143 results about "Key authentication" patented technology

The invention discloses an API service management method and device and a medium, and relates to the technical field of software development. The method comprises the following steps: receiving and verifying API service registration information through a standardized interface to generate service metadata based on the API service registration information, and storing the service metadata to a service directory; wherein the service metadata comprises a service name, an interface address and a version number; when the API calling request arrives at the gateway, performing dual verification on the API calling request; wherein the dual verification comprises calling party identity key authentication and verification of types, ranges and necessary items of request parameters; under the condition that the verification is passed, asymmetrically encrypting and negotiating a session key, and performing symmetric encryption transmission on the request and response data by using the session key; and after the transmission is completed, collecting and calling log data to generate a multi-dimensional monitoring chart, and dynamically adjusting the service priority based on the interface error rate of the service provider.

The invention provides a key authentication method and device and electronic equipment, and relates to the technical field of network security. In the application, firstly, user information is determined in a key authentication request sent by a user side, whether the user information is bound with a pre-shared key is judged, then when it is determined that the user information is not bound with the pre-shared key, whether an initial key sent by the user side is matched with a first key is judged, and if yes, the pre-shared key is sent to the user side. If yes, registering the first pre-shared key for the user side, and binding the first pre-shared key with the user information, so that the pre-shared key can be registered and authenticated based on the same signal, and the efficiency of user identity authentication is improved.

The embodiment of the invention provides a key management method, a key encryption method, a data encryption method and related equipment, and the key management method is applied to a built-in cryptographic module of a processor, and comprises the steps: receiving a key management request used for requesting to manage a target key, and the key management request comprises key management demand information; the target key is at least used for encrypting an application key, and the application key is a key key for the virtual private network to realize data security transmission; generating a target key ciphertext corresponding to the target key by using the root key; storing the target key ciphertext and the target key identification information in a special memory; the storage content of the special memory is managed by the password module, and when the storage content is used, the storage content is loaded into the secure memory; and returning index information used for indexing the target key ciphertext and the storage position of the target key authentication information. According to the technical scheme provided by the embodiment of the invention, the security of the execution result of the encryption and decryption program can be improved.

The invention discloses an encryption circuit, an encryption method and a server, and the encryption circuit generates a dynamic encryption key through introducing a physical unclonable function, carries out the secondary encryption of initial encryption data through the key, can effectively improve the identity authentication and access control safety of a to-be-accessed module in the server, and improves the safety of the to-be-accessed module. Different from a traditional static password or secret key authentication mode, the dynamic encryption secret key generated based on the physical unclonable function is unpredictable, unique and difficult to clone, and the secret key does not need to provide a storage space for storage, so that even if a malicious device forges an identity or steals the secret key, the secret key can be stored in the storage space. Effective authentication information cannot be obtained through brute force cracking or phishing attack; besides, the verification process is further enhanced by a mechanism of comparing secondary encryption with reference encrypted data, and only a legal user can access the system, so that access of untrusted equipment is effectively prevented, and the security of the server and the integrity of the system are protected.

The invention relates to the technical field of Internet of Things equipment, particularly provides an Internet of Things equipment security authentication and data encryption transmission system and method, and solves the problems of limited equipment resources and difficult key management. The system comprises an equipment identity authentication component, a key management component and a lightweight encryption component. The method comprises the following steps: authenticating the legal identity of the Internet of Things equipment by adopting a lightweight symmetric key; the authority is dynamically adjusted according to factors such as equipment position, time and network state; the Internet of Things equipment generates and distributes a secret key after passing the access authority authentication; key exchange is carried out between the Internet of Things devices by adopting a key exchange protocol, and local key management is realized at an edge node in combination with edge calculation; and transmitting the data containing the key and the key exchange protocol to the target equipment, encrypting the transmitted data by adopting lightweight encryption and a Hash algorithm during transmission, and preventing a replay attack by using a timestamp and a random number. According to the invention, comprehensive safety protection of the Internet of Things equipment is realized.

The invention relates to the field of cryptology, and discloses a two-factor authentication key negotiation method based on biological characteristics, a user holds double authentication factors, namely a private key authentication factor and a biological characteristic authentication factor, a server holds secret information, and the private key authentication factor and the biological characteristic authentication factor perform mutual authentication and form a shared key, so that the service can be obtained. A user can pass authentication only by holding two authentication factors at the same time, and when an enemy steals one authentication factor or secret information of a server, the enemy cannot disguise that the user passes the authentication of the server; even if an enemy steals the two authentication factors of the user, the enemy cannot be disguised as a server to pass the authentication of the user, so that the authentication threshold is greatly improved, an unauthorized user / server is prevented from abusing the authority of the authorized user, the security is higher, the entropy rate of a biological source is not required, and the authentication efficiency is higher.

There is provided an apparatus, a method, and a computer program. The apparatus is provided with instruction decoding circuitry to decode instructions and processing circuitry to perform a processing operation in response to a decoded instruction. In response to an authentication code generating instruction, the processing circuitry is configured to generate an authentication code associated with an 10 authentication target value. For at least one type of the authentication code generating instruction, the processing circuitry is configured to generate an authentication code, when operating in a first code generation mode, by applying a code generating function to: a key; the authentication target value; a first modifier dependent on a stack pointer, and / or a second modifier dependent on a program counter address; and a further 15 modifier dependent on a further value obtained from an architecturally visible register different from the stack pointer register and the program counter register.

The invention discloses a multi-tenant API key authentication and resource isolation system in a containerized environment, and relates to the field of containerized multi-tenant authentication. Comprising an authentication authorization layer, a resource management and control layer and a security isolation layer. The authentication authorization layer comprises a multi-tenant authentication engine, an API key verification sub-module, a tenant identity recognition sub-module, an authority cascade verification sub-module and a dynamic authority calculation sub-module. And the resource management and control layer comprises a resource quota manager, a dynamic quota allocation sub-module, a real-time use monitoring sub-module, a threshold alarm control sub-module and an elastic capacity expansion and contraction sub-module. The security isolation layer comprises a multi-dimensional isolation engine, a container network isolation sub-module, a storage space isolation sub-module, a process permission isolation sub-module and a system call filtering sub-module; deep fusion of API authentication and container resource control is realized, a dynamic resource quota management mechanism based on tenant identities is established, and fine-grained API authority control and resource use limitation are provided.

The invention provides a method and a system for periodically maintaining and upgrading satellite security software. The method comprises the following steps of: S1, configuring a satellite-borne simulation system; s2, a satellite state assembly receives and responds to a remote control instruction injected on the ground, simulates the satellite working state and simulates the satellite temperature change; s3, the access authentication component checks the remote control instruction accessed to the satellite-borne simulation system, and verifies the remote control data packet through random key authentication and cyclic redundancy check; s4, setting test time, regularly testing the security software, summarizing test results, and updating the test results to a database so as to evaluate whether the security software works normally or not; and S5, upgrading the security software, notifying the ground through telemetry information after the upgrading is successful, testing the upgraded security software, and finally mapping the upgraded software into a real environment. According to the method, the security software cannot be interrupted during upgrading, and the security of the satellite software during upgrading can be ensured.

The invention relates to a real-time authentication message design and terminal authentication method of a satellite navigation system. According to the method, a real-time authentication data packet structure is set, the data packet is composed of slow authentication data and fast authentication data, the slow authentication executes first key authentication, and the fast authentication realizes telegraph text authentication. The message digest of the message information is additionally broadcasted in each authentication period, the message belongs to the fast authentication period where the key is broadcasted in a delayed mode, real-time message authentication is achieved at the cost of message overhead, and the requirement of a navigation user for real-time authentication under the scenes of an unmanned aerial vehicle, an unmanned vehicle and the like is met.

The invention relates to an unmanned aerial vehicle uplink anti-forwarding interference method, and belongs to the technical field of unmanned aerial vehicle measurement and control communication anti-interference. Comprising the following steps: constructing a signal source module, performing BPSK modulation on a generated random binary sequence, and adding a serial number at a data frame header to distinguish a data instruction sending sequence; the method comprises the following steps: constructing a channel 1 to transmit an information source signal, constructing a channel 2 to introduce forwarding interference, constructing a receiver to filter and demodulate the received signal, and then executing an instruction contained in the signal; an anti-forwarding interference module is constructed and comprises a serial number judgment module, a secret key authentication module, a secret key replacement module and an instruction serial number judgment module, an instruction frame header serial number is compared at an execution end to determine whether the instruction frame header serial number is a forwarding signal, the problem that an unmanned aerial vehicle airborne end repeatedly executes ground instructions is solved, and the instruction serial number is recycled within a certain digit; and the key is replaced once after each cycle is ended. According to the invention, the bit error rate of information transmission can be reduced, and the anti-interference capability of an unmanned aerial vehicle measurement and control link is improved.

The invention relates to the technical field of artificial intelligence, and particularly provides a method and device for security management of a privatized deployment large language model, and the method comprises the following steps: S1, user registration and API Key distribution; s2, authentication of the API Key is carried out; s3, limiting the access frequency; s4, performing priority scheduling; s5, interface standardization; and S6, recording an audit log. Compared with the prior art, access control, resource scheduling, audit log and interface standardization functions can be integrated, and the security and management efficiency of the system are improved.

This application provides a key authentication method and apparatus, an electronic device, and a storage medium. The key authentication method provided in this application includes: determining user information based on a key authentication request sent by a user end, where the key authentication request includes the user information and an initial key; determining whether the initial key matches a first key, where the first key is used to determine whether the user end has a registration need for a pre-shared key; and when the initial key matches the first key, registering the first pre-shared key for the user end and binding the first pre-shared key to the user information.

To provide a vehicle control system and a control method for the vehicle control system that suppress the occurrence of problems that may occur when updating a program.SOLUTION: A vehicle control system 1 includes a key authentication ECU 50 that acquires a key ID through wireless communication with a portable device 5 and controls locking and unlocking of a vehicle 3 based on the acquired key ID, an image authentication ECU 60 that acquires a facial feature quantity based on an image captured by a camera 65 and controls locking and unlocking of the vehicle 3 based on the acquired facial feature quantity, and a central ECU 10 that includes a determination unit 137 that determines whether to permit an update of a second program executed by the image authentication ECU 60 based on the communication status between the key authentication ECU 5 and the portable device 5.SELECTED DRAWING: Figure 1

The vehicle control system includes a key authentication ECU, an image authentication ECU, and a central ECU that performs a first operation when update processing that updates a program to be executed by the image authentication ECU fails and if communication between the key authentication ECU and the mobile device is communication-enabled and performs a second operation when the update processing fails and if communication between the key authentication ECU and the mobile device is communication-disabled, the second operation being different from the first operation.

The embodiment of the application provides a kind of based on pre-shared key authentication method, device and equipment, in the above-mentioned pre-shared key authentication method, device sends key acquisition request to first server, then receives the ciphertext of pre-shared key sent by first server, then the ciphertext of pre-shared key is decrypted, the plaintext of pre-shared key is obtained, and then according to the plaintext of pre-shared key, identity authentication or encryption and decryption service is carried out with second server, so that it can be realized by one first server with security authentication and authentication mechanism to store the ciphertext of pre-shared key encrypted by the key of equipment side, so that the security of pre-shared key is greatly improved, and in the above-mentioned method, key and ciphertext are separated, and first server does not have decryption capability (because first server does not have decryption key), so that the risk of pre-shared key leakage in first server end can be avoided.

The invention discloses an authentication method and device, equipment and a storage medium, and relates to the field of wireless communication. The method is executed by an STA and an AP, and comprises the steps that an authentication frame is transmitted between the STA and the AP to execute an authentication process, and a field in the authentication frame indicates that identity authentication is executed by adopting at least one of the following authentication modes: an extended PASN supporting FILS shared key authentication with complete forward secrecy, an extended PASN supporting FILS public key authentication and an extended PASN supporting 802.1 X authentication. And using the PTK generated in the authentication process to protect a message in the STA and AP association establishment process, wherein the message comprises at least one of an association request message, a response message, a four-way handshake message and a group key handshake message. After the association is established, data communication is carried out by using the PTK generated in the authentication process; or, creating a new PTK after the association is established, and performing data communication by using a new PTS.

The present disclosure provides a digital key system for a vehicle (100), comprising a digital key management server (200), and a vehicle (100). The vehicle (100) can be configured to send a digital key authentication request to the digital key management server (200) based on the fact that a user terminal (300) is within a threshold distance of the vehicle (100). The digital key management server (200) can be configured to send the digital key authentication request to the user terminal (300).The digital key authentication request can cause the user terminal (300) to authenticate the user based on the digital key authentication request and the user's biometric identification information, and to send an authentication response to the digital key management server (200) indicating the authentication result. The digital key management server (200) can also be configured to send the authentication response to the vehicle (100). The vehicle (100) can further be configured to perform an action based on the authentication response.

Provided are a digital key sharing method, a digital key authentication method, and a computing device. The digital key sharing method is executed by a first device and includes: sending to a second device a digital key creation request that includes valid space information for a digital key, so as to generate the digital key at the second device; receiving a digital key signature request from the second device, wherein the digital key signature request includes data to be signed of the digital key, and said data includes the valid space information; and on the basis that the signing of the digital key signature request is completed, sending a digital key import request to the second device, so as to indicate the second device to save the generated digital key. Therefore, the security of a digital key can be improved in a spatial dimension.

An apparatus and method configured for two-step cross-security-domain cloud-based privacy-aware key attestation where a root security domain, factory-provisioned with a root-of-trust device key, generates a random key signing key upon device initialization. An application, executing in a rich execution environment, generates an application key pair within a secondary security domain. The secondary security domain obtains a local key attestation from the root security domain, where the local key attestation is signed with the key signing key and returns the local key attestation to the application. When key attestation from a cloud attestation service is desired, the root security domain validates the local key attestation, generates a corresponding device key attestation signed with the device key, and sends the device key attestation to a cloud attestation service. The cloud attestation service verifies the device key attestation and returns a corresponding cloud key attestation signed with a certified cloud attestation key.

The present invention relates to the technical field of power data protection, and discloses a data communication system for distribution network protection based on the SM1 national cryptographic algorithm. An identity authentication protocol request is sent to a security machine through an identity library switch, and a reply protocol for responding to the identity authentication protocol request from the security machine is received. It is verified whether the reply protocol is correct. If the verification of the reply protocol is correct, the communication blocking states between the external distribution network protection device and the encryption switch are respectively released, so as to obtain the service data in the external distribution network protection device. An identity key authentication is also performed with the encryption switch through the SM1 national cryptographic algorithm. If the authentication is successful, the service data is forwarded to the encryption switch, and the MAC of the protection terminal is bound through the encryption switch, excluding the possibility of illegal devices accessing the authenticated encryption switch, thereby improving the identity authentication security performance of the communication system, reducing the difficulty of deployment, installation and maintenance, and at the same time, improving the security of data communication transmission.

A vehicle control system includes a key authentication ECU, an image authentication ECU, a door lock mechanism that locks a door of a vehicle, a touch panel that receives an operation; and a central ECU that causes a touch panel mounted in the vehicle to display a second setting screen that receives a setting of execution allowance for a program update for the image authentication ECU and a setting of necessity of locking of the vehicle after alighting in a case where a communication state between the key authentication ECU and a mobile device is communication-disabled and an update program for updating a program being executed by the image authentication ECU is acquired and that controls the image authentication ECU and the lock mechanism in accordance with a setting received on the second setting screen.

This invention discloses a method and system for updating the root key when a device terminal switches communication networks. The method includes: a root key generation and storage device pre-stores an initial root key ciphertext in the quantum-safe device terminal; when the quantum-safe device terminal first connects to a communication network (i.e., connects to a first communication network), it performs root key authentication with the first network communication device, and encrypted communication can be established after successful authentication; when the quantum-safe device terminal changes its access network (i.e., connects to a second communication network), it needs to perform identity authentication and update the initial root key to obtain a root key usable in the second communication network. Based on the pre-stored root key ciphertext, this invention updates the original root key when the terminal deregisters from one communication network and connects to another independent communication network, enabling the terminal to complete network switching and subsequent encrypted communication without returning to the factory, significantly improving the flexibility and availability of the device.

Provided is a method for authentication. The method is applicable to a station (STA), the method including: performing an authentication process by transmitting authentication frames between the STA and an access point (AP), wherein a first field in the authentication frame indicates that at least one of the following authentication modes is used: extended pre-association security negotiation (PASN) supporting fast initial link setup (FILS) shared key authentication with perfect forward security, extended PASN supporting FILS public key authentication, or extended PASN supporting 802.1X authentication.

The invention relates to a vehicle control method, a vehicle and an intelligent ring, and relates to the technical field of automobiles. The method comprises the following steps: receiving key authentication information from an intelligent ring; under the condition that the key authentication of the intelligent ring is passed, vehicle unlocking operation is executed; under the condition that the vehicle is successfully unlocked, based on the position information of the intelligent ring, anti-theft authentication is conducted on the intelligent ring; and executing a control instruction matched with operation information in response to the operation information of the intelligent ring under the condition that the anti-theft authentication of the intelligent ring is passed. Therefore, the technical problem that digital keys are poor in use experience can be solved.

The present disclosure provides a vehicle digital key system including a digital key management server and a vehicle. The vehicle may be configured to transmit, to the digital key management server and based on a user terminal being located within a threshold distance from the vehicle, a digital key authentication request. The digital key management server may be configured to transmit, to the user terminal, the digital key authentication request. The digital key authentication request may cause the user terminal to perform, based on the digital key authentication request and based on biometric identification information of a user, authentication of the user; and transmit, to the digital key management server, an authentication response. The digital key management server may be further configured to transmit, to the vehicle, the authentication response. The vehicle may be further configured to perform an operation of the vehicle.

The invention discloses a secret key authentication method for quantum encryption conversation. The method comprises the following steps: receiving an authentication request sent by a collection control station and first identity information of a first terminal; in response to the authentication request, determining a first symmetric key and a first key identifier according to the first identity information; and the first symmetric key and the first key identifier are sent to the centralized control station, and the centralized control station carries out authentication processing according to the first symmetric key and the first key identifier. Thus, the key transmission direction and mode are changed, so that the authentication of the terminal can be completed without directly transmitting the authentication key between the terminal and the quantum key management server, the risk that the authentication key is illegally intercepted by others in the transmission process is effectively reduced, and the user experience is improved. The potential safety hazard in the quantum encryption call authentication process is eliminated to a certain extent, so that the security of quantum encryption call authentication is ensured to a certain extent.

The invention provides an image processing apparatus, an authentication system, and a computer program product. An image processing apparatus includes: a user authentication unit configured to perform user authentication by verifying a digital signature received from an information processing apparatus through HTTP communication using a public key stored in advance in association with an identifier of a user; and a control unit configured to, when the user authentication unit is accessed from the information processing apparatus using the IP address in a state in which the user authentication unit is valid, generate a cooperative authentication screen or a pass key authentication screen for prompting access to be authenticated by using a pass key corresponding to the public key.

The embodiment of the present application provides a dynamic encryption verification method and device based on a time network protocol. The method includes: collecting historical encryption verification data, adding iteration number labels to the historical encryption verification data, inputting the key encryption algorithm iteration number labels into a preset random forest model for model training, determining corresponding important encryption verification features based on model prediction results after model training and a preset feature importance analysis algorithm, training the random forest model based on the important encryption verification features, and determining the corresponding key encryption algorithm iteration model; determining the corresponding key encryption algorithm iteration number based on the network status and the key encryption algorithm iteration model; inputting the decoded data and the key encryption algorithm iteration number into a preset key encryption algorithm to determine the corresponding key pair, and realizing time synchronization between the user end and the server end based on the key pair. The present application can improve the reliability and efficiency of time network protocol key authentication.

The application provides a digital key security authentication method, comprising: a second device sends authentication request information to a first device, and the first device obtains a first data packet according to the authentication request information and sends the first data packet to the second device. The second device decrypts first encrypted data, obtains first authentication information, and compares the first authentication information with stored first authentication information; the second device generates a second data packet and sends the second data packet to the first device. The first device decrypts second encrypted data, obtains second authentication information, compares the second authentication information with stored second authentication information, and sends a third data packet to the second device. The second device decrypts third encrypted data, obtains third authentication information, compares the third authentication information with stored third authentication information, and if the results are consistent, authentication is successful, a success notification request information is generated and sent to the first device; the first device accepts the success notification request information, generates a success notification reply information, and sends the success notification reply information to the second device. Thus, the security of digital key authentication is improved.