Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

1910 results about "User authentication" patented technology

User authentication is the verification of an active human-to-machine transfer of credentials required for confirmation of a user’s authenticity; the term contrasts with machine authentication, which involves automated processes that do not require user input.

Internet data security protection method and system based on intelligent algorithm

The invention discloses an internet data security protection method and system based on an intelligent algorithm, and relates to the technical field of security protection. During system operation, user behavior data are collected in real time through log recording, a sensor and an API interface, the real-time operation behavior of a user is monitored, the interaction mode and transaction behavior of the user on a platform are analyzed, and the security of the user is improved. Calculating and acquiring a user behavior safety coefficient Yhxw, a data transmission safety coefficient Sjcs and a risk protection response coefficient Fxfh, identifying potential fraudulent behaviors, performing dynamic risk assessment by combining user historical behaviors, a transaction amount, a geographic position and data of payment equipment, performing threshold comparison to obtain an assessment scheme, and during login and transaction, combining multiple identity verification means to obtain a risk protection result; according to the method, user identity verification is carried out, security of login behaviors is dynamically monitored, network traffic and platform logs are analyzed, abnormal access and malicious requests or DDOS attacks are detected in real time, and abnormal behaviors or attacks are automatically identified and prevented.
Owner:上海笑聘网络科技有限公司

Method, apparatus, and system for enhanced authentication, authorization, and connection management in cellular networks

Enhanced user authentication in cellular networks This invention describes a method, apparatus, and system for authenticating, authorizing, and managing a connection in a cellular system to allow a user to retrieve / send some data, e.g., from / to an application function (AF) or to communicate with another remote user over multiple networks in an optimized / secure manner. The user may have one or multiple devices (UEs) using (e.g., connected to) multiple / different networks, e.g., a device with multiple subscriber identity modules (SIMs) and / or different radio access technologies.
Owner:KONINKLIJKE PHILIPS NV

Identity verification method and device, electronic equipment and storage medium

The embodiment of the invention provides an identity verification method and device, electronic equipment and a storage medium, and belongs to the technical field of financial science and technology. The method comprises the following steps: acquiring multi-modal biological recognition data of a user in a current environment; performing feature extraction on the face image through a convolutional neural network to obtain face features; performing feature extraction on the iris image and the fingerprint information through a support vector machine to generate iris features and fingerprint features; identifying the face posture of the user in the current environment and the environment type of the current environment; adjusting weight values corresponding to the face features, the iris features and the fingerprint features according to the face postures and the environment types; and performing weighted fusion on the face feature, the iris feature and the fingerprint feature according to the weight value, and generating an identity verification result of the corresponding user in the current environment. According to the embodiment of the invention, the security and accuracy of user identity verification can be improved, and identity verification can be intelligently and accurately carried out on users in different complex environments in a financial scene.
Owner:PING AN BANK CO LTD

Computer network security monitoring system and method

The invention discloses a computer network security monitoring system and method. The system comprises a quantum encryption traffic acquisition module, a biological recognition feature extraction module, a block chain detection traceability analysis module and a visual management module. The quantum encryption flow collection module generates and distributes a secure quantum key through a quantum key distribution unit, encrypts a collected data packet through an encryption transmission unit, and generates a flow data segment through a flow collection subunit and a data cache statistical analysis subunit. The biological recognition feature extraction module verifies the identity of a user through a biological recognition unit, and extracts a multi-dimensional feature vector by using a feature extraction subunit. And the block chain detection traceability analysis module performs detection and traceability analysis on the abnormal traffic through the anomaly detection subunit and the traceability analysis subunit, and stores a result in the block chain storage unit. The visual management module provides visual network state display and user identity verification functions through a visual display subunit and an identity verification and access control subunit. According to the invention, quantum encryption, biological recognition and block chain technologies are combined, so that the accuracy, security and traceability of network security monitoring are improved.
Owner:BEIJING YUHONG XINAN TECHNOLOGY CO LTD

Computer network big data security protection method and system

The invention relates to the field of industrial internet intrusion prevention, in particular to a computer network big data security protection method and system, and the method comprises the following steps: monitoring network flow, collecting user identity, equipment security state, access time and network behavior data, and generating a network behavior record. In the invention, a dynamic security assessment system is constructed through network flow monitoring, identity verification and behavior analysis, and compared with static strategy or fixed rule matching, the dynamic security assessment system can adapt to a continuously changing network attack environment. Authority dynamic adjustment is performed based on the user identity verification state, flexible management and control of the access authority are ensured, and the problem of long-term high authority abuse is avoided. Threat detection not only depends on historical mode matching, but also is combined with real-time behavior analysis, and accurate isolation is executed for potential threats, so that protection measures are changed from passive response to active intervention, and the delay of manual intervention is reduced.
Owner:RUIDA TRUSTED SECURITY TECH (GUANGZHOU) CO LTD

Cross-platform chatbot user authentication for chat history recovery

An embodiment for improved authentication of chatbot users for chat history recovery. The embodiment may record a first chat conversation between a first chat service operator and a first user, wherein the first chat conversation includes a first-step authentication and a chat history. The embodiment may detect a request to resume the first chat conversation. The embodiment may, in response to detecting the request to resume the first chat conversation, initiate a recovery process by sending a random-generated token to the first-step authentication. The embodiment may receive verification of the random-generated token. The embodiment may generate, by a large language model, one or more authentication questions based on content of the chat history. The embodiment may authenticate the first user based on one or more correct answers to the one or more authentication questions. The embodiment may resume the first chat conversation including the chat history.
Owner:INTERNATIONAL BUSINESS MACHINE CORPORATION

Automatic user authentication with proxy servers

A system and method for implementing a non-interactive and automatic way of facilitating user authentication with a proxy server is disclosed. At least, the technique disclosed includes determining a request to access a web server by a Hypertext Transfer Protocol (HTTP) agent on a client device, retrieving a proxy configuration file from a Uniform Resource Locator (URL) assigned to the client device, determining, using the proxy configuration file, a host name and a port number of a proxy server corresponding to the request, and routing, from the HTTP agent to the proxy server, the request using the host name and the port number of the proxy server, the proxy server configured to look up a user mapping table using a set of proxy connection information and uniquely identify a user of the client device based on the look up, the set of proxy connection information including a combination of a public Internet Protocol (IP) address of the client device, the host name of the proxy server, and the port number of the proxy server.
Owner:DLD TECH CORP

System and method for pre-registration of FIDO authenticators

A system, apparatus, method, and machine-readable medium are described for personalizing and pre-registering an authenticator. For example, one embodiment of a method comprising: confirming an identity of a user by a relying party using a first identity verification technique responsive to the user performing a first transaction with the relying party; generating or collecting initial user verification reference data upon verification of the identity of the user through the first identity verification technique; requesting personalization of an authenticator to be provided to the user; receiving credential registration data of the authenticator after personalization; receiving a transaction request from the user that requires user authentication; and authenticating the user based on the authenticator and the credential registration data of the authenticator using a second identity verification technique.
Owner:NOK NOK LABS INC

A method and system for managing a connection in cellular networks

This invention describes apparatuses / methods for enhanced user authentication in cellular networks wherein the apparatus / method checks for a preferred authentication procedure, performs the preferred authentication procedure with a core network, and sets up a connection. Thereby, authentication challenges (such as retrieving core network data, optimizing resources and strength of authentication) arising from users of one or more devices (e.g., UEs) using multiple / different networks, (e.g., with multiple subscriber identity modules and / or different radio access technologies), avatar-based communication and / or biometrics (e.g., by means of embedded sensors or wireless sensing) can be addressed.
Owner:KONINKLIJKE PHILIPS NV

Electricity larceny prevention detection alarm method and device, electronic equipment and medium

The invention provides an electricity larceny prevention detection alarm method and device, electronic equipment and a medium, and relates to the technical field of power system monitoring, and the method comprises the steps: collecting the power utilization data of a target user through an intelligent electric meter, and building a historical power utilization data set; after obtaining a target user authentication result, performing multi-granularity feature extraction on the historical power consumption data set to generate a feature extraction result; behavior abnormity is judged based on the extraction result through the real-time monitoring data set, and a first abnormity score is established; performing transverse anomaly verification by combining the joint similarity factor with the real-time power consumption data of the joint user, and establishing a second anomaly score; establishing a joint verification feature set to discriminate anomaly, and generating a third anomaly score; and matching alarm levels according to the three types of abnormal scores, and executing alarm management. The technical problems of low electricity stealing detection accuracy and poor real-time performance caused by insufficient electricity stealing behavior detection sensitivity and single feature extraction of an existing power system under the interference of factors such as complex and changeable user electricity consumption behaviors, environment and time periods are solved.
Owner:国网安徽省电力有限公司营销服务中心 +1

Multi-factor authentication trusted data space access control method, platform and medium

The invention discloses a multi-factor authentication trusted data space access control method, platform and medium, and relates to the technical field of data security, the method comprises the following steps: analyzing the authority, record, path and target of a request access user, and obtaining access parameters; generating a verification gradient based on the security levels of parameter matching permissions, records, paths and targets; in combination with the gradient and the user authentication record, creating an authentication demand factor with gradient constraint; and generating a space access permission according to the authentication result, and controlling the trusted data access permission. According to the scheme, the data security protection capability is enhanced through a dynamic multi-factor verification mechanism. According to the method and the device, the technical problem of insufficient data security protection capability caused by lack of a multi-factor dynamic authentication and fine-grained access control mechanism in a data space access process in the prior art is solved; the technical effects that the access authority is dynamically adjusted based on multi-factor authentication, and the data security and credibility in the data space access process are effectively improved are achieved.
Owner:LINGSHU TECH CO LTD

Zero-trust virtual desktop infrastructure authentication

Various examples are disclosed for a zero-trust authentication model for virtual desktop infrastructure (VDI) sessions. Upon user authentication of a VDI session, security posture assessments can be performed that analyze an ongoing or continuous state of the user, client device, or network conditions. Remedial measures or mitigation procedures can be performed to address potential non-compliance of the VDI session.
Owner:OMNISSA LLC

Systems, methods, and apparatuses for identifying unauthorized use of a user's authentication credentials to an electronic network based on non-public data access

Systems, computer program products, and methods are described herein for identifying unauthorized use of a user's authentication credentials to an electronic network based on non-public data access. The present invention is configured to receive a verified access attempt at a first time for a user account; receive an unverified access attempt at a second time for the user account; determine the unverified access attempt is a credential sharing event for the user account; determine the user account is an internal account; determine an unverified user associated with the unverified access attempt is an external user; receive unverified account access logs associated with the unverified access attempt, the unverified account access logs comprising access to non-public data; and generate an unverified data access interface component to configure a graphical user interface of a device associated with a manager of the system.
Owner:BANK OF AMERICA CORP

System and Method for AI-Based Digital Identity Verification Field of Disclosure

A system for an automated real-time digital identity verification based on predictive analytics of user identity data, including a processor of a digital identity verification (DIV) node configured to host a machine learning (ML) module and connected to at least one verifier entity node over a network and a memory on which are stored machine-readable instructions that when executed by the processor, cause the processor to: acquire an identity verification request associated with a user from the at least one verifier entity node, wherein the identity verification request comprising user biographic data and a truncated facial biometric hash extracted from a digital identity feature embedded into an identification document of the user and user biographic data acquired from the identification document and a facial biometric hash generated from the user identification document; parse the identity verification request to derive a plurality of key features; generate at least one feature vector based on the plurality of the key features; and provide the at least one feature vector to the ML module configured to execute a predictive model based on underlying neural network configured to produce at least one user identity verification parameter for generation of a user identity verification verdict.
Owner:PARTHE RAHUL +3

Identity certificate generation method, non-inductive identity authentication method and computer device

The invention discloses an identity credential generation method, a non-inductive identity authentication method and a computer device. The non-inductive identity authentication method comprises the following steps: analyzing a user identity authentication request to obtain a current authentication demand, and extracting corresponding attribute information and information related to anonymous certification of an issuer from an obtained identity certificate corresponding to a user; determining the type of each piece of attribute information, and calling a corresponding verification node to verify the corresponding attribute information according to the type to obtain a first verification result; verifying information related to the anonymous certification of the issuer to obtain a second verification result; obtaining a Merkle proof corresponding to the identity certificate proof from a preset verifiable certificate list, and verifying the Merkle proof to obtain a third verification result; and when the first verification result, the second verification result and the third verification result all meet the requirements, confirming that the user identity verification is passed. The method is simple and safe, and has strong uniqueness, secrecy and flexibility.
Owner:BEIJING VRV SOFTWARE CO LTD

Unmanned aerial vehicle intrusion detection system based on personnel intrusion alarm

The invention relates to the technical field of unmanned aerial vehicle intrusion detection, in particular to an unmanned aerial vehicle intrusion detection system based on personnel intrusion alarm, which comprises a user authentication module, an area setting module, an unmanned aerial vehicle control module, a shooting control module, an intrusion trend judgment module, an intrusion identification module, a display terminal, a server and a cloud database. According to the invention, a user can flexibly set a monitoring area after authentication, generates an unmanned aerial vehicle control signal, dispatches an unmanned aerial vehicle in a target aircraft nest base station, accurately determines a dispatchable unmanned aerial vehicle, inputs task data information to the dispatchable unmanned aerial vehicle, photographs personnel in the monitoring area through the dispatchable unmanned aerial vehicle, generates an image set, and sends the image set to the target aircraft nest base station. And then an intrusion trend value is calculated according to the image sets to determine whether a face recognition instruction is triggered or not, and identity recognition judgment is performed according to the face recognition instruction to determine whether an alarm signal is generated or not, so that omnibearing and high-efficiency monitoring of a monitoring area is realized, and the accuracy and reliability of safety monitoring are remarkably improved.
Owner:ZHONGHUAN GUOXIN (XINJIANG) DIGITAL TECHNOLOGY CO LTD

Multi-role grading access control method, system and device for segment sliding electric door

The invention discloses a multi-role grading access control method, system and device for a segment sliding electric door, and relates to the technical field of access control. The multi-role hierarchical access control method, system and device for the segment sliding electric door comprises the following steps: S1, collecting user access control data in the user identity verification and passing operation process, and carrying out data cleaning and normalization processing on the user access control data; s2, slicing the user behavior data in different time periods, extracting statistical characteristics, identifying abnormal modes, and carrying out quantitative analysis on the behavior state of the user; s3, collecting access control data in real time to construct a behavior sequence, evaluating the risk fluctuation amplitude and trend, judging the risk level and carrying out risk response; and S4, carrying out quantitative evaluation on risk response effects in different operation periods, dynamically adjusting safety response measures and regularly generating strategy optimization suggestions. The problem that in the prior art, traffic abnormal behaviors cannot be effectively recognized, and consequently a safety blind area exists is solved.
Owner:WUXI JIANGUO INTELLIGENT TECH CO LTD

Biometrically controlled handheld oral medication dispensing device

The present disclosure provides a biometrically controlled handheld medication dispensing device. The device includes a housing containing a cartridge carrier, designed with a specific connector to align with a medication cartridge. Notably, the device also includes a biometric authentication component that works in conjunction with an activator mechanism. When operated and upon user authentication, the activator mechanism causes the cartridge carrier to move the medication cartridge between a stored position and a dispensing position, where it can be compressed to safely and efficiently dispense medication to a user.
Owner:ASPARGO LABS INC

Dual embedding index system for identify verification

Described is a system for identity fraud detection by receiving an image of a user for an identity verification process of the user; generating a vector embedding for a face within the image using a machine learning model, comparing the vector embedding with at least two embedding repositories to determine a likelihood of fraud by: comparing the vector embedding with a first index of embeddings, the first index being updated at a first time interval; comparing the vector embedding with a second index of embeddings, the second index being updated at a second time interval, the first index and second index having at least a subset of the same points in the multidimensional space; and determining a characteristic of potential fraud based on the comparison of the vector embeddings with the first index and second index; and outputting an identity verification result based on the likelihood of fraud.
Owner:RARITEX TRADE LTD

Metacosm cross-scene anonymous seamless identity authentication method based on double block chains

The invention provides a meta-universe cross-scene anonymous seamless identity authentication method based on double block chains. The meta-universe cross-scene anonymous seamless identity authentication method comprises an initialization stage, a scene server registration stage, a user registration stage, a stage that a user logs in and creates an avatar in a scene server, and a user cross-scene server authentication stage. The server is set for different application scenes, the load of the server is reduced, and a user can experience various scenes without changing equipment. A fuzzy extractor and block chains are adopted to protect privacy information such as biological information and avatars of a user, meanwhile, a double-block-chain mode is adopted, authentication information of a server and the user is stored on an authentication data chain, the user moves in different services, an interaction data chain stores avatar data of the user in a multi-scene server, and the user experience is improved. And the data consistency is realized. The double block chains realize isolation of user real data and virtual data in the meta universe, privacy data of the user is effectively protected, the user does not need to input information again for login, and seamless authentication is realized.
Owner:NANJING UNIV OF INFORMATION SCI & TECH

Work plan and task management system

The invention provides a work plan and task management system, which belongs to the technical field of work plan tasks and comprises a portal layer, an application program interface gateway layer, a business service layer, a public service layer and a data layer. And the application program interface gateway layer realizes intelligent management of the interface through a self-adaptive division module, wherein the intelligent management comprises dependency analysis, granularity calculation, aggregation optimization and recombination execution. The business service layer focuses on work plans and task management, and realizes collaboration through flexible interface interaction. The public service layer provides basic support for user authentication, log recording, message queue, service registration, configuration management and the like. And the data layer adopts a diversified storage strategy, integrates a relational database, a cache database, a time sequence database and distributed file storage, and meets data processing requirements of different scenes. The problem that in the prior art, interface definition and calling relations between micro-services are difficult to manage in a self-adaptive mode is solved.
Owner:CHINA CONSTRUCTION INDUSTRIAL & ENERGY ENGINEERING GROUP CO LTD

Cross-border data multi-terminal display interaction system based on digital cockpit and interaction method thereof

The invention provides a cross-border data multi-terminal display interaction system based on a digital cockpit and an interaction method thereof. The cross-border data multi-terminal display interaction system comprises a data acquisition module, a data transmission module, a data storage module, a data processing module, a data display interaction module, a user authentication and authority management module, a data sharing and collaboration module and the like. The data acquisition module acquires and preprocesses data from a cross-border multivariate data source; the transmission module adopts a security protocol to guarantee secure transmission of data and can monitor the link state; the storage module constructs a distributed system to store data, and can perform classified management and backup recovery; the processing module processes data by using a big data technology; the display interaction module provides a multi-terminal adaptation interface, a rich visual component and an interaction function; the user authentication and authority management module ensures safe access of data; and the data sharing and cooperation module supports real-time synchronization and conflict processing. Through a CBMTIA algorithm, the system realizes data acquisition integration and preprocessing, encryption security transmission, intelligent terminal identification adaptation, data synchronization and consistency maintenance.
Owner:CHINA THREE GORGES INT CO LTD

System and method for streamlined user authentication on a server using a securely stored client identifier

A system and method provide streamlined restricted access to a secure server through a communications network. A client identifier parameter value is established and uniquely associated with a user registering with an authentication server, and is stored in at least first and second predetermined storage forms within a data storage system, the first form readable exclusively by a client device of the user and the second form readable by the authentication server. The client device then authenticates by retrieving the client identifier parameter value from the data storage system and providing it to the authentication server, which independently retrieves the client identifier parameter value from the data storage system for comparison, and initiates an interactive communication session between the client device and the secure server responsive to the comparison. Between comparisons, the client identifier parameter values are stored exclusively on the data storage system and deleted from all other devices.
Owner:DG VENTURES LLC

Screen interaction method and system based on face recognition

The invention provides a screen interaction method and system based on face recognition, and the method comprises the steps: obtaining a face image sequence triggered by a target user in a screen interaction scene, carrying out the matching of a target interaction mode from a preset interaction mode library according to the face dynamic behavior characteristics, and carrying out the matching of a target interaction mode based on the coordinates of a screen fixation region and the target interaction mode. Generating dynamic interaction content corresponding to the sight focus of the user, calling a pre-trained facial feature fusion model, performing multi-level feature extraction on a facial region in the facial image sequence, generating a user identity verification vector and an emotional state vector, and performing real-time adjustment on presentation parameters of the dynamic interaction content based on the multi-level feature extraction. And outputting the adjusted screen interaction signal. According to the invention, the user experience can be optimized while the interaction efficiency is improved.
Owner:CHINA GUANGSHEN OPTOELECTRONICS (SHENZHEN) CO LTD

E-commerce transaction behavior risk management method and storage medium

The invention relates to the field of risk management of e-commerce transaction behaviors, in particular to an e-commerce transaction behavior risk management method and a storage medium. The method comprises the following steps: collecting transaction data, analyzing the transaction data by using a transaction behavior analysis model based on a deep residual network (ResNet) and an attention mechanism, and identifying an abnormal transaction mode; in combination with a natural language processing (NLP) technology, performing sentiment analysis on user comments, social media and news, and predicting a transaction risk; an analysis result is input into a smart contract based on the block chain, a transaction rule is automatically executed, and transaction transparency and security are improved; a distributed account book technology of a block chain is utilized to ensure that transaction records cannot be tampered, and data security is enhanced; and a multi-mode biological recognition technology is adopted, so that the accuracy and safety of user identity verification are improved.
Owner:GUANGDONG CHAOYANG FULL NETCOM TECH CO LTD

Block chain-based identity authentication privacy protection mechanism research system and method

The invention relates to the technical field of electronic information, and discloses a block chain-based identity authentication privacy protection mechanism research system, which comprises a digital identity management module, an identity agent mechanism, a user authentication module, an application service module, a block chain and an interstellar file system, the digital identity management module is used for deploying an intelligent contract on a block chain, defining and publishing public parameters such as a system attribute set N, and providing services during user access; the identity agency is used for acquiring encrypted data on a block chain through a DI D registered by a user, access control and privacy protection of user identity information data are realized in an identity authentication process by using the block chain, a distributed digital identity, CP-ABE and an intelligent contract technology, and the block chain and the I PFS have distributed characteristics, so that the access control and privacy protection of the user identity information data are realized. And when part of nodes fail, the whole scheme is not influenced, so that the problem of single-point failure is solved.
Owner:ZHENGZHOU UNIV

Electric vehicle interconnection, intercommunication and sharing charging operation method and device and storage medium

The invention relates to the field of new energy automobile power supply, and provides an electric automobile interconnection sharing charging operation method and device and a storage medium, the method comprises the following steps: realizing heterogeneous system interconnection of a multi-source charging platform and a supervision platform through a standardized interface protocol, and establishing a cross-platform data channel; a dynamic user authentication system is constructed based on a cross-platform data channel, user registration and authority distribution of the electric vehicle are completed in a multi-mode identity authentication mode to obtain a user authority level, and an authentication result is fed back to the supervision platform; performing intelligent charging pile matching based on the real-time multi-dimensional charging resource atlas according to the user permission level, and generating a dynamic service instruction containing a navigation path and charging parameters; and in a charging service execution process, a bidirectional supervision data flow is created through a cross-platform data channel, full-life-cycle supervision of the charging process is executed in real time, and a service strategy is dynamically adjusted based on a feedback instruction of a supervision platform. According to the technical scheme, the electric vehicle can be cooperatively charged.
Owner:深圳市友电物联科技有限公司

An AI-powered system for personalized financial advisory chatbots using LLMs and real-time data integration

An AI-driven system (100) for a personalized chatbot for financial advice using LLMS and real-time data integration, comprising the following: a chatbot module based on a large language model (LLM) that is configured to process user requests and generate personalized financial recommendations by using natural language understanding and historical data patterns; a real-time data processing module configured to retrieve and process financial data from stock exchanges, banking systems, government economic reports and financial news sources, continuously updating relevant financial information such as stock prices, interest rates and economic indicators; a risk assessment module configured to analyze a user's financial profile, including their risk tolerance, investment history and financial objectives, to ensure regulatory compliance and the suitability of investment recommendations in accordance with relevant financial regulations; an adaptive module based on machine learning that is configured to refine and optimize financial recommendations based on user interactions, financial trends, historical data and evolving market conditions, learning from past user behavior and adapting to changing market dynamics; a natural language processing module that facilitates interactive interaction with the user through text, speech, and graphical financial reports, thus enabling multimodal interaction to improve user experience and understanding of complex financial information; a proactive warning module configured to inform users about investment opportunities, market risks, and necessary portfolio adjustments based on real-time market data, trend analyses, and predictive models; a security and compliance module that ensures encrypted data transmission, user authentication and compliance with financial data protection regulations, including the secure storage of sensitive financial data and adherence to industry standards such as GDPR and PCI-DSS.
Owner:VARDHINEEDI PADMA NARESH ODESSA

Systems and methods for user authentication on shared mobile devices

Systems and methods for secure and efficient user authentication on shared mobile devices, such as smartphones and tablets. This solution leverages the capabilities of RFID / NFC cards, access cards, and biometric sensors to establish seamless and personalized user authentication. An authenticator application communicates with a remote authentication service to either register passkeys locally for platform-wide use or forward authentication requests for remote processing, depending on configuration. The authenticator application orchestrates communication between the user, mobile device, and authentication service, creating a secure framework for various applications. Upon successful authentication, the system transforms the mobile device into a platform authenticator, making passkeys available across native apps and browsers. This system enhances security by integrating user identifiers with hosted authenticators that are securely managed by the authentication service. By tapping NFC-enabled cards or utilizing a bridge device for data extraction, users can seamlessly engage with the shared mobile device environment, benefitting from robust security measures associated with FIDO authentication. The system encompasses the bridge device, which serves as an intermediary for data transmission, efficiently communicating between RFID / NFC devices and mobile devices using Bluetooth Low Energy (BLE) technology. Biometric authentication operates similarly to RFID / NFC-based methods, where user identity is verified through an authentication service, and passkey support is provided for that specific user. The authentication service hosts user authenticators and passkeys in a secure, transportable format, configurable to be fetched to shared mobile devices or handled remotely. This system allows adaptable FIDO2 / WebAuthn security protocols across multiple devices, enhancing user convenience while ensuring system integrity and security in shared device scenarios.
Owner:IDMELON TECH INC

Identity authentication and control method and device based on block chain

The invention discloses an identity authentication and control method and device based on a block chain. According to the method, biological features are collected through edge nodes to generate feature vectors, a combined hash value is generated in combination with a device scene label and a service role label, the combined hash value is uploaded to a cloud server after encrypted signature, and the combined hash value is written into a block chain through an intelligent contract; and during user authentication, the edge node calculates a real-time risk level, dynamically selects an authentication mode, calls an intelligent contract for verification after verification of the cloud server, and adjusts the risk level according to a verification result to implement management and control. According to the method, the edge cloud collaborative architecture is adopted, and the dynamic multi-factor authentication mechanism and the block chain consensus technology are combined, so that high-security privacy protection authentication is realized, the security requirements of different service scenes can be met, data leakage and replay attacks are effectively prevented, and the authentication efficiency and reliability are improved.
Owner:BEIJING BOSHI YUANXIN TECH CO LTD