693 results about "Security authentication" patented technology

The invention relates to the technical field of safety certification, in particular to an electronic commerce platform safety certification system and method. The method comprises the following steps: acquiring platform login identity information, performing field migration and recombination, constructing an identity information tracing chain, performing multi-domain splitting on the tracing chain, generating a domain segmentation identity chain, performing identity risk assessment based on the multi-domain splitting, generating risk parameters, and performing parallel fusion authentication according to the risk parameters and the domain segmentation identity chain. The method comprises the steps of generating an initial security authentication result, logging in through a disguise platform, collecting login environment change data, verifying environment authenticity and performing security judgment to obtain login environment security data, performing platform login re-authentication by utilizing the security data and the initial authentication result, updating a login state and establishing a repeated authentication mechanism. According to the invention, a set of more comprehensive security protection system is formed through a multi-level security authentication strategy.

The invention discloses a dynamic collaborative arrangement system and method based on an intelligent agent, and relates to the technical field of artificial intelligence. By integrating core modules of an agent communication protocol, knowledge base management, agent arrangement, security authentication, resource scheduling and the like, not only is a standardized agent cooperation framework and a distributed knowledge sharing mechanism provided, but also dynamic task arrangement and secure and controllable resource scheduling capability among agents are realized. The problem of how to effectively realize standardized communication and dynamic cooperation of agents among enterprises and unified management and shared utilization of knowledge resources in the prior art is solved, and particularly, the problem of how to construct an efficient, safe and extensible agent cooperation network in a multi-enterprise cooperation environment is solved.

The invention belongs to the technical field of power resource optimization, and particularly relates to a power supply station service architecture optimization method based on digital power grid construction achievements, which comprises the following steps: investigating power supply station service requirements, constructing a power supply station service architecture, and determining a power supply station application architecture; an intelligent Internet of Things terminal operation system based on an electric power gap base and a platformization solution are introduced into the application architecture, and a platformization and perception fused service operation system is constructed; core technologies such as an AI large model, a high-perception terminal, a security authentication mechanism and a 5G slicing network are introduced into asset management, production management, resource management and technical management, and an integrated service execution system with intelligent perception, efficient cooperation, security, credibility and standardized operation is constructed. According to the invention, the problems of scattered architecture, slow response, weak cooperative capability and the like in a traditional power grid system are solved, and reliable support and a technical path are provided for efficient, safe and intelligent development of a power grid.

The embodiment of the invention provides a security authentication method, device and system for a test platform, and a storage medium, and relates to the technical field of network security. The method comprises the following steps: performing fingerprint acquisition on virtual and real equipment to generate a unique identifier, dynamically slicing based on a software defined network to form an isolated test environment, and injecting a zero-trust access strategy associated with the fingerprint; and based on the zero-trust access policy and the device fingerprint, allocating a minimum permission through an attribute-based access control model, continuously evaluating device behaviors to calculate a dynamic trust score, and adaptively updating the permission according to the trust score. By constructing a full-process security certification system and through multi-dimensional mechanism cooperation, dynamic risk perception and timely strategy adjustment, fine-grained control of virtual and real equipment access in an industrial control scene is realized, the dynamic adaptability and risk resistance of a test platform in a complex network environment are improved, and the test efficiency is improved. Equipment access safety, authority distribution minimization and behavior monitoring continuity are ensured, and the safety risk of the industrial control system is reduced.

The invention relates to the technical field of block chains and artificial intelligence, and discloses an AI-based block chain smart contract cross-domain authentication security enhancement method and system.The AI-based block chain smart contract cross-domain authentication security enhancement method comprises the steps that a hierarchical security architecture comprising a sensing layer, an analysis layer, a decision-making layer and an execution layer is constructed, collecting cross-domain authentication data and transmitting the cross-domain authentication data to an analysis layer; realizing a threat detection model based on deep learning, receiving feature data collected by the sensing layer, and outputting a threat score and an abnormal index; establishing a dynamic trust evaluation mechanism, receiving an output result of the threat detection model, and calculating a real-time trust value between entities; and designing an adaptive authentication strategy optimization algorithm, and dynamically selecting an optimal authentication strategy based on a trust evaluation result, so that the problem of security authentication between heterogeneous block chain networks can be solved, and an efficient and secure cross-domain authentication solution is provided.

The invention discloses a high-concurrency API service-oriented AI gateway multi-level cache synchronization method and system, and the method comprises the steps: obtaining a request, extracting data information in the request, and carrying out the request routing, security authentication, service authentication and flow control in a memory; when the number of requests reaches a preset threshold value, writing the data information into a system cache and / or a database for updating; when a user carries out recharging operation, obtaining user data based on the multi-level cache architecture through an UpdatUser function to carry out balance calculation and updating; and updating the memory data information to a system cache and a database in real time based on a publishing and subscribing mechanism so as to carry out data consistency maintenance. Request routing, security authentication and other key operations are completed in the memory, the high-speed read-write characteristic of the memory is utilized, the request processing delay is greatly reduced, and ten thousands of concurrency per second or even higher concurrency is supported. The dependence on a back-end cache and a database is reduced, and the performance bottleneck is avoided.

The embodiment of the invention discloses a dynamic metadata sensing and self-adaptive mapping method and system, and the method comprises the following steps: deploying a lightweight probe to be agented to a plurality of heterogeneous source database systems, and building a trusted communication channel between the probe and a coordination center through equipment fingerprint generation and security authentication; a database log event is captured in real time, log analysis is carried out through an FPGA module, the change of a field structure or a semantic level is identified, and structured event data is generated; performing context embedding representation on the captured event based on a semantic understanding model, performing strategy reasoning in combination with a historical strategy and a knowledge graph, and generating a matched mapping strategy; loading and executing the mapping strategy in a trusted execution environment (TEE) to realize data conversion, cleaning and complementation, and performing desensitization processing on sensitive data through a differential privacy mechanism; and collecting performance indexes and abnormal logs of a strategy execution result, continuously training the model through a closed-loop optimization mechanism, and correcting an unreasonable strategy or updating a rule base.

The invention discloses an industrial internet intelligent storage collaborative decision-making system, and mainly relates to the technical field of industrial internet. Comprising a data acquisition layer used for acquiring storage full-scene real-time data through an industrial internet protocol; the edge calculation layer is deployed at edge nodes of a storage site; the cloud platform layer receives the feature data uploaded by the edge computing layer; the intelligent decision engine is used for carrying out multi-target collaborative optimization analysis based on a digital twin model; the execution interaction layer is used for converting the scheme generated by the intelligent decision engine into an executable instruction; and the security authentication module penetrates through the data acquisition layer to the execution interaction layer. The system has the advantages that the defects of an existing warehousing system in the aspects of collaboration, real-time performance, adaptability, safety and the like are overcome, the intelligent level and the full-chain operation efficiency of industrial warehousing are remarkably improved, and the system has outstanding practical value.

The invention discloses a method and a system for realizing remote ADB debugging of Android equipment based on Frpc, and belongs to the technical field of remote debugging of mobile equipment. Aiming at the problems of complex configuration, low security, poor network penetration capability and the like of a traditional scheme, a system architecture including dynamic configuration management, bidirectional security authentication and intelligent tunnel maintenance is constructed by embedding an Frpc client in an equipment end. An encryption tunnel is established between an equipment end and a server end through TLS1.3, ADB flow reverse proxy transmission is achieved, configuration safety is guaranteed by adopting a dynamic token and HMAC-SHA256 encryption, and hot loading update and certificate two-way verification are supported; and an exponential backoff reconnection strategy is designed, and the network outage recovery capability is improved. According to the scheme, the configuration complexity is reduced by 83% in a public network environment, the connection speed is increased by 5 times, the data leakage risk is reduced by 97%, seamless debugging across NAT networks is supported, and a safe and efficient solution is provided for remote maintenance of Internet of Things equipment and intelligent terminals.

The invention discloses a dynamic security authentication method for cross-platform information system integration, and relates to the technical field of cross-platform dynamic authentication. A non-tampering identity trust chain is established through a block chain consensus algorithm, the problems of single-point fault and expansibility of centralized identity management are solved, cross-platform unified identity verification is realized, the problem that multi-factor authentication lacks intelligent risk assessment is solved through intelligent contract automatic verification and user behavior analysis, threats can be dynamically responded, and the user experience is improved. The authority is dynamically adjusted based on the risk level, and a real-time access control decision engine is combined, so that the problem of response lag of traditional access control is solved, accurate authority control is realized, and finally, a continuously optimized security authentication mechanism and a unified and coordinated cross-platform security protection system are formed.

The invention relates to the technical field of security authentication and ubiquitous networks, and discloses a ubiquitous-network-oriented cloud-side collaborative multi-factor identity authentication method and system, and the method comprises the steps: issuing an identity certificate based on an elliptic curve and a PUF challenge-response library of a parameter initialization edge node through a cloud, and achieving the cloud-side bidirectional authentication; when the terminal is accessed, multi-factor authentication combining PUF challenge and a dynamic threshold value is adopted, so that the capability of resisting counterfeiting and replay attacks is improved; after the authentication is passed, the edge node generates a group public key locally and constructs a binary tree group key structure with a preset depth, and post-quantum safe and efficient group signature management is supported; when a newly added terminal joins, generating a secret key based on an elliptic curve algorithm and distributing a group signature private key share to realize lightweight member management; the integrity, confidentiality and traceability are realized while the transmission efficiency is guaranteed, and safe communication and dynamic revocation in an edge resource limited environment are effectively supported.

The invention provides a collaborative signature method, device and equipment and a medium, and the method comprises the steps: receiving a signature original text forwarded by an application server, and obtaining a first signature value in combination with a first private key stored in a hardware encryption machine; sending a first FIDO request to a biological recognition server, and receiving a second signature value and a third signature value sent by the biological recognition server, the second signature value is obtained by the biological recognition client based on the first FIDO message, the signature original text and a second private key stored in the trusted execution environment in advance and is sent to the biological recognition server through the collaborative signature client; the third signature value is obtained by the collaborative signature client based on the first FIDO message, the signature original text and a third private key stored in the memory in advance and is sent to the biological recognition server; and obtaining a complete signature according to the first signature value, the second signature value and the third signature value, and sending the complete signature to the application server. According to the invention, the security authentication strength of the collaborative signature is improved.

The invention relates to a security authentication method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: receiving a key generation request sent by target equipment; if it is determined that the key generation request is legal, generating a trust identifier and a security certificate of the target device, obtaining an identifier verification request through the trust identifier, and sending the identifier verification request to an authentication server, so that the authentication server verifies the trust identifier to obtain an access token corresponding to the target device; receiving a message returned by the authentication server, and processing an access token carried by the message to obtain a trust identifier; and writing the security certificate into the target protection area, and sending the trust identifier and the security certificate to the target equipment, so that the target equipment is registered in the authentication server. By adopting the method, the identity verification of the equipment and the control of an encryption communication mechanism are realized, and the safety protection performance in a communication system is further improved.

The invention provides an intelligent intelligent supervision system for civil aviation VoIP communication equipment, relates to the basic field of civil aviation air traffic control equipment, and solves the limitation problems of non-centralized supervision, imperfect supervision, non-autonomous supervision and the like existing in an existing supervision mode. The system comprises a system architecture module which adopts a layered modular design to construct a double-layer system comprising a top layer management architecture and a bottom layer operation architecture; the function service module comprises an equipment state monitoring unit, a risk assessment engine and an operation and maintenance management unit; the data processing architecture forms a multi-stage processing channel by a data acquisition layer, a data transmission layer, a data storage layer, a data calculation layer and a data application layer which are connected in sequence; the technical support system comprises a micro-service component group, a continuous integration platform and a security authentication module. The intelligent supervision network architecture of the VoIP communication equipment is subjected to brand-new autonomous design, transformation from passive response to active management is completed, and the supervision efficiency and the treatment efficiency are improved.

The invention discloses a cross-industry equipment safety monitoring method and system based on Beidou dual-frequency and 4G communication, and belongs to the technical field of equipment safety monitoring. The method comprises the steps of data acquisition, processing, result generation and analysis: acquiring equipment position and operation state data through a Beidou dual-frequency positioning module and a sensor, and combining communication quality data; preprocessing through an edge calculation module, extracting features, establishing a security early warning and authentication model, and generating a risk level, identity legality and a comprehensive result containing position information; dynamically adjusting a 4G and Beidou short message communication mode, triggering a response measure, and synchronizing the response measure to the cloud. The system comprises a positioning module, a sensing module, an edge computing module, a communication module, a cloud module and a security authentication module. According to the invention, global seamless monitoring in a complex environment is realized, the real-time performance and the safety protection capability are improved, the system is adaptive to multi-industry scenes, and reliable guarantee is provided for safe operation of cross-industry equipment.

The invention relates to the technical field of distributed architectures, and discloses a multi-screen cooperative control method based on an OpenHarmony distributed architecture and an all-in-one machine system.The method comprises the steps that a broadcast frame found by equipment is sent through an OpenHarmony distributed soft bus, security authentication is conducted on a plurality of display terminals responding to the broadcast frame, a virtual bus channel is established, and the virtual bus channel is sent to the display terminals; obtaining a virtual device group; creating a distributed industrial data object on the main control equipment of the virtual equipment group and synchronizing the distributed industrial data object to each slave display terminal to obtain a distributed data model; mapping the anonymous shared memory to an annular buffer area; and writing real-time data acquired by the industrial field equipment into an annular buffer area, and transmitting the real-time data to each slave display terminal of the virtual equipment group, in the method, each display terminal accesses an agent instance of an industrial data object through a distributed data management framework; and the requirements of high reliability, low delay and high consistency on multi-screen cooperative control in an industrial field are met.

The invention relates to the field of network and information security, and discloses a server security authentication system based on block chain trusted computing. Comprising a block chain network, an intelligent contract module, an authentication service module, a verification node and a to-be-authenticated server. The intelligent contract module records a registration index, a certification public key, a policy version number, a baseline commitment value and a revocation state. The authentication service module generates a challenge parameter and a challenge value based on the block height and the block hash digest. The trusted agent module collects a measurement abstract and forms a certification packet, and the trusted root module derives a staging certification key in a protected environment and signs the certification packet. And the verification node reads the data on the chain to complete signature verification, challenge value re-calculation, window verification and compliance proof verification, and generates an authentication bill containing an effective height range for resource access judgment after passing the verification.

The invention provides a data access control method and system based on zero-knowledge proof, and relates to the technical field of data access control. According to the method, a root key of a unique hardware identity is generated through a physical unclonable function of a data request equipment chip, and meanwhile, real-time running state data of equipment is collected; the two are subjected to cryptographic binding to form an equipment credible state voucher; secondly, detecting capacitance field disturbance when data holding equipment approaches through a capacitive proximity sensor array, and generating an interactive response mode; then, the equipment credible state certificate and the interactive response mode serve as private input to generate a composite zero-knowledge proof, and identity authenticity and physical proximity are proved to data holding equipment at the same time on the premise that sensitive information is not leaked; and after the data holding device passes verification, the data access permission is authorized immediately, and a temporary encryption communication channel is established, so that the reliability and instantaneity of security authentication between IoT devices can be improved.

The invention discloses an authority management method and system for an access control system of a building hall, and relates to the technical field of authority management, and the authority management method comprises the following steps: associatively storing personnel identity information and corresponding authority levels to form an authority database, and adjusting the authority in real time according to time, events and personnel demands; the access control terminal reads the personnel identity recognition information, dynamically evaluates the credibility of the personnel identity recognition information, and judges whether the personnel are allowed to pass the access control according to the credibility; the permission verification server performs matching in a permission database according to the received identity recognition information to search a corresponding permission level; and according to the searched authority level, monitoring the number of times of accessing areas and floors exceeding the authority level of the person, and the access time of the person, and timely giving an alarm for abnormal behaviors according to a monitoring result. According to the invention, by integrating multiple security authentication means, the problems of single identity authentication form and low security are solved, and the security protection capability of the system is improved.

The invention relates to the technical field of safety certification, in particular to an AI robot responsibility certification method based on a digital certificate, which comprises a CA mechanism, an AI robot and participants related to the whole life cycle of the AI robot, according to different stages, the participants comprise a data set participant, a model participant, an integrated participant and an application participant, the AI robot and the participants thereof obtain the digital certificates through the CA mechanism, and the participants in all stages sign data of corresponding structures by means of the digital certificates to form traceability vouchers and undertake corresponding responsibilities. According to the invention, the digital certificate is combined with the security authentication technology, the hierarchical traceability voucher is added in the whole life cycle of the AI robot, and the responsibility authentication of the AI robot is carried out through the hierarchical traceability voucher, so that the authenticity of the entity identity related to the AI robot, the integrity of data and the non-repudiation of behaviors are ensured, and the reliability of the AI robot is improved. And a legal basis is provided for related responsibility attribution problems of the AI robot.

The invention provides a cross-platform fusion access method, system and device of equipment and electronic equipment, the method is applied to the technical field of Internet of Things, and the method comprises the following steps: a mobile terminal performs security authentication on target central control equipment; the mobile terminal sends a structured configuration file including the equipment information of the plurality of smart home equipment, the region division rule, the scene mode and the linkage rule to the target central control equipment; the target central control equipment receives and analyzes the structured configuration file, and updates the corresponding smart home equipment according to an analysis result; the target central control equipment receives a control instruction of the cloud platform, converts the control instruction into an internal protocol instruction and then issues the internal protocol instruction so as to control the corresponding smart home equipment to execute operation; the target central control device synchronizes the state information of the smart home device to the cloud platform; and when an upgrading instruction of the cloud platform is received, issuing an upgrading task to execute an upgrading process. According to the method, the real-time performance of remote control of the smart home equipment and the accuracy of state feedback are guaranteed.

The invention discloses an equipment security authentication method, equipment and a storage medium. The method comprises the following steps: decrypting received client card punching information through a pre-stored platform private key; the decrypted clock-in information is verified, and identity authentication information is generated based on a device public key corresponding to the client when it is determined that the clock-in information is correct; issuing the identity authentication information to the client, so that the client decrypts the identity authentication information based on a pre-stored device private key and then initiates the next time of clock-in information; wherein a platform private key and a platform public key are pre-stored in the management and control platform, a project certificate corresponding to the project is generated based on a current new project, a client side is determined according to the project certificate, and identity authentication information is issued to the client side. According to the method, the technical effect of improving the anti-counterfeiting capability and cross-device compatibility in an offline environment is achieved through the two-way security authentication based on dynamic certificate management between the management and control platform and the client.

The invention discloses an emergency rescue integrated data security protection method based on a block chain, and belongs to the technical field of data security protection, and the method comprises the following steps: constructing an end-side cloud cooperative trusted computing architecture, and establishing a trust chain transmission mechanism from a terminal to an edge node through a physical trusted root; a dynamic multi-dimensional credibility measurement model is adopted, the static credibility, the behavior credibility and the collaborative credibility of the equipment are comprehensively evaluated, and the real-time credibility of the equipment is generated in combination with environmental factors; implementing credibility verification based on the behavior measurement index; cross-domain data sharing auditing is realized by using a block chain smart contract, and the full-life-cycle security of data is ensured through a fragmented storage strategy and a self-destruction key design. According to the method, the problems of insufficient security authentication, dynamic trust evaluation and data cross-domain sharing auditing of the multi-source heterogeneous equipment in emergency rescue are solved.

The invention discloses a wireless authentication and privacy infrastructure (WAPI) seamless roaming optimization system and method for a mobile scene. Data collaboration and intelligent decision are realized through a three-layer structure of a mobile terminal, a WAPI access point and a switching control center. A mobile terminal collects a motion state and channel information in real time, a WAPI access point monitors a wireless condition in an area while meeting a WAPI security authentication requirement, a switching control center integrates data of all parties, a candidate access point utility value is dynamically calculated through a built-in strategy decision unit by adopting reinforcement learning, cognitive radio and robust control technologies, and the candidate access point utility value is calculated through a wireless network. Therefore, optimal roaming switching is realized. A pre-authentication and certificate caching mechanism is introduced into the system before switching, so that the authentication time delay is greatly reduced, and stable network connection and seamless transition during high-speed movement are ensured. According to the invention, the structure is simple, the adaptability is high, the WAPI security requirement is met, and the network roaming performance in a mobile scene is remarkably improved.

The invention relates to the technical field of intelligent vehicle keys, in particular to an intelligent vehicle key-oriented remote unlocking system and a secure communication method thereof, and the system comprises an intelligent terminal module, a vehicle control module, a cloud server module, a security authentication module, an encryption communication module and a state feedback module; a real-time state feedback mechanism allows a user to know the state of the vehicle door lock at any time, once an abnormal condition occurs, an alarm mechanism is triggered immediately, the user is notified through multiple channels, and it is ensured that the user can take actions rapidly to protect property safety of the user.

The invention discloses an automatic multi-source analysis and integrated processing system based on artificial intelligence, and belongs to the field of software automation. Comprising a multi-source input unit, a unified semantic modeling unit, an automatic analysis unit, an automatic preprocessing unit, an automatic collaborative execution unit and a security authentication mechanism, wherein the security authentication mechanism comprises primary security authentication and secondary security authentication. According to the invention, end-to-end automatic closed loop from demand understanding to autonomous analysis of the processing path to execution landing can be realized, and key appeals in a complex project business scene can be accurately responded.

The invention relates to an equipment remote control system and method based on computer network application, and relates to the technical field of computer networks, and the system comprises a remote control terminal, a remote control server, controlled equipment, a network communication module, a security authentication module, an equipment management module, an instruction analysis module and a data encryption module. According to the invention, security measures such as bidirectional identity verification and data encryption are adopted, illegal access and control are effectively prevented, and the security of data is ensured. Low-delay communication protocols such as an MQTT protocol are adopted, the real-time performance of a control instruction is guaranteed, and the method is particularly suitable for equipment control with the high requirement for the real-time performance. And multiple control protocols are supported, so that equipment of different manufacturers can be compatible, and the deployment cost is reduced. And a simple and easy user interface is provided, so that the user can quickly master, and the working efficiency is improved. And a modular design is adopted, so that new equipment types and functions can be conveniently expanded, and continuously increasing remote control requirements can be met.

The invention provides a zero-trust security authentication system and method for hospital heterogeneous equipment access, and belongs to the technical field of security authentication and virtualization. The method comprises the following steps: after the heterogeneous equipment passes identity authentication, establishing communication pre-connection, so that a hospital information system unidirectionally acquires an operating system type and application program data of the heterogeneous equipment; the method comprises the following steps: creating a virtual network partition on a data center server of a hospital information system based on an operating system type and application program data of heterogeneous equipment; after each virtual network partition is used for receiving application program data of the heterogeneous equipment, calling a security container mirror image to create a target container, wherein the security container mirror image corresponds to an operating system type of the heterogeneous equipment; sending environment authentication information to the heterogeneous device through the target container; and when the environment authentication information is passed, establishing data interaction connection between the heterogeneous equipment and the virtual network partition of the hospital information system, so that the heterogeneous equipment accesses the hospital information system through the target container.

The invention relates to a satellite communication encryption authentication method and system based on a dynamic key. According to the method, network topology is predicted based on satellite orbit parameters, time slices are divided to generate a dynamic key pool, a key is divided into sub-key segments, an encryption key segment set is constructed in a forward association encryption mode, and credible tracing of a key distribution path is realized in combination with pre-distribution path planning and a block chain hash verification mechanism. And the key is recombined through dynamic decryption, and a bidirectional authentication process is carried out. The problems of high key synchronization delay, easy leakage of the pre-distributed key and low verification efficiency in the high dynamic satellite network are solved, the real-time optimization of key distribution, single-point leakage risk isolation and lightweight security authentication are realized, and the forward security and anti-attack ability of a satellite communication link are significantly improved.

The invention discloses a development board Linux system security authentication multi-start method, which comprises the steps of 1, hardware trust root initialization and storage area division, 2, hardware trust root self-inspection and measurement, 3, starting item dynamic loading and multi-stage authentication, 4, security context establishment and system switching, and 5, multi-system isolation and collaboration. Step 6, performing security audit and exception handling; full-link authentication is realized by taking a hardware trust root as an anchor point, malicious mirror startup and inter-system data leakage are effectively resisted in combination with a storage and resource isolation mechanism, scenes such as on-demand dynamic switching, flexible adaptation debugging, upgrading and fault recovery of multiple systems can be realized, and the system reliability is improved by optimizing the lightweight design of an authentication algorithm and resource management. Limited computing power of the development board is adapted, the starting process and abnormal events can be completely recorded, and illegal operation can be traced conveniently.