254 results about "Security token" patented technology

A cloud management platform provides an identity and access management (IAM) service and a security token service (STS). The IAM service is used to confirm an enclave instance type input or selected by a first tenant and a conversion rule input or selected by the first tenant. The conversion rule is used to convert, into a tenant-customized attribute, an enclave instance attestation document provided by an enclave instance corresponding to the enclave instance type. The STS is used to receive a token obtaining request sent by an application program in the enclave instance.

A system to track to model asset states and access by utilizing non-fungible tokens (NFTs). The system includes a data processing system including memory and one or more processors to receive a stating request for an asset, obtain, based on a plurality of control structures, a plurality of NFTs, each of the plurality of NFTs including a link with a metadata object including metadata of a state of the asset, encapsulate the plurality of NFTs within a container, receive, from the remote device, a state request for an asset state corresponding to a first NFT, the state request including a security token, obtain, from the metadata of the first NFT, one or more recorded security tokens, compare the security token to the one or more security tokens, and, in response to the security token matching the one or more security tokens, transmit the first NFT to the remote device.

Embodiments are described herein for document authentication certification using information stored on a distributed ledger such as a blockchain. A distributed ledger may securely store document data describing the document. Use of a distributed ledger may provide an immutable, readily auditable record of the history of the document. Each user participating in the system may be assigned a unique identifier to be used for conducting transactions on the distributed ledger network. A user may also be provided with a digital security token such as a cryptographic key that is useable to authenticate the user and enable access to the document data stored on the distributed ledger(s).

A method executed by a computing entity includes identifying, using a securely passing process and based on at least one of a public benefit project type and a public benefit project geographic location of selection criteria for a set of public benefit credit assets, a secure first token on an object distributed ledger representing the set of public benefit credit assets. The method further includes establishing, using the securely passing process, control over the secure first token representing the set of public benefit credit assets, where only a device possessing control over the secure first token may modify the secure first token.

Example methods and systems for flow-based secure packet forwarding are described. In one example, a first computer system may assess validity of a security token associated with a flow of one or more packets. In response to determination that the security token is valid, a security association associated with the flow and the security token may be negotiated with a second computer system. The first computer system may process a packet associated with the flow and the security token to generate an encapsulated encrypted packet by performing encryption and encapsulation based on the security association. The encapsulated encrypted packet may be forwarded towards the second computer system to cause the second computer system to perform decapsulation and decryption, and to forward a decapsulated and decrypted packet towards the destination.

A method executed by a computing entity includes obtaining a transaction token representing a first pending transaction associated with a transaction item and establishing a set of required public benefit asset information for subsequent acquisition of a set of public benefit credit assets based on the first pending transaction. The method further includes identifying, using a securely passing process, a secure first token on an object distributed ledger representing the set of public benefit credit assets based on the set of required public benefit asset information. The method further includes establishing, in accordance with the securely passing process, control over the secure first token representing the set of public benefit credit assets to produce an updated secure first token, where only a device possessing control over the secure first token may modify the secure first token.

The invention discloses a data privacy protection method and system based on a zero trust principle, and particularly relates to the field of data privacy protection.The method comprises the steps that identity information and biological characteristics are provided when a user registers, and a security token is obtained; during login, the system verifies identity information and inquires role permission to ensure access compliance; a quantum encryption algorithm is adopted for data transmission, and the data security is ensured through quantum state selection, quantum channel transmission and error rate detection; the system continuously monitors user behaviors, equipment states and environment information, dynamically adjusts access authority, divides risk levels based on a risk assessment result and takes corresponding measures; sensitive data are processed through a desensitization technology and an anonymization algorithm, and privacy is protected; and the system collects operation logs and data access logs, analyzes and excavates the logs by using an audit analyzer, identifies abnormal behaviors and generates early warning information.

A system to track to model asset states and access by utilizing non-fungible tokens (NFTs). The system includes a data processing system including memory and one or more processors to receive a stating request for an asset, obtain, based on a plurality of control structures, a plurality of NFTs, each of the plurality of NFTs including a link with a metadata object including metadata of a state of the asset, encapsulate the plurality of NFTs within a container, receive, from the remote device, a state request for an asset state corresponding to a first NFT, the state request including a security token, obtain, from the metadata of the first NFT, one or more recorded security tokens, compare the security token to the one or more security tokens, and, in response to the security token matching the one or more security tokens, transmit the first NFT to the remote device.

An encrypted message comprising a DNS request may be received from a client device. The DNS request may be decrypted to determine an IP address and a port associated with the client device. A security token may be determined based on the IP address and the port. A message comprising an indication of the DNS request and the security token may be sent to a DNS server. A reply comprising a payload and the security token may be received from the DNS server. Based on the security token, an indication of the payload of the reply may be sent to the client device.

The invention provides an AI semantic model and robot interconnection method and system based on an MCP protocol and a medium. A natural language instruction is received, and a structured operation sequence is generated through a semantic analysis model; extracting a semantic tag dynamic matching service engine in the sequence, and generating an operation request containing a tool identifier and a parameter template; if the operation authority is verified based on the verification security token, triggering secondary authorization of the user, and if the authority is passed, packaging the operation request into a security instruction according to an encryption rule; a transmission protocol channel is dynamically selected based on the real-time flag bit, an executable instruction stream is generated, and therefore the target tool is driven to execute operation and feed back execution state data; according to the method, the problem of AI and robot instruction heterogeneity is solved through dynamic matching of semantics and robot tools, the unauthorized operation is intercepted based on authority verification, data security is guaranteed through field-level encryption, and a safe and efficient man-machine interaction framework is provided for intelligent manufacturing.

An API gateway receives, from an application, a callback-related request and a registration token including a callback URL usable by an API server to call the callback server and security data for the callback URL. If that token's signature is valid: the callback URL, the security data for the callback URL, and an identifier identifying the API and callback servers are stored; a replacement URL is generated using the identifier; and the replacement URL is registered with the API server. When the API server emits an event regarding a registered request: the security data is retrieved for the associated request; a secure token is generated using that data and event-related content; the callback URL is retrieved for the associated request; and the retrieved callback URL, the secure token, and event-related content are sent to the callback server. The callback server determines whether event-related content is trustworthy using the secure token.

A method of transaction authorization includes receiving, by a payment gateway of a payment platform and from a business support system (BSS), an authorization request for a transaction and a security token corresponding to credential information, determining, by the payment gateway, whether an authorization for the transaction is required, and, based on determining that an authorization for the transaction is not required, generating, by the payment gateway, a capture request for retrieving funds for the transaction, sending, by the payment gateway, the capture request to a card issuer corresponding to the credential information, and transferring, by the payment gateway, the funds for the transaction to an operator of the payment gateway.

The invention relates to the technical field of data sharing, and discloses a supervisible data security sharing method and equipment based on a three-chain architecture, and the method comprises the steps that a user submits a data sharing strategy to a strategy contract, the contract generates a strategy verification key and returns the strategy verification key, and the user creates a temporary symmetric key and a data identifier; packaging into a security token and encrypting by using a supervision chain public key to finish strategy registration and key initialization; and the user transmits the encrypted security token to the storage chain through the relay chain, the relay chain verifies the identity of the user and then forwards the token, and the storage chain verifies that the contract decrypts the token by using the private key of the supervision chain. Through a three-chain architecture, zero-knowledge proof and an anti-quantum evidence storage mechanism, data operation compliance can be verified through a non-tampering operation evidence storage chain, the risk of sensitive information leakage caused by opening of supervision authority is reduced, the defect that encrypted data is difficult to audit is overcome, a cross-chain security token fusing mechanism is utilized to resist communication threats, and the safety of the system is improved. And privacy protection and supervision compliance are dynamically balanced.

Implementations are described herein for detecting deepfakes in digital media while preserving the privacy of the source computing device. In various implementations, sensor fingerprints and / or security tokens that signal software-introduced alterations, e.g., introduced by hardware abstraction layers (HALs) or virtual machines (VMs) may be utilized to detect such deepfakes. These signals may be used, separately and / or in combination, for various purposes, such as flagging digital content to a user as being a deepfake, preventing or blocking receipt and / or playback of digital content deemed to be a deepfake, allowing an end user to disable aspect(s) (e.g., layers) of digital content that are determined to be synthetic, etc.

A system establishes a secure connection between a first entity and a second entity upon validating a digital signature of a digital certificate. The digital signature is validated utilizing a trust anchor public key corresponding to a security token issued by a trust anchor that is trusted by the first entity and the second entity. In response to a request to establish the secure connection, the system validates the security token issued by the trust anchor to establish trust between the first entity and the second entity. Upon validating the security token, the system validates the digital signature of the digital certificate utilizing an entity public key embedded in the security token. Based on the trust established by the security token, the digital certificate is trusted upon validating the digital signature. Upon validating the digital signature, the system establishes the secure connection between the first entity and the second entity.

A secure beverage container may include a body having a first end, a second end opposing the first end, a first longitudinal side extending between the first end and the second end, and a second longitudinal side opposing the first longitudinal side and extending between the first end and the second end, the first end being closed, the second end being open. The body may define a cavity to receive a beverage fluid. The secure beverage container may include a lid to be received by the second end to seal the cavity in the body, and a powered locking device. The secure beverage container may include an access control device coupled to the powered locking device and configured to cause the powered locking device to switch between the locked state and the unlocked state based upon a security token.

An API gateway receives, from an application, a callback-related request and a registration token including a callback URL usable by an API server to call the callback server and security data for the callback URL. If that token's signature is valid: the callback URL, the security data for the callback URL, and an identifier identifying the API and callback servers are stored; a replacement URL is generated using the identifier; and the replacement URL is registered with the API server. When the API server emits an event regarding a registered request: the security data is retrieved for the associated request; a secure token is generated using that data and event-related content; the callback URL is retrieved for the associated request; and the retrieved callback URL, the secure token, and event-related content are sent to the callback server. The callback server determines whether event-related content is trustworthy using the secure token.

The invention discloses a fine-grained data security access control method and device and a storage medium, and the method comprises the steps: obtaining terminal information which comprises hardware fingerprint information and a digital certificate; performing terminal information verification processing according to the hardware fingerprint information and the digital certificate to generate a security token; performing user information verification processing according to the security token and the user access request to generate an access request result; according to the access request result, access channel authorization processing is carried out, and a target data access channel state is generated; performing data access record processing according to the target data access channel state to generate a target operation ticket; performing storage and audit processing according to the target operation order to generate an audit report; and performing data clearing processing according to the audit report to generate a visual report. According to the invention, data security access control is realized, and security and adaptability are improved. The method can be widely applied to the technical field of data security access.

There are proposed methods, devices, and computer program products for safety management. In the method, in response to receiving a first query to a machine learning model, a first response to the first query is obtained by the machine learning model, the first query being represented in a natural language, and the machine learning model being a language model. A second query is determined based on the first query, the first response and a safety token, the safety token triggering a safety check on the second query. A second response to the second query is obtained by the machine learning model based a check result of the safety check.

A computing system includes a baseboard management controller (“BMC”) that receives a security token from a management system. The computing system also executes a firmware that collects measurements from components of the computing system. The measurements include data describing the components for use in attestation. The firmware provides the measurements to the BMC, which generates a digital signature of the measurements and the security token. The BMC provides the measurements and the digital signature to the management system, which attempts to verify the digital signature utilizing a public key associated with the BMC. If the management system can verify the digital signature, then the BMC utilized the correct security key to generate the digital signature and the measurements were not tampered with after collection by the firmware. The measurements can then be utilized to attest the computing system.

Trusted customer identity systems and methods provide secure electronic payment transactions incorporating customer identity verification using cross-referenced multiple data sources. Two distinct authorities provide payment speed, simplicity, and security. A network path-based identity methodology does not require shared information between parties. A first party receives a secure token and has sole access and controls possession of unique data that they append to the token. Before a transaction, a unique identifying characteristic of the party is used to register it on the trusted customer network. Other parties on the network do not possess a copy of the unique data but, based on the registration characteristics of the first party, know when they receive the token that only the first party could have added the unique data to the token. Other parties on the network can trust that the first party is the same party who registered this account to the network.

The invention discloses a data security management system and method based on report generation, and relates to the related technical field of data processing, and the method comprises the steps: obtaining a plurality of report data sets corresponding to a plurality of users; and performing security encryption processing on the plurality of report data sets through the plurality of encryption blocks, and outputting a plurality of encrypted report data sets. And carrying out correlation analysis on the plurality of report data sets, and outputting correlation indexes. Based on the relevance index, a temporary security token is generated, and the temporary security token is used for authorizing the current user to access the report data set with the relevance index larger than a preset relevance index. And obtaining a shared report template, and when the plurality of report data sets are input into the shared report template, performing association decryption access management on the shared report template by the current user according to the temporary security token. The technical problem that in the prior art, a security management system is difficult to carry out efficient encryption and security management on report data in a multi-user environment is solved.

The disclosure relates to a fifth generation (5G) communication system or a sixth generation (6G) communication system for supporting higher data rates beyond a fourth generation (4G) communication system such as long term evolution (LTE). The disclosure provides techniques for performing client credential assertion based authentication and authorization in a wireless communication system. A method performed by a network entity for performing client credential assertion (CCA) based authentication and authorization of the network entity is provided. The method includes sending, by the network entity to a network repository function (NRF), a first service request, wherein the sending of the first service request includes encrypting, by the network entity, a CCA token using a key encapsulation mechanism (KEM), wherein the KEM is based on a predefined post quantum cryptography (PQC) mechanism, signing, by the network entity, the encrypted CCA token using a digital signature to generate a quantum secure CCA token, wherein the quantum secure CCA token is a digitally signed encrypted CCA token and the digital signature is based on the predefined PQC mechanism, and sending, by the network entity to the NRF, the quantum secure CCA token with the first service request, and receiving, by the network entity from the NRF, a service response to the first service request.

Systems and methods for providing one or more secure services are disclosed. One method can comprise authenticating and / or authorizing a user device to receive a security token. A request for information can be processed using the security token to facilitate the secure provision of services to the user device.

Disclosed are example methods, systems, and devices for allowing caller computing devices to authenticate calls via a service provider computing system. Users may opt to have entities register to contact the user with a positive ID, icon, or other notification on the user's computing device transmitted by the service provider computing system. A caller computing device may use a unique security token of the user to activate the notification on the user's device. The user device may be used to exert control over the security token via a service provider client application running on the user device. The caller computing device may initiate authentication via an API call to the service provider computing system. The caller computing device is able to have items (text, images, documents, etc.) delivered to the user computing device if authenticated.

Leveraging secure tokenization, such as a Non-Fungible Token (NFT), for purposes of multifactor and / or elevated user authentication. In this regard, an authentication NFT is generated based at least on a user's authentication credentials. Subsequently, the authentication NFT is verified / validated via a private distributed trust computing network and stored, in a deactivated state, on a distributed ledger. Once the user is confronted with an elevated and / or multifactored authentication process, the user may initiates use of the authentication NFT by checking-out the authentication NFT from the distributed ledger and moving the authentication NFT from the deactivated state to an activated state, in which the user credentials are accessible to the user for purposes of authentication.

Technologies are provided for preventing unauthorized requests using request identifiers associated with security tokens. A request can be received by a computing device that contains a request identifier and one or more security tokens. The computing device can determine whether the request identifier contained in the request is associated with all of the one or more security tokens contained in the request. If the request identifier is not associated with one or more of the security tokens, then the computing device can reject the request. If the request identifier is associated with the one or more security tokens, then the computing device can generate another request that includes one or more protected data items that are associated with the one or more security tokens. The computing device can then transmit the another request containing the one or more protected data items to another computing device for processing.

A system is provided for authenticating peer-to-peer resource exchanges using non-fungible tokens. In particular, the system may store, on a distributed register, a secure token (e.g., a non-fungible token) associated with a particular resource. Subsequently, a user who may be the owner of such resource and / or the associated token may wish to execute a peer-to-peer exchange of the resource for a second resource. The system may, in response to receiving the second resource from a second user, initiate a process to transfer ownership of the secure token to the second user. In this way, the system provides an efficient and secure way to conduct peer-to-peer resource exchanges.

The present disclosure relates to an exchange operating system where security tokens are issued and traded, and more specifically, to an exchange operating system where security tokens are issued and traded, in which when security tokens are issued based on stocks in a corporation by splitting into the security tokens, the amount of one security token may be set relatively low compared to one share of stock, thereby naturally encouraging active trading of security tokens through small investors to create an investment environment where small investors can actively invest in companies of their choice, as well as allowing companies to secure investment funds very easily through active trading of security tokens so as to lead to stable operation of companies.

The invention relates to a method for executing an electronic financial transaction by a user as an occupant of a vehicle (1), wherein the user uses a physical electronically readable identity card (3) or a virtual electronically readable identity card (3) displayed in a mobile device to identify and authenticate themselves to a reader (5) of the vehicle (1), wherein no identification of the vehicle takes place, wherein the reader (5) connects to a central computer (7) via the Internet and receives a security token from it after successful identification and authentication, which is transmitted together with payment data to a payment service provider (9), which then authorizes a financial transaction with reference to the payment data and / or forwards data about it.