107 results about "Cryptosystem" patented technology

Method and apparatus for efficient and authorized rewriting of records already written to a blockchain. Mutable transactions will make a fraction of all blockchain transactions, but will be a necessity to meet the needs of privacy regulations, for example the General Data Protection Regulation. Embodiments of the present invention provide an efficient framework for transaction-level blockchain rewrites that is fine-grained and supports revocation. Embodiments of the present invention provide a novel revocable chameleon hash with ephemeral trapdoor method and / or system, a novel revocable fast attribute-based encryption method and / or system, and a dynamic group signature method and / or system.

The invention provides a communication authentication method and system for a train-mounted network, a storage medium and equipment, and the method only completes the key negotiation operation in the process of executing the communication authentication of the train-mounted network, enables the subsequent communication process to be executed based on a session key obtained through the negotiation of a first verification party and a second verification party, and improves the communication authentication efficiency. According to the method and the device, identity information of two communication parties is mutually verified, only a request carrying identity information of a verification party needs to be sent once in a primary communication process, only a session key generated by negotiation needs to be carried in a subsequent communication process, lightweight processing is performed on a communication authentication protocol, and the communication authentication protocol can be obtained by introducing a pairing-free password system based on an identity label. According to the method, a complex pairing process does not need to be executed, the number of calling times of Hash is reduced, the protocol calculation overhead is reduced, the communication efficiency is improved on the basis of ensuring the credible access authentication of a train-mounted network and the credible transmission of a control message, and the influence on the real-time performance of a train network monitoring management system is avoided.

Provided is a system (100) for securely generating, and multi-party sharing of, a Root of Trust (RoT) in a clustered cryptosystem (110) by way of a secure enclave (55) within each node (50). It improves cluster loading crypto command performance such as digital signing and signature verification without use of an HSM. Each node attests to a Remote Server (40), submits a join request, and receives obfuscated key splitter logic. A different Remote Server provides a deobfuscator code to the node. Nodes share attestation information amongst themselves for joining the cluster (110). A primary node generates the RoT and splits it into partitions, which are then shared with other nodes. Each node thereafter regenerates the same RoT. Communications between secure enclaves are secured over a TLS channel. Other embodiments are disclosed.

Due to the appearance of dynamic structured mathematics responded by a global coupling structure, a great threat is generated to a traditional password system represented by AES-256 and information security. Most of current mainstream symmetric cryptographic systems such as AES and post-quantum encryption candidate schemes are based on discrete key space and structure modeling operation, the security of the current mainstream symmetric cryptographic systems depends on exhaustion infeasibility or mathematical difficulty complexity, and the current mainstream symmetric cryptographic systems and post-quantum encryption candidate schemes are difficult to resist attacks of adaptive dynamic coupling such as ADC. Therefore, the invention provides a novel ARE encryption system which is constructed by taking'non-modeling property 'as a core principle. A system key is generated by a non-numerable dimension perturbation function, has unique attributes of no structure, non-derivation, non-periodicity and the like, and is combined with an encryption method of a key function which cannot be covered, physical noise perturbation and a quantum random source to construct a new generation of ARE password architecture; the method has the capability of being incapable of being deduced, reduced in order, incapable of being converged to a key space and extremely high in structural modeling attack resistance, any analyzable optimization path can be blocked from the source, and it is ensured that ADC evolution attacks are completely resisted.

Provided is a system (100) for securely generating, and multi-party sharing of, a Root of Trust (RoT) in a clustered cryptosystem (110) by way of a secure enclave (55) within each node (50). It improves cluster loading crypto command performance such as digital signing and signature verification without use of an HSM. Each node attests to a Remote Server (40), submits a join request, and receives obfuscated key splitter logic. A different Remote Server provides a deobfuscator code to the node. Nodes share attestation information amongst themselves for joining the cluster (110). A primary node generates the RoT and splits it into partitions, which are then shared with other nodes. Each node thereafter regenerates the same RoT. Communications between secure enclaves are secured over a TLS channel. Other embodiments are disclosed.

Methods and systems for incident reporting from secured devices are provided. A method includes detecting an incident on a secured IoT device that disrupts normal operations by the secured IoT device. A preconfigured set of incident data relevant to the incident are collected from the secured IoT device and encrypted based on a preselected cryptosystem. An encoded incident report is generated by combining a URL to a technical support server and the encrypted incident data further encoded into characters. The encoded incident report is produced in a QR code along with a request to scan the QR code via an output interface of the secured IoT device to thereby have the encoded incident report sent to the technical support server by another device that accesses a digital communication network.

An authentication method for a user who has a hierarchical deterministic keys wallet including a path between the user's master private key and a private key specific to a smart contract, the path including a plurality of branches each carrying an index, the smart contract being univocally identified by one or several indices of branches followed by the path. The user can issue a transaction from an issuing account address, obtained by hashing the public key corresponding to the specific private key in an asymmetric cryptosystem, and can sign this transaction using the specific private key. The smart contract uses the signature to verify that the transaction was really issued from the issuing account address in question.

The invention discloses an intelligent marketing terminal power data communication security protection method and system, and belongs to the field of power data security, and the method comprises the steps: collecting electromagnetic noise spectrum data through a built-in environment electromagnetic sensing module of a terminal, extracting electromagnetic characteristic factors, and constructing a correlation model of the electromagnetic characteristic factors and the complexity of an elliptic curve cryptosystem; building a terminal twinborn mirror image, predicting a communication instruction sequence and calculating a deviation coefficient in combination with a long-short-term memory neural network; classifying and screening the power data collected by the terminal, desensitizing privacy data, and then fusing the privacy data into the hash fragment of the unique identifier of the terminal equipment to generate a desensitized power data packet containing the terminal identity identifier; a data abstract is generated according to encryption parameters determined by the association model, the access authority is verified, a data acquisition timestamp is converted into a binary coding sequence, the data abstract is embedded, and an encrypted data packet with a time sequence traceability watermark is generated and uploaded to the block chain for evidence storage; according to the invention, full-process security management and control of power data are realized, and the communication security and the data credibility are improved.

The invention discloses a multi-signature method based on an SIS trap door one-way function. The multi-signature method comprises the following steps: (1) Setup step: a trusted party takes a safety parameter as a public parameter required by an input and output scheme; (2) a KeyGen step: each signer outputs a public and private key pair by taking a public parameter as input; (3) Sign step: each signer takes the private key, the public key, the public parameter and the message as input and outputs a single signature for the message; (4) AggKey step: the verifier takes the signer public key set as input and outputs an aggregation public key; and (5) Verify step: a verifier outputs a bit 1 or 0 by taking the public parameter, the aggregated public key, the message and the multiple signatures as input, which represents that verification succeeds or fails. According to the method, the key homomorphism of the SIS trap door one-way function is utilized, so that multiple signatures of the data are realized; a lattice-based cryptosystem is used, so that the attack of a quantum algorithm can be resisted; the probability verification thought is used, and the efficiency of verifying multiple signatures is improved.

The invention belongs to the technical field of post quantum information security, and particularly discloses a fusion post quantum cryptography system and a fusion encryption method and a fusion decryption method thereof, the fusion encryption method is applied to a sending end, and the fusion encryption method comprises the following steps: encrypting original plaintext data by using a public key of a Streamline NTRU Prime algorithm to generate corresponding ciphertext data; signing the ciphertext data by using a private key of a Diithium algorithm to obtain a ciphertext signature; and sending the ciphertext data and the ciphertext signature to a receiving end. The fusion decryption method is applied to a receiving end, and comprises the following steps: receiving ciphertext data and a ciphertext signature; verifying the ciphertext signature by using a public key of a Diithium algorithm; and under the condition that the ciphertext signature is verified to be valid, decrypting the ciphertext data by using a private key of a Streamline NTRU Prime algorithm to generate original plaintext data.

The invention discloses a certificateless strong anonymous aggregation signcryption method in the Internet of Vehicles, and belongs to the technical field of information security. Based on a certificateless cryptosystem, the problems of certificate management and key escrow are effectively solved; a vehicle pseudonym autonomous dynamic updating mechanism based on pseudonym root parameters is designed, dependence of pseudonym updating on time is eliminated, a vehicle sends a registration application and a pseudonym activation application to different trusted mechanisms, the problem that the trusted mechanisms directly and independently restore the real identity of a vehicle user is solved, strong anonymity of the vehicle is guaranteed, and the reliability of the vehicle is improved. The public and private keys of the vehicle can be updated along with the update of the pseudonym, so that the forward security of the method is ensured; according to the aggregation signcryption method disclosed by the invention, a sender is allowed to perform encryption and signature operations on the message at the same time, and a verifier can verify a plurality of signatures at the same time, so that the calculation overhead in the signature generation and verification process is reduced while the message confidentiality is ensured; the method can effectively resist various attacks such as adaptive selection message attacks, adaptive selection ciphertext attacks, replay attacks and man-in-the-middle attacks, is low in calculation cost and low in communication overhead, and has a wide application prospect in the field of the Internet of Vehicles in which a large number of message signatures exist at the same time and message privacy needs to be protected.

The invention provides a quantum circuit system based on an AES cryptosystem and an encryption method. The quantum circuit system based on the AES cryptosystem comprises a byte replacement module which adopts a pre-optimized S-box query circuit to realize non-linear byte replacement; the row shift module completes in-row byte cyclic shift through quantum bit exchange operation; the column confusion module realizes a matrix multiplication circuit based on finite field operation, and a quantum circuit of the column confusion module is generated by a depth-first matrix decomposition algorithm; and the round key adding module realizes XOR operation of a round key and a state by using a CNOT gate array, and a key required by the round key adding module is dynamically generated through a key expansion circuit. And a compact Z-shaped architecture is adopted to optimize time sequence scheduling and resource allocation of each module. On the premise of keeping the quantum bit resource usage amount equivalent to that of an original Z-shaped architecture, the quantum circuit depth is remarkably reduced, and higher fidelity and shorter execution time can be realized on NISQ equipment.

The invention discloses a parallel image encryption method based on one-dimensional improved Logistic mapping, which relates to the technical field of image encryption, and is characterized by comprising the following steps: S1, designing improved one-dimensional Logistic mapping; s2, generating a key of a password system from the plaintext information; s3, a color image to be encrypted is split into three independent color channels, and preparation is made for parallel processing; and S4, generating a key stream of the cryptosystem by using the key and the improved one-dimensional Logistic mapping. The technical problem to be solved by the invention is to provide an image encryption method based on one-dimensional improved Logistic mapping parallelism, and a chaotic sequence is generated through improved Logistic mapping, so that pixel-by-pixel encryption processing is carried out on an image. According to the method, the confidentiality and the attack resistance of the image data are enhanced, and the encryption speed is increased, so that the method is suitable for scenes such as real-time image transmission and large-scale image storage.

The purpose of the present invention is to provide a communication system and the like of a common key cryptosystem capable of performing low-latency communication while maintaining a security level.　A communication system 301 transfers data from a transmission device 10 to a reception device 20 via a main communication path 50 by a common key system. The transmission device 10 includes: a key generation unit 11 that periodically generates a common key; a key exchange transmission unit 12 that, for each generation of the common key, transmits the common key to the reception device 20 by another communication path 51 having a communication speed faster than that of the main communication path 50; an encryption unit 13 that encrypts data with the common key; and a main signal transmission unit 14 that transmits the encrypted data to the reception device 20 by the main communication path 50. The reception device 20 includes: a key exchange reception unit 21 that receives the common key from the other communication path 51; a main signal reception unit 22 that receives the encrypted data from the main communication path 50; and a decryption unit 23 that decrypts the received data with the common key.

The invention discloses a high-performance deep learning attack method for an asymmetric cryptographic system. The high-performance deep learning attack method comprises the following steps of: 1, encrypting an image by using a PTFT-based cryptographic system and an EMD-based cryptographic system respectively; 2, establishing plaintext-ciphertext pair data sets, and dividing each data set into a training set, a verification set and a test set which respectively comprise 600 pairs of plaintext-ciphertext data pairs, 200 pairs of plaintext-ciphertext data pairs and 200 pairs of plaintext-ciphertext data pairs; and a third step of designing a high-performance deep learning attack network RRU-NetPP, and training and debugging the network by using the established very small data set. And 4, attacking the ciphertext encrypted by the PTFT cryptosystem and the EMD cryptosystem by the established RRU-NetPP model, and retrieving the plaintext in real time with high quality. According to the method, the requirements on known plaintext-ciphertext data pairs can be remarkably reduced, the method has a few-sample learning capability, plaintexts can be retrieved from complex ciphertexts encrypted by different asymmetric cryptographic systems in real time in a high-quality manner, and the method has a strong attack capability.

A method for confidentially querying the presence of a record in a database hosted by a server, the records being stored in the database in the form of digital footprints obtained by hashing a record by a public hash function. The footprints are masked by a stream cipher using a symmetric key of a first user. The first user may grant a second user authorisation to query the database by transmitting the inverse masks of various rows, encrypted by the public key of an additive homomorphic cryptosystem of the second user. The rows of the database are unmasked in the homomorphic domain and the second user transmits an encrypted request to query the base according to a PIR protocol. The second user can decrypt the response from the server using the private key of their homomorphic cryptosystem and determine whether the footprint sought is present in the response thus decrypted.

A method of symmetric encryption and transferring encrypted data is provided that incorporate the Lucente Stabile Atkins Cryptosystem (“DIO-LSA”). This method uses certain properties of mathematical objects called “groups,” where groups are sets of elements that are equipped with an operator and have the closure, associativity, identity, and invertibility properties. The DIO-LSA uses groups to encrypt and decrypt any kind of information between two or more parties.

A semiconductor manufacturer generates a manufacturer encryption key and a manufacturer decryption key corresponding to the manufacturer decryption key, installs the manufacturer decryption key in a semiconductor device, and provides a customer with the manufacturer decryption key, the customer generates a customer encryption key and a customer decryption key corresponding to the customer decryption key, decrypts, by the customer decryption key, a customer key to be installed in the semiconductor device, and supplies the encrypted customer key to the semiconductor manufacturer, the semiconductor manufacturer encrypts the supplied customer key by the manufacturer encryption key without decryption, and supplies the encrypted customer key to the customer, the customer decrypts the customer key by the customer decryption key, and installs the decrypted customer key in the semiconductor device, and in the semiconductor device, the installed customer key is decrypted by the manufacturer decryption key installed by the semiconductor manufacturer.

The invention relates to a content resource encryption method and device and a content resource recovery method and device based on a Pailier cryptosystem. The method comprises the following steps of: firstly, calculating a reserved space for embedding additional information by utilizing a self-embedding strategy, and operating a subject term vector matrix of a service content resource by using a Pailer password system to construct a corresponding mirror image ciphertext group; and then, the metadata corresponding to the service content resource and the content service information are fused to form additional information, the additional information is encrypted by using a data hiding key, and the additional information is embedded into the reserved space through homomorphic multiplication, so that the encryption of the service content resource is completed, and the corresponding information is transmitted to the user according to the user permission. Therefore, the copyright protection purpose of the content resources is achieved.

The application is suitable for the field of information security technology, and provides a certificateless signature generation method and system based on SM9, which comprises the following steps: step S100, system initialization, selecting a master private key from the system, and calculating a master public key according to the master private key; step S200, extracting a partial private key, extracting the partial private key as a partial private key of a signer through the master private key; step S300, setting a secret value, selecting a signer secret value; and step S400, setting a public key. The application is based on the SM9 signature structure, then the certificateless cryptography, and an improved certificateless signature of SM9 is proposed. Compared with the traditional public key cryptography system, the application effectively guarantees the integrity and authenticity of data in the transmission process, fills the gap of the domestic identity cryptography system, and lays a solid underlying cryptography foundation for the application level security.

A method of cracking a private key of an asymmetric cryptosystem includes extracting a modulus and a public key exponent from a public key, calculating the digital root of the modulus, deriving a set of candidate base pairs corresponding to the digital root and the last digit of the modulus, each of the candidate base pairs including a first candidate base and a second candidate base, iteratively testing values of a multiplier until a sum of one of the candidate bases with ninety times the multiplier is a factor of the modulus, and determining the private key using the public key exponent and the factor of the modulus. The method may further include decrypting an encrypted message using the private key.

The present invention discloses a privacy protection method for Internet of Vehicles communication based on blockchain, and relates to the field of blockchain. The present invention comprises the following steps: respectively calculating the hash values ​​H(p) and H(s) of the system public parameter set and the system master key, interacting with the blockchain through a first smart contract, and storing them on the blockchain; searching H(p) and H(s) from the blockchain through the first smart contract according to the client request information, and calculating H(p)′ and H(s)′ according to the client's system parameter set and the system master key; if the comparison results of H(p) and H(s) in the blockchain are consistent, registering the client; after successful registration, encrypting the client information and storing it on the blockchain through a second smart contract. The present invention applies the identity authentication method based on blockchain and certificateless public key cryptography to the field of Internet of Vehicles to meet the security requirements of Internet of Vehicles.

A transmitter device for sending an encrypted message to a receiver device in an identity-based cryptosystem, the identity-based cryptosystem includes a transmitter trusted center connected to the transmitter device and a receiver trusted center connected to the receiver device. The transmitter device is configured to: receive, from the transmitter trusted center, two public authentication keys; check if a set of conditions related to a transmitter trusted center public key, to a receiver trusted center public key, and to a transmitter authentication key comprised in the two public authentication keys are satisfied; determine a ciphertext set comprising an encrypted message if the set of conditions are satisfied; send the ciphertext set to the receiver device.

The application provides a power plant data security processing method, and belongs to the technical field of power Internet of Things security and privacy computing, which can at least partially solve the problems of complex certificate management of power plant monitoring system, large data aggregation calculation overhead and privacy leakage risk of cloud analysis in the prior art. The application comprises: generating a double-factor private key based on a certificateless public key cryptography system; serializing and encoding multi-dimensional operation data into a single integer using the Chinese remainder theorem; performing homomorphic encryption and signature on the encoded data using the double-factor private key, verifying the signature in batches on the edge side and aggregating in the ciphertext state; loading a neural network model adapted to homomorphic encryption on the cloud to perform ciphertext domain reasoning on the aggregated ciphertext; and decrypting the operation state analysis result on the authorized side. The application realizes ciphertext availability of power plant core data while ensuring data transmission integrity and confidentiality, and reduces communication and calculation overhead.

The invention relates to a calculation accelerator (10) adapted to carry out calculations according to a first cryptosystem and a second cryptosystem, the first cryptosystem being a lattice-based cryptosystem and the second cryptosystem being a code-based cryptosystem, the calculation accelerator (10) comprising several calculation modules, each calculation module applying an operation on input signals to obtain an output signal, namely: - a first calculation module (M1) configurable to implement modular addition or carryless addition, - a second calculation module (M2) configurable to implement identity with relation to one of the input signals, modular subtraction, modular addition and carryless addition, - a third calculation module (M3) configurable to implement integer multiplication and carryless multiplication, and - a fourth calculation module (M4) configurable to implement identity with relation to one of the input signals; modular subtraction, modular addition and carryless addition.

The invention discloses a heterogeneous high-performance distributed key agreement algorithm for supporting and resisting malicious participants in a block chain. The method is characterized in that a group negotiation intermediate message is generated under a heterogeneous cryptosystem between a certificate-based public key cryptosystem and a certificateless cryptosystem, and a cryptosystem conversion process is not needed, so that the performance overhead is reduced. All intermediate messages may be signed to verify integrity and used to identify, audit and defend malicious disruption and collusion attacks by participants. After key negotiation is completed, any encryptor can dynamically establish a session, customize a receiver group and generate a session key, and only a specified receiver can decrypt. According to the scheme, specific cryptographic operation and conversion rules are designed according to unique system composition and interaction processes in the heterogeneous system, and provable security of the heterogeneous cryptographic system is achieved.

An encryption unit (403) that an encryption apparatus (400) includes, when a user secret key SKΓ is generated using a secret key MSK of attribute based encryption and a set of attributes Γ corresponding to a decryption-possible condition L, generates a key K and a ciphertext P corresponding to the key K by encrypting the decryption-possible condition L using, as an encryption key of the attribute based encryption, a key PK consisting of a public key MPK corresponding to the secret key MSK and a public key PQCPK of post quantum cryptography, regards a part of the ciphertext P where the decryption-possible condition L is encrypted based on a secret value as P-D, regards a part of the ciphertext P where the secret value that is shared is encrypted as P-SS, and generates K′ and P′-D by randomizing each of the key K and the P-D using a random number R, and generates a ciphertext C by encrypting data consisting of the P-D and the random number R using the public key PQCPK. Here, the P-SS, the P′-D, and the K′ are decryption-possible verification parameters corresponding to the user secret key SKΓ.

The invention provides a metro vehicle network data secure communication method, which comprises the following steps of: firstly, acquiring metro vehicle network communication data, and obtaining metro vehicle network communication characteristic data; then, plaintext data is formed, and a secret key is generated to construct a symmetric encryption function; signing the plaintext data to generate signature blocks, and performing block encryption processing on the plaintext data to form ciphertext data; then encrypting the key based on an elliptic curve cryptosystem to generate an encryption key block, and forming metro vehicle network transmission data; and finally, based on an elliptic curve cryptosystem, carrying out legality verification on the metro vehicle network transmission data, and decrypting the key so as to decrypt the ciphertext data, thereby obtaining metro vehicle network communication data. According to the secure communication method, replay attack, man-in-the-middle attack and side channel attack can be effectively resisted, and confidentiality and integrity of vehicle control instructions and passenger information are ensured.

The invention discloses a certificate-based smart power grid privacy protection multi-dimensional data aggregation method and system. The method specifically comprises the following stages: initialization and registration, data transmission and aggregation, and data verification and decryption. The invention provides an efficient multi-dimensional data aggregation method aiming at key management complexity and key escrow risk confronted by a public key infrastructure or identity-based cryptosystem in an existing scheme and performance bottlenecks caused by dependence on high-calculation-cost operations such as bilinear pairing and exponential operation in most schemes. According to the method, under a certificate-based cryptosystem, multi-dimensional energy consumption data are encrypted and aggregated into a single ciphertext by using a homomorphic encryption algorithm, and meanwhile, a certificate-based signature scheme is designed to ensure the verifiability of transmission data. Compared with the prior art, the scheme has remarkable advantages in the aspects of calculation and communication cost, effectively supports a multi-dimensional data aggregation function, and is suitable for the actual demand of data privacy protection of the smart power grid.