34 results about "Source authentication" patented technology

Provided are a privacy-protection-based physical resource authentication method and apparatus. A target circuit logic is deployed in a first device involved in the method, and same comprises a calculation circuit portion and a generation algorithm portion. The method comprises: a first device generating, by using a first private key thereof, a first commitment for original resource data of a physical resource held by the first device; then at least inputting the original resource data and the first commitment into target circuit logic, verifying the first commitment by means of a calculation circuit portion, calculating conclusion data corresponding to the original resource data, and generating, by means of a generation algorithm portion, a zero-knowledge proof regarding the calculation correctness of the calculation circuit portion, so as to obtain first proof data, wherein the conclusion data indicates the health state of the physical resource and is used for resource value evaluation; and the first device then correspondingly storing the first commitment and the first proof data in a second device for the second device to verify the zero-knowledge proof.

The invention provides a watermark-based model security distribution and authentication method and system, and relates to the technical field of data processing, and the method comprises the steps: distributing a watermark-containing model which is verified to be qualified to a requester authorization device through an encryption channel, the watermark generation parameters, the distribution context information and the timestamps are used as evidence storage data to be written into a secure evidence storage library; running the distributed watermark-containing model on authorized equipment, and obtaining a watermark bearing signal from output data of the model in a model running process; the watermark bearing signal is analyzed, watermark information is extracted, and an original feature vector is recovered through an inverse mapping algorithm; similarity matching and legality verification are carried out on the recovered feature vectors and records of the security evidence storage library, and model source authentication, use permission control and accurate source tracing of infringement behaviors are achieved according to verification results. According to the invention, the comprehensiveness and accuracy of anomaly detection are improved.

The application discloses a cloud transmission method for MRI image information and belongs to the technical field of nuclear magnetic image transmission. The cloud transmission method for MRI image information comprises the following steps: step 1, a terminal device generates original information to be sent, and converts the original information into encrypted information; step 2, the terminal device sends the encrypted information and domain name information of the terminal device to a cloud server; and the encrypted information is downloaded from the cloud server, and then the encrypted information is decrypted into the original information by using a decryption key. According to the scheme, a safe and efficient transmission framework is constructed for sensitive MRI image data shared across institutions through encrypted transmission, source authentication and hierarchical key mechanism; and the original data is transmitted after being encrypted, so that information leakage in the transmission process is effectively prevented.

The application provides a satellite communication authentication integrated method and device, which comprises the following steps: obtaining a data frame signal of a satellite to be authenticated, inputting the data frame signal into a trained neural network model to form a 3D sample, and calculating the distance between the output feature vector and the feature vector of each legal satellite; determining the launch source authentication identity of the satellite to be authenticated by using the distance; comparing the launch source authentication identity with the launch source identity carried by the signal of the satellite to be authenticated, and if the two are consistent, determining that the satellite to be authenticated is authenticated successfully, which can not only accurately identify and authenticate the identity of the legal satellite signal launch source, but also identify the signal launched by an illegal device. Then, the data frame signal is transmitted to an upper computer for further processing. The application can realize authentication of the satellite signal from two dimensions of time and space, simplifies the authentication process, guarantees the reliability of satellite communication, effectively improves the accuracy of satellite signal launch source identity authentication, and reduces the authentication delay.

The application provides a kind of organic tea traceability authentication method and system based on block chain, by constructing the hybrid chain architecture of organic tea traceability authentication, the data fingerprint of organic tea traceability data is generated on the permission chain of hybrid chain architecture, and the data fingerprint is anchored to the non-permission chain of the hybrid chain architecture, forming the cross-chain data protection mechanism from the permission chain to the non-permission chain;Based on the hybrid chain architecture, the organic tea traceability data is converted into a verifiable on-chain traceability digital certificate, and the digital autonomous sovereign identity of each participating user is created;When initiating the query request of organic tea traceability data, the query request is accessed into the hybrid chain architecture through the digital autonomous sovereign identity, and the organic tea traceability data corresponding to the query request is authenticated based on the on-chain traceability digital certificate and the cross-chain data protection mechanism. Using the scheme of the application, the organic tea traceability can be cooperatively authenticated based on cross-chain data intercommunication.

This invention discloses a method and system for the trusted circulation of data assets based on dynamic evaluation using smart contracts. It relates to the field of data asset circulation security technology, and includes: extracting the type, sensitivity, and source authentication level of data assets; calculating a comprehensive risk score based on a security risk assessment model and dynamically classifying security levels; matching smart contract templates according to the levels, setting circulation permissions, and binding asset fingerprints to contract addresses; performing identity authentication and dynamic reputation management on blockchain nodes, and adjusting access permissions in real time; upon receiving a circulation request, performing on-chain dynamic verification based on node qualifications, asset status, and intended use; calculating a compliance score to determine circulation permission; calling the smart contract to execute the circulation operation and generating an on-chain circulation trajectory; and simultaneously monitoring the circulation security status in real time. This invention achieves significantly better results in terms of security, flexibility, and trustworthiness.

The invention provides a source authentication method and device, computer equipment and a storage medium, and relates to the technical field of communication, the method is applied to a protection system deployed in front of a target server, and the method comprises the following steps: receiving a request message or a response message sent to the target server; respectively responding to the corresponding messages according to the types of the received messages; and judging whether a response message of the responded message can be received or not, if the response message cannot be received, not passing the source authentication, and identifying the flow from the source as the abnormal attack flow. According to the technical scheme provided by the invention, the protection system is used as the message sent by an intermediary response source, and the abnormal attack traffic can be identified, so that the DDoS attack can be comprehensively and accurately detected.

The invention provides an organic tea traceability authentication method and system based on a block chain, and the method comprises the steps: constructing a mixed chain architecture of organic tea traceability authentication, generating a data fingerprint of organic tea traceability data on a permission chain of the mixed chain architecture, and anchoring the data fingerprint to a non-permission chain of the mixed chain architecture, forming a cross-chain data protection mechanism from a licensed chain to an unlicensed chain; converting the organic tea traceability data into a verifiable on-chain traceability digital certificate based on a mixed chain architecture, and creating a digital autonomous sovereign identity of each participating user; when a query request of the organic tea traceability data is initiated, the query request is accessed to the mixed chain architecture through the digital autonomous sovereignty identity, and credible traceability authentication is performed on the organic tea traceability data corresponding to the query request based on the on-chain traceability digital certificate and the cross-chain data protection mechanism. By adopting the scheme of the invention, collaborative authentication can be carried out on organic tea traceability based on cross-chain data intercommunication.

A method for establishing content authenticity when aggregating content includes receiving a content package that includes a content item hosted by a content publisher site and a first digital signature. The method also includes determining whether the content package satisfies authenticity criteria, at least in part by decrypting the first digital signature using a first public key to produce a plurality of hashes. The first public key is associated with a particular content publisher, the plurality of hashes includes a hash of first data that includes at least a first portion of the content item and a hash of second data that includes at least a second portion of the content item and omits at least the first portion. The method also includes providing aggregated content to content consumers, by including or restricting access to a link based on whether the content package satisfies the authenticity criteria.

The invention discloses a 3D printing entity source evidence obtaining method based on printer structure vibration, and the method comprises the following steps: a feature generation step: extracting a low-frequency part of structure vibration generated in a printing process of a 3D printer, and constructing an equipment feature vector; a watermark embedding step: converting the equipment feature vector into an authentication watermark, and embedding the authentication watermark into a 3D printing entity; and a source authentication step: extracting the authentication watermark from the 3D printing entity to be authenticated, restoring the equipment feature vector, and matching the equipment feature vector with a pre-stored equipment feature vector to determine the source of the 3D printing entity. According to the 3D printing entity source evidence obtaining method based on printer structure vibration, equipment characteristics are constructed by extracting inherent structure vibration characteristics which are difficult to copy of a 3D printer, and the characteristic information is bound with a 3D printing entity, so that reliable, hidden and robust authentication of a 3D printing entity source is realized.

The present application relates to the technical field of adaptive control, and more particularly, to a park access equipment cooperative control method and system based on multi-source authentication, comprising: obtaining multi-source authentication original data and environmental quality parameters of each access node; constructing a dynamic trust weight score of any authentication source in each access node at the current time, which is used to quantify the output quality and stability of each authentication source under different environmental quality parameters at the current time; and calculating a multi-source fusion weighted consistency index of each access node at the current time. The present application uses the authentication link degradation risk value as an adaptive adjustment lever, dynamically reconstructs the global reward function of the multi-agent algorithm, realizes the strategy self-switching of prioritizing security bottom line under high-risk situation and maximizing the overall access cooperative efficiency under low-risk situation, and ensures that the park maintains the best balance between strict and smooth management and control under various uncertain environmental disturbances.

The application provides a BGP route origin authentication diagnosis method based on feature analysis, comprising the following steps: constructing a BGP route feature data set, training a route origin diagnosis model based on the BGP route feature data set, and adopting a three-level cascade gradient boosting tree algorithm to construct the route origin diagnosis model; wherein, when the first-level tree fuses basic features and historical behavior features, an attention mechanism is introduced, the basic features and the historical behavior features are fused and calculated based on dynamic weights, and a preliminary compliance probability is output; in the second-level tree, an improved gated recurrent unit (GRU) is adopted to process topology features, correlation analysis is performed based on the first-level output result and the processed topology features, and the determination threshold of abnormal routes is corrected; and a regularization term is introduced in the third-level tree to suppress overfitting. The application diagnoses the BGP route announcement to be diagnosed by using the trained diagnosis model. The application significantly improves the accuracy of BGP route origin authentication.

This invention discloses a heterogeneous extension component concurrent loading and dependency coordination architecture. Through concurrent acquisition of heterogeneous sources (remote repositories, temporary injection, pre-embedded components, dynamic inlining), declarative pattern verification of extension component descriptors, multiple heterogeneous source type adapters, offline resource discovery, dependency coordination and degradation, runtime configuration optimization, hierarchical exception management, adaptive dependency resolution, intelligent hot updates, sandbox isolation, dynamic capability negotiation, and predictive preloading, it achieves an efficient, reliable, and secure extension system. The system supports trusted source authentication, access control decisions, and functional unit extraction, and is suitable for command-line tools, integrated development environment extension systems, and extensible application frameworks. This invention effectively solves the shortcomings of existing extension component loading mechanisms in terms of heterogeneous source support, dependency coordination, security isolation, and loading efficiency, and can be widely applied in plug-in systems, modular applications, and microservice architectures.

The invention provides a multi-source authentication method and system of a resource public key infrastructure, relates to the technical field of computer networks, and realizes binding authentication of an IP prefix and a resource record through a reverse domain name system of domain name system security expansion. And after the resource certificate of the resource holding end is revoked, the relying party RP provides access service to the outside based on the domain name system security extension. According to the method, data and trust sources of resource records obtained by the relying party RP are effectively increased, authentication endorsement of the same resource record by multiple trust sources is realized, so that the revocation authority of the resource public key infrastructure is reduced, potential risks caused by unilateral revocation of the resource public key infrastructure are effectively dealt with, and seamless integration can be realized in an existing network environment.

During registration, a mobile communication device derives a first instance of biometric information from a user operating the mobile communication device. The communication device retrieves an encryption key assigned to the mobile communication device. Via application of the encryption key to the first instance of biometric information, the communication device produces first encrypted biometric information and forwards it to an authentication resource. The authentication resource stores the first encrypted biometric information for later authentication of the communication device. During subsequent authentication, the mobile communication device derives a second instance of biometric information from the user operating the mobile communication device. The communication device encrypts the second instance of biometric information with the encryption key and forwards it to the authentication resource. The authentication resource requires a substantial match of the second encrypted biometric information to the first encrypted biometric information to authenticate the communication device to use a wireless network.

The invention discloses a heterogeneous system unification method and device based on a micro-service architecture. The method comprises the following steps: intercepting an unauthenticated request based on a Spring Gateway gateway and automatically redirecting the unauthenticated request to an authentication center; the method comprises the following steps: carrying out multi-source authentication adaptation on an unauthenticated request through an authentication center, generating a unified Token based on JWT, verifying whether the unified Token is valid or not, and if the unified Token is valid, extracting a user identity and a request path of the unified Token, and forwarding the user identity and the request path to the authentication center; whether the user identity has the access authority is judged based on the authentication center, and the request with the unified Token is forwarded to the corresponding heterogeneous system; and outputting, storing and monitoring the permission operation log according to a standardized format. According to the method provided by the invention, a unified authority system of gateway interception, authentication center verification, authentication center decision making and authority auditing is constructed, cooperative authority management and control of heterogeneous systems (micro-service and traditional systems) are realized, the pain points of repeated authentication, authentication coupling, auditing missing and the like are solved, and the authority management efficiency and security of the enterprise heterogeneous systems are improved.

This invention provides a query and monitoring system for automated drug vending machines, comprising: an identification and traceability terminal for authenticating the source of purchased drugs based on their source identification; an inventory recording terminal for registering batch numbers of all source-authenticated qualified drugs among the purchased drugs and obtaining current inventory information and purchase records for each qualified drug; a full-process monitoring terminal for monitoring the qualified drugs throughout the entire process and obtaining corresponding monitoring information; and an information update terminal for updating the current inventory information based on the monitoring information and generating corresponding drug circulation records. This system is used for verifying the legality of drug purchases and automatically entering information, as well as monitoring and managing drug storage. It achieves real-time and accurate management of drug purchase sources, sales, inventory, and expiration dates and batch numbers, and records detailed information for each sale, enabling transparent traceability of drug circulation and inventory management by pharmacies.

The invention discloses a digital identity management operation system based on a quantum chain. The digital identity management operation system comprises a quantum security chip and a quantum chain distributed account book network, the quantum chain distributed account book network is used for recording a mapping relationship between a quantum digital identifier and a post quantum public key of a subject, a digital identity identifier, a subject information abstract and a network layer address prefix, and providing a decentralized analysis service; the quantum security chip comprises a multi-source authentication data storage partition used for storing a subject information abstract authenticated by at least one authentication mechanism; the post quantum cryptography engine is used for generating and storing post quantum public and private key pairs so as to execute post quantum signature and verification; and the address deriving unit is used for generating a network layer address according to the quantum digital identifier and the post-quantum public key. According to the invention, cryptographic binding and non-linkable derivation of the quantum digital identifier and the IPv6 address are realized, so that the same identifier generates network addresses which cannot be associated in different time periods.

The invention relates to the field of data encryption, and provides a supervision submission-oriented data encryption storage method and system, and the method comprises the steps: firstly obtaining to-be-encrypted data, and carrying out the preprocessing of the to-be-encrypted data, and obtaining a sensitive field; secondly, performing pseudo data filling and reconstruction on the sensitive field to obtain a pseudo data field and a reconstruction packet, and recording a mapping relation among the sensitive field, the pseudo data field and the reconstruction packet; generating a verification code through a digital signature algorithm and the integrity check bit, and embedding the verification code into the reconstruction packet; and finally, symmetrically encrypting the reconstructed packet embedded with the verification code, and storing the encrypted reconstructed packet into a system database. The system comprises a data preprocessing module, a pseudo data filling module, a reconstruction packet construction module, a verification code generation module and an encryption module, and can realize security encryption storage, source authentication, integrity verification and tamper-proof verification of data on the premise of ensuring that sensitive data is not directly exposed, thereby meeting the requirements of supervision departments on the security and compliance of submitted data.

The invention relates to a block chain-based green hydrogen supply chain carbon footprint traceability authentication system and method, and the system comprises a trusted Internet of Things collection layer which collects carbon-related data of key nodes in a green hydrogen supply chain and carries out the digital signature, and generates an original data package with a signature; the block chain evidence storage layer is in communication connection with the credible Internet of Things acquisition layer, receives the original data packet, performs Hash chaining, generates on-chain data, stores the on-chain data to a block chain main chain, stores the original data packet to a side chain, and establishes a mapping relation between the main chain and the side chain; a carbon footprint modeling engine which is in communication connection with the block chain evidence storage layer, calls a configurable carbon emission factor library and on-chain data, carries out real-time carbon footprint accounting through a life cycle evaluation method, and generates an NFT electronic certificate; and the intelligent contract authentication and transaction layer is deployed on the main chain of the block chain, interacts data with the carbon footprint modeling engine, and executes green hydrogen authentication, transaction matching and settlement according to the NFT electronic certificate and a preset authentication transaction rule.

The invention relates to the technical field of information security and timing, in particular to a time synchronization timing system and method based on one-way isolation, and the time synchronization system based on one-way isolation performs multi-dimensional innovation and enhancement on the basis of inheriting physical isolation security genes. The system adopts a multi-source time acquisition architecture, integrates satellite, network and local atomic clock signals, intelligently selects and switches through a dynamic confidence coefficient algorithm, and fundamentally avoids the risk of single-point failure. On the aspect of a one-way isolation mechanism, hardware-level optical fiber one-way transmission is achieved, reverse leakage of an electrical loop is completely eradicated, a national secret algorithm system and a user-defined one-way protocol are introduced into a data link layer and a protocol layer, and an end-to-end trusted chain from time source authentication, transmission encryption to distribution auditing is constructed in combination with a PUF dynamic secret key and an SM2 digital signature.

The application provides a watermark-based model security distribution and authentication method and system, and relates to the technical field of data processing.The method comprises the following steps: distributing a verified watermark-containing model to a requestor-authorized device through an encrypted channel, and writing watermark generation parameters, distribution context information and a timestamp as evidence data into a secure evidence library; running the distributed watermark-containing model on the authorized device, and obtaining a watermark-bearing signal from the output data of the model during the running of the model; analyzing the watermark-bearing signal, extracting watermark information, and restoring an original feature vector through an inverse mapping algorithm; performing similarity matching and legality verification on the restored feature vector and the record of the secure evidence library, and realizing model source authentication, use permission control and accurate tracing of infringement behavior according to the verification result.The application improves the comprehensiveness and accuracy of anomaly detection.

A computer-implemented system, method, and non-transitory medium for detecting cognitive inception risk and generating defensive interventions. The Cognitive Inception Detection and Defense System (CIDDS) receives a time-stamped content exposure stream associated with a user and user cognitive output signals (e.g., text, speech, selections, interaction events). CIDDS projects exposure and output signals into a multidimensional semantic vector space; maintains a stateful, decay-weighted baseline for the user; computes (i) a Baseline Deviation Index (BDI) and (ii) an Inception Propensity Score (IPS) derived from structural properties of exposures (e.g., priming sequences, repetition structure, microtargeting indicators, synthetic consensus indicators). CIDDS fuses these measures to generate a Cognitive Origin Authentication Score (COAS) and an interpretable origin assessment. Responsive to a confidence score satisfying a triggering condition, CIDDS outputs defensive actions including alerting, reflection prompting, exposure throttling, quarantine, blocking, or escalation, while maintaining tamper-evident audit logs. Optional embodiments incorporate non-invasive neurophysiological signals (e.g., EEG).

The invention discloses a wind power plant data source authentication method and device based on SVM-UGR and computer equipment. Comprising the following steps: acquiring an original feature set of a multi-modal physical signal generated by wind power equipment; normalizing the original feature set to a preset feature space through a static SVM model, and obtaining low-dimensional static features of the multi-modal physical signals; extracting dynamic coupling features of the multi-modal physical signals in different time dimensions from the original feature set through a dynamic UGR model; fusing the low-dimensional static features and the dynamic coupling features corresponding to the different modal physical signals to form a physical fingerprint of the wind power equipment; and performing data source authentication on the target wind power plant data based on the first similarity between the target wind power plant data and the physical fingerprint. According to the method provided by the invention, the physical fingerprint of the wind power equipment operation characteristics is constructed through the model, and the credible authentication of the data source is realized based on the operation behavior and the physical state without depending on the network identity through comparison with the new data.

This invention discloses a network isolation device based on backward hash chain source authentication, belonging to the field of network information security. Based on the existing three-host architecture, this invention adds a source authentication module to the application layer of the isolation authentication unit. This module digitally signs and verifies only the MAC value of the first packet to achieve source authentication and non-repudiation. Based on the backward hash chain data structure and technology, it sequentially sends the encrypted business data of the i-th packet and the MAC value of the (i+1)-th packet, comparing the received MAC value of the i-th packet with the calculated MAC value of the i-th packet. By integrating digital signatures and message authentication codes, it achieves protection of information confidentiality and integrity, as well as source non-repudiation and non-repudiation authentication. It has low computational overhead and low space occupancy, effectively improving the security strength of network boundaries.

This invention provides a microservice authentication method, system, device, and medium supporting dual authentication channels, belonging to the field of Internet identity authentication. The method includes: deploying a user center, a third-party login adaptation system, and a business system; when a user accesses the business system, the business system checks for the existence of a token; if not, it redirects the user to the user center authentication page, carrying at least the appid and state parameters; after successful verification, a code is issued, and the user is redirected back to the business system; the user center requests a token from the user center and uses the token to obtain user information; the user center selects whether to execute its own authentication logic or forward the request to the third-party adaptation system for microservice authentication based on the state parameter. Through a unified authentication architecture design, standardized OAuth2 protocol integration, and dynamic dual authentication channel routing, the security, efficiency, and scalability of the multi-source authentication system are achieved.

The disclosure provides a multi-data source authentication method and device, electronic equipment and storage medium, relates to the field of artificial intelligence, specifically relates to cloud computing and big data technology, and can be applied to intelligent cloud scenes. The specific implementation scheme is as follows: determining whether the authentication information of a to-be-authenticated data source is cached; in the case that the authentication information of the to-be-authenticated data source is not cached, creating a connection with a target remote server; calling the target remote server to connect the to-be-authenticated data source, and obtaining the authentication information from the to-be-authenticated data source; caching the authentication information, and authenticating the to-be-authenticated data source based on the authentication information, which can support authentication of multiple data sources.

The invention provides a BGP (Border Gateway Protocol) route origin authentication diagnosis method based on feature analysis, which comprises the following steps of: constructing a BGP route feature data set, training a route origin diagnosis model based on the BGP route feature data set, and constructing the route origin diagnosis model by adopting a three-layer cascaded gradient boosting tree algorithm; wherein when the basic features and the historical behavior features are fused in the first-level tree, an attention mechanism is introduced, fusion calculation is performed on the basic features and the historical behavior features based on dynamic weights, and a preliminary compliance probability is output; in the second-stage tree, processing the topological characteristics by adopting an improved gating loop unit GRU, performing correlation analysis based on a first-stage output result and the processed topological characteristics, and correcting a judgment threshold value of an abnormal route; and introducing a regularization term into the third-level tree to suppress overfitting. According to the embodiment of the invention, the BGP route announcement to be diagnosed is diagnosed by using the trained diagnosis model. According to the method and the device, the accuracy of BGP routing origin authentication is remarkably improved.

The invention discloses a pollution source monitoring method comprising the following steps: obtaining pollution source data based on a database, the pollution source data comprising active authentication data and passive authentication data; based on the pollution source data, a monitoring network is arranged and comprises fixed monitoring points and mobile monitoring points, a fixed-mobile monitoring network is formed, and multi-source data is obtained; the collected multi-source data is processed, graph node characteristics of pollution components, time windows and spatial proximity are established, a spatial distribution and time model of pollution sources is established, and the pollution sources are identified. Through a fixed-mobile hybrid monitoring network, multi-source data fusion modeling, GAN-assisted prediction and space-time map model analysis, the static property, singleness and hysteresis of a traditional pollution source monitoring method are broken through, and accurate positioning, dynamic tracking and prediction early warning of the pollution source are realized.