38 results about "Key authentication" patented technology

This application provides a key authentication method and apparatus, an electronic device, and a storage medium. The key authentication method provided in this application includes: determining user information based on a key authentication request sent by a user end, where the key authentication request includes the user information and an initial key; determining whether the initial key matches a first key, where the first key is used to determine whether the user end has a registration need for a pre-shared key; and when the initial key matches the first key, registering the first pre-shared key for the user end and binding the first pre-shared key to the user information.

The present disclosure provides a digital key system for a vehicle (100), comprising a digital key management server (200), and a vehicle (100). The vehicle (100) can be configured to send a digital key authentication request to the digital key management server (200) based on the fact that a user terminal (300) is within a threshold distance of the vehicle (100). The digital key management server (200) can be configured to send the digital key authentication request to the user terminal (300).The digital key authentication request can cause the user terminal (300) to authenticate the user based on the digital key authentication request and the user's biometric identification information, and to send an authentication response to the digital key management server (200) indicating the authentication result. The digital key management server (200) can also be configured to send the authentication response to the vehicle (100). The vehicle (100) can further be configured to perform an action based on the authentication response.

This invention discloses a method and system for updating the root key when a device terminal switches communication networks. The method includes: a root key generation and storage device pre-stores an initial root key ciphertext in the quantum-safe device terminal; when the quantum-safe device terminal first connects to a communication network (i.e., connects to a first communication network), it performs root key authentication with the first network communication device, and encrypted communication can be established after successful authentication; when the quantum-safe device terminal changes its access network (i.e., connects to a second communication network), it needs to perform identity authentication and update the initial root key to obtain a root key usable in the second communication network. Based on the pre-stored root key ciphertext, this invention updates the original root key when the terminal deregisters from one communication network and connects to another independent communication network, enabling the terminal to complete network switching and subsequent encrypted communication without returning to the factory, significantly improving the flexibility and availability of the device.

The present disclosure provides a vehicle digital key system including a digital key management server and a vehicle. The vehicle may be configured to transmit, to the digital key management server and based on a user terminal being located within a threshold distance from the vehicle, a digital key authentication request. The digital key management server may be configured to transmit, to the user terminal, the digital key authentication request. The digital key authentication request may cause the user terminal to perform, based on the digital key authentication request and based on biometric identification information of a user, authentication of the user; and transmit, to the digital key management server, an authentication response. The digital key management server may be further configured to transmit, to the vehicle, the authentication response. The vehicle may be further configured to perform an operation of the vehicle.

The application provides a digital key security authentication method, comprising: a second device sends authentication request information to a first device, and the first device obtains a first data packet according to the authentication request information and sends the first data packet to the second device. The second device decrypts first encrypted data, obtains first authentication information, and compares the first authentication information with stored first authentication information; the second device generates a second data packet and sends the second data packet to the first device. The first device decrypts second encrypted data, obtains second authentication information, compares the second authentication information with stored second authentication information, and sends a third data packet to the second device. The second device decrypts third encrypted data, obtains third authentication information, compares the third authentication information with stored third authentication information, and if the results are consistent, authentication is successful, a success notification request information is generated and sent to the first device; the first device accepts the success notification request information, generates a success notification reply information, and sends the success notification reply information to the second device. Thus, the security of digital key authentication is improved.

Embodiments of the present application provide a key management method, a key encryption method, a data encryption method and related devices, wherein the key management method is applied to a password module built in a processor, and includes: receiving a key management request for requesting management of a target key, the key management request including key management requirement information; the target key being used at least for encrypting an application key, the application key being a key for implementing data secure transmission of a virtual private network; generating target key ciphertext corresponding to the target key by using a root key; saving the target key ciphertext and target key authentication information into a special storage; the storage content of the special storage being managed by the password module, and when the storage content is used, the storage content is loaded into a secure memory; and returning index information for indexing the saving position of the target key ciphertext and the target key authentication information. The technical solution provided by the embodiments of the present application can improve the security of the execution result of the encryption and decryption program.

The invention discloses an Internet of Vehicles authentication method based on a block chain and a physical unclonable function, and relates to the field of data security, and the method comprises the steps: a vehicle and a communication object complete registration at a roadside base station, and a vehicle end integrates a PUF and a fuzzy extractor to generate a master key bound with equipment; during authentication, the vehicle uses the password, the biological characteristics and the PUF response to perform multi-factor authentication, and submits a Merkle proof of a target communication object to the roadside base station; and the roadside base station verifies the proof and confirms the access authority through the block chain smart contract, and assists the vehicle and the communication object to complete mutual authentication and negotiate the session key. According to the method, the block chain is utilized to ensure that data cannot be tampered, equipment cloning is resisted through the PUF, efficient authorization control is realized in combination with the Merkle tree, pseudo name dynamic updating and identity revocation are supported, and finally, the calculation, communication and storage overhead is remarkably reduced while the security is ensured.

The invention discloses a vehicle and an encryption authentication method thereof. The method comprises the following steps: under the condition of determining that a digital key is valid, sending an encryption authentication instruction, so that a near field communication module of the digital key receives the encryption authentication instruction and generates an authentication response message according to the encryption authentication instruction; receiving an authentication response message, and under the condition that the authentication response message comprises the first random plaintext data and the first reference encrypted data, performing encryption processing on the first random plaintext data based on a preset encryption algorithm to determine first target encrypted data; and under the condition that the first target encrypted data is consistent with the first reference encrypted data, it is determined that digital key authentication succeeds, and under the condition that digital key authentication succeeds, the vehicle is controlled to be started. Thus, the starting operation of the digital key function without legal authentication is forbidden through secondary verification, the vehicle anti-theft function is achieved, user participation is not needed in the whole anti-theft authentication process, and the authentication process is invisible to a user.

A code privacy-preserving inference method and apparatus based on model segmentation and random activation, wherein the method includes the following steps: Step 1, segmenting the original code audit model into an original client and a server; Step 2, expanding the feedforward neural network of the Transformer block inside the original client to generate a pseudo client; Step 3, establishing a key authentication mechanism on the pseudo client; if key authentication is successful, the expanded neuron part automatically does not participate in the processing of input data, and the pseudo client automatically transforms into a client; if key authentication fails, the pseudo client randomly activates the expanded neuron part according to a random activation strategy; Step 4, establishing an encrypted channel connection mechanism between the pseudo client and the server. This invention can greatly defend against member inference attacks and inversion reconstruction attacks, while not affecting the model performance during normal user use.

This application provides a method, apparatus, device, medium, and program for multi-device collaborative identity authentication. The method includes: receiving an identity authentication request for a target user sent by an authentication server; generating data to be signed based on the identity authentication request; digitally signing the data to be signed using a local first private key component to obtain a first signature component; receiving a second signature component, which is obtained by a second authentication device digitally signing the data to be signed using a local second private key component; combining the first and second signature components to obtain complete signature data; sending an identity authentication response containing the complete signature data to the authentication server, instructing the authentication server to verify the complete signature data using the target public key, obtaining a signature verification result, and determining the identity authentication result of the target user based on the signature verification result. This application can solve the problem that some devices cannot independently authenticate user identities based on a passkey authentication mode.

The application of the invention is a divisional application of 202280098715.8. The invention also discloses a method for The invention discloses an authentication method and device, equipment and a storage medium, and relates to the field of wireless communication. The method is executed by an STA and an AP, and comprises the steps that an authentication frame is transmitted between the STA and the AP to execute an authentication process, and a field in the authentication frame indicates that identity authentication is executed by adopting at least one of the following authentication modes: an extended PASN supporting FILS shared key authentication with complete forward secrecy, an extended PASN supporting FILS public key authentication and an extended PASN supporting 802.1 X authentication. And using the PTK generated in the authentication process to protect messages in the STA and AP association establishment process. After the association is established, data communication is carried out by using the PTK generated in the authentication process; or, creating a new PTK after the association is established, and performing data communication by using a new PTS.

Operations of a digital signature manager may include: detecting a set of one or more new certificate authority (CA) certificates in a certificate repository on a first virtual cloud network; transmitting a CA data set comprising a set of one or more new CA certificates to a key management service hosted on a second virtual cloud network; receiving, from the key management service, a digital signature of a CA dataset generated based on at least a global private key stored in a private key repository associated with the key management service on the second virtual cloud network; and storing the digital signature in a certificate repository in a data structure associating the digital signature with the CA data set.

A communication system is disclosed. The communication system includes: a network device including a plurality of communication ports; and a plurality of communication nodes coupled to the network device through the plurality of communication ports. The communication system further includes a controller configured to generate a security key and to send a new configuration along with a message authentication code to the network device. The controller is further configured to divide the security key into portions and send portions of the security key to at least some of the plurality of communication nodes, such that each of the at least some of the plurality of communication nodes receives one portion of the security key. The network device is configured to retrieve portions of the security key from the at least some of the plurality of communication nodes, and is configured to combine the retrieved portions of the security key into a new security key, and to authenticate the new configuration using the combined security key.

Various examples are disclosed for an authentication model for user sessions utilizing a digital key incorporating metadata identifying device location and network conditions. Upon user authentication of a session, a digital key can be generated that incorporates information about the location and network conditions of a device, which can be utilized to grant conditional access to resources.

The invention discloses a block chain digital asset transaction security verification method and device based on cross-dimensional biometric key right confirmation, and the method comprises the steps: constructing a feature set and a unique identification code based on a fingerprint ridge key and a facial feature key, carrying out the cross-dimensional fusion to form a biometric key reference vector, and calculating a hash value of an encrypted ciphertext; constructing a key retrieval voucher, and registering and storing the key retrieval voucher together with the unique identification code; when a user initiates a block chain digital asset transaction request, a to-be-verified biological key reference vector is generated based on a user fingerprint ridge key and a facial feature key, validity verification of hash and key feature right verification is performed in combination with a unique identification code and transaction information, and early warning is performed based on user verification frequency. And the safe and credible node performs secondary verification on the early warning. According to the method, a decentralized security verification system is constructed, safer, more reliable and more efficient security verification in block chain digital asset transactions is realized, and the credibility and security of the transactions are improved.

This invention relates to vehicles and vehicle control methods. According to one embodiment, a vehicle is provided, comprising an authentication controller and a processor. The authentication controller is configured to output an FOB key authentication request when a FOB key approaches. The processor is configured to, in response to the FOB key authentication request, send an FOB key search command to an antenna and output a ping signal control command to a wireless charging device to control the output of a ping signal. The FOB key search command includes FOB key search commands for a first area where a wireless charging pad is located and for areas other than the first area. Furthermore, the output period of the ping signal controlled according to the ping signal control command does not overlap with the FOB key search period for the first area.

The invention relates to the technical field of fault diagnosis, and discloses a multi-mode activation and reset method and system for a diagnostic code reader. The method comprises the following steps: performing protocol type identification on an ECU response frame and reading a VIN code sequence; performing seed key authentication based on the VIN code sequence, and returning a programming session state flag; selecting an on-line programming mode or an off-line programming mode, executing Flash writing, and returning a programming completion mark; activating the TPMS sensor based on the programming completion mark, writing the TPMS sensor into the ID mapping table, and returning a writing confirmation mark of the ID mapping table; and clearing the fault code according to the write confirmation mark, resetting the throttle learning value and the clutch pressure calibration table, executing ECU hard resetting, and returning a resetting completion mark. According to the method, ECU damage caused by flashing failure can be effectively prevented, different maintenance scene requirements are met through four modes of OBD copying, activation copying, automatic creation and manual creation, and accurate positioning of the sensor wheel position is achieved.

The application discloses a Bluetooth key symmetric key authentication method and system, which comprises the following steps: initiating Bluetooth automatic pairing to a TBox, checking pairing by the TBox; sending a LEAF type check key to the TBox, and comparing the LEAF key with a ROOT key saved by the TBox; initiating a seed application to the TBox, generating an encrypted seed when the TBox receives the application, and returning the seed; performing MD5 on the seed+VIN+date by the TBox, and obtaining a 32-bit string used as an encrypted key of a control instruction; checking the encrypted key; encrypting the control instruction by using the encrypted key, and outputting the ciphertext to the TBox; decrypting the control instruction by using the encrypted key after the TBox receives the ciphertext control instruction, and executing the control instruction; and encrypting the execution result by the TBox, and returning the execution result. The technical scheme of the application establishes a Bluetooth interaction scheme between a mobile phone APP (mobile phone) and a TBox (a TBox provided with a Bluetooth key device), and the whole scheme adopts a symmetric encryption system, so that the information safety is ensured, and the rapidity of instruction response is considered.

The application provides a security authentication method of a communication device, comprising the following steps: after receiving a security authentication instruction, a main management board executes first key authentication by using a first encrypting device and a first controller; if the first key authentication is passed and a second key authentication passed flag uploaded to the main management board by a target service board is received, the main management board and the target service board perform third key authentication; if the third key authentication is passed, the main management board instructs the target service board to open a plurality of service permissions. The application can improve the security of the main management board and the service board in the communication device, strengthen the coupling authentication management between the main management board and the service board, reduce the risk of key leakage, improve the communication security of the main management board, and further improve the overall communication security of the communication device. The application also provides a security authentication system of a communication device, a computer readable storage medium and a communication device, which have the above beneficial effects.

This invention discloses a virtual server-side distributed key authentication system and method, relating to the field of device authentication security technology. It includes: a client, a server, a first encryption module, and an external terminal device. The client is used to generate a first key parameter participating in the generation of a collaborative key. The server is used to generate a second key parameter participating in the generation of the collaborative key. The first encryption module is used to calculate and encrypt the first and second key parameters to obtain a first ciphertext. The external terminal device is used to receive and decrypt the first ciphertext, simultaneously generate the collaborative key, and encrypt the data to obtain encrypted data. This invention employs a key-based security authentication method based on the collaboration of an external terminal device, a client APP, and a server, improving the security and effectiveness of communication; preventing key tampering and unauthorized login; and ensuring the secure transmission and storage of data.

Various examples are disclosed for an authentication model for user sessions utilizing a digital key incorporating metadata identifying device location and network conditions. Upon user authentication of a session, a digital key can be generated that incorporates information about the location and network conditions of a device, which can be utilized to grant conditional access to resources.

The invention discloses a root key acquisition method and device, and a storage medium. The method comprises the following steps: a quantum security device terminal initiates a registration request to a root key center; the root key center locally generates a root key file corresponding to the hardware code ID, generates a root key issuing file DOC based on the root key file, and sends the root key issuing file DOC to the quantum security equipment terminal; the quantum security device terminal receives the root key issuing file DOC and performs data authentication, after the data authentication is passed, the quantum security device terminal generates a root key authentication request and initiates root key authentication to the root key center, and after the root key authentication is passed, the quantum security device terminal persistently stores the root key. According to the method, the hardware code ID of the quantum security equipment terminal is bound with the root key, and the corresponding root key file is locally generated in the root key center, so that the uniqueness of the root key and the equipment relevance are ensured from the source, and the key is effectively prevented from being illegally copied or falsely used.

The application relates to a secure data collection method based on entity key authentication and session key encryption. Based on the embodiment of the application, the application carries out bidirectional key authentication between two application ends through an entity-based bidirectional key authentication and session key encryption technology, and proposes a data collection method for data encryption based on the secure authentication method of entity key authentication and session key encryption. The data collection method can be used for the secure data collection of automatic driving and high-precision maps of intelligent networked vehicles, and can be used for offline data collection and online data collection. Compared with the existing offline data collection method, the offline data collection method of the application has high security and does not need to rely on the physical security mechanism of data collection personnel. Compared with the existing offline data collection method, the online data collection method of the application does not need to use a special person to transfer a storage device, has small investment, good real-time performance and high security.

This invention discloses a physical layer key generation and distribution method based on WFRFT subcarrier indexing, belonging to the field of physical layer secure communication. This invention solves the problem of key vulnerability in traditional subcarrier index-based key generation and distribution methods. It utilizes the WFRFT communication system to enhance the concealment of subcarrier activation states by adjusting the WFRFT transform parameters to change the energy distribution of the WFRFT system in the time-frequency plane. Through energy redistribution, the energy distribution in the time-frequency plane of the WFRFT system tends to be uniform, making the signal exhibit Gaussian characteristics, thereby obtaining a more concealed subcarrier energy distribution pattern. This effectively solves the problem of vulnerability in traditional subcarrier index-based key generation and distribution methods. Simultaneously, the WFRFT system has better resistance to channel distortion than traditional OFDM systems, improving key authentication success rate without sacrificing key rate. This invention can be applied to the field of physical layer secure communication.

The application relates to the technical field of computer security, and discloses a two-factor authentication method and system, which is based on a two-factor authentication technology of biological information and homomorphic encryption. In the method, a public key encryption scheme of homomorphic encryption and a hash function with a robust reserved predicate relation are used to realize an authentication process, and the method has the ability to resist replay attacks and tolerate an adversary obtaining a database. Specifically, the method uses a random number generated by a server to resist replay attacks, and uses two-factor authentication of a biological authentication factor and a private key authentication factor to tolerate an adversary obtaining the database of the server. Meanwhile, the method uses the hash function with the robust reserved predicate relation to protect biological feature information of a user, and uses the public key encryption scheme of homomorphic encryption to protect private key information of the user. The application significantly improves the security and efficiency of authentication, and can better meet the needs of users.

The application provides a wafer information encryption authentication method and system, a server and a storage medium, and the method comprises the following steps: acquiring the encoding information of a wafer to be authenticated; according to the encoding information of the wafer to be authenticated, finding out the PUF image corresponding to the PUF pattern matrix on the wafer from a pre-created PUF database; acquiring the preset area image on the wafer to be authenticated, wherein the preset area is the area where the PUF pattern matrix is located; matching the PUF image with the preset area image; if the matching is successful, performing key authentication; if the key authentication is passed, finding out the corresponding wafer information from the PUF database. By using the PUF image with randomness, unpredictability, unclonability and strong tamper resistance as the "fingerprint" of wafer identity authentication, the encryption capability of wafer information can be effectively improved.

The invention relates to a configuration information writing method and device of a vehicle, electronic equipment and a storage medium, and the method comprises the steps: obtaining a service request corresponding to the vehicle, carrying out the key authentication according to the service request, obtaining a verification result, and when the verification result is a verification passing result, writing the configuration information of the vehicle. Extracting a target fingerprint field parameter from the write-in configuration information corresponding to the vehicle, comparing the target fingerprint field parameter with a preset fingerprint field parameter corresponding to the vehicle to obtain a fingerprint field comparison result, and then performing write-in operation based on the fingerprint field comparison result in combination with the write-in configuration information. Therefore, fingerprint field comparison can be realized before the configuration information write-in operation, the problem of low vehicle configuration information write-in security in the prior art is solved, and the configuration information write-in security can be effectively improved.

Systems, methods, and non-transitory machine-readable media for configuring a device remote monitoring and for detecting railcar events are disclosed. In one or more example embodiments, a device for detecting railcar events includes a controller having one or more processors, a data array, an accelerometer, and memory storing executable instructions that, when executed by the one or more processors, cause the controller receive, from a server, a cryptographic authentication key, determine an electronic mailbox associated with a device configuration for the device, obtain, based on periodically checking the electronic mailbox, the device configuration, authenticate; using the cryptographic authentication key, the device configuration; and perform, based on the device configuration, an update to the device.

This invention discloses an intelligent device encrypted scheduling system and method based on AI dynamic decision-making. The method includes: a multi-layered AI intent understanding engine converting user input into structured intents using a cloud-based large language model, a local small language model, and an automatic degradation link based on rule matching; generating a plan through dynamic planning; and then encrypting and encapsulating the plan using a private encryption protocol stack with a device-unique identifier-derived key before execution and feedback optimization. An independent cloud authorization server performs dual authentication for access control operations using asymmetric signatures and an encryption layer, generating a time-sensitive temporary token. The system possesses self-healing capabilities, automatically diagnosing, repairing, and rolling back according to a security classification strategy. This invention integrates three layers of AI semantic understanding, a private encryption protocol, dual signatures, and a universal software control adapter, solving the problems of weak understanding capabilities, poor security, and rigid logic in existing solutions. It is applicable to scenarios such as smart homes, hotel access control, commercial offices, connected vehicles, and smart agriculture.

The application belongs to the technical field of automobile control, and discloses a vehicle key authentication method based on multiple intelligent key authentication categories, which comprises the following steps: S11: presetting a key authentication type and authentication priorities, authentication required time and maximum time capable of being accepted for waiting of the key authentication type; S12: presetting a key authentication team storage unit, arranging key authentication requirements in the key authentication team storage unit in sequence, and updating a key authentication requirement team in real time; and S13: selecting a key authentication process according to the updated key authentication requirement team, and performing key authentication on the key authentication requirements in sequence according to the authentication priorities. The application can effectively complete key authentication, avoid the problem that when key authentication is continuously triggered, only the principle of later triggering is adopted to cause some functional abnormalities of the vehicle, and improve the safety, usability and intelligence of the vehicle.