1182results about "Synchronising transmission/receiving encryption devices" patented technology

The invention discloses a network security verification method and system for a security system, and belongs to the technical field of network security, and the method comprises the steps: obtaining a biological feature recognition request triggered by a user on terminal equipment, synchronously collecting dynamic behavior track data, and generating a behavior feature code; inputting physiological feature data and behavior feature codes in the biological feature recognition request into a feature verification model, when an output biological behavior correlation index is lower than a first preset threshold value, triggering a dynamic verification strategy adjustment instruction, generating a multi-dimensional verification superposition strategy, and executing at least two verification operations in the multi-dimensional verification superposition strategy, the verification result is input into the distributed time synchronization node to generate an encryption token; and when the synchronous matching degree of the encryption token among different nodes exceeds a second preset threshold value, outputting a security verification passing instruction. According to the method, multi-modal feature fusion, dynamic hierarchical verification and time-space encryption technologies are adopted, replay attacks are prevented, an adaptive defense system is constructed, and reliable authentication of a high-security network scene is ensured.

The invention belongs to the technical field of block chains, and discloses a block chain-based digital identity authentication and traceability method, which comprises the following steps: acquiring user biological characteristic data, generating a characteristic root value, splitting key shares, and generating a key share set through block chain evidence storage; each distributed node generates an identity private key and an on-chain identity template, and associates the on-chain identity template with a chain identifier to form a multi-chain identity key pool and an on-chain identity template library; dividing a core chain and an edge chain, generating a zero-knowledge proof, generating a cross-chain certificate after verification of the core chain, sending an encryption result to the edge chain, and generating a temporary authority token; writing traceability information into the edge chain, aggregating multi-chain information through cross-chain traceability, and generating a traceability information chain and a cross-chain traceability validity proof; and recording a key use track and identifying a risk behavior, triggering a key limiting mechanism, dynamically updating an identity template permission on the chain, reversely optimizing key related parameters, and forming a closed-loop iterative identity and traceability management link.

The invention relates to the technical field of quantum communication security, and discloses a quantum key distribution secure communication system based on a quantum mechanics principle. The system comprises a quantum state preparation unit which controls a quantum emission device to output a quantum state sequence containing a preset polarization angle and a phase modulation photon group; a quantum channel feature extraction unit captures channel environment interference parameters and constructs a photon polarization distribution matrix; a quantum communication security evaluation unit receives the matrix, and calculates a channel security coefficient threshold through a quantum bit error rate analyzer; the quantum key dynamic optimization unit generates an optimized key segmentation strategy in combination with a security coefficient threshold and a historical key negotiation record; the quantum key rotation control unit switches quantum state modulation parameters according to a segmentation strategy and a time window; and the quantum node synchronization management unit monitors node clock offset and injects a calibration signal to realize key distribution time slot alignment. The system can dynamically cope with environmental interference, and improves the security and adaptability of quantum key distribution.

The invention relates to a QUIC protocol-based distributed node unified identity authentication method and system, belongs to the technical field of network security, is applied to a client, and comprises the following steps: registering a client domain name identity through a certificate authority, obtaining a client certificate, and pre-storing a server certificate chain; generating a QUIC initial data packet according to the target server domain name identifier and the client certificate, and sending the QUIC initial data packet to the server; receiving a QUIC handshake data packet returned by the server; verifying the legality of the server certificate based on the server certificate chain, and if the server certificate is legal, calculating a pre-master key according to the client DH private key and the server DH public key; deriving a 1-RTT session key based on the pre-master key; generating a signature verification message, and sending the client certificate and the signature verification message to a server; and synchronously using the 1-RTT session key to encrypt the application layer data with the server, and transmitting the data to the server in the 1-RTT encryption space of the QUIC protocol. According to the invention, the reliability of node identities and the confidentiality of data are ensured.

Apparatus and associated methods relate to generating and verifying a tamper-proof media (e.g., an image, a video). In an illustrative example, a media provenance verification system (MPVS) may automatically verify a provenance of a media file of temporally related frames. The MPVS, for example, may retrieve verification records associated with the media file from a decentralized ledger. The MPVS may select a verification record corresponding to a media frame of the media file. From the media frame, the MPVS may extract a laser security signature of the media frame. For example, the laser security signature may include a clock pattern related to a public verifiable random value (PVR), a depth marker, and a hash of a previous media frame. In some implementations, the media frame may be determined to be real when a time provenance related to a creation time, a depth provenance related to an image depth, and a continuity provenance related to a continuity are passed. Various embodiments may advantageously provide a real-time tamper-proof video validation.

Aspects of the subject disclosure may include, for example, receiving a first request from a first communication orchestrator of a first protected environment to provide a secure and authenticated connection between a first resource of the first protected environment and a second resource of a second protected environment, accessing first encryption information from the first communication orchestrator and second encryption information from a second communication orchestrator of the second protected environment, verifying a capability for secure quantum communications of an encryption technique of the first communication orchestrator and the second communication orchestrator according to the first encryption information and the second encryption information, and enabling the first communication orchestrator and the second communication orchestrator to initiate a secure and authenticated communication channel via quantum communications. Other embodiments are disclosed.

The invention discloses a government affair department knowledge base access authority control method based on a block chain, and relates to the technical field of block chains and information security, distributed nodes jointly participate in decision making, the performance bottleneck of a single control point and the single point fault risk are effectively eliminated, and the reliability and stability of a system are remarkably improved; when a plurality of departments need to collaboratively update a strategy, the intelligent contract based on the threshold multi-signature mechanism can automatically execute voting aggregation and a strategy effective process without depending on manual operation of a central administrator, so that the efficiency and the automation level of cross-department collaboration are greatly improved, and the instantaneity and the consistency of strategy change are ensured; the inherent non-tampering and traceable characteristics of the block chain provide powerful auditing guarantee for the whole authority management process; and each policy update request, voting process, final decision and policy version switching are completely recorded on the chain to form a non-repudiated audit clue.

Disclosed are a high-dimensional quantum state generation device and a state measurement device using the mutually unbiased bases utilizing a finite field. The mutually unbiased bases in a high-dimensional quantum state are realized by a calculation method utilizing the finite field. A device is disclosed that utilizes mutually unbiased bases in the time-bin quantum state of light, frequency-bin quantum state and other modes of light, as the high-dimensional quantum state utilizing the finite field. The generation device and the measurement device are realized by the phase modulator and units equivalent to the matrix transformation operation, respectively. The measurement device includes a phase modulation unit corresponding to a diagonal unitary transform to a computational basis which is the first unit on the front stage side, and a high-dimensional Hadamard transform measurement unit or a Fourier transform measurement unit which is the second unit.

A system including a relational Merkle tree data store including a child node and an additional child node. The child node has a linked parent node of a first Merkle tree, the linked parent node is tagged with a hash of the child node, and the child node and the additional child node are each tagged with an inverse hash of the linked parent node prior to the relational Merkle tree data store receiving a request for a product history of a product. The inverse hash is exclusively a cryptographic hash of the linked parent node, The inverse hash is used to perform a bi-directional traversal of the relational Merkle tree data store to retrieve the product history for the request. The relational Merkle tree data store includes the product history of the product.

The invention discloses a unified identity authentication and access control method for a power multi-service system based on a national secret algorithm. According to the invention, through systematic deployment of SM2, SM3 and SM4 cryptographic algorithms, a full-link security protection system from identity authentication to authority management is constructed. The unified identity authentication platform adopts a mode of combining a distributed micro-service architecture and a hardware encryption machine, so that the physical security of key storage and operation is guaranteed, and the stability and response speed of the system are improved through a master-slave synchronization mechanism and interface delay control. A multi-source identity information federation acquisition mechanism realizes real-time integration of static attributes and dynamic behavior data, abnormal characteristics of user operation can be accurately captured by combining a risk assessment matrix of an improved LSTM-attention mechanism, and an SM2 bidirectional dynamic authentication protocol is automatically triggered when a risk score exceeds a dynamic threshold. Closed-loop protection of collection-evaluation-authentication-auditing is formed, and security threats such as identity counterfeiting and authority crossing are effectively resisted.

This application relates to the field of communication technologies, and discloses a communication method and apparatus. A first communication apparatus receives capability information, where the capability information indicates that a second communication apparatus supports at least one of encrypting or decrypting a first message. The first communication apparatus encrypts the first message to obtain a second message, and sends the second message with a first timestamp, where the first timestamp indicates the sending time of the second message. According to the foregoing method, the first communication apparatus sends an encrypted message (that is, the second message) and the timestamp when the encrypted message is sent to the second communication apparatus, so that encrypted transmission can be performed on a message (for example, a clock synchronization message) that needs to be stamped, thereby improving security of the message transmission.

The invention relates to the technical field of road traffic safety and intelligent networking, in particular to a networking communication system for road traffic safety facilities. According to the system, a local traffic digital twinborn model is constructed by edge computing nodes and maintained in a federated synchronization mode; traffic data generated by an edge computing node is packaged in a data container with an embedded hash chain and a digital signature encryption traceability log, so that the integrity, primitiveness and traceability of the data are ensured; the vehicle-mounted terminal submits zero-knowledge proof as a service voucher, and the edge computing node verifies and authorizes the service on the premise of not obtaining the original sensitive data. According to the invention, efficient traffic state synchronization is realized by constructing the federated digital twinborn model, the credibility and safety of data exchange are guaranteed by using the data container, the terminal privacy is protected by means of the zero-knowledge proof technology, and the communication efficiency, the data safety and the privacy protection level of the vehicle-road cooperation system are comprehensively improved.

A quantum communications system includes a communications system. A quantum key distribution (QKD) system is operable with the communications system and includes a transmitter node, a receiver node, and a quantum communications channel coupling the transmitter node and receiver node. The transmitter node transmits to the receiver node a bit stream of optical pulses and includes a plurality of different photon sources, each having associated therewith a respective QKD protocol, and a controller configured to select a given photon source from among the plurality thereof.

The invention discloses a secure data transmission method for a wireless communication system, which relates to the technical field of secure data transmission and comprises three steps of key generation and synchronization, physical layer subcarrier encryption and key enhancement and authentication. The method comprises the following steps: firstly, extracting multi-dimensional features through channel detection to generate a dynamic initial key, and setting a trigger condition to realize key synchronization; then, a permutation matrix is generated by using a secret key to perform scrambling encryption on a data subcarrier position, and a receiving end performs descrambling and then performs feedback through CRC verification so as to guarantee data integrity; and finally, quantum noise is introduced to enhance the randomness of the secret key, and zero-knowledge authentication is adopted to verify the identity, so that the security and the anti-attack capability of wireless communication data transmission are effectively improved.

A method for a system includes receiving with a first transceiver of a first smart device, an advertisement signal from a stationary beacon, outputting with the first transceiver of the first smart device, a first ephemeral ID that is not permanently associated with the first smart device, to the stationary beacon, receiving with the first transceiver of the first smart device, a beacon identifier from a stationary beacon, outputting with a second transceiver of the first smart device, the first ephemeral ID, a first user identifier and the beacon identifier to an authentication service, storing in an association log in the authentication service, the first ephemeral ID, the first user identifier and the beacon identifier, and storing in a beacon log in the authentication service, a log of the stationary beacon including the first ephemeral ID.

The invention discloses an end-cloud collaboration large model secret state operation method and system, the method is applied to an end-cloud collaboration trusted execution environment, and the application-end cloud collaboration trusted execution environment comprises an end-side security access layer and a cloud-side secret calculation layer for deploying a TEE cluster. The method comprises the following steps: terminal equipment negotiates with a cloud side encryption layer through an end side security access layer to generate a session key, and sends a first ciphertext generated based on the session key to a TEE cluster; and receiving a second ciphertext formed by the TEE cluster based on the first ciphertext, and decrypting the second ciphertext to obtain an interaction result. According to the method, large model secret state operation is carried out by utilizing a two-stage framework of an end side security access layer and a cloud side secret calculation layer, and cloud large model service privacy protection is realized. Meanwhile, the trusted execution environment constructed by the TEE and the heterogeneous AI expansion TEE is adopted, so that the large-model secret-state operation can be operated on a multi-architecture server and a multi-type GPU, and the requirements of diversified deployment scenes are met.

The invention relates to the technical field of communication network security, and particularly discloses a distributed communication network security verification method and system, which comprises a two-factor identity authentication module, a dynamic key arrangement and encryption module and a cross-node integrity verification module, and the dynamic key arrangement is respectively connected with the two-factor identity authentication module, the encryption module and the cross-node integrity verification module. Through combination of biological feature anchoring and secure multi-party calculation, on the premise of protecting privacy of original biological data, deep binding of biological features and public keys is realized, and biological uniqueness is given to identity authentication; and dynamic authentication interaction is fused with a timestamp, a biological characteristic entropy value and zero knowledge proof, replay attacks are resisted, 'human-equipment-identity 'consistency is accurately verified, a public key fragment is updated after authentication is passed, an identity trust chain is continuously reinforced, and it is ensured that node identities are true and credible from the source.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

Systems, methods, and apparatuses for securing a communication network are provided. Transmitting a first signal including encoding a first timestamp, a first identifier, and a message authentication component. Obtaining a message signal comprising one or more service variables associated and an encrypted unique identifier. Authenticating the encrypted unique identifier based on a comparison of the encrypted unique identifier against a plurality of stored unique identifiers in a lookup table. Generating a second signal comprising an encoding of a subset of the service variables, the encrypted unique identifier, and a second timestamp. Transmitting the second signal to each remote receiver in a subset of the plurality of remote receivers.

A sender system 2 is equipped with an optical transmitter 20 that transmits an encoded optical signal 40 at a predetermined strength via a line-of-sight (LOS) communication channel 4, and a key distillator 21 that generates a cryptographic key from a random bit sequence outputted by the optical transmitter 20 through a key distillation processing via an authenticated public communication channel 5. A legitimate receiver system 3 is equipped with an optical receiver 30 that receives the optical signal 40 from the optical transmitter 20 via the LOS communication channel 4, and a key distillator 31 that generates a cryptographic key from the random bit sequence outputted by the optical receiver 30 through the key distillation processing via the authenticated public communication channel 5.

Disclosed are an authentication and key agreement method and a system. The method comprises: receiving first verification information sent by a communication initiator, and after the first verification information passes verification, querying to obtain information of a first QKD node and information of a second QKD node; sending to the first QKD node a first identity verification request, so that after verifying that the first identity verification request has passed, the first QKD node generates a session key at the first QKD node and the second QKD node; receiving a key distribution session message which is sent by the first QKD node and carries an identifier of a session key, and forwarding said message to the second QKD node; and when the session key corresponding to the identifier of the session key exists at the second QKD node, receiving an identifier of a session key which is sent by the second QKD node, and forwarding the identifier of the session key to the communication initiator, so that the communication initiator carries the identifier of the session key to request a session key from the first QKD node.

The invention relates to the technical field of audio and video transmission, in particular to an internal and external network audio and video secure transmission method and system based on a cloud platform. By combining the load balancing technology with the real-time load state and the audio and video stream characteristics of the cloud platform, the encrypted traffic can be dynamically distributed to a plurality of back-end servers, and the calculation overhead in the encryption process can be effectively reduced through selection of the lightweight asymmetric encryption algorithm and the optimized key exchange process; in a handshake stage, by optimizing a key negotiation process and adjusting a key exchange process according to segmentation characteristics, the execution efficiency of a protocol is further improved, and by dynamically adjusting the execution opportunity of encryption operation, it is ensured that the encryption operation is executed at a proper opportunity, and the encryption efficiency is improved. By monitoring and adjusting the load distribution strategy and the encryption parameters in real time, the system operation mode can be dynamically adjusted according to the distortion degree and the transmission state of the audio and video streams, and the distortion degree of the audio and video streams is effectively reduced.

One example method includes binding a controlling device and an accessory device to negotiate a first credential and a second credential, the first credential is non-distributable and is used to authenticate the controlling device, and the second credential is distributable and is used to authenticate an authorized device. The controlling device sends, in response to a sharing operation for the second credential, the second credential to the authorized device when an attribute of the second credential is distributable. The authorized device sends an authentication request, first information, and verification information to the accessory device, where the verification information is obtained by processing the first information based on the second credential stored in the controlling device. The accessory device verifies the verification information based on the local second credential. When the verification succeeds, the authorized device is successfully authenticated.

A method for a system includes receiving with a first transceiver of an identity reader device, an ephemeral ID from a first smart device, outputting with the first transceiver, identity reader data to the first smart device, wherein the identity reader data comprises a first identifier and a challenge, receiving with the first transceiver, responsive data from the first smart device, wherein the responsive data comprises token data and contact tracing status of the first smart device, determining in a processor of the identity reader device, whether the first smart device is authorized in response to the ephemeral ID or the token data, and the contact tracing status, and directing with the processor, a peripheral device coupled to the identity reader device to perform a user-perceptible action in response to the processor determining that the first smart device is authorized.

A method for sharing data between blockchains in a multi-chain network including receiving a first plurality of account addresses associated with first and second blockchains and an account state for each account associated with the first plurality of account addresses, generating a first hash tree comprising a mapping between the first plurality of account addresses and the account states, defining a world state trie, generating a root hash of the world state trie, receiving a first plurality of transactions associated with the first and second blockchains, generating a second hash tree comprising the first plurality of transactions, defining a transactions trie, and generating a root hash of the transactions trie.

The present invention relates to an item organisation system (100) that includes: one or more storage labels (200), each including a two-dimensional label region (202) containing: a storage attribute code (203) including visible machine-readable indicia (204) encoding data; and a receptacle identifier (210), the receptacle identifier comprising a string of one or more human readable alphanumeric characters, wherein the data encoded by the visible machine-readable indicia includes the receptacle identifier; and a computer program including instructions, which when executed by one or more processors of an electronic device, cause the electronic device to capture an image of the storage attribute code (203) and to decode the data encoded therein to generate decoded data.

An energy-constrained wireless mesh network is disclosed suitable for unattended sensor devices in rural or off-grid areas. The mesh network can be used in both a secure and insecure mode as desired. A series of rounds is used to communicate synchronously between a base station and wireless devices that are multiple hops away from the base station. Adaptive data rate techniques may be used to optimize data exchanges between networked devices.

The invention discloses an aggregation regulation and control method and system for multiple virtual power plants, and relates to the technical field of intelligent power grid regulation and control, and the method comprises the steps: enabling a trust anchor to synchronize a link health abstract and preset a safe operation envelope and an autonomous rule when the communication is normal; after link disconnection is detected, an autonomous mode is immediately switched to generate power setting; during the autonomous period, recording power deviation and events and generating a hash track; after the link is recovered, two-way identity verification is completed through quantum key handshake, then a fingerprint set and sparse differences are uploaded, and latest global constraints are received; an aggregation composer reconstructs a system model based on a constraint relaxation matrix and a compensation weight vector, generates an optimized power instruction, smoothly replaces an autonomous instruction with a slip coefficient, recursively allocates spare capacity, and finally realizes the transition from autonomous smooth transition to unified scheduling of each virtual power plant; the method gives consideration to toughness, integrity, fairness and safety, and significantly and integrally improves the distributed energy regulation and control reliability and recovery efficiency.

The present invention provides an improved system and method for using cryptography to secure computer-implemented choice mechanisms. In several preferred embodiments, a process is provided for securing participants' submissions while simultaneously providing the capability of validating their submissions. This is referred to as a random permutation. In several other preferred embodiments, a process is provided for securing participants' advance instructions while simultaneously providing the capability of validating their advance instructions. This is referred to as a secure advance instruction. Applications include voting mechanisms, school choice mechanisms, and auction mechanisms.

The invention relates to extending secure key storage for transaction confirmation. For example, one embodiment of a system includes: a verifier on a client device, the verifier to securely store one or more private keys, at least one of the private keys being available to verify a block of a blockchain; and a validation module of or coupled to the validator for generating a signature using the block and the private key, the signature being usable by a device having a public key corresponding to the private key to validate the authenticity of the block.