6results about How to "Increase attack difficulty" patented technology

This invention discloses a method for updating a vehicle-mounted ECU security key and a computer storage medium. The method includes: an upper-level computer using the ECU's public key to perform asymmetric encryption on a business key to obtain ciphertext; signing the ciphertext using the upper-level computer's private key; concatenating and packaging the ciphertext, signature, and upper-level computer public key and sending it to the ECU; the ECU unpacking the received data to obtain the ciphertext, signature, and upper-level computer public key; verifying the upper-level computer public key; if the verification is successful, verifying the signature using the upper-level computer public key; if the signature verification is successful, decrypting the ciphertext using the ECU's private key; updating the vehicle-mounted ECU security key based on the decryption result; if either the upper-level computer public key or signature verification fails, sending a key update failure message to the upper-level computer and ending the ciphertext update. This invention features a simple algorithm and avoids the risk of brute-force key reading at the ECU, thus improving the security of in-vehicle terminal information.

The invention discloses a protection circuit, a chip and electronic equipment, and belongs to the technical field of integrated circuits, the protection circuit comprises an equipotential line group, a control module and a detection module; the equipotential line group is located on a shielding layer of the target chip; the equipotential line group covers a protected area; the control module is located in the protected area and is arranged on the wiring layer below the shielding layer; the equipotential line group comprises a plurality of equipotential lines; the input end of the equipotential line receives a first detection signal; the equipotential lines are disconnected at the reconfiguration node and are electrically connected with the control module respectively; the control module is used for randomly controlling a routing path at the reconstruction node, and the routing path is located in a protected area, is arranged on a routing layer and comprises a plurality of equipotential line cross routing and / or independent routing; the detection module is used for outputting an alarm signal under the condition that the target chip is attacked, and the second detection signal is a detection signal output to the detection module by the equipotential line. The attack difficulty of the protection circuit can be improved, so that the protection effect is improved.

The present invention discloses a security verification method for a door-opening brick based on ICMP, and relates to the field of network access security technology. The security verification method comprises the following steps: a client initialization step, a server verification step, a dynamic port allocation step, a TCP connection establishment step, and a behavior monitoring and analysis step; at the same time, a dynamic port mapping mechanism is applied in the dynamic port allocation step of the server, and the port information of each session is transmitted to the client in an encrypted manner by periodically changing the port or dynamically generating a new port. The present invention realizes the dynamic port generation and allocation function by designing a dynamic port allocation and dynamic port mapping mechanism, solves the problem that static ports are easily detected by port tools and increase the risk of being cracked by force and maliciously accessed, effectively prevents port exposure, increases the difficulty of attack, and improves the system's anti-scanning ability and security.

The invention, which relates to the technical field of network access security, discloses an ICMP-based door knocking safety verification method comprising the following steps: a client initialization step, a server verification step, a dynamic port allocation step, a TCP connection establishment step, and a behavior monitoring and analysis step. Meanwhile, the dynamic port mapping mechanism is applied to a dynamic port allocation step of the server, and port information of each session is transmitted to the client in an encryption mode by periodically replacing ports or dynamically generating new ports. By designing a dynamic port allocation and dynamic port mapping mechanism, a dynamic port generation and allocation function is realized, the problem that the risk of brute force cracking and malicious access is increased due to the fact that a static port is easily detected by a port tool is solved, the port exposure is effectively prevented, the attack difficulty is increased, and the anti-scanning capability and the security of the system are improved.

The present application relates to the technical field of mobile communication, and provides a kind of internet of things equipment control method and device.The method comprises: the first cloud platform receives the information that target device enters target state sent by second cloud platform;Information is used to indicate that specified operation is carried out on target device;The first cloud platform receives the operation credentials of target device generated by second cloud platform;Operation credentials are generated in the case where second cloud platform confirms that specified operation is completed;The first cloud platform sends control instruction for controlling target device to second cloud platform according to access token and operation credentials;Target device is the device registered on second cloud platform;Access token is obtained in advance by the first cloud platform in second cloud platform.The internet of things equipment control method and device provided by the present application, operation credentials of device are generated only after user carries out corresponding operation on device, and device can be controlled according to operation credentials, which increases attack difficulty and improves the security of cross-platform control internet of things equipment.

The application discloses a GNSS anti-spoofing method and system for multi-constellation ionospheric delay adaptive detection, and belongs to the technical field of satellite navigation. The method comprises the following steps: extracting effective dual-frequency pseudorange data in different constellations from observation data according to signal types; calculating ionospheric delay values of each satellite in each constellation based on preset frequency ratio factors of each constellation; assigning a sliding window buffer to each satellite, dynamically generating a detection threshold interval; judging the signal abnormal state of the current satellite, and counting the number of continuous abnormalities to obtain a single-satellite abnormality preliminary determination result; based on the single-satellite abnormality preliminary determination result, counting the proportion of abnormal satellites in each constellation and the number of continuous abnormalities of each satellite, performing global abnormality judgment, and generating an alarm information when the judgment is triggered. The application improves the robustness, environmental adaptability and reliability of GNSS anti-spoofing detection through multi-constellation joint detection, sliding window adaptive threshold and abnormal value filtering mechanism, and does not need to increase the hardware cost.