolidated score; a proof verification unit configured to electronically validate referenced digital evidence by performing content extraction, metadata verification, pattern matching, and cross-document correlation to determine authenticity, credibility, and contextual relevance with respect to the calculated feature vectors; a classification determination unit configured to assign a classification level to an applicant by comparing the generative assessment score with a set of system-defined calculation thresholds, including at least a lower threshold, a middle threshold and an upper threshold, the classification levels representing different generative maturity states and determining subsequent eligibility for selection; a decision generation unit configured to produce a digital output data set that includes classification level, feature aggregation summaries, evidence validation results, and recommended organizational actions, wherein the decision generation unit encodes the data set in a digitally signed, tamper-proof format and stores it on a non-volatile storage medium; and A system control unit acts as an operational interface to all other units and is configured to orchestrate data flow, scheduling, process state transitions, and event logging to ensure verifiable traceability, consistency, and auditability of the evaluation and selection processes.

The invention relates to the technical field of cross-border logistics, and discloses a cross-border e-commerce commodity traceability method and system based on a block chain, and the method comprises the following steps: generating a unique traceability code for each cross-border e-commerce commodity, extracting an original information field of the cross-border e-commerce commodity, and calculating an anti-counterfeiting hash value; performing structured packaging on the original information field and the anti-counterfeiting hash value according to a preset template, confirming a transaction through a consensus mechanism, writing the transaction into a block chain, and generating a block hash value; operation information of all logistics nodes is collected, abnormity is recognized through an abnormity detection algorithm, and data fingerprints obtained after abnormity recognition are encrypted and stored; the encrypted and signed operation information is submitted to a block chain network, and a block chain node verifies the validity of a digital signature through a public key of a producer and verifies the legality through a consensus mechanism; and proving an aggregation verification result by using zero knowledge. According to the invention, a complete traceability path is displayed, and full-chain transparent management from production to consumption is realized.

The invention discloses an equipment identity authentication and data encryption method and related equipment thereof, and the comprehensive effects of identity credibility, key security superposition and channel encryption capability enhancement are realized by introducing a mixed key system and a double digital signature mechanism into an equipment identity authentication and data encryption process. Meanwhile, a national cryptographic algorithm and a post-quantum algorithm are adopted, and the two cryptographic systems cooperate in parallel in an authentication and encryption link, so that the whole system has a robust anti-attack ability in both a traditional computing environment and a potential quantum computing environment, the accuracy of identity authentication is ensured by a dual signature mechanism, and the counterfeiting difficulty and tampering detection ability are remarkably improved. According to the method, the bidirectional verification chain is constructed in the authentication process, the safety is guaranteed by using the mixed key in the session stage, the safety robustness and the expandability of the system are improved through multi-layer protection, and the whole-process protection of the identity, the key and the data is realized, so that the safety robustness and the expandability of the system are integrally improved.

The invention relates to the technical field of road traffic safety and intelligent networking, in particular to a networking communication system for road traffic safety facilities. According to the system, a local traffic digital twinborn model is constructed by edge computing nodes and maintained in a federated synchronization mode; traffic data generated by an edge computing node is packaged in a data container with an embedded hash chain and a digital signature encryption traceability log, so that the integrity, primitiveness and traceability of the data are ensured; the vehicle-mounted terminal submits zero-knowledge proof as a service voucher, and the edge computing node verifies and authorizes the service on the premise of not obtaining the original sensitive data. According to the invention, efficient traffic state synchronization is realized by constructing the federated digital twinborn model, the credibility and safety of data exchange are guaranteed by using the data container, the terminal privacy is protected by means of the zero-knowledge proof technology, and the communication efficiency, the data safety and the privacy protection level of the vehicle-road cooperation system are comprehensively improved.

The invention relates to an embedded safety management method based on digital RMB industrial control equipment, and belongs to the technical field of industrial control system safety. The method comprises the following steps: during first deployment, carrying out information binding on an asymmetric key pair of the industrial control equipment and an equipment identity identifier to generate an equipment digital certificate; the digital signature is verified step by step from a private key of the asymmetric key pair during power-on starting through a safe starting process; when communication is established, performing digital signature on a communication key by calling a signature function of the hardware security module based on a challenge-response mechanism; when a digital RMB transaction is carried out, the trusted execution environment and the digital RMB hardware wallet module carry out secure interaction, and a transaction instruction is analyzed; during the operation period of the equipment, key data streams are continuously collected and analyzed by deploying an exception monitoring module. Reading, querying and related business transactions of the digital RMB on the industrial control equipment are achieved, and it is ensured that the identity is not forged and the instruction is not tampered.

The invention discloses a data security transmission method based on an ML-KEM algorithm and a PUF, and the method comprises the steps: in a registration stage, mobile equipment generates an anti-quantum key through employing a PUF technology, and a CA issues an anti-quantum digital certificate based on a Falcon algorithm and a cryptographic accumulator; in an identity authentication stage, a mobile device and an edge gateway complete bidirectional identity authentication by exchanging identity labels, anti-quantum certificates and authentication key parameters in combination with a Falcon algorithm and PUF challenge-response, and negotiate to generate a shared key by using an ML-KEM algorithm, thereby effectively defending threats such as man-in-the-middle attack, replay attack and identity counterfeiting; in a data transmission stage, two communication parties realize data encryption transmission by adopting a symmetric encryption algorithm, and data integrity and source credibility are guaranteed in combination with a Falcon digital signature; the whole scheme has the advantages of quantum security resistance, efficient authentication, dynamic key updating, lightweight encryption and the like.

The invention provides a safe communication method and system for a V2G charging pile and an energy storage system and a storage medium. The system comprises an energy management system EMS, a charging pile EVSE, a vehicle battery management system BMS and an energy storage battery management system BMS. A session key is established through certificate bidirectional authentication and ECDH negotiation, encryption and anti-replay are realized based on AES / SM4-GCM and additional authentication data, and digital signature verification and REST / TLS transmission are performed on a cross-domain instruction; and when the cloud is unreachable, the EVSE locally executes cooperative control and virtual droop voltage stabilization, or the EMS adopts model prediction control to issue an optimal charging and discharging track. According to the protocol, the confidentiality, integrity and availability of V2G communication and control and the stability of the micro-grid are improved.

Systems and methods involving various registration and authentication workflows are disclosed herein. A user may be authenticated without the use of static usernames or passwords. In some embodiments, an authentication identifier may be generated that is associated with an authentication request for a user to access a protected resource (e.g., a web app). An authentication code may be generated based on the authentication identifier. The authentication code may be sent to a computing device to be provided to the user, who may provide the authentication code to an application on their mobile device. The mobile device may send a payload containing the authentication identifier, credentials saved on the user device from a previous registration step, and a digital signature. The digital signature may be authenticated using contents of the payload before validating the authentication identifier.

The invention discloses a tamper-resistant end-to-end service data storage method and system, and relates to the technical field of service data storage methods, and the method comprises the steps: initializing a hardware security module and a monotone increasing clock in terminal equipment, building a unique identity identifier of the equipment, and preparing a log environment for recording service data; the method comprises the following steps: collecting current business data and associated meta-information thereof, and constructing input content of current data processing in combination with an equipment identity, a clock value, a data structure template and an abstract value generated by previous business data; hash operation is carried out on the input content to generate an abstract of the business data, the abstract is signed by using a hardware security module to form an equipment side digital signature, and the abstract, the signature and meta-information are written into a log only increasing but not changing and an offline queue; and after the terminal recovers the network connection, generating a unique idempotent key based on the abstract of the service data or the combination of the equipment identity and the clock, and submitting an evidence storage request containing the abstract and the signature to the server.

The present application relates to the technical field of computers, and provides a data sharing method, a device, and a system. Shared data and a data protocol set by a data owner are bound for encryption protection, ciphertext structured data and retrieval metadata are integrally digitally signed, an encapsulation signature and a signature public key certificate are bound on the ciphertext structured data and the retrieval metadata, so that the data authenticity can be verified during circulation and sharing of encapsulated data, and confidentiality and integrity protection of the shared data and the data protocol during circulation and sharing are realized. In addition, the encapsulated data is generated by a trusted device trusted by the data owner, a shared agent is trusted by a plurality of participants participating in data sharing, and data is transmitted between the trusted device and the shared agent through a secure transmission channel, so that the security, confidentiality and integrity protection of the shared data and the data protocol during exporting are realized.

The invention relates to a safe dynamic loading method for a peripheral adaptive plug-in in an embedded low-resource environment, and belongs to the technical field of plug-in loading. The method comprises the following steps: executing digital signature identity authentication and lightweight increment integrity verification; analyzing the metadata, and distributing a physical isolation memory area by utilizing a memory management unit; initializing and analyzing the peripheral dependency list in the isolation memory, dynamically generating an encryption capability token bound with an isolation domain identifier, and embedding a monitoring hook to verify the authority of the token; performing lightweight behavior auditing during operation, triggering a response mechanism based on a result, and checking a certificate state by using a pre-downloaded certificate revocation list incremental data packet when the system is idle; verifying the new-version plug-in independently, pausing the old-version capture state snapshot, switching the peripheral control right to the new-version plug-in through the atomic operation sequence, recovering the token and safely erasing the memory. The whole mechanism ensures high-security isolation and dynamic protection. The efficient and safe loading and operation of the peripheral adaptive plug-in under the embedded low-resource environment are realized.

The invention provides a ship-based unified storage and management design data method, which comprises the following steps that: an operation end generates and sends an editing request with a node identifier, an editing type, a timestamp and a digital signature, and a WEB front end receives and verifies the legality of the request through an encryption channel; the storage service generates an intention lock based on the permission table and version number matching, and concurrent access control is achieved. Then, the WEB front end carries out content definition partitioning (CDC) and Hash fingerprint calculation on a design file stream, the storage service realizes partitioning duplicate removal and incremental storage according to a fingerprint matching result, and a Merkle tree is utilized to construct a file version integrity Hash root; on this basis, the system analyzes model differences, constructs a semantic difference chart, and calls a rule engine to perform automatic pre-check. According to the method, efficient storage, collaborative editing, security and credibility and hierarchical scheduling management of ship design data are realized, and the method has the technical advantages of high data consistency, high resource utilization rate, traceability auditing and the like.

The invention provides an automatic vehicle damage assessment method and system based on video segmentation in vehicle insurance claim settlement. The method comprises the following steps: constructing a chain hash and a digital signature by taking an accident video as input, and detecting secondary compression and frame pulling; a shared trunk and double-branch network is adopted to complete part damage segmentation, and optical flow and re-identification are combined to keep cross-frame consistency and refine a mask; under the calibration of a license plate, a hub and a marked line, a monocular depth and part curvature prior estimation recess depth and normal disturbance are fused; calculating quantitative indexes such as scratch length, scratch width, paint removal area, crack span and the like according to component topology, and performing grade evaluation; the evaluation result is mapped to a part BOM, man-hour and price library, replacement, repair and spraying schemes and cost details are automatically generated, a structured report containing key frame superposition and check codes is output, and video-level stable quantification, evidence traceability and automatic loss assessment are achieved.

The invention relates to the technical field of computers, and discloses an agricultural and sideline food whole-process information tracing method and system, and the method comprises the steps: deploying sensing and collection equipment in all links of production, logistics, storage and sales, and generating a standardized event record with a time-space stamp and a digital signature; executing data cleaning, event modeling and map construction through a centralized platform to form a multi-dimensional tracing network with commodities as nodes and operation events as edges; and in response to user query, dynamically generating a visual tracing path according to time, geography, responsibility subject or environmental parameter dimensions. The system comprises a production end acquisition subsystem, a logistics end acquisition subsystem, a storage end acquisition subsystem, a sales end acquisition subsystem and a central data fusion platform, and a permission control and credibility scoring mechanism is arranged in the platform. According to the method, through event-driven atlas and multi-source data fusion, full-chain information reversible restoration, multi-condition filtering query and compliance automatic judgment are realized, and the authenticity, integrity and decision support capability of tracing are remarkably improved.

Aspects of a trustworthiness check of a video data stream are described. According to a first aspect, a unique identifier which identifies a media asset to which a portion of a video data stream to be checked on trustworthiness belongs, is included into the trustworthiness check. According to a second aspect, a certificate of a content provider for performing the trustworthiness check is retrieved from a track of editors stored at an external resource. A third aspect provides a method for identifying a portion of a video data stream to be checked on trustworthiness using a digital signature. According to a fourth aspect, a digital signature for checking a portion of a video data stream is retrieved from an external resource.

The invention discloses a block chain cross-domain service method and system based on sharing verification and a smart contract, and the method comprises the steps: building a cross-domain sharing channel between a first business domain of a first block chain and a second business domain of a second block chain through a main node on a relay chain; performing hash operation on the original data to obtain a data fingerprint, packaging the data fingerprint, the data metadata and the digital signature of the data holding node into a first message, and submitting the first message to a relay chain through a sharing channel; after receiving the first message, performing consensus verification on the data fingerprint based on a threshold signature mechanism, and writing a verification result into a shared state table; querying the verification state of the data fingerprint from the sharing state table through the data use node in the second service domain, and requesting to download the encrypted data from the intelligent contract of the relay chain; executing permission judgment, and triggering a key distribution contract to transmit a decryption key to a data use node; and downloading the encrypted data, and writing the cross-domain data sharing transaction record into a block chain account book of the second business domain.

A computerized platform enables secure, policy-compliant creation, governance, and monetization of digital artifacts produced by AI-driven “persona” agents in regulated domains (e.g., healthcare, finance). For each agent session, a federated compliance-token generator issues a cryptographically signed token embedding the full delegation chain, credential lineage, real-time policy snapshot, monetization rules, expiration and revocation data. As artifacts or workflows cross organizational or jurisdictional boundaries, a token inheritance module can subdivide, transfer, renew, or revoke the token while appending each event to an immutable, cryptographically linked audit trail. Every agent output is encapsulated as a digitally signed artifact that is indelibly linked to its originating compliance token and enriched with provenance, consent, and service metadata. A permissioned blockchain (or sharded distributed ledger) functions as an asset registry that immutably stores artifacts, tokens, and chronological records of creation, access, transfer, consent change, and policy updates. A smart-contract monetization engine allocates revenue or royalties based on artifact usage and institutional agreements, writing each billing event atomically to the ledger. Collectively, the system delivers continuous end-to-end traceability, privacy preservation, and automated financial settlement across diverse institutional boundaries.