264 results about "Security authentication" patented technology

The invention relates to the technical field of distributed architectures, and discloses a multi-screen cooperative control method based on an OpenHarmony distributed architecture and an all-in-one machine system.The method comprises the steps that a broadcast frame found by equipment is sent through an OpenHarmony distributed soft bus, security authentication is conducted on a plurality of display terminals responding to the broadcast frame, a virtual bus channel is established, and the virtual bus channel is sent to the display terminals; obtaining a virtual device group; creating a distributed industrial data object on the main control equipment of the virtual equipment group and synchronizing the distributed industrial data object to each slave display terminal to obtain a distributed data model; mapping the anonymous shared memory to an annular buffer area; and writing real-time data acquired by the industrial field equipment into an annular buffer area, and transmitting the real-time data to each slave display terminal of the virtual equipment group, in the method, each display terminal accesses an agent instance of an industrial data object through a distributed data management framework; and the requirements of high reliability, low delay and high consistency on multi-screen cooperative control in an industrial field are met.

The invention relates to the field of network and information security, and discloses a server security authentication system based on block chain trusted computing. Comprising a block chain network, an intelligent contract module, an authentication service module, a verification node and a to-be-authenticated server. The intelligent contract module records a registration index, a certification public key, a policy version number, a baseline commitment value and a revocation state. The authentication service module generates a challenge parameter and a challenge value based on the block height and the block hash digest. The trusted agent module collects a measurement abstract and forms a certification packet, and the trusted root module derives a staging certification key in a protected environment and signs the certification packet. And the verification node reads the data on the chain to complete signature verification, challenge value re-calculation, window verification and compliance proof verification, and generates an authentication bill containing an effective height range for resource access judgment after passing the verification.

The invention provides a cross-platform fusion access method, system and device of equipment and electronic equipment, the method is applied to the technical field of Internet of Things, and the method comprises the following steps: a mobile terminal performs security authentication on target central control equipment; the mobile terminal sends a structured configuration file including the equipment information of the plurality of smart home equipment, the region division rule, the scene mode and the linkage rule to the target central control equipment; the target central control equipment receives and analyzes the structured configuration file, and updates the corresponding smart home equipment according to an analysis result; the target central control equipment receives a control instruction of the cloud platform, converts the control instruction into an internal protocol instruction and then issues the internal protocol instruction so as to control the corresponding smart home equipment to execute operation; the target central control device synchronizes the state information of the smart home device to the cloud platform; and when an upgrading instruction of the cloud platform is received, issuing an upgrading task to execute an upgrading process. According to the method, the real-time performance of remote control of the smart home equipment and the accuracy of state feedback are guaranteed.

The invention discloses a development board Linux system security authentication multi-start method, which comprises the steps of 1, hardware trust root initialization and storage area division, 2, hardware trust root self-inspection and measurement, 3, starting item dynamic loading and multi-stage authentication, 4, security context establishment and system switching, and 5, multi-system isolation and collaboration. Step 6, performing security audit and exception handling; full-link authentication is realized by taking a hardware trust root as an anchor point, malicious mirror startup and inter-system data leakage are effectively resisted in combination with a storage and resource isolation mechanism, scenes such as on-demand dynamic switching, flexible adaptation debugging, upgrading and fault recovery of multiple systems can be realized, and the system reliability is improved by optimizing the lightweight design of an authentication algorithm and resource management. Limited computing power of the development board is adapted, the starting process and abnormal events can be completely recorded, and illegal operation can be traced conveniently.

The invention relates to a safety certification method and device of vehicle-mounted equipment, electronic equipment and a storage medium, and the safety certification method of the vehicle-mounted equipment is applied to a vehicle-mounted domain controller integrated with an HSM. The SOC generates a security service request containing to-be-processed data and an operation instruction according to the digital certificate and the identity authentication operation, and sends the security service request to the MCU; and the MCU receives and analyzes the security service request to obtain to-be-processed data and an operation instruction, and calls the HSM, and the HSM executes identity authentication type cryptographic operation on the to-be-processed data according to the private key and the operation instruction, and returns an operation result to the SOC. The HSM integrated in the vehicle-mounted domain controller realizes a security authentication function without externally hanging a special security chip, and the private key is always stored in the HSM and is not exported, so that the security of the vehicle identity key is ensured.

The invention discloses a network equipment dynamic data authority grading authentication management platform, and relates to the field of data authority. The platform comprises a network equipment position area sensing module, a network equipment multi-modal data analysis module, a network equipment compliance security authentication module, a multi-authority historical access behavior analysis module, a network equipment dynamic authority affirmation marking module and an access control execution module. The method comprises the following steps: performing multi-dimensional position secret-related grading according to a physical position, analyzing data content of network equipment in real time, identifying secret-related data flow of the network equipment in real time, performing multi-dimensional data secret-related grading, and performing compliance security authentication on the network equipment at the same time. According to the method, the confidential level of the network equipment is evaluated by combining a feedback mechanism of historical access behavior analysis of multi-authority personnel, a corresponding authority strategy is bound based on a position, data and equipment security ternary framework, and dynamic authority grading authentication is intelligently performed on the network equipment.

The invention belongs to the technical field of security authentication, and discloses a distributed energy storage equipment cross-domain security access authentication method and a related device, attribute information is submitted after zero-knowledge proof verification, and a certificate issuing party is triggered to generate a verifiable certificate based on a signature algorithm; then generating a zero-knowledge proof-based randomized verifiable representation based on the verifiable credentials; and finally, the energy storage device sends the generated randomized verifiable representation to a verifier to complete access authentication. According to the invention, cross-domain authentication is realized through a distributed architecture and verifiable certificates without depending on a single centralized mechanism. Verifiable certificates adopt a uniform format and support mutual recognition among different trust domains. And the certificate cannot be associated with a specific equipment identity after randomization processing, so that anonymous authentication is realized. And the verification process is realized through zero-knowledge proof, and the equipment can prove the identity legality without leaking sensitive information, so that the authentication security and privacy are effectively guaranteed.

The invention relates to the technical field of wireless optical communication, and discloses a multi-carrier wireless optical communication physical layer security authentication system and method.The receiving end of the system comprises a multi-receiver joint judgment module, a data gating module, an information sink and at least three receivers; each receiver comprises an optical detector, a cyclic prefix removal module, an FFT (Fast Fourier Transform) module, a receiving end key update storage and watermark generation module, a channel estimation and watermark extraction module, a subcarrier authentication module, a multi-carrier self-adaptive decision judgment module and a multi-carrier integration module; oFDM frequency domain channel response is used as an implicit fingerprint, a self-adaptive switching decision strategy is executed according to the average signal-to-noise ratio, fine recognition of legal device position features is achieved without ranging hardware, IM / DD can be adapted, the problem of imitation attack and replay attack authentication of attackers is effectively solved from the physical mechanism, and the method has the advantages of being high in practicability and high in practicability. And the accuracy and robustness of physical layer authentication are obviously improved.

The invention relates to a financial equipment security authentication method, system and device and a medium, and the method comprises the steps: carrying out the feature extraction and matching of user data collected in multiple modes, and generating a matching score and a quality score of each mode; uncertainty quantification and evidence conversion are carried out based on scores and scores, and a basic probability distribution function is constructed; carrying out dynamic weighting on probability distribution in combination with a sensor state and historical performance, and generating a preprocessing evidence set; through conflict adaptive evidence fusion processing, calculating conflict quality between evidences and redistributing conflict values according to a weight ratio, and generating a global fusion evidence body; and finally, the authentication confidence is calculated according to the fusion result, and a binary authentication instruction is generated through comparison with a dynamic risk threshold. The method can effectively solve the problem of evidence conflict in multi-modal authentication, dynamically adapts to system state change, and remarkably improves the accuracy and reliability of financial equipment security authentication.

The invention relates to the technical field of data transmission, in particular to an industrial data transmission security authentication method and system based on OpenHarmony, and the method comprises the steps: obtaining equipment information for data transmission, constructing a cross-platform equipment trust root, generating a dynamic challenge code based on the obtained equipment identification information, and carrying out bidirectional identity verification according to the challenge code. And performing session isolation on the terminal passing the bidirectional identity verification, namely deriving a session key by adopting a hierarchical HKDF mechanism and realizing session isolation, transmitting industrial data by adopting a dual-encryption mechanism based on a session isolation result, automatically triggering key update according to the transmission data volume and duration, destroying a temporary key after the session is ended and generating a chained auditing log, and transmitting the chained auditing log to the terminal after the chained auditing log is ended. According to the method, the dynamic challenge code is generated based on the device identifier through multiple times of Hash, the temporary key pair and the double ECDSA signature are generated in combination with the multi-dimensional entropy source, strict two-way identity verification is achieved, and illegal device access is completely eradicated from the source.

The application discloses a multi-terminal login security authentication method and device, electronic equipment and a storage medium, comprising: in response to a client login operation of a user, generating a client login request according to user information and a client identifier and sending the request to a server; obtaining the user information and the client identifier through the server, and performing token query matching in a user table according to the user information; when the matching is successful, determining a user ID and a latest token version corresponding to the user information, obtaining a second token version by incrementing the latest token version, determining a second request source type and a second token validity period, generating a second token according to the user ID, the second request source type, the second token version and the second token validity period, updating the user table according to the user information, the client identifier and the second token, and returning the second token to the client storage. The application realizes multi-terminal login while improving the security of multi-terminal login, and can be widely applied in the technical field of information security.

The invention discloses an Internet of Things security chip based on multiple quantum entropy sources, and a security authentication method, device and system. The Internet of Things security chip comprises a static preset quantum entropy unit; a dynamic real-time quantum entropy source circuit; an entropy source fusion and management unit; wherein the entropy source fusion and management unit is configured to support at least two operation modes: (A) a basic service mode: generating a device identifier based on the output of the static preset quantum entropy unit, or providing a true random number based on the output of the dynamic real-time quantum entropy source circuit; (B) a fusion binding mode: taking the output of the static preset quantum entropy unit as an equipment binding parameter, performing cryptographic processing on the output of the dynamic real-time quantum entropy source circuit, and generating a cryptographic material uniquely bound with the equipment; the chip architecture realizes hardware-level binding of equipment identity and password randomness, has the advantages of high security, flexible configuration and controllable cost, and provides an ideal hardware trust root for constructing massive and trusted Internet of Things.

This invention discloses an emergency management station for rail transit construction projects based on the Industrial Internet, comprising a mounting base, a lower side plate connected to the top of the mounting base via a rotating component, an upper side plate on top of the lower side plate, and a folding top cover on top of the mounting base. The upper side plate is connected to the lower side plate and the folding top cover respectively via adjusting connectors on both sides. When emergency handling is required during rail transit construction, this invention allows for rapid assembly of the foldable management station, enabling quick installation of the mounting base, lower side plate, upper side plate, and folding top cover. Simultaneously, a support assembly is used to raise the workbench and provide limiting support for the side plates. During operation, a safety authentication module authenticates the operating computer group, a human-machine interaction module controls the control computer group, and received information is promptly transmitted to the storage module. The Internet of Things (IoT) processing module can promptly transmit data to various parts for emergency handling.

A method for authenticating an authorized user is disclosed, the method comprising: receiving a request to access a resource; in response to receiving the request to access the resource, triggering irradiation of the object with light, and triggering generation of an image of the object while the object is irradiated with light; receiving a template image of an authorized user; providing the image and the template image to a data-driven model trained with a plurality of training images obtained by generating a plurality of synthetic representations of the person generated from representations of the person to determine whether an object associated with the image corresponds to an authorized user, and enhancing the plurality of synthetic representations of the person to generate a plurality of training images; the authorized user is allowed to access the resource in response to determining that the object corresponds to the authorized user.

The invention discloses a biological information security authentication method based on deep fusion of fingerprint features and digital passwords. The method comprises the steps that a user customizes the digital passwords; extracting fingerprint features by using a transfer learning model based on a ResNet-50 architecture to obtain five high-dimensional digital feature vectors; a Sigmoid function is used to carry out normalization on all the feature vectors; obtaining a random sequence for encryption; performing scrambling operation on all the gray level images by using three-dimensional Class-Z transformation; diffusion operation based on a semi-tensor product is carried out on all gray level images; storing the ciphertext images in a database according to a sequence input by a user; when the user attempts to verify, the system executes a dynamic step. According to the security authentication framework based on deep fusion of the biological characteristics and the digital passwords, the permanent identity risk caused by inherent non-revocation of the biological characteristics is fundamentally solved, and a multi-protection mechanism with high efficiency and high security for original fingerprint characteristics is constructed with the assistance of a dynamic updating / immediate template generation mechanism.

The present application relates to the field of information security technology, and particularly relates to a kind of smart lock security authentication method based on mobile terminal virtual credential;Including door lock end generates non-repeated random challenge value using random disturbance mechanism;Mobile terminal utilizes HMAC algorithm to operate challenge value and credential identity key, generates dynamic token;Dynamic token is processed using hash algorithm to obtain response digest by one-way mapping;Zero-knowledge proof algorithm is used to construct mathematical proof body;Door lock end verifies proof body;Session binding credential is generated by chain check mechanism;Session isolation mechanism is used to mark consumed state and detect replay attack.The present application realizes identity authentication under zero contact condition of credential original text, effectively eliminates the possibility of replay attack, and ensures the security of credential key.

The invention relates to the technical field of wireless communication in a fire extinguishing scene. The wireless communication method and device in the fire extinguishing scene, the equipment and the medium are provided, and the method comprises the following steps: carrying out hierarchical deployment processing on an algorithm library component set, a parameter set configuration table and a verification rule table, and constructing a physical layer radio frequency configuration scheme, a network layer routing protocol stack and an application layer encryption module set; receiving a commander configuration instruction through a preset security instruction interface, performing hot update processing on the algorithm library component set, the parameter set configuration table and the verification rule table, and generating an updated algorithm library component set, an updated parameter set configuration table and an updated verification rule table; and carrying out weight migration processing based on the fire type migration characteristics monitored in real time, the updated algorithm library component set, the updated parameter set configuration table and the updated verification rule table, and outputting a dominant strategy activation instruction, so as to achieve the technical effects of improving the communication environment adaptability, enhancing the protocol stack dynamic balance capability and improving the security authentication anti-interference performance.

The application relates to the field of 5G communication technology, and discloses a 5G network slice security isolation method and system.The 5G physical network is divided into multiple independent slices, each slice contains an access node, a core node and an output node, the access node is used for security authentication, the terminal matching index is dynamically calculated based on terminal state parameters and authentication matching times; the core node is used for a security management module, the flow security index is obtained based on the weighted comparison of the current flow and a reference value and historical flow; the output node is used for security evaluation, the output security index is obtained by the weighted comparison of the current communication times and a reference value and historical times; the access, flow and output indexes are compared with corresponding threshold values; if any one is abnormal, the current slice is directly isolated; the deviation of each security index and the threshold value is weighted calculated and compared with the threshold value; if greater than or equal to the corresponding threshold value, the current slice is isolated, multi-dimensional security isolation of the 5G network slice is realized, and the balance between precision and calculation efficiency is achieved.

The invention relates to an authentication method based on a super SIM (Subscriber Identity Module), and a combined enhanced authentication method and device. The authentication method comprises the following steps: acquiring a main authentication authorization check credibility obtained after authentication of a main authentication method is completed; obtaining an operation pipeline of the main authentication method; performing one-way implicit feature extraction and compression on the operation pipeline of the main authentication method to obtain a one-way implicit feature extraction and compression operation pipeline, and obtaining a corresponding operation safety gradient according to the one-way implicit feature extraction and compression operation pipeline; calculating a decline metric value of the information security level according to the main authentication authorization check credibility and the operation security gradient; and determining whether the authentication is passed or not according to a comparison result between the decline metric value of the information security level and a preset threshold value. According to the method, security authentication based on the super SIM card is used, the abuse risk of biometric authentication can be reduced, the operation complexity can be reduced to the maximum extent, and the validity and security of authorization are ensured.

The application discloses a management platform system for supply chain finance and a non-sensing upgrade method thereof, has the effects of local pilot, small flow verification, automatic observation, rapid rollback, and protects the consistency of in-transit instances and the continuity of key transactions. The system comprises: an infrastructure layer, which provides process arrangement, rule and model execution, event driving, configuration management, task compensation, security authentication and full-link observability, supports the non-sensing upgrade core mechanism including multi-version parallel running, shadow verification, gray release and automatic rollback of the upper-layer business, an interaction layer, which provides unified authentication, permission and configurable menu, supports displaying differentiated functions according to organizations / roles, a domain service layer, which is used for encapsulating business logic operations in the platform, coordinating multiple parties to complete cross-entity transactional tasks, and ensuring the consistency and integrity of business rules, and a fund and channel adaptation layer, which abstracts multiple protocols by using a contract / interface definition language, automatically generates basic adapters, and unifies strategies.

The load control system is configured to generate, by software, a function capable of using the power conversion device for a prescribed use in a case where hardware and software-based cooperative security authentication is established by cooperation between at least the control device and the power conversion device.

The invention relates to a multi-party data security computing method and system based on TEE and an encrypted mirror image, and belongs to the technical field of data security computing, and the system sequentially comprises an access layer, a security authentication and control layer, a data and mirror image security layer and a security computing environment layer from top to bottom, the method comprises the steps of encrypting and uploading a data demander program mirror image, encrypting and uploading participant data, performing safety calculation in TEE and encrypting and downloading a data demander result. In a word, the method has the advantages of realizing full-process security protection of multi-party data security calculation, effectively reducing the risk of data leakage, providing intellectual property protection of calculation codes, preventing algorithm leakage and reverse engineering, and ensuring commercial confidential security of users.

This application provides a roadside system based on the HarmonyOS operating system. The roadside system includes a transaction system and multiple security subsystems. The transaction system is developed based on a standard HarmonyOS system, and each basic unit within the transaction system can be installed, run, uninstalled, and upgraded independently. Each security subsystem is developed based on a lightweight HarmonyOS system and operates independently. The transaction system creates multiple transaction threads. Each transaction thread sends vehicle information from the corresponding vehicle terminal to the corresponding security subsystem for security authentication. It receives the authentication result from the vehicle terminal corresponding to each transaction thread and completes the transaction with the successfully authenticated vehicle terminal. This application solves the problem of chain reactions caused by the failure of a single functional module due to severe coupling between the various functions of the roadside system.

The application relates to a control method of a security authentication process and a computer device. The method comprises the following steps: an end-side device reads a hardware fingerprint of the device itself, generates an authentication request packet by combining the hardware fingerprint with pre-assigned authorized signature data, and sends the authentication request packet to an edge-side device, the edge-side device locally checks the authentication request packet, and forwards the authentication request packet to a cloud-side platform for final examination; the end-side device receives a one-stage authentication result, and if the one-stage authentication fails, the access is terminated; if the one-stage authentication passes, the end-side device receives a two-stage enhanced authentication request generated by the cloud-side and forwarded by the edge-side, performs identity authentication and random number signature on the two-stage enhanced authentication request, obtains an authentication response packet, and returns the authentication response packet to the edge-side device for checking; after the two-stage authentication passes, the end-side device receives an encrypted remote control instruction through a theming classification interaction mechanism, decrypts and executes the encrypted remote control instruction, encrypts an execution result of the remote control instruction, and feeds back the execution result to the cloud-side platform through the edge-side device. The method can realize graded management and control of low-risk fast access and medium-high risk strengthened protection, effectively resist security attacks such as fake access and identity tampering, and avoid data leakage, confusion or transmission abnormity caused by mixed flow of different types of data.

The application discloses a security authentication method, a management and control platform, network equipment and a storage medium. The method comprises the following steps: an edge device sends a device activation request to the management and control platform; after the management and control platform verifies the edge device, the edge device state is updated to an activation state, an activation response feedback is sent to the edge device, and a first-level authentication feedback is sent to an authentication service component corresponding to the edge device; after the edge device receives the activation response feedback, a registration request is sent to the authentication service component; after the authentication service component verifies the edge device, a second-level authentication feedback is sent to the edge device; the edge device generates a media resource acquisition request carrying the second-level authentication feedback, and requests a media resource from the authentication service component through the media resource acquisition request. The application reduces the device authentication pressure of the management and control platform.

The application provides a replay voice attack detection method for a voiceprint security authentication system. First, the voice signal is preprocessed, then a plurality of sub-band signals are obtained through linear equal-width Gabor filters, each sub-band signal is processed through FDEO to obtain an instantaneous amplitude and an instantaneous frequency, then the instantaneous amplitude and the instantaneous frequency are respectively taken as inputs of an SENet to obtain enhanced IACC and IFCC features, and the features are respectively processed through windowing and averaging and discrete cosine transformation to obtain respective low-dimensional feature vectors. Then, the extracted IACC and IFCC feature vectors are respectively used to train respective Gaussian mixture model classifiers to obtain respective classifier model parameters. In detection, the IACC and IFCC feature vectors of the voice to be detected are respectively input into the respective GMM classifiers and are scored for credibility, and finally score level fusion is performed to realize discrimination of true and false voices.

A mobility service providing method and apparatus are provided. The method includes: moving, by a vehicle, to a customer when the customer requests the vehicle to provide a mobility service and forming, by one or more anchors mounted on the vehicle, an Ultra-Wide Band (UWB) link with an information technology (IT) device carried by the customer when a determination is made that a distance between the vehicle and the customer is within a predetermined distance; performing a smart anchor positioning (SAP) algorithm to estimate a position of the IT device; performing position-based security authentication with the customer; and arriving, by the vehicle, at the customer, wherein the one or more anchors and the IT device transmit or receive UWB pulse waves.

The embodiment of the utility model relates to the technical field of security identification equipment, and particularly discloses intelligent security identification equipment and an intelligent identification system, and the equipment comprises a mounting mechanism, a mainboard module, an antenna module and an identification module. The mounting mechanism comprises a shell and a support, at least part of the support and the shell jointly define a containing cavity, and the mounting mechanism is provided with a first end and a second end which are opposite in the first direction. The main board module comprises a main board and a connecting module, the main board is installed on the support and contained in the containing cavity, the connecting module is installed on the main board and electrically connected with the main board, and the connecting module extends out of the containing cavity from the first end of the main board. The antenna module is installed on the support and contained in the containing cavity, and the antenna module is electrically connected with the main board. The identification module is installed on the support, at least part of the second end of the identification module is exposed out of the containing cavity, the identification module is electrically connected with the main board, the identification module is used for feeding back identification signals, and the main board conducts safety certification. Through the structure, the use convenience is improved, and the safety is improved.

This application provides a message sending method, apparatus, and storage medium based on route security verification, relating to the field of network technology. It solves the technical problem in related technologies where routing forwarding rules designed by routing devices based on a valleyless model may not provide comprehensive route security verification. Applied to a first routing device, the method includes: receiving a target message sent by a second routing device; the second routing device being the upstream device of the first routing device; the target message including: a network domain identifier of the second routing device; the network domain identifier indicating the network domain to which the routing device belongs; performing route security verification on the first routing device based on the network domain identifier of the second routing device and the network domain identifier of the first routing device; and, if the route security verification of the first routing device passes, sending the target message to a third routing device, the third routing device being the next-hop device of the first routing device.

The present disclosure relates to the technical field of computers, and particularly relates to a data encryption method and apparatus, and a device, a storage medium and a product. The method comprises: in response to a data encryption request triggered by a user, collecting information to be authenticated of the user; performing security verification processing on said information, so as to obtain a security authentication result corresponding to said information, wherein the security authentication result indicates that the security authentication is successful or the security authentication fails; in response to the security authentication result indicating that the security authentication is successful, acquiring a target key for which the user has a usage permission; on the basis of the target key, performing encryption processing on a data stream to be encrypted of the user, so as to obtain encrypted ciphertext; and sending the encrypted ciphertext to a cloud server. The technical solution of the present disclosure improves the security of data encryption.