123 results about "Unique key" patented technology

A system and method for providing credentials device unique credentials to a chip is disclosed. In one embodiment, the method comprises receiving the credentials in credential provisioning server (CPS), the credentials having information encrypted according to a secure server key (SSK) securely stored in a hardware security module (HSM) communicatively coupled to the CPS, the hardware security module also securely storing a master key; receiving a credential request in the CPS, the credential request comprising a chip identifier that identifies the chip; securely decrypting the encrypted information in the HSM according to the SSK; securely computing a chip-unique key in the HSM, according to the chip identifier and the master key; re-encrypting the decrypted information according to the computed chip-unique key; and providing the credentials having the re-encrypted information to the device.

The invention relates to the technical field of data import, in particular to an intelligent Excel data import method and system based on dynamic mapping, and the method comprises the steps that the system traverses all Excel fields for each database field, calculates the feature similarity and field matching degree of the Excel fields, and generates a field mapping template set according to all field matching results; reading the Excel content according to rows, cleaning each row of content into a standard value, performing quality scoring, and outputting a target format data structure set; screening a structure alignment data row and a field structure exception record set which conform to a threshold value; the system reads the structure alignment data rows line by line, processes the extraction value of each field and outputs a legal data set; and extracting a field sequence set, searching whether fields marked as primary keys or unique keys exist in the field sequence set, and combining the fields into a uniqueness judgment set to judge whether the currently written Excel data exists in the target database table.

The present invention provides a method and system for encrypting business data using quantum encryption, which relates to the field of banking business data encryption. The method includes: constructing a fixed-time window, obtaining the key metadata and network pulse information of each bank-enterprise business data within the fixed-time window, and generating a point cloud set; generating topological structures of different scales based on the point cloud set, and recording topological feature information at each scale to generate a persistence diagram; extracting statistical quantities from the persistence diagram and calculating the decision factor corresponding to the current fixed-time window; based on the sensitivity coefficients of each bank-enterprise business data, determining the key length of each bank-enterprise business data according to the decision factor, and invoking a quantum random number generator to generate a unique key for each bank-enterprise business data under the current fixed-time window. The present invention can dynamically and flexibly adjust the encryption strategy, realizes the dynamic decoupling of the security strategy and network resources, and avoids service interruption caused by excessive occupation of bandwidth by encryption calculations.

Systems and methods for improving access to and control of secure content. To prevent undesired data sharing / access (e.g., prohibited downloads, 4th, 5th-party sharing), access rules can be assigned to documents upon creation. These access rules specify the operations that can be performed to a document, who can perform those operations, and when those documents can be accessed to perform the operations. For each document, a separate container instance may be generated which can store the document comprising the private data. Each authorized user may be provided with their own container instance. Unique cryptographic keys may be generated for each container instance to allow those authorized users to securely connect to their respective container instances. This additional layer of protection (i.e., access rules linked to documents and unique keys for each document / client) allows for granular monitoring of the private data to prevent prohibited access attempts.

Aspects of the disclosure generate independent encryption keys for objects (e.g., virtual machine disks (VMDKs)) without requiring the management of multiple keys. An encryption manager obtains a primary encryption key, an object identifier (ID) comprising a globally unique ID (GUID) for an object, a data salt comprising the object ID and a data salt string, and a metadata salt comprising the object ID and a metadata salt string. A data encryption key is generated using the primary encryption key, the data salt, and a one-way function. A metadata encryption key is generated using the primary encryption key, the metadata salt, and the one-way function. Because the data salt string and metadata salt string differ, the data encryption and metadata encryption keys differ. Object IDs for different objects differ, so each object and its metadata have globally unique keys. Key generation (other than the primary key) is deterministic, simplifying key management.

The embodiment of the invention relates to a communication system, and discloses a message storage method, a message system, computer equipment and a storage medium. According to the invention, interaction data of each main body is stored in an interaction database, and the interaction data at least comprises a receiving main body ID and a sending main body ID; the interactive message content is stored in a message detail library, the interactive message sending sequence is stored in a message sequence library, the message sending sequence at least comprises a receiving main body ID, a sending main body ID and a unique message key, and the unique message key is associated with the message content; and caching the interaction data, the message content and the message sending sequence according to the message sending time. Wherein the message sequence library is associated with the interaction database through the receiving main body ID and the sending main body ID, and the message sequence library is associated with the message detail library through the unique message key. Therefore, the message can be stored at the server side, the storage space of the main body equipment is liberated, the message query request of the main body can be quickly responded, and the experience of the main body is improved.

The invention discloses an automatic form filling method, which comprises the following steps of: by defining a target field set, carrying out standardized preprocessing on to-be-filled information of a user and related materials to obtain a user standardized information key value pair; a target webpage is accessed, in the access process, a DOM tree structure and a complete visual image of the target webpage are obtained, the DOM tree structure and the complete visual image of the target webpage are input into the multi-modal large model to be analyzed, and a multi-modal feature vector is obtained; based on the multi-modal feature vector, identifying interactive elements in the target webpage to obtain an interactive element set; semantic matching is carried out through attributes of interactive elements and unique keys of user standardized information key value pairs, a mapping relation is established, and an interactive element set belonging to a target field set is screened out; and defining an automatic processing step sequence set, traversing the automatic processing step sequence set, and executing an automatic filling operation.

Systems and methods for secure device onboarding in cellular networks by leveraging purposely induced authentication failures and device fingerprinting. A security platform, working in conjunction with the cellular network, detects an authentication failure triggered during a device's connection attempt. The platform then performs device fingerprinting based on data and / or signaling exchanged during the failed attempt. After successful fingerprint verification and completion of additional verification steps, the security platform enables the device's connection. This approach enhances security by verifying the device's identity beyond traditional SIM-based authentication, ensuring only authorized devices gain access. The invention encompasses various SIM card scenarios, including fixed-key SIMs and unique keys managed by the security platform, providing flexibility for different deployment models.

The invention relates to the technical field of real-time data statistics, and discloses a real-time data statistics method and system.The method comprises the steps that the total memory space size is calculated based on the number of ports of a switch, a shared memory area is applied through a unique key value of the system, and the shared memory area is mapped to a process address space; creating a timer object, and when the period of the timer object expires, triggering a callback function and writing the read statistical data into the shared memory area; and when the front-end application module receives a statistical data acquisition request, calling an access interface function to directly read the port statistical data from a memory address corresponding to the shared memory region. Decoupling of collection and access of port statistical data is achieved, the method is suitable for a network monitoring scene needing high-frequency refreshing of statistical information, and user experience is effectively improved.

The invention relates to the technical field of energy data security protection, and discloses a block chain energy data security protection method, system and device based on attribute control and double-layer encryption, and a medium, and the method comprises the steps: constructing an ABAC triple policy engine based on user attributes, resource attributes and environment attributes, converting the conventional static authority management into dynamic policy verification, and carrying out the dynamic policy verification; a double-layer AES-GCM encryption algorithm is designed, the data anti-cracking capability is improved through two encryption operations, the linear time complexity is kept while the encryption security is guaranteed, and the efficiency requirement of energy data processing is considered; a dynamic key management mechanism is matched, a unique key pair is generated for each piece of data, the key leakage risk is reduced, and the problem of contradiction between safety and efficiency in a traditional encryption algorithm is solved; an on-chain and off-chain collaborative storage architecture is adopted, encrypted energy data are stored through an IPFS distributed storage system, only the hash value is subjected to on-chain verification for integrity, and capacity limitation caused by traditional block chain full-node storage is broken through.

A system for mapping System Management Facility (SMF) records to logical entities includes a processor, a storage accessible by the processor, and a mapping program that, when executed by the processor, causes the system to receive SMF records that contain information about events that occur in the system, determine correlation data between the events and related logical entities, generate a plurality of unique keys, associate each of the generated plurality of unique keys with a corresponding logical entity of the related logical entities, store, in a relational database in the storage, each of the logical entities associated with the associated unique key of the plurality of unique keys corresponding to each logical entity, and generate a report, or perform interactive statistical analyses.

A computer-implemented method causes a data processing hardware to perform operations when executed by the data processing hardware. The operations include providing a common encryption key and a unique encryption key at a system on a chip (SoC) of a radar module, providing a unique key pair at the SoC, the unique key pair including a unique public key and a unique private key, and encrypting software with the common encryption key. The operations further include generating a secure boot certificate for the encrypted software, signing the secure boot certificate using the unique private key, and writing the encrypted software to an external flash memory. The operations further include updating the software at the SoC, verifying the software update via a regional public key, and signing the secure boot certificate with a device unique private key via a hardware security module (HSM) of the SoC.

The present application belongs to the field of substation communication configuration, and particularly relates to a kind of SCL file comparison method and system.The present application establishes the node model corresponding to each node in SCL file, avoids traversing when comparing, saves traversal time, and when establishing node model, only the attribute information and the subnode information needed for node comparison are modeled, so the comparison of these nodes and attributes can be saved;when comparing nodes or their subnodes, the node content is first texturized, only the text content is compared to see if it is the same, and the text comparison method is optimized, which can quickly determine whether the node content is different, and if not, the comparison of the specific content of the node can be directly saved;and when comparing multiple node subnodes, the unique key attribute is matched, and the key attributes of each subnode in the two files are stored as a linked list and a hash table respectively, ensuring the order and retrieval speed of the results of multiple node subnodes.

The embodiment of the invention discloses a multi-language entry management method, electronic equipment and a storage medium. The method comprises the steps that a structured form file is constructed to serve as a unified data source of multi-language entries, wherein the structured form file comprises a key column used for storing a unique key name and a plurality of language columns used for storing translation texts of all languages; reading the structured table file, constructing a mapping relationship between a key name and a translated text for each language type, and generating a corresponding language entry file; and reading the plurality of language entry files, extracting and combining mapping relationships between key names and translated texts in the files, and generating the structured form file. By means of the mode, centralized management and bidirectional reversible conversion of the multi-language entries can be achieved, development and maintenance cost is reduced, multi-language consistency and quality are improved, and proofreading and auditing of the entries are facilitated.

The invention discloses a model file management method and device and a nonvolatile storage medium. The method comprises the steps that a model file is received, and the model file is used for indicating state information of a model corresponding to the model file; determining a unique key value corresponding to the content of the model file, and determining a pre-verification uniform resource locator corresponding to the model file based on the unique key value and a data source ID corresponding to the model file; performing file verification on the model file through the pre-verification uniform resource locator; and under the condition that the model file passes the file verification, uploading the model file to the object storage system through the client. The technical problems that the file management efficiency is low and a large number of repeated files are stored due to the fact that model file management depends on a business server to transfer data and a pre-verification mechanism does not exist are solved.

The arrangements disclosed herein relate to generating, by a first server, a first seed using a Hash-Based Message Authentication Code (HMAC) based at least in part on a Hash Key (HK), providing, by the first server to each of a first device and a second device, the first seed, providing, by a second server to each of the first device or the second device, a second seed. The second seed is based at least in part on a stream of photons. Each of the first device or the second device generates a Derived Key (DK) based at least in part on the first seed and the second seed. Each of the first device or the second device generates a first key based at least in part on the DK and a first random number generated by a Quantum Random Number Generator (QRNG). The first device encrypts first data using the first key to obtain first ciphertext and provides the first ciphertext to the second device. The second device derives the first key and decrypts the first ciphertext using the first key.

The arrangements disclosed herein relate to receiving, by a key management node, a first encrypted message element which is encrypted using a first symmetric key established between the key management node and a first node, decrypting, by the key management node, the first encrypted message element using the first symmetric key to obtain a first message element of a message, encrypting, by the key management node, the first message element using a second symmetric key established between the key management node and a second node to obtain a second encrypted message element, and sending, by the key management node, the second encrypted message element.

A key master service capable of operating on a service provider in a network enables is disclosed. The key master enables authorized parties to securely exchange client information without compromising client security. One feature of the key master service is the generation of a unique key for each client. All parties in an authorized universe access, exchange and modify client information by referencing the universal key, rather than using known client identifiers. Client information is further secured by advantageously applying an obfuscation function to the data. Obfuscated client information is stored together with the universal key as keyed client data at the client and / or server, where it may be directly accessed by the service provider or third parties. Because client information is stored and exchanged without the ability to discern either the client identity or the nature of the information, such information is secured against malicious third-party interception.

The present invention provides a robust and effective solution to an organization by enabling them to implement a system (110) for facilitating format preserving encryption capability such that the encrypted data will not be available with its original value in a big data system and render sensitive field data as non-sensitive. Thus, sensitive data may be hidden from data-stores / warehouses without worrying about downstream access to the data. The system (110) proposed may also preserve the data type and format of datasets but not limited to the like. The system encrypts a dataset with a unique key (404) and then allows a privileged user (902) to decrypt the encrypted dataset with the unique key (404) and view the decrypted values without getting access to the sensitive original dataset.

The invention relates to an alarm personnel dynamic association system and method based on multi-modal recognition, and the method comprises the steps: collecting personnel face information through a face base library module, inputting the information into a face base library, configuring an intelligent analysis task, adding a camera and a channel in an equipment management module, and adding the intelligent analysis task to select a corresponding to-be-analyzed channel, and the intelligent analysis server pulls the video stream, synchronously performs face trajectory tracking and behavior analysis, matches a face trajectory ID in an alarm condition coordinate range according to a detected behavior alarm condition, and if the associated trajectory ID in an alarm area does not identify a specific person when the alarm condition occurs, the intelligent analysis server performs face tracking and behavior analysis. The dynamic updating module marks a unique key and pushes an alarm condition in real time; after the follow-up track ID is successfully identified, personnel information is obtained through key updating association, traditional intelligent analysis can only trigger the alarm condition and does not know who participates in, and the method can clearly know who participates in triggering the alarm condition without manual confirmation.

This document describes a method including reading digital health records each associated with a unique key value representing a patient, each digital health record being structured with a plurality of fields, parsing the plurality of fields to identify the unique key values, and identifying, based on the parsing, a given key value and a digital health record for that given key value. For the identified digital health record, the method includes generating baseline renal function data based on the particular digital health record, comparing the baseline renal function data with current renal function data associated with the given key value, determining that a difference between the baseline renal function data and the current renal function data is greater than a threshold, inputting the current renal function data to a machine learning model, and predicting, by the machine learning model, a propensity of AKI for the given key value.

Techniques described herein relate to a method for establishing communication sessions. The method may include sending, by a first data node, a request to establish a session to a second data node, wherein the request is encrypted using a compound certificate associated with a data cluster; obtaining, an encrypted token from the second data node; verifying the encrypted token using the compound certificate; performing steward selection to select a third data node to be a steward; generating a unique key and providing a copy of the unique key to the steward; generating an encrypted authentication token using the unique key; sending the encrypted authentication token to the steward; obtaining an authentication token from the second data node, wherein the authentication token is decrypted; verifying the authentication token using the encrypted authentication token; and performing remaining communications associated with the session using the steward.

Systems and methods for providing a shared custody blockchain wallet as a service are disclosed. A digital asset exchange platform offering the blockchain wallet service may cause one or more groups of signing client devices to collaboratively generate one or more key unique key shards for authorizing transactions associated with the blockchain wallet. The digital asset exchange platform may determine one or more signing client groups to generate and / or store the key shards. One or more signing client devices of the individual groups of singing client devices may be configured to generate, store, and / or send unique key shards. Each of the groups may have a quorum representing ones or more thresholds and / or requirements of the unique key shards that, upon request to sign a transaction, must be utilized to authorize the transaction.

A conditional locking system receives, from a request source, a request to execute an operation on a target resource on behalf of a client thread. The system generates a unique key based on an attribute of the request and searches a concurrency dictionary for an entry identifying the unique key. In response to determining that the concurrency dictionary does include an entry identifying the unique key, the system identifies a lock object associated in the entry with the unique key and transmits a request to acquire the lock object. Once the lock object associated with the unique key has been acquired on behalf of the client thread, the system transmits a lock acquisition confirmation to the request source.

A system for mapping System Management Facility (SMF) records to logical entities includes a processor, a storage accessible by the processor, and a mapping program that, when executed by the processor, causes the system to receive SMF records that contain information about events that occur in the system, determine correlation data between the events and related logical entities, generate a plurality of unique keys, associate each of the generated plurality of unique keys with a corresponding logical entity of the related logical entities, store, in a relational database in the storage, each of the logical entities associated with the associated unique key of the plurality of unique keys corresponding to each logical entity, and generate a report, or perform interactive statistical analyses.

To provide interconnection of drug administration systems.SOLUTION: A drug administration device and a remotely located server can establish a unique key for wireless communication between the device and the server. The drug administration device can be configured to sense information relating to at least one of the device and a drug and can be configured to anonymize data indicative of the sensed information using the key stored in memory of the device. The drug administration device can also be configured to use the key in decrypting data received from the server.SELECTED DRAWING: Figure 10

The present application relates to the technical field of valve, in particular to a mechanical encryption valve, including valve body, valve cover arranged on the valve body, valve rod arranged on the valve cover and located in the valve body, valve flap arranged on the valve body and threaded with the lower end of the valve rod, the valve flap is lifted in the valve body when the valve rod rotates, the upper end of the valve rod passes through the valve cover, further including rotating body, avoiding hole, first cutout, longitudinal opening, second cutout, control rod, turnover mechanism, locking mechanism, the control rod and the rotating body are integrated, the traditional use of lock core and key is abandoned, the control rod itself is both unlocking tool and operating handle, the management personnel do not need to carry unique key, and the phenomenon that the valve cannot be operated due to the loss of key will not occur, so as to reduce the loss, when the subsequent operation is needed again, the first cutout and the second cutout are corresponded by controlling the rotating body, and the above control mode is repeated.

This invention discloses a fully offline accessory key lifecycle management system and method, belonging to the field of smart terminal accessory security management technology. This invention constructs a six-stage, closed-loop management system covering key generation and programming, factory pre-binding, initial activation verification, continuous usage control, offline key revocation, and physical destruction upon disposal. This invention utilizes a PUF (Physically Unclonable Function) circuit to generate unique key pairs for each device. The private key is permanently embedded within the chip, unreadable and unexportable. A physical unidirectional programming link eliminates the risk of internal key leakage, enabling offline pre-binding between the terminal and accessories, offline key revocation, and hardware-level physical key destruction capabilities. This invention operates entirely offline in a closed loop on the local terminal, without requiring cloud-based network data interaction. It effectively solves the security flaws of traditional accessory key systems, such as easy key leakage, easy mass forgery, lack of offline revocation capabilities, and the possibility of reused discarded keys. This provides a full-process, hardware-level, and highly reliable security management solution for the fully offline bionic interactive terminal accessory ecosystem.

There are disclosed devices, system and methods for continual automated discovering of a topology of a computer network of physical network objects for an application. A first physical network object selects portions of sets of data messages being sent over time by the application and related network objects; and collects network configuration and time dimension information, and timeseries information from the portions of messages. A second physical network object receives the information and uses it to determine topology information for the application over time, which includes unique keys of, types of objects of, types of relationships between pairs of, groupings of, time dimension data of and metrics data of the physical network objects. The topology information can be stored; and can be queried to create and display a graph representation of the topology information that changes over time.