200 results about "Data decryption" patented technology

The invention discloses an encrypted communication system and method based on cognitive multi-carrier spread spectrum, and belongs to the field of covert communication. The encryption communication system comprises a transmitting device and a receiving device. The transmitting device comprises a data encryption module, a constellation encryption modulation module, a multi-carrier spread spectrum module, a frequency hopping module and a cognitive power distribution module. The receiving device comprises a band-pass filtering module, a de-hopping frequency module, a de-spreading module, a constellation decryption demodulation module, a data decryption module and a coherent combination module. The data encryption module is divided into an interleaving coding unit and a double-rule reversible cellular automaton encryption unit. The cognitive power distribution module continuously scans a wireless electromagnetic environment and carries out real-time spectrum analysis to give power spectrum density results sensed under all frequency hopping frequency sets. According to the invention, continuous detection and dynamic response to the spatial frequency spectrum state can be realized, and the communication concealment, the anti-interference performance and the resource utilization efficiency in a complex electromagnetic environment are remarkably improved by utilizing the frequency spectrum hole.

The invention relates to the technical field of communication security, and particularly discloses a communication terminal information acquisition method and system. The method comprises the following steps: acquiring an original data stream of a communication terminal, and generating a task queue through data source marking, dynamic load balancing and protocol packaging; performing desensitization, metadata annotation and lightweight encryption on the task data to form an encrypted data block; secure transmission is realized through transmission channel selection and quality monitoring; decrypting the received data to generate a time sequence database record; generating a rule update package based on invalid data detection and machine learning analysis; and finally, outputting a standardized data set through filtering and verification. According to the invention, efficient acquisition, secure transmission and intelligent processing of mass communication data are realized, and the real-time performance and accuracy of data processing and the load balancing capability of the system are effectively improved.

The invention discloses a vehicle information safety protection system based on combination of a national cryptographic algorithm and a PUF (Physical Unclonable Function), which belongs to the field of vehicle information safety and encrypted communication, and comprises a response generation module used for generating a PUF response in a safety chip of a vehicle; the key derivation module is used for generating an encrypted master key through a key derivation function based on the PUF response, the vehicle owner identity and the random number nonce; the encryption and signature module is used for generating a ciphertext and carrying out digital signature on the ciphertext; the state monitoring module is used for monitoring the running state of the vehicle hardware; the key management module is used for triggering a failure operation of the encrypted master key when the state monitoring module detects that the hardware state is abnormal; and the decryption verification module is used for regenerating the PUF response and verifying the consistency of the generated key so as to execute data decryption. According to the method, hardware-level encryption protection of the vehicle data is realized through combination of the PUF and the national cryptographic algorithm, so that the safety of the vehicle owner data is protected in the whole life cycle of the vehicle.

The invention relates to the technical field of electric digital data processing, and discloses an intelligent campus network security protection system. A network data acquisition module of the system continuously monitors data transmission flow of a smart campus network environment to obtain an original data packet; the chaotic encryption engine encrypts an original data packet by using a key stream based on dynamic chaotic mapping, wherein the key stream is generated by multi-chaotic system switching and a random parameter distribution mechanism; the security protocol processing module converts the encrypted data packet into a format conforming to a network security protocol standard and transmits the encrypted data packet; the data decryption unit decrypts the received encrypted data packet; the security threat analysis module identifies and estimates potential network attack behaviors according to the decrypted plaintext data; and the protection strategy controller generates and executes a network security protection instruction according to the threat analysis result. The system can effectively protect the network security of the smart campus, resist various network attacks, and ensure the security of data transmission and storage.

The invention relates to a desensitization method, system, equipment and medium for industrial data, and the method comprises the steps: building and dynamically maintaining an industrial field standard data variable rule table, and defining a desensitization strategy and a sensitivity level matched with specific industrial variables such as temperature, rotating speed and the like in physical meanings, time scenes and node levels of the specific industrial variables; the method comprises the following steps: adding a multi-dimensional identifier to original industrial data, establishing a six-dimensional binding relation model of data variable type-time dimension-node hierarchy-cluster role-sensitive level-rule entry, driving the data to execute a time-coordinated stepped desensitization process in four node hierarchies of a workshop, an enterprise, a park and a cluster, according to the method, refined access control and data decryption fusing time, space and role dimensions are realized according to the model and a full-link tracing log, and the problems that rules and industrial scenes are disjointed, dynamic time adjustment is lacked, cross-node collaboration is insufficient and authority control coarse granularity is caused in the prior art are effectively solved.

Various embodiments include methods for providing data to be protected in a secure execution environment. An example includes: executing an enclave code in the environment; generating a key pair using the code with a public key and a private key; sending the public key to an insecure execution environment outside the secure execution environment; sending the public key and sending first encrypted data to an obfuscated program code, wherein the obfuscated program code is part of the insecure execution environment; verifying the public key by means of the obfuscated program code and, depending on results of the verification, converting the first encrypted data into second encrypted data, wherein the second encrypted data are encrypted with the public key; sending the second encrypted data to the enclave in the secure execution environment; and decrypting the second encrypted data into the data to be protected.

The invention provides a large-scale AI model-as-a-service-oriented security reasoning and protection method. The method comprises the following steps that S101, a user initiates an encryption request; s102, the server side carries out verification; s103, decrypting the input data; s104, AI model reasoning is carried out; s105, performing output encryption; and S106, the client decrypts and verifies. The security of the sensitive content can be protected.

The invention relates to a distributed test data generation and sharing system based on privacy computing, and belongs to the technical field of big data, the system comprises a data generation module used for fragmenting acquired user data to a plurality of computing nodes for k-anonymization processing to obtain local data blocks output by each computing node; the privacy calculation module is used for extracting statistical characteristics of the local data blocks and generating an encrypted data packet based on the statistical characteristics; the data storage module is used for carrying out fragmentation storage on the encrypted data packet based on the data type of the encrypted data packet; the data sharing module is used for constructing an access strategy tree based on the encrypted data element information of the encrypted data packet; the access strategy tree is used for generating a decryption key containing the timestamp and the operation authority for the authorized user. According to the system provided by the invention, only the compliance access operation is allowed to trigger the data decryption process, data sharing is realized under the condition of ensuring that the user data is safe and not leaked, and the risk of data leakage in the data test is reduced.

The invention discloses a high-performance multi-keyword sorting query privacy computing system oriented to secret state big data. Comprising four participants including a trusted authority, a data owner, a query user and a cloud server, and seven functional modules including a system initialization module, a key generation module, a data encryption module, a query token generation module, a security query module, a data decryption module and a key tracking module. On the basis of deeply researching and analyzing existing searchable encryption, access control based on attribute-based encryption and high-performance index technology research results, the invention provides a high-performance multi-keyword sorting query privacy calculation scheme and an application system oriented to secret state big data. The invention provides a high-performance safe multi-keyword sorting query scheme for realizing access control for the first time, and has the capabilities of high-performance multi-keyword sorting query, fine-grained ciphertext access control, malicious user tracking and dynamic data updating at the same time on the premise of protecting data privacy.

The application provides a data processing method, device and equipment, wherein the data processing method comprises the following steps: sending a decryption request to at least two data decryption nodes respectively; the decryption request carries a data access address; receiving a decryption result and first verification parameter information for the decryption result fed back by each data decryption node; obtaining decrypted data according to each decryption result and the first verification parameter information; wherein the decryption result comprises part of the decrypted content of the ciphertext data corresponding to the decryption request. This scheme can support the implementation of data decryption by using multiple data decryption nodes, and then the complete decrypted data is obtained according to the decryption results (part of the decrypted data) obtained by each data decryption node, thereby realizing distributed delegated decryption, avoiding the problem of low security caused by single-point storage of asymmetric keys, and the problem of management difficulty caused by symmetric keys.

The embodiment of the invention discloses an inter-system data transmission method and device, electronic equipment and a computer readable medium. A specific embodiment of the method comprises the following steps: performing data encryption processing on a local object evaluation information set to obtain an object evaluation encryption information set; performing system identity recognition on the object evaluation information transmission system set to obtain an identity recognition information set; determining a data transmission path set; performing transmission path performance identification on the data transmission path set to obtain a path performance information set; determining a target data transmission path set; performing path dynamic adjustment on the target data transmission path set to obtain an adjusted data transmission path set; carrying out information hybrid transmission on the object evaluation encryption information set, and carrying out transmission congestion control processing on the transmission process; and performing data decryption and storage on the object evaluation transmission encryption information set. According to the embodiment, the interaction performance of data transmission between systems can be improved, the data transmission efficiency is improved, and waste of transmission time and transmission resources is reduced.

The embodiment of the invention provides a communication method, system and device, relates to the field of communication, and is beneficial to improving the security of data processing of longitudinal federated learning. The method comprises the following steps: a first network element determines a first key; the first secret key can be used for all or data encryption in a first longitudinal federated learning group, or can be used for data encryption of network elements participating in a first longitudinal federated learning task in the first longitudinal federated learning group; the first network element receives a first request message from the second network element; the first request message can be used for requesting the first secret key, and / or the first request message can be used for requesting to perform data decryption on the first encrypted data by using a decryption secret key corresponding to the first secret key. Besides, after receiving the first request message, the first network element can verify the second network element to determine whether to send the first secret key to the second network element or not, and / or decrypted data obtained by performing data decryption on the first encrypted data by using a decryption secret key corresponding to the first secret key.

Embodiments of the present application disclose a file processing method and device, electronic equipment and a storage medium. The method comprises: when a file access request is received, obtaining a hand vein feature corresponding to a target subject; if the hand vein feature is consistent with a stored vein feature associated with a target vehicle, calling a to-be-matched icon password corresponding to the stored vein feature; if a to-be-verified icon password corresponding to a trigger operation is consistent with the to-be-matched icon password, determining that decryption of a target file corresponding to the file access request is successful, and displaying the target file. The present application solves the problem in the prior art that data is encrypted and decrypted based on a single finger vein feature, and the data is easily leaked due to a low encryption coefficient, thereby improving the difficulty coefficient of data decryption and achieving the effect of ensuring data security.

The invention discloses an enterprise financial data security management system and method, and relates to the technical field of financial data management, and the method comprises the steps: collecting enterprise financial data needing to be shared, marking the business type, sensitivity level and data mode corresponding to the enterprise financial data, and generating financial sharing and marking data; selecting a proper preset document template based on the data modality, and generating document template sample data; according to the method, the enterprise financial data are subjected to hierarchical encryption, the data subjected to hierarchical encryption are replaced by the placeholders, common documents in various formats are generated, and shared users log in the specified cloud through identity verification; after the shared document is uploaded, the cloud end can decrypt the enterprise financial data which conforms to the identity authority according to the authority of the verified identity and then fill the enterprise financial data into the position of the corresponding placeholder, so that the shared user can obtain the encrypted data which conforms to the authority, and the risk of leakage of the encrypted data is reduced at the same time.

The invention discloses a password-based train control system data secure transmission method and a password-based train control system data secure transmission system. The system is used for data transmission between a train control data owner and a train control data user, and comprises an identity authentication module deployed on a key management center, a data encryption module and a data uploading module which are deployed on the train control data owner, and a data storage module and a ciphertext search module which are deployed on a train control center, the trap door generation module and the data decryption module are deployed on a train control data user. According to the method, a password-based key derivation mechanism is adopted, and bilinear mapping and a hash function are combined, so that the complexity of key management in the train control system and the user operation burden are remarkably reduced, meanwhile, the confidentiality and integrity of train control data transmission are guaranteed, the bottleneck that efficient query cannot be performed after encryption in a traditional encryption method is solved, and the encryption efficiency is improved. And the comprehensive performance of the train control system in the aspects of data security and real-time performance is improved.

The invention discloses a responsibility-traceable data retrieval system based on distributed detection, which comprises a system administrator KMC node, an Internet of Things terminal equipment IoT node, a cloud server CS node, a distributed verification server VS node and a user U node, the data processing process comprises a system initialization stage, a key generation and distribution stage, a data collection and encryption stage, a user query stage, a query detection and responsibility investigation stage, a search matching stage, a data decryption stage and a user updating stage. According to the method, a system administrator allocates identities and accessible data sets to users so as to dynamically control user permissions and responsibility investigation; during responsibility investigation, query information and user identity of a user are verified by using a distributed credible verification server and a blacklist technology, so that a search request is shunted, and message processing of a cloud server and a system administrator is greatly simplified; meanwhile, the integrity of the data, stored in the cloud server, of the Internet of Things equipment can be verified after a user inquires the data.

The invention discloses a data transmission method and device based on a low-power-consumption Bluetooth device and a medium, and relates to the technical field of low-power-consumption Bluetooth wireless communication, and the method comprises the steps: inputting transmission state information into a target host device, executing data decryption and integrity verification, and generating transmission result feedback information. Bluetooth session information is input into a scheduling engine, real-time multi-dimensional link feature perception, channel quality evaluation and machine learning prediction are executed, a transmission strategy and resource allocation are optimized in combination with a feedback mechanism, and a link optimization configuration file is generated; and then the data is used for dynamic multi-level block marking, intelligent priority ranking and batch adjustment to generate a Bluetooth transmission queue, so that efficient, reliable and intelligent data transmission of the low-power-consumption Bluetooth equipment in a high-density, multi-node and dynamic change environment is realized; meanwhile, the resource utilization rate is optimized, the transmission delay is reduced, and the data integrity and the communication stability are improved.

The application relates to the technical field of electric digital data processing, and particularly discloses a big data information collection and processing method and system. The method comprises the following steps: firstly, the running state of an internet data source end is traced back and extracted in a specified window, the source health degree is calculated, and whether the data is reliable is determined according to the source health degree, so that the abnormal source can be timely de-weighted or isolated, abnormal dragging of account closing is avoided, and a basis is provided for subsequent parameter self-adaptation; subsequently, the output data set is called by a data service port according to the trusted state, sensitive fields are subjected to big data encryption processing, link opening idempotent production is written to eliminate repetition caused by retries and stabilize the order, so that an effective data set is generated, the exposure of the plaintext is reduced, repeated writing is eliminated, the caliber and throughput are compatible, and finally, the effective data set is subjected to adaptive data decryption at a data calculation port, minimum-range decryption is completed only in the required period and necessary fields, and processable indexes are output, so that big data information collection and processing are completed.

A method of generating at least one encryption key (130) for encrypting data (142), a method of data transmission between at least two communication systems (136, 138), a method of encrypting data (142) and a method of decrypting encrypted data (144) are disclosed. Further disclosed are an encryption key generating device (110), a system (134), a data encryption system (148) and a data decryption system (150). The method of generating at least one encryption key (130) for encrypting data (142), specifically for data transmission over an insecure channel, comprises:blending at least two materials (114) according to at least one item of blending information by using a blending device (112), thereby generating at least one blend (120);ii. detecting at least one material property (124) of the blend (120) by using at least one detector (126); andiii. transforming the material property (124) into the encryption key (130) by using at least one data processing device (132) configured for applying at least one transformation algorithm to the material property (124).

The application discloses a scene library data authorization management system for intelligent automobile traffic regulation compliance test verification, comprising a traffic regulation compliance test application scene library platform, a terminal device, a scene library management module arranged on the terminal device and a scene library application client; the traffic regulation compliance test application scene library platform is used for responding to an access request of the terminal device, authenticating the terminal device, and sending encrypted scene library data to the terminal device that passes the authentication; the scene library management module is used for receiving and storing the encrypted scene library data, and is also used for responding to an access request of the scene library application client, authenticating the scene library application client, decrypting the encrypted scene library data, and calling the decrypted scene library data by the scene library application client that passes the authentication; and the scene library application client is used for reading the scene library data and performing simulation operation on the scene library data. The application can effectively prevent illegal access of non-authorized devices to the scene library data, and improves access security.

The application discloses a power distribution automation data security processing method and system based on multiple terminals, relates to the field of quantum secure communication applications, and comprises the following steps: deploying an original quantum encryption module image device based on a quantum encryption module; the original quantum encryption module and the image device are respectively connected with at least two device access ports; the original quantum encryption module comprises a power substation key injection interface; a quantum security storage and application device is deployed and connected with the power substation key injection interface; if any device access port acquires a data request, business data is encrypted based on the quantum encryption module, and the power substation is injected with a key based on the quantum security storage and application device; business data is decrypted at the power substation side, control instructions are generated, the control instructions are securely transmitted to the power substation through the injected key, and the like. The application can improve the system data processing capacity and system operation stability, and realizes the security of data transmission between the power distribution master station and the power substation.

The invention provides an audio and video processing method, electronic equipment, a storage medium and a program product. The method comprises the following steps: starting recording and generating a secret key based on an encrypted recording request through a sending end, encrypting data frames recorded in real time by using the secret key to obtain encrypted data frames, generating a target data frame list after recording is ended, determining index information of each data frame to generate target index data, and sending the target index data to the sending end; and after the secret key is generated, encrypting the secret key by using the equipment public key of the receiving end to obtain encrypted metadata, generating a target audio and video recording file according to the sequence of the encrypted metadata and the target index data in front of the target data frame list, and sending the target audio and video recording file to the receiving end, so that the receiving end decrypts the encrypted metadata through the equipment private key to obtain the secret key. And extracting an encrypted data frame under the target data frame list based on the index information of each data frame, and playing the encrypted data frame after real-time decryption through the secret key. According to the method provided by the invention, the encryption efficiency and decryption efficiency of the audio and video recording file are improved, and the security of the audio and video data is improved.

A network of storage devices for encrypting and storing data is provided. A first storage device of the network comprises: a mechanism or system for authenticating a user via user interaction directly with the first storage device, a mechanism for connecting over a local connection with one or more user devices, and computer-readable memory for storing electronic data on the first storage device. The first storage device is configured to receive, over the local connection and from a first of the one or more user devices, first data for storage at the first storage device, to encrypt the first data and store the encrypted first data locally in the computer-readable memory of the first storage device; to split the encrypted first data into multiple portions; to apply a cryptographic signature to each of plural groups of one or more of the portions, the cryptographic signature enabling the first storage device to be identified and authenticated by other storage devices of a network of storage devices, to send each of the cryptographically signed groups to a respective other storage device of the network of storage devices, and to create a first record which associates the first data with the other storage devices of the network to which the cryptographically signed groups of were sent. The first storage device is further configured to, responsive to a request to access the first data, the request to access the first data resulting from a user request to access the first data provided to a user device and received at the first storage device via a local connection with the user device, retrieve the encrypted first data from the computer-readable memory, decrypt the encrypted first data, and send, over the local connection with the user device to which the user request to access the first data was provided, the decrypted first data. The first storage device is further is configured to: receive a request for transmission of previously-received, cryptographically signed second data, authenticate the request for the transmission of the previously-received, cryptographically signed second data as having originated from another storage device of the network of storage devices, and having authenticated the request for the transmission of the previously-received, cryptographically signed second data as having originated from another storage device of the network of storage devices, send the previously-received, cryptographically signed second data to the other storage device of the network of storage devices.

The application discloses a kind of based on cloud storage's archive management method and system, it is related to archive management technical field, by real-time acquisition emergency state related data and terminal access related data, construct archive call related data set S, analysis obtains access fingerprint consistency score Sf With structure signature value Hs, and combine emergency behavior response index Et, generate comprehensive risk score Zh, complete dynamic authorization and key generation, and record authorization check related data, construct authorization trajectory subchain, subsequently according to dynamic access key K executes structured decryption and real-time acquisition each decryption node data, construct data decryption subchain, finally combine authorization trajectory subchain and data decryption subchain form complete data audit chain, output abnormal audit score Re, assess the risk level of archive access behavior, improve security traceability and access compliance.

Embodiments of the present disclosure disclose an inter-system data transmission method and device, electronic equipment and a computer readable medium. A specific embodiment of the method comprises: performing data encryption processing on a local object evaluation information set to obtain an object evaluation encrypted information set; performing system identity recognition on an object evaluation information transmission system set to obtain an identity recognition information set; determining a data transmission path set; performing transmission path performance recognition on the data transmission path set to obtain a path performance information set; determining a target data transmission path set; performing path dynamic adjustment on the target data transmission path set to obtain an adjusted data transmission path set; performing information mixed transmission on the object evaluation encrypted information set, and performing transmission congestion control processing on the transmission process; and performing data decryption and storage on the object evaluation transmission encrypted information set. The embodiment can improve the interaction performance of inter-system data transmission, improve data transmission efficiency, and reduce transmission time and waste of transmission resources.

The invention discloses a data transaction anti-repudiation cross-chain cooperation method and device based on a point-to-point data transmission channel, and belongs to the technical field of information, and the method comprises five stages of gateway node relay identity registration, data node relay identity registration, data negotiation, data transmission and data confirmation. The method specifically comprises the following steps of: in a gateway node relay identity registration stage, storing a relay identity generated by a gateway node on a relay chain, and granting a right of cross-chain message forwarding between the relay chain and a local chain; in the data node relay identity registration stage, the relay identity generated by the data node is stored on a relay chain and the right of cross-chain data transaction through the relay chain is granted; in the data negotiation stage, negotiation of contents such as data transaction contents and point-to-point transmission connection information is carried out through a designed relay contract and relay chain cross-chain mechanism; in the data transmission stage, ciphertext data are transmitted in a point-to-point transmission mode; and in the data confirmation stage, bidirectional anti-repudiation confirmation verification is performed on the data transaction through a data confirmation contract on the relay chain, and data right conversion, namely data decryption, is completed while transaction anti-repudiation evidence storage is realized. According to the invention, the resource consumption of the cross-chain behavior can be reduced, the value island problem of the block chain in the data transaction scene is relieved, and especially the problems of transaction repudiation resistance and transaction tracing difficulty in the data transaction scene are solved.

The embodiment of the invention provides a payment method and device based on satellite short message communication, equipment, a medium and a product, and is applied to the technical field of satellite communication. According to the method, a satellite short message and a dynamic key sent by a payment terminal are received based on a satellite short message public service platform, identity authentication, integrity verification and data decryption are carried out on the satellite short message based on the dynamic key and a preset public key, and complete transaction information is obtained. Pushing the complete transaction information to a payment capability interface calling platform, receiving a transaction result and a transaction verification code fed back by the payment capability interface calling platform, and performing encryption processing to obtain a transaction data packet; converting the transaction data packet into a transaction message according to a preset conversion rule, and pushing the transaction message to a satellite mailbox corresponding to the payment terminal for storage; and receiving a transaction result query request sent by the payment terminal to the satellite mailbox, and sending the transaction message to the payment terminal through the satellite mailbox. The technical effect of expanding the application service range is achieved.

The invention relates to the field of Internet of Things cards, in particular to a method for realizing remote card management by expanding LPA (Local Power Amplification) capability, which comprises the following steps: receiving a push message of a predetermined message theme sent by an loT equipment management platform, and analyzing the push message by an LPA program to obtain AC (Access Controller) activation code information; triggering an operation request for downloading a new code number to the eSIM service platform according to the AC activation code information; receiving code number data sent by the eSIM service platform, wherein the code number data is obtained by the eSIM service platform according to the code number data which is prepared by packaging and encrypting according to the operation request for downloading the new code number and is used for downloading the new code number; and decrypting the encrypted code number data and writing the code number data into the eUICC card through an LPA program to complete downloading of the new code number. According to the invention, the management of the terminal equipment of the Internet of Things does not depend on an unstable and charged operator data short message gateway, and does not depend on the manual operation of the equipment site, and the intelligent card of the existing Consumer scheme can be applied to more scenes of the Internet of Things by expanding the LPA application program.

A data encryption method, a data decryption method and device, a storage medium and a terminal, the data encryption method comprising: when there is data to be written, generating a random number corresponding to the data to be written; obtaining a data encryption key according to a pre-stored original encryption key, the random number and first address information, and encrypting the data to be written using the data encryption key to obtain encrypted data, wherein the first address information is one of a data to be written address and a random number address; obtaining a random number encryption key based on the original encryption key, and encrypting the random number using the random number encryption key to obtain an encrypted random number; and performing a write operation on the encrypted data and the encrypted random number. The above scheme can improve data security.

The application discloses an encryption method and system for communication data of an Internet of Things, and belongs to the technical field of communication link encryption. In order to solve the problem that a receiving node cannot synchronously generate a corresponding decryption key, and finally causes large-area data decryption failure and communication interruption, the application comprises the following steps: acquiring a receiving time interval sequence of historical data packets between a communication node and a receiving node, and a channel state index of a current communication link; constructing an initial key matrix; acquiring data payload to be sent by the communication node, and acquiring a communication error rate of the current communication link, and updating the communication error rate of the current communication link; performing a cyclic shift operation on the initial key matrix according to a key update step, to obtain a target encryption matrix; performing encryption processing on the data payload based on the target encryption matrix, to obtain encrypted payload, and sending the encrypted payload to the receiving node; and the application improves the encryption security, communication reliability and device endurance of communication data in a low-power weak-network Internet of Things scene.