167 results about "Advantage" patented technology

The invention discloses a data security transmission method based on an ML-KEM algorithm and a PUF, and the method comprises the steps: in a registration stage, mobile equipment generates an anti-quantum key through employing a PUF technology, and a CA issues an anti-quantum digital certificate based on a Falcon algorithm and a cryptographic accumulator; in an identity authentication stage, a mobile device and an edge gateway complete bidirectional identity authentication by exchanging identity labels, anti-quantum certificates and authentication key parameters in combination with a Falcon algorithm and PUF challenge-response, and negotiate to generate a shared key by using an ML-KEM algorithm, thereby effectively defending threats such as man-in-the-middle attack, replay attack and identity counterfeiting; in a data transmission stage, two communication parties realize data encryption transmission by adopting a symmetric encryption algorithm, and data integrity and source credibility are guaranteed in combination with a Falcon digital signature; the whole scheme has the advantages of quantum security resistance, efficient authentication, dynamic key updating, lightweight encryption and the like.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The invention relates to the field of time capsule interaction, and discloses a time capsule interaction method and system, and the method comprises the steps: carrying out the logic unit segmentation of a to-be-sealed content, and building an encryption baseline which continuously evolves along with a time factor; under the support of an encryption baseline, performing fragmentation processing on the evolved and encrypted content, and triggering copy reconstruction through a witness mechanism when a node failure is detected; on the basis of a content storage link, continuously executing periodic health check in a storage period, and generating a state index in combination with a node online rate, key evolution integrity and user interaction history; when the key has an unrecoverable risk in the state index, triggering a multi-role collaborative recovery mechanism, and requiring a user side to submit a standby identity certificate; and after missing key reconstruction is completed, when preset opening time arrives, decryption operation is executed based on the key set which is finally evolved and completed and the recovered fragments, and an opening response with an interaction attribute is generated. The method has the advantage of improving the trust of the user.

Large Language Model (LLM) security includes monitoring an LLM; detecting an attack on the LLM and defining an attack type of a plurality of attack types based on the monitoring, providing a notification of the attack; and causing a defense to the attack based on the attack type. Advantageously, the security can be configured to be executed between a user outside of the LLM. Further, the security can be configured to defend against multi-turn attacks.

The invention discloses a cryptanalysis task breakpoint continuation type fault-tolerant scheduling method, which relates to the technical field of distributed computing scheduling, and is characterized by comprising the following steps of: acquiring task attribute information, historical scheduling data and distributed node running state data of a cryptanalysis task; performing feature recognition on the task attribute information to obtain a task feature result, and matching the task feature result with tasks and nodes in the node operation state data to determine fault-tolerant scheduling core parameters; the method has the advantages that accurate breakpoint positioning and continuous calculation state recovery are achieved in combination with the breakpoint continuous calculation model, repeated calculation after task interruption is avoided, time and resource consumption is greatly reduced, the execution continuity of a cryptographic analysis task is improved, the method is convenient to adapt to a large-scale distributed resource scene of an E-level super-calculation cluster, and the method is suitable for large-scale distributed resource scenes of the E-level super-calculation cluster. The parallel computing power advantage of the E-level super computing cluster can be fully exerted, and the execution continuity of the cryptographic analysis task is improved.

The invention discloses an open source software supply chain security intelligent monitoring and risk assessment method, relates to the technical field of software supply chain security, and solves the problem that only existence of indirect dependence can be identified generally in the prior art, but whether a vulnerability code can be called on an actual execution path cannot be accurately judged. According to the method, through dependence locking and Hash fingerprint embedding during construction, cryptographic-level accurate traceability of a component version is realized, and version ambiguity is thoroughly eliminated; in combination with deep interception of a JVM probe for method calling and class loading events during operation, a loading source and a call stack context of each class in a real execution path can be captured, bidirectional association mapping is performed on dynamic behavior data and a static dependency tree, and whether a vulnerability component is located on an executable call chain or not is accurately identified. Compared with the defect that coarse-grained warning is carried out only through version matching in a traditional tool, the method has the advantage that by means of dynamic-static data fusion, it is avoided that a large number of unavailable indirect dependency vulnerabilities are misjudged to be high in risk.

The invention belongs to the technical field of network security, and discloses a federated learning-based distributed network security threat prediction system, which is characterized in that adaptive iteration is driven by threat entropy through a dynamic federated learning scheduling module, emergency update is triggered when a threat feature entropy value exceeds a threshold value, and a model iteration period is greatly compressed; a hierarchical sub-model architecture is combined, so that different domain nodes can pertinently update feature layer parameters, the recognition speed of novel variation threats is remarkably improved, the problem that traditional model recognition is lagged is solved, and it is guaranteed that a system follows up threat changes in time; a privacy enhanced aggregation module is adopted, and parameter security aggregation is realized on the premise of not leaking original data through differential privacy and homomorphic encryption double-layer protection; and meanwhile, heterogeneous data is mapped to a unified feature space by virtue of a federal transfer learning engine, so that the cross-scene model adaptability is improved, the problem of difficulty in data fusion under a centralized architecture is solved, the collaborative advantage of multi-source data is fully played, and the global model precision is improved.

A system and method for secure and efficient automated workflows includes two complementary components. A digest embedding system verifies the integrity of workflow event sequences using a rolling SHA-256 digest salted with microsecond-precision timestamps. A template-caching extractor adaptively processes heterogeneous electronic documents. The digest system enables decentralized verification without querying centralized audit logs. The extractor uses a layout hash derived from document structure to route documents through either a low-latency, rule-based extraction path or a fallback artificial intelligence model path. New templates are generated for previously unseen layouts exceeding a confidence threshold. The disclosed methods improve latency, resource utilization, energy utilization and scalability in sectors including finance, healthcare, and logistics, offering advantages over existing prior art in terms of integration, specific mechanisms for timestamp salting, hardware security module utilization for workflow events, layout-based template caching, and adaptive learning.

The invention discloses a privacy protection Transform reasoning method based on function secret sharing, which is characterized in that homomorphic encryption is adopted to encrypt an input token sequence, nonlinear operation is processed through a secure multi-party computing protocol, a distributed interval function key is generated by using function secret sharing, and secure comparison and dynamic token pruning are realized. The privacy protection reasoning specifically comprises the steps of an initialization stage, an input encryption stage, a cooperative calculation stage, a safety pruning stage, a result recovery stage and the like. Compared with the prior art, the method has the advantages that the online communication complexity of security comparison is reduced to a constant level from a quadratic level through a function secret sharing technology, the communication bottleneck problem of token pruning in the prior art is effectively solved, and the security comparison efficiency is improved on the premise of protecting client input data and server model parameter privacy. The reasoning efficiency of the Transform model in the privacy sensitive scene is remarkably improved, the method is particularly suitable for the scene where Transform model reasoning needs to be carried out on sensitive data and the privacy requirement is high, and the application prospect is good.

The invention discloses an identification-based lightweight hierarchical trust access authentication method and system, and mainly relates to the technical field of network security. Comprising the following steps: in an offline stage, an electric power registration center generates a private key root bound with an identity for a terminal through identity-based cryptography, a key generation center derives a lightweight work key voucher and pre-calculates verification points of all terminals, and a unified main multi-dimensional Bloom filter is constructed and distributed to a main station; in the online stage, a terminal updates a key and generates a signature only through hash operation, a master station reconstructs candidate verification points after receiving a message, and non-interactive verification is completed by locally querying a master multi-dimensional bloom filter. The method has the advantages that unification of strong identity credibility and extreme light weight of the terminal is achieved, the terminal side only needs efficient Hash operation, the server supports high-concurrency and low-delay authentication through the pre-calculation and Bloom filter technology, and the problem of safe access of massive distributed terminals in the electric power Internet of Things is effectively solved.

The invention discloses a hybrid multi-mode multi-key fully homomorphic encryption method based on a ring learning error problem. Comprising the following steps of public parameter initialization and data set preparation, multi-participant key generation and evaluation key joint generation, data encryption, ciphertext homomorphic operation, noise evaluation and control, participant partial decryption and server aggregation decryption. According to the method, the security advantage under a ring structure, the efficient homomorphic multiplication capability of the BFV model and the floating-point number calculation mechanism of the CKKS model are combined, and the functions of multi-party key independent generation, public evaluation key joint construction, multi-modal fusion, ciphertext homomorphic multiplication, relinearization, noise evaluation control and bootstrap refresh are supported; the problem that an existing homomorphic encryption system has performance bottlenecks and potential safety hazards in the scenes of multi-participant key isolation, ciphertext multiplication expandability, noise control and dynamic participation is solved, and the method has good safety, expandability and calculation efficiency.

The invention provides a large model backdoor attack detection and automatic tracing method, and aims to solve the problems of poor accuracy, high false alarm rate and difficulty in hidden backdoor recognition in large-scale pre-training model backdoor attack detection in the prior art. The method comprises the following steps: firstly, extracting parameter distribution characteristics and reasoning behavior characteristics of a target large model, and identifying potential abnormal clusters by utilizing clustering analysis; then, whether the model is affected by backdoor attacks or not is verified by analyzing deviation output by the model and generating an adversarial sample, and through a feature inversion backtracking technology, a mapping relation between input and output is tracked, and backdoor trigger features are positioned; and finally, identifying a backdoor attack source and a propagation path thereof through traceability analysis, and eliminating the backdoor influence by correcting abnormal parameters and retraining. The method has the advantages of high efficiency, low false alarm, automatic traceability and the like, the safety of a large-scale model can be effectively improved, and the credibility and reliability of the model in practical application are ensured.

The invention discloses a safety production performance evidence storage verification method based on ZKP and multi-dimensional verification. The method comprises the steps of daily data aggregation and commitment generation, zero knowledge proof generation, optimistic summarization and batch uplink, data availability guarantee, time trigger automatic presumption and multi-dimensional verification execution. According to the method, zero-knowledge proof, optimistic summary, data availability sampling, Vickers tree and other frontier cryptography and block chain capacity expansion technologies are fused, and the method has the advantages of low cost, high efficiency and verifiability.

The application discloses a dual-mode multiplier number theory transformation system and method based on an FPGA platform, relates to the field of post-quantum cryptography, and comprises a control module, eight butterfly execution units and 24 storage units, wherein each butterfly execution unit is equipped with three storage units and is connected with the control unit, and has two modular multiplication modules which are selectable for common modulus and special modulus. A host computer generates relevant data and sends the data to the 24 storage units of the FPGA, different modular multiplication modules are selected according to different requirements, and each butterfly execution module reads data and executes data conversion calculation. The application has the advantages of flexibility, high efficiency and reusability, can improve the efficiency of NTT execution, and further improve the efficiency of post-quantum cryptography execution, can be used in various encryption schemes which need to execute NTT, can also be used in identity authentication, key management and other cryptographic products, and effectively resists the threat brought by quantum computing.

The invention discloses an Internet of Things security chip based on multiple quantum entropy sources, and a security authentication method, device and system. The Internet of Things security chip comprises a static preset quantum entropy unit; a dynamic real-time quantum entropy source circuit; an entropy source fusion and management unit; wherein the entropy source fusion and management unit is configured to support at least two operation modes: (A) a basic service mode: generating a device identifier based on the output of the static preset quantum entropy unit, or providing a true random number based on the output of the dynamic real-time quantum entropy source circuit; (B) a fusion binding mode: taking the output of the static preset quantum entropy unit as an equipment binding parameter, performing cryptographic processing on the output of the dynamic real-time quantum entropy source circuit, and generating a cryptographic material uniquely bound with the equipment; the chip architecture realizes hardware-level binding of equipment identity and password randomness, has the advantages of high security, flexible configuration and controllable cost, and provides an ideal hardware trust root for constructing massive and trusted Internet of Things.

The application provides an anti-quantum key packaging method with compact reusability, which comprises the following steps: in step 1, a public key encryption scheme with IND-CPA security is designed based on the RLWE problem on a non-two-power cyclotomic ring through a security parameter, public parameters, a public key and a private key are generated, and the public parameters and the public key are published; in step 2, a secret random tape is used to encrypt a plaintext message into a ciphertext based on the obtained public parameters and the public key; and in step 3, the ciphertext is decrypted through the private key to obtain a corresponding plaintext. The method uses the Nussbaumer technique to realize the reusable NTT algorithm, uses the Karatsuba technique to realize the fast multiplication on a small convolution ring, and designs the reusable NTT algorithm for the public ring structure, and has the advantages of simple realization, low resource consumption and the like in the software and hardware implementation and optimization.

This invention discloses a method for protecting the integrity of access control record storage based on commercial cryptographic algorithms, comprising: collecting access control records and concatenating them into complete record data A1 according to a predetermined format; calling a PCI-E cryptographic card and calculating the MAC value M1 of A1 using HMAC technology based on the SM3 national cryptographic algorithm, and storing A1 and M1 together in a background database; when it is necessary to verify the integrity of the access control record, reading the current record data A2 and the originally stored MAC value M1 from the background database; calling a PCI-E cryptographic card and calculating the MAC value M2 of A2 using the same algorithm; comparing M1 and M2, if they match, the record is determined to be complete; if they do not match, the record is determined to have been tampered with and an alarm message is generated. This invention has the advantages of high security, strong compliance, superior performance, and good economy, and can be widely used in access control systems with security levels of Level 3 and above.

The application belongs to the technical field of secret communication, and discloses a mixed quantum and classical symmetric encryption key security analysis method, receives a plurality of pairs of known plaintext and ciphertext data, constructs a Hamiltonian operator for each pair, makes a quantum state corresponding to correct ciphertext a ground state, divides a key into two segments, and circularly traverses all values of the first segment; in each cycle, a parameterized superposition state composed of all values of the second segment is constructed on a quantum register, and is input into a quantum encryption circuit together with a plaintext quantum state to generate a ciphertext superposition state, a cost function is obtained by measuring a weighted average of Hamiltonian expectation value, and a parameter is optimized by using a quantum variation algorithm until the ciphertext superposition state converges to a state corresponding to a correct key, and the second segment key can be determined by measuring the optimized quantum state, and the complete key is analyzed in combination with the value of the first segment. The method has the advantages of classical enumeration and quantum optimization, reduces the number of quantum bits while maintaining high analysis efficiency.

The application discloses a kind of multi-party privacy calculation method, device and system based on blockchain, and the method steps include: in task execution phase, task executor receives ciphertext proof sent by trusted third party, ciphertext proof is generated according to the data fingerprint generated by task executor and task publisher generated task ID, and chain is uploaded with task ID and ciphertext proof;In task result verification phase, task executor provides random sampling data to task publisher, to challenge randomly the data used in execution process, verify whether the execution data of task executor contains sampling data, in random challenge, the data fingerprint of the data participating in task by sampling in task publisher is sent to trusted third party with task ID, after obtaining ciphertext proof from blockchain, verify using challenge key to decrypt ciphertext proof.The application has the advantages of simple implementation method, high safety and reliability, verifiable correctness of task execution result, verifiable task work proof and the like.

This application discloses a current calibration method and device for a three-phase motor, which has the following advantages: (1) High-precision calibration: By calibrating the three-phase current and bus current in stages, the sensor and line errors are fully compensated, and the current control accuracy is improved by 30%-50%; (2) Strong anti-interference ability: The calibration coefficient is processed by an encryption algorithm, which can effectively resist external interference and parameter drift, thereby improving the calibration stability by more than 25%; (3) Adaptable adjustment: The method supports online calibration and can dynamically adjust the calibration parameters according to the working state of the motor, which can adapt to various complex working conditions; (4) High safety and reliability: The method can ensure that the motor can maintain high precision under different load conditions through a dual working point calibration mechanism, thereby reducing the risk of motor failure; When the specific coefficient setting instruction or storage location is known but the coefficient writing encryption strategy is unknown, the coefficient cannot be maliciously modified, thereby protecting the controller.

The invention discloses an integrated tree model evasion attack method based on a minimum disturbance set, which is applied to adversarial robustness analysis of a random forest model, and comprises the following steps: S1, obtaining a data set related to a target, performing preprocessing operation on input data, loading a deployed integrated tree model, and performing structure analysis on the model to obtain a data set related to the target; the method has the advantages that the search granularity is improved from a single feature to a minimum disturbance path set, prefix pruning is carried out based on the inclusion relation of the modification set between paths, the search space is greatly compressed on the premise that attack completeness is guaranteed, and the search efficiency is improved. Therefore, under the same calculation overhead, an adversarial sample with less modification feature number (L0 norm is smaller) can be found more quickly and more accurately, and the attack success rate and efficiency are remarkably improved.

This invention discloses a method and system for generating three-party collaborative SM2 digital signatures to resist malicious adversaries. The method includes three-party collaborative key generation and three-party collaborative signing. This invention can promptly detect whether a malicious adversary deviates from the predetermined steps of the protocol during execution, and can hold the perpetrator accountable after the malicious adversary's attack causes the protocol to terminate. This scheme uses a three-party collaborative signature based on secret sharing and employs multiplication triples for security verification. It fully considers the security, reliability, and performance of collaborative signature technology, achieving a security level resistant to malicious adversary attacks while ensuring secure, reliable, and rapid digital signature generation in a three-party environment, achieving a balance between key generation and signing efficiency. This invention has advantages such as high security, high flexibility, and high performance, and can be applied to any application scenario supporting secure multi-party computation.

The invention discloses an image watermarking algorithm based on Kyber fully homomorphic encryption, which is characterized in that an anti-quantum Kyber lattice cryptographic algorithm is combined with a Patchwork watermarking algorithm, so that the exchangeability (first encryption and then embedding or first embedding and then encryption) of an encryption and watermark embedding sequence is realized, and dual-mode watermark extraction of a ciphertext domain and a plaintext domain is supported. According to the method, the addition homomorphic characteristic of Kyber is utilized, it is ensured that the operation sequence does not affect ciphertext generation and watermark extraction, the safety defect of a traditional algorithm in the quantum environment is overcome, and the method is suitable for scenes of digital copyright management, medical data sharing and the like and has the advantages of quantum attack resistance, high robustness, outstanding privacy protection capacity and the like.

The application relates to a fine-grained processor chip branch predictor content isolation method based on randomization index and an electronic device. It comprises a unit program block random key configuration method and a branch predictor content locking mechanism, unit program block random key configuration is realized through process key distribution and block key instruction generation, and branch predictor content locking is realized through entry locking of a branch jump target address table and a branch mode history table. Meanwhile, process key distribution is realized through random numbers of software or hardware, process keys are generated, block key instructions are generated through source code analysis and executable file analysis, and program blocks with security risks are identified; block keys are generated based on the calculation of a cryptography algorithm and program block context information through a code segment or an instruction for generating a block key. The application also has the advantages of more flexible key management, convenient content locking mechanism, more effective randomization index, great difficulty in attack training and safe and reliable branch prediction.

The invention belongs to the technical field of cryptology, and particularly relates to an asynchronous dynamic multi-party security calculation and output delivery method and system, a circuit calculation process is divided into a plurality of stages by a defined ADMPC model, calculation of each stage is completed by different committee in sequence, and an intermediate result is handed over to the committee of the next stage through a secure transmission protocol; the asynchronous dynamic preprocessing protocol ADprep is used for efficiently generating a random triple required by a multiplication gate in a calculation stage so as to ensure the correctness of nonlinear operation; the asynchronous dynamic transmission protocol ADtrans is used for ensuring the correctness and consistency of a transmission result in a committee handover process; the method has the advantages that the method can still ensure the correct delivery of the calculation result while allowing the participants to dynamically join and exit, thereby breaking through the limitation of the prior art under the synchronous assumption and the static model, and providing a feasible scheme for the deployment of the secure multi-party calculation in the practical application.

The application discloses a ciphertext domain reversible information hiding method of all-0 row and all-0 column coding, and is characterized by comprising the following steps: 1) coding of all-0 row and all-0 column of a bit plane block; 2) compression space calculation of the all-0 row and all-0 column coded bit plane block; and 3) reversible information hiding of the all-0 row and all-0 column coded bit plane block. The method has the advantages of large embedding capacity and high security.

The invention discloses an anti-quantum block cipher coprocessor operation method for a computer monitoring system, and the method comprises the following steps: S1, loading data to generate a random number and a secret key, and splicing the random number and the secret key with a preset initialization vector to generate an input state; s2, receiving the associated parameters and the plaintext, and performing preprocessing to generate grouping mask shares; s3, performing parallel encryption on the grouped mask shares based on an input state to generate a plurality of mask ciphertexts and mask authentication tags; and S4, performing linear reconstruction on the mask ciphertext to finally run to obtain a complete ciphertext, decomposing plaintext data into a plurality of mask shares for parallel processing, effectively diluting data structure features, and fundamentally cutting off a way of acquiring key information by an attacker through power consumption analysis. Compared with the prior art, the parallel computing advantage of reconfigurable hardware is fully utilized, efficient execution of cryptographic operation is achieved, the whole data processing process is completed in the register, and the influence of memory access delay on system performance is remarkably reduced.