93results about "Data stream serial/continuous modification" patented technology

Embodiments resynchronize encrypted network traffic. A capture flow that includes network traffic captured from encrypted network flows may be monitored and the captured network traffic may be decrypted for analysis. A hole in the capture flow may be determined based on gaps in portions of the captured network traffic disabling the monitoring of the capture flow and the decryption of the captured network traffic. A size of the hole may be determined based on a size of the gap in the portions of the captured network traffic. Other network traffic may be captured from the capture flow subsequent to the hole. Cipher resynchronization parameters may be determined based on the size of the hole, other portions of the captured network traffic, or the encryption protocol. The other portions of the captured network traffic may be decrypted based on the cipher resynchronization parameters to reenable monitoring of the capture flow.

This application is applied to the field of communication technologies, and provides a data transmission method, a communication apparatus, and a communication system, to resolve a problem in the conventional technology that user service bandwidth is used for encrypted transmission. The method includes generating N ciphertext data streams, where a first ciphertext data stream is any ciphertext data stream in the N ciphertext data streams. The first ciphertext data stream includes at least two first alignment markers AMs and at least two ciphertext data segments. One ciphertext data segment is included between every two first AMs, and one first AM is included between every two ciphertext data segments. The at least two first AMs are used for aligning data of the N ciphertext data streams.

Embodiments are directed to systems and techniques to perform authentication operations in a call center computing environment with transcoded encrypted data.

A system, method, and signal provided, characterized by transmitting and receiving a stream of samples. On the transmitting side (Alice), generating a stream of samples for driving a transmitter, each sample having an in-phase (1) component and a quadrature (Q) component, wherein the stream of samples is generated from a stream of pilot symbols and a stream of QKD symbols, wherein the pilot symbols belong to an alphabet of M pilot symbols and the QKD symbols belong to an alphabet of N QKD symbols; mapping a pilot symbol of the stream of pilot symbols to a group of constellation points in accordance with a one-to-one mapping from the alphabet of M pilot symbols to M groups of constellation points in an I-Q space, wherein each of the M groups comprises N constellation points; and mapping a QKD symbol of the stream of QKD symbols to a constellation point in the I-Q space in accordance with a one-to-one mapping from the alphabet of N QKD symbols to the N constellation points of the group of constellation points to which the pilot symbol is mapped. On the receiving end, obtaining the stream of samples, the stream of samples representing a component of a received signal, each sample having an in-phase (1) component and a quadrature (Q) component; generating a stream of pilot symbols from the stream of samples, in accordance with a one-to-one mapping from M groups of constellation points in an I-Q space to an alphabet of M pilot symbols, wherein each of the M groups comprises N constellation points; and generating a stream of quantum key distribution (QKD) symbols from the stream of samples, in accordance with an M-to-one mapping from a set of M*N constellation points of the M groups to an alphabet of N QKD symbols, wherein the M-to-one mapping from the set of M*N constellation points to the alphabet of N QKD symbols comprises, for each respective group of the M groups, a one-to-one mapping from the N constellation points of the respective group to the alphabet of N QKD symbols.

The invention relates to the technical field of signal acquisition of an implantable sensor, in particular to a signal acquisition system of a multi-modal implantable sensor, which comprises the following steps: generating a personalized monitoring model containing a risk period and a lightweight abnormal feature library based on historical data of a patient through a model initialization module, the implantable sensor is switched between a low-power-consumption monitoring mode and a key monitoring mode through a mode switching judgment module according to whether the current time is in a risk time period or not, in the low-power-consumption mode, part of signals are collected at low frequency and subjected to real-time feature comparison, if the signals are abnormal, the key mode is triggered, and in the key mode, the implantable sensor is switched between the low-power-consumption monitoring mode and the key monitoring mode. All the sensors are awakened to collect multi-modal signals at high frequency and encrypt the multi-modal signals to form a data packet, the communication and fusion analysis module forwards the data packet to a cloud for feature level and decision level fusion analysis, a model is optimized according to the data packet, an update instruction is generated, and the model update module safely issues the instruction to the sensors and updates the personalized monitoring model of the sensors. Intelligent, low-power-consumption and safe physiological monitoring is realized.

A method for tamper protection in cryptographic calculations is provided. A cryptographic calculation includes a plurality of normal rounds and a plurality of redundant rounds. The method includes obtaining a first variable x and a second variable y using a random number generator; dividing the normal rounds into a first normal section and a second normal section, and dividing the redundant rounds into a first redundant section and a second redundant section according to the first variable x and the second variable y; executing the first normal section and the first redundant section in sequence using a clock signal; in response to completion of the first redundant section and a first calculation result of the first normal section and a second calculation result of the first redundant section being the same, executing the second normal section and the second redundant section in sequence to complete the cryptographic calculation.

An apparatus and method for checking plausibility of a data stream are described. According to an aspect, one or more supplemental information messages are considered in the trustworthiness of a data stream. According to another aspect, the data stream indicates whether a certain segment is a first segment in the sequence of assigned segments or whether a certain segment is a last segment in the sequence of assigned segments. Depending on further segments, duplication of certain supplemental information messages within certain portions of the data stream is not included in the trustworthiness check or is prohibited in the data stream.

An intra-vehicle network-based communication method and an apparatus are provided, to resolve a problem in the conventional technology that a packet is easy to be eavesdropped on when an ECU transmits the packet. In this application, a first ECU performs an operation using a first key and a first fresh value to generate a keystream; performs an exclusive OR operation using the keystream and a to-be-transmitted first plaintext packet to generate a first ciphertext packet; and sends the first ciphertext packet to a second ECU. The first fresh value is a value generated by a counter in the first ECU when the first ECU transmits a packet, and the counter is configured to record a quantity of packets transmitted by the first ECU. The first ECU transmits the first ciphertext packet to the second ECU. This can prevent the first packet transmitted by the first ECU from being eavesdropped on, and help improve confidentiality of the packet transmitted by the first ECU.

To allow a plurality of users using a secret communication network to efficiently share messages.SOLUTION: A controller 100 controls a network having a plurality of user nodes and a link connecting two user nodes and assigned with a key, and the controller comprises: a division unit 110 that divides the plurality of user nodes into a plurality of groups; a first instruction unit 120 that instructs the user nodes to collect, by using the key, messages held in a predetermined number of user nodes; a second instruction unit 130 that instructs a specific node in the network to collect, by using the key, messages initially held in the plurality of user nodes belonging to the groups; a third instruction unit 140 that instructs the specific node to calculate the exclusive OR of the plurality of messages and transmits the exclusive OR to the user nodes without using the key; and a fourth instruction unit 150 that instructs the user nodes to obtain messages in the other user nodes that the user nodes have not obtained yet.SELECTED DRAWING: Figure 7

A method is disclosed. The method includes receiving, by a processing network computer from a relying party computer associated with a relying party, a request for data associated with a user operating a user device. The processing network computer may retrieve first encrypted data of the user having a user-layer of encryption. The processing computer can then generate a second symmetric key to add a relying party-layer of encryption to the first encrypted data using a stream cipher. The doubly encrypted data may be transmitted to a user device that removes the user-layer of encryption on the first doubly encrypted data, and then adds a second relying party-layer of encryption to form second doubly encrypted data. The second doubly encrypted data may be transmitted to the relying party computer, which can remove both relying party-layers of encryption to gain access to the data associated with the user.

An intra-vehicle network-based communication method and an apparatus are provided, to resolve a problem in the conventional technology that a packet is easy to be eavesdropped on when an ECU transmits the packet. In this application, a first ECU performs an operation using a first key and a first fresh value to generate a keystream; performs an exclusive OR operation using the keystream and a to-be-transmitted first plaintext packet to generate a first ciphertext packet; and sends the first ciphertext packet to a second ECU. The first fresh value is a value generated by a counter in the first ECU when the first ECU transmits a packet, and the counter is configured to record a quantity of packets transmitted by the first ECU. The first ECU transmits the first ciphertext packet to the second ECU. This can prevent the first packet transmitted by the first ECU from being eavesdropped on, and help improve confidentiality of the packet transmitted by the first ECU.

A system, method, and signal. On a transmitting side (Alice), a stream of samples for driving a transmitter is generated from a stream of pilot symbols and a stream of QKD symbols. On a receiving side, a stream of samples is obtained, the stream of samples representing a component of a received signal. A stream of pilot symbols is generated from the stream of samples in accordance with a one-to-one mapping from M groups of constellation points in an I-Q space to an alphabet of M pilot symbols. Each of the M groups comprises N constellation points. A stream of quantum key distribution (QKD) symbols is generated from the stream of samples in accordance with an M-to-one mapping from a set of M*N constellation points of the M groups to an alphabet of N QKD symbols.

An AI-based approach to Garbled speech (GS) detection. Machine learning (ML) models are created that can distinguish between GS speech and non-GS speech with high accuracy. The machine learning models take as input an encoded speech frame that has passed a CRC check. The input data / predictors to the models are a selected set of information elements (IEs) (i.e., a set of one or more bits) of the encoded speech frame. The selected IEs are a part of the input parameters to the speech decoder. It is possible to operate on single encoded speech frames, in contrast to using decoded frames, which requires taking a previous encoded frame into account for being able to perform the decoding.

This invention discloses a stream cipher implementation method based on FSR and fourth-order CA, including designing the stream cipher algorithm structure, component design of LFSR and NFSR, setting CA rules for register updates, designing a keystream generation function, algorithm initialization, keystream generation, and algorithm encryption / decryption. CA rules are used to update registers, and each internal state bit is a bitwise feedback bit at each stage of algorithm execution. In the initial loading stage, the LFSR and NFSR are loaded using an initial key and initial vector, and the remaining bits of the LFSR are padded with the initial key. The keystream initialization stage uses 32 iterations, ensuring the key and vector are fully obfuscated within the register's internal state. This invention uses fourth-order CA rules combined with register design to provide good differential properties and nonlinearity for the cryptographic algorithm. The key expansion used to padded the LFSR during the initialization stage effectively resists differential analysis and fault attacks.

Disclosed are systems and methods for circuit- and system-level techniques and approaches for data encryption in scalable, high-bandwidth, bidirectional neural interfaces. In some embodiments, the disclosed systems and methods may be configured to encrypt neural data as close as possible to the data source, and before the data is transmitted out of the body. In some embodiments, the disclosed systems and methods may utilize hardware-based approaches, including those involving modified analog-to-digital converters, and symmetric cryptographic algorithms.

The invention discloses a high-order signal transmission method and system based on a dual-channel architecture, and belongs to the technical field of communication. The method comprises the following steps: generating a four-dimensional chaotic sequence X, Y, Z and V from a key initial value; performing XOR operation on the original data by using X and Y in the four-dimensional chaotic sequence to obtain XOR data; performing serial-to-parallel conversion, QAM (Quadrature Amplitude Modulation) mapping and null subcarrier mapping on the XOR data to obtain a constellation diagram; performing subcarrier column replacement on the constellation diagram by using Z and V in the four-dimensional chaos sequence to obtain OFDM encrypted data; performing DSM modulation on the OFDM encrypted data and the key initial value to obtain a baseband information stream and a baseband key stream; an optical I / Q modulator is driven to load the baseband information stream and the baseband key stream to orthogonal components of optical carriers respectively, and a QPSK optical modulation signal is synthesized; and performing coherent transmission on the QPSK light modulation signal. The risk of information leakage can be reduced.

The invention discloses a VCX protocol-based private network data stream encryption and decryption method and system, and the method comprises the steps: S1, carrying out the real-time collection operation of data through a data collection end, and sequentially carrying out the encryption operation of the collected data through a VCX encryption network bridge for multiple times; s2, transmitting the data encrypted for multiple times to a data storage end through a wireless local area network; and S3, the VCX decryption network bridge sequentially carries out multiple times of decryption and reduction on the multiple times of encrypted data received by the data storage end, and the data storage end carries out storage operation on the reduced data. According to the method, the direct insertion type VCX encryption network bridge and the direct insertion type VCX decryption network bridge are adopted, the VCX encryption network bridge and the VCX decryption network bridge are subjected to three-layer encryption and decryption processing, the data safety is greatly improved, symmetric cryptography algorithms are adopted as encryption algorithms and decryption algorithms, it is guaranteed that the algorithms are simple and efficient, large-data-volume encryption and decryption operation can be conveniently carried out, and the encryption and decryption efficiency is improved. The problem of unsafe data transmission in the existing private network is effectively solved.

The systems and methods disclosed herein transparently provide data security using a cryptographic file system layer that selectively intercepts and modifies (e.g., by encrypting) data to be stored in a designated directory. The cryptographic file system layer can be used in combination with one or more cryptographic approaches to provide a server-based secure data solution that makes data more secure and accessible, while eliminating the need for multiple perimeter hardware and software technologies.

Even when performing encryption using a key obtained by expanding or contracting the bit length of the key, if the bit sequences of the assigned keys are different, they will generate or decrypt different ciphertexts. [Solution] The arithmetic unit comprises at least a processor and memory, and when the bit length of a common key assigned for use in communication between a terminal device and a network differs from the bit length of an input key used in a predetermined algorithm, the arithmetic unit converts the assigned common key to a key of a predetermined bit length by expanding or shortening the bit length of the common key, and performs encryption or decryption processing of a stream cipher, wherein at least one of the constants or initial values ​​used for initializing the stream cipher differs depending on the bit length of the assigned common key.

Embodiments of the present disclosure relate to processing systems and corresponding methods of operation. A master device issues memory burst transaction requests via an interconnect bus to obtain data from a slave device. A cryptographic engine is coupled to the interconnect bus and decrypts the obtained data to produce plaintext data for the master device. The cryptographic engine selectively operates according to a stream cipher mode of operation, or a block cipher mode of operation. The cryptographic engine is configured to suspend a read data channel of the interconnect bus between the slave device and the master device in response to the cryptographic engine switching from the block cipher mode of operation to the stream cipher mode of operation. The read data channel is reactivated in response to a last beat of a read burst of plaintext data produced by the cryptographic engine.

To provide a suitable system and method for protecting an elementary bitstream that incorporates an independently encoded tile.SOLUTION: There are provided a system and a method for partial frame encryption according to an embodiment of the present invention. In one embodiment, the method receives a video bitstream including a number of frames, each frame including a number of independently encoded compression units, and encrypts some of the number of compression units of the number of frames and generates an output bitstream that includes a number of independently encoded compression units, including some of encrypted compression units.SELECTED DRAWING: Figure 1

A method for encrypting plaintext data is enclosed that includes operations of receiving the plaintext data, the plaintext data including a plurality of data portions, encrypting each of the plurality of data portions using a specific key for each data portion, merging each of the plurality of data portions together to form a single data stream, generating a data map of the single data stream, appending the data map to the single data stream, and performing a master cipher to form an encrypted distributable stream. Operations of the encrypting include: an additive operation on each byte of the first data portion using the additive table, an XOR operation on each byte of the first data portion as modified by the additive operation, a substitution operation on each byte of the first data portion using the substitution table as modified by the XOR operation.

A system and method for cryptographically securing a product. For example, one embodiment of a method comprises: generating a first signature over a key to add an authenticator device to a chain of trust; generating a universal unique identifier (UUID) code; generating a second signature over the UUID code and metadata associated with the authenticator device using the key; and encoding the UUID code, metadata, and signature in an optical label of a product.

A generative machine-learning model may be used for data compression / decompression. The model at an encoder may be prompted with at least one symbol, e.g. the first portion of information to be compressed. The model may generate an array of values, each corresponding to a possible next symbol. A code word representing the index of the array at which there is a value corresponding to the next symbol of the information may be selected and included in a compressed version of the information in place of the next symbol. The model at the decoder may be prompted with the same at least one symbol. The model may generate an array of values, each corresponding to a possible next symbol. A symbol corresponding to a value at an index of the array represented by the code word may be selected. A decompressed version of the information may be generated.

Methods and apparatus relating to an efficient implementation of ZUC authentication are described. In one embodiment, a processor computes a tag update, based at least in part on stored data, for an authentication operation. The tag update is computed by replacing a ‘for’ loop with a carry-less multiply operation. Other embodiments are also claimed and disclosed.

The present inventions there is provides a method, system and computer media of encoding data for secure transmission between an intended sender and an intended receiver, the method comprising: generating a plurality of sets of masks, the plurality of sets of masks being generated based on a combination of one or more of a hash function (H), a nonce (N), a logic function and a function (Φs) of a set of natural integers; encoding a first set of data for secure transmission using a first set of masks of the plurality of sets of masks and a second set of data for secure transmission using a second set of masks of the plurality of sets of masks; generating an encoded message from the first and second set of encoded data for transmission to the intended receiver. The invention further provides a decryption method, system and computer media.

A wireless peripheral device operatively coupled to a wireless dongle of an information handling system includes a microcontroller to receive a polling packet from the operatively coupled wireless dongle, via a wireless peripheral device radio, identifying a selected number of encrypted data packets for a data packet frame. The microcontroller executes code instructions of a wireless input / output protocol authenticated encryption agent with bi-lateral linear-feedback shift register (LFSR) input stream to generate an initial key or a later dynamic key. With the initial key or dynamic key, the encryption system uses a shifting state machine output from each of a first and second LFSR in an encryption algorithm to generate a data packet encryption output value. The data packet is encrypted via an XOR operator with the data packet encryption output value, and each generated data packet encryption output value is subsequently the dynamic key for encryption of subsequent data packets.

The invention discloses a quantum cryptographic operation method, a storage medium and a PQC cryptographic card, and belongs to the technical field of cryptographic cards, the method is applied to a cryptographic operation core group in the PQC cryptographic card, and the PQC cryptographic card further comprises a DDR in communication connection with the cryptographic operation core group. The method comprises the following steps: executing operation according to a plurality of groups of obtained random number sequences with fixed lengths to generate a public key and a corresponding private key, and storing the public key and the corresponding private key into DDR; a public key and first information are obtained from the DDR, operation is executed, first signature information and a packaging secret key are generated, and the first signature information is stored in the DDR; acquiring a private key and first signature information from the DDR to execute operation and generate an unblocking key; wherein the secret key is used for decrypting or verifying the encrypted first information. Different algorithms are decoupled, respective operation is controlled, and the operation efficiency is improved.

The application discloses a kind of fusion monitoring method, device, system and medium, and through the video stream fusion perception data of acquisition, multi-mode heterogeneous internet of things technology application etc., not only accurate equipment itself abnormal monitoring can be realized, also reliable data is provided for edge computing and local decision, to directly drive local execution equipment, effectively improve decision response speed.

The application discloses a configurable HMAC message authentication code circuit and method, and specific steps thereof include: resource reuse is adopted in padding, message expansion and iteration compression modules, and a plurality of operation number addition parts are optimized, so that one block can realize two kinds of hash functions of SM3 and SHA-256, resource occupation is saved, meanwhile, the addition circuit is optimized in the message expansion module and the iteration compression module, and the calculation complexity is reduced; the round processing function module of the SHA3-512 hash function is designed in a way of unfolding and pipeline cutting, and the storage of the round constant is optimized, so that the key path is shortened and the efficiency is improved; the HMAC function module is designed by using a state machine, and each part module is designed in a hierarchical manner and is relatively independent from each other. On the implementation function, certain flexibility is achieved, and the operation of the hash functions of SM3, SHA-256 and SHA3-51 can be realized, and the operation of the message authentication codes of HMAC-SM3, HMAC-SHA256 and HMAC-SHA3-512 can also be realized.