1179 results about "Cryptography" patented technology

The invention relates to the field of Internet of Things data defense, in particular to an Internet of Things data security collaborative defense system based on edge computing. The technical problem to be solved by the invention is to provide an Internet of Things data security collaborative defense system capable of fusing lightweight cryptography, dynamic trust evaluation and cross-layer collaborative decision, and ensuring edge real-time response and global security situation awareness. The invention discloses an Internet of Things data security collaborative defense system based on edge computing. The system comprises a terminal equipment layer, an edge computing layer, a fog computing layer and a cloud collaborative layer which work cooperatively, the terminal device layer comprises a plurality of Internet of Things devices, and a lightweight security module is arranged in each device. According to the method, the effects of fusing lightweight cryptography, dynamic trust evaluation and cross-layer collaborative decision, and ensuring edge real-time response and global security situation awareness are achieved.

The invention relates to a multimedia equipment control method and system based on adaptive protocol matching. The method comprises the following steps: firstly, collecting communication protocol data and extracting features to form a protocol feature data set; secondly, performing confidence coefficient verification on a data set type identification result, and if the confidence coefficient is lower than a threshold value, extracting a depth feature through a convolutional neural network; and calling a national standard protocol adaptation conversion engine based on a classification result, converting the heterogeneous protocol into data in a unified format, and generating a secure communication data frame through national secret algorithm encryption and bidirectional identity verification. And finally, performing hash check and structured analysis on the data frame, constructing an interaction information packet in combination with user behavior characteristics, and dynamically optimizing a control strategy through real-time feedback data to generate a self-adaptive interaction control scheme. According to the method, through a technical closed loop of intelligent analysis-standard conversion-security reinforcement-closed loop optimization, the high efficiency, the intelligent level and the security performance of multimedia equipment management are remarkably improved.

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data encryption method, device, equipment and medium, comprising: acquiring a real-time state vector representing a running state of a chaotic neural network processing unit, monitoring a chaotic characteristic of the real-time state vector to generate a chaotic intensity index, and comparing the chaos intensity index with a preset chaos threshold value, generating an original key based on the real-time state vector when a key updating condition is met, dynamically adjusting a weight matrix of the chaos neural network processing unit according to the chaos intensity index, and performing cryptographic processing on the original key to generate a final key. And performing encryption processing on the target data by using the final key to generate target encrypted data. According to the method, the internal state of the chaotic neural network is used as a dynamic key generation basis, so that the dependence on an external entropy source and fixed parameters is eliminated, and the security and real-time performance of a data encryption process are improved.

The invention discloses a networking intelligent key dynamic key management system supporting multi-device binding, particularly relates to the technical field of Internet of Things security, and is used for solving the problem that a cryptographic attack path is exposed due to key residue of an existing dynamic key management system. According to the system, an instruction analysis module receives an equipment unbinding instruction and extracts an equipment identifier; the residual positioning module marks residual nodes based on the identification deep search key tree; the fragment confusion module divides the key fragments into length non-geometric progression fragments and generates confusion fragments through elliptic curve encryption; the pollution evaluation module calculates a mutual information value of the confusion fragments and a parent key, and determines a hierarchical pollution coefficient in combination with a key entropy attenuation curve; the path decision module segments or recombines a key path according to a pollution coefficient threshold; and the key updating module constructs a new key tree, distributes updated sub-keys to the binding equipment, clears key residual relevance and blocks generation of a cryptographic attack path.

The invention provides an anonymous Internet of Things identity authentication method and device based on an anti-quantum computing password. A key generation device sends a public key to a message sending end and a message receiving end, and sends a private key to an authentication server; the authentication server generates a blind parameter based on the private key, and sends the blind parameter to the message sending end; the message sending end performs blind operation based on the blind parameter, the public key and the to-be-transmitted message to obtain a blind message, and sends the blind message to the authentication server; the authentication server performs post-quantum signature on the blind message based on the private key to obtain a to-be-solved blind signature, and sends the to-be-solved blind signature to the message sending end; the message sending end carries out blind resolution operation on the to-be-resolved blind signature to obtain a target signature; the message sending end sends the to-be-transmitted message and the target signature to a message receiving end; and the message receiving end performs post-quantum verification on the target signature based on the public key, and if verification succeeds, processing is performed based on the to-be-transmitted message. Through the scheme of the invention, the user data security can be improved.

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

The invention discloses a virtual power plant terminal-oriented encryption transmission and self-healing control cooperative system, which comprises a dynamic encryption module, a hierarchical encryption system is constructed on the basis of a quantum chaos sequence and a national secret SM9 algorithm, a dynamic session key is generated in real time through an edge node, and terminal power data is subjected to hierarchical encryption; the self-healing control module integrates a block chain distributed account book and a deep reinforcement learning model, constructs a health degree portrait of the terminal equipment in real time, monitors a link state through a topology sensing algorithm, predicts a fault propagation path, and triggers communication link reconstruction and computing resource elastic scheduling for self-healing; the collaborative optimization module constructs an optimization objective function, balances encryption strength and self-healing efficiency, adopts a quantum topology photonic crystal optimization algorithm to determine a weight coefficient in the optimization objective function, and realizes global optimal matching of an encryption-self-healing strategy; and the edge computing node performs terminal-edge cloud cooperative training according to the global optimal matching strategy of the encryption-self-healing strategy.

The invention relates to the technical field of intelligent security and protection, and discloses an identity authentication method integrating AI and password technologies. According to the method, biological characteristic data are collected through a multi-mode biosensor, and the biological characteristic data are encrypted after being processed by a deep convolutional neural network. And training an identity authentication model by using a federated learning framework in combination with a differential privacy technology, and carrying out distributed verification. And generating a one-time dynamic password based on a verification result, binding the one-time dynamic password with spatio-temporal characteristics of user behaviors to construct a matrix, and controlling the access authority by adopting an attribute-based encryption algorithm. The system is also provided with an abnormal behavior detection model, a dynamic identity label updating mechanism, a secret key updating strategy and a multi-factor authentication decision engine. The method improves the security and accuracy of identity authentication, realizes fine authority management, and is suitable for the field of intelligent security and protection.

A method for secure onboarding to a closed mesh network in which a camera-equipped device scans a QR code embedded in a durable physical carrier (e.g., adhesive bandages, photographs, ID cards) to extract an access credential, configuration profile, or secure URL that automatically configures the device for network access, authenticates the device to the mesh without manual credential entry or transmission of plaintext credentials over insecure channels, and establishes end-to-end encrypted communications between network nodes; the method supports cryptographically random, single-use or time-limited credentials with periodic refresh to prevent replay, encoding of VPN / WireGuard or proprietary configuration profiles, substantially real-time onboarding (e.g., under five seconds), optional multi-factor verification (biometric or PIN), immediate initiation of secure messaging, voice / video or data sessions upon onboarding, audit logging for compliance and revocation based on detected unauthorized activity, and covert or overt embedding of QR codes in environment-resistant carriers for emergency, disaster response, first responder, or covert deployment, with the QR code rendered unreadable or deactivated after successful onboarding to prevent credential reuse.

The invention belongs to the technical field of information security, and discloses an NLP verification method for a commercial password security assessment report based on an agent. The comprehensive consistency verification of the assessment report is realized by constructing a cryptographic term knowledge graph, generating a cross-chapter cryptographic parameter consistency verification matrix, identifying security statement conflict points and constructing a report internal logic conflict detection model. And adopting a multi-agent cooperation mechanism to carry out iterative optimization on a verification result, and outputting a structured verification report containing contradictory position indexes and type labels. According to the method, the consistency verification capability of the password evaluation report is improved, dominant parameter inconsistency and hidden semantic conflicts can be accurately identified, the auditing cost is reduced, and the wrong implementation risk caused by report inconsistency is prevented.

The invention discloses a privacy protection method, system and device for block chain network node audit management, and the method specifically comprises the steps: generating a node anonymous voucher for a candidate node, carrying out the privacy authentication, mapping the sensitive information of the authenticated candidate node into an irreversible cryptographic hash value, and storing the irreversible cryptographic hash value in a distributed key management node; constructing a dynamic credible auditing group, selecting verification nodes from the candidate nodes, and performing uplink evidence storage after BLS aggregation signature; performing privacy aggregation calculation on the node behavior data of the verification node to generate an audit score ciphertext; fine-grained access control is realized through attribute-based encryption, and a node reputation level is dynamically bound through an auditing strategy; adaptive noise is added to an audit result by adopting a differential privacy mechanism, and the epsilon-differential privacy constraint condition is met by dynamically adjusting the noise amount; in the reward and punishment execution stage, a ring signature and a stealth address technology are combined, so that reward and punishment records are unhooked from real identities of nodes, and meanwhile, the trade traceability is ensured.

The invention relates to network information security and cryptography, and provides an AES-based network information data transmission security method, which comprises the following steps of: generating an information key, namely generating a round key through loop iteration; the encryption process of information data transmission comprises the following steps: encrypting a plaintext after preprocessing, and generating an intermediate ciphertext and an integrity verification label; in the information data decryption process, the plaintext is recovered through reverse operation after the label is verified; the data security constraint of the information is carried out, and a multi-level defense system is constructed; aP I mapping for information transmission, and calling an interface to realize encryption, decryption and authentication verification; information data encryption complexity is controlled, complexity is optimized, and big data are encrypted in a blocking mode; the information data security is guaranteed, and the transmission security is ensured. The method significantly enhances data security, improves transmission efficiency, constructs multi-level security defense, provides flexibility and adaptability, simplifies implementation and management, conforms to the future security trend, and provides an efficient, reliable and easy-to-use solution for network information security.

The invention provides an import and export trade data exchange system, which comprises a policy negotiation module, a key management module, a protocol conversion module and an anti-degradation transmission module, wherein the policy negotiation module is used for dynamically generating an encryption policy matrix of multiple systems according to encryption capability parameters of participating systems; the key management module is used for generating a cross-system dynamic key based on the encryption strategy matrix; the cross-system dynamic key is generated through cryptographic operation fusing a source system private key and a target system public key; the protocol conversion module is used for analyzing an original protocol message into a field set, mapping a field type to a target protocol specification through a quantum state superposition model, and generating an encrypted message compatible with a target system; and the anti-degradation transmission module is used for carrying out anti-degradation secure transmission processing on the encrypted message to obtain an anti-degradation encrypted data stream. By adopting the system, the security, compatibility and reliability of the data in the exchange transmission process can be ensured.

The invention discloses a data security transmission method based on an ML-KEM algorithm and a PUF, and the method comprises the steps: in a registration stage, mobile equipment generates an anti-quantum key through employing a PUF technology, and a CA issues an anti-quantum digital certificate based on a Falcon algorithm and a cryptographic accumulator; in an identity authentication stage, a mobile device and an edge gateway complete bidirectional identity authentication by exchanging identity labels, anti-quantum certificates and authentication key parameters in combination with a Falcon algorithm and PUF challenge-response, and negotiate to generate a shared key by using an ML-KEM algorithm, thereby effectively defending threats such as man-in-the-middle attack, replay attack and identity counterfeiting; in a data transmission stage, two communication parties realize data encryption transmission by adopting a symmetric encryption algorithm, and data integrity and source credibility are guaranteed in combination with a Falcon digital signature; the whole scheme has the advantages of quantum security resistance, efficient authentication, dynamic key updating, lightweight encryption and the like.

The invention provides a data verification method based on two-dimensional code third-party login and national secret authentication, and the method comprises the steps: obtaining a user identity bill and obtaining a private key password corresponding to the user identity bill by an encryption end when a login request sent by a user end through scanning a login two-dimensional code of a login end is received; the encryption end encrypts the private key password to obtain an encrypted key password, and sends the encrypted key password to the login end; the encryption end determines collaborative signature response data according to the collaborative signature request and the user identity bill and sends the collaborative signature response data to the login end; and the encryption end verifies the complete signature through the verification request, and sends a verification result to the authentication end. By arranging the encryption end, national secret authentication and two-dimensional code third-party login are combined, and the safety of logging in a third-party website when the two-dimensional code is scanned is guaranteed.

This disclosure relates to data security and cryptography. In one aspect, a method includes updating a user interface of a client device to present user interface controls that enable a user to specify data privacy settings that define how entities collect, store, and use data of the user. The data security system receives a request to modify a data privacy setting for one or more entities from the client device based on user interaction with one or more of the user interface controls. The request includes an ephemeral user identifier for the user and an attestation token. The data security system validates the request using at least the ephemeral user identifier and the attestation token. The data security system transmits data instructing the entity to modify usage of the user data based on the modified given data privacy setting to each of the one or more entities.

Systems and methods for preventing blockchain functions associated with malicious entities are disclosed herein. A first blockchain status update may be received from a first authorizing entity. A first counter and a first plurality of authorizing entities can be determined. The first counter and the first plurality of authorizing entities can be updated. The first counter can be compared to a consensus threshold. A first instruction to block requests for communications to the first entity address can be generated. A confirmation of the first instruction can be generated for display.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

The invention discloses a customer information storage management method and system based on a block chain, and relates to the technical field of distributed data evidence storage, and the method comprises the steps: collecting terminal customer information, generating an encrypted data packet, carrying out erasure coding, and generating an encrypted data fragment set; carrying out distributed storage based on the encrypted data fragment set, and calculating a data availability commitment at the same time; executing availability sampling according to the data availability commitment, and generating a fragment validity proof; based on the fragment validity proof, performing format and validity verification to obtain a to-be-processed proof set; and generating a recursive aggregation proof according to the to-be-processed proof set, and submitting the recursive aggregation proof to the block chain to verify and update a proof storage state. And cryptographic authentication is carried out on the persistent evidence storage state of the data assets, so that the dual beneficial effects of ensuring data privacy and credible evidence storage are achieved.

The present invention provides an autonomous computing system for cryptographic asset tokenization, digital currency operations, redemption, detokenization, and full lifecycle management of tokenized assets. The system leverages formal cryptographic proofs, hybrid off-chain and on-chain ledger synchronization, and automated execution protocols to enhance regulatory compliance, asset-backed stability, and operational autonomy. Smart contracts, cryptographic hash-based commitments, and distributed validation mechanisms ensure secure, verifiable, and tamper-resistant transactions across decentralized, centralized, and hybrid environments. The system governs the entire token lifecycle by intrinsically linking asset state validation to both on-chain and off-chain records. Hardware-agnostic cryptographic processing enforces governance rules, validates asset-backed token states, and prevents over-issuance. Real-time integrity checks and automated reconciliation deliver a scalable, cryptographically secured framework for autonomous management of tokenized assets and digital currency transactions, minimizing reliance on intermediaries.

The invention relates to the technical field of constructional engineering informatization and data security, and particularly discloses a BIM and block chain-based whole-process engineering cost data collaborative management system, which comprises a data analysis and dependency graph construction module, which is used for analyzing BIM model component attributes and association relationships and constructing a directed dependency graph; the loop dependency detection and resolution module is used for identifying and resolving a loop dependency structure in the graph; the topological sorting processing module is used for generating an ordered calculation sequence of the components; the cryptographic abstract calculation module is used for generating a unique abstract value of each component in sequence; the global abstract generation module is used for aggregating and generating a global cryptographic abstract representing the overall logic state of the model; and the block chain evidence storage module is used for combining the global abstract and the related metadata to perform uplink evidence storage.

The invention discloses an unmanned aerial vehicle cluster authentication method based on a certificateless homomorphic network coding signature, and belongs to the field of cryptography and network security. In an unmanned aerial vehicle network system comprising a KGC, a source node, an intermediate node and an authentication server CS, the following steps are executed: the KGC generates system parameters and a master key; the source node registers to the KGC and requests part of private keys; the source node carries out vector splitting and expansion on the authentication message, randomly selects a message identifier, executes a signature algorithm to respectively calculate the signature of each vector, and sends the vectors and the signatures to the intermediate node; and the intermediate node executes a verification algorithm to judge the validity of the currently received data packet, discards the invalid data packet, calculates to obtain a signature of the combined vector, and forwards the signature to the adjacent intermediate node. When the CS obtains a sufficient number of valid data packets, the original authentication message can be recovered and an authentication success message is sent to the source node unmanned aerial vehicle. According to the invention, the transmission performance and reliability of the unmanned aerial vehicle network are improved.

The invention discloses a novel encryption-decryption scheme, and aims to detect and defend linear spoofing attacks on a cyber-physical system (CPS). With the wide application of CPS in key infrastructures such as industrial automation, smart power grids and automobile systems, it is particularly important to ensure the safety and integrity of CPS. Linear spoofing attacks are malicious behaviors, normal operation of the linear spoofing attacks is interfered by controlling input or output of a system, and a traditional security mechanism is often difficult to effectively cope with the type of attacks. According to the invention, an encryption algorithm is designed to protect data transmission of the CPS, and the encryption algorithm is combined to recover original data and identify potential attack signs at the same time. According to the scheme, the combination of the cryptography technology and the signal processing method is utilized, the data stream can be monitored in real time, and the possible linear attack is identified by analyzing the change of the data before and after encryption. In addition, according to the scheme, calculation efficiency and implementation feasibility are considered, and it is ensured that necessary safety guarantee is provided on the premise that system performance is not affected. Experimental results show that the proposed encryption-decryption scheme can effectively detect linear spoofing attacks in the cyber-physical system, and has relatively low false alarm rate and missing report rate. In addition, the scheme shows good adaptability and robustness in practical application, and provides a new thought and technical support for the security protection of the CPS in the future.

Disclosed is a procurement optimization approach that integrates real-time reinforcement learning and blockchain-based compliance checks for dynamic, transparent decision-making. Initial procurement specifications and weightings are automatically generated using AI analysis of historical procurement data, followed by supplier evaluations using multiple criteria decision analysis with buyer-defined weightings, while a reinforcement learning module continuously refines these weightings based on observed procurement outcomes or feedback. Each updated weighting is automatically verified against predefined procurement rules encoded on a distributed ledger, ensuring that no unauthorized criteria change bypass regulatory thresholds. If found compliant, the system immutably stores the refined weighting and resulting supplier evaluation as a ledger transaction, creating an unalterable audit trail. Optional modules handle anomaly detection, predictive risk analytics, duplication detection across departments, automated tender generation, quantum-resistant cryptography, and ERP integration. This modular design addresses persistent procurement challenges: static weighting, delayed or incomplete compliance checks, and limited traceability. By unifying adaptive AI logic with an immutable ledger, the disclosed system offers robust, real-time improvements in cost efficiency and governance.

The invention discloses a commercial password application security assessment evidence identification method based on image identification, relates to the technical field of image identification, and aims to assess employee advanced engineer certificates, extract information from multi-modal documents by using a Qwen-VL visual language model, generate vectors, label the vectors, convert the vectors into structured evidence nodes and store the structured evidence nodes in a graph database. Establishing various edges according to different associations, and constructing a preliminary evidence network; identifying certificate nodes, and clustering to form a certificate entity group; a correlation score is calculated by searching the support evidence through forward traceability, a correlation score is calculated by searching the contradiction evidence through reverse traceability, the credibility of the certificate entity group is dynamically adjusted, and the influence is propagated according to the updated credibility; and screening abnormal certificates lower than a threshold value, analyzing causes and contradictory points, listing abnormal information, visually displaying key evidences, the contradictory points and associated paths, and generating text description.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

An authentication apparatus holds: a combination of a concealment template generated from a secret key and biometric information through use of biometric cryptography and encrypted identity verification information obtained by encrypting identity verification information through use of the secret key; and biometric information on a user, and is configured to: extract the secret key from the concealment template through use of the biometric information on the user; acquire the identity verification information by decrypting the encrypted identity verification information through use of the extracted secret key; and verify identity of the user based on the acquired identity verification information.

A method of enabling knowledge proof in a blockchain transaction is disclosed. The method comprises sending, from a verifier to a prover, a blockchain transaction redeemable by means of data including (i) first data (y) based on a combination of an ephemeral key (r), second data (c) and a private key of a public-private key pair of a cryptography system, wherein the public key (v) is based on an integer generator raised to a first power, wherein the first power is based on the private key, and wherein knowledge of the private key is required in order to determine the ephemeral key from the first data, and (ii) third data (x) based on the integer generator raised to a second power, wherein the second power is based on the ephemeral key.

The invention relates to the technical field of intelligent inventory management, and discloses an intelligent inventory management method and system for electronic components, and the method comprises the steps: creating block chain identities of the electronic components; performing cryptographic operation on a tag ID of an RFID tag in a built-in encryption chip and the block chain identity identifier to obtain an encryption tag; a challenge code sent by the RFID reader-writer is received, the encryption tag uses a built-in encryption chip to carry out AES encryption operation on the challenge code and a pre-stored secret key, and a secure communication link is established; and reading the price and material number information of the components passing through the secure communication link, and executing consistency verification to obtain a verification result, the security strength and anti-clone capability of the anti-counterfeit label are improved, and efficient verification of large-scale component inventory is realized.

The invention discloses a data tamper-proofing method, system and device based on blockchain evidence storage, and a storage medium, relates to the field of data processing, and is used for solving the problems that multi-source heterogeneous data lacks a unified processing scheme and evidence storage verification is incomplete in existing property management. The method specifically comprises the following steps: multi-modal feature processing: extracting text and image data features respectively, and generating a unified feature vector by combining cross-modal attention mechanism weighted fusion; generating a hash value and a block chain evidence, generating the hash value by adopting an SHA-256 function, and generating a dynamic two-dimensional code in an association manner; and user verification: after scanning the two-dimensional code, locally reproducing feature processing and Hash calculation, and comparing a Hash value on a chain through an elliptic curve cryptography technology to complete verification. According to the method, full-process credible evidence storage of the property data is realized, the data tamper-proofing capability and verification convenience are improved, and property scene data management requirements are met.