527 results about "Security authentication" patented technology

The embodiment of the invention provides a security authentication method, device and system for a test platform, and a storage medium, and relates to the technical field of network security. The method comprises the following steps: performing fingerprint acquisition on virtual and real equipment to generate a unique identifier, dynamically slicing based on a software defined network to form an isolated test environment, and injecting a zero-trust access strategy associated with the fingerprint; and based on the zero-trust access policy and the device fingerprint, allocating a minimum permission through an attribute-based access control model, continuously evaluating device behaviors to calculate a dynamic trust score, and adaptively updating the permission according to the trust score. By constructing a full-process security certification system and through multi-dimensional mechanism cooperation, dynamic risk perception and timely strategy adjustment, fine-grained control of virtual and real equipment access in an industrial control scene is realized, the dynamic adaptability and risk resistance of a test platform in a complex network environment are improved, and the test efficiency is improved. Equipment access safety, authority distribution minimization and behavior monitoring continuity are ensured, and the safety risk of the industrial control system is reduced.

The invention relates to the technical field of block chains and artificial intelligence, and discloses an AI-based block chain smart contract cross-domain authentication security enhancement method and system.The AI-based block chain smart contract cross-domain authentication security enhancement method comprises the steps that a hierarchical security architecture comprising a sensing layer, an analysis layer, a decision-making layer and an execution layer is constructed, collecting cross-domain authentication data and transmitting the cross-domain authentication data to an analysis layer; realizing a threat detection model based on deep learning, receiving feature data collected by the sensing layer, and outputting a threat score and an abnormal index; establishing a dynamic trust evaluation mechanism, receiving an output result of the threat detection model, and calculating a real-time trust value between entities; and designing an adaptive authentication strategy optimization algorithm, and dynamically selecting an optimal authentication strategy based on a trust evaluation result, so that the problem of security authentication between heterogeneous block chain networks can be solved, and an efficient and secure cross-domain authentication solution is provided.

The embodiment of the invention discloses a dynamic metadata sensing and self-adaptive mapping method and system, and the method comprises the following steps: deploying a lightweight probe to be agented to a plurality of heterogeneous source database systems, and building a trusted communication channel between the probe and a coordination center through equipment fingerprint generation and security authentication; a database log event is captured in real time, log analysis is carried out through an FPGA module, the change of a field structure or a semantic level is identified, and structured event data is generated; performing context embedding representation on the captured event based on a semantic understanding model, performing strategy reasoning in combination with a historical strategy and a knowledge graph, and generating a matched mapping strategy; loading and executing the mapping strategy in a trusted execution environment (TEE) to realize data conversion, cleaning and complementation, and performing desensitization processing on sensitive data through a differential privacy mechanism; and collecting performance indexes and abnormal logs of a strategy execution result, continuously training the model through a closed-loop optimization mechanism, and correcting an unreasonable strategy or updating a rule base.

The invention discloses an industrial internet intelligent storage collaborative decision-making system, and mainly relates to the technical field of industrial internet. Comprising a data acquisition layer used for acquiring storage full-scene real-time data through an industrial internet protocol; the edge calculation layer is deployed at edge nodes of a storage site; the cloud platform layer receives the feature data uploaded by the edge computing layer; the intelligent decision engine is used for carrying out multi-target collaborative optimization analysis based on a digital twin model; the execution interaction layer is used for converting the scheme generated by the intelligent decision engine into an executable instruction; and the security authentication module penetrates through the data acquisition layer to the execution interaction layer. The system has the advantages that the defects of an existing warehousing system in the aspects of collaboration, real-time performance, adaptability, safety and the like are overcome, the intelligent level and the full-chain operation efficiency of industrial warehousing are remarkably improved, and the system has outstanding practical value.

The invention discloses a dynamic security authentication method for cross-platform information system integration, and relates to the technical field of cross-platform dynamic authentication. A non-tampering identity trust chain is established through a block chain consensus algorithm, the problems of single-point fault and expansibility of centralized identity management are solved, cross-platform unified identity verification is realized, the problem that multi-factor authentication lacks intelligent risk assessment is solved through intelligent contract automatic verification and user behavior analysis, threats can be dynamically responded, and the user experience is improved. The authority is dynamically adjusted based on the risk level, and a real-time access control decision engine is combined, so that the problem of response lag of traditional access control is solved, accurate authority control is realized, and finally, a continuously optimized security authentication mechanism and a unified and coordinated cross-platform security protection system are formed.

The invention relates to a security authentication method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: receiving a key generation request sent by target equipment; if it is determined that the key generation request is legal, generating a trust identifier and a security certificate of the target device, obtaining an identifier verification request through the trust identifier, and sending the identifier verification request to an authentication server, so that the authentication server verifies the trust identifier to obtain an access token corresponding to the target device; receiving a message returned by the authentication server, and processing an access token carried by the message to obtain a trust identifier; and writing the security certificate into the target protection area, and sending the trust identifier and the security certificate to the target equipment, so that the target equipment is registered in the authentication server. By adopting the method, the identity verification of the equipment and the control of an encryption communication mechanism are realized, and the safety protection performance in a communication system is further improved.

The invention discloses a cross-industry equipment safety monitoring method and system based on Beidou dual-frequency and 4G communication, and belongs to the technical field of equipment safety monitoring. The method comprises the steps of data acquisition, processing, result generation and analysis: acquiring equipment position and operation state data through a Beidou dual-frequency positioning module and a sensor, and combining communication quality data; preprocessing through an edge calculation module, extracting features, establishing a security early warning and authentication model, and generating a risk level, identity legality and a comprehensive result containing position information; dynamically adjusting a 4G and Beidou short message communication mode, triggering a response measure, and synchronizing the response measure to the cloud. The system comprises a positioning module, a sensing module, an edge computing module, a communication module, a cloud module and a security authentication module. According to the invention, global seamless monitoring in a complex environment is realized, the real-time performance and the safety protection capability are improved, the system is adaptive to multi-industry scenes, and reliable guarantee is provided for safe operation of cross-industry equipment.

The invention relates to the technical field of distributed architectures, and discloses a multi-screen cooperative control method based on an OpenHarmony distributed architecture and an all-in-one machine system.The method comprises the steps that a broadcast frame found by equipment is sent through an OpenHarmony distributed soft bus, security authentication is conducted on a plurality of display terminals responding to the broadcast frame, a virtual bus channel is established, and the virtual bus channel is sent to the display terminals; obtaining a virtual device group; creating a distributed industrial data object on the main control equipment of the virtual equipment group and synchronizing the distributed industrial data object to each slave display terminal to obtain a distributed data model; mapping the anonymous shared memory to an annular buffer area; and writing real-time data acquired by the industrial field equipment into an annular buffer area, and transmitting the real-time data to each slave display terminal of the virtual equipment group, in the method, each display terminal accesses an agent instance of an industrial data object through a distributed data management framework; and the requirements of high reliability, low delay and high consistency on multi-screen cooperative control in an industrial field are met.

The invention relates to the field of network and information security, and discloses a server security authentication system based on block chain trusted computing. Comprising a block chain network, an intelligent contract module, an authentication service module, a verification node and a to-be-authenticated server. The intelligent contract module records a registration index, a certification public key, a policy version number, a baseline commitment value and a revocation state. The authentication service module generates a challenge parameter and a challenge value based on the block height and the block hash digest. The trusted agent module collects a measurement abstract and forms a certification packet, and the trusted root module derives a staging certification key in a protected environment and signs the certification packet. And the verification node reads the data on the chain to complete signature verification, challenge value re-calculation, window verification and compliance proof verification, and generates an authentication bill containing an effective height range for resource access judgment after passing the verification.

The invention provides a data access control method and system based on zero-knowledge proof, and relates to the technical field of data access control. According to the method, a root key of a unique hardware identity is generated through a physical unclonable function of a data request equipment chip, and meanwhile, real-time running state data of equipment is collected; the two are subjected to cryptographic binding to form an equipment credible state voucher; secondly, detecting capacitance field disturbance when data holding equipment approaches through a capacitive proximity sensor array, and generating an interactive response mode; then, the equipment credible state certificate and the interactive response mode serve as private input to generate a composite zero-knowledge proof, and identity authenticity and physical proximity are proved to data holding equipment at the same time on the premise that sensitive information is not leaked; and after the data holding device passes verification, the data access permission is authorized immediately, and a temporary encryption communication channel is established, so that the reliability and instantaneity of security authentication between IoT devices can be improved.

The invention discloses an authority management method and system for an access control system of a building hall, and relates to the technical field of authority management, and the authority management method comprises the following steps: associatively storing personnel identity information and corresponding authority levels to form an authority database, and adjusting the authority in real time according to time, events and personnel demands; the access control terminal reads the personnel identity recognition information, dynamically evaluates the credibility of the personnel identity recognition information, and judges whether the personnel are allowed to pass the access control according to the credibility; the permission verification server performs matching in a permission database according to the received identity recognition information to search a corresponding permission level; and according to the searched authority level, monitoring the number of times of accessing areas and floors exceeding the authority level of the person, and the access time of the person, and timely giving an alarm for abnormal behaviors according to a monitoring result. According to the invention, by integrating multiple security authentication means, the problems of single identity authentication form and low security are solved, and the security protection capability of the system is improved.

The invention provides a cross-platform fusion access method, system and device of equipment and electronic equipment, the method is applied to the technical field of Internet of Things, and the method comprises the following steps: a mobile terminal performs security authentication on target central control equipment; the mobile terminal sends a structured configuration file including the equipment information of the plurality of smart home equipment, the region division rule, the scene mode and the linkage rule to the target central control equipment; the target central control equipment receives and analyzes the structured configuration file, and updates the corresponding smart home equipment according to an analysis result; the target central control equipment receives a control instruction of the cloud platform, converts the control instruction into an internal protocol instruction and then issues the internal protocol instruction so as to control the corresponding smart home equipment to execute operation; the target central control device synchronizes the state information of the smart home device to the cloud platform; and when an upgrading instruction of the cloud platform is received, issuing an upgrading task to execute an upgrading process. According to the method, the real-time performance of remote control of the smart home equipment and the accuracy of state feedback are guaranteed.

The invention discloses an equipment security authentication method, equipment and a storage medium. The method comprises the following steps: decrypting received client card punching information through a pre-stored platform private key; the decrypted clock-in information is verified, and identity authentication information is generated based on a device public key corresponding to the client when it is determined that the clock-in information is correct; issuing the identity authentication information to the client, so that the client decrypts the identity authentication information based on a pre-stored device private key and then initiates the next time of clock-in information; wherein a platform private key and a platform public key are pre-stored in the management and control platform, a project certificate corresponding to the project is generated based on a current new project, a client side is determined according to the project certificate, and identity authentication information is issued to the client side. According to the method, the technical effect of improving the anti-counterfeiting capability and cross-device compatibility in an offline environment is achieved through the two-way security authentication based on dynamic certificate management between the management and control platform and the client.

The invention discloses an emergency rescue integrated data security protection method based on a block chain, and belongs to the technical field of data security protection, and the method comprises the following steps: constructing an end-side cloud cooperative trusted computing architecture, and establishing a trust chain transmission mechanism from a terminal to an edge node through a physical trusted root; a dynamic multi-dimensional credibility measurement model is adopted, the static credibility, the behavior credibility and the collaborative credibility of the equipment are comprehensively evaluated, and the real-time credibility of the equipment is generated in combination with environmental factors; implementing credibility verification based on the behavior measurement index; cross-domain data sharing auditing is realized by using a block chain smart contract, and the full-life-cycle security of data is ensured through a fragmented storage strategy and a self-destruction key design. According to the method, the problems of insufficient security authentication, dynamic trust evaluation and data cross-domain sharing auditing of the multi-source heterogeneous equipment in emergency rescue are solved.

The invention discloses a wireless authentication and privacy infrastructure (WAPI) seamless roaming optimization system and method for a mobile scene. Data collaboration and intelligent decision are realized through a three-layer structure of a mobile terminal, a WAPI access point and a switching control center. A mobile terminal collects a motion state and channel information in real time, a WAPI access point monitors a wireless condition in an area while meeting a WAPI security authentication requirement, a switching control center integrates data of all parties, a candidate access point utility value is dynamically calculated through a built-in strategy decision unit by adopting reinforcement learning, cognitive radio and robust control technologies, and the candidate access point utility value is calculated through a wireless network. Therefore, optimal roaming switching is realized. A pre-authentication and certificate caching mechanism is introduced into the system before switching, so that the authentication time delay is greatly reduced, and stable network connection and seamless transition during high-speed movement are ensured. According to the invention, the structure is simple, the adaptability is high, the WAPI security requirement is met, and the network roaming performance in a mobile scene is remarkably improved.

The invention relates to the technical field of intelligent vehicle keys, in particular to an intelligent vehicle key-oriented remote unlocking system and a secure communication method thereof, and the system comprises an intelligent terminal module, a vehicle control module, a cloud server module, a security authentication module, an encryption communication module and a state feedback module; a real-time state feedback mechanism allows a user to know the state of the vehicle door lock at any time, once an abnormal condition occurs, an alarm mechanism is triggered immediately, the user is notified through multiple channels, and it is ensured that the user can take actions rapidly to protect property safety of the user.

The invention discloses an automatic multi-source analysis and integrated processing system based on artificial intelligence, and belongs to the field of software automation. Comprising a multi-source input unit, a unified semantic modeling unit, an automatic analysis unit, an automatic preprocessing unit, an automatic collaborative execution unit and a security authentication mechanism, wherein the security authentication mechanism comprises primary security authentication and secondary security authentication. According to the invention, end-to-end automatic closed loop from demand understanding to autonomous analysis of the processing path to execution landing can be realized, and key appeals in a complex project business scene can be accurately responded.

The invention provides a zero-trust security authentication system and method for hospital heterogeneous equipment access, and belongs to the technical field of security authentication and virtualization. The method comprises the following steps: after the heterogeneous equipment passes identity authentication, establishing communication pre-connection, so that a hospital information system unidirectionally acquires an operating system type and application program data of the heterogeneous equipment; the method comprises the following steps: creating a virtual network partition on a data center server of a hospital information system based on an operating system type and application program data of heterogeneous equipment; after each virtual network partition is used for receiving application program data of the heterogeneous equipment, calling a security container mirror image to create a target container, wherein the security container mirror image corresponds to an operating system type of the heterogeneous equipment; sending environment authentication information to the heterogeneous device through the target container; and when the environment authentication information is passed, establishing data interaction connection between the heterogeneous equipment and the virtual network partition of the hospital information system, so that the heterogeneous equipment accesses the hospital information system through the target container.

The invention discloses a development board Linux system security authentication multi-start method, which comprises the steps of 1, hardware trust root initialization and storage area division, 2, hardware trust root self-inspection and measurement, 3, starting item dynamic loading and multi-stage authentication, 4, security context establishment and system switching, and 5, multi-system isolation and collaboration. Step 6, performing security audit and exception handling; full-link authentication is realized by taking a hardware trust root as an anchor point, malicious mirror startup and inter-system data leakage are effectively resisted in combination with a storage and resource isolation mechanism, scenes such as on-demand dynamic switching, flexible adaptation debugging, upgrading and fault recovery of multiple systems can be realized, and the system reliability is improved by optimizing the lightweight design of an authentication algorithm and resource management. Limited computing power of the development board is adapted, the starting process and abnormal events can be completely recorded, and illegal operation can be traced conveniently.

The invention provides an authentication method and device, electronic equipment, a chip and a storage medium. The method comprises the following steps: respectively receiving first authentication information sent by control equipment and second authentication information sent by controlled equipment; wherein the first authentication information at least comprises first identity information of the control equipment, first quantum key identification information and a first ciphertext for encrypting the first identity information based on a quantum key; the second authentication information at least comprises second identity information of the controlled equipment, second quantum key identification information and a second ciphertext for encrypting the second identity information based on the quantum key; and performing security authentication on the control equipment according to the first authentication information, and performing security authentication on the controlled equipment according to the second authentication information.

The invention relates to a safety certification method and device of vehicle-mounted equipment, electronic equipment and a storage medium, and the safety certification method of the vehicle-mounted equipment is applied to a vehicle-mounted domain controller integrated with an HSM. The SOC generates a security service request containing to-be-processed data and an operation instruction according to the digital certificate and the identity authentication operation, and sends the security service request to the MCU; and the MCU receives and analyzes the security service request to obtain to-be-processed data and an operation instruction, and calls the HSM, and the HSM executes identity authentication type cryptographic operation on the to-be-processed data according to the private key and the operation instruction, and returns an operation result to the SOC. The HSM integrated in the vehicle-mounted domain controller realizes a security authentication function without externally hanging a special security chip, and the private key is always stored in the HSM and is not exported, so that the security of the vehicle identity key is ensured.

The invention discloses a network equipment dynamic data authority grading authentication management platform, and relates to the field of data authority. The platform comprises a network equipment position area sensing module, a network equipment multi-modal data analysis module, a network equipment compliance security authentication module, a multi-authority historical access behavior analysis module, a network equipment dynamic authority affirmation marking module and an access control execution module. The method comprises the following steps: performing multi-dimensional position secret-related grading according to a physical position, analyzing data content of network equipment in real time, identifying secret-related data flow of the network equipment in real time, performing multi-dimensional data secret-related grading, and performing compliance security authentication on the network equipment at the same time. According to the method, the confidential level of the network equipment is evaluated by combining a feedback mechanism of historical access behavior analysis of multi-authority personnel, a corresponding authority strategy is bound based on a position, data and equipment security ternary framework, and dynamic authority grading authentication is intelligently performed on the network equipment.

The invention provides a distributed credit database load balancing adjustment method and system, and relates to the technical field of load adjustment, and the method comprises the steps that a distributed credit database allocates encrypted communication parameters to each distributed node; based on the encrypted communication parameters, performing bidirectional security authentication on each node, and establishing an encrypted communication channel; calculating the load rate of each node, and identifying an overload node according to the load rate; the overload node sends a migration request, generates an encrypted request packet and broadcasts the encrypted request packet to the neighbor node; the neighbor node analyzes the request packet and then judges whether the neighbor node itself meets a migration bar, and if yes, an encrypted response packet is constructed and sent to the overload node; otherwise, ignoring the request packet; the overload node receives and analyzes the encrypted response packet, determines a candidate migration node according to the load state of the neighbor node, and transmits the to-be-migrated data to the candidate migration node; after migration is completed, the overall resource utilization rate is calculated, and the overload threshold value is finely adjusted through a negative feedback mechanism.

The invention provides a Flink multi-cluster security authentication data synchronization method and system, and relates to the technical field of distributed computing, and the method comprises the steps: establishing a secure connection channel, optimizing an execution plan by adopting an incremental coding compression algorithm, setting an adaptive computing load threshold, dynamically allocating computing resources, and writing state check point information. Data quality evaluation is executed, the evaluation data is written into the distributed account book, the state of the target cluster is recovered, the synchronization task is started, the data synchronization safety and efficiency are improved, the computing resource utilization rate is increased, and the data quality and synchronization consistency are ensured.

The invention relates to the technical field of data security and block chains, and particularly discloses a sensor data acquisition security authentication system based on a block chain. The system comprises a sensor node module, a dynamic key management module, a ciphertext processing engine, a block chain consensus module and an authentication decision module, a key is dynamically generated through a physical unclonable function and environmental noise, and decryption-free integrity authentication of ciphertext data is realized in combination with stream cipher encryption and block chain distributed verification. According to the method, the security and the system throughput in the data acquisition process are improved, and meanwhile, the calculation overhead is reduced.

The invention relates to the technical field of artificial intelligence and distributed computing, in particular to an AI service distributed deployment method and device, equipment and a storage medium. According to the AI service distributed deployment method disclosed by the invention, access to diversified AI services is unified and simplified through a single interface, and optimal allocation of heterogeneous resources, high-concurrency request processing, low-delay response and fine-grained authority control are realized through a hybrid scheduling mechanism, multi-stage security authentication and remote model localization calling; the AI service deployment efficiency, the resource utilization rate and the safety are remarkably improved, and the method is suitable for deployment, integration, management and unified service providing scenes of various artificial intelligence applications.

The invention relates to the technical field of data security storage and transmission, and discloses a device, a system and a method for digital security certification, a high-quality time sequence feature set is constructed through data scene association mapping and feature enhancement, a foundation is laid for risk assessment and strategy adaptation, a multi-dimensional risk factor coupling assessment system is constructed, and the risk assessment efficiency is improved. The method comprises the following steps: firstly, carrying out security management and control on target transfer data, realizing accurate judgment of a scenarized risk level, matching and identifying a transfer type based on transfer demand features, dynamically outputting adaptive encryption strategy parameters, and executing split storage in combination with a transfer node security adaptation index to complete security management and control of the target transfer data. Therefore, the dynamic adaptation of the transfer scene and the data security policy is realized, the problems of under-protection and over-protection of the traditional method are solved, the authentication security and transmission efficiency during data transfer are balanced, the adaptive ability and control accuracy under the complex transfer scene are improved, and the security of the transfer scene is improved. And a more scientific and practical security authentication solution is provided for diversified circulation scenes.

The invention belongs to the technical field of security authentication, and discloses a distributed energy storage equipment cross-domain security access authentication method and a related device, attribute information is submitted after zero-knowledge proof verification, and a certificate issuing party is triggered to generate a verifiable certificate based on a signature algorithm; then generating a zero-knowledge proof-based randomized verifiable representation based on the verifiable credentials; and finally, the energy storage device sends the generated randomized verifiable representation to a verifier to complete access authentication. According to the invention, cross-domain authentication is realized through a distributed architecture and verifiable certificates without depending on a single centralized mechanism. Verifiable certificates adopt a uniform format and support mutual recognition among different trust domains. And the certificate cannot be associated with a specific equipment identity after randomization processing, so that anonymous authentication is realized. And the verification process is realized through zero-knowledge proof, and the equipment can prove the identity legality without leaking sensitive information, so that the authentication security and privacy are effectively guaranteed.

The invention relates to the technical field of wireless optical communication, and discloses a multi-carrier wireless optical communication physical layer security authentication system and method.The receiving end of the system comprises a multi-receiver joint judgment module, a data gating module, an information sink and at least three receivers; each receiver comprises an optical detector, a cyclic prefix removal module, an FFT (Fast Fourier Transform) module, a receiving end key update storage and watermark generation module, a channel estimation and watermark extraction module, a subcarrier authentication module, a multi-carrier self-adaptive decision judgment module and a multi-carrier integration module; oFDM frequency domain channel response is used as an implicit fingerprint, a self-adaptive switching decision strategy is executed according to the average signal-to-noise ratio, fine recognition of legal device position features is achieved without ranging hardware, IM / DD can be adapted, the problem of imitation attack and replay attack authentication of attackers is effectively solved from the physical mechanism, and the method has the advantages of being high in practicability and high in practicability. And the accuracy and robustness of physical layer authentication are obviously improved.

The invention relates to a food multi-modal detection data fusion analysis method and device, equipment and a medium. The method comprises the following steps: acquiring original multi-source heterogeneous data of a food spectrum, an image and a smell, and performing normalization and noise reduction preprocessing to obtain a standardized feature set; classifying and screening high-correlation features by using a support vector machine, and generating a structured description; dynamic parameters are extracted, a quality trend vector is generated through time sequence analysis, a safety score is calculated, and a qualified mark is output if the safety score reaches the standard; constructing an extension index set based on the score, inputting a dynamic model to generate an authentication update link, and combining the block chain time to obtain new-version authentication; and associating the historical records to generate an initial report, and verifying and correcting to obtain an optimized report. By adopting the method, the consistency and availability of food safety data can be improved, the credibility of safety certification is enhanced, and a systematic and efficient solution is provided for food quality safety detection.