1155 results about "Security authentication" patented technology

The invention relates to the technical field of safety certification, in particular to an electronic commerce platform safety certification system and method. The method comprises the following steps: acquiring platform login identity information, performing field migration and recombination, constructing an identity information tracing chain, performing multi-domain splitting on the tracing chain, generating a domain segmentation identity chain, performing identity risk assessment based on the multi-domain splitting, generating risk parameters, and performing parallel fusion authentication according to the risk parameters and the domain segmentation identity chain. The method comprises the steps of generating an initial security authentication result, logging in through a disguise platform, collecting login environment change data, verifying environment authenticity and performing security judgment to obtain login environment security data, performing platform login re-authentication by utilizing the security data and the initial authentication result, updating a login state and establishing a repeated authentication mechanism. According to the invention, a set of more comprehensive security protection system is formed through a multi-level security authentication strategy.

The invention discloses a dynamic collaborative arrangement system and method based on an intelligent agent, and relates to the technical field of artificial intelligence. By integrating core modules of an agent communication protocol, knowledge base management, agent arrangement, security authentication, resource scheduling and the like, not only is a standardized agent cooperation framework and a distributed knowledge sharing mechanism provided, but also dynamic task arrangement and secure and controllable resource scheduling capability among agents are realized. The problem of how to effectively realize standardized communication and dynamic cooperation of agents among enterprises and unified management and shared utilization of knowledge resources in the prior art is solved, and particularly, the problem of how to construct an efficient, safe and extensible agent cooperation network in a multi-enterprise cooperation environment is solved.

The invention discloses a lightweight dynamic security authentication method and system based on PUF (Physical Unclonable Function), and the method comprises the steps: S1, a server side collects to-be-registered information, generates a random challenge and auxiliary information, receives a response corresponding to the challenge generated by an IOT (Internet of Things) device side through a PUF structure, and sends the response to the server side; storing the pseudonym and the private key of the registered user and the CRP pair of the user equipment; s2, when the server side receives the authentication request, the server side initializes the authentication request, generates a challenge of the next round of authentication by using the challenge of the current authentication in the initialization process, and sends the challenge of the next round of authentication to the Internet of Things equipment side; the server side verifies the identity of the device after receiving the data packet sent by the Internet of Things device side; and S3, updating a next round of pseudonym at the server side, generating a next round of challenge and CRP pair by the server side, and sending the challenge and CRP pair to the Internet of Things equipment side. The method has the advantages of being simple in implementation method, small in resource overhead, high in flexibility, capable of dealing with various security threats and the like.

The embodiment of the invention provides a multi-factor security authentication method and device based on AI adaptive recognition and a block chain, and the method comprises the steps: collecting user biological features, behavior data and equipment information, and extracting static and dynamic features through employing a convolutional neural network and a long-short term memory network; a feature fusion network is innovatively constructed, an attention mechanism is introduced to carry out dynamic weight distribution and fusion on different features, and feature correction is carried out based on a user behavior baseline model. And meanwhile, a block chain network and an intelligent contract are deployed, so that credible storage and risk level evaluation of authentication data are realized. According to the method, the limitation of traditional single authentication is broken through, the effective balance between safety and user experience is realized, and an advanced technical scheme is provided for the field of identity authentication.

The invention provides an industrial Internet of Things security authentication method and system based on zero-knowledge proof, and relates to the technical field of security authentication, and the method comprises the steps: sending the identity information of terminal equipment to an authentication server through an edge computing node, generating an equipment certificate, and building an identity management information base; and the authentication server detects a computing resource occupancy rate of the terminal equipment according to the equipment authentication key, generates a zero-knowledge proof request, performs parallel verification, updates an equipment reputation score and predicts a next authentication session state. And selecting main and standby communication channels based on the prediction state, and triggering channel switching when the health degree is lower than a threshold value. And the authentication server determines a dynamic time slice allocation strategy according to the equipment reputation score, the service priority and the prediction state, and the edge computing node adaptively adjusts the size of the time slice to complete authentication request processing. According to the method, the authentication efficiency and security are improved, the computing resource consumption is reduced, and the system robustness is enhanced.

The invention relates to the technical field of Internet of Things security, and provides a security authentication method and system for an Internet of Things device, a medium and a device, and the method comprises the steps: responding to an authentication request of the Internet of Things device, the authentication request comprising a unique identifier, a current timestamp and a comprehensive feature vector of the Internet of Things device; after the current timestamp and the comprehensive feature vector are connected, generating a random challenge value through a random function and sending the random challenge value to obtain a returned Internet of Things equipment response value; after the authentication key, the comprehensive feature vector and the random challenge value are connected, an expected response value is generated through a secure hash function, and whether the Internet of Things equipment is successfully authenticated or not is judged through comparison; and if the authentication is successful, generating a session key, connecting the authentication key with the session key, and updating the authentication key through a secure hash function. The common security threats such as replay attack and man-in-the-middle attack are effectively prevented, and the uniqueness and security of each authentication are ensured.

The invention belongs to the technical field of power resource optimization, and particularly relates to a power supply station service architecture optimization method based on digital power grid construction achievements, which comprises the following steps: investigating power supply station service requirements, constructing a power supply station service architecture, and determining a power supply station application architecture; an intelligent Internet of Things terminal operation system based on an electric power gap base and a platformization solution are introduced into the application architecture, and a platformization and perception fused service operation system is constructed; core technologies such as an AI large model, a high-perception terminal, a security authentication mechanism and a 5G slicing network are introduced into asset management, production management, resource management and technical management, and an integrated service execution system with intelligent perception, efficient cooperation, security, credibility and standardized operation is constructed. According to the invention, the problems of scattered architecture, slow response, weak cooperative capability and the like in a traditional power grid system are solved, and reliable support and a technical path are provided for efficient, safe and intelligent development of a power grid.

The embodiment of the invention provides a security authentication method, device and system for a test platform, and a storage medium, and relates to the technical field of network security. The method comprises the following steps: performing fingerprint acquisition on virtual and real equipment to generate a unique identifier, dynamically slicing based on a software defined network to form an isolated test environment, and injecting a zero-trust access strategy associated with the fingerprint; and based on the zero-trust access policy and the device fingerprint, allocating a minimum permission through an attribute-based access control model, continuously evaluating device behaviors to calculate a dynamic trust score, and adaptively updating the permission according to the trust score. By constructing a full-process security certification system and through multi-dimensional mechanism cooperation, dynamic risk perception and timely strategy adjustment, fine-grained control of virtual and real equipment access in an industrial control scene is realized, the dynamic adaptability and risk resistance of a test platform in a complex network environment are improved, and the test efficiency is improved. Equipment access safety, authority distribution minimization and behavior monitoring continuity are ensured, and the safety risk of the industrial control system is reduced.

The invention relates to the technical field of block chains and artificial intelligence, and discloses an AI-based block chain smart contract cross-domain authentication security enhancement method and system.The AI-based block chain smart contract cross-domain authentication security enhancement method comprises the steps that a hierarchical security architecture comprising a sensing layer, an analysis layer, a decision-making layer and an execution layer is constructed, collecting cross-domain authentication data and transmitting the cross-domain authentication data to an analysis layer; realizing a threat detection model based on deep learning, receiving feature data collected by the sensing layer, and outputting a threat score and an abnormal index; establishing a dynamic trust evaluation mechanism, receiving an output result of the threat detection model, and calculating a real-time trust value between entities; and designing an adaptive authentication strategy optimization algorithm, and dynamically selecting an optimal authentication strategy based on a trust evaluation result, so that the problem of security authentication between heterogeneous block chain networks can be solved, and an efficient and secure cross-domain authentication solution is provided.

The invention relates to the technical field of data transmission, and discloses an OpenHarmony-based data transmission method and platform, and the method comprises the steps: carrying out the automatic discovery of network equipment through employing a distributed soft bus technology, and obtaining an authenticated equipment list; constructing an initial dynamic routing table and updating the initial dynamic routing table to obtain an optimized routing table; fragmenting the data to be transmitted and performing redundant coding to obtain a coded transmission unit; business is divided into real-time and non-real-time categories, a state space is constructed, and a business migration strategy is formulated; performing parallel transmission on the encoded transmission units, and dynamically adjusting a data distribution proportion; distributed cache nodes are deployed in a network, data transmission is optimized, efficient transmission and recovery of data are realized, and automatic discovery and security authentication of equipment, dynamic routing optimization, intelligent data fragmentation and coding, resource scheduling of service awareness, parallel transmission of multiple network interfaces and efficient utilization of distributed cache can be realized.

The invention discloses a high-concurrency API service-oriented AI gateway multi-level cache synchronization method and system, and the method comprises the steps: obtaining a request, extracting data information in the request, and carrying out the request routing, security authentication, service authentication and flow control in a memory; when the number of requests reaches a preset threshold value, writing the data information into a system cache and / or a database for updating; when a user carries out recharging operation, obtaining user data based on the multi-level cache architecture through an UpdatUser function to carry out balance calculation and updating; and updating the memory data information to a system cache and a database in real time based on a publishing and subscribing mechanism so as to carry out data consistency maintenance. Request routing, security authentication and other key operations are completed in the memory, the high-speed read-write characteristic of the memory is utilized, the request processing delay is greatly reduced, and ten thousands of concurrency per second or even higher concurrency is supported. The dependence on a back-end cache and a database is reduced, and the performance bottleneck is avoided.

The invention relates to a link layer communication encryption method and system, and aims at designing a terminal side link encryption gateway and a service side link encryption gateway between a service terminal and a service system, integrally designing and applying identity authentication and session key negotiation on the basis of equipment authentication, realizing security authentication and simultaneously improving the security of the service terminal and the service system. The session key under application between the terminal side link encryption gateway and the service side link encryption gateway is obtained, that is, a lightweight security authentication mechanism is realized, a dynamic session key is generated for each accessed service terminal, the security of data communication and transmission is enhanced, the design scheme encrypts the communication data of the service terminal in a link layer, and the security of the service terminal is improved. Intranet information hiding is ensured, and an intranet service system and equipment are prevented from being attacked; and the gateway is not configured with actual IP and MAC, so that malicious users cannot carry out directional attacks on the gateway.

The present invention relates to a cyber security authentication method for a displayless networking device. The method includes randomly generating an ephemeral decryption key in a displayless networking device application server; providing the ephemeral decryption key and a network address of the displayless networking device to a user device via an optical identifier; initiating a multi-party multi-factor dynamic strong encryption authentication scheme in the user device based on the ephemeral decryption key and the network address to obtain an ephemeral credential; and authenticating an identity information based on the ephemeral decryption key and the ephemeral credential at least by the user device, the displayless networking device application server, and a security server.

The invention relates to the technical field of platform security authentication, in particular to an e-commerce platform security authentication method and system. The method comprises the following steps: performing continuous facial image sequence acquisition on a user through a front camera of user equipment to obtain an original facial image data stream; performing adaptive dynamic feature point positioning on the original facial image data stream to obtain a personalized facial feature vector; acquiring touch behavior data of a user to obtain an original touch behavior data stream; performing operation feature extraction on the original touch behavior data stream to obtain a standardized touch feature vector; performing weighted fusion on the personalized facial feature vector and the standardized touch feature vector to obtain a user biological behavior feature signature; and performing environment context data acquisition on the user equipment to obtain an operation environment behavior data stream. According to the invention, the dependence on setting a strong password by a user is reduced, so that the security risk caused by selecting a simple password by the user is avoided.

The invention provides a lightweight encryption authentication method for a wireless sensor network, which comprises the following steps: a gateway node generates a sensing instantaneous key and a user instantaneous key respectively based on a one-way hash function and a preset physical unclonable function, the sensing instantaneous key, the user instantaneous key, a preset sensing long-term key and a user long-term key are respectively sent to the user side and the sensor node; after the user side and the sensor node are registered, the user side performs identity verification on identity information currently input by a user, and performs mutual authentication among the user side, the gateway node and the sensor node based on the identity information, so as to send a sensing hash message authentication code and a user hash message authentication code to the sensor node according to an authentication result; according to the method, the sensor node and the gateway node are subjected to key negotiation authentication to obtain the session key, so that wireless sensor network communication can be carried out based on the session key, and the security authentication problem of the wireless sensor network is effectively solved.

The embodiment of the invention discloses a dynamic metadata sensing and self-adaptive mapping method and system, and the method comprises the following steps: deploying a lightweight probe to be agented to a plurality of heterogeneous source database systems, and building a trusted communication channel between the probe and a coordination center through equipment fingerprint generation and security authentication; a database log event is captured in real time, log analysis is carried out through an FPGA module, the change of a field structure or a semantic level is identified, and structured event data is generated; performing context embedding representation on the captured event based on a semantic understanding model, performing strategy reasoning in combination with a historical strategy and a knowledge graph, and generating a matched mapping strategy; loading and executing the mapping strategy in a trusted execution environment (TEE) to realize data conversion, cleaning and complementation, and performing desensitization processing on sensitive data through a differential privacy mechanism; and collecting performance indexes and abnormal logs of a strategy execution result, continuously training the model through a closed-loop optimization mechanism, and correcting an unreasonable strategy or updating a rule base.

The invention discloses an industrial internet intelligent storage collaborative decision-making system, and mainly relates to the technical field of industrial internet. Comprising a data acquisition layer used for acquiring storage full-scene real-time data through an industrial internet protocol; the edge calculation layer is deployed at edge nodes of a storage site; the cloud platform layer receives the feature data uploaded by the edge computing layer; the intelligent decision engine is used for carrying out multi-target collaborative optimization analysis based on a digital twin model; the execution interaction layer is used for converting the scheme generated by the intelligent decision engine into an executable instruction; and the security authentication module penetrates through the data acquisition layer to the execution interaction layer. The system has the advantages that the defects of an existing warehousing system in the aspects of collaboration, real-time performance, adaptability, safety and the like are overcome, the intelligent level and the full-chain operation efficiency of industrial warehousing are remarkably improved, and the system has outstanding practical value.

The invention discloses a method and a system for realizing remote ADB debugging of Android equipment based on Frpc, and belongs to the technical field of remote debugging of mobile equipment. Aiming at the problems of complex configuration, low security, poor network penetration capability and the like of a traditional scheme, a system architecture including dynamic configuration management, bidirectional security authentication and intelligent tunnel maintenance is constructed by embedding an Frpc client in an equipment end. An encryption tunnel is established between an equipment end and a server end through TLS1.3, ADB flow reverse proxy transmission is achieved, configuration safety is guaranteed by adopting a dynamic token and HMAC-SHA256 encryption, and hot loading update and certificate two-way verification are supported; and an exponential backoff reconnection strategy is designed, and the network outage recovery capability is improved. According to the scheme, the configuration complexity is reduced by 83% in a public network environment, the connection speed is increased by 5 times, the data leakage risk is reduced by 97%, seamless debugging across NAT networks is supported, and a safe and efficient solution is provided for remote maintenance of Internet of Things equipment and intelligent terminals.

The invention discloses a dynamic security authentication method for cross-platform information system integration, and relates to the technical field of cross-platform dynamic authentication. A non-tampering identity trust chain is established through a block chain consensus algorithm, the problems of single-point fault and expansibility of centralized identity management are solved, cross-platform unified identity verification is realized, the problem that multi-factor authentication lacks intelligent risk assessment is solved through intelligent contract automatic verification and user behavior analysis, threats can be dynamically responded, and the user experience is improved. The authority is dynamically adjusted based on the risk level, and a real-time access control decision engine is combined, so that the problem of response lag of traditional access control is solved, accurate authority control is realized, and finally, a continuously optimized security authentication mechanism and a unified and coordinated cross-platform security protection system are formed.

The invention discloses a power meter reading concentrator remote upgrading system and method based on a 4G communication module. The system comprises a power meter reading concentrator, a remote server, a management terminal and a security authentication module. The concentrator is internally provided with a 4G communication module and establishes secure communication with a remote server through a 4G network, so that remote upgrade of firmware or software is realized. The system adopts block transmission and breakpoint resume technologies, and it is ensured that the upgrade package can still be efficiently and completely transmitted under the condition that the network is unstable. In the upgrading process, SSL / TLS encryption is adopted for data transmission, and safety is guaranteed; meanwhile, the system has self-checking and rollback functions, and it is ensured that the system automatically recovers to a safe state when upgrading fails. According to the invention, the upgrading and maintenance efficiency of the electric power meter reading system is remarkably improved, the operation and maintenance cost is reduced, and the reliability and safety of the system are improved.

The invention discloses a security authentication method, device and equipment, a storage medium and a computer program product, and the method comprises the steps: collecting operation data of current vehicle remote control equipment, carrying out the feature extraction of the operation data, and obtaining a risk assessment factor; determining a current risk score according to the risk assessment factor and a risk assessment model, and determining a current risk level based on the current risk score and a preset level division rule; and selecting a target security authentication mode according to the current risk level. According to the invention, feature extraction is carried out on operation data to obtain risk assessment factors; the method comprises the steps of determining a current risk score according to a risk assessment factor and a risk assessment model, then determining a current risk grade based on the current risk score, and finally selecting a target security authentication mode based on the current risk grade. And the safety of remote control operation of the vehicle is improved.

The invention relates to the technical field of network security, and discloses a network security authentication system and method based on a block chain, and the system comprises a data processing module, a risk assessment module, a permission adjustment module and a security supervision module. The method corresponds to the system. According to the application, in the data processing module, the user behavior and the equipment operation data are collected and stored in the block chain, so that the security and traceability of the data are ensured; the risk assessment module accurately analyzes the user behavior risk by means of a risk assessment model and a consensus mechanism distributed at each node of the block chain, and improves the reliability of security authentication; the permission adjustment module dynamically adjusts the user permission according to the consensus evaluation result and a preset rule, and the flexibility of the system to cope with the security risk is enhanced; the security supervision module records a permission adjustment process to ensure the compliance and traceability of the system; therefore, dynamic authority management of the network security authentication system based on the block chain is realized, security and flexibility in security authentication are improved, and various security challenges and user behavior changes can be timely coped with.

The invention relates to the technical field of security authentication and ubiquitous networks, and discloses a ubiquitous-network-oriented cloud-side collaborative multi-factor identity authentication method and system, and the method comprises the steps: issuing an identity certificate based on an elliptic curve and a PUF challenge-response library of a parameter initialization edge node through a cloud, and achieving the cloud-side bidirectional authentication; when the terminal is accessed, multi-factor authentication combining PUF challenge and a dynamic threshold value is adopted, so that the capability of resisting counterfeiting and replay attacks is improved; after the authentication is passed, the edge node generates a group public key locally and constructs a binary tree group key structure with a preset depth, and post-quantum safe and efficient group signature management is supported; when a newly added terminal joins, generating a secret key based on an elliptic curve algorithm and distributing a group signature private key share to realize lightweight member management; the integrity, confidentiality and traceability are realized while the transmission efficiency is guaranteed, and safe communication and dynamic revocation in an edge resource limited environment are effectively supported.

The invention relates to the field of gateway verification, in particular to a security authentication gateway system and method based on AI analysis, and the system comprises a log verification module, an AI analysis module, a solid-state hardware module, a quantitative decoding module and a condition latching module, the AI analysis module is used for positioning a target subnet and generating a signature function, the solid-state hardware module is used for constructing a physical communication link of the gateway, the quantization decoding module is used for confirming receiving and transmitting time and decoding data, and the condition latch module is used for processing response signals and adjusting data packet receiving and transmitting time. According to the method, the influence of attack modes such as malicious traffic, DDoS attack and SQL injection on gateway communication is prevented, and meanwhile, the communication speed of network communication is improved, so that the security and flexibility of the security verification gateway are ensured, and the network management cost is reduced.

The invention provides a collaborative signature method, device and equipment and a medium, and the method comprises the steps: receiving a signature original text forwarded by an application server, and obtaining a first signature value in combination with a first private key stored in a hardware encryption machine; sending a first FIDO request to a biological recognition server, and receiving a second signature value and a third signature value sent by the biological recognition server, the second signature value is obtained by the biological recognition client based on the first FIDO message, the signature original text and a second private key stored in the trusted execution environment in advance and is sent to the biological recognition server through the collaborative signature client; the third signature value is obtained by the collaborative signature client based on the first FIDO message, the signature original text and a third private key stored in the memory in advance and is sent to the biological recognition server; and obtaining a complete signature according to the first signature value, the second signature value and the third signature value, and sending the complete signature to the application server. According to the invention, the security authentication strength of the collaborative signature is improved.

The invention relates to a security authentication method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: receiving a key generation request sent by target equipment; if it is determined that the key generation request is legal, generating a trust identifier and a security certificate of the target device, obtaining an identifier verification request through the trust identifier, and sending the identifier verification request to an authentication server, so that the authentication server verifies the trust identifier to obtain an access token corresponding to the target device; receiving a message returned by the authentication server, and processing an access token carried by the message to obtain a trust identifier; and writing the security certificate into the target protection area, and sending the trust identifier and the security certificate to the target equipment, so that the target equipment is registered in the authentication server. By adopting the method, the identity verification of the equipment and the control of an encryption communication mechanism are realized, and the safety protection performance in a communication system is further improved.

The invention relates to the technical field of block chains, in particular to a distributed Internet of Things management method and system based on edge cloud computing. The system comprises an intelligent data acquisition module, a self-adaptive data synchronization module, an access control module, a block chain optimization module and a security authentication module. The intelligent data acquisition module collects equipment data in real time, and the adaptive data synchronization module realizes cross-regional synchronization based on a HyperSync technology. The access control module intelligently distributes user and equipment requests by using a HyperAgent technology and transmits the user and equipment requests to the block chain optimization module, and the block chain optimization module optimizes the data processing performance of block chain nodes through a Hyper I O technology. And the security authentication module is combined with a dynamic key and a zero-trust authentication mechanism to realize multi-level application and equipment security authentication. According to the invention, the real-time performance of Internet of Things management, the stability of cross-regional synchronization, the intelligence of request processing, the efficiency of block chain operation and the overall security of the system are improved.

The embodiment of the invention provides a multi-system login method and device, a storage medium and a program product, and relates to the technical field of security authentication. The method comprises the steps of receiving a token sent by a server in response to successful passing of identity verification of a digital portal, displaying system entrances of a plurality of systems associated with the digital portal, and responding to a touch operation for a system entrance of a target system in the system entrances of the plurality of systems, determining a system verification level of the target system according to the permission identifier, if the system verification level of the target system is a first system level, logging in a preset page of the target system, and if the system verification level of the target system is a second system level, logging in a preset page of the target system; if yes, first system verification information input by the user based on verification prompt information corresponding to the second system level is verified, and if verification succeeds, a preset page of the target system is logged in. According to the method provided by the embodiment of the invention, the convenience and security of multi-system login are improved.

The invention provides an intelligent intelligent supervision system for civil aviation VoIP communication equipment, relates to the basic field of civil aviation air traffic control equipment, and solves the limitation problems of non-centralized supervision, imperfect supervision, non-autonomous supervision and the like existing in an existing supervision mode. The system comprises a system architecture module which adopts a layered modular design to construct a double-layer system comprising a top layer management architecture and a bottom layer operation architecture; the function service module comprises an equipment state monitoring unit, a risk assessment engine and an operation and maintenance management unit; the data processing architecture forms a multi-stage processing channel by a data acquisition layer, a data transmission layer, a data storage layer, a data calculation layer and a data application layer which are connected in sequence; the technical support system comprises a micro-service component group, a continuous integration platform and a security authentication module. The intelligent supervision network architecture of the VoIP communication equipment is subjected to brand-new autonomous design, transformation from passive response to active management is completed, and the supervision efficiency and the treatment efficiency are improved.

The invention discloses a cross-industry equipment safety monitoring method and system based on Beidou dual-frequency and 4G communication, and belongs to the technical field of equipment safety monitoring. The method comprises the steps of data acquisition, processing, result generation and analysis: acquiring equipment position and operation state data through a Beidou dual-frequency positioning module and a sensor, and combining communication quality data; preprocessing through an edge calculation module, extracting features, establishing a security early warning and authentication model, and generating a risk level, identity legality and a comprehensive result containing position information; dynamically adjusting a 4G and Beidou short message communication mode, triggering a response measure, and synchronizing the response measure to the cloud. The system comprises a positioning module, a sensing module, an edge computing module, a communication module, a cloud module and a security authentication module. According to the invention, global seamless monitoring in a complex environment is realized, the real-time performance and the safety protection capability are improved, the system is adaptive to multi-industry scenes, and reliable guarantee is provided for safe operation of cross-industry equipment.