317 results about "Identity management" patented technology

The present application relates to the field of e-government technology, and discloses an e-government privacy and security protection system based on blockchain technology, including a blockchain layer, a data storage layer, a smart contract layer, a user layer, a privacy computing module, a dynamic authorization and trust scoring module, a revocable access permission module, a data tampering detection and reporting module, a decentralized identity management module, and an on-chain audit module; the blockchain layer is used to record and store data and transactions generated in the e-government process; the data storage layer is used to store encrypted sensitive data, and store the corresponding hash value and index on the blockchain. The computing task allocation is dynamically adjusted through the automatic coordination mechanism of the smart contract to ensure computing efficiency and data privacy. At the same time, the on-chain audit tool immediately verifies the compliance of the results and generates reliable decision-making recommendations, thereby providing reliable decision support and avoiding data leakage risks.

The invention provides an industrial Internet of Things security authentication method and system based on zero-knowledge proof, and relates to the technical field of security authentication, and the method comprises the steps: sending the identity information of terminal equipment to an authentication server through an edge computing node, generating an equipment certificate, and building an identity management information base; and the authentication server detects a computing resource occupancy rate of the terminal equipment according to the equipment authentication key, generates a zero-knowledge proof request, performs parallel verification, updates an equipment reputation score and predicts a next authentication session state. And selecting main and standby communication channels based on the prediction state, and triggering channel switching when the health degree is lower than a threshold value. And the authentication server determines a dynamic time slice allocation strategy according to the equipment reputation score, the service priority and the prediction state, and the edge computing node adaptively adjusts the size of the time slice to complete authentication request processing. According to the method, the authentication efficiency and security are improved, the computing resource consumption is reduced, and the system robustness is enhanced.

The invention relates to the technical field of encryption communication, in particular to a distributed vehicle-mounted advertisement node encryption communication and tamper-proofing system. Comprising a vehicle-mounted advertisement node layer, an edge computing layer, a block chain layer and a cloud platform layer, the vehicle-mounted advertisement node layer is composed of a plurality of vehicle-mounted advertisement nodes and is responsible for collecting vehicle sensor data, playing advertisement content and performing local encryption. The edge computing layer is composed of edge computing nodes distributed in a regional base station or a road side unit and is responsible for dynamic key distribution, lightweight data verification and node state monitoring; the block chain layer comprises an advertisement evidence storage module and an identity management module, adopts an alliance chain, stores advertisement content hash, node identity certificates and operation logs, and ensures that data cannot be tampered; the cloud platform layer comprises an advertisement distribution module, a secret key life cycle module and an anomaly analysis module, and is responsible for global advertisement content distribution, secret key life cycle management and anomaly detection analysis.

A blockchain-based system and method for secure and auditable sharing of medical image studies between providers, patients, and authorized recipients. The system has modules for verifying identities of trusted healthcare providers as issuers of medical data, managing secure storage of medical images and metadata, minting non-fungible tokens (NFTs) representing patient ownership of studies, authenticating patient consent for data sharing, and controlling access to shared data by authorized parties. Issuer registration authenticates healthcare providers permitted to submit studies by verifying credentials against authoritative sources. Secure data management employs cryptographic wallets and smart contracts to ensure only verified issuers can create new medical data NFTs on the blockchain. Automated processing extracts medical data such as image files and metadata upon upload for separate secure storage, with metadata references encrypted in the associated NFT. The system generates patient-controlled wallets for managing ownership of their medical NFTs without separate identity verification. Patient consent for sharing data is authenticated through multi-signature wallets requiring patient approval before minting study NFTs. Controlled access for other parties is gated by cryptographic proofs of authorization without exposing data. The immutable blockchain ledger records all sharing transactions initiated through patient and provider wallets, providing transparency and an auditable trail of how and when medical data is shared or accessed and by whom. The decentralized architecture promotes patient control, security, and accountability in managing sensitive healthcare information.

The invention relates to a cross-domain authentication method based on a block chain, and the method comprises the steps: obtaining distributed identity data, carrying out the coding through employing a preset hash function, and obtaining a coded identity; recording an identity verification log based on the encoded identity label, and retrieving label consistency data from an account book according to the verification request to obtain a legality verification result; obtaining a dynamic permission allocation strategy through a legality verification result, generating a temporary access credential meeting the access requirement, and determining the content of the dynamic credential; extracting a permission range based on the dynamic voucher content, encrypting the permission range by adopting a zero-knowledge proof protocol, acquiring proof data, distributing the proof data to a cross-domain access target domain, and if the target domain feeds back a verification request, checking credibility according to the proof data, and obtaining an access permission validity result, extracting an access demand matching degree for comparison verification, and determining a cross-domain access passing state. According to the method, the trusted identity management requirement in a complex heterogeneous network environment can be met.

The invention discloses a decentralized identity management method based on a trusted execution environment, and the method comprises the steps: generating, isolating and storing a user decentralized identity in the trusted execution environment of equipment, carrying out the Hash signature of a decentralized identity document, and recording an uplink; the block chain consensus node verifies the decentralized document uplink transaction through a Byzantine fault-tolerant consensus mechanism and achieves consistency, and writes the metadata of the decentralized identity into the block; encrypting and storing the voucher in a trusted execution environment of the equipment by adopting a Pearson commitment, and supporting voucher Hash uplink and commitment uplink; and introducing a multilevel access structure based on a binary tree, and verifying the and / or logic combination voucher by adopting a depth-first search algorithm. According to the method, decentralized autonomy of the user identity and hardware security isolation are supported, and the reliability and privacy protection capability of user identity management are improved.

The invention discloses a dynamic security authentication method for cross-platform information system integration, and relates to the technical field of cross-platform dynamic authentication. A non-tampering identity trust chain is established through a block chain consensus algorithm, the problems of single-point fault and expansibility of centralized identity management are solved, cross-platform unified identity verification is realized, the problem that multi-factor authentication lacks intelligent risk assessment is solved through intelligent contract automatic verification and user behavior analysis, threats can be dynamically responded, and the user experience is improved. The authority is dynamically adjusted based on the risk level, and a real-time access control decision engine is combined, so that the problem of response lag of traditional access control is solved, accurate authority control is realized, and finally, a continuously optimized security authentication mechanism and a unified and coordinated cross-platform security protection system are formed.

The invention provides a multi-tenant-based centralized authentication and authorization method, system, device and medium, and belongs to the technical field of security and identity management, and the system comprises a unified portal layer, an authentication layer, an authorization layer, a strategy center and an audit monitoring layer. The unified portal layer receives a user request, identifies and injects a tenant identifier, and executes WAF rule verification, JWT signature verification and Token blacklist check; the authentication layer performs user or client credential verification on different accessed identity sources, generates and issues a JWT, and monitors the life cycle of a token; the authorization layer extracts an authority statement in the JWT and a locally cached strategy snapshot; the strategy center provides centralized storage, version management and visual editing of multi-tenant strategies; through cooperative work of each layer, accurate identification, unified authentication, centralized strategy management and comprehensive audit monitoring of tenants are realized. And the security, the expandability and the management efficiency of the system are effectively improved.

The invention discloses an implementation method for constructing a unified user authentication center based on an OIDC framework, and the method comprises the steps: S1, integrating user data sources, and constructing a unified science and technology management user information base; s2, constructing a unified user authentication center of the science and technology management industry; s3, related functions of each business platform system in the science and technology management industry are upgraded, OIDC unified user authentication service docking is completed, and unified identity management is realized; and S4, system interfaces of all service platforms in the science and technology management industry are comprehensively and jointly debugged, and seamless cooperation of all the service platforms in the science and technology management industry and the OIDC unified user authentication center is ensured. The method has the advantages that the problems of informatization cross-system and cross-platform identity management and authority control in the science and technology management industry are solved, efficient and safe user identity management is realized, the system safety is enhanced, the system convenience is improved, the system integration complexity is reduced, and the informatization system management efficiency is improved.

The invention discloses a multi-chain collaborative center node switching method for ensuring authentication efficiency and data reliability, which is applied to a system comprising an identity chain, an authentication chain, an edge computing center, a key generation center, a plurality of unmanned aerial vehicle clusters and at least two aerial directors, and is characterized in that the identity chain is used for identity management of all the unmanned aerial vehicle clusters; the authentication chain is jointly maintained by all the unmanned aerial vehicle clusters and all the air directors. According to the multi-chain collaborative central node switching method for ensuring the authentication efficiency and the data reliability provided by the invention, the secure communication between the clusters can be quickly established in the authentication process of the unmanned aerial vehicle clusters, and the switching of the central nodes can be quickly carried out when the central nodes are threatened and attacked in a multi-chain manner; the new central node continues to execute the flight task, and the forward and backward security is ensured in the switching process, so that the problems of low authentication efficiency of the unmanned aerial vehicle cluster, strong dependency of the central node and insufficient security in the switching process of the central node are solved.

A system and method for performing tasks by providing decentralized communication between entities are disclosed. The system is a computer-implemented system comprised of a plurality of subsystems. The plurality of subsystems comprises an identity managing subsystem, an entity detection subsystem, a first data-exchange subsystem, an entity selection subsystem, and a second data-exchange subsystem. The system is configured to manage one or more unique digital identities for each entity of the at least two entities associated with the computer-implemented system based on registration and authentication of each entity on a decentralized network. The system is configured to enable a first entity associated with the at least two entities to detect one or more second entities for exchanging generic communication data and domain-specific communication data for performing the one or more tasks by providing the decentralized communication between the at least two entities.

A system for adaptive multi-factor authentication using NFC tags in identity management networks, consisting of: an NFC-enabled authentication device configured as a passive label embedded in a smart card, a wearable device, or a physical token, the device including a secure element for storing a cryptographic key pair and a unique device identifier; a terminal device comprising an NFC reader module, a cryptographic coprocessor, a biometric capture interface, and a local control processor configured to initiate a cryptographic challenge-response authentication protocol with the NFC-enabled authentication device upon proximity detection within 10 centimeters; a backend identity management server connected to the end device via a secure communications network, the server comprising a context-aware policy engine, a machine learning-based risk assessment module, and an identity federation interface; wherein, upon receiving a response to a cryptographic challenge signed with the private key embedded in the NFC device, the end device transmits this signed response, biometric data, and context-aware metadata including a timestamp, geolocation of the end device, and device trust level to the backend identity management server; and wherein the backend identity management server evaluates a dynamically generated risk assessment based on real-time behavior analysis, authentication history, and context data and applies an adaptive authentication policy that conditionally permits access;denied or escalated to additional authentication factors.

This invention introduces a sophisticated system for deploying projects on cloud platforms, combining Unikernels, Cyber Security Mesh Architecture (CSMA), MQTT protocol with SHA256 encryption, an Unikernel Orchestration Rules Engine (UORE), generative AI, and an innovative caching mechanism. Unikernels offer a secure, isolated environment for applications, reducing overhead and boosting performance. CSMA provides extensive security through analytics, identity management, and policy enforcement. The MQTT protocol, secured with SHA256, ensures the integrity and confidentiality of communications. UORE automates deployment, integrating a TLS terminator and data management for streamlined operation. Generative AI proactively resolves deployment challenges, particularly for complex applications, while the caching mechanism enhances performance and efficiency by minimizing latency. This integrated approach automates and secures the deployment process, enabling scalable, efficient, and real-time project creation and deployment in the cloud, thereby addressing the key challenges of cloud application hosting.

The invention relates to an extensible system for credible management of academic / educational credentials, and belongs to the field of block chain technology and credible management of academic / educational credentials. The system comprises a user layer, an application layer, a contract layer, an under-chain storage layer, a block chain bottom layer and a management layer. The user layer supports a user to perform user registration, identity verification, certificate service and identity management; the application layer provides a certificate management operation function, an intelligent contract operation function, role and authority management and an API interface; the block chain bottom layer is based on an FISCO-BCOS platform, an alliance chain architecture is adopted, and a z-PBFT consensus mechanism is used; the management layer relates to monitoring and management of nodes in the block chain network, dynamic adding or exiting of the nodes and log management. According to the method, the block chain storage cost is effectively reduced, the expansibility and performance of the system are improved, the credibility and integrity of the data are considered, and the method is suitable for a large-scale distributed academic / educational certificate credibility management scene.

The invention provides an identity authentication method and device based on an intra-domain block chain and a cross-domain block chain. The identity authentication method based on the intra-domain block chain and the cross-domain block chain comprises the following steps: when an intra-domain device is authenticated, querying identity information of a to-be-authenticated Internet of Things device based on a dynamic identity management data structure, and verifying the identity information of the to-be-authenticated Internet of Things device; the dynamic identity management data structure is used for storing identity information of the Internet of Things equipment in the same trust domain; during cross-domain device authentication, cross-domain authentication is carried out according to the cross-domain permission voucher; cross-domain license credentials are accumulated in the smart contract using a dynamic accumulator. According to the identity authentication method and device based on the intra-domain block chain and the cross-domain block chain provided by the invention, rapid identity authentication of the intra-domain device and the cross-domain device can be realized, rapid identity confirmation between devices of different domains can be realized under the condition of protecting device privacy, and the efficiency and security of device identity authentication are improved.

The invention discloses an electric energy data management and sharing method and system based on a block chain, and relates to the technical field of block chain technology and electric energy data management, and the method comprises the steps: providing an identity registration and authentication function for a user through a digital identity management module, and generating an electric energy data right confirmation certificate based on the block chain; sharing permission setting and circulation registration of the electric energy data are carried out based on the smart contract, and a data sharing behavior is recorded through a block chain; a high-performance consensus mechanism is used for monitoring electric energy data circulation in real time, and full-life-cycle traceability management of data sharing is provided. According to the method, a whole-process identity management service is provided through the digital identity management module, a tampering-free identity management mechanism is realized through the block chain, the security and transparency of the electric energy data right confirmation system are improved, the data right confirmation process is automated through the smart contract, the operation is simplified, and the right confirmation efficiency and accuracy are improved.

An apparatus, method and computer-readable media are disclosed for performing wireless communications. For example, a process for wireless communications can include transmitting, to an identity and routing service, a service registration request, wherein the service registration request includes a service identifier for the network service, wherein the network service is separate from the identity and routing service; receiving, from the identity and routing service, a first temporary service identifier (TSID) for the network service; allocating a first temporary device identifier (TUID) to a device; and transmitting the first TSID and first TUID to the device for a first security context.

The present system can include the ability to create and store a unique digital identity using biometric authentication, immutable storage, and self-sovereign identity management. An identity capture device can be adapted to receive biometric information from the identity capture device, create a digital representation, store the digital representation on a portable media. The digital representation can be compared with captured information to determine authenticity.

A system can execute a containerized application that comprises a microservice in a decentralized service mesh architecture, and a sidecar. The system can intercept, by the containerized application, a call from the microservice that is directed to a remote endpoint, and direct the call to the sidecar. The system can communicate, by the sidecar to an identity manager, service account credentials associated with the microservice, resulting in receiving an identity token associated with the microservice. The system can determine, by the sidecar, connectivity information of the remote endpoint based on a virtual address of the remote endpoint identified in the call. The system can communicate, by the sidecar to a token exchanger, the identity token and the connectivity information, resulting in receiving an access token and a network route to the remote endpoint. The system can relay, by the sidecar, network traffic between the microservice and the remote endpoint.

The invention discloses an Internet of Things identity management method and system based on a block chain, and relates to the technical field of fusion block chains, the method comprises identity prefabrication, dynamic authorization, security interaction and identity management and control, and in the identity prefabrication stage, a unique security seed is injected into equipment, a key pair is generated, an identifier is decentralized, and an access credential is decentralized. After verification of a block chain smart contract, writing the data into an alliance chain main chain to complete identity anchoring; dynamically authorizing through an attribute-based access control model, and setting a fine-grained permission boundary according to an access credential; the security interaction adopts a DID bidirectional authentication and batch signature verification technology to process a high-concurrency request, an instruction is verified and executed through a security module after being signed and packaged, and an audit triple is synchronously constructed for storage; and identity management and control triggers key rotation through an intelligent contract rule engine, so that the full-life-cycle safety of the identity is ensured, and the safety risk caused by permission abuse is effectively reduced.

A device, system and method to log a communication device into services using a device identifier is provided. An identity management (IM) computing device receives, from a certificate authority, a first digital certificate, and further receives from a given communication device, a second digital certificate and a device identifier associated with the given communication device. The IM computing device successfully validates the second digital certificate using the first digital certificate, obtains a user identifier associated with the device identifier, and issues, to the given communication device, one or more tokens that include the user identifier, the one or more tokens enabling the given communication device to log into one or more services using the user identifier.

The invention provides an access control method and device based on a smart contract, and the method comprises the steps: receiving a data request packet through a block chain, carrying out the matching of a request data index and at least one storage data index, and determining a successfully matched data owning device as a matching device; checking whether the current reputation value of the data request equipment is higher than the preset minimum reputation value of the matching equipment or not through the block chain based on the identity management contract according to the pseudonym of the request equipment; verifying whether the request equipment attribute set accords with the access control strategy through the block chain; generating a one-time authorization token based on the data sharing contract under the condition that the request equipment attribute set conforms to the access control strategy; sending the extracted data packet to a data request device through the block chain according to the one-time authorization token; and a multi-dimensional security foundation is laid for data sharing.

The invention provides a data security auditing method and system for Azure cloud, and the method comprises the steps: S1, obtaining an access token and a refreshing token according to a credential request token provided by a user; s2, reading log information according to the access token, processing the log information, matching the log information with a predefined rule, detecting records which may have abnormalities, and then auditing identity management, access management and services which may have backdoors in the tenants by the system to obtain an auditing result; and S3, producing a safety audit report according to the audit result. According to the Azure data security auditing method and system, the security condition of the Azure tenant can be audited comprehensively, the audit coverage rate of common risk configuration items is increased by 35% and reaches 90% compared with that of an existing Azure security auditing tool, and comprehensive Azure data security auditing is achieved.

A system for cross-domain identity management (SCIM) proxy service is described. A first SCIM endpoint receives, from a first SCIM client, a first message that includes a SCIM resource. The first SCIM endpoint is associated with a customer of the SCIM proxy service. The SCIM proxy service is configured as a first SCIM service provider for the first SCIM client. The first message is validated. The first SCIM proxy service determines that a third-party application is in scope for the SCIM resource, where the SCIM proxy service is configured as a second SCIM client for the third-party application. The SCIM proxy service transmits a second message to a second SCIM endpoint of the third-party application, the second message including the SCIM resource.

The invention provides a universal method for realizing multi-condition and search based on LDAP, and belongs to the technical field of data retrieval of directory service and identity management. A user defines query conditions including attributes, values and logical relationships through a configuration file, a visual interface or an interface; the system parses the query condition model into a query condition model supporting nested combination of AND, OR and NOT by using a parser, and performs legality check and error prompt; and then a generator dynamically generates a filtering statement conforming to the LDAP grammar specification according to the model, and query is executed through an LDAP client. In order to improve the performance, common condition caching and high-frequency statement pre-compiling optimization are introduced, and an asynchronous query mode is supported. And the query result is returned in the form of structured data, and is matched with a display interface to support screening, sorting and exporting, so that the flexibility and maintainability of multi-condition query are improved.

The invention discloses an online entropy estimation method based on a parallel technology, and aims to solve the problem that a conventional random number entropy estimation method is slow in speed and cannot meet the detection requirements of a modern high-speed random number generator, the parallel technology is applied to entropy estimation, and the speed of entropy estimation is greatly improved by utilizing the parallel computing capability of a GPU (Graphic Processing Unit). The method and the device can meet the requirement of rapid detection of key security in the information interaction process of identity management. Besides, by means of the post-processing method of the entropy estimation result, the reliable entropy estimation result can be reserved and inaccurate values can be eliminated regardless of sudden change data or gradual change data. Besides, in the entropy estimation process, the calculation formula of the statistical entropy is improved according to the size change of the sample size, the accuracy of random number entropy estimation is improved, and therefore the requirement for accurate detection of key security in the information interaction process of identity management is met.

The invention discloses an alliance chain-based unmanned aerial vehicle cross-domain service function link accessing method, which comprises the following steps of: 1, initializing a system and configuring an alliance chain, generating a global password parameter and a root key by a trusted mechanism, and finishing domain registration and certificate chain storage by each management domain edge server; 2, blockchain-driven identity management is carried out, and the unmanned aerial vehicle completes chain registration and anti-counterfeiting registration certificate acquisition through a domain edge server to which the unmanned aerial vehicle belongs; 3, deploying a flexible threshold signature algorithm to realize multi-domain joint signature and Byzantine fault tolerance; 4, executing a cross-domain SFC security authentication protocol, including SFC pre-verification and security authorization certificate issuing, first node verification starting, hop-by-hop key negotiation and handover certificate transmission, and on-chain auditing; and 5, based on the topology centrality and the path coverage, dynamically electing an orchestrator to realize load balancing. According to the invention, safe access and identity authentication of the cross-domain service function chain of the unmanned aerial vehicle are realized, safety, efficiency and expandability are balanced, and reliable guarantee is provided for cross-domain cooperation of the unmanned aerial vehicle.

The invention relates to the technical field of Internet of Things, and provides an intelligent security method and device for an industrial park, electronic equipment and a storage medium. The method comprises the following steps: carrying out space-time alignment and feature fusion on sensor data to obtain environmental perception data, carrying out face feature recognition and hierarchical authorization processing on the environmental perception data to obtain character data in a region, and carrying out disaster prediction coupling on the character data in the region and the environmental perception data to obtain risk evolution data. And performing evacuation path planning on the risk evolution data and the data of the persons in the region to obtain evacuation navigation data, and performing emergency response processing on the evacuation navigation data and the real-time position coordinates of the persons to obtain an equipment control instruction set. According to the invention, refinement, real-time performance and automation are realized in links of environment perception, identity management, risk prediction, evacuation navigation and emergency response, and the safety protection capability of the industrial park is improved.

The invention discloses an identity authentication method and system, electronic equipment and a storage medium. The method comprises a password authentication login stage and a certificate authentication login stage, in a password authentication login stage, after an authentication client receives identity identification information and password information sent by a user terminal and generates a password hash value, an authentication server receives the password hash value, a random salt value and the identity identification information from the authentication client and sends the password hash value to the user terminal; the authentication server verifies the legality of the received password hash value; in a certificate authentication login stage, the authentication server sends a first random value and timestamp information to the user terminal, and after a digital signature is generated by the user terminal according to the identity identification information, the first random value, a second random value selected by a user and the timestamp information, the first random value and the second random value are sent to the user terminal. And the authentication server receives the digital signature and the authorization certificate from the user terminal, and verifies the legality of the digital signature and the authorization certificate. By adopting the technical scheme provided by the invention, the security of terminal identity management is improved by the two-factor identity authentication method fusing the dynamic verification password and the certificate.