122results about "Digital data authentication" patented technology

Access to a privileged account is managed by first requiring authentication of a user logging into the account and then performing a policy evaluation to determine whether the identified user is allowed to log in using the privileged identity. Preferably, the authentication is a two factor authentication. The policy evaluation preferably enforces a policy, such as a role-based access control, and a context-based access control, a combination of such access controls, or the like. Thus, according to this approach, the entity is provided access to the privileged account if the user's identity is verified and a policy is met. In the alternative, the entity is denied access to the privileged account if either the authentication fails, or (assuming authentication does not fail) policy criteria for the user is not met.

An apparatus and method are disclosed for variable authentication requirements. The apparatus includes an operating status module identifying a change in an operating status of a device and maintaining a history of operating statuses, and an access control module comparing a current operating status with a previous operating status. The apparatus also includes a profile module maintaining a trust indicator for each operating status. The access control module determines a level of authentication required to unlock the device in response to the trust indicator associated with the current operating status. The method includes identifying a change in an operating status of a device and maintaining a history of operating statuses, and comparing a current operating status with a previous operating status. The method also includes maintaining a trust indicator for each operating status, and determining a level of authentication required to unlock the device in response to the trust indicator associated with the current operating status.

A method of managing an access right to at least one asset associated with at least one digital work order, to at least one first element associated with the at least one asset, or to at least one second element associated with an access path to the at least one asset or the first element, and relates to a system and a computer program for the same.

The invention is suitable for the technical field of communication, and provides an identity recognition method. The method comprises the following steps of: storing the original fingerprint information of a user; randomly sending a random fingerprint verification instruction after receiving an identity recognition request of the user; acquiring fingerprint information input by the user according to the random fingerprint verification instruction; and judging whether the fingerprint information input by the user is matched with the random fingerprint verification instruction and the original fingerprint information simultaneously, if so, indicating that identity recognition is successful, and otherwise, indicating that identity recognition fails. Correspondingly, the invention also provides an identity recognition system and an identity recognition terminal. Therefore, a safer and more reliable identity recognition technology can be provided, and the implementation mode is simpler.

The invention provides a method for unlocking and a device for unlocking, wherein the method for unlocking comprises the following steps: presetting an original code and storing it. When a device enters a to-be-unlocked state, displaying a dynamic keyboard with changed key position distribution at random on a touch screen; automatically drawing a picture as an unlocking code this time according to the original code and the current displayed dynamic keyboard; after the device enters the to-be-unlocked state, detecting the picture drawn on the touch screen through touching in real time; when the picture drawn on the touch screen by touching is detected, judging if the detected picture at present is matched with the picture of the unlock code this time; if matched, unlocking the touch screen. The original code is transformed to be the unlocked picture; in the process of unlocking, a user can unlock only by drawing the unlocking picture according to the key position of the current dynamic keyboard distributed at any one position on the touch screen; thus the risk of original code leakage is greatly reduced, the safety is improved; moreover, the user can conveniently operate the method and the device.

This invention relates to computer science information technique, mobile communication, software and hardware technique of mobile phone, Internet application/ID validation, network security, and computer network principle and application. In e-bank, on-line pay and on-line work, to prevent stealing user name and password as well as the alternative attack, the USB Key and other techniques have more or less defect; This invention stores user security data (key and certificate) in mobile phone, applies phone calculation and communication ability to expands user and PC security performance as well as the security of PC access to application system.

An electronic device is provided. The electronic device includes a first memory unit for storing a non-payment application, a first processor, a fingerprint sensing unit and a security element including a second memory unit and a second processor. The second memory unit stores a payment application and user fingerprint information. When the second processor executes the payment application, the fingerprint sensing unit captures a fingerprint image of a user's finger and the second processor transmits the fingerprint image to the first processor via a secure channel. The first processor calculates biometric characteristics of the fingerprint image to generate to-be-recognized fingerprint information which is transmitted to the second processor via the secure channel. When the second processor determines that the to-be-recognized fingerprint information matches the user fingerprint information, the second processor generates an authentication signal for a payment transaction.

The invention relate to an electronic device having a fingerprint identification system and a method of application thereof. The electronic device comprises a central processing unit which is respectively connected with a first memory unit and an input unit and used for controlling the operation of the electronic device; and a fingerprint sensing unit and a second memory unit, wherein the fingerprint sensing unit is used for scanning user's fingerprint, and the second memory unit is used for storing fingerprint identification images set by a user. Through the coordination of the device, a fingerprint image processing program and a fingerprint image identification program in advance stored in the electronic device are started, wherein the fingerprint image processing program is used for encrypting the fingerprint images scanned by the fingerprint sensing unit, or decrypting the encrypted fingerprint images read from the second memory unit, and the fingerprint image identification program is used for comparing the fingerprint images scanned by the fingerprint sensing unit and the preset decrypted fingerprint images, so as to determine whether the user is a legal user.

The present invention generally relates to a method for authenticating a user of an electronic device comprising a fingerprint sensor and a force sensor, the method comprising: retrieving a stored plurality of fingerprint enrolment templates comprising an enrolment representation of at least part of a user's finger and a corresponding enrolment force parameter, acquiring a first verification image of an object and determining a first verification representation, determining a first verification force parameter, performing a fingerprint authentication procedure based on the first verification template and the plurality of fingerprint enrolment templates, wherein when the first verification representation and the first verification force parameter comprised in the first verification template matches each of the enrolment representation and the enrolment force parameter comprised in the same fingerprint enrolment template providing a signal indicating successful authentication of the user. The invention also relates to a fingerprint sensing system and an electronic device.

The invention discloses an after-password-input prompt method which comprises the steps that password verifying is carried out after a user inputs a password; whether the input password is the same as a current password is judged; if the input password is not the same as the current password, whether the input password is an old password is further judged; if the input password is the old password, the user are reminded of the fact that the password input by the user is the old password and the corresponding modifying time of the old password. The invention further discloses a password modifying method, after-password-input electronic equipment with a prompt function and electronic equipment with a password modifying function. Accurate password inputting efficiency by the user can be improved.

An authentication method and an electronic device, the method including receiving a touch operation on an icon of a first application, collecting a biological feature of a user in response to the touch operation, comparing the collected biological feature with a biological feature bound to the first application, where the first application is bound to at least one biological feature, each biological feature is bound to a user account of the first application, each user account is corresponding to a resource directory, when the comparison result indicates that the collected biological feature matches a first biological feature of the at least one biological feature, determining a first user account bound to the first biological feature, and logging in to the first application based on the first user account, and loading information stored in a first resource directory corresponding to the first user account.

A method of managing a file of a subscriber authenticating module embedded in a terminal device and a module for authenticating a subscriber by using the method. The method of managing the file includes configuring a file structure for one or more profiles and managing one or more files included in the file structure in response to a request. Thus, the method is efficient for a multiple-profile environment.

It is a software administrator unlocking password solution. In the software of the only identification code, using administrator password to control using right, and administrator password having the control of the errors number, it solves the restoration of normal use after administrator password locked by using specific software, specific time slots for effective software administrator.

The embodiment of the invention discloses a program protection method and device. The method comprises the following steps of encryption at a program generation stage: acquiring a first secrete key; acquiring a second secrete key and a mark of a designated category; encrypting the designated category by utilizing the second secrete key; encrypting the attribute information of the second secrete key by utilizing a public key of the first secrete key; decryption at a program running stage: decrypting encrypted data of the attribute information of the second secrete key by utilizing a private key of the first secrete key; judging whether the to-be-loaded category belongs to the designated category or not according to the mark of the designated category, and decrypting the to-be-loaded category by utilizing the second secrete key if the to-be-loaded category belongs to the designated category. The first secrete key and the second secrete key are used for doubly encrypting the program, so that the source code of the program can be effectively protected; meanwhile, the program is also distinguished, and only the designated category is encrypted, so that the encryption and decryption efficiency can be improved; moreover, the mark of the encrypted category is further encrypted and protected by the second secrete key, so that the safety of the program is further protected.

The invention is applied to the technical field of a mobile terminal, and provides a safety control method and a safety control system of the mobile terminal. The method comprises the following steps of: starting the system, locking the system after a mobile terminal system starts, detecting whether an accessed user identification card is effective or not, and unlocking the system when the accessed user identification card is effective; running the system, detecting whether an encrypted system image file exists or not if system refreshing operation is performed during running of the system, and performing system refreshing operation after unlocking the system image file when the encrypted system image file exists; and displaying a password input interface if system application software installation operation is performed, verifying an input password, and installing application software if the verification is passed. By the safety control method and the safety control system, the safety and the controllability of the mobile terminal system can be effectively improved.

The invention discloses an authority configuring method of a system. The method includes: acquiring all system operation authority, and establishing a system operation authority library; acquiring login information of a user; acquiring a user layer level of the user according to the login information of the user; carrying out matching on all the system operation authority in the system operation authority library according to the user layer level of the user; and assigning corresponding system operation authority to the user according to a matching result. The invention also provides an application server and a computer-readable storage medium. According to the authority configuring method of the system, the application server and the computer-readable storage medium provided by the invention, flexible configuring of the user authority is realized through directly connecting the user layer level and the corresponding system operation authority, and a requirement of obtaining the multiple types of system operation authority by the same user can be satisfied.

The invention provides a hand gesture recognition method and device, belongs to the technical field of hand gesture recognition, and can solve the problems of low operation precision and poor capacity of resisting disturbance of the existing hand gesture recognition method and device. The hand gesture recognition method comprises the following steps: a fingerprint acquisition step, a target operator locking step and a target operator hand gesture information processing step. The hand gesture recognition method effectively eliminates the disturbance of other object motion by locking a target operator. The hand gesture recognition device can accurately recognize hand gesture information through an introduced high-precision fingerprint acquisition device, so as to realize the high-precision operation of the operator.

An information processing apparatus stores, as user information of a user capable of logging into the information processing apparatus, first user information of a user having particular authority and second user information of a user having no particular authority. The information processing apparatus displays a list of, from the stored user information, user information that includes the second user information and no first user information. Then, the information processing apparatus performs a login process enabling a user corresponding to user information selected from the list to log into the information processing apparatus.

An authentication device may include a housing and a finger sensor carried by the housing and including first processing circuitry and a finger sensing area coupled thereto. The first processing circuitry may be configured to generate finger image data based upon a finger positioned adjacent the finger sensing area, and generate and store a first template based upon the finger image data. The authentication device may include second processing circuitry carried by the housing and configured to obtain the finger image data from the first processing circuitry. The second processing circuitry may be configured to generate a second template based upon the finger image data. The first processing circuitry may further be configured to obtain the second template from second processing circuitry, and validate the second template against the first template.

The invention discloses a display method and device of a push message and a terminal, and relates to the field of intelligent terminals. The method comprises the steps that when an application program operates on a foreground, the push message is received, fingerprint information on a fingerprint recognition module is obtained, whether the fingerprint information associates with the application program or not is determined, when it is determined that the fingerprint information associates with the application program, a message display window is popped up on the upper layer of an operation window of the application program, and the message display window is used for displaying the push message. Through the adoption of the technical scheme, when the application program operates on the foreground, the push message is displayed in a fingerprint recognition mode, push message display and fingerprint recognition are combined, the more convenient display method of the push message is provided, and the technical problem that push message display in the prior art is inconvenient is solved.

An automated transaction device and an automated transaction system avoiding the misbehaviors while registering the organism information for the personal authentication are provided. In the automated transaction system, the network can connect the customer terminal of the customer operation in communicating way and the central terminal of the operation by the operator. The hand side facial photography portion shoots the face and hand side of the customer while obtaining the organism data and the operating the customer terminal. In addition, while obtaining the organism data in order to process the personal authentication, the invention also shoots the face and hand side of the customer. Then the characteristic comparing portion obtains the organism data to confirm whether the picked customer hand side characteristic is accordant; if the customer hand side characteristic is not accordant, the central operator uses the central terminal to compare the faces of the customers of the organism data; if the situation can not be confirmed, the situation is set as no transaction to avoid the misbehaviors.

The embodiment of the invention discloses a freezing method of an application program. The freezing method is used for freezing background operating programs which do not accord with security specifications. The method provided by the embodiment of the invention comprises: acquiring current behavior data of each operating program in the background operating programs; determining target operating programs with the behavior data which does not accord with pre-set security conditions from the background operating programs; freezing the target operating programs. The embodiment of the invention further provides a terminal, and the terminal can be used for freezing the background operation programs which do not accord with the security specifications, so that a phenomenon that illegal behaviors including privacy information leakage and the like, which are not good for users, is prevented from occurring.

The invention discloses an identity identification method and an identity identification system based on electrocardiosignals. The method comprises steps that, to-be-identified heart beat characteristics of electrocardiosignals of a to-be-identified user are extracted; a preset class group classifier is utilized to classify the to-be-identified heart beat characteristics, and class groups of the to-be-identified heart beat characteristics are determined; similarity between heart beat templates in a template database of the class groups of the to-be-identified heart beat characteristics and the to-be-identified heart beat characteristics is calculated, and a user corresponding to the heart beat template having the largest similarity with the to-be-identified heart beat characteristics is determined to be the to-be-identified user. As the heart beat templates in the template database of the class groups of the to-be-identified heart beat characteristics are only a part of heart beat templates in a template database of various class groups, computational complexity is low, so the method effectively solves a problem that the to-be-identified heart beat characteristics are required to compare with all heart beat templates in a total template database during identity identification, and thereby a large-scale identity identification system can be established.

The invention provides a safety storage management method and system based on checks and balances and is applied to the field of safety storage. The method comprises the following steps: a safety storage account administrator accrual management module manages an administrator account; a safety storage system administrator accrual management module is used for setting configuration of relevant parameters stored in the system, wherein jurisdiction distribution on an administer account is included; the safety storage audit administrator accrual management module determines the jurisdiction distribution of the administrator account. Through the technical scheme of the method and system, the data safety of the safety storage system can be effectively improved, and the protection grade of safety storage is improved.

A method for securing data by embedding the data in a data structure and utilizing a sensor device to detect transfer of the data structure. The data is embedded such that the data is only accessible by first executing an executable program. If the executable program determines that the device attempting to access the data (the accessing device) does not have permission to access the data, then the executable program destroys all or a portion of the data. If the data structure is transferred to another device, a sensor device positioned to detect the data structure when transferred will identify the data. If the sensor device determines that the data structure is not permitted to be transferred, then the sensor device destroys all or a portion of the data.