3851results about "Multiple keys/algorithms usage" patented technology

The present disclosure relates to a blockchain-based authentication system for electric vehicles and drones, and a method for authenticating electric vehicles or drones in a smart city. The proposed blockchain-based authentication system enhances security, privacy, and scalability for electric vehicles (EVs) and drones in smart city environments. It employs a consortium blockchain managed by city authorities and stakeholders, utilizing smart contracts for identity registration, credential issuance, and access control. Device nodes store cryptographic keys securely, while an optional authentication server facilitates off-chain integration. The authentication operation of the system includes, ensuring tamper-proof identity verification through on-chain validation. Authentication attempts are immutably recorded for auditing and anomaly detection. By eliminating single points of failure and strengthening data privacy, this decentralized authentication framework offers a scalable and secure solution for integrating EVs and drones into smart city infrastructures.

A system and method for an AI-controlled sensor network for threat mapping and characterization. The system deploys a network of honeypots and sensors across various geographic locations and network segments, collecting and aggregating data on network traffic and potential threats. An AI orchestrator analyzes this data using advanced machine learning models, generating dynamic honeypot profiles and a comprehensive threat landscape. The system can adapt in real-time to emerging threats, optimize resource allocation, and provide actionable intelligence. By correlating data across multiple points, the system offers enhanced threat detection capabilities and proactive cybersecurity measures, surpassing traditional security information and event management (SIEM) tools.

The invention relates to the technical field of data encryption, and discloses a data encryption protection system and method for intelligent controller hardware, and the method comprises the steps: generating a random confusion factor based on a real-time operation state through constructing a dynamic confusion algorithm, and carrying out the nonlinear transformation of original data; implementing a fragment encryption strategy, dividing fragments according to data sensitivity levels, and adopting a heterogeneous encryption algorithm; generating a dynamic binding key in combination with the environment parameters and the hardware unique identifier; hardware-level integrity check is executed, and data and hardware are verified through cyclic redundancy check codes and hardware fingerprints; establishing a self-adaptive key updating mechanism; performing multi-layer defense linkage; and implementing anti-side channel protection, and constructing a security audit log. According to the method, the hardware data security of the intelligent controller is comprehensively guaranteed, various security threats are effectively resisted, and the data confidentiality, integrity and availability are improved.

The invention discloses an Internet of Things data transmission optimization system based on intelligent routing, and relates to the technical field of data transmission optimization. The heterogeneous network access module supports adaptive switching of multiple protocols such as 5G, NB-IoT and LoRa, and monitors link quality; intelligent routing decision selects an optimal path by means of deep reinforcement learning, and end-to-end delay is reduced; data distribution scheduling split data streams are transmitted in a multi-path parallel mode, and forward error correction is combined to guarantee reliability. The network state prediction uses an LSTM to predict bandwidth, and a route is adjusted in advance; the secure transmission integrates iris authentication and dynamic encryption. According to the invention, efficient, reliable and secure transmission is cooperatively realized, energy collection and dormancy strategies are combined, the equipment endurance is greatly prolonged, the network energy consumption is reduced, and the method is suitable for industrial control, telemedicine and other scenes with high requirements on real-time performance and reliability.

The invention relates to the technical field of integration of artificial intelligence security and network security, and discloses an AI dynamic security transmission system based on an SASE framework, which realizes security access control based on AI dynamic identity verification through an SASE integration access module, acquires and predicts network performance change in real time by using a network state sensing module, and transmits the network performance change to a network server. Equipment, environment and data content are subjected to multi-dimensional analysis by means of a security risk assessment module, a quantitative risk score is generated, and a transmission protocol, parameters and encryption strength are dynamically adjusted according to a network state and the risk score by means of a dynamic transmission optimization module and a self-adaptive encryption module; the problem that safety protection and transmission efficiency are difficult to cooperate in a traditional architecture is effectively solved, low-delay and high-reliability data transmission service can be provided for AI application in a complex network environment, meanwhile, self-adaptive dynamic protection of the whole data transmission process is achieved, and data safety is comprehensively guaranteed.

The invention discloses a market supervision data security protection method and system based on a dynamic encryption strategy, and relates to the technical field of information security. The method comprises the following steps: generating an initial seed input improved four-dimensional hyperchaotic system, and generating a dynamic encryption parameter set through chaotic mapping iteration; the method comprises the following steps: carrying out adaptive fragmentation on market supervision data to be encrypted to generate a data sub-block set, carrying out dynamic S-box-based symmetric encryption on odd index sub-blocks, carrying out a chaotic stream encryption mode associated with a current dynamic sub-key on even index sub-blocks, and generating a unique quantum chaotic fingerprint for each encrypted sub-block; a searchable encryption index is jointly constructed by using a post-quantum encryption algorithm and a lattice-based encryption algorithm and is used for carrying out query operation under the condition that data is not decrypted; the encryption security, privacy protection capability and quantum computing attack resistance of the market supervision data are remarkably improved, and meanwhile, an efficient, flexible and extensible data security protection scheme is provided.

The invention discloses a fire-fighting equipment electronic maintenance management system and method based on the RFID technology, and relates to the technical field of code identification, the system comprises an identification code management module, a maintenance task list generation module, a dynamic data writing module, an inspection verification module and a safety alarm module, maintenance records are written in real time through an RFID tag, and the identification code management module is connected with the dynamic data writing module. A dynamic key updating mechanism is constructed by combining lightweight encryption and block chain evidence storage technologies, data traceability and non-tampering are ensured, cross check is performed through multi-modal data entry, RFID tag, two-dimensional code and NFC rapid read-write is realized, the equipment state is recognized and checked by combining AI images, the manual misjudgment rate is reduced, the system robustness is ensured, and the system reliability is improved. Through the combination of dynamic encryption coding, multi-modal verification and block chain evidence storage, the data credibility is improved, the environmental adaptability and anti-risk capability of the system are enhanced, and the transformation from manual management to intelligence and digitization is realized.

The invention relates to the technical field of power system communication, in particular to a protocol conversion and communication adaptation system for an optical storage and charging grid-connected device. Comprising a protocol conversion unit used for dynamically analyzing heterogeneous protocols of a photovoltaic inverter, an energy storage converter, a charging pile and power grid side equipment; a communication adaptation unit; an energy collaboration unit; a power grid interface unit; and a man-machine interaction unit. According to the method, the protocol mapping rule base is dynamically updated through the plug-in type architecture module and the machine learning algorithm, self-adaptive analysis of multiple heterogeneous protocols and variant protocols is achieved, the protocol analysis accuracy and generalization ability are improved, and the problem that a traditional static rule base is insufficient in adaptability to non-standard protocols is solved; according to the invention, the distributed edge computing architecture is adopted to construct the bidirectional communication link, so that the real-time performance and security of the communication link are improved, and the defects of high data delay and incomplete security mechanism in the traditional communication architecture are improved.

The invention relates to the technical field of unmanned aerial vehicles, in particular to a low-power-consumption star flash control module applied to an unmanned aerial vehicle and a dummy pilot control method. The method comprises the following steps: acquiring an original control instruction of a real flying hand, and converting the original control instruction into an encrypted pulse signal containing a dynamic key; fusing a frequency spectrum camouflage signal simulating the environment background of a dummy pilot into the encrypted pulse signal, and then transmitting the encrypted pulse signal to the dummy pilot in a self-adaptive frequency hopping mode; synchronously analyzing the dynamic key at a dummy flying hand end and stripping the frequency spectrum camouflage signal to generate a virtual control track matched with the real operation behavior characteristics; and reversely modulating an actual response signal of the unmanned aerial vehicle based on the virtual control track, so that the unmanned aerial vehicle executes an action and forms dynamic error compensation with the virtual control track. According to the invention, a real flying hand can be effectively protected from electronic reconnaissance positioning and attack of an enemy, and the concealment is improved.

The invention relates to a federated learning system based on multi-key homomorphic encryption and adaptive differential privacy, and belongs to the technical field of privacy computing. According to the system, on the premise that no trusted third party exists, a multi-client collaborative key generation and threshold decryption mechanism is achieved, it is ensured that model parameters are always in an encrypted state in the aggregation process, and leakage of a single node is prevented. By introducing a parameter sensitivity analysis and selective encryption strategy, the system only encrypts high-risk parameters, and the encryption burden is effectively reduced. Meanwhile, in combination with an adaptive privacy budget allocation mechanism, the system dynamically adjusts noise intensity according to a model training state, and model performance and convergence speed are maintained while privacy protection capability is improved. According to the method, high robustness and collusion resistance are realized, stable operation under the condition that part of clients are offline is supported, and the method is suitable for application scenes such as medical treatment and finance with high data sensitivity and strict performance requirements.

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

Various embodiments described herein generally relate to a method and system for secure distribution of symmetric encryption keys using quantum key distribution (QKD). In at least one embodiment, there is provided a method for secure communication, comprising: establishing one or more secure keys at a first and second ground station using a quantum key distribution (QKD) protocol; transmitting from the first station to the second station a plurality of encryption keys, wherein the transmitting comprises: encrypting, at the first station, the plurality of encryption keys using at least one of the one or more of secure keys to generate an encrypted batch of keys; transmitting the encrypted batch of keys to the second station; and decrypting, at the second station, the encrypted batch of keys using the at least one secure key to access the plurality of encryption keys.

The invention discloses an information acquisition and transmission system of track control equipment, which relates to the technical field of track traffic intelligent monitoring and comprises an intelligent sensing terminal, an edge intelligent analysis node, a safety communication module, a central control platform, a digital twin diagnosis center and a predictive maintenance engine. According to the invention, the intelligent sensing terminal integrates various sensors, adopts a permalloy shielding cavity to isolate external electromagnetic interference, is equipped with a three-stage lightning protection circuit to realize microsecond-stage lightning surge protection, can stably collect parameters of track control equipment in a severe environment, is internally provided with a lightweight LSTM model, carries out preliminary filtering analysis on original data, and is used for monitoring the parameters of the track control equipment. The device operation state can be dynamically identified, the sampling strategy can be adjusted, the basic sampling frequency is maintained in the stable state to reduce power consumption, the sampling frequency is improved by 10 times and the sensor gain is enhanced in the early warning or emergency state, all analysis decisions are completed at the local millisecond level without depending on the cloud, and the real-time performance and accuracy of data processing are effectively improved.

The invention relates to the technical field of cloud computing, in particular to a network data encryption and privacy protection system in a cloud environment, which comprises a key management unit driven by a wolf pack algorithm, an encryption algorithm optimization unit, a privacy protection strategy dynamic adjustment unit and a safety monitoring and abnormity response unit. The invention discloses a cloud environment network data encryption and privacy protection system constructed based on a wolf pack algorithm. High-security keys are dynamically generated and distributed through a key management unit, security performance and resource consumption are balanced through an encryption algorithm optimization unit, multi-target dynamic gaming and compliance guarantee are achieved through a privacy protection strategy unit, distributed attack detection and cooperative defense are completed through a security monitoring unit, and the security performance is improved through a cooperative feedback mechanism between the units. Intelligent encryption protection, dynamic strategy adjustment and efficient attack response of the full life cycle of the data in the cloud environment are realized, and the system security, the resource utilization rate and the compliance capability are remarkably improved.

The invention relates to the technical field of network and information security, in particular to a zero-trust multi-party security data exchange method, which comprises the following steps of: generating a zero-trust token and a capability authorization bill and constructing context description data; authentication encryption is performed on the plaintext fragment, attribute-based encryption is performed on the data one-time key, and a policy bearing ciphertext container is assembled; in the trusted execution environment, authentication decryption is completed through a one-time secret key of data recovery through joint challenge and threshold deblocking, or strategy migration and transfer are achieved through proxy re-encryption; and aggregating the decryption event and the forwarding event by vector commitment, generating a time anchor, and mapping the time anchor into a next round of random base. According to the invention, fine-grained authorization of the key layer, no plaintext transfer, event-level verifiable auditing and rapid revocation are realized.

Techniques are described for efficient replication and maintaining snapshot data consistency during file storage replication between file systems in different cloud infrastructure regions. In certain embodiments, provenance IDs are used to efficiently identify a starting point (e.g., a base snapshot) for a cross-region replication process, conserve cloud resources while reducing network and IO traffic.

Various systems, computer-readable media, and computer-implemented methods of providing improved data privacy, anonymity and security by enabling subjects to which data pertains to remain “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent that is desired—are disclosed herein. Embodiments include systems that create, access, use, store and / or erase data with increased privacy, anonymity, and security—thereby facilitating the availability of more qualified and accurate information. When personal data is authorized by data subjects to be shared with third parties, embodiments described herein may facilitate the sharing of information in a dynamically-controlled manner that also enables the delivery of temporally-, geographically-, and / or purpose-limited information to the receiving party. In one example, the disclosed techniques may be used to functionally separate geospatial information, such that it remains “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent or degree that is desired.

Techniques are described for efficient replication and maintaining snapshot data consistency during file storage replication between file systems in different cloud infrastructure regions. In certain embodiments, snapshot creation and deletion requests that occur during cross-region replications may be temporarily withheld until appropriate times to execute such requests safely, depending on the timing relationship between such requests and cross-region replication cycles.

The invention discloses an image encryption system and method in an intelligent power grid environment, and aims to solve the problem that an encryption strategy is static and lacks self-adaptive capability in the prior art. The image encryption system comprises terminal equipment, edge equipment and central equipment, and a dynamic key generation unit on the terminal equipment generates a dynamic key by cooperatively utilizing a physical unclonable feature (PUF) of the equipment and a real-time load of a power grid; the hierarchical encryption unit performs encryption of different intensities based on image content complexity. A topology sensing transmission module of the system analyzes power grid topology by using a graph neural network (GNN) and dynamically optimizes transmission. In addition, the image encryption system further integrates low-density parity check code encoding and decoding and a self-adaptive decryption strategy so as to enhance the anti-interference capability. According to the invention, by constructing a sensing, decision-making and execution integrated adaptive security system, the security, high efficiency and robustness of smart grid image data transmission are significantly improved.

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

The invention provides an image data secure transmission method, computing equipment and a computer storage medium. The method is applied to a data sender, and comprises the following steps: executing a first image encryption algorithm, and performing encryption processing on a transmission image through an image key to obtain a ciphertext of the transmission image; executing a first key encryption algorithm, and performing encryption processing on the image key through an encryption key to obtain an encrypted image key; the first image encryption algorithm is different from the first key encryption algorithm; and forming a transmission data packet from the ciphertext, the encryption key and the encrypted image key, and transmitting the transmission data packet to a data receiver. Therefore, a proper image encryption algorithm is adopted for the image data, and a proper key encryption algorithm is adopted for the image key, so that real-time performance and security are both considered in the image data encryption process through a mixed encryption mode.

Systems, devices, methods, and circuits for managing data security in storage devices. In one aspect, a storage device includes at least one memory device and a controller coupled to the at least one memory device. The controller is configured to: encrypt first data with a first type of cryptographic algorithm and encrypt second data with a second type of cryptographic algorithm. The first data is associated with a first security level, and the second data is associated with a second security level that is higher than the first security level. The second type of cryptographic algorithm has a greater encryption strength than the first type of cryptographic algorithm.

The invention discloses an intelligent switching method for a multi-link encrypted transmission tunnel, and relates to the technical field of multi-link communication, the method constructs a multi-link communication system, combines real-time monitoring and intelligent analysis, can provide redundant and diversified link selection, and improves the communication efficiency on the basis of ensuring the communication stability and reliability. And the encryption strength and priority of the link are dynamically adjusted, and the security and efficiency of data transmission are optimized. The system intelligently judges link quality and reduces switching delay by monitoring factors such as electromagnetic interference, driving speed and building shielding in real time and combining an anti-interference capability index Kgr; and when the link quality is unstable, the encryption strength is dynamically adjusted and the link with better performance is switched to. In combination with vehicle load data and packet loss data, the system can further optimize link judgment and switch to a safer link in time to avoid communication interruption. The method is especially suitable for efficient and safe communication requirements of the unmanned vehicle in a complex and high-speed driving environment.

The invention relates to an office process automation data analysis method based on a symmetric encryption algorithm, and the technical scheme comprises the following steps: introducing an encryption strategy generator, and dynamically adjusting the parameters of the symmetric encryption algorithm including the key length and the encryption round number through the real-time analysis of the data communication content including the data sensitivity, the frequency and the data volume; constructing a self-adaptive optimization model, and adjusting an encryption strategy according to external conditions such as a network state, equipment computing power and user behaviors; fragmenting the data packet before transmission, and allocating different transmission paths according to current network conditions and security evaluation; constructing a dynamic data recombination module at a data receiving end, and verifying and recombining data when encrypted data packets of different paths arrive; a lightweight key negotiation protocol based on symmetric encryption is adopted, and a key is generated and negotiated immediately when two communication parties initiate data exchange; a secret key life cycle management mechanism is introduced, and the service life and the number of times of limitation are set for each secret key.

A method for combining multiple and distinct databases into at least one encrypted and compressed embedded key having multiple numerical representations. The method is usable with any database. Further, the method, includes generating encrypted compressed organization keys which are joined with encrypted compression keys to, in essence, add a layer of encryption to compression and a layer of compression to encryption.

The invention discloses a lightweight hopping key encryption system based on a national cryptographic algorithm, relates to the technical field of data communication encryption, and solves the problem that an initial key and a hopping key are difficult to generate; a key hopping mode is difficult to analyze so as to detect an abnormal state; intelligent contract automatic key management is difficult to carry out; plaintext data is difficult to encrypt according to the analysis security index; the data verification index is difficult to analyze for data verification after the hopping key is decrypted; the operation state is difficult to monitor in real time to detect an attack mode; and the defense capability and the key hopping validity are difficult to assess, and the overall security assessment value is difficult to assess. According to the method, the state cryptographic algorithm is applied, the hopping key mechanism is combined, the key hopping rule is automatically executed by using the intelligent contract, and the overall security assessment value is comprehensively assessed by monitoring the running state.

The invention relates to the technical field of enterprise data encryption, and discloses an enterprise data encryption method and system based on artificial intelligence, and the method comprises the steps: collecting internal and external heterogeneous data streams of an enterprise, carrying out the standardization processing, and recognizing potential risk features through combining time sequence alignment and vulnerability analysis; a risk probability analysis tool is utilized to carry out quantitative evaluation from two dimensions of data sensitivity and an influence range, an encryption parameter adjustment scheme is dynamically generated, calculation and storage resources are dynamically allocated according to a scene risk level, an encryption strategy is updated in real time, and hierarchical protection is carried out on sensitive information. According to the method, corresponding encryption strength can be adopted for data of different risk levels, resource utilization is optimized while safety is guaranteed, the data leakage risk is effectively dealt with, and the enterprise information safety protection capability is improved.

Disclosed herein are systems and methods for threshold cryptography for cloud-based software-implemented hardware security modules. In an embodiment, an encryption system collects at least a decryption-threshold number of private-key shares from a secure store, where the private-key shares correspond to a public key generated in a first secure enclave as part of a secret key set, which also includes a first plural quantity of the private-key shares. The encryption system obtains an ephemeral-hardware-security-module-(eHSM)-encryption key by decrypting the collected private-key shares. The encryption system initializes, in a second secure enclave, a second instance of a first eHSM. The initialized second instance of the first eHSM is encrypted with the obtained eHSM-encryption key.

A method by an integrated access and backhaul, IAB, node and an IAB node for securely communicating with at least one second IAB node is provided. A connection is established a connection with a donor IAB node of a network. A first message including a symmetric key to use in securely communicating with the at least one second IAB node is received from the donor IAB node. A second message is transformed into a secure message using the symmetric key and a message protection algorithm. The secure message is transmitted to the at least one second IAB node.