50 results about "Advanced Encryption Standard" patented technology

The invention relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. According to the method, a national cryptographic algorithm hardware encryption and decryption co-processing module is serially arranged on a data bus between a main control chip and a flash memory particle array, so that transparent encryption of write-in data and transparent decryption of read-out data are realized; the module performs encryption and decryption based on an SM4 algorithm and an XTS advanced encryption standard mode in combination with a logic address as an adjustment value, and securely injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the co-processing module, wherein the co-processing module is integrated with a hardware encryption and decryption engine, a key management unit and data flow control logic. On the premise that a general main control chip is not changed, high-performance, high-compatibility and high-security national cryptographic hardware-level full-disk encryption is realized.

A computing system uses Advanced Encryption Standard XEX Based Tweaked Codebook Mode with Ciphertext Stealing (AES-XTS) encryption to encrypt a block of data using a tweak key, a data key, a modified tweak value, and the block of data to thereby generate an encrypted block of data. The modified tweak value is computed according to the expression DEC(0, CONST KEY), where DEC is an AES decryption algorithm, and CONST KEY is the tweak key. The encrypted block of data is thereby formatted according to the Advanced Encryption Standard with no extended mode and not according to the XEX Based Tweaked Codebook Mode with Ciphertext Stealing.

The invention discloses a mobile phone USIM (Universal Subscriber Identity Module) side channel analysis method based on an outlier. The method comprises the following steps: S1, collecting a power consumption signal generated in the process of executing an AES (Advanced Encryption Standard) algorithm by a USIM card; s2, filtering and aligning the acquired power consumption signal to generate standardized side channel curve data; s3, for each key byte position participating in S box operation in the first round of AES, constructing a candidate key byte value, and calculating an S box output value; s4, recognizing recovered and uncertain key bytes by adopting a correlation energy analysis method; s5, deriving S box output byte positions influenced by the uncertain bytes in the second round; s6, calculating the correlation of the candidate value at the position, and generating a correlation feature vector; s7, inputting a local outlier factor algorithm, and calculating an outlier value; and S8, selecting the key byte with the maximum outlier as a final key byte to form a key byte set. According to the invention, the accuracy and robustness of USIM key recovery are improved in a low signal-to-noise ratio scene.

A method and system for implementing Advanced Encryption Standard (AES) with frequent S-box update and fusion function application is proposed. Initially, a first fusion function input is obtained based on an XOR of an input plaintext and a first cryptographic key. Thereafter, a set of encryption rounds is executed for generating a state output. This includes applying a fusion function on a fusion function input for generating a fusion function output and performing an XOR on the fusion function output and a second cryptographic key for obtaining an encryption output. The first fusion function input is the fusion function input for a first encryption round, the encryption output is the fusion function input for a following encryption round, and the encryption output obtained after last encryption round is the state output. Finally, a final round of AES encryption is executed based on the state output to obtain a ciphertext.

The present disclosure provides a method of operating a memory controller, a memory controller, and a memory system, and relates to the technical field of memories. The memory controller includes an Advanced Encryption Standard (AES) engine, a processor, and a first interface, and the memory controller is communicatively connected with a first memory through the first interface. The method includes: in response to the memory controller being powered on, obtaining, by the processor, firmware from the first memory through the first interface, wherein the firmware includes a configuration information ciphertext of a first trusted computing group (TCG); and decrypting, by the AES engine, the configuration information ciphertext of the first TCG based on a first key and a preset decryption algorithm, to obtain a configuration information plaintext of the TCG.

Cryptographic systems and methods are provided. A method, according to one implementation, includes a step of generating a plurality of key pairs in response to receiving a request from a client for one or more digital certificates. The key pairs are associated respectively with the one or more digital certificates. Also, each key pair includes a public key and a private key. The method further includes a step of utilizing at least the plurality of key pairs to generate the one or more digital certificates. Also, the method includes a step of encrypting the one or more digital certificates and respective private keys using a single Advanced Encryption Standard (AES) key. The method also includes a step of sending the encrypted one or more digital certificates and private keys back to the client.

The invention discloses a photovoltaic data transmission encryption method based on cloud computing. The method comprises the following steps: acquiring photovoltaic data through a sensor and preprocessing the photovoltaic data; feature extraction is carried out on the preprocessed photovoltaic data, a random forest model is used for judging the sensitivity degree of different photovoltaic data, and the target is to predict the encryption requirements of the different photovoltaic data at the current moment; the method comprises the steps of encrypting power generation data by using an AES advanced encryption standard, encrypting environmental data by using a TLS transport layer security protocol, encrypting equipment state data by using RSA asymmetric encryption, and dynamically adjusting corresponding encryption levels based on encryption requirements of different photovoltaic data at the current moment; decrypting different types of photovoltaic data on the cloud platform, and storing the photovoltaic data in corresponding databases; generating a photovoltaic data correlation topological graph according to correlation strength among different statistical characteristic values in the photovoltaic data; based on the photovoltaic data correlation topological graph, analyzing the power generation data and the environmental data by using a time sequence prediction model, and predicting a future power generation amount change trend; a photovoltaic system operation optimization strategy is automatically generated according to a future power generation amount change trend and equipment state data; the method provides a scientific basis for optimizing the operation strategy of the photovoltaic system.

The invention relates to the field of financial science and technology, and discloses a distributed consumption credit risk control system based on an AI large model and a use method.The distributed consumption credit risk control system comprises edge computing nodes, a central server and a data communication mechanism, and the edge computing nodes are distributed on user terminal equipment or a local server of a bank; the central server is located in a central server of a cloud or a bank, and the data communication mechanism adopts an advanced encryption standard and other encryption technologies to ensure the data transmission security between the edge node and the central server. According to the distributed consumer credit risk control system based on the AI large model, through distributed calculation, real-time data processing and intelligent model optimization, the problems of data privacy, data islands, real-time performance, fraud detection, customer experience balance and other pain points in traditional financial risk control are effectively solved, the accuracy and real-time performance of risk control are improved, and the risk control efficiency is improved. And the operation cost is reduced, and the safety and compliance of the system are ensured.

A method and system for implementing Advanced Encryption Standard (AES) with frequent S-box update and fusion function application is proposed. Initially, a first fusion function input is obtained based on an XOR of an input plaintext and a first cryptographic key. Thereafter, a set of encryption rounds is executed for generating a state output. This includes applying a fusion function on a fusion function input for generating a fusion function output and performing an XOR on the fusion function output and a second cryptographic key for obtaining an encryption output. The first fusion function input is the fusion function input for a first encryption round, the encryption output is the fusion function input for a following encryption round, and the encryption output obtained after last encryption round is the state output. Finally, a final round of AES encryption is executed based on the state output to obtain a ciphertext.

The invention is suitable for the field of vehicle-mounted control systems, and provides a vehicle-mounted communication security authentication method and system based on a layered dynamic key. The method comprises the following steps: in a vehicle manufacturing stage, a complete vehicle factory generates a master key, stores the master key in a hardware security module starting configuration area and performs hardware fusing locking; a supplier triggers a master key to derive, and a working key is generated by encrypting the master key and a random number through an advanced encryption standard and is periodically updated according to a chain type rule; the current working key and a fresh value generated by a built-in frame counter of the hardware security module are subjected to XOR to generate a session key; encrypting data by using a session key to generate a ciphertext, generating an intercepted message verification code by combining with a fresh value, and packaging and transmitting the intercepted message verification code; the receiving end verifies the fresh value difference value to resist replay, compares the intercepted message verification code to complete authentication and synchronizes the counter; through three-level secret key layering, calculation power consumption reduction, anti-replay time sequence verification and identity authentication data integrity verification, an omnibearing security system is constructed, and eavesdropping, replay, tampering and other attacks are resisted.

The present invention provides a circuit breaker control method and system based on wireless communication, wherein the present invention obtains a network environment by utilizing a secure authenticated wireless network with adaptive spectrum sensing capability, generates encrypted control commands based on an operation request issued by a user through a mobile terminal using a zero-knowledge proof algorithm and based on the Advanced Encryption Standard, obtains operation instructions based on a hash chain security protocol and digital signature technology, executes corresponding preset actions according to the operation instructions, obtains execution status information, generates log entries based on the Advanced Encryption Standard feedback mechanism, stores the log entries using blockchain technology, and coordinates operational consistency between systems through a consensus algorithm under a distributed decision-making framework to generate tamper-proof and distributed maintenance and control records. The technical solution provided by the present invention enhances communication flexibility, reliability, and security, reduces the risk of unauthorized access, and ensures the accuracy and reliability of operation instructions.

A method for updating a 256-bit cryptographic key by a cryptographic key update system includes transmitting a first transmission, a second transmission, and a third transmission. The second transmission is symmetric key encryption under a serial key encryption key and a new cryptographic key of a plurality of parameters. The transmitter derives a key encryption key by converting an authentication key and a constant bit string based on a one-way compression function, the one-way compression function is one of the following functions: taking a 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 2 (MDC-2) of a bottom block password, taking the 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 4 (MDC-4) of the bottom block password, and taking a 256-bit advanced encryption standard (AES-256) as a Hirose compression function of the bottom block password; and a 256-bit hash function.

The invention relates to the technical field of data security and block chains, and provides a medical data security sharing method based on a block chain and an interstellar file system (IPFS). The method comprises five stages of system initialization, user registration, data uploading, data sharing and verification. The system adopts a block chain to record a hash index and an access log of a medical file, and uses an IPFS to store the encrypted medical file, so that an on-chain and off-chain mixed data storage structure is realized. File encryption and key derivation are realized through elliptic curve key agreement (ECDH) in combination with an advanced encryption standard (AES-256-GCM) algorithm, and data privacy is ensured. Forward and backward security is realized through a temporary key mechanism, replay attacks are defended through a timestamp, a random number and a block height mechanism, and an intelligent contract is introduced to perform identity verification and access authorization control. According to the system, data integrity is guaranteed through content addressing and hash binding, safe, efficient and traceable sharing of medical data is achieved, and trust and safety of multi-mechanism cooperation are improved.

The invention discloses a method and a system for quickly searching and automatically networking large AES (advanced encryption standard) network equipment, belongs to the technical field of audio network communication, and aims to solve the technical problems of low network configuration efficiency and high error rate caused by incapability of automatically identifying physical position attribution of the equipment during deployment of the existing large audio system. According to the technical scheme, clock synchronization is carried out on whole-network audio equipment based on a PTP protocol; when a transient acoustic event is detected, absolute timestamps and spectrum features are extracted and uploaded to a control system; screening time-related candidate equipment through time domain clustering analysis, eliminating partition wall interference equipment in combination with correlation verification of acoustic signal spectrum characteristics, and determining an equipment list in the same physical sound field; and the control system automatically generates VLAN division, IP distribution, audio stream subscription and other network configuration parameters for the list, and issues and executes the network configuration parameters. The method has the advantages of high deployment efficiency and high partition wall interference resistance, and full-automatic closed loop from physical perception to logic configuration is realized.

The invention relates to the technical field of information security, in particular to an Internet of Vehicles data encryption method and decryption method.The encryption method comprises the steps that an image of Internet of Vehicles data is obtained, and a sensitive area of the image is determined; randomly generating a special chaotic sequence parameter and an AES (Advanced Encryption Standard) key of the two-dimensional Logistic chaotic encryptor; encrypting the sensitive area based on the chaotic sequence parameters of the specialized two-dimensional Logistic chaotic encryptor to obtain an encrypted image; based on the AES key, encrypting the chaotic sequence parameter to obtain an encrypted chaotic parameter; obtaining signature data based on the sensitive area and the AES key; based on the encrypted chaos parameter and the signature data, obtaining embedded data; dynamically embedding the embedded data into the encrypted image to realize the encryption of the Internet of Vehicles data; the AES secret key is fragmented by adopting a Shamir secret key distribution method and is distributed to main bodies of vehicle enterprises, traffic management departments and insurance companies, so that data encryption strength and secure transmission are realized, and secure circulation and value release of data elements of the Internet of Vehicles are promoted.

The invention discloses an engineering machinery communication data encryption method and system based on QC-LDPC (Quasi-Cyclic Low Density Parity Check), and the method comprises the steps: firstly carrying out the encryption processing of obtained communication data of an engineering machinery vehicle through an AES (Advanced Encryption Standard) encryption technology, so as to improve the safety of the data; secondly, encoding the encrypted data through a QC-LDPC encoding technology, and further improving the reliability of the data by utilizing the advantages of low encoding complexity, low storage requirement, friendly hardware implementation, high code length flexibility, low error floor and the like of the QC-LDPC encoding technology; and finally, noise is added on the coded data to ensure that the data transmitted to the receiving end is wrong data under different channels, so that the security of the communication data is further protected.

This document discloses techniques, apparatuses, and systems for efficient and secure data handling using domain-oriented masking. In aspects, efficient and secure data handling using domain-oriented masking enables circuit resources (e.g., flip flops, data) to be shared between portions of an integrated circuit (IC). Specifically, an input register of a Galois-Field (GF) multiplier and a pipeline register within a stage of an Advanced Encryption Standard Substitution-Box (S-Box) may be implemented as sharing a single flip flop. Some ICs may utilize multiple S-Boxes, including multiple GF multipliers that are provided randomness each time the input is updated. In this case, an output from a previous stage of a first S-box may be provided as randomness to a subsequent stage of a second S-Box to limit the need for entropy generation circuitry. In this way, efficient and secure data handling using domain-oriented masking may decrease circuit cost and circuit area without impacting security.

The invention relates to a secure routing system based on trust management in a social internet of things. The secure routing system comprises a trust measurement module, a Merkle tree access control module, an encryption module and a secure forwarding module, the trust measurement module is used for collecting behavior history, social relations and interaction records of network nodes and calculating trust scores; the Merkle tree access control module is used for constructing a Merkle tree; the Merkle tree is used for verifying data integrity and executing authority management; the encryption module adopts a Diffie-Hellman key exchange algorithm to generate a shared key, and performs symmetric encryption and decryption based on an advanced encryption standard on a message through the shared key; and the secure forwarding module is used for executing access control verification and forwarding on the receiving node when the network node forwards the message, and decrypting the message until the message reaches the destination node. The invention further relates to a method using the secure routing system based on trust management in the social Internet of Things. According to the invention, the routing security and efficiency in the network environment are improved.

The invention relates to the field of integrated circuit design and information security, in particular to a high-security dynamic clock mixed domain advanced encryption standard circuit which comprises a clock 1 generation module, a clock 2 generation module, a secret key expansion module and an AES encryption and decryption module. The clock signal 1 is used as a driving clock of the AES encryption and decryption module, the clock 2 generation module generates a clock signal 2 based on a changing frequency control word, the secret key expansion module generates an AES encryption and decryption round secret key through secret key expansion, in the secret key expansion process, the clock signal 2 is used as a driving clock for round secret key updating, the fixed clock is a round secret key sampling clock, and the fixed clock is a round secret key sampling clock. Multiple groups of round keys are generated through round key updating and round key sampling, and the AES encryption / decryption module realizes AES encryption / decryption according to the round keys. The method has the advantages of high reliability, low area overhead and high attack resistance, and can effectively cope with increasingly severe security challenges in the fields of Internet of Things, edge computing and the like.

The application relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. The method realizes transparent encryption of written data and transparent decryption of read-out data by serially arranging a national secret algorithm hardware encryption and decryption coprocessing module on a data bus between a main control chip and a flash memory particle array; the module is based on an SM4 algorithm and an XTS advanced encryption standard mode, combines a logical address as an adjustment value to perform encryption and decryption, and injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the coprocessing module, the latter integrates a hardware encryption and decryption engine, a key management unit and data flow control logic. The application realizes high-performance, high-compatibility, high-security national secret hardware-level full-disk encryption without changing a general main control chip.

The application discloses a design method of an optical transport network security slice payload encryption FPGA, and belongs to the technical field of optical communication. The method is realized by implementing the FPGA in a flexible packet enhanced packet transport network based on an advanced encryption standard, dynamically tuning the granularity information of a slice channel according to needs, and designing the FPGA by the correlation between the encryption overhead of continuous encryption packets and encrypted messages. An OTN structure processor is realized in the FPGA device. The OTN is an improvement of an OTN (OSSD-OTN) based on an optical service unit and aiming at the technical short board of a traditional OTN technology, and realizes 2M-100Gbps different granularity service bearing. In addition, a symmetric encryption and authentication mechanism is realized in the OSSD-OTN, and OTN signals are transmitted along a path into a backbone optical network. The encryption mechanism solves the important problem of optical channel information security in a slice OTN communication link, and meets the increasingly urgent needs of future optical networks for security performance.

The application provides a message encryption authentication method based on a Wayland protocol and belongs to the technical field of message encryption authentication. The method comprises the following steps: based on a Wayland library, extending a connection module, and according to an advanced encryption standard encryption and decryption process, overloading communication write data and read data function interfaces to obtain overloaded communication write and read data function interfaces; through adding judgment logic of a key and judgment logic of an encryption algorithm, obtaining an overloaded client connection request function interface and an overloaded server communication channel creation function interface; defining a working mode and judging, and communicating through a Unix Socket channel to complete message encryption authentication. The application solves the problem that in the case that an existing message transmission is destroyed in a permission system, an attacker can hijack and monitor transmission data, and simultaneously realizes a client whitelist function, so that an illegal application not in the whitelist cannot initiate a connection request.

It is detected whether a next-to-last raw data block in a raw data segment has been written into an input buffer. A sequence number difference is calculated between sequence numbers of the next-to-last raw data block and a current raw data block. It is determined whether the sequence number difference exceeds a number of operation rounds associated with encryption. In response to: (1) detecting that the next-to-last raw data block has been written into the input buffer and (2) determining that the sequence number difference does not exceed the number of operation rounds, a read of the next-to-last raw data block is triggered. The next-to-last raw data block is encrypted, out of a sequence number order and using Advanced Encryption Standard (AES) processing and a CipherText Stealing (XTS) working mode, to produce a next-to-last encrypted data block. A last raw data block is encrypted using the next-to-last encrypted data block.

An adaptive, hybrid, and resource-efficient crypto system for optimized IoT security and performance, consisting of: a variety of IoT devices; The IoT gateway is communicatively connected to the multitude of IoT devices; a trust assessment module configured to calculate trust scores for each IoT device in real time based on anomaly detection results, historical security events, energy consumption patterns, and network activity patterns; a modified Advanced Encryption Standard (M-AES) encryption module configured to perform encryption operations using an XOR triplet diffusion mechanism consisting of four XOR operations that combine different bytes of state data to achieve diffusion; an Elliptic Curve Cryptography (ECC) module configured to perform Elliptic Curve Diffie-Hellman key exchange operations for secure key generation; A Reinforcement Learning Security Agent (RLSA) module configured to: monitor a multidimensional state space encompassing the power level, network load, trust level, and key age of IoT devices; select actions from an action space that includes maintaining current encryption keys, initiating key rotation, and changing encryption strength; optimize security configurations using the Q-Learning algorithm with a reward function that balances security benefits and energy consumption; a key management module configured to perform dynamic key rotation based on trust values ​​and energy thresholds determined by the reinforcement learning security agent; and a communication interface configured to enable encrypted data transmission between IoT devices and the IoT gateway using the hybrid cryptographic operations M-AES and ECC.

The invention relates to the technical field of bank cards, in particular to a bank card integrated management method and a use method thereof, comprising a bank card information centralized storage module, a bill information generation module, a payment, transfer and account management module, a data analysis and suggestion module, a data security mechanism module and a personalized customer service and intelligent support module, the bank card information centralized storage module comprises bank card information, an encryption technology, key management, cloud storage and user identity verification, the encryption technology uses an advanced encryption standard in an AES algorithm, data transmission is carried out by adopting an HTTPS protocol, and an encryption mode based on quantum key distribution (QKD) is introduced. The method has the advantages of being intelligent and safe, the safety of user information and transaction data is ensured through multiple safety measures of multi-factor authentication, advanced encryption standard (AES), HTTPS protocol and QKD encryption mode, the geofence technology is introduced, an abnormal login site is monitored, and the login safety is further enhanced.

A system and method for secure management of fuel delivery and inventory data at fuel service stations is disclosed. The invention incorporates a Cryptographic Assurance System (CAS ) to ensure the integrity, authenticity, and confidentiality of data and commands exchanged between fuel dispensers, tank gauges, forecourt controllers, and controlling entities. Fuel Dispensed Information ( EDI ) is transformed into Tamper-Proof Fuel Dispensed Information (TPFDI ) using encryption or digital signatures based on cryptographic algorithms, such as Advanced Encryption Standard (AES ) and Public Key Encryption ( PKE ). The system securely transmits TPFDI to a controlling entity and processes encrypted authorization commands (EAC) to ensure tamper-proof operations. The CAS employs secure storage of encryption keys in non-volatile memory within microcontroller units (MCUs ) integrated into forecourt controllers and fuel dispensers, protecting the system against unauthorized tampering. The system also supports secure software updates and dynamic cryptographic key management to adapt to evolving security requirements. This invention enhances operational reliability, regulatory compliance, and fraud prevention in fuel service station ecosystems.

Methods for updating 256-bit cryptographic keys by a cryptographic key update system include transmitting a first transmission, a second transmission, and a third transmission. The second transmission is a symmetric key encryption under a key encryption key of a concatenation of a plurality of parameters and a new cryptographic key. The sender derives the key encryption key by transforming an authentication key and a bit string of constant values based on a one-way compression function that is one of the following: a modification detection code 2 (MDC-2) cryptographic hash function with a 128-bit advanced encryption standard (AES-128) as the underlying block cipher, a modification detection code 4 (MDC-4) cryptographic hash function with the 128-bit advanced encryption standard (AES-128) as the underlying block cipher, the Hirose compression function with the 256-bit advanced encryption standard (AES-256) as the underlying block cipher, and a 256-bit hash function.

The application discloses a medicine information encryption and tamper-proofing method based on a blockchain and an advanced encryption standard, relates to the technical field of medicine platforms, and builds a blockchain network, deploys an intelligent contract, and generates an asymmetric key pair; according to the sensitivity of medicine information, the medicine information is divided into different levels, and different encryption methods and keys are used to encrypt medicine information of different levels; the encrypted medicine information is uploaded to the blockchain network, and the intelligent contract records the medicine information and corresponding metadata together on the blockchain; a receiver submits an access request through a client application, the intelligent contract performs permission verification according to the identity information of the receiver and the information level of the access request, generates an access token and sends the access token to the receiver after verification, and the receiver uses a private key or a symmetric key to decrypt data for confidential information. The application is remarkable in data security, integrity, management efficiency, regulatory transparency and industry trust.

The application discloses a solution method for IPMI console session playback, and relates to the technical field of computer system management; the method comprises the following steps: S1, initializing a session: when an administrator starts an IPMI session, a system initializes an empty data structure D for storing session data; S2, capturing session data: the system listens to an IPMI interface in real time and captures all input and output data streams; S3, data encryption and compression: the captured data is encrypted by using an advanced encryption standard (AES), so that the data security is ensured; an application formula E = AES (D, K) is used, wherein K is a key, and E is encrypted data; the captured data is encrypted by using the advanced encryption standard, so that the data security is ensured; the encrypted data is compressed by using a GZIP algorithm, so that the consumption of storage space is reduced; and the machine learning algorithm and the deep learning algorithm are introduced, so that the fault prediction and event analysis capability is enhanced.

A method of operating an ATM can include loading, to a memory of a computing device sub-component of the ATM, a public key of a manufacturer Rivest–Shamir–Adleman (RSA) asymmetric key-pair. The method can also include loading, to the memory of the computing device sub-component of the ATM, at least one Advanced Encryption Standard (AES) key. The method can also include configuring a first firmware update of a firmware of the computing device sub-component of the ATM to utilize the manufacturer RSA asymmetric key-pair for firmware protection. The method can also include configuring, after the configuring the first firmware update, a second firmware update of the firmware of the computing device sub-component of the ATM to utilize the at least one AES key for firmware protection.