59 results about "Cryptographic hash function" patented technology

In some examples, a code file in a development system is selected and the selected code file is segmented, using a language-specific parser, to create multiple parsed blocks. A block of the multiple parsed blocks is selected and a cryptographic hash function used to create a block signature that uniquely identifies the selected block. The block signature is compared to multiple signatures of blocks in third-party libraries. The multiple signatures are stored in an index. When the block signature matches one of the multiple signatures of blocks in third-party libraries, the index is used to determine a source file from which the selected block was copied. Vulnerabilities included in the source file and fixes to address the vulnerabilities are identified to enable a software developer to apply the fixes to the identified vulnerabilities.

The invention discloses a multi-level key dispersion method supporting tunnel electromechanical system cross-domain interoperation. The method comprises the steps that a trusted center generates a non-singular elliptic curve parameter, a system main private key and a system public key and then issues a public parameter; safely distributing to the tunnel electromechanical equipment through the tunnel management center; the tunnel electromechanical equipment combines a traceable identifier, a provincial domain identifier, a city domain identifier and a tunnel identifier to construct a dispersion factor; based on a dispersion factor, a part of private keys and a self-selected private key of the equipment, a unique session key and an authentication key are derived through a national cryptographic hash function to realize strong binding between the key and the physical position and management attribution of the equipment; according to the method, the device key is strongly bound with the physical position and the management attribution of the device key through the hash function, the problems of identity mutual trust and risk isolation in cross-domain interoperation are solved, the calculation and communication overhead of resource-limited industrial devices is reduced, and the problem of high-performance security protocol application of embedded devices is solved.

Disclosed are various embodiments for generating and verifying stateful hash-based signatures. A message hash of a message is generated using a cryptographic hash function. Then, the message hash is split into a predefined number of parts of equal size. Next, a value of a signature debt is calculated for each of the predefined number of parts of the message hash. Subsequently, a respective signature part is calculated for each of the predefined number of parts of the message hash by applying the cryptographic hash function to a respective portion of a private key for a number of times equal to the value of the signature debt. Next, the respective signature parts are concatenated to generate a signature for the message.

The systems and methods disclosed herein embed and store traceable watermarks across multiple data modalities including text, image, audio, video, and structured data. The systems and methods disclosed herein receive an input dataset and generate unique watermark patterns for each data modality using cryptographic hash functions applied to dataset identifiers. The watermark patterns include parameters that provide instructions to watermark the input dataset. Watermarking includes modifying discrete data values, relationships, or arrangements within the original dataset at predetermined locations. The watermarked dataset is used to generate a hierarchical fingerprint structure including multiple levels of cryptographic hash identifiers that represent different portions of the data (e.g., at varying granularities). Both the watermark patterns and hierarchical fingerprints are stored in a distributed database accessible through a decentralized network, thus enabling authorized computing devices to verify data provenance and detect potential misappropriation across heterogeneous digital content types.

Described are platforms, systems, media, and methods for providing an accreditation management system (AMS) to validate educational resources by performing content validation operations comprising: applying a cryptographic hash function to educational resources to generate a content validation hash; receiving a data stream from a computing device of a student user engaged with the educational resources; applying the cryptographic hash function to each educational resource to generate a content consumption hash; and comparing the content validation hash to the content consumption hash.

A computing node in a P2P computer network obtaining a media item to be verified, determining a hash value for the media item based on a digital cryptographic hash function, retrieving a plurality of data records associated with the media item from a blockchain based at least in part on the hash value, wherein a data record is generated by a validation node in the decentralized P2P computer network, evaluating the plurality of data records to determine whether the media item has satisfied pre-defined validation criteria, and providing information describing the media item based at least in part on the plurality of data records, wherein the information provides an indication as to whether the media item satisfied the pre-defined validation criteria.

A computing node in a P2P computer network obtaining a media item to be verified, determining a hash value for the media item based on a digital cryptographic hash function, retrieving a plurality of data records associated with the media item from a blockchain based at least in part on the hash value, wherein a data record is generated by a validation node in the decentralized P2P computer network, evaluating the plurality of data records to determine whether the media item has satisfied pre-defined validation criteria, and providing information describing the media item based at least in part on the plurality of data records, wherein the information provides an indication as to whether the media item satisfied the pre-defined validation criteria.

Vector network coding, such as linear network coding, is used to compute a plurality of coded data parts from original data, wherein each coded data part is computed from a cryptographic hash function of a previous coded data part. A recipient of the coded data parts can compute the cryptographic hash functions of the coded data to reproduce a system of linear equations, which can be solved to recover the original data. A cryptographic key that employs a polynomial over a finite field can have polynomial coefficients that comprise a function of vector network coding coefficients.

According to the lightweight Internet of Vehicles identity authentication protocol based on the block chain, the block chain is innovatively built on an urban bus to form a bus end block chain to better adapt to the high-speed movement characteristic of the Internet of Vehicles aiming at the problem that the communication and authentication efficiency of a traditional road side unit is low when the vehicle moves at a high speed. According to the protocol, efficient storage of identity messages, real-time revocation of illegal vehicle identities and dynamic updating of group keys are realized through elliptic curve encryption, a hash function, a regular 30-cellular automaton and a block chain technology. In the authentication process, the vehicle forms a temporary pseudonym by using a hash function and an elliptic curve password and sends an authentication message, and the urban bus reads the information through the block chain to complete authentication, so that the security and unforgeability of the pseudonym are ensured, the authentication efficiency is improved, and the calculation and communication overhead is reduced. In addition, according to the protocol, a group key generation and updating mechanism is designed based on a rule 30-cellular automaton, and the safety and flexibility of the system are further enhanced. The method can effectively solve the problems of single-point failure, data tampering risk, low communication efficiency, inconvenient group key updating and the like of a traditional centralized authentication protocol, and is suitable for a safe interaction scene between the urban bus and the common user vehicle.

Various embodiments are directed to securely generating and managing passwords using a near-field communication (NFC) enabled contactless smart card. For example, a secure password may be generated by generating a random number via a random number generator of the contactless smart card and converting the random number to one or more human-readable characters. In another example, a secure cryptographic hash function of the contactless smart card may generate a hash output value, which may be converted to one or more human-readable characters. The human-readable characters may be used as the secure password or it may be transformed to add more layers of security and complexity.

The invention discloses a privacy protection AI decision making system based on digital signature, comprising a security chip which is internally provided with a cryptographic hash function H and is used for generating an irreversible large Token digital asset package through operation Token = H (ID + Datahash + TrustLevel) according to a user unique identity ID, an original data hash value Datahash and a dynamic trust level TrustLevel; the digital signature management module is used for generating a multi-level digital signature system, binding a digital signature with the multi-dimensional organization information and carrying out digital signature on the large Token digital asset package; the privacy protection module is used for calling the digital signature management module to carry out signature verification and triggering a desensitization program; and the AI large model interaction module is used for receiving the signed and desensitized large Token digital asset package and generating a decision result by utilizing AI analysis capability.

Platforms, systems, media, and methods are described for providing an authentication management system (AMS) to validate an educational resource by performing a content validation operation, the content validation operation including: applying a cryptographic hash function to the educational resource to generate a content validation hash value; receiving a data stream from a computing device of a student user interacting with the educational resource; applying a cryptographic hash function to each educational resource to generate a content consumption hash value; and comparing the content verification hash value with the content consumption hash value.

Devices, networks, systems, methods, and processes for rotating a Media Access Control (MAC) address of a device. A device can negotiate a periodicity for address rotation of the MAC address associated with the device. The device may receive a data frame and generate seed data based on the data frame. The device can also utilize a shared secret key, a cryptographic hash function, and / or a cryptographically secure pseudorandom number generator to generate the seed data. The device can determine timestamp data based on the periodicity or a time of reception of the data frame. The device may utilize a pseudorandom function to determine the MAC address based on the timestamp data and the seed data. The device can generate the MAC address after every rotation cycle. Upon waking up from a power saving mode, the device can synchronize with a network device to generate next MAC address.

The invention relates to the technical field of medical equipment security, and discloses a lightweight multi-factor authentication and key agreement method and system for resource-constrained medical equipment, and the method comprises the steps: carrying out the setting of a main private key and a password hash function of a medical terminal based on a security demand, constructing a terminal secret state based on the terminal identity, the main and private keys and the basic certificate hash function, combining the state binding hash function, performing multi-factor secret state fusion on the medical terminal to obtain a dynamic secret state, and performing bidirectional authentication based on the terminal encryption hash function, performing forward security session key generation and state updating after the authentication is passed to obtain a forward security session key and a forward security terminal secret state, and finally updating the terminal secret state based on a new password input by a user and the state binding hash function to obtain a password binding terminal secret state; according to the invention, the efficiency of lightweight multi-factor authentication and key negotiation oriented to the resource-constrained medical equipment can be improved.

This invention provides a blockchain-encrypted customer service end-to-end traceability management system, belonging to the field of information management; it solves the problem of complex information management; specifically as follows: Information collection module: acquires customer information, and based on this, collects information generated during the customer service process to obtain service information; Information processing module: preprocesses customer and service information, and provides a structured representation of the customer and service information; Encrypted storage module: encrypts customer information, maps service information directly associated with the customer using an encrypted hash function to obtain hash values, constructs logical addresses using these hash values, and connects the service information; Information traceability module: anchors standardized data packets to service operation records using hash values; and detects service information using hash values. This invention reduces the difficulty of information management by using chained storage of service information.

Encryption system with an application-specific integrated circuit (ASIC) which has a permanent memory for the non-volatile storage of the operating system (OS) of a processor and software modules for encrypting the data memory of the processor and which has a hardware-implemented encryption algorithm, characterized in that a security module (SM) is integrated in the ASIC for autonomous booting of the operating system (OS), consisting of: - a symmetric cryptosystem (SK) for processing symmetric keys, - an asymmetric cryptosystem (AK) for the use of public and private keys, - a module for generating cryptographic hash functions (KH), - a module for the secure exchange of keys using hardware-implemented key exchange protocols (SP), - a key storage (SS) for the secure storage of root keys (WS), which are protected by appropriate measures in the physical structures of the ASIC and - a key management system (SMS) for the secure introduction of authenticated-encrypted key packets, and that the security module (SM) communicates with a central processing unit (CPU) via a communication interface (CS1), and that the central processing unit (CPU) communicates with at least one internal storage (IS) and one external storage (ES), as well as with at least one internal persistent storage (IP) and one external persistent storage (EP), such that the operating system (OS) is loaded by a second-stage bootloader (SSB) stored in the external persistent storage (EP), and then the operating system (OS) loads the applications, the second-stage bootloader (SSB) itself being decrypted and loaded by a first-stage bootloader (FSB) stored in the internal persistent storage (IP), and a public key (PUBOS) to verify the operating system (OS).and a symmetric key (KOS) to decrypt the operating system (OS), and that the contents of the internal memory (IS) and the external memory (ES) are decrypted by the security module (SM) during read accesses by the central management unit (CMU) or other modules integrated on the ASIC, and re-encrypted during write accesses by the same.

In some examples, a code file in a development system is selected and the selected code file is segmented, using a parser, to create multiple parsed blocks. A block of the multiple parsed blocks is selected and a cryptographic hash function used to create a block signature that uniquely identifies the selected block. The block signature is compared to multiple signatures of blocks in third-party libraries. The multiple signatures are stored in an index. When the block signature matches one of the multiple signatures of blocks in third-party libraries, the index is used to determine a source file from which the selected block was copied. Vulnerabilities included in the source file and fixes to address the vulnerabilities are identified to enable a software developer to apply the fixes to the identified vulnerabilities.

A device and method provide a visible or audible indication of whether an integrated circuit (IC) is authentic using cryptographic hashes stored on a blockchain. The IC includes a cryptographic mining circuit that creates blocks for storage in the blockchain. Each such block includes the value of a cryptographic hash function applied to a serial number unique to the IC and the hash value most recently stored in the blockchain. The necessary data are communicated between the IC and a blockchain server by an intermediary electronic authentication device, which also receives data from the server that indicate whether the second hash value equals an expected hash value computed by (or provided to) the server. The electronic authentication device accordingly provides a suitable visible or audible message to a user.

The application discloses an open source component bloodline analysis method and system, relates to the technical field of software supply chain security, and comprises the following steps: S1, automatically discovering open source components; S2, analyzing software components; S3, open source component fingerprint analysis; S4, generating an SBOM bill of materials; and S5, open source component bloodline analysis. The application realizes comprehensive tracking of a source code data processing process through a cryptographic hash function and a cosine similarity algorithm. When a component is modified, the component can also be quickly identified through a similarity analysis technology. The platform regularly collects file fingerprint features of common open source components, extracts characteristic values in combination with extracted open source software dependency packages, saves the characteristic values for comparison, identifies tampered code details in a jar package, locates open source component risks, and improves controllability and security management of a software deployment package.

The invention discloses a traceable multi-signature method supporting a distributed aggregator and lightweight setting, which is characterized in that a decentralized signature generation mechanism is realized by adopting a cryptographic method comprising bilinear pairing, a linear homomorphic time lock, a cryptographic hash function and a BLS signature; the method specifically comprises the steps of system initialization, key generation, authorization generation and aggregation, prompt generation, partial signature and verification, authorization verification, signature aggregation, authorization revocation, signature verification and the like. Compared with the prior art, the method has a decentralized key generation mechanism, a distributed aggregator mechanism and a signature accountability function, so that high communication overhead caused by the use of a distributed key generation protocol and a single-point fault possibly caused by excessive dependence on a single aggregator are avoided; and meanwhile, a strong association mechanism between the signer and the final multiple signatures is established, and the signer is responsible for the signature behavior of the signer, so that the problems of low efficiency and high centralization of aggregators caused by dependence on a DKG protocol are effectively solved.

The embodiment of the invention provides a cloud file query method and related equipment, and belongs to the technical field of data query. The method comprises the steps of performing encryption processing on a first service pool and a first total pool through a preset encryption algorithm to obtain a corresponding second service pool and a second total pool; wherein the preset encryption algorithm comprises a reversible coding algorithm; constructing a preset bloom filter through a preset non-encrypted hash function according to the second total pool; comparing and analyzing the second business pool through the preset Bloom filter, and determining a target file identifier; wherein the target file identifier comprises a file identifier which exists in a second service pool and does not exist in a second full-amount pool; performing decryption processing on the target file identifier to obtain a target query result; wherein the decryption processing corresponds to the encryption processing. According to the embodiment of the invention, the efficiency and accuracy of master-free file checking can be effectively improved, and support is provided for performance optimization of cloud storage services.

The invention relates to the technical field of chess and card game cheating prevention, in particular to a chess and card game cheating prevention method and a chess and card game cheating prevention system capable of preventing tampering and verifying shuffling and grabbing. The technical defects existing in existing chess and card game anti-cheating processing are overcome. The method comprises the steps that S1, a server generates a data packet of initial card wall fingerprints; s2, the server distributes the data packet of the initial license wall fingerprint to all participating clients; s3, the client participates in card cutting in a sliding block interaction mode; after the player clicks the stop button, the first sliding block stops, and the corresponding card wall position when the first sliding block stops is recorded as the segmentation position of the current player; s4, reporting by the client and recombining with the server; s5, the position, corresponding to the stop position of the second sliding block, of the tile wall is determined as the initial tile grabbing position; and S6, starting the game. And finally, the determination right of the game state is jointly completed in a player interaction mode, the integrity of the initial state is ensured through a cryptographic hash function, and the tampering prevention and the fundamental cheating prevention are realized in a verifiable manner.

Methods for updating 256-bit cryptographic keys using a cryptographic key update system include the transmission of a first transmission, a second transmission, and a third transmission. The second transmission is a symmetric key encryption using a cipher key consisting of a concatenation of a plurality of parameters and a new cryptographic key.The sender derives the encryption key by transforming an authentication key and a bit sequence of constant values ​​based on a one-way compression function, which is one of the following: a Modification Detection Code 2 (MDC-2) cryptographic hash function with an advanced 128-bit encryption standard (AES-128) as the underlying block cipher, a Modification Detection Code 4 (MDC-4) cryptographic hash function with the advanced 128-bit encryption standard (AES-128) as the underlying block cipher, the Hirose compression function with the advanced 256-bit encryption standard (AES-256) as the underlying block cipher, and a 256-bit hash function.

The invention relates to the technical field of encryption, and provides an SM2-based two-party collaborative anti-dual-authentication signature generation method and system, and the method comprises the steps that a client obtains a public parameter set and a to-be-signed message; based on the to-be-signed message, a first intermediate result is obtained through calculation through a password hash function; calculating to obtain a second intermediate result based on the public parameter set, and outputting the first intermediate result and the second intermediate result; based on the second intermediate result, in combination with the secret share of the server side, after the server side obtains one point of the elliptic curve through calculation, a server side part signature value is obtained through calculation in combination with the first intermediate result; and based on the signature value of the server part and in combination with the secret share of the client, the client calculates to obtain the signature value of the client part, and the two signature values are combined into a final signature value. Under the condition that any one of the devices is maliciously controlled, the overall leakage of the signature key can still be effectively prevented, and the anti-cheating capability is improved.

A method for updating a 256-bit cryptographic key by a cryptographic key update system includes transmitting a first transmission, a second transmission, and a third transmission. The second transmission is symmetric key encryption under a serial key encryption key and a new cryptographic key of a plurality of parameters. The transmitter derives a key encryption key by converting an authentication key and a constant bit string based on a one-way compression function, the one-way compression function is one of the following functions: taking a 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 2 (MDC-2) of a bottom block password, taking the 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 4 (MDC-4) of the bottom block password, and taking a 256-bit advanced encryption standard (AES-256) as a Hirose compression function of the bottom block password; and a 256-bit hash function.

The invention provides a block chain encrypted customer service full-process traceability management system, and belongs to the field of information management. The problem of complex information management is solved; the system specifically comprises an information acquisition module for acquiring customer information, and acquiring information generated in a customer service process based on the customer information to obtain service information; the information processing module is used for carrying out preprocessing operation on the customer information and the service information and carrying out structured representation on the customer information and the service information; the encryption storage module is used for encrypting customer information, mapping service information directly associated with a customer through an encryption hash function to obtain a hash value, constructing a logic address through the hash value, and connecting the service information; the information traceability module is used for anchoring the standardized data packet and the service operation record through a hash value; detecting the service information through the hash value; according to the invention, the service information is subjected to chain storage, so that the difficulty of information management is reduced.

Various embodiments are directed to securely generating and managing passwords using a near-field communication (NFC) enabled contactless smart card. For example, a secure password may be generated by generating a random number via a random number generator of the contactless smart card and converting the random number to one or more human-readable characters. In another example, a secure cryptographic hash function of the contactless smart card may generate a hash output value, which may be converted to one or more human-readable characters. The human-readable characters may be used as the secure password or it may be transformed to add more layers of security and complexity.

Described are platforms, systems, media, and methods for providing an accreditation management system (AMS) to validate educational resources by performing content validation operations comprising: applying a cryptographic hash function to educational resources to generate a content validation hash; receiving a data stream from a computing device of a student user engaged with the educational resources; applying the cryptographic hash function to each educational resource to generate a content consumption hash; and comparing the content validation hash to the content consumption hash.

An apparatus comprises instruction decoding circuitry to decode a cryptographic hash instruction specifying at least one working operand and an input operand; and processing circuitry to perform, in response to decoding of the cryptographic hash instruction, two or more iterations of a cryptographic hash function. Each iteration of the cryptographic hash function comprises determining an updated value for the at least one working operand based on a previous value for the at least one working operand and a respective portion of the input operand selected to be processed in that iteration. The updated value for the at least one working operand in one iteration becoming the previous value for the at least one working operand in a next iteration. In response to decoding of the cryptographic hash instruction, the processing circuitry performs at least two iterations of the cryptographic hash function per processing cycle.

The application discloses a product identity verification method fusing a two-dimensional code and a visual fingerprint, comprising the following steps: obtaining two-dimensional code information of a product to be verified, guiding and collecting a high-definition image of a preset feature anchor area of the product based on an associated digital twin model through AR technology; performing geometric and illumination correction preprocessing on the image, extracting a to-be-verified visual fingerprint vector with local invariance and global depth texture features; combining the vector with the two-dimensional code information and a salt value, generating a to-be-verified composite identity hash value through a cryptographic hash function; comparing the hash value with an original hash value pre-stored on a distributed ledger, if the hash values are inconsistent, calculating the similarity between the to-be-verified visual fingerprint and an original visual fingerprint through a twin neural network, and performing auxiliary verification; the application realizes high-security and convenient product identity authentication by strongly binding an external two-dimensional code and internal physical features of a product, and adopts a cascade verification strategy, and effectively prevents counterfeiting.