45 results about "Cryptographic hash function" patented technology

The invention discloses a multi-level key dispersion method supporting tunnel electromechanical system cross-domain interoperation. The method comprises the steps that a trusted center generates a non-singular elliptic curve parameter, a system main private key and a system public key and then issues a public parameter; safely distributing to the tunnel electromechanical equipment through the tunnel management center; the tunnel electromechanical equipment combines a traceable identifier, a provincial domain identifier, a city domain identifier and a tunnel identifier to construct a dispersion factor; based on a dispersion factor, a part of private keys and a self-selected private key of the equipment, a unique session key and an authentication key are derived through a national cryptographic hash function to realize strong binding between the key and the physical position and management attribution of the equipment; according to the method, the device key is strongly bound with the physical position and the management attribution of the device key through the hash function, the problems of identity mutual trust and risk isolation in cross-domain interoperation are solved, the calculation and communication overhead of resource-limited industrial devices is reduced, and the problem of high-performance security protocol application of embedded devices is solved.

The systems and methods disclosed herein embed and store traceable watermarks across multiple data modalities including text, image, audio, video, and structured data. The systems and methods disclosed herein receive an input dataset and generate unique watermark patterns for each data modality using cryptographic hash functions applied to dataset identifiers. The watermark patterns include parameters that provide instructions to watermark the input dataset. Watermarking includes modifying discrete data values, relationships, or arrangements within the original dataset at predetermined locations. The watermarked dataset is used to generate a hierarchical fingerprint structure including multiple levels of cryptographic hash identifiers that represent different portions of the data (e.g., at varying granularities). Both the watermark patterns and hierarchical fingerprints are stored in a distributed database accessible through a decentralized network, thus enabling authorized computing devices to verify data provenance and detect potential misappropriation across heterogeneous digital content types.

Described are platforms, systems, media, and methods for providing an accreditation management system (AMS) to validate educational resources by performing content validation operations comprising: applying a cryptographic hash function to educational resources to generate a content validation hash; receiving a data stream from a computing device of a student user engaged with the educational resources; applying the cryptographic hash function to each educational resource to generate a content consumption hash; and comparing the content validation hash to the content consumption hash.

A computing node in a P2P computer network obtaining a media item to be verified, determining a hash value for the media item based on a digital cryptographic hash function, retrieving a plurality of data records associated with the media item from a blockchain based at least in part on the hash value, wherein a data record is generated by a validation node in the decentralized P2P computer network, evaluating the plurality of data records to determine whether the media item has satisfied pre-defined validation criteria, and providing information describing the media item based at least in part on the plurality of data records, wherein the information provides an indication as to whether the media item satisfied the pre-defined validation criteria.

Vector network coding, such as linear network coding, is used to compute a plurality of coded data parts from original data, wherein each coded data part is computed from a cryptographic hash function of a previous coded data part. A recipient of the coded data parts can compute the cryptographic hash functions of the coded data to reproduce a system of linear equations, which can be solved to recover the original data. A cryptographic key that employs a polynomial over a finite field can have polynomial coefficients that comprise a function of vector network coding coefficients.

Various embodiments are directed to securely generating and managing passwords using a near-field communication (NFC) enabled contactless smart card. For example, a secure password may be generated by generating a random number via a random number generator of the contactless smart card and converting the random number to one or more human-readable characters. In another example, a secure cryptographic hash function of the contactless smart card may generate a hash output value, which may be converted to one or more human-readable characters. The human-readable characters may be used as the secure password or it may be transformed to add more layers of security and complexity.

The invention discloses a privacy protection AI decision making system based on digital signature, comprising a security chip which is internally provided with a cryptographic hash function H and is used for generating an irreversible large Token digital asset package through operation Token = H (ID + Datahash + TrustLevel) according to a user unique identity ID, an original data hash value Datahash and a dynamic trust level TrustLevel; the digital signature management module is used for generating a multi-level digital signature system, binding a digital signature with the multi-dimensional organization information and carrying out digital signature on the large Token digital asset package; the privacy protection module is used for calling the digital signature management module to carry out signature verification and triggering a desensitization program; and the AI large model interaction module is used for receiving the signed and desensitized large Token digital asset package and generating a decision result by utilizing AI analysis capability.

The invention relates to the technical field of medical equipment security, and discloses a lightweight multi-factor authentication and key agreement method and system for resource-constrained medical equipment, and the method comprises the steps: carrying out the setting of a main private key and a password hash function of a medical terminal based on a security demand, constructing a terminal secret state based on the terminal identity, the main and private keys and the basic certificate hash function, combining the state binding hash function, performing multi-factor secret state fusion on the medical terminal to obtain a dynamic secret state, and performing bidirectional authentication based on the terminal encryption hash function, performing forward security session key generation and state updating after the authentication is passed to obtain a forward security session key and a forward security terminal secret state, and finally updating the terminal secret state based on a new password input by a user and the state binding hash function to obtain a password binding terminal secret state; according to the invention, the efficiency of lightweight multi-factor authentication and key negotiation oriented to the resource-constrained medical equipment can be improved.

This invention provides a blockchain-encrypted customer service end-to-end traceability management system, belonging to the field of information management; it solves the problem of complex information management; specifically as follows: Information collection module: acquires customer information, and based on this, collects information generated during the customer service process to obtain service information; Information processing module: preprocesses customer and service information, and provides a structured representation of the customer and service information; Encrypted storage module: encrypts customer information, maps service information directly associated with the customer using an encrypted hash function to obtain hash values, constructs logical addresses using these hash values, and connects the service information; Information traceability module: anchors standardized data packets to service operation records using hash values; and detects service information using hash values. This invention reduces the difficulty of information management by using chained storage of service information.

Encryption system with an application-specific integrated circuit (ASIC) which has a permanent memory for the non-volatile storage of the operating system (OS) of a processor and software modules for encrypting the data memory of the processor and which has a hardware-implemented encryption algorithm, characterized in that a security module (SM) is integrated in the ASIC for autonomous booting of the operating system (OS), consisting of: - a symmetric cryptosystem (SK) for processing symmetric keys, - an asymmetric cryptosystem (AK) for the use of public and private keys, - a module for generating cryptographic hash functions (KH), - a module for the secure exchange of keys using hardware-implemented key exchange protocols (SP), - a key storage (SS) for the secure storage of root keys (WS), which are protected by appropriate measures in the physical structures of the ASIC and - a key management system (SMS) for the secure introduction of authenticated-encrypted key packets, and that the security module (SM) communicates with a central processing unit (CPU) via a communication interface (CS1), and that the central processing unit (CPU) communicates with at least one internal storage (IS) and one external storage (ES), as well as with at least one internal persistent storage (IP) and one external persistent storage (EP), such that the operating system (OS) is loaded by a second-stage bootloader (SSB) stored in the external persistent storage (EP), and then the operating system (OS) loads the applications, the second-stage bootloader (SSB) itself being decrypted and loaded by a first-stage bootloader (FSB) stored in the internal persistent storage (IP), and a public key (PUBOS) to verify the operating system (OS).and a symmetric key (KOS) to decrypt the operating system (OS), and that the contents of the internal memory (IS) and the external memory (ES) are decrypted by the security module (SM) during read accesses by the central management unit (CMU) or other modules integrated on the ASIC, and re-encrypted during write accesses by the same.

In some examples, a code file in a development system is selected and the selected code file is segmented, using a parser, to create multiple parsed blocks. A block of the multiple parsed blocks is selected and a cryptographic hash function used to create a block signature that uniquely identifies the selected block. The block signature is compared to multiple signatures of blocks in third-party libraries. The multiple signatures are stored in an index. When the block signature matches one of the multiple signatures of blocks in third-party libraries, the index is used to determine a source file from which the selected block was copied. Vulnerabilities included in the source file and fixes to address the vulnerabilities are identified to enable a software developer to apply the fixes to the identified vulnerabilities.

A device and method provide a visible or audible indication of whether an integrated circuit (IC) is authentic using cryptographic hashes stored on a blockchain. The IC includes a cryptographic mining circuit that creates blocks for storage in the blockchain. Each such block includes the value of a cryptographic hash function applied to a serial number unique to the IC and the hash value most recently stored in the blockchain. The necessary data are communicated between the IC and a blockchain server by an intermediary electronic authentication device, which also receives data from the server that indicate whether the second hash value equals an expected hash value computed by (or provided to) the server. The electronic authentication device accordingly provides a suitable visible or audible message to a user.

The application discloses an open source component bloodline analysis method and system, relates to the technical field of software supply chain security, and comprises the following steps: S1, automatically discovering open source components; S2, analyzing software components; S3, open source component fingerprint analysis; S4, generating an SBOM bill of materials; and S5, open source component bloodline analysis. The application realizes comprehensive tracking of a source code data processing process through a cryptographic hash function and a cosine similarity algorithm. When a component is modified, the component can also be quickly identified through a similarity analysis technology. The platform regularly collects file fingerprint features of common open source components, extracts characteristic values in combination with extracted open source software dependency packages, saves the characteristic values for comparison, identifies tampered code details in a jar package, locates open source component risks, and improves controllability and security management of a software deployment package.

The invention discloses a traceable multi-signature method supporting a distributed aggregator and lightweight setting, which is characterized in that a decentralized signature generation mechanism is realized by adopting a cryptographic method comprising bilinear pairing, a linear homomorphic time lock, a cryptographic hash function and a BLS signature; the method specifically comprises the steps of system initialization, key generation, authorization generation and aggregation, prompt generation, partial signature and verification, authorization verification, signature aggregation, authorization revocation, signature verification and the like. Compared with the prior art, the method has a decentralized key generation mechanism, a distributed aggregator mechanism and a signature accountability function, so that high communication overhead caused by the use of a distributed key generation protocol and a single-point fault possibly caused by excessive dependence on a single aggregator are avoided; and meanwhile, a strong association mechanism between the signer and the final multiple signatures is established, and the signer is responsible for the signature behavior of the signer, so that the problems of low efficiency and high centralization of aggregators caused by dependence on a DKG protocol are effectively solved.

The embodiment of the invention provides a cloud file query method and related equipment, and belongs to the technical field of data query. The method comprises the steps of performing encryption processing on a first service pool and a first total pool through a preset encryption algorithm to obtain a corresponding second service pool and a second total pool; wherein the preset encryption algorithm comprises a reversible coding algorithm; constructing a preset bloom filter through a preset non-encrypted hash function according to the second total pool; comparing and analyzing the second business pool through the preset Bloom filter, and determining a target file identifier; wherein the target file identifier comprises a file identifier which exists in a second service pool and does not exist in a second full-amount pool; performing decryption processing on the target file identifier to obtain a target query result; wherein the decryption processing corresponds to the encryption processing. According to the embodiment of the invention, the efficiency and accuracy of master-free file checking can be effectively improved, and support is provided for performance optimization of cloud storage services.

The invention relates to the technical field of chess and card game cheating prevention, in particular to a chess and card game cheating prevention method and a chess and card game cheating prevention system capable of preventing tampering and verifying shuffling and grabbing. The technical defects existing in existing chess and card game anti-cheating processing are overcome. The method comprises the steps that S1, a server generates a data packet of initial card wall fingerprints; s2, the server distributes the data packet of the initial license wall fingerprint to all participating clients; s3, the client participates in card cutting in a sliding block interaction mode; after the player clicks the stop button, the first sliding block stops, and the corresponding card wall position when the first sliding block stops is recorded as the segmentation position of the current player; s4, reporting by the client and recombining with the server; s5, the position, corresponding to the stop position of the second sliding block, of the tile wall is determined as the initial tile grabbing position; and S6, starting the game. And finally, the determination right of the game state is jointly completed in a player interaction mode, the integrity of the initial state is ensured through a cryptographic hash function, and the tampering prevention and the fundamental cheating prevention are realized in a verifiable manner.

Methods for updating 256-bit cryptographic keys using a cryptographic key update system include the transmission of a first transmission, a second transmission, and a third transmission. The second transmission is a symmetric key encryption using a cipher key consisting of a concatenation of a plurality of parameters and a new cryptographic key.The sender derives the encryption key by transforming an authentication key and a bit sequence of constant values ​​based on a one-way compression function, which is one of the following: a Modification Detection Code 2 (MDC-2) cryptographic hash function with an advanced 128-bit encryption standard (AES-128) as the underlying block cipher, a Modification Detection Code 4 (MDC-4) cryptographic hash function with the advanced 128-bit encryption standard (AES-128) as the underlying block cipher, the Hirose compression function with the advanced 256-bit encryption standard (AES-256) as the underlying block cipher, and a 256-bit hash function.

The invention relates to the technical field of encryption, and provides an SM2-based two-party collaborative anti-dual-authentication signature generation method and system, and the method comprises the steps that a client obtains a public parameter set and a to-be-signed message; based on the to-be-signed message, a first intermediate result is obtained through calculation through a password hash function; calculating to obtain a second intermediate result based on the public parameter set, and outputting the first intermediate result and the second intermediate result; based on the second intermediate result, in combination with the secret share of the server side, after the server side obtains one point of the elliptic curve through calculation, a server side part signature value is obtained through calculation in combination with the first intermediate result; and based on the signature value of the server part and in combination with the secret share of the client, the client calculates to obtain the signature value of the client part, and the two signature values are combined into a final signature value. Under the condition that any one of the devices is maliciously controlled, the overall leakage of the signature key can still be effectively prevented, and the anti-cheating capability is improved.

A method for updating a 256-bit cryptographic key by a cryptographic key update system includes transmitting a first transmission, a second transmission, and a third transmission. The second transmission is symmetric key encryption under a serial key encryption key and a new cryptographic key of a plurality of parameters. The transmitter derives a key encryption key by converting an authentication key and a constant bit string based on a one-way compression function, the one-way compression function is one of the following functions: taking a 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 2 (MDC-2) of a bottom block password, taking the 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 4 (MDC-4) of the bottom block password, and taking a 256-bit advanced encryption standard (AES-256) as a Hirose compression function of the bottom block password; and a 256-bit hash function.

Various embodiments are directed to securely generating and managing passwords using a near-field communication (NFC) enabled contactless smart card. For example, a secure password may be generated by generating a random number via a random number generator of the contactless smart card and converting the random number to one or more human-readable characters. In another example, a secure cryptographic hash function of the contactless smart card may generate a hash output value, which may be converted to one or more human-readable characters. The human-readable characters may be used as the secure password or it may be transformed to add more layers of security and complexity.

Described are platforms, systems, media, and methods for providing an accreditation management system (AMS) to validate educational resources by performing content validation operations comprising: applying a cryptographic hash function to educational resources to generate a content validation hash; receiving a data stream from a computing device of a student user engaged with the educational resources; applying the cryptographic hash function to each educational resource to generate a content consumption hash; and comparing the content validation hash to the content consumption hash.

An apparatus comprises instruction decoding circuitry to decode a cryptographic hash instruction specifying at least one working operand and an input operand; and processing circuitry to perform, in response to decoding of the cryptographic hash instruction, two or more iterations of a cryptographic hash function. Each iteration of the cryptographic hash function comprises determining an updated value for the at least one working operand based on a previous value for the at least one working operand and a respective portion of the input operand selected to be processed in that iteration. The updated value for the at least one working operand in one iteration becoming the previous value for the at least one working operand in a next iteration. In response to decoding of the cryptographic hash instruction, the processing circuitry performs at least two iterations of the cryptographic hash function per processing cycle.

The application discloses a product identity verification method fusing a two-dimensional code and a visual fingerprint, comprising the following steps: obtaining two-dimensional code information of a product to be verified, guiding and collecting a high-definition image of a preset feature anchor area of the product based on an associated digital twin model through AR technology; performing geometric and illumination correction preprocessing on the image, extracting a to-be-verified visual fingerprint vector with local invariance and global depth texture features; combining the vector with the two-dimensional code information and a salt value, generating a to-be-verified composite identity hash value through a cryptographic hash function; comparing the hash value with an original hash value pre-stored on a distributed ledger, if the hash values are inconsistent, calculating the similarity between the to-be-verified visual fingerprint and an original visual fingerprint through a twin neural network, and performing auxiliary verification; the application realizes high-security and convenient product identity authentication by strongly binding an external two-dimensional code and internal physical features of a product, and adopts a cascade verification strategy, and effectively prevents counterfeiting.

A signature graph method is proposed to authenticate shared high-entropy data using a graph that can be easily identified by human eyes (or by computer image recognition algorithms). An example method for authenticating a shared data element comprises receiving a data element to be shared; transforming the data element to be shared into signature graph data, using at least one collision-resistant one-way mapping function; and rendering a human-perceptible representation of the signature graph data, such as an audible and / or visual representation, for perception by a human user. In some embodiments, transforming the data element comprises applying a cryptographic hash function to the data element, to obtain a first hash output, and applying a cryptographic hash function to the first hash output, to obtain the signature graph data.

A first verifier and second verifier may share a secret string, a first and second random input; may generate a challenge according to a certified randomness protocol and may encrypt the challenge using a keyed cryptographic hash function. The first verifier may send the encrypted challenge, the first random input, and the random hash key to a prover. The second verifier may send second random input to the prover. The prover may decrypt the encrypted challenge and may execute a random quantum computation based on the certified randomness protocol and the challenge and may send a result of the random quantum computation to both the first verifier and the second verifier. The first and second verifiers may determine the results were received within a time threshold, may compare the results to ensure that they match, and may determine the result passes the certified randomness protocol.

In some examples, a code file in a development system is selected and the selected code file is segmented, using a parser, to create multiple parsed blocks. A block of the multiple parsed blocks is selected and a cryptographic hash function used to create a block signature that uniquely identifies the selected block. The block signature is compared to multiple signatures of blocks in third-party libraries. The multiple signatures are stored in an index. When the block signature matches one of the multiple signatures of blocks in third-party libraries, the index is used to determine a source file from which the selected block was copied. Vulnerabilities included in the source file and fixes to address the vulnerabilities are identified to enable a software developer to apply the fixes to the identified vulnerabilities.

Disclosed is a method, a device, a system and / or a manufacture of cryptographic security of an evolving actual possession token. In one aspect, a method may include receiving an electronic token in a current transfer transaction having a block hash of the previous transfer transaction representing a state of the electronic token following the previous transfer transaction. A data block of the current transfer transaction is generated along with a secret value. The method feeds into a cryptographic hash function inputs including transaction data of the current transfer transaction, the block hash of the previous transfer transaction, and the secret value to generate a block hash of the current transfer transaction. The method stores the secret value in the computer memory and transmits for storage on a server a state hash representing an evolved state of the electronic token to establish independent evidence of evolution of the electronic token.

Systems, methods, and apparatuses for establishing an ephemeral security context between an ambient internet of things (AIOT) device and a reader device are provided herein. The reader device transmits a plurality of cryptographic puzzles and one or more puzzle parameters to the AIOT device. Each cryptographic puzzle is associated with a tuple comprising an ephemeral key and an ephemeral key index associated with the ephemeral key. The plurality of cryptographic puzzles may include reverse encryption based cryptographic puzzles and / or reverse cryptographic hash functions. The AIOT device selects and solves a cryptographic puzzle of the plurality of cryptographic puzzles and recovers the ephemeral key corresponding to the selected cryptographic puzzle. The AIOT device transmits a first message including a random device identifier and an ephemeral key index corresponding to the recovered ephemeral key. The AIOT device and the reader device establish the ephemeral security context based on the ephemeral key.

The invention discloses a product identity verification method fusing a two-dimensional code and a visual fingerprint, and the method comprises the steps: obtaining the two-dimensional code information of a to-be-verified product, and guiding and collecting a high-definition image of a preset feature anchoring region of the product through an AR technology based on an associated digital twin model; geometric and illumination correction preprocessing is carried out on the image, and a to-be-verified visual fingerprint vector with local invariance and global depth texture features is extracted; combining the vector with two-dimensional code information and a salt value, and generating a to-be-verified composite identity hash value through a cryptographic hash function; comparing the Hash value with an original Hash value pre-stored on the distributed account book, if the Hash value is not consistent with the original Hash value, calculating the similarity between the visual fingerprint to be verified and the original visual fingerprint through a twin neural network, and carrying out auxiliary verification; according to the method, the external two-dimensional code is strongly bound with the internal physical characteristics of the product, and a cascade verification strategy is adopted, so that high-safety and convenient-to-operate product identity authentication is realized, and a forgery behavior is effectively avoided.

Systems and methods are described for detecting a simulated phishing message by an email client plug-in. A unique key is received at the email client plug-in. An indication that an email was reported by a user as a suspicious message is received at the email client plug-in. The email is a simulated phishing message having the unique key mapped by cryptographic hashing function into a hash value in a predetermined field in the header of the simulated phishing message. The presence of the predetermined field is detected and the hash value in the predetermined field is compared to a result of applying cryptographic hashing function to the unique key received by the email client plug-in. Responsive to being matched to the result, it is determined that the suspicious message is a simulated phishing message generated by a server.