13 results about "Login session" patented technology

The invention provides a session data processing method, a session system, electronic equipment and a program product, and the method comprises the steps: generating a first equipment session comprising a first session identifier, a first equipment token and a first session object when a first non-login session request sent by a client on first equipment is received; transmitting the first session identifier and the first equipment token to the client, receiving a first login request sent by the client, generating a first user session comprising the first user token and first client login information, binding a user identifier of a target user with a first session object, and sending the first session object to the client; and storing the first client login information in the first session object, and transmitting the first user token to the client, thereby realizing a parallel support capability of simultaneously supporting an anonymous session (i.e., a first device session) and an authentication session (i.e., a first user session), and allowing a target user to carry out authentication according to actual demands. And the client is operated in a non-login state or a login state flexibly.

An illustrative system includes a processor configured to: determine that a first user login session and a second user login session have a parent-child relationship that indicates that a particular user is associated with both the first and second user login sessions; link first user login activity performed during the first user login session and second user login activity performed during the second user login session to the user; and identify, at least in part by using an ssh lineage table, an original login session associated with a subsequent chain of login sessions; and a memory coupled to the processor and configured to provide the processor with instructions.

The invention discloses a data transmission method and device, electronic equipment and a storage medium. Comprising the following steps: in response to a login request which is initiated by a client and is successfully verified, creating a login session, and generating a corresponding dynamic symmetric key and corresponding first time information; constructing a digital envelope corresponding to the dynamic symmetric key based on the dynamic symmetric key and the first time information, generating a digital signature corresponding to the digital envelope based on a preset private key, and transmitting the digital envelope and the digital signature to the client, the client extracts the dynamic symmetric key based on the digital envelope and the digital signature to encrypt the target service data and construct a service request; and verifying the service request according to a preset service verification rule, if verification succeeds, updating the first time information of the dynamic symmetric key into second time information, repackaging the dynamic symmetric key with the updated second time information into a digital envelope, signing the digital envelope, and feeding back the digital envelope to the client for subsequent data transmission. And the data transmission security is improved.

The present disclosure provides an implementation method and device for audit playback of a bastion host, wherein the method comprises: obtaining a pseudo login shell script for calling screen recording software; configuring a user login session to be bound to the pseudo login shell script; and automatically creating a directory and recording a monitoring record file through the pseudo login shell script. The present disclosure can highly restore the user operation site, ensure the integrity of each file and record, and improve the flexibility of file organization mode and the positioning efficiency.

The invention discloses a bidirectional identity authentication method and system for a client and a lower computer, and relates to the technical field of user identity authentication. The bidirectional identity authentication method comprises the following steps: a client generates a first challenge code, derives a temporary key based on a current timestamp and a public identifier of a lower computer, and encrypts an authentication data block comprising user authentication data and the first challenge code by using the temporary key; and the lower computer receives the authentication data block, verifies the validity of the timestamp and decrypts the data, and then generates a response value based on the hardware unique identifier and the local secret key. And meanwhile, generating a second challenge code, and returning the response value and the second challenge code to the client. And the client verifies whether the response value is matched with an expected response. And if so, encrypting the second challenge code by using the temporary key to generate a confirmation signal, and sending the confirmation signal to the lower computer. And the lower computer decrypts the confirmation signal and verifies the consistency of the decrypted data and the second challenge code. And if the verification is passed, opening the login session and destroying the temporary key.

A system and method for detection and prevention of ticket forgery cyberattacks by improving host-level analytics and monitoring and extending the improved host-level analytics and monitoring to endpoints of a network. The methodology described herein comprises the use of a ticket-granting log extension utility which stores every logon session on a network, queries the local ticket cache, and generates additional custom data as a part of an event log stream such as a start time, end time, renew time, and related session data. This comprehensive log extension data can be used to identify certain types of ticket forgery cyberattacks by comparing the user session name with the client name identified in the ticket presented for access to network resources and other means. This host-level ticket forgery detection can be extended to network endpoints for additional security.

A method includes receiving a request from a data requester device by a server system to retrieve sensitive data associated with a customer. Decryption of the sensitive data can require a composite decryption key specific for the encrypted sensitive data. The method can include retrieving the encrypted sensitive data, a login session identifier associated with the encrypted sensitive data, at least one attribute associated with the data requester, and a decryption algorithm. The login session identifier, the at least one attribute associated with the data requester, and the decryption algorithm are required for generating the composite decryption key for decrypting the encrypted sensitive data. The method includes generating the composite decryption key and decrypting the encrypted sensitive data by the server system based on the composite decryption key. The method can include providing the decrypted sensitive data to the data requester device to be revealed.

An authentication screen, which prevents access to at least one application via the computer device, can be displayed on a computer device's screen. The computer device can scan a physical medium located externally and independently of the computer device to capture challenge data for a user from the physical medium, and the computer device can capture response data from the user. Upon a successful match between the challenge data and the response data, the authentication screen can be removed from the screen, and access to the at least one application can be granted. Once the user is granted access to the computer device, the computer device can identify the user and manage the challenge data, response data, SSO sessions, and / or personalized device configurations.

This invention provides a unified identity authentication and collaborative workbench access platform and method, belonging to the field of user identity software authentication technology. The collaborative workbench module receives a user-initiated access request for a business system containing the identifier of the target business system and sends it to the unified access orchestration module. The unified access orchestration module queries the authentication routing policy from the access policy library based on the target business system identifier, then calls the unified identity authentication platform module to complete user authentication and obtain unified identity token information. Based on the authentication routing policy, it generates authentication data recognizable by the target business system from the unified identity token, verifies the user's access permissions, and forwards the authentication data to the target business system if the permission verification passes. The target business system establishes a login session based on the received authentication data and returns the access result to the unified access orchestration module. This invention achieves unified access control for multiple business systems.

A method for secure collection of sensitive data at a computer device includes receiving a request for sensitive data. The request indicates a set of parameters and a dynamic encryption key. The dynamic encryption key is generated by an authorized data requester based on a login session identifier. The method includes creating a user interface for collecting the set of parameters by an artificial intelligence (AI) software of the computer device. The method includes providing the user interface for collecting the set of parameters. Responsive to collecting the set of parameters from the user, the method includes encrypting the set of parameters using the dynamic encryption key and an encryption algorithm associated with the authorized data requester. The method includes transmitting the encrypted set of parameters to the authorized data requester to be decrypted.

A method for secure collection of sensitive data at a computer device includes receiving a request for sensitive data. The request indicates a set of parameters and a dynamic encryption key. The dynamic encryption key is generated by an authorized data requester based on a login session identifier. The method includes creating a user interface for collecting the set of parameters by an artificial intelligence (AI) software of the computer device. The method includes providing the user interface for collecting the set of parameters. Responsive to collecting the set of parameters from the user, the method includes encrypting the set of parameters using the dynamic encryption key and an encryption algorithm associated with the authorized data requester. The method includes transmitting the encrypted set of parameters to the authorized data requester to be decrypted.

The present application relates to the technical field of information security, in particular to a computer network information security management method and system based on data processing, the method comprising: collecting key security data and historical security data of the current login session of a user, and preprocessing the key security data to form a current login behavior feature vector; constructing a login time probability distribution model, a login space position clustering center model and a historical device fingerprint model for each user based on the historical security data, and forming a user behavior baseline vector; comparing the current login behavior feature vector with the user behavior baseline vector within 1 second after the user completes login, and calculating the time deviation, the space deviation and the device abnormality degree. The present application introduces a dynamic device fingerprint technology based on multiple fractal spectrum analysis and hardware aging drift model, effectively overcoming the problems of traditional static fingerprint being easily forged and high false alarm rate caused by natural hardware aging.