76 results about "Advanced Encryption Standard" patented technology

A wireless input / output (I / O) device wirelessly coupled to a wireless dongle of an information handling system to encrypt and transmit a data packet frame in response to a transmitted polling packet from a wireless dongle requesting a selected number of packets of a selected packet length. The microcontroller executing code instructions to sign and encrypt the selected number of data packets generating a signature and generating an LFSR distributed signature and an LFSR distributed payload. An encryption algorithm used with an initial or dynamic key and shifting state machine output of another pair of LFSRs generates a data packet encryption output value that is applied via an exclusive OR operator to the LFSR distributed signature and payload to encrypt the data packet and the data packet encryption output value is used for encryption of the next data packet until the selected number of packets of the frame are encrypted.

The invention relates to an edge duplicate removal and privacy protection entrusted audit management method and system for the Internet of Things. The method comprises the following steps: an Internet of Things device issues an audit task announcement, and a target fog node obtains a delegation key by negotiating with the device; the equipment performs block and partition processing on original data, encrypts the original data by using an AES (Advanced Encryption Standard) by using an MLE key and sends the encrypted data to a target fog The fog node uses the delegation key to generate a block label, and the block label is compared with a storage block label to remove repeated blocks; in the auditing stage, the fog node generates a random challenge and sends the random challenge to the cloud server, the cloud server generates a corresponding integrity proof and sends the integrity proof to the target fog node for validity verification, and the target fog node creates an auditing log and uploads the auditing log to the block chain for the Internet of Things device to view. The original data is encrypted by using the MLE key, so that the data privacy is protected; by entrusting label calculation, deduplication operation and auditing to the fog node, offline auditing of the equipment can be realized, and the calculation burden of the equipment can be reduced.

The invention provides a circuit breaker control method and system based on wireless communication, and the method comprises the steps: obtaining a network environment through employing a safety authentication wireless network with a self-adaptive spectrum sensing capability, and carrying out the control of a circuit breaker through employing a zero-knowledge proof algorithm based on an advanced encryption standard according to an operation request sent by a user through a mobile terminal, the method comprises the following steps: generating an encryption control command, obtaining an operation instruction based on a Hash chain security protocol and a digital signature technology, executing a corresponding preset action according to the operation instruction to obtain execution state information, generating a log entry according to an advanced encryption standard feedback mechanism, and storing the log entry by utilizing a block chain technology. The operation consistency between systems is coordinated through a consensus algorithm under a distributed decision framework, and non-tampering and distributed maintenance and control records are generated; according to the technical scheme provided by the invention, the communication flexibility, reliability and security are enhanced, the risk of unauthorized access is reduced, and the accuracy and reliability of the operation instruction are ensured.

The invention relates to the technical field of knowledge management, in particular to a knowledge base management system based on artificial intelligence, which comprises a knowledge acquisition module, a knowledge arrangement module, a knowledge updating module, a knowledge recommendation module, a user interaction module, a knowledge security module and a system management module. The system automatically obtains and sorts structured and unstructured data from multi-source data, generates a knowledge graph and performs hierarchical classification. The content of the knowledge base is dynamically adjusted and updated through time sequence analysis and a self-adaptive updating mechanism, and personalized recommendation is achieved in combination with user behaviors and historical queries. The system adopts an advanced encryption standard and a role access control technology to ensure the security of the knowledge base, so that the knowledge acquisition, arrangement and recommendation efficiency is remarkably improved, meanwhile, the high availability and data security of the system are ensured, and the system is suitable for a large-scale knowledge management scene.

The invention relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. According to the method, a national cryptographic algorithm hardware encryption and decryption co-processing module is serially arranged on a data bus between a main control chip and a flash memory particle array, so that transparent encryption of write-in data and transparent decryption of read-out data are realized; the module performs encryption and decryption based on an SM4 algorithm and an XTS advanced encryption standard mode in combination with a logic address as an adjustment value, and securely injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the co-processing module, wherein the co-processing module is integrated with a hardware encryption and decryption engine, a key management unit and data flow control logic. On the premise that a general main control chip is not changed, high-performance, high-compatibility and high-security national cryptographic hardware-level full-disk encryption is realized.

An Advanced Encryption Standard (AES) cryptographic system and a method of performing Advanced Encryption Standard (AES) cryptography. The method comprises the steps of performing multiplicative inversion for SubBytes transformation using two forward-reverse linear-feedback shift registers, LFSRs, pairs; and using different respective initialization seeds for the pairs of forward-reverse LFSRs.

A computing system uses Advanced Encryption Standard XEX Based Tweaked Codebook Mode with Ciphertext Stealing (AES-XTS) encryption to encrypt a block of data using a tweak key, a data key, a modified tweak value, and the block of data to thereby generate an encrypted block of data. The modified tweak value is computed according to the expression DEC(0, CONST KEY), where DEC is an AES decryption algorithm, and CONST KEY is the tweak key. The encrypted block of data is thereby formatted according to the Advanced Encryption Standard with no extended mode and not according to the XEX Based Tweaked Codebook Mode with Ciphertext Stealing.

The invention provides a programmable AES (Advanced Encryption Standard) encryption module hardware accelerator, an instruction set and an operation method.The accelerator is connected with a bus, carries out data interaction with the bus and carries out AES encryption and decryption on data, the accelerator comprises a master device and a slave device which are connected with the bus, the main equipment is used for receiving and transmitting a data carrying instruction; the slave device communicates with other modules on the bus and receives the data carrying instruction and data of the master device; the slave device is connected with the decoder through an instruction stack and transmits an instruction to the decoder; the decoder decodes the instruction transmitted from the slave device and sends the decoded instruction to the calculation module or the carrying module connected with the decoder for corresponding operation or data transmission; the instruction set is used for controlling the accelerator; the operation method is realized by adopting the accelerator.

The invention discloses a mobile phone USIM (Universal Subscriber Identity Module) side channel analysis method based on an outlier. The method comprises the following steps: S1, collecting a power consumption signal generated in the process of executing an AES (Advanced Encryption Standard) algorithm by a USIM card; s2, filtering and aligning the acquired power consumption signal to generate standardized side channel curve data; s3, for each key byte position participating in S box operation in the first round of AES, constructing a candidate key byte value, and calculating an S box output value; s4, recognizing recovered and uncertain key bytes by adopting a correlation energy analysis method; s5, deriving S box output byte positions influenced by the uncertain bytes in the second round; s6, calculating the correlation of the candidate value at the position, and generating a correlation feature vector; s7, inputting a local outlier factor algorithm, and calculating an outlier value; and S8, selecting the key byte with the maximum outlier as a final key byte to form a key byte set. According to the invention, the accuracy and robustness of USIM key recovery are improved in a low signal-to-noise ratio scene.

A method and system for implementing Advanced Encryption Standard (AES) with frequent S-box update and fusion function application is proposed. Initially, a first fusion function input is obtained based on an XOR of an input plaintext and a first cryptographic key. Thereafter, a set of encryption rounds is executed for generating a state output. This includes applying a fusion function on a fusion function input for generating a fusion function output and performing an XOR on the fusion function output and a second cryptographic key for obtaining an encryption output. The first fusion function input is the fusion function input for a first encryption round, the encryption output is the fusion function input for a following encryption round, and the encryption output obtained after last encryption round is the state output. Finally, a final round of AES encryption is executed based on the state output to obtain a ciphertext.

The invention provides a practical fault-tolerant data aggregation method and system without a trusted third party, the method is combined with a Shamir threshold secret sharing technology to generate an encryption mask secret key, high fault tolerance can be achieved, homomorphism of the Shamir threshold secret sharing technology is utilized, an aggregated mask value is recovered instead of a mask secret key of a single user, and the reliability of the data aggregation is improved. The data privacy security of a single user can be ensured; and a trusted third party does not need to provide any information to assist the reconstruction process. Through a technology of synchronously updating a secret key by introducing an advanced encryption standard, a proposed data aggregation scheme does not need to be subjected to auxiliary processing by a trusted third party under the condition of ensuring robustness and privacy, and a mask can be reconstructed by an edge node and an intelligent electric meter (user). According to the scheme provided by the invention, by optimizing the algorithm and the data structure, the demand on computing resources is reduced, so that the intelligent electric meter can operate efficiently even under the condition of limited processing capacity, the communication traffic is low, and the efficiency is high.

The invention discloses a privacy protection system and method in network multi-mode sentiment analysis based on quantum key distribution, and the method comprises the following steps: 1) collecting multi-mode data, and carrying out feature extraction and sentiment state analysis to obtain a sentiment score reflecting the sentiment tendency of a user; 2) based on an AES (Advanced Encryption Standard) algorithm, encrypting the multi-modal data and the emotion score by using a quantum key to generate a ciphertext; (3) the ciphertext is transmitted through a traditional communication channel; and 4) the receiver decrypts the ciphertext by using the shared quantum key to recover the original data. The system comprises an authentication center management unit, a multi-mode sentiment analysis unit, a quantum key preparation unit, a data encryption transmission unit and a data decryption unit. According to the method, the data is encrypted through the quantum key, so that the confidentiality and integrity of the data are guaranteed, security threats caused by quantum computing are effectively resisted, and a high-security privacy protection solution is provided for network video sentiment analysis.

The present disclosure provides a method of operating a memory controller, a memory controller, and a memory system, and relates to the technical field of memories. The memory controller includes an Advanced Encryption Standard (AES) engine, a processor, and a first interface, and the memory controller is communicatively connected with a first memory through the first interface. The method includes: in response to the memory controller being powered on, obtaining, by the processor, firmware from the first memory through the first interface, wherein the firmware includes a configuration information ciphertext of a first trusted computing group (TCG); and decrypting, by the AES engine, the configuration information ciphertext of the first TCG based on a first key and a preset decryption algorithm, to obtain a configuration information plaintext of the TCG.

Disclosed herein are an apparatus and method for calculating a multiplicative inverse. The apparatus for calculating a multiplicative inverse includes a data input unit for receiving input data, a multiplicative inverse calculation unit for dividing an input degree-8 finite field corresponding to the input data into two first degree-4 finite fields so as to perform Advanced Encryption Standard (AES) encryption on the input data, and for performing a multiplicative inverse calculation on the first degree-4 finite fields in consideration of a circuit depth value (T-Depth) and qubit consumption of quantum gates in a quantum circuit, and a data output unit for outputting result data obtained by performing the multiplicative inverse calculation.

The present disclosure provides a method of operating a memory controller, a memory controller, and a memory system, and relates to the technical field of memories. The memory controller includes an Advanced Encryption Standard (AES) engine, a processor, and a first interface, and the memory controller is communicatively connected with a first memory through the first interface. The method includes: in response to the memory controller being powered on, obtaining, by the processor, firmware from the first memory through the first interface, wherein the firmware includes a configuration information ciphertext of a first trusted computing group (TCG); and decrypting, by the AES engine, the configuration information ciphertext of the first TCG based on a first key and a preset decryption algorithm, to obtain a configuration information plaintext of the TCG.

Cryptographic systems and methods are provided. A method, according to one implementation, includes a step of generating a plurality of key pairs in response to receiving a request from a client for one or more digital certificates. The key pairs are associated respectively with the one or more digital certificates. Also, each key pair includes a public key and a private key. The method further includes a step of utilizing at least the plurality of key pairs to generate the one or more digital certificates. Also, the method includes a step of encrypting the one or more digital certificates and respective private keys using a single Advanced Encryption Standard (AES) key. The method also includes a step of sending the encrypted one or more digital certificates and private keys back to the client.

The invention discloses a photovoltaic data transmission encryption method based on cloud computing. The method comprises the following steps: acquiring photovoltaic data through a sensor and preprocessing the photovoltaic data; feature extraction is carried out on the preprocessed photovoltaic data, a random forest model is used for judging the sensitivity degree of different photovoltaic data, and the target is to predict the encryption requirements of the different photovoltaic data at the current moment; the method comprises the steps of encrypting power generation data by using an AES advanced encryption standard, encrypting environmental data by using a TLS transport layer security protocol, encrypting equipment state data by using RSA asymmetric encryption, and dynamically adjusting corresponding encryption levels based on encryption requirements of different photovoltaic data at the current moment; decrypting different types of photovoltaic data on the cloud platform, and storing the photovoltaic data in corresponding databases; generating a photovoltaic data correlation topological graph according to correlation strength among different statistical characteristic values in the photovoltaic data; based on the photovoltaic data correlation topological graph, analyzing the power generation data and the environmental data by using a time sequence prediction model, and predicting a future power generation amount change trend; a photovoltaic system operation optimization strategy is automatically generated according to a future power generation amount change trend and equipment state data; the method provides a scientific basis for optimizing the operation strategy of the photovoltaic system.

The invention discloses a secure chip firmware downloading method and a secure chip firmware downloading system. The secure chip firmware downloading method comprises the following steps of: firstly, injecting an RSA public key and seed data to generate an AES (Advanced Encryption Standard) key; downloading the encrypted firmware into a memory, and decrypting the encrypted firmware by using an AES (Advanced Encryption Standard) key; after downloading is completed, the security chip is reset; then checking whether an AES key is automatically generated, if so, copying the key to a global variable and setting the key to be unreadable and writable, and reading and verifying firmware; and if not, directly reading and checking the firmware. After the signature verification is passed, if no self-generated AES secret key exists, plaintext firmware is directly started; if yes, the AES key global variable is cleared, and the firmware is enabled to be started after being decrypted. According to the method, the self-generation AES algorithm is utilized, so that the security of firmware downloading of the security chip is effectively enhanced.

The invention provides a data processing method and device integrating AES (Advanced Encryption Standard) encryption and decryption and scrambling functions and a medium, and belongs to the technical field of data storage. The method comprises the steps of generating a round key of each round based on an input key according to a key expansion rule of an AES algorithm; using the key K as a seed to generate a scrambling code sequence, and performing scrambling operation on the round key of each round and the corresponding scrambling code sequence to obtain a scrambled round key; performing XOR operation on the plaintext data block and the scrambled initial round key to obtain an initial state; performing main round encryption and final round encryption to obtain a ciphertext; obtaining a scrambled round key and a scrambling code sequence according to an AES (Advanced Encryption Standard) algorithm and a scrambling code sequence generation method by using a key which is the same as the encryption process; performing XOR operation on the ciphertext and the scrambled round key to obtain an initial state; and performing main round decryption and final round decryption to obtain a plaintext. According to the method, the complexity of the key space is effectively increased, and the anti-attack capability of the data is improved.

The invention relates to the field of financial science and technology, and discloses a distributed consumption credit risk control system based on an AI large model and a use method.The distributed consumption credit risk control system comprises edge computing nodes, a central server and a data communication mechanism, and the edge computing nodes are distributed on user terminal equipment or a local server of a bank; the central server is located in a central server of a cloud or a bank, and the data communication mechanism adopts an advanced encryption standard and other encryption technologies to ensure the data transmission security between the edge node and the central server. According to the distributed consumer credit risk control system based on the AI large model, through distributed calculation, real-time data processing and intelligent model optimization, the problems of data privacy, data islands, real-time performance, fraud detection, customer experience balance and other pain points in traditional financial risk control are effectively solved, the accuracy and real-time performance of risk control are improved, and the risk control efficiency is improved. And the operation cost is reduced, and the safety and compliance of the system are ensured.

A method and system for implementing Advanced Encryption Standard (AES) with frequent S-box update and fusion function application is proposed. Initially, a first fusion function input is obtained based on an XOR of an input plaintext and a first cryptographic key. Thereafter, a set of encryption rounds is executed for generating a state output. This includes applying a fusion function on a fusion function input for generating a fusion function output and performing an XOR on the fusion function output and a second cryptographic key for obtaining an encryption output. The first fusion function input is the fusion function input for a first encryption round, the encryption output is the fusion function input for a following encryption round, and the encryption output obtained after last encryption round is the state output. Finally, a final round of AES encryption is executed based on the state output to obtain a ciphertext.

The invention is suitable for the field of vehicle-mounted control systems, and provides a vehicle-mounted communication security authentication method and system based on a layered dynamic key. The method comprises the following steps: in a vehicle manufacturing stage, a complete vehicle factory generates a master key, stores the master key in a hardware security module starting configuration area and performs hardware fusing locking; a supplier triggers a master key to derive, and a working key is generated by encrypting the master key and a random number through an advanced encryption standard and is periodically updated according to a chain type rule; the current working key and a fresh value generated by a built-in frame counter of the hardware security module are subjected to XOR to generate a session key; encrypting data by using a session key to generate a ciphertext, generating an intercepted message verification code by combining with a fresh value, and packaging and transmitting the intercepted message verification code; the receiving end verifies the fresh value difference value to resist replay, compares the intercepted message verification code to complete authentication and synchronizes the counter; through three-level secret key layering, calculation power consumption reduction, anti-replay time sequence verification and identity authentication data integrity verification, an omnibearing security system is constructed, and eavesdropping, replay, tampering and other attacks are resisted.

The present invention provides a circuit breaker control method and system based on wireless communication, wherein the present invention obtains a network environment by utilizing a secure authenticated wireless network with adaptive spectrum sensing capability, generates encrypted control commands based on an operation request issued by a user through a mobile terminal using a zero-knowledge proof algorithm and based on the Advanced Encryption Standard, obtains operation instructions based on a hash chain security protocol and digital signature technology, executes corresponding preset actions according to the operation instructions, obtains execution status information, generates log entries based on the Advanced Encryption Standard feedback mechanism, stores the log entries using blockchain technology, and coordinates operational consistency between systems through a consensus algorithm under a distributed decision-making framework to generate tamper-proof and distributed maintenance and control records. The technical solution provided by the present invention enhances communication flexibility, reliability, and security, reduces the risk of unauthorized access, and ensures the accuracy and reliability of operation instructions.

Techniques for providing integrity and data encryption (IDE) with zero latency are described. A receiving device having a cryptographic circuit with an Advanced Encryption Standard (AES) engine having a fixed time element size and a fixed delay for an IDE may transmit a latency parameter to a transmitting device. The delay parameter represents a number of clock cycles corresponding to the fixed delay. The cryptographic circuitry may use the AES engine to pre-determine AES data for a first time element before first input data for the first time element is received from the transmission device. After the number of clock cycles, the cryptographic circuitry may receive first input data from the transmitting device. The cryptographic circuit may determine first output data for the first time element using the AES data and the first input data without storing the AES data in the buffer.

A method for updating a 256-bit cryptographic key by a cryptographic key update system includes transmitting a first transmission, a second transmission, and a third transmission. The second transmission is symmetric key encryption under a serial key encryption key and a new cryptographic key of a plurality of parameters. The transmitter derives a key encryption key by converting an authentication key and a constant bit string based on a one-way compression function, the one-way compression function is one of the following functions: taking a 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 2 (MDC-2) of a bottom block password, taking the 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 4 (MDC-4) of the bottom block password, and taking a 256-bit advanced encryption standard (AES-256) as a Hirose compression function of the bottom block password; and a 256-bit hash function.

The invention relates to the technical field of data security and block chains, and provides a medical data security sharing method based on a block chain and an interstellar file system (IPFS). The method comprises five stages of system initialization, user registration, data uploading, data sharing and verification. The system adopts a block chain to record a hash index and an access log of a medical file, and uses an IPFS to store the encrypted medical file, so that an on-chain and off-chain mixed data storage structure is realized. File encryption and key derivation are realized through elliptic curve key agreement (ECDH) in combination with an advanced encryption standard (AES-256-GCM) algorithm, and data privacy is ensured. Forward and backward security is realized through a temporary key mechanism, replay attacks are defended through a timestamp, a random number and a block height mechanism, and an intelligent contract is introduced to perform identity verification and access authorization control. According to the system, data integrity is guaranteed through content addressing and hash binding, safe, efficient and traceable sharing of medical data is achieved, and trust and safety of multi-mechanism cooperation are improved.

The invention discloses a method and a system for quickly searching and automatically networking large AES (advanced encryption standard) network equipment, belongs to the technical field of audio network communication, and aims to solve the technical problems of low network configuration efficiency and high error rate caused by incapability of automatically identifying physical position attribution of the equipment during deployment of the existing large audio system. According to the technical scheme, clock synchronization is carried out on whole-network audio equipment based on a PTP protocol; when a transient acoustic event is detected, absolute timestamps and spectrum features are extracted and uploaded to a control system; screening time-related candidate equipment through time domain clustering analysis, eliminating partition wall interference equipment in combination with correlation verification of acoustic signal spectrum characteristics, and determining an equipment list in the same physical sound field; and the control system automatically generates VLAN division, IP distribution, audio stream subscription and other network configuration parameters for the list, and issues and executes the network configuration parameters. The method has the advantages of high deployment efficiency and high partition wall interference resistance, and full-automatic closed loop from physical perception to logic configuration is realized.

The invention relates to the technical field of information security, in particular to an Internet of Vehicles data encryption method and decryption method.The encryption method comprises the steps that an image of Internet of Vehicles data is obtained, and a sensitive area of the image is determined; randomly generating a special chaotic sequence parameter and an AES (Advanced Encryption Standard) key of the two-dimensional Logistic chaotic encryptor; encrypting the sensitive area based on the chaotic sequence parameters of the specialized two-dimensional Logistic chaotic encryptor to obtain an encrypted image; based on the AES key, encrypting the chaotic sequence parameter to obtain an encrypted chaotic parameter; obtaining signature data based on the sensitive area and the AES key; based on the encrypted chaos parameter and the signature data, obtaining embedded data; dynamically embedding the embedded data into the encrypted image to realize the encryption of the Internet of Vehicles data; the AES secret key is fragmented by adopting a Shamir secret key distribution method and is distributed to main bodies of vehicle enterprises, traffic management departments and insurance companies, so that data encryption strength and secure transmission are realized, and secure circulation and value release of data elements of the Internet of Vehicles are promoted.

The invention discloses an engineering machinery communication data encryption method and system based on QC-LDPC (Quasi-Cyclic Low Density Parity Check), and the method comprises the steps: firstly carrying out the encryption processing of obtained communication data of an engineering machinery vehicle through an AES (Advanced Encryption Standard) encryption technology, so as to improve the safety of the data; secondly, encoding the encrypted data through a QC-LDPC encoding technology, and further improving the reliability of the data by utilizing the advantages of low encoding complexity, low storage requirement, friendly hardware implementation, high code length flexibility, low error floor and the like of the QC-LDPC encoding technology; and finally, noise is added on the coded data to ensure that the data transmitted to the receiving end is wrong data under different channels, so that the security of the communication data is further protected.

This document discloses techniques, apparatuses, and systems for efficient and secure data handling using domain-oriented masking. In aspects, efficient and secure data handling using domain-oriented masking enables circuit resources (e.g., flip flops, data) to be shared between portions of an integrated circuit (IC). Specifically, an input register of a Galois-Field (GF) multiplier and a pipeline register within a stage of an Advanced Encryption Standard Substitution-Box (S-Box) may be implemented as sharing a single flip flop. Some ICs may utilize multiple S-Boxes, including multiple GF multipliers that are provided randomness each time the input is updated. In this case, an output from a previous stage of a first S-box may be provided as randomness to a subsequent stage of a second S-Box to limit the need for entropy generation circuitry. In this way, efficient and secure data handling using domain-oriented masking may decrease circuit cost and circuit area without impacting security.