132 results about "Cryptographic key generation" patented technology

In one embodiment, a method includes accessing transaction data associated with a protected first function of a first blockchain transaction protocol by a cybersecurity authentication service of a blockchain cybersecurity platform, accessing a transaction protocol runbook comprising preconfigured conditions associated with the protected first function, determining that the protected first function is eligible to be analyzed by an automated decisional logic module based on the transaction protocol runbook, determining each preconfigured condition is satisfied based on the transaction data by the automated decisional logic module, generating an authentication object for the protected first function, generating signed transaction data based on the accessed transaction data and a private encryption key, wherein the signed transaction data is configured to update a second blockchain transaction protocol to indicate that the protected first function is authenticated, and transmitting a transaction bundle comprising the accessed transaction data and the signed transaction data.

Presented herein are systems and methods of generating security-aware tokens. A token may include (i) a first signature encrypted by the second service and (ii) an identification of the plurality of databases accessible using the first token. When a processor determines that the token is valid, the processor may generate a second signature using an encryption key of the first service and a third signature using the shared key of the second service. Thereby a second token derivative of the first token can be created to include (i) the second signature of the first service, (ii) the third signature generated from the shared key of the second service, and (iii) the identification of the plurality of databases accessible using the second token.

Systems and techniques for secure communications and distribution of random values for cryptographic key generation, coordinated with the use of specific key generation parameters, are described. An example method includes: receiving a first random value and a second random value generated from at least one quantum random number generator (QRNG), with at least one of the first random value and the second random value being provided from a satellite communication; obtaining key generation parameters associated with cryptographic key generation, where the key generation parameters specify a specific combination of the first random value and the second random value; and generating a cryptographic key, using the specific combination of the first random value and the second random value, as a seed to a cryptographic function.

Methods and systems described herein may implement blockchain asset authentication. A verification system may generate an encryption key associated with a digital asset, wherein the digital asset is associated with a first entity. The verification system may sign the digital asset using the encryption key. The verification system may generate a first key and a second key based on the encryption key, wherein the first key and the second key are part of a set of multi-party secret keys. The verification system may send the first key to the first entity and store the second key on the verification system. The verification system may receive a request to authenticate the digital asset. The verification system may in response to the request to authenticate, generate the encryption key based on the first key and the second key. The verification system may authenticate the digital asset based on the recreated first secret.

There is provided a system, method, and computing device for distribution of cryptographic key generation data in a secure network, the secure network comprising a security server and one or more clients. The method including: receiving or generating indexed random data; communicating at least a portion of the indexed random data to one of the clients; and receiving or communicating the indices of the portions of the indexed random data shared with the client, a portion of the indexed random data is used for cryptographic key generation for encrypted communication between the client and another client. In some cases, the above is repeated for each client, wherein the indexed random data is unique for each client.

The invention discloses an encryption and decryption method, system, device and equipment and a storage medium, and relates to the technical field of data security of a storage system.The encryption and decryption method comprises the steps that a system password is received through an RAID controller, a derived password is generated in combination with a pre-stored random number salt value and an encryption key, and the derived password is sent to the RAID controller; and converting the password into a readable password conforming to the password rule of the self-encryption disk, and encrypting and storing the readable password so as to control the locking or unlocking of the self-encryption disk. According to the method, the salt value and the encryption key are stored in advance, so that the exposure of a plaintext password is avoided, the problems of performance bottleneck and key storage security risk caused by centralized encryption of a traditional RAID controller are solved, meanwhile, the encryption characteristic of the self-encryption disk is utilized, automatic encryption during data storage and automatic locking after power failure are realized, and the security of data storage is improved. The technical effects of reducing the calculation load, improving the key security and guaranteeing the end-to-end encryption of the data storage are achieved, so that RAID redundancy and the security mechanism of the self-encryption disk are deeply combined, and the data protection capability of the whole system is enhanced.

A method of encrypting data, performed by a computer system includes: dividing transmission target data into an arbitrary number of blocks; selecting an encryption key generation target block to be used for extracting an encryption key from among the plurality of divided blocks; generating an encryption key based on the encryption key generation target block; selecting an encryption target block from among remaining blocks excluding the encryption key generation target block; and encrypting the encryption target block based on the generated encryption key.

The invention discloses a data encryption storage method and device of a mobile storage terminal and a storage medium, and relates to the technical field of mobile terminal data encryption storage, and the method comprises the following steps: obtaining to-be-encrypted data, and generating a unique encryption key based on the to-be-encrypted data; performing encryption operation on the text data through the encryption key; performing encryption operation on the image data through the encryption key; generating a key ID based on the storage ciphertext and the encryption key; when a user needs to access the storage ciphertext in the mobile storage terminal, the identity of the user is verified firstly, and after verification is passed, the encryption key is restored through the key ID and the storage ciphertext, and the storage ciphertext is decrypted; the method and the device are used for solving the problems that the encryption key is easy to leak and the encrypted data is further leaked due to insufficient generation and protection means of the encryption key in the existing mobile terminal data encryption storage technology.

A full-link data security protection method and a system are provided. The method includes: at a data creation and collection stage: building a data security identification; at a data transmission and storage stage: dividing the ciphertext file into blocks to generate ciphertext components; calculating a virtual index and a data label; transmitting the ciphertext components to a distributed hash table (DHT) network; uploading a tuple including the virtual index, the data block, and the data label to a cloud server; at a data processing and exchange stage: applying re-encryption based on a re-encryption key generation algorithm; performing decryption to obtain the signed identifier and a secret value; acquiring a tuple having a ciphertext component associated with the virtual index. Attribute-based proxy re-encryption is used to achieve fine-grained access control for the cloud storage. In the data destruction stage, the DHT network automatic updating utility is leveraged to realize data self-destructing.

A method for receiving, by an ambient power (AMP) device that harvests environmental energy, an identification (ID) request frame from a powered wireless device. The ID request frame includes one or more frame-exchange parameters and an authentication and key management (AKM) method. The method includes retrieving, from memory, a secret that is shared with the powered wireless device, determining, using the secret, one or more first AKM parameters, and transmitting, to the powered wireless device, by the AMP device, an ID response frame including an ID of the AMP device, at least one of the one or more frame-exchange parameters and the one or more AKM parameters with which the powered wireless device is to be mutually authenticated with the AMP device and to generate an encryption key to initiate an encrypted wireless communication session.

The invention discloses a wireless audio transmission protocol optimization algorithm for a low-delay dynamic password, which comprises the following steps of: generating an initial encryption key: before audio data transmission starts, generating the initial encryption key according to a current network environment, equipment computing power and audio transmission requirements; the encryption key can be generated based on a timestamp, a random number or a key exchange protocol, the randomness and the safety of the encryption key are ensured, and a proper encryption algorithm is selected: according to equipment computing resources and network conditions, a proper low-delay encryption algorithm is selected. By selecting a low-delay encryption algorithm and dynamically adjusting the encryption complexity, the influence of the encryption process on transmission delay is remarkably reduced, the real-time performance of audio transmission is optimized, the reliability of key synchronization in a wireless network is ensured through a redundant synchronous data packet and a regular key synchronization mechanism, and even if signal loss or interference occurs, the reliability of key synchronization in the wireless network is ensured. And synchronization can be recovered in time, so that decryption failure caused by asynchronous keys is avoided.

The invention discloses a data access method and device, electronic equipment and a storage medium, and is applied to an object storage service protocol client, the method comprises the following steps: obtaining a data processing request, the data processing request carrying a data processing type and a target object key identifier; when the data processing type is a write processing type, encrypting the written to-be-encrypted data according to a target preset data key corresponding to the target object key identifier to obtain a first data ciphertext, and encrypting the target preset data key according to the target object key identifier to obtain a first encryption key; and generating target data according to the first data ciphertext and the first encryption key, and transmitting the target data to a data cache region of an object storage service protocol client, so as to write the target data in the data cache region into a server through an object storage service protocol. According to the embodiment of the invention, the data of the user can be locally encrypted, so that the data owner can completely control the data on the cloud.

The invention discloses a data security flow method based on access control encryption in a cloud edge environment, and belongs to the field of data security flow. The method specifically comprises the following steps: firstly, building a cloud edge environment simulation scene; and the receiving domain authorization mechanism outputs the receiving domain public key and the receiving domain private key. Then, the n sending domain authorization mechanisms jointly execute an algorithm to obtain a sending domain public key and respective authorization keys; each sending domain authorization mechanism independently operates a partial encryption key generation algorithm to obtain a respective partial encryption key, and a sender operates an encryption key aggregation algorithm to obtain an aggregation encryption key. Then, the receiving domain authorization mechanism obtains the decryption key and returns the decryption key to the receiver; a sender uses an aggregation encryption key to encrypt plaintext data m and uploads the encrypted plaintext data m to an edge node, and a purified ciphertext is generated through a purification algorithm and uploaded to a cloud server. And finally, after the user retrieves the purified ciphertext, decrypting the purified ciphertext by using a decryption key to obtain a message m. According to the method, the security circulation requirement of the privacy data in the cloud edge environment is met.

Certain aspects of the disclosure provide a method for performing data verification. The method includes generating a MAC by applying a tagging algorithm indicated by a shared verification key to a data item; appending the MAC to the data item; generating an encrypted dataset comprising an encrypted data item and encrypted message authentication; generating a re-encryption key based on a homomorphic secret key corresponding to the homomorphic public key and a new public key; generating a re-encrypted dataset comprising a re-encrypted data item and a re-encrypted MAC; transmitting the re-encrypted dataset to a first external system configured to perform data verification; receiving, from the first external system, an encrypted verification result based on the shared verification key; and taking an action based on receiving the verification result indicating that the data item is authentic.

To provide a radio communication system and a communication method capable of safely relaying communication between a radio station connected to the Internet network and a radio station connected to a closed network.SOLUTION: The closed area system 11 and the cloud system 21 included in the wireless communication system 1 include a closed area side gateway server 13 and a cloud side gateway server 22. When receiving an authentication request from a radio station 41,42, a closed area side gateway server 13 and a cloud side gateway server 22 store activation information including unique information of the radio station 41,42 and generation information of an encryption key in a storage device 27. Regardless of whether the wireless station 41,42 is connected to the closed network 10 or the Internet network 20, the communication between the wireless station 41,42 and the closed system 11 or the cloud system 21 is protected by the encryption key generated based on the generation information included in the activation information.SELECTED DRAWING: Figure 1

The invention relates to a virtual machine encryption method, which comprises the following encryption steps: S1, an administrator checks and prepares configuration for a server environment in which a to-be-encrypted virtual machine is located, marks each disk partition in the virtual machine, records the disk capacity and the partition format, opens up a cache region in a server memory, and stores the cache region in the server memory; the storage module is used for storing encrypted data and encrypted key information; s2, encryption key generation, wherein a key generation module independently generates a group of unique encryption keys for each virtual machine disk needing to be encrypted; and extracting feature information from a hardware identifier built in the server. According to the method, encryption means is adopted for all disk data, the data are stored on the server in a ciphertext mode, after the virtual machine is encrypted, the data disk cannot be mounted to other virtual machines, after the virtual machine is exported, the data disk cannot be used on other platforms, sensitive data are prevented from being illegally stolen, and personal privacy safety of a user is guaranteed.

The embodiment of the invention provides an information encryption processing method and device, equipment, a medium and a program product, and the method comprises the steps: carrying out the Hash calculation of the obtained user registration information in an information encryption process, obtaining a Hash value, extracting an encryption key and an authentication key from the Hash value, and performing encryption calculation on the user registration information according to a key stream generated based on the initial encryption parameter and the encryption key to obtain ciphertext information, performing encryption calculation based on the ciphertext information and the authentication key to obtain an encryption authentication tag, and storing the ciphertext information and the encryption authentication tag in a preset storage address. And the storage security of the user registration information is improved.

The invention discloses a system for realizing file authorization sharing based on an SM2 proxy re-encryption algorithm, and the system comprises a client module which is used for file encryption, key generation and key exchange between users; the server module is used for storing a file ciphertext and a Capsule and carrying out key conversion; and the encryption algorithm module is used for realizing secret key generation based on SM2, file encryption based on SM4 and Hash calculation of SHA3. The method has the beneficial effects that national commercial password standard algorithms such as SM2, SM4 and the like are fully fused, and data encryption and proxy re-encryption functions in a domestic algorithm environment are realized on the basis of ensuring the system security. As an elliptic curve public key cryptographic algorithm autonomously designed in China, the SM2 algorithm has the characteristics of public algorithm structure, high security, excellent calculation efficiency and the like.

The invention discloses a model file distribution method and device, a storage medium and a processor. In the scheme, a key generation center generates key data of a model owner based on an identifier of the model owner, and generates key data of a model user based on an identifier of the model user; the model owner encrypts the original model file based on the encryption element and the main public key, generates a re-encryption key, and sends the encryption element, the re-encryption key and the encrypted model file to the key agent center; the key agent center generates a re-encryption ciphertext based on the encryption element and the re-encryption key, and sends the re-encryption ciphertext and the encrypted model file to a model user; and the model user decrypts the encrypted model file based on the key data of the model user, the re-encrypted ciphertext and the main public key to obtain an original model file. Compared with the problems of poor security and low encryption and decryption efficiency in the model file distribution process, the method has obvious advantages.

A method includes building a firmware image to execute on a bootloader of a system on chip (SoC), the firmware image including first encryption public and private keys, and digitally signing the firmware image with a second encryption private key. The signed firmware image is encrypted with a symmetric encryption key, which in turn is encrypted with a second encryption public key. The encrypted signed firmware image and the encrypted symmetric encryption key are sent to the SoC to cause the SoC to (1) decrypt the encrypted symmetric encryption key to produce the symmetric encryption key using a third encryption private key from a first asymmetric key pair, (2) decrypt the encrypted signed firmware image to produce the signed firmware image using the symmetric encryption key, and (3) verify a digital signature of the signed firmware image using a third encryption public key from a second asymmetric key pair.

The application discloses a kind of based on thumbnail encryption image's authenticatable user end watermark method, belong to computer security technical field. Including: image pre-processing, image encryption, key generation and distribution, decryption and watermark embedding, tamper detection and positioning, tamper content recovery, extract watermark lock user identity.The present application is based on the holographic redundancy embedding of thumbnail and the fine authentication based on parity check, with very strong anti-shearing and self-healing ability;Using the disturbance of pair of pixel difference value, all image pixels can be embedded watermark, and the security blind area is eliminated;Encrypted image has clear identifiable thumbnail, and is highly similar to plaintext, which is convenient for cloud management, and the details privacy is effectively protected through high-frequency information confusion;Encryption and watermark embedding are fused in bottom algebra operation, and the calculation efficiency is high.

Data Protection The present description relates to a method comprising:a) receiving, by an electronic device, a software module of a first application, the software module comprising a public key associated with the first application;b) generating, by a cryptographic circuit of the electronic device, an encryption key based on a secret key of the electronic device and one of: the public key and an identification value derived from the public key;c) generating one or more protected data by applying a cryptographic operation, by the cryptographic circuit, to one or more first data associated with the first application and based on the encryption key; andd) storing the one or more protected data in a first part of a memory of the electronic device. Figure for abstract: Fig. 3

The present invention relates to an autoencoder-based encryption key generation technique, and more particularly, to a signal transmission apparatus, a signal reception apparatus, a signal transmission method, and a signal reception method in an autoencoder-based encryption key generation system, wherein an encryption key with enhanced security may be generated on the basis of an autoencoder.

A method includes obtaining a plurality of representative vectors associated with face-related data. The method includes determining an encryption key based on a parameter stored in a record, generating an encrypted vector set by, for each respective vector of the plurality of representative vectors, encrypting the respective vector with a homomorphic encryption operation based on the encryption key, where the encrypted vector set includes a first encrypted vector that is linked to a subset of the face-related data associated with the first plurality of face vectors. The method further includes obtaining an encrypted face search vector using the encryption key to perform homomorphic encryption. The method further includes selecting a first encrypted vector based on the encrypted face search vector and retrieving the subset of the face-related data based on the first encrypted vector.

The invention relates to peer-to-peer network interconnects with application level interfaces for supporting provenance attestation nodes. Secure peer-to-peer networks are implemented with computing devices through non-secure network connections. Each computing device may include provenance attestation hardware or be coupled with provenance attestation hardware. The provenance attestation hardware may be validated by public available data, such as a trusted server. Furthermore, provenance attestation hardware may facilitate encryption key generation to facilitate encryption of communications at the computing device to ensure security of such communications over the non-secure network connection. The provenance proof hardware may include hardware acceleration circuitry to provide network services, such as cryptocurrency transactions, blockchain verification computations, even blockchain services integrating smart contracts, token exchange, survey services utilizing provenance proof data, distributed data backup, distributed computations, etc.

An encryption device (400) uses a first internal public key and a first external public key to double-encrypt plaintext and generate ciphertext. A re-encryption key generation device (500) generates a randomized internal secret key using a second random number and a first internal secret key, generates a second encrypted random number using a second internal public key, generates a randomized external secret key using a first random number and a first external secret key, and generates a first encrypted random number using a second external public key. A re-encryption device (600) generates re-encrypted text using the randomized external secret key, the randomized internal secret key, the second internal public key, the second external public key, and the ciphertext. A decoding device (700) calculates the plaintext by using the second internal secret key, the second encrypted random number, the second external secret key, the first encrypted random number, and the re-encrypted text.

The invention discloses a deniable storage method and system with multi-snapshot security. The method comprises the following steps: generating system public parameters according to security parameters; inputting a password of a secure deletion system to initialize the first master key; inputting a password of the hidden storage system to initialize a second master key; the disk state of the PPRF is stored through a tree structure, and a first key tree is generated; encrypting and storing encryption keys of all files to generate a first file key table; constructing a storage space of the deniable storage system; writing / updating, reading and deleting the public file; and writing, updating and deleting the hidden data. According to the method, normal file change in the snapshot period has multi-snapshot security; the hidden space and the public space can be freely switched, and compared with an existing deniable storage system with multi-snapshot safety, the capacity can be increased by 50 times at most; and the hidden space is completely encrypted by using the master key in the TPM module, so that a powerful guarantee is provided for the security of the hidden space.

To easily implement CRYSTALS Dilithium, which is one quantum-resistant encryption, even in a secure element with a poor capacity of a storage memory.SOLUTION: A secure element 1 comprises: a storage memory 11 for storing a secret seed ζ, and a cryptographic key generation unit 10 for generating a secret key sk based on the secret seed ζ stored in the storage memory 11, according to a key generation algorithm that generates the secret key sk for quantum-safe encryption (CRYSTALS Dilithium) from a polynomial ring matrix A based on the secret seed ζ.SELECTED DRAWING: Figure 1

Disclosed embodiments relate to systems and methods for securely storing a secret. Techniques include accessing a secret associated with a network identity and generating a primary encryption key for encrypting the secret. Generating the primary encryption key includes: accessing a first encryption key associated with the network identity, accessing a second encryption key stored in a process memory location associated with a machine of the network identity, and applying a primary key hash function to the first encryption key and the second encryption key to generate the primary encryption key. Techniques further include encrypting the secret using the primary encryption key to generate an encrypted secret; obfuscating the encrypted secret to generate an obfuscated encrypted secret; and storing the obfuscated encrypted secret in a secured storage location associated with the machine of network identity.

A method for receiving, by an ambient power (AMP) device that harvests ambient energy, an identification (ID) request frame from a powered wireless device. The ID request frame includes one or more frame exchange parameters and an authentication and key management (AKM) method.The method includes retrieving, from a memory, a secret shared with the powered wireless device, determining, using the secret, one or more first AKM parameters and transmitting, by the AMP device, to the powered wireless device, an ID response frame comprising an ID of the AMP device, at least one of the one or more frame exchange parameters, and the one or more AKM parameters with which the powered wireless device and the AMP device are to be authenticated to each other, and generating an encryption key to initiate an encrypted wireless communication session.