97results about How to "Enable secure storage" patented technology

The invention belongs to the field of data information safety technology, and discloses a medical data sharing system based on Blockchain technology and a designing method. The medical data sharing system based on the Blockchain technology comprises components of a data uploader, a data manager, a data requester, alliance chain nodes and a system administrator. In the system, the data uploader utilizes AES for encrypting the medical data, thereby effectively protecting medical data privacy, and realizing high-efficiency medical data storage. Furthermore according to a symmetric key in the AESis encrypted according to the CPABE, thereby ensuring a fact that only the data requestor with an attribute that satisfies a preset accessing strategy structure can perform deciphering for obtaining the symmetric key, realizing fine-grained access control of the medical data, and realizing supports for accessing control of the temporary request data in an emergency. Obviously, the system and the method effectively settle existing problems based on a Blockchain medical data sharing system and safely and efficiently provides services such as medical data storage, fine-grained access control andsharing.

The invention provides a credible key and a safe operation method thereof. The credible Key comprises a communication agent module, a safe storage module, a credible computation module and a credible interaction module, wherein the communication agent module is used for establishing a safe channel between the credible Key and a credible operating system of terminal equipment; the safe storage module is used for providing a safe storage API (Application Program Interface) for developing a credible application, and providing a safe storage function for the credible Key; the credible computation module is used for providing a credible computation API for the credible application, and providing a credible computation function for the terminal equipment; the credible interaction module is used for transmitting an interaction command to the credible operating system of the terminal equipment through the communication agent module on the basis of user operation. The credible KEY can be used together with a credible running environment on the terminal equipment, thereby realizing credible services such as remote payment, online transfer, safe storage and credible computation.

The invention provides a blockchain-based trusted data calculation method. The method includes the following steps: electronic evidence issuance, electronic evidence storage, and authorized use of electronic evidences. According to the blockchain-based trusted data calculation method proposed by the invention, the secure storage and effective use of the electronic evidences of users can be effectively realized.

The invention provides a decentralized storage security implementation method. The method comprises the following steps: building an electronic evidence private block chain by three types of affair main bodies, namely a notary organization, a user organization and a judicial organ; and storing information abstracts and specific data of electronic evidences of users into positions in a distributedtype file system, and forming a block chain by blocks of same structures through chain structures. The invention provides the decentralized storage security implementation method, which effectively implements secure storage and effective use of the electronic evidences of the users.

The invention discloses a frequentness measuring method and system for security and privacy protection facing cloud data issuing. A database owner generates a secret key pair, encryption outsourcing processing is carried out on the database, encryption operation is carried out on complement of a frequentness threshold negative -k, the encrypted complement is uploaded to a cloud server, and a private key sk is authorized to a proxy server; a client applies to inquire the frequentness of a record R; the proxy server obtains permission from the database owner and assists the database owner in dealing with a transaction. The cloud server is used for storing a ciphertext database and carrying out a homomorphic operation on the ciphertext. According to the method and system disclosed by the invention, with the full-homomorphic encryption technology, the frequentness ciphertext in a data recording manner is obtained in a cloud environment and whether the frequentness of the record meets a privacy protection requirement is determined; and leaking of a recorded content inquired by a client as well as sensitive recorded content with the frequentness lower than a threshold in the database can be prevented during the whole process. Therefore, secure storage of data can be realized; and frequentness measurement for privacy protection can be carried out by the cloud conveniently.

The invention relates to a method and system for accessing multiple subsystems and a public subsystem with distributed storage personalized data through a single APP program. According to the method and system, in the interagency networking service system, the personalized data of clients are distributed and stored in different agency databases, independent management and safety of the data are ensured, a special service is provided, and agency subsystems are formed; public data and service are focused on the public subsystem, and public service extension, development and synergism are achieved; the agency subsystem and client access authentication information structures are planned, a client login access verification mirror image is generated on the public subsystem, the uniform mobile internet APP program (Client) is provided for the clients, the APP program interacts with an APP access centralized response server (Server), the APP access request is analyzed, client login access verification is conducted, personalized service client agency subsystems and a service content organizational framework are determined, personalized data are obtained and processed, the personalized and public service is provided, and the clients can synergistically access agency private systems and a public system.

The present invention discloses a distributed storage-based object storage method. The method comprises the steps of building an authentication server by using a distributed storage technology, and completing secure authentication of a user end and a server end; and then optimizing a background IO model for recording fragmented logs so as to improve object storage security. Compared with the prior art, the distributed storage-based object storage method ensures data storage security and the security of a storage cluster, and improves the reliability, availability, security and practicability of the distributed storage cluster.

A method to realize a global network real name system based on ID authentication is to classify network user identity authentication at each network into two types, establish one-to-one domestic authentication center at each website to provide authentication service for domestic network users when they logon domestic websites, establish 10-30 international authentication centers in the country to provide third-party centralized authentication service for foreign network users (from other countries or regions) when they access and logon domestic websites, adopt ID authentication means to solve the 'bottleneck' of mass authentication of authentication centers, update and maintain the network user authentication parameters of domestic authentication centers through the encrypted transmission established between the network real name system association (or society) of each country and domestic website technicians, and meanwhile update and maintain the network user authentication parameters of international authentication center of each country through encrypted transmission established between the network real name system associations (or societies) of different countries, thus realizing a global network real time system.

The invention relates to a robot and particularly relates to an explosive disposal robot. According to the technical scheme, a wheel-leg-arm-tank combined explosive disposal robot comprises an explosion-proof tank (1), a dismounting mechanical arm (2), a grasping mechanical arm (3), mechanical legs (4) and a frame (5) with rolling wheels; after questionable explosives are found, the proper dismounting mechanical arm (2), grasping mechanical arm (3), and mechanical legs (4) can be mounted according to early-stage information; according to the field environment, the robot can reach the adjacent side of the questionable explosives in a manner of selecting the wheels and the mechanical legs (4) or combining the wheels and the mechanical legs (4); the explosives are dismounted through the dismounting mechanical arm (2) and then the questionable explosives are put into the explosion-proof tank (1) through the grasping mechanical arm (3); even if the questionable explosives explode, damages to the surrounding and the explosive disposal robot are not caused; and after the explosion-proof tank (1) is replaced, the explosive disposal robot can be repeatedly utilized.

The invention discloses a private key storage method and device, and related equipment. The private key storage method comprises the steps that a key negotiation application sent by a client is received, a corresponding key position is formulated according to the key negotiation application, a corresponding encryption key is generated at the key position, and the key position is a key position inan encryption machine; a private key of a target user sent by the client is received, and the private key is encrypted according to the encryption key to obtain an encrypted ciphertext corresponding to the private key; wherein the private key is used for signing, encrypting and decrypting transaction data in a target account so as to use virtual assets in the target account; and the encrypted ciphertext corresponding to the private key is sent to a trusteeship server, so that the trusteeship server stores the encrypted ciphertext corresponding to the private key. By adopting the embodiment ofthe invention, the user private key can be encrypted through the encryption machine, and the leakage of the user private key is effectively prevented, so that the security of the virtual assets of theuser in the blockchain network is ensured.

The invention discloses a digital copyright protection method based on a block chain technology. The digital copyright protection method comprises a digital copyright protection model based on the block chain technology and a copyright protection protocol. The digital copyright protection model comprises a user, a Web client, a block chain server and a block chain network. A user registers and identifies through the Web client, generated transaction information Tx is processed through the block chain server, and information consensus is carried out through a consensus mechanism of the block chain network; the copyright protection protocol comprises a digital copyright registration sub-protocol and a digital copyright transfer sub-protocol. Information leakage cannot be caused even if the scheme is attacked; according to the method and the system, piracy and copying behaviors of the digital works are prevented, malicious users cannot perform camouflage attacks, piracy infringement behaviors can be solved, the real uniqueness of the digital works is ensured, and the calculation cost of a Simhash (locality sensitive hash) algorithm is greatly reduced.

The invention relates to the technical field of alliance chain technology and electronic medical data security sharing, and discloses a medical data security sharing system and method based on IPFS and alliance chains, and the system comprises a data owner terminal which is used for encrypting original medical data through employing a symmetric secret key to obtain a medical data ciphertext, storing the medical data ciphertext in the IPFS, and transmitting the medical data ciphertext to a server; the ciphertext corresponding to the keyword and the ciphertext corresponding to the symmetric keyare uploaded to an alliance chain, and an excitation mechanism and a data access permission are set in the smart contract; and a data visitor terminal is used for obtaining the symmetric key corresponding to the target medical data and decrypting the target medical data based on the symmetric key corresponding to the target medical data and the hash address stored in the target medical data when the data access permission set in the smart contract is satisfied and the incentive cost shown by the incentive mechanism is paid. According to the invention, safe storage and sharing of medical data are realized, privacy security of patients is protected, and fine-grained access control of the patients to the medical data is realized.

The invention relates to a remote monitoring system which comprises a client-side and a server-side. According to the client-side, a video acquisition module is connected with a video monitoring module; a storage module is connected with the video monitoring module and a first transmission module; a lockset control module is connected with a fingerprint management module and the first transmission module; an alarm module is connected with the first transmission module, a fault and vibration monitoring module and an anti-crash self-checking circuit module; a master control module is connected with a clock circuit module, a linkage extension module and the first transmission module. According to the server-side, a second transmission module is connected with a view display module, a fault warning module, a fingerprint management module and a geographic module; a real-time monitoring module is connected with a video monitoring module and the view display module; an information output module is connected with the view display module, a geographic positioning module, a level-to-level management module, an authority management module, a task management module, a statistic analysis module, an approval module and a topology management module; a remote control module is connected with the information output module and a log management module.

The invention discloses a knowledge graph storage and verification method based on a blockchain and an IPFS. The method specifically comprises the steps that firstly, a process file of the knowledge graph is exported from a graph database, a file hash value is calculated, the process file is stored in an IPFS inter-satellite file system, a file index hash value returned by the IPFS is compared with the previously calculated hash value, and if the file index hash value is equal to the previously calculated hash value, the file index hash value is stored in a block chain, and safety of the process file is guaranteed. The file index hash value is stored into the blockchain through processes of data packaging, signing, block packaging, block broadcasting and the like, querying the file index hash value in the blockchain, comparing the file index hash value with a file index hash value obtained from an IPFS before, if the file index hash value is the same as the file index hash value, entering a file processing module, and otherwise, entering a file warning module. Through combination of the blockchain and the IPFS, reliable and rapid storage of the knowledge graph can be realized, andthe security and traceability of knowledge graph process files are ensured.

The invention provides an air quality monitoring and prediction system and method, and the system comprises a collection node, a storage node, and a prediction node, and the collection node, the storage node, and the prediction node form a blockchain network. The collection nodes are used for acquiring air pollution monitoring data and sending the monitoring data to the storage nodes in the area where the monitoring points are located. After receiving the monitoring data, the storage node verifies the data, generates a block from the data after passing the verification, and broadcasts the block in the system. Other storage nodes verify the blocks, and after the blocks pass the verification, the current storage node receives verification information of the other storage nodes and stores theblocks locally according to a time sequence to form a chain structure. Other storage nodes store the hash value, the time identifier and the position identifier of the block and the information of the storage node of the block locally for monitoring and querying the monitoring data, and the prediction nodes acquire monitoring data and predict future air quality in combination with a machine learning algorithm.

The invention discloses a public key password calculation method and system based on an Intel SGX mechanism. The method comprises the following steps of 1) generating Public enclave and Private enclave independent of each other, which are application running environments providing isolated execution based on the Intel SGX mechanism respectively; deploying the Public enclave in an encrypted messagesender terminal or a signed message verifier terminal, and deploying the Private enclave in an encrypted message receiver terminal or a signed message generator terminal; and 2) when the Private enclave is started for the first time, generating a private key; and when the Public enclave is started for the first time, executing SGX remote authentication for the Private enclave to request for a public key identical to the private key. According to the public key password calculation method and system, the public key password calculation is realized securely and efficiently.

The invention provides a classification and grading fitness health big data sharing system and method. The system comprises a user management module, a data management module, an access control module, a data sharing module, a block chain and a distributed file system. The user management module is used for managing users; the data management module is used for encrypting by adopting different encryption levels according to the data sensitivity level; the access control module manages an access strategy of personal data generated by a data owner and realizes access control of the personal data at the same time, and the data sharing module is used for performing authority verification on a data visitor; the block link is used for storing an access control strategy and serving as an access control server; and the distributed file system is used for storing the encrypted personal data. According to the system disclosed by the invention, construction and optimization from data storage to data sharing are carried out based on the block chain, and auditing of the access control record is realized while data classification and grading privacy protection is ensured.

The embodiment of the invention provides a multi-application intelligent card with encryption and decryption functions. The intelligent card comprises a transmission management module, a command parsing module, an encryption/decryption module and a secure conversation management module, wherein the transmission management module is used for inputting a command or returning a response according to a preset transfer protocol; the command parsing module is used for parsing the received command; the encryption/decryption module is used for executing encryption or decryption operation on the application content in an application card; the secure conversation management module is used for managing the contents in the application card based on conversation information, and controlling the state transition of the content. The multi-application intelligent card not only can be used for solving the security problem of the intelligent card well, but also has the advantages of short development period, convenience in system maintenance and update, lower cost and the like.

The invention discloses a multi-dimensional data security storage system based on big data. The multi-dimensional data security storage system comprises an object acquisition unit, a data initial classification unit, a user unit, a processor, a self-classification unit and a storage end, the object acquisition unit is used for acquiring to-be-stored data, the object acquisition unit is used for transmitting the to-be-stored data to the data initial division unit, and the data initial division unit receives the to-be-stored data transmitted by the object acquisition unit. According to the method, the content in the data to be stored is averagely split into the number corresponding to the dispersion number, each split data to be stored is marked as a dispersion segment, each dispersion segment is randomly placed in a document with a specified attribute according to the content, and a new dispersion segment is obtained; and a storage document can be preliminarily encrypted.

The embodiment of the invention provides an Internet of Things data encryption transmission method and system, and the method comprises the steps: calling a health examination assembly corresponding to a target micro-service architecture system, wherein the health examination assembly comprises a preset health examination core assembly and a received pluggable health examination assembly defined by a user; performing health examination on each target service component corresponding to the target micro-service architecture system by applying the health examination assembly to obtain a health examination result corresponding to each target service component; and determining whether the health examination result corresponding to each target service component meets a preset health condition ornot, and if so, scheduling each target service component based on a preset scheduling rule. According to the application, encrypted transmission of the Internet of Things data can be realized by effectively utilizing a data encryption mode, the encrypted transmission process is high in reliability and high in security, and the security and reliability of the Internet of Things data can be effectively improved.

The invention provides a method and equipment for building the connection between client sides. The method comprises the steps of scanning a current two-dimension code, determining the second client side about to be connected with the client side according to a scan result, sending a connection building request to the second client side, and the connection is built between the client side and the second client side. In the method and equipment, the two-dimension code is used for determining the second client side about to be connected with the client side, the safety of the connection can be guaranteed through the advantages of high density and high reliability of the two-dimension code, furthermore, the advantages of achieving safe storage, convenient carrying and automatic recognition and reading can be achieved, and therefore user experience is improved.