1361 results about "Cryptography" patented technology

The invention relates to the field of Internet of Things data defense, in particular to an Internet of Things data security collaborative defense system based on edge computing. The technical problem to be solved by the invention is to provide an Internet of Things data security collaborative defense system capable of fusing lightweight cryptography, dynamic trust evaluation and cross-layer collaborative decision, and ensuring edge real-time response and global security situation awareness. The invention discloses an Internet of Things data security collaborative defense system based on edge computing. The system comprises a terminal equipment layer, an edge computing layer, a fog computing layer and a cloud collaborative layer which work cooperatively, the terminal device layer comprises a plurality of Internet of Things devices, and a lightweight security module is arranged in each device. According to the method, the effects of fusing lightweight cryptography, dynamic trust evaluation and cross-layer collaborative decision, and ensuring edge real-time response and global security situation awareness are achieved.

The present disclosure provides a system for secure compute using artificial intelligence agents. The system includes a hardware execution environment with one or more computerized processors and electronic storage media. The processors are configured to establish a secure agent comprising a secure state management module, an encrypted state transition management module, a threshold cryptography implementation, and a digital signature verification module. The system also includes a plurality of atomic agents, each configured to perform a composite task and comprising a task-specific execution module, a state management interface, and a communication module. An orchestrator agent coordinates secure execution of the atomic agents and includes a task distribution module, a result aggregation module, a workflow management module, and a security policy enforcement module. The orchestrator agent integrates encrypted outputs from the atomic agents to perform composite tasks while maintaining data integrity and security through the secure state management module.

The invention relates to a multimedia equipment control method and system based on adaptive protocol matching. The method comprises the following steps: firstly, collecting communication protocol data and extracting features to form a protocol feature data set; secondly, performing confidence coefficient verification on a data set type identification result, and if the confidence coefficient is lower than a threshold value, extracting a depth feature through a convolutional neural network; and calling a national standard protocol adaptation conversion engine based on a classification result, converting the heterogeneous protocol into data in a unified format, and generating a secure communication data frame through national secret algorithm encryption and bidirectional identity verification. And finally, performing hash check and structured analysis on the data frame, constructing an interaction information packet in combination with user behavior characteristics, and dynamically optimizing a control strategy through real-time feedback data to generate a self-adaptive interaction control scheme. According to the method, through a technical closed loop of intelligent analysis-standard conversion-security reinforcement-closed loop optimization, the high efficiency, the intelligent level and the security performance of multimedia equipment management are remarkably improved.

The invention provides a post quantum cryptography and national cryptography algorithm mixed signature and verification method and device, and relates to the technical field of cryptography application. The method comprises the following steps: performing hash operation on a to-be-signed message plaintext by adopting a preset national cryptographic hash algorithm to obtain a first hash value, and performing mixed signature operation on the first hash value and the to-be-signed message plaintext according to a national cryptographic signature private key component and a post-quantum signature private key component in a mixed signature private key of a sender to obtain a second hash value; and obtaining a national secret signature value and a post-quantum signature value, packaging the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the to-be-signed message plaintext, and sending the mixed signature value and the to-be-signed message plaintext to a receiver. Due to the fact that the mixed signature value sent by the sending party to the receiving party comprises the national secret signature value and the post-quantum signature value, an attacker needs to crack the national secret signature value and the post-quantum signature value at the same time to achieve identity anti-fake attack, and guarantee is provided for integrity and authenticity of message plaintext transmission.

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data encryption method, device, equipment and medium, comprising: acquiring a real-time state vector representing a running state of a chaotic neural network processing unit, monitoring a chaotic characteristic of the real-time state vector to generate a chaotic intensity index, and comparing the chaos intensity index with a preset chaos threshold value, generating an original key based on the real-time state vector when a key updating condition is met, dynamically adjusting a weight matrix of the chaos neural network processing unit according to the chaos intensity index, and performing cryptographic processing on the original key to generate a final key. And performing encryption processing on the target data by using the final key to generate target encrypted data. According to the method, the internal state of the chaotic neural network is used as a dynamic key generation basis, so that the dependence on an external entropy source and fixed parameters is eliminated, and the security and real-time performance of a data encryption process are improved.

The invention relates to the technical field of cryptography, and particularly provides a system and method for resisting migration of a quantum cryptographic algorithm, a storage medium, equipment and a product, the system comprises a first end, a second end and a third end, the first end is used for performing cryptographic operation on target data according to an operation configuration strategy to obtain a cryptographic operation result, the operation configuration strategy comprises at least one of traditional cryptographic operation and anti-quantum cryptographic operation, and the cryptographic operation result comprises at least one of a traditional operation result and an anti-quantum operation result; and the second end is used for verifying the password operation result according to a verification configuration strategy to obtain a verification result, and sending the verification result to the first end. According to the system provided by the embodiment of the invention, migration of the quantum cryptography resisting algorithm can be realized, and the transformation cost is relatively low.

The invention relates to the technical field of data security, in particular to a big data security storage method and system based on cloud computing, and the method comprises the following steps: initializing a cloud service node, selecting data blocks needing security storage, distributing an identifier for each data block, sorting and classifying the data blocks by adopting a batch processing mode, and storing the sorted data blocks into a database; and obtaining an initialized data block. According to the method, the security of the data in the cloud environment is greatly improved through key segmentation and storage of part of keys in a plurality of security cloud service nodes, the decryption rule is constructed by using the threshold cryptography model, the data can be decrypted only when a sufficient number of key parts are collected, unauthorized access and data leakage are effectively prevented, and the security of the data in the cloud environment is improved. The strategy of dynamically adjusting the secret key replacement period adapts to the access frequency and the change dynamic state of the storage data block, and the confidentiality, the integrity and the availability of the data are improved, especially in a sensitive service scene with a large data volume.

A method includes identifying a plurality of assets of an enterprise for which quantum risk is to be assessed, acquiring a plurality of sets of metadata, where each set of metadata describes one asset of the plurality of assets, executing a machine learning model that takes the plurality of sets of metadata as input and generates as output a plurality of scores, where each score of the plurality of scores quantifies a quantum risk associated with one set of metadata of the plurality of sets of metadata that corresponds to one asset of the plurality of assets, and initiating a remedial action for a first asset of the plurality of assets, based on a first score of the plurality of scores that is assigned to a first set of metadata of the plurality of sets of metadata corresponding to the first asset at least meeting a predefined threshold.

The invention discloses a networking intelligent key dynamic key management system supporting multi-device binding, particularly relates to the technical field of Internet of Things security, and is used for solving the problem that a cryptographic attack path is exposed due to key residue of an existing dynamic key management system. According to the system, an instruction analysis module receives an equipment unbinding instruction and extracts an equipment identifier; the residual positioning module marks residual nodes based on the identification deep search key tree; the fragment confusion module divides the key fragments into length non-geometric progression fragments and generates confusion fragments through elliptic curve encryption; the pollution evaluation module calculates a mutual information value of the confusion fragments and a parent key, and determines a hierarchical pollution coefficient in combination with a key entropy attenuation curve; the path decision module segments or recombines a key path according to a pollution coefficient threshold; and the key updating module constructs a new key tree, distributes updated sub-keys to the binding equipment, clears key residual relevance and blocks generation of a cryptographic attack path.

The invention provides an anonymous Internet of Things identity authentication method and device based on an anti-quantum computing password. A key generation device sends a public key to a message sending end and a message receiving end, and sends a private key to an authentication server; the authentication server generates a blind parameter based on the private key, and sends the blind parameter to the message sending end; the message sending end performs blind operation based on the blind parameter, the public key and the to-be-transmitted message to obtain a blind message, and sends the blind message to the authentication server; the authentication server performs post-quantum signature on the blind message based on the private key to obtain a to-be-solved blind signature, and sends the to-be-solved blind signature to the message sending end; the message sending end carries out blind resolution operation on the to-be-resolved blind signature to obtain a target signature; the message sending end sends the to-be-transmitted message and the target signature to a message receiving end; and the message receiving end performs post-quantum verification on the target signature based on the public key, and if verification succeeds, processing is performed based on the to-be-transmitted message. Through the scheme of the invention, the user data security can be improved.

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

The invention relates to the field of federated learning security, and provides a privacy protection longitudinal federated learning method and system based on function encryption. According to the method, the problems that in a longitudinal federated learning scene, when privacy protection is achieved based on the cryptography technology, the calculation time is too long, the communication overhead is too large, and the model accuracy and the training overhead are difficult to balance are solved. The main scheme comprises system initialization, client forward propagation, server forward propagation, server backward propagation and client backward propagation. The method is used for privacy protection longitudinal federated learning, gradient leakage attacks and reverse derivation attacks based on model parameters are effectively resisted through a decentralized multi-client function encryption algorithm and a longitudinal federated learning framework, the calculation efficiency is improved, meanwhile, the model precision is guaranteed, the communication overhead is reduced, and the privacy of client sample data is enhanced.

The invention discloses a virtual power plant terminal-oriented encryption transmission and self-healing control cooperative system, which comprises a dynamic encryption module, a hierarchical encryption system is constructed on the basis of a quantum chaos sequence and a national secret SM9 algorithm, a dynamic session key is generated in real time through an edge node, and terminal power data is subjected to hierarchical encryption; the self-healing control module integrates a block chain distributed account book and a deep reinforcement learning model, constructs a health degree portrait of the terminal equipment in real time, monitors a link state through a topology sensing algorithm, predicts a fault propagation path, and triggers communication link reconstruction and computing resource elastic scheduling for self-healing; the collaborative optimization module constructs an optimization objective function, balances encryption strength and self-healing efficiency, adopts a quantum topology photonic crystal optimization algorithm to determine a weight coefficient in the optimization objective function, and realizes global optimal matching of an encryption-self-healing strategy; and the edge computing node performs terminal-edge cloud cooperative training according to the global optimal matching strategy of the encryption-self-healing strategy.

The invention relates to the technical field of intelligent security and protection, and discloses an identity authentication method integrating AI and password technologies. According to the method, biological characteristic data are collected through a multi-mode biosensor, and the biological characteristic data are encrypted after being processed by a deep convolutional neural network. And training an identity authentication model by using a federated learning framework in combination with a differential privacy technology, and carrying out distributed verification. And generating a one-time dynamic password based on a verification result, binding the one-time dynamic password with spatio-temporal characteristics of user behaviors to construct a matrix, and controlling the access authority by adopting an attribute-based encryption algorithm. The system is also provided with an abnormal behavior detection model, a dynamic identity label updating mechanism, a secret key updating strategy and a multi-factor authentication decision engine. The method improves the security and accuracy of identity authentication, realizes fine authority management, and is suitable for the field of intelligent security and protection.

A method for secure onboarding to a closed mesh network in which a camera-equipped device scans a QR code embedded in a durable physical carrier (e.g., adhesive bandages, photographs, ID cards) to extract an access credential, configuration profile, or secure URL that automatically configures the device for network access, authenticates the device to the mesh without manual credential entry or transmission of plaintext credentials over insecure channels, and establishes end-to-end encrypted communications between network nodes; the method supports cryptographically random, single-use or time-limited credentials with periodic refresh to prevent replay, encoding of VPN / WireGuard or proprietary configuration profiles, substantially real-time onboarding (e.g., under five seconds), optional multi-factor verification (biometric or PIN), immediate initiation of secure messaging, voice / video or data sessions upon onboarding, audit logging for compliance and revocation based on detected unauthorized activity, and covert or overt embedding of QR codes in environment-resistant carriers for emergency, disaster response, first responder, or covert deployment, with the QR code rendered unreadable or deactivated after successful onboarding to prevent credential reuse.

The invention belongs to the technical field of information security, and discloses an NLP verification method for a commercial password security assessment report based on an agent. The comprehensive consistency verification of the assessment report is realized by constructing a cryptographic term knowledge graph, generating a cross-chapter cryptographic parameter consistency verification matrix, identifying security statement conflict points and constructing a report internal logic conflict detection model. And adopting a multi-agent cooperation mechanism to carry out iterative optimization on a verification result, and outputting a structured verification report containing contradictory position indexes and type labels. According to the method, the consistency verification capability of the password evaluation report is improved, dominant parameter inconsistency and hidden semantic conflicts can be accurately identified, the auditing cost is reduced, and the wrong implementation risk caused by report inconsistency is prevented.

The invention discloses a privacy protection method, system and device for block chain network node audit management, and the method specifically comprises the steps: generating a node anonymous voucher for a candidate node, carrying out the privacy authentication, mapping the sensitive information of the authenticated candidate node into an irreversible cryptographic hash value, and storing the irreversible cryptographic hash value in a distributed key management node; constructing a dynamic credible auditing group, selecting verification nodes from the candidate nodes, and performing uplink evidence storage after BLS aggregation signature; performing privacy aggregation calculation on the node behavior data of the verification node to generate an audit score ciphertext; fine-grained access control is realized through attribute-based encryption, and a node reputation level is dynamically bound through an auditing strategy; adaptive noise is added to an audit result by adopting a differential privacy mechanism, and the epsilon-differential privacy constraint condition is met by dynamically adjusting the noise amount; in the reward and punishment execution stage, a ring signature and a stealth address technology are combined, so that reward and punishment records are unhooked from real identities of nodes, and meanwhile, the trade traceability is ensured.

The invention provides an attribute-based encryption method and an attribute-based decryption method, and belongs to the technical field of data security, and the method comprises the steps that a resource provider randomly selects a first parameter from a polynomial quotient ring; performing Hash processing on a target resource identifier to obtain a Hash mapping result, the target resource identifier being identifier information of a resource needing to be encrypted; based on the first parameter, the Hash mapping result, and a public key and a session key of a policy management entity, performing encryption by using a preset encryption algorithm to obtain a ciphertext; or decrypting the ciphertext based on an attribute certificate and a cryptographic strategy to obtain the session key, and the attribute certificate is a one-time attribute token generated based on time and attributes. According to the attribute-based encryption method and the attribute-based decryption method provided by the invention, the cryptographic strategy has timeliness, and dynamic binding of the cryptographic strategy and the encrypted data is realized; the attribute voucher generated in real time is used in the decryption process, and the reliability of the system is improved.

The invention relates to network information security and cryptography, and provides an AES-based network information data transmission security method, which comprises the following steps of: generating an information key, namely generating a round key through loop iteration; the encryption process of information data transmission comprises the following steps: encrypting a plaintext after preprocessing, and generating an intermediate ciphertext and an integrity verification label; in the information data decryption process, the plaintext is recovered through reverse operation after the label is verified; the data security constraint of the information is carried out, and a multi-level defense system is constructed; aP I mapping for information transmission, and calling an interface to realize encryption, decryption and authentication verification; information data encryption complexity is controlled, complexity is optimized, and big data are encrypted in a blocking mode; the information data security is guaranteed, and the transmission security is ensured. The method significantly enhances data security, improves transmission efficiency, constructs multi-level security defense, provides flexibility and adaptability, simplifies implementation and management, conforms to the future security trend, and provides an efficient, reliable and easy-to-use solution for network information security.

The invention provides an import and export trade data exchange system, which comprises a policy negotiation module, a key management module, a protocol conversion module and an anti-degradation transmission module, wherein the policy negotiation module is used for dynamically generating an encryption policy matrix of multiple systems according to encryption capability parameters of participating systems; the key management module is used for generating a cross-system dynamic key based on the encryption strategy matrix; the cross-system dynamic key is generated through cryptographic operation fusing a source system private key and a target system public key; the protocol conversion module is used for analyzing an original protocol message into a field set, mapping a field type to a target protocol specification through a quantum state superposition model, and generating an encrypted message compatible with a target system; and the anti-degradation transmission module is used for carrying out anti-degradation secure transmission processing on the encrypted message to obtain an anti-degradation encrypted data stream. By adopting the system, the security, compatibility and reliability of the data in the exchange transmission process can be ensured.

The invention discloses a data security transmission method based on an ML-KEM algorithm and a PUF, and the method comprises the steps: in a registration stage, mobile equipment generates an anti-quantum key through employing a PUF technology, and a CA issues an anti-quantum digital certificate based on a Falcon algorithm and a cryptographic accumulator; in an identity authentication stage, a mobile device and an edge gateway complete bidirectional identity authentication by exchanging identity labels, anti-quantum certificates and authentication key parameters in combination with a Falcon algorithm and PUF challenge-response, and negotiate to generate a shared key by using an ML-KEM algorithm, thereby effectively defending threats such as man-in-the-middle attack, replay attack and identity counterfeiting; in a data transmission stage, two communication parties realize data encryption transmission by adopting a symmetric encryption algorithm, and data integrity and source credibility are guaranteed in combination with a Falcon digital signature; the whole scheme has the advantages of quantum security resistance, efficient authentication, dynamic key updating, lightweight encryption and the like.

The invention provides a data verification method based on two-dimensional code third-party login and national secret authentication, and the method comprises the steps: obtaining a user identity bill and obtaining a private key password corresponding to the user identity bill by an encryption end when a login request sent by a user end through scanning a login two-dimensional code of a login end is received; the encryption end encrypts the private key password to obtain an encrypted key password, and sends the encrypted key password to the login end; the encryption end determines collaborative signature response data according to the collaborative signature request and the user identity bill and sends the collaborative signature response data to the login end; and the encryption end verifies the complete signature through the verification request, and sends a verification result to the authentication end. By arranging the encryption end, national secret authentication and two-dimensional code third-party login are combined, and the safety of logging in a third-party website when the two-dimensional code is scanned is guaranteed.

Provided herein are methods, systems, and media that leverage blockchain technology and cryptography implemented on decentralized or distributed peer-to-peer networks to provide reliable and secure verification of data integrity.

The invention discloses an anti-quantum-attack national secret SSL communication system and method, and belongs to the technical field of information security. The quantum attack resistant national secret SSL communication system of the scheme comprises a traditional SSL client, an anti-quantum SSL client agent and a mixed SSL server. A traditional SSL client does not support an anti-quantum cryptography algorithm, and a mixed SSL server has a traditional cryptography technology and an anti-quantum cryptography technology at the same time. And the anti-quantum SSL client agent performs anti-quantum cryptographic algorithm transformation on a message sent by the traditional SSL client and then sends the message to the mixed SSL server, and performs anti-quantum cryptographic algorithm inverse transformation on a message sent by the mixed SSL server and then sends the message to the traditional SSL client. According to the scheme, the quantum attack resistance of the system is improved in a manner of incrementally deploying the anti-quantum SSL client agent at the SSL client, the transformation period is short, and the transformation cost is low.

A system using multi-signature wallets and blockchain keys to enable the creation of a company root identity that matches the documented corporate governance models recorded in the articles of incorporation. The registration of the public root identity key with the corporate registrar of record by filing a Doing Business As registration with the registrar using the Public key as the company name. The system supports multiple execution models to enable the binding of the corporate identity root to the existing digital systems using Cryptography to provide the forensic digital proof the process was permissioned by and bound to the corporate root-of-identity. A system that automatically validates the Chain of control back to the root assuring a relying party the transaction was authorized by the corporation and its policies.

This disclosure relates to data security and cryptography. In one aspect, a method includes updating a user interface of a client device to present user interface controls that enable a user to specify data privacy settings that define how entities collect, store, and use data of the user. The data security system receives a request to modify a data privacy setting for one or more entities from the client device based on user interaction with one or more of the user interface controls. The request includes an ephemeral user identifier for the user and an attestation token. The data security system validates the request using at least the ephemeral user identifier and the attestation token. The data security system transmits data instructing the entity to modify usage of the user data based on the modified given data privacy setting to each of the one or more entities.

The present invention discloses an encrypted data query processing method and an electronic device. Relating to the field of cryptography, the method comprises: receiving a query ciphertext sent by a target terminal, wherein the query ciphertext is obtained by the target terminal by encrypting a first polynomial, the first polynomial is obtained by the target terminal encoding a query vector, the query vector is obtained by the target terminal based on a received data query request, and the query vector includes multiple elements, and the multiple elements correspond one-to-one to multiple data in a server; encoding the multiple data to obtain a second polynomial; generating a result ciphertext based on the query ciphertext and the second polynomial; sending the result ciphertext to the target terminal, for the target terminal to decrypt the result ciphertext, and obtain a data query result corresponding to the data query request. The present invention solves the technical problem in the related art that when performing encrypted data query, the operation process is complicated, resulting in low data query efficiency.

Systems and methods for preventing blockchain functions associated with malicious entities are disclosed herein. A first blockchain status update may be received from a first authorizing entity. A first counter and a first plurality of authorizing entities can be determined. The first counter and the first plurality of authorizing entities can be updated. The first counter can be compared to a consensus threshold. A first instruction to block requests for communications to the first entity address can be generated. A confirmation of the first instruction can be generated for display.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

The invention discloses a customer information storage management method and system based on a block chain, and relates to the technical field of distributed data evidence storage, and the method comprises the steps: collecting terminal customer information, generating an encrypted data packet, carrying out erasure coding, and generating an encrypted data fragment set; carrying out distributed storage based on the encrypted data fragment set, and calculating a data availability commitment at the same time; executing availability sampling according to the data availability commitment, and generating a fragment validity proof; based on the fragment validity proof, performing format and validity verification to obtain a to-be-processed proof set; and generating a recursive aggregation proof according to the to-be-processed proof set, and submitting the recursive aggregation proof to the block chain to verify and update a proof storage state. And cryptographic authentication is carried out on the persistent evidence storage state of the data assets, so that the dual beneficial effects of ensuring data privacy and credible evidence storage are achieved.