397 results about "Secure authentication" patented technology

The invention discloses a server BMC dynamic security authentication and firmware protection method and system based on a hardware root of trust, relates to the technical field of server remote management security, and discloses the server BMC dynamic security authentication and firmware protection method and system based on the hardware root of trust, which realize dynamic authentication by generating a device fingerprint through a security chip. According to the method, a multi-layer protection mechanism is constructed in combination with fragment encryption, differential hash check and memory integrity verification, and meanwhile, the data credibility is enhanced by using a block chain storage key hash value, so that the problems of static authentication risk, insufficient firmware tampering detection and missing of a trust chain in a traditional scheme are effectively solved, and the security protection capability of a BMC system can be improved.

The invention relates to the technical field of information security, provides an intelligent warehouse login verification method and system based on dynamic living body detection, and is used for realizing accurate generation of an identity label vector, enhanced authentication of a dynamic password and automatic matching of warehouse authority while accurately performing living body detection. And the security and convenience of warehousing system login are comprehensively improved. The method comprises the following steps: collecting real-time interaction action data of a warehousing system login user, calling a preset living body detection algorithm to carry out dynamic biological characteristic analysis on the real-time interaction action data, and generating a living body verification confidence coefficient and a user identity identification vector; performing dynamic password enhanced authentication according to the living body verification confidence coefficient and a preset security authentication threshold value, and generating a dynamic access token containing multiple layers of encryption identifiers; and based on the user identity identification vector and the dynamic access token, executing storage permission automatic matching processing, and outputting a login verification result associated with the user permission level to the storage system according to the permission matching label.

The invention discloses a vehicle scheduling and cooperative control system and method in the technical field of surface mine construction vehicle scheduling, and the system comprises an equipment management layer which is used for obtaining surface mine environment and equipment state data and controlling equipment, and an edge layer which is used for carrying out the preprocessing and preliminary analysis of the data uploaded by the equipment management layer. The cloud end is used for constructing a digital twin environment of the surface mine, calculating a vehicle collaborative scheduling scheme and a vehicle optimal path of the surface mine by utilizing a multi-objective optimization and heuristic algorithm and a multi-agent reinforcement learning algorithm, and performing vehicle trajectory tracking control; the cloud end is used for forwarding a control instruction issued by the cloud end or the edge layer to the equipment management layer; and the security access control layer is used for performing dynamic authority security authentication and access control. According to the invention, dynamic path planning and multi-task cooperative scheduling in a surface mine scene can be realized.

The invention provides an IKE (Internet Key Exchange) protocol security enhancement method based on PUF (Physical Unclonable Function) dynamic authentication and a post-quantum mixed key, which organically combines a PUF, a post-quantum cryptographic algorithm (PQC, especially Kyber KEM) and an improved Internet Key Exchange Protocol (IKE) to realize key exchange of post-quantum security and enhanced identity authentication. The method comprises the following steps: generating a dynamic pre-shared key (PSK) by utilizing the PUF; the method comprises the following steps: integrating a Kyber KEM to an IKE protocol, and replacing traditional Diffie-Hellman key exchange; the PUF-driven dynamic PSK is used as an identity authentication method of the IKE; meanwhile, Kyber KEM and ECDH are adopted for key exchange, and a final session key is generated through joint participation of a Kyber negotiation key, an ECDH negotiation key and PSK derived by PUF; and an IKE protocol process is optimized, and Kyber key exchange and PUF (Physical Unclonable Function) authentication are completed in an IKESAINIT stage and an IKEINTERMEDIATE stage. According to the method, key exchange is post-quantum secure, identity authentication is also post-quantum secure, and the final key integrates three key components of Kyber, ECDH and PUF, so that triple security assurance is provided.

A system for authentication includes a validation system and an agent configured to communicate a first credential indicating an identification to the validation system and communicate a second credential indicating the identification to a verification service. The validation system includes a database configured to store authorized user data and a portal configured to provide selection of the verification service from a plurality of verification services. The validation system is configured to compare the first credential to the authorized user data, determine a confidence level of validity of the identification based on the comparison of the first credential to the authorized user data, receive a verification of the second credential from the verification service, and modify the confidence level based on the verification.

The invention relates to the technical field of industrial monitoring, and discloses a factory real-time digital monitoring method and system based on the Internet of Things, and a storage medium. The method comprises the following steps: carrying out encryption access on heterogeneous Internet of Things equipment through dual identity authentication to obtain a security authentication equipment identifier pool; performing multi-dimensional data acquisition on the equipment identification pool based on Hash verification to obtain an encrypted time sequence data chain; performing dynamic identification on the factory visual image by adopting a confidence adaptive threshold to obtain a multi-task fusion feature code; performing heterogeneous fusion on the time sequence data chain and the feature code by using a sliding window weight distribution algorithm to obtain a factory digital state fingerprint; and performing knowledge graph reasoning on the state fingerprint through three-level early warning threshold judgment to obtain a real-time risk level early warning code. The technical problems that heterogeneous Internet of Things equipment cannot be uniformly accessed and authenticated, multi-source data lacks safety fusion processing, and the factory state cannot be intelligently reasoned and pre-warned are solved.

The invention relates to the field of Internet of Things information security, in particular to an edge computing gateway security authentication system and method based on trusted computing and asymmetric encryption, and the system comprises a master station module, an edge device module, a terminal device module and a block chain storage module. The master station module generates dynamic trust scoring data and authentication challenge data, and negotiates a session key with the terminal equipment module; the edge equipment module is responsible for acquiring and verifying terminal equipment data and transmitting encrypted service data; the terminal equipment module generates authentication response data through the trusted platform, encrypts service data and transmits the encrypted service data to the edge equipment module; the block chain storage module records trust chain data, authentication history and abnormal behaviors. Through dynamic trust scoring, block chain storage and a multi-level encryption mechanism, the problems of insufficient dynamism and relatively low security in the prior art are effectively solved, and the authentication accuracy and system reliability of the Internet of Things edge computing gateway are improved.

A system for authentication includes a validation system and an agent configured to communicate a first credential indicating an identification to the validation system and communicate a second credential indicating the identification to a verification service. The validation system includes a database configured to store authorized user data and a portal configured to provide selection of the verification service from a plurality of verification services. The validation system is configured to compare the first credential to the authorized user data, determine a confidence level of validity of the identification based on the comparison of the first credential to the authorized user data, receive a verification of the second credential from the verification service, and modify the confidence level based on the verification.

In one embodiment, a method includes accessing transaction data associated with a protected first function of a first blockchain transaction protocol by a cybersecurity authentication service of a blockchain cybersecurity platform, accessing a transaction protocol runbook comprising preconfigured conditions associated with the protected first function, determining that the protected first function is eligible to be analyzed by an automated decisional logic module based on the transaction protocol runbook, determining each preconfigured condition is satisfied based on the transaction data by the automated decisional logic module, generating an authentication object for the protected first function, generating signed transaction data based on the accessed transaction data and a private encryption key, wherein the signed transaction data is configured to update a second blockchain transaction protocol to indicate that the protected first function is authenticated, and transmitting a transaction bundle comprising the accessed transaction data and the signed transaction data.

The invention provides a smart power grid cloud edge collaborative heterogeneous data security access method, which comprises the following steps: collecting multi-source heterogeneous power equipment data in real time based on a deployed multi-mode sensor network; based on a lightweight federated learning edge inference engine deployed on an edge end network, performing adaptive semantic enhancement preprocessing on the multi-source heterogeneous power equipment data to generate an edge encryption feature tensor; performing three-dimensional credible security authentication and knowledge fusion on the edge encryption feature tensor based on an electric power space-time knowledge graph fusion engine deployed on the cloud side to generate secure and credible electric power data; and performing space-time causal reasoning and twin mirror image comparison on the secure and credible power data based on a federated block chain-driven digital twin decision engine deployed at a cloud end to generate a dynamic security policy map and store the dynamic security policy map. According to the scheme, the data security is enhanced, intelligent analysis and dynamic decision can be performed according to the real-time state of the power grid, and optimal scheduling and stable operation of the power grid are realized.

The invention discloses a multi-factor network security authentication method and system based on an SDN (Software Defined Network). The method comprises the following steps: constructing a multi-dimensional authentication space comprising an identity feature dimension, a behavior feature dimension and an environment feature dimension in an SDN controller; decomposing the eigenvalues into deterministic sequence components and random sequence components by adopting a dynamic sequence decomposition method, and calculating the correlation degree of the eigenvalues among dimensions; according to the method, the stability index is calculated based on the feature stability evaluation function, the fusion authentication decision function is constructed to carry out authentication decision, safe and reliable network authentication is achieved through the technical means of multi-dimensional feature fusion analysis, dynamic sequence decomposition, self-adaptive decision and the like, and the method has high practical value.

A system, method and apparatus to control memory devices over computer networks. For example, a server system establishes a secure authenticated connection with a client computer system. Over the connection, the server receives from the client computer system a request identifying a memory device and determine, based on data stored in the server system, that the client computer system is eligible to control the memory device. In response to a request from the client computer system, the server system generates a digital signature for a command using at least a cryptographic key stored in the server system in association with the memory device. The client computer system receives the digital signature from the server system and submits the command with the digital signature to the memory device. The memory device validates the digital signature prior to execution of the command.

The invention provides a circuit breaker control method and system based on wireless communication, and the method comprises the steps: obtaining a network environment through employing a safety authentication wireless network with a self-adaptive spectrum sensing capability, and carrying out the control of a circuit breaker through employing a zero-knowledge proof algorithm based on an advanced encryption standard according to an operation request sent by a user through a mobile terminal, the method comprises the following steps: generating an encryption control command, obtaining an operation instruction based on a Hash chain security protocol and a digital signature technology, executing a corresponding preset action according to the operation instruction to obtain execution state information, generating a log entry according to an advanced encryption standard feedback mechanism, and storing the log entry by utilizing a block chain technology. The operation consistency between systems is coordinated through a consensus algorithm under a distributed decision framework, and non-tampering and distributed maintenance and control records are generated; according to the technical scheme provided by the invention, the communication flexibility, reliability and security are enhanced, the risk of unauthorized access is reduced, and the accuracy and reliability of the operation instruction are ensured.

The invention relates to the technical field of intelligent manufacturing and industrial Internet of Things, in particular to an intelligent factory equipment safety management system and method, and the system comprises an identity authentication module, a dynamic safety interaction module, an intelligent monitoring response module and a self-adaptive optimization module. An identity authentication module; through fusion of multi-dimensional information authentication, block chain decentralized storage, intelligent algorithm behavior analysis, encrypted communication and fine-grained authority control, multi-source data threat detection and reinforcement learning driven strategy optimization, a whole-process security system is constructed. The method comprises the steps of identity authentication, security interaction, monitoring response and adaptive optimization. The problems that in a traditional industrial scene, equipment identity authentication is fragile, data transmission is not safe, threat response lags and strategies are staticized are solved, high-safety authentication, dynamic encryption communication, real-time threat response and strategy self-optimization are achieved, and the equipment safety protection capacity and the system intelligence level are improved.

The invention provides a double-chain-based air-space-ground fusion vehicle-mounted network security authentication system and method, and belongs to the technical field of intelligent transportation, in an air-space-ground fusion vehicle-mounted network, a vehicle-mounted unit, a road side unit, an unmanned aerial vehicle node and a satellite node interact through a trusted mechanism and a double-chain architecture, after interaction in a single domain is completed, cross-domain interaction is performed, and the security authentication of the vehicle-mounted unit, the road side unit, the unmanned aerial vehicle node and the satellite node is completed. The authentication token is stored on the block chain after being obtained in the first interaction, and the quick interaction can be completed by directly calling the authentication token subsequently. According to the invention, through the double-chain block chain architecture, the authentication time delay is optimized, the cross-domain authentication efficiency is improved, and the privacy protection problem of the node in a high dynamic environment is effectively solved.

The invention provides a method and a device for realizing cross-network equipment authentication in a distributed soft bus, and belongs to the field of encrypted communication. The method comprises the following steps: in a local area network, equipment configures an authentication mode, a central node address and an authentication strategy of an authentication list according to different service scenes to realize authentication; for a cross-network scene, the leaf node realizes cross-network authentication through the proxy node, specifically, the leaf node and the proxy node in a local area network where the leaf node is located are authenticated; cross-network authentication is carried out among the proxy nodes in different local area networks through a Hichain module based on a distributed soft bus; after the authentication of the two levels is completed, trust is considered to be established between the leaf nodes; and cross-network communication is carried out among the leaf nodes through a key rate generated by one-time mask encryption. According to the scheme, the limitation that the existing distributed soft bus technology is only limited to equipment authentication in a local area network is broken through, and safety authentication between cross-network equipment is realized.

A firmware management operation. The firmware management operation includes providing an information handling system with a distributed BIOS, the distributed BIOS including a BIOS component and a BIOS variable, the BIOS variable being stored within a firmware variable non-volatile memory store; instantiating a firmware variable transaction; and, authenticating, via a secure authenticated BIOS interface, the firmware variable transaction.

A video stream that depicts at least the face of an individual, and information identifying a known individual is received. Predetermined validation data derived from the known individual is accessed. An analysis of a segment of the video stream based on the predetermined validation data is performed. Based on the analysis, an output signal indicative of a confidence level that the video stream is a video stream generated by the known individual is provided.

This application discloses a data transmission method, apparatus, computer device, and communication system, relating to the field of communications. The method includes: generating an authentication key based on security credentials distributed by an authentication center; authenticating devices with an authentication code generated from the authentication key; and transmitting encrypted data processed by an encryption key. Thus, authentication is based on the generated authentication key, eliminating the need for devices to transmit the authentication key itself, preventing its acquisition, improving authentication key security, and reducing network attacks. The authentication center does not need to manage authentication keys and security credentials, decentralizing the authentication mechanism and reducing the complexity of key management. Furthermore, the authentication key has a small data size, meeting the storage requirements of resource-constrained IoT devices, thereby achieving secure authentication for resource-constrained IoT devices, reducing network attacks on the IoT, and improving IoT network security.

The invention relates to the technical field of power data transmission, and discloses a power distribution Internet of Things terminal management method and system based on quantum cloud codes, and electronic equipment. The method comprises the steps of mixing original data through a random number generator to obtain a quantum cloud code seed, obtaining a quantum cloud code sequence through fragmentation encryption, forming a terminal equipment grouping key according to a preset rule, generating an equipment identity feature code in combination with operation state information, and establishing a data transmission channel according to the feature code. A secure communication link is formed through encryption and verification of a session key, operation data in the communication link is collected, a standardized data set is obtained through cleaning and normalization, output equipment behavior characteristics are mapped, operation authority is dynamically adjusted to construct a management system, regular snapshot and distributed backup are performed, and disaster recovery backup data are formed to establish a recovery strategy. According to the invention, security authentication, dynamic permission allocation and intelligent management of the terminal equipment are realized, and the security and management efficiency of the system are remarkably improved.

The present invention is a sensor device comprising an omnidirectional BLE radio antenna, a unidirectional BLE radio antenna, a forward-facing LiDAR, and output logic to instruct access or to control local access to a resource, e.g. a door lock. The preferred embodiment of the present invention further comprises an optical camera and a radar. In the preferred embodiment of the present invention, said sensor device can utilize commonly found legacy wiring for power combined with WiFi signaling for high speed data transfer.The present invention teaches a method of combining different sensors and radio antennas to address the unpredictable state of transmission characteristics of a mobile handset's BLE radio to accurately determine a person's intention to authenticate to a door or computer merely by their physical action of approaching a door or computer.

A system and method for secure authentication between applications that may be attacked with an attack originating from a quantum computer is provided. The systems and methods can involve generating a plurality of keys, wherein each key of the plurality of keys is unique and determining one or more pairs of applications from a plurality of applications, wherein each pair can include applications that can connect. The systems and methods can also involve upon receiving a request from a first application of the plurality of applications to connect to a second application of the plurality of applications finding the pair of the one or more pairs that includes both the first application and the second application and associating one key of the plurality of keys to the pair, and performing by the first application and the second application, mutual authentication using the one key.

The invention discloses an emergency communication high-altitude base station system for an unmanned aerial vehicle, which relates to the technical field of communication and comprises an unmanned aerial vehicle platform, an intelligent flight control module, a communication management module, a multi-unmanned aerial vehicle cooperative technology module, a data analysis and decision support module, an encryption and security authentication module and a modular design structure. And the remote monitoring and maintenance module is used for maintaining the service system module. The intelligent flight control module integrates functions of flight strategy optimization, automatic obstacle avoidance and the like, can automatically adjust the flight height, angle and path of the unmanned aerial vehicle according to communication coverage requirements, and reduces the complexity and risk of manual operation; the multi-unmanned aerial vehicle cooperation technology module can realize information sharing, task cooperation and optimal distribution of communication resources among multiple unmanned aerial vehicles to form a distributed communication network, thereby not only improving the communication coverage and capacity, but also enabling the resource utilization to be more efficient.

The invention relates to the technical field of Internet of Things equipment, particularly provides an Internet of Things equipment security authentication and data encryption transmission system and method, and solves the problems of limited equipment resources and difficult key management. The system comprises an equipment identity authentication component, a key management component and a lightweight encryption component. The method comprises the following steps: authenticating the legal identity of the Internet of Things equipment by adopting a lightweight symmetric key; the authority is dynamically adjusted according to factors such as equipment position, time and network state; the Internet of Things equipment generates and distributes a secret key after passing the access authority authentication; key exchange is carried out between the Internet of Things devices by adopting a key exchange protocol, and local key management is realized at an edge node in combination with edge calculation; and transmitting the data containing the key and the key exchange protocol to the target equipment, encrypting the transmitted data by adopting lightweight encryption and a Hash algorithm during transmission, and preventing a replay attack by using a timestamp and a random number. According to the invention, comprehensive safety protection of the Internet of Things equipment is realized.

The invention relates to the technical field of power system control, and discloses a flexible load control technical method based on a high-current switch built-in electric energy meter, which comprises the following steps: monitoring current and voltage in real time, and inputting data into a fuzzy logic control system; formulating a fuzzy rule, and judging a current state through fuzzy logic control; implementing a safe load removal and reset strategy for a super-capacitance power utilization scene, and executing an overcurrent opening operation; setting a maximum load threshold value according to different power utilization environment characteristics, and formulating a load control strategy; and a multi-stage power control scheme is implemented, and a load control security authentication mechanism is established. According to the method, electricity utilization characteristic research in typical application scenes is carried out, a load flexible control technology is researched in combination with a switch built-in scheme, a multi-scene and multi-cost control strategy is made through multi-stage power control, overcurrent opening and self-adaptive closing functions, flexible control over power consumers is achieved, and the electricity utilization management level is improved.

Embodiments of the present invention provide a system for securely authenticating users using quantum key distribution protocol. The system is configured for receiving an authentication request comprising at least one credential from a user, via a user device, calculating an authentication match score for the at least one credential, retrieving an authentication token associated with the user stored on an external physical device connected to the user device, retrieving an enrollment match score associated with the authentication token of the user, validating the at least one credential by comparing the authentication match score of the at least one credential with the enrollment match score associated with the user, determining that the validation is not successful, and performing a quantum key distribution secret verification based on an enrollment common base stored on a quantum computing platform during the enrollment phase via a quantum communication network.

The disclosed system includes a memory and a processor designed to execute operations for generating non-fungible tokens for training data utilized in training machine learning models. The memory is configured to store both data records of the training data and their corresponding metadata. The processor performs operations to identify a set of fields within each data record and to annotate each field. Such annotation process involves creating field metadata, including information that identifies each field in the data record and assigning a label to each field. Additionally, for each field, the processor is further configured to generate a non-fungible token and create a non-fungible token attribute record, incorporating details from both the data record metadata and the field metadata. Also, the processor is configured to store the non-fungible token attribute record in the memory, thereby facilitating comprehensive and secure authentication of data records.

A system may include a directory-based identity-related services component that authenticates and authorizes enterprise users and computers in a network and enforces security policies. A business intelligence, application development, and application connectivity component may implement business workflow products and exchange application authentication data with the directory-based identity-related services component. A database storage component may provide document management and storage of dashboard tables and lists associated with inventory data received from the business intelligence, application development, and application connectivity component. A cloud-based storage and data management engine may exchange secure authentication storage data with the business intelligence, application development, and application connectivity component. At least one governance or user application may then automatically determine enterprise site inventory information, and, responsive to the determined enterprise site inventory information, automatically determine enterprise site membership information. The dashboard tables and lists may be exchanged in support of a graphical user display.

The invention relates to the technical field of data sharing management, in particular to a meta-universe-oriented multi-source data sharing method and management platform, and the management platform comprises a sharing management platform which is internally provided with a data preprocessing unit, a sharing classification unit, an authentication supervision unit, an access security unit and an information management unit; according to the invention, analysis is carried out from two points of data sharing processing and data sharing access security, so that the integrity and access security of the shared data are ensured, that is, shared information quality security supervision analysis is carried out on the sharing risk information of the to-be-shared data, so that the integrity of the to-be-shared data is ensured; the shared information of the key-free shared data is further subjected to refined classification management analysis, so that the key-free shared data is subjected to reasonable classification management, and the access permission information is subjected to access permission security certification analysis in a progressive manner, so that security certification is performed on the access end; the data loss risk in the sharing platform is reduced.

The invention discloses an identity privacy protection system and method oriented to power data security sharing, which combine single-factor combination authentication and identity traceability and utilize the transparency and tamper resistance of a block chain. Comprising an electric power key generation center, an electric power cloud service provider, an electric power data owner, an electric power data user and a block chain, user identity privacy is ensured, safe identity verification is supported, identity traceability is achieved under necessary conditions, and meanwhile safe distribution of keys is achieved. In addition, services and resources are isolated by using groups, so that the flexibility and the expandability of the services and the resources are enhanced. Security analysis and experimental evaluation prove that the method can effectively resist selected plaintext attacks, and meanwhile, high efficiency and practicability are kept.