53 results about "Node authentication" patented technology

Provided in the embodiments of the present disclosure are a communication method and system for a master device and a slave device for a fiber to the room (FTTR). The method comprises: establishing a corresponding OMCI channel between a master device and a slave device for an FTTR on the basis of an uplink mode of the slave device; the master device receiving an attribute value change (AVC) notification from the slave device by means of the OMCI channel; the master device receiving a serial number of the slave device on the basis of the AVC notification, and completing secondary node (SN) authentication of the slave device; and the master device initiating synchronization of a master information block (MIB) to the slave device on the basis of the SN authentication, so as to perform communication between the master device and the slave device.

The invention provides a Modbus protocol security enhancement method and system in a unicast communication scene, and relates to the technical field of industrial control networks. Comprising the following steps: sharing a first ciphertext and a second ciphertext between a master node and a slave node; the master node generates a first message authentication code according to the second ciphertext, a preset key and the first random number, and sends the first message to the slave node by using the target function code; the slave node authenticates the identity of the master node according to the first message authentication code, the first ciphertext, the preset key and the second random number; when the slave node successfully authenticates the identity of the master node, the slave node generates a second message authentication code according to the first ciphertext, the preset key and the second random number, and sends a second message to the master node by using the target function code; and the master node authenticates the identity of the slave node according to the second message authentication code, the second ciphertext, the preset key and the first random number. Therefore, the validity of the identities of the two communication parties can be ensured, and the integrity and confidentiality of the data in the transmission process are guaranteed.

The invention relates to the technical field of digital identity authentication, and discloses a digital identity encryption authentication method, which comprises the following steps of: acquiring a user identity information feature data set, and generating a master key library through multi-dimensional encryption preprocessing; extracting fragment verification features of each master key library to determine an authentication rule; and constructing a multi-level authentication chain and a verification node, and obtaining a node authentication state through bidirectional verification. In an effective authentication state, the master key library is subjected to association authentication according to permission levels; and in the invalid authentication state, identifying the abnormal verification node, calculating the authentication offset of the master key library under the abnormal verification node, and reconstructing the path of the abnormal verification node based on the authentication offset until the authentication is completed. Wherein the generation of the master key library relates to encryption, confusion and format standardization of various types of data; fragment verification feature extraction comprises key fragment sorting and the like; the authentication rule is determined based on the dynamic feature priority; and exception processing is combined with historical tracing and offset calculation. According to the method, the authentication security and the dynamic adaptability are improved.

The invention discloses a distributed service credibility authentication method and system oriented to a cloud computing environment, and relates to the technical field related to cloud computing credibility authentication, and the method comprises the steps: receiving an authentication request of a distributed service; establishing an authentication path by using the service state evaluation result; obtaining a unique verification voucher and calling an authentication data set of the user; sending the authentication reference voucher to a plurality of authentication nodes; calling a smart contract to carry out authentication analysis on the authentication data sets of the plurality of authentication nodes; using a distributed account book to record authentication process data and a node authentication result, and generating an authentication attitude quantity; and if the authentication attitude quantity is an authentication passing result, granting the access authority. The technical problems that in the prior art, a dynamic service environment is difficult to adapt, cross-system authentication interoperability is poor, and the authentication process lacks effective recording and tracing, so that authentication efficiency, accuracy, safety and credibility are poor are solved, and the technical effect of improving the accuracy, efficiency and safety of distributed service credible authentication is achieved.

The application provides a label authentication and authorization method and device, electronic equipment and a storage medium. The method comprises the following steps: forming inventory information based on an acquired authentication identifier for a label; sending the inventory information to the label and receiving inventory feedback information sent by the label; wherein the inventory feedback information is formed by superimposing identification information corresponding to the label in a specific part of the inventory information based on the inventory information after the first inventory node is authenticated by the label; the identification information is obtained by restoring the inventory feedback information based on the inventory information, and the identification information is sent to a label management network element for authentication. The application embodiment improves the authentication and authorization security of the label.

The application provides a cloud server access authentication method and device, equipment and a storage medium. The method authenticates a public key of an authentication initiating node on a blockchain network, initiates an authentication request to a node to be authenticated, collects biological feature data of a user corresponding to the node to be authenticated, encrypts the biological feature data, the current time and the public key of the authentication initiating node through a public key of a second storage node, and sends the user identifier of the node to be authenticated to the authentication initiating node through the public key of the authentication initiating node. The authentication initiating node decrypts the encrypted user features through a private key of the authentication initiating node, obtains the user identifier of the node to be authenticated, queries the first storage node through the user identifier of the node to be authenticated, and obtains a storage address. The second storage node determines a feature comparison result according to the encrypted authentication features and the storage address. The authentication initiating node determines an authentication result according to the feature comparison result.

The invention discloses a differential privacy method for preventing leakage of large model training data, and relates to the technical field of artificial intelligence large model security. The method comprises the following steps: step a, N nodes participating in training complete key negotiation through an SM4 symmetric encryption algorithm and generate a unique identity identifier, and only the nodes passing authentication access training; the central server generates a global noise seed and distributes the global noise seed to each authentication node through a TLS1.3 encryption channel. According to the invention, the federation layer solves the problem of distributed training cross-node leakage through node authentication and noise cooperation, and ensures that data between nodes is not reversely deduced; data layer dynamic sensitivity calculation and symbol consistency noise keep sample semantics while privacy is protected, and damage to data value is reduced; the model layer is subjected to gradient clustering noise reduction and dynamic cutting, interference of noise on model training is reduced, full-process and multi-scene comprehensive protection is achieved, and the requirements of sensitive fields such as medical treatment and finance are met.

This invention relates to the field of digital identity authentication technology and discloses a digital identity encryption authentication method. The method includes the following steps: acquiring a user identity information feature dataset and generating a master key library through multi-dimensional encryption preprocessing; extracting fragmented verification features from each master key library to determine authentication rules; constructing a multi-level authentication chain and verification nodes, and obtaining the node authentication status through bidirectional verification. In a valid authentication state, the master key library is associated with authentication according to permission levels; in an invalid authentication state, abnormal verification nodes are identified, the authentication offset of their respective master key libraries is calculated, and the abnormal verification node paths are reconstructed based on this until authentication is completed. The master key library generation involves multiple types of data encryption, obfuscation, and format standardization; fragmented verification feature extraction includes key fragment sorting; authentication rule determination is based on dynamic feature priority; and anomaly handling combines historical tracing and offset calculation. This method improves authentication security and dynamic adaptability.

The invention discloses an Internet of Things equipment remote authentication method and system based on an unmanned aerial vehicle and a terminal, and the method comprises the steps: obtaining a plurality of experience tuples of the unmanned aerial vehicle in a target region and a target Q value and an estimated Q value corresponding to each experience tuple, calculating the error of each experience tuple, and sequentially putting the corresponding experience tuples into an experience pool; training a pre-constructed double-Q network according to the experience pool to obtain a trained double-Q network; constructing a current state vector, inputting the current state vector into the trained double-Q network, and outputting a target optimal action; and calculating a dynamic energy threshold according to the current node, judging whether to execute a target optimal action according to the residual electric quantity and the dynamic energy threshold, and when the target optimal action is executed, controlling the unmanned aerial vehicle to arrive at the corresponding node and performing Internet of Things equipment node authentication. According to the invention, energy consideration is added in unmanned aerial vehicle authentication, so that the application of the unmanned aerial vehicle in Internet of Things authentication is more stable.

The embodiment of the present application provides a kind of based on the equipment communication method and device of MQTT protocol, which is applied to MQTT subject management server, comprising the following steps: receiving the first message reported by controlled node, wherein the first message includes the equipment ID of the controlled node;Corresponding to the random subject of the equipment ID of the controlled node is generated, and the random subject is returned to the controlled node;After authenticating to the control node, the random subject is sent to the control node, so that the control node and controlled node carry out MQTT protocol communication through the random subject.In the present application, the MQTT subject of node communication is managed by MQTT subject management server, and the MQTT subject is randomized, so that malicious network node cannot listen or interfere with node communication, thereby improving the communication security between nodes of MQTT protocol network.

The invention provides a communication method and a communication device. The method is applied to an intermediate node in an environmental Internet of Things (A-IoT) system, and comprises the following steps: sending first information, the first information being used for requesting to authenticate the intermediate node as an excitation source of the A-IoT system; the excitation source is used for providing carrier waves for tags in the A-IoT system. Second information is received, the second information is used for indicating an authentication result, and the authentication result is used for indicating whether the intermediate node serves as an excitation source of the A-IoT system or not. Wherein the intermediate node is also used as a reader-writer in the A-IoT system to communicate with the tag. The invention provides an implementation process of taking intermediate node authentication as a system excitation source, and carrier transmission can be carried out in a multi-subcarrier mode, so that the capability of resisting frequency selective fading of the carrier sent by the excitation source is improved, and the anti-interference capability of the carrier is improved.

Provided in the present application are a communication method and a communication apparatus. The method is applied to an intermediate node in an ambient Internet of Things (A-IoT) system. The method comprises: sending first information, which is used for requesting authentication performed on an intermediate node to be used as an excitation source of an A-IoT system, wherein the excitation source is used for providing a carrier to a tag in the A-IoT system; and receiving second information, which is used for indicating an authentication result, wherein the authentication result is used for indicating whether the intermediate node is used as the excitation source of the A-IoT system, and the intermediate node is further used as a reader-writer in the A-IoT system to communicate with the tag. The present application provides an implementation process of authenticating an intermediate node to be used as an excitation source of a system, and can also perform carrier transmission in a multi-subcarrier mode, thereby improving the capability, in terms of the resistance against frequency-selective fading, of a carrier sent by the excitation source, and also improving the anti-interference capability of the carrier.

Disclosed methods and systems include receiving, by a control panel of a multi-cloud platform, a node authentication token [NAT] corresponding to a compute node in the multi-cloud platform. The compute node may include a token generator that generates the NAT and sends the NAT to the control panel. The control panel may receive the NAT from the compute node via a secure administration connection between the control panel and the compute node. The control panel may then store the NAT in a token mapping database that associates the NAT with the node. The control panel may then perform operations to access the compute node from a conventional web browser. In at least one embodiment, these browser operations may include retrieving mapping information for the compute node from the token mapping database and generating an access uniform resource locator that includes a network address for the compute node and the mapping information.

The invention provides a single-node authentication risk detection method and system based on log analysis, which can perform real-time analysis based on an actual access log and timely identify a single-node access risk before a fault occurs, thereby effectively avoiding service interruption and improving the reliability of the system. And meanwhile, full-course automatic diagnosis from risk detection to root positioning is realized, the operation and maintenance efficiency is remarkably improved, and the manual troubleshooting cost is reduced. The method supports a plurality of potential fault points such as a plurality of heterogeneous systems, coverage networks, DNS, configurations and the like, can comprehensively monitor and diagnose various faults in a complex environment, is high in applicability, and has good expansibility and adaptability. And a comprehensive risk report and visual display are provided, so that an administrator can quickly understand the system risk condition and timely take effective measures for processing. In addition, the user can customize a risk judgment rule and a diagnosis strategy according to own requirements, and personalized operation and maintenance requirements of different enterprises are met.

A data integrity tree for memory security comprises a plurality of nodes, wherein a linked series of nodes of the data integrity tree protects a data item stored in memory. A parent node in the linked series of nodes comprises a plurality of counters, each associated with a respective child node and providing an input to a protection function associated with the respective child node. A node authentication code protects the plurality of counters in each parent node and is dependent on a counter in a node above the parent node in the data integrity tree. A plurality of hash value child nodes each comprises a plurality of encrypted hash values generated as a function of a respective block of data stored in the memory and as a function of a counter comprised in a node above the hash value child node in the data integrity tree.

This application provides a blockchain-based cross-domain distributed digital identity trusted management method, relating to the field of embedded security technology. By combining centralized and traceable blockchain technology with the needs of multi-domain embedded device node certificate management, a multi-domain node authentication architecture is studied. Based on lightweight remote identity authentication node trusted access technology, trusted digital identity authentication for multi-domain users in a distributed environment is realized, achieving the goal of supporting fully controllable distributed digital identity secure access.

Embodiments of the present application provide a kind of data processing method, device and equipment based on blockchain and computer storage medium, it is related to data processing field, to realize the accurate tracing of data on blockchain.The method comprises: first target access node sends data transmission request to data node, after the authentication of target access node passes, allow first target access node and data node carry out data transmission, and generate the access record of first target access node, first target access node is any node in multiple access nodes;According to the access record of multiple second target access nodes, determine the space stamp information of multiple data transmitted, second target access node is the access node of first target access node for completing data transmission;Based on space stamp information, trace multiple data.

Embodiments of the present application provide an identity authentication method and device, electronic equipment and readable storage medium, the method comprises: obtaining the identity check request initiated by the client to be authenticated user; the identity check request carries key information; the key information is split into a plurality of first key fragments and sent to a plurality of second servers for checking; the identity check result of the identity check request is determined according to the key check result returned by each second server; the key check result is determined according to the user authentication point coordinate, the reference authentication point coordinate and the node authentication point coordinate; the user authentication point coordinate is composed of the first key fragment; the reference authentication point coordinate and the node authentication point coordinate are pre-allocated by the second server as an authentication node. By using the above method, the authentication of multiple authentication servers is required to pass the final identity check, which enhances the security of identity check.

A firmware configuration method and system of a Retimer chip, an electronic device, and a medium are provided in the disclosure. The firmware configuration method of the Retimer chip includes: acquiring a storage in-place signal and a storage node authentication signal; causing a BMC to write corresponding firmware configuration to the Retimer chip based on the storage in-place signal and the storage node authentication signal; and changing CPU configuration and a communication link of a storage node based on the storage in-place signal, so that the CPU configuration and the communication link are adapted to the firmware configuration of the Retimer chip.

Techniques discussed herein include providing a cloud computing environment in which applications are deployed using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). The control plane functionality may be invoked by a deployment orchestrator (e.g., using a client of the container orchestration platform). In some embodiments, the control plane may include a set of applications that are configured to communicate with core services for certificate generation and rotation, namespace and quota management, metric monitoring and alarming, node authentication, and cluster membership management.

The application provides a Modbus protocol security enhancement method and system in a unicast communication scenario, and relates to the technical field of industrial control networks. The method comprises the following steps: a first cipher text and a second cipher text are shared between a master node and a slave node; the master node generates a first message authentication code according to the second cipher text, a preset key and a first random number, and sends a first message to the slave node by using a target function code; the slave node authenticates the identity of the master node according to the first message authentication code, the first cipher text, the preset key and a second random number; when the slave node successfully authenticates the identity of the master node, the slave node generates a second message authentication code according to the first cipher text, the preset key and the second random number, and sends a second message to the master node by using the target function code; and the master node authenticates the identity of the slave node according to the second message authentication code, the second cipher text, the preset key and the first random number. In this way, the effectiveness of the identities of the two communication parties can be ensured, and the integrity and confidentiality of data in the transmission process can be ensured.

The invention provides an unmanned aerial vehicle node authentication system based on a block chain, and the system comprises an initialization module which is used for carrying out the initialization of a block chain network, deploying a block chain node and a smart contract, and providing a basis for the identity authentication, safety communication and tracking of an unmanned aerial vehicle cluster; the identity authentication module is used for verifying the identity of the unmanned aerial vehicle and realizing the right confirmation uploading of the unmanned aerial vehicle; the communication module is used for information communication between the unmanned aerial vehicles; and the tracking and tracing module is used for managing and tracking each member, behavior and operation history in the unmanned aerial vehicle cluster so as to realize monitoring, management and tracking of the unmanned aerial vehicle cluster. According to the invention, the decentralization and tampering-free characteristics of the block chain are utilized, key data such as identity information and communication records of the unmanned aerial vehicle node are stored on the chain in a block form, identity tampering and counterfeiting are effectively prevented, the anti-attack ability of the system is enhanced, the single-point fault risk is reduced, and security authentication and data encryption transmission of the unmanned aerial vehicle node are realized.

The invention discloses an intelligent power grid equipment trust management and authentication method and system based on a block chain, and aims to prevent identity embezzlement and disguise in a distributed electric energy network. According to the identification and authentication model, the authentication of the node is improved by using the digital certificate, the use safety of the power grid can be remarkably improved, the validity of the node can be easily verified through the Merkle tree architecture by using the intelligent power grid equipment identification and authentication model of the Merkle tree architecture, and when new equipment is added to the block chain, the new equipment can be identified and authenticated through the Merkle tree architecture. The communication with a control center can be started; the privacy and data of all participants are protected, the block chain technology can provide a distributed and decentralized security system to ensure the integrity and confidentiality of transactions, the block chain can serve as a trusted transaction platform, energy of different energy sources is exchanged between smart power grids, real-time pricing is achieved, and the transaction efficiency is improved. And simpler and more convenient energy trade can be realized, and the market is freer and more fair.

The invention discloses a non-inductive passing identity authentication method, system and device based on edge computing, and relates to the technical field of identity authentication, the method comprises the following steps: when a target user approaches an access control system and an authentication distance is satisfied, generating a non-inductive authentication instruction; a power supply switching circuit is connected to control sensing equipment at the same frequency, and sensing is triggered and a sensing vector sequence is determined according to the non-inductive authentication instruction; the first edge node executes posture authentication of real-time micro-dynamic characteristics, the second edge node executes electrode sensing authentication based on derived session key carriers, zero-knowledge proof is generated through consensus decision, and passage management is carried out on the access control system. The technical problems that active sensing and operation are needed in traditional access control authentication, single-node authentication safety is insufficient, and repeated authentication efficiency is low during multi-access-control continuous passing are solved, and the technical effects of non-inductive passing, high-safety authentication and efficient passing control are achieved.

The application provides a kind of alliance chain node authentication method, system, equipment and storage medium, to solve the security problems caused by the single node authentication mode of existing node cannot be found in time that node is maliciously controlled;In the present application, the legality of digital signature is verified according to identity authentication request;If the digital signature is legal, the identity authentication request is decrypted using the pre-stored dynamic token to obtain the identification information of the node;According to the identification information, the safety of the node is verified, and the verification result information of the safety verification is recorded to determine whether the node is safe;If the node is safe, the identity authentication of the node is completed according to the identification information;The node identity is verified by data signature and dynamic token in the present application, and the safety of the node is verified according to the identification information, the dynamic token and real-time safety verification are combined to establish a mixed mode of node authentication, to find out whether the node is safe in time, and to minimize the loss caused by the unsafe node.

The invention relates to the technical field of servers, and discloses a network node authentication method and device, a server and a storage medium, the method is applied to the server, and the method comprises the following steps: broadcasting a natural language question; information returned by the network node is received, the network node determines the information based on a first answer text, and the first answer text is an answer text of a big language model deployed in the network node to answer the natural language question; answering the natural language question through a large language model deployed in the server to obtain a second answer text; encoding the second answer text through a vector encoding model deployed in the server to obtain a semantic vector corresponding to the second answer text; determining similarity based on the information and the semantic vector; if the similarity is greater than or equal to a first similarity threshold, authenticating the network node; and if the similarity is smaller than a first similarity threshold, refusing to authenticate the network node. According to the invention, the authentication efficiency of the network node is improved.

The invention discloses a block chain node authentication and secure communication method and a related device, and relates to the technical field of block chains, the method comprises the following steps: generating a cryptographic key system of a block chain node through a trusted execution environment, and establishing a binding relationship between the cryptographic key system and a node security identifier; constructing a dynamic mapping structure containing a node security identifier and blockchain node network addressing information, and performing cryptographic authentication on the dynamic mapping structure through a trusted execution environment; writing the authenticated dynamic mapping structure into a decentralized storage system to generate a distributed address directory; based on the node security identifier, establishing a security verification mechanism for communication between block chain nodes; and when the node network topology of the block chain node is changed, re-authenticating the updated dynamic mapping structure based on the trusted execution environment, and synchronizing the updated dynamic mapping structure to the distributed address directory. According to the invention, the communication security between the nodes in the block chain network can be effectively improved.

The disclosed methods and systems include receiving, by a control panel of a multi-cloud platform, a node authentication token [NAT] corresponding to a compute node in the multi-cloud platform. The compute node may include a token generator that generates the NAT and sends the NAT to the control panel. The control panel may receive the NAT from the compute node via a security management connection between the control panel and the compute node. The control panel may then store the NAT in a token mapping database that associates the NAT with the node. The control panel may then perform operations to access the compute node from a conventional web browser. In at least one embodiment, these browser operations may include retrieving mapping information for the compute node from the token mapping database, and generating an access uniform resource locator that includes a network address for the compute node and the mapping information.

The invention discloses an anti-malicious-link authoritative attribute base detection and risk removal method, and relates to a malicious link risk removal method, which comprises a structure module, an individual user public authentication system node, an authoritative node authentication module and a mobile phone terminal anti-malicious-link special APP. Identifying legal links or known malicious links by utilizing a legal link special data module and a known malicious link data dictionary module of a built-in detection system of the mobile phone terminal anti-malicious link special APP; according to the method, the legal link special database downloaded by the authoritative node is used for matching and opening, and property loss caused by opening of malicious links is avoided.

A radio access network node and user equipment may be configured with a private key and a complementary public key, respectively, for determining whether a radio resource control signal connection setup message received at the user equipment is received from a legal node or from a false base station. The user equipment may request, based on the connection setup message, an on-demand digital signature from a node that broadcasts the connection setup message. In response to the request, the node may send, via the on-demand system information message, an on-demand digital signature generated based on the connection setup message and the private key. The user equipment may determine a local digital signature based on the connection setup message and the public key. The user device may perform a connection setup action based on whether the local digital signature matches the on-demand digital signature.