316results about "Synchronising transmission/receiving encryption devices" patented technology

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

The invention relates to the technical field of audio and video transmission, in particular to an internal and external network audio and video secure transmission method and system based on a cloud platform. By combining the load balancing technology with the real-time load state and the audio and video stream characteristics of the cloud platform, the encrypted traffic can be dynamically distributed to a plurality of back-end servers, and the calculation overhead in the encryption process can be effectively reduced through selection of the lightweight asymmetric encryption algorithm and the optimized key exchange process; in a handshake stage, by optimizing a key negotiation process and adjusting a key exchange process according to segmentation characteristics, the execution efficiency of a protocol is further improved, and by dynamically adjusting the execution opportunity of encryption operation, it is ensured that the encryption operation is executed at a proper opportunity, and the encryption efficiency is improved. By monitoring and adjusting the load distribution strategy and the encryption parameters in real time, the system operation mode can be dynamically adjusted according to the distortion degree and the transmission state of the audio and video streams, and the distortion degree of the audio and video streams is effectively reduced.

The invention discloses a lightweight low-delay quantum key distribution method and system adaptive to an electric power scene, and belongs to the technical field of quantum communication and electric power communication crossing. The method comprises the steps cooperatively executed by a sending end and a receiving end: the sending end determines a basis vector based on a pre-associated quantum fingerprint sequence and a timestamp, sends a key through polarization-phase two-dimensional coding, generates a selection mark and executes privacy amplification; and a receiving end synchronizes a timestamp to determine a basis vector, compares the basis vector with the quantum fingerprint to complete authentication, decodes through an integrated module, performs collaborative error correction and executes privacy amplification. The system comprises functional modules of a sending end and a receiving end, is integrated on a miniaturized board card, and supports common-fiber transmission and protocol conversion. According to the method, the problems of high time delay, high deployment cost and poor adaptability of the traditional QKD are solved, the end-to-end time delay is reduced to 14 microseconds, the deployment cost is reduced by more than 60%, the requirements of high safety, low time delay and lightweight deployment of a power system are met, and the method is suitable for key services such as power dispatching and relay protection.

Systems, methods, and apparatuses for securing a communication network are provided. Transmitting a first signal including encoding a first timestamp, a first identifier, and a message authentication component. Obtaining a message signal comprising one or more service variables associated and an encrypted unique identifier. Authenticating the encrypted unique identifier based on a comparison of the encrypted unique identifier against a plurality of stored unique identifiers in a lookup table. Generating a second signal comprising an encoding of a subset of the service variables, the encrypted unique identifier, and a second timestamp. Transmitting the second signal to each remote receiver in a subset of the plurality of remote receivers.

Some embodiments relate to a communication network comprising at least one receiver system optically coupled to a plurality of transmitter systems for transmission of synchronization signals generated by the at least one receiver system to the plurality of transmitter systems over a unidirectional synchronization channel. The at least one receiver system configured to embed into the synchronization signals thereby generated additional data indicative of an internal time count thereof for synchronization of transmission of data / signals from each one of the plurality of transmitter systems to said at least one receiver system over a sparse data / signals unidirectional communication channel.

A system and method for adaptive ideation and innovation management using graph-based similarity computation and real-time social facilitation are disclosed, and the system may include a plurality of client devices operated by a human user and one or more AI Agents. The system may further include a computing platform running a Precompute Similarity Engine that may be configured to embed and index idea objects, precompute similarity clusters, and generate candidate merge or purge operations together with diversity and novelty signals; and running a Social Physics Engine that may be configured to monitor human user and machine participant (AI agent) interactions, compute group metrics, and issue digital facilitation interventions. The Precompute Similarity Engine and the Social Physics Engine may operate in an interdependent feedback loop such that diversity and novelty signals guide the generation of digital facilitation interventions that are communicated via the network to the plurality of client devices and the one or more AI Agents.

The application discloses a kind of trusted time transfer device and method, it is related to trusted time transfer technical field, including network management system and trusted time transfer equipment;Network management system is used for equipment identity solidification and authentication and equipment operating state real-time monitoring;Trusted time transfer equipment is based on trusted time signal reception relay module, equipment identity authentication pre-solidification mechanism, two-way certificate verification and transmission encryption mechanism, equipment failure stop signal transmission mechanism and the traceability and proof mechanism of time signal, real-time measurement is carried out to trusted time signal, time delay compensation, signal amplification processing is transferred out;The application ensures that itself is not replaced by strict control mechanism;On signal processing, the controllability of time real-time detection and time delay compensation is realized;In addition, it also provides a feasible path for the traceability verification and credibility proof of time signal with time relay function.

Embodiments of the present disclosure relate to a vehicle, an apparatus, a data carrier, a computer program and a method for a recipient of a message and for synchronizing a time base of the recipient for generating a freshness value. The method includes receiving a freshness value of a sender along with a message from the sender and validating the message based on the freshness value. Further, the method suggests, if the message is successfully verified, determining an offset of a freshness value for successful verification from a recipient's freshness value derived from a recipient's local time base when the message is received.

A communication network for mitigating delay attacks comprises one or more sender nodes that communicate electronically with one or more receiver nodes. The one or more receiver nodes execute instructions to periodically send a challenge message to a sender node. In response to the acceptance of the challenge message and the determination that data is to be sent to the receiver node, the sender node sends a function message to the receiver node.In response to the finding that an updated freshness value is more recent than a current freshness value associated with the sender node, that a sender message authentication code is correct and consistent across at least one previous challenge message, and that the response to the challenge message from the receiver node is correct, the receiver node updates the current freshness value to match the updated freshness value and accepts the function message.

The invention relates to a method of synchronizing a receiver initialization vector with a sender initialization vector when successively transmitting encrypted data packets from a sender to a receiver, wherein a key and an initialization vector are generated. The sender forms a sender sub-counter from the lowest M bits of a counter of the sender initialization vector, encrypts a message according to an encryption method, generates a data packet from the encrypted message and the sender sub-counter and transmits it, and increments the counter of the sender initialization vector. The receiver receives the data packet, extracts the sender sub-counter therefrom, forms a receiver sub-counter from the lowest M bits of a counter of the receiver initialization vector, replaces the lowest M bits of the counter of the receiver initialization vector by the sender sub-counter if the comparison results in the sender sub-counter being higher than the receiver sub-counter, and repeats the replacement and the incrementing of the counter value of the receiver initialization vector by 2 if the comparison results in the opposite, decrypts the message, and then increments the counter of the receiver initialization vector. M , decrypts the message, and then increments the counter of the receiver initialization vector.

The present invention relates to a system for generating and validating time-based dynamic authentication tokens for stateless client-server communication. The system comprises a client device that generates a unique authentication token for each request, including a user identifier, device identifier, request identifier, and time slice identifier corresponding to a portion of a time slot divided into slices. The client device transmits the token with the request to a server, that includes a time server to synchronize the server and client time. A token validation module verifies whether the time slice identifier belongs to the current or previous time slice within the same time slot and validates the token by reconstructing it based on the identifiers. The server rejects requests if the token is generated outside the valid time slice or does not match the reconstructed token, providing enhanced security.

The invention relates to a system comprising a first and second generator (E1, E2) delivering excitation signals to a first and second resonator (R1, R2) generating chaotic signals. The resonators (R1, R2) are structurally different and coupled to one another. Advantageously, this system makes it possible to synchronize the chaotic signals and comprises: ● a dissipation correction module acting on the modulation frequencies fm1, fm2 of the excitation signals, ● a non-linearity correction module acting on the amplitudes of the excitation signals, ● a resonant frequency correction module acting on the carrier frequencies fc1, fc2 of the excitation signals, ● an amplitude correction module acting on the amplitudes of the chaotic signals. The invention also relates to a synchronization method based on this system.

According to an embodiment, a key exchange system includes: a key generation device configured to generate a key based on quantum key exchange or post-quantum key exchange; a network device configured to perform encrypted communication with another network device by using the key; and an intermediate server deployed between the key generation device and the network device. The intermediate server includes: a state monitoring unit configured to transmit a state monitoring request to the key generation device at each predetermined time; a notification unit configured to give a push notification of key information included in a response to the state monitoring request, to the network device, when the response is received; and a key exchange unit configured to start key exchange between the network device and the key generation device in response to a request from the network device having received the push notification of the key information.

Systems, apparatus, processes, and computer-readable media for wireless communication are disclosed. For example, a wireless communication device may receive a synchronization message from a first network device of a plurality of network devices, the synchronization message including an indication of available response slots for sending one or more unsolicited responses to the first network device. The wireless communication device may send an unsolicited response to the first network device in one of the available response slots.

The invention belongs to the technical field of medical scene consensus, provides a medical alliance block chain grouping consensus method and system based on leader group decision, and aims to solve the practical problems of high communication complexity, power concentration and main node failure of a traditional PBFT in a large-scale node scene. Through hierarchical design of leader group decision, a grouping strategy is adopted to prevent a power concentration phenomenon, and through leader group parallel decision, post quantum security is guaranteed, communication overhead is reduced, consensus efficiency is improved, and the power concentration phenomenon is avoided.

A method for securing communication within a system including at least one server and at least two appliances able to communicate with the server and with each other, wherein a pair of appliances communicating together and having at least one shared one-time encryption key for securing communication between the two has at least one other shared one-time encryption key supplied by the server following the connection of only one of the two appliances to said server.

The embodiment of the invention relates to a passive optical network activation method, equipment, a device and a medium. In accordance with an example embodiment of the present disclosure, a first device receives a key control message from a second device during a key exchange. The key control message instructs the first device to generate and transmit a key by using an encryption algorithm to be used, or to confirm a key corresponding to a currently used encryption algorithm. The key control message also instructs the first device to generate a key report based on the key control message, and to send the key report to the second device. In this way, the secret key and the encryption algorithm in the communication process of the first device and the second device can be matched, and the stability of channel work is improved.

The invention relates to the technical field of data security, and discloses a data security management method and system based on a block chain. The method comprises the following steps: acquiring and standardizing encrypted data and main body request information; extracting identity attributes and access requirements, and matching data paragraph attributes to generate permission vectors; synchronizing to a block chain and screening an adaptation rule combination; planning a conversion path to adjust an encryption key; verifying the identity authority, and calculating the matching degree to generate a temporary access token; the verification token obtains the data and re-encrypts the data; isolating the unauthorized content to obtain an isolated data packet; and after secure transmission, recording the log, updating the permission vector and synchronizing the permission vector to the block chain. And dynamic accurate authority management and secure sharing of encrypted data are realized. According to the method, dynamic accurate authority management and secure sharing of encrypted data can be realized, and dual requirements of data privacy protection and efficient circulation in a complex scene are met.

According to various embodiments of the present disclosure, a method performed by a first node may comprise the steps of: transmitting, to a second node, an IKE_SA_INIT request including a quantum-secure transform type and a transform identifier (ID) of a quantum key distribution (QKD); receiving, from the second node, an IKE_SA_INIT response including the quantum-secure transform type and the transform ID of the QKD; transmitting, to the second node through a quantum channel, a quantum key exchange (QKE) message including a quantum key (QK) length (QK length), a quantum key (QK) basis, and a quantum seed; and receiving, from the second node through a classical channel, a quantum bit error rate (QBER) message including a QBER associated with an initial quantum key based on the QKE message.

The invention belongs to the technical field of computer hardware security, discloses a physical side channel information confusion method and system based on heterogeneous computing and a medium, and aims to solve the problem that security defense and system performance are difficult to cooperate in the prior art. The method is executed by a heterogeneous sensing security scheduler, and comprises the following steps: identifying core type information of a target heterogeneous multi-core processor; receiving a sensitive calculation task to be scheduled; and scheduling the sensitive computing task to a physical computing core for execution based on the judgment result of whether the sensitive computing task is decomposable and the core type information, so that physical side channel information generated in the execution process is confused. According to the invention, inherent and ubiquitous physical isomerism of hardware is used as a defense resource which can be actively scheduled and utilized. Through active scheduling and utilization of inherent physical heterogeneity of a processor, a high-quality and high-robustness side channel information confusion effect is obtained with relatively low implementation overhead.

The invention relates to a local public random input generation method for TPM (Trusted Platform Module) key agreement, and aims to solve the problems of low communication efficiency and synchronization delay caused by transmission of random input vectors in the traditional key agreement process. According to the method, based on an improved Logistic mapping chaotic system, a non-uniformly distributed sequence output by standard chaos is converted into a random sequence conforming to uniform distribution through mathematical transformation, so that two communication parties can locally generate consistent public random input without transmitting random data. The core innovation of the method is that integral transformation and derivation technologies are fused, the output distribution characteristics of the chaotic system are optimized, the chaotic essence such as initial value sensitivity and aperiodicity is kept, and safety requirements and synchronization efficiency are balanced through structured randomness. According to the method, the communication load is remarkably reduced, the system response speed is improved, the statistical attack resistance is enhanced, and an efficient and reliable random input generation mechanism is provided for TPM key negotiation.

Method for distributing pairs of secure secret keys intended to secure communications between a first communication station (S1) and a second communication station (S2), said method comprising the following steps: exchanging, via a quantum channel (CQ1) linking a satellite (Sat) to said first communication station (S1), a first secret key; exchanging, via a quantum channel (CQ2) linking said satellite (Sat) to said second communication station (S2), a second secret key; receiving, in said satellite, a communication request between the first and second communication stations issued by said first or second communication station, referred to as the transmitting station; encrypting, in said satellite, the first secret key (by a symmetric encryption method which uses the second secret key (,in order to generate a first encrypted message ( ) and transmit said first encrypted message to said second communication station (S2) via an authenticated channel ( , called first authenticated channel. [Fig. 3A],

The invention discloses a communication device, system and method for performing near-field encryption communication by using cosmic ray muons, and belongs to the field of secret communication, and the device comprises a muon measurement module which can detect the time information and track information of the cosmic ray muons, and sends the time information and track information as muon measurement data to a data processing module according to a triggering judgment condition; the data processing module can screen the received muon measurement data and generate an angle number sequence and a random sequence library by using the reserved data; the received angle number sequence is screened, and redundant parts are deleted; a secret key and a mark sequence are generated by using the random sequence library during encryption and are sent to the communication module; generating a secret key according to a mark sequence sent by the communication module during decryption, and sending the secret key to the communication module; the communication module can encrypt a plaintext or decrypt a ciphertext by using the secret key generated by the data processing module; and transmitting the ciphertext and the flag sequence to other communication devices during encryption; and sending the mark sequence to the data processing module during decryption. The success rate of encrypted communication is improved.

A homomorphic encryption apparatus and a ciphertext arithmetic method thereof are disclosed. The homomorphic encryption apparatus includes a re-encryption parameter generation circuit, a re-encryption circuit, and an arithmetic circuit. The re-encryption parameter generation circuit is configured to generate re-encryption parameters including a plurality of re-encryption levels for a plurality of ciphertexts, respectively, based on an arithmetic scenario including information on an arithmetic schedule between the plurality of ciphertexts. The re-encryption circuit is configured to generate a plurality of re-encrypted ciphertexts by re-encrypting each of the plurality of ciphertexts to a corresponding re-encryption level based on the re-encryption parameters. The arithmetic circuit is configured to output an arithmetic result by performing an operation using the plurality of re-encrypted ciphertexts according to the arithmetic scenario.

The application provides a data security encryption method and a smart wearable device, and the method comprises the following steps: performing a hash operation based on a current timestamp and a shared key to obtain a first key seed, performing a hash operation based on the first key seed and a data sequence to be transmitted to determine a second key seed; determining a mapped key symbol sequence based on the second key seed and a preset ring modulus, mapping the data sequence to be transmitted in the preset ring modulus to obtain a data symbol sequence; calculating a Lee distance bit by bit based on the mapped key symbol sequence and the data symbol sequence to obtain a Lee distance sequence, encrypting the Lee distance sequence and the mapped key symbol sequence on the preset ring modulus based on the Lee distance sequence to obtain an encrypted ciphertext symbol sequence; and generating a transmission data packet based on the encrypted ciphertext symbol sequence and the current timestamp and sending the transmission data packet to a receiving end. The application realizes the dynamic key and the anti-cracking capability without relying on a complex key agreement protocol, and improves the data transmission security.

An exemplary apparatus for providing secure communications includes a processor; memory in electronic communication with the processor; an output in electronic communication with the processor; and instructions stored in memory and executable by the processor to cause the apparatus to store encryption protocols and at least one encryption hopping protocol; perform nested encryption of at least some of the data by selecting a number of layers of encryption to apply to data to be transmitted; selecting at least one encryption hopping protocol; encrypting data associated with one layer of encryption with one of the encryption protocols according to the selected encryption hopping protocol, and repeating the encrypting data instructions for each layer of encryption; and then transmit data from one device to at least one other device utilizing the selected encryption hopping protocol.

The invention discloses a SecOC vehicle-mounted safety communication method based on dynamic key management enhancement, which realizes on-demand distribution, dynamic updating and full life cycle management of SecOC keys by introducing a key distribution center. The ECU negotiates a unique preset key through the KDC client and the KDC server; the KDC client requests a service bill from the KDC server based on the service identifier of the application; the SecOC key is dynamically distributed by the KDC, and automatic rotation based on a time strategy and emergency update based on a security event are supported. The SecOC message adopts a gPTP timestamp as a freshness value, and after the data unit and the freshness value are spliced, a message authentication code is calculated. According to the invention, the secret key is not statically preset any more, but is dynamically distributed by the KDC and supports online updating, and through combination of bidirectional certificate authentication and timestamp double-factor authentication, full-life-cycle safety management of the vehicle service secret key is realized, and the risk of secret key leakage is effectively coped with.

To provide an encryption communication system capable of notifying a user of a storage amount of encryption keys.SOLUTION: An encryption communication system includes an application execution environment, an encryption / decryption execution environment, and a key exchange node. The encryption / decryption execution environment encrypts transmission data and decrypts encrypted reception data while consuming the encryption key. The key exchange node generates an encryption key and shares the encryption key with a communication partner. The key exchange node controls whether or not to generate a cryptographic key based on the stored amount of cryptographic keys. The application execution environment includes a stored key amount notification function unit and a band control function unit. The stored key amount notification function unit notifies the stored amount of cryptographic keys. The band control function part receives the notification and automatically executes control of a communication band different for each communication content on the basis of the priority set for each communication content. The band control function unit automatically changes the control content of the communication band according to the notification content without a user's operation.SELECTED DRAWING: Figure 9

Title: Method for Communicating with a Remote Computer from a Local Computer The invention relates to a method for communicating with a remote computer (3000) from a local computer (1000) comprising a local processor (1600) using a device (2000). It includes storage in a memory (2500) of the device of a mobile operating system comprising a public encryption key and a connection of the device to the local computer. The device includes a mobile communication module (2100) configured to receive and decrypt data encrypted using the public encryption key and to send encrypted data after it has been encrypted using the public encryption key.The process includes running the mobile operating system on the local computer, sending synchronized mobile files from the local computer to the remote computer, and receiving synchronized remote files from the remote computer. Figure for the abstract: Fig. 1.

To allow a plurality of users using a secret communication network to efficiently share messages.SOLUTION: A controller 100 controls a network having a plurality of user nodes and a link connecting two user nodes and assigned with a key, and the controller comprises: a division unit 110 that divides the plurality of user nodes into a plurality of groups; a first instruction unit 120 that instructs the user nodes to collect, by using the key, messages held in a predetermined number of user nodes; a second instruction unit 130 that instructs a specific node in the network to collect, by using the key, messages initially held in the plurality of user nodes belonging to the groups; a third instruction unit 140 that instructs the specific node to calculate the exclusive OR of the plurality of messages and transmits the exclusive OR to the user nodes without using the key; and a fourth instruction unit 150 that instructs the user nodes to obtain messages in the other user nodes that the user nodes have not obtained yet.SELECTED DRAWING: Figure 7