1455 results about "User authentication" patented technology

The invention discloses a computer network security monitoring system and method. The system comprises a quantum encryption traffic acquisition module, a biological recognition feature extraction module, a block chain detection traceability analysis module and a visual management module. The quantum encryption flow collection module generates and distributes a secure quantum key through a quantum key distribution unit, encrypts a collected data packet through an encryption transmission unit, and generates a flow data segment through a flow collection subunit and a data cache statistical analysis subunit. The biological recognition feature extraction module verifies the identity of a user through a biological recognition unit, and extracts a multi-dimensional feature vector by using a feature extraction subunit. And the block chain detection traceability analysis module performs detection and traceability analysis on the abnormal traffic through the anomaly detection subunit and the traceability analysis subunit, and stores a result in the block chain storage unit. The visual management module provides visual network state display and user identity verification functions through a visual display subunit and an identity verification and access control subunit. According to the invention, quantum encryption, biological recognition and block chain technologies are combined, so that the accuracy, security and traceability of network security monitoring are improved.

A system and method for implementing a non-interactive and automatic way of facilitating user authentication with a proxy server is disclosed. At least, the technique disclosed includes determining a request to access a web server by a Hypertext Transfer Protocol (HTTP) agent on a client device, retrieving a proxy configuration file from a Uniform Resource Locator (URL) assigned to the client device, determining, using the proxy configuration file, a host name and a port number of a proxy server corresponding to the request, and routing, from the HTTP agent to the proxy server, the request using the host name and the port number of the proxy server, the proxy server configured to look up a user mapping table using a set of proxy connection information and uniquely identify a user of the client device based on the look up, the set of proxy connection information including a combination of a public Internet Protocol (IP) address of the client device, the host name of the proxy server, and the port number of the proxy server.

The invention discloses a multi-factor authentication trusted data space access control method, platform and medium, and relates to the technical field of data security, the method comprises the following steps: analyzing the authority, record, path and target of a request access user, and obtaining access parameters; generating a verification gradient based on the security levels of parameter matching permissions, records, paths and targets; in combination with the gradient and the user authentication record, creating an authentication demand factor with gradient constraint; and generating a space access permission according to the authentication result, and controlling the trusted data access permission. According to the scheme, the data security protection capability is enhanced through a dynamic multi-factor verification mechanism. According to the method and the device, the technical problem of insufficient data security protection capability caused by lack of a multi-factor dynamic authentication and fine-grained access control mechanism in a data space access process in the prior art is solved; the technical effects that the access authority is dynamically adjusted based on multi-factor authentication, and the data security and credibility in the data space access process are effectively improved are achieved.

A system for an automated real-time digital identity verification based on predictive analytics of user identity data, including a processor of a digital identity verification (DIV) node configured to host a machine learning (ML) module and connected to at least one verifier entity node over a network and a memory on which are stored machine-readable instructions that when executed by the processor, cause the processor to: acquire an identity verification request associated with a user from the at least one verifier entity node, wherein the identity verification request comprising user biographic data and a truncated facial biometric hash extracted from a digital identity feature embedded into an identification document of the user and user biographic data acquired from the identification document and a facial biometric hash generated from the user identification document; parse the identity verification request to derive a plurality of key features; generate at least one feature vector based on the plurality of the key features; and provide the at least one feature vector to the ML module configured to execute a predictive model based on underlying neural network configured to produce at least one user identity verification parameter for generation of a user identity verification verdict.

The invention discloses an identity credential generation method, a non-inductive identity authentication method and a computer device. The non-inductive identity authentication method comprises the following steps: analyzing a user identity authentication request to obtain a current authentication demand, and extracting corresponding attribute information and information related to anonymous certification of an issuer from an obtained identity certificate corresponding to a user; determining the type of each piece of attribute information, and calling a corresponding verification node to verify the corresponding attribute information according to the type to obtain a first verification result; verifying information related to the anonymous certification of the issuer to obtain a second verification result; obtaining a Merkle proof corresponding to the identity certificate proof from a preset verifiable certificate list, and verifying the Merkle proof to obtain a third verification result; and when the first verification result, the second verification result and the third verification result all meet the requirements, confirming that the user identity verification is passed. The method is simple and safe, and has strong uniqueness, secrecy and flexibility.

The invention discloses a multi-role grading access control method, system and device for a segment sliding electric door, and relates to the technical field of access control. The multi-role hierarchical access control method, system and device for the segment sliding electric door comprises the following steps: S1, collecting user access control data in the user identity verification and passing operation process, and carrying out data cleaning and normalization processing on the user access control data; s2, slicing the user behavior data in different time periods, extracting statistical characteristics, identifying abnormal modes, and carrying out quantitative analysis on the behavior state of the user; s3, collecting access control data in real time to construct a behavior sequence, evaluating the risk fluctuation amplitude and trend, judging the risk level and carrying out risk response; and S4, carrying out quantitative evaluation on risk response effects in different operation periods, dynamically adjusting safety response measures and regularly generating strategy optimization suggestions. The problem that in the prior art, traffic abnormal behaviors cannot be effectively recognized, and consequently a safety blind area exists is solved.

The present disclosure provides a biometrically controlled handheld medication dispensing device. The device includes a housing containing a cartridge carrier, designed with a specific connector to align with a medication cartridge. Notably, the device also includes a biometric authentication component that works in conjunction with an activator mechanism. When operated and upon user authentication, the activator mechanism causes the cartridge carrier to move the medication cartridge between a stored position and a dispensing position, where it can be compressed to safely and efficiently dispense medication to a user.

Described is a system for identity fraud detection by receiving an image of a user for an identity verification process of the user; generating a vector embedding for a face within the image using a machine learning model, comparing the vector embedding with at least two embedding repositories to determine a likelihood of fraud by: comparing the vector embedding with a first index of embeddings, the first index being updated at a first time interval; comparing the vector embedding with a second index of embeddings, the second index being updated at a second time interval, the first index and second index having at least a subset of the same points in the multidimensional space; and determining a characteristic of potential fraud based on the comparison of the vector embeddings with the first index and second index; and outputting an identity verification result based on the likelihood of fraud.

The invention provides a screen interaction method and system based on face recognition, and the method comprises the steps: obtaining a face image sequence triggered by a target user in a screen interaction scene, carrying out the matching of a target interaction mode from a preset interaction mode library according to the face dynamic behavior characteristics, and carrying out the matching of a target interaction mode based on the coordinates of a screen fixation region and the target interaction mode. Generating dynamic interaction content corresponding to the sight focus of the user, calling a pre-trained facial feature fusion model, performing multi-level feature extraction on a facial region in the facial image sequence, generating a user identity verification vector and an emotional state vector, and performing real-time adjustment on presentation parameters of the dynamic interaction content based on the multi-level feature extraction. And outputting the adjusted screen interaction signal. According to the invention, the user experience can be optimized while the interaction efficiency is improved.

The invention relates to the field of new energy automobile power supply, and provides an electric automobile interconnection sharing charging operation method and device and a storage medium, the method comprises the following steps: realizing heterogeneous system interconnection of a multi-source charging platform and a supervision platform through a standardized interface protocol, and establishing a cross-platform data channel; a dynamic user authentication system is constructed based on a cross-platform data channel, user registration and authority distribution of the electric vehicle are completed in a multi-mode identity authentication mode to obtain a user authority level, and an authentication result is fed back to the supervision platform; performing intelligent charging pile matching based on the real-time multi-dimensional charging resource atlas according to the user permission level, and generating a dynamic service instruction containing a navigation path and charging parameters; and in a charging service execution process, a bidirectional supervision data flow is created through a cross-platform data channel, full-life-cycle supervision of the charging process is executed in real time, and a service strategy is dynamically adjusted based on a feedback instruction of a supervision platform. According to the technical scheme, the electric vehicle can be cooperatively charged.

Systems and methods for secure and efficient user authentication on shared mobile devices, such as smartphones and tablets. This solution leverages the capabilities of RFID / NFC cards, access cards, and biometric sensors to establish seamless and personalized user authentication. An authenticator application communicates with a remote authentication service to either register passkeys locally for platform-wide use or forward authentication requests for remote processing, depending on configuration. The authenticator application orchestrates communication between the user, mobile device, and authentication service, creating a secure framework for various applications. Upon successful authentication, the system transforms the mobile device into a platform authenticator, making passkeys available across native apps and browsers. This system enhances security by integrating user identifiers with hosted authenticators that are securely managed by the authentication service. By tapping NFC-enabled cards or utilizing a bridge device for data extraction, users can seamlessly engage with the shared mobile device environment, benefitting from robust security measures associated with FIDO authentication. The system encompasses the bridge device, which serves as an intermediary for data transmission, efficiently communicating between RFID / NFC devices and mobile devices using Bluetooth Low Energy (BLE) technology. Biometric authentication operates similarly to RFID / NFC-based methods, where user identity is verified through an authentication service, and passkey support is provided for that specific user. The authentication service hosts user authenticators and passkeys in a secure, transportable format, configurable to be fetched to shared mobile devices or handled remotely. This system allows adaptable FIDO2 / WebAuthn security protocols across multiple devices, enhancing user convenience while ensuring system integrity and security in shared device scenarios.

The invention discloses an identity authentication and control method and device based on a block chain. According to the method, biological features are collected through edge nodes to generate feature vectors, a combined hash value is generated in combination with a device scene label and a service role label, the combined hash value is uploaded to a cloud server after encrypted signature, and the combined hash value is written into a block chain through an intelligent contract; and during user authentication, the edge node calculates a real-time risk level, dynamically selects an authentication mode, calls an intelligent contract for verification after verification of the cloud server, and adjusts the risk level according to a verification result to implement management and control. According to the method, the edge cloud collaborative architecture is adopted, and the dynamic multi-factor authentication mechanism and the block chain consensus technology are combined, so that high-security privacy protection authentication is realized, the security requirements of different service scenes can be met, data leakage and replay attacks are effectively prevented, and the authentication efficiency and reliability are improved.

The invention is suitable for the technical field of intelligent door locks, and provides an intelligent door lock door opening control method and system and an intelligent door lock.The method comprises the steps that sensor data which is obtained by a sensor deployed on the intelligent door lock or around the intelligent door lock and reflects the relative state of a user and the intelligent door lock are collected; receiving user equipment data which is sent by the authorized user equipment and comprises an equipment identifier and communication signal strength; inputting the sensor data and the user equipment data into a preset intention analysis model, and calculating an intention value through the intention analysis model; comparing the calculated intention value with at least one preset intention threshold value, and selecting an authentication strategy corresponding to the intention value from a preset authentication strategy set based on a comparison result; starting a user identity verification process specified by the selected authentication strategy; and when verification succeeds, the intelligent door lock is driven to execute unlocking operation. The intelligent door lock solves the problem that an existing intelligent door lock is insufficient in intelligence.

The present disclosure generally relates to location-based user authentication. In some embodiments, methods and user interfaces for performing location-based user authentication based on a type of requested operation are described.

Systems and methods for performing zero knowledge proofs to prove a user's possession of secret data and / or biometric data without exposing such data. The methods can include receiving a certificate signing request and biometric data associated with a user; creating a stable key based at least in part on the biometric data; creating a private key based at least in part on the stable key; transmitting the private key to the user device for local storage thereon; creating a public key based at least in part on the private key; and forwarding the certificate signing request to an issuer.

The invention relates to the technical field of data security, and particularly discloses a real-time data desensitization method and system based on context awareness, and the method comprises the steps: intercepting an HTTP / HTTPS request through a gateway, and extracting a user authentication token, URL parameters, an IP address, a timestamp and request body data in a request header; analyzing user role information based on the user authentication token, extracting access environment characteristics based on an IP address and a timestamp, and performing sensitive field identification and grading on request volume data to determine a data sensitive level; according to the user role information, the access environment characteristics and the data sensitivity level, matching a predefined desensitization strategy template through a rule engine, and generating a real-time desensitization strategy containing a field-level desensitization instruction; verifying the access authority based on the user authentication token, and dynamically adjusting the desensitization degree in combination with the access environment characteristics; and according to the real-time desensitization strategy and the desensitization strength, performing real-time desensitization processing on the sensitive fields in the corresponding data.

The invention discloses an implementation method for constructing a unified user authentication center based on an OIDC framework, and the method comprises the steps: S1, integrating user data sources, and constructing a unified science and technology management user information base; s2, constructing a unified user authentication center of the science and technology management industry; s3, related functions of each business platform system in the science and technology management industry are upgraded, OIDC unified user authentication service docking is completed, and unified identity management is realized; and S4, system interfaces of all service platforms in the science and technology management industry are comprehensively and jointly debugged, and seamless cooperation of all the service platforms in the science and technology management industry and the OIDC unified user authentication center is ensured. The method has the advantages that the problems of informatization cross-system and cross-platform identity management and authority control in the science and technology management industry are solved, efficient and safe user identity management is realized, the system safety is enhanced, the system convenience is improved, the system integration complexity is reduced, and the informatization system management efficiency is improved.

A computer user is authenticated by collecting user data from at least two dimensions of user activity into a local large language model (LLM) residing on a user device, and generating user authentication questions from at least those two dimensions of user activity using the large language model. Questions having intersecting time or location are discarded, and questions from two or more dimensions are presented to the user for response. The user is authenticated by comparing the user response to known correct answers to the questions.

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a dynamic function menu generation method, device, equipment and medium, which comprises the following steps: acquiring an access request containing equipment type information sent by a user terminal, analyzing an authentication state of a user account and an associated license state, and sending the access request to the user terminal; and generating a dynamic session context defining function access qualification and an interface rendering strategy, loading a function menu strategy model containing function item set and permission mapping, determining a target permission level, matching a target function item subset with a rendering strategy, and generating and sending a function menu instance to the user terminal. The dynamic session context is generated in real time in combination with the user authentication state and the license state, linkage of permission judgment and interface rendering is driven, the function menu has the capacity of dynamic switching according to the session state, menu generation and accurate issuing based on actual authorization and the equipment environment are achieved, and unauthorized access is effectively avoided.

The invention discloses an identity authentication method and system based on a block chain, and particularly relates to the technical field of identity authentication security. Comprising the steps of S01, user login request verification, S02, user identity detection enhancement verification, S03, user identity authentication abnormity control, S04, user access security assessment data acquisition, S05, user access security analysis and S06, user access security assessment. The face recognition confidence, the iris matching degree and the user face video stream are collected on the user login page, the user identity compliance is verified, the safety of identity verification is improved, the authentication accuracy is improved, the safety evaluation data of the authentication server in the block chain network are collected, the user authentication access risk evaluation coefficient is calculated, and the user authentication access risk evaluation efficiency is improved. And the server authentication access risk is monitored, so that the change of the server authentication access risk can be monitored in real time, the occurrence of security events is effectively prevented, and the user information management efficiency is improved.

The invention relates to an electric power mobile application security protection method based on a swan gap microkernel, which comprises the following steps of: S1, establishing a hardware trust root, and storing a device root key and a certificate chain by utilizing a non-tampering storage area built in a chip; s2, establishing a complete trusted boot chain based on a hardware root of trust, and verifying the integrity and credibility of the next layer by each layer from Bootloader to a swan microkernel and then to an application program; s3, constructing a triple authentication system based on user identity, equipment identity and biological characteristics, and performing user authentication; s4, according to a user authentication result, realizing fine-grained authority control based on an RBAC model and ABAC, and ensuring that authority check can be executed during resource access every time by utilizing an IPC security mechanism of a swan micro kernel; and S5, creating an independent execution environment for each power application according to the process isolation capability of the swan microkernel, and ensuring that memories among the applications cannot be mutually accessed through virtual address space isolation. The reliability of power mobile application safety protection is effectively improved.

The invention discloses an intelligent business approval method and system, a storage medium and electronic equipment, and relates to the technical field of business approval, and the system comprises a user authentication module, a business analysis module, a storage module, a business suggestion module and a business decision module. The user authentication module is responsible for verifying the identity of a user and distributing an operation authority, and the user logs in through an account and a password; through intelligent decision making of the business analysis module and the business suggestion module, the system can automatically select the most appropriate approval process according to the business type, the risk level and historical data, the selection of the automatic approval process not only reduces the need of manual intervention, but also greatly improves the approval efficiency, and the approval efficiency is improved. According to the technical scheme, delay and errors in manual auditing are avoided, especially when the first-level service is processed, the system can intelligently distribute the approval task and the approval request, it is ensured that approval of the service is completed within the shortest time, and meanwhile the accuracy and consistency of the approval result are improved.

AI-powered data breach detection and prevention system that includes: a threat monitoring module for continuous analysis of network traffic, system logs and user activities; an AI-powered anomaly detection module that uses machine learning to detect threats, including zero-day attacks and insider threats; a behavioral analysis module that tracks user authentication, access patterns, and privilege escalations; an automated incident response module that isolates threats, blocks unauthorized access, and alerts security teams; a threat intelligence module that integrates global cybersecurity databases for proactive risk mitigation; a multi-layered security system with endpoint protection, encryption and role-based access control; a privacy-preserving mechanism that uses homomorphic encryption and federated learning to protect sensitive data; a compliance and audit module that ensures compliance with cybersecurity regulations.

The invention discloses an AI voice processing method and system based on intelligent equipment, and the method comprises the steps: obtaining the voice information of a user, and extracting the intention of the user through semantic recognition and natural language understanding; user identity verification is completed in combination with the voice information and the intention, a use scene is extracted, and identity information is obtained; performing text analysis based on the intention, the identity information and the scene, generating an operation command, extracting a multi-modal characteristic parameter, and uploading the multi-modal characteristic parameter to an Internet of Things platform; the platform generates an execution instruction by utilizing AI large model reasoning; user confirmation is carried out, and an independent database is established to store multi-modal characteristic parameters; security verification information is generated and sent to the mobile device, security authentication is completed, and a cloud data access address is obtained; and accessing cloud data through the address, obtaining intelligent equipment information, establishing connection with the intelligent equipment, and executing operation. According to the method, the user identity and the use scene can be finely distinguished, so that the recognition and response accuracy of the voice system of the intelligent equipment is improved.

The invention discloses a method for realizing user authentication and nailing notification of a graph database document site, which belongs to the technical field of computer security, and comprises the following steps of: integrating an Oauth2 authentication module into a reverse proxy server, and docking with an identity authentication service; the external request for accessing the graph database document site is redirected to the identity authentication service for user authentication; after the user authentication is passed, the Oauth2 authentication module executes authentication operation; the identity authentication service captures a user registration event in real time, and when the registration event is monitored, user information corresponding to the registration event is extracted; filling a preset notification template according to the user information to obtain a notification message, and pushing the notification message to a management terminal through a configurable message notification interface; and the reverse proxy server dynamically controls the access authority of the user to the content of the graph database document site based on the authentication result. According to the application, user authentication can be carried out on the graph database document site, and meanwhile, an administrator can be notified of a user registration event through the nailing robot Webhook.

Embodiments described herein provide systems and methods for secure and efficient user authentication across a variety of computing devices, such as desktops, laptops, smartphones, and tablets across operating systems such as Windows, MacOS, IOS, Android, and iPadOS. The system incorporates an authenticator application configured to communicate with internal or external user identifier scanners, such as RFID / NFC readers, fingerprint scanners, facial recognition cameras, and QR / Barcode scanners, using transport protocols like USB, BLE, or NFC. The authenticator application serves as a third-party passkey provider by interfacing with platform WebAuthn APIs, enabling WebAuthn-based authentication for native applications, browsers, and services, or alternatively as a browser extension, intercepting WebAuthn API calls directly within a browser environment. An authentication server, accessible over a network, verifies user identities by mapping unique identifiers to stored authenticators and requesting additional authentication factors as needed, such as a security PIN. Upon successful authentication, the server transmits passkeys and a session token to the authenticator application, enabling it to handle further authentication requests locally. The system supports advanced session management for shared device environments, allowing configurable passkey storage with options for one-time, time-based, or shift-based expiration, automatically clearing passkeys upon session completion. This design delivers a versatile, secure, and seamless authentication experience across diverse user environments.

User authentication, spoofing and replay attack prevention, liveness detection, and user-and-document verification using a live video stream with spatial challenges. A camera of an electronic device captures and transmit a live selfie user-facing video, as part of a user registration process. The user is instructed to spatially move his body or face, such that his face would appear within a first particular on-screen shape; and to also, concurrently or simultaneously, spatially hold in his hand or move a particular an identification document such that it would appear within a second on-screen shape. Optionally, the on-screen shape moves on the screen, and the user is required to spatially move the relevant item to keep it within the boundaries of the moving on-screen shape. The system then analyzes the video via computerized vision, to determine whether the user complied with the spatial manipulation challenges.

A decentralized digital identity exchange (IDX) is provided. In response to receiving a request for identity verification of a user, the IDX transmits, to a digital wallet associated with the user, a request for current biometric data. The current biometric data is received from the digital wallet and a biometric liveness check is performed. In response to the biometric liveness check succeeding, the IDX generates a verification transaction ID (VTID) and a verifiable credential for the user. The VTID is a unique identifier that comprises a representation of when the identity of the user was verified by the IDX. The verifiable credential and VTID are transmitted to the digital wallet which sends them to a relying party computing system to verify the identity of the user to the relying party computing system.

In some instances, a method is provided. The method comprises: generating a first subject identifier for the first domain, wherein the first subject identifier comprises a plurality of elements, wherein at least one of the plurality of elements comprises a subject identifier fragment indicating a unique identifier string for the user; based on a second user request to access second content for a second domain from the user device associated with the user, determining whether the user is enrolled into the subject identifier authentication; in response to determining that the user is enrolled into the subject identifier authentication for the first domain, generating a second subject identifier for the user for the second domain based on the subject identifier fragment from the first subject identifier for the first domain; and granting access to the second content for the second domain based on generating the second subject identifier.

The present invention relates to a cybersecurity system for preventing adversarial reconnaissance in cloud, hybrid, and multi-cloud environments by dynamically modifying user authentication identifiers, hostnames and fully qualified domain names. The system updates login usernames in real time using randomized, non-repeating values generated from a configurable dictionary. Updates occur at scheduled, random, coordinated, or event-triggered intervals to disrupt profiling and targeting attempts. When identifiers are changed, associated sessions and tokens are invalidated to prevent reuse. The system monitors expired credential usage to detect potential reconnaissance, generating alerts with intelligence such as IP addresses, timestamps, and affected resources. By eliminating predictable identity patterns, the system defends against reconnaissance-based attacks, unauthorized access attempts, and other credential-driven threats, thereby improving organizational security across cloud platforms.