923results about "Synchronising transmission/receiving encryption devices" patented technology

The invention discloses a network security verification method and system for a security system, and belongs to the technical field of network security, and the method comprises the steps: obtaining a biological feature recognition request triggered by a user on terminal equipment, synchronously collecting dynamic behavior track data, and generating a behavior feature code; inputting physiological feature data and behavior feature codes in the biological feature recognition request into a feature verification model, when an output biological behavior correlation index is lower than a first preset threshold value, triggering a dynamic verification strategy adjustment instruction, generating a multi-dimensional verification superposition strategy, and executing at least two verification operations in the multi-dimensional verification superposition strategy, the verification result is input into the distributed time synchronization node to generate an encryption token; and when the synchronous matching degree of the encryption token among different nodes exceeds a second preset threshold value, outputting a security verification passing instruction. According to the method, multi-modal feature fusion, dynamic hierarchical verification and time-space encryption technologies are adopted, replay attacks are prevented, an adaptive defense system is constructed, and reliable authentication of a high-security network scene is ensured.

The invention belongs to the technical field of block chains, and discloses a block chain-based digital identity authentication and traceability method, which comprises the following steps: acquiring user biological characteristic data, generating a characteristic root value, splitting key shares, and generating a key share set through block chain evidence storage; each distributed node generates an identity private key and an on-chain identity template, and associates the on-chain identity template with a chain identifier to form a multi-chain identity key pool and an on-chain identity template library; dividing a core chain and an edge chain, generating a zero-knowledge proof, generating a cross-chain certificate after verification of the core chain, sending an encryption result to the edge chain, and generating a temporary authority token; writing traceability information into the edge chain, aggregating multi-chain information through cross-chain traceability, and generating a traceability information chain and a cross-chain traceability validity proof; and recording a key use track and identifying a risk behavior, triggering a key limiting mechanism, dynamically updating an identity template permission on the chain, reversely optimizing key related parameters, and forming a closed-loop iterative identity and traceability management link.

The invention relates to the technical field of quantum communication security, and discloses a quantum key distribution secure communication system based on a quantum mechanics principle. The system comprises a quantum state preparation unit which controls a quantum emission device to output a quantum state sequence containing a preset polarization angle and a phase modulation photon group; a quantum channel feature extraction unit captures channel environment interference parameters and constructs a photon polarization distribution matrix; a quantum communication security evaluation unit receives the matrix, and calculates a channel security coefficient threshold through a quantum bit error rate analyzer; the quantum key dynamic optimization unit generates an optimized key segmentation strategy in combination with a security coefficient threshold and a historical key negotiation record; the quantum key rotation control unit switches quantum state modulation parameters according to a segmentation strategy and a time window; and the quantum node synchronization management unit monitors node clock offset and injects a calibration signal to realize key distribution time slot alignment. The system can dynamically cope with environmental interference, and improves the security and adaptability of quantum key distribution.

The invention relates to a QUIC protocol-based distributed node unified identity authentication method and system, belongs to the technical field of network security, is applied to a client, and comprises the following steps: registering a client domain name identity through a certificate authority, obtaining a client certificate, and pre-storing a server certificate chain; generating a QUIC initial data packet according to the target server domain name identifier and the client certificate, and sending the QUIC initial data packet to the server; receiving a QUIC handshake data packet returned by the server; verifying the legality of the server certificate based on the server certificate chain, and if the server certificate is legal, calculating a pre-master key according to the client DH private key and the server DH public key; deriving a 1-RTT session key based on the pre-master key; generating a signature verification message, and sending the client certificate and the signature verification message to a server; and synchronously using the 1-RTT session key to encrypt the application layer data with the server, and transmitting the data to the server in the 1-RTT encryption space of the QUIC protocol. According to the invention, the reliability of node identities and the confidentiality of data are ensured.

Apparatus and associated methods relate to generating and verifying a tamper-proof media (e.g., an image, a video). In an illustrative example, a media provenance verification system (MPVS) may automatically verify a provenance of a media file of temporally related frames. The MPVS, for example, may retrieve verification records associated with the media file from a decentralized ledger. The MPVS may select a verification record corresponding to a media frame of the media file. From the media frame, the MPVS may extract a laser security signature of the media frame. For example, the laser security signature may include a clock pattern related to a public verifiable random value (PVR), a depth marker, and a hash of a previous media frame. In some implementations, the media frame may be determined to be real when a time provenance related to a creation time, a depth provenance related to an image depth, and a continuity provenance related to a continuity are passed. Various embodiments may advantageously provide a real-time tamper-proof video validation.

The invention discloses a government affair department knowledge base access authority control method based on a block chain, and relates to the technical field of block chains and information security, distributed nodes jointly participate in decision making, the performance bottleneck of a single control point and the single point fault risk are effectively eliminated, and the reliability and stability of a system are remarkably improved; when a plurality of departments need to collaboratively update a strategy, the intelligent contract based on the threshold multi-signature mechanism can automatically execute voting aggregation and a strategy effective process without depending on manual operation of a central administrator, so that the efficiency and the automation level of cross-department collaboration are greatly improved, and the instantaneity and the consistency of strategy change are ensured; the inherent non-tampering and traceable characteristics of the block chain provide powerful auditing guarantee for the whole authority management process; and each policy update request, voting process, final decision and policy version switching are completely recorded on the chain to form a non-repudiated audit clue.

A system including a relational Merkle tree data store including a child node and an additional child node. The child node has a linked parent node of a first Merkle tree, the linked parent node is tagged with a hash of the child node, and the child node and the additional child node are each tagged with an inverse hash of the linked parent node prior to the relational Merkle tree data store receiving a request for a product history of a product. The inverse hash is exclusively a cryptographic hash of the linked parent node, The inverse hash is used to perform a bi-directional traversal of the relational Merkle tree data store to retrieve the product history for the request. The relational Merkle tree data store includes the product history of the product.

The invention discloses a unified identity authentication and access control method for a power multi-service system based on a national secret algorithm. According to the invention, through systematic deployment of SM2, SM3 and SM4 cryptographic algorithms, a full-link security protection system from identity authentication to authority management is constructed. The unified identity authentication platform adopts a mode of combining a distributed micro-service architecture and a hardware encryption machine, so that the physical security of key storage and operation is guaranteed, and the stability and response speed of the system are improved through a master-slave synchronization mechanism and interface delay control. A multi-source identity information federation acquisition mechanism realizes real-time integration of static attributes and dynamic behavior data, abnormal characteristics of user operation can be accurately captured by combining a risk assessment matrix of an improved LSTM-attention mechanism, and an SM2 bidirectional dynamic authentication protocol is automatically triggered when a risk score exceeds a dynamic threshold. Closed-loop protection of collection-evaluation-authentication-auditing is formed, and security threats such as identity counterfeiting and authority crossing are effectively resisted.

This application relates to the field of communication technologies, and discloses a communication method and apparatus. A first communication apparatus receives capability information, where the capability information indicates that a second communication apparatus supports at least one of encrypting or decrypting a first message. The first communication apparatus encrypts the first message to obtain a second message, and sends the second message with a first timestamp, where the first timestamp indicates the sending time of the second message. According to the foregoing method, the first communication apparatus sends an encrypted message (that is, the second message) and the timestamp when the encrypted message is sent to the second communication apparatus, so that encrypted transmission can be performed on a message (for example, a clock synchronization message) that needs to be stamped, thereby improving security of the message transmission.

The invention relates to the technical field of road traffic safety and intelligent networking, in particular to a networking communication system for road traffic safety facilities. According to the system, a local traffic digital twinborn model is constructed by edge computing nodes and maintained in a federated synchronization mode; traffic data generated by an edge computing node is packaged in a data container with an embedded hash chain and a digital signature encryption traceability log, so that the integrity, primitiveness and traceability of the data are ensured; the vehicle-mounted terminal submits zero-knowledge proof as a service voucher, and the edge computing node verifies and authorizes the service on the premise of not obtaining the original sensitive data. According to the invention, efficient traffic state synchronization is realized by constructing the federated digital twinborn model, the credibility and safety of data exchange are guaranteed by using the data container, the terminal privacy is protected by means of the zero-knowledge proof technology, and the communication efficiency, the data safety and the privacy protection level of the vehicle-road cooperation system are comprehensively improved.

A quantum communications system includes a communications system. A quantum key distribution (QKD) system is operable with the communications system and includes a transmitter node, a receiver node, and a quantum communications channel coupling the transmitter node and receiver node. The transmitter node transmits to the receiver node a bit stream of optical pulses and includes a plurality of different photon sources, each having associated therewith a respective QKD protocol, and a controller configured to select a given photon source from among the plurality thereof.

The invention discloses a secure data transmission method for a wireless communication system, which relates to the technical field of secure data transmission and comprises three steps of key generation and synchronization, physical layer subcarrier encryption and key enhancement and authentication. The method comprises the following steps: firstly, extracting multi-dimensional features through channel detection to generate a dynamic initial key, and setting a trigger condition to realize key synchronization; then, a permutation matrix is generated by using a secret key to perform scrambling encryption on a data subcarrier position, and a receiving end performs descrambling and then performs feedback through CRC verification so as to guarantee data integrity; and finally, quantum noise is introduced to enhance the randomness of the secret key, and zero-knowledge authentication is adopted to verify the identity, so that the security and the anti-attack capability of wireless communication data transmission are effectively improved.

A method for a system includes receiving with a first transceiver of a first smart device, an advertisement signal from a stationary beacon, outputting with the first transceiver of the first smart device, a first ephemeral ID that is not permanently associated with the first smart device, to the stationary beacon, receiving with the first transceiver of the first smart device, a beacon identifier from a stationary beacon, outputting with a second transceiver of the first smart device, the first ephemeral ID, a first user identifier and the beacon identifier to an authentication service, storing in an association log in the authentication service, the first ephemeral ID, the first user identifier and the beacon identifier, and storing in a beacon log in the authentication service, a log of the stationary beacon including the first ephemeral ID.

The invention discloses an end-cloud collaboration large model secret state operation method and system, the method is applied to an end-cloud collaboration trusted execution environment, and the application-end cloud collaboration trusted execution environment comprises an end-side security access layer and a cloud-side secret calculation layer for deploying a TEE cluster. The method comprises the following steps: terminal equipment negotiates with a cloud side encryption layer through an end side security access layer to generate a session key, and sends a first ciphertext generated based on the session key to a TEE cluster; and receiving a second ciphertext formed by the TEE cluster based on the first ciphertext, and decrypting the second ciphertext to obtain an interaction result. According to the method, large model secret state operation is carried out by utilizing a two-stage framework of an end side security access layer and a cloud side secret calculation layer, and cloud large model service privacy protection is realized. Meanwhile, the trusted execution environment constructed by the TEE and the heterogeneous AI expansion TEE is adopted, so that the large-model secret-state operation can be operated on a multi-architecture server and a multi-type GPU, and the requirements of diversified deployment scenes are met.

The invention relates to the technical field of communication network security, and particularly discloses a distributed communication network security verification method and system, which comprises a two-factor identity authentication module, a dynamic key arrangement and encryption module and a cross-node integrity verification module, and the dynamic key arrangement is respectively connected with the two-factor identity authentication module, the encryption module and the cross-node integrity verification module. Through combination of biological feature anchoring and secure multi-party calculation, on the premise of protecting privacy of original biological data, deep binding of biological features and public keys is realized, and biological uniqueness is given to identity authentication; and dynamic authentication interaction is fused with a timestamp, a biological characteristic entropy value and zero knowledge proof, replay attacks are resisted, 'human-equipment-identity 'consistency is accurately verified, a public key fragment is updated after authentication is passed, an identity trust chain is continuously reinforced, and it is ensured that node identities are true and credible from the source.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

The invention relates to the technical field of audio and video transmission, in particular to an internal and external network audio and video secure transmission method and system based on a cloud platform. By combining the load balancing technology with the real-time load state and the audio and video stream characteristics of the cloud platform, the encrypted traffic can be dynamically distributed to a plurality of back-end servers, and the calculation overhead in the encryption process can be effectively reduced through selection of the lightweight asymmetric encryption algorithm and the optimized key exchange process; in a handshake stage, by optimizing a key negotiation process and adjusting a key exchange process according to segmentation characteristics, the execution efficiency of a protocol is further improved, and by dynamically adjusting the execution opportunity of encryption operation, it is ensured that the encryption operation is executed at a proper opportunity, and the encryption efficiency is improved. By monitoring and adjusting the load distribution strategy and the encryption parameters in real time, the system operation mode can be dynamically adjusted according to the distortion degree and the transmission state of the audio and video streams, and the distortion degree of the audio and video streams is effectively reduced.

One example method includes binding a controlling device and an accessory device to negotiate a first credential and a second credential, the first credential is non-distributable and is used to authenticate the controlling device, and the second credential is distributable and is used to authenticate an authorized device. The controlling device sends, in response to a sharing operation for the second credential, the second credential to the authorized device when an attribute of the second credential is distributable. The authorized device sends an authentication request, first information, and verification information to the accessory device, where the verification information is obtained by processing the first information based on the second credential stored in the controlling device. The accessory device verifies the verification information based on the local second credential. When the verification succeeds, the authorized device is successfully authenticated.

A method for a system includes receiving with a first transceiver of an identity reader device, an ephemeral ID from a first smart device, outputting with the first transceiver, identity reader data to the first smart device, wherein the identity reader data comprises a first identifier and a challenge, receiving with the first transceiver, responsive data from the first smart device, wherein the responsive data comprises token data and contact tracing status of the first smart device, determining in a processor of the identity reader device, whether the first smart device is authorized in response to the ephemeral ID or the token data, and the contact tracing status, and directing with the processor, a peripheral device coupled to the identity reader device to perform a user-perceptible action in response to the processor determining that the first smart device is authorized.

The invention discloses an aggregation regulation and control method and system for multiple virtual power plants, and relates to the technical field of intelligent power grid regulation and control, and the method comprises the steps: enabling a trust anchor to synchronize a link health abstract and preset a safe operation envelope and an autonomous rule when the communication is normal; after link disconnection is detected, an autonomous mode is immediately switched to generate power setting; during the autonomous period, recording power deviation and events and generating a hash track; after the link is recovered, two-way identity verification is completed through quantum key handshake, then a fingerprint set and sparse differences are uploaded, and latest global constraints are received; an aggregation composer reconstructs a system model based on a constraint relaxation matrix and a compensation weight vector, generates an optimized power instruction, smoothly replaces an autonomous instruction with a slip coefficient, recursively allocates spare capacity, and finally realizes the transition from autonomous smooth transition to unified scheduling of each virtual power plant; the method gives consideration to toughness, integrity, fairness and safety, and significantly and integrally improves the distributed energy regulation and control reliability and recovery efficiency.

The present invention provides an improved system and method for using cryptography to secure computer-implemented choice mechanisms. In several preferred embodiments, a process is provided for securing participants' submissions while simultaneously providing the capability of validating their submissions. This is referred to as a random permutation. In several other preferred embodiments, a process is provided for securing participants' advance instructions while simultaneously providing the capability of validating their advance instructions. This is referred to as a secure advance instruction. Applications include voting mechanisms, school choice mechanisms, and auction mechanisms.

The invention relates to extending secure key storage for transaction confirmation. For example, one embodiment of a system includes: a verifier on a client device, the verifier to securely store one or more private keys, at least one of the private keys being available to verify a block of a blockchain; and a validation module of or coupled to the validator for generating a signature using the block and the private key, the signature being usable by a device having a public key corresponding to the private key to validate the authenticity of the block.

A method includes receiving, from a source user account associated with a source digital wallet of a source blockchain, a request to perform a cross-chain operation from the source blockchain to a destination blockchain. The source blockchain is associated with a source token contract that stores a delta value indicative of a difference between a total number of tokens having an attribution property in circulation of the source blockchain and a number of tokens having the attribution property in circulation of the source blockchain that are accounted for by a vault of a primary blockchain. The attribution property identifies a token issuer. The method further includes causing a cross-chain message including a transaction payload to be generated based at least in part on the delta value, and causing the transaction payload to be applied to the destination blockchain.

The invention discloses a lightweight low-delay quantum key distribution method and system adaptive to an electric power scene, and belongs to the technical field of quantum communication and electric power communication crossing. The method comprises the steps cooperatively executed by a sending end and a receiving end: the sending end determines a basis vector based on a pre-associated quantum fingerprint sequence and a timestamp, sends a key through polarization-phase two-dimensional coding, generates a selection mark and executes privacy amplification; and a receiving end synchronizes a timestamp to determine a basis vector, compares the basis vector with the quantum fingerprint to complete authentication, decodes through an integrated module, performs collaborative error correction and executes privacy amplification. The system comprises functional modules of a sending end and a receiving end, is integrated on a miniaturized board card, and supports common-fiber transmission and protocol conversion. According to the method, the problems of high time delay, high deployment cost and poor adaptability of the traditional QKD are solved, the end-to-end time delay is reduced to 14 microseconds, the deployment cost is reduced by more than 60%, the requirements of high safety, low time delay and lightweight deployment of a power system are met, and the method is suitable for key services such as power dispatching and relay protection.

The present invention discloses a shared encryption and decryption method and device, and relates to the field of network security technology, wherein the shared encryption method comprises: receiving a data encryption request sent by a first system; obtaining a first ZMK ciphertext and a ZPK ciphertext from the first system, encrypting the first ZMK ciphertext with the LMK of a shared encryption machine cluster, and then encrypting it with the first SPK of a first encryption machine associated with the first system; decrypting the first ZMK ciphertext with the first SPK to obtain a second ZMK ciphertext; sending the ZPK ciphertext, the second ZMK ciphertext and data to be encrypted to the shared encryption machine cluster, the shared encryption machine cluster encrypts the data to be encrypted, and obtains an encrypted data ciphertext; receiving the encrypted data ciphertext provided by the shared encryption machine cluster; and sending the encrypted data ciphertext to a second key server associated with the second system. The present invention can ensure the security between various systems when shared encryption is implemented.

Provided in the present disclosure are a key data processing method, apparatus and system, and a device and a storage medium. A cipher machine cluster comprises a hardware cipher machine, which is used for running at least one cipher machine instance; and the same initial key is configured for each cipher machine instance. The method comprises: acquiring a device key ciphertext and a domain key ciphertext which are provided by a target cipher machine instance, wherein the device key ciphertext is encrypted by using an initial key after a device key is created, and the domain key ciphertext is encrypted by using the device key after a domain key is created; synchronizing the device key ciphertext and the domain key ciphertext to other cipher machine instances, wherein the other cipher machine instances are used for using the initial key to decrypt the synchronized device key ciphertext so as to obtain the device key, and to decrypt the synchronized domain key ciphertext so as to obtain the domain key; and in response to a password operation request of an initiating end having been received, sending the password operation request to any cipher machine instance, and the cipher machine instance which receives the password operation request processing the password operation request by using a domain key held by the cipher machine instance itself.

According to one embodiment, a system receives, at a host system from a data processing (DP) accelerator, an accelerator identifier (ID) that uniquely identifies the DP accelerator), wherein the host system is coupled to the DP accelerator over a bus. The system transmits the accelerator ID to a predetermined trusted server over a network. The system receives a certificate from the predetermined trusted server over the network, the certificate certifying the DP accelerator. The system extracts a public root key (PK_RK) from the certificate for verification, the PK_RK corresponding to a private root key (SK_RK) associated with the DP accelerator. The system establishes a secure channel with the DP accelerator using the PK_RK based on the verification to exchange data securely between the host system and the DP accelerator.

A key exchange system according to an aspect of the present disclosure includes: a plurality of quantum key distribution (QKD) apparatuses that executes a quantum key distribution protocol including at least error correction; and a plurality of hub apparatuses that performs encrypted communication with each other, in which each of the hub apparatuses includes a key generation unit configured to generate an encryption key for performing the encrypted communication with another hub apparatus based on information received from a corresponding one of the QKD apparatuses, and each of the QKD apparatuses includes a QKD processing unit configured to execute the quantum key distribution protocol with another QKD apparatus and generate a correction key from a ciphertext of random number information, and a first transmission unit configured to transmit information representing a result of basis reconciliation in the quantum key distribution protocol to a corresponding one of the hub apparatuses.

The invention discloses a supply chain collaboration platform based on a hybrid block chain architecture and a data intercommunication method, and relates to the field of data processing. In the system, an edge computing device preprocesses original data; preprocessing the data, encrypting the preprocessed data based on an SM2 cryptographic algorithm, and finally uploading the encrypted data to a block chain network; the block chain network is based on a mixed block chain architecture of an alliance chain layer and a light node synchronization layer, and performs data chaining by adopting a PBFT consensus mechanism; data storage is carried out by adopting encryption fragmentation and a distributed redundancy storage mechanism; meanwhile, data desensitization processing and authority level-to-level management are carried out by adopting a cryptographic algorithm; the block chain network embeds the AI demand prediction model into a smart contract, and dynamically adjusts a production plan and logistics scheduling; the scheduling optimization module feeds back an optimized scheduling result to the smart contract based on a multi-objective optimization and closed-loop feedback mechanism; according to the invention, the whole-process data uploading and dynamic optimization of the supply chain can be realized.