7118results about "Public key for secure communication" patented technology

The invention provides a private domain live broadcast data storage and visitor authentication method and system based on a block chain, and relates to the technical field of data storage and access control, and the method comprises the steps: collecting multi-mode biological characteristic data of a visitor, carrying out the feature extraction and fusion through a deep neural network of a space-time attention mechanism, and carrying out the authentication of the visitor; authenticity verification is carried out in combination with an adversarial generative network, a dynamic identity token is generated, and a hash value of the dynamic identity token is written into the block chain. The method comprises the following steps: performing semantic analysis on live broadcast data flow through a self-adaptive content perception model, constructing a double-layer access control matrix according to a data sensitivity level and a credibility score, performing self-adaptive fragmentation and hierarchical encryption based on federated learning, and then storing. After an access request is subjected to identity verification, an optimal edge node is selected according to access authority and network performance parameters to construct multi-path transmission, and a transmission strategy is generated based on a service quality score and a data sensitivity level. And when the service quality is lower than a threshold value, triggering the smart contract to perform fault migration.

The invention provides a block chain-based distributed device identity authentication and access control method and system, and relates to the technical field of block chains, and the method comprises the steps: generating a target device fingerprint by a to-be-accessed device based on a physical cloning-free function of the to-be-accessed device, binding the target device fingerprint with a device public key to generate device identity information, and sending the device identity information to the to-be-accessed device; carrying out block chain evidence storage on the equipment identity information through an identity authentication smart contract; the authentication node queries corresponding equipment identity information based on an equipment fingerprint sent by the to-be-accessed equipment, and verifies the digital signature in the access authentication request by using the equipment public key; the access device which passes the authentication and obtains the encrypted session key obtains an access control strategy pre-configured by an administrator through an access control smart contract; and when needing to access network resources, the access equipment accesses the network resources based on the access control strategy.

Techniques for updating certificate bundles may include receiving, at an entity associated with a virtual cloud network, a certificate bundle that includes an updated set of certificate authority (CA) certificates. The techniques may include applying a validation process to an entity certificate based on the certificate bundle, with the entity certificate having been issued to the entity prior to the entity receiving the certificate bundle. The validation process may include validating, by the entity, a certificate chain that includes the entity certificate and a CA certificate included in the updated set of CA certificates. The techniques may include, responsive to validating the certificate chain, installing the certificate bundle in a storage medium associated with the entity, and utilizing, by the entity, the certificate bundle to authenticate at least one additional entity associated with the virtual cloud network.

The invention discloses a collaborative sharing method, system and device on an energy data chain fusing multi-party security calculation and zero knowledge proof and a storage medium, and belongs to the field of energy data security sharing and block chain privacy protection, and the method comprises the steps: executing desensitization processing on original data according to types, and generating a cryptographic commitment value and a data hash identifier; encrypting and fragmenting the desensitized data, registering a task structure body through an intelligent contract, and uploading the task structure body; and each node decrypts the ciphertext, executes calculation and generates a zero-knowledge proof, and submits the zero-knowledge proof to the block chain to be verified by the smart contract. According to the method, data privacy protection and result verifiability unification are realized, cross-mechanism cooperation efficiency is improved, an auditing system on a whole process chain is constructed, and safe sharing of energy data is guaranteed.

The invention discloses a big data auxiliary key generation method and system in communication data encryption transmission, and relates to the technical field of big data analysis and processing. The dynamic entropy source processing module is used for generating a high-randomness entropy pool by combining an information entropy quantification model and adopting a Shannon entropy and minimum entropy fusion algorithm; the anti-quantum key generation module is used for generating a dynamic variable-length key seed based on an entropy pool driven post-quantum cryptographic algorithm; the hierarchical key negotiation module adopts a clustering Diffie-Hellman protocol, dynamically divides negotiation according to network topology, and precomputes and reduces the load of a core network through edge nodes; and a lightweight verification and update module. According to the method, high-entropy sources such as environmental noise, user behaviors and equipment hardware fingerprints are fused with low-entropy sources such as network messages and sensor data, and an intelligent acquisition strategy and a nonlinear decorrelation technology are combined, so that the anti-quantum dynamic entropy pool is generated, and the randomness of a secret key and the reliability of the entropy sources are improved.

Systems, methods, and computer-readable storage media to protect non-fungible tokens (NFTs) using a protection architecture. One method includes receiving an NFT, authenticating the NFT including authenticating or verifying the NFT using a key and authenticating the link of the NFT, and protecting the NFT including generating a public-private key pair, encapsulating the NFT within a control structure, updating an NFT account in an overlay ledger, generating and storing a cold storage object in a cold storage ledger, and broadcasting the NFT to a blockchain storage.

The invention provides an encryption transmission method and system of a wireless information transmission communication base station, relates to the technical field, discloses the encryption transmission method of the wireless information transmission communication base station, and belongs to the technical field of wireless communication. The method comprises the following steps: receiving a communication signal and extracting identity authentication information and a signal characteristic parameter; performing identity authentication scoring based on a deep neural network, performing signal feature scoring through spectral analysis, and constructing a communication security assessment model; a key pair is generated by adopting an elliptic curve cryptographic algorithm, and data is encrypted after being subjected to confusion transformation and diffusion transformation; transmitting a key by using a quantum key distribution technology; and selecting an optimal transmission channel based on the operation state data of the communication base station, and performing data transmission by adopting interleaving coding and adaptive power control technologies. According to the invention, the security and transmission reliability of wireless communication are improved, and the anti-interference capability is enhanced.

The invention relates to the technical field of management of the Internet of Things, and discloses a security control method and system for remote control of the Internet of Things, and the system comprises a security remote control platform, a zero-trust gateway, an authentication module, a security policy engine, edge proxy equipment and an encryption communication module. And the authentication module is used for performing identity authentication on the equipment and the user. The security policy engine dynamic access control table comprises access rule entries and associated signature information, and is issued to the edge proxy device through the zero-trust gateway. And the edge proxy device stores the dynamic access control table, verifies the signature information based on the platform public key, and performs matching and verification according to the access rule entry when receiving the control instruction. And the encryption communication module is used for performing encryption transmission on the access control table, the control instruction and the execution result. According to the invention, the whole process of remote control of the Internet of Things is dynamic, secure and credible, and the anti-attack capability and operation reliability of the system are effectively improved.

The invention discloses a financial data privacy protection system based on block chain security multi-party computing, and belongs to the technical field of data protection, and the system specifically comprises the steps that a data preprocessing module segments original financial data, and adds a unique watermark identifier; the distributed account book stores the Hash abstract and watermark mapping relation of the encrypted logic data fragment, and the digital signature and the timestamp are fused to ensure reliability; the computing node cluster receives data through a special interface, dynamically builds a computing group according to a service rule and outputs an encrypted computing result; bidirectional authentication is carried out on the zero-knowledge proof verifier and the computing node cluster to verify the data holding right; the encryption proxy gateway processes an output result of the computing node cluster to complete format conversion and ciphertext superposition; the cross-link routing module constructs a virtual coverage layer, cross-link transmission of encryption results is achieved through protocol conversion and three-way handshake verification, and a heterogeneous chain protocol converter and a verification assembly guarantee transmission safety; the financial data privacy security is comprehensively guaranteed, and the data processing efficiency and reliability are improved.

The invention discloses a driving vehicle road cloud collaborative safety management and control method and system based on trusted computing, and the method comprises the steps: generating an HMAC-SM3 data fingerprint through employing an SM3 Hash algorithm engine, and proposing an LSTM lightweight dynamic trust evaluation model based on a TinyML framework; through a step-by-step Hash verification and rollback mechanism, through Geohash coding and SM3 Hash joint calculation, based on an aggregation signature of a BLS12-381 curve and public key aggregation, the communication overhead during multi-RSU collaborative signature is reduced; distributed private key fragmentation decryption is realized by adding a homomorphic aggregation ciphertext; aggregating and delaying the compressed ciphertext; dynamically evaluating the credibility of the nodes by a Krum dynamic defense mechanism; the system comprises a vehicle side credible sensing layer, a roadside credible broadcast layer and a cloud credible decision-making layer. According to the invention, through layered credibility verification, dynamic trust chain extension and a data privacy protection mechanism, the security and credibility problems of multi-node cooperation in an automatic driving scene are solved.

The invention discloses a network security analysis early warning system based on artificial intelligence, and the system comprises a data collection layer which captures full flow based on DPI, aggregates firewall logs, terminal behaviors and threat intelligence, and constructs a structured data pool; through TLS fingerprint identification of AI driving, the encrypted traffic is penetrated, and a sampling strategy is dynamically adjusted in combination with reinforcement learning. The intelligent analysis layer is used for carrying out cross validation on known threats and abnormal behaviors; the time sequence CNN extracts encrypted traffic features, and a novel threat detector is rapidly generated by using historical attack fragments in combination with a meta-learning framework; sHAP value driving dynamic feature selection and optimization feature vector input; the decision-making early warning layer is used for fusing multi-source features through a Bayesian network and generating 0-100 score risk scores; a self-adaptive threshold module is combined to adjust a score threshold in real time, and a high-risk event is pushed; the collaborative response layer is used for triggering a preset decision tree, deploying a GAN dynamic honeypot to trap an attacker and reversely tracing; the Neo4j visually restores the attack path, and blocking is executed after the threat is confirmed by a progressive response mechanism.

Disclosed are systems, apparatuses, methods, and computer-readable media for booting a device with independent stage keys. In one illustrative example, a computing device can generate a first stage key for a first stage of a current boot operation of the device based on a private key associated with the device. The computing device can authenticate a first firmware of the first stage using a first authentication tag and the first stage key, wherein the first authentication tag is generated during a previous boot operation. computing device can execute the first firmware based on authenticating the first firmware.

The invention provides a privacy protection method and system based on big data security and privacy calculation, and relates to the technical field of data processing, and the method comprises the steps: obtaining original data feature extraction, obtaining data features, selecting a data desensitization algorithm to carry out data desensitization, carrying out encryption processing through a hybrid fully homomorphic encryption algorithm, and carrying out encryption processing through a hybrid fully homomorphic encryption algorithm. Homomorphic encrypted ciphertext data is generated and sent to the privacy protection computing platform; a data preprocessing protocol for privacy protection is constructed, data filtering and data dimension compression are carried out, multi-party security calculation is executed, a ciphertext calculation result is generated and returned to a data provider, verification is carried out, and if verification passes, decryption and filtering are carried out through a decryption algorithm to obtain a pure plaintext calculation analysis result; and constructing a reverse data desensitization model for reduction to obtain an analysis calculation result, constructing a dual-target optimization model for solving, obtaining an optimal balance point and generating an optimal decision result, desensitizing, uploading to a privacy protection block chain network, and performing distributed credible storage and sharing.

The invention belongs to the technical field of digital information transmission, and relates to a vehicle-mounted ad hoc network security communication system and method based on an NTRU lattice cryptosystem, and the system comprises a message signature module, a message encryption module, a message decryption module, an identity authentication module, and a key exchange module. The message signature module carries out signature by utilizing a private key and a random polynomial dynamically generated by a pseudo-random number generator based on an NTRU lattice cryptosystem; the message encryption module encrypts a to-be-sent message by randomly selecting a temporary polynomial and combining a public key of a receiver; the message decryption module is used for decrypting the received ciphertext # imgabs1 # by using a private key and an inverse element # imgabs0 # of a module p of the private key; the identity authentication module is used for performing identity authentication; the key exchange module realizes secure key exchange between communication nodes in the vehicle-mounted ad hoc network through an improved Blom key distribution protocol. The system improves the security and communication efficiency of the vehicle-mounted network.

The invention relates to the field of medical examination data, and discloses a medical examination data sharing method based on cloud authentication, and the method comprises the following steps: carrying out the dynamic desensitization of original medical examination data at an edge node, and generating desensitization data meeting the privacy-utility balance; verifying the identity and authority of a request end user through a zero-knowledge proof protocol, and generating an authentication result bound with the privacy policy; performing hierarchical encryption on the desensitized data based on an anti-quantum attribute-based encryption algorithm to generate a ciphertext dynamically associated with the access attribute; and dynamically decrypting the data according to the real-time context parameters, and performing secondary desensitization processing in combination with an access scene. The technical scheme is optimized by adopting the dynamic desensitization and rate distortion theory, the technical effect of privacy-utility dynamic balance is achieved, and compared with the problems of fixed static desensitization rule and over-protection or under-protection in the prior art, the core defect that the method cannot adapt to the multi-scene data sharing requirement is overcome.

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

The invention discloses a server BMC dynamic security authentication and firmware protection method and system based on a hardware root of trust, relates to the technical field of server remote management security, and discloses the server BMC dynamic security authentication and firmware protection method and system based on the hardware root of trust, which realize dynamic authentication by generating a device fingerprint through a security chip. According to the method, a multi-layer protection mechanism is constructed in combination with fragment encryption, differential hash check and memory integrity verification, and meanwhile, the data credibility is enhanced by using a block chain storage key hash value, so that the problems of static authentication risk, insufficient firmware tampering detection and missing of a trust chain in a traditional scheme are effectively solved, and the security protection capability of a BMC system can be improved.

A method training an artificial neural network (ANN) on a remote host computes, using a trusted process deployed in a trusted execution environment (TEE) on the remote host, a key-pair for a homomorphic encryption scheme and shares, by the trusted process, the public key (PK) of the key-pair with an untrusted process deployed on the remote host. The method splits the training procedure of the ANN between the untrusted process and the trusted process, wherein the untrusted process computes encrypted inputs to neurons of the ANN by means of the homomorphic encryption scheme, while the trusted process computes outputs of the neurons based on the respective encrypted inputs to the neurons as provided by the untrusted process.

A System for providing Interactive Transaction Frameworks, utilizing biometric authentication and semantic web technologies is disclosed. The system registers users with a unique biometric-based identifier, and employs ontologies, schemas, and knowledge graphs to create a semantic foundation. A Large Language Model integrated with the Knowledge Graph Module enables intelligent processing of Interactive Transaction data. The system composes Interactive Transactions with fields mapped to semantic triples, maintains them in an Interactive Transaction Library, and manages user permissions. A Transaction Publishing Platform facilitates Interactive Transaction distribution and submission-response cycles. The system refines inputs and responses, determining outcomes based on these interactions. The system offers a sophisticated, secure, and adaptable approach to Interactive Transaction management and processing across various domains.

The invention relates to the technical field of quantum signature, in particular to a two-party collaborative Aigis-sig post-quantum signature method, which comprises the following steps of: generating a collaborative Aigis-sig signature secret key part; a public key and respective private keys are calculated through interaction of the client and the server; an Aigis-sig signature is calculated; and a signature value # imgabs0 # is calculated through cooperation of the client and the server. Through a two-party collaborative signature mechanism, ML-LWE difficult problem security guarantee and standard Aigs-sig interoperability, good balance among security, quantum computing resistance, computing efficiency, user experience and deployment cost is achieved, and a reliable solution is provided for high-security digital signature application in the post-quantum era.

The invention provides a PUF (Physical Unclonable Function)-based lightweight unmanned aerial vehicle identity authentication method, which is mainly used for low-power-consumption secure communication between resource-constrained devices, and is particularly suitable for communication between unmanned aerial vehicles and a local server and between unmanned aerial vehicles. According to the method, an efficient and safe identity authentication mechanism is provided by creatively combining PUF generation equipment uniqueness information, public key encryption (ECC), hash calculation and memory integrity verification. By introducing a random number and a timestamp mechanism, a replay attack is prevented, and an independent and safe session key is generated through negotiation. According to the scheme, a dynamic key updating mechanism is further introduced, updating of a PUF key is completed under the guidance of a server, the dynamism and safety of the authentication process are effectively enhanced, potential threats such as man-in-the-middle attack, replay attack and forgery attack are prevented, and the method can achieve rapid and safe identity authentication on an unmanned aerial vehicle platform with limited resources and limited computing power, and is high in practicability. And the reliability and the safety of identity authentication of the equipment are greatly improved.

The present disclosure provides a method for securing document content. A document security manager receives a digital document containing original text and image content. The original text content is processed to identify text portions by parsing annotations, analyzing proximate text, extracting content within the determined scope, and determining encryption attributes. The original image content is processed to identify image portions by detecting user-defined selections or employing a neural network to identify sensitive objects. Encrypt content requests are generated including the identified text and image portions with associated attributes and metadata. The requests are transmitted to a cryptographic engine, which returns encrypted content. A partially encrypted document is built by replacing original content with masking symbols, applying visual obfuscation, embedding encrypted content as metadata, and updating document properties to indicate encrypted content.

The invention provides an intelligent lock control method and system based on dynamic identity verification, and relates to the technical field of artificial intelligence, and the method comprises the steps: building a multi-dimensional risk assessment model comprising an operation time interval, a biological characteristic change rate and a spatial position parameter, and obtaining a risk assessment score; according to the risk assessment score, performing preliminary adjustment on the biological characteristic data, and performing encryption processing and characteristic enhancement on the preliminarily adjusted biological characteristic data in combination with a dynamic key to obtain processed biological characteristic data; performing collaborative calibration on the processed biological characteristic data according to the risk assessment score to obtain calibrated biological characteristic data; and encrypting the calibrated biological characteristic data through an anti-quantum computing encryption protocol, and carrying out weighted fusion on the encrypted characteristic data, the dynamic key, the environmental adaptability score and the risk assessment score to generate a final unlocking instruction. According to the invention, the safety and robustness of the intelligent lock are improved.

Systems, devices, and methods are provided for cloud-based privacy controls. User content is encrypted using a content encryption key (CEK). The CEK may be double-encrypted by the data producer—the inner envelope is encrypted using keys associated with privacy domains that are authorized to access the user content. The outer envelope is encrypted using a cloud privacy control's public key. When a data consumer requests access the user content, the cloud privacy control evaluates privacy policies and determine whether access should be permitted. If permitted, the cloud privacy control decrypts the outer envelope and provides the inner envelope with CEK to the requestor. Upon receiving the inner envelope, the data consumer may then decrypt the inner envelope with its privacy domain private key to obtain the CEK. The CEK may then be used to perform a decryption and obtain the user content.

The invention discloses a post-quantum TLCP protocol design method, device, equipment and medium, and relates to the field of information security, the post-quantum TLCP protocol design method is applied to a client, and the post-quantum TLCP protocol design method comprises the following steps: constructing client handshake information based on an information security technology transport layer cryptographic protocol, and sending the client handshake information to a server to receive returned server handshake information and establish connection; receiving a server-side digital certificate constructed based on the cryptographic algorithm encrypted public key information and the post-quantum key encapsulation algorithm public key information of the server-side and server-side key exchange information constructed based on the post-quantum key encapsulation algorithm and the cryptographic algorithm; and performing identity authentication based on the post-quantum digital signature algorithm public key information and the national cryptographic algorithm signature public key information to construct a pre-master key for data transmission. An active public key cryptographic algorithm and functions are reserved in an information security technology transport layer cryptographic protocol, and a post-quantum public key cryptographic algorithm is put into the protocol, so that the quantum security is realized while the active public key cryptographic security is realized.

The invention provides a multi-authentication electronic official certificate verification method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps: receiving an electronic official certificate uploading request, carrying out encryption processing to generate a secret key, carrying out the block encryption of an official certificate file to obtain an electronic ciphertext, carrying out the authentication of a creator identity to obtain an elliptic curve digital signature, and carrying out the verification of the elliptic curve digital signature. Writing in a new block, and calculating a block hash value; the target block is inquired, and if matching succeeds, the first verification information is extracted and verified, and a comprehensive verification result is generated; and carrying out consensus verification, modifying the block outlet time by dynamically adjusting the block difficulty value and verifying, if the block outlet time is true and effective, generating a verification result ciphertext and feeding back the verification result ciphertext to the request main body, and if objection exists, sending an objection application and carrying out objection rechecking, generating an arbitration result and writing the arbitration result into the new block.

The invention discloses an interface authentication method, system and device based on a national cryptographic algorithm and a medium, belongs to the technical field of computer security, and aims to solve the technical problem of how to realize identity authentication, data encryption, integrity verification and replay attack protection of interface interaction and meet the security requirement of a key information system. According to the technical scheme, the method comprises the following steps: system initialization: a server and a client respectively generate SM2 key pairs, the client and the server exchange public keys through a secure channel, and a mapping relation between the public key of the opposite side and an identity label is stored; session key negotiation: exchanging a temporary public key based on an SM2-ECDH algorithm, calculating a shared secret value, and deriving an SM4 session key through a KDF; the client side carries out SM3 hash and SM2 signature on request parameters, and the server side verifies the signature and verifies a timestamp and a random number to resist replay attacks; and session key updating: triggering key updating according to a preset condition, and encrypting the new key negotiation message by using the original session key.

The invention provides improved methods and corresponding systems for the sharing, storage, creation and accessing of data stored on a blockchain eg the Bitcoin blockchain. It may form part of a protocol for searching the blockchain for content / data. A method in accordance with the invention may be used for associating or linking data stored within (separate / different) blockchain transactions to enable the identification, retrieval and / or sharing of data stored therein. Additionally, or alternatively, it facilitates identification of transactions (TX) in a blockchain which store content / data that needs to be shared, transmitted, stored and / or accessed by a user. Such a method comprises the step of mapping a mnemonic to: 1) a public key (PK) associated with the transaction (TX); and 2) the transaction ID (TXID) of the transaction (TX).

Disclosed in the embodiments of the present application are a data processing method and apparatus based on a blockchain key, and a device and a storage medium. The method comprises: acquiring communication channels by means of which communication with N clients is separately performed, and on the basis of the N communication channels, separately performing key shard negotiation with the N clients, so as to obtain a local private-key shard and a complete public key; receiving signature requests sent by M-1 clients among the N clients, and acquiring identity association information from the M-1 signature requests; if each piece of the identity association information is legitimate identity information, determining, as a target client, a client among the M-1 clients which is used for initiating a blockchain service, and acquiring service execution data associated with the target client; and if the service execution data conforms to a risk management strategy corresponding to the identity association information of the target client, participating, together with the M-1 clients, in joint signature processing for the blockchain service. By means of the embodiments of the present application, the risk probability during the use of a digital asset can be reduced.

The invention discloses a method and system for quickly constructing a national secret encryption channel, and the method comprises the steps: a client and a server respectively generate a client private key and a server private key based on a sensitive data transmission scene, and apply for an SM2 algorithm certificate; based on the private key and the digital certificate, the client and the server perform a handshake process, and the handshake process comprises that the client and the server perform identity verification and negotiation by exchanging certificates, temporary public keys and signature information; based on temporary public key information exchanged between the client and the server, performing key negotiation through an SM2 elliptic curve algorithm to obtain negotiation data; and based on the session key in the negotiation data, encrypting and decrypting the communication data by using a GCM mode of the SM4 algorithm. According to the method, various negotiation parameters are optimized and simplified based on a domestic encryption algorithm, rapid establishment of the secure channel is realized, only one round-trip delay is needed in the whole process, and time and bandwidth are saved on the premise of ensuring communication security.