23 results about "Node authentication" patented technology

The application provides a label authentication and authorization method and device, electronic equipment and a storage medium. The method comprises the following steps: forming inventory information based on an acquired authentication identifier for a label; sending the inventory information to the label and receiving inventory feedback information sent by the label; wherein the inventory feedback information is formed by superimposing identification information corresponding to the label in a specific part of the inventory information based on the inventory information after the first inventory node is authenticated by the label; the identification information is obtained by restoring the inventory feedback information based on the inventory information, and the identification information is sent to a label management network element for authentication. The application embodiment improves the authentication and authorization security of the label.

The application provides a cloud server access authentication method and device, equipment and a storage medium. The method authenticates a public key of an authentication initiating node on a blockchain network, initiates an authentication request to a node to be authenticated, collects biological feature data of a user corresponding to the node to be authenticated, encrypts the biological feature data, the current time and the public key of the authentication initiating node through a public key of a second storage node, and sends the user identifier of the node to be authenticated to the authentication initiating node through the public key of the authentication initiating node. The authentication initiating node decrypts the encrypted user features through a private key of the authentication initiating node, obtains the user identifier of the node to be authenticated, queries the first storage node through the user identifier of the node to be authenticated, and obtains a storage address. The second storage node determines a feature comparison result according to the encrypted authentication features and the storage address. The authentication initiating node determines an authentication result according to the feature comparison result.

The invention discloses a differential privacy method for preventing leakage of large model training data, and relates to the technical field of artificial intelligence large model security. The method comprises the following steps: step a, N nodes participating in training complete key negotiation through an SM4 symmetric encryption algorithm and generate a unique identity identifier, and only the nodes passing authentication access training; the central server generates a global noise seed and distributes the global noise seed to each authentication node through a TLS1.3 encryption channel. According to the invention, the federation layer solves the problem of distributed training cross-node leakage through node authentication and noise cooperation, and ensures that data between nodes is not reversely deduced; data layer dynamic sensitivity calculation and symbol consistency noise keep sample semantics while privacy is protected, and damage to data value is reduced; the model layer is subjected to gradient clustering noise reduction and dynamic cutting, interference of noise on model training is reduced, full-process and multi-scene comprehensive protection is achieved, and the requirements of sensitive fields such as medical treatment and finance are met.

This invention relates to the field of digital identity authentication technology and discloses a digital identity encryption authentication method. The method includes the following steps: acquiring a user identity information feature dataset and generating a master key library through multi-dimensional encryption preprocessing; extracting fragmented verification features from each master key library to determine authentication rules; constructing a multi-level authentication chain and verification nodes, and obtaining the node authentication status through bidirectional verification. In a valid authentication state, the master key library is associated with authentication according to permission levels; in an invalid authentication state, abnormal verification nodes are identified, the authentication offset of their respective master key libraries is calculated, and the abnormal verification node paths are reconstructed based on this until authentication is completed. The master key library generation involves multiple types of data encryption, obfuscation, and format standardization; fragmented verification feature extraction includes key fragment sorting; authentication rule determination is based on dynamic feature priority; and anomaly handling combines historical tracing and offset calculation. This method improves authentication security and dynamic adaptability.

The embodiment of the present application provides a kind of based on the equipment communication method and device of MQTT protocol, which is applied to MQTT subject management server, comprising the following steps: receiving the first message reported by controlled node, wherein the first message includes the equipment ID of the controlled node;Corresponding to the random subject of the equipment ID of the controlled node is generated, and the random subject is returned to the controlled node;After authenticating to the control node, the random subject is sent to the control node, so that the control node and controlled node carry out MQTT protocol communication through the random subject.In the present application, the MQTT subject of node communication is managed by MQTT subject management server, and the MQTT subject is randomized, so that malicious network node cannot listen or interfere with node communication, thereby improving the communication security between nodes of MQTT protocol network.

Disclosed methods and systems include receiving, by a control panel of a multi-cloud platform, a node authentication token [NAT] corresponding to a compute node in the multi-cloud platform. The compute node may include a token generator that generates the NAT and sends the NAT to the control panel. The control panel may receive the NAT from the compute node via a secure administration connection between the control panel and the compute node. The control panel may then store the NAT in a token mapping database that associates the NAT with the node. The control panel may then perform operations to access the compute node from a conventional web browser. In at least one embodiment, these browser operations may include retrieving mapping information for the compute node from the token mapping database and generating an access uniform resource locator that includes a network address for the compute node and the mapping information.

The invention provides a single-node authentication risk detection method and system based on log analysis, which can perform real-time analysis based on an actual access log and timely identify a single-node access risk before a fault occurs, thereby effectively avoiding service interruption and improving the reliability of the system. And meanwhile, full-course automatic diagnosis from risk detection to root positioning is realized, the operation and maintenance efficiency is remarkably improved, and the manual troubleshooting cost is reduced. The method supports a plurality of potential fault points such as a plurality of heterogeneous systems, coverage networks, DNS, configurations and the like, can comprehensively monitor and diagnose various faults in a complex environment, is high in applicability, and has good expansibility and adaptability. And a comprehensive risk report and visual display are provided, so that an administrator can quickly understand the system risk condition and timely take effective measures for processing. In addition, the user can customize a risk judgment rule and a diagnosis strategy according to own requirements, and personalized operation and maintenance requirements of different enterprises are met.

Embodiments of the present application provide a kind of data processing method, device and equipment based on blockchain and computer storage medium, it is related to data processing field, to realize the accurate tracing of data on blockchain.The method comprises: first target access node sends data transmission request to data node, after the authentication of target access node passes, allow first target access node and data node carry out data transmission, and generate the access record of first target access node, first target access node is any node in multiple access nodes;According to the access record of multiple second target access nodes, determine the space stamp information of multiple data transmitted, second target access node is the access node of first target access node for completing data transmission;Based on space stamp information, trace multiple data.

Techniques discussed herein include providing a cloud computing environment in which applications are deployed using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). The control plane functionality may be invoked by a deployment orchestrator (e.g., using a client of the container orchestration platform). In some embodiments, the control plane may include a set of applications that are configured to communicate with core services for certificate generation and rotation, namespace and quota management, metric monitoring and alarming, node authentication, and cluster membership management.

The application provides a Modbus protocol security enhancement method and system in a unicast communication scenario, and relates to the technical field of industrial control networks. The method comprises the following steps: a first cipher text and a second cipher text are shared between a master node and a slave node; the master node generates a first message authentication code according to the second cipher text, a preset key and a first random number, and sends a first message to the slave node by using a target function code; the slave node authenticates the identity of the master node according to the first message authentication code, the first cipher text, the preset key and a second random number; when the slave node successfully authenticates the identity of the master node, the slave node generates a second message authentication code according to the first cipher text, the preset key and the second random number, and sends a second message to the master node by using the target function code; and the master node authenticates the identity of the slave node according to the second message authentication code, the second cipher text, the preset key and the first random number. In this way, the effectiveness of the identities of the two communication parties can be ensured, and the integrity and confidentiality of data in the transmission process can be ensured.

The invention discloses an intelligent power grid equipment trust management and authentication method and system based on a block chain, and aims to prevent identity embezzlement and disguise in a distributed electric energy network. According to the identification and authentication model, the authentication of the node is improved by using the digital certificate, the use safety of the power grid can be remarkably improved, the validity of the node can be easily verified through the Merkle tree architecture by using the intelligent power grid equipment identification and authentication model of the Merkle tree architecture, and when new equipment is added to the block chain, the new equipment can be identified and authenticated through the Merkle tree architecture. The communication with a control center can be started; the privacy and data of all participants are protected, the block chain technology can provide a distributed and decentralized security system to ensure the integrity and confidentiality of transactions, the block chain can serve as a trusted transaction platform, energy of different energy sources is exchanged between smart power grids, real-time pricing is achieved, and the transaction efficiency is improved. And simpler and more convenient energy trade can be realized, and the market is freer and more fair.

The invention discloses a non-inductive passing identity authentication method, system and device based on edge computing, and relates to the technical field of identity authentication, the method comprises the following steps: when a target user approaches an access control system and an authentication distance is satisfied, generating a non-inductive authentication instruction; a power supply switching circuit is connected to control sensing equipment at the same frequency, and sensing is triggered and a sensing vector sequence is determined according to the non-inductive authentication instruction; the first edge node executes posture authentication of real-time micro-dynamic characteristics, the second edge node executes electrode sensing authentication based on derived session key carriers, zero-knowledge proof is generated through consensus decision, and passage management is carried out on the access control system. The technical problems that active sensing and operation are needed in traditional access control authentication, single-node authentication safety is insufficient, and repeated authentication efficiency is low during multi-access-control continuous passing are solved, and the technical effects of non-inductive passing, high-safety authentication and efficient passing control are achieved.

The application provides a kind of alliance chain node authentication method, system, equipment and storage medium, to solve the security problems caused by the single node authentication mode of existing node cannot be found in time that node is maliciously controlled;In the present application, the legality of digital signature is verified according to identity authentication request;If the digital signature is legal, the identity authentication request is decrypted using the pre-stored dynamic token to obtain the identification information of the node;According to the identification information, the safety of the node is verified, and the verification result information of the safety verification is recorded to determine whether the node is safe;If the node is safe, the identity authentication of the node is completed according to the identification information;The node identity is verified by data signature and dynamic token in the present application, and the safety of the node is verified according to the identification information, the dynamic token and real-time safety verification are combined to establish a mixed mode of node authentication, to find out whether the node is safe in time, and to minimize the loss caused by the unsafe node.

The invention relates to the technical field of servers, and discloses a network node authentication method and device, a server and a storage medium, the method is applied to the server, and the method comprises the following steps: broadcasting a natural language question; information returned by the network node is received, the network node determines the information based on a first answer text, and the first answer text is an answer text of a big language model deployed in the network node to answer the natural language question; answering the natural language question through a large language model deployed in the server to obtain a second answer text; encoding the second answer text through a vector encoding model deployed in the server to obtain a semantic vector corresponding to the second answer text; determining similarity based on the information and the semantic vector; if the similarity is greater than or equal to a first similarity threshold, authenticating the network node; and if the similarity is smaller than a first similarity threshold, refusing to authenticate the network node. According to the invention, the authentication efficiency of the network node is improved.

The disclosed methods and systems include receiving, by a control panel of a multi-cloud platform, a node authentication token [NAT] corresponding to a compute node in the multi-cloud platform. The compute node may include a token generator that generates the NAT and sends the NAT to the control panel. The control panel may receive the NAT from the compute node via a security management connection between the control panel and the compute node. The control panel may then store the NAT in a token mapping database that associates the NAT with the node. The control panel may then perform operations to access the compute node from a conventional web browser. In at least one embodiment, these browser operations may include retrieving mapping information for the compute node from the token mapping database, and generating an access uniform resource locator that includes a network address for the compute node and the mapping information.

This invention relates to the field of network security technology and proposes a method and system for secure transmission in Virtual Private Networks (VPNs). The method includes: dynamically fragmenting the transmitted data of the VPN into unequal lengths to obtain fragmented data sequences; performing multi-path parallel routing optimization on the fragmented data sequences based on multi-dimensional traffic characteristics to obtain preferred transmission paths; quantifying the risks of the preferred transmission paths and performing hierarchical differentiated encryption on the fragmented data sequences to obtain encrypted data fragments; performing cross-link segmented logical isolation on the preferred transmission paths based on the encrypted data fragments to obtain virtual isolated transmission channels, and performing node authentication to obtain trusted isolated transmission channels; performing segmented transmission on the encrypted data fragments based on the trusted isolated transmission channels to obtain receiving-end data fragments; and verifying and reassembling the receiving-end data fragments to obtain restored data, thereby achieving secure transmission. This invention can improve the security of VPN transmission.

The invention provides an inventory chain node authentication method and device, electronic equipment and a storage medium, and relates to the technical field of warehouse management, and the method comprises the steps: obtaining the inventory state information of each storage location in a current warehouse; constructing a virtual logic chain for all articles in the current inventory system based on the inventory state information; calculating and generating a current inventory integrity digest value based on the logic chain relation data, and comparing the current inventory integrity digest value with a pre-stored historical inventory integrity digest value to obtain a comparison result; performing cross validation based on the logic chain relation data and the storage location physical state obtained in real time to obtain a stock state verification result; and in response to inconsistency of the comparison results or abnormal indication of the inventory state verification result, executing an alarm and logic chain self-repairing operation. In the mode, real-time, active and automatic authentication and abnormity alarm of the inventory state are realized by constructing a dynamic virtual logic chain and a cross validation mechanism, and the safety level and traceability of the warehouse are remarkably improved.

The application provides a kind of inventory chain node authentication method, device, electronic equipment and storage medium, related warehouse management technical field, method includes: obtaining the inventory state information of each location in current warehouse;Based on inventory state information, a virtual logical chain is constructed for all items in the current inventory system;Based on the logical chain relationship data, a current inventory integrity digest value is calculated and generated, and compared with the pre-stored historical inventory integrity digest value to obtain a comparison result;Based on the logical chain relationship data and the real-time acquired location physical state, cross-validation is carried out to obtain the inventory state verification result;In response to inconsistent comparison results or inventory state verification results indicating abnormalities, alarm and logical chain self-repair operations are performed.In this way, by constructing a dynamic virtual logical chain and a cross-validation mechanism, real-time, proactive and automated authentication and abnormal alarm of inventory state are achieved, significantly improving the safety level and traceability of the warehouse.

The invention discloses an edge node authentication and data encryption transmission system based on industrial Internet of Things, which belongs to the technical field of industrial Internet of Things encryption transmission, and comprises the following steps: S1, establishing an edge industrial Internet of Things edge node authentication network; according to the method, the edge node authentication network is constructed, the identity information is pre-stored in the edge gateway, and a one-time dynamic password (OTP) mechanism based on time is combined, so that illegal equipment access and replay attack are effectively prevented, the identity authentication security of the industrial Internet of Things system is remarkably enhanced, and meanwhile, the security of the industrial Internet of Things system is improved. The system automatically divides data security levels (SL1-SL4) according to feature extraction results of the collected data by the edge gateway, and adopts symmetric encryption (AES-GCM), asymmetric encryption (RSA) or hybrid encryption strategies for different levels, thereby avoiding resource overhead caused by excessive encryption of low-risk data while ensuring strong encryption of high-sensitivity data, and optimizing calculation and communication efficiency.

Methods are provided for authenticating an initiator of a transaction during processing of the transaction. Methods may include initiating a transaction, including transaction details, at a transaction initiation node. Methods may include transmitting the transaction to a processing entity. Methods may include identifying that the transaction is above a threshold of anomalous transactions based on historic transactions associated with the transaction details. Methods may include transmitting an authorization request from the processing entity to a payment card linked to the transaction details. Methods may include receiving the authorization request at the payment card. Methods may include approving and / or denying the authorization request at the payment card. Approving and / or denying the request may include input of a signature and / or biometric. Methods may include transmitting the approval and / or denial from the payment card to the processing entity. The processing entity may transmit the approval and / or denial to the transaction initiation node.

The application discloses a blockchain-driven smart grid federated learning method, and belongs to the field of smart grids.The method comprises the following steps: describing a smart grid system; establishing an optimization target of federated learning in the smart grid; establishing a difference measurement scheme of data in the smart grid; establishing an adaptive aggregation factor based on an improved MMD similarity measurement; and node authentication and model chaining.The application enables each participant in the smart grid to train a model on a local device through federated learning, breaks the data silos among the participants, and reduces the risk of local data leakage of the participants; the generalization ability and prediction accuracy of the model are improved by introducing an MMD weight factor into an improved federated learning algorithm; the blockchain technology is combined with the federated learning to prevent malicious node attacks and interference; and the local model and the global model generated by the federated learning are stored in the blockchain, the traceability and tamper resistance of the model are realized, and the system transparency and credibility and the data credibility and model security are enhanced.

The application provides an end node authentication method and device, electronic equipment and a storage medium, and belongs to the technical field of communication. The method is applied to a trusted agent edge node and includes receiving an authentication request sent by any to-be-authenticated end node and carrying a first area identifier of an area authentication network domain where the to-be-authenticated end node is located, checking the first area identifier, and returning an authentication pass response carrying an authentication certificate to the to-be-authenticated end node when the checking is passed. When authenticating the end node to join a computing power network, the application no longer checks by a unified authentication center, but checks by the end node to the trusted agent node in the distributed area authentication network domain corresponding to the computing power network intended to be joined, overcomes the performance challenge brought by the unified verification to the authentication center in a complex computing power network environment, improves the speed of end node authentication, and avoids the adverse effect of slow authentication speed on the computing performance of the computing power network.

The invention provides a network access control method for protecting user privacy, and belongs to the technical field of networks. The method is implemented by deploying a distributed system comprising a policy execution node, an anonymous gateway, a relay node cluster, a privacy verification node, a behavior risk control node and a block chain evidence storage node. The user obtains an anonymous access token after executing node authentication through a strategy; the client constructs a dynamic anonymous relay chain to transmit the encrypted access request; the anonymous gateway realizes policy non-perception verification through privacy calculation; privacy leakage is controlled in combination with dynamic privacy budget and a differential privacy technology; and blockchain evidence storage provides auditable privacy protection. The network access control method for protecting the user privacy provided by the invention realizes thorough decoupling of identities and behaviors, protects the user privacy to the greatest extent while ensuring effective execution of an access control strategy, and is suitable for privacy sensitive scenes such as enterprises, medical treatment, government affairs and the like.