105 results about "Security token" patented technology

Example methods and systems for flow-based secure packet forwarding are described. In one example, a first computer system may assess validity of a security token associated with a flow of one or more packets. In response to determination that the security token is valid, a security association associated with the flow and the security token may be negotiated with a second computer system. The first computer system may process a packet associated with the flow and the security token to generate an encapsulated encrypted packet by performing encryption and encapsulation based on the security association. The encapsulated encrypted packet may be forwarded towards the second computer system to cause the second computer system to perform decapsulation and decryption, and to forward a decapsulated and decrypted packet towards the destination.

The invention provides an AI semantic model and robot interconnection method and system based on an MCP protocol and a medium. A natural language instruction is received, and a structured operation sequence is generated through a semantic analysis model; extracting a semantic tag dynamic matching service engine in the sequence, and generating an operation request containing a tool identifier and a parameter template; if the operation authority is verified based on the verification security token, triggering secondary authorization of the user, and if the authority is passed, packaging the operation request into a security instruction according to an encryption rule; a transmission protocol channel is dynamically selected based on the real-time flag bit, an executable instruction stream is generated, and therefore the target tool is driven to execute operation and feed back execution state data; according to the method, the problem of AI and robot instruction heterogeneity is solved through dynamic matching of semantics and robot tools, the unauthorized operation is intercepted based on authority verification, data security is guaranteed through field-level encryption, and a safe and efficient man-machine interaction framework is provided for intelligent manufacturing.

The invention relates to the technical field of data sharing, and discloses a supervisible data security sharing method and equipment based on a three-chain architecture, and the method comprises the steps that a user submits a data sharing strategy to a strategy contract, the contract generates a strategy verification key and returns the strategy verification key, and the user creates a temporary symmetric key and a data identifier; packaging into a security token and encrypting by using a supervision chain public key to finish strategy registration and key initialization; and the user transmits the encrypted security token to the storage chain through the relay chain, the relay chain verifies the identity of the user and then forwards the token, and the storage chain verifies that the contract decrypts the token by using the private key of the supervision chain. Through a three-chain architecture, zero-knowledge proof and an anti-quantum evidence storage mechanism, data operation compliance can be verified through a non-tampering operation evidence storage chain, the risk of sensitive information leakage caused by opening of supervision authority is reduced, the defect that encrypted data is difficult to audit is overcome, a cross-chain security token fusing mechanism is utilized to resist communication threats, and the safety of the system is improved. And privacy protection and supervision compliance are dynamically balanced.

Implementations are described herein for detecting deepfakes in digital media while preserving the privacy of the source computing device. In various implementations, sensor fingerprints and / or security tokens that signal software-introduced alterations, e.g., introduced by hardware abstraction layers (HALs) or virtual machines (VMs) may be utilized to detect such deepfakes. These signals may be used, separately and / or in combination, for various purposes, such as flagging digital content to a user as being a deepfake, preventing or blocking receipt and / or playback of digital content deemed to be a deepfake, allowing an end user to disable aspect(s) (e.g., layers) of digital content that are determined to be synthetic, etc.

A system establishes a secure connection between a first entity and a second entity upon validating a digital signature of a digital certificate. The digital signature is validated utilizing a trust anchor public key corresponding to a security token issued by a trust anchor that is trusted by the first entity and the second entity. In response to a request to establish the secure connection, the system validates the security token issued by the trust anchor to establish trust between the first entity and the second entity. Upon validating the security token, the system validates the digital signature of the digital certificate utilizing an entity public key embedded in the security token. Based on the trust established by the security token, the digital certificate is trusted upon validating the digital signature. Upon validating the digital signature, the system establishes the secure connection between the first entity and the second entity.

There are proposed methods, devices, and computer program products for safety management. In the method, in response to receiving a first query to a machine learning model, a first response to the first query is obtained by the machine learning model, the first query being represented in a natural language, and the machine learning model being a language model. A second query is determined based on the first query, the first response and a safety token, the safety token triggering a safety check on the second query. A second response to the second query is obtained by the machine learning model based a check result of the safety check.

Trusted customer identity systems and methods provide secure electronic payment transactions incorporating customer identity verification using cross-referenced multiple data sources. Two distinct authorities provide payment speed, simplicity, and security. A network path-based identity methodology does not require shared information between parties. A first party receives a secure token and has sole access and controls possession of unique data that they append to the token. Before a transaction, a unique identifying characteristic of the party is used to register it on the trusted customer network. Other parties on the network do not possess a copy of the unique data but, based on the registration characteristics of the first party, know when they receive the token that only the first party could have added the unique data to the token. Other parties on the network can trust that the first party is the same party who registered this account to the network.

Disclosed are example methods, systems, and devices for allowing caller computing devices to authenticate calls via a service provider computing system. Users may opt to have entities register to contact the user with a positive ID, icon, or other notification on the user's computing device transmitted by the service provider computing system. A caller computing device may use a unique security token of the user to activate the notification on the user's device. The user device may be used to exert control over the security token via a service provider client application running on the user device. The caller computing device may initiate authentication via an API call to the service provider computing system. The caller computing device is able to have items (text, images, documents, etc.) delivered to the user computing device if authenticated.

The invention relates to a method for executing an electronic financial transaction by a user as an occupant of a vehicle (1), wherein the user uses a physical electronically readable identity card (3) or a virtual electronically readable identity card (3) displayed in a mobile device to identify and authenticate themselves to a reader (5) of the vehicle (1), wherein no identification of the vehicle takes place, wherein the reader (5) connects to a central computer (7) via the Internet and receives a security token from it after successful identification and authentication, which is transmitted together with payment data to a payment service provider (9), which then authorizes a financial transaction with reference to the payment data and / or forwards data about it.

The invention discloses an identity authentication method of a token based on quantum security. The method comprises the following steps: a client executes an initialization operation; the client establishes a session link with the server, the server generates a first token and issues the first token to the client, and the server and the client locally store the first token respectively; when the session link exists, the client negotiates with the authentication server, generates a second token based on the first token, generates a service resource request based on the second token, and initiates the service resource request to the server; the authentication server and the server respectively execute identity authentication operation for the service resource request; and the server responds to the current service resource request of the client based on a result of passing the identity authentication operation. According to the invention, through the dynamic token, the hierarchical key, the pre-negotiation parameter and the quantum encryption technology, an anti-cracking, anti-attack and high-efficiency multi-level security authentication system is constructed.

The invention relates to the technical field of federated learning and privacy protection, and discloses a federated learning privacy protection method for dynamic search hybrid encryption and contribution value perception, which mainly comprises the following steps of: constructing a privacy protection scheme of a local evaluation and hybrid encryption mechanism combined with contribution degree perception to realize differentiated privacy protection of client privacy data; the calculation time overhead and the communication overhead based on a single homomorphic encryption privacy mechanism are effectively reduced; a central storage server access control and dynamic key rotation mechanism driven by a security token is constructed, and key non-replay and historical data non-revealing are realized by combining a searchable relevance trap door index stored by a ciphertext; according to the method, on the basis of a security aggregation algorithm of contribution perception, the contribution value of each local model in a ciphertext state is evaluated by a joint secrecy calculation protocol, aggregation screening of a global model under the condition that the contribution value plaintext is not revealed is ensured, power dispersion of a central storage server is completed, and the overall efficiency and privacy of the system are remarkably improved.

Secure token exchange for automated systems includes receiving, for validation, an application programming interface (API) token grant request, including an API key, sent by an automated system, and retrieving, from a database, an API key entity corresponding to the API key, wherein the API key entity includes a token receive endpoint. An authentication token is generated. The authentication token is asynchronously pushed to the token receive endpoint for access by the automated system.

The invention relates to the technical field of USB key on-line checking, in particular to a USB key on-line checking method and system combining artificial intelligence and the Internet of Things. Establishing a USB key dynamic authority management model, and defining an authority level; performing abnormal behavior analysis according to the permission level, and judging a user risk level; and according to an abnormal behavior analysis result, performing a U shield intelligent response mechanism. Through artificial intelligence, the Internet of Things and a big data analysis technology, intelligent checking and safety management of the USB key are realized, and the system has dynamic authority management, efficient anomaly detection, accurate response mechanism and adaptive adjustment capability, and is widely applied to the fields of finance, government affairs, enterprise information safety and the like.

Disclosed are example methods, systems, and devices that allow for secure data processing using data packages generated by edge devices. The techniques include generating a biometric signature using information captured by a computing device, and encrypting user data obtained via the computing device using the biometric signature and a device identifier of the computing device. A security token can be generated and utilized by the computing device to generate a data package, which is configured such that any change to the data package would cause a validation process of the data package using the security token to fail. The data package can be encrypted using various digital keys and provided to secondary computing systems.

Service ID card for analog and digital authentication, characterized in that the service ID card (1) can be attached to a piece of clothing by means of fastening means and has a receptacle (2) for a USB security token, wherein the USB security token is removable and replaceable.

Methods, systems, and computer program products provide direct and in-network provisioning of tokens. A secure token exchange (STE) processor receives a direct token request from a token requestor prior to sending a payment transaction message or request for payment message. In-network token provisioning is performed during a transaction and also involves the STE processor. Data aggregation security is provided by verifying consumer information, tokenizing account data, and forwarding a token and consumer data to a data aggregator.

Methods, systems, and computer program products provide direct and in-network provisioning of tokens. A secure token exchange (STE) processor receives a direct token request from a token requestor prior to sending a payment transaction message or request for payment message. In-network token provisioning is performed during a transaction and also involves the STE processor. Data aggregation security is provided by verifying consumer information, tokenizing account data, and forwarding a token and consumer data to a data aggregator.

A method, by an intelligent access control system, of implementing access control to a controlled area having a plurality access areas divided by at least one access point includes the following operations. A security token is generated. The security token is transmitted to a client module executing on a client device associated with a first user, and the client module is caused to pair with an access control device associated with the first user. The client module is caused to transfer the security token to the access control device. A physical location of the client device within the controlled area is monitored. A determination is made, by an access control system and based upon the physical location, that the first user is to be revalidated. The client module causes, based upon the determining, the client device to generate an alert.

The present disclosure relates to a 5th-Generation (5G) communication system or a 6th-Generation (6G) communication system for supporting higher data rates beyond a 4th-Generation (4G) communication system such as Long Term Evolution (LTE). The present disclosure provides techniques for performing authentication and authorization based on client credential assertion in a wireless communication system. A method performed by a network entity for performing client credential assertion (CCA)-based authentication and authorization of the network entity is provided. In one embodiment, a method includes sending, by a network entity, a first service request to a network repository function (NRF), where sending of the first service request includes encrypting, by the network entity, a CCA token using a Key Encapsulation Mechanism (KEM), where the KEM is based on a predefined post-quantum cryptography (PQC) mechanism, where the KEM is based on the PQC mechanism. The encrypted CCA token is signed by the network entity using a digital signature to generate a quantum-secure CCA token, where the quantum-secure CCA token is a digitally signed encrypted CCA token and the digital signature is based on a predefined PQC mechanism, and sending, by the network entity, the quantum-secure CCA token to the NRF along with the first service request, where the quantum-secure CCA token is the digitally signed encrypted CCA token and the digital signature is based on a predefined PQC mechanism. And receiving, by the network entity, a service response to the first service request from the NRF.

Methods and systems disclosed herein describe tokenizing data to generate a secure token that is limited in scope (e.g., directed to a specific recipient) and limited in time (e.g., valid for only a specified period of time). A detokenization process may be employed to recover encrypted data of the secure token without the need for any relational database lookup processes, thereby reducing cost while maintaining robust protection against unintended recipients that attempt to recover the encrypted data.

Some embodiments provide or utilize technology which increases the security of network authentication operations, such as Kerberos operations, New Technology LAN Manager operations, or other network authentication operations which utilize security tickets or security tokens or both. In some embodiments, a user machine (also known as a client machine) receives an authentication data structure (ADS) which includes one or more security tickets or security tokens or both. Embodiments constrain the ADS according to at least one security requirement, such as a volatile-memory-only constraint, a secured-memory-only constraint, or a multilayer encryption constraint. Embodiments also transmit the ADS from the machine as a part of performing the network authentication service. Some embodiments inhibit virtual memory, or memory dumping, or both. Some embodiments bind the ADS to the user machine, and some embodiments limit ADS usage counts.

Disclosed are a method, device, and recording medium for determining a collateral ratio for liquidity risk management of a security token offering (STO) investment product. The method of determining a collateral ratio for liquidity risk management of STO investment product according to various embodiments of the present disclosure includes collecting data related to an STO investment product; determining an asset liquidity risk of the investment product based on the collected data; and determining the collateral ratio for the investment product based on the determined asset liquidity risk.

Secure token exchange for automated systems includes receiving, for validation, an application programming interface (API) token grant request, including an API key, sent by an automated system, and retrieving, from a database, an API key entity corresponding to the API key, wherein the API key entity includes a token receive endpoint. An authentication token is generated. The authentication token is asynchronously pushed to the token receive endpoint for access by the automated system.

Techniques for sharing query results in a multi-tenant database system are described. The query results can be shared between users of the same account or organization in the multi-tenant network-based database system using security tokens. A first user executes a query, and the results are stored in the network-based database system. The first user can invoke a function to create a security token to provide access to the stored query results to other users in the same account. The first user can share the security token with the other users, who can directly access the stored results in the network-based database system instead of having to download local copies of the query results.

A system and method for performing a transaction at a software-based POS system of a merchant includes receiving, from the software-based POS system, a payment authorization request message. A processor is programmed to extract a dynamic hashed security token from the payment authorization request message. In addition, the processor is programmed to validate the dynamic hashed security token and, upon validating the dynamic hashed security token, determine that the software-based POS system that transmitted the payment authorization request message is running a mobile POS software application. Furthermore, the processor is programed to extract the hardware identifier and the application identifier from the transaction data and compare them to account registration information stored with a merchant account. The processor then determines that the hardware identifier and the application identifier match with the account registration information and transmits the payment authorization request message to an issuer associated with the transaction card details.

A cloud management platform provides an identity and access management (IAM) service and a security token service (STS). The IAM service is used to confirm an enclave instance type input or selected by a first tenant and a conversion rule input or selected by the first tenant. The conversion rule is used to convert, into a tenant-customized attribute, an enclave instance attestation document provided by an enclave instance corresponding to the enclave instance type. The STS is used to receive a token obtaining request sent by an application program in the enclave instance.

The present disclosure provides systems and methods for authentication control of content delivery. The method includes receiving a request for a content item from a computing device, the request including a security token associated with the computing device and an identifier of a domain group, identifying the domain group from the identifier, and retrieving a security key associated with the domain group. The method also includes decrypting a signature of the security token, identifying an authentication string, determining that the authentication string matches a server authentication string, and identifying a characteristic of the security token. The characteristic of the security token includes a confidence score. The method further includes comparing the confidence score of the security token to a threshold, determining that the confidence score does not exceed the threshold, and preventing the content from being sent to the computing device.

According to an embodiment of the present invention, an authentication method for enhancing security of user personal information, which is required for accessing a service server, by using an authentication server and an authentication application installed in a user terminal to access the authentication server comprises the steps in which: the authentication application receives personal information from a user and stores same; the authentication application displays a list of accessible service servers; the authentication application receives, from the user, a selection of a service server desired to be accessed from among the list of service servers; the authentication application primarily encrypts the stored personal information by using a public key of the selected service server and secondarily encrypts the primarily encrypted personal information by using a public key of the authentication server; the authentication application transmits the secondarily encrypted personal information to the authentication server; the authentication server generates a login code corresponding to the secondarily encrypted personal information received from the authentication application; and the authentication server transmits the login code to the authentication application, wherein the list of accessible service servers is configured to be predetermined by the authentication server.

A system and method in which a user application on a mobile device facilitates hands-free fare validation and gateless entry / exit at a transit facility like a transit station or a transit vehicle. The user application communicates with a Bluetooth gateway to authenticate the device and provides device-specific information for device identification and location determination. The user application also sends a secure token to the gateway to validate an electronic ticket stored in the device. A positioning unit uses the device-specific information to generate a timestamped location data for the device. A camera monitors the device user's movement and generates another timestamped location data for the device. A controller driver compares two timestamped location data to determine that the user of the device is approaching a gateless entry point and allows the user to avail a transit service through the gateless entry point when the electronic ticket is valid and active.