77results about How to "Resist attack" patented technology

The invention discloses a key generation and distribution system based on quantum random numbers, and relates to the technical field of quantum key distribution. The system comprises a quantum random number generation module, a light source control module, a quantum key distribution module, a detector module, a data processing module, a communication control module, a network anomaly monitoring module and an identity authentication module. According to the secret key generation and distribution system based on the quantum random number, the quantum random number generator generates a real unpredictable random number sequence by using the randomness principle in quantum mechanics, and the random number sequence is taken as the basis of the secret key, so that the unpredictability and the safety of the secret key are fundamentally improved; compared with a traditional secret key generation method based on a pseudo-random number, the quantum random number has higher randomness and lower predictable risk, various cryptographic analysis attacks can be effectively resisted, the uncrackability of the secret key is ensured, and an unbreakable safety guarantee is provided for information communication.

The invention discloses a session key generation method and a related device, and relates to the technical field of quantum encryption. When the first SIM card needs to perform information interaction with the second SIM card, a private key team and a public key team can be generated, and the first SIM card is pre-configured with a mixed key encapsulation algorithm, so that the public key team comprises a public key capable of resisting quantum attacks, and after the public key team is sent to the second SIM card, the private key team and the public key team can resist quantum attacks. And the second SIM card can generate key generation information by using an encapsulation algorithm in the mixed key encapsulation algorithm, encrypt the key generation information by using the public key team to obtain ciphertext information, and send the ciphertext information to the first SIM card, so that the first SIM card can decrypt the ciphertext information by using the private key team to obtain the key generation information. Therefore, the session key is obtained.

The invention relates to the technical field of quality evaluation, and discloses a lightweight beef quality evaluation method based on unsupervised feature learning, and the method comprises the steps: obtaining original hyperspectral data of beef as real data, and generating high-quality sample data based on a generative adversarial network model; preprocessing the high-quality sample data, mapping, reconstructing and fusing the preprocessed sample data, extracting spectral and spatial features of different levels, and fusing or splicing the spectral and spatial features with feature values of other auxiliary data; the fusion sample features are mapped and fused, sample data of specific tiny disturbance similar to real data are generated, the sample data and the real data are alternately input into a Transform model, and parameters of the Transform model are updated; the beef quality is evaluated on the basis of the Transform model with the updated parameters; according to the method, the accuracy, objectivity, rapidness, non-destructive property and comprehensiveness of beef quality evaluation are improved.

The invention provides an identity authentication method, terminal equipment, an identity authentication system and a storage medium, and relates to the technical field of information security. Comprising the following steps: obtaining key information of a post-quantum cryptographic algorithm and key information of an asymmetric cryptographic algorithm based on an intelligent cryptographic key; applying for a first user signature certificate corresponding to the post quantum cryptographic algorithm from a certificate issuing server according to the public key of the post quantum cryptographic algorithm; a second user signature certificate corresponding to the asymmetric cryptographic algorithm is applied to the certificate issuing server according to the public key of the asymmetric cryptographic algorithm; the key information of the post quantum cryptographic algorithm, the key information of the asymmetric cryptographic algorithm, the first user signature certificate and the second user signature certificate are used as authentication information to be written into a secure storage area of the intelligent password key; and performing identity authentication according to the authentication information stored in the secure storage area of the intelligent password key. According to the method, the quantum cryptographic algorithm is fused on the basis of the asymmetric cryptographic algorithm, so that the attack of quantum computing is effectively resisted.

The invention discloses a security federal learning method and device, a medium and a product, and relates to the technical field of artificial intelligence. The credibility score sent by each participant is calculated from the model feature parameter set similarity with other participants, the final-layer neural network similarity before and after global model training and a plurality of calculation indexes. And each credibility score is used as a basis for determining a weighting coefficient in a weighted aggregation updating process based on the model updating gradient of each participant, and if the credibility score is high, the corresponding weighting coefficient is high. And the weighting coefficient in the weighted aggregation is determined through the credibility score, so that the participant with the low credibility score cannot influence or slightly influence the updating of the global model, the attack of the poisoning model is resisted, and the robustness of federal learning is improved.

The invention discloses a system and a method for resisting a pseudo link layer protocol attack in an electric power communication network, and relates to the technical field of communication. The system comprises: a switching unit, which is used for receiving all data frames transmitted from an Ethernet port; the data identification module analyzes the protocol type and the destination address of the data frame, and forwards the data frame to the service processing unit or directly discards the data frame; the buffer area module sets an independent buffer area for each link layer protocol, and dynamically adjusts the size of the buffer area based on the protocol characteristic weight and the equipment memory resource through the configuration unit; the buffer area management module monitors the state of a buffer area in real time and triggers data discarding operation when the buffer area is fully loaded; and the data extraction module extracts the data frames from the buffer area according to a set time interval and analyzes and forwards the data frames in combination with a priority rule. According to the method, the size and the time interval of the buffer area can be dynamically adjusted, the resource utilization efficiency is improved, the pseudo link layer protocol attack is effectively resisted, and the security and the real-time performance of an electric power communication network are guaranteed.

The invention relates to the technical field of computers, and discloses a computer security protection management system which comprises a firewall module, an intrusion detection and defense module, an anti-virus and anti-malicious software module, a user identity and access management module, a security information and event management module, a vulnerability management module and a data encryption module. And the firewall module controls access of network traffic. An advanced machine learning and behavior analysis algorithm is adopted, false alarm and missing alarm are effectively reduced, high accuracy of threat detection is ensured, novel and unknown attacks can be rapidly recognized, the overall protection capability can be improved, in the aspect of system performance optimization, efficient flow analysis and threat response are achieved through a distributed architecture and a hardware acceleration technology, and the system performance is optimized. The system load is reduced, the scanning and monitoring strategy and the efficient encryption algorithm are optimized, the occupation of system resources is remarkably reduced, and the response speed and stability of the system are improved.

The present invention relates to the field of vehicle network communication technology, and discloses a fleet cross-domain authentication method and system based on lattice cryptography and quantum random numbers. The method includes an initialization phase: an authentication agency uses lattice cryptography technology to generate a public-private key pair. Registration phase: a vehicle-mounted unit generates an anonymous credential and a private key of its own vehicle based on the public-private key pair, and at the same time, the vehicle-mounted unit generates a quantum random number to calculate the signature of its own vehicle. In-domain authentication phase: a session key is negotiated between any two vehicles in a fleet within each domain based on an anonymous credential and a private key. Cross-domain authentication phase: when the captain vehicle Vi of the initial domain needs to enter the target domain, Vi and the captain vehicle Vx in the target domain perform information verification based on the signature, and determine whether all vehicles in the fleet where Vi is located that need to enter the target domain are successfully verified. If so, vehicle Vx updates the session key of vehicle Vi. The present invention can reduce cross-domain communication overhead and improve communication security.

The invention discloses a Byzantine-robust federal learning method for realizing privacy protection based on a block chain, and the method comprises the steps: distributing secret keys to a calculation server and participants based on a secret key generation center, initializing a global model through the calculation server, and uploading the initialized global model and a guarantee submitted by the participants to a block chain system; each federal learning participant carries out current model training locally, carries out normalization, homomorphic encryption and signature on the gradient obtained by training, uploads the signature to the block chain system and sends the encrypted gradient to the computing server; verifying the gradient and the signature submitted by the participant through the computing server; carrying out gradient aggregation by adopting a weighted average method based on the computing server, then updating the computing server to initialize the global model, and uploading the updated global model to the block chain; and repeating the steps until the model converges. According to the invention, privacy protection is realized, the communication overhead of the computing server is reduced, and the overall security is improved.

The invention discloses a communication method based on a post-quantum key encapsulation algorithm, which overcomes the problems that in the prior art, TLS protocol communication cannot cope with the threat of a quantum computing technology and is low in security, and comprises the following steps: generating a public and private key pair, and sending a handshake message from a user side to a server side; generating a random message from the message space, packaging the random message and the public key by adopting a quantum key packaging algorithm after CPA security, and sending a handshake message from the server side to the user side; decrypting the private key and the ciphertext and calculating an intermediate variable of the TLS protocol, wherein the user side and the server side receive the intermediate variable required by the negotiation key in the TLS protocol; and the server side calculates the signature information by using the mask function, the user side receives the signature information and compares the signature information with the original signature information, and if the comparison succeeds, data transmission is carried out. Therefore, security guarantee against quantum computing attack is provided for communication, and the communication security is improved.

The invention discloses an accurate zero-knowledge proof method for a linear relation with a hidden product. The method comprises the following steps: converting a linear relation with the hidden product on an incomplete split ring # imgabs0 # into a linear relation on # imgabs1 #; an attached additional condition is converted into a gradual component product relation on # imgabs2; the secret evidence # imgabs4 # on the # imgabs3 # is inversely transformed into # imgabs6 # elements xi on the # imgabs5 # through NTT, and a uniform and random matrix and a plurality of vectors are selected on the # imgabs7 #; generating a commitment of the first stage, sampling a vector from discrete Gaussian distribution, and determining a public vector; selecting first challenge information; generating a new commitment, a blind element and a redundant item through the first challenge information; randomly sampling second challenge information c from the challenge space C; and c, determining a vector # imgabs9 # for blinding # imgabs8 # to verify whether the vector # imgabs10 # meets a preset condition or not through c, checking whether a series of equations are established or not, if all equations are established, accepting certification, and otherwise, refusing to accept.

The invention discloses an attribute-based Internet of Vehicles dual access control data sharing method, which comprises the following steps of: generating an attribute key by a user, and generating an agent key by using the attribute key; an owner of the data encrypts the data by using an attribute-based encryption algorithm according to a defined semi-hidden access structure, and the encryption process is divided into an offline stage and an online stage in consideration of limited computing power of a vehicle end; the cloud server filters out false information sent by the malicious user; (access control is performed on a download request sent by a user who wants to access data, so that EDOS attack is denied; only the user meeting the access strategy can decrypt the ciphertext, and the decryption stage is also divided into an outsourcing decryption stage and a user decryption stage; the malicious user is revoked, and after the malicious user is revoked, only the ciphertext related to the revocation list needs to be updated, and the whole ciphertext does not need to be updated. According to the invention, safe data sharing in the Internet of Vehicles can be realized, and wide application of the Internet of Vehicles is promoted.

The invention relates to the technical field of data security, and discloses an image hiding method and system based on a local binary pattern, and the method comprises the steps: calculating a texture feature matrix of the local binary pattern of a plaintext image; generating a three-dimensional chaotic sequence according to the texture feature matrix; constructing a measurement matrix by using the three-dimensional chaotic sequence; performing two-dimensional compressed sensing processing on the plaintext image by using the measurement matrix to obtain a measurement value matrix after the plaintext image is compressed; performing scrambling and diffusion operation on the measurement value matrix to obtain a ciphertext image; the ciphertext image is embedded into the carrier image to obtain the encrypted carrier image, so that the known plaintext attack can be effectively resisted, the imperceptibility of the encrypted carrier image is improved, the blind extraction effect can be realized, and the efficiency and security of image protection are greatly improved.

The invention discloses an intelligent substation remote control system and a data processing method thereof, and the system comprises a remote control terminal which is used for transmitting an operation instruction, an instruction receiving module which is used for receiving the operation instruction from the remote control terminal, and an instruction analysis module which is used for analyzing the operation instruction to determine a corresponding operation parameter, the command generation module is used for generating a substation control command based on the operation parameters, and the control command sending module is used for sending the control command to the intelligent substation and executing corresponding operation; according to the intelligent substation remote control system and the data processing method thereof, accurate synchronization of equipment state information is guaranteed, and the asynchronous phenomenon is avoided, so that the overall operation efficiency and stability of the system are improved, the adaptability and expansion capability of the system are improved, and the requirement for efficient operation of a modern intelligent substation is met.

The invention discloses a quantum signature and identity authentication method based on a quantum public key, relates to the technical field of quantum signature and quantum identity authentication, and solves the problems that existing digital signature and identity authentication are low in security, and eavesdropping and potential quantum computing threats cannot be detected. The method is composed of a registration stage, an initialization stage, a signature stage, an identity verification stage and a signature verification stage, a public key encryption algorithm based on quantum gate transformation is designed in the method and is applied to a quantum public key identity authentication stage, on one hand, encryption processing is conducted on a public key, and on the other hand, the identity authentication process is conducted. Therefore, the security of the signature identity is ensured. Meanwhile, a quantum signature method based on unitary operation is used, so that the security and quantum attack resistance of the signature stage are ensured. Finally, the security analysis shows that the security of the method depends on the undistinguishability of an unknown quantum sequence and a quantum man-in-the-middle attack threat model. According to the method, the security of signature and identity authentication is effectively improved.

The invention relates to the technical field of computers, and discloses an anti-malicious node cross-chain data privacy protection method based on a trusted relay chain, and the method comprises the steps: operating the trusted relay chain in a block chain system; the node with the highest global trust degree is taken as an agent node, data are encrypted after initialization and before private data are uploaded, and the encrypted data are uploaded to a certain node on the block chain X; when a node on the block chain Y needs to acquire data on the block chain X, a data acquisition request is sent to the proxy node, the proxy node requests a re-encryption key from a data owner, the proxy node uses the re-encryption key to convert a ciphertext CT into a re-encryption ciphertext, then a decryption algorithm is operated, and if the attribute of the node meets an LSSS access structure, the data is successfully decrypted. Based on attribute proxy re-encryption and the trust relay chain, efficient, safe and flexible cross-chain data privacy protection is realized, and the malicious node resistance of the relay chain is improved.

The invention relates to an efficient and extensible inter-group data ownership transfer method. Comprising the following steps: 1) generating a group user key; 2) generating a data integrity auditing label; 3) auditing data integrity; 4) dynamically joining or quitting the group users; and 5) data ownership transfer. According to the method, a random mask is added to a private key indexed in an integrity auditing label, and meanwhile public parameters corresponding to the random mask are calculated. Compared with the problem that the existing scheme is difficult to adapt to the dynamic characteristics of the group, the method has the advantages that 1) the structure of the BLS aggregation signature is adaptively optimized, the rogue key attack can be effectively resisted, and the ownership of the group to the data can be transferred only under the condition that the public key and the private key are consistent; the generated data integrity auditing label can effectively resist collusion attacks, safety of sensitive information such as private keys of two transaction parties is guaranteed, participation of any trusted third party is not needed, and the method is more suitable for actual production.

The invention discloses an image encryption method based on a new non-adjacent dynamic coupling mapping lattice and cross scrambling. The method comprises the following steps: acquiring an image to be processed; preprocessing an image to be processed to obtain parameters and initial values required by an encryption process; generating a chaotic sequence based on the parameters and the initial value required by the encryption process; adopting a cross traversal algorithm, selecting different central points and traversal directions of the image to perform preliminary scrambling on positions of image pixels, and obtaining an initial scrambling image; a random cross transformation algorithm is adopted to perform scrambling and diffusion operation based on the initial scrambling image, the pixel position of the image is changed, the pixel value of the image is preliminarily changed, and a semi-encrypted image is obtained; and carrying out secondary diffusion on the semi-encrypted image by adopting a bidirectional disturbance index diffusion algorithm to obtain an encrypted image. According to the method, corresponding attacks can be effectively resisted, and good safety is achieved; and the time efficiency is relatively high.

The invention provides a modified epoxy resin water permeable brick and a preparation method thereof. The modified epoxy resin water permeable brick is prepared from the following raw materials in parts by weight: 95 to 105 parts of aggregate, 8 to 15 parts of modified epoxy resin, 1 to 3 parts of curing agent, 5 to 8 parts of composite filler, 0.1 to 0.3 part of exciting agent, 2 to 4 parts of self-repairing component and 1 to 3 parts of diluent. According to the water permeable brick, through the synergistic effect of the organic silicon modified epoxy resin and the special curing agent, the anti-aging performance of the material is improved. The introduced Si-O-Si bond can effectively resist the attack of ultraviolet photons; long-chain alkyl in the curing agent forms a compact physical barrier layer, so that oxygen and moisture permeation is greatly slowed down, the water permeable brick can effectively resist pulverization, yellowing and embrittlement in long-term outdoor use, the compressive strength and the water permeability coefficient of the water permeable brick can still keep an extremely high retention rate after long-term use, the service life is remarkably prolonged, and the water permeable brick is suitable for popularization and application. The industrial pain point that a traditional resin-based water permeable brick is easy to age is solved.

The invention relates to the technical field of computer security, in particular to an inner product public key encryption method, which specifically comprises the following steps: in a system initialization stage, a key generation center outputs a system main public key and a system main private key according to security parameters and a deterministic algorithm in a predicate coding function; in the key updating stage, the key generation center periodically updates a system main private key; in the key generation stage, the key generation center generates a user private key according to the new system main private key and the user predicate vector; in the encryption stage, a message sender encrypts a message plaintext according to a system main public key and user attributes to generate a ciphertext; in the decryption stage, the message receiver decrypts the ciphertext according to the user private key. The inner product public key encryption method has adaptive security and higher implementation efficiency, can resist attacks of attackers with continuous leakage capability, and has an attribute hiding function.

The invention relates to the field of data assets, in particular to a data asset transaction three-level node platform design method of a mimicry structure. The method comprises the following steps: S1, initializing a system, and registering an IP address and port information accessed by an external entity; s2, receiving a task request of the mimicry dispatcher, and selecting an executor to carry out task allocation; s3, returning the IP address of the selected executor to the mimicry dispatcher; s4, the mimicry dispatcher distributes the access request information to a specified executor; s5, the executor processes the access request of the mimicry dispatcher, and consistency voting is carried out; s6, the mimicry judgment gateway carries out consistency voting on the results of the multiple execution bodies; and S7, calling a corresponding interface to execute a task according to the type and the target of the request and the type of the micro-service. According to the method, diversified network attacks are defended by introducing cooperative work of a dynamic, heterogeneous and redundant mimicry defense architecture and a core function component, and the consistency of data processing and the high availability of the system are ensured.

This invention relates to the fields of federated learning and cryptography, specifically to a secure three-party aggregation method for federated learning in the Industrial Internet of Things (IIoT). The method includes an initialization phase, a training phase, an online phase, and a verification phase. By setting up an architecture with one honest server and two aggregation servers, each server receives a portion of the secret share of local model gradient parameters sent by various IoT devices, thus protecting the privacy of local data. The honest server assists the two aggregation servers in interactively executing a three-party weight calculation protocol to calculate the secret share of the aggregation weights. They also interactively execute a three-party multi-weight aggregation protocol to calculate the secret share of the gradient parameters of the current aggregation model. Furthermore, a linear homomorphic hashing method is used to verify the correctness of the gradient parameters of the current aggregation model. This method solves the problems of low efficiency, weak security, and low robustness in federated learning during model training and aggregation, and can promote data flow and utilization in IoT scenarios.

The invention discloses a multi-party key authentication method based on Internet of Things data transmission, and relates to the technical field of communication. The method is based on necessary parameters generated by a key generation center; determining user registration information and equipment registration information on the basis of the biological characteristics of the user and a gateway private key by the key generation center; sending the biological key, the user identity identifier and the first timestamp of the user to a gateway to verify the legality of the user; sending the device identity and the first timestamp of the device to a gateway to verify the validity of the device; when the user is legal and the equipment is effective, determining a group key, a user second timestamp, an equipment second timestamp, target equipment information and target user information based on the gateway; verifying the device according to the target device information and the second timestamp of the device; verifying the user according to the target user information and the second timestamp of the user; and when the user is legal and the equipment is valid, the group key and the equipment private key are sent to the equipment and the user, so that the security of data transmission in the Internet of Things is effectively guaranteed.

The application provides a password-based authentication key agreement method based on a lattice, which allows a user to use a password to agree with a server on a session key and authenticate the user identity. The method is constructed based on an ideal lattice, and its security is established on a ring-based learning problem with errors, so that the method can effectively resist quantum attacks. The user's credentials are saved in the form of password-encrypted in the server end, and only the user with the correct password can decrypt the legal credentials and establish the subsequent session key. When the session key is established, the user and the server perform an authenticated key exchange with a key hiding attribute to prevent the user's credential information from being leaked. Even if an enemy obtains the user's password-encrypted credential ciphertext and exhaustively searches the password space to decrypt the ciphertext to obtain a possible user credential set, the correct password corresponding to the credential cannot be identified from the set, so the application can resist offline dictionary attacks. In addition, two-way key confirmation can ensure the consistency of the session key and verify the user identity.

The present invention discloses a key generation and distribution system based on quantum random numbers, and the present invention relates to the field of quantum key distribution technology. The system includes a quantum random number generation module, a light source control module, a quantum key distribution module, a detector module, a data processing module, a communication control module, a network anomaly monitoring module, and an identity authentication module. The key generation and distribution system based on quantum random numbers uses the randomness principle in quantum mechanics through a quantum random number generator to generate a truly unpredictable random number sequence, and uses the random number sequence as the basis of the key, which fundamentally improves the unpredictability and security of the key. Compared with the traditional key generation method based on pseudo-random numbers, the quantum random number has higher randomness and lower predictability risk, can effectively resist various cryptanalysis attacks, ensure the unbreakability of the key, and provide an indestructible security guarantee for information communication.

The invention belongs to the technical field of protective equipment, and discloses a protective umbrella aiming at swarm unmanned aerial vehicle attacks. The first protection surface comprises a first umbrella cap fixedly connected with the umbrella handle, a first sliding block which slides relative to the umbrella handle and a retractable umbrella surface, and the first sliding block slides along the umbrella handle close to or away from the first umbrella surface to realize retraction and release of the umbrella surface; and the retractable umbrella fabric is a multi-layer impact-resistant umbrella fabric. The protective umbrella with the multi-layer impact-resistant umbrella fabric buffers layer by layer, attacks of the swarm unmanned aerial vehicle are effectively resisted, and the safety of operators is guaranteed.

The present application relates to the animal medical technology field, especially to the Streptococcus suis strain and the vaccine thereof for prevention and treatment, and provides Streptococcus suis type 2, type 3 and type 9 strains screened and obtained, and a trivalent inactivated vaccine prepared by mixing the three strains, which can safely and effectively prevent and protect against the attack of the three pathogenic bacteria of Streptococcus suis.

Disclosed herein are antisense oligonucleotides that are capable of inducing expression of ubiquitin-protein ligase E3A (UBE3A) from the paternal allele in animal or human neurons. The oligonucleotides target the suppressor of the UBE3A paternal allele by hybridization to SNHG14 long non-coding RNA at the 5'-end of UBE3A-AS, which is downstream of SNORD115-45 snoRNA. Also disclosed are pharmaceutical compositions and methods for treatment of Angelman syndrome.

The invention provides an on-lattice concise password session key negotiation generation method. A user is allowed to use a password to negotiate a session key with a server and authenticate the identity of the user. The protocol is constructed based on an ideal lattice, so that the security of the protocol is established on a learning problem with errors on a ring, and quantum attacks can be effectively resisted. The password and the identity of the user are stored in the server side. During session key negotiation, the temporary public key is encrypted by using the password, so that the server can confirm the identity of the user. If the opponent has no password, even if the opponent obtains all information transmitted in the protocol, the opponent cannot obtain the temporary public key of the user to negotiate the session key. Thus, the protocol can resist impersonation attacks. In addition, the protocol adopts bidirectional key confirmation to ensure the consistency of session keys.

The invention belongs to the technical field of artificial intelligence, discloses a federal learning method and system for coping with hostile attacks in a non-independent identically distributed scene, and designs a user contribution degree model based on marginal contribution and a user credibility model based on a rank sum ratio. According to the method, the concept of evolutionary clustering is adopted, scores of all users in the round are calculated by utilizing the contribution degree of each user in the round and the user credibility calculated in the previous round, and on the basis, the users participating in aggregation are selected by utilizing the idea of a greedy algorithm to be added into a set of a user aggregation model one by one. Meanwhile, a root data set is maintained at a server side, and a server model trained by using the root data set is used as an initial aggregation model of each round. In a non-independent identically distributed scene, the performance of the algorithm is evaluated on two public data sets with different proportions of malicious users. A large number of experimental results show that the accuracy of the algorithm in a test set is superior to that of various baseline algorithms.