845 results about "Cryptography" patented technology

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

A method for secure onboarding to a closed mesh network in which a camera-equipped device scans a QR code embedded in a durable physical carrier (e.g., adhesive bandages, photographs, ID cards) to extract an access credential, configuration profile, or secure URL that automatically configures the device for network access, authenticates the device to the mesh without manual credential entry or transmission of plaintext credentials over insecure channels, and establishes end-to-end encrypted communications between network nodes; the method supports cryptographically random, single-use or time-limited credentials with periodic refresh to prevent replay, encoding of VPN / WireGuard or proprietary configuration profiles, substantially real-time onboarding (e.g., under five seconds), optional multi-factor verification (biometric or PIN), immediate initiation of secure messaging, voice / video or data sessions upon onboarding, audit logging for compliance and revocation based on detected unauthorized activity, and covert or overt embedding of QR codes in environment-resistant carriers for emergency, disaster response, first responder, or covert deployment, with the QR code rendered unreadable or deactivated after successful onboarding to prevent credential reuse.

The invention belongs to the technical field of information security, and discloses an NLP verification method for a commercial password security assessment report based on an agent. The comprehensive consistency verification of the assessment report is realized by constructing a cryptographic term knowledge graph, generating a cross-chapter cryptographic parameter consistency verification matrix, identifying security statement conflict points and constructing a report internal logic conflict detection model. And adopting a multi-agent cooperation mechanism to carry out iterative optimization on a verification result, and outputting a structured verification report containing contradictory position indexes and type labels. According to the method, the consistency verification capability of the password evaluation report is improved, dominant parameter inconsistency and hidden semantic conflicts can be accurately identified, the auditing cost is reduced, and the wrong implementation risk caused by report inconsistency is prevented.

The invention discloses a data security transmission method based on an ML-KEM algorithm and a PUF, and the method comprises the steps: in a registration stage, mobile equipment generates an anti-quantum key through employing a PUF technology, and a CA issues an anti-quantum digital certificate based on a Falcon algorithm and a cryptographic accumulator; in an identity authentication stage, a mobile device and an edge gateway complete bidirectional identity authentication by exchanging identity labels, anti-quantum certificates and authentication key parameters in combination with a Falcon algorithm and PUF challenge-response, and negotiate to generate a shared key by using an ML-KEM algorithm, thereby effectively defending threats such as man-in-the-middle attack, replay attack and identity counterfeiting; in a data transmission stage, two communication parties realize data encryption transmission by adopting a symmetric encryption algorithm, and data integrity and source credibility are guaranteed in combination with a Falcon digital signature; the whole scheme has the advantages of quantum security resistance, efficient authentication, dynamic key updating, lightweight encryption and the like.

The invention provides a data verification method based on two-dimensional code third-party login and national secret authentication, and the method comprises the steps: obtaining a user identity bill and obtaining a private key password corresponding to the user identity bill by an encryption end when a login request sent by a user end through scanning a login two-dimensional code of a login end is received; the encryption end encrypts the private key password to obtain an encrypted key password, and sends the encrypted key password to the login end; the encryption end determines collaborative signature response data according to the collaborative signature request and the user identity bill and sends the collaborative signature response data to the login end; and the encryption end verifies the complete signature through the verification request, and sends a verification result to the authentication end. By arranging the encryption end, national secret authentication and two-dimensional code third-party login are combined, and the safety of logging in a third-party website when the two-dimensional code is scanned is guaranteed.

Systems and methods for preventing blockchain functions associated with malicious entities are disclosed herein. A first blockchain status update may be received from a first authorizing entity. A first counter and a first plurality of authorizing entities can be determined. The first counter and the first plurality of authorizing entities can be updated. The first counter can be compared to a consensus threshold. A first instruction to block requests for communications to the first entity address can be generated. A confirmation of the first instruction can be generated for display.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

The present invention provides an autonomous computing system for cryptographic asset tokenization, digital currency operations, redemption, detokenization, and full lifecycle management of tokenized assets. The system leverages formal cryptographic proofs, hybrid off-chain and on-chain ledger synchronization, and automated execution protocols to enhance regulatory compliance, asset-backed stability, and operational autonomy. Smart contracts, cryptographic hash-based commitments, and distributed validation mechanisms ensure secure, verifiable, and tamper-resistant transactions across decentralized, centralized, and hybrid environments. The system governs the entire token lifecycle by intrinsically linking asset state validation to both on-chain and off-chain records. Hardware-agnostic cryptographic processing enforces governance rules, validates asset-backed token states, and prevents over-issuance. Real-time integrity checks and automated reconciliation deliver a scalable, cryptographically secured framework for autonomous management of tokenized assets and digital currency transactions, minimizing reliance on intermediaries.

The invention relates to the technical field of constructional engineering informatization and data security, and particularly discloses a BIM and block chain-based whole-process engineering cost data collaborative management system, which comprises a data analysis and dependency graph construction module, which is used for analyzing BIM model component attributes and association relationships and constructing a directed dependency graph; the loop dependency detection and resolution module is used for identifying and resolving a loop dependency structure in the graph; the topological sorting processing module is used for generating an ordered calculation sequence of the components; the cryptographic abstract calculation module is used for generating a unique abstract value of each component in sequence; the global abstract generation module is used for aggregating and generating a global cryptographic abstract representing the overall logic state of the model; and the block chain evidence storage module is used for combining the global abstract and the related metadata to perform uplink evidence storage.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The invention relates to the technical field of intelligent inventory management, and discloses an intelligent inventory management method and system for electronic components, and the method comprises the steps: creating block chain identities of the electronic components; performing cryptographic operation on a tag ID of an RFID tag in a built-in encryption chip and the block chain identity identifier to obtain an encryption tag; a challenge code sent by the RFID reader-writer is received, the encryption tag uses a built-in encryption chip to carry out AES encryption operation on the challenge code and a pre-stored secret key, and a secure communication link is established; and reading the price and material number information of the components passing through the secure communication link, and executing consistency verification to obtain a verification result, the security strength and anti-clone capability of the anti-counterfeit label are improved, and efficient verification of large-scale component inventory is realized.

The invention discloses a data tamper-proofing method, system and device based on blockchain evidence storage, and a storage medium, relates to the field of data processing, and is used for solving the problems that multi-source heterogeneous data lacks a unified processing scheme and evidence storage verification is incomplete in existing property management. The method specifically comprises the following steps: multi-modal feature processing: extracting text and image data features respectively, and generating a unified feature vector by combining cross-modal attention mechanism weighted fusion; generating a hash value and a block chain evidence, generating the hash value by adopting an SHA-256 function, and generating a dynamic two-dimensional code in an association manner; and user verification: after scanning the two-dimensional code, locally reproducing feature processing and Hash calculation, and comparing a Hash value on a chain through an elliptic curve cryptography technology to complete verification. According to the method, full-process credible evidence storage of the property data is realized, the data tamper-proofing capability and verification convenience are improved, and property scene data management requirements are met.

The invention relates to the technical field of block chains and security technologies, and particularly provides a security protection detection method and system for a smart contract based on a block chain. The security indexes at least comprise a password economics security index, a dynamic behavior characteristic index, a formalized verification index and a consensus layer security index; and performing quantitative evaluation on the collected multi-dimensional security index to obtain a comprehensive security score of the target block chain, scoring the cryptoeconomics security index through a preset cryptoeconomics security index scoring model to obtain a cryptoeconomics security score, and sending the cryptoeconomics security score to the target block chain. The current comprehensive security score of the target block chain is compared with the adaptive dynamic risk threshold, and if the current comprehensive security score is higher than the adaptive dynamic risk threshold, an early warning signal is sent out, and the effect of comprehensively evaluating the block chain smart contract is achieved.

The invention relates to the technical field of quantum communication, discloses a quantum key remote security injection method and system based on PQC and zero trust, and aims to solve the problems that post-quantum authentication is high in calculation overhead, difficult in terminal adaptation due to resource limitation and lack of continuous verification capability. The method comprises the following steps: presetting a secret seed; the terminal generates a disturbance public key based on the seed and the basic temporary public key and initiates a request; the server carries out implicit authentication by comparing the disturbance public key and executes key encapsulation to generate a session key; the server encrypts the quantum key and signs and sends the quantum key; and after the terminal verifies the signature, the basic private key is used for de-encapsulation to obtain the quantum key. The system comprises a key injection server, a terminal security agent and a disturbance function module. According to the method, authentication logic is integrated into a cryptographic primitive algebraic structure, so that authentication internal biochemistry and light weight are realized, the terminal power consumption and storage occupation are remarkably reduced, the resource exhaustion attack resistance is enhanced, and the continuous authentication requirement of a zero-trust architecture is met.

The invention provides a water conservancy data informatization management system and method. The method comprises the following steps: constructing an object association map of a water conservancy data entity object and business logic based on basic object data, mapping relation data and business logic data in water conservancy data; performing cryptographic hash operation on nodes and connecting lines in the object association map to obtain a data consanguinity fingerprint with uniqueness and tamper-proof characteristics, and storing the data consanguinity fingerprint and an authority strategy matrix for accessing the water conservancy data into an intelligent contract to obtain an authority control contract of the water conservancy data; capturing a data access request of an access user, and determining a data access permission of the access session according to the permission control contract and the data access request; and performing business scene-oriented controlled visual sharing on the water conservancy data extracted from the object association map based on the data access permission. By adopting the scheme of the invention, a water conservancy data security sharing system considering data dynamic adaptation, multi-attribute permission constraint and full-link credible tracing can be constructed.

A system supports creation and use of cryptographic twins, which are cryptographically unique and private digital representations of entities. Twins can cryptographically encrypt and link an unlimited amount of data on behalf of their corresponding entities. The system can give entities cryptographic ownership and exclusive control over their own twins to preclude data access and tampering, even by system administrators. The system can be configured to recursively enable twins to cryptographically create, own and control other twins, to cryptographically transact with other twins, and to cryptographically transfer ownership and control of twins to other twins. As a result, the system can be configured to cryptographically chain twins to mirror complex ownership, control and transactional relationships that may exist between entities that the twins can represent in the real world.

The invention relates to a multi-code fusion method and system, and solves the problem that a user needs to frequently switch different two-dimensional codes to adapt to various scenes in the interaction process with a city service system.The method comprises the steps that the system is started to analyze heterogeneous features of an original code, and a standardized feature set with a cryptographic identifier is generated; and performing hierarchical fusion to generate a fusion code prototype and a behavior credit chain, performing verification to form a formal fusion code, and calculating an initial credit entropy. Bidirectional verification is executed during terminal verification, and a minimum transaction voucher is generated after scene matching. If successful, starting the fusion code, recording the transaction and dynamically adjusting the authority; and if not, triggering a hierarchical security response, generating a security sub-voucher or switching to the original code for operation. The offline scene generates an offline code. The method has the following effects: through dynamic authority and credit management, on the premise of not sacrificing security, one fusion code is used for replacing a plurality of scene codes, and unification of convenience and security is realized.

The invention relates to the technical field of block chain data storage and traceability tracking, in particular to a document printing and traceability tracking system based on a block chain. Comprising an off-line certificate generation unit used for generating an off-line cryptographic certificate based on technical parameters analyzed from an external printing request; the dynamic anchoring control unit is used for monitoring system state parameters and carrying out dynamic anchoring strategy calculation based on the system state parameters so as to generate an anchoring triggering decision; the aggregation anchoring unit is used for responding to the anchoring triggering decision, aggregating a plurality of offline cryptographic certificates to generate an aggregation root certificate, and broadcasting a block chain transaction containing the aggregation root certificate; and the verification traceability unit is used for acquiring the aggregation root certification on the block chain and executing cryptographic verification in combination with the offline data to obtain a final verification result. According to the invention, the core pain point that the system is unavailable due to the performance bottleneck of the block chain in a high-concurrency scene in the prior art is solved, and the continuity and reliability of services are ensured.

The invention relates to the technical field of equipment management, and discloses a data security evidence storage method and system for smart city construction. The method comprises the following steps: acquiring operation state data of target equipment and performing encryption preprocessing to construct a security data set, further identifying data exception and determining a potential emergency list with relevance; equipment is intelligently grouped according to event priorities, a resource allocation scheme is generated and dynamically adjusted, and when the scheme does not meet the evidence storage requirement, standby resources are automatically obtained, and configuration is expanded; calculating and verifying a data storage path with the shortest delay by using a path selection model fusing bandwidth and priority constraints on the basis of an expansion scheme; and finally, carrying out full-link log recording on the evidence storage process along the path, implementing integrity verification based on a cryptographic hash chain, and carrying out closed-loop evaluation on a resource adjustment effect based on a verification result to generate a confirmation result. According to the invention, the timeliness and reliability of equipment data evidence storage in a complex environment of a smart city are improved.

The invention relates to a reconfigurable multi-channel polynomial multiplier architecture and an implementation method thereof, and belongs to the technical field of post-quantum cryptography hardware acceleration. The architecture comprises a scheduler, a twiddle factor memory bank, a bank address routing module, a bank array and a reconfigurable butterfly unit array. According to the architecture, a cyclic decoupling multi-channel NTT / INTT / PWM algorithm is used, flexible configuration of the degree of parallelism and the flow line depth can be supported, and the adaptability of a memory access control strategy is improved; a conflict-free memory mapping scheme based on interleaved storage is adopted, so that storage and read-write of polynomial coefficients are irrelevant to polynomial length and a calculation stage, NTT / INTT / PWM access modes are unified, and hardware resource overhead is greatly reduced; and a conflict-free detection algorithm oriented to multi-channel assembly line design is adopted, so that the utilization rate of hardware resources is remarkably improved.

The invention relates to the field of cryptology, and discloses a two-factor authentication key negotiation method based on biological characteristics, a user holds double authentication factors, namely a private key authentication factor and a biological characteristic authentication factor, a server holds secret information, and the private key authentication factor and the biological characteristic authentication factor perform mutual authentication and form a shared key, so that the service can be obtained. A user can pass authentication only by holding two authentication factors at the same time, and when an enemy steals one authentication factor or secret information of a server, the enemy cannot disguise that the user passes the authentication of the server; even if an enemy steals the two authentication factors of the user, the enemy cannot be disguised as a server to pass the authentication of the user, so that the authentication threshold is greatly improved, an unauthorized user / server is prevented from abusing the authority of the authorized user, the security is higher, the entropy rate of a biological source is not required, and the authentication efficiency is higher.

The invention provides a trusted distributed data management system based on a block chain, which relates to the field of electric digital data processing and comprises a data sovereignty module, a trusted storage module, a privacy calculation module and a value circulation module. The data sovereignty module is used for determining data ownership and realizing on-chain right confirmation, the trusted storage module is used for ensuring integrity, availability and tamper-proof capability of data, and the privacy calculation module is used for supporting completion of calculation and verification on the premise of not exposing original data. The value circulation module is used for realizing economization and governance of data assets; according to the system, a trusted data management infrastructure with data sovereignty protection, privacy security and value circulation capabilities is constructed through deep fusion of a cryptographic technology, an intelligent contract and a distributed architecture.

The invention discloses an electric power protection measurement and control terminal information security protection method, system and device and a medium, and the method comprises the steps: building an environment fingerprint database through collecting the physical quantity of a power grid, carrying out the threat level evaluation, and adjusting a security strategy; based on the environment fingerprint database and the threat level evaluation result, classifying the transmission data, deploying quantum key distribution nodes in the transformer substation, and providing differentiated secure transmission for different types of transmission data; and in combination with the environment fingerprint database and the differentiated secure transmission data, executing cognitive security analysis, establishing an anomaly detection model, and obtaining threat traceability visual positioning. According to the method, the dynamic environment fingerprint database is constructed by collecting multi-dimensional physical quantities and is bound with the digital certificate to form a dual authentication mechanism, so that the defect that a traditional scheme depends on static cryptography is overcome, real-time perception and adaptive response to a complex and changeable electromagnetic environment are realized, and the security of the system is improved. And the environmental adaptability and the safety protection capability of the system are obviously improved.

The invention relates to the technical field of computer science, and discloses a cryptographic logic vulnerability detection method and system based on a large language model. The method comprises the following steps: firstly, constructing a diversified cryptographic vector knowledge base, and organizing and managing through text vectorization; based on cryptographic algorithm standards such as FIPS, performing logic compliance check on the target code; in combination with a small number of examples and thinking chain prompts, guiding a large language model to identify potential logic vulnerabilities; summarizing a compliance check and reasoning process result, and retrieving related knowledge in a knowledge base based on cosine similarity to enhance model judgment; and finally, integrating knowledge enhancement and logic analysis results, and outputting a structured vulnerability detection report. According to the method, a universal cryptographic vulnerability detection framework which does not need to run codes and is suitable for multiple programming languages is constructed, automatic recognition and detection of complex logic defects in cryptographic codes are achieved, and the accuracy and reasoning ability of a large language model in a cryptographic vulnerability detection task are improved.

The invention discloses an open source software supply chain security intelligent monitoring and risk assessment method, relates to the technical field of software supply chain security, and solves the problem that only existence of indirect dependence can be identified generally in the prior art, but whether a vulnerability code can be called on an actual execution path cannot be accurately judged. According to the method, through dependence locking and Hash fingerprint embedding during construction, cryptographic-level accurate traceability of a component version is realized, and version ambiguity is thoroughly eliminated; in combination with deep interception of a JVM probe for method calling and class loading events during operation, a loading source and a call stack context of each class in a real execution path can be captured, bidirectional association mapping is performed on dynamic behavior data and a static dependency tree, and whether a vulnerability component is located on an executable call chain or not is accurately identified. Compared with the defect that coarse-grained warning is carried out only through version matching in a traditional tool, the method has the advantage that by means of dynamic-static data fusion, it is avoided that a large number of unavailable indirect dependency vulnerabilities are misjudged to be high in risk.

A QR Code Verification Engine provides a multi-layered security framework for generating, validating, and authenticating QR codes while preventing tampering, fraud, and unauthorized access. The system embeds a hidden security layer within the QR code using steganographic encoding or invisible watermarking techniques, ensuring detection of any modifications. The hidden layer is encrypted using asymmetric cryptography, allowing only an authorized verification system to extract and validate it. An AI-powered tamper detection module analyzes QR codes for anomalies, while cryptographic hash verification ensures integrity. The system employs biometric authentication, push notification approvals, and contextual security measures to enhance user verification. Dynamic QR codes with expiration rules prevent replay attacks. Secure offline verification allows authentication without network connectivity. The system integrates with financial platforms, web security tools, and real-time fraud detection mechanisms, ensuring a highly secure and scalable QR code validation framework for transactions, identity verification, and access control applications.

The invention discloses a password attack operation simulation method and electronic equipment, and relates to the technical field of cryptography, and the password attack operation simulation method comprises the following steps: inputting acquired password attack data into a generator model to obtain simulated password attack data, so that the password attack operation can be quickly simulated by utilizing the generator model, and the password attack operation can be quickly simulated. The simulation efficiency of the password attack operation is improved; generating a password state parameter sequence based on an initial password state parameter group in the simulated password attack data, and generating a simulated attack path of password attack operation according to the password state parameter sequence and a simulated password attack feature set in the simulated password attack data, therefore, the purpose of simulating the dynamic change of the password attack process by using the password state parameter sequence is achieved, the flexibility of the password attack operation simulation process is improved, and the effect of improving the password attack operation simulation precision is further achieved. The problem that the password attack operation simulation precision is low due to the fact that an existing password attack operation simulation mode is single in content is solved.

Methods and systems for securely generating secret shares in a distributed manner and distributing those secret shares to cryptographic devices are disclosed. The cryptographic devices can subsequently use these secret shares to perform threshold distributed cryptographic operations (such as encryption or decryption). A threshold number of generating cryptographic devices can each generate their own secret shares. These devices can also each generate partial secret shares that can be combined by receiving cryptographic devices to generate their own respective secret shares. Additionally, the generating devices can generate commitments corresponding to their secret shares. The generating devices can transmit the commitments to the other cryptographic devices and the partial secret shares to their corresponding receiving devices. At a later time, cryptographic devices possessing at least a threshold number of secret shares can collectively perform cryptographic operations using those secret shares.

The invention provides a ticket business full-life-cycle anti-counterfeiting and verification system based on block chain trusted triple mapping, and relates to the field of electric digital data processing. Comprising a trusted triple construction and cryptography binding module, a block chain hash anchoring and consensus evidence storage module, a trusted triple dynamic evolution and state transition module and a multi-level anti-counterfeiting verification and anomaly detection module, the block chain Hash anchoring and consensus evidence storage module is used for storing a trusted triple in a block chain in a tamper-proof manner, and the trusted triple dynamic evolution and state transition module is used for realizing state tracking and evolution management of ticket business in a full life cycle. The multi-level anti-counterfeiting verification and anomaly detection module is used for providing static identity verification, dynamic anti-counterfeiting vouchers and abnormal behavior detection capability; according to the system, the security problem in a ticketing system is solved by enhancing the security of the entity identifier and protecting state transition privacy.

The invention discloses a network security monitoring method and system based on the Internet of Things, and relates to the technical field of Internet of Things security. Through dynamic challenge-response physical unclonable authentication, physical parameters and a real-time state are fused to generate a dynamic challenge value, and a physical unclonable function circuit is combined to generate a response value to realize identity verification; adaptive noise lattice-based homomorphic encryption is adopted, a ciphertext is generated based on a high-dimensional lattice-based password, and noise parameters are adjusted through channel quality to guarantee transmission security; multi-modal confrontation federated learning anomaly detection is utilized, flow, energy consumption and physical state characteristics are fused, and parameters are aggregated through a confrontation auto-encoder training model and based on federated learning; through dynamic threshold key negotiation, in combination with identity-based encryption and a block chain smart contract, distributed generation and dynamic adjustment of a key are realized; on the basis of a Merkle-salt value dynamic hash chain and block chain evidence storage, a log is generated in a trusted execution environment, a hash chain is constructed, and chain tail hash is synchronized to block chain evidence storage.