72 results about "Online identity" patented technology

Disclosed embodiments relate to systems and methods for classifying network session activities. Techniques include identifying a session established using a native client between a network identity and a network resource; monitoring messages conveyed during the session to identify a first data element associated with the session; analyzing the first data element to identify a characteristic of the native client; monitoring messages conveyed during the session to identify a second data element associated with an action requested by the network identity; and analyzing the action and the characteristic of the native client to determine whether the action is a human-initiated action.

Systems, methods, and computer-readable storage media for providing a decentralized network. One method includes generating a plurality of tokens comprising cyber resilience data and assigning a plurality of unique identifiers to the plurality of tokens, at least one unique identifier of the plurality of unique identifiers corresponding with at least one token of the plurality of tokens, the at least one token corresponding with one or more access rights for accessing the cyber resilience data. The method includes broadcasting the at least one unique identifier to a data storage, receiving a request for the cyber resilience data of the at least one token, verifying the request based on one or more access controls of the decentralized cyber identity and the one or more access rights, and accessing the cyber resilience data corresponding with the at least one token via the at least one unique identifier.

Systems and methods are described for receiving a request to provide content to at least one authorized recipient; generating a customized message comprising at least one action associated with the content; causing transmission of the customized message to a mobile computing device associated with the at least one authorized recipient, requesting authorization data corresponding to the at least one authorized recipient; responsive to receiving the requested authorization data: verifying that the authorization data correlates to an identity of the at least one authorized recipient or an identity of the mobile computing device; determining a classification of the at least one authorized recipient; and generating a Rich Communication Service (RCS) message comprising the content; and scheduling, using a machine learning model and based on the determined classification, delivery of the RCS message to the mobile computing device.

The embodiment of the invention provides an access method and device and a computer readable storage medium, and relates to the technical field of communication, so that a terminal can access a plurality of network nodes by using one identity credential without storing a plurality of identity credentials, and the possibility of leakage of the identity credentials is effectively reduced. The method comprises the following steps: receiving indication information of a target transceiving node of a base station network; the indication information is used for indicating the terminal to use the digital identity to request the access authority of the network on the target time-frequency resource; in response to the indication information, sending first request information on the target time-frequency resource; the first request information comprises a digital identity of the terminal; receiving a network identity used for representing the access permission; and accessing the network by adopting the network identity. The method and the device can be used in a wireless communication process.

The invention discloses a multi-level network identity verification and access control system, which is characterized in that a biological feature recognition technology is further introduced after traditional password verification, and multi-scale feature extraction is carried out on a fingerprint image input by a user by utilizing an image processing technology based on deep learning; shallow detail features and global structure features of fingerprints are captured, and comprehensive feature representation of a fingerprint image is obtained through feature selection enhancement and multi-level feature joint perception processing, so that a defogged fingerprint image is generated, and based on pixel-by-pixel fingerprint difference information between the defogged fingerprint image and an authorized fingerprint image, the defogged fingerprint image is obtained. A final verification result is generated, and it is ensured that only the verified user can access the system or data conforming to the role of the user. Through the mode, the problem of poor fingerprint image quality can be effectively solved, so that the accuracy and safety of identity verification are improved, and the overall performance of the system and the user experience are optimized.

The invention relates to the technical field of network security defense, in particular to a distributed threat intelligent honeynet trapping method, which comprises the following steps: S1, on the basis of an attack deception defense technology, constructing a trap on the inevitable way of a hacker, confusing the attack target of the hacker, accurately sensing the attack behavior of the hacker, and guiding and isolating the attack traffic into an intelligent honeynet; and S2, combining attack countering and attack tracing to accurately obtain network identity and fingerprint information of the hacker. According to the distributed threat intelligent honeynet trapping method, through dynamic assembly of a bait environment and a monitoring module and reconstruction of a polymorphic module, resources of basic elements (a sandbox, bait and the like) forming the intelligent honeynet are servitized, and the maximum flexibility is ensured through modular design. When deception resources are deployed, different types of sandboxes can be randomly arranged according to an existing template or a user-defined mode, various disguise confusion capability combinations adaptive to a typical power application scene are called, and existing anti-trapping techniques and tactics of attackers can be effectively coped with.

Digital signatures using the Diophantine system of equations are implemented. A digital signature is an authentication mechanism that enables the creator of a message to attach a code that acts as a signature. A digital signature scheme typically includes three algorithms: a key generation algorithm, a signing algorithm, and a signature verifying algorithm. The key generation algorithm selects a private key uniformly at random from a set of possible private keys. The key generation algorithm outputs the private key and a corresponding public key. The signing algorithm produces a signature given a message and a private key. The signature verifying algorithm either accepts or rejects a message's claim to authenticity based at least in part on the message, the public key, and the signature.

The invention discloses a self-adaptive distributed network integration system and method for virtual and real unmanned aerial vehicle cooperation, and relates to the technical field of unmanned aerial vehicle control, the system comprises a central control plane and at least one node agent, the central control plane comprises a global identity manager configured and distributed with globally unique network identity information, recording and recovering the network identity information; the network topology and state manager is configured to generate a virtual and real network state view, responds to query and issues a network simulation instruction to the node agent; the distributed network coordinator is configured to decide and coordinate the node agents to construct a cross-host logic two-layer network domain; the security policy manager is configured to define and store a network access control policy of the virtual unmanned aerial vehicle; the adaptive distributed network integration system and method aim to realize physical presentation of the virtual unmanned aerial vehicle on the network level, so that the virtual unmanned aerial vehicle can directly communicate with and collaboratively work with a real unmanned aerial vehicle in the same network plane.

Systems and methods are described for receiving a request to provide content to at least one authorized recipient; generating a customized message comprising at least one action associated with the content; causing transmission of the customized message to a mobile computing device associated with the at least one authorized recipient, requesting authorization data corresponding to the at least one authorized recipient; responsive to receiving the requested authorization data: verifying that the authorization data correlates to an identity of the at least one authorized recipient or an identity of the mobile computing device; determining a classification of the at least one authorized recipient; and generating a Rich Communication Service (RCS) message comprising the content; and scheduling, using a machine learning model and based on the determined classification, delivery of the RCS message to the mobile computing device.

Systems and methods for embodiments of a graph based artificial intelligence systems for identity management are disclosed. Embodiments of the identity management systems disclosed herein may utilize artificial intelligence approaches for determining health indicators for the identity management state of an enterprise. Specifically, in certain embodiments, an artificial intelligence based identity management systems may utilize one or more components to generate signals associated with the identity management state of an enterprise based on a network identity graph and evaluate feature spaces of these input signals from these components based on a global objective function or the like.

The invention discloses an Internet of Vehicles efficient cross-domain authentication method based on a reputation framework, and relates to the field of Internet of Vehicles, and the method comprises an initialization stage, a system basic setting obtaining stage, a system parameter generation stage, a regional reputation weight configuration stage and an intelligent contract deployment stage. In the registration stage, a vehicle node registers an identity in the Internet of Vehicles and obtains a public and private key pair of the vehicle node; in the intra-domain verification stage, the identity of the vehicle is verified in the source region; in the cross-domain authentication stage, a vehicle initiates a cross-domain authentication request and applies for joining the Internet of Vehicles of a target area; in the identity tracking stage, historical authentication records of the vehicle in the cross-domain authentication process are tracked. The method and the device have the effect of improving the system security.

A method for electronic identity verification and management includes receiving a request for verification of identity for a customer from a service provider; requesting consent from the customer to access data from one or more data holders associated with the customer; receiving consent from the customer to access data from the one or more data holders and sending the consent to the one or more data holders; receiving customer data from the one or more data holders; processing the customer data to verify the identity of the customer, identifying one or more online identity sources of the customer and analysing the one or more online identity sources to determine a level of risk associated with the customer identity, and generating a verified compound digital identity for the customer based on the authenticated identity document and the one or more online identity sources of the customer without storing personally identifiable information.

A computerized method of information access handover between a first device and a second device of a user is presented. The method comprises displaying, on the first device, a QR code generated by a synchronizer. The method further comprises capturing the QR code with the second device for displaying the data record and providing a registration option for associating the data record with the user at a relying party. The method further comprises performing a web authentication registration and, in response to that the web authentication registration flow has been performed successfully, performing an information access handover and securing process. The information access handover and securing process comprises sharing, by the second device, the unique user identifier and the device identifier with the first device, storing them at the first device, and securing access to the data record. A corresponding system and computer program are provided, too.

The invention discloses a computer network identity verification system which comprises an identity authentication unit, an identity verification unit, an abnormal behavior recognition unit, a verification auxiliary auditing unit and a verification auxiliary switching unit. The verification auxiliary auditing unit is connected with the abnormal behavior recognition unit, the identity authentication unit and the verification auxiliary switching unit at the same time, and the identity authentication unit achieves network identity authentication based on a common authentication means. The identity authentication unit is used for performing identity authentication by using other means when the identity authentication unit cannot perform network identity authentication, the abnormal behavior identification unit is used for identifying network attack behaviors, and the verification auxiliary auditing unit is used for assisting auditing identity authentication. The computer network identity verification system disclosed by the invention has the advantages that the verification operation is carried out on the extension set, and the security of network identity verification is further guaranteed.

Embodiments herein relate to a method performed by an aggregating node (11) for handling network exposure services in a communication network (100) The aggregating node (11): obtains a visited network indication, wherein the visited network indication5 indicates a visited network identity of a visited network that a user equipment, UE, (10), for which a network exposure service is requested, has roamed to, and also information associated with the visited network identity and / or the UE (10); and triggers an execution of the requested network exposure service targeting the UE based on the obtained visited network indication and the obtained10 information.

Disclosed is a computer implemented system for digitally authenticating, registering, and enrolling a consumer in a secure online identity verification system that prevents identity fraud and provides public anonymity to the consumer based on the consumer's live feed dynamic biometric information gathered via the Internet, the system wherein the system includes a simultaneous use security system designed for individual consumer identity verification with an encoded display during an active Internet session and at least one or more individual consumer legal identity and verified aliases assigned to the at least one or more of a nom de plume, icon, badge, and avatar and selected for the individual consumer's public identity. The system and method are further designed to allow notarization including self-notarization.

An approach is described for a base station to generate a first message and a second message. The base station transmits the first message and the second message to a user equipment (UE). The first message is associated with a cell supported by the base station and includes a first public land mobile network (PLMN) identity index and a first list of one or more network slices supported by a first PLMN associated with the first PLMN identity index. The second message is associated with one or more neighboring cells, and includes the first PLMN identity index and a second list of one or more network slice data associated the first PLMN as supported by the one or more neighboring cells. In addition, at least one of the one or more network slice data in the second list includes a sub-list of one or more neighboring cell data.

Embodiments of the present application provide a device selection method and apparatus, including: an edge enabler server (EES) receiving information from a terminal device (UE) requesting the EES to determine a first edge application server (EAS) for the UE; then, the EES determining the first EAS according to at least one of a public land mobile network identity (PLMN ID) corresponding to the UE or an edge computing service provider identity (ECSP ID) corresponding to the UE, and sending information of the first EAS to the UE. The EES selects the first EAS for the UE through at least one of the PLMN ID of the UE or the ECSP ID of the UE, and the first EAS selected by the EES for the UE supports services of the UE, thereby avoiding the problem that services are affected because the EAS obtained by the EES cannot meet the services of the UE, and improving the experience of users.

1. The name of this design product: smart key device. 2. Purpose of this design product: Mainly used for online identity authentication. 3. The key point of the design of this product lies in its shape. 4. The picture or photo that best illustrates the design points: Stereoscopic drawing 1.

The invention provides a method and a device for pushing data, electronic equipment, a computer readable storage medium and a computer program product, and relates to the technical field of artificial intelligence such as streaming media technology, data transmission and cloud service. A specific embodiment of the method comprises the steps of detecting whether a global domain name system configuration file is maintained or not in response to a received data push flow request of a target application; in response to the absence of the global domain name system configuration file, based on the network identity identification instruction, reading domain name system information recorded by the target network identity, and determining a target address; and orienting the to-be-pushed data uploaded by the target application to the target address, and pushing the to-be-pushed data to target equipment indicated by the target application by using a push flow component of the target address. According to the mode, the configuration difficulty and the modification limitation of the domain name system can be reduced, so that the flow pushing platform can complete the analysis of the domain name system in a more flexible and quality manner, and the flow pushing capability of the flow pushing platform is improved.

A network identity protection method and device, and electronic equipment and a computer-readable storage medium. The method includes: after receiving a claim settlement request of target account information, obtaining all first transaction credentials corresponding to the target account information from a smart contract, where the target account information is configured for login to a target application or website; the first transaction credentials are configured to record login information corresponding to login requests uploaded by a server of the target application or website; obtaining all second transaction credentials corresponding to the target account information from blockchain nodes in a blockchain network, where the second transaction credentials are configured to record login information corresponding to login requests for normally authorized login to the target application or website; and comparing the first transaction credentials with the second transaction credentials to respond to the claim settlement request.

Profile Information is aggregated from online websites and services to correlate discovered identities to one another via computational analysis of Intra-Personal Relationships, Inter-Personal Relationships, and Profile Data. The information, relationships and content of identities which have been determined to share Intra-Personal relationships are aggregated into Meta-Profiles; the Meta-Profiles are used in place of component Intra-Related identities to optimize computer functions such as social graph operations, content customization, and audience operations (including: analysis, metrics, profiling and targeting). The system processes identities and relationships belonging to individuals registered with the system and those belonging to unregistered users. The system is provided with data from users, via third-party systems, or through automated discovery. These innovations solve problems of online identity disambiguation specific to internet computing, and improve computer operations by optimizing memory footprint and operation calls to minimize the number of nodes and edges traversed.

Embodiments of the present disclosure relate to protection for a discovery message. In one aspect, a first terminal device receives a discovery message from a second terminal device, and the discovery message comprises an indication of whether a network identity is comprised in the discovery message. Based on determining that the indication indicates that the network identity is comprised in the discovery message, the first terminal device obtains the network identity. In this way, the first terminal device will not try to decrypt the discovery message with multiple "assumed" but "wrong" keys which most likely would be failed finally and would be very time and energy consuming. Therefore, the communication efficiency of the discovery message can be improved and the power consumption of the first terminal device can be reduced.

Disclosed embodiments relate to systems and methods for dynamically reviewing managed session activity using machine learning models. Techniques include identifying a managed session between a network identity and a target resource; performing a reviewal process for the managed session, including identifying session data associated with the managed session; providing the session data and a context data as an input to at least one machine learning model; obtaining an output from the at least one machine learning model based on an analysis of the session data and the context data; and determining, based on the output, whether to perform a security action associated with the managed session.

The invention discloses a network identity credibility authentication system fused with a block chain, and the system comprises a client service module which is used for carrying out the homomorphic encryption processing of original identity data to generate encrypted identity data, generating a group signature associated with the encrypted identity data in a cryptographic manner based on an anti-quantum cryptography algorithm, and sending the group signature to the client service module; generating a zero-knowledge proof based on the encrypted identity data and the group signature; and the on-chain verification and evidence storage module is deployed in a block chain network in a smart contract form and is used for verifying the zero-knowledge proof and registering the group signature as an anonymous identity certificate corresponding to the encrypted identity data after the verification is passed. The system ensures that the original identity data of the user does not need to leave its local device. The verifier can confirm the authenticity and compliance of the identity of the user only by verifying one cryptographic proof through the block chain.

Aspects described herein include a method of automatically grouping client devices for a user-defined network (UDN). The method includes receiving, from a client device, an authentication request to join an access provider network. The authentication request includes a unique identifier of the client device that is targeted to a coalition-based network. The method also includes transmitting the unique identifier to a UDN cloud, transmitting the authentication request to an identity provider, and in response to authentication of the authentication request by the identity provider, receiving, from the UDN cloud, a list of one or more UDNs associated with the unique identifier. The method further includes joining the client device with one or more other client devices that are present on the access provider network of the same UDNs listed.

This invention discloses an adaptive distributed network integration system and method for virtual-real drone collaboration, relating to the field of drone control technology. It includes a central control plane and at least one node agent. The central control plane comprises: a global identity manager, configured to assign globally unique network identity information and record and reclaim the network identity information; a network topology and state manager, configured to generate virtual-real network state views, respond to queries, and issue network simulation commands to the node agents; a distributed network coordinator, configured to decide and coordinate the node agents to construct a cross-host logical Layer 2 network domain; and a security policy manager, configured to define and store network access control policies for virtual drones. This adaptive distributed network integration system and method aims to achieve a "physical" representation of virtual drones at the network layer, enabling them to communicate directly and collaborate with real drones within the same network plane.

A cross-domain identity authentication method based on SGX belongs to the field of Internet of Things identity authentication and solves the technical problems of edge terminal node identity privacy exposure, session insecurity, and high security authentication complexity. The central agent registers on the Intel online identity authentication server, completes trusted authentication, and obtains a remote authentication report as the trusted root of the entire inter-domain trusted network. Each trusted domain establishes a domain proxy server in its own security domain based on the relevant conditions within its own domain, and uses the edge domain agent and the central agent as nodes of the inter-domain trusted network. The edge trusted domain agent obtains trusted authentication by registering and remotely authenticating with the central agent. The two edge domain agents achieve mutual authentication of the trusted state through two-way remote authentication, thereby realizing trust transmission and privacy protection. Through the trusted and secure communication channel established by the two edge domain agents, the identity authentication and key negotiation process of the data requesting terminal node and the data owning node is completed.

Disclosed herein are techniques for dynamically identifying at least one network resource accessible to a network identity. Operations may include receiving a request associated with a network identity; identifying a first data element associated with the network identity; generating a plurality of instances of the request; fetching, just in time, based on the first data element and in association with at least one of the plurality of instances of the request, two or more policies associated with the network identity wherein the two or more policies are at least one of: located in two or more data storage locations, associated with two or more policy types, or associated with two or more types of resources; evaluating, just in time, based on the first data element and in association with at least one of the plurality of instances of the request, a batch of one or more policies; and identifying, based on the evaluation, one or more network resources accessible to the network identity.