418 results about "Identity management" patented technology

The present application relates to the field of e-government technology, and discloses an e-government privacy and security protection system based on blockchain technology, including a blockchain layer, a data storage layer, a smart contract layer, a user layer, a privacy computing module, a dynamic authorization and trust scoring module, a revocable access permission module, a data tampering detection and reporting module, a decentralized identity management module, and an on-chain audit module; the blockchain layer is used to record and store data and transactions generated in the e-government process; the data storage layer is used to store encrypted sensitive data, and store the corresponding hash value and index on the blockchain. The computing task allocation is dynamically adjusted through the automatic coordination mechanism of the smart contract to ensure computing efficiency and data privacy. At the same time, the on-chain audit tool immediately verifies the compliance of the results and generates reliable decision-making recommendations, thereby providing reliable decision support and avoiding data leakage risks.

The invention provides an industrial Internet of Things security authentication method and system based on zero-knowledge proof, and relates to the technical field of security authentication, and the method comprises the steps: sending the identity information of terminal equipment to an authentication server through an edge computing node, generating an equipment certificate, and building an identity management information base; and the authentication server detects a computing resource occupancy rate of the terminal equipment according to the equipment authentication key, generates a zero-knowledge proof request, performs parallel verification, updates an equipment reputation score and predicts a next authentication session state. And selecting main and standby communication channels based on the prediction state, and triggering channel switching when the health degree is lower than a threshold value. And the authentication server determines a dynamic time slice allocation strategy according to the equipment reputation score, the service priority and the prediction state, and the edge computing node adaptively adjusts the size of the time slice to complete authentication request processing. According to the method, the authentication efficiency and security are improved, the computing resource consumption is reduced, and the system robustness is enhanced.

The invention relates to the technical field of encryption communication, in particular to a distributed vehicle-mounted advertisement node encryption communication and tamper-proofing system. Comprising a vehicle-mounted advertisement node layer, an edge computing layer, a block chain layer and a cloud platform layer, the vehicle-mounted advertisement node layer is composed of a plurality of vehicle-mounted advertisement nodes and is responsible for collecting vehicle sensor data, playing advertisement content and performing local encryption. The edge computing layer is composed of edge computing nodes distributed in a regional base station or a road side unit and is responsible for dynamic key distribution, lightweight data verification and node state monitoring; the block chain layer comprises an advertisement evidence storage module and an identity management module, adopts an alliance chain, stores advertisement content hash, node identity certificates and operation logs, and ensures that data cannot be tampered; the cloud platform layer comprises an advertisement distribution module, a secret key life cycle module and an anomaly analysis module, and is responsible for global advertisement content distribution, secret key life cycle management and anomaly detection analysis.

A blockchain-based system and method for secure and auditable sharing of medical image studies between providers, patients, and authorized recipients. The system has modules for verifying identities of trusted healthcare providers as issuers of medical data, managing secure storage of medical images and metadata, minting non-fungible tokens (NFTs) representing patient ownership of studies, authenticating patient consent for data sharing, and controlling access to shared data by authorized parties. Issuer registration authenticates healthcare providers permitted to submit studies by verifying credentials against authoritative sources. Secure data management employs cryptographic wallets and smart contracts to ensure only verified issuers can create new medical data NFTs on the blockchain. Automated processing extracts medical data such as image files and metadata upon upload for separate secure storage, with metadata references encrypted in the associated NFT. The system generates patient-controlled wallets for managing ownership of their medical NFTs without separate identity verification. Patient consent for sharing data is authenticated through multi-signature wallets requiring patient approval before minting study NFTs. Controlled access for other parties is gated by cryptographic proofs of authorization without exposing data. The immutable blockchain ledger records all sharing transactions initiated through patient and provider wallets, providing transparency and an auditable trail of how and when medical data is shared or accessed and by whom. The decentralized architecture promotes patient control, security, and accountability in managing sensitive healthcare information.

The invention relates to a cross-domain authentication method based on a block chain, and the method comprises the steps: obtaining distributed identity data, carrying out the coding through employing a preset hash function, and obtaining a coded identity; recording an identity verification log based on the encoded identity label, and retrieving label consistency data from an account book according to the verification request to obtain a legality verification result; obtaining a dynamic permission allocation strategy through a legality verification result, generating a temporary access credential meeting the access requirement, and determining the content of the dynamic credential; extracting a permission range based on the dynamic voucher content, encrypting the permission range by adopting a zero-knowledge proof protocol, acquiring proof data, distributing the proof data to a cross-domain access target domain, and if the target domain feeds back a verification request, checking credibility according to the proof data, and obtaining an access permission validity result, extracting an access demand matching degree for comparison verification, and determining a cross-domain access passing state. According to the method, the trusted identity management requirement in a complex heterogeneous network environment can be met.

The invention discloses a decentralized identity management method based on a trusted execution environment, and the method comprises the steps: generating, isolating and storing a user decentralized identity in the trusted execution environment of equipment, carrying out the Hash signature of a decentralized identity document, and recording an uplink; the block chain consensus node verifies the decentralized document uplink transaction through a Byzantine fault-tolerant consensus mechanism and achieves consistency, and writes the metadata of the decentralized identity into the block; encrypting and storing the voucher in a trusted execution environment of the equipment by adopting a Pearson commitment, and supporting voucher Hash uplink and commitment uplink; and introducing a multilevel access structure based on a binary tree, and verifying the and / or logic combination voucher by adopting a depth-first search algorithm. According to the method, decentralized autonomy of the user identity and hardware security isolation are supported, and the reliability and privacy protection capability of user identity management are improved.

The invention discloses a dynamic security authentication method for cross-platform information system integration, and relates to the technical field of cross-platform dynamic authentication. A non-tampering identity trust chain is established through a block chain consensus algorithm, the problems of single-point fault and expansibility of centralized identity management are solved, cross-platform unified identity verification is realized, the problem that multi-factor authentication lacks intelligent risk assessment is solved through intelligent contract automatic verification and user behavior analysis, threats can be dynamically responded, and the user experience is improved. The authority is dynamically adjusted based on the risk level, and a real-time access control decision engine is combined, so that the problem of response lag of traditional access control is solved, accurate authority control is realized, and finally, a continuously optimized security authentication mechanism and a unified and coordinated cross-platform security protection system are formed.

The invention provides a multi-tenant-based centralized authentication and authorization method, system, device and medium, and belongs to the technical field of security and identity management, and the system comprises a unified portal layer, an authentication layer, an authorization layer, a strategy center and an audit monitoring layer. The unified portal layer receives a user request, identifies and injects a tenant identifier, and executes WAF rule verification, JWT signature verification and Token blacklist check; the authentication layer performs user or client credential verification on different accessed identity sources, generates and issues a JWT, and monitors the life cycle of a token; the authorization layer extracts an authority statement in the JWT and a locally cached strategy snapshot; the strategy center provides centralized storage, version management and visual editing of multi-tenant strategies; through cooperative work of each layer, accurate identification, unified authentication, centralized strategy management and comprehensive audit monitoring of tenants are realized. And the security, the expandability and the management efficiency of the system are effectively improved.

The invention discloses an implementation method for constructing a unified user authentication center based on an OIDC framework, and the method comprises the steps: S1, integrating user data sources, and constructing a unified science and technology management user information base; s2, constructing a unified user authentication center of the science and technology management industry; s3, related functions of each business platform system in the science and technology management industry are upgraded, OIDC unified user authentication service docking is completed, and unified identity management is realized; and S4, system interfaces of all service platforms in the science and technology management industry are comprehensively and jointly debugged, and seamless cooperation of all the service platforms in the science and technology management industry and the OIDC unified user authentication center is ensured. The method has the advantages that the problems of informatization cross-system and cross-platform identity management and authority control in the science and technology management industry are solved, efficient and safe user identity management is realized, the system safety is enhanced, the system convenience is improved, the system integration complexity is reduced, and the informatization system management efficiency is improved.

An example operation may include one or more of receiving a request for storage at a blockchain network, attaching, via a blockchain node, a verifiable credential created by a self-sovereign identity (SSI) network to a blockchain transaction associated with the request, where the verifiable credential includes a claim of the blockchain node and a proof of the SSI network that created the verifiable credential, transmitting the blockchain transaction and the attached verifiable credential to one or more other blockchain nodes, and storing the blockchain transaction and the attached verifiable credential via a data block on the blockchain.

The invention discloses a multi-chain collaborative center node switching method for ensuring authentication efficiency and data reliability, which is applied to a system comprising an identity chain, an authentication chain, an edge computing center, a key generation center, a plurality of unmanned aerial vehicle clusters and at least two aerial directors, and is characterized in that the identity chain is used for identity management of all the unmanned aerial vehicle clusters; the authentication chain is jointly maintained by all the unmanned aerial vehicle clusters and all the air directors. According to the multi-chain collaborative central node switching method for ensuring the authentication efficiency and the data reliability provided by the invention, the secure communication between the clusters can be quickly established in the authentication process of the unmanned aerial vehicle clusters, and the switching of the central nodes can be quickly carried out when the central nodes are threatened and attacked in a multi-chain manner; the new central node continues to execute the flight task, and the forward and backward security is ensured in the switching process, so that the problems of low authentication efficiency of the unmanned aerial vehicle cluster, strong dependency of the central node and insufficient security in the switching process of the central node are solved.

A system and method for performing tasks by providing decentralized communication between entities are disclosed. The system is a computer-implemented system comprised of a plurality of subsystems. The plurality of subsystems comprises an identity managing subsystem, an entity detection subsystem, a first data-exchange subsystem, an entity selection subsystem, and a second data-exchange subsystem. The system is configured to manage one or more unique digital identities for each entity of the at least two entities associated with the computer-implemented system based on registration and authentication of each entity on a decentralized network. The system is configured to enable a first entity associated with the at least two entities to detect one or more second entities for exchanging generic communication data and domain-specific communication data for performing the one or more tasks by providing the decentralized communication between the at least two entities.

A system for adaptive multi-factor authentication using NFC tags in identity management networks, consisting of: an NFC-enabled authentication device configured as a passive label embedded in a smart card, a wearable device, or a physical token, the device including a secure element for storing a cryptographic key pair and a unique device identifier; a terminal device comprising an NFC reader module, a cryptographic coprocessor, a biometric capture interface, and a local control processor configured to initiate a cryptographic challenge-response authentication protocol with the NFC-enabled authentication device upon proximity detection within 10 centimeters; a backend identity management server connected to the end device via a secure communications network, the server comprising a context-aware policy engine, a machine learning-based risk assessment module, and an identity federation interface; wherein, upon receiving a response to a cryptographic challenge signed with the private key embedded in the NFC device, the end device transmits this signed response, biometric data, and context-aware metadata including a timestamp, geolocation of the end device, and device trust level to the backend identity management server; and wherein the backend identity management server evaluates a dynamically generated risk assessment based on real-time behavior analysis, authentication history, and context data and applies an adaptive authentication policy that conditionally permits access;denied or escalated to additional authentication factors.

This invention introduces a sophisticated system for deploying projects on cloud platforms, combining Unikernels, Cyber Security Mesh Architecture (CSMA), MQTT protocol with SHA256 encryption, an Unikernel Orchestration Rules Engine (UORE), generative AI, and an innovative caching mechanism. Unikernels offer a secure, isolated environment for applications, reducing overhead and boosting performance. CSMA provides extensive security through analytics, identity management, and policy enforcement. The MQTT protocol, secured with SHA256, ensures the integrity and confidentiality of communications. UORE automates deployment, integrating a TLS terminator and data management for streamlined operation. Generative AI proactively resolves deployment challenges, particularly for complex applications, while the caching mechanism enhances performance and efficiency by minimizing latency. This integrated approach automates and secures the deployment process, enabling scalable, efficient, and real-time project creation and deployment in the cloud, thereby addressing the key challenges of cloud application hosting.

Identity management recommendations for use of existing policies are described herein. An available policy set of existing policies that are available to an identity may be determined. Selected permissions associated with permission-usage by the identity may be determined. It may be determined whether the available policy set includes one or more matching policy subsets that cover all the selected permissions without allowing any additional permissions. When the available policy set includes the one or more matching policy subsets, a first recommendation may be provided to attach, to the identity, at least one matching policy subset of the one or more matching policy subsets. When the available policy set does not include the one or more matching policy subsets, a second recommendation may be provided to attach, to the identity, one or more alternative policies.

The invention relates to an extensible system for credible management of academic / educational credentials, and belongs to the field of block chain technology and credible management of academic / educational credentials. The system comprises a user layer, an application layer, a contract layer, an under-chain storage layer, a block chain bottom layer and a management layer. The user layer supports a user to perform user registration, identity verification, certificate service and identity management; the application layer provides a certificate management operation function, an intelligent contract operation function, role and authority management and an API interface; the block chain bottom layer is based on an FISCO-BCOS platform, an alliance chain architecture is adopted, and a z-PBFT consensus mechanism is used; the management layer relates to monitoring and management of nodes in the block chain network, dynamic adding or exiting of the nodes and log management. According to the method, the block chain storage cost is effectively reduced, the expansibility and performance of the system are improved, the credibility and integrity of the data are considered, and the method is suitable for a large-scale distributed academic / educational certificate credibility management scene.

The invention provides an identity authentication method and device based on an intra-domain block chain and a cross-domain block chain. The identity authentication method based on the intra-domain block chain and the cross-domain block chain comprises the following steps: when an intra-domain device is authenticated, querying identity information of a to-be-authenticated Internet of Things device based on a dynamic identity management data structure, and verifying the identity information of the to-be-authenticated Internet of Things device; the dynamic identity management data structure is used for storing identity information of the Internet of Things equipment in the same trust domain; during cross-domain device authentication, cross-domain authentication is carried out according to the cross-domain permission voucher; cross-domain license credentials are accumulated in the smart contract using a dynamic accumulator. According to the identity authentication method and device based on the intra-domain block chain and the cross-domain block chain provided by the invention, rapid identity authentication of the intra-domain device and the cross-domain device can be realized, rapid identity confirmation between devices of different domains can be realized under the condition of protecting device privacy, and the efficiency and security of device identity authentication are improved.

The invention discloses an electric energy data management and sharing method and system based on a block chain, and relates to the technical field of block chain technology and electric energy data management, and the method comprises the steps: providing an identity registration and authentication function for a user through a digital identity management module, and generating an electric energy data right confirmation certificate based on the block chain; sharing permission setting and circulation registration of the electric energy data are carried out based on the smart contract, and a data sharing behavior is recorded through a block chain; a high-performance consensus mechanism is used for monitoring electric energy data circulation in real time, and full-life-cycle traceability management of data sharing is provided. According to the method, a whole-process identity management service is provided through the digital identity management module, a tampering-free identity management mechanism is realized through the block chain, the security and transparency of the electric energy data right confirmation system are improved, the data right confirmation process is automated through the smart contract, the operation is simplified, and the right confirmation efficiency and accuracy are improved.

An apparatus, method and computer-readable media are disclosed for performing wireless communications. For example, a process for wireless communications can include transmitting, to an identity and routing service, a service registration request, wherein the service registration request includes a service identifier for the network service, wherein the network service is separate from the identity and routing service; receiving, from the identity and routing service, a first temporary service identifier (TSID) for the network service; allocating a first temporary device identifier (TUID) to a device; and transmitting the first TSID and first TUID to the device for a first security context.

The present system can include the ability to create and store a unique digital identity using biometric authentication, immutable storage, and self-sovereign identity management. An identity capture device can be adapted to receive biometric information from the identity capture device, create a digital representation, store the digital representation on a portable media. The digital representation can be compared with captured information to determine authenticity.

The invention relates to a system and method for the management of decentralized digital identities, used in a distributed environment for making virtual transactions, document transfer and encrypted communication in a secure and integral way. The system works on the basis of blockchain technology and includes: a token-type hardware device (DH) capable of generating and storing encryption keys associated with decentralized identities (IDs), a mapping module (MAP) for correspondence between email addresses and decentralized digital identities (IDs), a communication module (MC) for blockchain-encrypted email and chat, a compliance module (MConf) for EU identity recognition, a decentralized identity module (MID) for identity management through blockchain and an authentication module (AUT) that combines two-step authentication with one-time authentication. The method involves enrolling users, generating decentralized identities, authenticating through blockchain, and making virtual transactions using decentralized identities in a distributed system.

A system can execute a containerized application that comprises a microservice in a decentralized service mesh architecture, and a sidecar. The system can intercept, by the containerized application, a call from the microservice that is directed to a remote endpoint, and direct the call to the sidecar. The system can communicate, by the sidecar to an identity manager, service account credentials associated with the microservice, resulting in receiving an identity token associated with the microservice. The system can determine, by the sidecar, connectivity information of the remote endpoint based on a virtual address of the remote endpoint identified in the call. The system can communicate, by the sidecar to a token exchanger, the identity token and the connectivity information, resulting in receiving an access token and a network route to the remote endpoint. The system can relay, by the sidecar, network traffic between the microservice and the remote endpoint.

The invention discloses an Internet of Things identity management method and system based on a block chain, and relates to the technical field of fusion block chains, the method comprises identity prefabrication, dynamic authorization, security interaction and identity management and control, and in the identity prefabrication stage, a unique security seed is injected into equipment, a key pair is generated, an identifier is decentralized, and an access credential is decentralized. After verification of a block chain smart contract, writing the data into an alliance chain main chain to complete identity anchoring; dynamically authorizing through an attribute-based access control model, and setting a fine-grained permission boundary according to an access credential; the security interaction adopts a DID bidirectional authentication and batch signature verification technology to process a high-concurrency request, an instruction is verified and executed through a security module after being signed and packaged, and an audit triple is synchronously constructed for storage; and identity management and control triggers key rotation through an intelligent contract rule engine, so that the full-life-cycle safety of the identity is ensured, and the safety risk caused by permission abuse is effectively reduced.

Methods, systems, and devices for managing report requests are described. A device associated with an identity management platform may receive a message from a user of an organization via a client device. The message may include a natural language and may indicate a request for information associated with the organization. In response to the request, the device may generate a first query based on translating the message into an intermediary language using a machine learning model. The intermediary language may be associated with the identity management platform. The device may transmit a report to the user via the client device. The report may be based on the first query and include the information associated with the organization.

A device, system and method to log a communication device into services using a device identifier is provided. An identity management (IM) computing device receives, from a certificate authority, a first digital certificate, and further receives from a given communication device, a second digital certificate and a device identifier associated with the given communication device. The IM computing device successfully validates the second digital certificate using the first digital certificate, obtains a user identifier associated with the device identifier, and issues, to the given communication device, one or more tokens that include the user identifier, the one or more tokens enabling the given communication device to log into one or more services using the user identifier.

The invention provides an access control method and device based on a smart contract, and the method comprises the steps: receiving a data request packet through a block chain, carrying out the matching of a request data index and at least one storage data index, and determining a successfully matched data owning device as a matching device; checking whether the current reputation value of the data request equipment is higher than the preset minimum reputation value of the matching equipment or not through the block chain based on the identity management contract according to the pseudonym of the request equipment; verifying whether the request equipment attribute set accords with the access control strategy through the block chain; generating a one-time authorization token based on the data sharing contract under the condition that the request equipment attribute set conforms to the access control strategy; sending the extracted data packet to a data request device through the block chain according to the one-time authorization token; and a multi-dimensional security foundation is laid for data sharing.

The embodiment of the invention provides an access control method and device based on identity authentication, the access control method based on identity authentication is applied to an access control system, the system comprises a policy identity management server side and an identity agent side, and the method comprises the following steps: the identity agent side sends a registration request to the policy identity management server side; wherein the identity agent ends are in one-to-one correspondence with the assets; the policy identity management server side determines an asset label based on the registration request, determines an access control policy based on the asset label, and sends the access control policy to the identity agent side; and the identity agent side obtains the sending data and the receiving data of the assets, and performs access control based on the access control strategy. Therefore, the problems that an original asset IP cannot be recognized and accurate access control cannot be performed on a source visitor due to IP dynamic change, IP counterfeit, IP address conversion and the like can be avoided, the network security is improved, and meanwhile, the matching efficiency of access control is improved by using a specific identity information matching mechanism.

Disclosed are systems and methods that provide a novel cross-session authentication framework that enables secure local and / or network sessions to be effectuated via biometric tracking via a wearable device (e.g., smart ring). In some implementations, when a user wearing a smart ring is authenticated with a first secure resource (e.g., a computer system such as a smart phone application associated with the smart ring), such authentication can be maintained and leveraged to access other resources that are separately being securely held. The smart ring, when properly worn, can monitor biometrics (e.g., vital signs) of a user, and based therefrom, determine if and / or when the smart ring is removed / manipulated from the user's finder. Until the smart ring is removed, the smart ring's confirmation of being worn by the user can be leveraged as an identification token that can enable the user access to other securely held information.

The invention provides a data security auditing method and system for Azure cloud, and the method comprises the steps: S1, obtaining an access token and a refreshing token according to a credential request token provided by a user; s2, reading log information according to the access token, processing the log information, matching the log information with a predefined rule, detecting records which may have abnormalities, and then auditing identity management, access management and services which may have backdoors in the tenants by the system to obtain an auditing result; and S3, producing a safety audit report according to the audit result. According to the Azure data security auditing method and system, the security condition of the Azure tenant can be audited comprehensively, the audit coverage rate of common risk configuration items is increased by 35% and reaches 90% compared with that of an existing Azure security auditing tool, and comprehensive Azure data security auditing is achieved.