90 results about "Anonymous authentication" patented technology

The invention provides a vehicle identity anonymous authentication method in a space-air-ground fusion vehicle-mounted network. The method comprises the following steps: carrying out multi-source data acquisition; generating a dynamic area identifier based on the vehicle real-time position data, and performing dynamic updating according to a vehicle moving threshold value; vehicle equipment identification information is acquired, a salted hash value is generated in combination with the dynamic region identifier, and an anonymous certificate containing dynamic effective duration is generated; extracting spatio-temporal data fluctuation parameters according to the environmental perception data, and extracting delay trend parameters and channel stability parameters according to the regional network state data; the weight is dynamically adjusted according to the link type and the time period type, and the dynamic trust quantized value of the vehicle is calculated through weighted summation; differential authentication is executed based on the dynamic trust quantized value of the vehicle and the anonymous voucher, and the differential authentication comprises the steps that lightweight verification is adopted when the vehicle is highly trusted, two-factor authentication is started when the vehicle is low trusted, and link timeout redundancy authentication is combined. According to the method, the trust evaluation accuracy can be improved, and the dynamism of a privacy protection mechanism is enhanced.

The invention discloses an anonymous authentication method for a certificateless group of the Internet of Vehicles, and the method comprises the steps: 1) system initialization: system parameter generation, road side unit registration and vehicle registration; 2) communication authentication between the vehicle and the infrastructure, including bidirectional identity authentication and security key negotiation; 3) communication authentication between vehicles, including generation of pseudonyms and signatures, signature authentication and efficient batch authentication; and 4) a malicious vehicle revocation mechanism based on group key updating, which comprises the steps of malicious vehicle identity disclosure, group key updating and distribution, legal vehicle key recovery and malicious vehicle isolation. The method not only has more efficient processing capability in the aspects of guaranteeing the data security, privacy protection and Sybil attack defense of the Internet of Vehicles system, but also meets the requirements of the Internet of Vehicles for efficient identity verification and revocation in a resource-constrained environment, and provides a safe, low-cost and efficient overall solution for the Internet of Vehicles system.

The invention provides an unmanned aerial vehicle anonymous authentication and identity remote identification method, an unmanned aerial vehicle and supervision equipment thereof, and the method comprises the steps: selecting a system main private key and a main public key by an unmanned aerial vehicle service provider in advance, and defining an attribute set; a certificate is generated and issued for the unmanned aerial vehicle through an unmanned aerial vehicle registration process; in the operation process of the unmanned aerial vehicle, generating an RID data packet which accords with an RID rule and can be authenticated anonymously; the RID data packet comprises the following information: an unmanned aerial vehicle position, an unmanned aerial vehicle speed, an attribute ciphertext of the unmanned aerial vehicle, a position ciphertext of an unmanned aerial vehicle operator, encrypted unmanned aerial vehicle public key information, a timestamp and a group signature; and broadcasting the RID data packet at regular time, so that a receiver obtains the position and the flight speed of the unmanned aerial vehicle according to the received RID data packet. By using the scheme of the invention, effective management and privacy protection of the unmanned aerial vehicle can be realized.

The invention discloses anonymous authorization and k-time anonymous authentication methods and devices of constant time complexity, equipment and a medium, and relates to the technical field of information security. If the type is anonymous authorization, generating an anonymous authorization random number, calculating a cryptographic function, calculating an auxiliary proving anonymous identity and a first variable and a second variable of auxiliary anonymous authentication, generating a zero-knowledge proving for anonymous authorization, sending the zero-knowledge proving to a verification party, obtaining an index voucher which is sent by the verification party and indicates that the verification is passed, anonymous authorization with the verification party is completed; if the type is k times of anonymous authentication, generating an anonymous authentication random number, calculating an anonymous authentication credential, generating a zero-knowledge proof for anonymous authentication, and sending the zero-knowledge proof to a verification party, and if the verification is passed, completing k times of anonymous authentication based on constant time complexity with the verification party, and allowing a user to flexibly select anonymous authentication times in an identity authentication process; and the flexible access right of the user, privacy protection flexibility and practicability are improved.

This disclosure relates to a method for anonymous attestation that includes receiving, by an application running on a client device and from a first content provider, an authentication request to authenticate a user to receive content from a second domain of a second content provider, redeeming, with an attestation token issuing system that issued an anonymous attestation token attesting to the user's authentication to the second content provider, the anonymous attestation token by transmitting the anonymous attestation token with a second request, receiving a redemption result representing whether the attestation token was successfully redeemed, signed by the attestation token issuing system using a digital signature and is operable to verify, to the second content provider, that the user is authenticated to the second content provider without identifying the user to the second content provider, and transmitting, to the first content provider, the redemption result.

The invention belongs to the field of computer security and discloses a blockchain-based anonymous authentication method for the Internet of Vehicles across trusted authorities, including registering the vehicle (with onboard unit) and roadside unit in their respective trusted authorities. When the vehicle enters different trusted authority domains, both the onboard unit and roadside unit generate corresponding authentication parameters and transmit them to the consortium blockchain of the Internet of Vehicles for verification and signature, obtaining authenticated data signed by the consortium blockchain. The onboard unit and roadside unit receive and verify the authenticated data, and upon successful verification, the onboard unit calculates a session key. The onboard unit uses the session key to sequentially transmit data with the roadside unit and the consortium blockchain. This technical solution allows vehicles from any trusted authority domain to authenticate and negotiate session keys with roadside units from different trusted authority domains.

The invention belongs to the technical field of security authentication, and discloses a distributed energy storage equipment cross-domain security access authentication method and a related device, attribute information is submitted after zero-knowledge proof verification, and a certificate issuing party is triggered to generate a verifiable certificate based on a signature algorithm; then generating a zero-knowledge proof-based randomized verifiable representation based on the verifiable credentials; and finally, the energy storage device sends the generated randomized verifiable representation to a verifier to complete access authentication. According to the invention, cross-domain authentication is realized through a distributed architecture and verifiable certificates without depending on a single centralized mechanism. Verifiable certificates adopt a uniform format and support mutual recognition among different trust domains. And the certificate cannot be associated with a specific equipment identity after randomization processing, so that anonymous authentication is realized. And the verification process is realized through zero-knowledge proof, and the equipment can prove the identity legality without leaking sensitive information, so that the authentication security and privacy are effectively guaranteed.

The embodiment of the invention provides an anonymous identity verification method and device. According to the method, a first device generates a binary indication vector and an auxiliary vector having a predetermined relationship with the binary indication vector according to a serial number index of a first account in a target account set; and generating a signature value C according to the indication vector, the auxiliary vector and the private key of the first account. And calculating a first public key vector according to the first random number selected by the verification device and the public key sequence of the target account set, and calculating a blind value based on the first public key vector and the random number group selected by the local party. The first device also generates first and second sets of commitment values according to the indication vector, the auxiliary vector, and the challenge array and the variable value selected by the verification device. The first device provides the signature value C, the blind value, and the first and second sets of commitment values to a verification device, whereby the verification device verifies whether the first account belongs to the target account set.

The invention relates to an Internet of Things data security sharing method for blockchain fragmentation. The method comprises the following steps: firstly, performing identity anonymous authentication based on an auditing mechanism combining encryption packaging and zero-knowledge proof; thirdly, performing threshold slicing on the to-be-stored data by adopting an IDA slicing algorithm, performing dynamic allocation of storage nodes based on weighted consistency hash, and performing data storage and distribution based on the allocated storage nodes; afterwards, a PBFT consensus mechanism based on behavior reputation is adopted to carry out security auditing of data recovery and storage, a recovery voucher is generated, and on-chip data recovery is carried out; and finally, querying a target fragment of data distribution based on a trusted relay cross-fragment transaction mechanism, and completing cross-fragment data recovery in the target fragment. According to the invention, high efficiency and security of IoT data sharing and terminal identity privacy protection can be realized, and application requirements in a large-scale IoT environment are well met.

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

The invention relates to a compressed and quantized Internet of Vehicles privacy protection security hierarchical federated learning method, which designs a vehicle end side encryption parameter compression and integer quantization method, a vehicle side completes model training on the basis of local data, and performs flattening, low-rank approximate compression and integer quantization on parameter tensors to obtain a compressed and quantized vehicle end side encryption parameter. And the transmission quantity is obviously reduced under the condition of ensuring the model precision. The quantized parameters are subjected to end-side homomorphic encryption at a vehicle end, and a ciphertext is kept invisible in transmission and aggregation stages. And secondly, a method for setting anonymous authentication batch verification and session key negotiation security encryption between the vehicle end and the fog layer is designed, the concurrent authentication pressure is reduced through a batch verification structure, and the communication security and the access efficiency are improved. And finally, designing a hierarchical ciphertext aggregation updating and Bloom filtering revocation control method, performing homomorphic domain aggregation on ciphertext parameters uploaded by different vehicles by a fog layer, executing one-time decryption by a center end and recovering a floating point model weight, and completing global model updating.

The application discloses a communication network anonymous authentication method, user equipment, a home network and a product, wherein a network side parameter value is obtained by calculating according to an encryption parameter value in received authentication data; and a replay attack is identified according to the size of the network side parameter value and a locally stored terminal parameter value. The application scheme can identify a tracking attack on user location information and protect the privacy security of a terminal user.

The invention provides an anonymous method and system for a smart electric meter, and the method comprises the steps: building a key generation center, and enabling the smart electric meter and an aggregator to carry out the registration of the key generation center when the smart electric meter and the aggregator join a smart power grid for the first time; the intelligent electric meter encrypts an identity label and a timestamp of the intelligent electric meter by using an intelligent electric meter public key, generates an authentication request message according to the encrypted identity label and timestamp of the intelligent electric meter, and sends the authentication request message to the aggregator; the aggregator verifies the authentication request message after receiving the authentication request message, and generates an authentication response message and sends the authentication response message to the intelligent electric meter under the condition that the verification result is successful; and after receiving the authentication response message, the intelligent electric meter verifies the authentication response message, and under the condition that the verification result is successful, the two parties establish a shared session key to complete the authentication process. According to the method, the problems of low calculation efficiency, insufficient privacy protection, complex authentication process and the like in the prior art are effectively solved.

The embodiment of the application discloses a group identity security anonymous authentication method and system based on secret sharing, wherein the method comprises the following steps: determining a public parameter according to a security level parameter; an access party generates a key pair, and stores a public key hash into an authentication hash fingerprint set of a management party; a target access party divides a target private key of the access party into a first private key share, a second private key share and a third private key share, and distributes the private key shares in groups of two to three calculation parties; each calculation party calculates a public key share according to the received private key share and in combination with other calculation parties; the public key shares of two parties are randomly selected from the first calculation party, the second calculation party and the third calculation party, and are sent to the management party; the management party calculates a target public key hash according to the public key shares, judges whether the target public key hash exists in the authentication hash fingerprint set, if yes, authentication succeeds; otherwise, authentication fails. In the case of guaranteeing user anonymous authentication, the security of the management system is improved.

The invention discloses a privacy protection and traceable anonymous bidirectional authentication method for heterogeneous Internet of Vehicles, which comprises the following steps: generating public and private keys based on a key generation center, a private key generator and a trusted registration mechanism, and constructing a heterogeneous password system; the vehicle completes key registration by fusing the certificateless public key system, and the roadside unit completes key registration based on the identity public key system; the vehicle registers and uses the pseudonym to communicate with the roadside unit; and the vehicle and roadside unit bidirectional authentication verifies the legality of the opposite side through a hash function and a temporary value, and finally generates a session key. According to the invention, by providing traceable pseudonym and anonymous authentication communication for each vehicle, the privacy of the vehicle can be effectively protected, and an attacker can be prevented from tracking the identity information of the vehicle. Based on various security hypotheses, the method meets various security attributes including anonymity, unlinkability, perfect forward security, security of known temporary information specific to sessions and the like, and the security of data transmission of the Internet of Vehicles can be improved.

The application provides a kind of unmanned plane anonymous authentication and identity remote identification method, unmanned plane and its supervision equipment, the method includes: by unmanned plane service provider in advance selecting system main private key and main public key, define attribute set;And by unmanned plane registration process, generate and issue certificate for the unmanned plane;Unmanned plane running process, generate RID data packet that can be anonymous authentication and meet RID rule;RID data packet includes the following information: unmanned plane position, unmanned plane speed, unmanned plane attribute ciphertext, unmanned plane operator's location ciphertext, encrypted unmanned plane public key information, time stamp, group signature;Timing broadcast RID data packet, so that receiver obtains the position and flight speed of unmanned plane according to the received RID data packet. Utilize the scheme of the application, the effective management and privacy protection of unmanned plane can be realized.

The invention relates to an anonymous authentication and key negotiation method for a communication network, relates to the technical field of mobile communication networks, and aims to solve the problems that user identity tracking and revocation are difficult and privacy protection and effective supervision cannot be effectively balanced in a mobile communication system of the communication network. Comprising the following steps: establishing a system and generating system parameters; generating an HN key; generating a tracker key; generating an SN key; distributing certificates, enabling a user to interact with the HN, and requesting the certificate of the attribute of the user; verifying the certificate; a user interacts with the SN to negotiate a session key; displaying the anonymous voucher; verifying the anonymous credential; tracking and tracing; and performing local revocation. According to the method, the role of the tracker is set, the certificate is used for the mobile communication system, and when some malicious behaviors occur, the identity of the user is tracked by the tracker, so that a verifier can perform local revocation, anonymous authentication, identity tracking and revocation oriented to the communication network are effectively realized, and meanwhile, the privacy of other legal users is ensured.

The invention discloses a reliable road condition message transmission method based on vehicle-mounted fog computing. The method comprises a registration stage, a mutual authentication and key negotiation stage, a road condition monitoring stage and a partial private key updating stage. According to the method, an authentication mechanism of the vehicle and the fog node for ensuring secure communication between the vehicle and the FN is provided without real-time participation of a trusted authority TA, the defects of long message transmission time and low message authentication and integrity in a traditional anonymous authentication protocol are overcome, the system efficiency is improved, and the communication overhead is reduced. A lightweight vehicle privacy security protection authentication scheme based on fog computing is provided to protect the vehicle privacy and minimize the vehicle storage burden. Under the condition that the real identity of the vehicle is not leaked, the identity information generation mode and the session key of the V2F are redesigned, the problems that identity authentication between the V2Fs is complex, the identity information storage amount is large, and communication messages are prone to attack are solved, the communication safety is improved, and the vehicle storage burden is relieved.

The invention discloses an efficient anonymous authentication method and system applied to identity authentication, an identity provider performs system initialization, a service provider performs legality check on user service qualification, and a block chain stores and manages identity information associated with a user and a data file of an anonymous certificate. After a delegation request of the user is received, re-proxy verification is completed; a user stores and manages the files through a block chain, the user sends a service request to the block chain when service qualification verification needs to be carried out, a service provider sends materials required by verification to the user and the block chain, and the block chain sends the materials required by verification to the user and the block chain after obtaining a one-time authorization token displayed by an anonymous certificate of the user. And the block chain completes service qualification verification of the user. According to the method, the block chain is integrated, and the proxy zero-knowledge proof scheme is introduced, so that the storage and calculation overhead is outsourced to the block chain, the privacy and the control right of the user are ensured, and seamless and efficient anonymous authentication between the user and the service provider is finally realized.

The invention discloses a security federal learning method and system based on a dynamic group signature, an administrator generates a bilinear group and public and private keys, and a client encrypts gradient information after applying for joining the group and uploads the gradient information with a group signature. And the server decrypts and verifies the validity of the signature, detects malicious clients through cosine similarity, removes malicious nodes and generates a blacklist, and contributes a three-dimensional weight aggregation model to normal clients according to data volume, quality and history. According to the scheme, identity anonymous authentication and malicious detection are achieved, model aggregation safety is guaranteed, federal learning robustness and efficiency are improved, and the method is suitable for data privacy sensitive scenes.

The invention discloses a method capable of extracting an n-time signature, a method capable of completely extracting the n-time signature, and a traceable anonymous authentication method and system based on the n-time signature, in the n-time signature capable of being extracted, a public key and a private key are generated by a polynomial commitment scheme, and the private key comprises a core polynomial and a mask polynomial; an identifier bound with a public key can be extracted from the effective signature exceeding the signature capacity, and a user private key can also be extracted by the method for completely extracting the signatures for n times. Based on the fact that the application capable of completely extracting the signatures for n times is a traceable anonymous token, anonymity of the user is achieved through the signatures in the authentication process, and when the preset number of times is exceeded, the identity of the user can be traced by extracting the identifiers. The traceable anonymous token is jointly maintained by a plurality of participants, and operations such as key generation, signature verification and identity tracing need to be jointly completed by the participants, so that the traceable anonymous token method based on the extractable n-time signatures is realized.

The invention belongs to the technical field of zero knowledge proof and block chains, and particularly relates to a block chain transaction system infrastructure capable of generating certificates based on a Hyperledger Fabric alliance chain and zkSNARK. The system comprises a user account module, a transaction processing module and a block chain module. The user account module provides account-related registration and login, transaction anonymous authentication and balance management functions. The transaction processing module provides functions of transaction initiation packaging, query and voucher generation for successful transactions; and the block chain module is responsible for the verification of batch transactions and the storage of account information. According to the method and the system, the defects of low efficiency, poor transaction privacy protection characteristic and poor energy-saving performance of a traditional block chain transaction system at present are overcome in a centralized manner, the transaction privacy of the user is ensured, zero transaction cost and relatively high operation efficiency are ensured, and a credential generation service is finally provided for multiple upper-layer applications as a trust anchor point.

The present invention belongs to the field of information security technology, and specifically discloses an anonymous identity authentication method, system and program product based on privacy computing, which collects the user's biometric information and anonymous authentication request information, calculates the hash value using the login ID and password data to perform hash value verification, and after the hash value verification passes, calculates the vector association parameter between the biometric vector and the verification feature vector to determine the distance threshold, and then performs data conversion processing and character extraction and combination on the desensitized personal information to obtain a combined string, and finally determines whether the user's anonymous identity authentication passes based on the Hamming distance and the distance threshold between the combined string and the verification string, so as to realize efficient anonymous identity authentication based on privacy computing. The present invention can effectively realize user anonymous identity authentication through corresponding anonymous credential calculation and verification, prevent identity fraud and user personal privacy leakage, and ensure the reliability and stability of user identity authentication.

The invention discloses a one-time pad key management method based on a grouped confusion Merkel hash tree, and relates to the technical field of information security. According to the method, the Internet of Things equipment is divided into different equipment groups, a group administrator is introduced into each equipment group to replace a trusted center to perform key management in the group, and only the Merkel Hash tree constructed by taking the equipment one-time pad key as a leaf needs to be confused in the equipment group, so that the confusion scale and height of the Merkel Hash tree are reduced; a secure channel distribution authentication path only needs to be constructed in the device group, frequent intervention of a trusted center is avoided, and therefore the key management efficiency is improved. The method solves the problem of high efficiency in realizing conditional anonymous authentication of the Internet of Things equipment by confusing the Merkel Hash tree, is not only suitable for constructing a conditional anonymous lightweight Internet of Things authentication protocol, but also can be popularized and applied to post-quantum group signature based on the Merkel Hash tree.

The invention discloses an anti-quantum traceable anonymous authentication method and system for a mobile internet of things, and belongs to the technical field of identity authentication and tracking. The method comprises an initialization stage, a mobile Internet of Things equipment registration stage, a mobile Internet of Things equipment authentication stage and a mobile Internet of Things equipment tracking and revocation stage. Bidirectional authentication and session key negotiation between an edge node and equipment are realized by utilizing a lattice-based chameleon hash and a short integer solution problem, quantum computing attacks are resisted, and meanwhile, the equipment identity and path privacy are protected through block chain evidence storage and a chameleon hash trap door technology, and the security of the equipment is improved. And on-demand accurate tracing and rapid revocation of malicious equipment by a law enforcement agency can be supported, and the requirements of safety, privacy and supervision in a mobile Internet of Things scene are met.

The application discloses a kind of complete anonymous authentication and key agreement method based on block chain in Internet of Vehicles, belong to block chain and vehicle-mounted network technical field, design a kind of pseudonym generation algorithm based on homomorphic encryption, guarantee the verifiability of vehicle pseudonym While, the complete anonymity of vehicle pseudonym is realized;On this basis, an automatic pseudonym revocation mechanism is designed, a time-dependent secret value is embedded into the pseudonym, and the secret value is updated regularly to automatically revoke the expired pseudonym;In addition, the vehicle certificate is verified and stored using decentralized blockchain technology, which improves the authentication efficiency of the vehicle certificate;The application not only realizes the verifiability and complete anonymity of vehicle pseudonym, but also realizes the automatic revocation of pseudonym, and can be used in various authentication scenarios under Internet of Vehicles environment.

The invention discloses a fine-grained anonymous authentication method for a multi-attribute authoritative system. The multi-attribute authoritative anonymous authentication system comprises a central authority, a plurality of attribute authoritative, N users and M relying parties. When the multi-attribute authoritative system is initialized, the center authorizes to initialize public parameters and secret values; the attribute authority generates a secret value for each managed attribute and publishes public parameters, and it is proved that the secret value is held in a zero-knowledge proof mode; when the user joins in, an empty voucher is obtained from a central authority; the user sequentially searches the attribute authority to sign the voucher, and finally the voucher with multiple attributes is obtained; and when obtaining the service provided by the relying party, the user proves that the service has the required attribute to the relying party, and anonymous authentication is completed. According to the method, the secret value is generated and the public parameter is published for each attribute through the attribute authority, so that the problem that the user colludes with the untrusted attribute authority to counterfeit the attribute is solved, and the normal operation of anonymous authentication of the multi-attribute authority system is ensured.

An anti-quantum anonymous authentication method based on a dynamic group signature comprises the steps of system initialization and key generation, group member joining, group member signature, signature verification by a verifier, signature identity tracing, tracing result judgment and group member revocation. According to the method, the step of adding the group members and the step of revoking the group members are adopted, and an efficient accumulator mechanism and a zero-knowledge proof technology are used in the two steps, so that the technical problem that in the prior art, the signature cost, the public key cost and the key size cost are high is solved, and the efficiency of the dynamic group signature method is improved. According to the method, the size of the group public key and the size of the secret key are irrelevant to the number of group members and can be added and revoked in real time at the logarithm level, the communication cost is reduced, a group signature framework is constructed by adopting a lattice password, and quantum can be resisted. The method has the advantages of high security, low communication cost, high privacy, capability of resisting quantum computing attack and the like, and can be used in the technical field of anonymous authentication.

The present invention belongs to the technical field of wireless communication networks, and more specifically, relates to a multi-chain cross-regional vehicle network anonymous authentication and communication method and system. The method includes S1, system initialization; S2, vehicle registration; S3, RSU registration; S4, cross-anonymous authentication and communication key negotiation between vehicles and RSU; S5, cross-anonymous authentication and communication key negotiation between vehicles; S6, update of temporary public keys. The system adopts a hierarchical and partitioned multi-chain blockchain structure, including a core layer and a management layer. The core layer adopts a private chain of blockchain technology as an information platform, and realizes distributed storage and synchronization of information between various TAs through the private chain; each area of ​​the management layer adopts the alliance chain in blockchain technology as an information platform. The present invention realizes a certificateless anonymous authentication scheme for vehicle network nodes, shortens the authentication delay, and reduces the number and complexity of authentication interactions.

The present invention discloses an anonymous authentication method for certificateless groups in an Internet of Vehicles (IoV), comprising: 1) system initialization, including: system parameter generation, roadside unit registration, and vehicle registration; 2) vehicle-to-infrastructure communication authentication, including two-way identity authentication and secure key negotiation; 3) vehicle-to-vehicle communication authentication, including: pseudonym and signature generation, as well as signature authentication and efficient batch authentication; 4) a malicious vehicle revocation mechanism based on group key update, including: malicious vehicle identity disclosure, group key update and distribution, and recovery of legitimate vehicle keys and isolation of malicious vehicles. The present invention not only has more efficient processing capabilities in ensuring data security, privacy protection, and Sybil attack defense in the IoV system, but also meets the IoV's demand for efficient identity authentication and revocation in a resource-constrained environment, providing a secure, low-cost, and efficient overall solution for the IoV system.