181 results about "Cryptographic key generation" patented technology

In one embodiment, a method includes accessing transaction data associated with a protected first function of a first blockchain transaction protocol by a cybersecurity authentication service of a blockchain cybersecurity platform, accessing a transaction protocol runbook comprising preconfigured conditions associated with the protected first function, determining that the protected first function is eligible to be analyzed by an automated decisional logic module based on the transaction protocol runbook, determining each preconfigured condition is satisfied based on the transaction data by the automated decisional logic module, generating an authentication object for the protected first function, generating signed transaction data based on the accessed transaction data and a private encryption key, wherein the signed transaction data is configured to update a second blockchain transaction protocol to indicate that the protected first function is authenticated, and transmitting a transaction bundle comprising the accessed transaction data and the signed transaction data.

Presented herein are systems and methods of generating security-aware tokens. A token may include (i) a first signature encrypted by the second service and (ii) an identification of the plurality of databases accessible using the first token. When a processor determines that the token is valid, the processor may generate a second signature using an encryption key of the first service and a third signature using the shared key of the second service. Thereby a second token derivative of the first token can be created to include (i) the second signature of the first service, (ii) the third signature generated from the shared key of the second service, and (iii) the identification of the plurality of databases accessible using the second token.

Systems and techniques for secure communications and distribution of random values for cryptographic key generation, coordinated with the use of specific key generation parameters, are described. An example method includes: receiving a first random value and a second random value generated from at least one quantum random number generator (QRNG), with at least one of the first random value and the second random value being provided from a satellite communication; obtaining key generation parameters associated with cryptographic key generation, where the key generation parameters specify a specific combination of the first random value and the second random value; and generating a cryptographic key, using the specific combination of the first random value and the second random value, as a seed to a cryptographic function.

Methods and systems described herein may implement blockchain asset authentication. A verification system may generate an encryption key associated with a digital asset, wherein the digital asset is associated with a first entity. The verification system may sign the digital asset using the encryption key. The verification system may generate a first key and a second key based on the encryption key, wherein the first key and the second key are part of a set of multi-party secret keys. The verification system may send the first key to the first entity and store the second key on the verification system. The verification system may receive a request to authenticate the digital asset. The verification system may in response to the request to authenticate, generate the encryption key based on the first key and the second key. The verification system may authenticate the digital asset based on the recreated first secret.

The invention discloses a chip verification method and device, equipment and a storage medium. The method comprises the following steps: generating an encryption key according to a chip identifier through a back-end authenticity verification system, sending the encryption key to a tag acquisition end, and writing the encryption key into a chip through the tag acquisition end; obtaining verification data generated by the chip according to the encryption key through the label acquisition end, and sending the verification data to a back-end authenticity verification system; and the verification data is decrypted and verified through the back-end counterfeit verification system, and a verification result is fed back to the label acquisition end. The encryption key is generated according to the chip identifier through the back-end authenticity verification system, so that the uniqueness of the key can be ensured. The verification data generated by the chip according to the encryption key is acquired through the tag acquisition end and sent to the back-end authenticity verification system, the chip encryption effect can be detected in the acquisition link, normal operation of the chip encryption function is ensured, and the security and reliability of the chip in the radio frequency identification system are improved through decryption verification of the back-end authenticity verification system.

There is provided a system, method, and computing device for distribution of cryptographic key generation data in a secure network, the secure network comprising a security server and one or more clients. The method including: receiving or generating indexed random data; communicating at least a portion of the indexed random data to one of the clients; and receiving or communicating the indices of the portions of the indexed random data shared with the client, a portion of the indexed random data is used for cryptographic key generation for encrypted communication between the client and another client. In some cases, the above is repeated for each client, wherein the indexed random data is unique for each client.

The invention discloses an encryption and decryption method, system, device and equipment and a storage medium, and relates to the technical field of data security of a storage system.The encryption and decryption method comprises the steps that a system password is received through an RAID controller, a derived password is generated in combination with a pre-stored random number salt value and an encryption key, and the derived password is sent to the RAID controller; and converting the password into a readable password conforming to the password rule of the self-encryption disk, and encrypting and storing the readable password so as to control the locking or unlocking of the self-encryption disk. According to the method, the salt value and the encryption key are stored in advance, so that the exposure of a plaintext password is avoided, the problems of performance bottleneck and key storage security risk caused by centralized encryption of a traditional RAID controller are solved, meanwhile, the encryption characteristic of the self-encryption disk is utilized, automatic encryption during data storage and automatic locking after power failure are realized, and the security of data storage is improved. The technical effects of reducing the calculation load, improving the key security and guaranteeing the end-to-end encryption of the data storage are achieved, so that RAID redundancy and the security mechanism of the self-encryption disk are deeply combined, and the data protection capability of the whole system is enhanced.

A method of encrypting data, performed by a computer system includes: dividing transmission target data into an arbitrary number of blocks; selecting an encryption key generation target block to be used for extracting an encryption key from among the plurality of divided blocks; generating an encryption key based on the encryption key generation target block; selecting an encryption target block from among remaining blocks excluding the encryption key generation target block; and encrypting the encryption target block based on the generated encryption key.

The invention discloses a data encryption storage method and device of a mobile storage terminal and a storage medium, and relates to the technical field of mobile terminal data encryption storage, and the method comprises the following steps: obtaining to-be-encrypted data, and generating a unique encryption key based on the to-be-encrypted data; performing encryption operation on the text data through the encryption key; performing encryption operation on the image data through the encryption key; generating a key ID based on the storage ciphertext and the encryption key; when a user needs to access the storage ciphertext in the mobile storage terminal, the identity of the user is verified firstly, and after verification is passed, the encryption key is restored through the key ID and the storage ciphertext, and the storage ciphertext is decrypted; the method and the device are used for solving the problems that the encryption key is easy to leak and the encrypted data is further leaked due to insufficient generation and protection means of the encryption key in the existing mobile terminal data encryption storage technology.

A full-link data security protection method and a system are provided. The method includes: at a data creation and collection stage: building a data security identification; at a data transmission and storage stage: dividing the ciphertext file into blocks to generate ciphertext components; calculating a virtual index and a data label; transmitting the ciphertext components to a distributed hash table (DHT) network; uploading a tuple including the virtual index, the data block, and the data label to a cloud server; at a data processing and exchange stage: applying re-encryption based on a re-encryption key generation algorithm; performing decryption to obtain the signed identifier and a secret value; acquiring a tuple having a ciphertext component associated with the virtual index. Attribute-based proxy re-encryption is used to achieve fine-grained access control for the cloud storage. In the data destruction stage, the DHT network automatic updating utility is leveraged to realize data self-destructing.

A method for receiving, by an ambient power (AMP) device that harvests environmental energy, an identification (ID) request frame from a powered wireless device. The ID request frame includes one or more frame-exchange parameters and an authentication and key management (AKM) method. The method includes retrieving, from memory, a secret that is shared with the powered wireless device, determining, using the secret, one or more first AKM parameters, and transmitting, to the powered wireless device, by the AMP device, an ID response frame including an ID of the AMP device, at least one of the one or more frame-exchange parameters and the one or more AKM parameters with which the powered wireless device is to be mutually authenticated with the AMP device and to generate an encryption key to initiate an encrypted wireless communication session.

A first device transmits a first random number to a second device through a first quantum channel, and receives a second random number from the second device through a second quantum channel. The first device generates a first encryption key based on the first random number and the second random number. The second device transmits the second random number to the first device through the second quantum channel, and receives the first random number from the first device through the first quantum channel. The second device generates a second encryption key based on the first random number and the second random number.

The invention discloses a wireless audio transmission protocol optimization algorithm for a low-delay dynamic password, which comprises the following steps of: generating an initial encryption key: before audio data transmission starts, generating the initial encryption key according to a current network environment, equipment computing power and audio transmission requirements; the encryption key can be generated based on a timestamp, a random number or a key exchange protocol, the randomness and the safety of the encryption key are ensured, and a proper encryption algorithm is selected: according to equipment computing resources and network conditions, a proper low-delay encryption algorithm is selected. By selecting a low-delay encryption algorithm and dynamically adjusting the encryption complexity, the influence of the encryption process on transmission delay is remarkably reduced, the real-time performance of audio transmission is optimized, the reliability of key synchronization in a wireless network is ensured through a redundant synchronous data packet and a regular key synchronization mechanism, and even if signal loss or interference occurs, the reliability of key synchronization in the wireless network is ensured. And synchronization can be recovered in time, so that decryption failure caused by asynchronous keys is avoided.

The invention discloses a data access method and device, electronic equipment and a storage medium, and is applied to an object storage service protocol client, the method comprises the following steps: obtaining a data processing request, the data processing request carrying a data processing type and a target object key identifier; when the data processing type is a write processing type, encrypting the written to-be-encrypted data according to a target preset data key corresponding to the target object key identifier to obtain a first data ciphertext, and encrypting the target preset data key according to the target object key identifier to obtain a first encryption key; and generating target data according to the first data ciphertext and the first encryption key, and transmitting the target data to a data cache region of an object storage service protocol client, so as to write the target data in the data cache region into a server through an object storage service protocol. According to the embodiment of the invention, the data of the user can be locally encrypted, so that the data owner can completely control the data on the cloud.

The invention discloses a data security flow method based on access control encryption in a cloud edge environment, and belongs to the field of data security flow. The method specifically comprises the following steps: firstly, building a cloud edge environment simulation scene; and the receiving domain authorization mechanism outputs the receiving domain public key and the receiving domain private key. Then, the n sending domain authorization mechanisms jointly execute an algorithm to obtain a sending domain public key and respective authorization keys; each sending domain authorization mechanism independently operates a partial encryption key generation algorithm to obtain a respective partial encryption key, and a sender operates an encryption key aggregation algorithm to obtain an aggregation encryption key. Then, the receiving domain authorization mechanism obtains the decryption key and returns the decryption key to the receiver; a sender uses an aggregation encryption key to encrypt plaintext data m and uploads the encrypted plaintext data m to an edge node, and a purified ciphertext is generated through a purification algorithm and uploaded to a cloud server. And finally, after the user retrieves the purified ciphertext, decrypting the purified ciphertext by using a decryption key to obtain a message m. According to the method, the security circulation requirement of the privacy data in the cloud edge environment is met.

The invention discloses a security control method and system for network information communication data elements, which comprises the steps of data feature extraction, feature processing, feature value calculation, feature value fusion, encryption key generation, data encryption, data transmission and data decryption, and relates to the technical field of security communication. According to the security control method for the network information communication data elements, multiple features of the network information communication data are extracted, preprocessed and subjected to feature value calculation, the multiple feature values are fused to generate the encryption key, and then the AES algorithm is used for carrying out encryption transmission on the data, so that the security of the data in the network transmission process is greatly improved, and the security of the data in the network transmission process is improved. The risk that the data is stolen, tampered or leaked is reduced; the data features are processed and calculated according to the preset algorithm formula, the encryption key with uniqueness and high security is generated, the encryption process is rigorous and scientific, and the reliability and stability of encryption are ensured.

Certain aspects of the disclosure provide a method for performing data verification. The method includes generating a MAC by applying a tagging algorithm indicated by a shared verification key to a data item; appending the MAC to the data item; generating an encrypted dataset comprising an encrypted data item and encrypted message authentication; generating a re-encryption key based on a homomorphic secret key corresponding to the homomorphic public key and a new public key; generating a re-encrypted dataset comprising a re-encrypted data item and a re-encrypted MAC; transmitting the re-encrypted dataset to a first external system configured to perform data verification; receiving, from the first external system, an encrypted verification result based on the shared verification key; and taking an action based on receiving the verification result indicating that the data item is authentic.

A low bandwidth homomorphic encryption (HE) key generation method, a homomorphic encryption (HE) system, and a computer program product. One embodiment of the method comprises generating, at a principal instance of an organization unit, a principal HE key set; generating a department HE key set for each of a plurality of departments in the organization unit; transmitting a principal public key, a principal evaluation key, and a plurality of principal rotation keys to a data processor; transmitting at least one department public key, and department key switching keys to the data processor; and transmitting an encrypted data file to be processed at least in part using a department rotation key generated at the data processor.

To provide a radio communication system and a communication method capable of safely relaying communication between a radio station connected to the Internet network and a radio station connected to a closed network.SOLUTION: The closed area system 11 and the cloud system 21 included in the wireless communication system 1 include a closed area side gateway server 13 and a cloud side gateway server 22. When receiving an authentication request from a radio station 41,42, a closed area side gateway server 13 and a cloud side gateway server 22 store activation information including unique information of the radio station 41,42 and generation information of an encryption key in a storage device 27. Regardless of whether the wireless station 41,42 is connected to the closed network 10 or the Internet network 20, the communication between the wireless station 41,42 and the closed system 11 or the cloud system 21 is protected by the encryption key generated based on the generation information included in the activation information.SELECTED DRAWING: Figure 1

The invention provides a file signature method, verification method and device based on an anti-counterfeiting image, and relates to the technical field of computers. The file signature method based on the anti-counterfeiting image comprises the following steps: performing hash processing on a to-be-signed file to obtain a hash value of the to-be-signed file; encrypting the hash value based on the symmetric encryption key to obtain an encrypted hash value; based on the first asymmetric encryption public key, encrypting the symmetric encryption key to obtain an encryption key; generating an anti-counterfeiting image based on the encrypted hash value and the encryption key; and embedding the anti-counterfeiting image into the to-be-signed file. According to the file signature method, verification method and device based on the anti-fake image, the anti-fake and tamper-proof capabilities of the file are improved, and the anti-fake performance of the file can be further improved while normal display and transmission of the file are not affected.

The invention discloses a data encryption method and system based on multi-stage processing, and relates to the technical field of data encryption, and the method comprises the steps: determining stages of multi-stage parallel processing; the stages comprise a data classification stage, a key management and distribution stage and an encryption execution stage; in the data classification stage, data are analyzed, and the data are classified into sensitive blocks and non-sensitive blocks; in the key management and distribution stage, a corresponding encryption key is selected according to the sensitivity of data; in the encryption execution stage, encrypted data are generated according to different encryption keys. According to the method, the data processing efficiency is greatly improved through parallel processing of multiple stages, and the method is suitable for processing large-scale data sets. The dynamic key management strategy enhances the security and flexibility of the system, allows real-time generation and distribution of keys according to data sensitivity, and effectively protects various security threats. And the integrated homomorphic encryption technology enables the encrypted data to be directly subjected to complex operation, so that the use scene of the encrypted data is expanded, and meanwhile, the data privacy is protected.

An encryption key generating method and apparatus based on homomorphic encryption, and a ciphertext operation method and apparatus using the generated encrypt key are disclosed. The method of generating an encryption key for performing encryption based on homomorphic encryption includes receiving data, generating a first encryption key and a second encryption key used for encrypting the data based on a secret key, and transmitting the first and second encryption keys.

The invention relates to a virtual machine encryption method, which comprises the following encryption steps: S1, an administrator checks and prepares configuration for a server environment in which a to-be-encrypted virtual machine is located, marks each disk partition in the virtual machine, records the disk capacity and the partition format, opens up a cache region in a server memory, and stores the cache region in the server memory; the storage module is used for storing encrypted data and encrypted key information; s2, encryption key generation, wherein a key generation module independently generates a group of unique encryption keys for each virtual machine disk needing to be encrypted; and extracting feature information from a hardware identifier built in the server. According to the method, encryption means is adopted for all disk data, the data are stored on the server in a ciphertext mode, after the virtual machine is encrypted, the data disk cannot be mounted to other virtual machines, after the virtual machine is exported, the data disk cannot be used on other platforms, sensitive data are prevented from being illegally stolen, and personal privacy safety of a user is guaranteed.

Mutual authentication and encryption key generation for secure wireless communication between an implantable medical device and an external device employs asymmetric cryptography. A method of conducting secure wireless communication between an implantable medical device and an external device includes conducting a mutual authentication procedure that employs asymmetric cryptography via wireless communication between the implantable medical device and the external device. A shared encryption key is generated by the external device. The shared encryption key is generated by the implantable medical device. Wireless communication is conducted between the implantable medical device and the external device via wireless transmissions encrypted via the shared encryption key.

The present disclosure relates to deriving cryptographic keys for use in encrypting data based on a plaintext to be encrypted. An example method generally includes receiving, from a querying device, a request for a cryptographic key. The request generally includes data derived from a plaintext value to be encrypted and an indication of a type of the plaintext value to be encrypted. A cryptographic key is generated based, at least in part, on the derived data and the type of the plaintext value to be encrypted. The key deriver transmits the generated cryptographic key to the querying device.

The embodiment of the invention provides an information encryption processing method and device, equipment, a medium and a program product, and the method comprises the steps: carrying out the Hash calculation of the obtained user registration information in an information encryption process, obtaining a Hash value, extracting an encryption key and an authentication key from the Hash value, and performing encryption calculation on the user registration information according to a key stream generated based on the initial encryption parameter and the encryption key to obtain ciphertext information, performing encryption calculation based on the ciphertext information and the authentication key to obtain an encryption authentication tag, and storing the ciphertext information and the encryption authentication tag in a preset storage address. And the storage security of the user registration information is improved.

The invention discloses a system for realizing file authorization sharing based on an SM2 proxy re-encryption algorithm, and the system comprises a client module which is used for file encryption, key generation and key exchange between users; the server module is used for storing a file ciphertext and a Capsule and carrying out key conversion; and the encryption algorithm module is used for realizing secret key generation based on SM2, file encryption based on SM4 and Hash calculation of SHA3. The method has the beneficial effects that national commercial password standard algorithms such as SM2, SM4 and the like are fully fused, and data encryption and proxy re-encryption functions in a domestic algorithm environment are realized on the basis of ensuring the system security. As an elliptic curve public key cryptographic algorithm autonomously designed in China, the SM2 algorithm has the characteristics of public algorithm structure, high security, excellent calculation efficiency and the like.

The invention discloses a model file distribution method and device, a storage medium and a processor. In the scheme, a key generation center generates key data of a model owner based on an identifier of the model owner, and generates key data of a model user based on an identifier of the model user; the model owner encrypts the original model file based on the encryption element and the main public key, generates a re-encryption key, and sends the encryption element, the re-encryption key and the encrypted model file to the key agent center; the key agent center generates a re-encryption ciphertext based on the encryption element and the re-encryption key, and sends the re-encryption ciphertext and the encrypted model file to a model user; and the model user decrypts the encrypted model file based on the key data of the model user, the re-encrypted ciphertext and the main public key to obtain an original model file. Compared with the problems of poor security and low encryption and decryption efficiency in the model file distribution process, the method has obvious advantages.

A method includes building a firmware image to execute on a bootloader of a system on chip (SoC), the firmware image including first encryption public and private keys, and digitally signing the firmware image with a second encryption private key. The signed firmware image is encrypted with a symmetric encryption key, which in turn is encrypted with a second encryption public key. The encrypted signed firmware image and the encrypted symmetric encryption key are sent to the SoC to cause the SoC to (1) decrypt the encrypted symmetric encryption key to produce the symmetric encryption key using a third encryption private key from a first asymmetric key pair, (2) decrypt the encrypted signed firmware image to produce the signed firmware image using the symmetric encryption key, and (3) verify a digital signature of the signed firmware image using a third encryption public key from a second asymmetric key pair.

The application discloses a kind of based on thumbnail encryption image's authenticatable user end watermark method, belong to computer security technical field. Including: image pre-processing, image encryption, key generation and distribution, decryption and watermark embedding, tamper detection and positioning, tamper content recovery, extract watermark lock user identity.The present application is based on the holographic redundancy embedding of thumbnail and the fine authentication based on parity check, with very strong anti-shearing and self-healing ability;Using the disturbance of pair of pixel difference value, all image pixels can be embedded watermark, and the security blind area is eliminated;Encrypted image has clear identifiable thumbnail, and is highly similar to plaintext, which is convenient for cloud management, and the details privacy is effectively protected through high-frequency information confusion;Encryption and watermark embedding are fused in bottom algebra operation, and the calculation efficiency is high.