5174 results about "Password" patented technology

The invention provides a multi-private-domain visitor portrait sharing and privacy protection routing method based on federal learning, and relates to the technical field of data sharing and privacy protection, and the method comprises the steps: calculating the feature sensitivity and distributing a differential privacy budget, and adding mixed noise to the original data of a visitor portrait for privacy protection, according to the method, feature vectors are encrypted by adopting fully homomorphic encryption based on ideal lattices, threshold password segmentation is performed by utilizing a Viterbi algorithm, sub-key components are distributed to private domain environments, a hybrid network structure is constructed to extract features, federal optimization is performed based on data quality and historical contribution degree, and a feature extraction network is updated. The method comprises the following steps: carrying out feature dimension reduction by using a dual auto-encoder, extracting key features and generating user feature fingerprints, carrying out user grouping by calculating the similarity of the feature fingerprints, and realizing safe sharing of user similarity information and visitor portrait original data in combination with multi-party safe calculation and a hierarchical data access strategy.

The invention provides a blockchain-driven distributed private data storage and access control method and system, and relates to the technical field of access control, and the method comprises the steps: carrying out the sensitivity scoring and fragmentation processing of private data, organizing a data fingerprint into a Bloom filter, and constructing an integrity proof tree, the data fragments are encrypted and then submitted to a distributed storage network, and an evidence storage record of the data fingerprints is generated in the block chain; during data access, a hierarchical access key is dynamically generated according to behavior characteristics of a visitor, and the hierarchical access key is distributed to an authorized node group after threshold segmentation; the authorization node group generates an authorization voucher by using a threshold signature scheme based on a lattice password, and writes the authorization voucher into the block chain; and the visitor obtains the data fingerprint and the encrypted data fragment by using the authorization certificate, and decrypts the data fragment of the corresponding authority level through the secure multi-party calculation recombination key component after verifying the integrity.

The invention relates to the technical field of computer security, and discloses a computer remote login identification device based on artificial intelligence, which comprises a user side device module used for collecting biological identification data and input behavior data of a user; the authentication and verification module is used for executing multi-mode identity authentication and dynamically adjusting an authentication strategy; the behavior analysis and risk assessment module is used for analyzing a behavior mode and a login environment of the user; the database and storage module is used for storing user identity information, behavior characteristic data and authentication logs; and the security monitoring and alarming module is used for monitoring the login activity of the user in real time and detecting potential security threats. According to the invention, the design based on multi-modal authentication greatly improves the security of remote login. By combining a plurality of authentication means such as face recognition, fingerprint recognition and voice recognition, the system can effectively prevent security vulnerabilities such as password stealing, fingerprint counterfeiting or facial image attack.

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

A machine learning-based fraud detection system (100) for financial transactions, comprising the following: a data collection and preprocessing module configured to capture transaction data from financial institutions, payment gateways and bank modules, and to perform data cleansing, normalization and format conversion; a module for creating user profiles and behavioral analyses, configured to create dynamic user profiles based on historical transaction patterns, spending habits, device usage, and geographic location; an anomaly detection and risk assessment module configured to use machine learning algorithms to detect deviations from normal transaction patterns and assign a dynamic risk rating to each transaction; a fraud detection module configured to classify transactions as legitimate or fraudulent based on supervised and unsupervised learning techniques, including decision trees, support vector machines (SVMs), and deep learning models; a rule-based and hybrid fraud detection module configured to integrate predefined rule-based fraud detection mechanisms with AI-driven anomaly detection to improve fraud detection accuracy; a real-time fraud detection and warning module configured to monitor transactions in real time and generate security alerts via SMS, email or mobile app when suspicious activity is detected; a transaction verification and multi-factor authentication (MFA) module configured to implement adaptive authentication measures, including biometric verification, one-time passwords (OTP), and challenge-response authentication for high-risk transactions; a self-learning and model-updating module configured to dynamically update fraud detection models using reinforcement learning and federated learning techniques; a data encryption and security module configured to protect transaction data using encryption techniques, including AES-256 and RSA, to prevent unauthorized access and data breaches; and A dashboard and reporting module configured to provide real-time analytics, visualizations, and fraud detection reports for financial institutions to monitor, track, and mitigate fraudulent activity.

Systems, apparatuses, methods, and computer program products are disclosed for authentication of devices. An example method includes an authentication technique utilizing multiple authentication factors. The first authentication factor includes obtaining identical quantum entangled particles by a first device and a second device. The first and second device may read the quantum entangled particles to obtain identical bit sequences associated with the quantum entangled particles. The first and second device may utilize the bit sequences, along with a second factor, to authenticate a connection between the devices. The second factor may be, for example, a user password. The first device may send a request for authentication including one of the bit sequences and an encrypted version of the user's password. The second device may authenticate the first device using an identical copy of the bit sequence and previously obtained knowledge of the user's password.

The invention discloses an Internet of Things test platform adaptation method, system and device based on post quantum cryptography. The method comprises the following steps: constructing a quantum threat perception model; establishing a multi-dimensional adaptive decision matrix, and generating a candidate post-quantum cryptography algorithm set; dynamic injection of a cryptographic protocol is executed, and lossless replacement of a communication layer encryption suite is achieved; deploying a runtime performance monitoring engine, and collecting encryption and decryption delay, memory occupancy rate and electromagnetic radiation characteristic data in real time; and constructing an algorithm switching decision tree based on reinforcement learning, and when a quantum attack feature or an equipment performance threshold is detected to break through, triggering cryptographic algorithm dynamic migration. A quantum threat perception driven Internet of Things security adaptation system is constructed, and by introducing a dynamic password switching mechanism, a hardware acceleration optimization scheme and a trusted execution environment, the security upgrading problem of traditional Internet of Things equipment in the post-quantum era is solved. According to the invention, the execution efficiency of the PQC algorithm of the resource-constrained equipment can be improved, and the key updating delay is reduced.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

The invention relates to the technical field of cryptography, and particularly provides a system and method for resisting migration of a quantum cryptographic algorithm, a storage medium, equipment and a product, the system comprises a first end, a second end and a third end, the first end is used for performing cryptographic operation on target data according to an operation configuration strategy to obtain a cryptographic operation result, the operation configuration strategy comprises at least one of traditional cryptographic operation and anti-quantum cryptographic operation, and the cryptographic operation result comprises at least one of a traditional operation result and an anti-quantum operation result; and the second end is used for verifying the password operation result according to a verification configuration strategy to obtain a verification result, and sending the verification result to the first end. According to the system provided by the embodiment of the invention, migration of the quantum cryptography resisting algorithm can be realized, and the transformation cost is relatively low.

The invention discloses an encrypted file access method and device, equipment and a storage medium, relates to the technical field of data processing, is applied to a creative operation system integrated with a hardware password card, and comprises the following steps: recording an index value corresponding to a target key generated by a target hardware password card, then generating a to-be-encrypted extension attribute based on a to-be-extended file, and sending the to-be-encrypted extension attribute to the target hardware password card; encrypting the to-be-encrypted extension attribute in the target hardware password card by using the index value to obtain an encrypted extension attribute; storing the encrypted extension attribute in the to-be-extended file to obtain a to-be-encrypted file, and encrypting the to-be-encrypted file in the target hardware password card based on the index value to obtain an encrypted file; and judging whether the file access request meets a preset attribute access condition or not by using an access center generated by a preset access mechanism, if so, calling the target hardware password card to decrypt the encrypted extension attribute, and then accessing the encrypted file based on the obtained extension attribute information. Therefore, the security of file access can be improved.

The invention relates to the field of engineering building data management, and discloses an engineering building BIM data security management method, which comprises the following steps: step 1, user identity is verified through multi-factor identity authentication, and the multi-factor identity authentication comprises user name password authentication, dynamic password authentication and biological recognition authentication; 2, performing dynamic identity verification based on behavior data of the user, wherein the behavior data comprises an operation path, a time characteristic, an equipment fingerprint and a geographic position of the user; 3, according to the role and task state of the user in the BIM project, dynamically allocating access authority; and 4, predicting the authority demand of the user in the future task stage through an AI algorithm, and automatically adjusting the authority. Through combination of multi-factor identity authentication and user behavior analysis, dynamic verification of the user identity is realized, the authority demand of the future task stage is predicted through the AI model, and the flexibility and accuracy of authority management are greatly improved.

Systems, apparatuses, and computer program products are disclosed for authenticating a user using a knowledge factor identification transaction with a challenge authentication token. An example method includes providing a logon request, wherein the logon request comprises a user identifier received from a user. The example method further includes receiving a challenge sequence and generating a password structure, wherein the password structure is based on a static password received from the user and the challenge sequence. The example method further includes generating a challenge authentication token comprising the user identifier, the password structure, and a client timestamp and providing the challenge authentication token. The example method further includes receiving an authorization decision message, wherein the authorization decision message is indicative of whether the challenge authentication token was verified.

The invention relates to the technical field of information security, provides an intelligent warehouse login verification method and system based on dynamic living body detection, and is used for realizing accurate generation of an identity label vector, enhanced authentication of a dynamic password and automatic matching of warehouse authority while accurately performing living body detection. And the security and convenience of warehousing system login are comprehensively improved. The method comprises the following steps: collecting real-time interaction action data of a warehousing system login user, calling a preset living body detection algorithm to carry out dynamic biological characteristic analysis on the real-time interaction action data, and generating a living body verification confidence coefficient and a user identity identification vector; performing dynamic password enhanced authentication according to the living body verification confidence coefficient and a preset security authentication threshold value, and generating a dynamic access token containing multiple layers of encryption identifiers; and based on the user identity identification vector and the dynamic access token, executing storage permission automatic matching processing, and outputting a login verification result associated with the user permission level to the storage system according to the permission matching label.

The invention provides a multi-mode unified identity authentication method based on an OAuth2.0 technology, and the method comprises the steps: constructing a unified organization and user management system based on an OAuth2.0 protocol, and enabling the organization and user management system to integrate a unified account, authorization, authentication, application and audit management module; single sign-on, security access and centralized management and control are provided for an application system according to a plurality of preset authentication and authorization modes, wherein the preset authentication and authorization modes comprise an authorization code mode, an implicit mode, a password mode and a client mode. The system and the method have the beneficial effects that through a centralized digital identity management, authentication, authorization, monitoring and auditing platform, a legal user is ensured to access a trusted system and equipment with proper authority, and real-time early warning and effective prevention are performed on abnormal access behaviors, so that all-around security service and support are provided for an application system and related personnel; and the workload of system operation and maintenance is reduced while the user experience is improved.

The invention discloses a secret communication method, a first terminal, first equipment, a first platform, a computer readable storage medium and a computer program product, and the method comprises the steps: the first terminal determines a first secret key and a second secret key, encrypts a first parameter based on the first secret key and the second secret key, and obtains a second parameter, sending a first request including the second parameter to the first device; the first device receives the first request and sends a second parameter to the first platform; the first platform receives the second parameter, determines a third key and a second key, decrypts the second parameter based on the third key and the second key to obtain a first parameter, retrieves based on the first parameter to obtain a second retrieval result, encrypts the second retrieval result based on the second key to obtain a first retrieval result, and sends the first retrieval result to the second platform; sending a first message including the first retrieval result to the first device; the first device receives and forwards the first message to the first terminal; and the first terminal receives the first message, and decrypts the first retrieval result based on the second key to obtain a second retrieval result.

Real-time monitoring and alerting of breached security credentials for server-based endpoints is described herein. In various embodiments, a software component (that intercepts outgoing network traffic from a computing device) or a server-based breach monitoring component may receive a request for endpoint data. Credential data may be included in the request. The endpoint and / or the credential data may be compared to credential data linked to a list of compromised endpoints. An alert may be generated for the client device when both a match is detected with credential data of a breach object on the list of compromised endpoints and the breach time field of the breach object is after a previous credentials change for the endpoint. Access to the endpoint may be blocked and / or a change password mechanism may also be displayed to change the user credentials prior to revisiting the endpoint.

A process includes receiving credentials associated with a request to access a computer platform. The credentials include a password and a user identification. The process includes determining a key handle and a reference cryptographic digest corresponding to the user identification. The process includes determining a second cryptographic digest corresponding to the user identification. Determining the second cryptographic digest includes providing the key handle and the password to a security processor of the computer platform and initiating an operation by the security processor to apply a keyed-hashing function to the password based on a cryptographic key corresponding to the key handle to provide the second cryptographic digest. The security processor stores the cryptographic key. The process includes regulating access to the computer platform based on a comparison of the second cryptographic digest to the reference cryptographic digest.

The embodiment of the invention discloses a database integrity verification method, device and system, a medium and equipment, and the method comprises the steps: firstly, injecting a section enhancement code at a preset tangency point position of a database; then, when a modification operation for the database is received, executing the section enhancement code to generate a verification hash value corresponding to the modification operation; and further, calling a password service of a trusted third party, and performing data signature on the target data corresponding to the modification operation by the verification hash value through the password service. And finally, verifying the database data based on a hash operation message authentication code obtained by verifying the hash value and the data signature so as to determine whether the database is tampered or not.

The invention discloses a password resource allocation method and system based on an attention mechanism and a residual network, and relates to the field of password allocation based on a deep Q network. The method and the device aim at meeting high-concurrency and multi-task complex network decision-making requirements. The password service scene covers multiple task types, including encryption and decryption operation, large-scale signature verification, key management and cross-service security calculation. The tasks put forward extremely high real-time performance and accuracy requirements for computing resources, communication bandwidth and task scheduling of the system. According to the method, the deep reinforcement learning method is introduced, the characteristics of different password service tasks are dynamically adapted, intelligent decision making can be carried out based on the real-time system state and service requirements, and therefore the resource utilization efficiency is remarkably improved. Meanwhile, by optimizing task path planning, system time delay is reduced, load balancing is achieved, and the performance stability and task response capacity of the password service in a high-concurrency scene are effectively guaranteed.

The invention discloses an enterprise network weak password evaluation method based on a logic attack graph and password evaluation, which comprises the following steps: firstly, collecting a network topology structure, a security policy and system configuration of an enterprise intranet, and combining ATTamp; according to the inference rule mapped by the CK knowledge base, logical inference is carried out by using a MulVAL tool to obtain a logical attack graph; then acquiring system account password information of each host, calculating password entropy and simulating password blasting time evaluation to obtain a password risk value; then, the password risk value is associated and combined with the logic attack graph, and a new weighted attack graph containing the password risk value is generated; identifying an attack starting point and an attack target point in the attack graph with the weight at the same time; traversing all attack paths in the weighted attack graph by using a depth-first search algorithm, and calculating a weak password risk value on each attack path; and finally, taking the attack path with the highest weak password risk value as an optimal attack path, generating and visualizing, and improving the network security defense level of an enterprise.

The invention discloses an MES (Manufacturing Execution System) login authentication method based on a face recognition technology, which relates to the technical field of industrial information security, and comprises the following steps of: constructing an authentication data acquiring a face image of an authorized user of an MES, extracting a reference face feature template after preprocessing, and constructing the authentication database; performing associated storage on the reference feature template, user identity information, preset operation authority and affiliated production station information to form an authentication database; according to the method, spoofing attacks are prevented through multi-mode living body detection, and the problem that a traditional password / key is easy to leak and borrow is solved in combination with uniqueness of human face biological characteristics; a person-post-terminal binding mechanism further limits permission abuse, and internal operation risks are reduced; the non-contact authentication does not need to memorize a password or carry a physical key, and is suitable for a working scene that a workshop operator wears gloves and holds tools; and the recognition passing rate in a complex industrial environment is improved through dynamic threshold optimization.

The invention discloses a digital certificate authentication method and device based on a post-quantum algorithm, equipment and a medium, and relates to the field of information security, and the method comprises the steps: obtaining digital certificate application information of a target entity for auditing; if the digital certificate request passes the verification, analyzing the digital certificate request submitted by the target entity, and obtaining a key encryption key of the digital certificate request by using a post-quantum key encapsulation algorithm after verification; then obtaining user information of the target entity and an active cryptographic algorithm public key value in the digital certificate request, generating an anti-quantum-attack digital certificate according to the user information and a public key, and signing and issuing the anti-quantum-attack digital certificate to the target entity; the digital certificate comprises a post-quantum key packaging public key, a post-quantum signature public key and an active-service public key password public key ciphertext of the entity. According to the application, the public key data of the traditional public key cryptographic algorithm can be protected, the quantum computing attack is resisted, the public key plaintext of the traditional public key cryptographic algorithm can be obtained in the service system, and the influence on the original service using the traditional public key cryptographic algorithm is extremely low.

The invention provides a password strength real-time evaluation method and device. The method comprises the following steps: training a polynomial naive Bayesian model through a password data set, wherein the password data set comprises a cracked weak password sample and a verified strong password sample; responding to a trigger event of password input by the user, and extracting character-level features and semantic features of the password input by the user; respectively generating sub-feature vectors according to the character-level features and the semantic features, and weighting the sub-feature vectors to obtain feature vectors; scoring the feature vector by using a trained polynomial naive Bayesian model to obtain a password strength score; and determining a password strength grade according to the password strength score. According to the method provided by the invention, the password strength can be evaluated in real time, and the accuracy of password security evaluation is improved.

The invention relates to the technical field of account authentication, in particular to an account authentication method and system and a storage medium. The method comprises the following steps of collecting account and password information of a user, detecting synchronous reaction of equipment for the account and password information of the user, performing character error elimination and structure standardization on the account of the user based on a detection result, generating account block data, obtaining IP positioning of terminal equipment and performing longitude and latitude mapping. Generating a positioning area number to construct a dynamic fingerprint, performing key matrix projection based on the dynamic fingerprint of a user, generating projection fingerprint data, constructing a layered authentication code, performing disturbance offset simulation on the layered authentication code, generating an offset authentication key, performing dynamic rule verification, and generating dynamic token data; and constructing a terminal equipment trust link by using the dynamic token data, and performing authority control mapping, thereby constructing an authentication account session. According to the invention, a safer and more flexible account authentication method is realized.

The invention discloses a computer remote login identification system based on artificial intelligence, and the system comprises a remote login request receiving and processing module which is responsible for receiving a remote login request of a user, and carrying out the preliminary processing and verification; the multi-mode identity authentication module adopts a three-factor verification matrix of biological characteristics, behavior characteristics and equipment fingerprints, and adjusts weights of different authentication dimensions according to security requirements and user requirements; the lock screen state sensing module is responsible for sensing a lock screen state; the dynamic behavior analysis engine is used for monitoring behavior characteristics of the user in real time and comparing the behavior characteristics with a preset abnormal behavior mode so as to find abnormal login behaviors in time; the intelligent unlocking decision tree is used for making an intelligent unlocking decision according to the authentication score, the equipment environment and the behavior abnormality; and the security execution module is responsible for automatically filling a password and executing an unlocking operation after the user identity authentication is passed, and monitoring an abnormal condition in the unlocking process in real time in combination with equipment environment monitoring and an abnormal detection model.

A method of securely storing a device password. The method includes receiving from a relying party, via a communication interface, a first public encryption key associated with a first device associated with a user identity. The method includes generating, at a second device associated with the same user identity and registering with the relying party, a public encryption key pair that includes a second public encryption key. The method includes performing a first level of encryption with respect to a password encryption key associated with encrypting a device password of the second device to produce a singly encrypted password encryption key using the second public encryption key. The method includes performing a second level of encryption with respect to the singly encrypted password encryption key to produce a doubly encrypted password encryption key using the first public encryption key and storing the it on the second device.

The invention relates to the technical field of security door locks, in particular to an intelligent door lock management system which comprises a data acquisition module, an extraction module, a first determination module, a second determination module, a judgment module, an identification module, an adjustment module, a correction module and an alarm module. Through multi-level identity verification and abnormal behavior detection, the safety of the door lock is improved, the key pressure, the sliding track and the face image are acquired in real time through the data acquisition module, the face features and the shielding rate are extracted in combination with the extraction module, preliminary recognition of the target identity is achieved, and the safety of the door lock is improved. The key pressure and track consistency degree is calculated through a second determination module, whether an abnormal door opening mode exists or not is judged, a judgment module integrates the abnormal mode and the shielding rate and confirms the target identity and permission, and a recognition module recognizes the permission value according to the permission library and conducts dynamic adjustment. The problem that the prevention effect on complex security threats is low due to the fact that recognition depends on single password input is effectively solved.

The invention relates to the technical field of data processing, in particular to an artificial intelligence-assisted password security policy dynamic adaptive adjustment method, which comprises the following steps of: acquiring login operation data to generate an encryption feature gradient; the aggregation server generates a dynamically updated federal reference model through a double-channel model updating mechanism, wherein a long-term model updating channel is fused with historical parameters to maintain system stability, and a short-term behavior time window channel dynamically adjusts recent gradient weight based on a time decay function. A graph computation engine generates a spatio-temporal composite risk score. And the risk decision engine generates a third-level response instruction. A risk misjudgment event is verified based on a response result, high-value training samples are screened to drive incremental training, space-time sensitive parameters are finely adjusted by a meta-learning optimizer, and noise is injected into a quantum gradient jammer to defend attacks. Optimized parameters are synchronized to a system module, and a closed-loop adaptive system is formed by combining homomorphic encryption transmission, model digital watermarking, quantum source hardware binding and anti-quantum signature.

The invention belongs to the technical field of computers, and discloses an automatic user management method and system based on a FreeIPA platform, and the method comprises the steps: achieving the automatic management of the life cycle of a user through the writing of an automatic script or the use of an API interface of FreeIPA; authority and renewal strategies are automatically adjusted according to roles and service requirements of the users; a user account is automatically unlocked, an OTP token is issued, a password is modified, and meanwhile operation safety is ensured; and through tools such as nailing, automation of the approval process of user management operation is realized. By integrating enterprise communication tools such as nailing, automation of operations such as user creation, cleaning, forbidding, renewal, unlocking, OTP token issuing and password modification is realized, and the method is combined with an internal approval process of an enterprise. According to the invention, the efficiency of user management is improved, the safety risk is reduced, the standardization of user management operation is ensured, and the flexibility of the system is improved.

The invention relates to the technical field of intelligent security and protection, and discloses an identity authentication method integrating AI and password technologies. According to the method, biological characteristic data are collected through a multi-mode biosensor, and the biological characteristic data are encrypted after being processed by a deep convolutional neural network. And training an identity authentication model by using a federated learning framework in combination with a differential privacy technology, and carrying out distributed verification. And generating a one-time dynamic password based on a verification result, binding the one-time dynamic password with spatio-temporal characteristics of user behaviors to construct a matrix, and controlling the access authority by adopting an attribute-based encryption algorithm. The system is also provided with an abnormal behavior detection model, a dynamic identity label updating mechanism, a secret key updating strategy and a multi-factor authentication decision engine. The method improves the security and accuracy of identity authentication, realizes fine authority management, and is suitable for the field of intelligent security and protection.