1185results about "Coding/ciphering apparatus" patented technology

A system and method for adaptive edge-cloud data processing dynamically distributes computational tasks between edge devices and cloud infrastructure in response to changing conditions. The system continuously monitors resource availability, network parameters, and workload characteristics while predicting future conditions using hierarchical forecasting models. A multi-objective optimization approach determines optimal task distribution, balancing processing latency, energy consumption, bandwidth utilization, and result quality. The system implements a partitionable processing pipeline that enables seamless task migration through state synchronization protocols and checkpoint mechanisms. During migration, the system preserves processing continuity by establishing dependencies, creating execution checkpoints, and verifying successful state transfer. Performance metrics may be continuously collected and analyzed to improve future decision-making. The system maintains operational resilience during connectivity disruptions through local decision-making capabilities and eventual consistency protocols, making it suitable for diverse applications including industrial IoT, connected vehicles, healthcare wearables, and smart city infrastructure.

Disclosed herein are systems and methods for threshold cryptography for cloud-based software-implemented hardware security modules. In an embodiment, an encryption system collects at least a decryption-threshold number of private-key shares from a secure store, where the private-key shares correspond to a public key generated in a first secure enclave as part of a secret key set, which also includes a first plural quantity of the private-key shares. The encryption system obtains an ephemeral-hardware-security-module-(eHSM)-encryption key by decrypting the collected private-key shares. The encryption system initializes, in a second secure enclave, a second instance of a first eHSM. The initialized second instance of the first eHSM is encrypted with the obtained eHSM-encryption key.

A device comprises a plurality of hardware, HW, modules including a first HW module comprising a Physically Un-clonable Function, PUF, the first HW module or the plurality of HW modules being communicated with a requester. The device receives (1006), from the requester, a request to transmit an output to the requester. It activates (1008) the PUF, reads a response from the PUF, and adds the response to an output. The device transmits (1012) the output to the requester, and it receives (1002) one or more of a firmware, FW, component, a software, SW, component, or a bitstream, BS, component before receiving (1006) the request from the requester.

A multi-party computation method includes: using a relay apparatus that relays communication between a user apparatus and MPC operation apparatuses in a multi-party computation system including at least one user apparatus and two or more MPC operation apparatuses; having the relay apparatus receive a first encryption key generated by each MPC operation apparatus and further transmit the first encryption key to the user apparatus; having the relay apparatus receive secret shares generated by the user apparatus and encrypted thereby using the first encryption key and a second encryption key generated by the user apparatus and transmit the encrypted secret shares and the second encryption key to each MPC operation apparatus; and having the relay apparatus further receive shares, encrypted using the user apparatus's second encryption key, of the results of operations performed by the MPC operation apparatuses and transmit the shares to the user apparatus.

A method and apparatus for authenticating a physical asset is provided. The method includes obtaining information from a tag associated with the physical asset, wherein the information includes a uniform resource locater (URL) and encrypted information, wherein the encrypted information corresponds to a cryptographic token on a distributed ledger and information about the physical asset. The method further includes transmitting a first message towards an authentication server based on the URL, wherein the first message comprises the encrypted information. The method further includes receiving a second message from the authentication server, the second message comprising an indication of authenticity of the physical asset.

A system and method for adaptive data processing combining compression and encryption. The system analyzes input data characteristics, compares probability distributions, and creates a transformation matrix to convert data into a dyadic distribution. It generates a main data stream of transformed data and a secondary stream of transformation information. The system dynamically selects and applies processing techniques, including transformation, encoding, compression, and encryption algorithms, based on analyzed characteristics and real-time performance metrics. It compresses the main data stream using Huffman coding and implements security measures to protect the output. A feedback loop monitors technique effectiveness, updates a knowledge base, and influences future selections. The system can operate in lossless, lossy, or modified lossless modes, adapting to different application requirements. This approach offers an efficient solution for scenarios where both data reduction and security are critical concerns.

A processor includes an execution unit for executing a message padding instruction including an operand field indicating a register buffering a message block segment of a message block to be padded and a mode field indicating which hash functions is to be applied to the message block. The execution unit includes a padding circuit configured to receive a message block segment from a register indicated by the operand field, where the message block spans multiple registers in a register file. Based on which hash function is indicated by the mode field, the padding circuit selects a byte location in the message block segment at which to insert at least one padding byte and inserts the at least one padding byte at the byte location within the message block segment. The message block segment as padded by the at least one padding byte is written back to the register file.

The invention relates to a computer-based image encryption method using a Bessel map with high chaotic performance, which is developed to fill the gaps between a high performance chaotic map and a simple encryption scheme.

Techniques, for secure processing of encrypted data on public resources, include receiving first data, indicating a sequence of reversible Boolean function control (BFC) gates, including a first segment for decrypting, a second segment for operating on the decrypted data, and a third segment for encrypting the resulting data. Second data indicates generic BFC gate rules for replacing a first sequence of two gates operating on an input N-bit word with a second sequence of one or more gates that produce the same output N-bit word. The second data is used to propagate: a gate from the first segment a distance into the second segment or beyond; and, a gate from the third segment a distance into the second segment or before. This produces an obfuscated sequence of reversible gates. Obfuscated instructions based on the obfuscated sequence of gates are sent to the public resources.

An apparatus and method for attack-resistant encryption and decryption. For example, one embodiment of an apparatus comprises: execution circuitry to execute instructions and generate memory access requests including load requests to read data from memory and store requests to store data to memory; and cryptographic circuitry to perform a plurality of rounds of encryption or decryption to encrypt or decrypt the data, respectively, the cryptographic circuitry to perform one or more redundant rounds for a corresponding one or more of the plurality of rounds, the one or more redundant rounds to include spatial or temporal differences relative to the corresponding one or more rounds; the cryptographic circuitry to generate a fault upon detecting a mismatch between an output of a redundant round output and an output of a corresponding round.

To provide a quantum hash value generation system with quantum resistance, a quantum hash value generation method, and a blockchain network.SOLUTION: A quantum hash value generation system 1 includes a quantum state generator 2 configured to generate an input quantum state based on input data composed of an input bit string including a plurality of input bits, a quantum device 4 configured to convert the input quantum state into an output quantum state, a quantum measuring instrument 5 configured to acquire measurement values of the output quantum state by measuring the output quantum state, a measurement value analysis unit 320 configured to calculate a statistical index of the measurement values based on a probability distribution of the measurement values, and a quantum hash value generation unit 340 configured to generate a quantum hash value of the input data based on the statistical index of the measurement values.SELECTED DRAWING: Figure 1

According to various embodiments, a method for encrypting image data for a neural network are disclosed. The method includes mixing the image data with other datapoints to form mixed data; and applying a pixel-wise random mask to the mixed data to form encrypted data. According to various embodiments, a method for encrypting text data for a neural network for natural language processing is disclosed. The method includes encoding each text datapoint via a pretrained text encoder to form encoded datapoints; mixing the encoded datapoints with other encoded datapoints to form mixed data; applying a random mask to the mixed data to form encrypted data; and incorporating the encrypted data into training a classifier of the neural network and fine-tuning the text encoder.

Watermarking is used to track and identify digital images. One claim includes acts of: processing obtained imagery to yield local image information, the local image information being inadequate to reveal a subject depicted in said obtained imagery, using the local image information, resolving geometric distortion of the imagery, the geometric distortion comprising scale and rotation, said resolving yielding geometrically resolved imagery, and detecting the encoded signal from the geometrically resolved imagery using secret detecting information. A great variety of other features and arrangements are also detailed.

Various techniques are provided to implement multi-chip secure and programmable systems and methods. In one example, a multi-chip module system for providing an integrated programmable logic functionality and security functionality. The multi-chip module system includes a first die including a programmable logic device (PLD) configured to provide at least a portion of the programmable logic functionality. The multi-chip system further includes a second die including a security engine configured to perform at least a portion of the security functionality. The security engine is further configured to receive, from the first die, data associated with a first and second configuration image; perform a read operation on a memory for the second configuration image based on the data; and authenticate the second configuration image. The multi-chip system further includes a configuration engine configured to program the PLD according to the first configuration image. Related devices and methods are provided.

To provide a safety design device, a safety design method, and a safety design program capable of deriving a security parameter whose safety is guaranteed in encryption design based on a Reused-A-LWE problem using a discrete Gaussian distribution as an error distribution.SOLUTION: A safety design device 1 includes: an inputting portion 11 that receives input of parameters n, m, q, s1, s2 of a Reused -A-LWE problem with a discrete Gaussian distribution as an error distribution; a calculation portion 12 that calculates a parameter sb of the LWE problem with the discrete Gaussian distribution as the error distribution from the parameter s1 and a constant C; an acquiring portion 13 that acquires a security parameter λ of the LWE problem by a calculation formula that guarantees predetermined safety; and an outputting portion 14 that outputs the acquired security parameter λ as a security parameter of the Reused -A-LWE problem.SELECTED DRAWING: Figure 1

A hashing circuit includes gates or combinations of gates, each being configured to asynchronously output a state value in response to a respective input to the gate or combination of gates. Each of a plurality of bit inputs is asynchronously coupled to one or more of the inputs to the gates or combinations of gates, and each of one or more of the outputted state values is asynchronously coupled to one or more inputs of other gates or combinations of gates, in combination with one or more of the bit inputs and / or one or more other outputted state values. All or some of the state values, or output bits from a logical function of all or some of the state values, or a combination of a first subset of the state values and a logical function of a second subset of state values, are provided as hash-circuit output bits.

To provide a cipher system that constitutes an efficient and simulation-safe threshold value public key encryption based on polynomial size law q and LWE problem.SOLUTION: A cipher system 100 comprises: a definition unit 11 for defining a key distribution and random number distribution and an error distribution for masking a partial ciphertext under a condition that satisfies exactness; a key generation unit 12 for generating an error according to the error distribution, together with a secret key and a public key; a setting unit 13 for distributing secretly distributed share to each party; an encryption unit 21 for encrypting a message using the public key and a first random number and further generating a ciphertext including a second random number; a partial decryption unit 31 for partially decrypting the ciphertext using the secret key share in each party and calculating a partial deciphertext in which a value derived by multiplying the error share to the second random number is added; and an overall decryption unit 32 for decrypting the message on the basis of the sum total of partial deciphertexts of effective share aggregates.SELECTED DRAWING: Figure 1

To prevent a global model from being disclosed to an integration server in combination learning using multi-key homomorphic encryption.SOLUTION: A client apparatus 200 included in a parameter concealing system 90 that executes combination learning using multi-key homomorphic encryption includes an information processing unit 210. The information processing unit 210 generates parameter ciphertexts from parameters of a local model, generates partial decrypted texts from an integrated parameter ciphertext generated by integrating the parameter ciphertexts by homomorphic operations, and generates encrypted partial decrypted texts from the partial decrypted texts. Further, the information processing unit 210 generates an aggregated partial decrypted text from an encrypted aggregated partial decrypted text generated by integrating the encrypted partial decrypted texts by homomorphic operations, and decrypts parameters of a global model on the basis of the aggregated partial decrypted text and the integrated parameter ciphertext.SELECTED DRAWING: Figure 1

A variety of techniques for authentication of jewelry and gemstones is provided. With some example embodiments, blockchain may be used to store a reference signature for the jewelry / gemstone, and a digital asset such as a non-fungible token can link this reference signature with the physical jewelry / gemstone. During an authentication process, the reference signature stored on the blockchain can be accessed and compared with a test signature derived from an item that is purported to be the original jewelry / gemstone to determine whether they match to support a declaration that the purported jewelry / gemstone is authentic.

To provide a radio communication system and a communication method capable of safely relaying communication between a radio station connected to the Internet network and a radio station connected to a closed network.SOLUTION: The closed area system 11 and the cloud system 21 included in the wireless communication system 1 include a closed area side gateway server 13 and a cloud side gateway server 22. When receiving an authentication request from a radio station 41,42, a closed area side gateway server 13 and a cloud side gateway server 22 store activation information including unique information of the radio station 41,42 and generation information of an encryption key in a storage device 27. Regardless of whether the wireless station 41,42 is connected to the closed network 10 or the Internet network 20, the communication between the wireless station 41,42 and the closed system 11 or the cloud system 21 is protected by the encryption key generated based on the generation information included in the activation information.SELECTED DRAWING: Figure 1

An information processing apparatus includes a secure area configured to execute a program in secret, and a security chip. The secure area conceals information related to the program, and requests the security chip to provide a blind signature with respect to the concealed information obtained by the concealing. The security chip calculates the blind signature and returns the blind signature to the secure area. The secure area acquires a signature with respect to the information related to the program from the blind signature.

An asset management system includes an asset management network that connects various types of refrigeration appliances to an asset manager. At the device layer, IOT devices are connected to the refrigeration appliances and have edge compute capability, including a backup power management function, and a modem for network communication. IOT device ports directly integrate with sensors, switches, and / or serial data controllers of refrigeration appliances. Push notification alarms are initiated on the edge of the network by IOT devices. The network tags operating data by appliance serial, and the asset manager stores the data using serial numbers as primary keys. The asset manager streams data from numerous appliances and uses event driven processing to promptly respond to edge alarms. The operating data keyed by serial number is enriched with proprietary data organized by appliance type and is used to develop new predictive models by appliance type.

An assigning device (100) for assigning fixed identifiers to fuzzy identifiers, the assigning device comprising a database storing multiple fuzzy identifiers, and a matching unit (130) arranged to determine if a matching fuzzy identifier exists in the database that matches a fuzzy input identifier according to a matching criterion and to determine if a matching fuzzy identifier does not exist in the database according to an absent criterion.

The system is disclosed for visual marking sensitive documents for leak prevention. Each time an action is taken with regard to a document (e.g., creation, viewing, downloading), that action is added to a distributed ledger, essentially creating a unique hash for a new instance of the document. This new hash is visually embedded in the document as a code comprising a plurality of differently shaded pixels, wherein some of the pixels directly encode information regarding the document (e.g., an account that generated the new instance of the document, a date, a time, a unique ID for the document, etc.) and some of the pixels do not encode information. The code is capable of being scanned either digitally or physically on a printed version of the document, such that the immediate source of the document, corresponding to who leaked the document, is able to be discerned.

A semiconductor die includes an input interface configured to receive data to be transferred to at least one other semiconductor die. The semiconductor die further includes a keystream generator configured to generate a keystream based on a key and an initial value. The semiconductor die further includes encryption circuitry coupled to the keystream generator. The encryption circuitry is configured to generate a command to initiate decryption and is further configured to generate encrypted data based on the data and the keystream. The semiconductor die further includes an output interface coupled to the encryption circuitry. The output interface is configured to output the command and the encrypted data to a physical interface with the at least one other semiconductor die.

Example embodiments of the present disclosure provide for an example method for collaborative randomized encoding for training machine-learned models with vertically split training data. The method can include maintaining a machine-learned model. The method can include generating a first encoded dataset by sealing, using a shared key, a first private dataset into a fixed joint computation. The method can include storing, by the first encoded dataset. The method can include deleting the shared key. The method can include obtaining a second encoded dataset from a second computing system. The second encoded dataset was generated by the second computing system using the shared key to seal a second private dataset into the fixed joint computation. The method can include generating an output by evaluating the fixed joint computation using the first encoded dataset and the second encoded dataset as input and updating the machine-learned model based on the output.

The application provides an ECC attack-resistant method, device, equipment and medium suitable for a car security chip. The application adjusts the points accumulated in the scalar average decomposition method, so that the operation operations in each cycle are the same, that is, each cycle performs point multiplication and point addition. In this way, the branch in the operation process can be eliminated, the power consumption attack cannot identify the leakage of sensitive information, and the problem that the false operation mode cannot meet the high fault detection rate required by the car chip ISO 26262 is avoided. In the case of increasing a small amount of calculation and pre-storing points, the application can achieve the beneficial effects described above.

A system for bidirectional two-factor remote user authentication includes a workflow engine comprising one or more processors and at least one memory element for storing instructions. The system further includes a client device with one or more processors, a display, and a user login interface. The workflow engine generates and encrypts one or more login identifiers, which is visually encoded as an authentication image and displayed on the terminal's display. An electronic device, also connected to the workflow engine, includes a password, a display with a graphical user interface, one or more processors, and at least one memory element. The device's authentication identifier reader decrypts the one or more login identifiers from the authentication image and compares it with the password to determine a match. Upon a match, the device transmits an authorization for the login request to the workflow engine.

A cryptographic accelerator utilizes a combination of parallel and pipelined butterfly operator circuit to perform number theoretic transform (NTT) or inverse NTT (INTT.) The accelerator includes a first set of pipelined pairs of parallel butterfly operator circuits configured to operate on pairs of polynomial coefficients to provide output coefficients. A first buffer is coupled to store the output coefficients. A second set of pipelined pairs of parallel butterfly operator circuits are configured to operation on pairs of coefficients obtained from the first buffer to provide coefficients of the polynomial in a number theoretic transform (NTT) domain or out of the NTT domain.

An authentication key exchange system according to one embodiment is an authentication key exchange system including a key generation device and a plurality of equipment. The key generation device includes a parameter generation unit configured to receive a security parameter 1λ and a total number N of the equipment as inputs, and output a master private key MSK, a master public key MPK, and an initial revoked user list RL; a static private key generation unit configured to receive the master private key MSK, the master public key MPK, and an identifier ID of the equipment as inputs, and output a static private key sskID corresponding to the identifier ID; a revoked user list update unit configured to receive the master public key MPK and a new revoked user list RL as inputs, increment a current time T, and update a revoked user list RLT at the current time T to the revoked user list RL; and a key update information generation unit configured to receive the master private key MSK, the master public key MPK, the current time T, and the revoked user list RL as inputs, and output key update information kuT at the current time T by using a KUNode algorithm. The equipment includes a latest private key generation unit configured to receive the master public key MPK, the static private key sskID corresponding to its own identifier ID, and the key update information kuT at the current time T as inputs, and output a latest private key cskID,T at the current time T without using pairing calculation; a temporary key generation unit configured to receive the master public key MPK and the latest private key cskID,T corresponding to its own identifier ID at the current time T as inputs, and output a temporary private key eskID and a temporary public key epkID; and a session key generation unit configured to receive the master public key MPK, its own identifier ID, an identifier ID′ of a communication partner, the latest private key cskID,T corresponding to its own identifier ID at the current time T, the temporary private key eskID corresponding to its own identifier ID, and a temporary public key epkID′ corresponding to the identifier ID′ of the communication partner as inputs, and output a session key SK shared with the communication partner.