6146 results about "Common key" patented technology

The invention provides a block chain data management method and system, and relates to the technical field of block chains, and the method comprises the steps: receiving and preprocessing an electronic file; encrypting the archive by using a public key and calculating a hash value; packaging the encrypted file and the hash value into a block chain transaction and broadcasting the block chain transaction; acquiring block information and safely storing the private key; verifying the integrity of the electronic file; recording a full life cycle operation log; the log is stored in an on-chain and off-chain combined mode; auditing the electronic file; and realizing access authority automatic management based on the intelligent contract. According to the method, the security, traceability and management efficiency of the electronic archives are improved.

The invention provides a block chain-based distributed device identity authentication and access control method and system, and relates to the technical field of block chains, and the method comprises the steps: generating a target device fingerprint by a to-be-accessed device based on a physical cloning-free function of the to-be-accessed device, binding the target device fingerprint with a device public key to generate device identity information, and sending the device identity information to the to-be-accessed device; carrying out block chain evidence storage on the equipment identity information through an identity authentication smart contract; the authentication node queries corresponding equipment identity information based on an equipment fingerprint sent by the to-be-accessed equipment, and verifies the digital signature in the access authentication request by using the equipment public key; the access device which passes the authentication and obtains the encrypted session key obtains an access control strategy pre-configured by an administrator through an access control smart contract; and when needing to access network resources, the access equipment accesses the network resources based on the access control strategy.

The invention discloses an electronic signature security management method and system based on a block chain, and relates to the technical field of information security, and the method comprises the steps: generating a public key and a private key of a user through a quantum resistant encryption algorithm, binding the public key with the identity of the user, recording the public key and the identity of the user on the block chain, and storing the private key through HSM hardware encryption equipment; the method comprises the following steps: standardizing a to-be-signed document to generate a standard document, and calculating the standard document through a Hash algorithm to obtain a document Hash value; the signer signs the document hash value by using a private key and a CRYSTALS-Dillitium signature algorithm, generates an electronic signature and a signature proof, associates the electronic signature, the signature proof, the document hash value and a timestamp with a public key, and records the associated information on the block chain; and the standardized processing rule is written into the smart contract, and after a verifier submits a verification request, document hash value comparison, signature effective state check and signature proof verification are carried out through calling chain data by the smart contract.

The invention relates to the technical field of management of the Internet of Things, and discloses a security control method and system for remote control of the Internet of Things, and the system comprises a security remote control platform, a zero-trust gateway, an authentication module, a security policy engine, edge proxy equipment and an encryption communication module. And the authentication module is used for performing identity authentication on the equipment and the user. The security policy engine dynamic access control table comprises access rule entries and associated signature information, and is issued to the edge proxy device through the zero-trust gateway. And the edge proxy device stores the dynamic access control table, verifies the signature information based on the platform public key, and performs matching and verification according to the access rule entry when receiving the control instruction. And the encryption communication module is used for performing encryption transmission on the access control table, the control instruction and the execution result. According to the invention, the whole process of remote control of the Internet of Things is dynamic, secure and credible, and the anti-attack capability and operation reliability of the system are effectively improved.

The invention discloses a driving vehicle road cloud collaborative safety management and control method and system based on trusted computing, and the method comprises the steps: generating an HMAC-SM3 data fingerprint through employing an SM3 Hash algorithm engine, and proposing an LSTM lightweight dynamic trust evaluation model based on a TinyML framework; through a step-by-step Hash verification and rollback mechanism, through Geohash coding and SM3 Hash joint calculation, based on an aggregation signature of a BLS12-381 curve and public key aggregation, the communication overhead during multi-RSU collaborative signature is reduced; distributed private key fragmentation decryption is realized by adding a homomorphic aggregation ciphertext; aggregating and delaying the compressed ciphertext; dynamically evaluating the credibility of the nodes by a Krum dynamic defense mechanism; the system comprises a vehicle side credible sensing layer, a roadside credible broadcast layer and a cloud credible decision-making layer. According to the invention, through layered credibility verification, dynamic trust chain extension and a data privacy protection mechanism, the security and credibility problems of multi-node cooperation in an automatic driving scene are solved.

The invention belongs to the technical field of digital information transmission, and relates to a vehicle-mounted ad hoc network security communication system and method based on an NTRU lattice cryptosystem, and the system comprises a message signature module, a message encryption module, a message decryption module, an identity authentication module, and a key exchange module. The message signature module carries out signature by utilizing a private key and a random polynomial dynamically generated by a pseudo-random number generator based on an NTRU lattice cryptosystem; the message encryption module encrypts a to-be-sent message by randomly selecting a temporary polynomial and combining a public key of a receiver; the message decryption module is used for decrypting the received ciphertext # imgabs1 # by using a private key and an inverse element # imgabs0 # of a module p of the private key; the identity authentication module is used for performing identity authentication; the key exchange module realizes secure key exchange between communication nodes in the vehicle-mounted ad hoc network through an improved Blom key distribution protocol. The system improves the security and communication efficiency of the vehicle-mounted network.

A quantum safe blockchain system can operate with quantum safe blockchain nodes (QSBN) and validators. A QSBN can generate a pending register certificate transaction comprising a public key, a fingerprint for a certificate, a URL for the certificate, a first registration number for a parent certificate of the certificate, and a digital signature. The QSBN can transmit the pending register certificate transaction to the quantum safe blockchain system. A validator can receive the pending transaction, validate the digital signature using the public key and include a confirmed register certificate transaction in a block. The confirmed transaction can include a second registration number for the certificate. The QSBN can receive the confirmed transaction and store in a database the fingerprint, the first registration number, and the second registration number. The QSBN can generate a pending certificate revocation transaction for the certificate, and transmit the pending transaction to the blockchain system.

The invention discloses a bidirectional authentication secure mobile communication method and system based on a public key digital fingerprint, and belongs to the technical field of communication security. The method specifically comprises the following steps: S1, digital certificate application and issuing: a mobile terminal and a service server respectively use an encryption algorithm to generate an asymmetric key pair which comprises a public key and a private key, an entity submits a CSR file which comprises a public key, entity identity information and an extension field to a CA, and the CA strictly audits the entity identity and issues a digital certificate; and performing digital signature on the public key and the entity information by using a CA private key after the auditing is passed. Two-way identity authentication is achieved, communication safety is improved, a traditional scheme only supports one-way authentication of a client to a server and is prone to phishing attack and identity false use, digital certificates are exchanged before communication between a mobile terminal and a service server, the legality of the certificates is verified through a public key of a CA root certificate, and the authenticity of the identities of the two parties is ensured. A bidirectional authentication mechanism effectively prevents man-in-the-middle attack and identity counterfeiting problems, and the security risk is greatly reduced.

The invention provides an electronic data evidence storage verification method and system based on hierarchical hash and an intelligent contract, and relates to the technical field of block chains and data security, and the method comprises the steps: obtaining to-be-stored electronic data; to-be-stored electronic data is divided into data blocks according to a preset rule, a unique identifier and a timestamp are added to each data block, and a standardized data unit is generated; performing hierarchical hash calculation on the standardized data unit, generating a leaf node hash value by each data block, aggregating the leaf node hash values layer by layer according to a Merkle tree structure, and generating root hash; calling a block chain smart contract, submitting the tree structure hash, the timestamp and the public key encrypted signature to a block chain network, after verification of a consensus node, writing the evidence information into the block chain, analyzing a hash path submitted by a user by the smart contract to perform data verification, if the hash path is consistent with the data verification, returning verification success, otherwise, triggering an exception handling contract; through the dynamic partitioning algorithm and the layered hash structure, the calculation overhead of large file processing is reduced.

The invention relates to the technical field of information retrieval, in particular to a software copyright management system based on a smart contract, which comprises a copyright level right confirmation module, an NFT fragmentation evidence storage module, a dynamic right confirmation verification module, a fragment recombination tracking module and a transaction authorization management module. According to the method, copyright data hash mapping is constructed based on a block chain hierarchical right confirmation mode, a software copyright evolution path is defined, evolution integrity is ensured by calculating hierarchical hash values and adopting Merkle tree structure storage and association of copyright information of different hierarchies, right confirmation data is split and stored in a fragmentation evidence storage mode, safety is improved, and storage and retrieval burdens are reduced; a dynamic right confirmation mechanism is combined with hash comparison and public key signature, real-time verification of newly added copyright information is achieved, it is ensured that the copyright inheritance relation is accurate and checkable, hash calculation based on code fragments, code change tracking and derivative copyright confirmation verification are achieved, and an intelligent contract is used for transaction authorization management, transaction matching and rule verification execution and copyright circulation compliance is ensured.

A method training an artificial neural network (ANN) on a remote host computes, using a trusted process deployed in a trusted execution environment (TEE) on the remote host, a key-pair for a homomorphic encryption scheme and shares, by the trusted process, the public key (PK) of the key-pair with an untrusted process deployed on the remote host. The method splits the training procedure of the ANN between the untrusted process and the trusted process, wherein the untrusted process computes encrypted inputs to neurons of the ANN by means of the homomorphic encryption scheme, while the trusted process computes outputs of the neurons based on the respective encrypted inputs to the neurons as provided by the untrusted process.

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for providing secure protection of secrets. In some implementations, a passphrase and data corresponding to an authenticatable entity are received. An entropy extender is generated based at least on the data associated with the authenticatable entity. A key pair is generated using the passphrase and the entropy extender, the key pair comprising a public key and a private key. An identifier is generated using data from the public key, wherein the identifier maps to a file for storing content related to the authenticatable entity.

The invention discloses an encrypted data transmission method and server based on a dynamic key, and relates to the field of data transmission security, and the method comprises the steps: generating a first private key through a quantum random number generator; receiving an encrypted public key data packet sent by the client, and decrypting the encrypted public key data packet based on the one-time key to obtain a client public key; performing key operation on the client public key and the first private key to generate a first temporary key; generating a confirmation message based on the one-time key encryption, and establishing an encrypted communication connection with the client based on the first temporary key after the confirmation message is sent to the client; after a preset time interval, generating a second private key through the quantum random number generator, and updating the first temporary key based on the second private key to obtain a second temporary key; and after synchronizing the second temporary key to the client, maintaining encrypted communication connection with the client based on the second temporary key. By implementing the application, the security of data transmission can be improved in a complex network environment.

A method for data processing by a data clean room orchestration system is described. The method includes receiving an indication of mutually attested code for a data clean room between two or more partners. The method further includes configuring a trusted execution environment (TEE), including one or more virtual machines (VMs) that are individually or collectively operable to execute the mutually attested code. The method further includes transmitting, to endpoints associated with the partners, an attestation report including at least an encrypted token and a host public key of a host machine associated with the one or more VMs. The method further includes receiving respective partner secret keys wrapped with the host public key. The method further includes executing the mutually attested code on respective partner datasets in the TEE based on using a host private key of the host machine to unwrap the respective partner secret keys.

A first wireless device may be configured to transmit a first public key, an unsigned transmission, and a signed transmission to a backscattering-based communications device. The signed transmission may be signed based on a first private key. The backscattering-based communications device may be configured to receive the first public key, the unsigned transmission, and the signed transmission from the first wireless device. The backscattering-based communications device may be configured to process the unsigned transmission in response to verifying the signed transmission based on the first public key. The backscattering-based communications device may be configured to transmit a verification of the signed transmission in response to verifying the signed transmission based on the first public key.

The invention discloses an anti-quantum security identity authentication method and system, a medium and equipment. The method comprises the following steps: S1, a client, a service server and a key distribution center perform key configuration by adopting a digital signature algorithm; s2, the client sends an authentication request to the authentication server, and receives an authentication response with a bill granted bill returned by the authentication server; s3, the client sends a bill request to the bill issuing server, and receives a bill response with the service bill returned by the bill issuing server; s4, the client generates a client key exchange public key by adopting a first key exchange algorithm and sends an access request, the service server calculates a shared key and a ciphertext after receiving the public key, generates an access response comprising the ciphertext and identity information encrypted by using the shared key, and returns the access response to the client; and S5, the client receives the access response and obtains the shared key, and performs encrypted communication with the service server by using the shared key. The method has forward safe quantum attack resistance and strong identity authentication.

The invention discloses a post-quantum TLCP protocol design method, device, equipment and medium, and relates to the field of information security, the post-quantum TLCP protocol design method is applied to a client, and the post-quantum TLCP protocol design method comprises the following steps: constructing client handshake information based on an information security technology transport layer cryptographic protocol, and sending the client handshake information to a server to receive returned server handshake information and establish connection; receiving a server-side digital certificate constructed based on the cryptographic algorithm encrypted public key information and the post-quantum key encapsulation algorithm public key information of the server-side and server-side key exchange information constructed based on the post-quantum key encapsulation algorithm and the cryptographic algorithm; and performing identity authentication based on the post-quantum digital signature algorithm public key information and the national cryptographic algorithm signature public key information to construct a pre-master key for data transmission. An active public key cryptographic algorithm and functions are reserved in an information security technology transport layer cryptographic protocol, and a post-quantum public key cryptographic algorithm is put into the protocol, so that the quantum security is realized while the active public key cryptographic security is realized.

The invention discloses a decentralized public key infrastructure constructed based on a block chain and a trusted network, and belongs to the field of information security PKI public key infrastructure, and the method comprises the following steps: 1, building a decentralized CA mechanism; 2, a user submits a certificate application / update / abolish request; the user certificate request is submitted to a decentralized CA mechanism, and the decentralized CA mechanism service calls the block chain to generate / update / abolish the digital certificate; and 3, verifying the user certificate request by using a block chain technology. The certificate request is validated using a smart contract technique. The decentralized public key infrastructure constructed based on the block chain and the trusted network aims to solve the problems of single-point failure, non-transparent certificate, time-consuming certificate revocation and the like existing in a CA mechanism in a traditional PKI system, and emphatically realizes that the problem that the PKI trusted system collapses due to the failure of the CA mechanism in a certificate life cycle management process of the CA mechanism is solved; and meanwhile, certificate transparency is realized, and certificate revocation efficiency is improved.

The invention discloses an interface authentication method, system and device based on a national cryptographic algorithm and a medium, belongs to the technical field of computer security, and aims to solve the technical problem of how to realize identity authentication, data encryption, integrity verification and replay attack protection of interface interaction and meet the security requirement of a key information system. According to the technical scheme, the method comprises the following steps: system initialization: a server and a client respectively generate SM2 key pairs, the client and the server exchange public keys through a secure channel, and a mapping relation between the public key of the opposite side and an identity label is stored; session key negotiation: exchanging a temporary public key based on an SM2-ECDH algorithm, calculating a shared secret value, and deriving an SM4 session key through a KDF; the client side carries out SM3 hash and SM2 signature on request parameters, and the server side verifies the signature and verifies a timestamp and a random number to resist replay attacks; and session key updating: triggering key updating according to a preset condition, and encrypting the new key negotiation message by using the original session key.

Disclosed in the embodiments of the present application are a data processing method and apparatus based on a blockchain key, and a device and a storage medium. The method comprises: acquiring communication channels by means of which communication with N clients is separately performed, and on the basis of the N communication channels, separately performing key shard negotiation with the N clients, so as to obtain a local private-key shard and a complete public key; receiving signature requests sent by M-1 clients among the N clients, and acquiring identity association information from the M-1 signature requests; if each piece of the identity association information is legitimate identity information, determining, as a target client, a client among the M-1 clients which is used for initiating a blockchain service, and acquiring service execution data associated with the target client; and if the service execution data conforms to a risk management strategy corresponding to the identity association information of the target client, participating, together with the M-1 clients, in joint signature processing for the blockchain service. By means of the embodiments of the present application, the risk probability during the use of a digital asset can be reduced.

The invention discloses a method and system for quickly constructing a national secret encryption channel, and the method comprises the steps: a client and a server respectively generate a client private key and a server private key based on a sensitive data transmission scene, and apply for an SM2 algorithm certificate; based on the private key and the digital certificate, the client and the server perform a handshake process, and the handshake process comprises that the client and the server perform identity verification and negotiation by exchanging certificates, temporary public keys and signature information; based on temporary public key information exchanged between the client and the server, performing key negotiation through an SM2 elliptic curve algorithm to obtain negotiation data; and based on the session key in the negotiation data, encrypting and decrypting the communication data by using a GCM mode of the SM4 algorithm. According to the method, various negotiation parameters are optimized and simplified based on a domestic encryption algorithm, rapid establishment of the secure channel is realized, only one round-trip delay is needed in the whole process, and time and bandwidth are saved on the premise of ensuring communication security.

The invention relates to the technical field of network security, and discloses a network information security encryption method, which comprises the following steps: step 1, a sender generates a pair of post-quantum asymmetric keys including a public key and a private key, the public key is used for encrypting a symmetric key, and the private key is used for decrypting the encrypted symmetric key; the sender sends the public key to the receiver through the secure channel, and verifies the authenticity of the public key of the receiver; and step 2, the sender generates a dynamic symmetric key based on a device identifier and a current timestamp, and the device identifier is used for uniquely identifying the device generating the key. A unique and unpredictable dynamic symmetric key is generated by combining a device identifier and a timestamp, the security problem that a traditional static key is easy to crack and abuse in long-term use is solved, in addition, a dynamic update triggering mechanism based on a time interval and a data volume is supported, key management has high flexibility and security, and the security of the key management is improved. And the encryption requirements in different network environments are met.

The invention discloses a secure transmission method and device for video data of a power transmission line based on SRTP, and relates to the technical field of power transmission line monitoring or other related fields, the method comprises the following steps: obtaining target video data and a target dynamic secret key, the target video data being monitoring video data of a target power transmission line, and the target dynamic secret key being video data of the target power transmission line; the target dynamic key is periodically updated based on the network environment and the data sensitivity, and the target dynamic key at least comprises a receiving end public key; encrypting the target video data by using the receiving end public key to obtain encrypted video data, and generating a message authentication code, a hash check value and a digital signature of the hash check value of the encrypted video data; and performing SRTP packaging on the encrypted video data, the message authentication code, the Hash verification value and the digital signature to obtain an SRTP data packet, and transmitting the SRTP data packet to a receiving end. According to the invention, the technical problem that the real-time performance and the security cannot be considered at the same time in the video data transmission method in the related technology is solved.

Procedures, methods, architectures, apparatuses, systems, devices, and computer program products for decentralized data control and access management. For example, a data owner may perform a subscription procedure to obtain verification credentials and an index (e.g., address, identifier) to public data control and access information. The data owner may perform a registration procedure to register ownership of data using the public data control and access information. The public data control and access information may include a public key. The public key is paired with a private trapdoor key to form a key pair. The data owner and a data consumer may perform an access procedure to grant access to registered data. For example, the registration procedure may verify collisions between a token hash, a data hash, and a data owner hash based on use of the key pair.

Disclosed are various embodiments for providing non-fungible tokens (NFT) as a mechanism for verifying ownership of payment instruments such as stored value payment instruments. First, a computing device can receive a purchase notification, the purchase notification indicating that a first user has purchased a stored value payment instrument. Then, the computing device can create a non-fungible token (NFT) on a distributed data store in response to receipt of the purchase notification. Next, the computing device can associate a unique identifier of the NFT with the stored value payment instrument. Subsequently, the computing device can receive a first public key associated with the first user. Then, the computing device can update an owner identifier of the NFT with the first public key associated with the first user.

Apparatuses, systems, and techniques for issuing entitlement tokens to a root of trust allowing the root of trust to take certain action(s) with respect to a component that it secures, for example, to affect a change in the software and / or features available to the component it secures. In some embodiments, the entitlement token issuance process may involve receiving an attestation report corresponding to a root of trust of a computing system, wherein the attestation report is cryptographically signed using a private key unique to the root of trust, verifying the attestation report using a public key corresponding to the private key, and based at least upon successful verification of the attestation report, issuing an entitlement token for the root of trust allowing the root of trust to take one or more actions with respect to a system component secured by the root of trust.

The invention relates to a QUIC protocol-based distributed node unified identity authentication method and system, belongs to the technical field of network security, is applied to a client, and comprises the following steps: registering a client domain name identity through a certificate authority, obtaining a client certificate, and pre-storing a server certificate chain; generating a QUIC initial data packet according to the target server domain name identifier and the client certificate, and sending the QUIC initial data packet to the server; receiving a QUIC handshake data packet returned by the server; verifying the legality of the server certificate based on the server certificate chain, and if the server certificate is legal, calculating a pre-master key according to the client DH private key and the server DH public key; deriving a 1-RTT session key based on the pre-master key; generating a signature verification message, and sending the client certificate and the signature verification message to a server; and synchronously using the 1-RTT session key to encrypt the application layer data with the server, and transmitting the data to the server in the 1-RTT encryption space of the QUIC protocol. According to the invention, the reliability of node identities and the confidentiality of data are ensured.

The invention provides a large model training method and device based on privacy protection and a storage medium. The method comprises the steps of splitting a large model into a plaintext domain model and a secret state domain model; receiving a private data ciphertext sent by at least one client; the private key ModelSK is utilized to decrypt the private data ciphertext in the TE to obtain private data; training the secret state domain model and the plaintext domain model by using the privacy data to obtain the trained secret state domain model and plaintext domain model; and encrypting the trained secret state domain model based on the determined client public key UserPK, and sending the trained plaintext domain model and the encrypted secret state domain model to the client. Therefore, according to the method and the device, the secret state domain model is trained in the TEE, so that the private data can be safely encrypted out of the domain and cannot be restored in a plaintext computing power environment, and the protection of the private data of the client is realized. Meanwhile, the large model is trained through the centralized outsourcing computing power of the server side, and it is guaranteed that centralized training is efficient.

The invention discloses a food production traceability management system based on a block chain, which belongs to the field of food management systems, and is characterized in that a unique identifier ID of an inheritor is generated based on an SHA-256 Hash algorithm, a Merkle tree root Hash value of food production data is dynamically associated, a non-tampering digital identity file is constructed, a data island of traditional decentralized management is broken through, and the traceability of food production is improved. According to the technical scheme, full-chain credible association between the non-abandoned technology and the production process is ensured, validity of an electronic signature is automatically verified by means of an intelligent contract, data tampering or identity failure risks are recognized in real time by comparing a public key decryption result with a signature hash value, JSON format alarms are pushed by means of Apache Kafka message middleware, cross-department collaborative response is achieved, and the security and reliability of the electronic signature are improved. The risk prevention and control efficiency is remarkably improved, encryption signature is performed in combination with an ECDSA key pair of a hardware security module, strong binding of an inheritor identifier, a production batch and equipment is ensured, identity fraudulent use or qualification counterfeiting is prevented, and traceability of the whole life cycle of non-abandoned skill inheritance is achieved.