10 results about "Hardware authentication" patented technology

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention discloses an Android SoftPOS (Point Of Sale) trusted application method and an Android SoftPOS trusted application system. The method comprises the following steps: an application end initiates an authentication request to an application proof server, and obtains verification data and a plurality of random numbers; carrying out equipment and application integrity verification, generating an integrity proof and a hardware authentication certificate, and submitting the integrity proof and the hardware authentication certificate to a server; after the server passes the verification, signing and issuing a specific safety communication certificate of the equipment to the application end; and the application end establishes a secure communication channel with the server according to the certificate. Through multi-stage verification and a random number mechanism, it is ensured that only trusted equipment and applications can complete authentication, end-to-end secure communication is achieved by combining dynamic certificate signing and issuing, the confidentiality and integrity of payment data are remarkably improved, and the security risk is reduced.

A hardware-anchored Liquidity Containment and Capital Reserve Enforcement Engine executes real-time reserve validation, liquidity sufficiency computation, and deterministic settlement gating entirely within trusted execution environments (TEEs) comprising Intel SGX enclaves, AMD SEV-SNP protected VMs, or ARM TrustZone secure worlds, materially altering processor states to isolate all reserve computation. Liquidity Integrity Vectors are computed using the reserve adequacy function h(alpha, beta, gamma) from hardware-attested inputs anchored to TEE-resident hardware mechanisms comprising enclave-sealed monitoring registers, memory encryption engine integrity states, or attestation-based recalibration triggers. A Liquidity Containment Gate enforces a non-bypassable hardware execution barrier requiring all LIV computation, Capital Reserve Monitor validation, and ZKP proof generation to complete within a single attested TEE execution instance before settlement authorization is released. A ZKP Verification Engine generates Groth16 arithmetic-circuit proofs of approximately 192 bytes verifiable in under 10 milliseconds, enabling External Counterparty verification of reserve sufficiency without disclosure of proprietary balance sheet data. A Provenance Ledger stores append-only cryptographic hash chains with each entry bound to a TEE attestation report. A Settlement Attestation Binder cryptographically binds settlement authorizations to specific TEE attestation report identifiers, enabling independent verification of both settlement outcomes and the hardware environments that authorized them.

A system for resolving prediction market outcomes using secure hardware and trust-based scorer selection. The system scores each resolver based on their track record of accuracy, governance participation, and integrity alignment rather than token holdings. Resolution computations execute inside a tamper-resistant hardware enclave that prevents manipulation by platform operators or external attackers. Upon resolution, the system produces a sealed Provenance Token containing six cryptographic fields that bind the decision to its inputs, scoring model, enclave identity, and a non-replayable counter value, enabling anyone to independently verify resolution integrity. Anomalous resolver submissions are detected and quarantined before consensus using dual machine-learning algorithms running inside the enclave. The system generates regulatory compliance reports within the secure hardware and delivers results through authenticated API endpoints. Settlement automatically distributes payouts to holders of winning outcome shares.

The application discloses an Android SoftPOS trusted application method and system. The method comprises the following steps: an application end initiates an authentication request to an application proof server, obtains verification data and a plurality of random numbers; then, device and application integrity verification is performed, integrity proof and hardware authentication certificates are generated, and the generated integrity proof and hardware authentication certificates are submitted to the server; after the server verifies the integrity proof and the hardware authentication certificates, the server issues a device-specific secure communication certificate for the application end; and the application end establishes a secure communication channel with the server by using the certificate. Through multi-stage verification and a random number mechanism, only trusted devices and applications can complete authentication, dynamic certificate issuance is combined, end-to-end secure communication is realized, the confidentiality and integrity of payment data are significantly improved, and security risks are reduced.

The invention discloses a zero terminal system, relates to the technical field of electronic information, thoroughly cuts a central processing unit (CPU) and an operating system of a terminal, and improves the end side security of a desktop cloud system. The system specifically comprises the following modules: a network PHY module used for connecting a network cable and receiving and transmitting a network data packet; and the network TCP / IP module is based on a network TCP / IP protocol stack realized by hardware, is internally provided with a hardware authentication private key ID, and is used for packing and unpacking the TCP / IP protocol of the network data. And the encryption and decryption module is used for encrypting and decrypting the transmission data. And the PS / 2 keyboard and mouse module is used for connecting a PS / 2 keyboard and mouse and analyzing the input of the PS / 2 keyboard and mouse. And the decoding module is used for decoding the received display coding data. And the display module is used for processing display data. And the HDMI PHY / VGA interface module is used for being externally connected with a display. All the modules transmit data by sharing a static random access memory (SRAM).

The invention discloses a monitoring system and method based on hierarchical agent architecture and two-stage hardware confirmation, and belongs to the technical field of Internet of Things and artificial intelligence. The system comprises a bracelet end which is provided with a main key and a touch key and is internally provided with a security chip for generating a digital signature; the mobile phone end deploys a private agent and an encryption sandbox and only responds to the instruction confirmed by the hardware; and the cloud end is used for processing non-sensitive tasks by adopting a Manager / Worker multi-tenant architecture. The method comprises the steps that the bracelet collects a voice instruction, a mobile phone end analyzes an intention, and sensitive operation is issued to the bracelet; the old person selects through the main key and confirms through the touch key, and the security chip generates a signature and returns the signature; after verifying the signature, the mobile phone decrypts the certificate and calls the API to execute operation; and broadcasting and feeding back a result, and performing key operation on a chain for evidence storage. Through cooperation of two-stage hardware confirmation and the layered intelligent agent, hardware right confirmation of sensitive operation and local isolation of privacy data are achieved, full thinking time is given to old people while operation authenticity is guaranteed, and misoperation is avoided.

The application belongs to the technical field of computer security, and relates to a desktop cloud security access control method based on multi-factor authentication, which comprises the following steps: obtaining hardware authentication information submitted by a user; collecting behavior characteristic data when the user operates input; detecting the environment security state of an access terminal; generating an authentication confidence level, which is divided into a high-risk level, a medium-risk level and a low-risk level; distributing initial access rights based on the authentication confidence level; after obtaining the initial access rights, continuously comparing current behavior characteristic data with initial behavior characteristic data, and updating the authentication confidence level when in a mechanical operation mode; dynamically adjusting access rights according to the updated authentication confidence level, and triggering an automatic right downgrade mechanism when a continuous non-operation state is detected. The application solves the problem that traditional methods rely on manual intervention for right change.

The utility model provides universal Internet of Things security encryption gateway equipment based on meteorological industry, which is applied to the technical field of Internet of Things gateway equipment and comprises an RK3568J processor, a communication unit, a memory unit, a clock unit and a power supply unit, the communication unit comprises a data encryption module, a data transmission module, a data acquisition module and an identity authentication module. A hardware authentication algorithm is combined with a TLS encryption technology to realize transmission channel encryption, a device and observation data cloud management and service platform point-to-point encryption transmission channel is constructed, data is ensured not to be stolen or tampered in a transmission process, a digital signature technology and a central CA unified authentication platform are organically combined to form an up-and-down linkage signature authentication system, and the security and reliability of the system are improved. The automatic digital identity verification of the equipment is realized, and the identity legality, validity and credibility of the accessed detection equipment are ensured by means of automatically issuing a credit certificate and the like.