14 results about "Identity protection" patented technology

A process that includes receiving a session identity protection query that includes a target domain. The process further includes accessing a security database of compromised cookie data associated with a plurality of domains and determining the target domain is associated with first compromised cookie data of the compromised cookie data included in the security database. The process includes providing the first compromised cookie data in response the session identity protection query.

The present application relates to the technical field of communications, and in particular to a communication method and apparatus, and a readable storage medium. The method comprises: an AMF / TMF generates and sends nonce to an IoT device; the IoT device generates a ciphertext on the basis of the nonce, a serial number of the IoT device, and a symmetric key pre-configured by the IoT device, and then generates an SUCI on the basis of the ciphertext and a key identifier (used for indexing the symmetric key); and the IoT device sends the SUCI to the AMF / TMF to protect the identity of the IoT device. By using the present application, a permanent identifier of the IoT device can be protected while satisfying the power consumption requirements of the IoT device, thereby improving the security of the IoT device.

The invention discloses an identity authentication method and device in a distributed data circulation environment, equipment and a medium, and relates to the technical field of computers. Comprising the following steps: acquiring an identity registration request of an access subject through a regional function node, verifying real-name identity information of the access subject, and returning a corresponding identity registration result to the access subject based on a verification result of the real-name identity information; obtaining an access connector registration request of an access main body through a regional function node, and issuing a trusted identity certificate to the access main body and a target access connector according to an information auditing result of the target access connector; and if a login request of the access main body is received through the regional function node, the access main body is accessed to a preset service processing platform through the target access connector based on the trusted identity certificate to complete an identity authentication process. Therefore, cross-domain identity mutual recognition and hierarchical authorization can be realized, and basic identity guarantee is provided for safe, efficient and compliant circulation of data elements.

The invention discloses an Internet of Vehicles cross-domain authentication method based on block chain pseudo identity protection, which comprises the following steps: a vehicle user and a server apply for registration from a trusted mechanism, and a multi-center registration node architecture is deployed to reduce the system pressure of centralized registration; the vehicle sends a pseudonym application to the corresponding edge authentication server in the domain to which the vehicle belongs, and the server establishes a pseudonym mapping relation and uploads the pseudonym mapping relation to the block chain; the vehicle performs cross-domain application, and the target domain authentication server verifies the legality of the vehicle by using the pseudo identity data recorded in the block chain to confirm the access authority of the vehicle; the server and the vehicle complete the generation of a service key through a negotiation mode, so as to guarantee the confidentiality and integrity of data interaction in the subsequent cross-domain calculation unloading process of the vehicle. According to the method, the expandability and the trust flexibility of cross-domain authentication in the Internet of Vehicles are improved, the data protection capability and the identity anonymity in the vehicle unloading task process are enhanced, and more efficient, safer and more private cross-domain service interaction is realized.

According to the public interaction terminal for target area navigation, the guidance method, the medium, the program product and the electronic terminal provided by the invention, the route, the state prompt and the recommendation information are synchronously output through the same digital human image, so that the sense of information dispersion is reduced; information is screened in real time according to the target position of the user and the scene, irrelevant advertisement interference is avoided, and user acceptability is improved; according to the method, only temporary session data is stored and cleaned regularly, personal identities are not stored, user privacy is protected, and compliance interaction is realized. When the user inquires the destination, navigation information of step-by-step path guidance is provided for the user, the personalized recommendation content related to the target position is automatically generated according to the target position and the current scene state of the user, and the user experience is improved through the anthropomorphic digital image. Comprehensive guide information of way directing, reminding and recommending is output to the user in the form of voice broadcast and visual presentation.

The application discloses a kind of blockchain-based pseudo-identity protection's cross-domain authentication method of Internet of Vehicles, comprising: vehicle user and server apply for registration to trusted agency, and by deploying multi-center registration node architecture to reduce the system pressure of centralized registration;Vehicle in the domain corresponding to the edge authentication server sends pseudonym application to the server, and the server establishes pseudonym mapping relationship and uploads to blockchain;Vehicle makes cross-domain application, and target domain authentication server verifies the legality of vehicle using pseudo-identity data recorded in blockchain to confirm its access right;Server and vehicle complete the generation of service key through negotiation, to guarantee the confidentiality and integrity of data interaction in subsequent cross-domain computing offloading process of vehicle.The application improves the scalability and trust flexibility of cross-domain authentication in Internet of Vehicles, enhances the data protection capability and identity anonymity in the process of vehicle offloading task, and realizes more efficient, safer and more private cross-domain service interaction.

The application provides a method and device for realizing three-code identification switching of user communication in a mobile communication network. The method for three-code identification switching comprises the following steps: a terminal device receives a three-code synchronous switching instruction issued by a management background, the three-code synchronous switching instruction comprising a new device identification IMEI, a new code number identification IMSI and a new mobile phone number MSISDN; information of the three-code synchronous switching instruction is parsed and buffered; the original eSIM code number of the terminal device is deactivated so that the terminal device is disconnected from a network; after the terminal device is disconnected from the network, the original IMEI of the terminal device is replaced by the new IMEI, and the terminal device is restarted; after the terminal device is restarted, the new IMSI and the new MSISDN buffered are read, and the new eSIM code number is activated. The application realizes switching of all network identity identifications of users in a current mobile communication network, and has significant advantages in user identity protection, communication identification switching efficiency and data protection.

The application discloses an identity authentication method, which is used for the authentication scene of a pre-shared key of a request device and a digital certificate of an authentication access controller. A first authentication server trusted by the authentication access controller is used to verify the legitimacy of the digital certificate of the authentication access controller to obtain a first verification result. A second authentication server trusted by the request device is used to verify the identity authentication code of the request device by using the pre-shared key of the request device to obtain a second verification result. The request device and the authentication access controller respectively determine whether the other party entity is legitimate according to the verification result corresponding to the other party entity, so as to realize the bidirectional identity authentication of the authentication access controller and the request device, and to ensure that only a legitimate user can access a legitimate network. Moreover, the private information such as the identity identification and the authentication result information of the entity is transmitted in the form of ciphertext, so that the transmission safety of the private information is ensured, and the identity protection of the entity is realized.

The invention provides a method, a device and an encryption method for realizing user communication three-code identification switching of a mobile communication network. The three-code identification switching method comprises the steps that the terminal equipment receives a three-code synchronous switching instruction issued by a management background, and the three-code synchronous switching instruction comprises a new equipment identification IMEI, a new code number identification IMSI and a new mobile phone number MSISDN; analyzing and caching information of the three-code synchronous switching instruction; the original eSIM code number of the terminal equipment is deactivated, so that the terminal equipment is disconnected from the network; after the terminal equipment disconnects the network connection, replacing the original IMEI of the terminal equipment with a new IMEI, and restarting the terminal equipment; and after the terminal equipment is restarted, the cached new IMSI and the new MSISDN are read, and the new eSIM code number is activated. According to the invention, switching of all network identities of the user in the current mobile communication network is realized, and the method has significant advantages in user identity protection, communication identifier switching efficiency and data protection.

The invention relates to the technical field of security, and provides a communication network identifier protection method and device, equipment, a storage medium and a product, and the method comprises the steps: determining one or more cryptographic algorithm schemes selected from a predefined cryptographic algorithm set for protecting SUPI; respectively generating a temporary shared key based on each cryptographic algorithm scheme; deriving a final key based on each temporary shared key; protecting the SUPI based on the final key to obtain SUCI; the SUCI comprises a protection scheme identifier, the value of the identifier is used for indicating the combination of one or more cryptographic algorithm schemes adopted, the identifier comprises a plurality of flag bits, and each flag bit corresponds to a specific cryptographic algorithm scheme in a predefined cryptographic algorithm set; the value of each flag bit is used for indicating whether the corresponding cryptographic algorithm scheme is selected or not. According to the method and the device, the dynamic combination of a plurality of cryptographic algorithm schemes to be used can be supported, and the cryptographic algorithm scheme set to be used is expanded and stored so as to cope with quantum attacks.

A method performed by a reader for paging identity protection in an ambient intemet-of-things (AIoT) communication system includes paging an AIoT device using an initial paging identifier, generating, based on wireless channel reciprocity characteristics, a random number, deriving, using the random number and the initial paging identifier, a paging identifier, and replacing the initial paging identifier with the paging identifier for subsequent paging of the AIoT device.

The invention discloses a face super-resolution method based on identity-style decoupling guidance, a storage medium and equipment, and the method comprises the steps: firstly collecting face image data, and constructing a training data pair; loading a pre-trained implicit diffusion model and freezing parameters; extracting geometric embedding and text embedding from the style reference face by using a style control network, and injecting the geometric embedding and the text embedding into a diffusion model through double-path cross attention to realize style guidance; the method comprises the following steps: preprocessing an input face by using an identity protection network, respectively extracting implicit facial features and identity embedding, and guiding a diffusion model in a multi-scale feature space; jointly training the model by using denoising loss and quality perception ternary identity loss, and updating model parameters; and finally, initializing a Gaussian noise map, using the optimized style control network and the identity protection network to guide the denoising network to carry out continuous iteration denoising, using a hidden space decoder to map a denoising result to a pixel space, and reconstructing a high-quality face image.

The embodiment of the invention discloses a browser security protection system and method for online banking all-in-one machine equipment. The system comprises a terminal containment layer used for providing a full-screen window, an exclusive instance and hot key shielding; the browser kernel adaptation layer is used for packaging at least two sets of rendering kernels; the network and identity protection layer is used for integrating Wi-Fi vouchers, certificates, dynamic passwords and password strategies and realizing multi-level verification of network access and account management; the system safety hooking layer is used for intercepting unauthorized processes, blocking popup windows and limiting system commands through a process-level hooking and mutual exclusion mechanism; the strategy communication and operation and maintenance layer is used for realizing strategy issuing, state returning and log tracking based on a shared memory and a configuration file; all the parts cooperate with one another, and safety protection of the browser of the online banking all-in-one machine equipment is achieved. The scheme provided by the embodiment of the invention gives consideration to security, service continuity and operation and maintenance efficiency, and has wide popularization and application values.

The application relates to a face identity protection method and system for three-dimensional Gaussian point cloud scene editing. The method comprises the following steps: acquiring three-dimensional Gaussian point cloud scene data and camera internal and external parameters, generating a scene image through multi-view rendering; detecting a face to obtain a region mask, and projecting two-dimensional face pixels to a three-dimensional space to screen out target Gaussian points related to the identity of a person; performing text-driven image editing based on a diffusion editing model, extracting face features before and after editing to calculate identity consistency loss and visual feature difference loss; generating weights according to the identity leakage degree of each view angle, and obtaining a multi-view identity protection loss through weighted fusion, and the multi-view identity protection loss is combined with a three-dimensional scene editing loss to be optimized, and finally, scene parameters are updated. The method positions target Gaussian points through multi-view face back projection, and combines multi-view weighted identity protection loss to be optimized, so that the face identity protection capability and scene editing security in the Gaussian point cloud scene editing process are significantly improved.