3188 results about "Digital signature" patented technology

The invention provides a block chain-based distributed device identity authentication and access control method and system, and relates to the technical field of block chains, and the method comprises the steps: generating a target device fingerprint by a to-be-accessed device based on a physical cloning-free function of the to-be-accessed device, binding the target device fingerprint with a device public key to generate device identity information, and sending the device identity information to the to-be-accessed device; carrying out block chain evidence storage on the equipment identity information through an identity authentication smart contract; the authentication node queries corresponding equipment identity information based on an equipment fingerprint sent by the to-be-accessed equipment, and verifies the digital signature in the access authentication request by using the equipment public key; the access device which passes the authentication and obtains the encrypted session key obtains an access control strategy pre-configured by an administrator through an access control smart contract; and when needing to access network resources, the access equipment accesses the network resources based on the access control strategy.

The invention discloses a cross-domain computing task processing method, a program product, equipment and a medium, and relates to the technical field of cloud computing. The method comprises the following steps: determining a computing node for executing a cross-domain computing task in a cross-domain collaborative scene, and generating an identity certificate bound with the computing node based on a hardware credible state of the node; collecting security policies of a plurality of management domains for conflict detection and decision, and generating a conflict-free session policy; scheduling the cross-domain computing task to a target computing node meeting a preset credible requirement, and issuing a revocable dynamic session token; and recording the operation information of the cross-domain calculation task in the whole life cycle as an audit event, and generating a chained audit log which is linked by the hash value and is digitally signed through a preset verifiable audit interface. By means of the technical scheme, it can be ensured that the whole life cycle of any computing task meets the closed-loop safety requirements of identity credibility, permission controllability, execution propriability and behavior traceability in the complex distributed computing environment.

The invention discloses a power system source network interaction data security encryption verification method, system, device and medium, and belongs to the technical field of power system communication encryption, and the method comprises the following steps: a source side device and a network side device complete identity authentication through a bidirectional digital certificate verification mechanism; and an identity binding label is generated in combination with the device identifier, the timestamp and the position information. And after the authentication is passed, the two parties perform key negotiation based on an elliptic curve algorithm, and generate a temporary encryption key in combination with an authentication result. A source side device carries out structural packaging on original interaction data, adds a random number, a timestamp and a hash abstract, then encrypts the original interaction data in an AES-GCM mode, and carries out signature binding on key fields through digital signatures to form a complete data packet. And a receiving end performs compliance judgment on the timestamp and the random number in the data packet, and after the timestamp and the random number are confirmed to be in an effective time window and are not replayed, signature verification, decryption processing and Hash consistency verification are sequentially completed, so that closed-loop processing of a data flow is ensured.

The present disclosure provides a system for secure compute using artificial intelligence agents. The system includes a hardware execution environment with one or more computerized processors and electronic storage media. The processors are configured to establish a secure agent comprising a secure state management module, an encrypted state transition management module, a threshold cryptography implementation, and a digital signature verification module. The system also includes a plurality of atomic agents, each configured to perform a composite task and comprising a task-specific execution module, a state management interface, and a communication module. An orchestrator agent coordinates secure execution of the atomic agents and includes a task distribution module, a result aggregation module, a workflow management module, and a security policy enforcement module. The orchestrator agent integrates encrypted outputs from the atomic agents to perform composite tasks while maintaining data integrity and security through the secure state management module.

A method for quantum-resistant digitally signing data, a method for verification of a quantum resistant digital signature for authentication of a source of data by verifying a private key, and a quantum resistant digital signature system are provided. The quantum resistant digital signature system includes a digital signature system and a layer of quantum resistant protection. The digital signature system includes a public key and a private key, wherein the public key is associated with the private key. The digital signature system also includes a digital signature generated in response to data and the private key. The layer of quantum resistant protection is applied to the digital signature system and includes a signing-party-provided quantum-secure proof of knowledge of a pre-image of the private key.

The invention discloses a financial data privacy protection system based on block chain security multi-party computing, and belongs to the technical field of data protection, and the system specifically comprises the steps that a data preprocessing module segments original financial data, and adds a unique watermark identifier; the distributed account book stores the Hash abstract and watermark mapping relation of the encrypted logic data fragment, and the digital signature and the timestamp are fused to ensure reliability; the computing node cluster receives data through a special interface, dynamically builds a computing group according to a service rule and outputs an encrypted computing result; bidirectional authentication is carried out on the zero-knowledge proof verifier and the computing node cluster to verify the data holding right; the encryption proxy gateway processes an output result of the computing node cluster to complete format conversion and ciphertext superposition; the cross-link routing module constructs a virtual coverage layer, cross-link transmission of encryption results is achieved through protocol conversion and three-way handshake verification, and a heterogeneous chain protocol converter and a verification assembly guarantee transmission safety; the financial data privacy security is comprehensively guaranteed, and the data processing efficiency and reliability are improved.

A quantum safe blockchain system can operate with quantum safe blockchain nodes (QSBN) and validators. A QSBN can generate a pending register certificate transaction comprising a public key, a fingerprint for a certificate, a URL for the certificate, a first registration number for a parent certificate of the certificate, and a digital signature. The QSBN can transmit the pending register certificate transaction to the quantum safe blockchain system. A validator can receive the pending transaction, validate the digital signature using the public key and include a confirmed register certificate transaction in a block. The confirmed transaction can include a second registration number for the certificate. The QSBN can receive the confirmed transaction and store in a database the fingerprint, the first registration number, and the second registration number. The QSBN can generate a pending certificate revocation transaction for the certificate, and transmit the pending transaction to the blockchain system.

The invention discloses a bidirectional authentication secure mobile communication method and system based on a public key digital fingerprint, and belongs to the technical field of communication security. The method specifically comprises the following steps: S1, digital certificate application and issuing: a mobile terminal and a service server respectively use an encryption algorithm to generate an asymmetric key pair which comprises a public key and a private key, an entity submits a CSR file which comprises a public key, entity identity information and an extension field to a CA, and the CA strictly audits the entity identity and issues a digital certificate; and performing digital signature on the public key and the entity information by using a CA private key after the auditing is passed. Two-way identity authentication is achieved, communication safety is improved, a traditional scheme only supports one-way authentication of a client to a server and is prone to phishing attack and identity false use, digital certificates are exchanged before communication between a mobile terminal and a service server, the legality of the certificates is verified through a public key of a CA root certificate, and the authenticity of the identities of the two parties is ensured. A bidirectional authentication mechanism effectively prevents man-in-the-middle attack and identity counterfeiting problems, and the security risk is greatly reduced.

The invention discloses an insurance claim settlement-oriented multi-modal image video evidence analysis method and system. The method comprises the following steps of: acquiring video / image and multi-source data such as metadata, audio, IMU (Inertial Measurement Unit), GPS (Global Positioning System), OBD (On-Board Diagnostic) and the like; calculating content Hash of the video and the audio according to frames, connecting the content Hash with time information in series to form chained Hash, and adding a verification digital signature and a credible timestamp; realizing cross-modal time sequence alignment based on self-adaptive time anchor-attitude coupling; tampering detection is carried out in combination with PRNU fingerprints, noise field consistency, dual compression, copy-movement and the like; multi-view geometry and monocular depth are fused, IMU scale constraint and micro rendering are introduced, three-dimensional reconstruction and re-projection optimization are completed, and collision dynamics verification is carried out; and constructing an event cause and effect graph, judging responsibility in combination with traffic rules, outputting a confidence coefficient vector and a structured report, and generating a verifiable evidence packet. The scheme has the advantages of high efficiency and traceability in the aspects of space-time restoration and interpretable responsibility judgment.

The invention provides a block chain-based clinical test data integrity system, and relates to the technical field of data processing, and the system comprises the following components: a multi-source heterogeneous data acquisition and preprocessing module, a multi-level encryption and under-chain data storage module, an alliance block chain network, and an alliance block chain network maintenance and verification shared distributed account book. The distributed account book only stores all digitally signed clinical test data fingerprints, metadata and operation logs, does not store original data, and is linked with the intelligent contract automatic management module, so that the clinical test data cannot be tampered in the whole life cycle from the source to archiving. Hash anchoring, digital signature and decentralized verification mechanisms of the block chain technically eradicate the possibility of unauthorized tampering of data, and ensure scientificity and reliability of clinical test results.

The invention relates to the technical field of data processing and privacy protection, in particular to a data desensitization and integrity verification method and system based on a differential privacy algorithm, and aims to realize collaborative optimization of data privacy protection and integrity guarantee. Determining a total privacy budget by calculating global sensitivity, a data leakage risk coefficient and independent and joint data privacy information amount, dynamically allocating the privacy budget for a single-task or multi-task scene, and injecting noise based on an allocation result to realize differential privacy desensitization; meanwhile, a verification voucher is generated by using a hash function, a digital signature and an alliance chain, and the data integrity is ensured through signature verification, data consistency verification and block chain verification. The system comprises a data application processing module, a global sensitivity calculation module, a desensitization core processing module, a verification voucher generation module and an integrity verification module, is suitable for government affairs, enterprises and other scenes with high requirements for data privacy and integrity, and effectively improves the safety and reliability of data processing.

A method for packaging digital evidence for long term validation comprises forming a package of a digital document (10), an electronic signature (12) for the document (10), together with evidence (16) of the authority of the signature in the document and a time stamp (20) indicating when the document was digitally signed. All of the pieces form parts of the packaged evidence.

The invention provides an Internet of Things data processing method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps that an Internet of Things device carries out the digital signature of an authentication request through employing a pre-stored private key, and generates a signed authentication request; the smart contract in the block chain network receives the signed authentication request, and the smart contract generates an authentication token including an authentication result, a validity period and an authorization level based on the historical authentication record, the credit score, the current timestamp and the challenge value; the Internet of Things equipment receives the encrypted authentication token and the intelligent contract address; the Internet of Things equipment configures own access authority and function limitation according to the authentication result, the validity period and the authorization level; and the Internet of Things equipment takes the intelligent contract address as an identity credential within the period of validity, and is used for subsequent secure communication and data exchange with other Internet of Things equipment or application programs.

The invention relates to the technical field of data synchronization, and discloses a distributed account book remote data synchronization method and system, and the method comprises the steps: carrying out the Hash mapping calculation of all nodes of a distributed account book system, and obtaining a distributed storage architecture; performing hierarchical network construction on the nodes, and setting an inter-region remote synchronization link and an intra-region local synchronization link to obtain a double-layer communication architecture; performing parallel compression coding, digital signature generation, transmission scheduling arrangement and consistency verification processing on the data blocks to obtain a node synchronous data set; calculating a correlation coefficient of node processing delay and network transmission delay to obtain a synchronous delay analysis model; based on a data block corresponding to the synchronous delay analysis model, adding a time sequence identifier and calculating an integrity check code, and generating a synchronous reliability guarantee mechanism; according to the method, the consistency and the traceability of the distributed account book data are ensured.

A method, system, computer program product of processing early payment financing request, enabling dynamic discounting (DD) or reverse factoring (RF) financing, via SmartHub Finance Processor (SHFP), including receiving request for Early Payment Financing Request (EPFR) from supplier; accessing asset SmartPass Non-FungibleToken (NFT) Repository; receiving risk management model; notarizing NFT ProxyPackage (NFTPP) to local NFTBlockchain Repository (NFTBCR); notarizing / collateralizing NFTPP to restricted access public NFTBCR; securely binding DynamicDiscounting (DD) NFT Cryptographic Token embodying DD Rights (DDRightsNFT), establishing Secure Unbreakable DigitalLinkage; notify EarlyPaymentNetwork (EPN), may notify FintechFinanceMarket; ValueChainFinanceExchange; DeFiMarket; or buyer; verify NFT to local NFTBCR; or respond to EPFR. Borrower requests funds presenting SmartPassDigitalCollateral, supplychainDigitalTrackTraceArtifact; Financer / Lender verify collateral process, provide bids for acceptance with a DigitalFundsTransferAgreement; register financers / lenders, provide secured access, verify DigitalCollateralBlockchainTransactions, secure collateral, ensure authenticity by Digital Signatures / Blockchain, process loan agreements, transfer electronic / cryptocurrency funds financer-to-borrower, assess fees / interest, process payments, Forward / ReverseFactoring (RF) or DD loan terms, DDRightsNFT, participate in DD making independent early payment arrangements with supplier not involving buyer.

The invention relates to the technical field of data processing, in particular to a data fusion intelligent equipment linkage management and control system based on a large model, and the system comprises a data collection module which outputs standardized data carrying privacy grading identifiers; the data processing module outputs an optimization algorithm identifier and a collaborative strategy identifier which are synchronously bound; the privacy algorithm fusion scheduling module generates atomization calculation graph data and strategy audit logs fusing privacy operation; the multiple optimization resource module executes calculation graph data and drives a parallel simulation environment rehearsal resource scheme, and the double-closed-loop feedback module is activated when an arbiter continuously detects that deviation exceeds the standard for three times; the safety instruction generation module fuses the output result and the audit log to generate a digital signature equipment control instruction; and the double-closed-loop feedback module updates knowledge base weight parameters through a data feedback loop, and controls the feedback loop to adjust a resource allocation threshold in a grading manner according to simulation confidence, so that dynamic balance between resource efficiency and privacy intensity is realized.

The invention discloses an electronic seal management and control method and system, and belongs to the technical field of electronic seal management, and the method comprises the steps: carrying out the identity verification of a seal use request; dividing a private key of the electronic seal into a plurality of key shares; a digital signature of the electronic seal is generated through cooperative calculation of a threshold signature mechanism; managing electronic seal key access in a trusted execution environment, and executing global signature calculation in a hardware encryption module; adopting a zero-knowledge proof algorithm to generate verifiable calculation proof data in the digital signature calculation process; and establishing a quantum communication link and generating a transmission key, and managing key transmission. According to the invention, the distributed storage private key is calculated through multi-party security, so that the risk of single-point leakage is eliminated; zero-knowledge proof is adopted to ensure that signature calculation is verifiable, and signature credibility is improved; secret key access is dynamically managed and controlled based on the trusted execution environment, and safety and flexibility are enhanced; quantum key distribution is utilized to ensure key transmission safety, and quantum attacks are resisted.

The invention discloses a post-quantum TLCP protocol design method, device, equipment and medium, and relates to the field of information security, the post-quantum TLCP protocol design method is applied to a client, and the post-quantum TLCP protocol design method comprises the following steps: constructing client handshake information based on an information security technology transport layer cryptographic protocol, and sending the client handshake information to a server to receive returned server handshake information and establish connection; receiving a server-side digital certificate constructed based on the cryptographic algorithm encrypted public key information and the post-quantum key encapsulation algorithm public key information of the server-side and server-side key exchange information constructed based on the post-quantum key encapsulation algorithm and the cryptographic algorithm; and performing identity authentication based on the post-quantum digital signature algorithm public key information and the national cryptographic algorithm signature public key information to construct a pre-master key for data transmission. An active public key cryptographic algorithm and functions are reserved in an information security technology transport layer cryptographic protocol, and a post-quantum public key cryptographic algorithm is put into the protocol, so that the quantum security is realized while the active public key cryptographic security is realized.

The invention provides a multi-authentication electronic official certificate verification method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps: receiving an electronic official certificate uploading request, carrying out encryption processing to generate a secret key, carrying out the block encryption of an official certificate file to obtain an electronic ciphertext, carrying out the authentication of a creator identity to obtain an elliptic curve digital signature, and carrying out the verification of the elliptic curve digital signature. Writing in a new block, and calculating a block hash value; the target block is inquired, and if matching succeeds, the first verification information is extracted and verified, and a comprehensive verification result is generated; and carrying out consensus verification, modifying the block outlet time by dynamically adjusting the block difficulty value and verifying, if the block outlet time is true and effective, generating a verification result ciphertext and feeding back the verification result ciphertext to the request main body, and if objection exists, sending an objection application and carrying out objection rechecking, generating an arbitration result and writing the arbitration result into the new block.

The invention discloses a quantum cryptography migration resisting method based on an FIDO2 protocol, electronic equipment and a medium. The method comprises the steps that interaction between an authenticator and a client side achieves key packaging based on a Kyber algorithm; a registration stage and an authentication stage are completed through three-party interaction of the authenticator, the client and the server; in the registration stage, an identity certificate is created on a server for the first time by a user, and a public key is generated and stored by using a Diithium anti-quantum signature algorithm or a Falcon anti-quantum signature algorithm; in the authentication stage, a user logs in a server, and identity authentication is carried out by using the credential created in the registration stage. According to the method, the Kyber anti-quantum encryption algorithm and the Dilliimum / Falcon anti-quantum digital signature algorithm are introduced into the FIDO2 protocol, so that the confidentiality and integrity of communication and the reliability of authentication can be guaranteed continuously in a quantum computing environment, and the anti-quantum security of the FIDO2 protocol is improved remarkably.

Systems and methods for executing multi-party validations for complex communications across multiple computer networks using bifurcated digital signing processes. For example, the system may receive a first request, at a bifurcated digital signing process, to perform a first multi-party validation action, wherein the first request has a first processing characteristic. The system may, in response to receiving the first request, process the first request with a first signing routine of the bifurcated digital signing process. The system may determine, based on the first signing routine, whether the first processing characteristic corresponds to a predetermined processing characteristic. The system may, in response to determining that the first processing characteristic corresponds to the predetermined processing characteristic, process the first request with a second signing routine of the bifurcated digital signing process to perform the first multi-party validation action.

The invention relates to the technical field of environment monitoring, and discloses a completion process data-based environment monitoring parameter comparison evaluation method, which comprises the following steps of: obtaining completion process data and environment monitoring data, and constructing a multi-dimensional data graph, mapping the completion process data and the environmental monitoring data to generate a standardized data set containing a construction feature vector and an environmental parameter vector; calculating a dynamic weight coefficient through a multi-objective optimization model based on the construction feature vector and the environment parameter vector in combination with the construction progress and the environment sensitivity, and outputting a weight matrix; the intelligent contract automatically triggers an evaluation process, generates a dynamic evaluation report containing an overproof event identifier, a compliance repair suggestion and a digital signature, and links an AR visualization system to be superposed to a BIM model to generate a three-dimensional thermodynamic diagram; and in combination with anomaly detection and a time sequence prediction model, identifying potential risks, generating a dynamic risk early warning map, and finally outputting a predictive evaluation report. According to the invention, the accuracy and real-time performance of environment monitoring evaluation can be improved.

The invention discloses a secure transmission method and device for video data of a power transmission line based on SRTP, and relates to the technical field of power transmission line monitoring or other related fields, the method comprises the following steps: obtaining target video data and a target dynamic secret key, the target video data being monitoring video data of a target power transmission line, and the target dynamic secret key being video data of the target power transmission line; the target dynamic key is periodically updated based on the network environment and the data sensitivity, and the target dynamic key at least comprises a receiving end public key; encrypting the target video data by using the receiving end public key to obtain encrypted video data, and generating a message authentication code, a hash check value and a digital signature of the hash check value of the encrypted video data; and performing SRTP packaging on the encrypted video data, the message authentication code, the Hash verification value and the digital signature to obtain an SRTP data packet, and transmitting the SRTP data packet to a receiving end. According to the invention, the technical problem that the real-time performance and the security cannot be considered at the same time in the video data transmission method in the related technology is solved.

A method of authorizing a computer mouse to perform a particular action may include receiving, by a network device, a request associated with a particular action to be performed by a computer mouse. The request may be digitally signed using a private device key of the computer mouse. The method may include validating, by the network device, the digitally signed request using a public device key previously provided by the computer mouse. The method may include generating a response to the request. The response may indicate whether the computer mouse is authorized to perform the particular action associated with the trusted request. The method may include sending the response to a client device associated with the computer mouse.

The invention provides a multi-modal process data trusted storage method and system combined with a block chain, and belongs to the technical field of data storage, and the method comprises the following steps: obtaining multi-modal process data; constructing a metadata minimum set covering the full life cycle of the multi-modal process data; performing under-chain storage on the multi-modal process data and the metadata minimum set, and verifying the multi-modal process data to obtain verification process data; recording the digital signature evidence of the verification process data on a block chain to obtain an on-chain shared signature evidence of the verification process data; based on the on-chain shared signature evidence, establishing a mapping relationship between the hash value of the on-chain shared signature evidence and the under-chain verification process data; and storing the verification process data and the mapping relationship in a distributed process database. According to the method, the block chain and the distributed storage are combined to construct a multi-modal process data trusted storage system with coordination of on-chain and off-chain, so that the trusted storage of the multi-modal process data in the whole life cycle is realized.

A computerized platform enables secure, policy-compliant creation, governance, and monetization of digital artifacts produced by Al-driven “persona” agents in regulated domains (e.g., healthcare, finance). For each agent session, a federated compliance-token generator issues a cryptographically signed token embedding the full delegation chain, credential lineage, real-time policy snapshot, monetization rules, expiration and revocation data. As artifacts or workflows cross organizational or jurisdictional boundaries, a token inheritance module can subdivide, transfer, renew, or revoke the token while appending each event to an immutable, cryptographically linked audit trail. Every agent output is encapsulated as a digitally signed artifact that is indelibly linked to its originating compliance token and enriched with provenance, consent, and service metadata. A permissioned blockchain (or sharded distributed ledger) functions as an asset registry that immutably stores artifacts, tokens, and chronological records of creation, access, transfer, consent change, and policy updates. A smart-contract engine automates revenue allocation and settlement, ensuring continuous traceability, privacy protection, and financial compliance across institutional boundaries.

The invention discloses an intelligent auxiliary system and method for regular inspection of a pressure vessel, and aims to improve the intelligence, efficiency and accuracy of inspection of the pressure vessel. The system comprises a data acquisition module, a data processing module, a risk assessment module, an inspection plan generation module, a report generation module, a remote monitoring module and a historical data management module. Operation parameters of the pressure vessel are collected in real time through the sensor, the data processing module carries out elimination and trend analysis on abnormal data, and the risk assessment module assesses the operation state of the pressure vessel through machine learning and a fuzzy logic algorithm. The system dynamically generates an inspection plan according to an evaluation result and adjusts an inspection period through Bayesian updating, and a generated inspection report has a digital signature to ensure safety. The historical data management module stores and analyzes long-term data and supports trend prediction of equipment health conditions, and the remote monitoring module provides real-time state checking and early warning.

Operations of a digital signature manager may include detecting, in a certificate repository on a first virtual cloud network, set of one or more new certificate authority (CA) certificates; transmitting, to a key management service hosted on a second virtual cloud network, a CA dataset that includes the set of one or more new CA certificates; receiving, from the key management service, a digital signature of the CA dataset generated based at least on a global private key stored on the second virtual cloud network in a private key repository associated with the key management service; and storing the digital signature in the certificate repository in a data structure that associates the digital signature with the CA dataset.

The invention discloses an NB-IOT technology-based firmware remote upgrading method and an electric energy meter. The upgrading method mainly comprises the following steps of S1, an upgrading preparation stage, wherein the upgrading preparation stage comprises server end preparation and electric energy meter end preparation; s2, a data transmission stage: firmware data transmission, a breakpoint resume mechanism and fragment verification are included; s3, a firmware updating stage which comprises data analysis and storage, preparation before updating and firmware writing and starting; s4, upgrading verification and feedback, including function verification and feedback information sending; and S5, security measures including identity authentication, data encryption and digital signature. An NB-IOT module is arranged in the electric energy meter, and data transmission between the electric energy meter and the server is achieved through the NB-IOT communication technology. According to the remote firmware upgrading method based on the NB-IOT technology and the electric energy meter provided by the invention, reliable remote upgrading of the firmware of the intelligent electric energy meter is realized by adopting an NB-IOT communication mode and combining a fragmented data transmission mechanism, a firmware verification mechanism, a breakpoint resume mechanism and an upgrading feedback mechanism.

The invention discloses a blockchain and homomorphic encryption-based power data privacy protection method and system, and belongs to the technical field of power data privacy protection, and the method comprises the steps that a data provider encrypts power data by using Paillier homomorphic encryption, uploads a ciphertext hash value to a blockchain, carries out the digital signature of a ciphertext, divides a key, and carries out the encryption of the key; enabling each data demander to receive the ciphertext, the signature and the key fragment; and the data demander performs cooperative decryption after performing data source and integrity verification to obtain a plaintext. Through distributed storage of a key sharing scheme, the security of the key is remarkably improved, single-point faults are avoided, the fault tolerance of the whole system is improved, and the flexibility of data transaction is optimized; for a mass data transaction process, the encryption and decryption efficiency is improved, the data processing speed and performance are improved, the real-time performance of data transaction is ensured, the resource consumption is reduced, and the user experience is improved.