187 results about "Communications security" patented technology

This invention relates to the field of computer technology, specifically to a method and apparatus for integrating third-party algorithm components based on dual-core collaboration. This application directly integrates third-party algorithm components into the BCM dual-core MCU, eliminating reliance on ZCU and CAN bus communication. This fundamentally eliminates the latency and security overhead caused by cross-ECU transmission and E2E protection, improving signal real-time performance and communication security. By clearly defining the functions and allocating resources of the BCM dual-core, a dedicated storage area is planned for the third-party algorithm components, and a standardized integration environment is built, achieving efficient and stable component integration. Simultaneously, peripheral access strategies are optimized, unnecessary protections and redundant polling are disabled, releasing idle computing power and hardware resources of the BCM and improving utilization. Without increasing the ZCU hardware cost, the chassis braking algorithm is deployed and executed locally, reducing performance losses caused by cross-domain communication and effectively improving the overall system operating efficiency and resource utilization efficiency.

Provided in the embodiments of the present application are a communication method and apparatus, which are used for improving the communication security. In the present application, a transmit end can perform security processing on a data unit of a MAC layer. For example, the transmit end calculates verification information of a MAC subunit on the basis of parameters such as a count value corresponding to the MAC subunit, and a receive end verifies the MAC subunit on the basis of the parameters such as the count value corresponding to the MAC subunit. In the present application, a count value at a MAC subunit granularity is maintained in the MAC unit, and a location in the MAC unit that bears the count value is defined, such that the receive end can acquire the count value, thereby implementing integrity verification on the MAC subunit, and thus helping improve the communication security performance. In addition, in the present application, the count value is maintained at the granularity of the MAC subunit, which helps improve the security performance of the MAC layer.

The application provides a kind of attack detection method, system and medium for sensor fusion system, it is related to communication security technical field, the method includes obtaining control input and each sensor measurement information, according to this, divide credible and suspicious sensor set and establish attack hypothesis set.By injecting bounded exposure input to control input, construct sensor layer, hypothesis layer and attack output set, use rolling time optimization to increase the separation trend between hypothesis layer and attack output set, while carrying out sensor layer detection.Based on the detection result and separation trend value, iteratively update the attack hypothesis set, repeat the active exposure detection until the stop condition is met, and finally identify the attack and the attacked sensor.The method expands the gap between normal output and attack output by actively injecting bounded exposure input and rolling time optimization, thereby achieving active exposure of covert deception attack and accurate identification of attacked sensor without modifying sensor interface and communication link.

The present application relates to the technical field of wireless communication security, in particular to a radio frequency fingerprint identification method for wireless node identity authentication. The method solves the problems of weak radio frequency fingerprint characteristics in short frame wireless signals, insufficient discrimination ability of lightweight models, and difficulty in rigid alignment and distillation of heterogeneous teacher-student models. The method obtains training wireless signal samples with identity labels and converts them into time-frequency spectrum samples; inputs the time-frequency spectrum samples into a teacher recognition model and a student recognition model to obtain classification results and global features; projects the teacher global features and the student global features, generates a cross-dimensional correlation matrix according to the projection feature component correlation, and normalizes to obtain alignment-free attention weights; constructs an alignment-free feature distillation loss based on the weights, and jointly trains to obtain a lightweight radio frequency fingerprint identification model; the model is used to output the identity category of the wireless node to be verified during inference, which is used for wireless node access authentication and physical layer identity authentication.

The present application relates to the technical field of secure communication, and in particular to a satellite-to-ground communication security beam shaping method based on active RIS and related equipment, a communication model containing a plurality of users, eavesdroppers, ground base stations, SATs and active RIS is first constructed to accurately simulate complex communication scenarios. Based on the model, an optimization function is constructed to minimize the ground base station transmission power as the target, while meeting the primary and secondary user quality of service requirements and limiting the eavesdropper's eavesdropping ability as the constraint condition. In order to reduce the complexity of solving, the optimization function is decomposed into two sub-problems, and an alternating optimization algorithm is adopted to optimize the ground base station passive beam shaping vector when the active RIS beam shaping matrix is fixed, and to optimize the active RIS beam shaping matrix when the passive beam shaping vector is fixed. Through iteration until convergence, the optimal passive beam shaping vector and active RIS beam shaping matrix are finally obtained, and the efficient and secure operation of the communication system is realized.

This invention discloses a multi-agent communication key management method and system adapted to dynamic topologies, relating to the field of multi-agent communication security technology. It addresses the problems of low scalability and high failure risk in the existing centralized key generation and distribution processes of agent keys. The invention includes: the role of the GC can be elected and rotated among multiple agents, avoiding physical single points of failure; and it establishes a multi-agent group key system based on a logical key tree. When an agent joins or leaves, only logarithmic-level key updates are required, reducing the communication overhead of key distribution from O(N) to O(logN), significantly improving the system's efficiency and scalability when handling large-scale, highly dynamic groups.

The present invention relates to a security terminal system capable of performing high-speed security processing, particularly relates to the technology about a terminal that performs V2X communication simultaneously with hundreds of external communication devices and a security module that is responsible for communication security of the terminal, and more particularly, to a security terminal system capable of performing high-speed security processing in which a new hardware-based architecture is used to reduce a bottleneck phenomenon occurring in data communication between the terminal and the security module, minimize performance loss of a security module engine, thereby improving speed and efficiency of security operation, and satisfy the existing V2X communication standards.

The application discloses a wireless communication security transmission method, and belongs to the field of wireless communication security. The method comprises the following steps: an information sender encodes information to be sent to each legal receiver into a code word on a fine lattice by using a nested lattice code, wherein a secret message and an auxiliary message are generated for each information, the auxiliary message is a lattice point randomly selected from a coarse lattice, and the secret message is formed by mapping a mapping function to a coset of the coarse lattice; a precoding technology is used to isolate the information to be sent to each legal receiver, and a final sending signal is generated; and a legal receiver decodes the received signal to obtain the message to be sent by the information sender. The method uses a nested lattice code encoding scheme to minimize the information leakage rate of an eavesdropper, so that strong security of a communication system is achieved. Meanwhile, the secret message transmission between legal channels is realized by using a multi-user precoding technology, and the data security transmission between each point in a communication network is realized.

This invention discloses a method and apparatus for establishing a Bluetooth remote trust interaction channel for intelligent devices, relating to the field of Bluetooth communication security technology. The method can be implemented through pure software, pure hardware, firmware, or a combination of both. It includes: entering a Bluetooth discoverable state in response to a master recognition trigger operation and outputting a pairing confirmation credential; completing Bluetooth secure pairing with out-of-band credential verification and exchanging link encryption keys; extracting the terminal device's hardware identity identifier and strongly binding it with the key as a trust anchor point for storage; and exiting the discoverable mode after master recognition is complete, accepting data interaction only from trusted devices. The apparatus includes a Bluetooth pairing module, a trust anchor point management module, and a channel access control module, which are sequentially connected in communication. This invention achieves secure management of the entire lifecycle of Bluetooth pairing and interaction channels, reducing the risk of unauthorized access and unauthorized operations. It has wide adaptability and can cover various implementation scenarios.

Embodiments of the present application disclose a method and device for improving communication security. A specific embodiment of the method comprises: obtaining a first key based on a root key and first identification information saved by a first communication party; obtaining a second key based on the first key; obtaining a third key based on the second key and data information matching a target application scenario; and encrypting target communication data based on the third key. The embodiment generates different third keys based on different application scenarios, and encrypts the target communication data by using the third keys, which can improve the communication security. When the third key in one application scenario is leaked or cracked, the third keys in other scenarios are not affected, which is conducive to improving the communication security.

The application discloses a power satellite-ground fusion optimal power safety communication method, device and system, and relates to the technical field of power system communication safety. The method comprises the following steps: collecting required data; in the satellite beam coverage range of power satellite-ground communication, quantifying the threat degree of eavesdroppers based on the collected data to obtain a threat value; performing power splitting operation based on the threat value and the collected data to obtain a power allocation result, and then selecting a corresponding safety algorithm scheme in combination with the threshold range where the threat value is located, power business time delay and computing power demand power; constructing and solving a power satellite-ground fusion optimal power allocation model to obtain a power satellite-ground fusion optimal power allocation result applicable under all safety algorithm schemes. The application can realize accurate balanced control of power business safety and transmission performance under the condition of limited satellite power through multi-eavesdropper threat quantification, safety algorithm dynamic adaptation and satellite-ground power optimization.

This invention discloses a communication method, device, and storage medium for a power grid system. The method includes: encrypting an original location information index according to a key pair from the transmitting end and a preset encryption rule to obtain a transmitting end location information index, and generating a first public key and private key pair; mapping the original location information index according to the first public key and the key pair to obtain a transmitting end public key and a transmitting end private key; generating a second public key and private key pair at the receiving end based on an arbitrary number and a preset encryption rule; mapping the original location information index according to the second public key and the private key pair to obtain a receiving end public key and a receiving end private key; using the receiving end's receiving end public key and receiving end private key as the receiving end location information index; and determining whether the original information location index is correct at the receiving end based on the transmitting end location index and the receiving end location index. This invention can effectively improve the communication security of a power grid system.

This invention discloses a communication encryption method based on an Adversarial Neural Cryptography (ANC) model, aiming to address the problems of insufficient randomness and limited security in ciphertext caused by the structural homogeneity of ANC models. This invention introduces a pre-trained randomness detector into a three-party game framework involving the sender, receiver, and attacker. During ANC model training, basic encryption / decryption and anti-attack training are performed initially. In the later stages of training, the detector is periodically used to evaluate the randomness of the ciphertext generated by the sender, and the evaluation result is used as part of the loss function to guide the sender to generate ciphertext with both strong confidentiality and high randomness. Finally, the well-trained sender and receiver neural networks are used as encryption and decryption modules and applied to actual communication. This invention effectively enhances the randomness of the generated cryptographic algorithm and improves communication security through structural innovation and diversified training objectives.

The present disclosure provides a packet forwarding method, a controller and a packet forwarding system, and relates to the field of communication security. The method comprises: in response to a request of a source node in a domain managed by a controller, determining, by the controller, first path information of a packet sent by the source node, the first path information comprising first routing addresses of a plurality of first nodes, the plurality of first nodes comprising an intermediate node and a destination node; performing, by the controller, first processing on the first routing address of each first node to obtain a second routing address, the first processing comprising encryption based on a session key between the controller and a previous hop node of the first node, and the second routing address of at least one first node being different in length from other first nodes; encapsulating, by the controller, second path information comprising the second routing addresses of the plurality of first nodes to obtain a first SRH, the first SRH carrying information representing the length of the second routing address of each first node; and sending, by the controller, the first SRH to the source node, so that the source node forwards the packet according to the first SRH.

The application discloses a vehicle cross-domain one-way irreversible pure hardware security communication channel and method, and belongs to the technical field of vehicle communication security. The channel is a pure hardware circuit without firmware design, and comprises a one-way physical isolation unit, a hardware verification unit and an anti-replay unit. The channel only allows one-way transmission of signals, and the reverse path is physically blocked. The method generates a verification code and a sequence identifier through hardware, and directly discloses an abnormal frame through double verification. The application is different from the existing bidirectional software communication scheme, and is free of a protocol stack and a cache. The application can reduce tampering and replay risks, solve the problems of easy hijacking and easy tampering of vehicle cross-domain communication, and is suitable for transmission of high-security-level control instructions of vehicles.

This invention discloses a cross-receiver radio frequency fingerprinting method, system, and terminal device, relating to the field of wireless communication security technology. The invention estimates the carrier frequency offset of the received IQ signal by decoupling the transmitter and receiver carrier frequency offsets; extracts the slope and curvature of the frequency domain phase as domain-invariant features; constrains the consistency of features of the same device across different receivers based on contrastive learning; employs optimal transmission alignment of the spectral envelope distribution of different receivers to reduce inter-domain offset; and achieves cross-receiver device identification through joint optimization of invariant features. By estimating the carrier frequency offset and decoupling the transmitter and receiver frequency offsets, extracting the frequency domain phase slope and curvature as domain-invariant features, and combining contrastive learning to constrain the consistency of features of the same device across receivers with optimal transmission alignment of the spectral envelope distribution of different receivers, this invention achieves reliable device access authentication and identification under receiver-less conditions, improving the model's generalization ability and stability.

The application relates to a communication establishment method based on security evaluation and an electronic device, and belongs to the technical field of communication security. The method comprises the following steps: obtaining a first system running state measurement value of a first device; after certificate authentication of the first device and a second device is passed, the first device requests a trusted third party to authenticate the first system running state according to the first system running state measurement value; if the second system running state of the second device and the first system running state of the first device are both authenticated, communication between the first device and the second device is established. The communication establishment method based on security evaluation and the electronic device provided by the application significantly improve the active defense capability of communication, improve the reliability of security evaluation, and realize communication security evaluation in a TPM-free environment.

The utility model relates to wireless remote control technical field discloses a kind of remote controller of encrypted communication transmission function, including user input module, main control MCU module, feedback module, encryption module, the output end electric connection of user input module input end of main control MCU module, the main control MCU module bidirectional electric connection has interference detection module, power management module, environment perception module, data storage module and multiple communication module, the output end electric connection of main control module input end of feedback module, the main control MCU module is bidirectional electric connection encryption module by hardware security bus (HSM).In the utility model, the remote controller is designed by the architecture of "main control+encryption+multiple auxiliary module", on the basis of guaranteeing communication security, multiple optimization of functionality, adaptability and user experience is realized, especially suitable for the scene with higher requirement for data security and environment compatibility.

This invention belongs to the field of wireless communication technology. It provides a quantum-secure intercom device, system, and method based on quantum key distribution. This invention adds a quantum-secure module and connects to a quantum-secure service platform for quantum key injection, completing the security management of key generation, storage, and use. Simultaneously, this invention uses the quantum key as the injection key, injected into the quantum-secure module as one of the encryption key sources, and couples it with the identity information of the quantum-secure intercom device for secondary encryption, significantly improving communication security. Furthermore, this invention supports multiple dynamic key updates through multiple key injections, solving the risks of relatively fixed keys being easily leaked and cracked, and adapting to rapidly changing environments.

This invention discloses a hybrid intrusion detection method and system for V2X communication security at vehicle-to-everything (V2X) intersections. The system employs a two-level detection architecture. The first level is a rule-based rationality check module (RPCM), which uses a predefined set of rules to quickly filter received messages, eliminating obviously malicious or forged messages. Messages that successfully pass the RPCM check are then sent to a data fusion and decision-making module (DADM). The DADM dynamically models the vehicles and their interactions within the intersection as a graph structure. By learning the complex spatiotemporal interaction patterns of vehicle groups under normal conditions, it identifies more covert and coordinated attacks. The fusion and decision-making module makes a final judgment on each message according to a preset fusion strategy. This invention aims to operate with low latency on onboard or roadside units, effectively addressing the complex V2X security threats unique to signalized intersections and providing a reliable data foundation for advanced V2X applications.

This invention discloses a secure transmission method for satellite constellation communication based on post-quantum cryptography, relating to the fields of satellite communication and information security technology. The method includes: analyzing the satellite constellation topology to determine the latency sensitivity level of the secure handshake; pre-screening a set of candidate PQC algorithms based on the sensitivity level; sensing the channel and extracting non-stationary features such as fading depth, duration, and Doppler rate of change; constructing a multi-dimensional joint optimization model with algorithm identifier, fragmentation granularity, redundancy, and modulation and coding scheme as joint decision variables, aiming to maximize the handshake probability within the expected duration; solving the model to generate an adaptive transmission strategy, and performing adaptive non-uniform fragmentation and fountain code encoding on PQC protocol data units; predicting link trends based on Doppler rate of change and dynamically scheduling symbol transmission. This invention achieves deep coupling optimization of network topology, cryptographic algorithms, and channel characteristics, improving the transmission reliability of PQC in dynamic satellite networks.

The application discloses a control method and system for fusing a TBOX remote control function of an automobile entertainment system, and the method comprises the following steps: the automobile entertainment system in a dormant state is woken up after receiving remote wake-up information sent by a vehicle information service platform; the automobile entertainment system is authenticated with a gateway control unit; a remote communication control unit receives a remote control instruction of the vehicle information service platform, defines remote communication security requirements, and encrypts and authenticates the remote control instruction through the remote communication control unit; when a whole vehicle CAN network is dormant, the automobile entertainment system sends a disconnection heartbeat protocol to the vehicle information service platform, so that the automobile entertainment system is disconnected with the vehicle information service platform; the application realizes function design integration through internal remote control service function interface level communication of IVI, shortens a whole link response time, enhances function expansion, reduces one TBOX controller in a whole vehicle physically, can reduce a whole vehicle BOM cost, reduce a whole vehicle weight, reduce a whole vehicle energy consumption, and improves product competitiveness.

The application provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control.The method comprises the following steps: establishing a time synchronization network based on a railway NTP protocol; using a colored Petri net model to perform vulnerability state reachability analysis on an NTP protocol authentication process based on a trusted certificate, and judging whether the current protocol has vulnerability; determining a first dynamic key and a second dynamic key according to key parameters of the NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for a target train; collecting real-time running parameters; determining a tracking interval time; and generating and issuing a control instruction.According to the application, the running state of the train can be controlled according to the communication security state and the tracking interval time, and the reliability of the real-time running parameters in time and the line utilization rate of the train are improved.

The present application belongs to the technical field of industrial automation and embedded system, in particular to a remote upgrading method of industrial control system, which can reliably ensure the stability and reliability of communication, and further ensure the implementation of remote upgrading. The communication security is high, which can effectively avoid the device out of control, data tampering distortion or data loss caused by attack behaviors such as data tampering or malicious injection.

The application discloses a communication encryption method based on a quantum security SIM card and relates to the technical field of communication security, and comprises the following steps: acquiring physical fingerprint features and communication behavior features of a user based on a fingerprint extraction module; building a double-feature encryption method to optimize the physical fingerprint features and the communication behavior features; and performing communication encryption on the quantum security SIM card by using the double-feature encryption method based on the latest optimized physical fingerprint features and communication behavior features; the application is used to solve the problem that the existing communication encryption method of the quantum security SIM card cannot effectively analyze the whole communication behavior of a user, and thus cannot timely judge the behavior of the user and perform communication encryption when the behavior of the user is abnormal, and the quantum security SIM card cannot be comprehensively subjected to communication encryption.