4569results about "Multiple keys/algorithms usage" patented technology

The present disclosure relates to a blockchain-based authentication system for electric vehicles and drones, and a method for authenticating electric vehicles or drones in a smart city. The proposed blockchain-based authentication system enhances security, privacy, and scalability for electric vehicles (EVs) and drones in smart city environments. It employs a consortium blockchain managed by city authorities and stakeholders, utilizing smart contracts for identity registration, credential issuance, and access control. Device nodes store cryptographic keys securely, while an optional authentication server facilitates off-chain integration. The authentication operation of the system includes, ensuring tamper-proof identity verification through on-chain validation. Authentication attempts are immutably recorded for auditing and anomaly detection. By eliminating single points of failure and strengthening data privacy, this decentralized authentication framework offers a scalable and secure solution for integrating EVs and drones into smart city infrastructures.

A system and method for an AI-controlled sensor network for threat mapping and characterization. The system deploys a network of honeypots and sensors across various geographic locations and network segments, collecting and aggregating data on network traffic and potential threats. An AI orchestrator analyzes this data using advanced machine learning models, generating dynamic honeypot profiles and a comprehensive threat landscape. The system can adapt in real-time to emerging threats, optimize resource allocation, and provide actionable intelligence. By correlating data across multiple points, the system offers enhanced threat detection capabilities and proactive cybersecurity measures, surpassing traditional security information and event management (SIEM) tools.

The invention relates to the technical field of data encryption, and discloses a data encryption protection system and method for intelligent controller hardware, and the method comprises the steps: generating a random confusion factor based on a real-time operation state through constructing a dynamic confusion algorithm, and carrying out the nonlinear transformation of original data; implementing a fragment encryption strategy, dividing fragments according to data sensitivity levels, and adopting a heterogeneous encryption algorithm; generating a dynamic binding key in combination with the environment parameters and the hardware unique identifier; hardware-level integrity check is executed, and data and hardware are verified through cyclic redundancy check codes and hardware fingerprints; establishing a self-adaptive key updating mechanism; performing multi-layer defense linkage; and implementing anti-side channel protection, and constructing a security audit log. According to the method, the hardware data security of the intelligent controller is comprehensively guaranteed, various security threats are effectively resisted, and the data confidentiality, integrity and availability are improved.

The invention discloses an Internet of Things data transmission optimization system based on intelligent routing, and relates to the technical field of data transmission optimization. The heterogeneous network access module supports adaptive switching of multiple protocols such as 5G, NB-IoT and LoRa, and monitors link quality; intelligent routing decision selects an optimal path by means of deep reinforcement learning, and end-to-end delay is reduced; data distribution scheduling split data streams are transmitted in a multi-path parallel mode, and forward error correction is combined to guarantee reliability. The network state prediction uses an LSTM to predict bandwidth, and a route is adjusted in advance; the secure transmission integrates iris authentication and dynamic encryption. According to the invention, efficient, reliable and secure transmission is cooperatively realized, energy collection and dormancy strategies are combined, the equipment endurance is greatly prolonged, the network energy consumption is reduced, and the method is suitable for industrial control, telemedicine and other scenes with high requirements on real-time performance and reliability.

The invention relates to the technical field of integration of artificial intelligence security and network security, and discloses an AI dynamic security transmission system based on an SASE framework, which realizes security access control based on AI dynamic identity verification through an SASE integration access module, acquires and predicts network performance change in real time by using a network state sensing module, and transmits the network performance change to a network server. Equipment, environment and data content are subjected to multi-dimensional analysis by means of a security risk assessment module, a quantitative risk score is generated, and a transmission protocol, parameters and encryption strength are dynamically adjusted according to a network state and the risk score by means of a dynamic transmission optimization module and a self-adaptive encryption module; the problem that safety protection and transmission efficiency are difficult to cooperate in a traditional architecture is effectively solved, low-delay and high-reliability data transmission service can be provided for AI application in a complex network environment, meanwhile, self-adaptive dynamic protection of the whole data transmission process is achieved, and data safety is comprehensively guaranteed.

The present invention discloses a post-quantum key negotiation system and method based on the IKE protocol, which relates to the field of network security, especially the design and implementation of key exchange and identity authentication protocols. The present invention provides security for data protection and identity authentication by combining the IKE protocol scheme with the post-quantum cryptographic algorithm; by introducing post-quantum cryptographic algorithms such as ML‑KEM, ML‑DSA and FALCON, the quantum resistance of key exchange and identity authentication is enhanced, and the flexibility and adaptability of the protocol are also improved; in addition, the dynamic algorithm selection mechanism adopted by the present invention enables users to optimize security performance according to specific needs, thereby improving the overall efficiency of the system while ensuring information security.

The invention relates to the technical field of information security, and discloses an authentication method and system based on a Ksession shared session key MAC, and the method comprises the steps: obtaining to-be-encrypted data in a power monitoring system, dividing the to-be-encrypted data into key data and real-time data, and encrypting the key data and the real-time data; the method comprises the following steps: dynamically generating a Ksession key by using an ECDH protocol and an identity-based IBC technology, generating a message authentication code by using the Ksession key, carrying out integrity and authenticity verification on data in transmission through the message authentication code, transmitting encrypted data through a TLS / SSL protocol, and destroying the Ksession key at the end of a session; a quantum security digital certificate is generated by fusing quantum key distribution and a quantum security signature algorithm, and verification of the digital certificate is realized through a multi-party verification mechanism. The quantum security technology and the advanced encryption theory are integrated, and qualitative leap is achieved in the aspects of identity authentication, data encryption, integrity verification and access control.

The invention discloses a market supervision data security protection method and system based on a dynamic encryption strategy, and relates to the technical field of information security. The method comprises the following steps: generating an initial seed input improved four-dimensional hyperchaotic system, and generating a dynamic encryption parameter set through chaotic mapping iteration; the method comprises the following steps: carrying out adaptive fragmentation on market supervision data to be encrypted to generate a data sub-block set, carrying out dynamic S-box-based symmetric encryption on odd index sub-blocks, carrying out a chaotic stream encryption mode associated with a current dynamic sub-key on even index sub-blocks, and generating a unique quantum chaotic fingerprint for each encrypted sub-block; a searchable encryption index is jointly constructed by using a post-quantum encryption algorithm and a lattice-based encryption algorithm and is used for carrying out query operation under the condition that data is not decrypted; the encryption security, privacy protection capability and quantum computing attack resistance of the market supervision data are remarkably improved, and meanwhile, an efficient, flexible and extensible data security protection scheme is provided.

The invention discloses a fire-fighting equipment electronic maintenance management system and method based on the RFID technology, and relates to the technical field of code identification, the system comprises an identification code management module, a maintenance task list generation module, a dynamic data writing module, an inspection verification module and a safety alarm module, maintenance records are written in real time through an RFID tag, and the identification code management module is connected with the dynamic data writing module. A dynamic key updating mechanism is constructed by combining lightweight encryption and block chain evidence storage technologies, data traceability and non-tampering are ensured, cross check is performed through multi-modal data entry, RFID tag, two-dimensional code and NFC rapid read-write is realized, the equipment state is recognized and checked by combining AI images, the manual misjudgment rate is reduced, the system robustness is ensured, and the system reliability is improved. Through the combination of dynamic encryption coding, multi-modal verification and block chain evidence storage, the data credibility is improved, the environmental adaptability and anti-risk capability of the system are enhanced, and the transformation from manual management to intelligence and digitization is realized.

The invention relates to the technical field of power system communication, in particular to a protocol conversion and communication adaptation system for an optical storage and charging grid-connected device. Comprising a protocol conversion unit used for dynamically analyzing heterogeneous protocols of a photovoltaic inverter, an energy storage converter, a charging pile and power grid side equipment; a communication adaptation unit; an energy collaboration unit; a power grid interface unit; and a man-machine interaction unit. According to the method, the protocol mapping rule base is dynamically updated through the plug-in type architecture module and the machine learning algorithm, self-adaptive analysis of multiple heterogeneous protocols and variant protocols is achieved, the protocol analysis accuracy and generalization ability are improved, and the problem that a traditional static rule base is insufficient in adaptability to non-standard protocols is solved; according to the invention, the distributed edge computing architecture is adopted to construct the bidirectional communication link, so that the real-time performance and security of the communication link are improved, and the defects of high data delay and incomplete security mechanism in the traditional communication architecture are improved.

The invention relates to the technical field of unmanned aerial vehicles, in particular to a low-power-consumption star flash control module applied to an unmanned aerial vehicle and a dummy pilot control method. The method comprises the following steps: acquiring an original control instruction of a real flying hand, and converting the original control instruction into an encrypted pulse signal containing a dynamic key; fusing a frequency spectrum camouflage signal simulating the environment background of a dummy pilot into the encrypted pulse signal, and then transmitting the encrypted pulse signal to the dummy pilot in a self-adaptive frequency hopping mode; synchronously analyzing the dynamic key at a dummy flying hand end and stripping the frequency spectrum camouflage signal to generate a virtual control track matched with the real operation behavior characteristics; and reversely modulating an actual response signal of the unmanned aerial vehicle based on the virtual control track, so that the unmanned aerial vehicle executes an action and forms dynamic error compensation with the virtual control track. According to the invention, a real flying hand can be effectively protected from electronic reconnaissance positioning and attack of an enemy, and the concealment is improved.

The invention relates to a federated learning system based on multi-key homomorphic encryption and adaptive differential privacy, and belongs to the technical field of privacy computing. According to the system, on the premise that no trusted third party exists, a multi-client collaborative key generation and threshold decryption mechanism is achieved, it is ensured that model parameters are always in an encrypted state in the aggregation process, and leakage of a single node is prevented. By introducing a parameter sensitivity analysis and selective encryption strategy, the system only encrypts high-risk parameters, and the encryption burden is effectively reduced. Meanwhile, in combination with an adaptive privacy budget allocation mechanism, the system dynamically adjusts noise intensity according to a model training state, and model performance and convergence speed are maintained while privacy protection capability is improved. According to the method, high robustness and collusion resistance are realized, stable operation under the condition that part of clients are offline is supported, and the method is suitable for application scenes such as medical treatment and finance with high data sensitivity and strict performance requirements.

The invention provides a progressive privacy calculation method and system for a virtual-real fusion scene of an intelligent sweeper, and relates to the technical field of sweepers, and the method comprises the steps: collecting indoor space data through a multi-modal sensor, and constructing a scene knowledge graph through an entangled state registration network and a graph neural network; then, based on deep reinforcement learning and zero-knowledge proof, hierarchical encryption is carried out on the atlas, and scene data versions with different privacy protection intensities are generated through federated learning; and finally, performing path planning in a secure multi-party computing environment, and optimizing a cleaning strategy by using neural symbol reasoning and a graph attention network. According to the invention, scene understanding and path planning of the intelligent sweeper can be realized on the premise of guaranteeing the privacy of the user, the sweeping efficiency is improved, and the user experience is improved.

The invention relates to the technical field of data encryption transmission, and particularly discloses a data security encryption transmission system and method in a cloud computing environment, and the system comprises an identity authentication module which is used for verifying the identity of each transmission party through at least two authentication modes, and authorizing a legal user to carry out data transmission; the data encryption module is used for encrypting to-be-transmitted data by adopting a mode of combining symmetric encryption and asymmetric encryption, and automatically adjusting an encryption strategy based on a dynamic encryption algorithm selection mechanism and a quantum encryption technology; the key management module is used for dynamically generating and managing a key in an encryption transmission process, performing multi-level key storage and access control by adopting a distributed key management scheme, and tracking the life cycle of the key by utilizing a block chain technology; not only is the security of data transmission in the cloud computing environment enhanced, but also the flexibility and the strain capacity of data transmission are improved, and the challenge of network attacks is fully dealt with.

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

Various embodiments described herein generally relate to a method and system for secure distribution of symmetric encryption keys using quantum key distribution (QKD). In at least one embodiment, there is provided a method for secure communication, comprising: establishing one or more secure keys at a first and second ground station using a quantum key distribution (QKD) protocol; transmitting from the first station to the second station a plurality of encryption keys, wherein the transmitting comprises: encrypting, at the first station, the plurality of encryption keys using at least one of the one or more of secure keys to generate an encrypted batch of keys; transmitting the encrypted batch of keys to the second station; and decrypting, at the second station, the encrypted batch of keys using the at least one secure key to access the plurality of encryption keys.

The invention discloses an information acquisition and transmission system of track control equipment, which relates to the technical field of track traffic intelligent monitoring and comprises an intelligent sensing terminal, an edge intelligent analysis node, a safety communication module, a central control platform, a digital twin diagnosis center and a predictive maintenance engine. According to the invention, the intelligent sensing terminal integrates various sensors, adopts a permalloy shielding cavity to isolate external electromagnetic interference, is equipped with a three-stage lightning protection circuit to realize microsecond-stage lightning surge protection, can stably collect parameters of track control equipment in a severe environment, is internally provided with a lightweight LSTM model, carries out preliminary filtering analysis on original data, and is used for monitoring the parameters of the track control equipment. The device operation state can be dynamically identified, the sampling strategy can be adjusted, the basic sampling frequency is maintained in the stable state to reduce power consumption, the sampling frequency is improved by 10 times and the sensor gain is enhanced in the early warning or emergency state, all analysis decisions are completed at the local millisecond level without depending on the cloud, and the real-time performance and accuracy of data processing are effectively improved.

To share encrypted data more securely. After a pair of an identification token 131 and key disclosure permission information 134 transmitted from a first client terminal 102 is verified by a verification unit 106, a key registration unit 107 registers a record 122 including the key 133 and the key disclosure permission information 134 in a database 121 of a key sharing server 101 and transmits key identification information 135 for identifying the record to the first client terminal 102. The first client terminal 102 transmits data 139 including encrypted data 138 obtained by encrypting transmission data by using a cipher key 136 for data encryption after first processing output by a cipher key first processing unit 109, a cipher key 137 for data decryption after first processing output by the cipher key first processing unit 109, and the key identification information 135 obtained from the key registration unit 107, to a second client terminal 103. The second client terminal 103 makes an inquiry to a key disclosure unit 110 by using the key identification information 135 acquired from the received data 139 and an identification token 132 of the terminal itself. The key disclosure unit 110 acquires the pair of key 133 and key disclosure permission information 134 corresponding to the key identification information 135, from the database 121, and notifies, when the identification token 132 is included in a key disclosure permissible range indicated by the key disclosure permission information 134, the second client terminal of the key 133. The second client terminal 103 uses the notified key 133 to generate a cipher key 140 for data decryption after second processing on the basis of the cipher key 137 for data decryption after first processing acquired from the data 139 and uses the cipher key 140 for data decryption after second processing to execute decryption on the encrypted data 138 in the data 139.

The invention relates to the technical field of cloud computing, in particular to a network data encryption and privacy protection system in a cloud environment, which comprises a key management unit driven by a wolf pack algorithm, an encryption algorithm optimization unit, a privacy protection strategy dynamic adjustment unit and a safety monitoring and abnormity response unit. The invention discloses a cloud environment network data encryption and privacy protection system constructed based on a wolf pack algorithm. High-security keys are dynamically generated and distributed through a key management unit, security performance and resource consumption are balanced through an encryption algorithm optimization unit, multi-target dynamic gaming and compliance guarantee are achieved through a privacy protection strategy unit, distributed attack detection and cooperative defense are completed through a security monitoring unit, and the security performance is improved through a cooperative feedback mechanism between the units. Intelligent encryption protection, dynamic strategy adjustment and efficient attack response of the full life cycle of the data in the cloud environment are realized, and the system security, the resource utilization rate and the compliance capability are remarkably improved.

The invention relates to the technical field of network and information security, in particular to a zero-trust multi-party security data exchange method, which comprises the following steps of: generating a zero-trust token and a capability authorization bill and constructing context description data; authentication encryption is performed on the plaintext fragment, attribute-based encryption is performed on the data one-time key, and a policy bearing ciphertext container is assembled; in the trusted execution environment, authentication decryption is completed through a one-time secret key of data recovery through joint challenge and threshold deblocking, or strategy migration and transfer are achieved through proxy re-encryption; and aggregating the decryption event and the forwarding event by vector commitment, generating a time anchor, and mapping the time anchor into a next round of random base. According to the invention, fine-grained authorization of the key layer, no plaintext transfer, event-level verifiable auditing and rapid revocation are realized.

The invention discloses a charging facility data security protection method and system, electronic equipment and a storage medium, and relates to the technical field of information security. The method comprises the following steps: verifying the identity of a vehicle based on a charging request to obtain a verification result; when the verification result is successful, obtaining a charging parameter of a control layer of the target charging pile and a billing parameter of a service layer based on the charging request; generating a first key of a control layer and a second key of a service layer based on the vehicle information of the vehicle and the charging request; performing first encryption processing on the charging parameter based on the first key to obtain first encrypted data, and performing second encryption processing on the charging parameter based on the second key to obtain second encrypted data; and the first encrypted data and the second encrypted data are transmitted to a vehicle terminal of the vehicle after time sequence identifiers are added to the first encrypted data and the second encrypted data. By implementing the technical scheme provided by the invention, the confidentiality of the charging parameter and the billing parameter can be improved, the risks of data leakage, tampering and the like are reduced, and the data security of the charging station is further improved.

Techniques are described for efficient replication and maintaining snapshot data consistency during file storage replication between file systems in different cloud infrastructure regions. In certain embodiments, provenance IDs are used to efficiently identify a starting point (e.g., a base snapshot) for a cross-region replication process, conserve cloud resources while reducing network and IO traffic.

Various systems, computer-readable media, and computer-implemented methods of providing improved data privacy, anonymity and security by enabling subjects to which data pertains to remain “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent that is desired—are disclosed herein. Embodiments include systems that create, access, use, store and / or erase data with increased privacy, anonymity, and security—thereby facilitating the availability of more qualified and accurate information. When personal data is authorized by data subjects to be shared with third parties, embodiments described herein may facilitate the sharing of information in a dynamically-controlled manner that also enables the delivery of temporally-, geographically-, and / or purpose-limited information to the receiving party. In one example, the disclosed techniques may be used to functionally separate geospatial information, such that it remains “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent or degree that is desired.

Techniques are described for efficient replication and maintaining snapshot data consistency during file storage replication between file systems in different cloud infrastructure regions. In certain embodiments, snapshot creation and deletion requests that occur during cross-region replications may be temporarily withheld until appropriate times to execute such requests safely, depending on the timing relationship between such requests and cross-region replication cycles.

The invention discloses an image encryption system and method in an intelligent power grid environment, and aims to solve the problem that an encryption strategy is static and lacks self-adaptive capability in the prior art. The image encryption system comprises terminal equipment, edge equipment and central equipment, and a dynamic key generation unit on the terminal equipment generates a dynamic key by cooperatively utilizing a physical unclonable feature (PUF) of the equipment and a real-time load of a power grid; the hierarchical encryption unit performs encryption of different intensities based on image content complexity. A topology sensing transmission module of the system analyzes power grid topology by using a graph neural network (GNN) and dynamically optimizes transmission. In addition, the image encryption system further integrates low-density parity check code encoding and decoding and a self-adaptive decryption strategy so as to enhance the anti-interference capability. According to the invention, by constructing a sensing, decision-making and execution integrated adaptive security system, the security, high efficiency and robustness of smart grid image data transmission are significantly improved.

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

The invention provides an image data secure transmission method, computing equipment and a computer storage medium. The method is applied to a data sender, and comprises the following steps: executing a first image encryption algorithm, and performing encryption processing on a transmission image through an image key to obtain a ciphertext of the transmission image; executing a first key encryption algorithm, and performing encryption processing on the image key through an encryption key to obtain an encrypted image key; the first image encryption algorithm is different from the first key encryption algorithm; and forming a transmission data packet from the ciphertext, the encryption key and the encrypted image key, and transmitting the transmission data packet to a data receiver. Therefore, a proper image encryption algorithm is adopted for the image data, and a proper key encryption algorithm is adopted for the image key, so that real-time performance and security are both considered in the image data encryption process through a mixed encryption mode.

The invention provides a handshake protocol method and system based on an SM2 algorithm and an SM4 algorithm, and relates to the field of encrypted transmission, and the method comprises the steps: obtaining first request information in a session process; sending a first SM2 public key generated based on an SM2 algorithm and first client random number ciphertext information to the server; decrypting the SM4 ciphertext information based on a first SM2 private key generated by an SM2 algorithm to obtain an SM4 target key; processing the random number ciphertext information of the second client and the random number ciphertext information of the first server; sending the second server random number target ciphertext information to the server; and processing the first request information to receive the session return ciphertext information from the server and decrypt to determine the session return plaintext information. The handshake encryption between the client side and the server side is completed based on the SM2 algorithm and the SM4 cryptographic algorithm, the SM2 algorithm and the SM4 algorithm are used for replacing an RSA algorithm, an ECDHE algorithm and a DES algorithm on which an SSL protocol depends, and autonomous controllability of data security and information security is achieved.

The invention discloses a security encryption transmission system for game data, and relates to the technical field of game data encryption. Comprising a network environment data collection module, a network risk feature extraction module, a feature analysis and machine learning evaluation module, a network environment classification module, a low-risk network Hash algorithm module and a high-risk network Hash algorithm adjustment module, and various parameter information of the current network environment is comprehensively collected. According to the method, the network environment is intelligently evaluated through machine learning, the system recognizes a high-risk situation in real time, the Hash algorithm is dynamically adjusted, stronger encryption is adopted when the risk is high, the communication safety is improved, and viruses and ransomware are prevented. And when the risk is low, a fixed Hash algorithm is used, and high performance is kept. According to the mechanism, data security is effectively guaranteed, resource use is optimized, and security and system performance are balanced.