8 results about "Brute-force attack" patented technology

An identity authentication method is disclosed in embodiments of the present application. When a requester and an authentication access controller perform identity authentication using an authentication mechanism of a pre-shared key, the identity information of entities is transmitted in the form of ciphertext, thereby preventing the identity information of the entities from being exposed during the transmission, so that attackers cannot obtain private or sensitive information. The mutual or unilateral identity authentication between the authentication access controller and the requester is achieved while ensuring the confidentiality of the entity identity and related information, thereby laying a foundation for ensuring that the user accessing the network is legitimate and / or the network accessed by the user is legitimate. Meanwhile, in connection with key exchange calculations and by an ingenious and detailed design, the ability of the authentication process to resist dictionary brute force attacks or quantum computing attacks is enhanced. Further disclosed in embodiments of the present application are an identity authentication apparatus, a storage medium, a program, and a program product.

The invention relates to the technical field of optical fiber communication encryption, in particular to a multi-dimensional encryption method and system based on a three-dimensional Lorenz-like chaotic system, and the key point of the technical scheme is that a dynamic key is generated through Hash512 mixing, the three-dimensional Lorenz-like chaotic system is driven to carry out DNA bit encryption, encrypted bits are mapped into symbols, and Cat mapping scrambling is carried out three times, so that the dynamic key is generated; and performing constellation rotation on the scrambling symbol by using a random angle generated by chaos, and finally embedding the dynamic key into a rotation symbol sequence to form a final multi-dimensional encryption transmission sequence. According to the method, a high-complexity chaotic sequence is generated under a three-dimensional Lorenz chaotic system driven by a dynamic key through technologies of multi-dimensional encryption fusion DNA bit-level coding, Cat mapping scrambling, constellation random rotation and the like, so that the key space is greatly expanded, and the defense capability on brute force attack, differential attack and statistical analysis attack is improved; and a modular design is adopted, so that integration in an existing optical fiber coherent transceiving and DSP platform is facilitated, and the balance of high safety and low system load is realized.

The invention relates to the technical field of optical communication, and discloses a chaotic laser secret communication device and method with a large secret key space. The device comprises a common driving chaotic signal generation module, an optical isolator, a second optical splitter, a first chaotic carrier generation module, a second chaotic carrier generation module, a first photoelectric detector, a second photoelectric detector, an arbitrary waveform generator, a power divider and an oscilloscope. The two independent chaotic carrier generation modules are respectively excited by the shunted public driving signal, so that the driving signal and the chaotic carrier have low relevance, eavesdropping on a public driving link through direct filtering is effectively resisted, and the generated chaotic carrier is ensured to have high synchronism; and secondly, the two chaotic carrier generation modules serve as independent parameter-adjustable units, each chaotic carrier generation module has multi-dimensional adjustable physical parameters, and the parameters form a composite key of the system, so that the ability of the system to resist brute force attack is remarkably improved.

The application discloses a random key encryption deduplication method supporting continuous updating. In order to enable a client to safely outsource private data to a server, the method comprises the following steps: after system parameters are initialized, the client selects a random key to encrypt data and sends the encrypted data to the server. The server checks and deduplicates the data of the user. The server verifies the ownership of the file of each uploader through a challenge-response mechanism to realize effective ownership management control. The application supports the replacement of the file key of the user and can guarantee that all legal users obtain the key updated for multiple times, thereby reducing the risk of private data leakage after the key leakage. Due to the randomness of the key selected by the client, the application can resist the brute force attack introduced by the deterministic convergent encryption. Compared with the encryption deduplication method assisted by a third-party independent server, the method is simpler in deployment. The application can provide data privacy in the field of encryption deduplication.

The application discloses a password-cracking attack behavior identification method, device, equipment, medium and program product, and belongs to the field of information security protection. The method comprises the following steps: receiving a login request message for requesting to log in to a target account, wherein the login request message comprises a target username and a login input password, and the target username corresponds to the target account; in the case that the login input password is inconsistent with the account password of the target account, calculating a similarity parameter of the login input password and a target pseudo password preset for the target account, wherein the target pseudo password is different from the account password; determining a response delay time length based on the similarity parameter, and feeding back a login response message according to the response delay time length; in the case that the change of the similarity parameters corresponding to multiple login request messages for logging in to the target account meets a preset abnormality identification condition, it is determined that there is a password-cracking attack behavior for logging in to the target account. According to the embodiment of the application, the identification accuracy of the password-cracking attack behavior can be improved.

A voicemail server device receives a voice call from an originating device attempting to access a voicemail account associated with a subscriber of a network service provider. Accessing the voicemail account can require providing by the originating device a personal identification number (PIN) predefined for the voicemail account. The voicemail server device can determine whether the originating device is associated with the subscriber. Responsive to determining that the originating device is not associated with the subscriber, the voicemail server device can activate an attempt limit for the voicemail account. The attempt limit can correspond to a predefined number of failed attempts to access the voicemail account by providing an incorrect PIN. The voicemail server device can receive attempts to access the voicemail account by incorrect PINs. Responsive to determining that a number of the attempts has reached the attempt limit, the voicemail server device can redefine the PIN.

The application discloses an anonymous password authentication and encryption scheme for a deduplication cloud storage system, and is characterized in that, in the deduplication cloud storage system, under a three-party architecture of a key server, a cloud server and a user, the three parties jointly generate an MLE key, encryption data deduplication is realized, and the problems of brute force attack and single point failure are avoided; an anonymous authentication of the user to the cloud storage server is constructed based on a non-interactive zero-knowledge proof scheme, and the privacy protection of the user identity information is realized; a key protection mechanism based on a reinforced password is constructed by using an identity-based careless pseudo-random function, so that the user can safely store and maintain the key at the remote cloud server side without occupying local resources. The security analysis and simulation experiment results show that the scheme can guarantee the encryption and authentication security, and provide higher calculation and communication efficiency.

The present disclosure relates to a multi-cascaded chaotic encryption-based MP-WFRFT communication method and system. The method comprises: building a multi-cascaded chaotic system model using Logistic mapping and Henon-Sine mapping, wherein the multi-cascaded chaotic system comprises a cryptographic kernel space having a bit scrambling matrix and a constellation rotation matrix; performing triple encryption processing on an input signal using the cryptographic kernel space of the multi-cascaded chaotic system and MP-WFRFT transformation, generating an encrypted signal, and completing hybrid carrier modulation; receiving the hybrid carrier signal at a receiving end and performing WFRFT inverse transformation on the hybrid carrier signal; generating a decryption matrix according to parameters of the multi-cascaded chaotic system, in combination with MP-WFRFT transformation parameters and a scale vector, and decrypting the encrypted signal using the decryption matrix to complete the demodulation process. The present disclosure improves the wireless communication physical layer security transmission performance through triple encryption processing, and can effectively prevent brute force attacks.