21 results about "Commutative encryption" patented technology

A method for atomic exchange of assets on multiple blockchains using transient key pairs includes: generating, by a first computing device, a proposal message, the proposal message including at least a first transaction value, a first network identifier corresponding to a first blockchain, a second transaction value, a second network identifier corresponding to a second blockchain, and a swap public key of a swap cryptographic key pair; generating, by the first computing device, a first digital signature for the proposal message; encrypting, by the first computing device, the first digital signature using the swap public key and a first private key of a first cryptographic key pair; appending, by the first computing device, the encrypted first digital signature to the generated proposal message; and transmitting, by the first computing device, the generated proposal message with appended encrypted first digital signature to a second computing device.

An encryption / decryption method is disclosed, where an input data string is described in term of a reference set of unique processing strings of number of bits between minimum and maximum, with these being organized in classes of members of same number of bits, where one or more classes are modified by permutating their members such obtaining a modified set, where directional correspondence reference-to-modified of a member is the encryption / decryption of that member, described in an encryption / decryption key with such keys being stored to be specific to every encryption / decryption enabled device, where such enabled devices exchange encrypted data using such key that is dedicated to a pair of devices only, without sharing such key on the communication channel, and where a central switchboard connects such communicating devices to enable exchanging encrypted data, concealing the communicating devices.

Disclosed are systems and methods for securely exchanging cryptographically signed records. In one aspect, after receiving a content request, a sender device can send a record to a requesting receiver device (e.g., a proxy device). The record can be sent in a decentralized (e.g., peer-to-peer) manner via a short-range link, and the devices may not communicate with a centralized processing platform. The record can include a sender signature created using the sender device's private key. The receiver device can use the sender device's public key to verify the authenticity of the sender signature. After adding the encryption-based receiver signature, the receiver device can redeem the record with the platform. Upon successful verification of the record, the platform can execute as indicated by the content of the record (e.g., modify or update a user account).

To provide a method for exchanging an encryption key when the number of a plurality of frequency channels changes, via which a connection was established.SOLUTION: When a communication device 102 and another communication device 103, which have already established a connection via a first frequency channel over a first link 104, establish a connection via a second frequency channel over a second link 105, a first key for encrypting unicast communication using the second frequency channel is generated through key sharing processing executed with the other communication device 103 via the first frequency channel, a second key for encrypting broadcast communication or multicast communication using the second frequency channel is shared with the other communication device 103 via the first frequency channel, and the first key generated with the first frequency channel and the second key are set as an encryption key for the second frequency channel.SELECTED DRAWING: Figure 1

A method, user device, and computer-readable storage media for registering and activating accounts is provided. A method includes: transmitting, by a user device to a computing system, an input from a user regarding opening an account at an institution associated with the computing system; establishing, by the user device, a communication session based on exchanging encryption keys between the user device and the computing system; in response to establishing the communication session, automatically installing, by the user device, a client application; displaying, via the client application on the user device, a graphical user interface (GUI) comprising a request for a user verification; transmitting, by the user device via the communication session, a received user verification to the computing system; and receiving, by the user device, an indication of an activation of the account at the institution from the computing system.

The invention relates to a privacy data processing method and device, a storage medium and electronic equipment, and relates to the technical field of big data processing. According to the scheme, a first data set of a client side and a second data set of a service side are subjected to hidden tracking privacy intersection through exchangeable encryption, and an intersection index is obtained; the second data set is rearranged according to the first random sequence and the second random sequence in sequence between the service party and the client party, and the intersection index indicates the bit sequence of the intersection ciphertext in the rearranged second data set; the client side carries out secret sharing with the service side by adopting the feature set rearranged by the first random sequence through the switching network according to the second random sequence to obtain a first feature secret fragment, and the service side obtains a second feature secret fragment; and performing statistical function calculation based on the intersection index, the first feature secret fragment and the second feature secret fragment to obtain an intersection statistical feature value of the first data set and the second data set. The scheme does not depend on a third party, deployment is convenient, intersection and feature plaintexts are not exposed, and safety is high.

The application discloses a power distribution area remote control switch selective encryption method, which overcomes the problem of large encryption and decryption calculation amount of power distribution terminals and power distribution remote control switches in the prior art, and comprises the following steps: adding encryption chips at the power distribution terminals of the head end and the switches at the important positions of the tail end, inquiring about the encryption chip conditions of the tail end at the head end and establishing an information table, exchanging encryption security certificates with the tail end supporting encryption to establish an encryption channel, and performing first-layer encryption selection of the switch devices under different security levels; the head end generates a management message and issues the management message, if the management message is a predetermined remote control related message and the target node supports the encryption chip, the management message is encrypted according to the data encryption strategy of the node and is issued to the tail end, the tail end encrypts the corresponding feedback information and sends the feedback information to the head end, and the second-layer encryption selection work is completed. The encryption and decryption calculation amount in a single encryption switch in the important area is reduced, and the data transmission efficiency is improved.

Disclosed is a method of exchanging cryptographic parameters in a network of tire monitoring devices, the method including broadcasting, from each tire monitoring device to a plurality of other tire monitoring devices, a message comprising a cryptographic parameter generated by that respective tire monitoring device.

A method for exchanging a cryptographic key between a sender and a receiver using a neutrino-based communication channel, comprising the steps of: Sender-side generation of a neutrino beam by: - ​​accelerating protons in a proton beam, - deflecting the proton beam onto a target to produce neutrinos through the decay of short-lived particles; Sender-side generation of a sequence of random bits representing the cryptographic key, and encoding of the random bits by: - ​​controlling the deflection of the proton beam by means of a controllable deflection system to direct the proton beam either onto the target or onto an absorber according to the random bits, thereby encoding the random bits as neutrino pulses; transmission of the neutrino pulses from the sender to the receiver;Synchronization of transmitter and receiver by means of a time synchronization unit that synchronizes the timing of the generated neutrino pulses with time windows of the receiver system; reception of the neutrino pulses by a neutrino detector of the receiver, wherein: - decay products, in particular light signals, which are generated during the interaction of the neutrinos with a detector medium are detected and - the detected signals are each assigned to a key bit; storage and concatenation of the received key bits to generate the cryptographic key, which is stored in a key storage module of the receiver.

The invention relates to a large model federated splitting trusted data space construction method based on rotation part secret sharing, and belongs to the technical field of federated learning and large language model splitting. The method comprises the following steps: splitting a large model into a plurality of model partitions, wherein each model partition is trained by a client group; selecting a group of optimal client devices to perform a training process by solving an integer optimization problem; distributing the model partitions to selected client groups, wherein all clients in each client group are responsible for training tasks of the same model partition; in a local training stage, through an alternate partial secret sharing mechanism, encrypted information is exchanged between clients through the partial secret sharing mechanism, so that the communication overhead is reduced, and the privacy protection capability is improved. Each client uses the local data thereof to finely adjust the model partition allocated thereto, and the private data of the client does not leave the client device, thereby protecting the data privacy.

Disclosed is a commutative encryption and watermarking method utilizing deoxyribonucleic acid (DNA) base complementary dynamic encryption for a high-definition map. According to the method, on the basis of a DNA base pair complementary principle and data features of the high-definition map in the OpenDRIVE format, a commutative encryption and watermarking algorithm based on base pair complementary dynamic encryption for a high-definition map. In an encryption method, cubic curve parameters configured to denote elevation elements and lane widths in data are encrypted through a nucleotide base complementary principle in DNA. In a watermarking method, a number of elevation elements and lanes is not influenced by encryption, and the invariant feature is used to generate a zero-watermark. Interchangeability of encryption and watermarking is obtained.

The invention relates to the technical field of edge computing, and discloses an incremental updating method for edge equipment, which comprises the following steps: constructing a communication network according to a network access request of the edge equipment; inputting the newly added task into a layered adapter of the edge device, and outputting a gradient difference; the gradient difference is converted into encryption gradient fragments through an encryption algorithm, and the encryption gradient fragments are sent to neighbor equipment in the communication network through a security tunnel; performing an encryption operation on each encryption gradient fragment through an addition homomorphic encryption algorithm to generate a ciphertext gradient fragment, and performing a ciphertext aggregation operation and a random blinding operation on the ciphertext gradient fragment to generate a global gradient; and decrypting the global gradient to generate a plaintext gradient sum, and executing an incremental updating operation on the layered adapter according to the plaintext gradient sum. According to the invention, the plurality of edge devices generate the gradient difference of the adapter through the local data, exchange the encrypted gradient fragments through the communication network, update the local adapter, and improve the communication efficiency and update performance.

The embodiments of this specification disclose a secure comparison method and system. A first party encrypts first plaintext information associated with a first comparison object using a first key according to an exchangeable encryption algorithm, and sends the obtained first ciphertext information to a second party. The second party encrypts the first ciphertext information using a second key according to an exchangeable encryption algorithm to obtain secondary ciphertext information. The second party obtains an encrypted data set, which includes an encrypted comparison result between the second comparison object and each of a plurality of candidate comparison objects, where the first comparison object is one of the plurality of candidate comparison objects. The second party returns the secondary ciphertext information and the encrypted data set to the first party. The first party decrypts the secondary ciphertext information using the first key to obtain decryption authority for the encrypted comparison result between the second comparison object and the first comparison object.

In some examples, a wireless communication network establishes a data bearer through a wireless communication network for a wireless communication device. The wireless communication network restricts communications over the data bearer to network control and encryption establishment. The wireless communication network exchanges cryptography data over the data bearer between the wireless communication device and an external security service. The wireless communication network determines that the wireless communication device and the external security service have established the encryption over the data bearer, and in response, removes the communication restriction from the data bearer. After the communication restriction is removed, the wireless communication network exchanges encrypted data over the data bearer between the wireless communication device and the external security service.

This invention discloses a privacy-preserving routing method for mobile social networks based on exchangeable encryption, comprising: (1) system setup: setting up a mobile social network including trusted organizations (TAs), fixed networks, and mobile nodes; (2) degree centrality calculation: determining whether the identifier sets of the nodes that meet have an intersection. If there is no intersection, the nodes perform bidirectional authentication. If the authentication is successful, a global degree centrality calculation is performed. Then, it is determined whether the two nodes are in the same group. If they are in the same group, a local degree centrality calculation is performed; (3) routing efficiency value calculation: after the degree centrality of the two nodes meets anonymously and completes the calculation, the routing efficiency value is calculated for the messages in the cache of both nodes. m (3) Calculate the routing efficiency value of the node; (4) Message forwarding: When two nodes meet, their efficiency values ​​are compared. If the efficiency value of the other party is greater than that of the node itself, the message is sent to the other party. This method can protect the privacy information of all nodes without relying on a third-party trusted institution (TA) and simultaneously calculate the social metric value of node degree centrality and perform message forwarding.

Methods and systems have been developed for establishing a secured connection for data transmission. A first digital certificate is generated for a non-display device. This first digital certificate verifies the identity of the non-display device and enables encrypted connections. A second digital certificate is generated for a mobile device that uses a Bluetooth wireless communications standard protocol. The second digital certificate verifies the identity of the mobile device and enables encrypted connections. The mobile device then scans for a generic attribute (GATT) Bluetooth profile of the non-display device. Upon matching GATT properties, an encrypted connection that utilizes the Bluetooth protocol is initiated between the non-display mobile devices. An encrypted data channel is established between the non-display device and the mobile device upon successfully pairing the non-display device and the mobile device by exchanging the first digital certificate and the second digital certificate for authentication and exchanging RSA encryption keys.

On-board power system of a motor vehicle with control units that communicate with each other via a data bus, and an in-vehicle communication device for exchanging data with at least one first vehicle-external communication counterpart via a communication channel, wherein - the first vehicle-external communication counterpart is a communication counterpart of a vehicle manufacturer and transmits at least one cryptographic key and / or at least one certificate for storage in a first control unit of the plurality of control units directly to the vehicle-internal communication device via the communication channel, - the vehicle-internal communication device is connected to the data bus by data technology and the at least one cryptographic key and / or the at least one certificate are supplied to the first control unit via the data bus, - the first control unit stores the at least one key and / or the at least one certificate in encrypted or decrypted form, and - the at least one key and / or the at least one certificate is used at least within the scope of an authentication, characterized in that - both the first vehicle-external communication counterpart and the first control unit are configured to initiate the transmission and the at least one key and / or the at least one certificate replaces an expired or revoked key and / or an expired or revoked certificate in the first control unit.

A method, user device, and computer-readable storage media for registering and activating accounts are provided. A method includes: transmitting, by a user device to a computing system, an input from a user regarding opening an account; establishing, by the user device, a communication session based on exchanging encryption information between the user device and the computing system; in response to establishing the communication session, automatically installing, by the user device, a client application; and receiving, by the user device, an indication of an activation of the account from the computing system.

A method, in a server, for exchanging cryptographic keys for quantum-secure communication between the server and a client. The method includes: receiving a request message for a secure communication channel from a client, including at least one quantum-secure public ephemeral key and a first secret text; decapsulating the first secret text with a decapsulation function using a quantum-secure secret static key of the server, including generating a first secret; encapsulating the quantum-secure public ephemeral key with an encapsulation function including generating a second secret text and a second shared secret; encapsulating a quantum-secure public static key of the client using the encapsulation function, including generating a third secret text and a third shared secret; generating symmetric keys using at least the first, second, and third secrets; and sending a response message to the client, including the second and third secret texts.

The embodiment of the invention discloses a digital identity verification method and device for a meta universe information system. A specific embodiment of the method comprises the following steps: in response to a received registration request, performing multi-level identity verification on user registration information to obtain identity verification information, a user identity hash value and encrypted identity information; in response to the received identity verification request, verifying the identity verification request; in response to the received cross-chain exchange request, verifying the exchange authority of the user, and generating an exchange encrypted information packet; controlling the distributed gateway to send the exchange encrypted information packet to the target block chain network; executing an exchange operation; performing encryption storage on the cross-chain exchange completion information, and performing secondary verification; and sending the exchange confirmation information to the user side, and updating the identity use state of the user. According to the embodiment, the problems of low identity verification efficiency and poor security can be avoided, and the waste of computing resources is reduced.