28 results about "Cryptographic nonce" patented technology

The invention relates to a resource-constrained unmanned aerial vehicle cluster network data privacy protection method, which comprises the following steps of: establishing a mathematical model, and describing by using an undirected graph; the method comprises the following steps of: randomly generating two different system security parameter bit big prime numbers by each unmanned aerial vehicle in a cluster according to a preset system security parameter; calculating a public key and a private key according to a Paillier key generation algorithm, and encrypting the public key and the private key; and the unmanned aerial vehicles calculate homomorphic products of the encrypted random numbers sent by all neighbors, decrypt the homomorphic products by using own private keys, calculate offset initial position coordinates and control input according to decryption results, and repeatedly execute until all the unmanned aerial vehicles in the cluster converge to the same position. The problem that an unmanned aerial vehicle cluster network data privacy protection method is difficult to effectively balance in the aspects of resource efficiency, privacy security and accurate convergence is solved, the privacy of the initial position of the unmanned aerial vehicle is effectively protected, and the accuracy of task execution and the strong anti-eavesdropping capability are ensured.

The embodiment of the application provides a kind of data encryption transmission method and device, electronic equipment and storage medium, belong to data encryption technical field, apply in the field of financial technology.The method comprises: obtaining original data, first encryption prime number, second encryption prime number and iteration parameter;According to the operation of first encryption prime number and second encryption prime number, obtain encryption modulus and eular modulus;Original data is encrypted based on encryption modulus, eular modulus, iteration parameter and preset encryption base, to obtain target time lock encryption data;According to preset symmetric encryption random number, preset asymmetric encryption public key, encryption modulus, encryption base and iteration parameter, target time lock encryption data is encrypted, to obtain target transmission data;Target transmission data is transmitted to data receiving end, to make data receiving end to target transmission data data decryption, to obtain original data.The embodiment of the application can ensure the security of data delay disclosure and data transmission.

The application relates to a data sharing method and device of a vehicle, electronic equipment and a storage medium, wherein the method comprises the following steps: in response to a data sharing instruction, a preset sharing random number of the vehicle is acquired, and a first random number of the vehicle is generated; a preset sharing random number is calculated by using a hash function to obtain a temporary key, and the first random number is encrypted by using the temporary key to obtain a first encrypted random number; a corresponding sharing ciphertext is generated by combining the first encrypted random number, a current time, a data integrity check value of the vehicle and a registration identification mark of the vehicle, and the sharing ciphertext is sent to a sharing end; after the sharing ciphertext is verified at the sharing end, an encrypted session generated by a second random number of the sharing end is received; the encrypted session is verified, and in the case that the encrypted session is verified to be qualified, the to-be-transmitted data of the vehicle is shared to the sharing end. Therefore, the technical problem that in the related art, it is difficult to avoid illegal means, the user's privacy information is called without user authorization, and there is a great security risk is solved.

A data encryption method, a data decryption method and device, a storage medium and a terminal, the data encryption method comprising: when there is data to be written, generating a random number corresponding to the data to be written; obtaining a data encryption key according to a pre-stored original encryption key, the random number and first address information, and encrypting the data to be written using the data encryption key to obtain encrypted data, wherein the first address information is one of a data to be written address and a random number address; obtaining a random number encryption key based on the original encryption key, and encrypting the random number using the random number encryption key to obtain an encrypted random number; and performing a write operation on the encrypted data and the encrypted random number. The above scheme can improve data security.

An information verification method, applied to a terminal, and comprising: generating a random number, and encrypting same on the basis of a post-quantum public key to determine an encrypted random number; determining a session key on the basis of a first shared key and the random number, wherein the first shared key is determined on the basis of a server public key and a terminal public key; determining encrypted signaling data on the basis of the session key and the signaling data; and sending a signaling packet to a server, so that the server verifies the signaling packet, wherein the signaling packet comprises the encrypted signaling data and the encrypted random number.

This disclosure provides a quantum key distribution method, apparatus, and related devices, relating to the field of network security technology. The method includes: a first device activating a quantum random number generator to generate a first random number sequence and storing the first random number sequence in a first local quantum key pool of the first device; the first device encrypting the first random number sequence using a first quantum key to generate an encrypted random number data packet and sending it to a second device, so that the second device decrypts the encrypted random number data packet based on the first quantum key to obtain the first random number sequence, and stores the first random number sequence in a second local quantum key pool of the second device, wherein the first quantum key is distributed to the first device and the second device through a quantum key distribution network. This disclosure increases the number of available quantum keys for data protection, thus meeting the needs of large-scale data protection.

In a method for protecting payload data transmitted via a one-to-many communication channel from a provider device to at least one receiver device a public key set (PK) supporting asymmetric bilinear pairings is generated. A number of receiver device keys (DKi) that are generated based on the public key set (PK) are distributed to respective devices including the at least one receiver device. A provider key (K) is generated based on the public key set (PK) and inter alia on an encryption random number (t) and stored in the provider device. An envelope (ENV) is generated based on the public key set (PK) and on the encryption random number (t) and is distributed, via the one-to-many communication channel, to the respective devices including the at least one receiver device. The at least one receiver device generates a receiver key, which corresponds to the provider key, based on the distributed envelope (ENV) and the distributed receiver device key (DKi). The provider device encrypts and / or signs the payload data employing the provider key (K) for producing protected payload data and distributes them via the one-to-many communication channel to the respective devices. The at least one receiver device processes, e.g. by decrypting and / or authenticating, the protected payload data employing the receiver key.

A re-encryption key generation device (500) comprises a re-encryption key generation unit (503) that generates a randomized secret key by randomizing a first secret key of public key encryption using a random number, and generates an encrypted random number by encrypting a random number by homomorphic encryption using a second public key of the homomorphic encryption. Each of the randomized secret key and the encrypted random number is an element of a re-encryption key for re-encrypting original ciphertext generated by encrypting plaintext using a first public key corresponding to the first secret key.

The encryption device (400) doubly encrypts a plaintext using the first internal public key and the first external public key and generates a ciphertext. A re-encryption key generation device (500) generates a randomized internal private key using the second random number and the first internal private key, generates a second encrypted random number using the second internal public key, generates a randomized external private key using the first random number and the first external private key, and generates a first encrypted random number using the second external public key. The re-encryption device (600) generates a re-encrypted text using the randomized external private key, the randomized internal private key, the second internal public key, the second external public key, and the ciphertext. The decryption device (700) calculates a plaintext using the second internal private key, the second encrypted random number, the second external private key, the first encrypted random number, and the re-encrypted text.

The application provides a kind of Internet of Things module quantum key filling method, system, equipment and medium, it is related to network security communication technical field.The method comprises: according to encryption key pair acquisition request, generate and import first encrypted random number, encrypted private key and public key to target Internet of Things module, so that target Internet of Things module is decrypted to obtain private key according to first encrypted random number and encrypted private key;According to symmetric encryption key acquisition request, generate and import the encrypted symmetric encryption key to target Internet of Things module, so that target Internet of Things module is decrypted to obtain symmetric encryption key according to private key to the encrypted symmetric encryption key;According to filling key acquisition request, generate and import the encrypted filling key to target Internet of Things module, so that target Internet of Things module is decrypted to obtain filling key according to symmetric encryption key to the encrypted filling key.The application can ensure the security of key in filling process.

The disclosure provides a homomorphic encryption-based privacy set intersection method and device and electronic equipment, belonging to the technical field of computers. The method comprises the following steps: in response to receiving an instruction to obtain a data intersection of first participant data, using an inadvertent pseudo-random function to obtain random numbers of each element in the first participant data; homomorphically encrypting the random numbers of each element in the first participant data to obtain encrypted random numbers of each element in the first participant data, and sending the encrypted random numbers to a second participant; receiving a processing result of the encrypted random numbers and random numbers of each element in second participant data by the second participant, and homomorphically decrypting the processing result; determining a data intersection of the first participant data and the second participant data based on the homomorphically decrypted processing result, and outputting the data intersection.

An encryption device (400) generates a ciphertext by double-encrypting a plaintext using a first internal public key and a first external public key. A re-encryption key generation device (500) generates a randomized internal secret key using a second random number and a first internal secret key, generates a second encrypted random number using a second internal public key, generates a randomized external secret key using a first random number and a first external secret key, and generates a first encrypted random number using a second external public key.A re-encryption unit (600) generates a newly encrypted text using the randomized external secret key, the randomized internal secret key, the second internal public key, the second external public key, and the ciphertext. A decryption unit (700) computes the plaintext using the second internal secret key, the second encrypted random number, the second external secret key, the first encrypted random number, and the newly encrypted text.

This invention relates to the field of intelligent communication technology and discloses a multi-hop long-distance communication system for walkie-talkies. The system includes a signature module, an encryption module, a feature acquisition module, a communication establishment module, an operation command encryption module, and an operation determination module. The target walkie-talkie signs the authentication request and sends the signature and digital certificate to the authentication platform. After verifying the certificate's validity, the platform encrypts a random number using the walkie-talkie's public key and sends it back. The walkie-talkie decrypts the random number using its private key and uses the hash values ​​of the two random numbers as feature parameters. The platform verifies these parameters to complete two-way authentication, issues an authentication token, and negotiates the establishment of a secure channel. Through this channel, the command initiator encrypts plaintext commands using a session key. The walkie-talkie decrypts the commands, executes them, and returns an operation result digest for confirmation of completion. This invention can improve the high-security read / write and communication efficiency of walkie-talkies.

The embodiment of the invention provides a two-section type login method and system. The method comprises the following steps: firstly, receiving an encrypted random number acquisition request which is sent by a user side and comprises an account name, a user side public key and a timestamp through a server side, immediately acquiring a source random number of a corresponding account from a user center, and encrypting the source random number by using the user side public key to generate an encrypted random number; and dynamically acquiring a server-side public key with timeliness from the key center, returning the server-side public key to the user side, and when an external login request is received, generating a unique login identifier based on the server-side private key, the encrypted ciphertext and the timestamp, and storing the unique login identifier to process login authentication. In the service request stage, the legality of the request and the data integrity are ensured through the verification identifier, the timestamp and the message entity MD5 calculation value. Through the processing process, on the premise that an original system permission system is not changed, repeated input of the login certificate is avoided, a safe and efficient login solution is provided for small applications, and therefore the safety of the system is remarkably improved.

The application discloses a voice communication clearness and secrecy identification method and system, comprising the following steps: sending first key negotiation data frames to a peer end at a fixed time; receiving a first response message returned by the peer end, wherein the first response message is a normal response message or an abnormal response message; when the first response message is the normal response message, identifying a clearness and secrecy call based on the first response message; when the first response message is the abnormal response message, sending second key negotiation data frames to the peer end at a fixed time based on an encrypted random number returned by the peer end; receiving a second response message returned by the peer end, and identifying the clearness and secrecy call based on the second response message. The application is suitable for voice communication under a satellite network, is not only fast and reliable, but also does not need to modify a signaling interaction process of the network; and can realize synchronization of key acquisition states of two parties under a limited frame length condition through definition of two negotiation frames, and can realize connection of one end when the one end cannot acquire the key due to network reasons, thereby improving a connection rate.

This invention relates to the field of industrial internet and data security technology, and discloses a method and system for secure data acquisition from power system equipment. The method includes establishing a synchronized key system containing a data encryption key derived from a master key and a random number encryption key. Power system equipment acquires sensor data, generates a high-entropy random number sequence, and constructs standardized data blocks. The standardized data blocks are encrypted using the data encryption key to generate ciphertext data, and the random number sequence is independently encrypted using the random number encryption key to generate a random number ciphertext stream. These are then encapsulated and sent as a data packet containing both. The data center receives the data and uses the key system to decrypt and restore the standardized data blocks and random number sequence. Based on the restored random number sequence, the original sensor data is accurately separated from the standardized data blocks. This invention masks the statistical characteristics of low-entropy data through high-bit random padding, effectively resisting side-channel attacks and statistical analysis targeting power data.

The embodiments of the present disclosure disclose a UKEY-based offline security authentication method, device, equipment and medium. The method comprises the following steps: a terminal generates a random number; an authentication platform encrypts the random number to obtain an encrypted random number; the authentication platform generates a digital certificate according to preset key user data; the digital certificate is stored in a preset UKEY; the random number and the encrypted random number are stored in the terminal; after detecting that the UKEY is inserted into the offline terminal, the encrypted random number is decrypted through the UKEY to obtain a decrypted random number; the decrypted random number is compared with the random number, if the comparison is successful, it is determined that the digital certificate is valid, the key user data of the digital certificate is read, and the terminal completes offline login. The method / system can achieve the technical effect of securely verifying the identity of the user when the UKEY is inserted into the offline terminal.

A method includes exposing a public cryptographic key associated with a peripheral device of a computing system to a guest running on the computing system. The method further includes receiving, from the guest, a message including a cryptographic nonce value encrypted with the public cryptographic key. The method further includes producing the cryptographic nonce value by decrypting the message using a private cryptographic key associated with the public cryptographic key. The method further includes using a shared cryptographic key generated from the cryptographic nonce value to access contents of a direct memory access (DMA) buffer associated with the peripheral device.

The application discloses a privacy protection image recognition method based on a threshold Paillier cryptosystem, in the registration stage, the database mechanism divides the database into two parts horizontally after encrypting the database by rows, and sends the two parts to a server 1 and a server 2 respectively, the server 1 and the server 2 perform an offline preprocessing mechanism; in the recognition stage, a user encrypts a feature vector of an image to be recognized and generates a random number, sends the encrypted feature vector and the encrypted random number to the server 1, sends the encrypted feature vector to the server 2, the server 1 and the server 2 calculate square Euclidean distances and find minimum values in parallel, the server 1 performs masking and partial decryption on the results, the server 2 performs partial decryption and threshold decryption, and sends the results to the user; after obtaining the results returned by the server 2, the user uses the random number generated by the user to restore the results to obtain correct recognition results. The application can efficiently complete accurate recognition of privacy protection images.

The invention relates to the technical field of intelligent communication, and discloses a talkback terminal multi-jump long-distance communication system which comprises a signature module, an encryption module, a feature acquisition module, a communication establishment module, an operation instruction encryption module and an operation determination module. And sending the signature and the digital certificate to an authentication platform. After the platform verifies that the certificate is valid, an interphone public key is used for encrypting the random number and sending back; and the interphone decrypts by using the private key, and takes the hash values of the two random numbers as characteristic parameters. The platform verifies the parameter to complete bidirectional authentication, issues an authentication token and negotiates to establish a secure channel; through the channel, the command initiating end uses the session key to encrypt the plaintext instruction; the interphone decrypts and then executes, and returns an operation result abstract to confirm the completion degree; according to the invention, the high-safety read-write and communication efficiency of the interphone can be improved.

The invention belongs to the information security related fields of identity authentication, anti-counterfeiting, encryption, random number generation and the like, and particularly relates to an ultra-low authentication error rate Hash authentication method based on an optical physical unclonable function (PUF), which comprises the following steps of: obtaining a binary coded image taking zero as a threshold value by using resampling and a DoG filtering method based on two-dimensional speckles generated by the optical PUF; the internal correlation of a binary coded image is reduced through a method of combining image pixels and removing image edge pixels, so that the randomness of a hash key is improved; through adjustment of filtering kernel parameters, low spatial frequency components and high spatial frequency components of speckles collected under different environment noise and shot noise conditions are adaptively filtered. According to the invention, while the randomness of the excitation-response characteristics of the optical PUF is ensured, the authentication error rate can be reduced, and the authentication reliability is enhanced.

The invention relates to the field of cryptography, and provides an encryption and decryption method, device and equipment based on biological characteristics and a user password, and the encryption method comprises the steps: obtaining a symmetric key and a target file; encrypting the target file according to the symmetric key to obtain an encrypted file; encrypting the symmetric key according to the asymmetric key to obtain an encrypted symmetric key; the asymmetric key is generated according to the biological characteristics of the user and the password of the user. The decryption method comprises the following steps: collecting and extracting original biological characteristics from biological data of a user, and quantifying the original biological characteristics to obtain first quantized biological characteristics; acquiring an encrypted confusion error correction code, an encrypted random number, an encrypted file and an encrypted symmetric key; decrypting the encrypted symmetric key based on the error correction code obtained by decryption, the random number, the first quantitative biological characteristic and the user password to obtain the symmetric key; and decrypting the encrypted file according to the symmetric key to obtain the target file. According to the invention, the problem of insufficient safety caused by single dependence on biological characteristics is solved.

Embodiments of the present application provide a plaintext encryption method and device, electronic equipment and storage medium, the method comprises: in the first plaintext encryption process, a first random number is obtained, and the first random number is used for plaintext encryption to generate a first ciphertext group; in the second plaintext encryption process, the first random number is mapped according to a preset hash function to generate a second random number, and the second random number is used for plaintext encryption to generate a second ciphertext group. Through the embodiments of the present application, the first random data is mapped by the hash function to generate the pseudo random number, and then the second random number is generated for encryption, and the security of the encryption system is verified by modifying the encryption random data in the encryption system.

The present disclosure provides an information encryption transmission method, device and equipment and a storage medium, which can be applied to the technical field of data security. The method comprises the following steps: obtaining an encryption random number, a first key, original time information and identification information, wherein the identification information comprises valid identification information; obtaining a second key according to the valid identification information and the first key; encrypting the original time information by using the second key to obtain key information; performing encryption processing on the key information, information validity duration and the encryption random number to obtain an encrypted message; and sending the encrypted message and the identification information.

This disclosure presents a method, apparatus, electronic device, and storage medium for generating random number seeds. The method includes: upon receiving encrypted random numbers corresponding to random number generation requests from consensus nodes, storing the encrypted random numbers on the blockchain; sending all encrypted random numbers to each consensus node, and broadcasting corresponding key information after the consensus nodes receive the encrypted random numbers; and processing all received encrypted random numbers by the consensus nodes based on preset rules and the corresponding key information to obtain a target random number seed. Based on this technical solution, all consensus nodes in the blockchain can participate in the random number generation process, ensuring the fairness and security of the random number generation process, thereby improving the credibility of the random number generation process.

The invention provides an Internet of Things module quantum key charging method, system and device and a medium, and relates to the technical field of network security communication. The method comprises the following steps: according to an encryption key pair acquisition request, generating and importing a first encryption random number, an encryption private key and a public key into a target Internet of Things module, so that the target Internet of Things module decrypts according to the first encryption random number and the encryption private key to obtain a private key; according to the symmetric encryption key acquisition request, generating and importing an encrypted symmetric encryption key to the target Internet of Things module, so that the target Internet of Things module decrypts the encrypted symmetric encryption key according to the private key to obtain the symmetric encryption key; and according to the charging key acquisition request, generating and importing an encrypted charging key into the target Internet of Things module, so that the target Internet of Things module decrypts the encrypted charging key according to the symmetric encryption key to obtain a charging key. According to the invention, the security of the secret key in the charging process can be ensured.

The embodiment of the disclosure discloses a terminal device authentication method and device, wherein the method comprises: in response to a user triggered authentication request, obtaining an identifier ID of the terminal device; sending an authentication request carrying the identifier ID to a server through a switch, so that the server returns terminal authentication data in response to the authentication request; receiving an authentication challenge sent by the switch, wherein the authentication challenge is encrypted data generated by encrypting a random number through the terminal authentication data and the identifier ID; sending a challenge response in response to the authentication challenge to the switch, so that the switch authenticates the terminal device according to the challenge response, wherein the challenge response is generated by the encrypted private key of the terminal device. The method solves the illegal behavior of illegal access of the terminal device, realizes the anti-repudiation of the terminal device authentication, and facilitates the efficient authentication and safe management and control of the terminal device by the enterprise.

The application provides an encryption method, a decryption method, a device, electronic equipment and a storage medium. The method comprises the following steps: decoding a video stream to obtain a YUV image and generating an original image matrix; obtaining a rectangular encryption region according to a to-be-encrypted feature in the YUV image; performing scrambling on a matrix corresponding to the rectangular encryption region to obtain a scrambled matrix; processing the scrambled matrix using a random number and a video encryption key to generate a two-dimensional ciphertext matrix, and encrypting the random number to obtain an encrypted random number; covering the two-dimensional ciphertext matrix to the rectangular encryption region to obtain an occluded image matrix, encoding the occluded video stream to obtain an encoded video stream; encrypting the video encryption key based on a video key encryption key to obtain an encrypted video encryption key; and writing a version number of the video key encryption key, the encrypted video encryption key, the encrypted random number and the rectangular encryption region into an additional attribute of the encoded video stream to obtain an encrypted video stream.