74 results about "Node authentication" patented technology

The invention discloses a multi-level security authentication method and system, and relates to the technical field of the Internet of Things, and the method comprises the steps: enabling a new node to verify the anti-quantum signature legality and behavior feature trust score of an identity certificate through a neighbor node according to a dynamic authentication path, and outputting a device layer authentication result; according to the equipment layer authentication result, selecting a verification node in an authentication path to carry out identity recheck and trust score weighted updating on a new node to obtain a neighbor layer authentication result and a whole network trust score; based on the neighbor layer authentication result, the core node verifies the whole network trust score and anti-quantum signature legality of the new node through the dynamic authentication atlas, and performs updating and anomaly detection on the dynamic atlas; through anti-quantum signature verification and behavior feature trust scoring, the ability of new node authentication to resist quantum computing attack and malicious node disguise is enhanced.

Provided in the embodiments of the present disclosure are a communication method and system for a master device and a slave device for a fiber to the room (FTTR). The method comprises: establishing a corresponding OMCI channel between a master device and a slave device for an FTTR on the basis of an uplink mode of the slave device; the master device receiving an attribute value change (AVC) notification from the slave device by means of the OMCI channel; the master device receiving a serial number of the slave device on the basis of the AVC notification, and completing secondary node (SN) authentication of the slave device; and the master device initiating synchronization of a master information block (MIB) to the slave device on the basis of the SN authentication, so as to perform communication between the master device and the slave device.

The invention provides a Modbus protocol security enhancement method and system in a unicast communication scene, and relates to the technical field of industrial control networks. Comprising the following steps: sharing a first ciphertext and a second ciphertext between a master node and a slave node; the master node generates a first message authentication code according to the second ciphertext, a preset key and the first random number, and sends the first message to the slave node by using the target function code; the slave node authenticates the identity of the master node according to the first message authentication code, the first ciphertext, the preset key and the second random number; when the slave node successfully authenticates the identity of the master node, the slave node generates a second message authentication code according to the first ciphertext, the preset key and the second random number, and sends a second message to the master node by using the target function code; and the master node authenticates the identity of the slave node according to the second message authentication code, the second ciphertext, the preset key and the first random number. Therefore, the validity of the identities of the two communication parties can be ensured, and the integrity and confidentiality of the data in the transmission process are guaranteed.

The invention discloses a key management method and device, equipment and a medium, and relates to the technical field of information security, and the method comprises the steps that a chameleon-Shrubs authentication tree comprises a chameleon Shrubs tree and a Shrubs node authentication tree, and a multi-time signature public key of the chameleon-Shrubs authentication tree is kept unchanged; the topmost node of the Shrubs node authentication tree is a verification root node obtained based on the Shrubs nodes of each layer in the chameleon Shrubs tree; writing the primary signature public key into a target empty node in a previous chameleon Shrubs tree, and determining a target Shrubs node of the target empty node; determining an updated random number of the target Shrubs node, so as to update the structure of a previous chameleon-Shrubs authentication tree to obtain a current chameleon-Shrubs authentication tree; and verifying a message signature pair obtained based on an authentication path from the target null node to the verification root node by using the multi-signature public key. And the key management overhead is reduced.

This disclosure relates generally to wireless communications and, more particularly, to systems and methods for radio resource control (RRC) connection management in a network sharing configuration, including an RRC resume from an RRC inactive state, and RRC re-establishment. In one embodiment, a method performed by a communication node, includes: receiving a request from a communication device to establish a current connection associated with a prior connection between the communication device and a prior communication node, wherein the request comprises communication device authentication information; and establishing the current connection based on a determination that communication node authentication information matches the communication device authentication information, wherein the communication node authentication information is based on a predetermined subset of input parameters, and wherein the determination is performed at the communication node or at the prior communication node.

The invention relates to the technical field of digital identity authentication, and discloses a digital identity encryption authentication method, which comprises the following steps of: acquiring a user identity information feature data set, and generating a master key library through multi-dimensional encryption preprocessing; extracting fragment verification features of each master key library to determine an authentication rule; and constructing a multi-level authentication chain and a verification node, and obtaining a node authentication state through bidirectional verification. In an effective authentication state, the master key library is subjected to association authentication according to permission levels; and in the invalid authentication state, identifying the abnormal verification node, calculating the authentication offset of the master key library under the abnormal verification node, and reconstructing the path of the abnormal verification node based on the authentication offset until the authentication is completed. Wherein the generation of the master key library relates to encryption, confusion and format standardization of various types of data; fragment verification feature extraction comprises key fragment sorting and the like; the authentication rule is determined based on the dynamic feature priority; and exception processing is combined with historical tracing and offset calculation. According to the method, the authentication security and the dynamic adaptability are improved.

The invention discloses a distributed service credibility authentication method and system oriented to a cloud computing environment, and relates to the technical field related to cloud computing credibility authentication, and the method comprises the steps: receiving an authentication request of a distributed service; establishing an authentication path by using the service state evaluation result; obtaining a unique verification voucher and calling an authentication data set of the user; sending the authentication reference voucher to a plurality of authentication nodes; calling a smart contract to carry out authentication analysis on the authentication data sets of the plurality of authentication nodes; using a distributed account book to record authentication process data and a node authentication result, and generating an authentication attitude quantity; and if the authentication attitude quantity is an authentication passing result, granting the access authority. The technical problems that in the prior art, a dynamic service environment is difficult to adapt, cross-system authentication interoperability is poor, and the authentication process lacks effective recording and tracing, so that authentication efficiency, accuracy, safety and credibility are poor are solved, and the technical effect of improving the accuracy, efficiency and safety of distributed service credible authentication is achieved.

The application provides a label authentication and authorization method and device, electronic equipment and a storage medium. The method comprises the following steps: forming inventory information based on an acquired authentication identifier for a label; sending the inventory information to the label and receiving inventory feedback information sent by the label; wherein the inventory feedback information is formed by superimposing identification information corresponding to the label in a specific part of the inventory information based on the inventory information after the first inventory node is authenticated by the label; the identification information is obtained by restoring the inventory feedback information based on the inventory information, and the identification information is sent to a label management network element for authentication. The application embodiment improves the authentication and authorization security of the label.

The application provides a cloud server access authentication method and device, equipment and a storage medium. The method authenticates a public key of an authentication initiating node on a blockchain network, initiates an authentication request to a node to be authenticated, collects biological feature data of a user corresponding to the node to be authenticated, encrypts the biological feature data, the current time and the public key of the authentication initiating node through a public key of a second storage node, and sends the user identifier of the node to be authenticated to the authentication initiating node through the public key of the authentication initiating node. The authentication initiating node decrypts the encrypted user features through a private key of the authentication initiating node, obtains the user identifier of the node to be authenticated, queries the first storage node through the user identifier of the node to be authenticated, and obtains a storage address. The second storage node determines a feature comparison result according to the encrypted authentication features and the storage address. The authentication initiating node determines an authentication result according to the feature comparison result.

The invention discloses a differential privacy method for preventing leakage of large model training data, and relates to the technical field of artificial intelligence large model security. The method comprises the following steps: step a, N nodes participating in training complete key negotiation through an SM4 symmetric encryption algorithm and generate a unique identity identifier, and only the nodes passing authentication access training; the central server generates a global noise seed and distributes the global noise seed to each authentication node through a TLS1.3 encryption channel. According to the invention, the federation layer solves the problem of distributed training cross-node leakage through node authentication and noise cooperation, and ensures that data between nodes is not reversely deduced; data layer dynamic sensitivity calculation and symbol consistency noise keep sample semantics while privacy is protected, and damage to data value is reduced; the model layer is subjected to gradient clustering noise reduction and dynamic cutting, interference of noise on model training is reduced, full-process and multi-scene comprehensive protection is achieved, and the requirements of sensitive fields such as medical treatment and finance are met.

This invention relates to the field of digital identity authentication technology and discloses a digital identity encryption authentication method. The method includes the following steps: acquiring a user identity information feature dataset and generating a master key library through multi-dimensional encryption preprocessing; extracting fragmented verification features from each master key library to determine authentication rules; constructing a multi-level authentication chain and verification nodes, and obtaining the node authentication status through bidirectional verification. In a valid authentication state, the master key library is associated with authentication according to permission levels; in an invalid authentication state, abnormal verification nodes are identified, the authentication offset of their respective master key libraries is calculated, and the abnormal verification node paths are reconstructed based on this until authentication is completed. The master key library generation involves multiple types of data encryption, obfuscation, and format standardization; fragmented verification feature extraction includes key fragment sorting; authentication rule determination is based on dynamic feature priority; and anomaly handling combines historical tracing and offset calculation. This method improves authentication security and dynamic adaptability.

The invention discloses an Internet of Things equipment remote authentication method and system based on an unmanned aerial vehicle and a terminal, and the method comprises the steps: obtaining a plurality of experience tuples of the unmanned aerial vehicle in a target region and a target Q value and an estimated Q value corresponding to each experience tuple, calculating the error of each experience tuple, and sequentially putting the corresponding experience tuples into an experience pool; training a pre-constructed double-Q network according to the experience pool to obtain a trained double-Q network; constructing a current state vector, inputting the current state vector into the trained double-Q network, and outputting a target optimal action; and calculating a dynamic energy threshold according to the current node, judging whether to execute a target optimal action according to the residual electric quantity and the dynamic energy threshold, and when the target optimal action is executed, controlling the unmanned aerial vehicle to arrive at the corresponding node and performing Internet of Things equipment node authentication. According to the invention, energy consideration is added in unmanned aerial vehicle authentication, so that the application of the unmanned aerial vehicle in Internet of Things authentication is more stable.

The embodiment of the present application provides a kind of based on the equipment communication method and device of MQTT protocol, which is applied to MQTT subject management server, comprising the following steps: receiving the first message reported by controlled node, wherein the first message includes the equipment ID of the controlled node;Corresponding to the random subject of the equipment ID of the controlled node is generated, and the random subject is returned to the controlled node;After authenticating to the control node, the random subject is sent to the control node, so that the control node and controlled node carry out MQTT protocol communication through the random subject.In the present application, the MQTT subject of node communication is managed by MQTT subject management server, and the MQTT subject is randomized, so that malicious network node cannot listen or interfere with node communication, thereby improving the communication security between nodes of MQTT protocol network.

The present invention discloses a unified authentication method for users under multi-node conditions in a self-organizing network environment, which performs triple authentication based on the permission authentication node in the content chain when the user registers, the reading device joins, and the registration node joins the content chain; including: user authentication when the user registers in the content chain: device authentication when the reading device joins the content chain: node identity authentication when the node joins the content chain. The present invention realizes that when obtaining the content itself, the triple authentication of node authentication, device authentication, and user authentication needs to be performed through the authentication permission node, which ensures the security of the content chain and the security of the content chain data, and allows other nodes in the content chain to focus on specific business, thereby reducing the security verification pressure of other nodes in the content chain.

The invention provides a communication method and a communication device. The method is applied to an intermediate node in an environmental Internet of Things (A-IoT) system, and comprises the following steps: sending first information, the first information being used for requesting to authenticate the intermediate node as an excitation source of the A-IoT system; the excitation source is used for providing carrier waves for tags in the A-IoT system. Second information is received, the second information is used for indicating an authentication result, and the authentication result is used for indicating whether the intermediate node serves as an excitation source of the A-IoT system or not. Wherein the intermediate node is also used as a reader-writer in the A-IoT system to communicate with the tag. The invention provides an implementation process of taking intermediate node authentication as a system excitation source, and carrier transmission can be carried out in a multi-subcarrier mode, so that the capability of resisting frequency selective fading of the carrier sent by the excitation source is improved, and the anti-interference capability of the carrier is improved.

Provided in the present application are a communication method and a communication apparatus. The method is applied to an intermediate node in an ambient Internet of Things (A-IoT) system. The method comprises: sending first information, which is used for requesting authentication performed on an intermediate node to be used as an excitation source of an A-IoT system, wherein the excitation source is used for providing a carrier to a tag in the A-IoT system; and receiving second information, which is used for indicating an authentication result, wherein the authentication result is used for indicating whether the intermediate node is used as the excitation source of the A-IoT system, and the intermediate node is further used as a reader-writer in the A-IoT system to communicate with the tag. The present application provides an implementation process of authenticating an intermediate node to be used as an excitation source of a system, and can also perform carrier transmission in a multi-subcarrier mode, thereby improving the capability, in terms of the resistance against frequency-selective fading, of a carrier sent by the excitation source, and also improving the anti-interference capability of the carrier.

Disclosed methods and systems include receiving, by a control panel of a multi-cloud platform, a node authentication token [NAT] corresponding to a compute node in the multi-cloud platform. The compute node may include a token generator that generates the NAT and sends the NAT to the control panel. The control panel may receive the NAT from the compute node via a secure administration connection between the control panel and the compute node. The control panel may then store the NAT in a token mapping database that associates the NAT with the node. The control panel may then perform operations to access the compute node from a conventional web browser. In at least one embodiment, these browser operations may include retrieving mapping information for the compute node from the token mapping database and generating an access uniform resource locator that includes a network address for the compute node and the mapping information.

The invention provides a single-node authentication risk detection method and system based on log analysis, which can perform real-time analysis based on an actual access log and timely identify a single-node access risk before a fault occurs, thereby effectively avoiding service interruption and improving the reliability of the system. And meanwhile, full-course automatic diagnosis from risk detection to root positioning is realized, the operation and maintenance efficiency is remarkably improved, and the manual troubleshooting cost is reduced. The method supports a plurality of potential fault points such as a plurality of heterogeneous systems, coverage networks, DNS, configurations and the like, can comprehensively monitor and diagnose various faults in a complex environment, is high in applicability, and has good expansibility and adaptability. And a comprehensive risk report and visual display are provided, so that an administrator can quickly understand the system risk condition and timely take effective measures for processing. In addition, the user can customize a risk judgment rule and a diagnosis strategy according to own requirements, and personalized operation and maintenance requirements of different enterprises are met.

The invention discloses a network node authentication and key exchange protocol method oriented to a smart power grid scene, which relates to the technical field of information security, and comprises the following steps of: 1, initializing a system, generating a master key for an access node, and generating an identity identifier for each sink node; step 2, the sink node packs the own identity label into a request and sends the request to the access node, the access node generates a first random number and a sink node key after receiving the request, then generates an intermediate key and an identity authentication parameter through encryption calculation through the master key, the first random number and the sink node key, and sends the intermediate key to the access node; sending the intermediate key and the identity authentication parameter to the sink node; and step 3, performing node authentication between the sink node and the access node. According to the invention, bidirectional authentication between the access node and the sink node, between the sink nodes and between the sensing nodes is realized, and consistent and safe keys are ensured to be used in subsequent communication, so that the security of communication is ensured.

A data integrity tree for memory security comprises a plurality of nodes, wherein a linked series of nodes of the data integrity tree protects a data item stored in memory. A parent node in the linked series of nodes comprises a plurality of counters, each associated with a respective child node and providing an input to a protection function associated with the respective child node. A node authentication code protects the plurality of counters in each parent node and is dependent on a counter in a node above the parent node in the data integrity tree. A plurality of hash value child nodes each comprises a plurality of encrypted hash values generated as a function of a respective block of data stored in the memory and as a function of a counter comprised in a node above the hash value child node in the data integrity tree.

This application provides a blockchain-based cross-domain distributed digital identity trusted management method, relating to the field of embedded security technology. By combining centralized and traceable blockchain technology with the needs of multi-domain embedded device node certificate management, a multi-domain node authentication architecture is studied. Based on lightweight remote identity authentication node trusted access technology, trusted digital identity authentication for multi-domain users in a distributed environment is realized, achieving the goal of supporting fully controllable distributed digital identity secure access.

To provide a blockchain-based multi-node authentication method for improving the security and convenience in authentication on a user terminal or a user.SOLUTION: A blockchain-based multi-node authentication method includes at least: receiving an authentication preparation request from a first user; generating a temporary channel to authenticate a first user terminal and a channel key for identifying the temporary channel in response to the authentication preparation request, the temporary channel including multiple nodes 102-1 to 102-n respectively corresponding to multiple second user terminals which are to be involved in the authentication; collectively transmitting the channel key to the nodes; separately transmitting authentication comparison data to be used for the authentication to the nodes; receiving an authentication request including the channel key and authentication target data regarding the first user terminal, from the first user terminal; and proceeding with the authentication of the first user terminal. The authentication of the first user terminal includes first and second authentication processes.SELECTED DRAWING: Figure 3

Embodiments of the present application provide a kind of data processing method, device and equipment based on blockchain and computer storage medium, it is related to data processing field, to realize the accurate tracing of data on blockchain.The method comprises: first target access node sends data transmission request to data node, after the authentication of target access node passes, allow first target access node and data node carry out data transmission, and generate the access record of first target access node, first target access node is any node in multiple access nodes;According to the access record of multiple second target access nodes, determine the space stamp information of multiple data transmitted, second target access node is the access node of first target access node for completing data transmission;Based on space stamp information, trace multiple data.

Embodiments of the present application provide an identity authentication method and device, electronic equipment and readable storage medium, the method comprises: obtaining the identity check request initiated by the client to be authenticated user; the identity check request carries key information; the key information is split into a plurality of first key fragments and sent to a plurality of second servers for checking; the identity check result of the identity check request is determined according to the key check result returned by each second server; the key check result is determined according to the user authentication point coordinate, the reference authentication point coordinate and the node authentication point coordinate; the user authentication point coordinate is composed of the first key fragment; the reference authentication point coordinate and the node authentication point coordinate are pre-allocated by the second server as an authentication node. By using the above method, the authentication of multiple authentication servers is required to pass the final identity check, which enhances the security of identity check.

The invention provides an order authentication method of a value added service, an order management node, an order authentication node, electronic equipment and a computer readable storage medium, and relates to the technical field of network communication. The order authentication method comprises the following steps: receiving a value added service order request sent by a target terminal; judging whether the value-added service is a fixed network value-added service or not according to the ordering request; in response to the fact that the value-added service is a fixed network value-added service, generating an order authentication request of the value-added service according to a mapping relationship among the order request, a fixed network account and a mobile network account; and sending the order authentication request to the order authentication node, so that the order authentication node authenticates the order authentication request and generates an order authentication request response result. The problems that in the prior art, ordering authentication cannot be carried out on fixed network value-added services and mobile network value-added services in a centralized and unified mode, the operation process of the value-added services is complex, and the construction cost is high are at least solved. The method is suitable for business order authentication scenes.

A firmware configuration method and system of a Retimer chip, an electronic device, and a medium are provided in the disclosure. The firmware configuration method of the Retimer chip includes: acquiring a storage in-place signal and a storage node authentication signal; causing a BMC to write corresponding firmware configuration to the Retimer chip based on the storage in-place signal and the storage node authentication signal; and changing CPU configuration and a communication link of a storage node based on the storage in-place signal, so that the CPU configuration and the communication link are adapted to the firmware configuration of the Retimer chip.

Techniques discussed herein include providing a cloud computing environment in which applications are deployed using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). The control plane functionality may be invoked by a deployment orchestrator (e.g., using a client of the container orchestration platform). In some embodiments, the control plane may include a set of applications that are configured to communicate with core services for certificate generation and rotation, namespace and quota management, metric monitoring and alarming, node authentication, and cluster membership management.

The application provides a Modbus protocol security enhancement method and system in a unicast communication scenario, and relates to the technical field of industrial control networks. The method comprises the following steps: a first cipher text and a second cipher text are shared between a master node and a slave node; the master node generates a first message authentication code according to the second cipher text, a preset key and a first random number, and sends a first message to the slave node by using a target function code; the slave node authenticates the identity of the master node according to the first message authentication code, the first cipher text, the preset key and a second random number; when the slave node successfully authenticates the identity of the master node, the slave node generates a second message authentication code according to the first cipher text, the preset key and the second random number, and sends a second message to the master node by using the target function code; and the master node authenticates the identity of the slave node according to the second message authentication code, the second cipher text, the preset key and the first random number. In this way, the effectiveness of the identities of the two communication parties can be ensured, and the integrity and confidentiality of data in the transmission process can be ensured.

The present invention discloses a contamination attack node identification method, device and storage medium based on self-checking technology. The present invention comprises the following steps: first, in the system initialization stage, the source node needs to determine the total number of layers of the network and allocate corresponding random number seeds to the nodes in the network; secondly, data transmission is performed: then the source node starts malicious node identification: if one or more of the destination nodes find that there is a contamination attack in the network during the data transmission stage, it will immediately send an alarm message to the source node and trigger the identification process of the malicious node. Finally, after completing the identification process of all the first-layer nodes, the source node informs the possible malicious nodes and starts the identification process layer by layer. The present invention can effectively identify potential contamination attack nodes in the network, thereby ensuring the transmission performance and network stability of the network.

A computer-implemented method utilizing an algorithmic-based approach to find a memory-efficient left-node authentication path in XMSS and LMS post-quantum cryptography algorithms that includes providing a computer with at least one processor operably configured to carry out a post-quantum cryptographic authentication session having an authentication path and operably configured to execute computer readable instructions having an algorithm with three subroutines, a first subroutine that includes generating an index value integer of authentication path nodes within the authentication path needing updating, a second subroutine that includes initializing a left node variable and initializing a right node variable based on a generated leaf position, and a third subroutine that includes iterating the left and right node variables with a merging operation until reaching the index value integer and swapping the left node variable with an indexth node within the authentication path.