177 results about "Key authentication" patented technology

The invention discloses an API service management method and device and a medium, and relates to the technical field of software development. The method comprises the following steps: receiving and verifying API service registration information through a standardized interface to generate service metadata based on the API service registration information, and storing the service metadata to a service directory; wherein the service metadata comprises a service name, an interface address and a version number; when the API calling request arrives at the gateway, performing dual verification on the API calling request; wherein the dual verification comprises calling party identity key authentication and verification of types, ranges and necessary items of request parameters; under the condition that the verification is passed, asymmetrically encrypting and negotiating a session key, and performing symmetric encryption transmission on the request and response data by using the session key; and after the transmission is completed, collecting and calling log data to generate a multi-dimensional monitoring chart, and dynamically adjusting the service priority based on the interface error rate of the service provider.

The invention provides a key authentication method and device and electronic equipment, and relates to the technical field of network security. In the application, firstly, user information is determined in a key authentication request sent by a user side, whether the user information is bound with a pre-shared key is judged, then when it is determined that the user information is not bound with the pre-shared key, whether an initial key sent by the user side is matched with a first key is judged, and if yes, the pre-shared key is sent to the user side. If yes, registering the first pre-shared key for the user side, and binding the first pre-shared key with the user information, so that the pre-shared key can be registered and authenticated based on the same signal, and the efficiency of user identity authentication is improved.

The embodiment of the invention provides a key management method, a key encryption method, a data encryption method and related equipment, and the key management method is applied to a built-in cryptographic module of a processor, and comprises the steps: receiving a key management request used for requesting to manage a target key, and the key management request comprises key management demand information; the target key is at least used for encrypting an application key, and the application key is a key key for the virtual private network to realize data security transmission; generating a target key ciphertext corresponding to the target key by using the root key; storing the target key ciphertext and the target key identification information in a special memory; the storage content of the special memory is managed by the password module, and when the storage content is used, the storage content is loaded into the secure memory; and returning index information used for indexing the target key ciphertext and the storage position of the target key authentication information. According to the technical scheme provided by the embodiment of the invention, the security of the execution result of the encryption and decryption program can be improved.

The invention relates to the technical field of data transmission, and discloses a secure data transmission system based on cloud computing, which comprises a cloud computing platform, the cloud computing platform is connected with a data encryption module, an access control module, a transmission channel module, a log module, a security audit and log analysis module, a security vulnerability management and repair module and a data transmission module. The method comprises the following steps: detecting, verifying and recording information of a user terminal, an IP (Internet Protocol) and the like, pre-auditing transmission data, performing data transmission work again after a security reply is obtained, adjusting the speed in a transmission process according to the grade of a user, and performing key authentication on the user terminal in the transmission process at regular time, so as to ensure the safety of the user. And after error information is obtained, data transmission is stopped in time, the obtained data is limited, and the data security is protected.

The invention discloses an encryption circuit, an encryption method and a server, and the encryption circuit generates a dynamic encryption key through introducing a physical unclonable function, carries out the secondary encryption of initial encryption data through the key, can effectively improve the identity authentication and access control safety of a to-be-accessed module in the server, and improves the safety of the to-be-accessed module. Different from a traditional static password or secret key authentication mode, the dynamic encryption secret key generated based on the physical unclonable function is unpredictable, unique and difficult to clone, and the secret key does not need to provide a storage space for storage, so that even if a malicious device forges an identity or steals the secret key, the secret key can be stored in the storage space. Effective authentication information cannot be obtained through brute force cracking or phishing attack; besides, the verification process is further enhanced by a mechanism of comparing secondary encryption with reference encrypted data, and only a legal user can access the system, so that access of untrusted equipment is effectively prevented, and the security of the server and the integrity of the system are protected.

The invention relates to the technical field of Internet of Things equipment, particularly provides an Internet of Things equipment security authentication and data encryption transmission system and method, and solves the problems of limited equipment resources and difficult key management. The system comprises an equipment identity authentication component, a key management component and a lightweight encryption component. The method comprises the following steps: authenticating the legal identity of the Internet of Things equipment by adopting a lightweight symmetric key; the authority is dynamically adjusted according to factors such as equipment position, time and network state; the Internet of Things equipment generates and distributes a secret key after passing the access authority authentication; key exchange is carried out between the Internet of Things devices by adopting a key exchange protocol, and local key management is realized at an edge node in combination with edge calculation; and transmitting the data containing the key and the key exchange protocol to the target equipment, encrypting the transmitted data by adopting lightweight encryption and a Hash algorithm during transmission, and preventing a replay attack by using a timestamp and a random number. According to the invention, comprehensive safety protection of the Internet of Things equipment is realized.

The invention discloses an identity verification system based on big data. The identity verification system comprises a data acquisition module, a distributed storage module, a data encryption authentication module, an information input module and a data matching module, the data acquisition module is used for acquiring user identity information and storing the user identity information in the distributed storage module, the information input module is used for receiving user login information, and the data encryption authentication module is used for acquiring the user identity information stored in the distributed storage module according to the login information to perform key authentication; in the data matching module, matching is completed through a secret key and user identity information encryption information, after matching succeeds, the system is logged in by triggering a system switch, and after matching fails, the system is triggered to be closed to refuse login. The method and the device are used for solving the technical problem that in the prior art, in the data collection process, the privacy problem and the replicability of biological characteristics cannot ensure the safety of user identity information data.

The invention relates to the field of cryptology, and discloses a two-factor authentication key negotiation method based on biological characteristics, a user holds double authentication factors, namely a private key authentication factor and a biological characteristic authentication factor, a server holds secret information, and the private key authentication factor and the biological characteristic authentication factor perform mutual authentication and form a shared key, so that the service can be obtained. A user can pass authentication only by holding two authentication factors at the same time, and when an enemy steals one authentication factor or secret information of a server, the enemy cannot disguise that the user passes the authentication of the server; even if an enemy steals the two authentication factors of the user, the enemy cannot be disguised as a server to pass the authentication of the user, so that the authentication threshold is greatly improved, an unauthorized user / server is prevented from abusing the authority of the authorized user, the security is higher, the entropy rate of a biological source is not required, and the authentication efficiency is higher.

There is provided an apparatus, a method, and a computer program. The apparatus is provided with instruction decoding circuitry to decode instructions and processing circuitry to perform a processing operation in response to a decoded instruction. In response to an authentication code generating instruction, the processing circuitry is configured to generate an authentication code associated with an 10 authentication target value. For at least one type of the authentication code generating instruction, the processing circuitry is configured to generate an authentication code, when operating in a first code generation mode, by applying a code generating function to: a key; the authentication target value; a first modifier dependent on a stack pointer, and / or a second modifier dependent on a program counter address; and a further 15 modifier dependent on a further value obtained from an architecturally visible register different from the stack pointer register and the program counter register.

An authentication apparatus (1) generates, when a first condition is satisfied, a biometric key from biometric information of a user by means of a predetermined one-way function. The authentication apparatus (1) acquires an information processing device public key from an information processing device (7), generates an authentication apparatus secret key and an authentication apparatus public key based on the biometric key and random information, and generates a common key based on the authentication apparatus secret key and the information processing device public key, and thereby generate, based on the random information and the common key, identification information for verifying validity of the user. The authentication apparatus (1) instructs the information processing device (7) to verify validity of the user using the identification information, and updates the identification information when a second condition that is different from the first condition is satisfied.

The invention discloses a multi-tenant API key authentication and resource isolation system in a containerized environment, and relates to the field of containerized multi-tenant authentication. Comprising an authentication authorization layer, a resource management and control layer and a security isolation layer. The authentication authorization layer comprises a multi-tenant authentication engine, an API key verification sub-module, a tenant identity recognition sub-module, an authority cascade verification sub-module and a dynamic authority calculation sub-module. And the resource management and control layer comprises a resource quota manager, a dynamic quota allocation sub-module, a real-time use monitoring sub-module, a threshold alarm control sub-module and an elastic capacity expansion and contraction sub-module. The security isolation layer comprises a multi-dimensional isolation engine, a container network isolation sub-module, a storage space isolation sub-module, a process permission isolation sub-module and a system call filtering sub-module; deep fusion of API authentication and container resource control is realized, a dynamic resource quota management mechanism based on tenant identities is established, and fine-grained API authority control and resource use limitation are provided.

Disclosed herein is a method including identifying a first key seed for an external key; generating a second key seed from a first instance of first data from a first source; computing a mapping function between the first key seed and the second key seed, where the mapping function is stored and the first key seed and second key seed are discarded; generating a third key seed from a second instance of second data from a second source; applying the mapping function to the third key seed to generate a fourth key seed; and regenerating the external key using the fourth key seed.

The invention provides a method and a system for periodically maintaining and upgrading satellite security software. The method comprises the following steps of: S1, configuring a satellite-borne simulation system; s2, a satellite state assembly receives and responds to a remote control instruction injected on the ground, simulates the satellite working state and simulates the satellite temperature change; s3, the access authentication component checks the remote control instruction accessed to the satellite-borne simulation system, and verifies the remote control data packet through random key authentication and cyclic redundancy check; s4, setting test time, regularly testing the security software, summarizing test results, and updating the test results to a database so as to evaluate whether the security software works normally or not; and S5, upgrading the security software, notifying the ground through telemetry information after the upgrading is successful, testing the upgraded security software, and finally mapping the upgraded software into a real environment. According to the method, the security software cannot be interrupted during upgrading, and the security of the satellite software during upgrading can be ensured.

The invention relates to a real-time authentication message design and terminal authentication method of a satellite navigation system. According to the method, a real-time authentication data packet structure is set, the data packet is composed of slow authentication data and fast authentication data, the slow authentication executes first key authentication, and the fast authentication realizes telegraph text authentication. The message digest of the message information is additionally broadcasted in each authentication period, the message belongs to the fast authentication period where the key is broadcasted in a delayed mode, real-time message authentication is achieved at the cost of message overhead, and the requirement of a navigation user for real-time authentication under the scenes of an unmanned aerial vehicle, an unmanned vehicle and the like is met.

The embodiment of the invention provides a dynamic encryption verification method and device based on a time network protocol, and the method comprises the steps: collecting historical encryption verification data, carrying out the iteration number label adding operation of the historical encryption verification data, inputting a key encryption algorithm iteration number label into a preset random forest model, and carrying out the model training, according to the model prediction result after model training and a preset feature importance analysis algorithm, determining corresponding important encryption verification features, performing model training on the random forest model according to the important encryption verification features, and determining a corresponding key encryption algorithm iteration model; determining a corresponding number of iterations of the key encryption algorithm according to the network state and a key encryption algorithm iteration model; the decoding data and the number of iterations of the key encryption algorithm are input into a preset key encryption algorithm, a corresponding key pair is determined, and time synchronization between the user side and the server side is achieved according to the key pair, so that the reliability and efficiency of time network protocol key authentication can be improved.

The invention relates to an unmanned aerial vehicle uplink anti-forwarding interference method, and belongs to the technical field of unmanned aerial vehicle measurement and control communication anti-interference. Comprising the following steps: constructing a signal source module, performing BPSK modulation on a generated random binary sequence, and adding a serial number at a data frame header to distinguish a data instruction sending sequence; the method comprises the following steps: constructing a channel 1 to transmit an information source signal, constructing a channel 2 to introduce forwarding interference, constructing a receiver to filter and demodulate the received signal, and then executing an instruction contained in the signal; an anti-forwarding interference module is constructed and comprises a serial number judgment module, a secret key authentication module, a secret key replacement module and an instruction serial number judgment module, an instruction frame header serial number is compared at an execution end to determine whether the instruction frame header serial number is a forwarding signal, the problem that an unmanned aerial vehicle airborne end repeatedly executes ground instructions is solved, and the instruction serial number is recycled within a certain digit; and the key is replaced once after each cycle is ended. According to the invention, the bit error rate of information transmission can be reduced, and the anti-interference capability of an unmanned aerial vehicle measurement and control link is improved.

The invention relates to the technical field of artificial intelligence, and particularly provides a method and device for security management of a privatized deployment large language model, and the method comprises the following steps: S1, user registration and API Key distribution; s2, authentication of the API Key is carried out; s3, limiting the access frequency; s4, performing priority scheduling; s5, interface standardization; and S6, recording an audit log. Compared with the prior art, access control, resource scheduling, audit log and interface standardization functions can be integrated, and the security and management efficiency of the system are improved.

This application provides a key authentication method and apparatus, an electronic device, and a storage medium. The key authentication method provided in this application includes: determining user information based on a key authentication request sent by a user end, where the key authentication request includes the user information and an initial key; determining whether the initial key matches a first key, where the first key is used to determine whether the user end has a registration need for a pre-shared key; and when the initial key matches the first key, registering the first pre-shared key for the user end and binding the first pre-shared key to the user information.

To provide a vehicle control system and a control method for the vehicle control system that suppress the occurrence of problems that may occur when updating a program.SOLUTION: A vehicle control system 1 includes a key authentication ECU 50 that acquires a key ID through wireless communication with a portable device 5 and controls locking and unlocking of a vehicle 3 based on the acquired key ID, an image authentication ECU 60 that acquires a facial feature quantity based on an image captured by a camera 65 and controls locking and unlocking of the vehicle 3 based on the acquired facial feature quantity, and a central ECU 10 that includes a determination unit 137 that determines whether to permit an update of a second program executed by the image authentication ECU 60 based on the communication status between the key authentication ECU 5 and the portable device 5.SELECTED DRAWING: Figure 1

The vehicle control system includes a key authentication ECU, an image authentication ECU, and a central ECU that performs a first operation when update processing that updates a program to be executed by the image authentication ECU fails and if communication between the key authentication ECU and the mobile device is communication-enabled and performs a second operation when the update processing fails and if communication between the key authentication ECU and the mobile device is communication-disabled, the second operation being different from the first operation.

The embodiment of the application provides a kind of based on pre-shared key authentication method, device and equipment, in the above-mentioned pre-shared key authentication method, device sends key acquisition request to first server, then receives the ciphertext of pre-shared key sent by first server, then the ciphertext of pre-shared key is decrypted, the plaintext of pre-shared key is obtained, and then according to the plaintext of pre-shared key, identity authentication or encryption and decryption service is carried out with second server, so that it can be realized by one first server with security authentication and authentication mechanism to store the ciphertext of pre-shared key encrypted by the key of equipment side, so that the security of pre-shared key is greatly improved, and in the above-mentioned method, key and ciphertext are separated, and first server does not have decryption capability (because first server does not have decryption key), so that the risk of pre-shared key leakage in first server end can be avoided.

The invention discloses an authentication method and device, equipment and a storage medium, and relates to the field of wireless communication. The method is executed by an STA and an AP, and comprises the steps that an authentication frame is transmitted between the STA and the AP to execute an authentication process, and a field in the authentication frame indicates that identity authentication is executed by adopting at least one of the following authentication modes: an extended PASN supporting FILS shared key authentication with complete forward secrecy, an extended PASN supporting FILS public key authentication and an extended PASN supporting 802.1 X authentication. And using the PTK generated in the authentication process to protect a message in the STA and AP association establishment process, wherein the message comprises at least one of an association request message, a response message, a four-way handshake message and a group key handshake message. After the association is established, data communication is carried out by using the PTK generated in the authentication process; or, creating a new PTK after the association is established, and performing data communication by using a new PTS.

The present disclosure provides a digital key system for a vehicle (100), comprising a digital key management server (200), and a vehicle (100). The vehicle (100) can be configured to send a digital key authentication request to the digital key management server (200) based on the fact that a user terminal (300) is within a threshold distance of the vehicle (100). The digital key management server (200) can be configured to send the digital key authentication request to the user terminal (300).The digital key authentication request can cause the user terminal (300) to authenticate the user based on the digital key authentication request and the user's biometric identification information, and to send an authentication response to the digital key management server (200) indicating the authentication result. The digital key management server (200) can also be configured to send the authentication response to the vehicle (100). The vehicle (100) can further be configured to perform an action based on the authentication response.

Provided are a digital key sharing method, a digital key authentication method, and a computing device. The digital key sharing method is executed by a first device and includes: sending to a second device a digital key creation request that includes valid space information for a digital key, so as to generate the digital key at the second device; receiving a digital key signature request from the second device, wherein the digital key signature request includes data to be signed of the digital key, and said data includes the valid space information; and on the basis that the signing of the digital key signature request is completed, sending a digital key import request to the second device, so as to indicate the second device to save the generated digital key. Therefore, the security of a digital key can be improved in a spatial dimension.

An apparatus and method configured for two-step cross-security-domain cloud-based privacy-aware key attestation where a root security domain, factory-provisioned with a root-of-trust device key, generates a random key signing key upon device initialization. An application, executing in a rich execution environment, generates an application key pair within a secondary security domain. The secondary security domain obtains a local key attestation from the root security domain, where the local key attestation is signed with the key signing key and returns the local key attestation to the application. When key attestation from a cloud attestation service is desired, the root security domain validates the local key attestation, generates a corresponding device key attestation signed with the device key, and sends the device key attestation to a cloud attestation service. The cloud attestation service verifies the device key attestation and returns a corresponding cloud key attestation signed with a certified cloud attestation key.

The present invention relates to the technical field of power data protection, and discloses a data communication system for distribution network protection based on the SM1 national cryptographic algorithm. An identity authentication protocol request is sent to a security machine through an identity library switch, and a reply protocol for responding to the identity authentication protocol request from the security machine is received. It is verified whether the reply protocol is correct. If the verification of the reply protocol is correct, the communication blocking states between the external distribution network protection device and the encryption switch are respectively released, so as to obtain the service data in the external distribution network protection device. An identity key authentication is also performed with the encryption switch through the SM1 national cryptographic algorithm. If the authentication is successful, the service data is forwarded to the encryption switch, and the MAC of the protection terminal is bound through the encryption switch, excluding the possibility of illegal devices accessing the authenticated encryption switch, thereby improving the identity authentication security performance of the communication system, reducing the difficulty of deployment, installation and maintenance, and at the same time, improving the security of data communication transmission.

A vehicle control system includes a key authentication ECU, an image authentication ECU, a door lock mechanism that locks a door of a vehicle, a touch panel that receives an operation; and a central ECU that causes a touch panel mounted in the vehicle to display a second setting screen that receives a setting of execution allowance for a program update for the image authentication ECU and a setting of necessity of locking of the vehicle after alighting in a case where a communication state between the key authentication ECU and a mobile device is communication-disabled and an update program for updating a program being executed by the image authentication ECU is acquired and that controls the image authentication ECU and the lock mechanism in accordance with a setting received on the second setting screen.

This invention discloses a method and system for updating the root key when a device terminal switches communication networks. The method includes: a root key generation and storage device pre-stores an initial root key ciphertext in the quantum-safe device terminal; when the quantum-safe device terminal first connects to a communication network (i.e., connects to a first communication network), it performs root key authentication with the first network communication device, and encrypted communication can be established after successful authentication; when the quantum-safe device terminal changes its access network (i.e., connects to a second communication network), it needs to perform identity authentication and update the initial root key to obtain a root key usable in the second communication network. Based on the pre-stored root key ciphertext, this invention updates the original root key when the terminal deregisters from one communication network and connects to another independent communication network, enabling the terminal to complete network switching and subsequent encrypted communication without returning to the factory, significantly improving the flexibility and availability of the device.

The embodiment of the invention discloses an enterprise user information security authentication system based on cloud service. The system comprises a key authentication unit and an IP authentication unit, wherein the key authentication unit comprises at least two of an account password authentication unit, a dynamic verification code authentication unit, a dynamic password authentication unit, a biological recognition authentication unit and an SSH authentication unit; and the user access authentication unit is used for verifying the access IP corresponding to the data access request, determining the risk level of the access IP according to the verification result, and selecting the authentication unit in the key authentication unit to authenticate the access terminal corresponding to the access IP according to the risk level of the access IP. According to the embodiment of the invention, the risk level of the access terminal is determined according to the IP authentication unit, different types and numbers of authentication units are selected from the key authentication unit according to different risk levels to authenticate the access terminal, and the access terminal can access the data stored in the cloud server only after the authentication is passed. Therefore, the security of the data is ensured.

Provided is a method for authentication. The method is applicable to a station (STA), the method including: performing an authentication process by transmitting authentication frames between the STA and an access point (AP), wherein a first field in the authentication frame indicates that at least one of the following authentication modes is used: extended pre-association security negotiation (PASN) supporting fast initial link setup (FILS) shared key authentication with perfect forward security, extended PASN supporting FILS public key authentication, or extended PASN supporting 802.1X authentication.