18 results about "Cryptographic nonce" patented technology

The application relates to a data sharing method and device of a vehicle, electronic equipment and a storage medium, wherein the method comprises the following steps: in response to a data sharing instruction, a preset sharing random number of the vehicle is acquired, and a first random number of the vehicle is generated; a preset sharing random number is calculated by using a hash function to obtain a temporary key, and the first random number is encrypted by using the temporary key to obtain a first encrypted random number; a corresponding sharing ciphertext is generated by combining the first encrypted random number, a current time, a data integrity check value of the vehicle and a registration identification mark of the vehicle, and the sharing ciphertext is sent to a sharing end; after the sharing ciphertext is verified at the sharing end, an encrypted session generated by a second random number of the sharing end is received; the encrypted session is verified, and in the case that the encrypted session is verified to be qualified, the to-be-transmitted data of the vehicle is shared to the sharing end. Therefore, the technical problem that in the related art, it is difficult to avoid illegal means, the user's privacy information is called without user authorization, and there is a great security risk is solved.

A data encryption method, a data decryption method and device, a storage medium and a terminal, the data encryption method comprising: when there is data to be written, generating a random number corresponding to the data to be written; obtaining a data encryption key according to a pre-stored original encryption key, the random number and first address information, and encrypting the data to be written using the data encryption key to obtain encrypted data, wherein the first address information is one of a data to be written address and a random number address; obtaining a random number encryption key based on the original encryption key, and encrypting the random number using the random number encryption key to obtain an encrypted random number; and performing a write operation on the encrypted data and the encrypted random number. The above scheme can improve data security.

This disclosure provides a quantum key distribution method, apparatus, and related devices, relating to the field of network security technology. The method includes: a first device activating a quantum random number generator to generate a first random number sequence and storing the first random number sequence in a first local quantum key pool of the first device; the first device encrypting the first random number sequence using a first quantum key to generate an encrypted random number data packet and sending it to a second device, so that the second device decrypts the encrypted random number data packet based on the first quantum key to obtain the first random number sequence, and stores the first random number sequence in a second local quantum key pool of the second device, wherein the first quantum key is distributed to the first device and the second device through a quantum key distribution network. This disclosure increases the number of available quantum keys for data protection, thus meeting the needs of large-scale data protection.

A re-encryption key generation device (500) comprises a re-encryption key generation unit (503) that generates a randomized secret key by randomizing a first secret key of public key encryption using a random number, and generates an encrypted random number by encrypting a random number by homomorphic encryption using a second public key of the homomorphic encryption. Each of the randomized secret key and the encrypted random number is an element of a re-encryption key for re-encrypting original ciphertext generated by encrypting plaintext using a first public key corresponding to the first secret key.

The encryption device (400) doubly encrypts a plaintext using the first internal public key and the first external public key and generates a ciphertext. A re-encryption key generation device (500) generates a randomized internal private key using the second random number and the first internal private key, generates a second encrypted random number using the second internal public key, generates a randomized external private key using the first random number and the first external private key, and generates a first encrypted random number using the second external public key. The re-encryption device (600) generates a re-encrypted text using the randomized external private key, the randomized internal private key, the second internal public key, the second external public key, and the ciphertext. The decryption device (700) calculates a plaintext using the second internal private key, the second encrypted random number, the second external private key, the first encrypted random number, and the re-encrypted text.

The application provides a kind of Internet of Things module quantum key filling method, system, equipment and medium, it is related to network security communication technical field.The method comprises: according to encryption key pair acquisition request, generate and import first encrypted random number, encrypted private key and public key to target Internet of Things module, so that target Internet of Things module is decrypted to obtain private key according to first encrypted random number and encrypted private key;According to symmetric encryption key acquisition request, generate and import the encrypted symmetric encryption key to target Internet of Things module, so that target Internet of Things module is decrypted to obtain symmetric encryption key according to private key to the encrypted symmetric encryption key;According to filling key acquisition request, generate and import the encrypted filling key to target Internet of Things module, so that target Internet of Things module is decrypted to obtain filling key according to symmetric encryption key to the encrypted filling key.The application can ensure the security of key in filling process.

An encryption device (400) generates a ciphertext by double-encrypting a plaintext using a first internal public key and a first external public key. A re-encryption key generation device (500) generates a randomized internal secret key using a second random number and a first internal secret key, generates a second encrypted random number using a second internal public key, generates a randomized external secret key using a first random number and a first external secret key, and generates a first encrypted random number using a second external public key.A re-encryption unit (600) generates a newly encrypted text using the randomized external secret key, the randomized internal secret key, the second internal public key, the second external public key, and the ciphertext. A decryption unit (700) computes the plaintext using the second internal secret key, the second encrypted random number, the second external secret key, the first encrypted random number, and the newly encrypted text.

This invention relates to the field of intelligent communication technology and discloses a multi-hop long-distance communication system for walkie-talkies. The system includes a signature module, an encryption module, a feature acquisition module, a communication establishment module, an operation command encryption module, and an operation determination module. The target walkie-talkie signs the authentication request and sends the signature and digital certificate to the authentication platform. After verifying the certificate's validity, the platform encrypts a random number using the walkie-talkie's public key and sends it back. The walkie-talkie decrypts the random number using its private key and uses the hash values ​​of the two random numbers as feature parameters. The platform verifies these parameters to complete two-way authentication, issues an authentication token, and negotiates the establishment of a secure channel. Through this channel, the command initiator encrypts plaintext commands using a session key. The walkie-talkie decrypts the commands, executes them, and returns an operation result digest for confirmation of completion. This invention can improve the high-security read / write and communication efficiency of walkie-talkies.

The application discloses a voice communication clearness and secrecy identification method and system, comprising the following steps: sending first key negotiation data frames to a peer end at a fixed time; receiving a first response message returned by the peer end, wherein the first response message is a normal response message or an abnormal response message; when the first response message is the normal response message, identifying a clearness and secrecy call based on the first response message; when the first response message is the abnormal response message, sending second key negotiation data frames to the peer end at a fixed time based on an encrypted random number returned by the peer end; receiving a second response message returned by the peer end, and identifying the clearness and secrecy call based on the second response message. The application is suitable for voice communication under a satellite network, is not only fast and reliable, but also does not need to modify a signaling interaction process of the network; and can realize synchronization of key acquisition states of two parties under a limited frame length condition through definition of two negotiation frames, and can realize connection of one end when the one end cannot acquire the key due to network reasons, thereby improving a connection rate.

This invention relates to the field of industrial internet and data security technology, and discloses a method and system for secure data acquisition from power system equipment. The method includes establishing a synchronized key system containing a data encryption key derived from a master key and a random number encryption key. Power system equipment acquires sensor data, generates a high-entropy random number sequence, and constructs standardized data blocks. The standardized data blocks are encrypted using the data encryption key to generate ciphertext data, and the random number sequence is independently encrypted using the random number encryption key to generate a random number ciphertext stream. These are then encapsulated and sent as a data packet containing both. The data center receives the data and uses the key system to decrypt and restore the standardized data blocks and random number sequence. Based on the restored random number sequence, the original sensor data is accurately separated from the standardized data blocks. This invention masks the statistical characteristics of low-entropy data through high-bit random padding, effectively resisting side-channel attacks and statistical analysis targeting power data.

The embodiments of the present disclosure disclose a UKEY-based offline security authentication method, device, equipment and medium. The method comprises the following steps: a terminal generates a random number; an authentication platform encrypts the random number to obtain an encrypted random number; the authentication platform generates a digital certificate according to preset key user data; the digital certificate is stored in a preset UKEY; the random number and the encrypted random number are stored in the terminal; after detecting that the UKEY is inserted into the offline terminal, the encrypted random number is decrypted through the UKEY to obtain a decrypted random number; the decrypted random number is compared with the random number, if the comparison is successful, it is determined that the digital certificate is valid, the key user data of the digital certificate is read, and the terminal completes offline login. The method / system can achieve the technical effect of securely verifying the identity of the user when the UKEY is inserted into the offline terminal.

A method includes exposing a public cryptographic key associated with a peripheral device of a computing system to a guest running on the computing system. The method further includes receiving, from the guest, a message including a cryptographic nonce value encrypted with the public cryptographic key. The method further includes producing the cryptographic nonce value by decrypting the message using a private cryptographic key associated with the public cryptographic key. The method further includes using a shared cryptographic key generated from the cryptographic nonce value to access contents of a direct memory access (DMA) buffer associated with the peripheral device.

The invention relates to the technical field of intelligent communication, and discloses a talkback terminal multi-jump long-distance communication system which comprises a signature module, an encryption module, a feature acquisition module, a communication establishment module, an operation instruction encryption module and an operation determination module. And sending the signature and the digital certificate to an authentication platform. After the platform verifies that the certificate is valid, an interphone public key is used for encrypting the random number and sending back; and the interphone decrypts by using the private key, and takes the hash values of the two random numbers as characteristic parameters. The platform verifies the parameter to complete bidirectional authentication, issues an authentication token and negotiates to establish a secure channel; through the channel, the command initiating end uses the session key to encrypt the plaintext instruction; the interphone decrypts and then executes, and returns an operation result abstract to confirm the completion degree; according to the invention, the high-safety read-write and communication efficiency of the interphone can be improved.

The invention belongs to the information security related fields of identity authentication, anti-counterfeiting, encryption, random number generation and the like, and particularly relates to an ultra-low authentication error rate Hash authentication method based on an optical physical unclonable function (PUF), which comprises the following steps of: obtaining a binary coded image taking zero as a threshold value by using resampling and a DoG filtering method based on two-dimensional speckles generated by the optical PUF; the internal correlation of a binary coded image is reduced through a method of combining image pixels and removing image edge pixels, so that the randomness of a hash key is improved; through adjustment of filtering kernel parameters, low spatial frequency components and high spatial frequency components of speckles collected under different environment noise and shot noise conditions are adaptively filtered. According to the invention, while the randomness of the excitation-response characteristics of the optical PUF is ensured, the authentication error rate can be reduced, and the authentication reliability is enhanced.

Embodiments of the present application provide a plaintext encryption method and device, electronic equipment and storage medium, the method comprises: in the first plaintext encryption process, a first random number is obtained, and the first random number is used for plaintext encryption to generate a first ciphertext group; in the second plaintext encryption process, the first random number is mapped according to a preset hash function to generate a second random number, and the second random number is used for plaintext encryption to generate a second ciphertext group. Through the embodiments of the present application, the first random data is mapped by the hash function to generate the pseudo random number, and then the second random number is generated for encryption, and the security of the encryption system is verified by modifying the encryption random data in the encryption system.

The present disclosure provides an information encryption transmission method, device and equipment and a storage medium, which can be applied to the technical field of data security. The method comprises the following steps: obtaining an encryption random number, a first key, original time information and identification information, wherein the identification information comprises valid identification information; obtaining a second key according to the valid identification information and the first key; encrypting the original time information by using the second key to obtain key information; performing encryption processing on the key information, information validity duration and the encryption random number to obtain an encrypted message; and sending the encrypted message and the identification information.

This disclosure presents a method, apparatus, electronic device, and storage medium for generating random number seeds. The method includes: upon receiving encrypted random numbers corresponding to random number generation requests from consensus nodes, storing the encrypted random numbers on the blockchain; sending all encrypted random numbers to each consensus node, and broadcasting corresponding key information after the consensus nodes receive the encrypted random numbers; and processing all received encrypted random numbers by the consensus nodes based on preset rules and the corresponding key information to obtain a target random number seed. Based on this technical solution, all consensus nodes in the blockchain can participate in the random number generation process, ensuring the fairness and security of the random number generation process, thereby improving the credibility of the random number generation process.

The invention provides an Internet of Things module quantum key charging method, system and device and a medium, and relates to the technical field of network security communication. The method comprises the following steps: according to an encryption key pair acquisition request, generating and importing a first encryption random number, an encryption private key and a public key into a target Internet of Things module, so that the target Internet of Things module decrypts according to the first encryption random number and the encryption private key to obtain a private key; according to the symmetric encryption key acquisition request, generating and importing an encrypted symmetric encryption key to the target Internet of Things module, so that the target Internet of Things module decrypts the encrypted symmetric encryption key according to the private key to obtain the symmetric encryption key; and according to the charging key acquisition request, generating and importing an encrypted charging key into the target Internet of Things module, so that the target Internet of Things module decrypts the encrypted charging key according to the symmetric encryption key to obtain a charging key. According to the invention, the security of the secret key in the charging process can be ensured.