6316results about "Multiple keys/algorithms usage" patented technology

The present disclosure relates to a blockchain-based authentication system for electric vehicles and drones, and a method for authenticating electric vehicles or drones in a smart city. The proposed blockchain-based authentication system enhances security, privacy, and scalability for electric vehicles (EVs) and drones in smart city environments. It employs a consortium blockchain managed by city authorities and stakeholders, utilizing smart contracts for identity registration, credential issuance, and access control. Device nodes store cryptographic keys securely, while an optional authentication server facilitates off-chain integration. The authentication operation of the system includes, ensuring tamper-proof identity verification through on-chain validation. Authentication attempts are immutably recorded for auditing and anomaly detection. By eliminating single points of failure and strengthening data privacy, this decentralized authentication framework offers a scalable and secure solution for integrating EVs and drones into smart city infrastructures.

A system and method for an AI-controlled sensor network for threat mapping and characterization. The system deploys a network of honeypots and sensors across various geographic locations and network segments, collecting and aggregating data on network traffic and potential threats. An AI orchestrator analyzes this data using advanced machine learning models, generating dynamic honeypot profiles and a comprehensive threat landscape. The system can adapt in real-time to emerging threats, optimize resource allocation, and provide actionable intelligence. By correlating data across multiple points, the system offers enhanced threat detection capabilities and proactive cybersecurity measures, surpassing traditional security information and event management (SIEM) tools.

The invention relates to the technical field of data encryption, and discloses a data encryption protection system and method for intelligent controller hardware, and the method comprises the steps: generating a random confusion factor based on a real-time operation state through constructing a dynamic confusion algorithm, and carrying out the nonlinear transformation of original data; implementing a fragment encryption strategy, dividing fragments according to data sensitivity levels, and adopting a heterogeneous encryption algorithm; generating a dynamic binding key in combination with the environment parameters and the hardware unique identifier; hardware-level integrity check is executed, and data and hardware are verified through cyclic redundancy check codes and hardware fingerprints; establishing a self-adaptive key updating mechanism; performing multi-layer defense linkage; and implementing anti-side channel protection, and constructing a security audit log. According to the method, the hardware data security of the intelligent controller is comprehensively guaranteed, various security threats are effectively resisted, and the data confidentiality, integrity and availability are improved.

Techniques are described for partitioning B-tree keys of file systems into key ranges for parallel processing in delta generation during file storage replications between file systems in different cloud infrastructure regions. In certain embodiments, a delta generation processing for cross-region replication may utilize a key-range splitting mechanism involving a recursive algorithm that partitions B-tree keys of a source file system into roughly equal-size key ranges. All the partitioned key ranges may be processed in parallel and concurrently by different processing threads, one thread per key range, to improve the performance of the delta generation and achieve scalability.

The invention discloses an Internet of Things data transmission optimization system based on intelligent routing, and relates to the technical field of data transmission optimization. The heterogeneous network access module supports adaptive switching of multiple protocols such as 5G, NB-IoT and LoRa, and monitors link quality; intelligent routing decision selects an optimal path by means of deep reinforcement learning, and end-to-end delay is reduced; data distribution scheduling split data streams are transmitted in a multi-path parallel mode, and forward error correction is combined to guarantee reliability. The network state prediction uses an LSTM to predict bandwidth, and a route is adjusted in advance; the secure transmission integrates iris authentication and dynamic encryption. According to the invention, efficient, reliable and secure transmission is cooperatively realized, energy collection and dormancy strategies are combined, the equipment endurance is greatly prolonged, the network energy consumption is reduced, and the method is suitable for industrial control, telemedicine and other scenes with high requirements on real-time performance and reliability.

The invention relates to the technical field of integration of artificial intelligence security and network security, and discloses an AI dynamic security transmission system based on an SASE framework, which realizes security access control based on AI dynamic identity verification through an SASE integration access module, acquires and predicts network performance change in real time by using a network state sensing module, and transmits the network performance change to a network server. Equipment, environment and data content are subjected to multi-dimensional analysis by means of a security risk assessment module, a quantitative risk score is generated, and a transmission protocol, parameters and encryption strength are dynamically adjusted according to a network state and the risk score by means of a dynamic transmission optimization module and a self-adaptive encryption module; the problem that safety protection and transmission efficiency are difficult to cooperate in a traditional architecture is effectively solved, low-delay and high-reliability data transmission service can be provided for AI application in a complex network environment, meanwhile, self-adaptive dynamic protection of the whole data transmission process is achieved, and data safety is comprehensively guaranteed.

The present invention discloses a post-quantum key negotiation system and method based on the IKE protocol, which relates to the field of network security, especially the design and implementation of key exchange and identity authentication protocols. The present invention provides security for data protection and identity authentication by combining the IKE protocol scheme with the post-quantum cryptographic algorithm; by introducing post-quantum cryptographic algorithms such as ML‑KEM, ML‑DSA and FALCON, the quantum resistance of key exchange and identity authentication is enhanced, and the flexibility and adaptability of the protocol are also improved; in addition, the dynamic algorithm selection mechanism adopted by the present invention enables users to optimize security performance according to specific needs, thereby improving the overall efficiency of the system while ensuring information security.

The invention relates to the technical field of agricultural product quality tracing, and discloses an agricultural product quality tracing system based on a block chain technology, and the system comprises a data collection module which is used for collecting environment data, quality detection data and position information of agricultural products in the links of planting, processing, transportation, storage and the like through Internet of Things equipment; the encryption module is used for performing preliminary symmetric encryption processing on the collected data and encrypting sensitive data through a homomorphic encryption algorithm; and the intelligent contract module is used for automatically executing data storage, authority control, zero-knowledge proof verification and cross-chain data management on the block chain. According to the method, the authenticity and security of data in each link are ensured through automatic execution of data storage and authority control by using a distributed account book and a tamper-resistant characteristic of the block chain and through an intelligent contract, and meanwhile, an I PFS distributed storage system is combined with the block chain, so that the integrity of the data is further ensured, and the security of the data is improved. Therefore, all parties can share and query the tracing information trustingly.

The invention relates to the technical field of information security, and discloses an authentication method and system based on a Ksession shared session key MAC, and the method comprises the steps: obtaining to-be-encrypted data in a power monitoring system, dividing the to-be-encrypted data into key data and real-time data, and encrypting the key data and the real-time data; the method comprises the following steps: dynamically generating a Ksession key by using an ECDH protocol and an identity-based IBC technology, generating a message authentication code by using the Ksession key, carrying out integrity and authenticity verification on data in transmission through the message authentication code, transmitting encrypted data through a TLS / SSL protocol, and destroying the Ksession key at the end of a session; a quantum security digital certificate is generated by fusing quantum key distribution and a quantum security signature algorithm, and verification of the digital certificate is realized through a multi-party verification mechanism. The quantum security technology and the advanced encryption theory are integrated, and qualitative leap is achieved in the aspects of identity authentication, data encryption, integrity verification and access control.

The invention provides an identity information dynamic desensitization method and system based on SM4 and SM9 algorithms, and the method comprises the steps: carrying out the data segmentation of original identity information, and obtaining sensitive segment information and common segment information; performing key dynamic generation based on an SM4 algorithm, and encrypting the sensitive segment information to obtain encrypted sensitive segment information; extracting a feature value of the common segment information through a preset hash function, and converting the feature value into coded data in a preset format to obtain converted common segment information; splicing the converted common segment information and the encrypted sensitive segment information to obtain preliminary desensitized data; and encrypting the preliminary desensitized data based on an SM9 algorithm to generate an encrypted ciphertext, and embedding a unique identity identifier associated with the original identity information into the encrypted ciphertext in an encryption mode to obtain desensitized identity information. According to the invention, the dynamic desensitization of the identity information can be realized, and the data format can be kept unchanged.

The invention discloses a market supervision data security protection method and system based on a dynamic encryption strategy, and relates to the technical field of information security. The method comprises the following steps: generating an initial seed input improved four-dimensional hyperchaotic system, and generating a dynamic encryption parameter set through chaotic mapping iteration; the method comprises the following steps: carrying out adaptive fragmentation on market supervision data to be encrypted to generate a data sub-block set, carrying out dynamic S-box-based symmetric encryption on odd index sub-blocks, carrying out a chaotic stream encryption mode associated with a current dynamic sub-key on even index sub-blocks, and generating a unique quantum chaotic fingerprint for each encrypted sub-block; a searchable encryption index is jointly constructed by using a post-quantum encryption algorithm and a lattice-based encryption algorithm and is used for carrying out query operation under the condition that data is not decrypted; the encryption security, privacy protection capability and quantum computing attack resistance of the market supervision data are remarkably improved, and meanwhile, an efficient, flexible and extensible data security protection scheme is provided.

The invention discloses a fire-fighting equipment electronic maintenance management system and method based on the RFID technology, and relates to the technical field of code identification, the system comprises an identification code management module, a maintenance task list generation module, a dynamic data writing module, an inspection verification module and a safety alarm module, maintenance records are written in real time through an RFID tag, and the identification code management module is connected with the dynamic data writing module. A dynamic key updating mechanism is constructed by combining lightweight encryption and block chain evidence storage technologies, data traceability and non-tampering are ensured, cross check is performed through multi-modal data entry, RFID tag, two-dimensional code and NFC rapid read-write is realized, the equipment state is recognized and checked by combining AI images, the manual misjudgment rate is reduced, the system robustness is ensured, and the system reliability is improved. Through the combination of dynamic encryption coding, multi-modal verification and block chain evidence storage, the data credibility is improved, the environmental adaptability and anti-risk capability of the system are enhanced, and the transformation from manual management to intelligence and digitization is realized.

A quantum-key distributed (QKD)-enabled communication architecture it devises for networked microgrids (NMGs). A real-time QKD-enabled NMGs testbed built in an RTDS environment, and a novel two-level key pool sharing (TLKPS) strategy it designs to improve the system resilience against cyberattacks. In the QKD-based microgrid testbed design there is used a real-time power system simulator, i.e., RTDS, including the QKD modeling, hardware connection, communication network design, and QKD integration. By integrating QKD features into a real-time microgrid simulator, this testbed offers a flexible and programmable testing environment for evaluating the performance of QKD-enabled microgrids under a variety of scenarios.

The invention provides a privacy protection method and system based on big data security and privacy calculation, and relates to the technical field of data processing, and the method comprises the steps: obtaining original data feature extraction, obtaining data features, selecting a data desensitization algorithm to carry out data desensitization, carrying out encryption processing through a hybrid fully homomorphic encryption algorithm, and carrying out encryption processing through a hybrid fully homomorphic encryption algorithm. Homomorphic encrypted ciphertext data is generated and sent to the privacy protection computing platform; a data preprocessing protocol for privacy protection is constructed, data filtering and data dimension compression are carried out, multi-party security calculation is executed, a ciphertext calculation result is generated and returned to a data provider, verification is carried out, and if verification passes, decryption and filtering are carried out through a decryption algorithm to obtain a pure plaintext calculation analysis result; and constructing a reverse data desensitization model for reduction to obtain an analysis calculation result, constructing a dual-target optimization model for solving, obtaining an optimal balance point and generating an optimal decision result, desensitizing, uploading to a privacy protection block chain network, and performing distributed credible storage and sharing.

The invention relates to the technical field of power system communication, in particular to a protocol conversion and communication adaptation system for an optical storage and charging grid-connected device. Comprising a protocol conversion unit used for dynamically analyzing heterogeneous protocols of a photovoltaic inverter, an energy storage converter, a charging pile and power grid side equipment; a communication adaptation unit; an energy collaboration unit; a power grid interface unit; and a man-machine interaction unit. According to the method, the protocol mapping rule base is dynamically updated through the plug-in type architecture module and the machine learning algorithm, self-adaptive analysis of multiple heterogeneous protocols and variant protocols is achieved, the protocol analysis accuracy and generalization ability are improved, and the problem that a traditional static rule base is insufficient in adaptability to non-standard protocols is solved; according to the invention, the distributed edge computing architecture is adopted to construct the bidirectional communication link, so that the real-time performance and security of the communication link are improved, and the defects of high data delay and incomplete security mechanism in the traditional communication architecture are improved.

The invention relates to the technical field of unmanned aerial vehicles, in particular to a low-power-consumption star flash control module applied to an unmanned aerial vehicle and a dummy pilot control method. The method comprises the following steps: acquiring an original control instruction of a real flying hand, and converting the original control instruction into an encrypted pulse signal containing a dynamic key; fusing a frequency spectrum camouflage signal simulating the environment background of a dummy pilot into the encrypted pulse signal, and then transmitting the encrypted pulse signal to the dummy pilot in a self-adaptive frequency hopping mode; synchronously analyzing the dynamic key at a dummy flying hand end and stripping the frequency spectrum camouflage signal to generate a virtual control track matched with the real operation behavior characteristics; and reversely modulating an actual response signal of the unmanned aerial vehicle based on the virtual control track, so that the unmanned aerial vehicle executes an action and forms dynamic error compensation with the virtual control track. According to the invention, a real flying hand can be effectively protected from electronic reconnaissance positioning and attack of an enemy, and the concealment is improved.

The invention relates to a federated learning system based on multi-key homomorphic encryption and adaptive differential privacy, and belongs to the technical field of privacy computing. According to the system, on the premise that no trusted third party exists, a multi-client collaborative key generation and threshold decryption mechanism is achieved, it is ensured that model parameters are always in an encrypted state in the aggregation process, and leakage of a single node is prevented. By introducing a parameter sensitivity analysis and selective encryption strategy, the system only encrypts high-risk parameters, and the encryption burden is effectively reduced. Meanwhile, in combination with an adaptive privacy budget allocation mechanism, the system dynamically adjusts noise intensity according to a model training state, and model performance and convergence speed are maintained while privacy protection capability is improved. According to the method, high robustness and collusion resistance are realized, stable operation under the condition that part of clients are offline is supported, and the method is suitable for application scenes such as medical treatment and finance with high data sensitivity and strict performance requirements.

The invention provides a progressive privacy calculation method and system for a virtual-real fusion scene of an intelligent sweeper, and relates to the technical field of sweepers, and the method comprises the steps: collecting indoor space data through a multi-modal sensor, and constructing a scene knowledge graph through an entangled state registration network and a graph neural network; then, based on deep reinforcement learning and zero-knowledge proof, hierarchical encryption is carried out on the atlas, and scene data versions with different privacy protection intensities are generated through federated learning; and finally, performing path planning in a secure multi-party computing environment, and optimizing a cleaning strategy by using neural symbol reasoning and a graph attention network. According to the invention, scene understanding and path planning of the intelligent sweeper can be realized on the premise of guaranteeing the privacy of the user, the sweeping efficiency is improved, and the user experience is improved.

A third-party authentication and encryption method, known as spatio-temporal encryption, is used to protect sensitive information by guaranteeing the origin and integrity of its content for recording or transmission purposes. This method is based on hidden characteristics associated with the message's location and creation date, derived from GNSS signal processing. Without requiring additional dedicated security infrastructure, the method allows for the protection and authentication of any data entered into the information system, anytime and anywhere, and enables the assessment of associated security risks at any system level. Leveraging the various levels of access protection for GNSS signal services, the solution offers different levels of robustness, with complexity and security that can be tailored to the threat level, while minimizing the impact on communication network performance.

The invention relates to the technical field of data encryption transmission, and particularly discloses a data security encryption transmission system and method in a cloud computing environment, and the system comprises an identity authentication module which is used for verifying the identity of each transmission party through at least two authentication modes, and authorizing a legal user to carry out data transmission; the data encryption module is used for encrypting to-be-transmitted data by adopting a mode of combining symmetric encryption and asymmetric encryption, and automatically adjusting an encryption strategy based on a dynamic encryption algorithm selection mechanism and a quantum encryption technology; the key management module is used for dynamically generating and managing a key in an encryption transmission process, performing multi-level key storage and access control by adopting a distributed key management scheme, and tracking the life cycle of the key by utilizing a block chain technology; not only is the security of data transmission in the cloud computing environment enhanced, but also the flexibility and the strain capacity of data transmission are improved, and the challenge of network attacks is fully dealt with.

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

The invention relates to a data security communication method and system between a digital power supply and a microcontroller. The method comprises the following steps: acquiring communication data between a digital power supply and a microcontroller, and performing feature extraction to obtain a communication feature vector and channel state information; performing communication channel detection to obtain real-time channel characteristic parameters; performing anomaly detection to obtain a security risk assessment result; carrying out encryption to obtain an encrypted communication data stream and generating an authentication token; constructing a dynamic graph structure model for graph neural network analysis to obtain an optimized routing strategy and security configuration parameters; and carrying out transmission monitoring to obtain a monitoring result and generate a target security communication strategy. According to the implementation of the method, the communication channel state can be dynamically sensed, the security risk can be evaluated in real time, the encryption strategy and the routing mechanism can be flexibly adjusted, and the method has good expandability and performance optimization capability, so that a powerful guarantee is provided for safe and stable operation of the digital power supply system.

The invention provides a digital certificate generation method and device, electronic equipment and a storage medium, and the method comprises the steps: receiving a certificate generation request sent by a user terminal, the certificate generation request comprises user information and an identifier of a certificate generation algorithm, and the certificate generation algorithm comprises a post quantum cryptographic algorithm and a preset national cryptographic algorithm; and generating a target mixed public key according to the post-quantum public key of the post-quantum cryptographic algorithm and a national cryptographic public key of a preset national cryptographic algorithm, generating a target digital certificate according to the user information and the target mixed public key, and sending the target digital certificate to the user terminal. The digital certificate is generated based on the post-quantum cryptographic algorithm and the national cryptographic algorithm, so that communication security can be ensured, quantum attacks are resisted, and certificate generation at an unconditional security level is realized.

A system, method, and computer-readable medium having instructions thereon for a method is provided for cryptographically securing electronic transmissions, whether for standalone use on text or embedded in processor hardware. The making of and using enhanced 256-bit symmetric ciphers which are FIPS-compliant is provided for security of transmissions as well as of static information, i.e., data at rest.

Systems and methods for the generation and use of session keys supporting secure communications between a client and server device are disclosed. The client hashes each of a series of passwords a first number of times. The hashed passwords are sent to a server. The server applies the hashed password to an array of PUF devices, and receives an initial response bitstream which is stored. The client later hashes each of the series of passwords a second number of times, which is less than the first number, and these are sent to the server. The server continues to hash the second message digest, generate PUF responses, and compare the result to the initially stored responses. For each password, the number of hashes necessary to achieve a match is a partial session key. Latency is improved by an array of separately addressable PUFs, each producing a partial session key.

The invention provides an electronic book file secondary encryption method based on MD5 encryption and an asynchronous request, and relates to the field of data processing. Comprising the following steps: firstly, acquiring a current timestamp, a network state, a user request attribute and a system load state through a data acquisition module, and then performing MD5 preliminary encryption on an electronic book file to generate a first layer of ciphertext; segmenting the first-layer ciphertext and transmitting the segmented first-layer ciphertext to an encryption module through an asynchronous request; a self-adaptive distributed load balancing mechanism is adopted to monitor the system state through an encryption module, resources are dynamically allocated, and tasks are scheduled; in combination with intelligent priority scheduling, determining the priority according to the attributes of the data segments; generating a dynamic key based on a timestamp, a network state and the like to encrypt the data segment in real time; and finally, sorting, checking and combining the encrypted data segments into a complete ciphertext file.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

Systems, devices, and methods are provided for cloud-based privacy controls. User content is encrypted using a content encryption key (CEK). The CEK may be double-encrypted by the data producer—the inner envelope is encrypted using keys associated with privacy domains that are authorized to access the user content. The outer envelope is encrypted using a cloud privacy control's public key. When a data consumer requests access the user content, the cloud privacy control evaluates privacy policies and determine whether access should be permitted. If permitted, the cloud privacy control decrypts the outer envelope and provides the inner envelope with CEK to the requestor. Upon receiving the inner envelope, the data consumer may then decrypt the inner envelope with its privacy domain private key to obtain the CEK. The CEK may then be used to perform a decryption and obtain the user content.

Various embodiments described herein generally relate to a method and system for secure distribution of symmetric encryption keys using quantum key distribution (QKD). In at least one embodiment, there is provided a method for secure communication, comprising: establishing one or more secure keys at a first and second ground station using a quantum key distribution (QKD) protocol; transmitting from the first station to the second station a plurality of encryption keys, wherein the transmitting comprises: encrypting, at the first station, the plurality of encryption keys using at least one of the one or more of secure keys to generate an encrypted batch of keys; transmitting the encrypted batch of keys to the second station; and decrypting, at the second station, the encrypted batch of keys using the at least one secure key to access the plurality of encryption keys.

The invention discloses an information acquisition and transmission system of track control equipment, which relates to the technical field of track traffic intelligent monitoring and comprises an intelligent sensing terminal, an edge intelligent analysis node, a safety communication module, a central control platform, a digital twin diagnosis center and a predictive maintenance engine. According to the invention, the intelligent sensing terminal integrates various sensors, adopts a permalloy shielding cavity to isolate external electromagnetic interference, is equipped with a three-stage lightning protection circuit to realize microsecond-stage lightning surge protection, can stably collect parameters of track control equipment in a severe environment, is internally provided with a lightweight LSTM model, carries out preliminary filtering analysis on original data, and is used for monitoring the parameters of the track control equipment. The device operation state can be dynamically identified, the sampling strategy can be adjusted, the basic sampling frequency is maintained in the stable state to reduce power consumption, the sampling frequency is improved by 10 times and the sensor gain is enhanced in the early warning or emergency state, all analysis decisions are completed at the local millisecond level without depending on the cloud, and the real-time performance and accuracy of data processing are effectively improved.