16results about How to "Prevent eavesdropping" patented technology

The invention belongs to the field of image communication, and particularly relates to a streaming media hardware acceleration transmission system based on a credit creation server, which comprises a hardware part and a software part, and is characterized in that the hardware part comprises a basic platform which adopts a domestic credit creation server as a hardware basis to ensure the autonomous controllability and safety of the system; in the encryption acceleration step, a data acceleration card is deployed, hardware acceleration is carried out aiming at a national cryptographic encryption algorithm, and the acceleration card processes computation-intensive tasks such as encryption and decryption so as to reduce the burden of a CPU (Central Processing Unit); in the software application step, streaming media processing software and encryption and decryption application software are operated on a credential server to ensure that data processing and storage are carried out on an autonomous and controllable platform; the software part comprises an application layer and an adaptation layer, the application layer comprises a streaming media server and CDN software, and the adaptation layer is divided into static adaptation and dynamic adaptation. According to the system and the method, the safety, the speed and the efficiency of streaming media transmission are remarkably improved, the CPU processing burden is reduced, and the overall performance and the reliability of the system are enhanced.

The invention provides a cross-domain user login system, method and device based on a quantum key distribution network, and the system comprises an access routing service which is used for routing a user request to a corresponding service center; the plurality of service centers are used for receiving and processing user requests and sending key requests and identity authentication requests to the corresponding quantum cryptography service modules; the quantum cryptography service module is used for providing an encryption key for the key request and performing identity authentication for the identity authentication request; the quantum exchange cipher machine is used for receiving the quantum key sent by the quantum random number generator and providing a key service, the quantum key pre-generated by the quantum random number generator is stored in the quantum exchange cipher machine, and the quantum key and the quantum security key stored in the quantum security chip are symmetric keys; and the quantum key distribution module is used for enabling two communication parties to generate and share the same quantum key based on a quantum key distribution protocol, and encrypting and decrypting based on the quantum key. According to the invention, the multi-center scene communication security is improved.

A chaotic encryption module is characterized in that a light source output by a first continuous wave laser (CW) is modulated by a parallel quadrature modulator (IQM), so that a signal output by an arbitrary waveform generator (AWG) is converted and transmitted, and pseudo-random interleaving coding of the signal is realized; a transmitted signal is loaded to a chaos carrier through a first optical coupler FC to realize chaos hiding, then the chaos optical carrier predicted in advance by a storage pool is utilized in a chaos decryption module through an information transmission module, and the chaos optical carrier is modulated to a continuous optical carrier output by a second continuous wave laser CW through a Mach-Zehnder modulator MZM. And the 90-degree frequency mixer carries out decryption so as to preliminarily recover an original transmission signal. And finally, the obtained signal is processed by a local oscillator (LO) and a coherent receiver, and digital information processing (DSP) is carried out to realize compensation, recovery and decryption of the digital signal, so that chaotic secrecy coherent optical communication is realized.

The invention provides an information security interconnection method of a hybrid space network. The method comprises the steps of obtaining a communication connection demand requested by a user; based on the communication connection demand, querying a plurality of space network nodes matched with the communication connection demand in a pre-established space network node set, and generating initial routing paths corresponding to the plurality of space network nodes; performing optimization processing on the initial routing paths corresponding to the plurality of space network nodes to generate target routing paths of the plurality of space network nodes; and performing encryption operation on the target routing path of the selected space network node by using a pre-created security policy, and applying the encryption operation to the target routing paths of the remaining plurality of space network nodes in batches. According to the technical scheme provided by the invention, the time delay of data transmission can be remarkably reduced, and the overall efficiency of space network communication is improved.

The invention discloses a quantum secure direct communication method based on a one-time pad mode, which belongs to the technical field of quantum communication, and comprises the following steps: Bob prepares a batch of coherent states and sends the coherent states to Alice through a quantum channel, the Alice divides the received coherent states into two groups, performs homodyne detection on one group and sends a detection result to Bob, and the Bob sends the detection result to the Alice; the Bob performs security detection according to the first effective information amount; the Alice encodes the coherent states according to the secret information and sends the encoded coherent states to the Bob, the Bob randomly selects one coherent state to execute homodyne detection and sends a result to the Alice, and the Alice performs security detection according to the second effective information amount; bob performs homodyne detection on other coherent states, calculates a threshold value, and demodulates the threshold value to obtain secret information; the continuous variable quantum state is adopted, generation and detection are easy, loss is small in the transmission process, safety is high, and compatibility with the standard telecommunication technology can be achieved.

The present invention discloses a distributed credit card fraud detection method based on threshold secret sharing, which belongs to the field of information processing and includes the following steps: step 1, initialization of a distributed credit card fraud detection system, including determination of Shamir threshold secret sharing scheme parameters and construction of a federated learning distributed framework; step 2, each client obtains training data and performs respective data processing; step 3, a main server initializes a credit card fraud detection model, and defines a loss function and a model evaluation index; step 4, performs a first round of local model training and local model aggregation; step 5, continues a new round of model distribution, model training and model aggregation; step 6, each client uses the trained credit card fraud detection model to complete detection. The present invention not only protects the privacy of credit card transaction data of each client, but also improves the accuracy and robustness of the fraud detection model.

The present invention discloses a trusted data management method for the Internet of Things based on blockchain technology, which divides the trusted management problems faced by the Internet of Things data into four parts: trusted device authentication, trusted data transmission, trusted data storage and trusted data sharing. The present invention builds a distributed, tamper-proof communication network for gateways and edge servers based on blockchain technology. For device authentication, the present invention uses Diffie-Hellman key exchange technology to design a mutual authentication mechanism for the Internet of Things device and gateway, and designs a session key negotiation mechanism to ensure secure and reliable data transmission; for data storage, the present invention uses the Kademlia algorithm to build a distributed secure storage solution in the edge server network; finally, the present invention uses attribute-based encryption technology to implement a user access control mechanism to ensure the trusted sharing of Internet of Things data.

The invention provides a robust secure transmission and identification method for anti-distillation based on multi-teacher comparison, and belongs to the technical field of radio signal automatic modulation and identification. The sending end performs key-driven disturbance filtering processing on the wireless signal to be transmitted based on the shared key, generates an encrypted signal and transmits the encrypted signal; the receiving end performs inverse disturbance reconstruction on the received encrypted signal based on the shared key to obtain a decrypted signal; constructing a multi-teacher distillation system, wherein the multi-teacher distillation system comprises a plurality of teacher models and a student model; performing combined distillation training on the student model based on the output of the teacher model and the student model and the middle layer characteristics; the combined distillation training comprises output distillation and characteristic comparison distillation; and dynamically weighting a plurality of loss items generated in the multi-teacher distillation process through an adaptive loss weight adjustment mechanism based on meta-learning to obtain a modulation identification result. The identification rate of illegal receivers is effectively reduced, and the performance of legal receiving ends under interference is improved.

The application discloses a kind of based on unified port's SIP and RTP tunnel encryption forwarding method and system.The method is cooperated by tunnel client deployed in client side and tunnel server side of server side, including: based on unified port, establishing encrypted communication tunnel between the two;Tunnel client receives SIP signaling, modifies media connection information in it, and then sends to server side through tunnel encryption, and is forwarded to SIP server by server side;Tunnel client receives RTP media stream, and then sends to server side through tunnel encryption after additional header containing forwarding destination information is encapsulated, and is forwarded to SIP server according to header information by server side.The application tunnels and encrypts transmission of SIP signaling and RTP media stream through single port, effectively avoids network protocol ban, greatly simplifies firewall configuration, significantly improves NAT penetration success rate and communication security.

The invention provides a multi-level digital certificate signing and issuing management method and a terminal. A second-level certificate is signed and issued through a first-level certificate in a safe environment; and when a certificate signature request of a user is received, signing and issuing the user certificate through the secondary certificate or the sub-certificate of the secondary certificate. According to the invention, through multi-level digital certificate signing and issuing management, the first-level certificate signs and issues the second-level certificate, and the second-level certificate or the sub-certificate of the second-level certificate signs and issues the user certificate, a certificate chain can be established, and the potential safety hazard of eavesdropping and other problems in the digital certificate signing and issuing process is reduced; signing and issuing management is carried out on the digital certificates through the terminal, confidentiality of data in the transmission process is ensured in the repeated confirmation process of the multiple layers of digital certificates, unauthorized access is prevented, and the credibility and safety of the digital certificates are improved.

The invention relates to the technical field of structural color fabrics, in particular to an electromagnetic shielding self-cleaning structural color fabric and a preparation method thereof.The preparation method comprises the steps that a PET fabric serves as a substrate, an Ag film, a TiO2 film and a SiO2 film are sequentially deposited on the PET fabric through a radio frequency magnetron sputtering method, and the electromagnetic shielding self-cleaning structural color fabric is obtained; the obtained electromagnetic shielding self-cleaning structural color fabric can obtain multiple colors according to different preparation parameters and has good electromagnetic shielding performance and self-cleaning performance, and the design of the electromagnetic shielding fabric can reduce diffusion of electromagnetic radiation, alleviate the influence of electromagnetic radiation pollution on the environment and protect the health of the ecological environment.

The invention discloses a remote diagnosis method based on a trusted module, and aims to improve the safety of remote connection, the method relates to terminal equipment, a server and a remote debugging host, the terminal equipment is provided with the trusted module, and a white list and a VPN group are preset in the server; the terminal equipment sends an equipment activation request to the server; the server verifies whether the terminal device is in a white list after receiving the device activation request; if verification is not passed, an illegal request is replied, and remote diagnosis cannot be carried out on the terminal equipment; if the verification is passed, VPN connection configuration information is sent to the terminal equipment; the terminal equipment encrypts and stores the VPN connection configuration information by using the trusted module, and the terminal equipment analyzes the VPN connection configuration information and loads the VPN connection configuration information in a memory; the server sends a VPN client starting command to the terminal equipment, the terminal equipment starts the VPN client, and the VPN client and the server establish a secure tunnel; belongs to the technical field of remote connection.

The invention relates to a relay unit, system, method and device for optical communication and a storage medium, the relay unit comprises a photoelectric detector and a first signal processing module, and the photoelectric detector is configured to convert a received downlink optical beam into a downlink digital signal and send the downlink digital signal to the first signal processing module; wherein if the downlink optical beam is the optical beam corresponding to the non-target user unit, the downlink optical beam is the optical beam subjected to space zero-forcing processing; the first signal processing module is configured to receive a downlink digital signal and perform first setting processing on the downlink digital signal; wherein if it is determined that the downlink digital signal is a signal corresponding to a non-target user unit, the first setting processing comprises adding a preset noise signal. According to the invention, the signal eavesdropped by the non-target user unit is mainly the preset noise signal, so that the non-target user unit is prevented from eavesdropping the signal corresponding to the target user unit, and the safety of optical communication is improved.

The invention belongs to the field of data processing, and particularly relates to a gas meter security authentication method based on a national secret algorithm and a related device, and the method comprises the steps that a gas meter obtains a key negotiation file issued by a server; a key management model is adopted, prediction processing is conducted according to the key negotiation file, and a key distribution strategy corresponding to the gas meter is obtained; accessing the ESAM module based on the key distribution strategy, and obtaining a pre-configured encryption file matched with the key distribution strategy in the ESAM module; and executing data encryption in the gas meter by adopting the pre-configured encryption file, and uploading the encrypted gas meter data to a server, so that the server completes decryption of the gas meter data based on a pre-deployed decryption strategy. According to the method, the key updating strategy can be intelligently predicted, so that the data transmission and storage process has high safety and reliability, the flexibility of key management is guaranteed, the communication overhead caused by key updating is reduced, and the overall operation efficiency and safety of a gas meter system are improved.

The embodiment of the invention provides a mobile terminal data anti-leakage method and device based on quantum security, and the method comprises the steps: encrypting a data request through a built-in quantum security shield of a mobile terminal, and transmitting the encrypted data request to a management and control data platform, the management and control data platform decrypts the encrypted data request through the quantum security shield, receives encrypted response data issued by the management and control data platform, processes the decrypted data request to generate response data, encrypts the response data through the quantum security shield to obtain encrypted response data, and sends the encrypted response data to the management and control data platform; the response data encrypted by the platform is decrypted through the quantum security shield to obtain the response data, so that attack and eavesdropping of an unauthorized third party are avoided in the data transmission process of the mobile terminal, and the security and integrity of the data in the transmission process are ensured.

The invention discloses an intelligent logistics authorization cloud-assisted PSI-CA method supporting a block chain and electronic equipment. The method comprises the following steps: outputting a public parameter by a BC; an accounting node of the BC outputs parameters required by each participant, and the DO, the C1 and the C2 set respective signature keys and publish public keys; the DU submits vouchers alpha and beta to a system consensus node for registration, generates a signature verification key pair and issues a public key; the DO and the DU respectively select random numbers as blind factors, generate confusion ciphertexts A, A ', T and Q, sign the confusion ciphertexts A, A', T and Q, package data according to classes, and respectively send the data to C1 and C2; c1 and C2 take the packed data of the DO and the DU and the public keys of the corresponding users as input and output Boolean values; when all the results are 1, the C1 and the C2 generate confusion ciphertexts U and W; c1 and C2 carry out authorization verification on the DU, after verification is passed, confused ciphertexts U and W are sent to the DU, and the DU verifies the data after receiving the data; and after all verification is passed, the DU performs statistical information analysis based on the received data. According to the method, the security of the user data can be improved.