2445 results about "Cipher" patented technology

A computer-implemented method, computer program product and computing system for receiving a message concerning an event within a computer platform, wherein the message concerns a technology type and includes raw data; defining a cipher for the technology type, thus defining an associated cipher; processing the raw data included within the message using the associated cipher to define supplemental data for the technology type; and forming enriched data for the technology type based, at least in part, upon the raw data and the supplemental data.

The present invention discloses a method and system for artificial intelligence-based cryptocurrency regulatory analysis capable of performing automated, adaptive, and verifiable compliance evaluation across multiple blockchain ecosystems. The invention integrates blockchain data acquisition, data normalization, graph-based behavioral modeling, artificial intelligence inference, and cryptographically anchored reporting within a unified architecture. The system comprises a blockchain data acquisition unit for retrieving multi-chain transaction data, a data normalization unit for harmonizing heterogeneous blockchain formats, a graph construction unit for generating dynamic transaction graphs, a regulatory knowledge base unit storing jurisdiction-specific regulatory rule graphs, an artificial intelligence processor configured for hybrid neural and symbolic reasoning, and a regulatory reporting unit for generating explainable compliance reports cryptographically anchored to a blockchain ledger.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

Systems and methods for securing transactions in accordance with various embodiments of the invention are illustrated. One embodiment includes a method for confirming token ownership rights. The method generates a pre-image value using a random number generator. The method generates an action request that corresponds to an action performed cryptographic token(s). The method derives a commit output based on the pre-image value. The method generates a commit request that obfuscates the action request based on the commit output and submits the commit request to an immutable ledger. The method receives a confirmation when the commit request is approved by the ledger. When a reveal request referencing the commit output is published, the method receives a confirmation of at least one of: the reveal request being published, that the reveal request comprises a reference to the commit output, or that the action request has been approved.

The embodiment of the invention provides a quantum key distribution method based on a cryptographic infrastructure system, relates to the technical field of quantum secret communication, and provides a quantum key distribution method based on fusion of quantum key distribution and post quantum cryptography, which integrates a classical commercial cryptographic algorithm, a PQC post quantum cryptographic algorithm and quantum key distribution. A QKD-based quantum key secure distribution process combining SM2 and PQC mixed signature, SM2 and PQC mixed key packaging, PQC collaborative signature, PQC collaborative decryption, token access and other cryptographic technologies is designed, and anti-quantum cryptographic capability support is provided for voice applications through collaborative signature and collaborative decryption, so that the security of software for realizing a PQC cryptographic algorithm is improved, and the security of the PQC cryptographic algorithm is improved. Moreover, the software implementation mode does not have the inherent security problem of the IP, the dependency on the server is low, and the standardization program is high.

An end-to-end rendering system enforces policy-constrained, symbolic presentation of artificial-intelligence (AI) outputs prior to any pixel emission. An AI accelerator emits inference tokens as (token identifier, confidence, domain tag) tuples into an output FIFO. A graphics processor with a command processor and SIMD co-processor executes a policy engine that runs a deterministic finite automaton (DFA) stored in non-transitory memory. The DFA consumes the tuples and produces, before any frame-buffer writes, a permit / deny decision and a visibility mask that constrain presentation attributes. A glyph selector maps permitted tuples to entries in a constrained glyph dictionary specifying a glyph identifier, semantic class, and allowed substitutions. A provenance tagger computes a cryptographic hash over at least the glyph identifier, a DFA-state policy identifier, a session nonce, and a checksum of the tuples to create an evidence capsule bound to the glyph. A device-aware renderer, consulting a device profile registry and a rendering grammar, emits a renderable asset for the glyph only when permitted by the visibility mask and grammar. A justification ledger records, for each displayed glyph, the evidence capsule and a monotonic timestamp. Executed entirely within the graphics processor, the pipeline prevents unauthorized tokens from entering the display path, enables cryptographically verifiable traceability of visible content, and reduces bandwidth by representing outputs as glyph identifiers rather than text or raster imagery, while allowing runtime policy updates without modifying the underlying inference model.

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

The invention relates to the technical field of computers and information processing, in particular to a block chain-based cross-industry logistics data trusted sharing method and system, and the method comprises the steps: S1, carrying out the cross-industry semantic alignment; s2, performing field-level ciphertext access; s3, zero knowledge permission verification; s4, federal learning and on-chain coordination are carried out; s5, carrying out privacy budget and service linkage; s6, variable structure consensus; step S7, two-way auditing tracing is carried out; and S8, carrying out consistency challenge. Semantic alignment and chaining commitment are achieved through industry ontology, visibility is controlled through attribute-based field-level encryption and zero-knowledge verification, and commitment-driven median anchoring, symmetric truncation, quality * sample size weighted federal aggregation and on-chain differential privacy budget linkage are combined. And an end-to-end trusted sharing closed loop is constructed in cooperation with PBFT scalable consensus of VRF grouping, forward security signature and Merkle bidirectional auditing and challenge-response verification.

The invention provides an anti-quantum national secret dual-mode cryptographic algorithm switching method and system based on dynamic scheduling, and relates to the technical field of dynamic scheduling, and the method comprises the steps: collecting the operation characteristics of a cryptographic communication session, and carrying out the analysis to obtain an evaluation result containing an attenuation inflection point and an algorithm failure time boundary; determining a candidate switching algorithm set from the heterogeneous algorithm pool according to an evaluation result, and calculating a resource overhead expected value and a safety gain expected value of each candidate algorithm; establishing a dual-mode collaborative switching decision mechanism, mapping resource overhead and security gain into a Pareto leading edge solution set in a reserved response interval before an algorithm failure time boundary, and determining a switching scheme by combining a semantic fragment boundary; algorithm switching is executed by inserting a control frame at a semantic fragment boundary, and iterative correction is carried out by utilizing scheduling execution feedback. According to the method, smooth switching between the national cryptographic algorithm and the anti-quantum algorithm is realized, the security and the resource efficiency are both considered, and the long-term security of the cryptographic system is ensured.

The invention discloses a substation dispatching data network security communication method based on quantum tunnel encryption, relates to the technical field of large-scale power grid security assurance, and aims to solve the problems of endpoint security loss, boundary solidification, weak quantum threat resistance and inflexible deployment of a dispatching data network. According to the method, the establishment of a secure session and the encapsulation, encryption and restoration of data are realized by integrating quantum key distribution and a post quantum cryptographic operation module through quantum secure communication terminals deployed in a dispatching master station and a transformer substation. According to the method, application layer encryption and signature are carried out on telecontrol protocol data, a double-layer encryption tunnel is constructed, and transmission of various physical network media is supported. By means of the scheme, end-to-end protection is achieved, quantum attacks are effectively resisted, double encryption is provided, and networking flexibility and smooth evolution are improved.

The invention belongs to the technical field of information security, and discloses an NLP verification method for a commercial password security assessment report based on an agent. The comprehensive consistency verification of the assessment report is realized by constructing a cryptographic term knowledge graph, generating a cross-chapter cryptographic parameter consistency verification matrix, identifying security statement conflict points and constructing a report internal logic conflict detection model. And adopting a multi-agent cooperation mechanism to carry out iterative optimization on a verification result, and outputting a structured verification report containing contradictory position indexes and type labels. According to the method, the consistency verification capability of the password evaluation report is improved, dominant parameter inconsistency and hidden semantic conflicts can be accurately identified, the auditing cost is reduced, and the wrong implementation risk caused by report inconsistency is prevented.

The invention relates to the technical field of vehicle-gauge-level password protection, and discloses a vehicle-gauge-level post quantum password acceleration and side channel protection device. The device comprises a quantum key injection unit, a quantum noise analysis unit, a post quantum cryptography acceleration engine, a side channel feature extraction unit and a protection strategy generator. The quantum key injection unit performs format standardization processing on input quantum key information; the quantum noise analysis unit collects a power consumption time sequence signal and an electromagnetic radiation signal of the cryptographic operation chip, and extracts a quantum noise characteristic spectrum through a quantum Fourier transform algorithm; the post quantum cryptographic acceleration engine adopts a lattice-based cryptographic algorithm to implement layered acceleration operation on the target encrypted message data; a side channel feature extraction unit constructs a space-time joint side channel feature tensor according to the quantum noise feature spectrum; the protection strategy generator identifies the physical fragile area according to the tensor and generates a corresponding protection strategy instruction. The device integrates a quantum cryptography acceleration function and a side channel protection function, and is suitable for a vehicle-specification-level scene.

The invention discloses an anti-quantum serial digital certificate implementation method. The method comprises the following steps: generating a traditional cryptographic algorithm key pair and an anti-quantum cryptographic algorithm key pair; submitting a certificate request; splicing the traditional cryptographic algorithm public key and the anti-quantum cryptographic algorithm public key to form a dual-cryptographic algorithm public key, and generating a digital certificate according to the dual-cryptographic algorithm public key; signing the digital certificate by using a traditional cryptographic algorithm private key and an anti-quantum cryptographic algorithm private key; and splicing and combining the traditional cryptographic algorithm signature value and the anti-quantum cryptographic algorithm signature value into a dual-cryptographic algorithm signature value, putting the dual-cryptographic algorithm signature value into a signature value item of the digital certificate, so that the digital certificate forms a hybrid serial digital certificate, and returning the hybrid serial digital certificate to the client. The invention further discloses a device for implementing the quantum serial digital certificate implementation method, computer equipment and a storage medium. According to the method, the problems of poor compatibility, low storage efficiency, slow verification speed and the like of the existing digital certificate under the threat of quantum computing are solved.

The invention discloses an equipment identity authentication and data encryption method and related equipment thereof, and the comprehensive effects of identity credibility, key security superposition and channel encryption capability enhancement are realized by introducing a mixed key system and a double digital signature mechanism into an equipment identity authentication and data encryption process. Meanwhile, a national cryptographic algorithm and a post-quantum algorithm are adopted, and the two cryptographic systems cooperate in parallel in an authentication and encryption link, so that the whole system has a robust anti-attack ability in both a traditional computing environment and a potential quantum computing environment, the accuracy of identity authentication is ensured by a dual signature mechanism, and the counterfeiting difficulty and tampering detection ability are remarkably improved. According to the method, the bidirectional verification chain is constructed in the authentication process, the safety is guaranteed by using the mixed key in the session stage, the safety robustness and the expandability of the system are improved through multi-layer protection, and the whole-process protection of the identity, the key and the data is realized, so that the safety robustness and the expandability of the system are integrally improved.

Certain examples described herein relate to at least a cryptographic system and a method of operating a cryptographic system. The cryptographic system may be implemented as a co-processor for performing post-quantum cryptographic functions. The cryptographic system has a set of bus interfaces for coupling to an external computing system, a cryptographic math unit and a control unit. The cryptographic math unit in certain examples is adapted to provide one or more masked modes of operation that secure the cryptographic operations against side-channel and non-invasive attacks. The method of operating a cryptographic system involves annotating secret data and tracking those annotations through one or more arithmetic operations.

The invention relates to the technical field of quantum cryptography, in particular to a dynamic key generation system and method based on multi-source QRNG and QKD, and the system comprises an interface registration method, a calling method, related equipment and a storage medium, is used for generating a high-security quantum key, and is a quantum key service system with a layered architecture. By abstracting, integrating and managing bottom-layer multi-source QRNG and QKD equipment and fully utilizing the flexible scheduling of quantum equipment, the security of key generation is ensured, so that the key service has higher performance, usability and security, and unified, dynamic and high-security quantum key generation and supply services are provided for various applications of the upper layer. The method is widely applied to the industries and fields of government, finance, energy, traffic, electric power and the like, meets the requirements of quantum key acquisition of various business applications in cloud computing and non-cloud environments, and ensures information security and business continuity.

Systems and techniques are described for signing and verifying a data stream with an encryption signature. An example method includes determining, for a data block group, an initialization vector. The example method also includes generating, based at least in part on the data block group, encrypted hash data. The example method also includes determining an encryption signature based at least in part on the encrypted hash data, a private key, and the initialization vector. The example method also includes inserting the encryption signature into the data block group. The example method also includes causing transmission, by a network interface to a media server, of the data block group and the encryption signature. Finally, the example method includes causing verification, via the media server using a public key and synchronized data, that the data block group was generated by the computing device.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

Due to the appearance of dynamic structured mathematics responded by a global coupling structure, a great threat is generated to a traditional password system represented by AES-256 and information security. Most of current mainstream symmetric cryptographic systems such as AES and post-quantum encryption candidate schemes are based on discrete key space and structure modeling operation, the security of the current mainstream symmetric cryptographic systems depends on exhaustion infeasibility or mathematical difficulty complexity, and the current mainstream symmetric cryptographic systems and post-quantum encryption candidate schemes are difficult to resist attacks of adaptive dynamic coupling such as ADC. Therefore, the invention provides a novel ARE encryption system which is constructed by taking'non-modeling property 'as a core principle. A system key is generated by a non-numerable dimension perturbation function, has unique attributes of no structure, non-derivation, non-periodicity and the like, and is combined with an encryption method of a key function which cannot be covered, physical noise perturbation and a quantum random source to construct a new generation of ARE password architecture; the method has the capability of being incapable of being deduced, reduced in order, incapable of being converged to a key space and extremely high in structural modeling attack resistance, any analyzable optimization path can be blocked from the source, and it is ensured that ADC evolution attacks are completely resisted.

Embodiments of the present disclosure provide techniques for providing secure communication for connected systems. The techniques may include receiving a communication session indication associated with a first connected system; authenticating the first connected system based on IAM policy; encrypting a message to generate an encrypted message based on a post quantum cryptography public key associated with the first connected system; and causing transmitting of the encrypted message to a second connected system.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

The invention relates to the technical field of data security, in particular to a quantum cryptography migration resisting method and system for a power system, and the method comprises the steps: carrying out the quantum threat risk assessment of a communication link based on the layering and partitioning architecture features of the power system; obtaining attribute data of the encryption component, and performing parallel migration risk analysis on the encryption component in combination with a quantum threat risk assessment result to generate an anti-quantum migration risk matrix; carrying out compatibility evaluation on a traditional public key algorithm and an anti-quantum cryptography algorithm based on algorithm features, and constructing a double-track encryption migration strategy; dynamically adjusting a double-track weight ratio, and constructing a double-track encryption hierarchical migration strategy based on a control hierarchy to which a communication link belongs; and executing the double-track encryption layered migration strategy and monitoring the migration effect, and performing self-adaptive correction on the double-track encryption layered migration strategy based on the migration effect. According to the method, a quantum threat assessment and double-track encryption layered migration mechanism is constructed, so that safe and smooth migration of the power system under the threat of quantum computing is realized.

The invention discloses an electric power production management system safety operation and maintenance management method based on a national secret algorithm. According to the method, the key and the real-time running state of the equipment are deeply bound through a dynamic key derivation mechanism, so that the key is dynamically adjusted along with parameters such as the load rate, the temperature and the bit error rate, state change, namely key updating, is realized, and the anti-cracking capability of the key is greatly improved; the SM2, SM3, SM4 and other national cryptographic standards are adopted from root key generation, identity authentication, data transmission encryption and log tampering prevention of the full-link application of the national cryptographic algorithm system, it is ensured that the encryption strength meets the national password management requirement, and the overall encryption protection level of the system is improved. Closed-loop protection is formed through deep linkage among multiple steps, fragmentation of a safety mechanism is avoided, meanwhile, the traceability and the fault recovery efficiency of system operation are further improved through the whole-process encryption archiving and emergency response rapid recovery process of audit logs, and transmission and storage safety of power production core data is guaranteed.

The invention provides a flight data processing method and device for an unmanned aerial vehicle and electronic equipment, and relates to the technical field of communication, and the method comprises the steps: collecting the original flight data of the unmanned aerial vehicle through a sensor disposed on the unmanned aerial vehicle, and carrying out the calculation, denoising and smoothing of the original flight data, and obtaining the real-time flight data of the unmanned aerial vehicle; generating a flight data packet according with a specified format based on the real-time flight data, a specified unmanned aerial vehicle ID corresponding to the unmanned aerial vehicle and specified flight plan data; encrypting the flight data packet by using an SM4 block cipher algorithm to obtain flight ciphertext data; in response to detecting that the signal receiving power of the current network of the data recording equipment is greater than the specified power, transmitting the flight ciphertext data to a supervision server by using the current network; and in response to detection that the signal receiving power of the current network is lower than or equal to the specified power, switching a communication channel for transmitting the flight ciphertext data to a satellite short message communication channel.

The invention discloses an AI model security protection system and method based on a domestic cryptographic algorithm and a digital certificate. The system comprises a certificate management center CA, an AI model security gateway, a training terminal and a deployment server, wherein the certificate management center CA is a certificate management system of a third-party trusted certificate management center CA mechanism; the AI model security gateway is used for security access and compliance verification of training data; the training terminal is used for security initialization of the model development terminal and generation of a security model package, and is terminal equipment used by a developer for model training; and the deployment server is used for security management and control of the model operation end. The method comprises the following steps: firstly, carrying out data encryption and model certificate binding; identity authentication and transmission encryption are carried out; then, integrity verification and tampering prevention are carried out; and finally, version traceability and legality verification are carried out. According to the method, the security of the AI model and the model transmission and verification efficiency are improved, the whole-process traceability of the model is realized, the compatibility is high, and the method is easy to popularize.

A method for securing a data processing system includes identifying an occurrence of a security event for an operation of the data processing system. Based on the occurrence, the method further includes: identifying a security requirement for the security event; performing at least two diverse cryptographic operations based on the security requirement and a cryptographic data package to obtain at least two cryptographic results, the at least two cryptographic results being provided by respective diverse cryptographic operations of the two diverse cryptographic operations; and performing an action set based on the at least two cryptographic results to service the operation of the data processing system.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

Embodiments resynchronize encrypted network traffic. A capture flow that includes network traffic captured from encrypted network flows may be monitored and the captured network traffic may be decrypted for analysis. A hole in the capture flow may be determined based on gaps in portions of the captured network traffic disabling the monitoring of the capture flow and the decryption of the captured network traffic. A size of the hole may be determined based on a size of the gap in the portions of the captured network traffic. Other network traffic may be captured from the capture flow subsequent to the hole. Cipher resynchronization parameters may be determined based on the size of the hole, other portions of the captured network traffic, or the encryption protocol. The other portions of the captured network traffic may be decrypted based on the cipher resynchronization parameters to reenable monitoring of the capture flow.

A method of enabling knowledge proof in a blockchain transaction is disclosed. The method comprises sending, from a verifier to a prover, a blockchain transaction redeemable by means of data including (i) first data (y) based on a combination of an ephemeral key (r), second data (c) and a private key of a public-private key pair of a cryptography system, wherein the public key (v) is based on an integer generator raised to a first power, wherein the first power is based on the private key, and wherein knowledge of the private key is required in order to determine the ephemeral key from the first data, and (ii) third data (x) based on the integer generator raised to a second power, wherein the second power is based on the ephemeral key.

A collaborative transformation matrix learning system extends adaptive compression and encryption architectures through federated, privacy-preserving optimization. Each node analyzes local data distributions to generate anonymized distribution profiles using differential-privacy mechanisms, securely exchanging profiles and validated transformation matrices across a collaborative network. A trust and validation engine verifies mathematical properties and evaluates claimed performance metrics. Validated matrices are integrated into local optimization when trust and performance thresholds are satisfied. The system employs secure multi-party computation, homomorphic encryption, and conflict-resolution logic to ensure integrity of shared insights while preventing exposure of sensitive information. By combining collective learning with local adaptation, the invention accelerates convergence to optimal matrix configurations, mitigates cold-start inefficiencies, and improves compression-encryption efficiency and cryptographic strength across distributed deployments.